pkg-static: Not enough space

[sse450]

There is plenty of space in the ssd disk. Just installed. Version 24.1.

Cannot update. How can I update OPNsense?

Code: [Select]

Number of packages to be removed: 50
Number of packages to be installed: 51
Number of packages to be upgraded: 67

The process will require 154 MiB more space.
152 MiB to be downloaded.
pkg-static: Not enough space in /var/cache/pkg, needed 152 MiB available -500 MiB
Starting web GUI...done.
Generating RRD graphs...done.
***DONE***

[Patrick M. Hausen]

Post the output of `df` please.

[sse450]

Code: [Select]

root@OPNsense:~ # df
Filesystem               1K-blocks     Used   Avail Capacity  Mounted on
/dev/gpt/rootfs           14870124 14260528 -580012   104%    /
devfs                            1        1       0   100%    /dev
/dev/gpt/efifs              262129     1773  260356     1%    /boot/efi
devfs                            1        1       0   100%    /var/dhcpd/dev
devfs                            1        1       0   100%    /var/unbound/dev
/usr/local/lib/python3.9  14870124 14260528 -580012   104%    /var/unbound/usr/local/lib/python3.9
I didn't do any manual partition. This is how opnsense iso installed itself. But, previously pfSense was installed.

[Patrick M. Hausen]

Your SSD is full, plain and simple. To find the culprit:

Code: [Select]

cd /
du -skx * | sort -rn
# find the largest directory on top
cd <directory>
du -skx * | sort -rn
# repeat until found


[sse450]

Code: [Select]

root@OPNsense:/ # du -skx * | sort -rn
11650353 var
2326812 usr
179801 boot
14600 lib
8164 sbin
3580 etc
3244 conf
1980 bin
188 tmp
160 libexec
40 root
8 COPYRIGHT
4 rescue
4 proc
4 net
4 mnt
4 media
4 home
4 entropy
4 dev
0 sys

Code: [Select]

root@OPNsense:/var # du -skx * | sort -rn
11609980 log
36344 db
5236 backups
505 unbound
116 run
112 etc
69 dhcpd
64 cache
36 lib
28 spool
16 cron
12 audit
12 at
8 tmp
8 crash
4 yp
4 rwho
4 preserve
4 netflow
4 msgs
4 mail
4 heimdal
4 games
4 empty
4 authpf
4 account

Code: [Select]

root@OPNsense:/var/log # du -skx * | sort -rn
11603556 filter
7008 installer.log
544 configd
536 system
384 audit
332 dhcpd
136 resolver
128 ntpd
84 ppps
16 lighttpd
12 wireguard
12 routing
12 dmesg.yesterday
12 dmesg.today
8 firewall
8 boot.log
4 utx.log
4 utx.lastlogin
4 userlog
4 suricata
4 setuid.today
4 pf.yesterday
4 pf.today
4 ntp
4 mount.today

Code: [Select]

root@OPNsense:/var/log/filter # du -skx * | sort -rn
5810144 filter_20240520.log
3138240 filter_20240519.log
2658240 filter_20240521.log
0 latest.log
Today is the 3rd day following OPNsense installation. How come I have so big filter logs?
What should I do? Delete all filter_* ? How can I limit on log size?

Thank you for your support.

[sse450]

I was able to open one of the filter logs. It is full of these lines:

Code: [Select]

<134>1 2024-05-21T00:00:00+00:00 OPNsense.localdomain filterlog 49948 - [meta sequenceId="22"] 4,,,02f4bab031b57d1e30553ce08e0ec131,pppoe0,match,block,in,4,0x0,,250,2577,0,none,1,icmp,84,101.44.223.5,212.xxx.xxx.156,datalength=64

[Patrick M. Hausen]

Obviously you enabled logging for the default deny rule. Don't do that  It will log every packet someone on the Internet throws at your WAN interface - which is a large amount of data as you found out.

[sse450]

Unfortunately, I can't stop it.  I checked all the options re logging.

I can see them in Firewall | Log files | Plain View | Informational. It is flooding.

Could you please be so kind and direct this helpless newbie to the right switch? I believe it should be related WAN/PPPOE. But, couldn't find.

Edit:  Unchecked all loggings and disabled debugging in Firewall | Settings | Advanced fixed the problem. Thank you.

[Patrick M. Hausen]

Firewall > Settings > Advanced > Logging > Default block

[sse450]

Thank you.