On 23.07.2022 07:50, Moby wrote:
It was exactly what Andrei said it was. Switching from kernel-vanilla to kernel-default resolved the issue. I did a few zypper ref; zypper dup and kernal-vanilla was not offered or get installed. I have no idea how the machine ended up with kernel-vanilla, but the issue of zypper ps showing deleted files in use, even after reboots, is now resolved.
Actually it probably still warrants bug report against zypper. When file is deleted, lsof reports file type as DEL (even on kernel without SUSE specific patches). If file was just renamed then lsof will report the new file name. May be zypper should filter out files without explicit link count. Without btrfs the only possibility to get into this situation is to mount something over original mount point. sleep 166769 root mem REG 8,4 2112342 /mnt/sub1/libc.so.6 (path dev=0,64, inode=259) It is questionable, whether this should be interpreted as "file was deleted". If original, "hidden", file is deleted, output with the same "overmount" is sleep 166769 root DEL REG 8,4 2112342 /mnt/sub1/libc.so.6 Notice file type "DEL", not "mem".