| Var full suite a process toujours ouvert |
| Article original Publié le : 05 avril 2021 Mise a jour le : – |
Un p’tit tips suite a un var full
|
1 |
# df -h |
|
1 2 3 4 5 6 7 8 9 10 |
Sys. de fichiers Taille Utilisé Dispo Uti% Monté sur devtmpfs 991M 0 991M 0% /dev tmpfs 1000M 0 1000M 0% /dev/shm tmpfs 1000M 704K 999M 1% /run tmpfs 1000M 0 1000M 0% /sys/fs/cgroup /dev/mapper/mainvg-root 2,7G 1,9G 630M 76% / <strong>/dev/mapper/mainvg-var 4,2G 4,1G 0 100% /var</strong> /dev/mapper/mainvg-tmp 1,5G 3,1M 1,4G 1% /tmp /dev/mapper/mainvg-spool 144M 1,6M 132M 2% /var/spool /dev/vda1 240M 143M 85M 63% /boot |
Pourtant la volumétrie parait normale et pas de problème d’inode également
|
1 |
# du -sh /var/* |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 |
4,0K adm 195M cache 1,1M db 8,0K empty 12K kerberos 372M lib 4,0K local 0 lock 16K lock.lockmove~ 1,1G log 16K lost+found 0 mail 4,0K nis 4,0K opt 4,0K preserve 0 run 67K spool 80M tmp 4,0K yp |
Il faut vérifier du coté des process, avec lsof on remarque que le process ulogd a un status deleted avec une taille de 2,5GO
|
1 |
# lsof +L1 |
ou
|
1 |
lsof | grep deleted |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 |
<span style="font-size: 8pt;">COMMAND PID USER FD TYPE DEVICE SIZE/OFF NLINK NODE NAME systemd-j 448 root txt REG 253,3 346152 0 131861 /usr/lib/systemd/systemd-journald;5e689a98 (deleted) dbus-daem 623 dbus 12r REG 253,2 10406312 0 131418 /var/lib/sss/mc/initgroups (deleted) bacula-fd 638 root 3r REG 253,2 10406312 0 133998 /var/lib/sss/mc/initgroups (deleted) systemd-l 795 root txt REG 253,3 635736 0 137616 /usr/lib/systemd/systemd-logind;5e689a98 (deleted) systemd-l 795 root 16r REG 253,2 8406312 0 131126 /var/lib/sss/mc/passwd (deleted) agetty 809 root txt REG 253,3 49640 0 132958 /usr/sbin/agetty;5e689a98 (deleted) anacron 7543 root 5w REG 253,0 11376 0 15 /tmp/fileJEPx44 (deleted) anacron 7543 root 6r REG 253,0 11376 0 15 /tmp/fileJEPx44 (deleted) run-parts 7763 root 1w REG 253,0 11376 0 15 /tmp/fileJEPx44 (deleted) run-parts 7763 root 2w REG 253,0 11376 0 15 /tmp/fileJEPx44 (deleted) awk 9668 root 1w REG 253,0 11376 0 15 /tmp/fileJEPx44 (deleted) awk 9668 root 2w REG 253,0 11376 0 15 /tmp/fileJEPx44 (deleted) ntpd 10558 ntp 4r REG 253,2 10406312 0 134216 /var/lib/sss/mc/initgroups (deleted) sssd 10930 root 15r REG 253,2 10406312 0 134216 /var/lib/sss/mc/initgroups (deleted) sssd_be 10931 root 19r REG 253,2 10406312 0 134216 /var/lib/sss/mc/initgroups (deleted) bash 17474 m.bouvier 0u CHR 136,0 0t0 0 3 /dev/pts/0 (deleted) bash 17474 m.bouvier 1u CHR 136,0 0t0 0 3 /dev/pts/0 (deleted) bash 17474 m.bouvier 2u CHR 136,0 0t0 0 3 /dev/pts/0 (deleted) bash 17474 m.bouvier 255u CHR 136,0 0t0 0 3 /dev/pts/0 (deleted) <strong>ulogd 18894 root 4w REG 253,2 2563682887 0 3379 /var/log/ulogd/ulogd_syslogemu.log (deleted) ulogd 18894 root 7w REG 253,2 2563682887 0 3379 /var/log/ulogd/ulogd_syslogemu.log (deleted) ulogd 18894 root 11w REG 253,2 2563682887 0 3379 /var/log/ulogd/ulogd_syslogemu.log (deleted)</strong> sudo 19877 root 0u CHR 136,2 0t0 0 5 /dev/pts/2 (deleted) sudo 19877 root 1u CHR 136,2 0t0 0 5 /dev/pts/2 (deleted) sudo 19877 root 2u CHR 136,2 0t0 0 5 /dev/pts/2 (deleted) bash 19878 root 0u CHR 136,2 0t0 0 5 /dev/pts/2 (deleted) bash 19878 root 1u CHR 136,2 0t0 0 5 /dev/pts/2 (deleted) bash 19878 root 2u CHR 136,2 0t0 0 5 /dev/pts/2 (deleted) bash 19878 root 255u CHR 136,2 0t0 0 5 /dev/pts/2 (deleted) nscd 25255 nscd 6r REG 253,2 10406312 0 134216 /var/lib/sss/mc/initgroups (deleted) nscd 25255 nscd 8u REG 0,19 217032 0 9133364 /run/nscd/dbAOzaWW (deleted) nscd 25255 nscd 9r REG 0,19 217032 0 9133364 /run/nscd/dbAOzaWW (deleted) rpc.statd 25378 rpcuser txt REG 253,3 99936 0 132383 /usr/sbin/rpc.statd;5f4cc839 (deleted)</span> |
Il faut tuer le process et relancer ulogd si celui-ci est stoppé
|
1 |
# kill -9 18894 |
Puis revérifier l’espace disque
|
1 |
# df -h |
|
1 2 3 4 5 6 7 8 9 10 |
Sys. de fichiers Taille Utilisé Dispo Uti% Monté sur devtmpfs 991M 0 991M 0% /dev tmpfs 1000M 0 1000M 0% /dev/shm tmpfs 1000M 704K 999M 1% /run tmpfs 1000M 0 1000M 0% /sys/fs/cgroup /dev/mapper/mainvg-root 2,7G 1,9G 630M 76% / <strong>/dev/mapper/mainvg-var 4,2G 1,7G 2,4G 42% /var</strong> /dev/mapper/mainvg-tmp 1,5G 3,1M 1,4G 1% /tmp /dev/mapper/mainvg-spool 144M 1,6M 132M 2% /var/spool /dev/vda1 240M 143M 85M 63% /boot |
Source : https://access.redhat.com/solutions/2316