Shulou(Shulou.com)05/31 Report--

This article mainly introduces "how to locate the process of sending KILL signal in Docker". In daily operation, I believe that many people have doubts about how to locate the process of sending KILL signal in Docker. The editor consulted all kinds of materials and sorted out simple and easy-to-use operation methods. I hope it will be helpful for you to answer the doubt of "how to locate the process of sending KILL signal in Docker". Next, please follow the editor to study!

Problem description

The dockerd (docker.service) running on the host receives the KILL/9 signal and exits.

We want to know which process sent the KILL signal.

Solution method

You can use Audit or SystemTap for capture. Because of the complexity of SystemTap, we introduce how to use Audit here.

Method 1. Use Audit to capture the signal

The first step, configure Audit

Apt-get install auditdauditctl-an exit,always-F arch=b64-S kill-k audit_kill# default configuration has handled log rotation

Step two, wait for the KILL signal to appear.

Step 3. There are usually many logs. After capture, it is recommended to end as soon as possible:

Systemctl restart auditd.service at this point, the study on "how to locate the process of sending KILL signals in Docker" is over. I hope to be able to solve your doubts. The collocation of theory and practice can better help you learn, go and try it! If you want to continue to learn more related knowledge, please continue to follow the website, the editor will continue to work hard to bring you more practical articles!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.