phreld dies after a while

[alcy]

Hello !

We started investigating phreld for our DNS infra spread across multiple DCs, after becoming aware of DNSimple's usage of phreld, and we are running into a problem in the implementation.

We are running phreld (version - 1.0.2) in test mode under daemontools on CentOS 5, and the last few log lines on each server (after 1000-2000 seconds):

@4000000051ff727a11e5e6cc phreld[9800]: command not successful: /sbin/ip6tables -L phreld-sync-check-2648 > /dev/null 2>&1
@4000000051ff72862fae46a4 phreld[9800]: SIGTERM/SIGINT - exiting
@4000000051ff72862faf060c phreld[9800]: select() - Interrupted system call
@4000000051ff7286308f4834 phreld[9800]: stopped monitoring traffic
@4000000051ff728704517224 phreld[9800]: command not successful: /sbin/iptables -L phreld-sync-check-2648 > /dev/null 2>&1
@4000000051ff72870459c30c phreld[9800]: command not successful: /sbin/ip6tables -L phreld-sync-check-2648 > /dev/null 2>&1
@4000000051ff72870459c6f4 phreld[9800]: deleting chain phreld-sync-check-2648
@4000000051ff72870460df5c phreld[9800]: command not successful: /sbin/iptables -X phreld-sync-check-2648 > /dev/null 2>&1
@4000000051ff72870465a21c phreld[9800]: command not successful: /sbin/ip6tables -X phreld-sync-check-2648 > /dev/null 2>&1
@4000000051ff728704661f1c libgcc_s.so.1 must be installed for pthread_cancel to work

Any ideas/suggestions on how to fix or debug this behavior further ?

[sella]

All I can see from that output is that PHREL appears to be missing libgcc, and also possibly /sbin/iptables or /sbin/ip6tables.

I'd suggest making sure you have the RPM for libgcc installed and that /sbin/iptables and /sbin/ip6tables are there on your system.

[alcy]

Hello, thanks for the response.

I assumed that the iptables message only meant that since phreld is running in test mode, its not attempting to add rules. Regarding the RPMs for libgcc, we already had that installed on our systems. Other info:

[root@foo.com ~]# which iptables
/sbin/iptables
[root@foo.com ~]# which ip6tables
/sbin/ip6tables
[root@foo.com ~]# rpm -qa | grep gcc
gcc-c++-4.1.2-14.el5
gcc-4.1.2-14.el5
libgcc-4.1.2-54.el5
gcc-gfortran-4.1.2-14.el5
libgcc-4.1.2-54.el5

[alcy]

Hello, an update. I disabled PIE, and I am no longer seeing phrel crash.

[alcy]

Also, the reason for the message "command not successfull" for iptables was that phrel was running in chroot.

[sella]

Thanks for the feedback. I'll check into this and also try to improve the error messaging.