false-positive postfix
emcepe opened this issue · 18 comments
emcepe commented
Hi,
needrestart suggests to restart postfix all the time, even if it's restarted following needrestart call.
root@lokalhorst:/root/ # needrestart
Scanning processes...
Scanning candidates...
Scanning processor microcode...
The processor microcode seems to be up-to-date.
Services to be restarted:
invoke-rc.d postfix restart
No containers need to be restarted.
No user sessions are running outdated binaries.
root@lokalhorst:/root/ # service postfix restart
[ ok ] Stopping Postfix Mail Transport Agent: postfix.
[ ok ] Starting Postfix Mail Transport Agent: postfix.
root@lokalhorst:/root/ # needrestart
Scanning processes...
Scanning candidates...
Scanning processor microcode...
The processor microcode seems to be up-to-date.
Services to be restarted:
invoke-rc.d postfix restart
No containers need to be restarted.
No user sessions are running outdated binaries.
System:
Debian sid, custom Kernel: 4.14.68-grsec
needrestart Version 3.3-1
init: sysvinit (yes, no systemd)
sherpya commented
same for me, lxc container, debian stretch nr 2.11
[main] eval /etc/needrestart/needrestart.conf
[main] needrestart v2.11
[main] running in root mode
[Core] Using UI 'NeedRestart::UI::stdio'...
[Core] #453 is a NeedRestart::Interp::Perl
[Perl] #453: could not get a source file, skipping
[Core] #483 is a NeedRestart::Interp::Perl
[Perl] #483: could not get a source file, skipping
[Core] #484 is a NeedRestart::Interp::Perl
[Perl] #484: could not get a source file, skipping
[main] #3010 uses non-existing /usr/lib/postfix/sbin/pickup
[main] #3010 is a child of #3007
[main] #3007 exe => /usr/lib/postfix/sbin/master
[main] #3007 running /etc/needrestart/hook.d/10-dpkg
[main] #3007 package: postfix
[main] no pidfile reference found at postfix
[Kernel] Linux: kernel release 4.9.0-8-amd64, kernel version #1 SMP Debian 4.9.110-3+deb9u5 (2018-09-30)
[Kernel/Linux] Did not find any linux images.
Failed to retrieve available kernel versions.
Restarting services...
Services to be restarted:
Restart «postfix»? [Ynas?]
stat /usr/lib/postfix/sbin/pickup
File: /usr/lib/postfix/sbin/pickup
Size: 14408 Blocks: 32 IO Block: 4096 regular file
Device: fd04h/64772d Inode: 787434 Links: 1
Access: (0755/-rwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root)
Access: 2018-10-08 14:43:54.701090385 +0200
Modify: 2018-02-23 23:29:10.000000000 +0100
Change: 2018-06-06 10:50:17.197720168 +0200
Birth: -
cat /proc/3010/maps
55629e5c2000-55629e5c5000 r-xp 00000000 fd:04 787434 /usr/lib/postfix/sbin/pickup
55629e7c4000-55629e7c5000 r--p 00002000 fd:04 787434 /usr/lib/postfix/sbin/pickup
55629e7c5000-55629e7c6000 rw-p 00003000 fd:04 787434 /usr/lib/postfix/sbin/pickup
5562a0476000-5562a04a8000 rw-p 00000000 00:00 0 [heap]
7f27d8fe9000-7f27d8ff3000 r-xp 00000000 fd:04 1605748 /lib/x86_64-linux-gnu/libnss_files-2.24.so
7f27d8ff3000-7f27d91f3000 ---p 0000a000 fd:04 1605748 /lib/x86_64-linux-gnu/libnss_files-2.24.so
7f27d91f3000-7f27d91f4000 r--p 0000a000 fd:04 1605748 /lib/x86_64-linux-gnu/libnss_files-2.24.so
7f27d91f4000-7f27d91f5000 rw-p 0000b000 fd:04 1605748 /lib/x86_64-linux-gnu/libnss_files-2.24.so
7f27d91f5000-7f27d91fb000 rw-p 00000000 00:00 0
7f27d91fb000-7f27d9206000 r-xp 00000000 fd:04 1605759 /lib/x86_64-linux-gnu/libnss_nis-2.24.so
7f27d9206000-7f27d9405000 ---p 0000b000 fd:04 1605759 /lib/x86_64-linux-gnu/libnss_nis-2.24.so
7f27d9405000-7f27d9406000 r--p 0000a000 fd:04 1605759 /lib/x86_64-linux-gnu/libnss_nis-2.24.so
7f27d9406000-7f27d9407000 rw-p 0000b000 fd:04 1605759 /lib/x86_64-linux-gnu/libnss_nis-2.24.so
7f27d9407000-7f27d940e000 r-xp 00000000 fd:04 1605746 /lib/x86_64-linux-gnu/libnss_compat-2.24.so
7f27d940e000-7f27d960d000 ---p 00007000 fd:04 1605746 /lib/x86_64-linux-gnu/libnss_compat-2.24.so
7f27d960d000-7f27d960e000 r--p 00006000 fd:04 1605746 /lib/x86_64-linux-gnu/libnss_compat-2.24.so
7f27d960e000-7f27d960f000 rw-p 00007000 fd:04 1605746 /lib/x86_64-linux-gnu/libnss_compat-2.24.so
7f27d960f000-7f27d9625000 r-xp 00000000 fd:04 1605666 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f27d9625000-7f27d9824000 ---p 00016000 fd:04 1605666 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f27d9824000-7f27d9825000 r--p 00015000 fd:04 1605666 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f27d9825000-7f27d9826000 rw-p 00016000 fd:04 1605666 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f27d9826000-7f27d9929000 r-xp 00000000 fd:04 1605782 /lib/x86_64-linux-gnu/libm-2.24.so
7f27d9929000-7f27d9b28000 ---p 00103000 fd:04 1605782 /lib/x86_64-linux-gnu/libm-2.24.so
7f27d9b28000-7f27d9b29000 r--p 00102000 fd:04 1605782 /lib/x86_64-linux-gnu/libm-2.24.so
7f27d9b29000-7f27d9b2a000 rw-p 00103000 fd:04 1605782 /lib/x86_64-linux-gnu/libm-2.24.so
7f27d9b2a000-7f27d9c9c000 r-xp 00000000 fd:04 590868 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
7f27d9c9c000-7f27d9e9c000 ---p 00172000 fd:04 590868 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
7f27d9e9c000-7f27d9ea6000 r--p 00172000 fd:04 590868 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
7f27d9ea6000-7f27d9ea8000 rw-p 0017c000 fd:04 590868 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
7f27d9ea8000-7f27d9eac000 rw-p 00000000 00:00 0
7f27d9eac000-7f27da041000 r-xp 00000000 fd:04 1605676 /lib/x86_64-linux-gnu/libc-2.24.so
7f27da041000-7f27da241000 ---p 00195000 fd:04 1605676 /lib/x86_64-linux-gnu/libc-2.24.so
7f27da241000-7f27da245000 r--p 00195000 fd:04 1605676 /lib/x86_64-linux-gnu/libc-2.24.so
7f27da245000-7f27da247000 rw-p 00199000 fd:04 1605676 /lib/x86_64-linux-gnu/libc-2.24.so
7f27da247000-7f27da24b000 rw-p 00000000 00:00 0
7f27da24b000-7f27dbac7000 r-xp 00000000 fd:04 591192 /usr/lib/x86_64-linux-gnu/libicudata.so.57.1
7f27dbac7000-7f27dbcc6000 ---p 0187c000 fd:04 591192 /usr/lib/x86_64-linux-gnu/libicudata.so.57.1
7f27dbcc6000-7f27dbcc7000 r--p 0187b000 fd:04 591192 /usr/lib/x86_64-linux-gnu/libicudata.so.57.1
7f27dbcc7000-7f27dbcc8000 rw-p 0187c000 fd:04 591192 /usr/lib/x86_64-linux-gnu/libicudata.so.57.1
7f27dbcc8000-7f27dbe5c000 r-xp 00000000 fd:04 591199 /usr/lib/x86_64-linux-gnu/libicuuc.so.57.1
7f27dbe5c000-7f27dc05b000 ---p 00194000 fd:04 591199 /usr/lib/x86_64-linux-gnu/libicuuc.so.57.1
7f27dc05b000-7f27dc06d000 r--p 00193000 fd:04 591199 /usr/lib/x86_64-linux-gnu/libicuuc.so.57.1
7f27dc06d000-7f27dc06e000 rw-p 001a5000 fd:04 591199 /usr/lib/x86_64-linux-gnu/libicuuc.so.57.1
7f27dc06e000-7f27dc070000 rw-p 00000000 00:00 0
7f27dc070000-7f27dc2db000 r-xp 00000000 fd:04 591193 /usr/lib/x86_64-linux-gnu/libicui18n.so.57.1
7f27dc2db000-7f27dc4da000 ---p 0026b000 fd:04 591193 /usr/lib/x86_64-linux-gnu/libicui18n.so.57.1
7f27dc4da000-7f27dc4e7000 r--p 0026a000 fd:04 591193 /usr/lib/x86_64-linux-gnu/libicui18n.so.57.1
7f27dc4e7000-7f27dc4e9000 rw-p 00277000 fd:04 591193 /usr/lib/x86_64-linux-gnu/libicui18n.so.57.1
7f27dc4e9000-7f27dc4ea000 rw-p 00000000 00:00 0
7f27dc4ea000-7f27dc4ed000 r-xp 00000000 fd:04 1605803 /lib/x86_64-linux-gnu/libdl-2.24.so
