Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 15 replies
  • Answers 1 answer
  • Subscribers 8 subscribers
  • Views 5520 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Root partition full again, after rebuilding

Remuflon

Exactly the same problem as last time: https://community.sophos.com/utm-firewall/f/general-discussion/127833/root-partition-is-full-cannot-update

I have started getting warning that the partition is 85% full.

Same as last time, my drive partitions are 0% for log disk, 1% for data disk.

df returns the following:

firewall:/ # df -h
Filesystem                        Size  Used Avail Use% Mounted on
/dev/sda6                         5.2G  4.0G  915M  82% /
udev                              3.9G   92K  3.9G   1% /dev
tmpfs                             3.9G   68K  3.9G   1% /dev/shm
/dev/sda1                         331M   16M  294M   5% /boot
/dev/sda5                         363G  4.7G  339G   2% /var/storage
/dev/sda7                         475G  1.5G  448G   1% /var/log
/dev/sda8                          19G  278M   18G   2% /tmp
/dev                              3.9G   92K  3.9G   1% /var/storage/chroot-clientlessvpn/dev
tmpfs                             3.9G     0  3.9G   0% /var/sec/chroot-httpd/dev/shm
/dev                              3.9G   92K  3.9G   1% /var/sec/chroot-openvpn/dev
/dev                              3.9G   92K  3.9G   1% /var/sec/chroot-ppp/dev
/dev                              3.9G   92K  3.9G   1% /var/sec/chroot-pppoe/dev
/dev                              3.9G   92K  3.9G   1% /var/sec/chroot-pptp/dev
/dev                              3.9G   92K  3.9G   1% /var/sec/chroot-pptpc/dev
/dev                              3.9G   92K  3.9G   1% /var/sec/chroot-restd/dev
tmpfs                             3.9G     0  3.9G   0% /var/storage/chroot-reverseproxy/dev/shm
/var/storage                      363G  4.7G  339G   2% /var/sec/chroot-snmp/var/storage
/var/log                          475G  1.5G  448G   1% /var/sec/chroot-snmp/var/log
/var/storage/chroot-smtp/spool    363G  4.7G  339G   2% /var/sec/chroot-httpd/var/spx/spool
/var/storage/chroot-smtp/spx      363G  4.7G  339G   2% /var/sec/chroot-httpd/var/spx/public/images/spx
tmpfs                             3.9G  222M  3.7G   6% /var/storage/chroot-http/tmp
/var/sec/chroot-afc/var/run/navl  5.2G  4.0G  915M  82% /var/storage/chroot-http/var/run/navl
tmpfs                             3.9G  100K  3.9G   1% /var/storage/chroot-smtp/tmp/ram
firewall:/ #

I have already removed almost all my log files, backups, and reset the postgres DB.

that got me from 85% down to 82%.  I'm still at a loss as to what the problem is, and this was never resolved last time either.  I ended up completely rebuilding the server last time, which I really do not want to do again.

Any thoughts?



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Vivek Jagad

    Hey Remouflon, I think Amodin's answer is correct.  You will find that problem mentioned here a myriad of times.  Show us the result of pasting the following onto the command line:

         version | head -2
         ll /var/up2date/sys

    I have lists of commands that you can paste en block at the command line to simplify the process of applying Up2Dates without running out of space in /.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Thanks for the response, but I don't have any up2date pending.  the folder is empty.

    And this is also true of the last time it happened 4 years ago.

  • 0 in reply to Vivek Jagad

    Vivek, what else is in the / partition?  I only know Up2Dates and backups.

    Remuflon, I'm sure you've tried rebooting...

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • +1 in reply to BAlfson

    Hey  includes patterns ,backup and storage and under storage it contains the following
    agent
     chroot-clientlessvpn
    chroot-ftp
    chroot-http
    chroot-pop3
    chroot-reverseproxy
    chroot-smtp
    cores
     lost+found
     pgsql
    pgsql92

    Thanks & Regards,
    _______________________________________________________________

    Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

    Log a Support Case | Sophos Service Guide
    Best Practices – Support Case  | Security Advisories 
    Compare Sophos next-gen Firewall | Fortune Favors the prepared
    Sophos Community | Product Documentation | Sophos Techvids | SMS
    If a post solves your question please use the 'Verify Answer' button.

  • 0 in reply to Vivek Jagad

    Thanks, Vivek!

    The other common problems I've seen are with /var/storage/cores and /var/storage/pgsql92.  What do you see in those directories, Remuflon?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Partition is full again now.

    # du -h /var/storage/cores
301M /var/storage/cores

# du -h /var/storage/pgsql92
4.0K /var/storage/pgsql92/backups
40K /var/storage/pgsql92/init
4.0K /var/storage/pgsql92/data/pg_xlog/archive_status
33M /var/storage/pgsql92/data/pg_xlog
116K /var/storage/pgsql92/data/pg_stat_tmp
456K /var/storage/pgsql92/data/global
12K /var/storage/pgsql92/data/pg_clog
6.4M /var/storage/pgsql92/data/base/12604
6.5M /var/storage/pgsql92/data/base/17181
6.3M /var/storage/pgsql92/data/base/12599
6.4M /var/storage/pgsql92/data/base/16772
6.9M /var/storage/pgsql92/data/base/16613
6.5M /var/storage/pgsql92/data/base/16392
7.3M /var/storage/pgsql92/data/base/17200
6.7M /var/storage/pgsql92/data/base/16519
6.4M /var/storage/pgsql92/data/base/1
6.7M /var/storage/pgsql92/data/base/16420
66M /var/storage/pgsql92/data/base
12K /var/storage/pgsql92/data/pg_multixact/offsets
12K /var/storage/pgsql92/data/pg_multixact/members
28K /var/storage/pgsql92/data/pg_multixact
12K /var/storage/pgsql92/data/pg_notify
20K /var/storage/pgsql92/data/pg_subtrans
4.0K /var/storage/pgsql92/data/pg_tblspc
4.0K /var/storage/pgsql92/data/pg_serial
4.0K /var/storage/pgsql92/data/pg_twophase
4.0K /var/storage/pgsql92/data/pg_snapshots
98M /var/storage/pgsql92/data
36K /var/storage/pgsql92/cfg
4.0K /var/storage/pgsql92/upgrade
99M /var/storage/pgsql92
#

  • 0 in reply to Remuflon

    I think I have a solution to this finally.  I don't know why I didn't try this before.

    I scheduled a maintenance window today.  I took down the firewall and booted up with GPARTED, I manually moved the partitions around, and I doubled the size of the SDA6 partition.

    Now, all is well with the world again.

    Note to anyone who is listening: the disk is 1TB.  It is about 0 % full.  Sophos installer creates a 5 GB partition and immediately puts 4.8 TB on it.  I tried creating a test machine in VMWARE and it immediately had this problem.  This is a defect in the installation.

    Anyway, manually moving the partitions around seems like it will be the solution.  I will report back in 6 months.

  • 0 in reply to Remuflon

    Thank you, this could prove useful to many visiting this thread !  

    Thanks & Regards,
    _______________________________________________________________

    Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

    Log a Support Case | Sophos Service Guide
    Best Practices – Support Case  | Security Advisories 
    Compare Sophos next-gen Firewall | Fortune Favors the prepared
    Sophos Community | Product Documentation | Sophos Techvids | SMS
    If a post solves your question please use the 'Verify Answer' button.

Unfiltered HTML