logrotate of vector-logs permission denied on log sink file #6633
Description
Description of problem
Setting a log sink, and then using logrotate, is resulting in "permission denied". Very curious to know if others can replicate this.
Despite the mount folder /var/log/dokku/apps/pbm being owned by default by dokku:dokku, the sink .log file is owned by default by root:root. My guess is that this is causing the logrotate issue when the user is switched to syslog dokku to execute the rotation. But I don't know if it's as seemingly simple as that.
Steps to reproduce
dokku logs:vector-start
dokku logs:set node-js-app vector-sink "file://?encoding[codec]=text&path=/var/log/dokku/apps/node-js-app/node-js-app.log"
logrotate /etc/logrotate.d/dokku --state /var/lib/logrotate/status --verbose
And in that /etc/logrotate.d/dokku file I set the path to include the app folder, since that's where the sink was. /var/log/dokku/apps/node-js-app/*.log
dokku report $APP_NAME
root@pbm-dokku:/var/log/dokku/apps/pbm# dokku report pbm
-----> uname: Linux pbm-dokku 5.15.0-89-generic #99-Ubuntu SMP Mon Oct 30 20:42:41 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
-----> memory:
total used free shared buff/cache available
Mem: 3912 1664 940 24 1306 1931
Swap: 0 0 0
-----> docker version:
Client: Docker Engine - Community
Version: 25.0.1
API version: 1.44
Go version: go1.21.6
Git commit: 29cf629
Built: Tue Jan 23 23:09:23 2024
OS/Arch: linux/amd64
Context: default
Server: Docker Engine - Community
Engine:
Version: 25.0.1
API version: 1.44 (minimum version 1.24)
Go version: go1.21.6
Git commit: 71fa3ab
Built: Tue Jan 23 23:09:23 2024
OS/Arch: linux/amd64
Experimental: false
containerd:
Version: 1.6.27
GitCommit: a1496014c916f9e62104b33d1bb5bd03b0858e59
runc:
Version: 1.1.11
GitCommit: v1.1.11-0-g4bccb38
docker-init:
Version: 0.19.0
GitCommit: de40ad0
-----> docker daemon info:
Client: Docker Engine - Community
Version: 25.0.1
Context: default
Debug Mode: true
Plugins:
buildx: Docker Buildx (Docker Inc.)
Version: v0.12.1
Path: /usr/libexec/docker/cli-plugins/docker-buildx
compose: Docker Compose (Docker Inc.)
Version: v2.24.2
Path: /usr/libexec/docker/cli-plugins/docker-compose
scan: Docker Scan (Docker Inc.)
Version: v0.23.0
Path: /usr/libexec/docker/cli-plugins/docker-scan
Server:
Containers: 10
Running: 5
Paused: 0
Stopped: 5
Images: 33
Server Version: 25.0.1
Storage Driver: overlay2
Backing Filesystem: extfs
Supports d_type: true
Using metacopy: false
Native Overlay Diff: true
userxattr: false
Logging Driver: json-file
Cgroup Driver: systemd
Cgroup Version: 2
Plugins:
Volume: local
Network: bridge host ipvlan macvlan null overlay
Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
Swarm: inactive
Runtimes: io.containerd.runc.v2 runc
Default Runtime: runc
Init Binary: docker-init
containerd version: a1496014c916f9e62104b33d1bb5bd03b0858e59
runc version: v1.1.11-0-g4bccb38
init version: de40ad0
Security Options:
apparmor
seccomp
Profile: builtin
cgroupns
Kernel Version: 5.15.0-89-generic
Operating System: Ubuntu 22.04.3 LTS
OSType: linux
Architecture: x86_64
CPUs: 2
Total Memory: 3.82GiB
Name: pbm-dokku
ID: PEEB:CHZO:EMP7:XJR5:2ZB7:QM5F:TPDW:PHRP:MO73:X7YR:V5PN:LJDA
Docker Root Dir: /var/lib/docker
Debug Mode: false
File Descriptors: 60
Goroutines: 79
System Time: 2024-02-25T20:35:50.673262742Z
EventsListeners: 2
Experimental: false
Insecure Registries:
127.0.0.0/8
Live Restore Enabled: true
-----> herokuish version:
herokuish: v0.7.3
buildpacks:
heroku-buildpack-multi v1.2.0