7f27dc4ed000-7f27dc6ec000 ---p 00003000 fd:04 1605803 /lib/x86_64-linux-gnu/libdl-2.24.so
7f27dc6ec000-7f27dc6ed000 r--p 00002000 fd:04 1605803 /lib/x86_64-linux-gnu/libdl-2.24.so
7f27dc6ed000-7f27dc6ee000 rw-p 00003000 fd:04 1605803 /lib/x86_64-linux-gnu/libdl-2.24.so
7f27dc6ee000-7f27dc702000 r-xp 00000000 fd:04 1605758 /lib/x86_64-linux-gnu/libresolv-2.24.so
7f27dc702000-7f27dc901000 ---p 00014000 fd:04 1605758 /lib/x86_64-linux-gnu/libresolv-2.24.so
7f27dc901000-7f27dc902000 r--p 00013000 fd:04 1605758 /lib/x86_64-linux-gnu/libresolv-2.24.so
7f27dc902000-7f27dc903000 rw-p 00014000 fd:04 1605758 /lib/x86_64-linux-gnu/libresolv-2.24.so
7f27dc903000-7f27dc905000 rw-p 00000000 00:00 0
7f27dc905000-7f27dc919000 r-xp 00000000 fd:04 1605743 /lib/x86_64-linux-gnu/libnsl-2.24.so
7f27dc919000-7f27dcb19000 ---p 00014000 fd:04 1605743 /lib/x86_64-linux-gnu/libnsl-2.24.so
7f27dcb19000-7f27dcb1a000 r--p 00014000 fd:04 1605743 /lib/x86_64-linux-gnu/libnsl-2.24.so
7f27dcb1a000-7f27dcb1b000 rw-p 00015000 fd:04 1605743 /lib/x86_64-linux-gnu/libnsl-2.24.so
7f27dcb1b000-7f27dcb1d000 rw-p 00000000 00:00 0
7f27dcb1d000-7f27dccd1000 r-xp 00000000 fd:04 590963 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7f27dccd1000-7f27dced1000 ---p 001b4000 fd:04 590963 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7f27dced1000-7f27dced8000 r--p 001b4000 fd:04 590963 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7f27dced8000-7f27dcedb000 rw-p 001bb000 fd:04 590963 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7f27dcedb000-7f27dcef3000 r-xp 00000000 fd:04 1605802 /lib/x86_64-linux-gnu/libpthread-2.24.so
7f27dcef3000-7f27dd0f2000 ---p 00018000 fd:04 1605802 /lib/x86_64-linux-gnu/libpthread-2.24.so
7f27dd0f2000-7f27dd0f3000 r--p 00017000 fd:04 1605802 /lib/x86_64-linux-gnu/libpthread-2.24.so
7f27dd0f3000-7f27dd0f4000 rw-p 00018000 fd:04 1605802 /lib/x86_64-linux-gnu/libpthread-2.24.so
7f27dd0f4000-7f27dd0f8000 rw-p 00000000 00:00 0
7f27dd0f8000-7f27dd112000 r-xp 00000000 fd:04 591179 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7f27dd112000-7f27dd311000 ---p 0001a000 fd:04 591179 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7f27dd311000-7f27dd312000 r--p 00019000 fd:04 591179 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7f27dd312000-7f27dd313000 rw-p 0001a000 fd:04 591179 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7f27dd313000-7f27dd578000 r-xp 00000000 fd:04 590936 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7f27dd578000-7f27dd777000 ---p 00265000 fd:04 590936 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7f27dd777000-7f27dd795000 r--p 00264000 fd:04 590936 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7f27dd795000-7f27dd7a3000 rw-p 00282000 fd:04 590936 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7f27dd7a3000-7f27dd7a6000 rw-p 00000000 00:00 0
7f27dd7a6000-7f27dd808000 r-xp 00000000 fd:04 590874 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7f27dd808000-7f27dda08000 ---p 00062000 fd:04 590874 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7f27dda08000-7f27dda0c000 r--p 00062000 fd:04 590874 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7f27dda0c000-7f27dda12000 rw-p 00066000 fd:04 590874 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7f27dda12000-7f27dda50000 r-xp 00000000 fd:04 787417 /usr/lib/postfix/libpostfix-util.so
7f27dda50000-7f27ddc4f000 ---p 0003e000 fd:04 787417 /usr/lib/postfix/libpostfix-util.so
7f27ddc4f000-7f27ddc50000 r--p 0003d000 fd:04 787417 /usr/lib/postfix/libpostfix-util.so
7f27ddc50000-7f27ddc52000 rw-p 0003e000 fd:04 787417 /usr/lib/postfix/libpostfix-util.so
7f27ddc52000-7f27ddc53000 rw-p 00000000 00:00 0
7f27ddc53000-7f27ddc93000 r-xp 00000000 fd:04 787414 /usr/lib/postfix/libpostfix-global.so
7f27ddc93000-7f27dde93000 ---p 00040000 fd:04 787414 /usr/lib/postfix/libpostfix-global.so
7f27dde93000-7f27dde95000 r--p 00040000 fd:04 787414 /usr/lib/postfix/libpostfix-global.so
7f27dde95000-7f27dde97000 rw-p 00042000 fd:04 787414 /usr/lib/postfix/libpostfix-global.so
7f27dde97000-7f27ddea0000 r-xp 00000000 fd:04 787415 /usr/lib/postfix/libpostfix-master.so
7f27ddea0000-7f27de09f000 ---p 00009000 fd:04 787415 /usr/lib/postfix/libpostfix-master.so
7f27de09f000-7f27de0a0000 r--p 00008000 fd:04 787415 /usr/lib/postfix/libpostfix-master.so
7f27de0a0000-7f27de0a1000 rw-p 00009000 fd:04 787415 /usr/lib/postfix/libpostfix-master.so
7f27de0a1000-7f27de0c4000 r-xp 00000000 fd:04 1605642 /lib/x86_64-linux-gnu/ld-2.24.so
7f27de2b1000-7f27de2bb000 rw-p 00000000 00:00 0
7f27de2c1000-7f27de2c4000 rw-p 00000000 00:00 0
7f27de2c4000-7f27de2c5000 r--p 00023000 fd:04 1605642 /lib/x86_64-linux-gnu/ld-2.24.so
7f27de2c5000-7f27de2c6000 rw-p 00024000 fd:04 1605642 /lib/x86_64-linux-gnu/ld-2.24.so
7f27de2c6000-7f27de2c7000 rw-p 00000000 00:00 0
7ffe81614000-7ffe81635000 rw-p 00000000 00:00 0 [stack]
7ffe817d3000-7ffe817d5000 r--p 00000000 00:00 0 [vvar]
7ffe817d5000-7ffe817d7000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
liske commented
I assume this false positive is triggered if postfix is run with chroot enabled. Could you please provide the output of stat /proc/3010/root/usr/lib/postfix/sbin/pickup - it doesn't exist, doesn't it?
no-response commented
This issue has been automatically closed because there has been no response to our request for more information from the original author. With only the information that is currently in the issue, we don't have enough information to take action. Please reach out if you have or find the answers we need so that we can investigate further.
Reiner030 commented
Hello @liske
because issue is closed without solution I try to hook in with same problem on Proxmox 5.2 within Debian LXC container:
Version is from Debian Stretch:
Package: needrestart
Version: 2.11-3+deb9u1
# needrestart --version
needrestart 2.11 - Restart daemons after library updates.
Output of check:
# needrestart -v -b
[main] eval /etc/needrestart/needrestart.conf
[main] needrestart v2.11
[main] running in root mode
[main] detected systemd
NEEDRESTART-VER: 2.11
[Core] #245 is a NeedRestart::Interp::Perl
[Perl] #245: source=/usr/sbin/munin-node
[Core] #956 is a NeedRestart::Interp::Python
[Python] #956: source=/usr/bin/fail2ban-server
[main] #2788 uses non-existing /usr/lib/postfix/sbin/pickup
[main] #2788 is a child of #11904
[Core] #11639 is a NeedRestart::Interp::Java
[Core] #11791 is a NeedRestart::Interp::Java
[Core] #22172 is a NeedRestart::Interp::Python
[Python] #22172: source=/usr/bin/salt-minion
[Core] #22176 is a NeedRestart::Interp::Python
[Python] #22176: source=/usr/bin/salt-minion
[Python] #22176: use cached file list
[Core] #22179 is a NeedRestart::Interp::Python
[Python] #22179: source=/usr/bin/salt-minion
[Python] #22179: use cached file list
[main] #11904 exe => /usr/lib/postfix/sbin/master
[main] #11904 is postfix@-.service
[Kernel] Linux: kernel release 4.15.18-12-pve, kernel version #1 SMP PVE 4.15.18-35 (Wed, 13 Mar 2019 08:24:42 +0100)
Failed to load NeedRestart::Kernel::kFreeBSD: [Kernel/kFreeBSD] Not running on GNU/kFreeBSD!
