|
|
Subscribe / Log in / New account

Enabling the persistent journal in Debian

By Jake Edge
February 12, 2020

It seems unlikely that anyone on any "side" of the systemd war that has raged in Debian over the last few years thought that the results of the recent general resolution (GR) vote ended the matter. The vote showed a clear preference for moving ahead with systemd as the preferred init system, though it was far from any kind of landslide—there were definitely plenty of voters who would have preferred a different outcome. It was a complicated GR, with a wide spectrum of options, but at this point, the project as a whole has spoken. Actually implementing some of the changes that the GR enabled may not have the smooth path that some might have hoped for, however.

On February 1, Michael Biebl posted a message to the debian-devel mailing list noting that he had fixed a wishlist bug (from 2013) by enabling the systemd persistent journal. Prior to that, journald would log to the non-persistent /run/log/journal directory by default and rsyslog would create the persistent text log files in /var/log. The change to the Debian systemd package would create the /var/log/journal directory where journald will store its persistent binary log files. That way, the journals will still be available after a reboot.

The message said that new installs and upgrades of the systemd package would create the directory, but it also included instructions on how to revert to the existing behavior; further upgrades to the systemd package will respect that choice. Beyond that, though, running both the persistent journal and rsyslog means that the log files are effectively stored twice on disk, so Biebl may ask the Debian ftp-masters to lower the priority of rsyslog so that it is not installed by default for the upcoming Debian 11 ("bullseye") release. Those who want to have a different system logger can add it after the initial install, of course.

Steve McIntyre replied that the change to the systemd package was fine for new installs, but that he would rather not see upgrades of the package add the persistent journal. "Those people with existing logging setups will be surprised by this." Didier "OdyX" Raboud disagreed but suggested that the change be prominently announced. Biebl thought that it could be surprising not to add the functionality on an upgrade:

I honestly don't like packages that behave differently depending on whether they were upgraded or installed anew (given their default configuration wasn't changed). I assume there would be equally as many or even more surprised users that find their upgraded system behave differently [than] their freshly installed system.

The change here is basically just an update of the default behaviour of journald. If you explicitly configured a different journald behavior via Storage=, this is respected. If you already created a /var/log/journal in the past, the change will be a nop.

Existing sysloggers will continue to work after this change as before, they are not directly affected by this change.

Moreover, there is some relevant history from a Debian downstream that has already made the switch to the persistent journal. Biebl asked Dimitri John Ledkov to comment on how the transition went for Ubuntu, which enabled the persistent journal on installation or upgrade in late 2017. Ledkov said that the process went quite well overall, with few real problems. A large chunk of the Ubuntu user base now has the change since "systems installed with / upgraded to 18.04 LTS overwhelmingly have persistent journal enabled by default across the board". Biebl agreed with Raboud that documenting the change is important, so he filed a bug to that effect.

rsyslog default

The possible switch away from rsyslog by default concerned Dmitry Smirnov, however. "I think that replacing rsyslog with journald is two steps back in regards to functionality and flexibility." He explained that rsyslog has more features than journald and is more mature, thus more stable. He felt that changing the default system logger "yields no benefits to say the least".

Russ Allbery agreed with Smirnov's thoughts about rsyslog, but pointed out that the change would just be for the system default.

The goal of the default is not to provide in latent form every excellent feature that anyone may want to use. It's to provide a hopefully simple, reliable, functional, and light-weight implementation of a facility that serves as a reasonable default for most systems.

There are some minor benefits to the switch as well, Allbery said:

[...] one fewer daemon running on a default installation, one fewer thing to have security vulnerabilities or some other problems, one fewer thing to keep up to date, and a smaller base installation.

Smirnov was unconvinced that "those benefits are enough to justify replacing a very solid and reliable logging system", however. But, as Allbery said, journald is already upstream of rsyslog today, so the default is to run two logging daemons, which seems somewhat suboptimal; he is not sure that it makes sense to keep doing so, especially with the addition of the persistent journal. He did acknowledge that the switch might require some relearning:

It does take a bit of retraining to use journalctl instead (and I'm personally not horribly fond of its UI, although that's probably because I'm using it wrong), but it's a lot better at effectively narrowing log messages to the things of interest once you get used to it. (And anyone who doesn't like that can just apt-get install rsyslog and be done.)

There was some additional grumbling about switching to the journalctl command to look at log entries, which some see as a regression in functionality; it is certainly different than using familiar tools on text log files for those who do not change the default, but only if rsyslog is dropped from the default install. The rsyslog option is not going away, as Allbery pointed out. In addition:

Debian, of all projects, should be more relaxed about defaults, given that we're the OS of choice for people who like to customize things. I've been using Debian for some 20 years and don't believe I have *ever* accepted all of the defaults or left a system in a purely default mode for longer than about five minutes.

GR consequences

Inevitably, some complaints about the GR outcome and what it means going forward were aired. The result of the vote may not have necessarily dictated the change in default for Debian as a whole, at least directly, but dropping the priority of rsyslog was only mentioned as a possibility. Meanwhile, Debian project leader Sam Hartman said that the outcome of the vote has already had a positive impact on the community:

The systemd maintainers felt comfortable announcing the persistent journal change and engaging in a discussion of whether syslogd should be installed by default.

That is, we actually moved forward enough that the systemd maintainers felt comfortable enough engaging with the community. I've seen the same thing on a number of other fronts: people feel like they have enough of an answer that they pull their heads out of the hole they have been hiding in for years and *engage with the community*.

That's amazing; that's wonderful.

But a suggestion that systemd opponents leave Debian en masse over the results of the GR was met with a number of responses, some perhaps less well-considered than others. Hartman's reply was typically even-keeled; he had previously acknowledged the unhappiness and frustration the GR results might engender in some, but the call to leave seemingly went too far. "It sounds like you were suggesting that people should leave as a way of pressuring or punishing the project." That is not the kind of community that Hartman is hoping and aspiring for; there are options for those who are unhappy with the outcome:

You and your happiness matter. Debian getting to make decisions and choices for its distributions matters. If you or anyone else would be happier focusing on a downstream, then do that. I hope you do that to make you happier rather than to punish other people.

[...] However, it is possible to focus on a downstream without leaving. There are great folks in Devuan who are doing the parts of their work they can do upstream in Debian, while focusing on the parts Debian won't accept for Devuan. Debian actually making a decision is good for these people as well as systemd proponents. They know which issues Debian is likely to help with and which issues they are going to get pushback on. Already I've seen issues getting quick responses that might previously have been stalled for years to avoid conflict. Sometimes the responses aren't what people wish to hear, but at least we're respecting them enough to tell them what Debian will accept and what it will not.

Many of the conversations are more productive than conversations before the GR. (Some, sadly, are not.)

That message is worth reading in its entirety. Hartman empathizes with those who are on the "outside", even though he has determined that systemd is the best choice—for now. He simply asks that those opposed respect the other project members and the Debian project itself. "If you don't try to burn the house down on the way out, we'll be happy to see you again later if your needs or Debian change."

The problems with Debian and systemd have been going on for quite some time now; it's been almost exactly six years since the Debian technical committee voted to make systemd the default for the "jessie" release. That did not really end the matter, obviously, and the recent GR outcome will not either—at least completely. The trend, however, looks like things are moving in a direction where the rift is starting to heal—or opponents are moving on. Both are good for the Debian community as a whole. Enabling the persistent journal is a pretty minor change in the grand scheme of things; overall, it was met with constructive criticism or agreement. One hopes that whatever other systemd-derived changes are coming over the next months or years can garner a similar response—perhaps even without the need to re-litigate the "systemd question" yet another time.



to post comments

Enabling the persistent journal in Debian

Posted Feb 13, 2020 9:07 UTC (Thu) by beagnach (guest, #32987) [Link] (24 responses)

An article about systemd has been up for almost 12 hours on LWN and not a single comment has been posted?!?

I hereby declare the dawning of a new era.

Enabling the persistent journal in Debian

Posted Feb 13, 2020 9:28 UTC (Thu) by smurf (subscriber, #17840) [Link] (17 responses)

Don't jinx it.

