I can’t login due to my file-system being full. I found the main area with the large usage. Var/log is taking 99.5% of my var folder. On a full file-system scan Var/log is taking up 85% of disk use. File-system capacity is 36 gig. Temp is cleared after each boot.
What can I do to clean up any unnecessary files. I can only boot in safe mode and have limited navigation skills. To get scan results I booted a live-disc.
Opensuse 11.2 gnome 64 bit.
Have you booted from that liveCD and checked those log files?
After booting from a LiveCD, mount the root partition and
Post output of
ls -l /var/log
On 2010-11-25 08:06, the Dude abides wrote:
>
> I can’t login due to my file-system being full. I found the main area
> with the large usage. Var/log is taking 99.5% of my var folder. On a
> full file-system scan Var/log is taking up 85% of disk use. File-system
> capacity is 36 gig. Temp is cleared after each boot.
>
> What can I do to clean up any unnecessary files.
Look which file is exceedingly big. There will be something been logged
there many times, thousands of times. Find out what and report. Post a
sample in paste.opensuse.org (not all). Or here if it is just a few lines.
After you do that, you can perhaps compress or delete - but we need to see
the sample first.
> Opensuse 11.2 gnome 64 bit.
Updates are current?
–
Cheers / Saludos,
Carlos E. R.
(from 11.2 x86_64 “Emerald” at Telcontar)
Thanks for the starting points:
linux@linux:~> ls -l /var/log
total 636
-rw-r----- 1 root root 61 2010-11-25 07:51 acpid
drwx------ 5 root root 4096 2010-07-05 11:20 apparmor
drwx------ 2 root root 4096 2010-11-25 07:51 audit
-rw-r–r-- 1 root root 66941 2010-11-25 07:51 boot.kiwi
-rw-r----- 1 root root 0 2010-07-06 05:40 boot.log
-rw-r–r-- 1 root root 60030 2010-11-25 07:51 boot.msg
-rw-r–r-- 1 root root 870 2010-11-25 07:51 boot.omsg
-rw-r–r-- 1 root root 0 2010-07-06 05:50 config.log
drwxr-xr-x 2 root root 4096 2010-11-25 07:51 ConsoleKit
drwxr-xr-x 2 lp lp 4096 2010-07-05 14:02 cups
-rw------- 1 root root 32000 2010-07-06 05:50 faillog
-rw-r----- 1 root root 0 2010-07-06 05:40 firewall
drwxrwx–T 2 root gdm 4096 2010-11-25 07:51 gdm
drwx------ 2 root root 4096 2010-07-05 13:44 krb5
-rw-r–r-- 1 root tty 292000 2010-11-25 07:51 lastlog
-rw-r–r-- 1 root root 0 2010-11-25 07:51 localmessages
-rw-r----- 1 root root 189 2010-11-25 07:51 mail
-rw-r----- 1 root root 0 2010-07-06 05:40 mail.err
-rw-r----- 1 root root 189 2010-11-25 07:51 mail.info
-rw-r----- 1 root root 0 2010-07-06 05:40 mail.warn
-rw-r----- 1 root root 17542 2010-11-25 07:54 messages
-rw-r----- 1 root root 7219 2010-11-25 07:51 NetworkManager
drwxr-x— 2 news news 4096 2010-07-06 05:40 news
-rw-r–r-- 1 root root 0 2010-11-25 07:51 nscd.log
-rw-r–r-- 1 root root 0 2010-07-06 05:38 ntp
-rwxr-xr-x 1 root root 176 2010-11-25 07:53 PackageKit
-rw-r----- 1 root root 12790 2010-11-25 07:53 pk_backend_zypp
-rw-r–r-- 1 root root 339 2010-11-25 07:52 pm-powersave.log
drwxr-x— 2 root root 4096 2010-07-05 14:15 samba
drwxr-x— 2 root dialout 4096 2010-07-05 12:59 smpppd
-rw-r–r-- 1 root root 1180 2010-11-25 07:52 warn
-rw-r–r-- 1 root root 0 2010-11-25 07:51 wpa_supplicant.log
-rw-rw-r-- 1 root tty 8832 2010-11-25 08:00 wtmp
-rw-r–r-- 1 root root 54113 2010-11-25 07:59 Xorg.0.log
drwx------ 2 root root 4096 2010-07-05 13:30 YaST2
drwxr-xr-x 2 root root 4096 2010-07-05 22:24 zypp
-rw-r----- 1 root root 0 2010-07-06 05:50 zypper.log
Edits should be most up to date, it was after the updates I had no room on the file-system. What’s the best plan to proceed
On 2010-11-25 15:06, the Dude abides wrote:
>
> Thanks for the starting points:
>
> linux@linux:~> ls -l /var/log
> total 636
I don’t see any big file here - you said that “/var/log is taking 99.5%”.
