[tech] Re-applying motsugo /var space mitigation

[Nick Bannon]

On Sun, Jul 05, 2020 at 09:14:25AM +0800, James Arcus wrote:
> Hi all,After the upgrade of motsugo to Debian Buster, parts of the
> logrotate config had bee overridden by new files in /etc/logrotate.d,
> causing some logs to grow very large. This led /var to fill up about 2
> days ago.I have changed the new /etc/logrotate.d/btmp to rotate `btmp`
> weekly (instead of monthly) and to do compression. For those who don't
> know, `btmp` stores records of all logins failed over SSH. For motsugo,
> being directly accessible to the internet, this file would grow to many
> gigabytes quite quickly.Hopefully this helps.Cheers,James [MPT]

Thanks [MPT] and [MSH] for that!

https://tracker.debian.org/pkg/fail2ban protects us a bit, but with an
upgrade and perhaps a config tweak or two, it could do more. Hoping to
be running the buster or bullseye version on murasoi, soon.

Nick.

-- 
   Nick Bannon   | "I made this letter longer than usual because
nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal