I extensively use 'logcheck' on my servers.
I've just upgrade a server to PVE8 (a little test standalone server) and logcheck start complain: Logcheck failed: Your log entries may not have been checked. Details: Could not run journalctl or save output To identify the cause you may wish to: - Check temporary directory: /tmp/logcheck.N0YsPV - verify that the logcheck user can read all logfiles specified in; /etc/logcheck/logcheck.logfiles /etc/logcheck/logcheck.logfiled.d/*.logfiles i've tried: root@lisei:/etc/logcheck# su -s /bin/bash - logcheck logcheck@lisei:~$ journalctl No journal files were opened due to insufficient permissions. but: root@lisei:/etc/logcheck# id logcheck uid=112(logcheck) gid=118(logcheck) groups=118(logcheck),4(adm) so logcheck user seems have correct permission. I've upgraded some plain debian VMs and containers to Bookworm, and i've not hit troubles on logcheck. So seems something PVE specific... Someone can help me? Thanks. -- _______________________________________________ pve-user mailing list pve-user@lists.proxmox.com https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-user
