[Case 69685] VPS high load - jailshell problem

[hetch]

Since y'day my vps is showing high load. My host investigate and told me this:

"That jailshell was causing this. This is a known issue with your kernel and Cpanel and we are still waiting for Cpanel to push an update to correct this. In the mean time I have disabled jailshell to correct this and then restarted your services to keep this from starting."

So my question is:
Is there any workaround this? Because cron stopped working.

thank you.

 

[cPanelMichael]

Hello

Could you provide us with the version of cPanel you are using, and let us know the Kernel/OS information for your system? You can find this information with the following commands:

cat /usr/local/cpanel/version
cat /etc/redhat-release
uname -a

Thank you.

 

[hetch]

Linux host.xxxxxxxx.com 2.6.18-028stab098.1 #1 SMP Sat Feb 11 14:56:17 MSK 2012 x86_64 x86_64 x86_64 GNU/Linux

thank you.

 

[cPanelMichael]

There is an internal case open that addresses this issue. For reference, the case number is 69685. Per this case:

On certain older kernels, mount() calls for procfs would use a significant amount of system CPU time, leading to extreme load due to the frequency with which jailshell and jailexec processes remount /proc.

An example of a known good kernel is:

2.6.32-042stab061.2

The best way to resolve this issue is to upgrade your kernel. However, a change was implemented to disable jailshell procfs mounting on buggy kernels. This change was included with cPanel 11.38.1.5, so it should already be resolved on your system if you have automatic updates enabled.

Thank you.

 

[hetch]

Can I enable 'Normal shell' for users until upgrade?

thank you.

My cpanel version is showing this: 11.38.1 (build 6)
Means fix applied?

 

[cPanelMichael]

Yes, the resolution for this issue was included with 11.38.1.5, so any version after that will have the resolution included.

Thank you.

 

[cPanelNick]

While the workaround implemented in case 69685 will solve the stability problems, it comes at the expense of better security. You should update your kernel as soon as possible. The kernel 2.6.18-028stab098.1 has security holes that make the update quite important.

 

[hetch]

My host is not willing to update kernel. They have their own reasons.

This issue has not fixed yet.

Y'day they submitted a ticket on this issue to cpanel. Yet same problem

 

[cPanelMichael]

My host is not willing to update kernel. They have their own reasons.

This issue has not fixed yet.

Y'day they submitted a ticket on this issue to cpanel. Yet same problem

Could you let us know the ticket number?

Thank you.

 

[hetch]

I moved to new host. I can't take it anymore on the old host.

New host has new kernel stable version that you recommended above and they regularly upgrade the software.

Thank you for your time!