Hi @deajan
I have a quick question about how you run rrdcached: do you only connect to it via unix socket or also via tcp socket?
The reason i’m asking is that i was also having the same problems with rrdcached and your solution of creating SElinux module works, but only when i connect via unix socket.
I get a ‘rrdcached: listen(0:42217) failed: Permission denied’ for the tcp socket.
I’m running a distributed setup, so i need to connect to my rrdcached server via tcp…
My rrdcached.service is:
Description=Data caching daemon for rrdtool
After=network.service
[Service]
Type=forking
PIDFile=/run/rrdcached.pid
ExecStart=/usr/bin/rrdcached -l 0:42217 -l unix:/run/rrdcached.sock -w 1800 -z 1800 -f 3600 -s librenms -U librenms -G librenms -B -R -j /var/tmp -t 4 -F -b /opt/librenms/rrd/
[Install]
WantedBy=default.target
systemctl status rrdcached returns:
● rrdcached.service - Data caching daemon for rrdtool
Loaded: loaded (/etc/systemd/system/rrdcached.service; enabled; vendor preset: disabled)
Active: active (running) since Sat 2020-09-26 15:02:59 CEST; 37min ago
Process: 11829 ExecStart=/usr/bin/rrdcached -l 0:42217 -l unix:/run/rrdcached.sock -w 1800 -z 1800 -f 3600 -s librenms -U librenms -G librenms -B -R -j /var/tmp -t 4 -F -b /opt/librenms/rrd/ (code=>
Main PID: 11830 (rrdcached)
Tasks: 7 (limit: 11476)
Memory: 1.5M
CGroup: /system.slice/rrdcached.service
└─11830 /usr/bin/rrdcached -l 0:42217 -l unix:/run/rrdcached.sock -w 1800 -z 1800 -f 3600 -s librenms -U librenms -G librenms -B -R -j /var/tmp -t 4 -F -b /opt/librenms/rrd/
Sep 26 15:02:59 LibreNew.home systemd[1]: Stopped Data caching daemon for rrdtool.
Sep 26 15:02:59 LibreNew.home systemd[1]: Starting Data caching daemon for rrdtool...
Sep 26 15:02:59 LibreNew.home rrdcached[11829]: rrdcached: listen(0:42217) failed: Permission denied
Sep 26 15:02:59 LibreNew.home rrdcached[11829]: .
Sep 26 15:02:59 LibreNew.home systemd[1]: Started Data caching daemon for rrdtool.
Do you have any idea what this could be?
Maybe the rrdcached_librenms.te needs to include additional items for connecting over tcp?
Any hints are greatly appreciated.
Thanks,
JB