[Bug 1564451] Re: User processes are counted towards systemd limit for sshd processes
Thanks to some help in #systemd I could find the cause: On the affected systems libpam-systemd was not installed. So maybe it would make sensu to turn this into a stronger dependency than "recommended", at least in combination with openssh-server. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openssh in Ubuntu. https://bugs.launchpad.net/bugs/1564451 Title: User processes are counted towards systemd limit for sshd processes To manage notifications about this bug go to: https://bugs.launchpad.net/systemd/+bug/1564451/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1564451] Re: User processes are counted towards systemd limit for sshd processes
Hmm, on a cloud instance this looks different, even when logged in multiple time, the output only shows the master process: # systemctl status ssh ● ssh.service - OpenBSD Secure Shell server Loaded: loaded (/lib/systemd/system/ssh.service; enabled; vendor preset: enabled) Active: active (running) since Fri 2016-04-01 06:00:11 UTC; 1h 44min ago Main PID: 971 (sshd) Tasks: 1 (limit: 512) Memory: 5.3M CPU: 169ms CGroup: /system.slice/ssh.service └─971 /usr/sbin/sshd -D Package versions are identical in both systems: root@jr-xeni1:~# apt-cache policy systemd systemd: Installed: 229-3ubuntu1 Candidate: 229-3ubuntu1 Version table: *** 229-3ubuntu1 500 500 http://nova.clouds.archive.ubuntu.com/ubuntu xenial/main amd64 Packages 100 /var/lib/dpkg/status root@jr-xeni1:~# apt-cache policy openssh-server openssh-server: Installed: 1:7.2p2-2 Candidate: 1:7.2p2-2 Version table: *** 1:7.2p2-2 500 500 http://nova.clouds.archive.ubuntu.com/ubuntu xenial/main amd64 Packages 100 /var/lib/dpkg/status So I'm wondering what else could be causing the different behaviour here. ** Also affects: systemd Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openssh in Ubuntu. https://bugs.launchpad.net/bugs/1564451 Title: User processes are counted towards systemd limit for sshd processes To manage notifications about this bug go to: https://bugs.launchpad.net/systemd/+bug/1564451/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1564451] Re: User processes are counted towards systemd limit for sshd processes
Do your sleep processes show up in the output of "systemctl status ssh.service" in the CGroup section? For me they do (sample with just one process backgrounded): # systemctl status ssh.service ● ssh.service - OpenBSD Secure Shell server Loaded: loaded (/lib/systemd/system/ssh.service; enabled; vendor preset: enabled) Active: active (running) since Fri 2016-04-01 05:53:59 UTC; 1min 1s ago Main PID: 2928 (sshd) Tasks: 10 (limit: 512) CGroup: /system.slice/ssh.service ├─2928 /usr/sbin/sshd -D ├─4966 sshd: jrosenboom [priv ├─5087 sshd: jrosenboom@pts/ ├─5127 -bash ├─5208 sudo -i ├─5213 sudo -i ├─5214 -bash ├─6386 sleep 100 ├─6403 systemctl status ssh.service └─6404 pager -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openssh in Ubuntu. https://bugs.launchpad.net/bugs/1564451 Title: User processes are counted towards systemd limit for sshd processes To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1564451/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1564451] Re: User processes are counted towards systemd limit for sshd processes
I'm having trouble reproducing this. I started a few thousand /bin/sleep commands and was able to log in via ssh as another user; the error message when logging in again as my normal user account showed an error message that looked appropriate. In one ssh: sarnold@sec-xenial-amd64:~$ for i in `seq 1 6000` ; do /bin/sleep 10 & done ... [15813] 24043 [15814] 24044 [15815] 24045 -bash: fork: retry: Resource temporarily unavailable -bash: fork: retry: Resource temporarily unavailable In another terminal: $ ssh -oControlPath=none root@sec-xenial-amd64 Welcome to Ubuntu Xenial Xerus (development branch) (GNU/Linux 4.4.0-16-generic x86_64) * Documentation: https://help.ubuntu.com/ 0 packages can be updated. 0 updates are security updates. Last login: Thu Mar 31 15:42:23 2016 from 192.168.122.1 root@sec-xenial-amd64:~# $ ssh -oControlPath=none sec-xenial-amd64 shell request failed on channel 0 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openssh in Ubuntu. https://bugs.launchpad.net/bugs/1564451 Title: User processes are counted towards systemd limit for sshd processes To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1564451/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1564451] Re: User processes are counted towards systemd limit for sshd processes
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openssh in Ubuntu. https://bugs.launchpad.net/bugs/1564451 Title: User processes are counted towards systemd limit for sshd processes To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1564451/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs