On 24/11/2022 6:48 pm, Daniel Ferradal wrote:
Some script is probably hogging the workers and not letting them close so if you must, just restart, but judging by the amount of traffic you seem to have at the time I would truncate in logrotate and not restart or reload the server at all.

I run a Python script on the production machine to delete the entire site (including directory structure) then redeploy everything from the repo whenever anything changes.

On the basis that Apache (mod-wsgi) only reads the files once on reload, if they also had the dead finger of my script or perhaps the Python interpreter hanging on, that may well have "hogged" the workers.

That script now restarts Apache instead of reload.

I have now adjusted the logrotate script to avoid reload/restart logging status as follows:

/var/log/apache2/*.log {
    daily
    missingok
    rotate 14
    compress
    delaycompress
    notifempty
    copytruncate
    sharedscripts
    prerotate
    if [ -d /etc/logrotate.d/httpd-prerotate ]; then
        run-parts /etc/logrotate.d/httpd-prerotate
    fi
    endscript
    postrotate
    if pgrep -f ^/usr/sbin/apache2 > /dev/null; then
        invoke-rc.d apache2 status 2>&1 | logger -t apache2.logrotate
    fi
    endscript
}


... and left the mpm-event settings as follows:

<IfModule mpm_event_module>
        ServerLimit                     32                 # Thanks Eric Covener
        StartServers                    16
        MinSpareThreads                 400
        MaxSpareThreads                 250
        ThreadLimit                     64
        ThreadsPerChild                 50
        AsyncRequestWorkerFactor        2
        MaxRequestWorkers               800
        MaxConnectionsPerChild          0
</IfModule>

I restarted the entire machine

Next logrotate is 00:00 UTC -- I'll report tomorrow.

Cheers

Mike

--
Signed email is an absolute defence against phishing. This email has
been signed with my private key. If you import my public key you can
automatically decrypt my signature and be sure it came from me. Just
ask and I'll send it to you. Your email software can handle signing.

Attachment: OpenPGP_signature
Description: OpenPGP digital signature

Reply via email to