Visualizza wikitesto di Syslog-ng LXC

==Setup syslog-ng on gentoo LXC container==

===Install syslog-ng and logrotate===
<pre>
emerge -avq app-admin/syslog-ng app-admin/logrotate
</pre>

===Configure syslog-ng for LXC container===
Usually kernel messages and other kernel stuff are not accessible for security from the LXC container so syslog-ng cannot start with default gentoo configuration, moreover message sended to /dev/tty12 will loop causing a lor of undesidered log messages to avoid those issue we have to edit /etc/syslog-ng/syslog-ng.conf

Comment every kernel specific lines
<pre>
#Manually edited
#destination kern { file("/var/log/kern.log"); file("/dev/tty12"); };
</pre>

<pre>
#Manually edited
#filter f_kern { facility(kern); };
</pre>

<pre>
#Manually edited
#log { source(kernsrc); filter(f_kern); destination(kern); };
</pre>

<pre>
#Manually edited
#log { source(kernsrc); filter(f_pax); destination(pax); };
#log { source(kernsrc); filter(f_grsec); destination(grsec); };
#log { source(kernsrc); filter(f_audit); destination(audit); };
#log { source(kernsrc); filter(f_avc); destination(avc); };
</pre>

Change every /dev/tty12 apparence with /var/log/messages
<pre>
#Manually edited
##destination kern { file("/var/log/kern.log"); file("/dev/tty12"); };
#destination kern { file("/var/log/kern.log"); file("/var/log/messages"); };
</pre>

<pre>
#Manually edited
#destination console_all { file("/dev/tty12"); };
destination console_all { file("/var/log/messages"); };
</pre>


===Make syslog-ng start automagically at boot===
Add syslog-nd to default runlevel
<pre>
rc-update add syslog-ng default
</pre>