[Bug 785240] New: SuSEfirewall2_init.service starts for 2 minutes
https://bugzilla.novell.com/show_bug.cgi?id=785240 https://bugzilla.novell.com/show_bug.cgi?id=785240#c0 Summary: SuSEfirewall2_init.service starts for 2 minutes Classification: openSUSE Product: openSUSE 12.2 Version: Final Platform: x86-64 OS/Version: openSUSE 12.2 Status: NEW Severity: Normal Priority: P5 - None Component: Network AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: szotsaki@gmail.com QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Opera/9.80 (X11; Linux x86_64; Edition Next) Presto/2.12.388 Version/12.10 I have a btrfs partition with 3.6.0-1-desktop kernel. The booting of the system takes four minutes...
From this time SuSEfirewall2_init.service shares in 2 minutes. According to "systemd-analyze blame":
122804ms SuSEfirewall2_init.service [...] 307ms SuSEfirewall2_setup.service I don't know how to debug this, but I know the following for sure: - YaST says the network is pulled up with ifup - NetworkManager.service is disabled (disabled; inactive; dead) - IPv6 is disabled in YaST Reproducible: Always Steps to Reproduce: 1. 2. 3. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c
Jiaying ren
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c
Jiri Srain
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c1
Jiaying ren
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c2
Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c3
--- Comment #3 from Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c
Jiaying ren
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c4
--- Comment #4 from Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c
Frederic Crozat
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c5
Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c6
Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c7
Ludwig Nussel
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c8
--- Comment #8 from Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c9
Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c10
--- Comment #10 from Bernhard Wiedemann
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c11
Ludwig Nussel
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c12
--- Comment #12 from Jan Engelhardt
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c13
--- Comment #13 from Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c14
--- Comment #14 from Jan Engelhardt
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c15
--- Comment #15 from Ludwig Nussel
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c16
--- Comment #16 from Jan Engelhardt
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c17
--- Comment #17 from Ludwig Nussel
I'm sorry, but I can't find the "iptables:" directory inside http://download.opensuse.org/repositories/home:/lnussel:/branches:/OBS_Maint... and there's no iptables package update in the Update channel either.
Could you please provide the RPM package to test? :)
publishing was off. turned on now. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c18
--- Comment #18 from Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c19
--- Comment #19 from Jan Engelhardt
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c20
--- Comment #20 from Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c21
Ludwig Nussel
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c22
--- Comment #22 from Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c23
--- Comment #23 from Ludwig Nussel
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c24
--- Comment #24 from Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c25
Ludwig Nussel
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c26
--- Comment #26 from Bernhard Wiedemann
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c27
--- Comment #27 from Bernhard Wiedemann
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c28
--- Comment #28 from Bernhard Wiedemann
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c29
--- Comment #29 from Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c30
--- Comment #30 from Swamp Workflow Management
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c31
--- Comment #31 from Swamp Workflow Management
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c32
--- Comment #32 from Swamp Workflow Management
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c33
Ludwig Nussel
The output was in /var/log/messages. The interesting part is that the #main mode# section belongs to SuSEfirewall2_setup and not to SuSEfirewall2_init.
Ah, of course. Sorry for that. SuSEfirewall2_init only causes the section with $ACTION=close to be executed (around line 2312). It only calls set_basic_rules().
[...]
As you can see, only the line numbers are changing, the $seconds remain the same, 0.
Which means fast :)
Could you tell me please where can I find the "init" file of the SuSEfirewall2?
/etc/init.d/SuSEfirewall2_init -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c34
--- Comment #34 from Bernhard Wiedemann
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c35
Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c36
--- Comment #36 from Ludwig Nussel
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c37
--- Comment #37 from Frederic Crozat
should be $SECONDS instead of $SECOND. I would have expected the output of SuSEfirewall2_init.service be recorded in the journal. Looks like that's only happening when restarting it in the running system. Is there anything special that needs to be done to enable logging to journal during boot?
it should work fine but there was some bugs in the journal code which could not log in journal output from process which are no longer running (and SuSEfirewall might be one of those). It will be fixed with pending systemd update for 12.2 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c38
Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c39
--- Comment #39 from Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c40
--- Comment #40 from Ludwig Nussel
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c41
--- Comment #41 from Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c42
--- Comment #42 from Swamp Workflow Management
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c43
Herbert Meier
Nov 26 21:13:00 linux-suse SuSEfirewall2_init[793]: /bin/logger -p auth.info this one it takes one and a half minute to execute the command `/bin/logger
(In reply to comment #40)
Ok, now it gets interesting. There are two things going wrong 1. the logger call shouldn't take ages
I also saw this, when using btrfs for root filesystem. In my case it was postfix that took more than 40 seconds to start. The following is the strace output: 22:35:44 execve("/usr/sbin/postlog", ["/usr/sbin/postlog", "-t", "postfix/postfix-script", "-p", "info", "starting", "the", "Postfix", "mail", "system"], ["MAIL_CONFIG=/etc/postfix", "data_directory=/var/lib/postfix", "sample_directory=/usr/share/doc/packages/postfix-doc/samples", "setgid_group=maildrop", "sendmail_path=/usr/sbin/sendmail", "mailq_path=/usr/bin/mailq", "manpage_directory=/usr/share/man", "readme_directory=/usr/share/doc/packages/postfix-doc/README_FILES", "newaliases_path=/usr/bin/newaliases", "PATH=/bin:/usr/bin:/sbin:/usr/sbin", "PWD=/var/spool/postfix", "queue_directory=/var/spool/postfix", "LANG=C", "mail_owner=postfix", "daemon_directory=/usr/lib/postfix", "SHLVL=1", "config_directory=/etc/postfix", "MAIL_LOGTAG=postfix", "html_directory=/usr/share/doc/packages/postfix-doc/html", "command_directory=/usr/sbin", "OLDPWD=/etc/postfix", "_=/usr/sbin/postlog"]) = 0 <0.000116> 22:35:44 socket(PF_FILE, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 3 <0.000010> 22:35:44 connect(3, {sa_family=AF_FILE, sun_path="/dev/log"}, 110) = 0 <0.000009> 22:35:44 sendto(3, "<22>Oct 26 22:35:44 postfix/postfix-script[2096]: starting the Postfix mail system", 82, MSG_NOSIGNAL, NULL, 0) = 82 <39.725261> 22:36:24 exit_group(0) = ? I moved the root filesystem to an ext4 partition and this fixed the problem. Boot time was reduced from Startup finished in 4917ms (kernel) + 123483ms (userspace) = 128401ms to Startup finished in 4206ms (kernel) + 20974ms (userspace) = 25181ms -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c44
--- Comment #44 from Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c45
--- Comment #45 from Bernhard Wiedemann
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c46
--- Comment #46 from Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c47
Ludwig Nussel
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c48
--- Comment #48 from Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c
David Sterba
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c50
--- Comment #50 from Swamp Workflow Management
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c51
--- Comment #51 from Ákos Szőts
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c52
--- Comment #52 from Bernhard Wiedemann
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c53
Benjamin Brunner
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c54
--- Comment #54 from Bernhard Wiedemann
https://bugzilla.novell.com/show_bug.cgi?id=785240
https://bugzilla.novell.com/show_bug.cgi?id=785240#c55
--- Comment #55 from Bernhard Wiedemann
participants (1)
-
bugzilla_noreply@novell.com