Multiple reboots

Hello,

I’m seeing this on a regular basis and I’m trying to find the reason for this behavior.

An action that is set to reboot a server is rebooting the server multiple times:

reboot system boot 2.6.32-754.25.1. Sun Apr 26 00:03 - 00:03 (00:00)
reboot system boot 2.6.32-754.25.1. Sun Apr 26 00:03 - 00:03 (00:00)
reboot system boot 2.6.32-754.25.1. Sun Apr 26 00:03 - 00:03 (00:00)
reboot system boot 2.6.32-754.25.1. Sun Apr 26 00:03 - 00:03 (00:00)

type=SYSTEM_SHUTDOWN msg=audit(04/26/2020 00:02:42.227:244730) : user pid=39389 uid=root auid=unset ses=unset msg='init exe=/sbin/shutdown hostname=? addr=? terminal=? res=success’
type=SYSTEM_SHUTDOWN msg=audit(04/26/2020 00:03:13.109:244740) : user pid=42840 uid=root auid=unset ses=unset msg='init exe=/sbin/shutdown hostname=? addr=? terminal=? res=success’
type=SYSTEM_SHUTDOWN msg=audit(04/26/2020 00:03:14.856:244742) : user pid=42864 uid=root auid=unset ses=unset msg='init exe=/sbin/shutdown hostname=? addr=? terminal=? res=success’
type=SYSTEM_SHUTDOWN msg=audit(04/26/2020 00:03:16.154:244744) : user pid=43029 uid=root auid=unset ses=unset msg=‘init exe=/sbin/shutdown hostname=? addr=? terminal=? res=success’

Thanks in advance.

Show us the action settings…you may have it set to retry or reapply

by default I use that. thanks.

screenshot

Here’s the summary of the action

and from bigfix logs (/var/opt/BESClient/__BESData/__Global/Logs/):

At 00:03:04 -0400 - BES Support (http://sync.bigfix.com/cgi-bin/bfgather/bessupport)
Relevant - Restart Needed (fixlet:177)
At 00:03:13 -0400 -
IBM BigFix Restart (Force count:2) from ActionID 2119694
Exiting restart only state; no restart pending
At 00:03:14 -0400 -
Report posted successfully
IBM BigFix Restart from ActionID 2119694
Exiting restart only state; no restart pending
At 00:03:15 -0400 -
Report posted successfully
At 00:03:16 -0400 -
IBM BigFix Restart from ActionID 2119694
Exiting restart only state; no restart pending
At 00:03:18 -0400 -
IBM BigFix Restart from ActionID 2119694

It’s sending the system reboot command multiple times because the reboot isn’t happening and it is retrying the command (unless your machine is able to reboot in less than a second - those commands are time-stamped at the same second). Is something blocking the reboot command?

not that I’m aware. If the agent is able to talk to the server to patch, etc, I’m not really sure why a “reboot” command would be an issue.

I just checked other servers and this seems to happen most of the times even on servers were patching completes successfully, however I checked /var/log/messages and it seems the server only booted ounce despite the multiple reboot commands sent by BigFix.

The log may show multiple requests to reboot as we keep issuing it to try and get the system to restart. There can be applications that can abort a restart or take a long time to shut down.