Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

journalctl verify fails for directories whose files are created by systemd-journal-remote service. #1386

Open
sakellar opened this issue Sep 25, 2015 · 2 comments
Labels

Comments

@sakellar
Copy link

"journalctl --verify -D journalctl --verify -D /var/log/journal/somedirectory/" fails
in cases where inside /var/log/journal/somedirectory/ are log files created by systemd-journal-remote service.
error shown :
38f960: data object's entry array not sorted
File corruption detected at /var/log/journal/somedirectory//somefile.journal:000000 (of 8388608 bytes, 0%).

@sakellar sakellar changed the title journalctl verify fails for log files created by systemd-journal-remote service. journalctl verify fails for directories whose files are created by systemd-journal-remote service. Sep 25, 2015
@kihaloul
Copy link

Hello,

I reproduced this issue with two Fedora 22 VMs running on virtualbox.
systemd-journal-remote runs on one VM with the following command:

sudo ./systemd-journal-remote --listen-http=192.168.56.101:2000

and systemd-journal-upload on the other:

sudo ./systemd-journal-upload --url=http://192.168.56.101:2000 --save-state

systemd version is 219:
./systemctl --version
systemd 219
+PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT -GNUTLS +ACL +XZ -LZ4 +SECCOMP +BLKID +ELFUTILS -KMOD +IDN

And the file in /var/log/journal/remote is corrupted:
journalctl --verify -D /var/log/journal/remote/
38f960: data object's entry array not sorted
File corruption detected at /var/log/journal/remote//remote-fedora22.journal:000000 (of 8388608 bytes, 0%).
FAIL: /var/log/journal/remote//remote-fedora22.journal (Bad message)

No reboots or restarts of upload/remote have taken place. The corruption shows above could be seen both while journal-remote was running, and after it was stopped.
However, logs are received by the sender and read with journalctl, even though the journalctl --verify shows that the remote journal files are corrupted.

@canassa
Copy link

canassa commented Apr 5, 2017

I am also getting this error on Ubuntu 16.04

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Development

No branches or pull requests

4 participants