[Kernel/Linux] /boot/vmlinuz-4.15.18-12-pve => 4.15.18-12-pve (build@pve) #1 SMP PVE 4.15.18-35 (Wed, 13 Mar 2019 08:24:42 +0100) [4.15.18-12-pve]*
[Kernel/Linux] /boot/vmlinuz-4.9.0-8-amd64 => 4.9.0-8-amd64 (debian-kernel@lists.debian.org) #1 SMP Debian 4.9.144-3.1 (2019-02-19) [4.9.0-8-amd64]
[Kernel/Linux] Expected linux version: 4.15.18-12-pve
NEEDRESTART-KCUR: 4.15.18-12-pve
NEEDRESTART-KEXP: 4.15.18-12-pve
NEEDRESTART-KSTA: 1
NEEDRESTART-SVC: postfix@-.service
Check of (chrooted) pathes - against your assumption both files exists:
# stat /usr/lib/postfix/sbin/master /proc/11904/root/usr/lib/postfix/sbin/master
File: /usr/lib/postfix/sbin/master
Size: 38992 Blocks: 80 IO Block: 4096 regular file
Device: fd08h/64776d Inode: 1706700 Links: 1
Access: (0755/-rwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root)
Access: 2019-04-23 19:09:57.552962486 +0000
Modify: 2019-02-08 14:07:33.000000000 +0000
Change: 2019-03-05 19:16:38.467152258 +0000
Birth: -
File: /proc/11904/root/usr/lib/postfix/sbin/master
Size: 38992 Blocks: 80 IO Block: 4096 regular file
Device: fd08h/64776d Inode: 1706700 Links: 1
Access: (0755/-rwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root)
Access: 2019-04-23 19:09:57.552962486 +0000
Modify: 2019-02-08 14:07:33.000000000 +0000
Change: 2019-03-05 19:16:38.467152258 +0000
Birth: -
and as before posted also output of maps:
# cat /proc/11904/maps
55c56830a000-55c568313000 r-xp 00000000 fd:08 1706700 /usr/lib/postfix/sbin/master
55c568512000-55c568513000 r--p 00008000 fd:08 1706700 /usr/lib/postfix/sbin/master
55c568513000-55c568514000 rw-p 00009000 fd:08 1706700 /usr/lib/postfix/sbin/master
55c5695b9000-55c5695eb000 rw-p 00000000 00:00 0 [heap]
7f562445a000-7f5624464000 r-xp 00000000 fd:08 524954 /lib/x86_64-linux-gnu/libnss_files-2.24.so
7f5624464000-7f5624664000 ---p 0000a000 fd:08 524954 /lib/x86_64-linux-gnu/libnss_files-2.24.so
7f5624664000-7f5624665000 r--p 0000a000 fd:08 524954 /lib/x86_64-linux-gnu/libnss_files-2.24.so
7f5624665000-7f5624666000 rw-p 0000b000 fd:08 524954 /lib/x86_64-linux-gnu/libnss_files-2.24.so
7f5624666000-7f562466c000 rw-p 00000000 00:00 0
7f562466c000-7f5624677000 r-xp 00000000 fd:08 524956 /lib/x86_64-linux-gnu/libnss_nis-2.24.so
7f5624677000-7f5624876000 ---p 0000b000 fd:08 524956 /lib/x86_64-linux-gnu/libnss_nis-2.24.so
7f5624876000-7f5624877000 r--p 0000a000 fd:08 524956 /lib/x86_64-linux-gnu/libnss_nis-2.24.so
7f5624877000-7f5624878000 rw-p 0000b000 fd:08 524956 /lib/x86_64-linux-gnu/libnss_nis-2.24.so
7f5624878000-7f562487f000 r-xp 00000000 fd:08 524952 /lib/x86_64-linux-gnu/libnss_compat-2.24.so
7f562487f000-7f5624a7e000 ---p 00007000 fd:08 524952 /lib/x86_64-linux-gnu/libnss_compat-2.24.so
7f5624a7e000-7f5624a7f000 r--p 00006000 fd:08 524952 /lib/x86_64-linux-gnu/libnss_compat-2.24.so
7f5624a7f000-7f5624a80000 rw-p 00007000 fd:08 524952 /lib/x86_64-linux-gnu/libnss_compat-2.24.so
7f5624a80000-7f5624a96000 r-xp 00000000 fd:08 524454 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f5624a96000-7f5624c95000 ---p 00016000 fd:08 524454 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f5624c95000-7f5624c96000 r--p 00015000 fd:08 524454 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f5624c96000-7f5624c97000 rw-p 00016000 fd:08 524454 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f5624c97000-7f5624d9a000 r-xp 00000000 fd:08 524948 /lib/x86_64-linux-gnu/libm-2.24.so
7f5624d9a000-7f5624f99000 ---p 00103000 fd:08 524948 /lib/x86_64-linux-gnu/libm-2.24.so
7f5624f99000-7f5624f9a000 r--p 00102000 fd:08 524948 /lib/x86_64-linux-gnu/libm-2.24.so
7f5624f9a000-7f5624f9b000 rw-p 00103000 fd:08 524948 /lib/x86_64-linux-gnu/libm-2.24.so
7f5624f9b000-7f562510d000 r-xp 00000000 fd:08 1449457 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
7f562510d000-7f562530d000 ---p 00172000 fd:08 1449457 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
7f562530d000-7f5625317000 r--p 00172000 fd:08 1449457 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
7f5625317000-7f5625319000 rw-p 0017c000 fd:08 1449457 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
7f5625319000-7f562531d000 rw-p 00000000 00:00 0
7f562531d000-7f56254b2000 r-xp 00000000 fd:08 524944 /lib/x86_64-linux-gnu/libc-2.24.so
7f56254b2000-7f56256b2000 ---p 00195000 fd:08 524944 /lib/x86_64-linux-gnu/libc-2.24.so
7f56256b2000-7f56256b6000 r--p 00195000 fd:08 524944 /lib/x86_64-linux-gnu/libc-2.24.so
7f56256b6000-7f56256b8000 rw-p 00199000 fd:08 524944 /lib/x86_64-linux-gnu/libc-2.24.so
7f56256b8000-7f56256bc000 rw-p 00000000 00:00 0
7f56256bc000-7f5626f38000 r-xp 00000000 fd:08 1449440 /usr/lib/x86_64-linux-gnu/libicudata.so.57.1
7f5626f38000-7f5627137000 ---p 0187c000 fd:08 1449440 /usr/lib/x86_64-linux-gnu/libicudata.so.57.1
7f5627137000-7f5627138000 r--p 0187b000 fd:08 1449440 /usr/lib/x86_64-linux-gnu/libicudata.so.57.1
7f5627138000-7f5627139000 rw-p 0187c000 fd:08 1449440 /usr/lib/x86_64-linux-gnu/libicudata.so.57.1
7f5627139000-7f56272cd000 r-xp 00000000 fd:08 1449476 /usr/lib/x86_64-linux-gnu/libicuuc.so.57.1
7f56272cd000-7f56274cc000 ---p 00194000 fd:08 1449476 /usr/lib/x86_64-linux-gnu/libicuuc.so.57.1
7f56274cc000-7f56274de000 r--p 00193000 fd:08 1449476 /usr/lib/x86_64-linux-gnu/libicuuc.so.57.1
7f56274de000-7f56274df000 rw-p 001a5000 fd:08 1449476 /usr/lib/x86_64-linux-gnu/libicuuc.so.57.1
7f56274df000-7f56274e1000 rw-p 00000000 00:00 0
7f56274e1000-7f562774c000 r-xp 00000000 fd:08 1449449 /usr/lib/x86_64-linux-gnu/libicui18n.so.57.1
7f562774c000-7f562794b000 ---p 0026b000 fd:08 1449449 /usr/lib/x86_64-linux-gnu/libicui18n.so.57.1
7f562794b000-7f5627958000 r--p 0026a000 fd:08 1449449 /usr/lib/x86_64-linux-gnu/libicui18n.so.57.1
7f5627958000-7f562795a000 rw-p 00277000 fd:08 1449449 /usr/lib/x86_64-linux-gnu/libicui18n.so.57.1
7f562795a000-7f562795b000 rw-p 00000000 00:00 0
7f562795b000-7f562795e000 r-xp 00000000 fd:08 524947 /lib/x86_64-linux-gnu/libdl-2.24.so
7f562795e000-7f5627b5d000 ---p 00003000 fd:08 524947 /lib/x86_64-linux-gnu/libdl-2.24.so
7f5627b5d000-7f5627b5e000 r--p 00002000 fd:08 524947 /lib/x86_64-linux-gnu/libdl-2.24.so
7f5627b5e000-7f5627b5f000 rw-p 00003000 fd:08 524947 /lib/x86_64-linux-gnu/libdl-2.24.so
7f5627b5f000-7f5627b73000 r-xp 00000000 fd:08 524960 /lib/x86_64-linux-gnu/libresolv-2.24.so
7f5627b73000-7f5627d72000 ---p 00014000 fd:08 524960 /lib/x86_64-linux-gnu/libresolv-2.24.so
7f5627d72000-7f5627d73000 r--p 00013000 fd:08 524960 /lib/x86_64-linux-gnu/libresolv-2.24.so
7f5627d73000-7f5627d74000 rw-p 00014000 fd:08 524960 /lib/x86_64-linux-gnu/libresolv-2.24.so
7f5627d74000-7f5627d76000 rw-p 00000000 00:00 0
7f5627d76000-7f5627d8a000 r-xp 00000000 fd:08 524951 /lib/x86_64-linux-gnu/libnsl-2.24.so
7f5627d8a000-7f5627f8a000 ---p 00014000 fd:08 524951 /lib/x86_64-linux-gnu/libnsl-2.24.so
