From 04ea8eadeaba051b87f4570253c5ca742449ed8f Mon Sep 17 00:00:00 2001 From: Matej Vasek Date: Wed, 7 Dec 2022 21:28:27 +0100 Subject: [PATCH] fix: event read from syslog When labes map is too big we may get syslog entry truncated. This breaks JSON parsing making event loading impossible. [NO NEW TESTS NEEDED] Signed-off-by: Matej Vasek --- libpod/events/journal_linux.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/libpod/events/journal_linux.go b/libpod/events/journal_linux.go index e0b5ebb515..da2156c2c8 100644 --- a/libpod/events/journal_linux.go +++ b/libpod/events/journal_linux.go @@ -101,6 +101,10 @@ func (e EventJournalD) Read(ctx context.Context, options ReadOptions) error { logrus.Errorf("Unable to close journal :%v", err) } }() + err = j.SetDataThreshold(0) + if err != nil { + logrus.Warnf("cannot set data threshold: %v", err) + } // match only podman journal entries podmanJournal := sdjournal.Match{Field: "SYSLOG_IDENTIFIER", Value: "podman"} if err := j.AddMatch(podmanJournal.String()); err != nil {