Hello, This message is not an issue you must address, syslog-ng by default opt in using linux capabilities, but it cannot always use them (do not have the capability to set capabilities). Depending on that you want to use capibilities or not, you can disable the default behavior of syslog-ng by providing a command line option syslog-ng ... --no-caps If you wish to use the capabilities, you also have to adjust docker/kubernetes for enabling those capabilities. Both docker, kubernetes and syslog-ng administrator guide is a good starting point. Note: This error message won't prevent syslog-ng from running and working as long as it does not really require those extra permissions. If it requires, in those case you likely see other error messages about permission issues. -- Kokan On Mon, Sep 21, 2020 at 10:07:02PM +0000, Allen Olivas wrote:
CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.
Hello all,
I've been working on a containerized and orchestrated environment for a little while now (learning how it all works and slowly implementing it). One step I need to add is Syslog-NG.
I"ve copied down the Syslog-NG Docker files and attempted adding these to a deployment in Kubernetes. Syslog-NG appears to be running successfully in Docker but in Kubernetes the logs I get say:
syslog-ng: Error setting capabilities, capability management disabled; error='Operation not permitted'
I'm not entirely sure where to turn too from this point. I've looked online for any ideas or resolution to this issue but so far non seem to work for my use case. I figured maybe someone on the mailing list might have an Idea? Specifically I'm trying to find out what that error means, and how best to orchestrate a containerized Syslog-NG.
Thanks!
______________________________________________________________________________ Member info: https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2Flistinfo%2Fsyslog-ng&data=02%7C01%7CPeter.Kokai%40oneidentity.com%7Ce9627d9a14da4d7e171b08d85e7ab0d0%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637363228333112330&sdata=1O1cKI6cL7s5sOToVfLe6gSmQ%2FEERthGASuJOQtRQp0%3D&reserved=0 Documentation: https://nam05.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fsupport%2Fdocumentation%2F%3Fproduct%3Dsyslog-ng&data=02%7C01%7CPeter.Kokai%40oneidentity.com%7Ce9627d9a14da4d7e171b08d85e7ab0d0%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637363228333112330&sdata=UPLd46Yo%2FXURqnip%2F0vG7hRG7QDzemuypJmz2lHQ6nQ%3D&reserved=0 FAQ: https://nam05.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fwiki%2Fsyslog-ng-faq&data=02%7C01%7CPeter.Kokai%40oneidentity.com%7Ce9627d9a14da4d7e171b08d85e7ab0d0%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637363228333112330&sdata=PqDmrKllxLjwSCJIt3p%2BE8sQYk9nQonRvYosBifiI3c%3D&reserved=0