Core dumps in Linux

https://www.baeldung.com/linux/managing-core-dumps https://wiki.archlinux.org/title/Core_dump

Core dumps in systems with systemd are managed by the service systemd-coredump. This is a service that acquires the core dump, then processes it to extract metadata out of it. It then stores this information under /var/lib/systemd/coredump/.

We can check if the system is configured by checking the kernel attribute kernel.core_pattern

$ sysctl -n kernel.core_pattern
|/lib/systemd/systemd-coredump %P %u %g %s %t 9223372036854775808 %h

To remove dump file size limits in the current shells, run ulimit -c unlimited

$ ulimit -c unlimited
$ ulimit -a | grep core
core file size              (blocks, -c) unlimited

To list all core dumps:

$ coredumpctl list

To identify the corersponding dump, try to match it with PID, name or path of the executable, or a journalctl predicate

$ coredumpctl info <match>

To extract a core dump file from a crashed process:

$ coredumpctl dump <match> --output=core.dump

To run a debug Session with coredumpctl:

$ coredumpctl debug <match>