heroku-buildpack-ruby v265
heroku-buildpack-nodejs v235
heroku-buildpack-clojure v91
heroku-buildpack-python v242
heroku-buildpack-java v73
heroku-buildpack-gradle v39
heroku-buildpack-scala v96
heroku-buildpack-play v26
heroku-buildpack-php v244
heroku-buildpack-go v184
heroku-buildpack-nginx v25
buildpack-null v3
-----> dokku version: dokku version 0.33.3
-----> dokku-event-listener version: 0.15.0build+5268732
-----> dokku-update version: dokku-update 0.7.2
-----> docker-container-healthchecker version: 0.7.2
-----> docker-image-labeler version: 0.6.1build+c6e15a9
-----> git version: git version 2.34.1
-----> lambda-builder version: 0.5.0
-----> netrc version: 0.7.1build+677c033
! pack binary is not available
-----> plugn version: plugn: 0.13.0build+fd5297a
-----> sigil version: 0.10.1build+e443be0
-----> sshcommand version: sshcommand 0.17.1
-----> dokku plugins:
00_dokku-standard 0.33.3 enabled dokku core standard plugin
20_events 0.33.3 enabled dokku core events logging plugin
app-json 0.33.3 enabled dokku core app-json plugin
apps 0.33.3 enabled dokku core apps plugin
builder 0.33.3 enabled dokku core builder plugin
builder-dockerfile 0.33.3 enabled dokku core builder-dockerfile plugin
builder-herokuish 0.33.3 enabled dokku core builder-herokuish plugin
builder-lambda 0.33.3 enabled dokku core builder-lambda plugin
builder-nixpacks 0.33.3 enabled dokku core builder-nixpacks plugin
builder-null 0.33.3 enabled dokku core builder-null plugin
builder-pack 0.33.3 enabled dokku core builder-pack plugin
buildpacks 0.33.3 enabled dokku core buildpacks plugin
caddy-vhosts 0.33.3 enabled dokku core caddy-vhosts plugin
certs 0.33.3 enabled dokku core certificate management plugin
checks 0.33.3 enabled dokku core checks plugin
common 0.33.3 enabled dokku core common plugin
config 0.33.3 enabled dokku core config plugin
cron 0.33.3 enabled dokku core cron plugin
docker-options 0.33.3 enabled dokku core docker-options plugin
domains 0.33.3 enabled dokku core domains plugin
enter 0.33.3 enabled dokku core enter plugin
git 0.33.3 enabled dokku core git plugin
haproxy-vhosts 0.33.3 enabled dokku core haproxy-vhosts plugin
letsencrypt 0.20.3 enabled Automated installation of let's encrypt TLS certificates
logs 0.33.3 enabled dokku core logs plugin
memcached 1.35.4 enabled dokku memcached service plugin
network 0.33.3 enabled dokku core network plugin
nginx-vhosts 0.33.3 enabled dokku core nginx-vhosts plugin
openresty-vhosts 0.33.3 enabled dokku core openresty-vhosts plugin
plugin 0.33.3 enabled dokku core plugin plugin
ports 0.33.3 enabled dokku core ports plugin
postgres 1.36.3 enabled dokku postgres service plugin
proxy 0.33.3 enabled dokku core proxy plugin
ps 0.33.3 enabled dokku core ps plugin
registry 0.33.3 enabled dokku core registry plugin
repo 0.33.3 enabled dokku core repo plugin
resource 0.33.3 enabled dokku core resource plugin
run 0.33.3 enabled dokku core run plugin
scheduler 0.33.3 enabled dokku core scheduler plugin
scheduler-docker-local 0.33.3 enabled dokku core scheduler-docker-local plugin
scheduler-k3s 0.33.3 enabled dokku core scheduler-k3s plugin
scheduler-null 0.33.3 enabled dokku core scheduler-null plugin
shell 0.33.3 enabled dokku core shell plugin
ssh-keys 0.33.3 enabled dokku core ssh-keys plugin
storage 0.33.3 enabled dokku core storage plugin
trace 0.33.3 enabled dokku core trace plugin
traefik-vhosts 0.33.3 enabled dokku core traefik-vhosts plugin
=====> pbm app-json information
App json computed selected: app.json
App json global selected: app.json
