Symptoms
SELinux shared label set by identifier container for the common path shared across all the containers. This issue started when node-agent container was introduced without dependency.
The system repeatedly logs this message to the platform log:
tcpdumpd-manager[8]: priority="Crit" version=1.0 msgid=0x5406000000000018 msg="[] global_dmaa_comm init_comm failed ret:" this=0x17c6b50 ret=3.
Attempting to run an F5OS tcpdump fails with the following error:
appliance-1# system diagnostics tcpdump -nni 3.0 tcp
running /usr/sbin/tcpdump -nnn
"-nni" "3.0" "tcp"
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on 3.0, link-type EN10MB (Ethernet), capture size 262144 bytes
errbuf ERROR:INIT error, line-dma-agent init returned fatal status, packets cannot be captured
tcpdump: pcap_loop: INIT error, line-dma-agent init returned fatal status, packets cannot be captured
0 packets captured
0 packets received by filter
0 packets dropped by kernel
Conditions
This issue seems to occur when downgrading a system to an affected version.
Workaround
This issue can be resolved by doing the following:
1. Log into the system as root
2. Edit /var/docker/config/platform.yml
3. Locate the configuration for 'tcpdumpd-manager', and replace the volume that reads:
- /var/F5/system:/var/tcpdump:z
with:
- /var/F5/system:/var/tcpdump
4. Save the file
5. Reboot the appliance
Fix Information
Root cause of this issue was fixed as part of ID1326157.