bring back systemd-journal.plugin setcap (from source install) (#21569)
Ilya Mashchenko committed
Jan 15, 2026 at 20:26 UTC
ad6ee9c2617c74ecb77b5539975058997c758da8
1 file changed
+17
netdata-installer.sh
+17
@@ -817,6 +817,23 @@ if [ "$(id -u)" -eq 0 ]; then
817
fi
818
fi
819
820
+ # The Rust-based 'journal-viewer' plugin was added in 2.8-nightly to replace 'systemd-journal'.
821
+ # TODO: After 2.9 release and proper deprecation announcement, remove this.
822
+ if [ -f "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/systemd-journal.plugin" ]; then
823
+ run chown "root:${NETDATA_GROUP}" "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/systemd-journal.plugin"
824
+ capabilities=0
825
+ if ! iscontainer && command -v setcap 1> /dev/null 2>&1; then
826
+ run chmod 0750 "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/systemd-journal.plugin"
827
+ if run setcap cap_dac_read_search+ep "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/systemd-journal.plugin"; then
828
+ capabilities=1
829
+ fi
830
+ fi
831
+
832
+ if [ $capabilities -eq 0 ]; then
833
+ run chmod 4750 "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/systemd-journal.plugin"
834
+ fi
835
+ fi
836
+
837
if [ -f "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/journal-viewer-plugin" ]; then
838
run chown "root:${NETDATA_GROUP}" "${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/journal-viewer-plugin"
839
capabilities=0