datakollektivet/systemer
10
0
Fork 0
Code Issues 4 Pull requests 5 Projects Releases Packages Wiki Activity Actions

Fikser NTP og logger #24

Open
gingermusketeer wants to merge 4 commits from fikser-til-ntp-og-logs into main
pull from: fikser-til-ntp-og-logs
merge into: datakollektivet:main
Conversation 1 Commits 4 Files changed 5 +164 -13
gingermusketeer commented 2026-04-10 10:55:39 +00:00
Owner
Copy link

Dette bygger på #23. Målet er:

  1. Unngå at logger bruker opp for mye plass, men beholdes lenge nok til at vi kan undersøke problemer eller hendelser.
  2. Opprette synkronisering av klokker slik at vi kan sammenligne ting (logger) som skjer på en server med det som skjer et annet sted. Dette er et aktuelt problem for oss, da Loomio-serveren var cirka 30 sekunder utdatert. Slik jeg forstår det, gjøres dette med Network Time Protocol (NTP), en algoritme som bruker andre servere på nettet som har riktig tid.

logs.yaml

Resultatet fra ansible-playbook --check --diff common/playbooks/logs.yaml:


PLAY [Configure log retention policies] ****************************************

TASK [Gathering Facts] *********************************************************
ok: [loomio]

TASK [Configure journald log retention] ****************************************
--- before: /etc/systemd/journald.conf (content)
+++ after: /etc/systemd/journald.conf (content)
@@ -24,7 +24,7 @@
 #SyncIntervalSec=5m
 #RateLimitIntervalSec=30s
 #RateLimitBurst=10000
-#SystemMaxUse=
+SystemMaxUse = 10GB
 #SystemKeepFree=
 #SystemMaxFileSize=
 #SystemMaxFiles=100

changed: [loomio] => (item={'option': 'SystemMaxUse', 'value': '10GB'})
--- before: /etc/systemd/journald.conf (content)
+++ after: /etc/systemd/journald.conf (content)
@@ -25,7 +25,7 @@
 #RateLimitIntervalSec=30s
 #RateLimitBurst=10000
 #SystemMaxUse=
-#SystemKeepFree=
+SystemKeepFree = 20%
 #SystemMaxFileSize=
 #SystemMaxFiles=100
 #RuntimeMaxUse=

changed: [loomio] => (item={'option': 'SystemKeepFree', 'value': '20%'})
--- before: /etc/systemd/journald.conf (content)
+++ after: /etc/systemd/journald.conf (content)
@@ -32,7 +32,7 @@
 #RuntimeKeepFree=
 #RuntimeMaxFileSize=
 #RuntimeMaxFiles=100
-#MaxRetentionSec=0
+MaxRetentionSec = 90days
 #MaxFileSec=1month
 #ForwardToSyslog=no
 #ForwardToKMsg=no

changed: [loomio] => (item={'option': 'MaxRetentionSec', 'value': '90days'})
--- before: /etc/systemd/journald.conf (content)
+++ after: /etc/systemd/journald.conf (content)
@@ -17,7 +17,7 @@
 # See journald.conf(5) for details.
 
 [Journal]
-#Storage=auto
+Storage = persistent
 #Compress=yes
 #Seal=yes
 #SplitMode=uid

changed: [loomio] => (item={'option': 'Storage', 'value': 'persistent'})

RUNNING HANDLER [restart journald] *********************************************
changed: [loomio]

PLAY RECAP *********************************************************************
loomio                     : ok=3    changed=2    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
Dette bygger på #23. Målet er: 1. Unngå at logger bruker opp for mye plass, men beholdes lenge nok til at vi kan undersøke problemer eller hendelser. 2. Opprette synkronisering av klokker slik at vi kan sammenligne ting (logger) som skjer på en server med det som skjer et annet sted. Dette er et aktuelt problem for oss, da Loomio-serveren var cirka 30 sekunder utdatert. Slik jeg forstår det, gjøres dette med Network Time Protocol (NTP), en algoritme som bruker andre servere på nettet som har riktig tid. ### logs.yaml Resultatet fra `ansible-playbook --check --diff common/playbooks/logs.yaml`: ```diff PLAY [Configure log retention policies] **************************************** TASK [Gathering Facts] ********************************************************* ok: [loomio] TASK [Configure journald log retention] **************************************** --- before: /etc/systemd/journald.conf (content) +++ after: /etc/systemd/journald.conf (content) @@ -24,7 +24,7 @@ #SyncIntervalSec=5m #RateLimitIntervalSec=30s #RateLimitBurst=10000 -#SystemMaxUse= +SystemMaxUse = 10GB #SystemKeepFree= #SystemMaxFileSize= #SystemMaxFiles=100 changed: [loomio] => (item={'option': 'SystemMaxUse', 'value': '10GB'}) --- before: /etc/systemd/journald.conf (content) +++ after: /etc/systemd/journald.conf (content) @@ -25,7 +25,7 @@ #RateLimitIntervalSec=30s #RateLimitBurst=10000 #SystemMaxUse= -#SystemKeepFree= +SystemKeepFree = 20% #SystemMaxFileSize= #SystemMaxFiles=100 #RuntimeMaxUse= changed: [loomio] => (item={'option': 'SystemKeepFree', 'value': '20%'}) --- before: /etc/systemd/journald.conf (content) +++ after: /etc/systemd/journald.conf (content) @@ -32,7 +32,7 @@ #RuntimeKeepFree= #RuntimeMaxFileSize= #RuntimeMaxFiles=100 -#MaxRetentionSec=0 +MaxRetentionSec = 90days #MaxFileSec=1month #ForwardToSyslog=no #ForwardToKMsg=no changed: [loomio] => (item={'option': 'MaxRetentionSec', 'value': '90days'}) --- before: /etc/systemd/journald.conf (content) +++ after: /etc/systemd/journald.conf (content) @@ -17,7 +17,7 @@ # See journald.conf(5) for details. [Journal] -#Storage=auto +Storage = persistent #Compress=yes #Seal=yes #SplitMode=uid changed: [loomio] => (item={'option': 'Storage', 'value': 'persistent'}) RUNNING HANDLER [restart journald] ********************************************* changed: [loomio] PLAY RECAP ********************************************************************* loomio : ok=3 changed=2 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 ```
gingermusketeer reviewed 2026-04-10 10:57:02 +00:00
loomio/group_admins.json Outdated
@ -27,4 +28,1 @@
]
},
{
"name": "epost-synlighetstest",
gingermusketeer commented 2026-04-10 10:57:02 +00:00
Author
Owner
Copy link

@papiris Stemmer det at du har slettet denne gruppen?

@papiris Stemmer det at du har slettet denne gruppen?
papiris commented 2026-04-10 15:37:59 +00:00
Owner
Copy link

Kan ikke huske å ha laget den. Er ikke med i den selv ihvertfall, så det er rimelig å anta den er slettet

Kan ikke huske å ha laget den. Er ikke med i den selv ihvertfall, så det er rimelig å anta den er slettet
👍 1
gingermusketeer marked this conversation as resolved
This pull request doesn't have enough approvals yet. 0 of 1 approvals granted.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin fikser-til-ntp-og-logs:fikser-til-ntp-og-logs
git switch fikser-til-ntp-og-logs
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
datakollektivet/systemer!24
No description provided.