Ansible使用ansible task authorized_key挂起systemd-journald(停止记录和泛洪dmesg)

时间:2016-03-31 13:07:48

标签: centos ansible ssh-keys systemd

我的剧本中有什么错误阻止日志记录?

/ var / log / messages不再更新!

我可以用这个简单的孤立的剧本重现这个问题:

- name: Reproduce journald hang
  hosts: test
  vars:
    - keys:
        - kp_XXX.pub
        - kp_YYY.pub
  tasks:
    - name: Verify journalctl before
      command: journalctl --verify

    - name: Add SSH keys 
      authorized_key: user=cloud key="{{ item }}"
      with_file: keys

    - name: Verify journalctl after
      command: journalctl --verify

密钥XXX会使记录挂起,但不会挂起YYY 使用ansible 1.9.4在CentOs 7.2上重现

文件kp_XXX.pub:

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCLd9k03Hvf3QVL8+dYd1KZY9p1ju/RkxHr+t6l6YbMcMfYcLHW6lsNIw2aLC7qpRopQPe/prQZkbXQBy8sYzNUcVtohPTD/V6wX7RXDCiVME9uUztY96Wust1Uc4Z28DhWyC55WFKhetGzfyxK+hMrtORnzdruo/bxHKmGu3rT5HYquB8SlPN/cSG/7itwy6QkXsqzmQUbEvaLPZNwU7qd9LiySFxsbhI2vJz+FiBS+CzkoTKOSZt60I0jRs4wIjXOZjQApcgddGa2ls3vq5HH39Xdr66+PnRU/rrRpaMTrcOTLPzzeWUQoF8VbkSiDXsI8ds+M842DKAT0DFVXnR kp_XXX

档案kp_YYY.pub:

ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQBM9IuDxubRnbFh1e1dvFSKE91vrME5h/nQMsZo1Bmt8FXIQ7wJdNh+ANLYyQA7Q0tiXD1n97QQ9r89iwHFEUZVSXc7VM01AE27N45ybfLmLwtNm+kny6ncoPy7+MHcOQS9Ra56u6Bi6xXUc7vM4pL2iB/m0GnUSmECZZ5EVuOpMeJltf04/+PldQGOqxp9BzVF8XKEPlW5uc6UBesPCoHpR9lGA5UIIYq1sUDIGBy3T7FEXu8KhiHrtb1wuDGJU62SqR/fxgJDypjAtedm41TFcTZOMqTR29KYCKC4OjRaUTu7kf4rWq7/HWJViK2NLaeoy9xyG1BUUTqrGY6qRo85 kp_YYY

虽然添加了两个键,但第三个任务失败并且journald挂起:

TASK: [Verify journalctl after] ***********************************************
failed: [test] => {"changed": true, "cmd": ["journalctl", "--verify"], "delta": "0:00:00.008351", "end": "2016-03-31 12:49:58.669585", "rc": 1, "start": "2016-03-31 12:49:58.661234", "warnings": []}
stderr: 248668: invalid object
File corruption detected at /run/log/journal/cf9b563caf2bc11cab56d6a504ff6a29/system.journal:248668 (of 8388608 bytes, 28%).
FAIL: /run/log/journal/cf9b563caf2bc11cab56d6a504ff6a29/system.journal (Cannot assign requested address)

dmesg记录了大量的内容:

[  761.806277] systemd-journald[366]: Failed to write entry (27 items, 719 bytes), ignoring: Cannot assign requested address
[  761.807514] systemd-journald[366]: Failed to write entry (23 items, 633 bytes), ignoring: Cannot assign requested address
[  761.859245] systemd-journald[366]: Failed to write entry (24 items, 718 bytes), ignoring: Cannot assign requested address

使用journalctl --verify验证日记文件时:

248668: invalid object
File corruption detected at /run/log/journal/cf9b563caf2bc11cab56d6a504ff6a29/system.journal:248668 (of 8388608 bytes, 28%).
FAIL: /run/log/journal/cf9b563caf2bc11cab56d6a504ff6a29/system.journal (Cannot assign requested address)

这是我的错误,来自ansible还是centos?

如何解决?

找到这两个相关链接:
https://access.redhat.com/solutions/2117311?tour=6#comments
Claudio's blog

1 个答案:

答案 0 :(得分:0)

  • 打开控制台!
  • 成为root
  • 检查" journalctl -xn"的输出。和" dmesg"
  • 如果你得到这个或类似的东西

    [12.713167] systemd-journald [113]:无法写入条目(9项,245字节),忽略:无法分配请求的地址

  • 使用" journalctl验证期刊 - 验证"

  • 检查日志是否在尺寸范围内" journalctl --disk-usage"
  • 那时你已经知道了损坏的日志 - 它们显示出红色,你无法忽略它们
  • 创建一个新文件夹移动这些文件。
  • 做一个记录 - 验证重新运行验证并确保
  • 重新启动