Hide Forgot
Description of problem: with selinux enforcing mariadb limit on open files is 1024. Systemd has a defined limit of 16K for mariadb. In permissive mode the systemd limit of 16K is enabled Version-Release number of selected component (if applicable): My env is 9 but this is also seen it the 10 release openstack-tripleo-0.0.8-0.2.d81bd6dgit.el7ost.noarch openstack-selinux-0.7.3-3.el7ost.noarch How reproducible: Steps to Reproduce: 1.-=>>sestatus SELinux status: enabled Current mode: enforcing 2.-=>>grep files /proc/770/limits (mariadb proc) Max open files 1024 16384 files 3.-=>>sestatus SELinux status: enabled Current mode: permissive 4.-=>>service mariadb restart 5.-=>>grep files /proc/84005/limits (maridb proc) Max open files 16384 16384 files Actual results: selinux enabled open files=1024 Expected results: selinux enabled open files=16384 Additional info:-=>>cat /etc/systemd/system/mariadb.service.d/limits.conf [Service] LimitNOFILE=16384
Hi Dave, we usually manage mysql/galera via pacemaker. Starting the service by hand breaks a lot of stuff (different pid path, log files, etc). Does this issue happen when galera is managed by pacemaker as well? thanks, Michele
I realize now you might have been talking about the undercloud where we do use mariadb via systemctl. Is that the case, yes?
I can't reproduce this on my OSP 10 undercloud. [root@haa-16 stack]# getenforce Enforcing [root@haa-16 stack]# for i in $(pgrep mysqld); do cat /proc/$i/limits | grep "open files"; done Max open files 16384 16384 files Max open files 16384 16384 files [root@haa-16 stack]# systemctl restart mariadb [root@haa-16 stack]# for i in $(pgrep mysqld); do cat /proc/$i/limits | grep "open files"; done Max open files 16384 16384 files Max open files 16384 16384 files [root@haa-16 stack]# rpm -qa |grep -E "selinux|instack-und" libselinux-utils-2.5-6.el7.x86_64 libselinux-python-2.5-6.el7.x86_64 libselinux-ruby-2.5-6.el7.x86_64 selinux-policy-devel-3.13.1-102.el7.noarch selinux-policy-3.13.1-102.el7.noarch instack-undercloud-5.0.0-0.20160930175750.9d2a655.el7ost.noarch openstack-selinux-0.7.10-1.el7ost.noarch selinux-policy-targeted-3.13.1-102.el7.noarch libselinux-2.5-6.el7.x86_64 [root@haa-16 stack]# cat /etc/redhat-release Red Hat Enterprise Linux Server release 7.3 (Maipo) Can we get a sosreport from the undercloud where you have seen this please? Thanks Michele