Re: X11 / KDE Plasma 5 periodically freezes when I use GUI app inside LXC container
> On Wed, 17 Jun 2020 at 17:23, Marco Möller <talby@debianlists.mobilxpress.net> wrote:
> You will need to study the relevant documentation first. You then will
> find why two of the parameters are equal to "0" (it is because others
> are in use..., I mentioned already that there are more parameters
> present and I only mentioned some of them to provide you the key words
> for your research). I am sorry for not having time to explain everything
> here on the list, but I know that you will find a lot of information
> published and discussed already. This could be one of the many entry
> points into your studies:
> https://lonesysadmin.net/2013/12/22/better-linux-disk-caching-performance-vm-dirty_ratio/
> Sorry for not being able to answer in more detail, I am simply not
> having time for it right now. :-( But at least you got some idea where
> you could search for a solution. I am not even sure if this will solve
> your problem, but at least you have this idea now on your list.
> Best wishes, and good luck! Maybe others can contribute more ideas
> and/or solutions!
> Marco.
Thank you very much Marco. After changing many things including filesystem and
disk the containers are running on... It’s not storage! ;-)
E-mail from Will about DNS timeouts let me think about network
timeouts in general.
My containers usually don’t have network access. They don’t even have network
interface which means if you run “ip link” inside of LXC container you
get just “1: lo:”.
BUT on host I have custom config in /etc/nftables.conf. I disconnected
the testing laptop from internet and I cleared ALL rules in /etc/nftables.conf
and after fresh reboot I tested GUI app in a container again. And NO ISSUES!
That means I managed to narrow down the issue. It’s firewall with
default policy DROP instead of REJECT. It also says something about Xorg doing
something on network I have no idea what....
Of course I don’t want to disable firewall on my other laptops that are not
for testing only so I need to get logs from Nftables and make sure they’re
REJECTing and not DROPing and therefore they don’t cause timeouts. Or maybe
I can change Xorg behavior but I assume it’ll be easier
to reconfigure nftables...
Thank you both Marco and Will!
Kind regards,
JR
Reply to: