Uploaded image for project: 'Modules'
  1. Modules
  2. MODULES-10917

haproxy : SELinux issues on RHEL 8

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: haproxy
    • Template:
      MODULES Bug Template
    • Team:
      Modules
    • Zendesk Ticket IDs:
      42758
    • Zendesk Ticket Count:
      1

      Description

      Basic Info
      Module Version: 4.5.0
      Puppet Version: 6.16.0
      OS Name/Version: Red Hat Enterprise Linux 8

      When using the puppetlabs/haproxy module to install HAProxy, the service will not start. If I disable SELinux, the service starts correctly.

      The logs complain about not being able to bind UNIX socket /var/lib/haproxy/stats

      If I manually install HAProxy, the service starts just fine with SELinux enabled.

      Desired Behavior:

      Service starts without disabling SELinux

      Actual Behavior:

      Service fails to start.

       

       

      haproxy::listen { 'main':
        collect_exported => false,
        ipaddress        => 'x.x.x.x',
        ports            => '80',
        mode             => 'http'
      }
      
      

      journalctl log for haproxy:
      -- Logs begin at Fri 2020-12-18 06:07:28 +03, end at Tue 2021-01-12 19:53:56 +03. --
      Jan 12 19:53:56 server01 systemd[1]: Starting HAProxy Load Balancer...
      Jan 12 19:53:56 server01 haproxy[1029834]: [ALERT] 011/195356 (1029834) : Starting frontend GLOBAL: cannot bind UNIX socket [/var/lib/haproxy/stats]
      Jan 12 19:53:56 server01 systemd[1]: haproxy.service: Main process exited, code=exited, status=1/FAILURE
      Jan 12 19:53:56 server01 systemd[1]: haproxy.service: Failed with result 'exit-code'.
      Jan 12 19:53:56 server01 systemd[1]: Failed to start HAProxy Load Balancer.
      

       

       

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              adrian.iurca Adrian Iurca
              Reporter:
              tmctigue Tames McTigue
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Zendesk Support