SYSTEMD-COREDUMP(8) systemd-coredump SYSTEMD-COREDUMP(8) (NAME) systemd-coredump, systemd-coredump.socket, systemd-coredump@.service - (core dumps) (SYNOPSIS) /usr/lib/systemd/systemd-coredump /usr/lib/systemd/systemd-coredump --backtrace systemd-coredump@.service systemd-coredump.socket (DESCRIPTION) systemd-coredump@.service (core dumps) . systemd-journald.service(8) (stack trace). . << >> . core(5) . (RLIMIT_CORE) . . gdb(1). coredumpctl(1) list debug . systemd-coredump ( ) ( ) /var/lib/systemd/coredump/ . /usr/lib/tmpfiles.d/systemd.conf . . (extended attributes) . systemd Coredump Handling[1] . systemd-coredump systemd-coredump . : (handler) systemd-coredump@.service . systemd-coredump (privileged) systemd-coredump.socket systemd-coredump@.service . systemd-coredump.socket systemd-coredump@.service . systemd-coredump --backtrace . systemd-coredump Journal Export Format[2] . MESSAGE= . systemd-coredump . . / systemd-coredump@.service (stacktrace) . (debug) ELF . (sandboxes) (mount namespace) ( ). systemd-coredump : 1. systemd CoredumpReceive= ( systemd.resource-control(5)) systemd-coredump@.service . systemd- nspawn(8) --boot . : . 2. ( init PID 1 ) . EnterNamespace= coredump.conf(5) . CoredumpReceive= EnterNamespace= coredump.conf . (CONFIGURATION) systemd LimitCORE= systemd.exec(5). systemd-coredump kernel.core_pattern sysctl(8) . core(5) . systemd /usr/lib/sysctl.d/50-coredump.conf kernel.core_pattern . sysctl.d(5) . sysctl sysctl(8) systemd-sysctl(8). --backtrace . python(1) sys.excepthook systemd-coredump-python[3]. systemd-coredump /etc/systemd/coredump.conf /etc/systemd/coredump.conf.d/*.conf coredump.conf(5). systemd-coredump . . . /etc/systemd/coredump.conf . systemd-tmpfiles /usr/lib/tmpfiles.d/systemd.conf . . systemd-coredump Storage=none ProcessSizeMax=0 coredump.conf(5) . (INFORMATION ABOUT THE CRASHED PROCESS) coredumpctl(1) (gdb) . journalctl(1) ( API sd-journal(3)) . MESSAGE_ID=fc2e22bc6ee647b6b90729ab34a250b1 : $ journalctl MESSAGE_ID=fc2e22bc6ee647b6b90729ab34a250b1 -o verbose ... MESSAGE_ID=fc2e22bc6ee647b6b90729ab34a250b1 COREDUMP_PID=552351 COREDUMP_UID=1000 COREDUMP_GID=1000 COREDUMP_SIGNAL_NAME=SIGSEGV COREDUMP_SIGNAL=11 COREDUMP_CODE=2 COREDUMP_TIMESTAMP=1614342930000000 COREDUMP_COMM=Web Content COREDUMP_EXE=/usr/lib64/firefox/firefox COREDUMP_USER_UNIT=app-gnome-firefox-552136.scope COREDUMP_CMDLINE=/usr/lib64/firefox/firefox -contentproc -childID 5 -isForBrowser ... COREDUMP_CGROUP=/user.slice/user-1000.slice/user@1000.service/app.slice/app-....scope COREDUMP_FILENAME=/var/lib/systemd/coredump/core.Web....552351.....zst ... ( ) : COREDUMP_UID=, COREDUMP_PID=, COREDUMP_GID= (PID) (UID) (GID) . ( ) systemd-coredump . 248. COREDUMP_BY_PIDFD= PIDFD ( 6.16 ) "1" . PID (race conditions) . 258. COREDUMP_TIMESTAMP= ( epoch). 248. COREDUMP_RLIMIT= getrlimit(2). 