Re: [Sks-devel] keyserver.linux.it is changing IP

[Marco Nenciarini]

On 28/01/2011 08:41, Marco Nenciarini wrote:
>
> Do someone see how these difference can lead to a PTree corruption
> during (at least) the pbuild run?

Finally I've caught the culprit!

The problem was the linux kernel clock.

As workaround for a bug in xen the clocksource of the virtual machine
was set to jiffies, which isn't accurate enough for sks.

As example:

i=0; while :; do i=$((i+1)); if [ $i = 20 ]; then break; fi; date
--rfc-3339=ns; done
2011-01-31 01:51:47.297008405+01:00
2011-01-31 01:51:47.313008450+01:00
2011-01-31 01:51:47.333008506+01:00
2011-01-31 01:51:47.333008506+01:00
2011-01-31 01:51:47.337008517+01:00
2011-01-31 01:51:47.337008517+01:00
2011-01-31 01:51:47.337008517+01:00
2011-01-31 01:51:47.341008528+01:00
2011-01-31 01:51:47.341008528+01:00
2011-01-31 01:51:47.345008540+01:00
2011-01-31 01:51:47.353008562+01:00
2011-01-31 01:51:47.369008607+01:00
2011-01-31 01:51:47.381008641+01:00
2011-01-31 01:51:47.401008697+01:00
2011-01-31 01:51:47.401008697+01:00
2011-01-31 01:51:47.405008709+01:00
2011-01-31 01:51:47.405008709+01:00
2011-01-31 01:51:47.405008709+01:00
2011-01-31 01:51:47.409008720+01:00

After setting it to a more accurate source (xen) the result is:

 i=0; while :; do i=$((i+1)); if [ $i = 20 ]; then break; fi; date
--rfc-3339=ns; done
2011-01-31 01:54:55.535913963+01:00
2011-01-31 01:54:55.538321422+01:00
2011-01-31 01:54:55.540614919+01:00
2011-01-31 01:54:55.542910931+01:00
2011-01-31 01:54:55.545290837+01:00
2011-01-31 01:54:55.547637562+01:00
2011-01-31 01:54:55.549892088+01:00
2011-01-31 01:54:55.553255793+01:00
2011-01-31 01:54:55.555638416+01:00
2011-01-31 01:54:55.557860970+01:00
2011-01-31 01:54:55.560186161+01:00
2011-01-31 01:54:55.562408208+01:00
2011-01-31 01:54:55.564797020+01:00
2011-01-31 01:54:55.567022621+01:00
2011-01-31 01:54:55.569496971+01:00
2011-01-31 01:54:55.571886227+01:00
2011-01-31 01:54:55.574161166+01:00
2011-01-31 01:54:55.576546686+01:00
2011-01-31 01:54:55.578855518+01:00

As you can see the clock is much more accurate.

After the change the pbuild process ends with a good database (no
rebuild of KDB was required). So keyserver.linux.it is back online.

Thanks to all whose have sent me suggestions.

And... new peers are welcome :D

Regards,
Marco

-- 
---------------------------------------------------------------------
|    Marco Nenciarini    | Debian/GNU Linux Developer - Plug Member |
| address@hidden | http://www.prato.linux.it/~mnencia       |
---------------------------------------------------------------------
Key fingerprint = FED9 69C7 9E67 21F5 7D95  5270 6864 730D F095 E5E4

signature.asc
Description: OpenPGP digital signature