How to take into account by pamsc the installation of libcgroup without reinstalling the product

Products

• CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

In linux distributions where cgroups are enabled, correct operation of seosd requires for it to be started in real time priority. This is so in most recent distributions of Linux which have cgroups enabled by default, except for RHEL 7 where they are optional. Please see

Before you begin to install an endpoint

Starting seosd in real time priority in these cases requires the /usr/bin/cgexec binary, usually contained in the libgroup-tools rpm to be present in the system.

In Redhat 7.9 systems where cgroups are optional, if not configured, seosd will fail to start in real time priority.

This document outlines the steps necessary to correct this problem

Environment

PAMSC 14.1 cp05 on linux 7.9

 

Cause

By default cgroup is not installed

Resolution

In this scenario installing libcgroup-tools and restarting PAMSC will not be enough to start seosd in real time priority.

In order to minimize distruptions, the following additional steps will be needed:

mv /opt/seos/bin/seload /opt/seos/bin/seload-bin
cp /opt/seos/lbin/rt-seload /opt/seos/bin/seload

Please note this area is in constant evolution and may change in the future