Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 12 replies
  • Subscribers 7 subscribers
  • Views 5447 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Root partition is full, cannot update

Remuflon

I'm right back in the same mess I had a few years ago.  I rebuilt my UTM server, and now we are back at 100% disk full again.

This was my previous thread: https://community.sophos.com/utm-firewall/f/general-discussion/111308/root-partition-90-full

/var/up2date/sys is empty.

We have another SWAP file just like last time.  It is date is from 2019 and it's 3.2 G.

I have deleted all the log files I could, and ran /etc/init.d/postgresql92 rebuild

No change.  The disk is almost empty (1%) but UTM show 93% full and I cannot apply any updates.

Again, my up2date folders are empty.

firewall:/ # df -h
Filesystem                        Size  Used Avail Use% Mounted on
/dev/sda6                         5.2G  4.6G  377M  93% /
udev                              3.9G   80K  3.9G   1% /dev
tmpfs                             3.9G   68K  3.9G   1% /dev/shm
/dev/sda1                         331M   16M  295M   5% /boot
/dev/sda5                         363G  4.4G  339G   2% /var/storage
/dev/sda7                         475G  1.6G  448G   1% /var/log
/dev/sda8                          19G  148M   18G   1% /tmp
/dev                              3.9G   80K  3.9G   1% /var/storage/chroot-clientlessvpn/dev
tmpfs                             3.9G     0  3.9G   0% /var/sec/chroot-httpd/dev/shm
/dev                              3.9G   80K  3.9G   1% /var/sec/chroot-openvpn/dev
/dev                              3.9G   80K  3.9G   1% /var/sec/chroot-ppp/dev
/dev                              3.9G   80K  3.9G   1% /var/sec/chroot-pppoe/dev
/dev                              3.9G   80K  3.9G   1% /var/sec/chroot-pptp/dev
/dev                              3.9G   80K  3.9G   1% /var/sec/chroot-pptpc/dev
/dev                              3.9G   80K  3.9G   1% /var/sec/chroot-restd/dev
tmpfs                             3.9G     0  3.9G   0% /var/storage/chroot-reverseproxy/dev/shm
/var/storage                      363G  4.4G  339G   2% /var/sec/chroot-snmp/var/storage
/var/log                          475G  1.6G  448G   1% /var/sec/chroot-snmp/var/log
/var/storage/chroot-smtp/spool    363G  4.4G  339G   2% /var/sec/chroot-httpd/var/spx/spool
/var/storage/chroot-smtp/spx      363G  4.4G  339G   2% /var/sec/chroot-httpd/var/spx/public/images/spx
tmpfs                             3.9G  100K  3.9G   1% /var/storage/chroot-smtp/tmp/ram
tmpfs                             3.9G  103M  3.8G   3% /var/storage/chroot-http/tmp
/var/sec/chroot-afc/var/run/navl  5.2G  4.6G  377M  93% /var/storage/chroot-http/var/run/navl
firewall:/ #



This thread was automatically locked due to age.
  • 0 

    firewall:/var/storage # ls -lh
total 3.1G
drwxr-xr-x  5 root     root     4.0K Jul  3  2019 agent
drwxr-xr-x 10 root     root     4.0K Aug 22  2013 chroot-clientlessvpn
drwxr-xr-x  8 root     root     4.0K Mar  8  2019 chroot-ftp
drwxr-xr-x 12 root     root     4.0K Jul 13  2020 chroot-http
drwxr-xr-x  9 root     root     4.0K Apr  5  2019 chroot-pop3
drwxr-xr-x 10 root     root     4.0K Jul 13  2020 chroot-reverseproxy
drwxr-xr-x 15 root     root     4.0K May 17 10:19 chroot-smtp
drwx------  2 root     root     4.0K May 17 10:44 cores
drwx------  2 root     root      16K Mar  8  2019 lost+found
drwxr-x---  7 postgres postgres 4.0K Mar  8  2019 pgsql
drwxr-x---  7 postgres postgres 4.0K Mar  8  2019 pgsql92
-rw-r-----  1 root     root     3.0G Mar  8  2019 swapfile
firewall:/var/storage #

  • 0 in reply to Remuflon

    Can I safely delete "swapfile"?

  • FormerMember
    0 FormerMember

    Hi ,

    Thanks for reaching out to the Community! 

    Is web caching turned on? Go to Web Protection > Filtering Options > Misc > Web Caching. 

    I'd not touch the swap file. :) 

    PS: Even though the web caching is turned off, try to clear the cache. Probably you had it turned on at some point in the past.

    Thanks,

  • FormerMember
    0 FormerMember in reply to Remuflon

    Hi ,

    Could you please post a screenshot from Logging & Reporting > Log Settings? 

    Thanks,

  • FormerMember
    0 FormerMember in reply to Remuflon

    Hi ,

    Thanks for the screenshot. 

    As per our conversation over personal messages, you could try to change the log retention period by changing the value from the drop-down. This will purge old logs on the next log cleanup cycle. 

    Thanks,

  • 0 in reply to FormerMember

    Update:  I managed to find a gig of data I could delete, and I am now able to complete the update.

    However, this 5 Gig swap partition appears to me to be a chronic problem that continues to come back and bite people.

    Thanks for your help and I would like to keep investigating this to come up with a permanent solution.

  • 0 in reply to Remuflon

    How big is your hard drive?  It looks like it's too small and should be replaced.

    Not sure why you created a large swapfile.  You can get it down to 2GB (or 1 - don't remember) with

    cc set settings extra_swap 1

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    I did not create the swapfile, Sophos did.  Also, my drive is 300 gigs and is less than 1% full.

    All the space is used up in a tiny 5 gig partition that the sophos installer created.  That's where the problem is.

    I will investigate the cc command you mentioned, thanks.

    P.S. this same problem has occurred on other UTM builds I set up.

Unfiltered HTML