Seriously, though, I've forced [r-or-whatever]syslog off my systems since two years ago and definitely don't miss it.

Enabling the persistent journal in Debian

Posted Feb 13, 2020 18:04 UTC (Thu) by ju3Ceemi (subscriber, #102464) [Link] (12 responses)

On my side, I dropped journald :)
Logs are legal elements that we cannot afford to loose -and journald is not reliable in this matter

Enabling the persistent journal in Debian

Posted Feb 14, 2020 7:26 UTC (Fri) by rvolgers (guest, #63218) [Link] (11 responses)

I'm curious what kind of problem journald has with reliability. Is it just that you need features provided by rsyslog and don't want an extra layer involved in logging, or that you simply consider rsyslog to be the more mature solution, or something more specific?

Enabling the persistent journal in Debian

Posted Feb 14, 2020 7:32 UTC (Fri) by rvolgers (guest, #63218) [Link]

(To be clear, those would both be perfectly valid, I'm just wondering if there's more to it because I'm curious. I've used both "journald only", "rsyslog only", and hybrid solutions, and reliability has not really been a huge factor except in the sense that having remote logging at all is a big factor.)

Enabling the persistent journal in Debian

Posted Feb 14, 2020 12:16 UTC (Fri) by Kamiccolo (subscriber, #95159) [Link] (7 responses)

Well, corrupted journald log files are pretty common. It would be nice to dig through the specifics and percentages on different use cases....

Enabling the persistent journal in Debian

Posted Feb 14, 2020 14:32 UTC (Fri) by Baughn (subscriber, #124425) [Link]

I've never once seen one.

I wonder if they're more common on filesystems like ext4? I use ZFS across my entire fleet.

Enabling the persistent journal in Debian

Posted Feb 14, 2020 14:39 UTC (Fri) by JFlorian (guest, #49650) [Link] (5 responses)

Citations please. I oversee nearly a thousand deployments and have yet to encounter a corrupted journal. I'm not saying it can't happen but I have zero reason to believe systemd-journal to be any more vulnerable to mangled data than any other app that writes files.

Enabling the persistent journal in Debian

Posted Feb 18, 2020 4:43 UTC (Tue) by qtplatypus (subscriber, #132339) [Link] (4 responses)

My understanding is that journald fsync's its content to disk periodically and that adding to the journal requires two writes. One to the end of the file with the logged content and one to the start to update the header. So there is more to go wrong compared to a text file that is being appended to.

Enabling the persistent journal in Debian

Posted Feb 18, 2020 13:27 UTC (Tue) by JFlorian (guest, #49650) [Link] (3 responses)

In the greater context of everything our computers do for us on a daily basis, that seems an overly trivial argument. Again, I've yet to encounter corruption despite no end of improper shutdowns and other poor circumstances. Maybe it's just an awesome file system (mix of ext4 and xfs) or something else, but the cons of fearing a journal corruption simply do not outweigh all the pros, IMHO. Furthermore, I suspect FSS will make very obvious any potential corruption, does your plain text log file guarantee that?

Enabling the persistent journal in Debian

Posted Feb 20, 2020 8:32 UTC (Thu) by qtplatypus (subscriber, #132339) [Link] (2 responses)

"In the greater context of everything our computers do for us on a daily basis, that seems an overly trivial argument."

I am unsure what you mean here can you expand in this argument?

The perspective I am coming from is where a system is needed for something important (like logging) its persistant state should change from consistant state to consistant state atomically. So there is no possible window where corruption can occure.

I prefer systems that are intrinsically safe to systems where you have to be lucky.

Also can you expand FSS in this context, i am thinking 'Fair Share Schedular' but that is clearly wrong.

Enabling the persistent journal in Debian

Posted Feb 20, 2020 14:33 UTC (Thu) by mathstuf (subscriber, #69389) [Link]

> FSS

Forward secure sealing.

https://lwn.net/Articles/512895/

Enabling the persistent journal in Debian

Posted Feb 20, 2020 18:43 UTC (Thu) by JFlorian (guest, #49650) [Link]

I simply meant that our computers are writing files constantly. I don't worry about corruption in my log files more than any other file. I have lots of value held in databases and those writes are going to be far more complex than log files, but I trust the job will get done.