App json selected:
=====> pbm app information
App created at: 1678162962
App deploy source: git-push
App deploy source metadata: 511dbd4c4381bd10b2a661604dedf3acc0722d1e
App dir: /home/dokku/pbm
App locked: false
=====> pbm builder information
Builder build dir:
Builder computed build dir:
Builder computed selected:
Builder global build dir:
Builder global selected:
Builder selected:
=====> pbm builder-dockerfile information
Builder dockerfile computed dockerfile path: Dockerfile
Builder dockerfile global dockerfile path: Dockerfile
Builder dockerfile dockerfile path:
=====> pbm builder-herokuish information
Builder herokuish computed allowed: true
Builder herokuish global allowed: true
Builder herokuish allowed:
=====> pbm builder-lambda information
Builder lambda computed lambdayml path: lambda.yml
Builder lambda global lambdayml path: lambda.yml
Builder lambda lambdayml path:
=====> pbm builder-nixpacks information
Builder nixpacks computed nixpackstoml path: nixpacks.toml
Builder nixpacks global nixpackstoml path: nixpacks.toml
Builder nixpacks nixpackstoml path:
Builder nixpacks computed no cache: false
Builder nixpacks global no cache: false
Builder nixpacks no cache:
=====> pbm builder-pack information
Builder pack computed projecttoml path: project.toml
Builder pack global projecttoml path: project.toml
Builder pack projecttoml path:
=====> pbm buildpacks information
Buildpacks computed stack: gliderlabs/herokuish:latest-22
Buildpacks global stack:
Buildpacks list: https://github.com/heroku/heroku-buildpack-ruby.git
Buildpacks stack:
=====> pbm caddy information
Caddy image: lucaslorentz/caddy-docker-proxy:2.8
Caddy letsencrypt email:
Caddy letsencrypt server: https://acme-v02.api.letsencrypt.org/directory
Caddy log level: ERROR
Caddy polling interval: 5s
Caddy tls internal: false
=====> pbm ssl information
Ssl dir: /home/dokku/pbm/tls
Ssl enabled: true
Ssl hostnames: pinballmap.com www.pinballmap.com
Ssl expires at: May 19 23:00:15 2024 GMT
Ssl issuer: C = US, O = Let's Encrypt, CN = R3
Ssl starts at: Feb 19 23:00:16 2024 GMT
Ssl subject: subject=CN = pinballmap.com
Ssl verified: verified by a certificate authority
=====> pbm checks information
Checks disabled list: none
Checks skipped list: none
Checks computed wait to retire: 60
Checks global wait to retire: 60
Checks wait to retire:
=====> pbm docker options information
Docker options build: --link dokku.memcached.pbm-memcached:dokku-memcached-pbm-memcached
Docker options deploy: --link dokku.memcached.pbm-memcached:dokku-memcached-pbm-memcached --restart=on-failure:10
Docker options run: --link dokku.memcached.pbm-memcached:dokku-memcached-pbm-memcached
=====> pbm domains information
Domains app enabled: true
Domains app vhosts: pinballmap.com www.pinballmap.com
Domains global enabled: false
Domains global vhosts:
=====> pbm git information
Git deploy branch: master
Git global deploy branch: master
Git keep git dir: false
Git rev env var: GIT_REV
Git sha: 511dbd4c
Git source image:
Git last updated at: 1708549329
=====> pbm haproxy information
Haproxy image: byjg/easy-haproxy:4.3.0
Haproxy letsencrypt email:
Haproxy letsencrypt server: https://acme-v02.api.letsencrypt.org/directory
Haproxy log level: ERROR
=====> pbm letsencrypt information
Letsencrypt active: true
Letsencrypt autorenew: true
Letsencrypt computed dns provider:
Letsencrypt global dns provider:
Letsencrypt dns provider:
Letsencrypt computed email: gratzer@fastmail.com
Letsencrypt global email:
Letsencrypt email: gratzer@fastmail.com
