When I did the command “systemctl status abrtd.service”, I’ve noticed the following
[root@node1 ~]# systemctl status abrtd.service ● abrtd.service - ABRT Automated Bug Reporting Tool Loaded: loaded (/usr/lib/systemd/system/abrtd.service; enabled; vendor preset: enabled) Active: active (running) since Wed 2022-01-19 09:52:50 +08; 2 months 11 days ago Main PID: 1113 (abrtd) CGroup: /system.slice/abrtd.service └─1113 /usr/sbin/abrtd -d -s Apr 01 22:29:43 node1 abrt-server: Package 'rapidfile' isn't signed with proper key Apr 01 22:29:44 node1 abrt-server: 'post-create' on '/var/spool/abrt/ccpp-2022-04-01-22:29:29-360942' exited with 1 Apr 01 22:29:44 node1 abrt-server: Deleting problem directory '/var/spool/abrt/ccpp-2022-04-01-22:29:29-360942' Apr 01 22:53:14 node1 abrt-server: Executable '/usr/local/intel/2019u5/intelpython3/bin/python3.6' doesn't belong to any package and ProcessUnp...et to 'no' Apr 01 22:53:14 node1 abrt-server: 'post-create' on '/var/spool/abrt/ccpp-2022-04-01-22:52:40-420563' exited with 1 Apr 01 22:53:14 node1 abrt-server: Deleting problem directory '/var/spool/abrt/ccpp-2022-04-01-22:52:40-420563' Apr 01 23:55:22 node1 abrt-server: '.' does not exist Apr 01 23:55:23 node1 abrt-server: 'post-create' on '/var/spool/abrt/ccpp-2022-04-01-23:55:09-432449' exited with 1 Apr 01 23:55:23 node1 abrt-server: Deleting problem directory '/var/spool/abrt/ccpp-2022-04-01-23:55:09-432449' Apr 01 23:55:23 node1 abrt-server: '/var/spool/abrt/ccpp-2022-04-01-23:55:09-432449' does not exist Hint: Some lines were ellipsized, use -l to show in full.
The Issue seems to be caused by
- The abrtd daemon deletes recently created core dumps
- Error: Package isn’t signed with proper key
According to Red Hat Knowledge Base “Why does the abrtd daemon delete recently created application core dumps?”, the resolution can be simply
% vim /etc/abrt/abrt-action-save-package-data.conf
OpenGPGCheck = no ProcessUnpackaged = yes
abrtd daemon – as root – for the new settings to take effect:
# systemctl restart abrtd.service
According to Red Hat, the root cause is written as followed:
When the OpenGPGCheck variable is set to yes (the default setting), this informs ABRT to only analyse and handle crashes in applications provided by packages which are signed by the GPG keys whose locations are listed in the /etc/abrt/gpg_keys file. Setting OpenGPGCheck = no, tells ABRT to catch crashes in all programs. Also, abrt is configured to capture coredump of files installed from rpm only. Variable ‘ProcessUnpackaged’ tells abrt to keep the coredump even if application is not installed via rpm/yum.