tuned-ppd.service fails on boot

[pedrohqb]

Describe the bug

Tuned-ppd.service fails on boot. Here is the output of "journalctl -b -u tuned-ppd.service"

nov 10 13:45:52 mope-bluefin-e14 tuned-ppd[5567]: PermissionError: [Errno 13] Permission denied: '/var/log/tuned/tuned-ppd.log'
nov 10 13:45:52 mope-bluefin-e14 systemd[1]: tuned-ppd.service: Main process exited, code=exited, status=1/FAILURE
nov 10 13:45:52 mope-bluefin-e14 systemd[1]: tuned-ppd.service: Failed with result 'exit-code'.
nov 10 13:45:52 mope-bluefin-e14 systemd[1]: Failed to start tuned-ppd.service - PPD-to-TuneD API Translation Daemon.

What did you expect to happen?

I expected the service to start normally.

Output of bootc status

Output of groups

Extra information or context

No response

[hanthor]

Likely my mistake

#840

[pedrohqb]

Even though it was merged, I still get the error. Should I do something?

[pedrohqb]

Systemd complaints about permission being denied:

nov 14 22:05:43 mope-bluefin-e14 tuned-ppd[5090]: File "/usr/lib64/python3.12/logging/init.py", line 1231, in>
nov 14 22:05:43 mope-bluefin-e14 tuned-ppd[5090]: StreamHandler.init(self, self._open())
nov 14 22:05:43 mope-bluefin-e14 tuned-ppd[5090]: ^^^^^^^^^^^^
nov 14 22:05:43 mope-bluefin-e14 tuned-ppd[5090]: File "/usr/lib64/python3.12/logging/init.py", line 1263, in>
nov 14 22:05:43 mope-bluefin-e14 tuned-ppd[5090]: return open_func(self.baseFilename, self.mode,
nov 14 22:05:43 mope-bluefin-e14 tuned-ppd[5090]: ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
nov 14 22:05:43 mope-bluefin-e14 tuned-ppd[5090]: PermissionError: [Errno 13] Permission denied: '/var/log/tuned/tu>
nov 14 22:05:43 mope-bluefin-e14 systemd[1]: tuned-ppd.service: Main process exited, code=exited, status=1/FAILURE
nov 14 22:05:43 mope-bluefin-e14 systemd[1]: tuned-ppd.service: Failed with result 'exit-code'.
nov 14 22:05:43 mope-bluefin-e14 systemd[1]: Failed to start tuned-ppd.service - PPD-to-TuneD API Translation Daemo>
~

[jumpyvi]

Running this fixed it for me

sudo ausearch -c tuned-ppd --raw | audit2allow -M tuned_ppd_local

[hanthor]

We need to repro this on vanilla c10s and see if we have selinux policy issue and if ppd has a policy with it

[castrojo]

sudo restorecon -rv /var/log/tuned /etc/tuned /usr/lib/tuned got me up and running, is it worth putting this workaround in a ujust?

[hanthor]

https://issues.redhat.com/browse/RHEL-130547?jql=text%20~%20%22tuned-ppd%22

[pedrohqb]

Any news on this issue?