Bug 1193118 - munin doesn't work anymore correct.
munin doesn't work anymore correct.
Status: NEW
Classification: openSUSE
Product: openSUSE Tumbleweed
Classification: openSUSE
Component: Other
Current
Other Other
: P5 - None : Normal (vote)
: ---
Assigned To: Wolfgang Rosenauer
E-mail List
:
Depends on:
Blocks: 1181400
  Show dependency treegraph
 
Reported: 2021-11-26 15:54 UTC by Thorsten Kukuk
Modified: 2021-11-29 16:40 UTC (History)
3 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Thorsten Kukuk 2021-11-26 15:54:23 UTC
2021/11/26-00:30:03 CONNECT TCP Peer: "[::ffff:127.0.0.1]:49514" Local: "[::ffff:127.0.0.1]:4949"
2021/11/26-00:30:03 [25375] Error output from diskstats:
2021/11/26-00:30:03 [25375]     Error in tempfile() using template /var/lib/munin/plugin-state/nobody/XXXXXXXXXX: Could not create temp file /var/lib/munin/plugin-state/nobody/dQcMJJa1jk: Permission denied at /usr/lib/perl5/vendor_perl/5.34.0/Munin/Plugin.pm line 278.
2021/11/26-00:30:03 [25375] Service 'diskstats' exited with status 13/0.

/var/lib/munin/plugin-state/nobody is owned by munin:munin but munin tries to write as "nobody".

And the new "hardening" options for "munin-node.service" blocks several plugins from working. Especially all the ones for Rasperry Pi's. Don't know yet which of the options is on fault.
Comment 2 Johannes Segitz 2021-11-29 08:18:26 UTC
I'll have a look
Comment 3 Johannes Segitz 2021-11-29 10:39:26 UTC
For me the changes in the .service file don't cause issues. @Thorsten: can you please share the list of plugins you have enabled?

@Wolfgang: I needed to install perl-CGI-Fast to get munin to work, which isn't on Factory
Comment 4 Thorsten Kukuk 2021-11-29 13:03:05 UTC
I use it on a Raspberry Pi with some Pi specific modules.
For me it works if I remove:
PrivateDevices=true
ProtectClock=true
RestrictRealtime=true

ProtectClock breaks pythons time module. Don't ask me why, the error handling of this plugins/python code is really bad and I couldn't find out what exactly.
But the munin plugins do not set the time...

RestrictRealtime: I assume they need exact timing for some hardware protocols.
Comment 5 Johannes Segitz 2021-11-29 15:48:17 UTC
Thanks. Can you please https://build.opensuse.org/package/show/home:jsegitz:branches:server:monitoring/munin a try? I removed it from the node service, that should be enough.

As for RestrictRealtime: That should restrict the ability to have workloads run as realtime. Strange that they need it, I'll have another look
Comment 6 Thorsten Kukuk 2021-11-29 16:01:38 UTC
I bet it's needed to allow the RPI modules to communicate via GPIO, this is time critical with various sensors.
Comment 7 Thorsten Kukuk 2021-11-29 16:40:22 UTC
(In reply to Johannes Segitz from comment #5)
> Thanks. Can you please
> https://build.opensuse.org/package/show/home:jsegitz:branches:server:
> monitoring/munin a try? I removed it from the node service, that should be
> enough.

The change is identical to my local changes, so should work.