Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 1952715 - libcap-ng used by "/usr/sbin/irqbalance" failed due to not having CAP_SETPCAP in capng_apply [NEEDINFO]
Summary: libcap-ng used by "/usr/sbin/irqbalance" failed due to not having CAP_SETPCAP...
Keywords:
Status: NEW
Alias: None
Product: Fedora
Classification: Fedora
Component: irqbalance
Version: 34
Hardware: All
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Neil Horman
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: ARMTracker
TreeView+ depends on / blocked
 
Reported: 2021-04-22 23:01 UTC by Jeremy Linton
Modified: 2021-06-30 12:45 UTC (History)
11 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Type: Bug
Embargoed:
dac.override: needinfo? (walters)

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 1924218 1 unspecified CLOSED libvirtd[4724]: libcap-ng used by "/usr/sbin/libvirtd" failed due to not having CAP_SETPCAP in capng_apply 2022-05-16 11:32:56 UTC
Red Hat Bugzilla 1940791 1 unspecified CLOSED libcap-ng used by "/usr/sbin/libvirtd" failed due to not having CAP_SETPCAP in capng_apply 2022-05-16 11:32:56 UTC

Internal Links: 1924218

Description Jeremy Linton 2021-04-22 23:01:58 UTC 
Description of problem: Clean install of the latest f34 development image on dl.fedoraproject.org via PXE to a rpi4 using the PFTF UEFI.

Threw the following errors after install:

Apr 05 19:00:12 fedora systemd[1]: Starting System Logging Service...
Apr 05 19:00:12 fedora systemd[1]: Starting Self Monitoring and Reporting Technology (SMART) Daemon...
Apr 05 19:00:12 fedora /usr/sbin/irqbalance[762]: IRQ vgic(9) guessed as class 0
Apr 05 19:00:12 fedora /usr/sbin/irqbalance[762]: IRQ arch_timer(10) guessed as class 0
Apr 05 19:00:12 fedora /usr/sbin/irqbalance[762]: IRQ vtimer(11) guessed as class 0
Apr 05 19:00:12 fedora /usr/sbin/irqbalance[762]: IRQ mmc0(24) guessed as class 0
Apr 05 19:00:12 fedora /usr/sbin/irqbalance[762]: IRQ xhci-hcd:usb1(27) guessed as class 0
Apr 05 19:00:12 fedora /usr/sbin/irqbalance[762]: IRQ arm-pmu(29) guessed as class 0
Apr 05 19:00:12 fedora /usr/sbin/irqbalance[762]: IRQ arm-pmu(30) guessed as class 0
Apr 05 19:00:12 fedora /usr/sbin/irqbalance[762]: IRQ arm-pmu(31) guessed as class 0
Apr 05 19:00:12 fedora /usr/sbin/irqbalance[762]: IRQ arm-pmu(32) guessed as class 0
Apr 05 19:00:12 fedora systemd[1]: Starting OpenSSH ecdsa Server Key Generation...
Apr 05 19:00:12 fedora /usr/sbin/irqbalance[762]: libcap-ng used by "/usr/sbin/irqbalance" failed due to not having CAP_SETPCAP in capng_apply
Apr 05 19:00:12 fedora systemd[1]: Starting OpenSSH ed25519 Server Key Generation...



Version-Release number of selected component (if applicable):

libcap-ng-0.8.2-4.fc34.aarch64
irqbalance-1.7.0-5.fc34.aarch64


How reproducible:


Steps to Reproduce:
1. Install f34 server to rpi4 using UEFI, with default options
2. Boot
3. journalctl

Actual results: From systemctl it looks like irqbalance is running.
[root@fedora ~]# systemctl status irqbalance.service
● irqbalance.service - irqbalance daemon
     Loaded: loaded (/usr/lib/systemd/system/irqbalance.service; enabled; vendor preset: enabled)
     Active: active (running) since Mon 2021-04-05 19:00:12 CDT; 2 weeks 2 days ago
       Docs: man:irqbalance(1)
             https://github.com/Irqbalance/irqbalance
   Main PID: 762 (irqbalance)
      Tasks: 2 (limit: 9222)
     Memory: 792.0K
        CPU: 501ms
     CGroup: /system.slice/irqbalance.service
             └─762 /usr/sbin/irqbalance --foreground




Expected results:


Additional info: There is a pretty similar sounding bug bz #1940791 for libvirtd
Comment 1 Jeremy Linton 2021-04-22 23:03:34 UTC 
Doesn't look like an aarch64 problem but including it on the arm tracker.
Comment 2 Timothée Ravier 2021-05-05 08:37:36 UTC 
From https://bugzilla.redhat.com/show_bug.cgi?id=1924218:

libcap-ng-0.8.2 does better error detection of some problems that were previously hidden. A patched version of libcap-ng is now emitting warnings when it sees a problem in the use of the API.

On a fresh Fedora CoreOS node, I get the following output in the journal:
```
/usr/sbin/irqbalance[965]: libcap-ng used by "/usr/sbin/irqbalance" failed due to not having CAP_SETPCAP in capng_apply
```

Version-Release number of selected component (if applicable):

irqbalance-1.7.0-5.fc34.x86_64

How reproducible:

Always
Comment 3 samoht0 2021-05-07 18:26:50 UTC 
As already noted, also x86_64 affected (here an old AMD E-450 APU).
Maybe severity should be bumped. Broken "irqbalance" looks bad.
Comment 4 samoht0 2021-05-07 20:24:42 UTC 
Upstream suggests a rebuild:
https://github.com/Irqbalance/irqbalance/issues/182
Comment 5 Steve Grubb 2021-05-11 19:05:31 UTC 
A rebuild won't fix it. This is because of NoNewPrivileges=yes in irqbalance.service. That line can be deleted since the program correctly drops capabilities.
Comment 6 Sorin Sbarnea 2021-05-15 17:08:36 UTC 
Is there something I can on on my machine to sort this out or I need to wait for an update?
Comment 7 Sorin Sbarnea 2021-05-16 09:55:51 UTC 
I can confirm that applying https://github.com/Irqbalance/irqbalance/commit/43751dfc7f29fbf2c46ffcd4fdb6d3f6db291927 does make irqbalance service succesfully start.
Comment 8 dac.override 2021-06-30 12:45:39 UTC 
Its because of an error in the service unit.

It has CapabilityBoundingSet= but that should then be CapabilityBoundingSet=CAP_SETPCAP

# /etc/systemd/system/irqbalance.service.d/override.conf
[Service]
CapabilityBoundingSet=
CapabilityBoundingSet=CAP_SETPCAP

That is not the only issue with this package though as:

https://src.fedoraproject.org/rpms/irqbalance/blob/rawhide/f/irqbalance-1.6.0-env-file-path.patch

Is not applied and so /etc/sysconfig/irqbalance is ignored.
Note You need to log in before you can comment on or make changes to this bug.