As for FSS, I'm referring to it's Forward Secure Sealing feature as discussed here: https://lwn.net/Articles/512895/. I'll admit right now I don't know if any distro has this enabled by default or even if I'm using it, but I like the concept and thought it relevant here.

In the end, I too like plain text log files for their simplicity and versatility but I'll never be able to query them as powerfully and easily as I can with journalctl and all that power doesn't scare me off for the modest amount of complexity that I imagine it adds. That and having never been bitten by journal corruption despite plenty of invitations for disaster, I welcome the advancement in logging.

Enabling the persistent journal in Debian

Posted Feb 14, 2020 21:50 UTC (Fri) by ju3Ceemi (subscriber, #102464) [Link] (1 responses)

Journald randomly "misses" logement en triés, which is not acceptable

Enabling the persistent journal in Debian

Posted Feb 16, 2020 8:07 UTC (Sun) by niner (subscriber, #26151) [Link]

You mean the rate limiting? That's configurable. Simply add RateLimitIntervalSec=0 to your /etc/systemd/journald.conf

Enabling the persistent journal in Debian

Posted Feb 14, 2020 19:48 UTC (Fri) by kreijack (guest, #43513) [Link] (3 responses)

Even I like the idea behind journald, I suffered for its poor performance when used on a BTRFS filesystem.
I wrote even a little blog about that
http://kreijack.blogspot.com/2014/06/btrfs-and-systemd-jo...

In order to solve this issue and to not lost the advantages of journald, I configured it in order to forward the messages to rsyslog in "structured format" (or to be more correct, I configured rsyslog to import). Then I wrote a tool in order to parse/query the log stored by rsyslog (formatted in json-like format).

This I give me the advantages:
- a clean file format which doesn't fight with btrfs
- the possibility to query the log using the key/value filter

Enabling the persistent journal in Debian

Posted Feb 17, 2020 21:28 UTC (Mon) by k8to (guest, #15413) [Link] (2 responses)

Logging in text in k-v pairs has been best practice for decades. It's a shame journald doesn't just do it.

Enabling the persistent journal in Debian

Posted Feb 17, 2020 22:22 UTC (Mon) by mathstuf (subscriber, #69389) [Link]

Issues I can think of off-hand with that:

- escaping protocols need to be defined (at least newline and the escape character; control characters likely need help too)
- searching performance sucks (without an index at least); grep gets me the one line I'm interested, but how much context do I need for the related field I'm *actually* interested in?
- delimiting records needs some kind of separator (and can't be crafted by another log message)
- getting a whole record for some single field match is not easier than journalctl's filtering (I can think of awk doing it, but that doesn't sound nicer than `-u` and the like)
- encoding? everybody loves encoding questions (yeah, utf-8 is the Right Answer, but since when has that stopped anyone?)
- timezones are probably going to be in ASCII and I know no one has ever messed up ASCII timezone conversions before, so maybe that's OK too ;)

Yeah, journalctl is slow in a number of cases, but I think that could probably be avoided by using its query interface rather than piping to less, using its search and buffer stuff rather than asking journalctl for the thing I'm looking for then crafting a --since and --until parameter to bracket some reasonable timeframe around the event (loses easy perusing, but less' buffering is…not stellar).

Enabling the persistent journal in Debian

Posted Feb 18, 2020 19:45 UTC (Tue) by davidstrauss (guest, #85867) [Link]

The systemd journal *does* log text in key/value pairs. It's just in an indexed, binary format on disk. Various key/value output formats, including JSON, are available via journalctl, HTTP (by enabling the journal's REST-like API server), or various libraries for popular languages.

Enabling the persistent journal in Debian

Posted Feb 13, 2020 9:48 UTC (Thu) by ale2018 (guest, #128727) [Link] (1 responses)

From the title, I thought it was about default journaling options when mounting ext3/ext4/reiserfs/jfs...

