Bug#1084053: race condition: kernel log shows up on any container running rsyslogd

[Michael Biebl]

Am 07.10.24 um 14:05 schrieb Michael Biebl:

Am 04.10.2024 um 17:05 schrieb Harald Dunkel:

Package: rsyslog
Version: 8.2408.0-2

Debian's default rsyslog configuration loads the imklog module even
when running in a container. Thats a very bad idea: It messes up
/var/log/kern.log on both host and container. The next kernel
log line shows up somewhere on any container running rsyslogd.

AFAICS there is no 'module(unload="imklog")' suitable for an easy-
to-setup config file in /etc/rsyslog.d, ie I am forced to edit
/etc/rsyslog.conf and run into config file conflicts on the next
upgrade for about 80% of my Debian hosts (>300).

Do you think this could be improved?

That appears to be a kernel limitation, where /proc/kmsg is not properly namespaced / containerized. I don't see how rsyslogd can do anything about that.

Btw, I'm still a bit curious what you mean with "race condition" ?

OpenPGP_signature.asc
Description: OpenPGP digital signature