Warnings unknown fstype

crowdsec
1

Since the last update on my crowdsec docker container to version: v1.6.1-c6e40191 I get the following warnings in my log.
I have my Docker container running on my Unraid server. I use ZFS as the file system. I have mounted the log files read-only.

time="2024-04-19T11:01:13+02:00" level=info msg="Starting processing data"
time="2024-04-19T11:01:13+02:00" level=warning msg="Could not get fs type for /var/log/swag/access.log : unknown fstype 801189825" type=file
time="2024-04-19T11:01:13+02:00" level=warning msg="Could not get fs type for /var/log/vaultwarden/vaultwarden.log : unknown fstype 801189825" type=file
time="2024-04-19T11:01:13+02:00" level=warning msg="Could not get fs type for /var/log/swag/error.log : unknown fstype 801189825" type=file
time="2024-04-19T11:01:13+02:00" level=warning msg="Could not get fs type for /var/log/authelia/authelia.log : unknown fstype 801189825" type=file
time="2024-04-19T11:01:13+02:00" level=warning msg="Could not get fs type for /var/log/swag/unauthorized.log : unknown fstype 801189825" type=file
time="2024-04-19T11:01:13+02:00" level=warning msg="Could not get fs type for /var/log/paperless/paperless.log : unknown fstype 801189825" type=file
time="2024-04-19T11:01:13+02:00" level=warning msg="Could not get fs type for /var/log/nextcloud/nextcloud.log : unknown fstype 801189825" type=file
time="2024-04-19T11:01:13+02:00" level=warning msg="Could not get fs type for /var/log/jellyfin/log_20240417.log : unknown fstype 801189825" type=file
time="2024-04-19T11:01:13+02:00" level=warning msg="Could not get fs type for /var/log/jellyfin/log_20240418.log : unknown fstype 801189825" type=file
time="2024-04-19T11:01:13+02:00" level=warning msg="Could not get fs type for /var/log/jellyfin/log_20240419.log : unknown fstype 801189825" type=file
time="2024-04-19T11:01:13+02:00" level=warning msg="Could not get fs type for /var/log/homeassistant/home-assistant.log : unknown fstype 801189825" type=file

Does anyone have any idea what this means?

2

Hello,

Since 1.6.1 crowdsec tries to autodetect the filesystem you are using to see if can perform inotify polling on the file (as this doesn’t work on network FS).

The detection is based on a list of hardcoded fs type, and we are missing ZFS in the list.
You can ignore the warning, as crowdsec will defaut to a non-networked FS, so everything should still work as before.

I’ve opened an issue to fix this for the next release: ZFS is missing in the list of autodetected FS · Issue #2949 · crowdsecurity/crowdsec · GitHub

1 Like