search

NLnetLabs / krill

RPKI Certificate Authority and Publication Server written in Rust
https://nlnetlabs.nl/projects/routing/krill/
Mozilla Public License 2.0
283 stars 38 forks source link

`rfc8181_log_dir` writable location test fails if logs exist for a CA called `test` #1169

Open ximon18 opened 7 months ago

ximon18 commented 7 months ago 
$ journalctl -u krill
...
Nov 04 09:06:37 krill-testbed-main systemd[1]: Started Krill.
Nov 04 09:06:37 krill-testbed-main krill[2484896]: Cannot write to dir '/var/lib/krill/data/rfc8181/' for configuration setting 'rfc8181_log_dir', Error: context: Could not create file: /var/lib/krill/data/rfc8181/test, underlying io::Error: Is a directory (os error 21)
Nov 04 09:06:37 krill-testbed-main krill[2484896]: Hint: if you use systemd you may need to override the allowed ReadWritePaths,
Nov 04 09:06:37 krill-testbed-main krill[2484896]: the easiest way may be by doing 'systemctl edit krill' and add a section like:
Nov 04 09:06:37 krill-testbed-main krill[2484896]: [Service]
Nov 04 09:06:37 krill-testbed-main krill[2484896]: ReadWritePaths=/local/path1 /local/path2 ...
Nov 21 08:34:29 krill-testbed-main systemd[1]: krill.service: Main process exited, code=killed, status=9/KILL
Nov 21 08:34:29 krill-testbed-main systemd[1]: krill.service: Failed with result 'signal'.
Nov 21 08:34:39 krill-testbed-main systemd[1]: krill.service: Scheduled restart job, restart counter is at 2.
Nov 21 08:34:39 krill-testbed-main systemd[1]: Stopped Krill.
...
ximon18 commented 7 months ago

This issue appears to have been introduced in https://github.com/NLnetLabs/krill/commit/5934882982b43fcf18244be323cf6ad797e311c0 for issue #1132 which was included in the v0.8.0 release of Krill according to Git.