[gentoo-user] find atime vs lsof

[gentoo-user] find atime vs lsof

[Adam Carter]

[-- Attachment #1: Type: text/plain, Size: 2154 bytes --]

Some time back i moved from vmware to virtualbox, and am currently
wondering if there are some old vmware files i can remove. Virtualbox uses
the old vmware disk files, so first i checked via atime and lsof.

Why does atime not show all the files that lsof shows were open?

Steps were;
1. start vm
2. create and save dummy file in vm
3. run lsof on vm PID
4. shut down mv
5. run find to see which files were accessed

# lsof -p 2299 | grep 'VIRTUALS/Win-10-x64'
VirtualBo 2299 adam   42u      REG              259,2       2453 10095159
/home/adam/VIRTUALS/Win-10-x64/Windows 7 x64.vmdk
VirtualBo 2299 adam   44u      REG              259,2 2146762752 10094024
/home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s001.vmdk
VirtualBo 2299 adam   45u      REG              259,2 2146762752 10094071
/home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s002.vmdk
VirtualBo 2299 adam   46u      REG              259,2 2146762752 10094011
/home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s003.vmdk
VirtualBo 2299 adam   47u      REG              259,2 2146762752 10094108
/home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s004.vmdk
VirtualBo 2299 adam   48u      REG              259,2 2146762752 10094076
/home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s005.vmdk
VirtualBo 2299 adam   49u      REG              259,2 2146762752 10094127
/home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s006.vmdk
VirtualBo 2299 adam   50u      REG              259,2 2146762752 10094050
/home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s007.vmdk
VirtualBo 2299 adam   51u      REG              259,2 2146762752 10094087
/home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s008.vmdk
VirtualBo 2299 adam   52u      REG              259,2 2146762752 10094031
/home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s009.vmdk
VirtualBo 2299 adam   53u      REG              259,2 2146762752 10094102
/home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s010.vmdk
VirtualBo 2299 adam   54u      REG              259,2 2146762752 10094021
<snip>

# find VIRTUALS/Win10-vbox/ -atime -1 -type f
VIRTUALS/Win10-vbox/Win10-vbox.vbox
VIRTUALS/Win10-vbox/Logs/VBox.log
VIRTUALS/Win10-vbox/Logs/VBox.log.1
VIRTUALS/Win10-vbox/Win10-vbox.vbox-prev
#

[-- Attachment #2: Type: text/html, Size: 2576 bytes --]

Re: [gentoo-user] find atime vs lsof

[Mick]

[-- Attachment #1: Type: text/plain, Size: 2649 bytes --]

On Saturday, 27 July 2019 06:15:49 BST Adam Carter wrote:
> Some time back i moved from vmware to virtualbox, and am currently
> wondering if there are some old vmware files i can remove. Virtualbox uses
> the old vmware disk files, so first i checked via atime and lsof.
> 
> Why does atime not show all the files that lsof shows were open?

They are snapshots and unless saved I would think they are removed when you 
shut down VBox.

> Steps were;
> 1. start vm
> 2. create and save dummy file in vm
> 3. run lsof on vm PID
> 4. shut down mv
> 5. run find to see which files were accessed
> 
> # lsof -p 2299 | grep 'VIRTUALS/Win-10-x64'
> VirtualBo 2299 adam   42u      REG              259,2       2453 10095159
> /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64.vmdk
> VirtualBo 2299 adam   44u      REG              259,2 2146762752 10094024
> /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s001.vmdk
> VirtualBo 2299 adam   45u      REG              259,2 2146762752 10094071
> /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s002.vmdk
> VirtualBo 2299 adam   46u      REG              259,2 2146762752 10094011
> /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s003.vmdk
> VirtualBo 2299 adam   47u      REG              259,2 2146762752 10094108
> /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s004.vmdk
> VirtualBo 2299 adam   48u      REG              259,2 2146762752 10094076
> /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s005.vmdk
> VirtualBo 2299 adam   49u      REG              259,2 2146762752 10094127
> /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s006.vmdk
> VirtualBo 2299 adam   50u      REG              259,2 2146762752 10094050
> /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s007.vmdk
> VirtualBo 2299 adam   51u      REG              259,2 2146762752 10094087
> /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s008.vmdk
> VirtualBo 2299 adam   52u      REG              259,2 2146762752 10094031
> /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s009.vmdk
> VirtualBo 2299 adam   53u      REG              259,2 2146762752 10094102
> /home/adam/VIRTUALS/Win-10-x64/Windows 7 x64-s010.vmdk
> VirtualBo 2299 adam   54u      REG              259,2 2146762752 10094021
> <snip>
> 
> # find VIRTUALS/Win10-vbox/ -atime -1 -type f
> VIRTUALS/Win10-vbox/Win10-vbox.vbox
> VIRTUALS/Win10-vbox/Logs/VBox.log
> VIRTUALS/Win10-vbox/Logs/VBox.log.1
> VIRTUALS/Win10-vbox/Win10-vbox.vbox-prev
> #

Incidentally, I can't start VMs when the gentoo host is running kernel 
4.19.57.  I get an error about "Failed to attach the network LUN 
(VERR_INTNET_FLT_IF_NOT_FOUND)."  Kernel 4.19.52 works fine.