7f5627f8a000-7f5627f8b000 r--p 00014000 fd:08 524951 /lib/x86_64-linux-gnu/libnsl-2.24.so
7f5627f8b000-7f5627f8c000 rw-p 00015000 fd:08 524951 /lib/x86_64-linux-gnu/libnsl-2.24.so
7f5627f8c000-7f5627f8e000 rw-p 00000000 00:00 0
7f5627f8e000-7f5628142000 r-xp 00000000 fd:08 1448923 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7f5628142000-7f5628342000 ---p 001b4000 fd:08 1448923 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7f5628342000-7f5628349000 r--p 001b4000 fd:08 1448923 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7f5628349000-7f562834c000 rw-p 001bb000 fd:08 1448923 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7f562834c000-7f5628364000 r-xp 00000000 fd:08 524959 /lib/x86_64-linux-gnu/libpthread-2.24.so
7f5628364000-7f5628563000 ---p 00018000 fd:08 524959 /lib/x86_64-linux-gnu/libpthread-2.24.so
7f5628563000-7f5628564000 r--p 00017000 fd:08 524959 /lib/x86_64-linux-gnu/libpthread-2.24.so
7f5628564000-7f5628565000 rw-p 00018000 fd:08 524959 /lib/x86_64-linux-gnu/libpthread-2.24.so
7f5628565000-7f5628569000 rw-p 00000000 00:00 0
7f5628569000-7f5628583000 r-xp 00000000 fd:08 1449436 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7f5628583000-7f5628782000 ---p 0001a000 fd:08 1449436 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7f5628782000-7f5628783000 r--p 00019000 fd:08 1449436 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7f5628783000-7f5628784000 rw-p 0001a000 fd:08 1449436 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7f5628784000-7f56289ee000 r-xp 00000000 fd:08 1443337 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7f56289ee000-7f5628bee000 ---p 0026a000 fd:08 1443337 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7f5628bee000-7f5628c0c000 r--p 0026a000 fd:08 1443337 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7f5628c0c000-7f5628c1a000 rw-p 00288000 fd:08 1443337 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7f5628c1a000-7f5628c1d000 rw-p 00000000 00:00 0
7f5628c1d000-7f5628c80000 r-xp 00000000 fd:08 1443338 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7f5628c80000-7f5628e7f000 ---p 00063000 fd:08 1443338 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7f5628e7f000-7f5628e83000 r--p 00062000 fd:08 1443338 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7f5628e83000-7f5628e89000 rw-p 00066000 fd:08 1443338 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7f5628e89000-7f5628ec7000 r-xp 00000000 fd:08 1706687 /usr/lib/postfix/libpostfix-util.so
7f5628ec7000-7f56290c6000 ---p 0003e000 fd:08 1706687 /usr/lib/postfix/libpostfix-util.so
7f56290c6000-7f56290c7000 r--p 0003d000 fd:08 1706687 /usr/lib/postfix/libpostfix-util.so
7f56290c7000-7f56290c9000 rw-p 0003e000 fd:08 1706687 /usr/lib/postfix/libpostfix-util.so
7f56290c9000-7f56290ca000 rw-p 00000000 00:00 0
7f56290ca000-7f562910a000 r-xp 00000000 fd:08 1706684 /usr/lib/postfix/libpostfix-global.so
7f562910a000-7f562930a000 ---p 00040000 fd:08 1706684 /usr/lib/postfix/libpostfix-global.so
7f562930a000-7f562930c000 r--p 00040000 fd:08 1706684 /usr/lib/postfix/libpostfix-global.so
7f562930c000-7f562930e000 rw-p 00042000 fd:08 1706684 /usr/lib/postfix/libpostfix-global.so
7f562930e000-7f5629331000 r-xp 00000000 fd:08 524685 /lib/x86_64-linux-gnu/ld-2.24.so
7f5629519000-7f5629522000 rw-p 00000000 00:00 0
7f562952f000-7f5629531000 rw-p 00000000 00:00 0
7f5629531000-7f5629532000 r--p 00023000 fd:08 524685 /lib/x86_64-linux-gnu/ld-2.24.so
7f5629532000-7f5629533000 rw-p 00024000 fd:08 524685 /lib/x86_64-linux-gnu/ld-2.24.so
7f5629533000-7f5629534000 rw-p 00000000 00:00 0
7ffe84bd8000-7ffe84bf9000 rw-p 00000000 00:00 0 [stack]
7ffe84bfb000-7ffe84bfe000 r--p 00000000 00:00 0 [vvar]
7ffe84bfe000-7ffe84c00000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
I/we have setup many other instances (baremetal, AWS Xen based, OpenCloud libvirt based) and they are setup and work all fine except this LXC container based instance.
Btw. Proxmox can be run/setup without license in community mode so it could be also tested e.g. in a Virtualbox instance.
liske commented
This is weirrd. The "$pid using non-existing $path" message is generated if /proc/$pid/map_files/$maddr nor /proc/$pid/root/$path does exist. But /proc/11904/root//usr/lib/postfix/sbin/master seems to exist in your example.
Could you give needrestart from strech-backports a try? Although there are no explicit LXC bugfix since 2.11 there may be impacts by other fixes.
no-response commented
This issue has been automatically closed because there has been no response to our request for more information from the original author. With only the information that is currently in the issue, we don't have enough information to take action. Please reach out if you have or find the answers we need so that we can investigate further.
Reiner030 commented
It seems to be nearly same problem;
Interesting: now master process is recognized:
root@mysql-offv-01:~# needrestart -b -v
[main] eval /etc/needrestart/needrestart.conf
[main] needrestart v3.3
[main] running in root mode
[main] systemd detected
[main] container detected
NEEDRESTART-VER: 3.3
[Core] #134 is a NeedRestart::Interp::Perl
[Perl] #134: source=/usr/sbin/munin-node
[Core] #169 is a NeedRestart::Interp::Python
[Python] #169: source=/usr/bin/salt-minion
[Core] #211 is a NeedRestart::Interp::Java
[Core] #909 is a NeedRestart::Interp::Python
[Python] #909: source=/usr/bin/fail2ban-server
[Core] #954 is a NeedRestart::Interp::Java
[Core] #978 is a NeedRestart::Interp::Python
[Python] #978: source=/usr/bin/salt-minion
[Python] #978: use cached file list
[Core] #1019 is a NeedRestart::Interp::Python
[Python] #1019: source=/usr/bin/salt-minion
[Python] #1019: use cached file list
[main] #12832 uses non-existing /usr/lib/postfix/sbin/pickup
[main] #12832 is a child of #12831
[main] #12831 exe => /usr/lib/postfix/sbin/master
[main] #12831 is postfix@-.service
[main] inside container, skipping kernel and microcode checks
NEEDRESTART-SVC: postfix@-.service
and has still has both files setup:
# stat /usr/lib/postfix/sbin/master /proc/12831/root/usr/lib/postfix/sbin/master
File: /usr/lib/postfix/sbin/master
Size: 38992 Blocks: 80 IO Block: 4096 regular file
Device: fd08h/64776d Inode: 1706700 Links: 1
Access: (0755/-rwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root)
Access: 2019-04-24 22:02:08.132897293 +0000
Modify: 2019-02-08 14:07:33.000000000 +0000
Change: 2019-03-05 19:16:38.467152258 +0000
Birth: -
File: /proc/12831/root/usr/lib/postfix/sbin/master
Size: 38992 Blocks: 80 IO Block: 4096 regular file
Device: fd08h/64776d Inode: 1706700 Links: 1
Access: (0755/-rwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root)
Access: 2019-04-24 22:02:08.132897293 +0000
Modify: 2019-02-08 14:07:33.000000000 +0000
