• oats@piefed.zip
    link
    fedilink
    English
    arrow-up
    9
    ·
    1 day ago

    “I’ll get to it, eventually” would ruin the meme but be more fitting, in my opinion.

    Had multiple occasions where people fought against filling disks and just couldn’t see why. Well, that 10 gig log file you deleted two weeks ago? It’s 20 gig now, and still being written to.

    lsof shows stuff like that.

    • Redjard@reddthat.com
      link
      fedilink
      arrow-up
      7
      ·
      edit-2
      1 day ago

      Nothing new can open it immediately.
      So it’s effectively deleted with old references slowly phasing out.

      Zombie files are an issue though. A while back I had a huge zombie file on a tmpfs which was filling all my ram. So I built a tool to track it down and traced it to a konsole instance with a killed tab that previously had billions of lines of stdout history.

      https://github.com/redjard/zombie-file-list

      zombie-file-list

      Lists Linux files that are still opened in a process but were deleted. These “zombie files” use up space and inodes but are hard to find.

      I wrote this because my /tmp tmpfs was taking up 32GB of ram despite the files inside summing to only 3MB.

      Usage:

      zombie-file-list <path to filesystem>
      

      Note:

      • This command is designed to be run on filesystem roots, not paths in general.
      • Sizes are apparent sizes, e.g. on ext4 the actual sizes are rounded up to the next 4KiB
      • tal@lemmy.today
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        15 hours ago

        I wrote this because my /tmp tmpfs was taking up 32GB of ram despite the files inside summing to only 3MB.

        Note that tmpfs doesn’t force its contents to remain in memory — the kernel can move stuff there to swap space if it needs to do so.

        Ramfs is the filesystem that keeps things locked in memory:

        https://www.kernel.org/doc/Documentation/filesystems/ramfs-rootfs-initramfs.txt

        With ramfs, there is no backing store.  Files written into ramfs allocate
        dentries and page cache as usual, but there's nowhere to write them to.
        This means the pages are never marked clean, so they can't be freed by the
        VM when it's looking to recycle memory.
        

        ramfs and tmpfs:
        ----------------
        
        One downside of ramfs is you can keep writing data into it until you fill
        up all memory, and the VM can't free it because the VM thinks that files
        should get written to backing store (rather than swap space), but ramfs hasn't
        got any backing store.  Because of this, only root (or a trusted user) should
        be allowed write access to a ramfs mount.
        
        A ramfs derivative called tmpfs was created to add size limits, and the ability
        to write the data to swap space.  Normal users can be allowed write access to
        tmpfs mounts.  See Documentation/filesystems/tmpfs.txt for more information.
        
        • Redjard@reddthat.com
          link
          fedilink
          arrow-up
          1
          ·
          23 hours ago

          Maybe. It’s been a while so I don’t know 100% this was put to the test, but I wanna say the system has a weird kernel which leads to it not swapping out tmpfs properly.

          But ordinarily you should be right, this would simply ruin the stats visually until something forced it to swap out, since konsole shouldn’t be accessing it.

        • Redjard@reddthat.com
          link
          fedilink
          arrow-up
          5
          ·
          1 day ago

          I could have, but the system wasn’t set up to restart without downtime, and the server was also remote and not easily accessible.
          It did acutally die due to a poweroutage some months later and took 2 days to get restarted.
          So yeah sometimes restarting is way more undesirable than loosing access to 32GB of ram. I would have just eaten that cost otherwise until a more opportune chance to restart.

          Besides, restarting to fix a problem is equivalent to giving up on understanding the issue, learning new stuff, and maybe finding a way better solution or preventing the type of error entirely.
          I get not finding the motivation when your software is working against you and learning is ultimately fruitless like on windows, or not having the time in the moment to figure it out properly, but a perfectly good bug on a linux system when you have time is prime real-estate to grow your skills and find fulfillment.

          • Dave@lemmy.nz
            link
            fedilink
            arrow-up
            1
            ·
            1 day ago

            Ah that makes sense. I had considered it might be a server but you mentioned a Konsole tab so my mind decided it must have been local machine.

            Crazy it took 2 days to restart the server!

            • Redjard@reddthat.com
              link
              fedilink
              arrow-up
              2
              ·
              23 hours ago

              There was a dedicated person on call, but it happened to be when they were away.
              The Konsole was left running from a local access, with a while true loop of a service status command. When that service was stopped later, the while loop started rerunning the script every second, filling the buffer with error messages.
              The tab was then killed remotely, but the Konsole window left running. Process ram usage went down but the file remained on tmpfs, which is not counted as ram usage so wasn’t noticed.
              Then it took some time to notice the ram usage mismatch so noone thought of that konsole incident.