RE: [cobalt-users] HELP! /var full and can't login...

["Todd Kirk" <tkirk@xxxxxxxxxxxxxx>]

Hello...

> On Monday 02 September 2002 00:24, Dan Spangenberg wrote:
> > Thanks for all the info, I am going to do the fix late 
> tomorrow evening.
> >
> > One other tidbit of info I found was a procedure to 
> possibly prevent this
> > from occurring in the future.
> > It was suggested that one should put a 100K junk file in 
> /var that is owned
> > by admin and not su. In the event of a disk full error, 
> admin would be able
> > to go in and delete it, thereby freeing up enough space to 
> login as su.
> >
> > Will this work?  If so it seems like a nice bit of 
> insurance. Granted,
> > active monitoring would be preferred, but I like the idea 
> of a "back door".
> >
> 
> [root /root]# ls / -l | grep var
> drwxr-xr-x  20 root     root         1024 Jul 27 08:29 var
> The directory is uid gid 0, admin can't write to the directory.
> 
> /etc/cobalt/swatch/fs.conf has a parameter 
> warn2 = no
> changing this to
> warn2 - yes
> should send you an email at 90% instead of 95% might help.
> Else you could write your own script to run in a cron job 
> that checks the file 
> system.

Yeah the email at 90% is great in theory, only in my experience the
email never got tome because the partition filled up too quickly, and
without the 'backdoor' of a 100K file owned by admin to delete I had to
down the server and remove the HDD into another linux box. I have since
moved my logs & spool directories to another partition.

regards,
 
Todd Kirk