Hi all, did some tests now with Rsyslog which needed some entries in rsyslog.conf more then before but the old sysklogd format can nevertheless be used and the logging results are the same then sysklogd´s . Have build Rsyslog also in openssl-11 environment which looks good for the building process, a test on a machine without OpenSSL-1.1.0g looked like this:
-> /etc/init.d/rsyslog start Starting system logger... /usr/sbin/rsyslogd: error while loading shared libraries: libssl.so.1.1: cannot open shared object file: No such file or directory [ OK ]
which looks good. Started with a configuration file and an initscript whereby both are functional but this is a fast shot and there should be more possible.
Am 01.02.2018 um 16:16 schrieb Michael Tremer:
Hi,
On Thu, 2018-02-01 at 15:43 +0100, ummeegge wrote:
Hello,
Am 01.02.2018 um 12:37 schrieb Michael Tremer:
Hi,
nothing of that sounds too bad - except that it sounds a bit extortionate for just some syslogging.
Maybe it is worth trying it if can be built without json at least.
Have tried yesterday for fast checkout if it builds but the compilation quits causing a non existing libfastjson. Also the Rsyslog documentation points json-c as a requirement --> http://www.rsyslog.com/doc/master/installation/install_from_source.html#buil... out, not sure if can get around it . Some of the other listed libs at the bottom might not be a requirement but possibly a nice one to have even the logs should be send to a remote log server. Rsyslog do provides really a lot of extensions which might be worth for a look over...
I am not sure if we need any of the extensions since we are basically using the bare minimum at the moment - sysklogd cannot do much more. And so far nobody has really complained about this.
I think we need in a minimum 'imuxsock.so' and 'imklog.so' to get the same logging results then sysklod provides it. But there is more and it might be nice if someone jump into this here and complains more about possible extensions. It might also be possible to make a rsyslog-mysql or rsyslog-elasticsearch packet available via Pakfire ? But this only as an idea from here...
json-c is fine. Some other packages need this too and I am sure that I have built this before somewhere.
Yes i do remember that too ??
The rest: I think the rsyslogd people are doing this a bit wrong. It is quite an excessive amount of libraries and I do not get why some basic functionality like a syslog daemon needs that. But I guess we don't have any other choice here than packaging all of them.
Think so, lot´s of new packages event they aren´t that heavy weights but as mentioned some of them can possibly also be dropped but may they are also nice ones to have ? Possibly Peter can also take a look into that.
However, since we are on the topic of logging reliably, it might be interesting to have support for SSL in there.
This should be no problem i think. Rsyslog can be linked against libgcrypt, GnuTLS and OpenSSL. A build is currently running on a openssl-11 basis whereby i think OpenSSL should be preferred ?
OpenSSL should be preferred.
Yes.
Have you tried if the old configuration file works or does it come with a new configuration file format?
The new version 8.32 is in building process will check this if it is ready. On my first tries with Rsyslog which is no also 1+ year ago, i needed to make two changes on syslog.conf --> https://forum.ipfire.org/viewtopic.php?t=16669#p98481 and after that i renamed it to rsyslog.conf and everything worked just fine.
That sounds good. They have their own configuration file format for some modules stuff but since we don't intend to use any of that, we should be fine here.
Think so.
Would you update those packages and rebase the branch on next since you have already been working on this? Please send this over to Peter for review then and let him test the TCP logging capabilities since he was the one who required this in the first place.
No problem but i think it might be a little more then a review only since some more stuff needs to be checked especially for the config but also the initscript. Build it currently as packages (easier to install) 32bit are ready and a little tested am currently on a 64 bit build.
But let's only start working on this when the current OpenVPN stuff is done.
For an OK is it too late now :D but i won´t do much more on this since it works and i think this might be a good state to work further on it. Will push it to Git then ?
Greetings,
Erik