Hi Karsten,
Thanks for the follow up... can't say that I am too happy to receive it
though ;)
So, you claim, that on 'reload' fail2ban still keeps the files open or
smth which forbids logrotate to complete the operation safely?
I guess the issue is with something else (i.e. not not-closed properly
files), since that fix kept users happy around the globe for 1.5 years
;) although who knows.
Your suggested changes are pretty much a workaround -- doing complete
shutdown/powerup cycle for fail2ban, which might has its own cons, and
for that reason 'reload' was implemented.
Would it be possible for you to provide more information about what is
actually happening with your system whenever you observe stalled
logrotate? what files does fail2ban-server has open at that
point, what is the list/pstree of running processes (fail2ban/logrotate
related), what is in the fail2ban's logfile, whenver it is ran with max
verbosity?
thanks in advance!
On Mon, 07 Sep 2009, Karsten Lindemann wrote:
> We have troubles as well on etch and lenny (amd64).
> Bug is not fixed in recent distribution - the logrotate script
> contains a missconfiguration:
> * for
> fail2ban 0.7.5-2etch1:
> change the following line in
> /etc/logrotate.d/fail2ban
> invoke-rc.d --quiet fail2ban reload >/dev/null ->
> /etc/init.d/fail2ban restart >/dev/null
> and in
> /etc/fail2ban/fail2ban.conf
> socket = /tmp/fail2ban.sock ->
> socket = /var/run/fail2ban.sock
> * for
> fail2ban 0.8.3-2sid1
> change the following line in
> /etc/logrotate.d/fail2ban
> invoke-rc.d --quiet fail2ban reload >/dev/null ->
> /etc/init.d/fail2ban restart >/dev/null
> After that restart fail2ban and kill remaining hung tasks from
> logrotate. Fail2ban will also start logging again...
> Kind regards,
> Karsten Lindemann
--
.-.
=------------------------------ /v\ ----------------------------=
Keep in touch // \\ (yoh@|www.)onerussian.com
Yaroslav Halchenko /( )\ ICQ#: 60653192
Linux User ^^-^^ [175555]
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
