ananicy-cpp service failure on hardened kernel #327382
Description
Describe the bug
Ananicy systemd service fails. Here's the log from journal:
lip 15 16:11:27 work ananicy-cpp[1484]: [2024-07-15 16:11:27.509] [info] Config apply_ioclass: true
lip 15 16:11:27 work ananicy-cpp[1484]: [2024-07-15 16:11:27.509] [info] Config apply_sched: true
lip 15 16:11:27 work ananicy-cpp[1484]: [2024-07-15 16:11:27.509] [info] Config cgroup_load: true
lip 15 16:11:27 work ananicy-cpp[1484]: [2024-07-15 16:11:27.509] [info] Config apply_ionice: true
lip 15 16:11:27 work ananicy-cpp[1484]: [2024-07-15 16:11:27.509] [info] Config apply_oom_score_adj: true
lip 15 16:11:27 work ananicy-cpp[1484]: [2024-07-15 16:11:27.509] [info] Config apply_latnice: false
lip 15 16:11:27 work ananicy-cpp[1484]: [2024-07-15 16:11:27.509] [info] Config log_applied_rule: false
lip 15 16:11:27 work ananicy-cpp[1484]: [2024-07-15 16:11:27.509] [info] Config apply_nice: true
lip 15 16:11:27 work ananicy-cpp[1484]: [2024-07-15 16:11:27.509] [info] Config apply_cgroup: true
lip 15 16:11:27 work ananicy-cpp[1484]: [2024-07-15 16:11:27.509] [info] Config type_load: true
lip 15 16:11:27 work ananicy-cpp[1484]: [2024-07-15 16:11:27.509] [info] Config rule_load: true
lip 15 16:11:27 work ananicy-cpp[1484]: [2024-07-15 16:11:27.509] [info] Config cgroup_realtime_workaround: false
lip 15 16:11:27 work ananicy-cpp[1484]: [2024-07-15 16:11:27.509] [info] Config loglevel: warn
lip 15 16:11:27 work ananicy-cpp[1484]: [2024-07-15 16:11:27.509] [info] Config check_freq: 60
lip 15 16:11:27 work ananicy-cpp[1484]: Ananicy Cpp 1.1.1
lip 15 16:11:27 work ananicy-cpp[1484]: [2024-07-15 16:11:27.597] [warning] Cgroups are not available on this platform (or are not enabled)
lip 15 16:11:27 work ananicy-cpp[1484]: [2024-07-15 16:11:27.597] [warning] Cgroups are not available on this platform (or are not enabled)
lip 15 16:11:27 work ananicy-cpp[1484]: [2024-07-15 16:11:27.597] [warning] Cgroups are not available on this platform (or are not enabled)
lip 15 16:11:27 work ananicy-cpp[1484]: failed to attach BPF programs
lip 15 16:11:27 work systemd[1]: ananicy-cpp.service: Main process exited, code=dumped, status=11/SEGV
The service gets auto-restarted after that failure and the next error is different:
lip 15 16:11:37 work ananicy-cpp[2625]: [2024-07-15 16:11:37.547] [info] Config apply_ioclass: true
lip 15 16:11:37 work ananicy-cpp[2625]: [2024-07-15 16:11:37.547] [info] Config apply_sched: true
lip 15 16:11:37 work ananicy-cpp[2625]: [2024-07-15 16:11:37.547] [info] Config cgroup_load: true
lip 15 16:11:37 work ananicy-cpp[2625]: [2024-07-15 16:11:37.547] [info] Config apply_ionice: true
lip 15 16:11:37 work ananicy-cpp[2625]: [2024-07-15 16:11:37.547] [info] Config apply_oom_score_adj: true
lip 15 16:11:37 work ananicy-cpp[2625]: [2024-07-15 16:11:37.547] [info] Config apply_latnice: false
lip 15 16:11:37 work ananicy-cpp[2625]: [2024-07-15 16:11:37.547] [info] Config log_applied_rule: false
lip 15 16:11:37 work ananicy-cpp[2625]: [2024-07-15 16:11:37.547] [info] Config apply_nice: true
lip 15 16:11:37 work ananicy-cpp[2625]: [2024-07-15 16:11:37.547] [info] Config apply_cgroup: true
lip 15 16:11:37 work ananicy-cpp[2625]: [2024-07-15 16:11:37.547] [info] Config type_load: true
lip 15 16:11:37 work ananicy-cpp[2625]: [2024-07-15 16:11:37.547] [info] Config rule_load: true
lip 15 16:11:37 work ananicy-cpp[2625]: [2024-07-15 16:11:37.547] [info] Config cgroup_realtime_workaround: false
lip 15 16:11:37 work ananicy-cpp[2625]: [2024-07-15 16:11:37.547] [info] Config loglevel: warn
lip 15 16:11:37 work ananicy-cpp[2625]: [2024-07-15 16:11:37.547] [info] Config check_freq: 60
lip 15 16:11:37 work ananicy-cpp[2625]: Ananicy Cpp 1.1.1
lip 15 16:11:37 work ananicy-cpp[2625]: Ananicy Cpp is already running!
lip 15 16:11:37 work systemd[1]: ananicy-cpp.service: Main process exited, code=exited, status=1/FAILURE
Also, here's the stack trace from coredump:
#0 0x00000030a76218d1 in bpf_program_init_events ()
#1 0x00000030a7610481 in ProcessQueue::init() ()
#2 0x00000030a75d0c8a in main ()
Steps To Reproduce
boot.kernelPackages = pkgs.linuxPackages_hardened;
services.ananicy = {
enable = true;
package = pkgs.ananicy-cpp;
rulesProvider = pkgs.ananicy-rules-cachyos;
};Notify maintainers
@Artturin @JohnRTitor @diniamo
Metadata
Please run nix-shell -p nix-info --run "nix-info -m" and paste the result.
- system: `"x86_64-linux"`
- host os: `Linux 6.6.32-hardened1, NixOS, 24.05 (Uakari), 24.05.2780.53e81e790209`
- multi-user?: `yes`
- sandbox: `yes`
- version: `nix-env (Nix) 2.18.4`
- channels(nix): `""`
- channels(root): `"home-manager-24.05.tar.gz, nixos-24.05, nixos-hardware, nixos-unstable, nur"`
- nixpkgs: `/nix/var/nix/profiles/per-user/root/channels/nixos`Add a 👍 reaction to issues you find important.