Server restart sometimes in night

[grzegorz]

Hello,

I have a problem with one serwer with CloudLinux. Already i change server on new machine, and problem isint resolve.
I paste a few line log. May be some one can help with issue.

Aug 26 00:54:02 sugar3 httpd: [Fri Aug 26 00:54:02.432343 2016] [so:warn] [pid 110907:tid 139986028169344] AH01574: module fcgid_module is already loaded, ski$

Aug 26 00:54:19 sugar3 kernel: audit_printk_skb: 6 callbacks suppressed

Aug 26 00:54:19 sugar3 kernel: type=1104 audit(1472165659.836:10870): pid=110901 uid=0 auid=0 ses=1512 msg=op=PAM:setcred grantors=pam_env,pam_unix acct="roo$

Aug 26 00:54:19 sugar3 kernel: type=1106 audit(1472165659.837:10871): pid=110901 uid=0 auid=0 ses=1512 msg=op=PAM:session_close grantors=pam_loginuid,pam_key$

Aug 26 00:54:19 sugar3 systemd-logind: Failed to remove runtime directory /run/user/0: Device or resource busy

Aug 26 00:55:01 sugar3 kernel: type=1101 audit(1472165701.843:10872): pid=111428 uid=0 auid=4294967295 ses=4294967295 msg=op=PAM:accounting grantors=pam_acce$

Aug 26 00:55:01 sugar3 kernel: type=1101 audit(1472165701.843:10873): pid=111429 uid=0 auid=4294967295 ses=4294967295 msg=op=PAM:accounting grantors=pam_acce$

Aug 26 00:55:01 sugar3 kernel: type=1103 audit(1472165701.843:10874): pid=111428 uid=0 auid=4294967295 ses=4294967295 msg=op=PAM:setcred grantors=pam_env,pam$

Aug 26 00:55:01 sugar3 kernel: type=1006 audit(1472165701.843:10875): pid=111428 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=1514 res=1

Aug 26 00:55:01 sugar3 kernel: type=1103 audit(1472165701.843:10876): pid=111429 uid=0 auid=4294967295 ses=4294967295 msg=op=PAM:setcred grantors=pam_env,pam$

Aug 26 00:55:01 sugar3 kernel: type=1006 audit(1472165701.843:10877): pid=111429 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=1515 res=1

Aug 26 00:55:01 sugar3 kernel: type=1101 audit(1472165701.843:10878): pid=111426 uid=0 auid=4294967295 ses=4294967295 msg=op=PAM:accounting grantors=pam_acce$

Aug 26 00:55:01 sugar3 kernel: type=1103 audit(1472165701.844:10879): pid=111426 uid=0 auid=4294967295 ses=4294967295 msg=op=PAM:setcred grantors=pam_env,pam$

Aug 26 00:55:01 sugar3 kernel: type=1101 audit(1472165701.844:10880): pid=111427 uid=0 auid=4294967295 ses=4294967295 msg=op=PAM:accounting grantors=pam_acce$

Aug 26 00:55:01 sugar3 kernel: type=1006 audit(1472165701.844:10881): pid=111426 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=1516 res=1

Aug 26 00:55:02 sugar3 systemd-logind: Failed to remove runtime directory /run/user/0: Device or resource busy

Aug 26 00:59:11 sugar3 rsyslogd: [origin software="rsyslogd" swVersion="7.4.7" x-pid="611" x-info="http://www.rsyslog.com"] start

Aug 26 00:59:03 sugar3 journal: Runtime journal is using 8.0M (max allowed 1.5G, trying to leave 2.3G free of 15.5G available → current limit 1.5G).

Aug 26 00:59:03 sugar3 kernel: Initializing cgroup subsys cpuset

Aug 26 00:59:03 sugar3 kernel: Initializing cgroup subsys cpu

Aug 26 00:59:03 sugar3 kernel: Initializing cgroup subsys cpuacct

Aug 26 00:59:03 sugar3 kernel: Linux version 3.10.0-427.10.1.lve1.4.7.el7.x86_64 (mockbuild@koji.cloudlinux.com) (gcc version 4.8.5 20150623 (Red Hat 4.8.5-4)$

Aug 26 00:59:03 sugar3 kernel: Command line: BOOT_IMAGE=/vmlinuz-3.10.0-427.10.1.lve1.4.7.el7.x86_64 root=UUID=049b0a6e-6022-4b6b-a9c2-ff4ef97df635 ro crashke$

Aug 26 00:59:03 sugar3 kernel: e820: BIOS-provided physical RAM map:

[bogdan.sh]

Unfortunately no useful details here, they are from server boot time. The best way to have it sorted out is to create support ticket at https://helpdesk.cloudlinux.com .

But, as you are using CloudLinux 7 already - check /var/crash/XXX/ directory for vmcore-dmesg.txt file and paste last ~100 lines form it.