Are you getting any such problems?

-- 
Regards,

Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

[gentoo-user] Re: find atime vs lsof

[Adam Carter]

[-- Attachment #1: Type: text/plain, Size: 1039 bytes --]

On Saturday, July 27, 2019, Mick <michaelkintzios@gmail.com> wrote:

> On Saturday, 27 July 2019 06:15:49 BST Adam Carter wrote:
> > Some time back i moved from vmware to virtualbox, and am currently
> > wondering if there are some old vmware files i can remove. Virtualbox
> uses
> > the old vmware disk files, so first i checked via atime and lsof.
> >
> > Why does atime not show all the files that lsof shows were open?
>
> They are snapshots and unless saved I would think they are removed when
> you
> shut down VBox.
>
>
Pretty sure  they are the vmware disk files and are used by vbox

There were other snapshot files that  ive already moved, and as expected it
didn’t cause vbox any problems

>
> Incidentally, I can't start VMs when the gentoo host is running kernel
> 4.19.57.  I get an error about "Failed to attach the network LUN
> (VERR_INTNET_FLT_IF_NOT_FOUND)."  Kernel 4.19.52 works fine.
>
> Are you getting any such problems?
>
> Im on 5.2. Did you rebuild the modules for the new kernel?

[-- Attachment #2: Type: text/html, Size: 1459 bytes --]

Re: [gentoo-user] Re: find atime vs lsof

[Mick]

[-- Attachment #1: Type: text/plain, Size: 1363 bytes --]

On Saturday, 27 July 2019 10:36:04 BST Adam Carter wrote:
> On Saturday, July 27, 2019, Mick <michaelkintzios@gmail.com> wrote:
> > On Saturday, 27 July 2019 06:15:49 BST Adam Carter wrote:
> > > Some time back i moved from vmware to virtualbox, and am currently
> > > wondering if there are some old vmware files i can remove. Virtualbox
> > 
> > uses
> > 
> > > the old vmware disk files, so first i checked via atime and lsof.
> > > 
> > > Why does atime not show all the files that lsof shows were open?
> > 
> > They are snapshots and unless saved I would think they are removed when
> > you
> > shut down VBox.
> 
> Pretty sure  they are the vmware disk files and are used by vbox

Hmm ... I only have two files being accessed here on a running VBox Windows 7 
VM.  'VBox.log' and 'MSWindows7_dyn.vdi'


> There were other snapshot files that  ive already moved, and as expected it
> didn’t cause vbox any problems
> 
> > Incidentally, I can't start VMs when the gentoo host is running kernel
> > 4.19.57.  I get an error about "Failed to attach the network LUN
> > (VERR_INTNET_FLT_IF_NOT_FOUND)."  Kernel 4.19.52 works fine.
> > 
> > Are you getting any such problems?
> > 
> > Im on 5.2. Did you rebuild the modules for the new kernel?

Yes, I did and checked they are loading.  I'll check again.
-- 
Regards,

Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

[gentoo-user] Re: find atime vs lsof

[Adam Carter]

[-- Attachment #1: Type: text/plain, Size: 262 bytes --]

> > Pretty sure  they are the vmware disk files and are used by vbox
>
> Hmm ... I only have two files being accessed here on a running VBox
> Windows 7
> VM.  'VBox.log' and 'MSWindows7_dyn.vdi'


Was it originally a vmware vm or did you create the vm in vbox?

[-- Attachment #2: Type: text/html, Size: 437 bytes --]

Re: [gentoo-user] Re: find atime vs lsof

[Mick]

[-- Attachment #1: Type: text/plain, Size: 663 bytes --]

On Saturday, 27 July 2019 12:01:08 BST Adam Carter wrote:
> > > Pretty sure  they are the vmware disk files and are used by vbox
> > 
> > Hmm ... I only have two files being accessed here on a running VBox
> > Windows 7
> > VM.  'VBox.log' and 'MSWindows7_dyn.vdi'
> 
> Was it originally a vmware vm or did you create the vm in vbox?

It was always a VBox VM - sorry never had vmware here.  However, if these are 
the two files VBox uses perhaps these are the only files it needs?

Unless someone with vmare images now running in VBox chimes in, you could move 
the rest and restart the VM looking out for errors (back up the directory 
first).
-- 
Regards,

Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

[gentoo-user] Re: find atime vs lsof

[Adam Carter]

[-- Attachment #1: Type: text/plain, Size: 288 bytes --]

> It was always a VBox VM - sorry never had vmware here.  However, if these
> are
> the two files VBox uses perhaps these are the only files it needs?


Ah ok that’s different.  The vbox specific files are only a few hundred kb
for me because it’s using the vmware disk files.

[-- Attachment #2: Type: text/html, Size: 430 bytes --]