Lighttpd connecting apt sources every minute

Help Community Help
1

It is not really a problem, but I noticed, that piHole (respectively lighttpd) contacts the these URLs every minute:

raspbian.raspberrypi.org, archive.raspberrypi.org and debian.map.fastlydns.net

lighttpd is using apt for that.
I'm running Raspberry Pi OS 10 and PiHole 5.1.2 (Web Interface 5.1.1 / FTL 5.2).
Is this a known behavior? Is it possible to change that intervall (or stop it)?

Regards
Mauri

2

How have you determined that lighttpd is calling apt?

3

With a netstat and search for the matching process:

netstat -taucp | grep 93.93.128.193

outputs

tcp 1 0 [myhostname]:43682 93.93.128.193:http CLOSE_WAIT 4379/http

and a

ps -ef | grep http

at this time shows

www-data   596     1  0 Feb07 ?        00:00:08 /usr/sbin/lighttpd -D -f /etc/lighttpd/lighttpd.conf
_apt      4377  4374  2 20:08 ?        00:00:00 /usr/lib/apt/methods/http
_apt      4378  4374  2 20:08 ?        00:00:00 /usr/lib/apt/methods/http
_apt      4379  4374  2 20:08 ?        00:00:00 /usr/lib/apt/methods/http
4

I think you may have things confused.

Your grep statement will show lighttpd as that name contains the search string http. It's not the process causing the apt. The PID you saw, 4379, is from a parent process with PID 4374. Grep for 4374 to see what process that is. It's not lighttpd with PID 596.

1 Like
5

Yes, you're right. It is the check_mk Agent.

root     31222  3.0  0.0   7980  3092 ?        Ss   08:55   0:00 /bin/bash /usr/bin/check_mk_agent
root     31302  0.0  0.0   3064   544 ?        S    08:55   0:00  \_ /bin/bash ././mk_apt
root     31303  0.0  0.0   3064  1420 ?        S    08:55   0:00      \_ /bin/bash ././mk_apt
root     31304  6.0  0.1  10480  6164 ?        S    08:55   0:00          \_ apt-get update -qq
_apt     31307  2.0  0.1  15600  6748 ?        S    08:55   0:00              \_ /usr/lib/apt/methods/http
_apt     31308  1.0  0.1  15600  6880 ?        S    08:55   0:00              \_ /usr/lib/apt/methods/http
_apt     31309  1.0  0.1  15600  6800 ?        S    08:55   0:00              \_ /usr/lib/apt/methods/http
_apt     31311  1.0  0.1   9424  4704 ?        S    08:55   0:00              \_ /usr/lib/apt/methods/gpgv
_apt     31406  0.0  0.0   9424  2088 ?        S    08:55   0:00                  \_ /usr/lib/apt/methods/gpgv
_apt     31407  0.0  0.0   1940   380 ?        S    08:55   0:00                      \_ /bin/sh /usr/bin/apt-key --quiet --readonly v

I've installed checkmk two weeks ago and saw the URLs in the logs before this time. But not in this period. Would have looked better on it :roll_eyes:

Anyway, thanks for your advice!

6

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.