Hello Marco,

I tested the settings with docker, and the following configuration worked for me.

Created a test user/group on my host machine:

$useradd -M -u 1500 marco

Started a docker container:

$docker run -it --network=host -v /tmp/marco:/tmp/marco balabit/syslog-ng-xenial bash

Input:

$cat marco_in.txt
Hello World!

Configuration:

$cat marco.conf
@version: 3.14

@include "scl.conf"

source s_local {
file(
"/tmp/marco/marco_in.txt"
flags(no-parse)
);
};

destination d_logs {
file(
"/tmp/marco/marco_out.txt"
owner(1500)
group(1500)
perm(0200)
);
};

log {
source(s_local);
destination(d_logs);
};

Running syslog-ng:

root@tp:/tmp/marco# syslog-ng -Fdev -f marco.conf

ls -hal on the host machine:

--w------- 1 marco marco 32 márc 2 13:15 marco_out.txt

Output on the host:

$cat marco_out.txt
cat: marco_out.txt: Permission denied

Output on the host:

$ sudo cat marco_out.txt
Mar 2 12:15:01 tp Hello World!

Note:

I used the UID and the GID in the syslog-ng configuration file since there is no such user/group inside my

docker container. I also tested a scenario where I use the username/groupname of the external user, but

of course in this case I have to create them with the same ID inside my container. (If I remember correctly

docker provides some basic mapping between external/internal users, but I am not sure about it.)

Br,

Laci

On Thu, Mar 1, 2018 at 7:16 PM, Marco Mignone <info@marcomignone.com> wrote:

Hi all,
Just to add on this topic, I noticed that when using the docker container all the files and folders gets a permission of root:root despite of what's in the global config options (I guess because the container by default starts with the root user).

Did you have any experience with this and do you know how to allow syslog-ng to set the users/groups as per the config options specified?

Thanks and sorry if this is slightly off topic... but not that much in effect.

Thanks,
Marco

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq