[one-users] Files in /var/tmp/one/vmm/kvm/ disappear.

richard -rw- weinberger richard.weinberger at gmail.com
Fri Mar 9 01:22:43 PST 2012


On Fri, Mar 9, 2012 at 10:13 AM, Jaime Melis <jmelis at opennebula.org> wrote:
> Hello Richard,
>
> I'm not sure if this is related to OpenNebula, maybe there's some other
> daemon who's removing those files. Just to be sure it isn't OpenNebula, I
> suggest you audit that file to discover the PID of the process removing it:

This must be a strange daemon which removes only some files from the directory.
One my hosts runs a well defined set of applications.
None of them deletes files from /var/tmp/one/vmm/kvm/.

> # install audit package
> # start the auditd daemon
> $ auditctl -w /var/tmp/one/vmm/kvm/deploy -p war -k opennebula_remotes
>
> wait for the unwanted delete to take place (you'll find the log in
> /var/log/audit/audit.log)
>
> Once you're finished do
> $ auditctl -W /var/tmp/one/vmm/kvm/deploy -p war -k opennebula_remotes
> # shut down the auditd daemon
>

Anyway, I'll try audit.

-- 
Thanks,
//richard



More information about the Users mailing list