NCM does not work when /tmp has noexec

Products

• Network Observability
• VMware Smart Assurance

Issue/Introduction

• Jobs queued for execution
• Few NCM functionalities do not work when /tmp has noexec 

Environment

All Supported NCM versions

Cause

/tmp has noexec permission

Resolution

Temporary workaround is to provide /tmp with exec permission when user is not ready to restart service in NCM which is documented in All Jobs are queued for execution

Else they can follow below, these steps to be carried out in NCM AS (Application/Server) or NCM CS (Combination Server):

1. Set Environmental variable as 

   source /etc/voyence.conf

2. Create a temp directory under NCM default installation path as 

   mkdir $VOYENCE_HOME/tmp

3. Set Ownership for created folder as 

   chown -R ncm:voyence $VOYENCE_HOME/tmp

4. Set permission as 

   chmod 755 $VOYENCE_HOME/tmp

5. Take backup of $VOYENCE_HOME/bin/service/ncm-as to non-NCM path like /tmp
6. Open $VOYENCE_HOME/bin/service/ncm-as and add 

   -Djna.tmpdir=$VOYENCE_HOME/tmp to CATALINA_OPTS

   screenshot for reference:
   
7. Take backup of $VOYENCE_HOME/bin/service/webtomcat to non-NCM path like /tmp
8. Open $VOYENCE_HOME/bin/service/webtomcat and add 

   -Djna.tmpdir=$VOYENCE_HOME/tmp to CATALINA_OPTS

    screenshot for reference
   
9. Take backup of $VOYENCE_HOME/cm/daemon/bin/controldaemon.sh to non-NCM path like /tmp
10. Open $VOYENCE_HOME/cm/daemon/bin/controldaemon.sh, add 

    -Djava.io.tmpdir=$VOYENCE_HOME/tmp 
    and 
    -Djna.tmpdir=$VOYENCE_HOME/tmp to JAVA_OPTIONS

    screenshot for reference
    

11. Restart vcmaster service as 

    systemctl restart vcmaster

12. Verify job pull, it will work with /tmp having noexec. 

This fix will be added in GA NCM 25.4.7 release.