From owner-freebsd-questions@FreeBSD.ORG Sat Apr 28 03:07:51 2012 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id B17BD106578C for ; Sat, 28 Apr 2012 03:07:51 +0000 (UTC) (envelope-from aimass@yabarana.com) Received: from mail-iy0-f182.google.com (mail-iy0-f182.google.com [209.85.210.182]) by mx1.freebsd.org (Postfix) with ESMTP id 744998FC16 for ; Sat, 28 Apr 2012 03:07:51 +0000 (UTC) Received: by iahk25 with SMTP id k25so2384634iah.13 for ; Fri, 27 Apr 2012 20:07:51 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:x-gm-message-state; bh=RlTMYPmpFDdSXLPj6L8Z1JokFULoz9B3raxQ9RIpFrQ=; b=Uwb1Lf0PhyFpGjZI3Qyzm58nXLoJWqwcIkribRCZggy7fndRvY/4X8gsPYUcE5Vc+Q 13WAMZkGa/N8VxbLxlK/1yOxcxSQ8CxekvBmGOiBynKzo0ISEVVxNG6m4XKR+1NTef5G bYHkJPY8KjJd+fidoeFLl+KojL3aeiX+Qagb+gzKlWy5wVwG6T31Vi0YS1GZZ5VzuWqd EcOJuUKwDQRKHXtLmz9pFEghBxvxI2RBzIsNoV4J+0kEGSwQPhqN36gFLuPOwjBB6A4U 9gIFjGnG99JE0o+l6g2K74/txSAWFqRHbTsE4OaQSp3SvslXIJvFoIy0opL3OzOXoBVt YWbw== MIME-Version: 1.0 Received: by 10.50.88.199 with SMTP id bi7mr4512894igb.26.1335582471030; Fri, 27 Apr 2012 20:07:51 -0700 (PDT) Received: by 10.231.74.138 with HTTP; Fri, 27 Apr 2012 20:07:50 -0700 (PDT) In-Reply-To: <201204281000.05551.erich@alogreentechnologies.com> References: <201204281000.05551.erich@alogreentechnologies.com> Date: Fri, 27 Apr 2012 23:07:50 -0400 Message-ID: From: Alejandro Imass To: Erich Dollansky Content-Type: text/plain; charset=ISO-8859-1 X-Gm-Message-State: ALoCoQnsYIGjzDBz7K3rZpnNhFJOXjqRPqL1UBTVb2x8M+7ypok4jT9p0In+ncCYzQPOtmxOQnOZ Cc: freebsd-questions@freebsd.org Subject: Re: UFS Crash and directories now missing X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 28 Apr 2012 03:07:51 -0000 On Fri, Apr 27, 2012 at 11:00 PM, Erich Dollansky wrote: > Hi, > > On Saturday 28 April 2012 09:33:47 Alejandro Imass wrote: >> On Fri, Apr 27, 2012 at 7:52 PM, Alejandro Imass wrote: >> > >> > We had a server crash and required a hard reboot. The system is on one >> > disk and another disc mounts /usr/jails and everything runs in jails, >> > pristine base system, and the base system is working perfectly. >> > >> > The second volume, the one with the jails mounted but every jail >> > directory disappeared except one. df still shows the data being used >> > so I'm guessing it's a logical error in the directory structure or >> > something. I unmounted the drive and ran fsck and reported no >> > problems. df shows the data being use so where is the data?? >> > > > what is du saying? >> >> OK, so here is an update, maybe someone has some clue here.... >> >> All the jails wound up in the /usr/local/etc/apache22 of the only >> surviving jail which is the http proxy to all the other jails. > > You want to say that all the data you were looking for have been moved to this directory? >> EXACTLY THAT. In fact the data is intact and I have already backed-up everything to another disk. >> Right before the server crashed I noticed MySQL at 100% o several CPUs >> and the server was on it's knees, so I'm wondering.... was this an >> attack? is it possible that Apache or MySQL moved the files?? >> >> I mean the jails are there, I'm even backing them up right now.... but >> how did these directories move here????? >> >> Anybody has ANY logical explanation??? > > Journaling is new to me. Could this be the cause? > Maybe so, I have no idea. Maybe it's because EzJail mount volumes with each jail or some other wild explanation. I honestly have never seen this before. I am just glad that UFS was nice enough to keep my data somewhere at least, and after my bad experiences with ZFS I can now say with a lot more certainty that UFS rocks. I mean something got screwed up but the data was not lost. Hope someone can shed some light here.. -- Alejandro > Erich