Re: [Sks-devel] sks.disunitedstates.com down and out

[Christian Felsing]

Hello David,

as desired I removed your server from our membership file.

I am running SKS 1.1.5+ on CentOS6 (LXC container) and CentOS7 (KVM) for
a long time w/o problems. In the past I had similar problems, but
switching clocksource to tsc solved database problems. My current
installations are working with tsc (LXC) and kvm-clock (kvm)

You should give it a new try, may be it will work then.

An other SKS server admin found a problem if sks recon is running via
haproxy tcp: SKS consumes lot of memory and does no longer gossip keys
then while tcp service is still available. This can be exploited only,
if there is a membership entry to such a server.

If there is a documentation how recon works, I would consider to build a
new solution on Jetty with Hypersonic SQL or any other JDBC database.
BouncyCastle is able to analyze PGP keys. Java is considered to be more
spread than ocaml.

Christian

Am 11.04.2015 um 00:44 schrieb David Benfell:

> I have previously commented on the difficulty of keeping the sks
> database healthy. I just discovered my sks instance had been down for
> several days. I tried to recover and it crashed again.
> 
> I'm giving up.
> 
> When there is an sks that uses a reliable database system, I'll be happy
> to rejoin. But Berkeley DB is not sane in my environment, has never
> proven scalable in any environment I've had in the past, and I'm not
> messing with it any more.