I have a pretty old LXC configuration, with
kernel 2.6.32 and
LXC 0.7. The problem is I wasn't able to make all syslog-ng instances in both host and containers work. The syslog-ng daemon is running, however isn't writing anything to log files.
The culprit is the
/dev/log UNIX socket.
The syslog in UNIX system is running in client/server mode:
- client is the
syslog()interface in glibc.
syslog()connects to socket
/dev/logand send messages via the socket.
- and server is the listener of socket
/dev/log, such as syslog-ng, rsyslog.