This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Root partition full again, after rebuilding

Exactly the same problem as last time: https://community.sophos.com/utm-firewall/f/general-discussion/127833/root-partition-is-full-cannot-update

I have started getting warning that the partition is 85% full.

Same as last time, my drive partitions are 0% for log disk, 1% for data disk.

df returns the following:

firewall:/ # df -h
Filesystem                        Size  Used Avail Use% Mounted on
/dev/sda6                         5.2G  4.0G  915M  82% /
udev                              3.9G   92K  3.9G   1% /dev
tmpfs                             3.9G   68K  3.9G   1% /dev/shm
/dev/sda1                         331M   16M  294M   5% /boot
/dev/sda5                         363G  4.7G  339G   2% /var/storage
/dev/sda7                         475G  1.5G  448G   1% /var/log
/dev/sda8                          19G  278M   18G   2% /tmp
/dev                              3.9G   92K  3.9G   1% /var/storage/chroot-clientlessvpn/dev
tmpfs                             3.9G     0  3.9G   0% /var/sec/chroot-httpd/dev/shm
/dev                              3.9G   92K  3.9G   1% /var/sec/chroot-openvpn/dev
/dev                              3.9G   92K  3.9G   1% /var/sec/chroot-ppp/dev
/dev                              3.9G   92K  3.9G   1% /var/sec/chroot-pppoe/dev
/dev                              3.9G   92K  3.9G   1% /var/sec/chroot-pptp/dev
/dev                              3.9G   92K  3.9G   1% /var/sec/chroot-pptpc/dev
/dev                              3.9G   92K  3.9G   1% /var/sec/chroot-restd/dev
tmpfs                             3.9G     0  3.9G   0% /var/storage/chroot-reverseproxy/dev/shm
/var/storage                      363G  4.7G  339G   2% /var/sec/chroot-snmp/var/storage
/var/log                          475G  1.5G  448G   1% /var/sec/chroot-snmp/var/log
/var/storage/chroot-smtp/spool    363G  4.7G  339G   2% /var/sec/chroot-httpd/var/spx/spool
/var/storage/chroot-smtp/spx      363G  4.7G  339G   2% /var/sec/chroot-httpd/var/spx/public/images/spx
tmpfs                             3.9G  222M  3.7G   6% /var/storage/chroot-http/tmp
/var/sec/chroot-afc/var/run/navl  5.2G  4.0G  915M  82% /var/storage/chroot-http/var/run/navl
tmpfs                             3.9G  100K  3.9G   1% /var/storage/chroot-smtp/tmp/ram
firewall:/ #

I have already removed almost all my log files, backups, and reset the postgres DB.

that got me from 85% down to 82%.  I'm still at a loss as to what the problem is, and this was never resolved last time either.  I ended up completely rebuilding the server last time, which I really do not want to do again.

Any thoughts?



This thread was automatically locked due to age.
Parents Reply
  • Thanks, Vivek!

    The other common problems I've seen are with /var/storage/cores and /var/storage/pgsql92.  What do you see in those directories, Remuflon?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • Partition is full again now.

    # du -h /var/storage/cores
    301M /var/storage/cores
    
    # du -h /var/storage/pgsql92
    4.0K /var/storage/pgsql92/backups
    40K /var/storage/pgsql92/init
    4.0K /var/storage/pgsql92/data/pg_xlog/archive_status
    33M /var/storage/pgsql92/data/pg_xlog
    116K /var/storage/pgsql92/data/pg_stat_tmp
    456K /var/storage/pgsql92/data/global
    12K /var/storage/pgsql92/data/pg_clog
    6.4M /var/storage/pgsql92/data/base/12604
    6.5M /var/storage/pgsql92/data/base/17181
    6.3M /var/storage/pgsql92/data/base/12599
    6.4M /var/storage/pgsql92/data/base/16772
    6.9M /var/storage/pgsql92/data/base/16613
    6.5M /var/storage/pgsql92/data/base/16392
    7.3M /var/storage/pgsql92/data/base/17200
    6.7M /var/storage/pgsql92/data/base/16519
    6.4M /var/storage/pgsql92/data/base/1
    6.7M /var/storage/pgsql92/data/base/16420
    66M /var/storage/pgsql92/data/base
    12K /var/storage/pgsql92/data/pg_multixact/offsets
    12K /var/storage/pgsql92/data/pg_multixact/members
    28K /var/storage/pgsql92/data/pg_multixact
    12K /var/storage/pgsql92/data/pg_notify
    20K /var/storage/pgsql92/data/pg_subtrans
    4.0K /var/storage/pgsql92/data/pg_tblspc
    4.0K /var/storage/pgsql92/data/pg_serial
    4.0K /var/storage/pgsql92/data/pg_twophase
    4.0K /var/storage/pgsql92/data/pg_snapshots
    98M /var/storage/pgsql92/data
    36K /var/storage/pgsql92/cfg
    4.0K /var/storage/pgsql92/upgrade
    99M /var/storage/pgsql92
    #

  • I think I have a solution to this finally.  I don't know why I didn't try this before.

    I scheduled a maintenance window today.  I took down the firewall and booted up with GPARTED, I manually moved the partitions around, and I doubled the size of the SDA6 partition.

    Now, all is well with the world again.

    Note to anyone who is listening: the disk is 1TB.  It is about 0 % full.  Sophos installer creates a 5 GB partition and immediately puts 4.8 TB on it.  I tried creating a test machine in VMWARE and it immediately had this problem.  This is a defect in the installation.

    Anyway, manually moving the partitions around seems like it will be the solution.  I will report back in 6 months.

  • Thank you, this could prove useful to many visiting this thread !  

    Thanks & Regards,
    _______________________________________________________________

    Vivek Jagad | Team Lead, Global Support & Services 

    Log a Support Case | Sophos Service Guide
    Best Practices – Support Case


    Sophos Community | Product Documentation | Sophos Techvids | SMS
    If a post solves your question please use the 'Verify Answer' button.