<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hello,<br>
<br>
The mesured I/O is on the Rudder server root, or on a managed node ?<br>
<br>
Cfengine uses internally a TokyoCabinet database, and is a bit eager
on the writing on it. So even if it is not changing anything, it
writes (a lot) that it checked the system. So if the problem happen
on a managed node, you can use the workaround suggested in this blog
post:<br>
<a class="moz-txt-link-freetext" href="http://blog.normation.com/en/2013/09/09/speed-up-your-cfengine-by-using-a-ram-disk/">http://blog.normation.com/en/2013/09/09/speed-up-your-cfengine-by-using-a-ram-disk/</a><br>
<br>
<br>
Please note that the Rudder Server root centralises all messages, so
it is expected that he has some I/O<br>
<br>
Please tell me if it helps you or solves your issue<br>
<br>
Regards,<br>
Nicolas<br>
<br>
On 25/09/2013 10:55, Prestasit01 wrote:
<blockquote
cite="mid:D24EE976410D5544AA291E9B782A3A80EDC71E@daru2.domaine.local"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Trebuchet MS";
panose-1:2 11 6 3 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Texte de bulles Car";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
color:black;
mso-fareast-language:EN-US;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.sig
{mso-style-name:sig;}
span.sigsmall
{mso-style-name:sigsmall;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.TextedebullesCar
{mso-style-name:"Texte de bulles Car";
mso-style-priority:99;
mso-style-link:"Texte de bulles";
font-family:"Tahoma","sans-serif";
color:black;
mso-fareast-language:EN-US;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1027" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Hello all,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="color:#1F497D">I found that
rudder creates a lot of I/O each 5 minutes.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">It seems
normal that he works each 5 minutes due to the default
configuration but I/O creation seems not normal .<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">We only have
4 rules applied on this node :<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR"><o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">Rudder
system policy: basic setup (common) => default</span></b><span
style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">Rudder
system policy: daily inventory => default</span></b><span
style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">00_Constante
– myserver => variable definition</span></b><span
style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">(with theses
3 first rules we have 270Ko/s each 5 mins)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">And when we
add another rule we have 778Ko/s each 5 mins :
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">02_Init
Système<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">-----repertoire
fichiers</span></b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR"> =>
folder creation with enforced permissions<o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">-----SSH
</span></b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">=>
edit ssh configuration<b>
</b></span><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">-----Profile
Root & Repo</span></b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR"> =>
repository file creation with enforced content<o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">-----User
perso2</span></b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR"> =>
user creation with « Everytime » option checked
(corresponding to « </span><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;background:white">How
often do you want to want to check the password »)</span><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">-----Appli
Rsyslog Conf</span></b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR"> =>
modification of the rsyslog.conf (no enforced content)<o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">-----Permissions
/projet</span></b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR"> =>
set permission on two folder<o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">-----Sudoers
</span></b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">=>
modification on the sudoers file with « Enforce content of
the file ONLY at creation » checked</span><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">-----Service
Rsyslog</span></b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">
=> start service on boot, restart service if number of
process instances less than 0<o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">-----Permission
Sources</span></b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR"> =>
folder creation with permissions adjusted recursively<o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">-----profile
user exploit</span></b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR"> =>
2 files creation, with permission set<o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">-----Clés
SSH</span></b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR"> =>
add two ssh key<o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">-----Permission
user</span></b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR"> =>
set permission on a file<b><o:p></o:p></b></span></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">-----User
perso
</span></b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR">=>
user creation with « Everytime » option checked
(corresponding to « </span><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;background:white">How
often do you want to want to check the password »)</span><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Trebuchet
MS","sans-serif";color:#333333;mso-fareast-language:FR"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><span style="color:#1F497D">Have you got
one idea of what can be write each 5 mins ??? (because
normally it will only write if values are changed)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Thanks <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">BR<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">CJARD <o:p></o:p></span></p>
</div>
</div>
-------------------------------------------------------------------------<br>
Les informations ou pieces jointes contenues dans ce message sont
confidentielles. Seul le destinataire expressement vise peut en
prendre
connaissance. Toute autre personne qui en divulguera, diffusera ou
prendra des copies sera passible de poursuites. La societe
Ouest-France decline en outre, toute responsabilite de quelque
nature que ce soit au titre de ce message s'il a ete altere,
deforme ou falsifie.
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
rudder-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:rudder-users@lists.rudder-project.org">rudder-users@lists.rudder-project.org</a>
<a class="moz-txt-link-freetext" href="http://www.rudder-project.org/mailman/listinfo/rudder-users">http://www.rudder-project.org/mailman/listinfo/rudder-users</a>
</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Nicolas CHARLES</pre>
</body>
</html>