all messages for Guix-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
From: ng0 <ng0@infotropique.org>
To: guix-devel@gnu.org
Subject: tor with --expensive-hardening is using way too much memory
Date: Wed, 19 Jul 2017 23:05:00 +0000	[thread overview]
Message-ID: <20170719230500.vrbv2qqksjd5g4gh@abyayala> (raw)

[-- Attachment #1: Type: text/plain, Size: 1706 bytes --]

I noticed this before the contribution entered master, so this message
is not really a news.

To quote myself from earlier today:

<ng0>      I think we should revert one piece of the tor hardened build.. 3 hours
           uptime: 684.3 MiB + 753.0 KiB = 685.1 MiB       tor

Comparison: my Chromium with 55 tabs open uses 2.2GB.

 Private  +   Shared  =  RAM used       Program
… 
 12.4 MiB +   1.1 MiB =  13.4 MiB       vim
 15.5 MiB + 959.0 KiB =  16.4 MiB       Xorg
 17.3 MiB +   5.6 MiB =  22.9 MiB       guix substitute
 22.8 MiB +   1.3 MiB =  24.1 MiB       shepherd
 26.7 MiB + 551.5 KiB =  27.3 MiB       emacs-25.2
131.1 MiB +   6.2 MiB = 137.3 MiB       .guix-real
732.7 MiB + 932.0 KiB = 733.6 MiB       tor
…
uptime: 6:24h

Now I wouldn't consider tor to be problematic when this would be the
default for tor. But it isn't, and --enable-expensive-hardening is an
experimental function which is not enabled by default from upstream (as
all our recently added config options for tor (not sure right now if all
are experimental, but they are not standard).

Comparison, Debian running for a very long time (months) and using the
same config:

 40.6 MiB + 486.0 KiB =  41.1 MiB       tor


I'm convinced that removing --enable-expensive-hardening will improve
the situation, I have watched an VM with tor without this config switch.
Whoever needs or wants this switch can make use of the easy way to
create custom packages in Guix.

If someone else can confirm my observations, I'll prepare an patch.
-- 
ng0
GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588
GnuPG: https://n0is.noblogs.org/my-keys
https://www.infotropique.org https://krosos.org

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

             reply	other threads:[~2017-07-19 23:05 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2017-07-19 23:05 ng0 [this message]
2017-07-20  2:11 ` tor with --expensive-hardening is using way too much memory Kei Kebreau
2017-07-29 17:19   ` ng0

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20170719230500.vrbv2qqksjd5g4gh@abyayala \
    --to=ng0@infotropique.org \
    --cc=guix-devel@gnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/guix.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.