Enabling the persistent journal in Debian

Posted Feb 13, 2020 20:20 UTC (Thu) by mirabilos (subscriber, #84359) [Link]

Me too… I don’t have much, if any, contact with systemd-journald. I install inetutils-syslogd and used to install sysklogd, never liked rsyslogd (it can do a lot, sure, but I prefer the simpler, understandable, ones).

Enabling the persistent journal in Debian

Posted Feb 13, 2020 17:44 UTC (Thu) by Tov (subscriber, #61080) [Link] (3 responses)

Great to see such level-headed messages from some of the leading figures on the Debian project! Acknowledging frustrations, but being persistent on bringing Debian forward on the agreed path. Encouraging cooperation even when people choose divergent paths. That is free software at its best.
Kodos to Hartman et. al.

Enabling the persistent journal in Debian

Posted Feb 13, 2020 17:49 UTC (Thu) by Tov (subscriber, #61080) [Link] (2 responses)

'Kudos'... (Damn spelling)

Enabling the persistent journal in Debian

Posted Feb 13, 2020 18:37 UTC (Thu) by shiar (subscriber, #67206) [Link] (1 responses)

I vote for Kodos.

Enabling the persistent journal in Debian

Posted Feb 15, 2020 10:55 UTC (Sat) by tedd (subscriber, #74183) [Link]

Kang for lyfe.

Enabling the persistent journal in Debian

Posted Feb 13, 2020 20:47 UTC (Thu) by logang (subscriber, #127618) [Link] (11 responses)

I definitely get both sides of this. I've made raspberry pi images without rsyslog, but with the persistent journal enabled, just to get a much smaller os image. So it is really nice to have one less package and one less daemon. (You can't actually remove the journal if you only wanted only rsyslog, which isn't very nice, though).

However, the change to the default makes me worried about the next upgrade for servers I maintain where I'd be a bit lost if some of the text logs disappear and I need to recover them or something. Upgrade pain is the worst, but one of the great things about Debian is it's usually very minor.

Enabling the persistent journal in Debian

Posted Feb 13, 2020 20:50 UTC (Thu) by mbiebl (subscriber, #41876) [Link] (2 responses)

Don't worry. If you upgrade a system and it had rsyslog installed before the upgrade, you will still have your text logs as rsyslog continues to work.

Enabling the persistent journal in Debian

Posted Feb 13, 2020 20:53 UTC (Thu) by logang (subscriber, #127618) [Link] (1 responses)

That's not the gist I got from the article. And don't all default-installed Debian systems have rsyslog installed today, so most upgraded systems would never make the change?

Enabling the persistent journal in Debian

Posted Feb 13, 2020 21:00 UTC (Thu) by mbiebl (subscriber, #41876) [Link]

If you have buster system which has rsyslog installed and you upgrade that to bullseye, rsyslog will *not* be removed during the upgrade. Rsyslog will continue to work as before.

It's under discussion whether to lower the priority of rsyslog from important to optional. The effect of that change would be that for system that is setup from scratch, rsyslog would no longer be installed during the intial setup.

Enabling the persistent journal in Debian

Posted Feb 13, 2020 23:37 UTC (Thu) by dps (guest, #5725) [Link] (7 responses)

If I had a job administering servers then I would want remote logging which both syslog and rsyslog provide in a readable format. There are lots of tools, both free and commercial, which understand this format. Using jounald instead would be a huge move in the wrong direction.

If a server has been owned then I don't want to be relying on local logs, which might have been doctored. Remote logs which the attacker can't doctor are worth much more.

Systems with no remote logging and no resources to analyse those logs can probably switch to journald without too much pain. I am biased against systemd on servers because it requires dbus and I can't see any reason to want dbus (or udev, udiscs2, etc) on an internet facing server.

I might also decide modules are bloat on servers and build a kernel with everything required built in and everything else left out. This might be because one the first things one did in the days of 0.9pl11 and fast 486DX2/50 boxes was to build a kernel which supported only the hardware one actually had.

