/var/log/journal full, journald is not removing journal files

[lists@xxxxxxxxxxxxxxxxx (Chris Murphy)]

On Thu, Jul 12, 2018 at 8:28 AM, Michal Koutný <mkoutny at suse.com> wrote:
> Hi Chris.
>
> On 07/11/2018 09:44 PM, Chris Murphy wrote:
>> Somehow journald would not
>> delete its own files until I had deleted  a few manually.
> Indeed, see man page update [1] added recently for more details. I
> assume your space was occupied by active journal files. Do you have any
> detailed break down of /var/log/journal contents?
>
> Michal
>
> [1] https://github.com/systemd/systemd/commit/1a0d353b44e
>

It seems to be working automatically now that it's been cleaned out
manually, and the SystemMaxUse=1200M, although this gets translated to
1.1G by journald, and there is ~400MB free space.

Jul 17 06:42:38 f28h.local systemd-journald[472]: System journal
(/var/log/journal/bbe68372db9f4c589a1f67f008e70864) is 1.1G, max 1.1G,
0B free.

My original expectation was that SystemMaxUse=2G which is the same
size as the file system, would be limited by the default behavior of
SystemKeepFree= which the man page says is 15% of the file system
size. In theory it would ensure 300MB free at all times. But that
turns out to not be the case. It was definitely not deleting archived
files in that configuration.



-- 
Chris Murphy