Comment 32 for bug 1964881

Jammy SRU verification

Reproducing the problems first:
ubuntu@j-tomcat9-logging:~$ apt-cache policy tomcat9
tomcat9:
  Installed: 9.0.58-1
  Candidate: 9.0.58-1
  Version table:
 *** 9.0.58-1 500
        500 http://br.archive.ubuntu.com/ubuntu jammy/universe amd64 Packages

a) rsyslog complaints
root@j-tomcat9-logging:~# grep -E "chown.*catalina\.out.*not permitted" /var/log/syslog
Jul 27 13:41:48 j-tomcat9-logging rsyslogd: error during config processing: omfile: chown for file '/var/log/tomcat9/catalina.out' failed: Operation not permitted [v8.2112.0 try https://www.rsyslog.com/e/2207 ]

b) logrotate fails
root@j-tomcat9-logging:~# logrotate -f /etc/logrotate.conf
error: error opening /var/log/tomcat9/catalina.out: Permission denied
root@j-tomcat9-logging:~# ls -la /var/log/tomcat9
total 12
drwxrws--- 1 tomcat adm 188 Jul 27 13:41 .
drwxrwxr-x 1 root syslog 538 Jul 27 13:43 ..
-rw-r----- 1 tomcat adm 5995 Jul 27 13:41 catalina.2022-07-27.log
-rw-r----- 1 syslog adm 3523 Jul 27 13:41 catalina.out
-rw-r----- 1 tomcat adm 0 Jul 27 13:41 localhost.2022-07-27.log
-rw-r----- 1 tomcat adm 0 Jul 27 13:41 localhost_access_log.2022-07-27.txt

c) reinstall breaks logging again
root@j-tomcat9-logging:~# ls -la /var/log/tomcat9/catalina.out
-rw-r----- 1 syslog adm 3523 Jul 27 13:41 /var/log/tomcat9/catalina.out

root@j-tomcat9-logging:~# apt install --reinstall tomcat9 -y
(...)
Preparing to unpack .../tomcat9_9.0.58-1_all.deb ...
Unpacking tomcat9 (9.0.58-1) over (9.0.58-1) ...
Setting up tomcat9 (9.0.58-1) ...
Processing triggers for rsyslog (8.2112.0-2ubuntu2.2) ...
(...)

root@j-tomcat9-logging:~# ls -la /var/log/tomcat9/catalina.out
-rw-r----- 1 tomcat adm 3523 Jul 27 13:41 /var/log/tomcat9/catalina.out

# grep -E "catalina\.out.*Permission denied" /var/log/syslog
Jul 27 13:43:59 j-tomcat9-logging rsyslogd: file '/var/log/tomcat9/catalina.out': open error: Permission denied [v8.2112.0 try https://www.rsyslog.com/e/2433 ]
Jul 27 13:44:00 j-tomcat9-logging rsyslogd: file '/var/log/tomcat9/catalina.out': open error: Permission denied [v8.2112.0 try https://www.rsyslog.com/e/2433 ]

Testing fixed version from proposed
root@j-tomcat9-logging:~# apt-cache policy tomcat9
tomcat9:
  Installed: 9.0.58-1ubuntu0.1
  Candidate: 9.0.58-1ubuntu0.1
  Version table:
 *** 9.0.58-1ubuntu0.1 500
        500 http://br.archive.ubuntu.com/ubuntu jammy-proposed/universe amd64 Packages

a) rsyslog errors
rsyslog is clean:
root@j-tomcat9-logging:~# systemctl stop rsyslog.service syslog.socket
root@j-tomcat9-logging:~# > /var/log/syslog
root@j-tomcat9-logging:~# systemctl start rsyslog.service syslog.socket
root@j-tomcat9-logging:~# grep rsyslogd /var/log/syslog
Jul 27 13:49:24 j-tomcat9-logging rsyslogd: imuxsock: Acquired UNIX socket '/run/systemd/journal/syslog' (fd 3) from systemd. [v8.2112.0]
Jul 27 13:49:24 j-tomcat9-logging rsyslogd: imklog: cannot open kernel log (/proc/kmsg): Permission denied.
Jul 27 13:49:24 j-tomcat9-logging rsyslogd: activation of module imklog failed [v8.2112.0 try https://www.rsyslog.com/e/2145 ]
Jul 27 13:49:24 j-tomcat9-logging rsyslogd: rsyslogd's groupid changed to 111
Jul 27 13:49:24 j-tomcat9-logging rsyslogd: rsyslogd's userid changed to 104
Jul 27 13:49:24 j-tomcat9-logging rsyslogd: [origin software="rsyslogd" swVersion="8.2112.0" x-pid="6973" x-info="https://www.rsyslog.com"] start

b) logrotate works, ownership and perms are preserved
root@j-tomcat9-logging:~# ls -la /var/log/tomcat9/catalina.out
-rw-r----- 1 syslog adm 7700 Jul 27 13:48 /var/log/tomcat9/catalina.out
root@j-tomcat9-logging:~# logrotate -f /etc/logrotate.conf
root@j-tomcat9-logging:~# ls -la /var/log/tomcat9/
total 28
drwxrws--- 1 tomcat adm 216 Jul 27 13:50 .
drwxrwxr-x 1 root syslog 586 Jul 27 13:50 ..
-rw-r----- 1 tomcat adm 18982 Jul 27 13:48 catalina.2022-07-27.log
-rw-r----- 1 syslog adm 0 Jul 27 13:50 catalina.out
-rw-r----- 1 syslog adm 7700 Jul 27 13:50 catalina.out.1
-rw-r----- 1 tomcat adm 0 Jul 27 13:41 localhost.2022-07-27.log
-rw-r----- 1 tomcat adm 0 Jul 27 13:41 localhost_access_log.2022-07-27.txt

c) reinstall does not break logging/permissions/ownership of catalina.out:
root@j-tomcat9-logging:~# ls -la /var/log/tomcat9/catalina.out
-rw-r----- 1 syslog adm 0 Jul 27 13:50 /var/log/tomcat9/catalina.out

root@j-tomcat9-logging:~# apt install tomcat9 -y --reinstall
(...)
Preparing to unpack .../tomcat9_9.0.58-1ubuntu0.1_all.deb ...
Unpacking tomcat9 (9.0.58-1ubuntu0.1) over (9.0.58-1ubuntu0.1) ...
Setting up tomcat9 (9.0.58-1ubuntu0.1) ...
Processing triggers for rsyslog (8.2112.0-2ubuntu2.2) ...
(...)

root@j-tomcat9-logging:~# ls -la /var/log/tomcat9/catalina.out
-rw-r----- 1 syslog adm 4177 Jul 27 13:51 /var/log/tomcat9/catalina.out

jammy verification succeeded