Letsencrypt expiration: 1716159615
Letsencrypt computed graceperiod: 2592000
Letsencrypt global graceperiod:
Letsencrypt graceperiod:
Letsencrypt computed lego docker args:
Letsencrypt global lego docker args:
Letsencrypt lego docker args:
Letsencrypt computed server: https://acme-v02.api.letsencrypt.org/directory
Letsencrypt global server:
Letsencrypt server:
=====> pbm logs information
Logs computed max size: 10m
Logs global max size: 10m
Logs global vector sink:
Logs max size:
Logs vector global image: timberio/vector:0.35.X-debian
Logs vector sink: file://?encoding[codec]=text&path=/var/log/dokku/apps/pbm/pbm.log
=====> pbm network information
Network attach post create:
Network attach post deploy:
Network bind all interfaces: false
Network computed attach post create:
Network computed attach post deploy:
Network computed bind all interfaces: false
Network computed initial network:
Network computed tld:
Network global attach post create:
Network global attach post deploy:
Network global bind all interfaces: false
Network global initial network:
Network global tld:
Network initial network:
Network static web listener:
Network tld:
Network web listeners: 172.17.0.5:5000
=====> pbm nginx information
Nginx access log format:
Nginx access log path: /var/log/nginx/pbm-access.log
Nginx bind address ipv4:
Nginx bind address ipv6: ::
Nginx client max body size: 12m
Nginx disable custom config: false
Nginx error log path: /var/log/nginx/pbm-error.log
Nginx global hsts: true
Nginx computed hsts: true
Nginx hsts:
Nginx hsts include subdomains: true
Nginx hsts max age: 15724800
Nginx hsts preload: false
Nginx computed nginx conf sigil path: nginx.conf.sigil
Nginx global nginx conf sigil path: nginx.conf.sigil
Nginx nginx conf sigil path:
Nginx proxy buffer size: 30720
Nginx proxy buffering: on
Nginx proxy buffers: 4 30720
Nginx proxy busy buffers size: 61440
Nginx proxy read timeout: 60s
Nginx last visited at: 1708893353
Nginx x forwarded for value: $remote_addr
Nginx x forwarded port value: $server_port
Nginx x forwarded proto value: $scheme
Nginx x forwarded ssl:
=====> pbm openresty information
Openresty access log format:
Openresty access log path: /var/log/nginx/pbm-access.log
Openresty bind address ipv4:
Openresty bind address ipv6: ::
Openresty client max body size:
Openresty error log path: /var/log/nginx/pbm-error.log
Openresty global hsts: true
Openresty computed hsts: true
Openresty hsts:
Openresty hsts include subdomains: true
Openresty hsts max age: 15724800
Openresty hsts preload: false
Openresty image: dokku/openresty-docker-proxy:0.6.0
Openresty letsencrypt email:
Openresty letsencrypt server: https://acme-v02.api.letsencrypt.org/directory
Openresty proxy buffer size: 4096
Openresty proxy buffering: on
Openresty proxy buffers: 8 4096
Openresty proxy busy buffers size: 8192
Openresty proxy read timeout: 60s
Openresty x forwarded for value: $remote_addr
Openresty x forwarded port value: $server_port
Openresty x forwarded proto value: $scheme
Openresty x forwarded ssl:
=====> pbm ports information
Ports map: http:80:5000 https:443:5000
Ports map detected: http:80:5000 https:443:5000
=====> pbm proxy information
Proxy computed type: nginx
Proxy enabled: true
Proxy global type: nginx
Proxy type:
=====> pbm ps information
Deployed: true
Processes: 1
Ps can scale: true
Ps computed procfile path: Procfile
Ps global procfile path: Procfile
Ps procfile path:
Ps restart policy: on-failure:10
Restore: true
Running: true
Status web 1: running (CID: 30283e5b950)
