#1094606 lttng-tools: Package auto-starts lttng-sessiond service that loads lttng kernel module

Package:
lttng-tools
Source:
lttng-tools
Description:
LTTng control and utility programs
Submitter:
Felix Moessbauer
Date:
2025-02-26 20:33:02 UTC
Severity:
normal
#1094606#5
Date:
2025-01-29 10:05:27 UTC
From:
To:
Dear Maintainer,

the package contains a systemd service lttng-sessiond, which auto-starts
and by that loads lttng kernel modules (e.g. lttng_kretprobes). This is
problematic, as these are out-of-tree modules which taint the kernel.
Also it does not work if the modules are not installed or cannot be
loaded (e.g. due to secure boot / kernel lockdown).

I hereby recommend to install that service but do not enable it. If a
user wants to debug with lttng, it can be started on demand.

Best regards,
Felix Moessbauer
Siemens AG

#1094606#10
Date:
2025-02-26 20:23:45 UTC
From:
To:
Hi,

I think the default configuration should enable kernel tracing which is
what most users want. For your specific use-case I would recommend
either not installing 'lttng-modules-dkms' or simply disabling the
lttng-sessiond systemd service.

Regards,

Michael

#1094606#15
Date:
2025-02-26 20:31:31 UTC
From:
To:
Hi, at least for me as a user it was not clear that a '-tools' package
also enables a service. If the package had been called '-daemon' or
alike, things look different.

I did not check what the Debian policies say about this case (if they
state something at all).

Of course this is possible, but my assumption is that users explicitly
install the kernel module to use it on-demand. Usually these tracers
are only running when debugging but not all the time. By that, the
users install all the components - but they should only run when
needed.

Best regards,
Felix