[Labs-l] The bastion host is only meant as an ssh bastion

Ryan Lane rlane32 at gmail.com
Tue Nov 27 18:58:11 UTC 2012


screen sessions and such are OK, if they are being used to keep your
sessions to other hosts open. They aren't OK if they are being used to run
long-running processes. I'm assuming you're doing the former and not the
latter ;).

- Ryan


On Tue, Nov 27, 2012 at 10:50 AM, Petr Bena <benapetr at gmail.com> wrote:

> ok, please don't kill my screens, I <3 them :3
>
>
> On Tue, Nov 27, 2012 at 7:37 PM, Ryan Lane <rlane at wikimedia.org> wrote:
>
>> We've recently had a problem where a cron running on the bastion host was
>> consuming all memory and killing ssh sessions. The bastion host is not
>> meant to be used for anything other than an ssh bastion. That means the
>> only thing you should be running on that host is ssh.
>>
>> We're disabling cron and at on bastion hosts. We'll also occasionally
>> kill any process running that shouldn't be running on them. We've done that
>> today.
>>
>> If you're looking for a place to run a cron, irc bot, etc, then we can
>> find a project that's appropriate, or create a project for you.
>>
>> - Ryan
>>
>> _______________________________________________
>> Labs-l mailing list
>> Labs-l at lists.wikimedia.org
>> https://lists.wikimedia.org/mailman/listinfo/labs-l
>>
>>
>
> _______________________________________________
> Labs-l mailing list
> Labs-l at lists.wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/labs-l
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.wikimedia.org/pipermail/labs-l/attachments/20121127/376efa68/attachment.html>


More information about the Labs-l mailing list