=====> pbm registry information
Registry computed image repo: dokku/pbm
Registry computed push on release: false
Registry computed server:
Registry global image repo template:
Registry global push on release:
Registry global server:
Registry image repo:
Registry push on release:
Registry server:
Registry tag version:
=====> pbm resource information
=====> pbm scheduler information
Scheduler computed selected: docker-local
Scheduler global selected: docker-local
Scheduler selected:
=====> pbm scheduler-docker-local information
Scheduler docker local disable chown:
Scheduler docker local init process: true
Scheduler docker local parallel schedule count:
=====> pbm scheduler-k3s information
Scheduler k3s computed deploy timeout: 300s
Scheduler k3s computed image pull secrets:
Scheduler k3s computed letsencrypt server: prod
Scheduler k3s computed namespace: default
Scheduler k3s computed rollback on failure: false
Scheduler k3s deploy timeout:
Scheduler k3s global deploy timeout: 300s
Scheduler k3s global image pull secrets:
Scheduler k3s global letsencrypt email prod:
Scheduler k3s global letsencrypt email stag:
Scheduler k3s global letsencrypt server: prod
Scheduler k3s global namespace: default
Scheduler k3s global network interface: eth0
Scheduler k3s global rollback on failure: false
Scheduler k3s image pull secrets:
Scheduler k3s letsencrypt server:
Scheduler k3s namespace:
Scheduler k3s rollback on failure:
=====> pbm storage information
Storage build mounts:
Storage deploy mounts:
Storage run mounts:
=====> pbm traefik information
Traefik api enabled: false
Traefik api vhost: traefik.dokku.me
Traefik basic auth password:
Traefik basic auth username:
Traefik dashboard enabled: false
Traefik image: traefik:v2.10
Traefik letsencrypt email:
Traefik letsencrypt server: https://acme-v02.api.letsencrypt.org/directory
Traefik log level: ERROR
Traefik priority:
Additional information
root@pbm-dokku:/var/log/dokku/apps/pbm# dokku ps:inspect pbm
[
{
"AppArmorProfile": "docker-default",
"Args": [
"web"
],
"Config": {
"AttachStderr": true,
"AttachStdin": false,
"AttachStdout": true,
"Cmd": [
"/start",
"web"
],
"Domainname": "",
"Entrypoint": null,
"Env": [
"USER=herokuishuser",
"AWS_REGION=XXXXXX",
"DATABASE_URL=XXXXXX",
"DOKKU_PROXY_PORT=80",
"MAPBOX_API_KEY=XXXXXX",
"MAPBOX_GEOCODE_API_KEY=XXXXXX",
"PORT=5000",
"DOKKU_APP_TYPE=herokuish",
"MEMCACHED_URL=XXXXXX",
"S3_BUCKET_NAME=XXXXXX",
"SCOUT_KEY=XXXXXX",
"TZ=XXXXXX",
"AWS_ACCESS_KEY_ID=XXXXXX",
"AWS_SECRET_ACCESS_KEY=XXXXXX",
"IFPA_API_KEY=XXXXXX",
"RAILS_MASTER_KEY=XXXXXX",
"CURL_TIMEOUT=XXXXXX",
"LANG=XXXXXX",
"OPDB_KEY=XXXXXX",
"RACK_ENV=XXXXXX",
"RAKISMET_KEY=XXXXXX",
"SCOUT_MONITOR=XXXXXX",
"SENDGRID_API_KEY=XXXXXX",
"MEMCACHE_SERVERS=XXXXXX",
"GIT_REV=XXXXXX",
"GOOGLE_MAPS_API_KEY=XXXXXX",
"SCOUT_LOG_LEVEL=XXXXXX",
"CURL_CONNECT_TIMEOUT=XXXXXX",
"DOKKU_APP_RESTORE=1",
"RAILS_ENV=XXXXXX",
"RAILS_MAX_THREADS=XXXXXX",
"DYNO=web.1",
"DOKKU_PROXY_SSL_PORT=443",
"WEB_CONCURRENCY=XXXXXX",
"CACHE_PATH=/cache",
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
"STACK=XXXXXX",
"DEBIAN_FRONTEND=XXXXXX"
],
"Hostname": "30283e5b9507",
"Image": "dokku/pbm:latest",
"Labels": {
"com.dokku.app-name": "pbm",
"com.dokku.builder-type": "herokuish",
"com.dokku.container-type": "deploy",
"com.dokku.dyno": "web.1",
"com.dokku.image-stage": "release",
"com.dokku.process-type": "web",
"com.gliderlabs.herokuish/stack": "heroku-22",
"dokku": "",
"openresty.access-log-path": "/var/log/nginx/pbm-access.log",
"openresty.bind-address-ipv6": "::",
