Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 2280656

Summary: Controller disks fill up with logs
Product: Red Hat OpenStack Reporter: phalmos
Component: tripleo-ansibleAssignee: Julia Kreger <jkreger>
Status: CLOSED ERRATA QA Contact: Joe H. Rahme <jhakimra>
Severity: high Docs Contact:
Priority: high    
Version: 17.1 (Wallaby)CC: bshephar, cjanisze, gregraka, jhakimra, jkreger, jparoly, mariel, mburns, morazi, pweeks, ramishra, sbaker
Target Milestone: z4Keywords: Triaged
Target Release: 17.1Flags: cjanisze: needinfo-
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: tripleo-ansible-3.3.1-17.1.20240918100824.8debef3.el9ost Doc Type: Release Note
Doc Text:
In RHOSP 17.1.4, the default size for the `/var/log` partition on newly deployed overcloud nodes has been changed from 10 GiB to 25 GiB.
Story Points: ---
Clone Of: Environment:
Last Closed: 2024-11-21 09:40:36 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description phalmos 2024-05-15 14:34:56 UTC
Description of problem:
Controller disks fill up with the default 10G /var/log partition before logs rotate out.

Version-Release number of selected component (if applicable):
17 and 17.1

How reproducible:
100%

Steps to Reproduce:
1. Deploy
2. Operate
3. Fail

Actual results:
Controllers lock up with full disks

Expected results:
Controllers function and rotate logs without filling the partition

Additional info:

Re-opening this bug: https://bugzilla.redhat.com/show_bug.cgi?id=2165470. It has not been solved adequately in documentation.  I have a customer that has run into it again.  A 10G partition for /var/log is not sufficient for /var/log/messages.    The default logrotate is set to:

# rotate log files weekly
weekly

# keep 4 weeks worth of backlogs
rotate 4

# create new (empty) log files after rotating old ones
create

# use date as a suffix of the rotated file
dateext

# uncomment this if you want your log files compressed
#compress

# packages drop log rotation information into this directory
include /etc/logrotate.d

While the messages file grows far too large to last the 4 week rotation

[root@leaf1-controller-1 log]# du -a /var/log | sort -n -r | head -n 10
9936860 /var/log
2684312 /var/log/messages-20230212
2683540 /var/log/messages-20230205
2310812 /var/log/messages-20230129
940728  /var/log/messages
650404  /var/log/messages-20230122
354744  /var/log/containers
143412  /var/log/containers/httpd
67392   /var/log/sa
49436   /var/log/journal/357b886700b24d5bb84c8e12b910bf6e

The default size for /var/log should be far greater than 10G with the current logrotate config. I know we can override the logrotate config for /var/log/containers. What about the default system logrotate for /var/log ?

Comment 14 Steve Baker 2024-06-17 20:07:29 UTC
Lets use this bug to track increasing the /var/log volume size to 25GB.

There will also there will be a follow-up for existing systems with 10GB volumes, likely a manual change to the journald log config to retain less history.

Comment 38 errata-xmlrpc 2024-11-21 09:40:36 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (RHOSP 17.1.4 bug fix and enhancement advisory), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2024:9974

Comment 39 Red Hat Bugzilla 2025-03-22 04:25:13 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days