Re: question about disk partitioning

On 8/28/2012 6:51 PM, Guenter wrote:
> Hi,
> just looking at a fresh installed 2.0.3 on a 1GB CF card, and wonder a bit:
> root@ipcop:~ # df -h
> Filesystem      Size  Used Avail Use% Mounted on
> tmpfs           474M   56K  474M   1% /dev
> /dev/hdc1       903M  160M  698M  19% /
> /dev/hdc2        62M  5.5M   53M  10% /var/log_compressed
> tmpfs           474M  4.0K  474M   1% /tmp
> shm             474M     0  474M   0% /dev/shm
> tmpfs           480M  2.2M  478M   1% /ram
>
> so seems that hdc2 where the compressed logs are stored is only ~7% of
> the whole disk space while plenty of room is available on hdc1 which is
> most likely never used ...
> wouldnt it make sense to calculate something like that:
> if totalspace > 256M then part1 = 256M && part2 = totalspace - 256M
>
> so that as much as possible is available for storing the logs?
>
> Or alternately let the user specify the partition sizes during setup
> (with suggesting the defaults you actually would use), just same way as
> you already do with ramdisk size ...
>
> Gün.
>

The compressed log partition would not benefit from a larger size in any 
way unless the log settings were set to retain more logs and graphs etc. 
As soon as /ram is mounted on bootup, the tarballs are then uncompressed 
to /ram. The bigger the tarball, the bigger /ram will have to be and the 
longer the delay waiting for the tarball to be decompressed to /ram on 
bootup. I prefer it the way it is. Flash installs are not for those who 
want gigantic log collections on IPCop itself.

With a flash installation, anything over 512MB flash drive size is a 
waste. Yes I know not many 512MB drives are available but they do exist 
as industrial grade and doms. The best way to retain logs is to forward 
them to another machine such as a server that has syslog running in 
listen mode. You had better have a lot of room in /var on such a machine 
if you want years of logs retained. Mine forward to a headless server 
running Debian and webmin.


-- 
Dave Studeman
http://www.raqcop.com


------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/