Red Hat Satellite engineering is moving the tracking of its product development work on Satellite to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "Satellite project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs will be migrated starting at the end of May. If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "Satellite project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/SAT-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1485297 - REX creates zombie ssh processes when ProxyCommand is used for a tunnel (Satellite 6.2)
Summary: REX creates zombie ssh processes when ProxyCommand is used for a tunnel (Sate...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Remote Execution
Version: 6.2.10
Hardware: x86_64
OS: Linux
medium
medium
Target Milestone: Unspecified
Assignee: Adam Ruzicka
QA Contact: Lukas Pramuk
URL:
Whiteboard: hotfix, hotfix_delivered
Depends On: 1461088
Blocks: 1465787
TreeView+ depends on / blocked
 
Reported: 2017-08-25 10:22 UTC by Lukas Zapletal
Modified: 2021-06-10 12:53 UTC (History)
15 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1461088
Environment:
Last Closed: 2018-03-08 22:19:51 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Foreman Issue Tracker 20018 0 None None None 2017-08-25 10:22:53 UTC

Comment 2 Satellite Program 2017-08-25 12:03:17 UTC 
Upstream bug assigned to aruzicka
Comment 3 Satellite Program 2017-08-25 12:03:21 UTC 
Moving this bug to POST for triage into Satellite 6 since the upstream issue http://projects.theforeman.org/issues/20018 has been resolved.
Comment 7 Lukas Zapletal 2017-08-28 12:25:28 UTC 
UPDATED HOTFIX INSTRUCTIONS FOR SATELLITE 6.2 AND CAPSULE:

On Satellite Server:

1) Upgrade package net-ssh:

yum upgrade http://people.redhat.com/~lzapleta/hotfix/ssh-zombie-1485297/sat-6.2/tfm-rubygem-net-ssh-4.0.1-2.el7sat.noarch.rpm http://people.redhat.com/~lzapleta/hotfix/ssh-zombie-1485297/sat-6.2/tfm-rubygem-net-ssh-doc-4.0.1-2.el7sat.noarch.rpm

2) Check for all running tasks via Monitor - Tasks, there should be only two running tasks left. Wait if there is long queue (e.g. regular syncs or promotions).

3) Restart foreman-task and foreman-proxy service

systemctl restart foreman-tasks foreman-proxy

4) Check tasks in Monitor - Tasks. Kill zombie processes if necessary

On each Satellite Capsule with ReX capability enabled:

Perform steps (1), (2)

3) Restart proxy:

systemctl restart foreman-proxy

AFTER UPGRADE

Perform Remote Execution harmless test on multiple hosts.

ROLLBACK INSTRUCTIONS

Downgrade tfm-rubygem-net-ssh and tfm-rubygem-net-ssh-doc to previous version and restart services.

NOTES

There is also a hotfix for non-scl package which I believe is not used, but publishing the build as well just for sure:

http://people.redhat.com/~lzapleta/hotfix/ssh-zombie-1485297/sat-6.2/non-scl/
Comment 8 Lukas Zapletal 2017-08-30 11:19:48 UTC 
UPDATE:

Only upgrade tfm-rubygem-net-ssh package the tfm-rubygem-net-ssh-doc subpackage is not needed when not installed. If you attempt to install the -doc subpackage be prepared to pull some extra dependencies from rhel-server-rhscl-7-rpms repo.
Comment 20 Mike McCune 2018-03-08 22:19:51 UTC 
This is resolved in Satellite 6.3. If you have upgraded and are still
seeing this issue, please feel free to re-open and provide additional
information about the issue.
Note You need to log in before you can comment on or make changes to this bug.