Page 1 of 1

LFD KEEPS FAILING - File corruption?

Posted: 11 Oct 2021, 11:21
by bibob
Hello

the LFD keeps failing and recovered every fed minutes

Code: Select all

The service “lfd” appears to be down.
The system’s command to check or to restart this service failed.
i have tried to investigate the issue by

Code: Select all

# service lfd status
Redirecting to /bin/systemctl status lfd.service
● lfd.service - ConfigServer Firewall & Security - lfd
   Loaded: loaded (/usr/lib/systemd/system/lfd.service; enabled; vendor preset: disabled)
   Active: inactive (dead) since Mon 2021-10-11 11:30:00 CEST; 2min 28s ago
  Process: 3392307 ExecStart=/usr/sbin/lfd (code=exited, status=0/SUCCESS)
 Main PID: 3392341 (code=exited, status=0/SUCCESS)

Oct 11 11:24:56 systemd[1]: Starting ConfigServer Firewall & Security - lfd...
Oct 11 11:24:57 systemd[1]: Started ConfigServer Firewall & Security - lfd.
[root@~]# service csf status
Redirecting to /bin/systemctl status csf.service
● csf.service - ConfigServer Firewall & Security - csf
   Loaded: loaded (/usr/lib/systemd/system/csf.service; enabled; vendor preset: disabled)
   Active: active (exited) since Wed 2021-10-06 02:31:17 CEST; 5 days ago
 Main PID: 1832 (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/csf.service

[b]Warning: Journal has been rotated since unit was started. Log output is incomplete or unavailable.[/b]
so i runned
# journalctl --verify

Code: Select all

....
PASS: /var/log/journal/b373590010174ac5a7317314bf5a2b60/user-1292.journal
PASS: /var/log/journal/b373590010174ac5a7317314bf5a2b60/user-1299@c78dd5aa3870465dbe31c0e4da5e0031-000000000d272b80-0005ce102e63d7b1.journal
02dd80: Data object references invalid entry at 436bc0
File corruption detected at /var/log/journal/b373590010174ac5a7317314bf5a2b60/system.journal:4368f0 (of 6553600 bytes, 67%).
FAIL: /var/log/journal/b373590010174ac5a7317314bf5a2b60/system.journal (Bad message)
PASS: /var/log/journal/b373590010174ac5a7317314bf5a2b60/user-1084.journal
PASS: /var/log/journal/b373590010174ac5a7317314bf5a2b60/user-1030.journal
when the LFD is recovered , then there is no any FAILS in the journalctl --verify command

but also the lfd shows down and CSF is sup and running .
also i have folowed this instruction https://dev.to/brisbanewebdeveloper/ame ... -x1e2-5eme
but still having issue?
Could it be a file system corruption on the server?


any idea of how to solve this ?