[Solved] no space left on sd-card, reason: large nginx log

Help and Support Help
1

Hi,
first of all: Thanks for volumio :wink:
After using volumio on Raspi B+ for some months, I got some strange behaviour, here are just a few examples:

  1. Sometimes theres no “Webradio” button
  2. Some Radio stations didnt work anymore
  3. Sometimes theres no Nas Button

I found out that the filesystem was full.
Theres one large File /var/log/nginx/access.log, which had 667.9MB
(just to mention, there was another large file /var/log/mpd/mpd.log with 130,5MB, but this size is ok, cause it depends mainly on the number of music files )

I dont really have a Problem with this, but I searched within this forum for a similar topic and didnt find much.

So I think I should ask if the developer(s) should take care of remaing space on the card and the log-Files ?
Did I ask now? I think I did :wink:
Best Regards, lenni

I did check the access.log-File, and I found out, that every second the file got ca. 10 new log-Entries, here are just 2 of them:

192.168.222.219 - - [31/Dec/2014:06:11:20 +0000] "GET /_player_engine.php?state=undefined&_=1420006275508 HTTP/1.1" 200 158 "http://volumio.local/" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/39.0.2171.65 Chrome/39.0.2171.65 Safari/537.36"

192.168.222.219 - - [31/Dec/2014:06:11:20 +0000] "GET /_player_engine.php?state=undefined&_=1420006275585 HTTP/1.1" 200 158 "http://volumio.local/" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/39.0.2171.65 Chrome/39.0.2171.65 Safari/537.36"

Some more info The first entry in my access.log is dated on 28.10.2014 and the last one on 17.1.2015, a less access.log | wc gets 2326457 53496539 667930624
I have the actual Version of Volumio (1.5) installed and did install the squeezebox-client additionally - Nothing else.

2

I got the same Problem (disk full) again, and now I know why :wink:
In short: Its a Raspi B+, volumio 1.5 (with additionally installed squeezelite, I think this doesnt matter)
While volumio is “opened” in Browser, every 5 Seconds (or 12 times per minute) the /var/log/nginx/access.log gets an entry.
This Entry has (in my case) a size of 285 Bytes (and, by the way, the Entries are of course very redundant, just the _-Parameter and the time changes between the Entries :wink: ).
As I did nearly never closed the Browser within the last weeks, the file increased rapidly.
285 Bytes * 12 * 60 * 24 = 4924800 = 5MB per day.
Of course every “Browseraction” within Volumio produces additionally Entries in access.log, so after 100days I can be sure to have no space left on my sdard (its the “Standard” 1,5GB Partition) and a access.log bigger than 600MBs.
Then I have to remove the access-log manually to get Volumio working.
So the only Solution is not to leave the Browser opened all day?
Best Regards, Lenni

3

You could disable logging of web accesses by changing access_log to a comment in /etc/nginx/nginx.conf

sudo nano /etc/nginx/nginx.conf

#start server1 section server { listen 80; #access_log /var/log/nginx/access.log; location / { root /var/www;

As you’ve found out every time the browser accesses the interface, whether there’s a problem or not. Filling up the disk.

4

I do have volumio 1.55 some time running at my beaglebone. Trying to get spotify connect on it i encountered severe space problems. In my case it’s the wtmp that’s causing the problem:

root@volumio:/var/log# ls -hl /var/log/wtmp
-rw-rw-r-- 1 root utmp 374M Jan 14 15:17 /var/log/wtmp

Googled around:
“The /var/log/wtmp and /var/run/utmp files contain the login records for all users on your system. Their integrity must be maintained because they can be used to determine when and from where a user (or potential intruder) has entered your system. These files should also have 644 permissions, without affecting normal system operation.”

It should be save to remove it… So I did remove it, my df indicates 67% again.
Does anyone have experience with this issue?

5

You have intruders. Change the default passwords for volumio, pi, root.
It should not grow much unless you login via SSH all the time.