Enabling the persistent journal in Debian

Posted Feb 14, 2020 0:54 UTC (Fri) by liam (guest, #84133) [Link] (4 responses)

What are the problems with systemd-journal-(upload & remote) (for networking) and the journal export format (for readability)?

Enabling the persistent journal in Debian

Posted Feb 14, 2020 10:35 UTC (Fri) by mbunkus (subscriber, #87248) [Link] (3 responses)

I've tried using systemd-journal-{upload,remote} for more than a year and was less than impressed. In my scenario I had to log over the open internet, meaning I had to implement encryption at some level.

In no particular order:

1. The documentation (man pages) are copy-pasted and wrong wrt. the configuration of encryption (certificates). See [1].
2. A real killer: systemd-journal-remote neither requires client certificates, nor does it actually validate them against the CA I've told it to validate against. See [2]. This is supposed to be fixed, but by that time I had moved away from the solution to verify.
3. The configuration wrt. resource usage (how much disk space journal files may use) does not affect the remote journal direct. Worse, running "journalctl --vacuum-* --directory…" does not actually remove anything. See [3]. The bug is closed, but that's wrong; several people in the bug asked for re-opening as the issue is still present. The result is the remote storage growing huge without manual usage of "rm …". This leads me to…
4. journalctl is dog slow in a lot of scenarios as it has to open & read all relevant files. Even on SSDs. Read [4] for details; I think it was mentioned earlier in this thread or over on the debian-devel list. Couple that with a central log host being, well, the collector of logs of all clients and you end up with a huge amount of files with a huge amount of data to read through, and journalctl becomes really unpleasant to use.
5. systemd-journal-upload remembers how much it has already uploaded. If the connection between it and -remote had been down for a while, -upload tries to upload everything since that last position _before it signals readiness to systemd_. The result is that "systemctl start systemd-journal-upload.service" may time out (e.g. after the default 1m30s) if -upload is still in the process of uploading. Then systemd kills the process, and you have to try starting it again. This is mostly an issue with the default unit configuration for -upload. I worked around it by adding "Restart=always" and "TimeoutStartSec=<some big value>" in a unit drop-in for it.

[1] https://github.com/systemd/systemd/issues/4093
[2] https://github.com/systemd/systemd/issues/4092
[3] https://github.com/systemd/systemd/issues/2376
[4] https://github.com/systemd/systemd/issues/6238

As workarounds for the encryption problems I experimented with using ssltunnel and a real VPN between the machines and running systemd-journal-{remote,upload} unencrypted over those

I realize I sound like a hater. Which I'm totally not. I'm a huge fan of the journal storing all that meta data, the JSON format is perfectly fine, the filtering mechanisms are great, and systemd in general has brought so much joy to me as a sysadmin. The journal, or more precisely, remote journal just not being quite there in quality & ease of use & polish is just hugely disappointing to me.

Enabling the persistent journal in Debian

Posted Feb 15, 2020 10:00 UTC (Sat) by fwiesweg (guest, #116364) [Link] (1 responses)

Yes I can confirm those issues, especially the missing auto-vacuuming of journal-remote is sorely being missed.

Concerning the certificate verification issue, have you tried routing it through an https proxy? We're running nginx on the same machine for other services incapable of serving via https anyway. It'd be pretty straightforward to have the journal bind to localhost only, delegating all the certificate verification to nginx.

Enabling the persistent journal in Debian

Posted Feb 15, 2020 11:57 UTC (Sat) by mbunkus (subscriber, #87248) [Link]

I ended up using stunnel on both sides. Nothing against nginx; I use it everywhere else. stunnel is simply quite a bit less complex and a tool suited for the job at hand.

Note that Michael Biebl re-opened my but report about "journalctl --vacuum-* --directory=…" not working (probably after reading my post here) and asked us to verify if this is still the case. My tests showed that it does work now. I haven't tested automatic cleanup (meaning whether settings in /etc/systemd/journald.conf affect the contents of /var/log/journal/remote or any of its sub-directories), but at least you can run "journalctl --vacuum-* --directory=…" in a timer for similar effect.

