dify icon indicating copy to clipboard operation
dify copied to clipboard

ssrf contaienr oomkilled in kylin os v10 sp2

Open lvchentao opened this issue 9 months ago • 1 comments

Self Checks

  • [x] This is only for bug report, if you would like to ask a question, please head to Discussions.
  • [x] I have searched for existing issues search for existing issues, including closed ones.
  • [x] I confirm that I am using English to submit this report (我已阅读并同意 Language Policy).
  • [x] [FOR CHINESE USERS] 请务必使用英文提交 Issue,否则会被关闭。谢谢!:)
  • [x] Please do not modify this template :) and fill in all the required fields.

Dify version

0.15.3

Cloud or Self Hosted

Self Hosted (Docker)

Steps to reproduce

I deploy dify with https://github.com/Winson-030/dify-kubernetes . k8s version: 1.22.2 node os version: kylin v10 sp2 kernel version: 4.19.90-24.4.v2101.ky10.x86_64

when deploy ssrf pod in kylin node , it will report oomKilled again and again dmesg info as below: [五 3月 28 08:31:37 2025] Task in /kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod510f4c1f_c3c9_406e_858a_a9f44887c80c.slice/cri-containerd-8d5a0b349afa3de78ea8cd239e9d3e6fa1a4cc46b3e233a0abe4d310800aa69c.scope killed as a result of limit of /kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod510f4c1f_c3c9_406e_858a_a9f44887c80c.slice [五 3月 28 08:31:37 2025] memory: usage 307200kB, limit 307200kB, failcnt 174 [五 3月 28 08:31:37 2025] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [五 3月 28 08:31:37 2025] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [五 3月 28 08:31:37 2025] Memory cgroup stats for /kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod510f4c1f_c3c9_406e_858a_a9f44887c80c.slice: cache:0KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [五 3月 28 08:31:37 2025] Memory cgroup stats for /kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod510f4c1f_c3c9_406e_858a_a9f44887c80c.slice/cri-containerd-233216ca3c2bbbdea45c8572feb9c04b798343e452ed941b359cbf28fd9a8a8a.scope: cache:0KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:44KB inactive_file:0KB active_file:0KB unevictable:0KB [五 3月 28 08:31:37 2025] Memory cgroup stats for /kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod510f4c1f_c3c9_406e_858a_a9f44887c80c.slice/cri-containerd-8d5a0b349afa3de78ea8cd239e9d3e6fa1a4cc46b3e233a0abe4d310800aa69c.scope: cache:52KB rss:307200KB rss_huge:239616KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:12KB active_anon:307140KB inactive_file:4KB active_file:0KB unevictable:0KB [五 3月 28 08:31:37 2025] Tasks state (memory values in pages): [五 3月 28 08:31:37 2025] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [五 3月 28 08:31:37 2025] [3303500] 65535 3303500 242 1 28672 0 -998 pause [五 3月 28 08:31:37 2025] [3318384] 0 3318384 699 283 45056 0 994 sh [五 3月 28 08:31:37 2025] [3318399] 0 3318399 1080 911 53248 0 994 docker-entrypoi [五 3月 28 08:31:37 2025] [3318417] 0 3318417 681 268 40960 0 994 tail [五 3月 28 08:31:37 2025] [3318418] 0 3318418 681 274 45056 0 994 tail [五 3月 28 08:31:37 2025] [3318419] 0 3318419 681 269 40960 0 994 tail [五 3月 28 08:31:37 2025] [3318420] 0 3318420 681 277 40960 0 994 tail [五 3月 28 08:31:37 2025] [3318423] 13 3318423 148914112 79960 737280 0 994 squid [五 3月 28 08:31:37 2025] Memory cgroup out of memory: Kill process 3318423 (squid) score 2027 or sacrifice child [五 3月 28 08:31:37 2025] Killed process 3318423 (squid) total-vm:595656448kB, anon-rss:306224kB, file-rss:13604kB, shmem-rss:12kB [五 3月 28 08:31:37 2025] oom_reaper: reaped process 3318423 (squid), now anon-rss:0kB, file-rss:0kB, shmem-rss:12kB

✔️ Expected Behavior

No response

❌ Actual Behavior

No response

lvchentao avatar Mar 28 '25 00:03 lvchentao