"openresty.domains": "pinballmap.com www.pinballmap.com",
"openresty.error-log-path": "/var/log/nginx/pbm-error.log",
"openresty.hsts": "true",
"openresty.hsts-include-subdomains": "true",
"openresty.hsts-max-age": "15724800",
"openresty.hsts-preload": "false",
"openresty.https-port": "443",
"openresty.letsencrypt": "false",
"openresty.port-mapping": "http:80:5000 https:443:5000",
"openresty.proxy-buffer-size": "4096",
"openresty.proxy-buffering": "on",
"openresty.proxy-buffers": "8 4096",
"openresty.proxy-busy-buffer-size": "8192",
"openresty.proxy-connect-timeout": "60s",
"openresty.proxy-read-timeout": "60s",
"openresty.proxy-send-timeout": "60s",
"openresty.send-timeout": "60s",
"openresty.x-forwarded-for-value": "$remote_addr",
"openresty.x-forwarded-port-value": "$server_port",
"openresty.x-forwarded-proto-value": "$scheme",
"org.label-schema.schema-version": "1.0",
"org.label-schema.vendor": "dokku",
"org.opencontainers.image.ref.name": "ubuntu",
"org.opencontainers.image.version": "22.04"
},
"OnBuild": null,
"OpenStdin": false,
"StdinOnce": false,
"Tty": false,
"User": "",
"Volumes": null,
"WorkingDir": ""
},
"Created": "2024-02-21T21:01:42.799867758Z",
"Driver": "overlay2",
"ExecIDs": null,
"GraphDriver": {
"Data": {
"LowerDir": "/var/lib/docker/overlay2/cec08c9126382f830dba59af50e74224d69378e24faeaa961fa11249f93cc0ac-init/diff:/var/lib/docker/overlay2/zc89sary38aatu2oc451swojh/diff:/var/lib/docker/overlay2/026841ea12cf2ec7fbc3ca4b55df7fd1b0e9ce00efbf3c946cd0e0ece0e9b7f9/diff:/var/lib/docker/overlay2/gwgixsopexdb497kmab2x4ov6/diff:/var/lib/docker/overlay2/law4u33s32w86gux6oj3o03jk/diff:/var/lib/docker/overlay2/539b042bbd4b8a634605275a2bd90d57855b6af9f75efa4a13fe3095fe64dacb/diff:/var/lib/docker/overlay2/b7d2213190d04d4837ec03352876a6f03542c6d6b2b82ed3beed6ab25195c080/diff:/var/lib/docker/overlay2/3e98b9ee2aaaabe4ea9ec2982abef5dda764a34adc6367250f03bedbcdca7a2b/diff:/var/lib/docker/overlay2/6462eef4faaa3aa5b70f6259ffc005f65afe7adfa3886d05c737b80e7e90aac4/diff:/var/lib/docker/overlay2/ad77c55492b159e2f7a30eb3af50cea9dea7b1e3959ce1a459295908f1b80e80/diff:/var/lib/docker/overlay2/43498dc29465e082d5ab676384507090a2cb05ff08caf32fc9b6af1105c9a218/diff:/var/lib/docker/overlay2/57b9a64020dedfcd0f81b0d9812fc508611efadfd479235c33cfce5f43b8b16b/diff:/var/lib/docker/overlay2/dcb66ea66cdebb75f79ca3a3863497a30578b2538875cd19155ac78e85b9a53a/diff:/var/lib/docker/overlay2/585ac10dbc93ce060bf37e589ce6aa03f54644b1336871b80f75c986027837e6/diff:/var/lib/docker/overlay2/b0c3c07fc5b428ca234eb1294b588b0a92c9183bbec35a0ba990c10b52ba6255/diff:/var/lib/docker/overlay2/d056b6f7d57f38f96dfc97ede3ad4b263a031ef378a4ec1791c246ebd1417822/diff",
"MergedDir": "/var/lib/docker/overlay2/cec08c9126382f830dba59af50e74224d69378e24faeaa961fa11249f93cc0ac/merged",
"UpperDir": "/var/lib/docker/overlay2/cec08c9126382f830dba59af50e74224d69378e24faeaa961fa11249f93cc0ac/diff",
"WorkDir": "/var/lib/docker/overlay2/cec08c9126382f830dba59af50e74224d69378e24faeaa961fa11249f93cc0ac/work"
},
"Name": "overlay2"
},
"HostConfig": {
"AutoRemove": false,
"Binds": null,
"BlkioDeviceReadBps": [],
"BlkioDeviceReadIOps": [],
"BlkioDeviceWriteBps": [],
"BlkioDeviceWriteIOps": [],
"BlkioWeight": 0,
"BlkioWeightDevice": [],
"CapAdd": null,
"CapDrop": null,
"Cgroup": "",
"CgroupParent": "",
"CgroupnsMode": "private",
"ConsoleSize": [
0,
0
],
"ContainerIDFile": "",
"CpuCount": 0,
"CpuPercent": 0,
"CpuPeriod": 0,
"CpuQuota": 0,
"CpuRealtimePeriod": 0,
"CpuRealtimeRuntime": 0,
"CpuShares": 0,
"CpusetCpus": "",
"CpusetMems": "",
