Logrotate for Sentora (Centos 6&7 Ubuntu & Debian)

[bbspike]

Hello,

Here some code to rotate all the logs for domains and Sentora programs.

Make 3 files in thee logrotate.d directory:

Code:

vi /etc/logrotate.d/Sentora-apache

Paste:

Code:

/var/sentora/logs/domains/*/*access.log /var/sentora/logs/domains/*/*bandwidth.log /var/sentora/logs/domains/*/*error.log /var/sentora/logs/zpanel.log /var/sentora/logs/sentora*.log /var/sentora/logs/daemon*.log {        weekly        missingok        rotate 2        compress        delaycompress        create 640 apache apache        sharedscripts        postrotate                systemctl reload httpd > /dev/null        endscript }

Code:

vi /etc/logrotate.d/Sentora-dovecot

Paste:

Code:

/var/log/dovecot*.log {        weekly        missingok        rotate 5        compress        delaycompress        notifempty        create 666 vmail mail        sharedscripts        postrotate                doveadm log reopen        endscript }

Code:

vi  /etc/logrotate.d/Sentora-proftpd

Paste:

Code:

/var/sentora/logs/proftpd/access.log /var/sentora/logs/proftpd/auth.log /var/sentora/logs/proftpd/xferlog.www {        weekly        missingok        rotate 5        compress        delaycompress        notifempty        create 640 root adm        sharedscripts        postrotate                # reload could be not sufficient for all logs, a restart is saf$                systemctl reload proftpd >/dev/null        endscript }

You can finetune the settings if you want. For instance if you don't want always 5 copy's  of history you can set this to any value with rotate ...

For Ubuntu or Debian replace the postrotate rules:

Apache - postrotate /etc/init.d/apache2 reload > /dev/null
Proftpd - postrotate /etc/init.d/proftpd force-reload > /dev/null
Dovcecot - Stays the same

For Centos 6.x replace the postrotate rules with:

Apache - postrotate service httpd reload > /dev/null
Proftpd - postrotate service proftpd reload > /dev/null
Dovecot - Stays the same

[barreiras]

Hi all, i have some 1.5GB logs that webalizer takes to long to process making my vps running slow, does anyone tried adapting this bbspike logrotate confing to ubuntu i believe that at least the prerotate script must be changes, am i wright?
Thanks

[Me.B]

most of the log path are the same in ubuntu and sure over domains logs.

We plan to add it in sentora install/update too.
M B

[barreiras]

I just made some ajustments for ubuntu on the sentora-apache it was just needed to replace  the postrotate for adapting to ubuntu's service

Code:

/var/sentora/logs/domains/*/*access.log /var/sentora/logs/domains/*/*error.log /var/sentora/logs/zpanel.log /var/sentora/logs/sentora*.log /var/sentora/logs/daemon*.log {       weekly       missingok       rotate 5       compress       delaycompress       create 640 root adm       sharedscripts       postrotate              service apache2 reload > /dev/null       endscript       prerotate               if [ -d /etc/logrotate.d/httpd-prerotate ]; then \                       run-parts /etc/logrotate.d/httpd-prerotate; \               fi; \       endscript }

[bbspike]

I just made some ajustments for ubuntu on the sentora-apache it was just needed to replace  the postrotate for adapting to ubuntu's service

Code:

/var/sentora/logs/domains/*/*access.log /var/sentora/logs/domains/*/*error.log /var/sentora/logs/zpanel.log /var/sentora/logs/sentora*.log /var/sentora/logs/daemon*.log {       weekly       missingok       rotate 5       compress       delaycompress       create 640 root adm       sharedscripts       postrotate              service apache2 reload > /dev/null       endscript       prerotate               if [ -d /etc/logrotate.d/httpd-prerotate ]; then \                       run-parts /etc/logrotate.d/httpd-prerotate; \               fi; \       endscript }

For Debain and Ubuntu also look into the create line, they may use other permissions.

[bbspike]

Updated the first post with new rules and adding Ubuntu and Debian rules.

[jbeaumont]

Having some problems with this.

This is my apache logrotate. Slightly tweaked from the OPs:

Code:

/var/sentora/logs/domains/*/*access.log /var/sentora/logs/domains/*/*bandwidth.log /var/sentora/logs/domains/*/*error.log /var/sentora/logs/zpanel.log /var/sentora/logs/sentora*.log /var/sentora/logs/daemon*.log {        weekly        missingok        rotate 4         create 640 www-data www-data        sharedscripts        postrotate         /etc/init.d/apache2 reload > /dev/null        endscript }

When do a test run for this log with

Code:

logrotate -df /etc/logrotate/sentora-apache

I get lots of errors like this:

Code:

error: skipping "/var/sentora/logs/domains/reseller/somedomain.com-error.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.

So I checked the permissions on the directory "reseller":

Code:

drwxrwxrwx 2 root root  4096 Mar 15 14:16 reseller

Ok, odd that it's owned by root:root and not www-data but since it's world writable I can see apache can make files in there.

But it gets weirder. The permissions on the files in the directory are all as such:

Code:

-rw-rw-r-- 1 root root         234 Jan  7 15:40 somedomain.com-error.log

They are owned by root with only root allowed to write to them. Yet apache is writing to them just fine. I checked that www-data is not in root's group.

AFAIK these are the defaults from the Sentora installation. I have not changed anything manually.

So two questions:
   - What does the logrotate error really mean and how can I fix it without breaking sentora?
   - How is apache able to write to the log files when they are owned by root:root?

EDIT:

Solved my problem. Apparently when a rotate is run manually logrotate doesn't know who to run as to do the rotation and so it needs specifying the config file. Now my config looks like this:

Code:

/var/sentora/logs/domains/*/*access.log /var/sentora/logs/domains/*/*bandwidth.log /var/sentora/logs/domains/*/*error.log /var/sentora/logs/zpanel.log /var/sentora/logs/sentora*.log /var/sentora/logs/daemon*.log {        su root syslog        weekly        missingok        rotate 4         create 640 www-data www-data        sharedscripts        postrotate         /etc/init.d/apache2 reload > /dev/null        endscript }

Rotate seems to be working fine and apache is writing to the new log files.

[americanninja]

For those using Ubuntu and having trouble with the above examples, I have gotten things working and posted the configuration here: http://forums.sentora.org/showthread.php...2#pid16282

I changed a few of the lines, matched the permissions with what was setup by Sentora and added a check for filesize.