RE: ChecksumDatabase more details wanted, /dev/random draining

[Baker, Darryl]

There really is no error message. The system uses a lot of ssh for custom
monitors. What we find is that during the time of the semi-hourly cfengine
run the load average spikes and we get a lot of the ssh processes as well as
the cfservd threads spinning on a kernel semaphore related to /dev/random.
Pumping /dev/random with more pseudo random data relieves the load somewhat.

_____________________________________________________________________
Darryl Baker
Senior Unix Specialist
gedas USA, Inc.
Operational Services Business Unit
3800 Hamlin Road
Auburn Hills, MI 48326
US
Darryl.Baker@gedas.com
http://www.gedasusa.com
_____________________________________________________________________

> -----Original Message-----
> From: Mark.Burgess@iu.hio.no [mailto:Mark.Burgess@iu.hio.no]
> Sent: Thursday, May 19, 2005 2:56 AM
> To: Baker, Darryl
> Cc: 'Mark.Burgess@iu.hio.no'; help-cfengine@gnu.org
> Subject: RE: ChecksumDatabase more details wanted, 
> /dev/random draining
> 
> 
> Quoting "Baker, Darryl" <Darryl.Baker@gedas.com>:
> 
> > We are using cfenvd and still seeing a drain on /dev/random 
> that spikes on
> > the semi-hourly runs.
> 
> This seems odd. The error message could not be coming from 
> cfengine then, or??
> 
> > So a change in the mtime of any of the files causes the 
> whole database to be
> > rebuilt?
> 
> Of course not. Only the entry for the modified file is updated!!
> 
> M
> 
> 
> > 
> _____________________________________________________________________
> > Darryl Baker
> > Senior Unix Specialist
> > gedas USA, Inc.
> > Operational Services Business Unit
> > 3800 Hamlin Road
> > Auburn Hills, MI 48326
> > US
> > Darryl.Baker@gedas.com
> > http://www.gedasusa.com
> > 
> _____________________________________________________________________
> >
> >> -----Original Message-----
> >> From: help-cfengine-bounces+darryl.baker=gedas.com@gnu.org
> >> 
> [mailto:help-cfengine-bounces+darryl.baker=gedas.com@gnu.org]On Behalf
> >> Of Mark.Burgess@iu.hio.no
> >> Sent: Wednesday, May 18, 2005 7:46 AM
> >> To: help-cfengine@gnu.org
> >> Subject: Re: ChecksumDatabase more details wanted,
> >> /dev/random draining
> >>
> >>
> >>
> >> You could try running cfenvd to avoid having to use /dev/random.
> >>
> >> Thye db is updated when there is an mtime change. on the 
> source file.
> >>
> >> M
> >>
> >> Quoting "Baker, Darryl" <Darryl.Baker@gedas.com>:
> >>
> >> > We are trying to optimize our configuration. We are
> >> thinking about using the
> >> > ChecksumDatabase option in cfservd.conf but the simple
> >> paragraph in the docs
> >> > we can find doesn't explain everything. What causes the
> >> checksum database to
> >> > be updated, mode changed, or back rev'ed? Is there a way to
> >> keep as much of
> >> > the database in memory as possible?
> >> >
> >> > The other question I have is dealing with how much data is
> >> being pulled from
> >> > /dev/random on the server. The box this is running on is
> >> having a problem
> >> > with cfservd and ssh (client) blocking waiting for more
> >> data in /dev/random.
> >> > Is there a way of reducing the amount of data being read
> >> from /dev/random
> >> > without reducing security?
> >> >
> >> > This is a Solaris 9 Sparc box running 2.1.14.
> >> >
> >> >
> >> 
> _____________________________________________________________________
> >> > Darryl Baker
> >> > Senior Unix Specialist
> >> > gedas USA, Inc.
> >> > Operational Services Business Unit
> >> > 3800 Hamlin Road
> >> > Auburn Hills, MI 48326
> >> > Darryl.Baker@gedas.com
> >> > http://www.gedasusa.com
> >> >
> >> 
> _____________________________________________________________________
> >> >
> >> >
> >> > _______________________________________________
> >> > Help-cfengine mailing list
> >> > Help-cfengine@gnu.org
> >> > http://lists.gnu.org/mailman/listinfo/help-cfengine
> >> >
> >>
> >>
> >>
> >> ----------------------------------------------------------------
> >> This message was sent using IMP, the Internet Messaging Program.
> >>
> >>
> >>
> >> _______________________________________________
> >> Help-cfengine mailing list
> >> Help-cfengine@gnu.org
> >> http://lists.gnu.org/mailman/listinfo/help-cfengine
> >>
> >
> 
> 
> 
> ----------------------------------------------------------------
> This message was sent using IMP, the Internet Messaging Program.
>

Baker, Darryl.vcf
Description: Binary data