There really is no error message. The system uses a lot of ssh for custom monitors. What we find is that during the time of the semi-hourly cfengine run the load average spikes and we get a lot of the ssh processes as well as the cfservd threads spinning on a kernel semaphore related to /dev/random. Pumping /dev/random with more pseudo random data relieves the load somewhat.
_____________________________________________________________________ Darryl Baker Senior Unix Specialist gedas USA, Inc. Operational Services Business Unit 3800 Hamlin Road Auburn Hills, MI 48326 US [EMAIL PROTECTED] http://www.gedasusa.com _____________________________________________________________________ > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Thursday, May 19, 2005 2:56 AM > To: Baker, Darryl > Cc: '[EMAIL PROTECTED]'; help-cfengine@gnu.org > Subject: RE: ChecksumDatabase more details wanted, > /dev/random draining > > > Quoting "Baker, Darryl" <[EMAIL PROTECTED]>: > > > We are using cfenvd and still seeing a drain on /dev/random > that spikes on > > the semi-hourly runs. > > This seems odd. The error message could not be coming from > cfengine then, or?? > > > So a change in the mtime of any of the files causes the > whole database to be > > rebuilt? > > Of course not. Only the entry for the modified file is updated!! > > M > > > > > _____________________________________________________________________ > > Darryl Baker > > Senior Unix Specialist > > gedas USA, Inc. > > Operational Services Business Unit > > 3800 Hamlin Road > > Auburn Hills, MI 48326 > > US > > [EMAIL PROTECTED] > > http://www.gedasusa.com > > > _____________________________________________________________________ > > > >> -----Original Message----- > >> From: [EMAIL PROTECTED] > >> > [mailto:[EMAIL PROTECTED] Behalf > >> Of [EMAIL PROTECTED] > >> Sent: Wednesday, May 18, 2005 7:46 AM > >> To: help-cfengine@gnu.org > >> Subject: Re: ChecksumDatabase more details wanted, > >> /dev/random draining > >> > >> > >> > >> You could try running cfenvd to avoid having to use /dev/random. > >> > >> Thye db is updated when there is an mtime change. on the > source file. > >> > >> M > >> > >> Quoting "Baker, Darryl" <[EMAIL PROTECTED]>: > >> > >> > We are trying to optimize our configuration. We are > >> thinking about using the > >> > ChecksumDatabase option in cfservd.conf but the simple > >> paragraph in the docs > >> > we can find doesn't explain everything. What causes the > >> checksum database to > >> > be updated, mode changed, or back rev'ed? Is there a way to > >> keep as much of > >> > the database in memory as possible? > >> > > >> > The other question I have is dealing with how much data is > >> being pulled from > >> > /dev/random on the server. The box this is running on is > >> having a problem > >> > with cfservd and ssh (client) blocking waiting for more > >> data in /dev/random. > >> > Is there a way of reducing the amount of data being read > >> from /dev/random > >> > without reducing security? > >> > > >> > This is a Solaris 9 Sparc box running 2.1.14. > >> > > >> > > >> > _____________________________________________________________________ > >> > Darryl Baker > >> > Senior Unix Specialist > >> > gedas USA, Inc. > >> > Operational Services Business Unit > >> > 3800 Hamlin Road > >> > Auburn Hills, MI 48326 > >> > [EMAIL PROTECTED] > >> > http://www.gedasusa.com > >> > > >> > _____________________________________________________________________ > >> > > >> > > >> > _______________________________________________ > >> > Help-cfengine mailing list > >> > Help-cfengine@gnu.org > >> > http://lists.gnu.org/mailman/listinfo/help-cfengine > >> > > >> > >> > >> > >> ---------------------------------------------------------------- > >> This message was sent using IMP, the Internet Messaging Program. > >> > >> > >> > >> _______________________________________________ > >> Help-cfengine mailing list > >> Help-cfengine@gnu.org > >> http://lists.gnu.org/mailman/listinfo/help-cfengine > >> > > > > > > ---------------------------------------------------------------- > This message was sent using IMP, the Internet Messaging Program. >
Baker, Darryl.vcf
Description: Binary data
_______________________________________________ Help-cfengine mailing list Help-cfengine@gnu.org http://lists.gnu.org/mailman/listinfo/help-cfengine