Issue I found in 2026.02 - Blackbox Exporter cannot actually use the icmp probe module due to lack of permissions and a “socket: operation not permitted” error. See details below. Am I missing something simple? The docs didn’t show anything too special about the exporter config.
ryanb@ier01:~$ show version
Version: VyOS 2026.02
Release train: circinus
Release flavor: generic
Built by: autobuild@vyos.net
Built on: Mon 09 Feb 2026 20:41 UTC
Build UUID: 14201a6c-8a90-4058-92ec-51359bc39ccc
Build commit ID: e4c4eddad9b984
Architecture: x86_64
Boot via: installed image
System type: KVM guest
Hardware vendor: QEMU
Hardware model: Standard PC (Q35 + ICH9, 2009)
Hardware S/N:
Hardware UUID: 535cf5e5-9882-4de1-903f-d240f2e10fd1
Copyright: VyOS maintainers and contributors
set service monitoring prometheus blackbox-exporter listen-address '10.1.0.34'
set service monitoring prometheus blackbox-exporter modules icmp name icmp preferred-ip-protocol 'ipv4'
ryanb@ier01:~$ service blackbox_exporter status
● blackbox_exporter.service - Blackbox Exporter
Loaded: loaded (/etc/systemd/system/blackbox_exporter.service; disabled; preset: enabled)
Active: active (running) since Sat 2026-03-21 23:03:51 UTC; 4h 47min ago
Docs: https://github.com/prometheus/blackbox_exporter
Main PID: 2439567 (blackbox_export)
Tasks: 15 (limit: 4633)
Memory: 34.5M
CPU: 1min 846ms
CGroup: /system.slice/blackbox_exporter.service
└─2439567 /usr/sbin/blackbox_exporter --web.listen-address=10.1.0.34:9115 --config.file=/run/blackbox_exporter/config.yml
Mar 22 03:51:38 ier01 blackbox_exporter[2439567]: time=2026-03-22T03:51:38.333Z level=INFO source=utils.go:74 msg="Resolved target address" module=icmp target=10.1.0.34 target=10.1.0.34 ip=10.1.0.34
Mar 22 03:51:38 ier01 blackbox_exporter[2439567]: time=2026-03-22T03:51:38.333Z level=INFO source=icmp.go:108 msg="Creating socket" module=icmp target=10.1.0.34
Mar 22 03:51:38 ier01 blackbox_exporter[2439567]: time=2026-03-22T03:51:38.333Z level=ERROR source=icmp.go:187 msg="Error listening to socket" module=icmp target=10.1.0.34 err="listen ip4:icmp 0.0.0.0: socket: operation not permitted"
Mar 22 03:51:38 ier01 blackbox_exporter[2439567]: time=2026-03-22T03:51:38.333Z level=ERROR source=handler.go:135 msg="Probe failed" module=icmp target=10.1.0.34 duration_seconds=0.000226955
Mar 22 03:51:38 ier01 blackbox_exporter[2439567]: time=2026-03-22T03:51:38.334Z level=INFO source=handler.go:122 msg="Beginning probe" module=icmp target=10.1.0.34 probe=icmp timeout_seconds=5
Mar 22 03:51:38 ier01 blackbox_exporter[2439567]: time=2026-03-22T03:51:38.334Z level=INFO source=utils.go:61 msg="Resolving target address" module=icmp target=10.1.0.34 target=10.1.0.34 ip_protocol=ip4
Mar 22 03:51:38 ier01 blackbox_exporter[2439567]: time=2026-03-22T03:51:38.334Z level=INFO source=utils.go:74 msg="Resolved target address" module=icmp target=10.1.0.34 target=10.1.0.34 ip=10.1.0.34
Mar 22 03:51:38 ier01 blackbox_exporter[2439567]: time=2026-03-22T03:51:38.334Z level=INFO source=icmp.go:108 msg="Creating socket" module=icmp target=10.1.0.34
Mar 22 03:51:38 ier01 blackbox_exporter[2439567]: time=2026-03-22T03:51:38.334Z level=ERROR source=icmp.go:187 msg="Error listening to socket" module=icmp target=10.1.0.34 err="listen ip4:icmp 0.0.0.0: socket: operation not permitted"
Mar 22 03:51:38 ier01 blackbox_exporter[2439567]: time=2026-03-22T03:51:38.334Z level=ERROR source=handler.go:135 msg="Probe failed" module=icmp target=10.1.0.34 duration_seconds=0.000171428