[systemd-devel] Native Journal source vs syslog forwarding

["Jóhann B. Guðmundsson"]

On 11/26/2014 12:07 PM, Gergely Nagy wrote:
>>>>>> "Jóhann" == Jóhann B Guðmundsson <johannbg at gmail.com> writes:
>      Jóhann> On 11/26/2014 10:04 AM, Gergely Nagy wrote:
>      >> On Debian, syslog forwarding is enabled by default, and since syslog-ng
>      >> reads from the journal, there's nothing listening on
>      >> /run/systemd/journal/syslog, and I get spammed with messages like the
>      >> one above.
>      [...]
>      >> 3) Disable syslog forwarding if syslog-ng is installed
>      >>
>      >> Not sure how this could be achieved, because journald.conf does not
>      >> belong to the syslog-ng package, therefore I can't fiddle its
>      >> settings from there. (Technically, I could, but I won't, that'd be
>      >> extremely rude.)
>
>      Jóhann> As of systemd 216 forwarding to another syslogd has been disabled by
>      Jóhann> default so no need to fiddle with this setting.
>
> Forwarding is enabled by default on Debian, as I wrote in my original
> mail. I have no control over the default, and I have no desire to argue
> for changing it. There are other syslogds in Debian (including the
> default one) that do not read from the Journal, but rely on forwarding.
> If forwarding was turned off, they'd stop working. Older versions of
> syslog-ng would, too.
>

Right but you are going against downstream distribution policy and 
unwilling yourself ( or have the consumer of the syslog-ng package do 
that ) to change the default manually ( via journald.conf ) or advocate 
for that change ( which would be simply advocating for following 
upstream ).

If you are the syslog-ng maintainer in Debian then I guess you will have 
to introduce conflicts with other sysloggers in other components and 
have them remove the default syslogger ( assuming the journal has not 
been made the default yet in Debian and something like rsyslog is ) 
because if you go the snipped route you would overwrite the default thus 
break rsyslog ( and others if they exist ) in the process.

What is Jessie using 215? if so you are probably stuck with 215 for the 
reminder of Jessie which requires you to convince the Debian systemd 
maintainers to backport the relevant patch(es) to make that work.

Does Debian have two syslog-ng components one tweak for journal as in 
uses systemd-journal() along with filters and default journal tweaked 
send declaration and another one that is tweaked for $other systemd init 
systems since there are more tweaks than just systemd-journal() which 
should be made as an default in that process?

Or is there a single component that detects which init system is 
installed and install configuration files based on that? ( if so could 
he not simply s/ForwardToSyslog=/ from yes to no in the process? )

JBG