SYSTEMD-COREDUMP(8) systemd-coredump SYSTEMD-COREDUMP(8) systemd-coredump systemd-coredump.socket systemd-coredump@.service - /usr/lib/systemd/systemd-coredump /usr/lib/systemd/systemd-coredump --backtrace systemd-coredump@.service systemd-coredump.socket systemd-coredump@.service . systemd-journald.service(8) . . " " . core(5). (RLIMIT_CORE) . . gdb(1). coredumpctl(1) list debug. systemd-coredump ( ) /var/lib/systemd/coredump/. /usr/lib/tmpfiles.d/systemd.conf . . . systemd[1]. systemd-coredump systemd-coredump . : systemd-coredump@.service . systemd-coredump systemd-coredump.socket systemd-coredump@.service . systemd-coredump.socket systemd-coredump@.service . systemd-coredump --backtrace. systemd-coredump [2] . MESSAGE= . systemd-coredump . . / systemd-coredump@.service . ELF . ( ). systemd-coredump : 1. systemd CoredumpReceive= ( systemd.resource-control(5)) systemd-coredump@.service . systemd-nspawn(8) --boot. : . 2. ( init PID 1) . EnterNamespace= coredump.conf(5) . CoredumpReceive= EnterNamespace= coredump.conf . systemd LimitCORE= systemd.exec(5). systemd-coredump sysctl(8) kernel.core_pattern. core(5). systemd /usr/lib/sysctl.d/50-coredump.conf kernel.core_pattern . sysctl.d(5) . sysctl sysctl(8) systemd-sysctl(8). --backtrace . python(1) sys.excepthook systemd-coredump-python[3]. systemd-coredump /etc/systemd/coredump.conf /etc/systemd/coredump.conf.d/*.conf coredump.conf(5). systemd-coredump . . . /etc/systemd/coredump.conf . systemd-tmpfiles /usr/lib/tmpfiles.d/systemd.conf. . systemd-coredump Storage=none ProcessSizeMax=0 coredump.conf(5). coredumpctl(1) (gdb). journalctl(1) ( sd-journal(3)). MESSAGE_ID=fc2e22bc6ee647b6b90729ab34a250b1: $ journalctl MESSAGE_ID=fc2e22bc6ee647b6b90729ab34a250b1 -o verbose ... MESSAGE_ID=fc2e22bc6ee647b6b90729ab34a250b1 COREDUMP_PID=552351 COREDUMP_UID=1000 COREDUMP_GID=1000 COREDUMP_SIGNAL_NAME=SIGSEGV COREDUMP_SIGNAL=11 COREDUMP_TIMESTAMP=1614342930000000 COREDUMP_COMM=Web Content COREDUMP_EXE=/usr/lib64/firefox/firefox COREDUMP_USER_UNIT=app-gnome-firefox-552136.scope COREDUMP_CMDLINE=/usr/lib64/firefox/firefox -contentproc -childID 5 -isForBrowser ... COREDUMP_CGROUP=/user.slice/user-1000.slice/user@1000.service/app.slice/app-....scope COREDUMP_FILENAME=/var/lib/systemd/coredump/core.Web....552351.....zst ... ( ) COREDUMP_UID=, COREDUMP_PID=, COREDUMP_GID= (PID) (UID) (GID) . ( ) systemd-coredump. 248. COREDUMP_BY_PIDFD= PIDFD ( v6.16) "1". PID . 258. COREDUMP_TIMESTAMP= ( ). 248. COREDUMP_RLIMIT= getrlimit(2). 248. COREDUMP_UNIT=, COREDUMP_SLICE= . . 248. COREDUMP_CGROUP= . . 248. COREDUMP_PROC_CGROUP= /proc/self/cgroup. "0::" . . 248. COREDUMP_OWNER_UID= COREDUMP_USER_UNIT= COREDUMP_SESSION= UID systemd . . . 248. COREDUMP_SIGNAL_NAME= COREDUMP_SIGNAL= ( "SIG" [4]) . ( .) 248. COREDUMP_CWD= COREDUMP_ROOT= . . 248. COREDUMP_DUMPABLE= PR_GET_DUMPABLE prctl(2). 258. COREDUMP_OPEN_FDS= : fd:/path/to/file pos: ... flags: ... ... fd:/path/to/file pos: ... flags: ... ... fd /proc/pid/fdinfo/fd. 248. COREDUMP_EXE= /proc/pid/exe. . 248. COREDUMP_CMDLINE= COREDUMP_COMM= COREDUMP_ENVIRON= COREDUMP_PROC_AUXV= COREDUMP_PROC_LIMITS= COREDUMP_PROC_MAPS= COREDUMP_PROC_MOUNTINFO= COREDUMP_PROC_STATUS= /proc/: /proc/pid/cmdline ( ) /proc/pid/comm ( ) /proc/pid/environ ( ) /proc/pid/auxv ( getauxval(3)) /proc/pid/limits ( ) /proc/pid/maps ( ) /proc/pid/mountinfo ( ) /proc/pid/status ( ). proc(5) . 248. COREDUMP_HOSTNAME= . . 248. COREDUMP_CONTAINER_CMDLINE= ( ). 248. COREDUMP= . 248. COREDUMP_FILENAME= . 248. COREDUMP_TRUNCATED= "1" . ( .) 248. COREDUMP_PACKAGE_NAME=, COREDUMP_PACKAGE_VERSION=, COREDUMP_PACKAGE_JSON= ELF .package . package version ELF '' ( ) . JSON JSON . [5]. 249. MESSAGE= systemd-coredump . systemd-coredump --backtrace . 248. systemd-coredump . systemd.journal-fields(7). ( ) COREDUMP_FILENAME= : user.coredump.pid, user.coredump.uid, user.coredump.gid, user.coredump.signal, user.coredump.timestamp, user.coredump.rlimit, user.coredump.hostname, user.coredump.comm, user.coredump.exe COREDUMP_PID=, COREDUMP_UID=, COREDUMP_GID=, COREDUMP_SIGNAL=, COREDUMP_TIMESTAMP=, COREDUMP_RLIMIT=, COREDUMP_HOSTNAME=, COREDUMP_COMM=, COREDUMP_EXE= . 248. getfattr(1). : $ getfattr --absolute-names -d /var/lib/systemd/coredump/core.Web....552351.....zst # file: /var/lib/systemd/coredump/core.Web....552351.....zst user.coredump.pid="552351" user.coredump.uid="1000" user.coredump.gid="1000" user.coredump.signal="11" user.coredump.timestamp="1614342930000000" user.coredump.comm="Web Content" user.coredump.exe="/usr/lib64/firefox/firefox" ... coredump.conf(5), coredumpctl(1), systemd-journald.service(8), systemd-tmpfiles(8), core(5), sysctl.d(5), systemd-sysctl.service(8), systemd[1] 1. systemd https://systemd.io/COREDUMP 2. https://systemd.io/JOURNAL_EXPORT_FORMATS#journal-export-format 3. systemd-coredump-python https://github.com/systemd/systemd-coredump-python 4. kill(1) kill(2) systemd . 5. https://systemd.io/PACKAGE_METADATA_FOR_EXECUTABLE_FILES/ 3 . . : . systemd 260.1 SYSTEMD-COREDUMP(8)