hey i have a hosting vps with whm+cloudlinux+litespeed
and everynight my vps is hang up and i have to restart it in the morning to get it back online
i attached the error i saw in the console
please help me
some cronjob may be overloading it i guess, check “crontab -l” and the /etc/cron* directories
1 Like
thank you for your response
this is my crontab
[root@server ~]# crontab -l
10 0 * * * (/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null)
0 2 * * * /usr/local/cpanel/bin/backup
35 * * * * /usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check
0 6 * * * /usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1
30 5 * * * /usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1
5,20,35,50 * * * * /usr/local/cpanel/scripts/eximstats_spam_check 2>&1
45 */4 * * * /usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache
15 */6 * * * /usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1
*/5 * * * * /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
0 */2 * * * /usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1
34 3 * * * /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
30 */4 * * * /usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache
25 */2 * * * /usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1
15 */2 * * * /usr/local/cpanel/bin/dbindex >/dev/null 2>&1
09,39 * * * * /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
1,16,31,46 * * * * /usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1
@reboot /usr/local/cpanel/bin/onboot_handler
you probably don’t want to post that info publicly, although looks like a normal cpanel install.
don’t forgot to look through /etc/cron.d, cron.weekly, cron.hourly and so on
1 Like
what i should to do?
its happening every night
this is one of my log i think it might help
[root@server ~]# ausearch -i -m system_boot,system_shutdown | tail -7
type=SYSTEM_SHUTDOWN msg=audit(02/22/2023 11:00:28.329:3635) : pid=174656 uid=root auid=unset ses=unset msg=' comm=systemd-update-utmp exe=/usr/lib/systemd/systemd-update-utmp hostname=? addr=? terminal=? res=success'
----
type=SYSTEM_BOOT msg=audit(02/22/2023 11:00:53.453:7) : pid=777 uid=root auid=unset ses=unset msg=' comm=systemd-update-utmp exe=/usr/lib/systemd/systemd-update-utmp hostname=? addr=? terminal=? res=success'
----
type=SYSTEM_BOOT msg=audit(02/23/2023 09:17:05.964:8) : pid=746 uid=root auid=unset ses=unset msg=' comm=systemd-update-utmp exe=/usr/lib/systemd/systemd-update-utmp hostname=? addr=? terminal=? res=success'
----
type=SYSTEM_BOOT msg=audit(02/24/2023 05:46:56.858:7) : pid=742 uid=root auid=unset ses=unset msg=' comm=systemd-update-utmp exe=/usr/lib/systemd/systemd-update-utmp hostname=? addr=? terminal=? res=success'
audit logs probably aren’t going to be helpful, you need to look in /var/log/* or journalctl, probably more useful to ask on a cpanel forum or support ticket
hey im sorry for delay
this is the last thing happend before hang up
Feb 26 21:20:01 server.abc.com CROND[80989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Feb 26 21:20:01 server.abc.com CROND[81004]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin>
Feb 26 21:20:01 server.abc.com CROND[81007]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock />
Feb 26 21:20:01 server.abc.com CROND[81008]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronloc>
Feb 26 21:20:01 server.abc.com CROND[81010]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cr>
Feb 26 21:20:01 server.abc.com CROND[81012]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/>
Feb 26 21:20:01 server.abc.com CROND[81014]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /u>
Feb 26 21:20:01 server.abc.com CROND[81015]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /u>
Feb 26 21:20:01 server.abc.com CROND[81016]: (root) CMD (/usr/bin/flock -n /var/run/cl_detect_for_users.cronlock /usr/>
Feb 26 21:20:01 server.abc.com CROND[81017]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /us>
Feb 26 21:20:01 server.abc.com CROND[81009]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlo>
Feb 26 21:20:01 server.abc.com CROND[81011]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr>
Feb 26 21:20:01 server.abc.com CROND[81018]: (root) CMD ( imunify360-agent malware on-demand check-detached > /dev/n>
Feb 26 21:20:01 server.abc.com CROND[81013]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /us>
Feb 26 21:20:01 server.abc.com systemd[1]: Started Session 388 of user root.
Feb 26 21:20:01 server.abc.com systemd[1]: Started Session 389 of user root.
Feb 26 21:20:01 server.abc.com CROND[81031]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 26 21:20:01 server.abc.com CROND[81032]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 26 21:20:01 server.abc.com systemd[1]: session-388.scope: Succeeded.
Feb 26 21:20:04 server.abc.com systemd[1]: session-389.scope: Succeeded.
Feb 26 21:21:01 server.abc.com CROND[81094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Feb 26 21:21:13 server.abc.com dovecot[1311]: lmtp(81108): Connect from local
Feb 26 21:21:13 server.abc.com dovecot[1311]: lmtp(81108): Disconnect from local: Logged out (state=MAIL FROM)
Feb 26 21:21:13 server.abc.com dovecot[1311]: lmtp(81108): Connect from local
Feb 26 21:21:13 server.abc.com dovecot[1311]: lmtp(81108): Disconnect from local: Logged out (state=MAIL FROM)
Feb 26 21:21:13 server.abc.com dovecot[1311]: lmtp(81108): Connect from local
Feb 26 21:21:13 server.abc.com dovecot[1311]: lmtp(81108): Disconnect from local: Logged out (state=MAIL FROM)
Feb 26 21:21:14 server.abc.com dovecot[1311]: lmtp(81108): Connect from local
Feb 26 21:21:14 server.abc.com dovecot[1311]: lmtp(81108): Disconnect from local: Logged out (state=MAIL FROM)
Feb 26 21:21:14 server.abc.com dovecot[1311]: lmtp(81108): Connect from local
Feb 26 21:21:14 server.abc.com dovecot[1311]: lmtp(81108): Disconnect from local: Logged out (state=MAIL FROM)
Feb 26 21:21:14 server.abc.com dovecot[1311]: lmtp(81108): Connect from local
Feb 26 21:21:14 server.abc.com dovecot[1311]: lmtp(81108): Disconnect from local: Logged out (state=MAIL FROM)
Feb 26 21:22:01 server.abc.com CROND[81158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Feb 26 21:22:20 server.abc.com qemu-ga[819]: info: guest-ping called
Feb 26 21:22:20 server.abc.com qemu-ga[819]: info: guest-fsfreeze called
Feb 26 21:22:20 server.abc.com qemu-ga[819]: info: executing fsfreeze hook with arg 'freeze'
looks like this:
do you have any loopback devices - what does “lsblk” or “mount | grep loop” return?