Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pcscd daemon is enabled after reboot

    Scheduled Pinned Locked Moved General pfSense Questions
    25 Posts 6 Posters 2.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      nattygreg @bingo600
      last edited by

      @bingo600 that ZFS install of pfsense is already compress so there is no need to compress the logs again, unbound for me was using 7775M until I turn off bzip, now unbound uses 703M. And my memory usage is hovering at 15-17% and this is with pfblocker running around 20. Blocklist in python mode.

      With the installed patch for pcscd, it prevents it from starting up after a reboot.

      Still have one issue- maybe u can help with my i5-240M embedded cpu in my 1u still Carrie’s a temperature of 68-70 degrees Celsius.

      I have two exhaust fans from notua running in it and the regular fan on the cpu

      bingo600B 1 Reply Last reply Reply Quote 0
      • bingo600B
        bingo600 @nattygreg
        last edited by

        @nattygreg said in pcscd daemon is enabled after reboot:

        @bingo600 that ZFS install of pfsense is already compress so there is no need to compress the logs again, unbound for me was using 7775M until I turn off bzip, now unbound uses 703M.

        So you are telling me that log rotating with bzip2 consumes 7GB of Ram ?

        That would clearly be an issue i would report to Netgate.

        If you find my answer useful - Please give the post a 👍 - "thumbs up"

        pfSense+ 23.05.1 (ZFS)

        QOTOM-Q355G4 Quad Lan.
        CPU  : Core i5 5250U, Ram : 8GB Kingston DDR3LV 1600
        LAN  : 4 x Intel 211, Disk  : 240G SAMSUNG MZ7L3240HCHQ SSD

        N S 2 Replies Last reply Reply Quote 0
        • N
          nattygreg @bingo600
          last edited by

          @bingo600 when I check they are aware, these are the work around until it’s fix in 2.6 CE, when I was in 2.4.5 I never had these issue, but because I’m a phenatic for making sure my home is secured I upgraded and wish I hadn’t but I can not see my self going backward so we search and find solution until the release of 2.6. Those fixes that I suggest has brought my memory usage down.

          I’m running 2.5.2 CE

          1 Reply Last reply Reply Quote 0
          • S
            SteveITS Galactic Empire @bingo600
            last edited by

            @bingo600 said in pcscd daemon is enabled after reboot:

            you are telling me that log rotating with bzip2 consumes 7GB of Ram

            I don't know about 7 GB RAM usage but I've run into slower-CPU routers with half a dozen bzip processes running, using CPU, I/O, and RAM. It's noticeable when the CPU gets maxed out.

            @nattygreg said in pcscd daemon is enabled after reboot:

            these are the work around until it’s fix in 2.6 CE

            Technically the release notes I linked say they will disable log compression on new installations with ZFS, not that they will change the setting on existing routers.

            pcscd will however be optional by default.

            Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
            When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
            Upvote 👍 helpful posts!

            bingo600B 1 Reply Last reply Reply Quote 0
            • bingo600B
              bingo600 @SteveITS
              last edited by

              @steveits said in pcscd daemon is enabled after reboot:

              I don't know about 7 GB RAM usage but I've run into slower-CPU routers with half a dozen bzip processes running, using CPU, I/O, and RAM. It's noticeable when the CPU gets maxed out.

              Hmmm ...

              Since they mention bzip2 log rotate in the docs , i would have expected it to be a rare occurrence. But if the CPU (or disk) is constrained, i can see the compression taking some time. I think my logs on my linux server are rotated every 24 hr's.

              /Bingo

              If you find my answer useful - Please give the post a 👍 - "thumbs up"

              pfSense+ 23.05.1 (ZFS)

              QOTOM-Q355G4 Quad Lan.
              CPU  : Core i5 5250U, Ram : 8GB Kingston DDR3LV 1600
              LAN  : 4 x Intel 211, Disk  : 240G SAMSUNG MZ7L3240HCHQ SSD

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                Generally if you see that it's because something is massively spamming the log file in question. That's what happens if you kill pcscd while ipsec is running. The log file reaches it's maximum size and is compressed/rotated faster than the system can do it.

                Steve

                bingo600B 1 Reply Last reply Reply Quote 0
                • bingo600B
                  bingo600 @stephenw10
                  last edited by

                  @stephenw10
                  Will IPSEC still be available (aka. can i still make an ipsec VPN tunnel) if I have "patched" the pcscd "out".

                  /Bingo

                  If you find my answer useful - Please give the post a 👍 - "thumbs up"

                  pfSense+ 23.05.1 (ZFS)

                  QOTOM-Q355G4 Quad Lan.
                  CPU  : Core i5 5250U, Ram : 8GB Kingston DDR3LV 1600
                  LAN  : 4 x Intel 211, Disk  : 240G SAMSUNG MZ7L3240HCHQ SSD

                  S 1 Reply Last reply Reply Quote 0
                  • S
                    SteveITS Galactic Empire @bingo600
                    last edited by

                    @bingo600 said in pcscd daemon is enabled after reboot:

                    Will IPSEC still be available (aka. can i still make an ipsec VPN tunnel) if I have "patched" the pcscd "out".

                    yes

                    Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                    When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                    Upvote 👍 helpful posts!

                    1 Reply Last reply Reply Quote 1
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      It's disabled by default in 2.6 (using this same method) and that is now the current release!

                      N 1 Reply Last reply Reply Quote 2
                      • N
                        nattygreg @stephenw10
                        last edited by

                        @stephenw10 are you running 2.6 if so is there any caveats

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          I've been running 2.6 for months, on numerous boxes, no significant issues.

                          There seems to be some potential problems if you're running in Hyper-V. Some users are seeing throughput reduced (significantly) in VMs there.

                          Steve

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.