Hello Marco, I tested the settings with docker, and the following configuration worked for me. Created a test user/group on my *host* machine: $useradd -M -u 1500 marco Started a docker container: $docker run -it --network=host -v /tmp/marco:/tmp/marco balabit/syslog-ng-xenial bash Input: $cat marco_in.txt Hello World! Configuration: $cat marco.conf @version: 3.14 @include "scl.conf" source s_local { file( "/tmp/marco/marco_in.txt" flags(no-parse) ); }; destination d_logs { file( "/tmp/marco/marco_out.txt" owner(1500) group(1500) perm(0200) ); }; log { source(s_local); destination(d_logs); }; Running syslog-ng: root@tp:/tmp/marco# syslog-ng -Fdev -f marco.conf ls -hal on the host machine: --w------- 1 marco marco 32 márc 2 13:15 marco_out.txt Output on the *host*: $cat marco_out.txt cat: marco_out.txt: Permission denied Output on the *host*: $ sudo cat marco_out.txt Mar 2 12:15:01 tp Hello World! Note: I used the UID and the GID in the syslog-ng configuration file since there is no such user/group inside my docker container. I also tested a scenario where I use the username/groupname of the external user, but of course in this case I have to create them with the same ID inside my container. (If I remember correctly docker provides some basic mapping between external/internal users, but I am not sure about it.) Br, Laci On Thu, Mar 1, 2018 at 7:16 PM, Marco Mignone <info@marcomignone.com> wrote:
Hi all, Just to add on this topic, I noticed that when using the docker container all the files and folders gets a permission of root:root despite of what's in the global config options (I guess because the container by default starts with the root user).
Did you have any experience with this and do you know how to allow syslog-ng to set the users/groups as per the config options specified?
Thanks and sorry if this is slightly off topic... but not that much in effect.
Thanks, Marco
____________________________________________________________ __________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/? product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq