Hi, On 2014-10-20 06:48, David Lang wrote: > The only time I have seen this happen is when there are a LOT of messages > being > generated at boot time, and rsyslog fills it's queue and can't deliver the > messages (frequently because they're trying to go to a database or remote > machine that's not up yet) > > If you configure impstats to write directly to a file, you can see what the > queue sizes are like at startup, both normally and when you have a problem. > > If the queue fills up you can't login because ssh and login will try to log > the > fact that you are logging in (especially if you are trying to get to root) > and > block until the log is accepted by the syslog daemon.
I don't think that's the case of the current problem: The system boots. The init system kicks in and will start service per service. rsyslog starts early per default in our default runlevel, because many other services defines soft and hard dependencies on syslog. That's how a normal boot on my test system looks like: > rc sysinit logging started at Mon Oct 20 11:57:59 2014 > > > OpenRC 0.13.1 is starting up Gentoo Linux (x86_64) > > * /proc is already mounted > * Mounting /run ... > * /run/openrc: creating directory > * /run/lock: creating directory > * /run/lock: correcting owner > * Remounting devtmpfs on /dev ... > [ ok ] > * Mounting /dev/mqueue ... > [ ok ] > * Mounting /dev/shm ... > [ ok ] > * Creating list of required static device nodes for the current kernel ... > [ ok ] > * Mounting debug filesystem ... > [ ok ] > * Mounting cgroup filesystem ... > [ ok ] > * Mounting fuse control filesystem ... > [ ok ] > * setting up tmpfiles.d entries for /dev ... > [ ok ] > * Starting udev ... > [ ok ] > * Generating a rule to create a /dev/root symlink ... > [ ok ] > * Populating /dev with existing devices through uevents ... > [ ok ] > * Waiting for uevents to be processed ... > [ ok ] > > rc sysinit logging stopped at Mon Oct 20 11:57:59 2014 > > > rc boot logging started at Mon Oct 20 11:57:59 2014 > > * Setting system clock using the hardware clock [UTC] ... > [ ok ] > * Autoloaded 0 module(s) > * Checking local filesystems ... > root: clean, 469825/1362720 files, 2614781/5446656 blocks > Boot: clean, 113/32768 files, 119427/131072 blocks > portage: clean, 182308/524288 files, 582410/2097152 blocks > distfiles: clean, 3513/327680 files, 1281404/1310720 blocks > [ ok ] > * Remounting root filesystem read/write ... > [ ok ] > * Remounting filesystems ... > [ ok ] > * Activating swap devices ... > [ ok ] > * Mounting local filesystems ... > [ ok ] > * Configuring kernel parameters ... > * Applying /etc/sysctl.d/foo.conf ... > * Applying /etc/sysctl.conf ... > net.ipv6.conf.all.accept_ra = 0 > net.ipv6.conf.default.accept_ra = 0 > kernel.core_pattern = /var/tmp/coredumps/%e.%p.%t > [ ok ] > * Creating user login records ... > [ ok ] > * Wiping /tmp directory ... > [ ok ] > * Setting hostname to vm-gentoo-x64 ... > [ ok ] > * Setting terminal encoding [UTF-8] ... > [ ok ] > * Setting keyboard mode [UTF-8] ... > [ ok ] > * Loading key mappings [us] ... > [ ok ] > * Bringing up network interface lo ... > [ ok ] > * Updating microcode ... > [ ok ] > * setting up tmpfiles.d entries ... > [ ok ] > * Checking "/var/lib/shorewall/firewall" ... > [ ok ] > * Initializing "shorewall" ... > [ ok ] > * Activating additional swap space ... > [ ok ] > * Initializing random number generator ... > [ ok ] > > rc boot logging stopped at Mon Oct 20 11:58:01 2014 > > > rc default logging started at Mon Oct 20 11:58:01 2014 > > * Checking rsyslogd's configuration ... > [ ok ] > * Starting rsyslog ... > [ ok ] > * Starting fcron ... > [ ok ] > * Bringing up interface eth0 > * config_eth0 not specified; defaulting to DHCP > * dhcp ... > * Running dhcpcd ... > dhcpcd[2947]: version 6.5.1 starting > dhcpcd[2947]: DUID 00:01:00:01:19:4b:08:dd:00:ff:ff:ff:ff:ff > dhcpcd[2947]: eth0: IAID 29:ff:ff:ff > dhcpcd[2947]: eth0: soliciting a DHCP lease > dhcpcd[2947]: eth0: offered 192.1.0.157 from 192.1.0.1 > dhcpcd[2947]: eth0: leased 192.1.0.157 for 3600 seconds > dhcpcd[2947]: eth0: adding route to 192.1.0.0/24 > dhcpcd[2947]: eth0: adding default route via 192.1.0.254 > dhcpcd[2947]: forked to background, child pid 2993 > [ ok ] > * received address 192.1.0.157/24 > [ ok ] > * Mounting network filesystems ... > [ ok ] > * Starting nscd ... > [ ok ] > * Starting ntpd ... > [ ok ] > * Starting postfix ... > [ ok ] > * Starting shorewall ... > [ ok ] > * Starting sshd ... > [ ok ] > * Starting local ... > [ ok ] > > rc default logging stopped at Mon Oct 20 11:58:08 2014 After that, I'll get a prompt (or when sshd sshd was started, I can get shell access). But when this problem occurs, the init system will "stop". No further service will start and I cannot stop the currently running rsyslog runscript. As said, CTRL+ALT+DEL will work... -Thomas _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
