Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 1952715
Summary: | libcap-ng used by "/usr/sbin/irqbalance" failed due to not having CAP_SETPCAP in capng_apply | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Jeremy Linton <jeremy.linton> |
Component: | irqbalance | Assignee: | Neil Horman <nhorman> |
Status: | NEW --- | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | 34 | CC: | alex765, commodorekappa+redhat, dac.override, mark, nhorman, samoht0-bugzilla, sgrubb, ssbarnea, travier, walters, yalzhang |
Target Milestone: | --- | Flags: | dac.override:
needinfo?
(walters) |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | If docs needed, set a value | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | Type: | Bug | |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 245418 |
Description
Jeremy Linton
2021-04-22 23:01:58 UTC
Doesn't look like an aarch64 problem but including it on the arm tracker. From https://bugzilla.redhat.com/show_bug.cgi?id=1924218: libcap-ng-0.8.2 does better error detection of some problems that were previously hidden. A patched version of libcap-ng is now emitting warnings when it sees a problem in the use of the API. On a fresh Fedora CoreOS node, I get the following output in the journal: ``` /usr/sbin/irqbalance[965]: libcap-ng used by "/usr/sbin/irqbalance" failed due to not having CAP_SETPCAP in capng_apply ``` Version-Release number of selected component (if applicable): irqbalance-1.7.0-5.fc34.x86_64 How reproducible: Always As already noted, also x86_64 affected (here an old AMD E-450 APU). Maybe severity should be bumped. Broken "irqbalance" looks bad. Upstream suggests a rebuild: https://github.com/Irqbalance/irqbalance/issues/182 A rebuild won't fix it. This is because of NoNewPrivileges=yes in irqbalance.service. That line can be deleted since the program correctly drops capabilities. Is there something I can on on my machine to sort this out or I need to wait for an update? I can confirm that applying https://github.com/Irqbalance/irqbalance/commit/43751dfc7f29fbf2c46ffcd4fdb6d3f6db291927 does make irqbalance service succesfully start. Its because of an error in the service unit. It has CapabilityBoundingSet= but that should then be CapabilityBoundingSet=CAP_SETPCAP # /etc/systemd/system/irqbalance.service.d/override.conf [Service] CapabilityBoundingSet= CapabilityBoundingSet=CAP_SETPCAP That is not the only issue with this package though as: https://src.fedoraproject.org/rpms/irqbalance/blob/rawhide/f/irqbalance-1.6.0-env-file-path.patch Is not applied and so /etc/sysconfig/irqbalance is ignored. |