Closing open file without killing the process

44,335

Solution 1

use lsof -p $PID and find the file descriptor (4th column)

root@blah:~# lsof -p 1737 | grep "(deleted)" apache2 1737 root 6w REG 0,25 0 207401 (deleted)/var/log/apache2/other_vhosts_access.log

4th column is 6w, meaning file descriptor 6 and it was opened for writing (w).

Then:

gdb -p $PID p close($FD)

eg:

gdb -p 1737 ..... (gdb) p close(6) $1 = 0 ... Quit anyway? (y or n) y Detaching from program: /usr/lib/apache2/mpm-prefork/apache2, process 1737

Solution 2

Use the following command to find the deleted files file descriptors and you may truncate them afterwards

find /proc/ -mindepth 3 -maxdepth 3 \ -regex '/proc/[1-9][0-9]/fd/[1-9][0-9]' -type l -lname '*(deleted)' \ -printf '%p\n %l\n' 2>/dev/null

Share:
44,335

Related videos on Youtube

igor
Author by

igor

Updated on September 18, 2022

Comments

  • igor
    igor over 1 year

    I have java(yeah java...) application running on CentOS 7. After a while, there are many "deleted" files that bother me.

    for deleted files used(not the issue):

    lsof | grep "(deleted)"
    

    I found them in /proc/pid/fd/... and my question is how can I kill/delete them without killing the process(process have to run 24/7).

    I saw on google that I can use gdb tool, but I don't know how to use it. Can you please help me(just to write step-by-step manual)?

    I will love to hear some other suggestions if you have.

  • igor
    igor over 8 years
    THANKS, finally a good working simple answer!! btw, all my processes has 'x'u in 4th column. What does "u" means?
  • damolp
    damolp over 8 years
    u means that the file descriptor is opened reading and writing
  • Marco Marsala
    Marco Marsala over 3 years
    But if the program still has the file descriptor opened, it may continue writing on these, growing disk space utilization