[Opendnssec-user] signerd startup time

[Mathieu Arnold]

Hi,

I noticed the other day that when I was restarting it for whatever reason I
forgot, that it was taking a lot of time to be up and running.

So today, I restarted it after I got a :

Sep  2 10:57:26 ns1 ods-signerd: [hsm] sign init: CKR_KEY_HANDLE_INVALID
Sep  2 10:57:26 ns1 ods-signerd: [hsm] error signing rrset with libhsm
Sep  2 10:57:26 ns1 ods-signerd: [rrset] unable to sign RRset[48]:
lhsm_sign() failed
Sep  2 10:57:26 ns1 ods-signerd: [worker[3]] sign zone foo failed: 1 RRsets
failed
Sep  2 10:57:26 ns1 ods-signerd: [worker[3]] CRITICAL: failed to sign zone
foo: General error
Sep  2 10:57:26 ns1 ods-signerd: [worker[3]] backoff task [sign] for zone
foo with 60 seconds

and it took :

Sep  2 11:02:40 ns1 ods-signerd: [engine] signer started
Sep  2 11:10:52 ns1 ods-signerd: [STATS] foo RR[count=0 time=0(sec)]
NSEC3[count=0 time=0(sec)] RRSIG[new=2 reused=11 time=1(sec)
avg=2(sig/sec)] TOTAL[time=1(sec)]

8'12" to boot up, I admit I do have 1266 zones in there right now, and it's
a bit more than 2.5 zones loaded per second, but I do feel it's a bit slow.

Anyone experiences this kind of behavior ?

Regards,

-- 
Mathieu Arnold