[From nobody Fri Apr 3 05:33:06 2026 Received: (at 1132557-done) by bugs.debian.org; 3 Apr 2026 04:30:14 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-6.9 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,HAS_BUG_NUMBER, RCVD_IN_DNSWL_LOW,RCVD_IN_MSPIKE_H5,RCVD_IN_MSPIKE_WL, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED, RCVD_IN_VALIDITY_SAFE_BLOCKED,SPF_HELO_PASS,SPF_PASS autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 37; hammy, 150; neutral, 118; spammy, 0. spammytokens: hammytokens:0.000-+--systemctl, 0.000-+--tmpfs, 0.000-+--H*F:U*sebastic, 0.000-+--H*rp:U*sebastic, 0.000-+--H*Ad:U*sebastic Return-path: <sebastic@xs4all.nl> Received: from ewsoutbound.kpnmail.nl ([195.121.94.186]:35749) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <sebastic@xs4all.nl>) id 1w8WAf-0096Sm-1S for 1132557-done@bugs.debian.org; Fri, 03 Apr 2026 04:30:14 +0000 X-KPN-MessageId: cc274b93-2f15-11f1-89dd-00505699b430 Received: from smtp.kpnmail.nl (unknown [10.31.155.5]) by ewsoutbound.so.kpn.org (Halon) with ESMTPS id cc274b93-2f15-11f1-89dd-00505699b430; Fri, 03 Apr 2026 06:30:09 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=xs4all.nl; s=xs4all01; h=content-type:from:to:subject:mime-version:date:message-id; bh=nKLLNcQOOw5B1XYzd6s0sLG+siAHI1En7hHd3cN1zkc=; b=QNyyqY/Wl5z77tjBislrWGHlRCOd8Wh/Zjp8aEISshq31vXXYmMgdTAFDMYIEYvheKaPjPaEnphqZ 5ZEglZbov3oIE4h47CKt+hgcoxz7ZLh/IlFCjYbOf6vte17QR4No+jz6VU6ygQmmNyYzs4sNtjD9dv 895wT7U2nFiQ6AdmYkghuDzUWll6aKRfuq0X9LgoisO6lWCB16YDM2SzrqOb3bZjTQs+4AUrsaN+Wq YSJDm+JyaT6vsIwzLozheNpDW21FNMg/TWBYQZqFKbZczQenK66iWeZxseeGsTy1V0JXX48XpabRQg 373mtt8iIZXfE6ShaQQ6PB4yXPP+eXg== X-KPN-MID: 33|zAAlqzvo2abe2gCYOQWxtWQGmTlCSUbvo5iraP8YECbQ3Q55+Wzwen4ZDVPrmS9 uZ+8xf3G1aYlXTLuHCdBfwZCIYtTsNEIREx6sJh8wzr8= X-KPN-VerifiedSender: Yes X-CMASSUN: 33|q70DxsqsRAKGKsJ1jwaTJQgoG9HlPO3IVkp+T8ROpDjDAiS+eJo46OjYd7KJE+q GaCPiG5uzNl+eXq5DKpEpRg== X-Originating-IP: 77.172.224.45 Received: from [10.0.0.150] (77-172-224-45.fixed.kpn.net [77.172.224.45]) by smtp.xs4all.nl (Halon) with ESMTPSA id cc073140-2f15-11f1-8d42-00505699b758; Fri, 03 Apr 2026 06:30:09 +0200 (CEST) Message-ID: <70cb3bdf-f0cb-4801-9f92-d8cda7ba8a50@xs4all.nl> Date: Fri, 3 Apr 2026 06:30:08 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [Pkg-nagios-devel] Bug#1132557: nagios-nrpe-server: Check disk reports permission problem with LXC container To: Arnaud Launay <debian-bugs-20260402@launay.org>, 1132557-done@bugs.debian.org References: <177516214211.168897.4312017441624047065.reportbug@ct-nagios.launay.org> Content-Language: en-US From: Sebastiaan Couwenberg <sebastic@xs4all.nl> Autocrypt: addr=sebastic@xs4all.nl; keydata= xsFNBFCIBxoBEADb2bBkp1eEV8wKQJJ8/j7Fd2LdFz9kmhPVsZG9Igtoow7sDIvu9PBsr4u0 rKV4LjId562nXIbzXX2+YZ3Dbj0Cg4z9PLoYbENuRvcEWwyfhWyz9vNpusarUc7H+Xvym5LP iDzKgNyXVjCrhrHTd0w09S6/zrLOXtcQs91QTvT0+pdFPaUdpNPZpInMJmZeAsh4Sh6OuPEy Mtc5PhcAt/HcJ/jVBY7F7ENtfpH1c4rEMeV3VoU0W/i6rXUY3mtWCFW8hP+ULiBt2Ct2dvwF