On Jun 06, Luca Boccassi <bl...@debian.org> wrote: > The last time this was tried some packages were still not ready, so it > was patched out to let them be fixed. Enough time has passed now, and > it's time to let any unknown leftover just break and be fixed. In all > known cases, the buggy pattern was to manually iterate over the hard > limit and close every FD one by one, which is completely unnecessary > since kernel 5.9 (bullseye/oldstable) since the close_range() syscall > is available, that can do it in one fell swoop. Any packages still I missed the venerable inn 1.x at the time, and I never noticed that it allocates some data structures for all available fds. Apparently this worked well enough for 1M file descriptors, but not for 1G. :-)
The solution was easy enough: https://salsa.debian.org/md/inn/-/blob/master/debian/patches/limit_getfdcount -- ciao, Marco
signature.asc
Description: PGP signature
