如何调试失败的systemctl服务（代码=已退出，状态= 217 / USER）？

Question

我正在尝试添加第一个服务rhel7（位于AWS / EC2中），但是-服务配置不正确-正如我得到的：

[ec2-user@ip-172-30-1-96 ~]$ systemctl status clouddirectd.service -l
? clouddirectd.service - CloudDirect Daemon
   Loaded: loaded (/usr/lib/systemd/system/clouddirectd.service; enabled; vendor preset: disabled)
   Active: activating (auto-restart) (Result: exit-code) since Tue 2018-01-09 16:09:42 EST; 8s ago
 Main PID: 10064 (code=exited, status=217/USER)

Jan 09 16:09:42 ip-172-30-1-96.us-west-1.compute.internal systemd[1]: clouddirectd.service: main process exited, code=exited, status=217/USER
Jan 09 16:09:42 ip-172-30-1-96.us-west-1.compute.internal systemd[1]: Unit clouddirectd.service entered failed state.
Jan 09 16:09:42 ip-172-30-1-96.us-west-1.compute.internal systemd[1]: clouddirectd.service failed.

也：

[ec2-user@ip-172-30-1-96 ~]$ systemctl is-active clouddirectd
activating
[ec2-user@ip-172-30-1-96 ~]$ sudo systemctl list-units --type service --all | grep clouddirectd
  clouddirectd.service                                  loaded    activating auto-restart CloudDirect Daemon

我的单位文件是：

[ec2-user@ip-172-30-1-96 ~]$ cat /usr/lib/systemd/system/clouddirectd.service
[Unit]
Description=CloudDirect Daemon
After=network.target

[Service]
Environment=AWS_SHARED_CREDENTIALS_FILE=/etc/sonar/.aws/credentials
#ExecStart=/usr/lib/sonar/clouddirect/virtualenv/bin/python /usr/bin/sonar/clouddirectd -c /etc/sonar/clouddirect/clouddirectd.conf
ExecStart=/usr/lib/sonar/clouddirect/virtualenv/bin/python /usr/bin/clouddirect -c /etc/sonar/clouddirect.conf
# @PERM@ allow group write permission on newly created files
UMask=0007
#User=clouddirectd
User=clouddirect
Group=sonar
KillSignal=SIGINT
TimeoutStopSec=60min
Restart=always
RestartSec=5

[Install]
WantedBy=multi-user.target

您能建议如何调试systemctl服务，使其不会自杀吗？

Answer 1

错误217表示在尝试启动服务时用户不存在。在您的情况下，您在服务中指定的用户是clouddirect。

 Main PID: 10064 (code=exited, status=217/USER)

Jan 09 16:09:42 ip-172-30-1-96.us-west-1.compute.internal systemd[1]: clouddirectd.service: main process exited, code=exited, status=217/USER

如果这不是实际的用户名（例如，如果有错字），可能是由于用户属于某个外部用户存储（例如LDAP或Active Directory）以及需要的服务的一部分而引起的。允许Linux服务器访问外部用户存储的启动尚未启动。例如，vasd.service启动一种产品，该产品用于允许Linux对Active Directory进行身份验证，如果vasd.service尚未启动，并且您指定了仅在Active Directory中可用的用户，则需要在该After=行中添加该服务。例如：

After=network.target vasd.service