Jak správně číst výpis příkazu last

Jak správně číst výpis příkazu last
« kdy: 24. 01. 2021, 15:41:21 »
Ahojte,
viem nejako spolahlivo povedat z akeho dovodu bol PC vypnuty? Totiz stalo sa mi ze bezal ddrescue no ked som prisiel k PC tak bol vypnuty, mam silne podozrenie na malych prckov ktori tu pobehuju, no zatlkaju ako partizani :)). Nastastie som mal pre ddrescue log a teda som vedel pokracovat, resp ked som znova spustil ddrescue tak mi bolo oznamene ze je vsetko OK a teda usudzujem ze povodny ddrescue dobehol dokonca a PC sa vypol az potom. Nic vazne sa teda nestalo. Zaujimalo by ma vsak preco sa PC vypol resp ci viem nejako vycitat ze tento PC bol vypnuty korektne alebo na tvrdo a pod? Nasiel som prikaz last avsak neviem ci ho spavne citam:

Kód: [Vybrat]
root@ryzen:/datastore# runlevel
N 5

root@ryzen:/datastore# who -r
         run-level 5  2021-01-24 10:48

root@ryzen:/datastore# last -x | cat -n
     1  root     pts/0        192.168.3.109    Sun Jan 24 13:29   still logged in
     2  root     pts/0        192.168.3.109    Sun Jan 24 10:49 - 12:32  (01:43)
     3  runlevel (to lvl 5)   5.4.34-1-pve     Sun Jan 24 10:48   still running
     4  reboot   system boot  5.4.34-1-pve     Sun Jan 24 10:48   still running
     5  shutdown system down  5.4.34-1-pve     Sun Jan 24 10:45 - 10:48  (00:02)
     6  root     pts/0        192.168.3.109    Sun Jan 24 08:28 - 08:28  (00:00)
     7  root     pts/0        192.168.3.109    Sun Jan 24 08:26 - 08:28  (00:01)
     8  root     pts/0        192.168.3.109    Sun Jan 24 01:40 - 03:02  (01:21)
     9  root     tty1                          Sun Jan 24 01:29 - 01:30  (00:00)
    10  root     tty1                          Sun Jan 24 01:17 - 01:17  (00:00)
    11  runlevel (to lvl 5)   5.4.34-1-pve     Sun Jan 24 01:16 - 10:45  (09:29)
    12  reboot   system boot  5.4.34-1-pve     Sun Jan 24 01:16 - 10:45  (09:29)
    13  shutdown system down  5.4.34-1-pve     Wed Jan 20 01:29 - 01:16 (3+23:47)
    14  runlevel (to lvl 5)   5.4.34-1-pve     Wed Jan 20 01:11 - 01:29  (00:17)
    15  reboot   system boot  5.4.34-1-pve     Wed Jan 20 01:11 - 01:29  (00:17)
    16  shutdown system down  5.4.34-1-pve     Wed Jan 20 01:10 - 01:11  (00:01)
    17  root     pts/0        192.168.3.109    Wed Jan 20 01:10 - down   (00:00)
    18  root     pts/0        192.168.3.109    Wed Jan 20 00:20 - 01:10  (00:49)
    19  runlevel (to lvl 5)   5.4.34-1-pve     Sat Jan  4 23:51 - 01:10 (381+01:19)
    20  reboot   system boot  5.4.34-1-pve     Sat Jan  4 23:51 - 01:10 (381+01:19)
    21
    22  wtmp begins Sat Jan  4 23:51:05 2020

Snazim sa to nejako pochopit pomocou prikladov odtialto https://unix.stackexchange.com/questions/9819/how-to-find-out-from-the-logs-what-caused-system-shutdown PC som zapol niekedy v noci predpokladam ze to su riadky 12,11. Okolo 10:50 doobedu som zbadal ze PC je vypnuty a teda som ho znova nastartoval a bezi az doteraz, predpokladam ze to su riadky 4,3. Podozrivy je z mojho pohladu riadok 5. a ak spravne chapem tak tu nastalo vypnutie.

