Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
I
infrastructure
  • Project overview
    • Project overview
    • Details
    • Activity
    • Releases
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 57
    • Issues 57
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Merge Requests 2
    • Merge Requests 2
  • CI / CD
    • CI / CD
    • Pipelines
    • Jobs
    • Schedules
  • Operations
    • Operations
    • Incidents
    • Environments
  • Analytics
    • Analytics
    • CI / CD
    • Repository
    • Value Stream
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Members
    • Members
  • Collapse sidebar
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
  • main
  • infrastructure
  • Issues
  • #76

Closed
Open
Opened Jan 13, 2019 by Loïc Dachary@dacharyOwner

oscap oval xsltproc takes too much CPU (45+ minutes)

When running

$ cd /var/ossec
$ time oscap oval eval --results /tmp/r.out --verbose-log-file /tmp/r.log --verbose DEVEL /var/ossec/wodles/oscap/content/cve-debian-9-oval.xml
real	1m48.502s
user	1m42.148s
sys	0m5.540s
$ ls -lh /tmp/r.*
-rw-r--r-- 1 root root 47M Jan 13 20:25 /tmp/r.log
-rw-r--r-- 1 root root 41M Jan 13 20:25 /tmp/r.out
$ time xsltproc wodles/oscap/template_oval.xsl /tmp/r.out
real	45m9.351s
user	44m42.728s
sys	0m0.728s

The whole time xsltproc takes one core 100%:

26388 root      20   0  451508 383572   5488 R 99.7 19.1  29:09.58 xsltproc wodles/oscap/template_oval.xsl

it also uses over 300MB of RSS and up to 1.2GB of RSS on the production gitlab-host.

ii  xsltproc                 1.1.29-2.1        amd64             XSLT 1.0 command line processor
Edited Jan 13, 2019 by singuliere
Assignee
Assign to
None
Milestone
None
Assign milestone
Time tracking
None
Due date
None
Reference: main/infrastructure#76