https://issues.apache.org/jira/browse/TS-5028
Am 06.08.2016 um 00:28 schrieb James Peach:
I’m not sure that read-only /etc has ever worked on purpose
*no service* has any business to write below /etc and hence every sane
systemd-unit should use ProtectSystem=full in 2016
/etc is admin area and any write attempt there is a fractal of bad design
Can you please file a JIRA on this?
yes i will while i am pointing that problem out for years now
Thanks. The JIRA not only tracks that there is a problem, but it also tracks
that someone cares about it which hopefully improves the chances of a fix :)
FWIW I’m running with proxy.config.disable_configuration_modification, which
sounds like what you want,
it only *sounds* but it has no effect
Looks like it is still trying to create rollback files. AFAIK rollbacks are a
feature from the old appliance days. It’s not clear how relevant it is now.
trafficserver-6.1.1-6.fc24.20160725.rh.x86_64
[root@buildserver:/var/log/trafficserver]$ cat
/etc/trafficserver/records.config | grep disable_configuration_modification
CONFIG proxy.config.disable_configuration_modification 1
[root@buildserver:/var/log/trafficserver]$ cat *
[Aug 5 17:35:32.031] {0x2b6c81f2bf40} STATUS: opened
/var/log/trafficserver/diags.log
[Aug 5 17:35:32.032] {0x2b6c81f2bf40} NOTE: <DiagsConfig.cc:148
(reconfigure_diags)> updated diags config
[Aug 5 17:35:32.038] Server {0x2b6c81f2bf40} NOTE: <Main.cc:1698 (main)> cache
clustering disabled
[Aug 5 17:35:32.044] Server {0x2b6c81f2bf40} NOTE: <IPAllow.cc:73
(reconfigure)> ip_allow.config updated, reloading
[Aug 5 17:35:32.051] Server {0x2b6c81f2bf40} NOTE: <ClusterProcessor.cc:651
(init)> cache clustering disabled
[Aug 5 17:35:32.054] Server {0x2b6c81f2bf40} NOTE: <Log.cc:936
(init_when_enabled)> logging initialized[3], logging_mode = 1
[Aug 5 17:35:32.058] Server {0x2b6c81f2bf40} NOTE: <SSLUtils.cc:1866
(SSLParseCertificateConfiguration)> loading SSL certificate configuration from
/etc/trafficserver/ssl_multicert.config
[Aug 5 17:35:32.092] Server {0x2b6c81f2bf40} NOTE: <Main.cc:1900 (main)>
traffic server running
[Aug 5 17:35:32.113] Server {0x2b6c87312700} NOTE: <Cache.cc:1071
(cacheInitialized)> cache enabled
[Aug 5 17:35:27.934] {0x7f2183e76900} STATUS: opened
/var/log/trafficserver/manager.log
[Aug 5 17:35:27.934] {0x7f2183e76900} NOTE: <DiagsConfig.cc:148
(reconfigure_diags)> updated diags config
[Aug 5 17:35:27.935] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of log_hosts.config failed: Permission denied
[Aug 5 17:35:27.935] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of log_hosts.config : Permission denied
[Aug 5 17:35:27.936] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: log_hosts.config
[Aug 5 17:35:27.936] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of log_hosts.config failed: Permission denied
[Aug 5 17:35:27.936] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : log_hosts.config
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of logs_xml.config failed: Permission denied
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of logs_xml.config : Permission denied
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: logs_xml.config
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of logs_xml.config failed: Permission denied
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : logs_xml.config
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of storage.config failed: Permission denied
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of storage.config : Permission denied
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: storage.config
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of storage.config failed: Permission denied
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : storage.config
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of socks.config failed: Permission denied
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of socks.config : Permission denied
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: socks.config
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of socks.config failed: Permission denied
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : socks.config
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of records.config failed: Permission denied
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of records.config : Permission denied
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: records.config
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of records.config failed: Permission denied
[Aug 5 17:35:27.937] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : records.config
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of vaddrs.config failed: Permission denied
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of vaddrs.config : Permission denied
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: vaddrs.config
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of vaddrs.config failed: Permission denied
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : vaddrs.config
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of cache.config failed: Permission denied
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of cache.config : Permission denied
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: cache.config
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of cache.config failed: Permission denied
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : cache.config
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of icp.config failed: Permission denied
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of icp.config : Permission denied
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: icp.config
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of icp.config failed: Permission denied
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : icp.config
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of ip_allow.config failed: Permission denied
