The IP firewall warning seems to be unrelated. On another server where we didn't get
this problem on a reboot, the same warning is emitted for one of the several rootless
containers running there. It's interesting on its own, and I found where it happens in
the systemd code here:
https://github.com/systemd/systemd/blob/e30b4c13570a5e4ec794d480d5371e9c7...
...but that seems like another, likely benign issue with rootless Podman and
systemd/cgroups, maybe?
The later errors seem to be the actual failure here, but I don't know what to make of
them.
- JK
On Thursday, May 25, 2023 at 7:21 PM, Chris Evich
<cevich(a)redhat.com (mailto:cevich@redhat.com)> wrote:
On 5/25/23 08:03, jklaiho(a)iki.fi wrote:
> systemd[746]: cms_backend.service: unit configures an IP firewall, but not running
as root.
> systemd[746]: (This warning is only shown for the first unit using IP firewalling.)
I'm not an expert, but to my untrained eye, this message seems to be the
root-cause indicator. I can't say for sure where/why that error is
generated but it seems like it could be some kind of bug in quadlet
interactions w/ the rest of systemd. Maybe try changing the
dependencies (Wants/After) might make a difference? That's a total
guess though.
---
Chris Evich (he/him), RHCA III
Senior Quality Assurance Engineer
If it ain't broke, your hammer isn't wide 'nough.
_______________________________________________
Podman mailing list -- podman(a)lists.podman.io
To unsubscribe send an email to podman-leave(a)lists.podman.io