#
P005O
Null-Bytes Within Rotated Log Files.
#
Description
This patch fixes an issue regarding null-bytes within rotated nginx log files. This issue can cause problems with log analysis, as the presence of null-bytes make common tools behave unexpectedly. This patch will prevent the underlying issue that causes null-bytes to be present within rotated log files.
#
Impact
There is no expected downtime or performance impact.
#
Changes
- Update /etc/logrotate.d/nginx config file to remove strategy involving the
copytruncate
option. - Remount /mnt/jrc-logs on web tier with the
lookupcache=none
option to prevent stale file handles. - Allow root user to ssh between web tier and jump node
#
If You Accept
This patch will add an extra boot hook to your deployment located at /mnt/jrc-comms/hooks/boot.d/99-logrotate-P005O
.
This boot hook will make sure that the problem is fixed on every boot, this way we can avoid a jump/web AMI rollup proceedure.
#
If You Reject
There might occationally be null-bytes present within rotated log files.