Project

General

Profile

Bug #23304

/.rnd file being written very often

Added by William Grzybowski over 4 years ago. Updated about 4 years ago.

Status:
Resolved
Priority:
Critical
Assignee:
William Grzybowski
Category:
Middleware
Target version:
Seen in:
Severity:
New
Reason for Closing:
Reason for Blocked:
Needs QA:
Yes
Needs Doc:
Yes
Needs Merging:
Yes
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:
ChangeLog Required:
No

boot io.png (16.9 KB) boot io.png Philip Spigelmire, 04/10/2017 02:06 PM
boot data.png (13.5 KB) boot data.png Philip Spigelmire, 04/10/2017 02:06 PM
vopopen.d (967 Bytes) vopopen.d William Grzybowski, 04/13/2017 07:20 AM
10657
10658

Related issues

Copied from FreeNAS - Bug #23200: Replication is writing to the configuration database for every replicationResolved2017-04-07

Associated revisions

Revision 7d7fdc6e (diff)
Added by William Grzybowski about 4 years ago

Create a symlink from /.rnd to /var/tmp/.rnd Ticket: #23304

Revision fe8b29fe (diff)
Added by William Grzybowski about 4 years ago

fix(base): create the /var/tmp/.rnd file Ticket: #23304

Revision bac96751 (diff)
Added by William Grzybowski about 4 years ago

fix(base): create the /var/tmp/.rnd file Ticket: #23304 (cherry picked from commit fe8b29fe444af984d7a0a72d16a49736e3504660)

History

#1 Updated by William Grzybowski over 4 years ago

  • Copied from Bug #23200: Replication is writing to the configuration database for every replication added

#2 Updated by William Grzybowski over 4 years ago

I have tried setting the RANDFILE env var for samba and its still being created in /.rnd .

#3 Updated by William Grzybowski over 4 years ago

  • Priority changed from Nice to have to Critical

#4 Updated by William Grzybowski over 4 years ago

I was able to use dtrace to look into the VFS and found out "net" and "kinit" processes touching /.rnd so far

#5 Updated by William Grzybowski over 4 years ago

Would you mind trying to execute this dtrace script on the machine you're seeing excessive writes?

#6 Updated by Philip Spigelmire over 4 years ago

This is all the showed up after about 10 minutes:

TIME            UID    PID PROCESS      CALL         PATH
4728027119        0  19071 smbd         vop_open     //.rnd
4728027119        0  19071 smbd         vop_open     //.rnd

FWIW, the dtrace isn't capturing all the writes, and I'm getting the following to stderr:

dtrace: buffer size lowered to 512k
dtrace: dynamic variable size lowered to 800k
dtrace: 1088 dynamic variable drops with non-empty dirty list
dtrace: 1381 dynamic variable drops with non-empty dirty list
dtrace: 2910 dynamic variable drops
dtrace: 1041 dynamic variable drops with non-empty dirty list

#7 Updated by William Grzybowski over 4 years ago

I am not capturing any writes, just who is opening that file.

Thanks for running it. We will investigate further.

#8 Updated by William Grzybowski over 4 years ago

  • Status changed from 15 to Investigation

#9 Avatar?id=14398&size=24x24 Updated by Kris Moore over 4 years ago

  • Target version changed from 9.10.3 to 11.0

#10 Updated by William Grzybowski about 4 years ago

I had to work on some other things in the meantime and went back to this today.

I am using Nightly image and I cant even get a /.rnd to be written, ever again.

#11 Updated by William Grzybowski about 4 years ago

Do you use SSL certificate to connect to your AD?

#12 Updated by Philip Spigelmire about 4 years ago

William Grzybowski wrote:

Do you use SSL certificate to connect to your AD?

No - the only things filled:

Allow DNS Updates is checked
Site Name is filled out (we have two sites in active directory)
Kerberos Realm
Idmap for rid is set to start at 10,000.
NetBIOS name is filled out

#13 Updated by Philip Spigelmire about 4 years ago

William Grzybowski wrote:

I had to work on some other things in the meantime and went back to this today.

I am using Nightly image and I cant even get a /.rnd to be written, ever again.

I could install the nightly on one of my backup machines and see what happens if you would like.

#14 Updated by William Grzybowski about 4 years ago

Philip Spigelmire wrote:

William Grzybowski wrote:

I had to work on some other things in the meantime and went back to this today.

I am using Nightly image and I cant even get a /.rnd to be written, ever again.

I could install the nightly on one of my backup machines and see what happens if you would like.

If thats not too much trouble, that would be very helpful.

#15 Updated by Philip Spigelmire about 4 years ago

Updated my similarly configured backup server (replication target) to FreeNAS-11-MASTER-201704251156 (90e54ab)

Opened a share to it in windows and /.rnd was still written to.

#16 Updated by William Grzybowski about 4 years ago

  • Status changed from Investigation to 19

A lot of daemons are started by rc subsystems, which uses HOME=/.
OpenSSL writes .rnd file, and since there is no RANDFILE it uses "/.rnd".

I have pressed the easy button and added a symlink from /.rnd to /var/tmp/.rnd

Please update to next nightly (29 April or after) and see if it is using the tmpfs accordingly.

Thank you!

#17 Updated by William Grzybowski about 4 years ago

commit:7d7fdc6ee|build

#18 Updated by Philip Spigelmire about 4 years ago

I updated to FreeNAS-11-MASTER-201705010408 (8f4a292)

I see the symlink in /, but the target /var/tmp/.rnd does not exist

SMB seems to still work okay.

If I touch /var/tmp/.rnd and open a new SMB session, then data is written to /var/tmp/.rnd

#19 Updated by William Grzybowski about 4 years ago

  • Status changed from 19 to Needs Developer Review
  • Assignee changed from William Grzybowski to Kris Moore

Please review, build repo fe8b29fe444af984d7a0a72d16a49736e3504660 , FIX-23304

#20 Avatar?id=14398&size=24x24 Updated by Kris Moore about 4 years ago

  • Status changed from Needs Developer Review to Reviewed
  • Assignee changed from Kris Moore to William Grzybowski

LGTM!

#22 Updated by Vaibhav Chauhan about 4 years ago

  • Status changed from Reviewed to Ready For Release

#23 Updated by Vaibhav Chauhan about 4 years ago

  • Target version changed from 11.0 to 11.0-RC

#24 Updated by Vaibhav Chauhan about 4 years ago

  • Status changed from Ready For Release to Resolved

Also available in: Atom PDF