Multiple reboots

Usage and Config Platform
1

Hello,

I’m seeing this on a regular basis and I’m trying to find the reason for this behavior.

An action that is set to reboot a server is rebooting the server multiple times:

reboot system boot 2.6.32-754.25.1. Sun Apr 26 00:03 - 00:03 (00:00)
reboot system boot 2.6.32-754.25.1. Sun Apr 26 00:03 - 00:03 (00:00)
reboot system boot 2.6.32-754.25.1. Sun Apr 26 00:03 - 00:03 (00:00)
reboot system boot 2.6.32-754.25.1. Sun Apr 26 00:03 - 00:03 (00:00)

type=SYSTEM_SHUTDOWN msg=audit(04/26/2020 00:02:42.227:244730) : user pid=39389 uid=root auid=unset ses=unset msg='init exe=/sbin/shutdown hostname=? addr=? terminal=? res=success’
type=SYSTEM_SHUTDOWN msg=audit(04/26/2020 00:03:13.109:244740) : user pid=42840 uid=root auid=unset ses=unset msg='init exe=/sbin/shutdown hostname=? addr=? terminal=? res=success’
type=SYSTEM_SHUTDOWN msg=audit(04/26/2020 00:03:14.856:244742) : user pid=42864 uid=root auid=unset ses=unset msg='init exe=/sbin/shutdown hostname=? addr=? terminal=? res=success’
type=SYSTEM_SHUTDOWN msg=audit(04/26/2020 00:03:16.154:244744) : user pid=43029 uid=root auid=unset ses=unset msg=‘init exe=/sbin/shutdown hostname=? addr=? terminal=? res=success’

Thanks in advance.

2

Show us the action settings…you may have it set to retry or reapply

3

screenshot
screenshot765×497 72.4 KB

by default I use that. thanks.

4

screenshot

Here’s the summary of the action

5

and from bigfix logs (/var/opt/BESClient/__BESData/__Global/Logs/):

At 00:03:04 -0400 - BES Support (http://sync.bigfix.com/cgi-bin/bfgather/bessupport)
Relevant - Restart Needed (fixlet:177)
At 00:03:13 -0400 -
IBM BigFix Restart (Force count:2) from ActionID 2119694
Exiting restart only state; no restart pending
At 00:03:14 -0400 -
Report posted successfully
IBM BigFix Restart from ActionID 2119694
Exiting restart only state; no restart pending
At 00:03:15 -0400 -
Report posted successfully
At 00:03:16 -0400 -
IBM BigFix Restart from ActionID 2119694
Exiting restart only state; no restart pending
At 00:03:18 -0400 -
IBM BigFix Restart from ActionID 2119694

6

It’s sending the system reboot command multiple times because the reboot isn’t happening and it is retrying the command (unless your machine is able to reboot in less than a second - those commands are time-stamped at the same second). Is something blocking the reboot command?

7

not that I’m aware. If the agent is able to talk to the server to patch, etc, I’m not really sure why a “reboot” command would be an issue.

8

I just checked other servers and this seems to happen most of the times even on servers were patching completes successfully, however I checked /var/log/messages and it seems the server only booted ounce despite the multiple reboot commands sent by BigFix.

9

The log may show multiple requests to reboot as we keep issuing it to try and get the system to restart. There can be applications that can abort a restart or take a long time to shut down.