It is not true.
Please investigate again and find the exact directory that has eaten the
space. Use mc.
–
Cheers / Saludos,
Carlos E. R.
(from 11.2 x86_64 “Emerald” at Telcontar)
I’m not sure how to show the scan in a terminal without being in safemode and out of the live disk, but if I use the disk usage analyzer graphically, the information that is being outputted is illustrating those numbers. Is there something I’m missing with using disk usage analyzer?
Carlos E. R. wrote:
> On 2010-11-25 15:06, the Dude abides wrote:
>>
>> Thanks for the starting points:
>>
>> linux@linux:~> ls -l /var/log
>> total 636
>
> I don’t see any big file here - you said that “/var/log is taking 99.5%”.
> It is not true.
>
Maybe big file is inside /var/log/“some directory”
> Please investigate again and find the exact directory that has eaten the
> space. Use mc.
>
–
Viljo
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
try:
cd /var/
du -h | grep M
this could take some time, also try with grep G
VampirD
Microsoft Windows is like air conditioning
Stops working when you open a window.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.15 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/
iEYEARECAAYFAkzunOwACgkQJQ+0ABWtaVlyMgCeL8pXEHtoCF+bPph8sm3wwZoH
TogAn0DgE8QxxK0UFu7ZqMFPxaiZIWqQ
=Oqc4
-----END PGP SIGNATURE-----
On 2010-11-25 18:06, the Dude abides wrote:
>
> I’m not sure how to show the scan in a terminal without being in
> safemode and out of the live disk,
Use mc.
> but if I use the disk usage analyzer
> graphically, the information that is being outputted is illustrating
> those numbers. Is there something I’m missing with using disk usage
> analyzer?
You haven’t posted any information that indicates where the disk space is lost.
–
Cheers / Saludos,
Carlos E. R.
(from 11.2 x86_64 “Emerald” at Telcontar)
Sorry I didn’t see to use Midnight commandar (mc). My results that seem larger than the other files are:
/etc 12288
/lib64 12288
/lost+found 16384
/tmp 36864
I’m confused if that is the case with tmp, because I thought I had it set up to clean up after each reboot. I also checked the var/log but I don’t know how to display the results in mc or really what it all means.
On 2010-11-25 19:06, the Dude abides wrote:
>
> Sorry I didn’t see to use Midnight commandar (mc). My results that seem
> larger than the other files are:
>
> /etc 12288
> /lib64 12288
> /lost+found 16384
> /tmp 36864
Look, you are supposed to find something several gigabytes in size! All
that is fiddlesticks. Crumbs. Nothing.
Plus, the numbers above are not sizes. The command ls -l does not show
directory sizes.
> I’m confused if that is the case with tmp, because I thought I had it
> set up to clean up after each reboot. I also checked the var/log but I
> don’t know how to display the results in mc or really what it all means.
It has a menu and help. Hint: choose show directory sizes in the menu. It
will take a looooong time.
When you find the one, enter it, look at the files, find what is way TOOOO
big. It has to be obvious. Then look at directories, show sizes again.
Repeat till you find it!
And when you do find it, tell us what it contains before deleting it. Hint: F3.