248. COREDUMP_UNIT=, COREDUMP_SLICE= (slice). . 248. COREDUMP_CGROUP= (cgroup) . . 248. COREDUMP_PROC_CGROUP= (Control group) /proc/self/cgroup . cgroup "0::" . . 248. COREDUMP_OWNER_UID=, COREDUMP_USER_UNIT=, COREDUMP_SESSION= UID systemd . . . 248. COREDUMP_SIGNAL_NAME=, COREDUMP_SIGNAL= ( "SIG" [4]) . ( .) 248. COREDUMP_CODE= . si_code siginfo_t sigaction(2) . 261. COREDUMP_CWD=, COREDUMP_ROOT= . mount . 248. COREDUMP_DUMPABLE= PR_GET_DUMPABLE prctl(2). 258. COREDUMP_OPEN_FDS= (file descriptors) : fd:/path/to/file pos: ... flags: ... ... fd:/path/to/file pos: ... flags: ... ... fd /proc/pid/fdinfo/fd . 248. COREDUMP_EXE= /proc/pid/exe. mount . 248. COREDUMP_CMDLINE=, COREDUMP_COMM=, COREDUMP_ENVIRON=, COREDUMP_PROC_AUXV=, COREDUMP_PROC_LIMITS=, COREDUMP_PROC_MAPS=, COREDUMP_PROC_MOUNTINFO=, COREDUMP_PROC_STATUS= /proc/ : /proc/pid/cmdline ( ) /proc/pid/comm ( ) /proc/pid/environ ( ) /proc/pid/auxv ( getauxval(3)) /proc/pid/limits ( ) /proc/pid/maps ( ) /proc/pid/mountinfo ( mount ) /proc/pid/status ( ). proc(5). 248. COREDUMP_HOSTNAME= (hostname) . . 248. COREDUMP_CONTAINER_CMDLINE= ( mount ). 248. COREDUMP= . 248. COREDUMP_FILENAME= . 248. COREDUMP_TRUNCATED= (truncated) "1" . ( .) 248. COREDUMP_PACKAGE_NAME=, COREDUMP_PACKAGE_VERSION=, COREDUMP_PACKAGE_JSON= ELF package. . package version ELF ( ) . JSON JSON . Package Metadata for Executable Files[5] . 249. MESSAGE= systemd-coredump . systemd-coredump --backtrace . 248. systemd-coredump . systemd.journal-fields(7). ( ) COREDUMP_FILENAME= (extended attributes) : user.coredump.pid, user.coredump.uid, user.coredump.gid, user.coredump.signal, user.coredump.timestamp, user.coredump.rlimit, user.coredump.hostname, user.coredump.comm, user.coredump.exe COREDUMP_PID=, COREDUMP_UID=, COREDUMP_GID=, COREDUMP_SIGNAL=, COREDUMP_TIMESTAMP=, COREDUMP_RLIMIT=, COREDUMP_HOSTNAME=, COREDUMP_COMM=, COREDUMP_EXE= . 248. getfattr(1) . : $ getfattr --absolute-names -d /var/lib/systemd/coredump/core.Web....552351.....zst # file: /var/lib/systemd/coredump/core.Web....552351.....zst user.coredump.pid="552351" user.coredump.uid="1000" user.coredump.gid="1000" user.coredump.signal="11" user.coredump.timestamp="1614342930000000" user.coredump.comm="Web Content" user.coredump.exe="/usr/lib64/firefox/firefox" ... (SEE ALSO) coredump.conf(5), coredumpctl(1), systemd-journald.service(8), systemd- tmpfiles(8), core(5), sysctl.d(5), systemd-sysctl.service(8), systemd Coredump Handling[1] (NOTES) 1. systemd Coredump Handling https://systemd.io/COREDUMP 2. Journal Export Format https://systemd.io/JOURNAL_EXPORT_FORMATS#journal-export-format 3. systemd-coredump-python https://github.com/systemd/systemd-coredump-python 4. kill(1) kill(2) systemd . 5. Package Metadata for Executable Files https://systemd.io/PACKAGE_METADATA_FOR_EXECUTABLE_FILES systemd 261.2 SYSTEMD-COREDUMP(8)