Date: Wed, 29 Jun 2005 14:58:03 -0400 From: Brian Fundakowski Feldman <green@freebsd.org> To: Eirik =?iso-8859-1?Q?=D8verby?= <eirik@unicore.no> Cc: stable@freebsd.org Subject: Re: Jails that won't die... Message-ID: <20050629185803.GE1074@green.homeunix.org> In-Reply-To: <CA38D1F9-3976-4DE9-BED1-DB8935EDD1D4@unicore.no> References: <92135CB3-5540-4D06-A991-708C8AAD6AC7@unicore.no> <20050628145859.GC1074@green.homeunix.org> <CA38D1F9-3976-4DE9-BED1-DB8935EDD1D4@unicore.no>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Jun 29, 2005 at 03:28:09PM +0200, Eirik Øverby wrote: > > On 28. jun. 2005, at 16.58, Brian Fundakowski Feldman wrote: > > >On Tue, Jun 28, 2005 at 10:37:29AM +0200, Eirik Øverby wrote: > > > >>Hi, > >> > >>I have, since upgrading to 5.x and updating my management tools, seen > >>a number of problems relating to stopping jails. > >> > >>I'm maintaining several hosts with a number of full-featured jails > >>(i.e. full virtual FreeBSD installations in each jail), and in > >>general this works fine. However, whenever I stop a jail using 'jexec > >><id> kill -SIGNAL -1' or 'jexec <id> /bin/sh /etc/rc.shutdown' (in > >>various combinations), jails have a tendency to stick around for > >>minutes or hours - according to 'jls'. Often I see an entry in > >>'netstat -a' indicating that there is one or more sockets in FIN_WAIT > >>state, preventing the jail from coming down. Taking the virtual > >>network interface (alias) down does not help. All I can do at this > >>point is wait. > >> > >>I normally use 'jls' to determine whether or not a jail can be > >>restarted (i.e. it's not running), but this is pretty useless in such > >>cases. And right now I have a case where 'netstat -a' shows me > >>nothing pertaining to the jail, though it has no processes running. I > >>have therefore force-started the jail again, which seems to work > >>nicely, but now 'jls' gives me two entries for this jail, with > >>different JIDs. > >> > >>What am I doing wrong here? > >> > > > >You could just use ps to check for jailed processes and check their > >respective jails using the procfs status entry (at least according > >to the ps manpage...) > > My jailctl script can do both - list by jls and list by processes in > the jail. There are NO processes running in the jail. So it's obviously not running, and you can mark its state as such. -- Brian Fundakowski Feldman \'[ FreeBSD ]''''''''''\ <> green@FreeBSD.org \ The Power to Serve! \ Opinions expressed are my own. \,,,,,,,,,,,,,,,,,,,,,,\
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050629185803.GE1074>