From owner-freebsd-stable@FreeBSD.ORG Tue Jun 28 08:37:35 2005 Return-Path: X-Original-To: stable@freebsd.org Delivered-To: freebsd-stable@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 65C3016A41C for ; Tue, 28 Jun 2005 08:37:35 +0000 (GMT) (envelope-from eirik@unicore.no) Received: from anduin.net (anduin.net [212.12.46.226]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2885943D55 for ; Tue, 28 Jun 2005 08:37:34 +0000 (GMT) (envelope-from eirik@unicore.no) Received: from [213.225.74.100] (helo=[192.168.200.110]) by anduin.net with esmtpa (Exim 4.50 (FreeBSD)) id 1DnBb3-000K3v-CR for stable@freebsd.org; Tue, 28 Jun 2005 10:37:33 +0200 Mime-Version: 1.0 (Apple Message framework v730) Content-Transfer-Encoding: 7bit Message-Id: <92135CB3-5540-4D06-A991-708C8AAD6AC7@unicore.no> Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed To: stable@freebsd.org From: =?ISO-8859-1?Q?Eirik_=D8verby?= Date: Tue, 28 Jun 2005 10:37:29 +0200 X-Mailer: Apple Mail (2.730) Cc: Subject: Jails that won't die... X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jun 2005 08:37:35 -0000 Hi, I have, since upgrading to 5.x and updating my management tools, seen a number of problems relating to stopping jails. I'm maintaining several hosts with a number of full-featured jails (i.e. full virtual FreeBSD installations in each jail), and in general this works fine. However, whenever I stop a jail using 'jexec kill -SIGNAL -1' or 'jexec /bin/sh /etc/rc.shutdown' (in various combinations), jails have a tendency to stick around for minutes or hours - according to 'jls'. Often I see an entry in 'netstat -a' indicating that there is one or more sockets in FIN_WAIT state, preventing the jail from coming down. Taking the virtual network interface (alias) down does not help. All I can do at this point is wait. I normally use 'jls' to determine whether or not a jail can be restarted (i.e. it's not running), but this is pretty useless in such cases. And right now I have a case where 'netstat -a' shows me nothing pertaining to the jail, though it has no processes running. I have therefore force-started the jail again, which seems to work nicely, but now 'jls' gives me two entries for this jail, with different JIDs. What am I doing wrong here? /Eirik