Change: 2019-03-05 19:16:38.467152258 +0000
Birth: -
but not pickup one which is now recognized as problem and stat misses it's chroot file (folder structure of /proc/12832/root/usr/lib is missing):
# stat /usr/lib/postfix/sbin/pickup /proc/12832/root/usr/lib/postfix/sbin/pickup
File: /usr/lib/postfix/sbin/pickup
Size: 14408 Blocks: 32 IO Block: 4096 regular file
Device: fd08h/64776d Inode: 1706703 Links: 1
Access: (0755/-rwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root)
Access: 2019-04-24 20:10:14.085552097 +0000
Modify: 2019-02-08 14:07:33.000000000 +0000
Change: 2019-03-05 19:16:38.467152258 +0000
Birth: -
stat: cannot stat '/proc/12832/root/usr/lib/postfix/sbin/pickup': No such file or directory
and here it's maps file:
# cat /proc/12832/maps
561f21029000-561f2102c000 r-xp 00000000 fd:08 1706703 /usr/lib/postfix/sbin/pickup
561f2122b000-561f2122c000 r--p 00002000 fd:08 1706703 /usr/lib/postfix/sbin/pickup
561f2122c000-561f2122d000 rw-p 00003000 fd:08 1706703 /usr/lib/postfix/sbin/pickup
561f21d0d000-561f21d3f000 rw-p 00000000 00:00 0 [heap]
7fbc2d402000-7fbc2d40c000 r-xp 00000000 fd:08 524954 /lib/x86_64-linux-gnu/libnss_files-2.24.so
7fbc2d40c000-7fbc2d60c000 ---p 0000a000 fd:08 524954 /lib/x86_64-linux-gnu/libnss_files-2.24.so
7fbc2d60c000-7fbc2d60d000 r--p 0000a000 fd:08 524954 /lib/x86_64-linux-gnu/libnss_files-2.24.so
7fbc2d60d000-7fbc2d60e000 rw-p 0000b000 fd:08 524954 /lib/x86_64-linux-gnu/libnss_files-2.24.so
7fbc2d60e000-7fbc2d614000 rw-p 00000000 00:00 0
7fbc2d614000-7fbc2d61f000 r-xp 00000000 fd:08 524956 /lib/x86_64-linux-gnu/libnss_nis-2.24.so
7fbc2d61f000-7fbc2d81e000 ---p 0000b000 fd:08 524956 /lib/x86_64-linux-gnu/libnss_nis-2.24.so
7fbc2d81e000-7fbc2d81f000 r--p 0000a000 fd:08 524956 /lib/x86_64-linux-gnu/libnss_nis-2.24.so
7fbc2d81f000-7fbc2d820000 rw-p 0000b000 fd:08 524956 /lib/x86_64-linux-gnu/libnss_nis-2.24.so
7fbc2d820000-7fbc2d827000 r-xp 00000000 fd:08 524952 /lib/x86_64-linux-gnu/libnss_compat-2.24.so
7fbc2d827000-7fbc2da26000 ---p 00007000 fd:08 524952 /lib/x86_64-linux-gnu/libnss_compat-2.24.so
7fbc2da26000-7fbc2da27000 r--p 00006000 fd:08 524952 /lib/x86_64-linux-gnu/libnss_compat-2.24.so
7fbc2da27000-7fbc2da28000 rw-p 00007000 fd:08 524952 /lib/x86_64-linux-gnu/libnss_compat-2.24.so
7fbc2da28000-7fbc2da3e000 r-xp 00000000 fd:08 524454 /lib/x86_64-linux-gnu/libgcc_s.so.1
7fbc2da3e000-7fbc2dc3d000 ---p 00016000 fd:08 524454 /lib/x86_64-linux-gnu/libgcc_s.so.1
7fbc2dc3d000-7fbc2dc3e000 r--p 00015000 fd:08 524454 /lib/x86_64-linux-gnu/libgcc_s.so.1
7fbc2dc3e000-7fbc2dc3f000 rw-p 00016000 fd:08 524454 /lib/x86_64-linux-gnu/libgcc_s.so.1
7fbc2dc3f000-7fbc2dd42000 r-xp 00000000 fd:08 524948 /lib/x86_64-linux-gnu/libm-2.24.so
7fbc2dd42000-7fbc2df41000 ---p 00103000 fd:08 524948 /lib/x86_64-linux-gnu/libm-2.24.so
7fbc2df41000-7fbc2df42000 r--p 00102000 fd:08 524948 /lib/x86_64-linux-gnu/libm-2.24.so
7fbc2df42000-7fbc2df43000 rw-p 00103000 fd:08 524948 /lib/x86_64-linux-gnu/libm-2.24.so
7fbc2df43000-7fbc2e0b5000 r-xp 00000000 fd:08 1449457 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
7fbc2e0b5000-7fbc2e2b5000 ---p 00172000 fd:08 1449457 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
7fbc2e2b5000-7fbc2e2bf000 r--p 00172000 fd:08 1449457 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
7fbc2e2bf000-7fbc2e2c1000 rw-p 0017c000 fd:08 1449457 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
7fbc2e2c1000-7fbc2e2c5000 rw-p 00000000 00:00 0
7fbc2e2c5000-7fbc2e45a000 r-xp 00000000 fd:08 524944 /lib/x86_64-linux-gnu/libc-2.24.so
7fbc2e45a000-7fbc2e65a000 ---p 00195000 fd:08 524944 /lib/x86_64-linux-gnu/libc-2.24.so
7fbc2e65a000-7fbc2e65e000 r--p 00195000 fd:08 524944 /lib/x86_64-linux-gnu/libc-2.24.so
7fbc2e65e000-7fbc2e660000 rw-p 00199000 fd:08 524944 /lib/x86_64-linux-gnu/libc-2.24.so
7fbc2e660000-7fbc2e664000 rw-p 00000000 00:00 0
7fbc2e664000-7fbc2fee0000 r-xp 00000000 fd:08 1449440 /usr/lib/x86_64-linux-gnu/libicudata.so.57.1
7fbc2fee0000-7fbc300df000 ---p 0187c000 fd:08 1449440 /usr/lib/x86_64-linux-gnu/libicudata.so.57.1
7fbc300df000-7fbc300e0000 r--p 0187b000 fd:08 1449440 /usr/lib/x86_64-linux-gnu/libicudata.so.57.1
7fbc300e0000-7fbc300e1000 rw-p 0187c000 fd:08 1449440 /usr/lib/x86_64-linux-gnu/libicudata.so.57.1
7fbc300e1000-7fbc30275000 r-xp 00000000 fd:08 1449476 /usr/lib/x86_64-linux-gnu/libicuuc.so.57.1
7fbc30275000-7fbc30474000 ---p 00194000 fd:08 1449476 /usr/lib/x86_64-linux-gnu/libicuuc.so.57.1
7fbc30474000-7fbc30486000 r--p 00193000 fd:08 1449476 /usr/lib/x86_64-linux-gnu/libicuuc.so.57.1
7fbc30486000-7fbc30487000 rw-p 001a5000 fd:08 1449476 /usr/lib/x86_64-linux-gnu/libicuuc.so.57.1
7fbc30487000-7fbc30489000 rw-p 00000000 00:00 0
7fbc30489000-7fbc306f4000 r-xp 00000000 fd:08 1449449 /usr/lib/x86_64-linux-gnu/libicui18n.so.57.1
7fbc306f4000-7fbc308f3000 ---p 0026b000 fd:08 1449449 /usr/lib/x86_64-linux-gnu/libicui18n.so.57.1
7fbc308f3000-7fbc30900000 r--p 0026a000 fd:08 1449449 /usr/lib/x86_64-linux-gnu/libicui18n.so.57.1
7fbc30900000-7fbc30902000 rw-p 00277000 fd:08 1449449 /usr/lib/x86_64-linux-gnu/libicui18n.so.57.1
7fbc30902000-7fbc30903000 rw-p 00000000 00:00 0
7fbc30903000-7fbc30906000 r-xp 00000000 fd:08 524947 /lib/x86_64-linux-gnu/libdl-2.24.so
7fbc30906000-7fbc30b05000 ---p 00003000 fd:08 524947 /lib/x86_64-linux-gnu/libdl-2.24.so
7fbc30b05000-7fbc30b06000 r--p 00002000 fd:08 524947 /lib/x86_64-linux-gnu/libdl-2.24.so
7fbc30b06000-7fbc30b07000 rw-p 00003000 fd:08 524947 /lib/x86_64-linux-gnu/libdl-2.24.so
7fbc30b07000-7fbc30b1b000 r-xp 00000000 fd:08 524960 /lib/x86_64-linux-gnu/libresolv-2.24.so
7fbc30b1b000-7fbc30d1a000 ---p 00014000 fd:08 524960 /lib/x86_64-linux-gnu/libresolv-2.24.so
7fbc30d1a000-7fbc30d1b000 r--p 00013000 fd:08 524960 /lib/x86_64-linux-gnu/libresolv-2.24.so
7fbc30d1b000-7fbc30d1c000 rw-p 00014000 fd:08 524960 /lib/x86_64-linux-gnu/libresolv-2.24.so
7fbc30d1c000-7fbc30d1e000 rw-p 00000000 00:00 0
7fbc30d1e000-7fbc30d32000 r-xp 00000000 fd:08 524951 /lib/x86_64-linux-gnu/libnsl-2.24.so
7fbc30d32000-7fbc30f32000 ---p 00014000 fd:08 524951 /lib/x86_64-linux-gnu/libnsl-2.24.so
7fbc30f32000-7fbc30f33000 r--p 00014000 fd:08 524951 /lib/x86_64-linux-gnu/libnsl-2.24.so
7fbc30f33000-7fbc30f34000 rw-p 00015000 fd:08 524951 /lib/x86_64-linux-gnu/libnsl-2.24.so
7fbc30f34000-7fbc30f36000 rw-p 00000000 00:00 0
7fbc30f36000-7fbc310ea000 r-xp 00000000 fd:08 1448923 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7fbc310ea000-7fbc312ea000 ---p 001b4000 fd:08 1448923 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7fbc312ea000-7fbc312f1000 r--p 001b4000 fd:08 1448923 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7fbc312f1000-7fbc312f4000 rw-p 001bb000 fd:08 1448923 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7fbc312f4000-7fbc3130c000 r-xp 00000000 fd:08 524959 /lib/x86_64-linux-gnu/libpthread-2.24.so
