martinpitt
commented
5 years ago Thanks for your report! So remotectl eats away all your memory, but the log doesn't say why. As this is specific to your machine and not reproducible on others (at least not without further information), could you at least temporarily install cockpit-ws again? If you don't enable cockpit.socket, it will not actually do anything. Merely installing the package won't enable it, but just in case, please make sure that systemctl is-enabled cockpit.socket says "disabled".
After that, let's first try to run this as normal user in a temporary directory, which is safer:
mkdir -p /tmp/x/cockpit/ws-certs.d
G_MESSAGES_DEBUG=all XDG_CONFIG_DIRS=/tmp/x remotectl certificate --ensureWhat's the output of this? It should normally take only a few seconds. It fails because of a permission error at the end, but that's fine. If it goes haywire, please Control-C it.
The expected output is something like
** INFO: 12:59:09.778: Generating temporary certificate using: sscg --quiet --lifetime 3650 --key-strength 2048 --cert-key-file /tmp/x/cockpit/ws-certs.d/0-self-signed.cert --cert-file /tmp/x/cockpit/ws-certs.d/0-self-signed.cert --ca-file /tmp/x/cockpit/ws-certs.d/0-self-signed-ca.pem --hostname donald --organization 607e9444bd2e4594ab570d4df4bd766a --subject-alt-name localhost --subject-alt-name IP:127.0.0.1/255.255.255.255
(remotectl:22394): GLib-DEBUG: 12:59:09.779: posix_spawn avoided (fd close requested)
(remotectl:22394): GLib-GIO-DEBUG: 12:59:11.095: _g_io_module_get_default: Found default implementation gnutls (GTlsBackendGnutls) for ?gio-tls-backend?
** (remotectl:22394): DEBUG: 12:59:11.095: loaded 1 certificates from /tmp/x/cockpit/ws-certs.d/0-self-signed.cert
remotectl: couldn't set certificate ownership: /tmp/x/cockpit/ws-certs.d/0-self-signed.cert: Operation not permittedAfterwards there should be a 0-self-signed-ca.pem and 0-self-signed.cert in ls -l /tmp/x/cockpit/. Can you please copy&paste the output of that as well?
Thanks!
SomePersonSomeWhereInTheWorld
kurahaupo
KKoukiou
I created a bug upstream for Fedora 30. I had to uninstall all the Cockpit services. Even after I ran
systemctl disable cockpiit, it would restart, or try to restart after a reboot. A couple times an hour theemotectlservice would get killed via the out-of-memory killer process. I ran the Dell hardware diagnostics a couple of times, i.e., in the iDRAC, and no errors.If it helps to know we still use NIS and this is a backup server so rsnapshot/rsync runs throughout the day.
And at the end of
journalctl -u cockpitare just these entries:After uninstalling, it's been 5 hours without an OOM, when there were 2-3 an hour.