Hi Andreas,
Thanks for providing the files and the info.
I could reproduce the issue you're facing in unbound version in Oracular
and Noble, but the good case for you, with the 1.19.2-1ubuntu3.1
version, what I got is the OOM killer arising:
Nov 21 09:56:55 Nclamav unbound-helper[916]:
/etc/unbound/unbound.conf.d/unbound.conf:32: error: cannot open include file
'/etc/unbound/zones/security.zone': Too many open files
Nov 21 09:57:30 Nclamav systemd[1]: unbound.service: A process of this unit has
been killed by the OOM killer.
Even with 32 or 64 GB of RAM in a pristine VM.
So, I tried to play with the libevent parameters to optimize unbound,
per [1]:
# with libevent
outgoing-range: 8192
num-queries-per-thread: 4096
and I got a similar error error:
Nov 22 09:20:21 ip-172-31-65-173 unbound-helper[7301]:
/etc/unbound/unbound.conf.d/root-auto-trust-anchor-file.conf:1: error: cannot
open include file '/et>
Nov 22 09:20:21 ip-172-31-65-173 unbound-helper[7301]:
/etc/unbound/unbound.conf.d/unbound.conf:1: error: cannot open include file
'/etc/unbound/unbound.co>
Nov 22 09:20:21 ip-172-31-65-173 unbound-helper[7301]:
/etc/unbound/unbound.conf.d/unbound.conf:1: error: cannot open include file
'/etc/unbound/unbound.co>
Nov 22 09:20:21 ip-172-31-65-173 unbound-helper[7301]:
/etc/unbound/unbound.conf.d/unbound.conf:10: error: cannot open include file
'/etc/unbound/unbound.c>
Nov 22 09:20:21 ip-172-31-65-173 unbound-helper[7301]:
/etc/unbound/unbound.conf.d/unbound.conf:39: error: cannot open include file
'/etc/unbound/zones/sec>
Nov 22 09:21:51 ip-172-31-65-173 systemd[1]: unbound.service: State 'stop-post'
timed out. Terminating.
Nov 22 09:21:51 ip-172-31-65-173 systemd[1]: unbound.service: Failed with
result 'timeout'.
Therefore, I don't know if you have another additional settings to make
it works.
Fortunately, the "memory exhausted" error was reported upstream [2] and
[3], and a fix [4] is included in the last release (1.22.0 [5]) that we
are in the process of releasing in Ubuntu 25.04 Plucky. Once we get it
there, we can patch the rest of the affected versions in the supported
series as part of an SRU process [6].
Then, I'm creating the corresponding tasks per series so that we can
work on them sooner rather than later as time permits.
Thanks again, Andreas.
[1]
https://unbound.docs.nlnetlabs.nl/en/latest/topics/core/performance.html#using-libevent
[2] https://github.com/NLnetLabs/unbound/issues/1127
[3] https://github.com/NLnetLabs/unbound/issues/1129
[4]
https://github.com/NLnetLabs/unbound/commit/db1167c8b38daf2a4352ba3e4e6d54740e999d29
[5] https://github.com/NLnetLabs/unbound/releases/tag/release-1.22.0
[6] https://canonical-sru-docs.readthedocs-hosted.com/en/latest/
** Bug watch added: github.com/NLnetLabs/unbound/issues #1127
https://github.com/NLnetLabs/unbound/issues/1127
** Bug watch added: github.com/NLnetLabs/unbound/issues #1129
https://github.com/NLnetLabs/unbound/issues/1129
** Also affects: unbound (Ubuntu Plucky)
Importance: Undecided
Status: Incomplete
** Also affects: unbound (Ubuntu Focal)
Importance: Undecided
Status: New
** Also affects: unbound (Ubuntu Oracular)
Importance: Undecided
Status: New
** Also affects: unbound (Ubuntu Noble)
Importance: Undecided
Status: New
** Also affects: unbound (Ubuntu Jammy)
Importance: Undecided
Status: New
** Changed in: unbound (Ubuntu Plucky)
Status: Incomplete => Confirmed
** Changed in: unbound (Ubuntu Oracular)
Status: New => Confirmed
** Changed in: unbound (Ubuntu Noble)
Status: New => Confirmed
** Changed in: unbound (Ubuntu Jammy)
Status: New => Confirmed
** Changed in: unbound (Ubuntu Focal)
Status: New => Confirmed
** Summary changed:
- unbound 1.19.2-1ubuntu3.3 with large zone files > 24.000 lines : memory
exhausted
+ unbound cannot start with large zone files > 24.000 lines : memory exhausted
** Tags added: server-todo
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2087526
Title:
unbound cannot start with large zone files > 24.000 lines : memory
exhausted
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unbound/+bug/2087526/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