"DeviceCgroupRules": null,
"DeviceRequests": null,
"Devices": [],
"Dns": [],
"DnsOptions": [],
"DnsSearch": [],
"ExtraHosts": null,
"GroupAdd": null,
"IOMaximumBandwidth": 0,
"IOMaximumIOps": 0,
"Init": true,
"IpcMode": "private",
"Isolation": "",
"Links": [
"/dokku.memcached.pbm-memcached:/pbm.web.1/dokku-memcached-pbm-memcached"
],
"LogConfig": {
"Config": {
"max-size": "10m"
},
"Type": "json-file"
},
"MaskedPaths": [
"/proc/asound",
"/proc/acpi",
"/proc/kcore",
"/proc/keys",
"/proc/latency_stats",
"/proc/timer_list",
"/proc/timer_stats",
"/proc/sched_debug",
"/proc/scsi",
"/sys/firmware",
"/sys/devices/virtual/powercap"
],
"Memory": 0,
"MemoryReservation": 0,
"MemorySwap": 0,
"MemorySwappiness": null,
"NanoCpus": 0,
"NetworkMode": "default",
"OomKillDisable": null,
"OomScoreAdj": 0,
"PidMode": "",
"PidsLimit": null,
"PortBindings": {},
"Privileged": false,
"PublishAllPorts": false,
"ReadonlyPaths": [
"/proc/bus",
"/proc/fs",
"/proc/irq",
"/proc/sys",
"/proc/sysrq-trigger"
],
"ReadonlyRootfs": false,
"RestartPolicy": {
"MaximumRetryCount": 10,
"Name": "on-failure"
},
"Runtime": "runc",
"SecurityOpt": null,
"ShmSize": 67108864,
"UTSMode": "",
"Ulimits": [],
"UsernsMode": "",
"VolumeDriver": "",
"VolumesFrom": null
},
"HostnamePath": "/var/lib/docker/containers/30283e5b95076e8b29bfb63f8a4ff6802c0bd706799660f8ee2c1a2f974663c1/hostname",
"HostsPath": "/var/lib/docker/containers/30283e5b95076e8b29bfb63f8a4ff6802c0bd706799660f8ee2c1a2f974663c1/hosts",
"Id": "30283e5b95076e8b29bfb63f8a4ff6802c0bd706799660f8ee2c1a2f974663c1",
"Image": "sha256:24dd9488868eb1b6ee97a3f398f445a8d2cae88f3c88d32070d77f2cc059a18c",
"LogPath": "/var/lib/docker/containers/30283e5b95076e8b29bfb63f8a4ff6802c0bd706799660f8ee2c1a2f974663c1/30283e5b95076e8b29bfb63f8a4ff6802c0bd706799660f8ee2c1a2f974663c1-json.log",
"MountLabel": "",
"Mounts": [],
"Name": "/pbm.web.1",
"NetworkSettings": {
"Bridge": "",
"EndpointID": "b6a37593fcba3e44feb6f04a393e9cdca362c2c4fe65fc57cafe9be2d9ea88da",
"Gateway": "172.17.0.1",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"HairpinMode": false,
"IPAddress": "172.17.0.5",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"LinkLocalIPv6Address": "",
"LinkLocalIPv6PrefixLen": 0,
"MacAddress": "02:42:ac:11:00:05",
"Networks": {
"bridge": {
"Aliases": null,
"DNSNames": [
"pbm.web.1",
"30283e5b9507"
],
"DriverOpts": null,
"EndpointID": "b6a37593fcba3e44feb6f04a393e9cdca362c2c4fe65fc57cafe9be2d9ea88da",
"Gateway": "172.17.0.1",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"IPAMConfig": null,
"IPAddress": "172.17.0.5",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"Links": null,
"MacAddress": "02:42:ac:11:00:05",
"NetworkID": "27d57643cfce7496f070be9a3390cbd4a20e01aee91bb1f3cbd10c6812829fc6"
}
},
"Ports": {},
"SandboxID": "8c7da592afcf015471c7fec43c170f08aa3fdeb75ae48d906d47a42571eef212",
"SandboxKey": "/var/run/docker/netns/8c7da592afcf",
"SecondaryIPAddresses": null,
"SecondaryIPv6Addresses": null
},
"Path": "/start",
"Platform": "linux",
"ProcessLabel": "",
"ResolvConfPath": "/var/lib/docker/containers/30283e5b95076e8b29bfb63f8a4ff6802c0bd706799660f8ee2c1a2f974663c1/resolv.conf",
"RestartCount": 0,
"State": {
"Dead": false,
"Error": "",
"ExitCode": 0,
"FinishedAt": "0001-01-01T00:00:00Z",
"OOMKilled": false,
"Paused": false,
"Pid": 996703,
"Restarting": false,
"Running": true,
"StartedAt": "2024-02-21T21:01:43.215380001Z",
"Status": "running"
}
}
]
Output of failing commands after running: dokku trace:off
Error at the bottom of the following output.
