Bug#1095904: systemd-journal-remote: Continously give File /var/log/journal/remote/remote-IP.journal corrupted or uncleanly shut down, renaming and replacing.

[Simone Piccardi]

Package: systemd-journal-remote
Version: 252.33-1~deb12u1
Severity: important

Dear Maintainer,

I installed systemd-journal-remote to centralize log, configured in
/etc/systemd/journal-remote.conf.d/ssl.conf as:

[Remote]
SplitMode=host
ServerKeyFile = /etc/ssl/private/journal-remote-key.pem
ServerCertificateFile = /etc/ssl/certs/journal-remote-cert.pem
TrustedCertificateFile= 
Seal = true

(certificates are copied from /etc/letsencrypt with permission
adjusted), the service is starting but as soon a client using
systemd-journal-upload starts sending data I'm getting an highr rate
of these notices, this an excerpt from journalctl -u
systemd-journal-remote:


feb 13 14:47:49 logger systemd[1]: Started
systemd-journal-remote.service - Journal Remote Sink Service.
feb 13 14:47:49 logger systemd-journal-remote[568466]: Certificate checking disabled.
feb 13 14:47:49 logger systemd-journal-remote[568466]: microhttpd: MHD_OPTION_EXTERNAL_LOGGER is not the first option specified for the daemon. Some messages may be printed by the standard MHD logger.
feb 13 14:49:20 logger systemd-journal-remote[568466]: File /var/log/journal/remote//remote-XX.YY.WW.ZZ.journal corrupted or uncleanly shut down, renaming and replacing.
feb 13 14:49:22 logger systemd-journal-remote[568466]: File /var/log/journal/remote//remote-XX.YY.WW.ZZ.journal corrupted or uncleanly shut down, renaming and replacing.

so in half an hour I got around 400 8M files likes:

remote-XX.YY.WW.ZZ at 00062e06ab13b829-8212d7358a19da73.journal~

with a single or few log lines, filling the disk in no time. 
Each file is readable, and can inspected with:

journalctl --file=/var/log/journal/remote/remote-XX.YY.WW.ZZ at 00062e06ab13b829-8212d7358a19da73.journal~

so there is no sign of corruption.

-- System Information:
Debian Release: 12.9
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-31-amd64 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages systemd-journal-remote depends on:
ii  libc6              2.36-9+deb12u9
ii  libcurl4           7.88.1-10+deb12u8
ii  libmicrohttpd12    0.9.75-6
ii  libsystemd-shared  252.33-1~deb12u1
ii  systemd            252.33-1~deb12u1

systemd-journal-remote recommends no packages.

systemd-journal-remote suggests no packages.

-- no debconf information