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of ip_allow.config : Permission denied
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: ip_allow.config
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of ip_allow.config failed: Permission denied
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : ip_allow.config
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of parent.config failed: Permission denied
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of parent.config : Permission denied
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: parent.config
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of parent.config failed: Permission denied
[Aug 5 17:35:27.938] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : parent.config
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of remap.config failed: Permission denied
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of remap.config : Permission denied
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: remap.config
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of remap.config failed: Permission denied
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : remap.config
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of volume.config failed: Permission denied
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of volume.config : Permission denied
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: volume.config
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of volume.config failed: Permission denied
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : volume.config
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of hosting.config failed: Permission denied
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of hosting.config : Permission denied
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: hosting.config
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of hosting.config failed: Permission denied
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : hosting.config
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of congestion.config failed: Permission denied
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of congestion.config : Permission denied
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: congestion.config
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of congestion.config failed: Permission denied
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : congestion.config
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of plugin.config failed: Permission denied
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of plugin.config : Permission denied
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: plugin.config
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of plugin.config failed: Permission denied
[Aug 5 17:35:27.939] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : plugin.config
[Aug 5 17:35:27.940] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of splitdns.config failed: Permission denied
[Aug 5 17:35:27.940] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of splitdns.config : Permission denied
[Aug 5 17:35:27.940] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: splitdns.config
[Aug 5 17:35:27.940] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of splitdns.config failed: Permission denied
[Aug 5 17:35:27.940] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : splitdns.config
[Aug 5 17:35:27.940] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of ssl_multicert.config failed: Permission denied
[Aug 5 17:35:27.940] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of ssl_multicert.config : Permission denied
[Aug 5 17:35:27.940] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: ssl_multicert.config
[Aug 5 17:35:27.940] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of ssl_multicert.config failed: Permission denied
[Aug 5 17:35:27.940] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : ssl_multicert.config
[Aug 5 17:35:27.940] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of stats.config.xml failed: Permission denied
[Aug 5 17:35:27.940] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of stats.config.xml : Permission denied
[Aug 5 17:35:27.940] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: stats.config.xml
[Aug 5 17:35:27.940] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of stats.config.xml failed: Permission denied
[Aug 5 17:35:27.940] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : stats.config.xml
[Aug 5 17:35:27.941] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of cluster.config failed: Permission denied
[Aug 5 17:35:27.941] Manager {0x7f2183e76900} NOTE: [Rollback::internalUpdate]
Unable to create new version of cluster.config : Permission denied
[Aug 5 17:35:27.941] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Automatic Roll of Version 1 failed: cluster.config
[Aug 5 17:35:27.941] Manager {0x7f2183e76900} NOTE: [Rollback::openFile] Open
of cluster.config failed: Permission denied
[Aug 5 17:35:27.941] Manager {0x7f2183e76900} NOTE: [Rollback::Rollback]
Config file is read-only : cluster.config
[Aug 5 17:35:27.941] Manager {0x7f2183e76900} NOTE: [ClusterCom::ClusterCom]
Node running on OS: 'Linux' Release: '4.6.4-301.fc24.x86_64'
[Aug 5 17:35:27.941] Manager {0x7f2183e76900} NOTE:
[LocalManager::listenForProxy] Listening on port: 8080 (IPv4)
[Aug 5 17:35:27.942] Manager {0x7f2183e76900} NOTE: [TrafficManager] Setup
complete
[Aug 5 17:35:28.984] Manager {0x7f2183e76900} NOTE: [LocalManager::startProxy]
Launching ts process
[Aug 5 17:35:29.012] Manager {0x7f2183e76900} NOTE:
[LocalManager::pollMgmtProcessServer] New process connecting fd '14'
[Aug 5 17:35:29.012] Manager {0x7f2183e76900} NOTE: [Alarms::signalAlarm]
Server Process born
--
Reindl Harald
the lounge interactive design GmbH
A-1060 Vienna, Hofmühlgasse 17
CTO / CISO / Software-Development
m: +43 676 40 221 40
p: +43 1 595 3999 33
http://www.thelounge.net/