Enabling the persistent journal in Debian

Posted Feb 16, 2020 7:48 UTC (Sun) by liam (guest, #84133) [Link]

Those are, or were, in some cases, legitimate issues, so, no, I don't take you for a hater:)
Looks like you ackd the fix for 3, and, as you said 2 is supposed to be fixed. The docs for journal-remote.conf are a bit sparse, but the lack of solution for unit tab completion is pretty damned annoying. Occasional indexing may not be elegant but the alternative of 1m+ tab completion times shouldn't be acceptable.

Enabling the persistent journal in Debian

Posted Feb 14, 2020 15:27 UTC (Fri) by tchernobog (guest, #73595) [Link]

I do have a job that includes administering servers, and the journal saved my life more than once where grep could not cut it. See? Subjective.

Enabling the persistent journal in Debian

Posted Feb 20, 2020 10:53 UTC (Thu) by HelloWorld (guest, #56129) [Link]

> Systems with no remote logging and no resources to analyse those logs can probably switch to journald without too much pain. I am biased against systemd on servers because it requires dbus and I can't see any reason to want dbus (or udev, udiscs2, etc) on an internet facing server.

systemctl uses the D-Bus protocol to talk to systemd, but systemd does not require dbus-daemon (or dbus-broker) to be running. It also doesn't require udev or udisks2 [sic].

Enabling the persistent journal in Debian

Posted Feb 14, 2020 8:11 UTC (Fri) by ibukanov (subscriber, #3942) [Link] (5 responses)

I used to like journald since it’s UI allowed to quickly look only at relevant things (especially after systemd fixed annoying bugs that lead to log entries with missing tags).

But then one day I needed to analyze a log from a crashed server. Surely journalctl supports viewing individual log files just fine. Except that time I got a message about unsupported journal version. Apparently the crashed server had a newer systemd that changed the journal format.

That showed that designers of journald did not understand the logging and the need for forward compatibility in the log file format.

Enabling the persistent journal in Debian

Posted Feb 14, 2020 9:29 UTC (Fri) by mbiebl (subscriber, #41876) [Link] (4 responses)

I'd be interested to know more about that:
Which systemd version (and which distro) was used to create the journal?
Which systemd version (and which distro) was used to inspect the journal?

Enabling the persistent journal in Debian

Posted Feb 14, 2020 10:59 UTC (Fri) by ibukanov (subscriber, #3942) [Link] (3 responses)

The journal was created on Debian 10. I inspected it the last summer on CoreOS with automatic updates enabled.

Enabling the persistent journal in Debian

Posted Feb 14, 2020 11:52 UTC (Fri) by mbiebl (subscriber, #41876) [Link] (2 responses)

Could you by any chance provide the output of journalctl --version from that CoreOS installation?

Enabling the persistent journal in Debian

Posted Feb 14, 2020 18:18 UTC (Fri) by ibukanov (subscriber, #3942) [Link] (1 responses)

That CoreOS server was decommissioned couple of month ago. Note that I was able eventually to look at the log from a Fedora laptop so it was not corrupted.

Enabling the persistent journal in Debian

Posted Feb 17, 2020 9:39 UTC (Mon) by mbiebl (subscriber, #41876) [Link]

As I was curious I pulled the ISO from https://coreos.com/os/docs/latest/booting-with-iso.html and booted into that CoreOS system.
I could read journal files from a Debian 10 and Debian sid system without any problems.

I would have loved to find out what specific problems you had, but given your reply it's probably too late for that now.

6 years !

Posted Feb 20, 2020 10:36 UTC (Thu) by Zolko (guest, #99166) [Link] (7 responses)

"it's been almost exactly six years since the Debian technical committee voted to make systemd the default for the "jessie" release."

I would say that a decision that has caused trouble for 6 years has obviously, scientifically, provably, been a wrong decision. No matter how "democratic" the process to come to that bad decision has been. The decision has, observably, led to 6 years of bad relations. Therefore, it was a bad decision.

6 years !