Secteno potrzeno:
Kód: [Vybrat]
# TU BOL OPAT NABOOTOVANY
3  runlevel (to lvl 5)   5.4.34-1-pve     Sun Jan 24 10:48   still running
4  reboot   system boot  5.4.34-1-pve     Sun Jan 24 10:48   still running

# TU BOL KOREKTNE VYPNUTY
5  shutdown system down  5.4.34-1-pve     Sun Jan 24 10:45 - 10:48  (00:02)

# TU SYSTEM BOOTOL A BEZAL
11  runlevel (to lvl 5)   5.4.34-1-pve     Sun Jan 24 01:16 - 10:45  (09:29)
12  reboot   system boot  5.4.34-1-pve     Sun Jan 24 01:16 - 10:45  (09:29)

Pripajam este vypis z /var/log ktory sa spomina v spominanom clanku
Kód: [Vybrat]
root@ryzen:/datastore# grep -iv ': starting\|kernel: .*: Power Button\|watching system buttons\|Stopped Cleaning Up\|Started Crash recovery kernel' \
   /var/log/messages /var/log/syslog /var/log/apcupsd* \
   | grep -iw 'recover[a-z]*\|power[a-z]*\|shut[a-z ]*down\|rsyslogd\|ups'

/var/log/messages:Jan 24 01:16:49 ryzen rsyslogd:  [origin software="rsyslogd" swVersion="8.1901.0" x-pid="851" x-info="https://www.rsyslog.com"] rsyslogd was HUPed
/var/log/messages:Jan 24 10:48:37 ryzen rsyslogd: imuxsock: Acquired UNIX socket '/run/systemd/journal/syslog' (fd 3) from systemd.  [v8.1901.0]
/var/log/messages:Jan 24 10:48:37 ryzen rsyslogd:  [origin software="rsyslogd" swVersion="8.1901.0" x-pid="1162" x-info="https://www.rsyslog.com"] start
/var/log/messages:Jan 24 10:48:37 ryzen kernel: [    0.711917] pci 0000:07:00.1: D0 power state depends on 0000:07:00.0
/var/log/messages:Jan 24 10:48:37 ryzen kernel: [    1.105112] usb: port power management may be unreliable
/var/log/messages:Jan 24 10:48:37 ryzen kernel: [    2.989190] raid6: using avx2x2 recovery algorithm
/var/log/syslog:Jan 24 01:16:49 ryzen rsyslogd:  [origin software="rsyslogd" swVersion="8.1901.0" x-pid="851" x-info="https://www.rsyslog.com"] rsyslogd was HUPed
/var/log/syslog:Jan 24 01:16:49 ryzen rsyslogd:  [origin software="rsyslogd" swVersion="8.1901.0" x-pid="851" x-info="https://www.rsyslog.com"] rsyslogd was HUPed
/var/log/syslog:Jan 24 01:17:59 ryzen systemd[1420]: Reached target Shutdown.
/var/log/syslog:Jan 24 01:30:37 ryzen systemd[3237]: Reached target Shutdown.
/var/log/syslog:Jan 24 10:45:53 ryzen systemd[4857]: Reached target Shutdown.
/var/log/syslog:Jan 24 10:45:54 ryzen pve-ha-lrm[1374]: got shutdown request with shutdown policy 'conditional'
/var/log/syslog:Jan 24 10:45:54 ryzen pve-ha-lrm[1374]: shutdown LRM, stop all services
/var/log/syslog:Jan 24 10:45:56 ryzen pve-ha-crm[1363]: server received shutdown request
/var/log/syslog:Jan 24 10:48:37 ryzen systemd[1]: Started Update UTMP about System Boot/Shutdown.
/var/log/syslog:Jan 24 10:48:37 ryzen rsyslogd: imuxsock: Acquired UNIX socket '/run/systemd/journal/syslog' (fd 3) from systemd.  [v8.1901.0]
/var/log/syslog:Jan 24 10:48:37 ryzen rsyslogd:  [origin software="rsyslogd" swVersion="8.1901.0" x-pid="1162" x-info="https://www.rsyslog.com"] start
/var/log/syslog:Jan 24 10:48:37 ryzen kernel: [    0.711917] pci 0000:07:00.1: D0 power state depends on 0000:07:00.0
/var/log/syslog:Jan 24 10:48:37 ryzen kernel: [    1.105112] usb: port power management may be unreliable
/var/log/syslog:Jan 24 10:48:37 ryzen kernel: [    2.989190] raid6: using avx2x2 recovery algorithm
grep: /var/log/apcupsd*: No such file or directory

System bol teda vypnuty korektne?
Keby chybal riadok 5 vtedy by sa jednalo o tvrdy reset?
Co presne znamenaju posledne 3 stlpce?

Dakujem
« Poslední změna: 24. 01. 2021, 18:50:31 od Petr Krčmář »