7fbc3130c000-7fbc3150b000 ---p 00018000 fd:08 524959 /lib/x86_64-linux-gnu/libpthread-2.24.so
7fbc3150b000-7fbc3150c000 r--p 00017000 fd:08 524959 /lib/x86_64-linux-gnu/libpthread-2.24.so
7fbc3150c000-7fbc3150d000 rw-p 00018000 fd:08 524959 /lib/x86_64-linux-gnu/libpthread-2.24.so
7fbc3150d000-7fbc31511000 rw-p 00000000 00:00 0
7fbc31511000-7fbc3152b000 r-xp 00000000 fd:08 1449436 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7fbc3152b000-7fbc3172a000 ---p 0001a000 fd:08 1449436 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7fbc3172a000-7fbc3172b000 r--p 00019000 fd:08 1449436 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7fbc3172b000-7fbc3172c000 rw-p 0001a000 fd:08 1449436 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7fbc3172c000-7fbc31996000 r-xp 00000000 fd:08 1443337 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7fbc31996000-7fbc31b96000 ---p 0026a000 fd:08 1443337 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7fbc31b96000-7fbc31bb4000 r--p 0026a000 fd:08 1443337 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7fbc31bb4000-7fbc31bc2000 rw-p 00288000 fd:08 1443337 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7fbc31bc2000-7fbc31bc5000 rw-p 00000000 00:00 0
7fbc31bc5000-7fbc31c28000 r-xp 00000000 fd:08 1443338 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7fbc31c28000-7fbc31e27000 ---p 00063000 fd:08 1443338 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7fbc31e27000-7fbc31e2b000 r--p 00062000 fd:08 1443338 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7fbc31e2b000-7fbc31e31000 rw-p 00066000 fd:08 1443338 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7fbc31e31000-7fbc31e6f000 r-xp 00000000 fd:08 1706687 /usr/lib/postfix/libpostfix-util.so
7fbc31e6f000-7fbc3206e000 ---p 0003e000 fd:08 1706687 /usr/lib/postfix/libpostfix-util.so
7fbc3206e000-7fbc3206f000 r--p 0003d000 fd:08 1706687 /usr/lib/postfix/libpostfix-util.so
7fbc3206f000-7fbc32071000 rw-p 0003e000 fd:08 1706687 /usr/lib/postfix/libpostfix-util.so
7fbc32071000-7fbc32072000 rw-p 00000000 00:00 0
7fbc32072000-7fbc320b2000 r-xp 00000000 fd:08 1706684 /usr/lib/postfix/libpostfix-global.so
7fbc320b2000-7fbc322b2000 ---p 00040000 fd:08 1706684 /usr/lib/postfix/libpostfix-global.so
7fbc322b2000-7fbc322b4000 r--p 00040000 fd:08 1706684 /usr/lib/postfix/libpostfix-global.so
7fbc322b4000-7fbc322b6000 rw-p 00042000 fd:08 1706684 /usr/lib/postfix/libpostfix-global.so
7fbc322b6000-7fbc322bf000 r-xp 00000000 fd:08 1706685 /usr/lib/postfix/libpostfix-master.so
7fbc322bf000-7fbc324be000 ---p 00009000 fd:08 1706685 /usr/lib/postfix/libpostfix-master.so
7fbc324be000-7fbc324bf000 r--p 00008000 fd:08 1706685 /usr/lib/postfix/libpostfix-master.so
7fbc324bf000-7fbc324c0000 rw-p 00009000 fd:08 1706685 /usr/lib/postfix/libpostfix-master.so
7fbc324c0000-7fbc324e3000 r-xp 00000000 fd:08 524685 /lib/x86_64-linux-gnu/ld-2.24.so
7fbc326ca000-7fbc326d4000 rw-p 00000000 00:00 0
7fbc326e1000-7fbc326e3000 rw-p 00000000 00:00 0
7fbc326e3000-7fbc326e4000 r--p 00023000 fd:08 524685 /lib/x86_64-linux-gnu/ld-2.24.so
7fbc326e4000-7fbc326e5000 rw-p 00024000 fd:08 524685 /lib/x86_64-linux-gnu/ld-2.24.so
7fbc326e5000-7fbc326e6000 rw-p 00000000 00:00 0
7ffc36f80000-7ffc36fa1000 rw-p 00000000 00:00 0 [stack]
7ffc36fac000-7ffc36faf000 r--p 00000000 00:00 0 [vvar]
7ffc36faf000-7ffc36fb1000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
BTW: Proxmox has also open services if it make sense to fix it, too (same with Debian Stretch version):
# needrestart -b
NEEDRESTART-VER: 2.11
NEEDRESTART-KCUR: 4.15.18-13-pve
NEEDRESTART-KEXP: 4.15.18-13-pve
NEEDRESTART-KSTA: 1
NEEDRESTART-SVC: lxc-monitord.service
NEEDRESTART-SVC: pve-container@106.service
Reiner030 commented
There was an update in Debian backports and now I got again master as caused process for restart:
# needrestart -b -v
[main] eval /etc/needrestart/needrestart.conf
[main] needrestart v3.4
[main] running in root mode
[main] systemd detected
[main] container detected
NEEDRESTART-VER: 3.4
[Core] #134 is a NeedRestart::Interp::Perl
[Perl] #134: source=/usr/sbin/munin-node
[Core] #211 is a NeedRestart::Interp::Java
[Core] #909 is a NeedRestart::Interp::Python
[Python] #909: source=/usr/bin/fail2ban-server
[Core] #954 is a NeedRestart::Interp::Java
[Core] #6073 is a NeedRestart::Interp::Python
[Python] #6073: source=/usr/bin/salt-minion
[Core] #6075 is a NeedRestart::Interp::Python
[Python] #6075: source=/usr/bin/salt-minion
[Python] #6075: use cached file list
[Core] #6083 is a NeedRestart::Interp::Python
[Python] #6083: source=/usr/bin/salt-minion
[Python] #6083: use cached file list
[Core] #6264 is a NeedRestart::Interp::Python
[Python] #6264: source=/usr/bin/salt-minion
[Python] #6264: use cached file list
[main] #6273 uses non-existing /usr/lib/postfix/sbin/showq
[main] #6273 is a child of #24732
[main] #26289 uses non-existing /usr/lib/postfix/sbin/pickup
[main] #26289 is a child of #24732
[main] #24732 exe => /usr/lib/postfix/sbin/master
[main] #24732 is postfix@-.service
[main] inside container, skipping kernel checks
[main] inside container or vm, skipping microcode checks
NEEDRESTART-SVC: postfix@-.service
where still both pathes for master exists:
# stat /usr/lib/postfix/sbin/master /proc/24732/root/usr/lib/postfix/sbin/master
File: /usr/lib/postfix/sbin/master
Size: 38992 Blocks: 80 IO Block: 4096 regular file
Device: fd08h/64776d Inode: 1712756 Links: 1
Access: (0755/-rwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root)
Access: 2019-04-28 06:06:22.208595853 +0000
Modify: 2019-03-25 05:01:51.000000000 +0000
Change: 2019-04-28 06:06:01.348286916 +0000
Birth: -
File: /proc/24732/root/usr/lib/postfix/sbin/master
Size: 38992 Blocks: 80 IO Block: 4096 regular file
Device: fd08h/64776d Inode: 1712756 Links: 1
Access: (0755/-rwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root)
Access: 2019-04-28 06:06:22.208595853 +0000
Modify: 2019-03-25 05:01:51.000000000 +0000
Change: 2019-04-28 06:06:01.348286916 +0000
Birth: -
and here it's maps stats file
# cat /proc/24732/maps
55df43263000-55df4326c000 r-xp 00000000 fd:08 1712756 /usr/lib/postfix/sbin/master
55df4346b000-55df4346c000 r--p 00008000 fd:08 1712756 /usr/lib/postfix/sbin/master
55df4346c000-55df4346d000 rw-p 00009000 fd:08 1712756 /usr/lib/postfix/sbin/master
55df43de6000-55df43e18000 rw-p 00000000 00:00 0 [heap]
7ff52a3bb000-7ff52a3c5000 r-xp 00000000 fd:08 524954 /lib/x86_64-linux-gnu/libnss_files-2.24.so
7ff52a3c5000-7ff52a5c5000 ---p 0000a000 fd:08 524954 /lib/x86_64-linux-gnu/libnss_files-2.24.so
7ff52a5c5000-7ff52a5c6000 r--p 0000a000 fd:08 524954 /lib/x86_64-linux-gnu/libnss_files-2.24.so
7ff52a5c6000-7ff52a5c7000 rw-p 0000b000 fd:08 524954 /lib/x86_64-linux-gnu/libnss_files-2.24.so
