lsof-unlinked

#!/usr/bin/env bash
# Note: need bash for the >() redirection, also for set -o pipefail

set -euo pipefail

if [ "$(id -u)" -ne 0 ]; then
    echo "Warning: not running as root, some files may be missing." >&2
fi

# list all open files (but not mapped files) that have been unlinked
# filter out 'lsof: no pwd entry for UID ' spewed on machines with unprivileged LXC containers
# sort by last column, the filename
lsof +L1 2> >(grep -v "^lsof: no pwd entry for UID ") | sort -k 7n