RedHat EX200 Exam - Topic 2 Question 67 Discussion

Actual exam question for RedHat's EX200 exam

Question #: 67
Topic #: 2

Part 1 (on Node1 Server)

Task 16 [Running Containers]

Configure your host journal to store all journal across reboot

Copy all journal files from /var/log/journal/ and put them in the /home/shangrila/container-logserver

Create and mount /home/shangrila/container-logserver as a persistent storage to the container as /var/log/ when container start

AExplanation:
*
[shangrila@node1 ~]$ podman ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
d5ffe018a53c registry.domain15.example.com:5000/rhel8/rsyslog:latest /bin/rsyslog.sh 5 seconds ago Up 4 seconds ago logserver
[shangrila@node1 ~]$ podman stats logserver
Error: stats is not supported in rootless mode without cgroups v2
[shangrila@node1 ~]$ podman stop logserver
d5ffe018a53ca7eb075bf560d1f30822ab6fe51eba58fd1a8f370eda79806496
[shangrila@node1 ~]$ podman rm logserver
Error: no container with name or ID logserver found: no such container
[shangrila@node1 ~]$ mkdir -p container-journal/
*
[shangrila@node1 ~]$ sudo systemctl restart systemd-journald
[sudo] password for shangrila:
[shangrila@node1 ~]$ sudo cp -av /var/log/journal/* container-journal/
[shangrila@node1 ~]$ sudo cp -av /var/log/journal/* container-journal/
[shangrila@node1 ~]$ sudo chown -R shangrila container-journal/
[shangrila@node1 ~]$ podman run -d --name logserver -v /home/shangrila/container-journal/:/var/log/journal:Z registry.domain15.example.com:5000/rhel8/rsyslog
[shangrila@node1 ~]$ podman ps
[shangrila@node1 ~]$ loginctl enable-linger
[shangrila@node1 ~]$ loginctl show-user shangrila|grep -i linger
Linger=yes
*
[shangrila@node1 ~]$ podman stop logserver
[shangrila@node1 ~]$ podman rm logserver
[shangrila@node1 ~]$ systemctl --user daemon-reload
[shangrila@node1 ~]$ systemctl --user enable --now container-logserver
[shangrila@node1 ~]$ podman ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
3903e1d09170 registry.domain15.example.com:5000/rhel8/rsyslog:latest /bin/rsyslog.sh 4 seconds ago Up 4 seconds ago logserver
[shangrila@node1 ~]$ systemctl --user stop container-logserver.service
*
[shangrila@node1 ~]$ sudo reboot
[shangrila@node1 ~]$ podman ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
7e6cd59c506a registry.domain15.example.com:5000/rhel8/rsyslog:latest /bin/rsyslog.sh 10 seconds ago Up 9 seconds ago logserver

Show Suggested Answer

Suggested Answer: A

by Herminia at Feb 26, 2023, 10:42 AM

Limited Time Offer

25%

Off

Get Premium EX200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Brandon

7 months ago

I thought the container would disappear after a reboot, but it stayed? Interesting!

upvoted 0 times

...

Gracie

7 months ago

Just make sure to set the right permissions on the journal files.

upvoted 0 times

...

Helaine

7 months ago

Wait, you can run podman without root? That's new to me!

upvoted 0 times

...

Earnestine

7 months ago

Totally agree, that error is a bummer!

upvoted 0 times

...

Lenna

7 months ago

You need cgroups v2 for podman stats in rootless mode.

upvoted 0 times

...

Christiane

8 months ago

I remember something about enabling linger for user services, but I'm a bit confused about how it affects the container's behavior after a reboot.

upvoted 0 times

...

Emelda

8 months ago

I feel like I should double-check the permissions on the `/home/shangrila/container-logserver` directory after copying the journal files.

upvoted 0 times

...

Rosendo

8 months ago

I think we did a similar question about persistent storage with Podman, but I can't recall the exact flags we used for mounting.

upvoted 0 times

...

Jestine

8 months ago

I remember we practiced how to copy journal files, but I'm not sure if I need to use `sudo` for the `cp` command in this case.

upvoted 0 times

...

Chauncey

8 months ago

Okay, let's see. ActionTrail, Log Service, and Key Management Service seem like the most relevant options for security-related services.

upvoted 0 times

...

Cletus

8 months ago

I'm a bit lost on this one. I feel like none of the options perfectly address the underlying problem without compromising security.

upvoted 0 times

...

Rhea

8 months ago

Providing them with a Cisco UCS server that hosts ISE could be a good option, but that might be overkill for just evaluating the product. The dCloud account seems like a simpler solution.

upvoted 0 times

...

Anisha

1 year ago

Wait, did they just say 'reboot' in a container question? I hope that doesn't mean I have to restart the entire server to test this solution. That would be a real pain!

upvoted 0 times

Cecily

11 months ago

Don't worry, you don't have to reboot the server, just restart the container and you should be good to go.

upvoted 0 times

...

Mollie

12 months ago

Yeah, restarting the container should be enough to see if the changes work.

upvoted 0 times

...

Tamesha

12 months ago

No need to restart the entire server, you can just restart the container to test the solution.

upvoted 0 times

...

Tiera

1 year ago

This is a great example of how containers can help us manage system services more effectively. I like how the question covers both the host-level and container-level configuration.

upvoted 0 times

Emilio

12 months ago

It's a good way to ensure all journal files are stored and persistent across reboots.

upvoted 0 times

...

Margurite

12 months ago

Yes, containers help with host-level and container-level configuration.

upvoted 0 times

...

Serita

1 year ago

Containers make managing system services easier.

upvoted 0 times

...

Dottie

1 year ago

Haha, I wonder if the exam creators are trying to trip us up with that 'container-logserver' directory name. I bet they're just testing our attention to detail!

upvoted 0 times

Penney

12 months ago

Definitely, can't afford to miss any steps when setting up containers.

upvoted 0 times

...

Penney

12 months ago

It's all about being thorough and following the instructions to the letter.

upvoted 0 times

...

Penney

1 year ago

I know right! They really want to make sure we're paying attention to every detail.

upvoted 0 times

...

Yasuko

1 year ago

Hmm, the steps look straightforward, but I'm curious about the performance impact of mounting the entire journal directory into the container. Wouldn't it be better to use a smaller, dedicated log directory instead?

upvoted 0 times

Deangelo

11 months ago

Definitely. It's always good to optimize resource usage for better performance.

upvoted 0 times

...

Lyla

11 months ago

I agree. It's important to consider performance implications when setting up persistent storage.

upvoted 0 times

...

Margart

11 months ago

You're right. Using a smaller, dedicated log directory might be a better option.

upvoted 0 times

...

Lavonda

11 months ago

It's a valid concern. Mounting the entire journal directory could impact performance.

upvoted 0 times

...

Naomi

11 months ago

Agreed. Using a smaller log directory would likely improve performance.

upvoted 0 times

...

Shenika

12 months ago

That's a good point. It would be more efficient to use a dedicated log directory.

upvoted 0 times

...

Loreta

1 year ago

You could create a smaller log directory and only mount that into the container.

upvoted 0 times

...

Galen

1 year ago

It's a valid concern. Mounting the entire journal directory could impact performance.

upvoted 0 times

...

Glen

1 year ago

I think the explanation provided really helped in understanding the steps.

upvoted 0 times

...

Dominga

1 year ago

I agree, configuring the host journal was tricky.

upvoted 0 times

...

Tamekia

1 year ago

Wow, this is a comprehensive question! Configuring the journal to persist across reboots and setting up a dedicated container for the log server is really important for maintaining system logs.

upvoted 0 times