XF2I+g+jCiQ8Y8BD2u6jiCy0y/gseC2fIyafIpBs0Grv0Qs/Rir80ieVL5A8VnY5e1ZhYsv6 4+dNZ7QZtYHnoZlXofNQ75qcTZvI7Sv4lL/vpwWfaDTUzGPfU6Zn1R7fyOJTMaV+GvBN+SMB 3ZUUloiPhmg6NkOTdOPleajCQNaL5Z8KFaMUH7zCi8ZLT7TNJ26ky7rWUsJpdAGVGXae+tt2 vEsTDYTkaDQ7sYKVvGU21FagVMoVuYDsjhbZE+QbOXjsJSlQ/1oKESfy0kolrgYXHJMFIFFf MMO3toVLNSMwYVXGD9UZPFIEHXpOFP5Qcjh/ICu4szbGtXRlnS47Dc0jCxVVQyTWtTzo3oHV lwz9vAcnCI/OAODU0AwVPV0mWWpTUoFVc9uxMErBVj4PFqtKcQARAQABzSpTZWJhc3RpYWFu IENvdXdlbmJlcmcgPHNlYmFzdGljQHhzNGFsbC5ubD7CwZcEEwEKAEECGwMFCwkIBwMFFQoJ CAsFFgIDAQACHgECF4ACGQEWIQSBgt5BcFZAjWFGUNFnUPEK6I1K8QUCYEWozQUJIomkswAK CRBnUPEK6I1K8QReEAC+HcQuEe/e0GRw3NFDrLMP1ZOV596ef0b4Z9718Q595HKU1tInmTdd 4tmnJ0hiE20g4HNW/8gXMnr7yf/1RSzIicDasgni+MeVlI4o6ts5zrf3gWGhzWIcCKgim/nA ReuYnNWkeCIk4yH5QIpCt8McaPG3hLsFMU3X4y3ct6E/ZXnML6ALUrearOtss7mmzJot+jja XsGmL4T90ni2SvWoeQG5BgZ/+rfmq/l3C6bbLBLX34+yMKUFOpck3HAVMWUlY91b2DSGGWw5 6iAoAsG6w4UFjnaOfWdrtBg8VKQY5hVpRmS4SoSOWoMnf+et+h0fgXTSVWCA6eiU3MKR0heP A4kfXn/Md5a+pNJVI1I71DgIjds16srTGs6Hd7+WunA4r8gKwOkJjBJ7OCF3nc9qJrfSrQsa wgSvnT6w+VK3j8+KMpOBIoRQKsbioYY1fEvNfzUrnJLc6gfJHiLbKbT3gfIJh6BSaxWgI4I8 3aU1LsXi/XIfeAUtOOoNqc80QSESmsi5qtHh+yJOWvrW+SNnrWP+dUkuuqSw4jD1plIWJZ/n Yi+z+bXEpcHCeasFbC+M1nj7+r8zdHQXo4Rot5D9hhhqVQAkRJ71HnW+/vhCLPBWEE2+jDEP kiA92AoYPlCYpIbcPIYD8yO2t1rZdde+6Ume4VUGh2Mbvcnb3nkiEM7BTQRQiAcaARAA1nKS E2Za3UDDiXwVvkwIrb5G5aHoHhw5IVXrw8JVvjQ7bUQkwatgarua16QgCMOvsoFWXwdwE5Ix HzBiHnZZq8j6/W1h2PG4nFms092fLB0C1VeGPScgaDqZGBtWThzY9tTsuQgyHfYagkbxX2kA cocGVxzUYuL3Z1GNDMTUBqDKg5RRKr2Lml0GF4F7zbJBjkEFstehIcDutBm5mQ4BABdMTOLi BfIDIUTj+PN94gfgkCoORJrjgUChYqnt+oUXqOSU5Xz2N5SyY1Gst6o02lZT871pDVuXGBWo jHQKke+W+LqVVaNAbXVX3PqW+0D4EOABFgxiUTNqeBqR73fWNmn2c8gQr19CHuCaLrE55ZGn gR78aGK/JyCEKQQoqLKIP3f2ctcSiP6rQvs97q8uq9DIDfMGY3FXwNAwrMGt0NdXPnv6d1Qo amfz90W7BrBhHUnPq/Eh/vQa9lGTJpAmcVSHhbcPYwi3kq1/MdIMHxJayx5BYOzgWWrHKdDG 70LNhT9RAl9O79Es9PX9WXYDeUXP6JKA4sB9FrtcZ8TrfxGsSwo+9M2NN2raPlv+9wHholdd zheYXZDpEzm6EHKyZj+4UzUtA9b8mtwUDgUt/UT6SNe9zFlPhZYsaPU5ZqcVH27nbFYPqQtf SkT4ixsQreAZQqhI7nix51Z6bUAq0F0AEQEAAcLBfAQYAQoAJgIbDBYhBIGC3kFwVkCNYUZQ 0WdQ8QrojUrxBQJgRar4BQkiiabeAAoJEGdQ8QrojUrxskMP/2Xk8YIEt8JjZffk0HMAWjGd 4FBSsfUv/E5EUBOFu7F2CmcGsgHk9m7RPTf51UacHnct0jhd5o6qSGF6nHS+aFjuxBHp0fWY kqrrCgIMJzB0UkQfy4xAMU/Yr5BnNqale363pigZMqOr1p/xw2gMPe89VieBgC/h5gZ4gP8y 32nUxqX3zaeQg4qQrfTD8nkOzC4kNncRNU5i8paOxrKww9pyvg0uEaZlDZXD34iAVeXY7l+D PlW+u8fXaLhuPAVEiLLLi4lNM07tQKRjxVQlhIx5UKJZhI++snVXnrtvjEk8BNUYATTlVVFy 96ZLqiH3bsMpbvBQcN4/KlolF3IoRxgQ8m4/O30HFLLFTOkdP/yaUGirP7gYxz6LuNcXJNIN cjGG4agSwjJ/4OUtYDUNHBXReQN6IJfWzhKWtMZ2mE2Xix1i41xhUE+sDu6yJ6X8V+NW1j+0 MpUCUbOoC+aB9b4cdGZLr5sAQJEFpW+Gn0X0Aq4zbQQXxT99iNmfR9e8y8Fm0e81v+qUM3f2 +eDWbll9NZJBHJW5PjRBS5rY5UsVWCwxrGkWUtrGuUW20XznQXcWI4NEUzoxj+URRD6qCrHM BeaTDMa+9IAvk3/HPlmz/Or03KIPreUCV3XVdelk9BcdDLAEJu8db0vyQDr7EGn+6rjFfnq0 /KnfM3VBUDvL In-Reply-To: <177516214211.168897.4312017441624047065.reportbug@ct-nagios.launay.