Re: Debian 10 logrotate

2019-07-24 Thread Gene Heskett
On Wednesday 24 July 2019 21:04:13 Tan Shao Yi wrote: > Hi Sven, > > Thank you for the explanation. > > I just wanted to add that when doing "systemctl edit > logrotate.service", we also need to include the "[Service]" header > before specifying ReadWritePaths. > > Thank you. > > Regards, > Tan Sh

Re: Debian 10 logrotate

2019-07-24 Thread Tan Shao Yi
Hi Sven, Thank you for the explanation. I just wanted to add that when doing "systemctl edit logrotate.service", we also need to include the "[Service]" header before specifying ReadWritePaths. Thank you. Regards, Tan Shao Yi On 21/7/19, 5:55 PM, "Sven Joachim" wrote: On 2019-07-21 02:4

Re: Debian 10 logrotate

2019-07-21 Thread Étienne Mollier
Sven Joachim, on 2019-07-21: > On 2019-07-21 02:42 +, Tan Shao Yi wrote: > > May I know if something has changed recently to cause this? > > It is the ProtectSystem=full directive in logrotate.service which causes > /usr to be mounted read-only for logrotate. See the SANDBOXING section > in sy

Re: Debian 10 logrotate

2019-07-21 Thread Sven Joachim
On 2019-07-21 02:42 +, Tan Shao Yi wrote: > I upgraded to Debian 10 recently and it looks like logrotate is not > working on files outside the /var directory: This is correct. > For example, > > Jul 21 00:00:01 server-name logrotate[8874]: error: error renaming > /usr/local/apache/logs/https

Re: Debian 10 logrotate

2019-07-21 Thread Étienne Mollier
Good day Tan Shao Yi, Tan Shao Yi, on 2019-07-21: > For example, > > Jul 21 00:00:01 server-name logrotate[8874]: error: error renaming > /usr/local/apache/logs/https-error_log.12.gz to > /usr/local/apache/logs/https-error_log.13.gz: Read-only file system Here I would have suggested to have a l