–
Cheers / Saludos,
Carlos E. R.
(from 11.2 x86_64 “Emerald” at Telcontar)
Thanks for your patience, for your sake I’m sorry for my lack of understanding. Is there a way to show my output/copy & paste?
Nonetheless after using the command option–show directory, the sizes I get are
/bin 7174117
/boot 11628k
/clickboot 1128k
/dev 266268k
/etc 57699
/home 49057k
/lib 152188k
/lib 64 20532
/media 34161m
/proc 131072 g
I looked in /proc and kcore is using 131072g
In /media/var is using 28890m
/media/var/log is using 28277m
/media/var/log/warn 20101124 is using 14115m
Is this the right track?
On 2010-11-25 20:36, the Dude abides wrote:
>
> Thanks for your patience, for your sake I’m sorry for my lack of
> understanding. Is there a way to show my output/copy & paste?
Yes, the mouse can copy the text.
Shift-left.click, drag the mouse, release. Go to an editor, Shift-middle.click.
For this to work in text mode, you have to start the service gpm before.
This is another question, I don’t have time before 21:06 to post.
> /proc 131072 g
>
> I looked in /proc and kcore is using 131072g
No, that’s a virtual filesystem. kcore is your memory.
> In /media/var is using 28890m
> /media/var/log is using 28277m
> /media/var/log/warn 20101124 is using 14115m
>
> Is this the right track?
Yes, that’s it. 14 gigabytes in warn is a lot. Now look inside (F3), there
will be a lot of repeated text. Post a sample.
–
Cheers / Saludos,
Carlos E. R.
(from 11.2 x86_64 “Emerald” at Telcontar)
I won’t be able to get back to my computer until later. Thanks you for all your help today.
Just asking: is this a regular home desktop you are using? I’d also be very interested about the content of /var/log/warn - and btw: why is /var/log mounted in /media?
On 2010-11-25 22:36, gropiuskalle wrote:
> - and btw: why is
> /var/log mounted in /media?
Wow. I must have been blind not to have seen that. Why indeed!? :-o
> In /media/var is using 28890m
> /media/var/log is using 28277m
> /media/var/log/warn 20101124 is using 14115m
Why “/media/var/log”?
What about “/var/log”, then?
–
Cheers / Saludos,
Carlos E. R.
(from 11.2 x86_64 “Emerald” at Telcontar)
Yes it is just used as a desktop. I’m not sure why var is mounted in / and I don’t understand the significance if it is mounted there. When I installed the distributions I used a guided partition and a duel boot with Ubuntu and Opensuse. I have three hard drives on this computer, maybe the file system is being read as media?
What is the best procedure to continue?
Is it best to have var mounted on it’s own partition?
Var is normally in root. also it is normally on the root partition thus is not “mounted” it is just a directory. In general var should not normally be on a separate partition. But even if it is you would still have a out of space problems if you don’t fix what is causing this big file.
Show us a sample of what in in this huge file so we can see why it is getting so huge. You can just delete it but if somthing is causing this we need to see a sample of the contents which should give a clue of why it is so big.
I’m not sure if this is too much or too little, with the file being so large it general crashes whatever program it is opening in. This is from the start of the file.
Here is a sample:
Nov 22 23:54:47 linux-icwg gdm-session-worker[2194]: pam_env(gdm:setcred): non-alphanumeric key ‘alias aumix=padsp aumix’ in /etc/environment’, ignoring
bash: syntax error near unexpected token (' linux@linux:~> Nov 22 23:54:47 linux-icwg gdm-session-worker[2194]: pam_env(gdm:setcred): non-alphanumeric key 'alias sox=padsp sox' in /etc/environment', ignoring bash: syntax error near unexpected token (’
linux@linux:~> Nov 22 23:54:47 linux-icwg gdm-session-worker[2194]: pam_env(gdm:setcred): non-alphanumeric key ‘alias timidity=timidity -Oe’ in /etc/environment’, ignoring
bash: syntax error near unexpected token `(’
linux@linux:~> Nov 22 23:54:48 linux-icwg console-kit-daemon[1223]: WARNING: Couldn’t read /proc/2631/environ: Failed to open file ‘/proc/2631/environ’: No such file or directory
Nov 22 23:54:48 linux-icwg seahorse-agent[2454]: GConf error:#012 Failed to contact configuration server; some possible causes are that you need to enable TCP/IP networking for ORBit, or you have stale NFS locks due to a system crash. See GConf configuration system for information. (Details - 1: Could not send message to GConf daemon: Connection is closed)
Nov 22 23:54:48 linux-icwg seahorse-agent[2454]: GConf error:#012 Failed to contact configuration server; some possible causes are that you need to enable TCP/IP networking for ORBit, or you have stale NFS locks due to a system crash. See GConf configuration system for information. (Details - 1: Could not send message to GConf daemon: Connection is closed)
Nov 22 23:54:50 linux-icwg gdm-simple-greeter[11896]: GLib-GObject-CRITICAL: g_param_spec_flags: assertionG_TYPE_IS_FLAGS (flags_type)' failed If 'Nov' is not a typo you can use command-not-found to lookup the package that contains it, like this: cnf Nov linux@linux:~> Nov 22 23:54:50 linux-icwg gdm-simple-greeter[11896]: GLib-GObject-CRITICAL: g_object_class_install_property: assertionG_IS_PARAM_SPEC (pspec)’ failed
Nov 22 23:54:51 linux-icwg gdm-simple-greeter[11896]: WARNING: Failed to register client: Message did not receive a reply (timeout by message bus)
Nov 22 23:54:51 linux-icwg gdm-simple-greeter[11896]: WARNING: Unable to register client with session manager
Nov 22 23:54:51 linux-icwg pulseaudio[11921]: main.c: Unable to contact D-Bus: org.freedesktop.DBus.Error.NoServer: Failed to connect to socket /tmp/dbus-he89UFflep: Connection refused
Nov 22 23:54:52 linux-icwg auditd[1393]: Error sending signal_info request (Operation not supported)
Nov 22 23:54:52 linux-icwg bonobo-activation-server (bethany-12394): could not associate with desktop session: Failed to connect to socket /tmp/dbus-xl4xnxmJ0Y: Connection refusedov 22 23:54:52 linux-icwg rpcbind: rpcbind terminating on signal. Restart with “rpcbind -w”
Nov 23 06:41:55 linux-icwg kernel: 11.733705] nf_conntrack version 0.5.0 (16384 buckets, 65536 max)
Nov 23 06:41:59 linux-icwg kernel: 20.623347] [Firmware Bug]: powernow-k8: No PSB or ACPI _PSS objects
Nov 23 06:42:13 linux-icwg kernel: 34.532713] martian source 255.255.255.255 from 192.168.2.2, on dev eth0
Nov 23 06:42:13 linux-icwg kernel: 34.532721] ll header: ff:ff:ff:ff:ff:ff:00:12:17:ca:65:04:08:00
Nov 23 06:42:14 linux-icwg gnome-session[1503]: WARNING: Application ‘metacity.desktop’ failed to register before timeout
Nov 23 06:42:14 linux-icwg rtkit-daemon[2088]: Failed to make ourselves RT: Invalid argument
Nov 23 06:42:14 linux-icwg gdm-simple-greeter[2077]: GLib-GObject-CRITICAL: g_param_spec_flags: assertionG_TYPE_IS_FLAGS (flags_type)' failed bash: syntax error near unexpected token(’
:
linux@linux:~> Nov 23 06:42:14 linux-icwg gdm-simple-greeter[2077]: GLib-GObject-CRITICAL: g_object_class_install_property: assertion `G_IS_PARAM_SPEC (pspec)’ failed
> Nov 23 06:42:15 linux-icwg gdm-simple-greeter[2077]: WARNING: Unable to parse history: (null) 1#012
> Nov 23 06:42:17 linux-icwg kernel: 38.538694] martian source 255.255.255.255 from 192.168.2.2, on dev eth0
> Nov 23 06:42:17 linux-icwg kernel: 38.538703] ll header: ff:ff:ff:ff:ff:ff:00:12:17:ca:65:04:08:00
> Nov 23 06:42:18 linux-icwg if-up.d/21-dhcpcd-hook-samba: No dhcpcd info nor dhclient leases file found for eth0.
> Nov 23 07:12:03 linux-icwg gdm-session-worker[2083]: pam_env(gdm:setcred): non-alphanumeric key ‘alias aumix=padsp aumix’ in /etc/environment’, ignoring
> Nov 23 07:12:03 linux-icwg gdm-session-worker[2083]: pam_env(gdm:setcred): non-alphanumeric key ‘alias sox=padsp sox’ in /etc/environment’, ignoring
> Nov 23 07:12:03 linux-icwg gdm-session-worker[2083]: pam_env(gdm:setcred): non-alphanumeric key ‘alias timidity=timidity -Oe’ in /etc/environment’, ignoring
> Nov 23 07:12:03 linux-icwg checkproc: checkproc: can not get session id for process 2454!
> Nov 23 07:12:03 linux-icwg seahorse-agent[3897]: seahorse_agent_cache_init: assertion GPG_IS_OK (err)' failed bash: syntax error near unexpected token (’
linux@linux:~> Nov 23 07:12:04 linux-icwg gnome-session[3820]: WARNING: Could not parse desktop file /etc/xdg/autostart/ksmolt-autostart.desktop: Invalid key name: X-KDE-autostart-condition$e]
If ‘Nov’ is not a typo you can use command-not-found to lookup the package that contains it, like this:
cnf Nov
linux@linux:~> Nov 23 07:12:04 linux-icwg gnome-session[3820]: WARNING: could not read /etc/xdg/autostart/ksmolt-autostart.desktop
If ‘Nov’ is not a typo you can use command-not-found to lookup the package that contains it, like this:
cnf Nov
linux@linux:~> Nov 23 07:12:14 linux-icwg gnome-session[3820]: WARNING: Application ‘gnome-wm.desktop’ failed to register before timeout
If ‘Nov’ is not a typo you can use command-not-found to lookup the package that contains it, like this:
cnf Nov
linux@linux:~> Nov 23 07:12:20 linux-icwg pulseaudio[4091]: pid.c: Daemon already running.
If ‘Nov’ is not a typo you can use command-not-found to lookup the package that contains it, like this:
cnf Nov
linux@linux:~> Nov 23 09:37:10 linux-icwg kernel: [10532.096280] sd 6:0:0:0: [sdd] Assuming drive cache: write through
If ‘Nov’ is not a typo you can use command-not-found to lookup the package that contains it, like this:
cnf Nov
linux@linux:~> Nov 23 09:37:10 linux-icwg kernel: [10532.100270] sd 6:0:0:0: [sdd] Assuming drive cache: write through
If ‘Nov’ is not a typo you can use command-not-found to lookup the package that contains it, like this:
cnf Nov
linux@linux:~> Nov 23 09:37:10 linux-icwg kernel: [10532.103309] sd 6:0:0:0: [sdd] Assuming drive cache: write through
If ‘Nov’ is not a typo you can use command-not-found to lookup the package that contains it, like this:
cnf Nov
linux@linux:~> Nov 23 09:53:35 linux-icwg gnome-keyring-daemon[3807]: no volume registered at: /media/UDISK
If ‘Nov’ is not a typo you can use command-not-found to lookup the package that contains it, like this:
cnf Nov
linux@linux:~> Nov 23 10:04:51 linux-icwg gdm-session-worker[2083]: pam_env(gdm:setcred): non-alphanumeric key ‘alias aumix=padsp aumix’ in /etc/environment’, ignoring
bash: syntax error near unexpected token (' linux@linux:~> Nov 23 10:04:51 linux-icwg gdm-session-worker[2083]: pam_env(gdm:setcred): non-alphanumeric key 'alias sox=padsp sox' in /etc/environment', ignoring bash: syntax error near unexpected token (’
