Skip to content

fix: reduce sudo/journald log volume from periodic collectors (#124) - #125

Merged
gnacho merged 5 commits into
mainfrom
fix/124-reduce-sudo-logs
Sep 1, 2026
Merged

gnacho merged 5 commits into
mainfrom
fix/124-reduce-sudo-logs

Conversation

@gnacho

@gnacho gnacho commented Sep 1, 2026 •

Copy link
Copy Markdown
Owner

closes #124

Reduces the number of sudo/journald log entries generated by the periodic ZFS collectors without changing behavior or security model:

  • Sudoers: suppress PAM session and allowed-command logs for the easyzfs user (Defaults:easyzfs !pam_session, !log_allowed). Failed attempts still log.
  • ZpoolCollector: add TTL caches for stable pool properties (autotrim, checkpoint, compressratio) and for zpool status -t.
  • Config: add EASYZFS_ZPOOL_INTERVAL (default 60 s) to control the collector tick interval.
  • Add TTL tests and document the env var in install.sh.

Validated on citadel-01 and citadel-02: healthz OK, pools/datasets/snapshots populate, and journalctl -g 'easyzfs :' goes from thousands of entries/day to near zero.

@gnacho
gnacho merged commit c5cf65e into main Sep 1, 2026
3 checks passed
@gnacho
gnacho deleted the fix/124-reduce-sudo-logs branch September 1, 2026 15:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Reduce sudo/journald log volume from periodic collectors

1 participant