On 24/11/2022 6:48 pm, Daniel Ferradal wrote:
Some script is probably hogging the workers and not letting them close so if you must, just restart, but judging by the amount of traffic you seem to have at the time I would truncate in logrotate and not restart or reload the server at all.
I run a Python script on the production machine to delete the entire site (including directory structure) then redeploy everything from the repo whenever anything changes.
On the basis that Apache (mod-wsgi) only reads the files once on reload, if they also had the dead finger of my script or perhaps the Python interpreter hanging on, that may well have "hogged" the workers.
That script now restarts Apache instead of reload.
I have now adjusted the logrotate script to avoid reload/restart logging status as follows:
/var/log/apache2/*.log {
daily
missingok
rotate 14
compress
delaycompress
notifempty
copytruncate
sharedscripts
prerotate
if [ -d /etc/logrotate.d/httpd-prerotate ]; then
run-parts /etc/logrotate.d/httpd-prerotate
fi
endscript
postrotate
if pgrep -f ^/usr/sbin/apache2 > /dev/null; then
invoke-rc.d apache2 status 2>&1 | logger -t apache2.logrotate
fi
endscript
}
... and left the mpm-event settings as follows:
<IfModule mpm_event_module>
ServerLimit 32 # Thanks Eric Covener
StartServers 16
MinSpareThreads 400
MaxSpareThreads 250
ThreadLimit 64
ThreadsPerChild 50
AsyncRequestWorkerFactor 2
MaxRequestWorkers 800
MaxConnectionsPerChild 0
</IfModule>
I restarted the entire machine
Next logrotate is 00:00 UTC -- I'll report tomorrow.
Cheers
Mike
-- Signed email is an absolute defence against phishing. This email has been signed with my private key. If you import my public key you can automatically decrypt my signature and be sure it came from me. Just ask and I'll send it to you. Your email software can handle signing.
-- Signed email is an absolute defence against phishing. This email has been signed with my private key. If you import my public key you can automatically decrypt my signature and be sure it came from me. Just ask and I'll send it to you. Your email software can handle signing.
Attachment:
OpenPGP_signature
Description: OpenPGP digital signature
|