<html><head>
<style id="css_styles" type="text/css">blockquote.cite { margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc }
blockquote.cite2 {margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc; margin-top: 3px; padding-top: 0px; }
a img { border: 0px; }
li[style='text-align: center;'], li[style='text-align: right;'] { list-style-position: inside;}
body { font-family: Segoe UI; font-size: 12pt; }</style></head><body class="plain"><div>Hi Michael, </div><div><br /></div><div>here is your requested output: </div><div><br /></div><div><b> find /sys/fs/cgroup/system.slice/system-check_mk.slice/ </b></div><div><br /></div><div>produces:</div><div><br /></div><div>root@debian:~# ls -la /sys/fs/cgroup/systemd/system.slice/system-check_mk.slice/<br />total 0<br />drwxr-xr-x 8 root root 0 Sep 16 19:53 .<br />drwxr-xr-x 18 root root 0 Sep 16 19:53 ..<br />-rw-r--r-- 1 root root 0 Sep 16 19:53 cgroup.clone_children<br />-rw-r--r-- 1 root root 0 Sep 16 19:53 cgroup.procs<br />drwxr-xr-x 2 root root 0 Sep 16 19:53 check_mk@0-10.28.1.101:6556-10.28.1.99:61952.service<br />drwxr-xr-x 2 root root 0 Sep 16 19:53 check_mk@1-10.28.1.101:6556-10.28.1.99:61957.service<br />drwxr-xr-x 2 root root 0 Sep 16 19:53 check_mk@2-10.28.1.101:6556-10.28.1.99:61958.service<br />drwxr-xr-x 2 root root 0 Sep 16 19:53 check_mk@3-10.28.1.101:6556-10.28.1.99:61960.service<br />drwxr-xr-x 2 root root 0 Sep 16 19:53 check_mk@4-10.28.1.101:6556-10.28.1.99:61962.service<br />drwxr-xr-x 2 root root 0 Sep 16 19:53 check_mk@5-10.28.1.101:6556-10.28.1.99:61964.service<br />-rw-r--r-- 1 root root 0 Sep 16 19:53 notify_on_release<br />-rw-r--r-- 1 root root 0 Sep 16 19:53 tasks<br /></div><div><br /></div><div><div><div class="plain"><div><b>systemctl status check_mk@0-10.28.1.101:6556-10.28.1.99:61952.service</b></div><div><br /></div><div>produces:</div><div><br /></div></div></div></div><div><br /></div><div>root@debian:~# systemctl status check_mk@0-10.28.1.101:6556-10.28.1.99:61952.service<br />* check_mk@0-10.28.1.101:6556-10.28.1.99:61952.service - Check_MK<br /> Loaded: loaded (/etc/systemd/system/check_mk@.service; static; vendor preset: enabled)<br /> Active: inactive (dead)<br /><br />Sep 16 19:52:26 debian systemd[1]: Started Check_MK (10.28.1.99:61952).<br />Sep 16 19:52:26 debian systemd[1]: check_mk@0-10.28.1.101:6556-10.28.1.99:61952.service: Succeeded.<br /></div>
<div><br /></div><div><br /></div><div>so <span style="font-size: 12pt;"><b>systemctl status system-check_mk.slice </b></span></div><div><span style="font-size: 12pt;"><br /></span></div><div><span style="font-size: 12pt;">produces:</span></div><div><br /></div><div>root@debian:~# systemctl status system-check_mk.slice<br />* system-check_mk.slice<br /> Loaded: loaded<br /> Active: active since Mon 2019-09-16 19:52:26 CEST; 4min 10s ago<br /> Tasks: 0<br /> Memory: 6.0M<br /> CGroup: /system.slice/system-check_mk.slice<br /><div><div class="plain"><div><span style="font-size: 12pt;"> Sep 16 19:52:26 debian systemd[1]: Created slice system-check_mk.slice.</span></div><div><br /></div></div></div>While memory reported by "systemctl status system-check_mk.slice" grows with each execution by call to the corresponding port (6556) of the service.</div><div><br /></div><div><br /></div><div>Kind Regards,</div><div>Julian</div><div><br /></div>
<div>------ Original Message ------</div>
<div>From: "Michael Biebl" <<a href="mailto:biebl@debian.org">biebl@debian.org</a>></div>
<div>To: "Julian Hübenthal" <<a href="mailto:julian@julian-huebenthal.de">julian@julian-huebenthal.de</a>>; <a href="mailto:940021@bugs.debian.org">940021@bugs.debian.org</a></div>
<div>Sent: 13/09/2019 00:55:16</div>
<div>Subject: Re: Bug#940021: systemd: socket activation leads to OOM situation due to slices not getting cleaned up</div><div><br /></div>
<div id="xa65b03579281462"><blockquote type="cite" class="cite2">
<div class="plain_line">Am 13.09.19 um 00:53 schrieb Michael Biebl:</div>
<blockquote type="cite" class="cite">
<div class="plain_line"> Am 12.09.19 um 14:29 schrieb Michael Biebl:</div>
<blockquote type="cite" class="cite">
<div class="plain_line"> Am 11.09.19 um 15:54 schrieb Julian Hübenthal:</div>
<blockquote type="cite" class="cite">
<div class="plain_line"> Just discovered something that may help to debug:</div>
<div class="plain_line"> </div>
<div class="plain_line"> </div>
<div class="plain_line"> </div>
<div class="plain_line"> It does not happen with a simple “Hello World” bash script instead of</div>
<div class="plain_line"> the Check MK Agent.</div>
<div class="plain_line"> </div>
<div class="plain_line"> It does not happen when the Encryption of the Check MK Agent is disabled.</div>
<div class="plain_line"> </div>
<div class="plain_line"> It happens when the Encryption of Check MK is enabled, which should be</div>
<div class="plain_line"> AES 128/256 output.</div>
</blockquote>
<div class="plain_line"> </div>
<div class="plain_line"> </div>
<div class="plain_line"> I wonder if the MK agent does some tricks like locking the memory when</div>
<div class="plain_line"> encryption is on and then does not properly release its resources?</div>
</blockquote>
<div class="plain_line"> </div>
<div class="plain_line"> Just to ask the obvious: The slice(s) themselves are empty, i.e. the</div>
<div class="plain_line"> check-mk agent process has exited (successfully)?</div>
<div class="plain_line"> </div>
<div class="plain_line"> What's the status of such a service that is not cleaned up?</div>
<div class="plain_line"> Taking your first email that would be</div>
<div class="plain_line"> systemctl status check_mk@10-10.28.5.6:6556-10.28.5.1:42844.service</div>
<div class="plain_line"> </div>
<div class="plain_line"> I'd be interested in the output of</div>
<div class="plain_line"> </div>
<div class="plain_line"> find /sys/fs/cgroup/system.slice/system-check_mk.slice/ as well</div>
<div class="plain_line"> </div>
<div class="plain_line"> </div>
</blockquote>
<div class="plain_line"> </div>
<div class="plain_line">As well as systemctl status system-check_mk.slice</div>
<div class="plain_line"> </div>
<div class="plain_line"> </div>
<div class="plain_line"> </div>
<div class="plain_line"> </div>
<div class="plain_line">--</div>
<div class="plain_line">Why is it that all of the instruments seeking intelligent life in the</div>
<div class="plain_line">universe are pointed away from Earth?</div>
<div class="plain_line"> </div>
</blockquote></div>
</body></html>