[SSSD] [PATCHES] Enable sending DEBUG logs to journald

Sumit Bose sbose at redhat.com
Tue Feb 4 10:33:19 UTC 2014


On Fri, Dec 20, 2013 at 05:05:56PM -0500, Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> All of these patches require Nikolai's "DEBUG Macro Refactoring v3"
> patches to be applied first.
> 
> 
> 
> 
> Patch 0001: Allow debug_fn to process __FILE__ and __LINE__
> 
> In preparation for enabling journald support for the DEBUG logs, we
> will need to be able to pass in certain additional arguments that will
> be required, specifically the code file and line number.
> 
> We will be able to optionally enable this in the file-based logs as well
> if we so choose, but for right now we will avoid breaking the log
> format on disk.
> 
> 
> Patch 0002: Enable sending structured debug logs to journald
> 
> We are now able to send structured debug logs to journald, tagged with
> the code file, line number and domain that the log pertains to. To
> enable this functionality, SSSD must be configured at build-time with
> - --with-syslog=journald and must be launched without -f/--debug-to-files
> 
> This behavior is nearly identical to how SSSD will function today on a
> systemd-based system if --debug-to-files is disabled, since it will
> redirect stdout and stderr into journald. This patch merely enhances
> the situation to send structured logs instead of simple string messages.
> 

I have to admit that I haven't look into much detail about what journald
is capable of. So there is a fair chance that the following can already
easily solved within journald.

On typical scenario when a user hits an issue is that we ask to increase
the debug level and collect the logs which are generated when
reproducing the issue. With structured logs it is easy to get the
specific logs out of journald but I wonder if we want to write
everything into journald in the first place and fill its storage with
one-time debug data?

I was thinking if we might want to introduce a new option which gives
some upper value for log levels which should go to journald. Then every
message up to this level will always go to journald. If the debug_level
is higher then this value debug files with all messages are created as
well. This way we still have all error message in the journal but keep
it free of debug messages.

An alternative, if journald supports it, would be to provide special
config options to instruct journald to store messages with a high
debug_level to a short term storage where they can easily be deleted
without removing other messages as well.

bye,
Sumit

> 
> Patch 0003: BUILD: Build with journald support by default on Fedora
> 
> The journal provided by systemd gives us structured logging
> capabilities that we should be taking advantage of.
> 
> Note: this patch explicitly does not change the systemd unit file for
> SSSD. Right now, an administrator will need to manually remove the
> '-f' from ExecStart in the unit file to send debug logs to journald. I
> suspect we'll want to discuss this before we make it the default. This
> patch DOES change the default for sss_log messages to use
> sd_journal_send() instead of straight log() for those messages that we
> traditionally sent to the syslog (such as login events). This is code
> that has been in place for some time now, but has not been the default
> because we hadn't build with --with-syslog=journald.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.15 (GNU/Linux)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
> 
> iEYEARECAAYFAlK0v0QACgkQeiVVYja6o6NwxgCfWnU4IbYyJPXxPe83zWjjsCHt
> cG8AnitRgM9CAUjHM2ofYg3TgcUxCyCC
> =Fara
> -----END PGP SIGNATURE-----



More information about the sssd-devel mailing list