• Redjard@reddthat.com
    link
    fedilink
    arrow-up
    7
    ·
    edit-2
    1 day ago

    Nothing new can open it immediately.
    So it’s effectively deleted with old references slowly phasing out.

    Zombie files are an issue though. A while back I had a huge zombie file on a tmpfs which was filling all my ram. So I built a tool to track it down and traced it to a konsole instance with a killed tab that previously had billions of lines of stdout history.

    https://github.com/redjard/zombie-file-list

    zombie-file-list

    Lists Linux files that are still opened in a process but were deleted. These “zombie files” use up space and inodes but are hard to find.

    I wrote this because my /tmp tmpfs was taking up 32GB of ram despite the files inside summing to only 3MB.

    Usage:

    zombie-file-list <path to filesystem>
    

    Note:

    • This command is designed to be run on filesystem roots, not paths in general.
    • Sizes are apparent sizes, e.g. on ext4 the actual sizes are rounded up to the next 4KiB
    • tal@lemmy.today
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      19 hours ago

      I wrote this because my /tmp tmpfs was taking up 32GB of ram despite the files inside summing to only 3MB.

      Note that tmpfs doesn’t force its contents to remain in memory — the kernel can move stuff there to swap space if it needs to do so.

      Ramfs is the filesystem that keeps things locked in memory:

      https://www.kernel.org/doc/Documentation/filesystems/ramfs-rootfs-initramfs.txt

      With ramfs, there is no backing store.  Files written into ramfs allocate
      dentries and page cache as usual, but there's nowhere to write them to.
      This means the pages are never marked clean, so they can't be freed by the
      VM when it's looking to recycle memory.
      

      ramfs and tmpfs:
      ----------------
      
      One downside of ramfs is you can keep writing data into it until you fill
      up all memory, and the VM can't free it because the VM thinks that files
      should get written to backing store (rather than swap space), but ramfs hasn't
      got any backing store.  Because of this, only root (or a trusted user) should
      be allowed write access to a ramfs mount.
      
      A ramfs derivative called tmpfs was created to add size limits, and the ability
      to write the data to swap space.  Normal users can be allowed write access to
      tmpfs mounts.  See Documentation/filesystems/tmpfs.txt for more information.
      
      • Redjard@reddthat.com
        link
        fedilink
        arrow-up
        1
        ·
        1 day ago

        Maybe. It’s been a while so I don’t know 100% this was put to the test, but I wanna say the system has a weird kernel which leads to it not swapping out tmpfs properly.

        But ordinarily you should be right, this would simply ruin the stats visually until something forced it to swap out, since konsole shouldn’t be accessing it.

      • Redjard@reddthat.com
        link
        fedilink
        arrow-up
        6
        ·
        1 day ago

        I could have, but the system wasn’t set up to restart without downtime, and the server was also remote and not easily accessible.
        It did acutally die due to a poweroutage some months later and took 2 days to get restarted.
        So yeah sometimes restarting is way more undesirable than loosing access to 32GB of ram. I would have just eaten that cost otherwise until a more opportune chance to restart.

        Besides, restarting to fix a problem is equivalent to giving up on understanding the issue, learning new stuff, and maybe finding a way better solution or preventing the type of error entirely.
        I get not finding the motivation when your software is working against you and learning is ultimately fruitless like on windows, or not having the time in the moment to figure it out properly, but a perfectly good bug on a linux system when you have time is prime real-estate to grow your skills and find fulfillment.

        • Dave@lemmy.nz
          link
          fedilink
          arrow-up
          1
          ·
          1 day ago

          Ah that makes sense. I had considered it might be a server but you mentioned a Konsole tab so my mind decided it must have been local machine.

          Crazy it took 2 days to restart the server!

          • Redjard@reddthat.com
            link
            fedilink
            arrow-up
            2
            ·
            1 day ago

            There was a dedicated person on call, but it happened to be when they were away.
            The Konsole was left running from a local access, with a while true loop of a service status command. When that service was stopped later, the while loop started rerunning the script every second, filling the buffer with error messages.
            The tab was then killed remotely, but the Konsole window left running. Process ram usage went down but the file remained on tmpfs, which is not counted as ram usage so wasn’t noticed.
            Then it took some time to notice the ram usage mismatch so noone thought of that konsole incident.