Page MenuHomePhabricator

Logrotate fails on mediawiki maintenance servers on jessie
Closed, ResolvedPublic

Description

The mediawiki maintenance host in codfw (wasat) is already running jessie, while at this point terbium in eqiad was running on trusty. Now that it's the active server, logrotate is failing like this:

/etc/cron.daily/logrotate:
error: skipping "/var/log/mediawiki/cirrus-sanitize/push-jobs.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.
error: skipping "/var/log/mediawiki/cirrus-suggest/aawikibooks.codfw.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.

This is due to new behaviour in the logrotate version in jessie, the same change also needed to be made for HHVM in T137689

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptApr 21 2017, 2:34 PM

Change 350131 had a related patch set uploaded (by Muehlenhoff):
[operations/puppet@production] Make generate-fancycaptcha logrotate config compatible with jessie

https://gerrit.wikimedia.org/r/350131

Change 350138 had a related patch set uploaded (by Muehlenhoff):
[operations/puppet@production] Make translationnotifications logrotate config compatible with jessie

https://gerrit.wikimedia.org/r/350138

Change 350149 had a related patch set uploaded (by Muehlenhoff):
[operations/puppet@production] Make wikidata logrotate config compatible with jessie

https://gerrit.wikimedia.org/r/350149

Change 350131 merged by Muehlenhoff:
[operations/puppet@production] Make generate-fancycaptcha logrotate config compatible with jessie

https://gerrit.wikimedia.org/r/350131

Change 350138 merged by Muehlenhoff:
[operations/puppet@production] Make translationnotifications logrotate config compatible with jessie

https://gerrit.wikimedia.org/r/350138

Change 350149 merged by Muehlenhoff:
[operations/puppet@production] Make wikidata logrotate config compatible with jessie

https://gerrit.wikimedia.org/r/350149

MoritzMuehlenhoff closed this task as Resolved.Apr 27 2017, 7:22 AM

This is fixed after merging the patches listed in this bug, last night's logrotate on wasat was free of errors.