From: ng0 <ng0@infotropique.org>
To: guix-devel@gnu.org
Subject: tor with --expensive-hardening is using way too much memory
Date: Wed, 19 Jul 2017 23:05:00 +0000 [thread overview]
Message-ID: <20170719230500.vrbv2qqksjd5g4gh@abyayala> (raw)
[-- Attachment #1: Type: text/plain, Size: 1706 bytes --]
I noticed this before the contribution entered master, so this message
is not really a news.
To quote myself from earlier today:
<ng0> I think we should revert one piece of the tor hardened build.. 3 hours
uptime: 684.3 MiB + 753.0 KiB = 685.1 MiB tor
Comparison: my Chromium with 55 tabs open uses 2.2GB.
Private + Shared = RAM used Program
…
12.4 MiB + 1.1 MiB = 13.4 MiB vim
15.5 MiB + 959.0 KiB = 16.4 MiB Xorg
17.3 MiB + 5.6 MiB = 22.9 MiB guix substitute
22.8 MiB + 1.3 MiB = 24.1 MiB shepherd
26.7 MiB + 551.5 KiB = 27.3 MiB emacs-25.2
131.1 MiB + 6.2 MiB = 137.3 MiB .guix-real
732.7 MiB + 932.0 KiB = 733.6 MiB tor
…
uptime: 6:24h
Now I wouldn't consider tor to be problematic when this would be the
default for tor. But it isn't, and --enable-expensive-hardening is an
experimental function which is not enabled by default from upstream (as
all our recently added config options for tor (not sure right now if all
are experimental, but they are not standard).
Comparison, Debian running for a very long time (months) and using the
same config:
40.6 MiB + 486.0 KiB = 41.1 MiB tor
I'm convinced that removing --enable-expensive-hardening will improve
the situation, I have watched an VM with tor without this config switch.
Whoever needs or wants this switch can make use of the easy way to
create custom packages in Guix.
If someone else can confirm my observations, I'll prepare an patch.
--
ng0
GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588
GnuPG: https://n0is.noblogs.org/my-keys
https://www.infotropique.org https://krosos.org
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]
next reply other threads:[~2017-07-19 23:05 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-07-19 23:05 ng0 [this message]
2017-07-20 2:11 ` tor with --expensive-hardening is using way too much memory Kei Kebreau
2017-07-29 17:19 ` ng0
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20170719230500.vrbv2qqksjd5g4gh@abyayala \
--to=ng0@infotropique.org \
--cc=guix-devel@gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this external index
https://git.savannah.gnu.org/cgit/guix.git
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.