linux@linux:~> Nov 23 10:04:51 linux-icwg gdm-session-worker[2083]: pam_env(gdm:setcred): non-alphanumeric key ‘alias timidity=timidity -Oe’ in /etc/environment’, ignoring
bash: syntax error near unexpected token `(’
linux@linux:~> Nov 23 10:04:51 linux-icwg console-kit-daemon[1224]: WARNING: Couldn’t read /proc/4093/environ: Failed to open file ‘/proc/4093/environ’: No such file or directory
Nov 23 10:04:52 linux-icwg seahorse-agent[3897]: GConf error:#012 Failed to contact configuration server; some possible causes are that you need to enable TCP/IP networking for ORBit, or you have stale NFS locks due to a system crash. See GConf configuration system for information. (Details - 1: Could not send message to GConf daemon: Connection is closed)
Nov 23 10:04:52 linux-icwg seahorse-agent[3897]: GConf error:#012 Failed to contact configuration server; some possible causes are that you need to enable TCP/IP networking for ORBit, or you have stale NFS locks due to a system crash. See GConf configuration system for information. (Details - 1: Could not send message to GConf daemon: Connection is closed)
Nov 23 10:04:53 linux-icwg gdm-simple-greeter[7313]: GLib-GObject-CRITICAL: g_param_spec_flags: assertionG_TYPE_IS_FLAGS (flags_type)' If 'Nov' is not a typo you can use command-not-found to lookup the package that contains it, like this: cnf Nov linux@linux:~> Nov 23 10:04:53 linux-icwg gdm-simple-greeter[7313]: GLib-GObject-CRITICAL: g_object_class_install_property: assertionG_IS_PARAM_SPEC (pspec)’ failed
Nov 23 10:04:55 linux-icwg gdm-simple-greeter[7313]: WARNING: Unable to parse history: (null) 1#012
Nov 23 10:04:55 linux-icwg auditd[1405]: Error sending signal_info request (Operation not supported)
Nov 23 10:04:56 linux-icwg rpcbind: rpcbind terminating on signal. Restart with “rpcbind -w”
Nov 23 15:58:
Nov 23 15:58:02 linux-icwg kernel: 20.313087] nf_conntrack version 0.5.0 (16384 buckets, 65536 max)
Nov 23 15:58:06 linux-icwg gdm-simple-greeter[1689]: GLib-GObject-CRITICAL: g_param_spec_flags: assertionG_TYPE_IS_FLAGS (flags_type)' failed bash: syntax error near unexpected token(’
linux@linux:~> Nov 23 15:58:06 linux-icwg rtkit-daemon[1747]: Failed to make ourselves RT: Invalid argument
If ‘Nov’ is not a typo you can use command-not-found to lookup the package that contains it, like this:
cnf Nov
linux@linux:~> Nov 23 15:58:06 linux-icwg gdm-simple-greeter[1689]: GLib-GObject-CRITICAL: g_object_class_install_property: assertion `G_IS_PARAM_SPEC (pspec)’ failed
> Nov 23 15:58:07 linux-icwg gdm-simple-greeter[1689]: WARNING: Unable to parse history:
> Nov 23 15:58:14 linux-icwg kernel: 31.530581] martian source 255.255.255.255 from 192.168.2.2, on dev eth0
> Nov 23 15:58:14 linux-icwg kernel: 31.530589] ll header: ff:ff:ff:ff:ff:ff:00:12:17:ca:65:04:08:00
> Nov 23 15:58:18 linux-icwg kernel: 35.537041] martian source 255.255.255.255 from 192.168.2.2, on dev eth0
> Nov 23 15:58:18 linux-icwg kernel: 35.537050] ll header: ff:ff:ff:ff:ff:ff:00:12:17:ca:65:04:08:00
> Nov 23 15:58:19 linux-icwg if-up.d/21-dhcpcd-hook-samba: No dhc