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit On 4/2/26 10:35 PM, Arnaud Launay via Pkg-nagios-devel wrote: > I got a different result after upgrading: it was working before, I get > an error after. It's very similar to #1128004 . > > Tests realized: > > A local check_disk works fine: > > root@ct:~# su - nagios -s /bin/bash -c "/usr/lib/nagios/plugins/check_disk -u GB -w 20% -c 10% -W 20% -K 10% -l -X devtmpfs -X debugfs -X tracefs -X configfs -X securityfs -X sysfs -X nsfs -X overlay -X fuse -X tmpfs" > DISK OK - free space: / 4GB (55,0% inode=85%);| /=3000000000B;6400000000;7200000000;0;8000000000 > > (please note that tmpfs /is/ on -X ...) > > root@ct-nagios:~# /usr/lib/nagios/plugins/check_nrpe -D -n -t 30 -t 30 -H 10.A.B.C -c check_disk > DISK CRITICAL - /run/credentials/container-getty@2.service is not accessible: Permission denied This is #1128004, I suspect you didn't restart nagios-nrpe-server after modifying the check command. > Adding the -A -i /run/credentials does something, but I have different results locally and via nrpe: > > root@ct:~# su - nagios -s /bin/bash -c '/usr/lib/nagios/plugins/check_disk -u GB -w 20% -c 10% -W 20% -K 10% -A -i /run/credentials -l -X devtmpfs -X debugfs -X tracefs -X configfs -X securityfs -X sysfs -X nsfs -X overlay -X fuse -X tmpfs' > DISK OK - free space: / 4GB (55,4% inode=85%);| /=3000000000B;6400000000;7200000000;0;8000000000 > > root@ct-nagios:~# /usr/lib/nagios/plugins/check_nrpe -D -n -t 30 -t 30 -H 10.A.B.C -c check_disk > DISK OK - free space: / 4GB (55.4% inode=85%); /var/tmp 4GB (55.4% inode=85%);| /=3000000000B;6400000000;7200000000;0;8000000000 /var/tmp=3000000000B;6400000000;7200000000;0;8000000000 > > > For whatever reason, the -X tmpfs seems a bit ignored via nrpe... And /var/tmp is not > even mounted: > > root@ct:~# mount |grep var > root@ct:~# That's due to PrivateTmp=true in nagios-nrpe-server.service, you can override that with `systemctl edit nagios-nrpe-server.service`. > /etc/nagios/nrpe_local.cfg tried: > > # Original, working on deb12, not on deb13 > #command[check_disk]=/usr/lib/nagios/plugins/check_disk -u GB -w 20% -c 10% -W 20% -K 10% -l -X devtmpfs -X debugfs -X tracefs -X configfs -X securityfs -X sysfs -X nsfs -X overlay -X fuse -X tmpfs > > # Those works: > #command[check_disk]=/usr/lib/nagios/plugins/check_disk -u GB -w 20% -c 10% -W 20% -K 10% -A -i /run/credentials -l -X devtmpfs -X debugfs -X tracefs -X configfs -X securityfs -X sysfs -X nsfs -X overlay -X fuse -X tmpfs > # Tried without the -l, tried moving the args around, nothing change. > #command[check_disk]=/usr/lib/nagios/plugins/check_disk -u GB -w 20% -c 10% -W 20% -K 10% -A -i /run/credentials -X devtmpfs -X debugfs -X tracefs -X configfs -X securityfs -X sysfs -X nsfs -X overlay -X fuse -X tmpfs All three work outside LXC containers, -X tmpfs is the recommended solution to avoid the CRITICAL error for /run/credentials. Kind Regards, Bas -- PGP Key ID: 4096R/6750F10AE88D4AF1 Fingerprint: 8182 DE41 7056 408D 6146 50D1 6750 F10A E88D 4AF1]