Posted Feb 20, 2020 10:59 UTC (Thu) by seyman (subscriber, #1172) [Link]

> I would say that a decision that has caused trouble for 6 years has obviously, scientifically, provably, been a wrong decision.

IIRC, Debian TC had the choice between 3 options (keep sysvinit the default, choose upstart as the new default, choose systemd as the new default). No matter which way they would have voted, the result would have been years of bad relations so I'm glad they choose to focus on technical merits.

6 years !

Posted Feb 20, 2020 19:04 UTC (Thu) by mpr22 (subscriber, #60784) [Link]

Which of the other outcomes that were credibly on offer (Further Discussion aka passive sysvinit as default; affirmative sysvinit as default; openrc as default; upstart as default) do you believe would have caused a shorter and/or less severe period of bad relations?

Wrong decisions

Posted Feb 21, 2020 1:52 UTC (Fri) by branden (guest, #7029) [Link] (4 responses)

> I would say that a decision that has caused trouble for 6 years has obviously, scientifically, provably, been a wrong decision.

The abolition of chattel slavery in the United States caused trouble for longer than that. Eventually, political and business leaders grew tired of Reconstruction and Rutherford B. Hayes bargained it away in 1876 as the price of the presidency.

Thus the U.S. South entered the period of "Redemption"; it implemented Jim Crow, meaning slavery by another name, the enshrinement of white supremacist ideology into the law to go along with its cultural norms, and that quieted things down (along with lynchings that grew in number for decades, peaking in the 1890s. This sort of violence was not "trouble" in the political sense; the rest of the country left the racist South to its own devices, and frequently emulated its example.

Your principle of scientific obviousness holds up about as well as one of Uri Geller's bent spoons.

Wrong decisions

Posted Feb 21, 2020 18:57 UTC (Fri) by Wol (subscriber, #4433) [Link]

> > I would say that a decision that has caused trouble for 6 years has obviously, scientifically, provably, been a wrong decision.

> Your principle of scientific obviousness holds up about as well as one of Uri Geller's bent spoons.

The OP clearly has no clue what science is, or what a scientific proof proves. ALL scientific proofs come in the form "X can NOT be true, because here is an observation Y that refutes it". You can NOT come to a 100% positive scientific conclusion, because that would not be science.

The only way the OP could come up with scientific proof would be to re-run the same scenario except with different decisions, and *show* that they caused "less trouble", whatever that means. He would then have evidence to back his statement, but that's still not *proof*.

ALL scientific "proofs positive" basically consist of the statement "we cannot find a counter-example" - often because the investigators subconsciously avoid searching in the obvious places ... :-(

That's actually why it's almost invariably the young who make scientific advances - they are dis-satisfied with the wisdom of their elders, and the old who can't make advances because they are entrenched in the beliefs of their youth. History is replete with examples of "Grand Old Men" of Science who, because they were revered for their discoveries as youngsters, they were absolute menaces in old age.

Cheers,
Wol

Wrong decisions

Posted Feb 21, 2020 21:21 UTC (Fri) by jrigg (guest, #30848) [Link] (2 responses)

> The abolition of chattel slavery in the United States caused trouble for longer than that.

I think we need a replacement for Godwin's Law: As an online discussion grows longer, the probability of a comparison involving slavery approaches 1.

Wrong decisions

Posted Feb 23, 2020 4:10 UTC (Sun) by flussence (guest, #85566) [Link]

…especially since Godwin himself repealed that law in the face of interesting times.

Wrong decisions

Posted Feb 25, 2020 12:22 UTC (Tue) by jezuch (subscriber, #52988) [Link]

Well, the boogeymen evolve with time. Slavery is once again (still, after all these years?) a hot topic in the US, so it's easier for USians to relate to it. Hitler, in comparison, is becoming more and more abstract as historical education falters and the numbers of Nazi sympathizers grow... In some places you'll also see variants involving Stalin or Pol Pot etc. so perhaps what is needed is a generic/parameterized law template ;)


Copyright © 2020, Eklektix, Inc.
This article may be redistributed under the terms of the Creative Commons CC BY-SA 4.0 license
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds