close Warning: Can't synchronize with repository "keplertools" (/srv/svn/keplertools does not appear to be a Subversion repository.). Look in the Trac log for more information.

Opened 5 years ago

Last modified 2 years ago

#4166 closed Defekt

NC: Verdächtige Meldungen in dmesg/syslog — at Version 1

Reported by: Rüdiger Kupper Owned by: Rüdiger Kupper
Priority: schnell erledigen Milestone: Nextcloud: Optimierungen
Component: Webdienst: Kepler-Cloud Severity: beeinträchtigt den Unterricht einiger Lehrer
Keywords: Cc: bau

Description (last modified by Rüdiger Kupper)

  1. Auf dem proxmoxls2-Rechner finden sich Meldungen im Kernel-Log, die darauf hinweisen, dass unser Collabora-Server (läuft dort im lxc-Container) Kind-Verzeichnisse mounten möchte, das aber nicht darf: 
[6017583.898338] audit: type=1400 audit(1634627291.284:1679): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-105_</var/lib/lxc>" name="/opt/lool/child-roots/ysyxtq0meKL5EfHq/" pid=12568 comm="loolmount" flags="ro, nosuid, nodev, remount, noatime, rbind, silent"
[6018553.746462] audit: type=1400 audit(1634628261.137:1680): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-105_</var/lib/lxc>" name="/opt/lool/child-roots/KlTz7Nbd0QeRTjsi/" pid=21235 comm="loolmount" flags="ro, nosuid, nodev, remount, noatime, rbind, silent"
[6023720.682690] audit: type=1400 audit(1634633428.096:1681): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-105_</var/lib/lxc>" name="/opt/lool/child-roots/HCewB85HDa2iXopf/" pid=10036 comm="loolmount" flags="ro, nosuid, nodev, remount, noatime, rbind, silent"
[6023774.256851] audit: type=1400 audit(1634633481.673:1682): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-105_</var/lib/lxc>" name="/opt/lool/child-roots/haA6p2uRIahVHCyK/" pid=12544 comm="loolmount" flags="ro, nosuid, nodev, remount, noatime, rbind, silent"
[6023837.540163] audit: type=1400 audit(1634633544.957:1683): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-105_</var/lib/lxc>" name="/opt/lool/child-roots/WiJnlw6XWcbEblD3/" pid=15404 comm="loolmount" flags="ro, nosuid, nodev, remount, noatime, rbind, silent"
[6027532.686542] audit: type=1400 audit(1634637240.122:1684): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-105_</var/lib/lxc>" name="/opt/lool/child-roots/xp5oBGD2PwramUHw/" pid=7509 comm="loolmount" flags="ro, nosuid, nodev, remount, noatime, rbind, silent"
[6027814.093227] audit: type=1400 audit(1634637521.527:1685): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-105_</var/lib/lxc>" name="/opt/lool/child-roots/EQdOy6t1mVB7l8zH/" pid=20718 comm="loolmount" flags="ro, nosuid, nodev, remount, noatime, rbind, silent"
[6027837.904568] audit: type=1400 audit(1634637545.335:1686): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-105_</var/lib/lxc>" name="/opt/lool/child-roots/MLTpvZn9BtPGjfMJ/" pid=21745 comm="loolmount" flags="ro, nosuid, nodev, remount, noatime, rbind, silent"
[6028645.193124] audit: type=1400 audit(1634638352.635:1687): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-105_</var/lib/lxc>" name="/opt/lool/child-roots/rVcsDmFp3fx6UOOy/" pid=23343 comm="loolmount" flags="ro, nosuid, nodev, remount, noatime, rbind, silent"
[6029119.958264] audit: type=1400 audit(1634638827.397:1688): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-105_</var/lib/lxc>" name="/opt/lool/child-roots/yjSi07pQHCx2g5Gb/" pid=10761 comm="loolmount" flags="ro, nosuid, nodev, remount, noatime, rbind, silent"
[6035931.461182] audit: type=1400 audit(1634645638.932:1689): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-105_</var/lib/lxc>" name="/opt/lool/child-roots/n3w3aXvKTJnZ9OvQ/" pid=3270 comm="loolmount" flags="ro, nosuid, nodev, remount, noatime, rbind, silent"

Das könnte der Grund sein, dass sich Office-Dokumente manchmal nicht in der Cloud öffnen lassen.

  1. Außerdem tauchen sporadisch diese Meldungen auf: 
    [Okt 7 18:47] mce: CPU11: Core temperature above threshold, cpu clock throttled (total events = 1353)
[  +0,000001] mce: CPU5: Core temperature above threshold, cpu clock throttled (total events = 1353)
[  +0,001053] mce: CPU11: Core temperature/speed normal
[  +0,000005] mce: CPU5: Core temperature/speed normal
[Okt 7 18:55] mce: CPU5: Core temperature above threshold, cpu clock throttled (total events = 6393)
[  +0,000001] mce: CPU11: Core temperature above threshold, cpu clock throttled (total events = 6393)
[  +0,001056] mce: CPU5: Core temperature/speed normal
[  +0,000000] mce: CPU11: Core temperature/speed normal

Der Rechner hat also wohl ein Lüftungsproblem.

Change History (1)

comment:1 by Rüdiger Kupper, 5 years ago

Description: modified (diff)

Korrektur: eldungen sind über nicht erlaubten Mount, nicht Fork.

Note: See TracTickets for help on using tickets.