@pbm-dokku:/var/log/dokku/apps/pbm# logrotate -fv /etc/logrotate.d/dokku
reading config file /etc/logrotate.d/dokku
Reading state from file: /var/lib/logrotate/status
Allocating hash table for state file, size 64 entries
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Creating new state
Handling 1 logs
rotating pattern: /var/log/dokku/apps/pbm/*.log forced from command line (7 rotations)
empty log files are not rotated, old logs are removed
switching euid from 0 to 104 and egid from 0 to 1000 (pid 1251670)
considering log /var/log/dokku/apps/pbm/pbm.log
Now: 2024-02-22 20:11
Last rotated at 2024-02-22 20:07
log needs rotating
rotating log /var/log/dokku/apps/pbm/pbm.log, log->rotateCount is 7
dateext suffix '-20240222'
glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]'
previous log /var/log/dokku/apps/pbm/pbm.log.1 does not exist
renaming /var/log/dokku/apps/pbm/pbm.log.7.gz to /var/log/dokku/apps/pbm/pbm.log.8.gz (rotatecount 7, logstart 1, i 7),
old log /var/log/dokku/apps/pbm/pbm.log.7.gz does not exist
renaming /var/log/dokku/apps/pbm/pbm.log.6.gz to /var/log/dokku/apps/pbm/pbm.log.7.gz (rotatecount 7, logstart 1, i 6),
old log /var/log/dokku/apps/pbm/pbm.log.6.gz does not exist
renaming /var/log/dokku/apps/pbm/pbm.log.5.gz to /var/log/dokku/apps/pbm/pbm.log.6.gz (rotatecount 7, logstart 1, i 5),
old log /var/log/dokku/apps/pbm/pbm.log.5.gz does not exist
renaming /var/log/dokku/apps/pbm/pbm.log.4.gz to /var/log/dokku/apps/pbm/pbm.log.5.gz (rotatecount 7, logstart 1, i 4),
old log /var/log/dokku/apps/pbm/pbm.log.4.gz does not exist
renaming /var/log/dokku/apps/pbm/pbm.log.3.gz to /var/log/dokku/apps/pbm/pbm.log.4.gz (rotatecount 7, logstart 1, i 3),
old log /var/log/dokku/apps/pbm/pbm.log.3.gz does not exist
renaming /var/log/dokku/apps/pbm/pbm.log.2.gz to /var/log/dokku/apps/pbm/pbm.log.3.gz (rotatecount 7, logstart 1, i 2),
old log /var/log/dokku/apps/pbm/pbm.log.2.gz does not exist
renaming /var/log/dokku/apps/pbm/pbm.log.1.gz to /var/log/dokku/apps/pbm/pbm.log.2.gz (rotatecount 7, logstart 1, i 1),
old log /var/log/dokku/apps/pbm/pbm.log.1.gz does not exist
renaming /var/log/dokku/apps/pbm/pbm.log.0.gz to /var/log/dokku/apps/pbm/pbm.log.1.gz (rotatecount 7, logstart 1, i 0),
old log /var/log/dokku/apps/pbm/pbm.log.0.gz does not exist
log /var/log/dokku/apps/pbm/pbm.log.8.gz doesn't exist -- won't try to dispose of it
renaming /var/log/dokku/apps/pbm/pbm.log to /var/log/dokku/apps/pbm/pbm.log.1
error: failed to rename /var/log/dokku/apps/pbm/pbm.log to /var/log/dokku/apps/pbm/pbm.log.1: Permission denied
switching euid from 104 to 0 and egid from 1000 to 0 (pid 1251670)Output of failing commands after running: dokku trace:on
No response