ndsd cores on systemd are truncated

  • 7022632
  • 01-Feb-2018
  • 22-Aug-2018

Environment

eDirectory
SLES 12 SP2
RHEL 7.4
systemd

Situation

Unit cores generated by systemd-coredump are truncated to 2 GB.

novell-getcore_gdb_command_output shows message similar to: 

BFD: Warning: /var/lib/systemd/coredump/./core.ndsd.0.3e6650d55842431da0905ae8d29b84e3.34235.1515678140000000 is truncated: expected core file size >= 5735710720, found: 2147483648

Trying to run novell-getcore to bundle the core returns:
Error:  The file "time." could not be found

Resolution

Modify the /etc/systemd/coredump.conf and increase the ProcessSizeMax and ExternalSizeMax to larger than the potential size of the process being cored.
EXAMPLE:

[Coredump]
#Storage=external
#Compress=yes
ProcessSizeMax=10G
ExternalSizeMax=20G
#JournalSizeMax=767M
#MaxUse=
#KeepFree=

systemd-coredump reads the conf file each time executes so changes to the conf file will be in effect the next time a systemd unit process is cored.

Cause

The default value in the /etc/systemd/coredump.conf for ProcessSizeMax and ExternalSizeMax are 2GB so processes larger than 2GB will have the core file truncated to 2GB

ProcessSizeMax    The maximum size in bytes of a core which will be processed. Coredumps exceeding this size will be logged, but the backtrace will not be generated and the core will not be stored.

ExternalSizeMax, JournalSizeMax
           The maximum (uncompressed) size in bytes of a core to be saved.