7ff52a5c7000-7ff52a5cd000 rw-p 00000000 00:00 0
7ff52a5cd000-7ff52a5d8000 r-xp 00000000 fd:08 524956 /lib/x86_64-linux-gnu/libnss_nis-2.24.so
7ff52a5d8000-7ff52a7d7000 ---p 0000b000 fd:08 524956 /lib/x86_64-linux-gnu/libnss_nis-2.24.so
7ff52a7d7000-7ff52a7d8000 r--p 0000a000 fd:08 524956 /lib/x86_64-linux-gnu/libnss_nis-2.24.so
7ff52a7d8000-7ff52a7d9000 rw-p 0000b000 fd:08 524956 /lib/x86_64-linux-gnu/libnss_nis-2.24.so
7ff52a7d9000-7ff52a7e0000 r-xp 00000000 fd:08 524952 /lib/x86_64-linux-gnu/libnss_compat-2.24.so
7ff52a7e0000-7ff52a9df000 ---p 00007000 fd:08 524952 /lib/x86_64-linux-gnu/libnss_compat-2.24.so
7ff52a9df000-7ff52a9e0000 r--p 00006000 fd:08 524952 /lib/x86_64-linux-gnu/libnss_compat-2.24.so
7ff52a9e0000-7ff52a9e1000 rw-p 00007000 fd:08 524952 /lib/x86_64-linux-gnu/libnss_compat-2.24.so
7ff52a9e1000-7ff52a9f7000 r-xp 00000000 fd:08 524454 /lib/x86_64-linux-gnu/libgcc_s.so.1
7ff52a9f7000-7ff52abf6000 ---p 00016000 fd:08 524454 /lib/x86_64-linux-gnu/libgcc_s.so.1
7ff52abf6000-7ff52abf7000 r--p 00015000 fd:08 524454 /lib/x86_64-linux-gnu/libgcc_s.so.1
7ff52abf7000-7ff52abf8000 rw-p 00016000 fd:08 524454 /lib/x86_64-linux-gnu/libgcc_s.so.1
7ff52abf8000-7ff52acfb000 r-xp 00000000 fd:08 524948 /lib/x86_64-linux-gnu/libm-2.24.so
7ff52acfb000-7ff52aefa000 ---p 00103000 fd:08 524948 /lib/x86_64-linux-gnu/libm-2.24.so
7ff52aefa000-7ff52aefb000 r--p 00102000 fd:08 524948 /lib/x86_64-linux-gnu/libm-2.24.so
7ff52aefb000-7ff52aefc000 rw-p 00103000 fd:08 524948 /lib/x86_64-linux-gnu/libm-2.24.so
7ff52aefc000-7ff52b06e000 r-xp 00000000 fd:08 1449457 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
7ff52b06e000-7ff52b26e000 ---p 00172000 fd:08 1449457 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
7ff52b26e000-7ff52b278000 r--p 00172000 fd:08 1449457 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
7ff52b278000-7ff52b27a000 rw-p 0017c000 fd:08 1449457 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
7ff52b27a000-7ff52b27e000 rw-p 00000000 00:00 0
7ff52b27e000-7ff52b413000 r-xp 00000000 fd:08 524944 /lib/x86_64-linux-gnu/libc-2.24.so
7ff52b413000-7ff52b613000 ---p 00195000 fd:08 524944 /lib/x86_64-linux-gnu/libc-2.24.so
7ff52b613000-7ff52b617000 r--p 00195000 fd:08 524944 /lib/x86_64-linux-gnu/libc-2.24.so
7ff52b617000-7ff52b619000 rw-p 00199000 fd:08 524944 /lib/x86_64-linux-gnu/libc-2.24.so
7ff52b619000-7ff52b61d000 rw-p 00000000 00:00 0
7ff52b61d000-7ff52ce99000 r-xp 00000000 fd:08 1449440 /usr/lib/x86_64-linux-gnu/libicudata.so.57.1
7ff52ce99000-7ff52d098000 ---p 0187c000 fd:08 1449440 /usr/lib/x86_64-linux-gnu/libicudata.so.57.1
7ff52d098000-7ff52d099000 r--p 0187b000 fd:08 1449440 /usr/lib/x86_64-linux-gnu/libicudata.so.57.1
7ff52d099000-7ff52d09a000 rw-p 0187c000 fd:08 1449440 /usr/lib/x86_64-linux-gnu/libicudata.so.57.1
7ff52d09a000-7ff52d22e000 r-xp 00000000 fd:08 1449476 /usr/lib/x86_64-linux-gnu/libicuuc.so.57.1
7ff52d22e000-7ff52d42d000 ---p 00194000 fd:08 1449476 /usr/lib/x86_64-linux-gnu/libicuuc.so.57.1
7ff52d42d000-7ff52d43f000 r--p 00193000 fd:08 1449476 /usr/lib/x86_64-linux-gnu/libicuuc.so.57.1
7ff52d43f000-7ff52d440000 rw-p 001a5000 fd:08 1449476 /usr/lib/x86_64-linux-gnu/libicuuc.so.57.1
7ff52d440000-7ff52d442000 rw-p 00000000 00:00 0
7ff52d442000-7ff52d6ad000 r-xp 00000000 fd:08 1449449 /usr/lib/x86_64-linux-gnu/libicui18n.so.57.1
7ff52d6ad000-7ff52d8ac000 ---p 0026b000 fd:08 1449449 /usr/lib/x86_64-linux-gnu/libicui18n.so.57.1
7ff52d8ac000-7ff52d8b9000 r--p 0026a000 fd:08 1449449 /usr/lib/x86_64-linux-gnu/libicui18n.so.57.1
7ff52d8b9000-7ff52d8bb000 rw-p 00277000 fd:08 1449449 /usr/lib/x86_64-linux-gnu/libicui18n.so.57.1
7ff52d8bb000-7ff52d8bc000 rw-p 00000000 00:00 0
7ff52d8bc000-7ff52d8bf000 r-xp 00000000 fd:08 524947 /lib/x86_64-linux-gnu/libdl-2.24.so
7ff52d8bf000-7ff52dabe000 ---p 00003000 fd:08 524947 /lib/x86_64-linux-gnu/libdl-2.24.so
7ff52dabe000-7ff52dabf000 r--p 00002000 fd:08 524947 /lib/x86_64-linux-gnu/libdl-2.24.so
7ff52dabf000-7ff52dac0000 rw-p 00003000 fd:08 524947 /lib/x86_64-linux-gnu/libdl-2.24.so
7ff52dac0000-7ff52dad4000 r-xp 00000000 fd:08 524960 /lib/x86_64-linux-gnu/libresolv-2.24.so
7ff52dad4000-7ff52dcd3000 ---p 00014000 fd:08 524960 /lib/x86_64-linux-gnu/libresolv-2.24.so
7ff52dcd3000-7ff52dcd4000 r--p 00013000 fd:08 524960 /lib/x86_64-linux-gnu/libresolv-2.24.so
7ff52dcd4000-7ff52dcd5000 rw-p 00014000 fd:08 524960 /lib/x86_64-linux-gnu/libresolv-2.24.so
7ff52dcd5000-7ff52dcd7000 rw-p 00000000 00:00 0
7ff52dcd7000-7ff52dceb000 r-xp 00000000 fd:08 524951 /lib/x86_64-linux-gnu/libnsl-2.24.so
7ff52dceb000-7ff52deeb000 ---p 00014000 fd:08 524951 /lib/x86_64-linux-gnu/libnsl-2.24.so
7ff52deeb000-7ff52deec000 r--p 00014000 fd:08 524951 /lib/x86_64-linux-gnu/libnsl-2.24.so
7ff52deec000-7ff52deed000 rw-p 00015000 fd:08 524951 /lib/x86_64-linux-gnu/libnsl-2.24.so
7ff52deed000-7ff52deef000 rw-p 00000000 00:00 0
7ff52deef000-7ff52e0a3000 r-xp 00000000 fd:08 1448923 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7ff52e0a3000-7ff52e2a3000 ---p 001b4000 fd:08 1448923 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7ff52e2a3000-7ff52e2aa000 r--p 001b4000 fd:08 1448923 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7ff52e2aa000-7ff52e2ad000 rw-p 001bb000 fd:08 1448923 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7ff52e2ad000-7ff52e2c5000 r-xp 00000000 fd:08 524959 /lib/x86_64-linux-gnu/libpthread-2.24.so
7ff52e2c5000-7ff52e4c4000 ---p 00018000 fd:08 524959 /lib/x86_64-linux-gnu/libpthread-2.24.so
7ff52e4c4000-7ff52e4c5000 r--p 00017000 fd:08 524959 /lib/x86_64-linux-gnu/libpthread-2.24.so
7ff52e4c5000-7ff52e4c6000 rw-p 00018000 fd:08 524959 /lib/x86_64-linux-gnu/libpthread-2.24.so
7ff52e4c6000-7ff52e4ca000 rw-p 00000000 00:00 0
7ff52e4ca000-7ff52e4e4000 r-xp 00000000 fd:08 1449436 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7ff52e4e4000-7ff52e6e3000 ---p 0001a000 fd:08 1449436 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7ff52e6e3000-7ff52e6e4000 r--p 00019000 fd:08 1449436 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7ff52e6e4000-7ff52e6e5000 rw-p 0001a000 fd:08 1449436 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7ff52e6e5000-7ff52e94f000 r-xp 00000000 fd:08 1443337 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7ff52e94f000-7ff52eb4f000 ---p 0026a000 fd:08 1443337 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7ff52eb4f000-7ff52eb6d000 r--p 0026a000 fd:08 1443337 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7ff52eb6d000-7ff52eb7b000 rw-p 00288000 fd:08 1443337 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7ff52eb7b000-7ff52eb7e000 rw-p 00000000 00:00 0
