lxd client.go is way too verbose at DEBUG level and probably leaking credentials

Bug #1635017 reported by Aaron Bentley
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Canonical Juju
Incomplete
Low
Unassigned

Bug Description

This is so verbose I can't tell what's going on:
http://reports.vapour.ws/releases/4506/job/functional-scale-out/attempt/1470

Raw responses should be logged at the TRACE level at most, because they may contain credentials.

This makes it hard to do QA because it's nearly impossible to interpret test failures.

Revision history for this message
Ian Booth (wallyworld) wrote :

This logging actually comes from upstream

https://github.com/lxc/lxd/blob/master/client.go#L124

Revision history for this message
Anastasia (anastasia-macmood) wrote :

LXD upstream issue created: https://github.com/lxc/lxd/issues/2532

Changed in juju:
status: Triaged → Won't Fix
milestone: 2.1.0 → none
Revision history for this message
anatoly techtonik (techtonik) wrote :

I can't see the report. Looks like it requires internal Canonical privileges.

Revision history for this message
Anastasia (anastasia-macmood) wrote :

@Aaron

Could you please paste offending log lines from report as a scrubbed extract for external people to view and identify?

Revision history for this message
Anastasia (anastasia-macmood) wrote :

From lxd issue, Stephane's response:

The logging code we use in LXD itself doesn't have a TRACE level. The fact that you're getting those in Juju seems to indicate that you're registering a log handler in the juju code.

If you don't want LXD debug output to make it to your logs, just don't register a handler for the Debug output.

Looks like the offending part of the juju code is: https://github.com/juju/juju/blob/staging/tools/lxdclient/client.go#L67

Closing this issue as LXD's logging is consistent, it just doesn't match the log levels of Juju and the way to fix this is to change the log handler that Juju registers.

Changed in juju:
status: Won't Fix → Triaged
importance: High → Medium
milestone: none → 2.0.1
Revision history for this message
Ian Booth (wallyworld) wrote :

But we new debug output from lxd. We just don't want raw responses logged as debug. lxd could update its logging library to use github.com/juju/loggo which does provide a trace option. Or it could add trace it its own logging.

Curtis Hovey (sinzui)
Changed in juju:
milestone: 2.0.1 → none
Revision history for this message
Anastasia (anastasia-macmood) wrote :

This is a very old report and a lot of things have changed both on Juju side and its integration with LXD as well as on the LXD side as well.

I am marking this as an Incomplete until we get confirmation that this is still an issue on newer versions of Juju. However, if there is an issue, a new report with more recent logs and code references is more desirable than re-opening this one.

Changed in juju:
status: Triaged → Incomplete
Revision history for this message
Canonical Juju QA Bot (juju-qa-bot) wrote :

This bug has not been updated in 2 years, so we're marking it Low importance. If you believe this is incorrect, please update the importance.

Changed in juju:
importance: Medium → Low
tags: added: expirebugs-bot
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.