[opensuse] Re: Why am I getting 14.6G zypper.log files?
On Wed, 01 Apr 2009 20:10:17 +0200, Carlos E. R. wrote:
I guess that if your partition is already filled, rotating a 10GiB logfile, ie, compressing it, will pull the computer down somehow or another >:-p
Heh, yeah, that could be a problem. :-) But if the log is rotated frequently enough by default and the oldest revisions drop off, the problem might also have gone undiscovered for a bit longer (one could make that argument). Jim -- Jim Henderson Please keep on-topic replies on the list so everyone benefits -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wednesday, 2009-04-01 at 19:22 -0000, Jim Henderson wrote:
On Wed, 01 Apr 2009 20:10:17 +0200, Carlos E. R. wrote:
I guess that if your partition is already filled, rotating a 10GiB logfile, ie, compressing it, will pull the computer down somehow or another >:-p
Heh, yeah, that could be a problem. :-)
But if the log is rotated frequently enough by default and the oldest revisions drop off, the problem might also have gone undiscovered for a bit longer (one could make that argument).
I think some people reported that the huge growth occurred in a day. With so fast a growth, there is little you can do, except stopping the application and removing the offending file. Compressing a file on a full partition is impossible. Logrotate happens once a day, I don't know if it can be increased. - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) iEYEARECAAYFAknT7PUACgkQtTMYHG2NR9UPqwCfSO1sgau3oGQqUMOzoKYwc544 i2IAn10wpkuJVlOfeOgFx1BA77tB4txO =EYUc -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Thursday 02 April 2009 00:38:36 Carlos E. R. wrote:
Logrotate happens once a day, I don't know if it can be increased.
Of course it can. It's run from cron, so you could have it run once per minute if you like It's better to fix the actual problem though. If all you ever do with logs is delete them, there is little point in logging in the first place Anders -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thursday, 2009-04-02 at 00:48 +0200, Anders Johansson wrote:
On Thursday 02 April 2009 00:38:36 Carlos E. R. wrote:
Logrotate happens once a day, I don't know if it can be increased.
Of course it can. It's run from cron, so you could have it run once per minute if you like
Not really, or not directly. It is a job in /etc/cron.daily/, so it could be moved to /etc/cron.hourly/, I suppose - except that an update somehow (yast, zypper) could reinstall it again, and we'd have two jobs, one hourly and one hourly.
It's better to fix the actual problem though. If all you ever do with logs is delete them, there is little point in logging in the first place
Of course :-) - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) iEYEARECAAYFAknT/MIACgkQtTMYHG2NR9XMgwCdG14l6mXiB3bOxEYKsaWJ/UDU AcEAnRU2gjf3stZNR9sOd3yXArAohLqT =8+z6 -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Carlos E. R. wrote:
On Thursday, 2009-04-02 at 00:48 +0200, Anders Johansson wrote:
On Thursday 02 April 2009 00:38:36 Carlos E. R. wrote:
Logrotate happens once a day, I don't know if it can be increased.
Of course it can. It's run from cron, so you could have it run once per minute if you like
Not really, or not directly. It is a job in /etc/cron.daily/, so it could be moved to /etc/cron.hourly/, I suppose - except that an update somehow (yast, zypper) could reinstall it again, and we'd have two jobs, one hourly and one hourly.
I personally dislike the way some of these jobs have been "hidden" by YaST/openSUSE - on my production systems (where I archive the logs), I always just delete /etc/cron.daily/logrotate and add my own. /Per -- Per Jessen, Zürich (14.8°C) -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thursday, 2009-04-02 at 15:26 +0200, Per Jessen wrote:
Not really, or not directly. It is a job in /etc/cron.daily/, so it could be moved to /etc/cron.hourly/, I suppose - except that an update somehow (yast, zypper) could reinstall it again, and we'd have two jobs, one hourly and one hourly.
I personally dislike the way some of these jobs have been "hidden" by YaST/openSUSE - on my production systems (where I archive the logs), I always just delete /etc/cron.daily/logrotate and add my own.
But an update (YOU) could reinstall it. - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) iEYEARECAAYFAknUxSsACgkQtTMYHG2NR9XBdACeJEoTnbBGehqBQhA5DEeiXI8y XwUAoI8iNDIzsmaH4sxb+nIRgxFFgyzH =G3m0 -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Carlos E. R. wrote:
On Thursday, 2009-04-02 at 15:26 +0200, Per Jessen wrote:
Not really, or not directly. It is a job in /etc/cron.daily/, so it could be moved to /etc/cron.hourly/, I suppose - except that an update somehow (yast, zypper) could reinstall it again, and we'd have two jobs, one hourly and one hourly.
I personally dislike the way some of these jobs have been "hidden" by YaST/openSUSE - on my production systems (where I archive the logs), I always just delete /etc/cron.daily/logrotate and add my own.
But an update (YOU) could reinstall it.
Yep, but I don't use that on production systems. -- Per Jessen, Zürich (14.9°C) -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thursday, 2009-04-02 at 16:22 +0200, Per Jessen wrote:
Carlos E. R. wrote:
I personally dislike the way some of these jobs have been "hidden" by YaST/openSUSE - on my production systems (where I archive the logs), I always just delete /etc/cron.daily/logrotate and add my own.
But an update (YOU) could reinstall it.
Yep, but I don't use that on production systems.
Surely you do install security patches; if there is one for "logrotate" and you forget that it is one you have modified locally, your modification will be undone. - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) iEYEARECAAYFAknU0qgACgkQtTMYHG2NR9WMtACfRSW9B71i+hTqbAQNJC+C6KyA K4UAnA7gmRt4rnH8A/8laH8zInzt3KJN =oXSR -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Carlos E. R. wrote:
But an update (YOU) could reinstall it.
Yep, but I don't use that on production systems.
Surely you do install security patches;
Yep, but never automatically and always highly selectively.
if there is one for "logrotate" and you forget that it is one you have modified locally, your modification will be undone.
Chances of me modifying logrotate for security reasons are extremely small to nil. You're generally right about the risk of course, but I maintain my own systems personally so I am in full control. /Per -- Per Jessen, Zürich (15.4°C) -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thursday, 2009-04-02 at 18:15 +0200, Per Jessen wrote:
Chances of me modifying logrotate for security reasons are extremely small to nil.
You're generally right about the risk of course, but I maintain my own systems personally so I am in full control.
I know, I know. But, in general, you know that modifying a file (not a config file) that can be replaced by an update sometime, is a risk. You have to remember that such and such package should not be updated, and if you forget, problems come. You may trust yourself (I don't trust me), but you may be out on a holiday, and your substitute forgets :-p - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) iEYEARECAAYFAknU+50ACgkQtTMYHG2NR9X1LwCeKA6dGkuKVbhERsEsD4tkNzAk o7YAn1nRnA28uEf/LyojfkdDszs/0SFl =HWgD -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (4)
-
Anders Johansson -
Carlos E. R. -
Jim Henderson -
Per Jessen