7ff52eb7e000-7ff52ebe1000 r-xp 00000000 fd:08 1443338 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7ff52ebe1000-7ff52ede0000 ---p 00063000 fd:08 1443338 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7ff52ede0000-7ff52ede4000 r--p 00062000 fd:08 1443338 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7ff52ede4000-7ff52edea000 rw-p 00066000 fd:08 1443338 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7ff52edea000-7ff52ee28000 r-xp 00000000 fd:08 1712723 /usr/lib/postfix/libpostfix-util.so
7ff52ee28000-7ff52f027000 ---p 0003e000 fd:08 1712723 /usr/lib/postfix/libpostfix-util.so
7ff52f027000-7ff52f028000 r--p 0003d000 fd:08 1712723 /usr/lib/postfix/libpostfix-util.so
7ff52f028000-7ff52f02a000 rw-p 0003e000 fd:08 1712723 /usr/lib/postfix/libpostfix-util.so
7ff52f02a000-7ff52f02b000 rw-p 00000000 00:00 0
7ff52f02b000-7ff52f06b000 r-xp 00000000 fd:08 1712720 /usr/lib/postfix/libpostfix-global.so
7ff52f06b000-7ff52f26b000 ---p 00040000 fd:08 1712720 /usr/lib/postfix/libpostfix-global.so
7ff52f26b000-7ff52f26d000 r--p 00040000 fd:08 1712720 /usr/lib/postfix/libpostfix-global.so
7ff52f26d000-7ff52f26f000 rw-p 00042000 fd:08 1712720 /usr/lib/postfix/libpostfix-global.so
7ff52f26f000-7ff52f292000 r-xp 00000000 fd:08 524685 /lib/x86_64-linux-gnu/ld-2.24.so
7ff52f47a000-7ff52f483000 rw-p 00000000 00:00 0
7ff52f490000-7ff52f492000 rw-p 00000000 00:00 0
7ff52f492000-7ff52f493000 r--p 00023000 fd:08 524685 /lib/x86_64-linux-gnu/ld-2.24.so
7ff52f493000-7ff52f494000 rw-p 00024000 fd:08 524685 /lib/x86_64-linux-gnu/ld-2.24.so
7ff52f494000-7ff52f495000 rw-p 00000000 00:00 0
7ffcc432d000-7ffcc434e000 rw-p 00000000 00:00 0 [stack]
7ffcc43a4000-7ffcc43a7000 r--p 00000000 00:00 0 [vvar]
7ffcc43a7000-7ffcc43a9000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
zerkms commented
At the moment I mitigated it adding it to the blacklist:
# Blacklist binaries (list of regex).
$nrconf{blacklist} = [
# ignore sudo (not a daemon)
qr(^/usr/bin/sudo(\.dpkg-new)?$),
# ignore DHCP clients
qr(^/sbin/(dhclient|dhcpcd5|pump|udhcpc)(\.dpkg-new)?$),
# ignore apt-get (Debian Bug#784237)
qr(^/usr/bin/apt-get(\.dpkg-new)?$),
# https://github.com/liske/needrestart/issues/130
qr(^/usr/lib/postfix/sbin/pickup),
];
But if it's not solved can this issue please be reopened.
Reiner030 commented
@zerkms thanks, this solution works even not the best one (e.g. libssl updates weren't recognized then?).
For Reference - in Bug:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=887828#47
wrote Chris:
Indeed this seems to be related and even the reason for the difference.
The installation is a vanilla Debian Stretch with the Proxmox VE 5.1
from their repository "on top" running on a 4.13.13-5-pve Kernel.Luckily i had one single container running in "privileged" mode [1] (the
others are "unprivileged" containers) and it seems this makes the
difference:On all "unprivileged" container needrestart shows this behavior where
the "privileged" doesn't falsely detect postfix and wazuh-agent as to be
restarted.Any suggestion how to proceed with this? Closing this issue as it seems
not directly related to Debian but to LXC / Proxmox?[1] https://pve.proxmox.com/wiki/Linux_Container#pct_settings
iasdeoupxe commented
For the records for anyone (like me) arriving here via a github or google search. It seems that this might be fixed with 4271153 in needrestart 3.5:
- [Core] Ignore mapped files not found on filesystem (stat) to suppress
chroot false positives.
(github issue #158 by @mphilipps)
(github issue #152 by Ivan Kurnosov @zerkms and @djl)
Edit: Confirming that setting $nrconf{skip_mapfiles} to -1 in the needrestart.conf fixes this issue for me.
emcepe commented
it does not fix it for me, needrestart still says that postfix needs a restart ;-(
iasdeoupxe commented
Indeed it still says here as well that postfix needs a restart. I was confused by the "-b" parameter a few had used above which doesn't show the ncurses popup that a service needs a restart.
But this looks different then the other posted needrestart output examples:
[main] eval /etc/needrestart/needrestart.conf
[main] needrestart v3.4
[main] running in root mode
[main] systemd detected
[main] container detected
NEEDRESTART-VER: 3.4
[main] #8787 uses obsolete /lib/x86_64-linux-gnu/libnss_systemd.so.2
[main] #8787 is a child of #8785
[main] #8785 exe => /usr/lib/postfix/sbin/master
[main] #8785 is postfix@-.service
[main] inside container, skipping kernel checks
[main] inside container or vm, skipping microcode checks
NEEDRESTART-SVC: postfix@-.service
Even restarting the container doesn't make the need to restart postfix go away.
Leepic commented
Same issue for me under Proxmox VE 6.1.3 with an LXC container on Debian Buster 10.3.
Tested:
Note:
stat /proc/$PID/root/usr/lib/postfix/sbin/pickupdoesn't exists for me./proc/$PID/rootis a symlink to/var/spool/postfixbecause chroot is enabled by default.
- Changing
$nrconf{skip_mapfiles} = -1;(default since Needrestart 3.5) cause the same issue as describe by @iasdeoupxe :
[main] #8787 uses obsolete /lib/x86_64-linux-gnu/libnss_systemd.so.2
- Changing
/usr/sbin/needrestartas describe by @djl in #152 and the default value for$nrconf{skip_mapfiles} = 0;correct this error:
#$PID uses non-existing /usr/lib/postfix/sbin/pickup
but cause the same issue as describe by @iasdeoupxe :
[main] #8787 uses obsolete /lib/x86_64-linux-gnu/libnss_systemd.so.2
All is related to postfix chroot, because after disabling it and restarting postfix, the message disappear (with default config $nrconf{skip_mapfiles} = 0;).
So, a workaround is to set $nrconf{skip_mapfiles} = 1; but I don't known what's the implications.
Blacklisting postfix will works but it has a security implication: postfix will never be restarted if an library is outdated.
liske commented
So, a workaround is to set
$nrconf{skip_mapfiles} = 1;but I don't known what's the implications.
Should be OK on GNU/Linux since /proc/$PID/maps seems to be almost reliable.
Leepic commented
So, a workaround is to set
$nrconf{skip_mapfiles} = 1;but I don't known what's the implications.Should be OK on GNU/Linux since
/proc/$PID/mapsseems to be almost reliable.
If $nrconf{skip_mapfiles} = 1; also works with setup when chroot is inside nested containers, what's the reasons of using $nrconf{skip_mapfiles} = -1; (the default value)?
liske commented
All modes for skip_mapfiles are just heuristic howto detect obsolete mappings:
0 - works well for classic daemons without chroot/namespaces, for Linux and *BSD
-1 - needrestart ignores if no file can be found in /proc/$PID/root/$PATH - might happen with chroot/namespaces if the daemon is launched before apply the isolation (i.e. postfix)
1 - the maps file needs to provide a (deleted) appendix in the filename - works only on GNU/Linux
The upstream neederstart.conf is using -1 to be compatible with GNU/Linux and *BSD environments by default.