Debian Bug report logs - #641647
aide: Aide consumes all memory and swap

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Daniel Dickinson <daniel@cshore.neomailbox.net>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: aide: Aide consumes all memory and swap

Date: Wed, 14 Sep 2011 17:28:36 -0400

Package: aide
Version: 0.15.1-2+squeeze1
Severity: critical
Justification: breaks the whole system


Aide's daily run consumes all available and memory and swap.  This renders the system unusable until you are able to get enough of a shell to kill aide.  This is with a default install except that I had to initialize by hand (didn't get asked about initializing during install).

-- System Information:
Debian Release: 6.0.2
  APT prefers stable-updates
  APT policy: (900, 'stable-updates'), (900, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash

Versions of packages aide depends on:
ii  aide-common        0.15.1-2+squeeze1     Advanced Intrusion Detection Envir
ii  bsd-mailx          8.1.2-0.20100314cvs-1 simple mail user agent
ii  liblockfile1       1.08-4                NFS-safe locking library, includes
ii  ucf                3.0025+nmu1           Update Configuration File: preserv

Versions of packages aide recommends:
ii  cron                          3.0pl1-116 process scheduling daemon

aide suggests no packages.

-- no debconf information

Message #10 received at 641647@bugs.debian.org (full text, mbox, reply):

From: Hannes von Haugwitz <hannes@vonhaugwitz.com>

To: Daniel Dickinson <daniel@cshore.neomailbox.net>, 641647@bugs.debian.org

Subject: Re: [Pkg-aide-maintainers] Bug#641647: aide: Aide consumes all memory and swap

Date: Thu, 15 Sep 2011 07:55:26 +0200

tags 641647 + unreproducible moreinfo
thanks

On Wed, Sep 14, 2011 at 05:28:36PM -0400, Daniel Dickinson wrote:
> Aide's daily run consumes all available and memory and swap.  This
> renders the system unusable until you are able to get enough of a
> shell to kill aide.  This is with a default install except that I had
> to initialize by hand (didn't get asked about initializing during
> install).

I can't reproduce your problem on a amd64 Debian squeeze.

Please provide more information to reproduce your problem.

Did the daily aide run ever work on that machine? Do I understand you
correctly that 'aideinit' works correctly but the daily aide run
doesn't? Could you please try to run 'update-aide.conf' followed by
'aide -c /var/lib/aide/aide.conf.autogenerated'?

Greetings

Hannes

Message #17 received at 641647@bugs.debian.org (full text, mbox, reply):

From: Daniel Dickinson <daniel@cshore.neomailbox.net>

Cc: 641647@bugs.debian.org

Subject: Re: [Pkg-aide-maintainers] Bug#641647: aide: Aide consumes all memory and swap

Date: Mon, 19 Sep 2011 13:08:22 -0400

[Message part 1 (text/plain, inline)]

On Thu, 15 Sep 2011 07:55:26 +0200
Hannes von Haugwitz <hannes@vonhaugwitz.com> wrote:

> tags 641647 + unreproducible moreinfo
> thanks
> 
> On Wed, Sep 14, 2011 at 05:28:36PM -0400, Daniel Dickinson wrote:
> > Aide's daily run consumes all available and memory and swap.  This
> > renders the system unusable until you are able to get enough of a
> > shell to kill aide.  This is with a default install except that I
> > had to initialize by hand (didn't get asked about initializing
> > during install).
> 
> I can't reproduce your problem on a amd64 Debian squeeze.
> 
> Please provide more information to reproduce your problem.
> 
> Did the daily aide run ever work on that machine? Do I understand you

No.

> correctly that 'aideinit' works correctly but the daily aide run
> doesn't? Could you please try to run 'update-aide.conf' followed by

Oh, sorry, no the aideinit was never run because I either somehow
skipped or missed the questions about initialzing aide and did it by
hand.  I am right now trying an aide run after previously purging aide,
and rebooting a few times (i.e. normal daily on/off), so aideinit is
running now (or rather aide is running I believe from aideinit through
debconf).  I'll let you know how that does.

> 'aide -c /var/lib/aide/aide.conf.autogenerated'?
> 
> Greetings
> 
> Hannes
> 



-- 
<erno> hm. I've lost a machine.. literally _lost_. it responds to ping, 
it works completely, I just can't figure out where in my apartment it
is. GnuPG Key Fingerprint 86 F5 81 A5 D4 2E 1F 1C      http://gnupg.org

[signature.asc (application/pgp-signature, attachment)]

Message #24 received at 641647@bugs.debian.org (full text, mbox, reply):

From: Hannes von Haugwitz <hannes@vonhaugwitz.com>

To: Daniel Dickinson <daniel@cshore.neomailbox.net>, 641647@bugs.debian.org

Cc: Thijs Kinkhorst <thijs@debian.org>

Subject: Re: Bug#641647: aide: Aide consumes all memory and swap

Date: Fri, 31 May 2013 09:10:35 +0200

Hello Daniel,

On Mon, Sep 19, 2011 at 01:08:22PM -0400, Daniel Dickinson wrote:
> Oh, sorry, no the aideinit was never run because I either somehow
> skipped or missed the questions about initialzing aide and did it by
> hand.  I am right now trying an aide run after previously purging aide,
> and rebooting a few times (i.e. normal daily on/off), so aideinit is
> running now (or rather aide is running I believe from aideinit through
> debconf).  I'll let you know how that does.

Could you please provide feedback about the state of this issue. Is Aide
still consuming all memory and swap or has the issue meanwhile
solved/disappeared, so I can close this bug?

Best regards

Hannes

Message #29 received at 641647@bugs.debian.org (full text, mbox, reply):

From: Daniel Dickinson <daniel@cshore.neomailbox.net>

To: Hannes von Haugwitz <hannes@vonhaugwitz.com>

Cc: 641647@bugs.debian.org, Thijs Kinkhorst <thijs@debian.org>

Subject: Re: Bug#641647: aide: Aide consumes all memory and swap

Date: Sat, 01 Jun 2013 21:49:30 -0400

I gave up on aide because of the issue, and when I went to try on wheezy
now I discovered that initscripts from wheezy is marked as breaking aide
from squeeze, and AFAICT there is no aide specifically for wheezy, and
aid from sid requires initscripts from sid, and I'm trying to stick with
wheezy for now.

Regards,

Daniel

On 31/05/13 03:10 AM, Hannes von Haugwitz wrote:
> Hello Daniel,
> 
> On Mon, Sep 19, 2011 at 01:08:22PM -0400, Daniel Dickinson wrote:
>> Oh, sorry, no the aideinit was never run because I either somehow
>> skipped or missed the questions about initialzing aide and did it by
>> hand.  I am right now trying an aide run after previously purging aide,
>> and rebooting a few times (i.e. normal daily on/off), so aideinit is
>> running now (or rather aide is running I believe from aideinit through
>> debconf).  I'll let you know how that does.
> 
> Could you please provide feedback about the state of this issue. Is Aide
> still consuming all memory and swap or has the issue meanwhile
> solved/disappeared, so I can close this bug?
> 
> Best regards
> 
> Hannes
> 

Message #34 received at 641647@bugs.debian.org (full text, mbox, reply):

From: Hannes von Haugwitz <hannes@vonhaugwitz.com>

To: Daniel Dickinson <daniel@cshore.neomailbox.net>

Cc: 641647@bugs.debian.org, Thijs Kinkhorst <thijs@debian.org>

Subject: Re: Bug#641647: aide: Aide consumes all memory and swap

Date: Sun, 2 Jun 2013 07:47:24 +0200

Hi Daniel,

On Sat, Jun 01, 2013 at 09:49:30PM -0400, Daniel Dickinson wrote:
> I gave up on aide because of the issue, and when I went to try on wheezy
> now I discovered that initscripts from wheezy is marked as breaking aide
> from squeeze, and AFAICT there is no aide specifically for wheezy, and
> aid from sid requires initscripts from sid, and I'm trying to stick with
> wheezy for now.

The version of AIDE (0.15.1-8) in wheezy is compatible with initscripts
(2.88dsf-41) from wheezy. It would be nice, if you could try this
version (with unchanged config) and report back if the issue still
exists.

Thanks

Hannes

Message #39 received at 641647@bugs.debian.org (full text, mbox, reply):

From: Daniel Dickinson <daniel@cshore.neomailbox.net>

To: Hannes von Haugwitz <hannes@vonhaugwitz.com>

Cc: 641647@bugs.debian.org, Thijs Kinkhorst <thijs@debian.org>

Subject: Re: Bug#641647: aide: Aide consumes all memory and swap

Date: Sun, 02 Jun 2013 13:02:28 -0400

Hmmmm....looks like I need to check my pinning.  I was getting squeeze
add in aptitude for some reason and since aptitude doesn't actually tell
you which release a version comes from I assumed it was wheezy.
(Pinning is supposed to be giving me wheezy unless I specifically select
otherwise, which reminds me, I've got to add jessie).

Anyway I'll definitely give it shot.  Thanks.

Daniel

On 02/06/13 01:47 AM, Hannes von Haugwitz wrote:
> Hi Daniel,
> 
> On Sat, Jun 01, 2013 at 09:49:30PM -0400, Daniel Dickinson wrote:
>> I gave up on aide because of the issue, and when I went to try on wheezy
>> now I discovered that initscripts from wheezy is marked as breaking aide
>> from squeeze, and AFAICT there is no aide specifically for wheezy, and
>> aid from sid requires initscripts from sid, and I'm trying to stick with
>> wheezy for now.
> 
> The version of AIDE (0.15.1-8) in wheezy is compatible with initscripts
> (2.88dsf-41) from wheezy. It would be nice, if you could try this
> version (with unchanged config) and report back if the issue still
> exists.
> 
> Thanks
> 
> Hannes
> 

Message #44 received at 641647-done@bugs.debian.org (full text, mbox, reply):

From: Daniel Dickinson <daniel@cshore.neomailbox.net>

To: Hannes von Haugwitz <hannes@vonhaugwitz.com>

Cc: 641647-done@bugs.debian.org, Thijs Kinkhorst <thijs@debian.org>

Subject: This bug can be closed (was Re: Bug#641647: aide: Aide consumes all memory and swap)

Date: Wed, 05 Jun 2013 13:43:12 -0400

I have verified that I no longer experience the issue.  Aide does use a
fair bit of RAM, but not to the point of (even nearly) exhausting memory
never mind swap on a machine with 8GB RAM.  On a smaller system it might
be a problem, which may have been the initial problem (I forget what
system the initial report was for, as it was some time ago).

In any event the issue is not present in Wheezy.

On 02/06/13 01:02 PM, Daniel Dickinson wrote:
> Hmmmm....looks like I need to check my pinning.  I was getting squeeze
> add in aptitude for some reason and since aptitude doesn't actually tell
> you which release a version comes from I assumed it was wheezy.
> (Pinning is supposed to be giving me wheezy unless I specifically select
> otherwise, which reminds me, I've got to add jessie).
> 
> Anyway I'll definitely give it shot.  Thanks.
> 
> Daniel
> 
> On 02/06/13 01:47 AM, Hannes von Haugwitz wrote:
>> Hi Daniel,
>>
>> On Sat, Jun 01, 2013 at 09:49:30PM -0400, Daniel Dickinson wrote:
>>> I gave up on aide because of the issue, and when I went to try on wheezy
>>> now I discovered that initscripts from wheezy is marked as breaking aide
>>> from squeeze, and AFAICT there is no aide specifically for wheezy, and
>>> aid from sid requires initscripts from sid, and I'm trying to stick with
>>> wheezy for now.
>>
>> The version of AIDE (0.15.1-8) in wheezy is compatible with initscripts
>> (2.88dsf-41) from wheezy. It would be nice, if you could try this
>> version (with unchanged config) and report back if the issue still
>> exists.
>>
>> Thanks
>>
>> Hannes
>>
> 

Send a report that this bug log contains spam.