[opendnssec-user]Cannot Allocate Memory Issue

[Matthijs Mekking]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/17/2012 09:22 AM, Áõ˶ wrote:
> Hi,
> 
> I have met this today frequently: Oct 17 15:09:35 index
> ods-signerd: [tools] notify nameserver:
> /home/gtld/apps/dnssec-service/ods_call_by_opendnssec.sh Oct 17
> 15:09:35 index ods-signerd: [tools] notify nameserver failed:
> unable to fork (Cannot allocate memory) Oct 17 15:09:35 index
> ods-signerd: [worker[2]] backoff task [read] for zone test2 with
> 480 seconds
> 
> And as I see in my log that the 
> /home/gtld/apps/dnssec-service/ods_call_by_opendnssec.sh script is
> not called at all,but the zones are all signed successfully,why?
> Because there is not much memory left?
> 
> I have 5 zones and they are 1.8G after signed, but the ods-signer 
> consumes too much memory. $ du -h ./signed 1.8G ./signed
> 
> Cpu(s):  0.1%us,  0.1%sy,  0.0%ni, 99.8%id,  0.0%wa,  0.0%hi,
> 0.0%si,  0.0%st Mem:  32867596k total, 31711608k used,  1155988k
> free,     4760k buffers Swap:  3276792k total,  1839896k used,
> 1436896k free,  2377592k cached
> 
> PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
>  32568 gtld      20   0 19.9g  17g 3740 S  0.0 55.0   3206:22
> ods-signerd
>  13725 gtld      20   0 4033m 3.8g 1320 S  0.0 12.2   2578:42 named
> 
> 
> As can be seen from above, it consumes almost more than 16G memory,
> but the named which hold all the signed zone data just consumes 3G
> or so. I think ods-signerd consumes too much memory, isn't it?

The signer indeed consumes a lot of memory, that is known and we are
in the process of designing a fix for that.

Best regards,
  Matthijs

> 
> 
> 
> Best regards, Stuart

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/

iQEcBAEBAgAGBQJQfmNSAAoJEA8yVCPsQCW5BfUH/0fwsq90QhmZYH4R4S1fo/AX
Mcas+sqETr4yQu977nBCA4IJnDb36SdrH9zEPO2nA1ZfxepTe91SsA17sF1gzBOc
foTUWSt3Ls/w/ycI2rPVk99lEUMvwYZaPk9XNOkjXmSiHGemfXDBMwZeMfUU8LL9
ae2Nyhf9SvRnNX1OTxbWpdO/FFDijUeiWzROVZUXBi8wTZAB1Daf34HNnTm9OhM4
7oWsL3H5U2pF5Z5JRb1szgjYUE81GiCHZdNIEWSNAEW4bH6+jHRYAUftyUDU5j29
qoxYFt1ks50DNUkFLkfdEU1nSFILLTbLcBDfEYIfaWW+KTDYYxVuu4MBgmAdjHo=
=CwfP
-----END PGP SIGNATURE-----