sudo: unable to mkdir /var/log/sudo-io/00/2A: No space left on device












1















A script began throwing errors related to not being able to init an I/O plugin sudoers_io: (amazon linux).



I can't get into delete some logs since each time I use the sudo command, it fails to log that I used the command (I am guessing here). Any ideas on how to free up space or delete/rotate the logs?



Output below:



[ec2-user@ip-xx-xx-xx-xx log]$ sudo bash
sudo: unable to mkdir /var/log/sudo-io/00/2A: No space left on device
sudo: error initializing I/O plugin sudoers_io



[ec2-user@ip-xx-xx-xx-xx log]$ du -s * | sort -nr | head
du: cannot read directory ‘audit’: Permission denied
du: cannot read directory ‘sudo-io’: Permission denied
16092 secure
2188 secure-20180401
640 messages-20180325
640 messages-20180318
636 messages-20180401
636 messages-20180311
196 cloud-init.log
160 wtmp
132 messages
104 dracut.log









share|improve this question



























    1















    A script began throwing errors related to not being able to init an I/O plugin sudoers_io: (amazon linux).



    I can't get into delete some logs since each time I use the sudo command, it fails to log that I used the command (I am guessing here). Any ideas on how to free up space or delete/rotate the logs?



    Output below:



    [ec2-user@ip-xx-xx-xx-xx log]$ sudo bash
    sudo: unable to mkdir /var/log/sudo-io/00/2A: No space left on device
    sudo: error initializing I/O plugin sudoers_io



    [ec2-user@ip-xx-xx-xx-xx log]$ du -s * | sort -nr | head
    du: cannot read directory ‘audit’: Permission denied
    du: cannot read directory ‘sudo-io’: Permission denied
    16092 secure
    2188 secure-20180401
    640 messages-20180325
    640 messages-20180318
    636 messages-20180401
    636 messages-20180311
    196 cloud-init.log
    160 wtmp
    132 messages
    104 dracut.log









    share|improve this question

























      1












      1








      1








      A script began throwing errors related to not being able to init an I/O plugin sudoers_io: (amazon linux).



      I can't get into delete some logs since each time I use the sudo command, it fails to log that I used the command (I am guessing here). Any ideas on how to free up space or delete/rotate the logs?



      Output below:



      [ec2-user@ip-xx-xx-xx-xx log]$ sudo bash
      sudo: unable to mkdir /var/log/sudo-io/00/2A: No space left on device
      sudo: error initializing I/O plugin sudoers_io



      [ec2-user@ip-xx-xx-xx-xx log]$ du -s * | sort -nr | head
      du: cannot read directory ‘audit’: Permission denied
      du: cannot read directory ‘sudo-io’: Permission denied
      16092 secure
      2188 secure-20180401
      640 messages-20180325
      640 messages-20180318
      636 messages-20180401
      636 messages-20180311
      196 cloud-init.log
      160 wtmp
      132 messages
      104 dracut.log









      share|improve this question














      A script began throwing errors related to not being able to init an I/O plugin sudoers_io: (amazon linux).



      I can't get into delete some logs since each time I use the sudo command, it fails to log that I used the command (I am guessing here). Any ideas on how to free up space or delete/rotate the logs?



      Output below:



      [ec2-user@ip-xx-xx-xx-xx log]$ sudo bash
      sudo: unable to mkdir /var/log/sudo-io/00/2A: No space left on device
      sudo: error initializing I/O plugin sudoers_io



      [ec2-user@ip-xx-xx-xx-xx log]$ du -s * | sort -nr | head
      du: cannot read directory ‘audit’: Permission denied
      du: cannot read directory ‘sudo-io’: Permission denied
      16092 secure
      2188 secure-20180401
      640 messages-20180325
      640 messages-20180318
      636 messages-20180401
      636 messages-20180311
      196 cloud-init.log
      160 wtmp
      132 messages
      104 dracut.log






      linux sudo amazon-ec2 amazon-linux






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Apr 2 '18 at 13:13









      jrjames83jrjames83

      1085




      1085






















          2 Answers
          2






          active

          oldest

          votes


















          3














          You apparently enable full output logging in sudo(ers).



          The easiest way to free space, probably deleting the sudo logs, is either logging as root, or using su, if your configurations allow it.



          Depending on how much /var/log is full, those procedures might or might not be successful. On the worst case, booting in single mode or from a live system will allow you to clean up things.



          Unless you have very specific needs to log so much of sudo operations, I would edit /etc/sudoers to change the logging setup. Having such a verbose setup will exhaust quickly again the available space.






          share|improve this answer





















          • 1





            Thanks. I had to find sacrifice lots of cached anaconda packages, but after deleting I was able to sudo bash my way back to clearing these sudo-io log files.

            – jrjames83
            Apr 2 '18 at 14:11





















          0














          The most possible cause of this problem in case you have free space in the disk (did you check with df -h?) is a problem with inodes. Just run df -i to check inodes usage, for example check var partition here...



          [root@test-kompjuteras ~]# df -hi
          Filesystem Inodes IUsed IFree IUse% Mounted on
          /dev/mapper/VolGroup-lv_root 313K 9.5K 304K 4% /
          tmpfs 984K 1 984K 1% /dev/shm
          /dev/sda1 126K 44 125K 1% /boot
          /dev/mapper/VolGroup-lv_var 250K 250K 0 100% /var


          If you have 100% somewhere - you will need to delete some files or to move them on other partition or other storage.





          share








          New contributor




          Kompjuteras is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
          Check out our Code of Conduct.




















            Your Answer








            StackExchange.ready(function() {
            var channelOptions = {
            tags: "".split(" "),
            id: "106"
            };
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function() {
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled) {
            StackExchange.using("snippets", function() {
            createEditor();
            });
            }
            else {
            createEditor();
            }
            });

            function createEditor() {
            StackExchange.prepareEditor({
            heartbeatType: 'answer',
            autoActivateHeartbeat: false,
            convertImagesToLinks: false,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: null,
            bindNavPrevention: true,
            postfix: "",
            imageUploader: {
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            },
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            });


            }
            });














            draft saved

            draft discarded


















            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f435049%2fsudo-unable-to-mkdir-var-log-sudo-io-00-2a-no-space-left-on-device%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown

























            2 Answers
            2






            active

            oldest

            votes








            2 Answers
            2






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes









            3














            You apparently enable full output logging in sudo(ers).



            The easiest way to free space, probably deleting the sudo logs, is either logging as root, or using su, if your configurations allow it.



            Depending on how much /var/log is full, those procedures might or might not be successful. On the worst case, booting in single mode or from a live system will allow you to clean up things.



            Unless you have very specific needs to log so much of sudo operations, I would edit /etc/sudoers to change the logging setup. Having such a verbose setup will exhaust quickly again the available space.






            share|improve this answer





















            • 1





              Thanks. I had to find sacrifice lots of cached anaconda packages, but after deleting I was able to sudo bash my way back to clearing these sudo-io log files.

              – jrjames83
              Apr 2 '18 at 14:11


















            3














            You apparently enable full output logging in sudo(ers).



            The easiest way to free space, probably deleting the sudo logs, is either logging as root, or using su, if your configurations allow it.



            Depending on how much /var/log is full, those procedures might or might not be successful. On the worst case, booting in single mode or from a live system will allow you to clean up things.



            Unless you have very specific needs to log so much of sudo operations, I would edit /etc/sudoers to change the logging setup. Having such a verbose setup will exhaust quickly again the available space.






            share|improve this answer





















            • 1





              Thanks. I had to find sacrifice lots of cached anaconda packages, but after deleting I was able to sudo bash my way back to clearing these sudo-io log files.

              – jrjames83
              Apr 2 '18 at 14:11
















            3












            3








            3







            You apparently enable full output logging in sudo(ers).



            The easiest way to free space, probably deleting the sudo logs, is either logging as root, or using su, if your configurations allow it.



            Depending on how much /var/log is full, those procedures might or might not be successful. On the worst case, booting in single mode or from a live system will allow you to clean up things.



            Unless you have very specific needs to log so much of sudo operations, I would edit /etc/sudoers to change the logging setup. Having such a verbose setup will exhaust quickly again the available space.






            share|improve this answer















            You apparently enable full output logging in sudo(ers).



            The easiest way to free space, probably deleting the sudo logs, is either logging as root, or using su, if your configurations allow it.



            Depending on how much /var/log is full, those procedures might or might not be successful. On the worst case, booting in single mode or from a live system will allow you to clean up things.



            Unless you have very specific needs to log so much of sudo operations, I would edit /etc/sudoers to change the logging setup. Having such a verbose setup will exhaust quickly again the available space.







            share|improve this answer














            share|improve this answer



            share|improve this answer








            edited Apr 2 '18 at 13:42

























            answered Apr 2 '18 at 13:28









            Rui F RibeiroRui F Ribeiro

            39.7k1479132




            39.7k1479132








            • 1





              Thanks. I had to find sacrifice lots of cached anaconda packages, but after deleting I was able to sudo bash my way back to clearing these sudo-io log files.

              – jrjames83
              Apr 2 '18 at 14:11
















            • 1





              Thanks. I had to find sacrifice lots of cached anaconda packages, but after deleting I was able to sudo bash my way back to clearing these sudo-io log files.

              – jrjames83
              Apr 2 '18 at 14:11










            1




            1





            Thanks. I had to find sacrifice lots of cached anaconda packages, but after deleting I was able to sudo bash my way back to clearing these sudo-io log files.

            – jrjames83
            Apr 2 '18 at 14:11







            Thanks. I had to find sacrifice lots of cached anaconda packages, but after deleting I was able to sudo bash my way back to clearing these sudo-io log files.

            – jrjames83
            Apr 2 '18 at 14:11















            0














            The most possible cause of this problem in case you have free space in the disk (did you check with df -h?) is a problem with inodes. Just run df -i to check inodes usage, for example check var partition here...



            [root@test-kompjuteras ~]# df -hi
            Filesystem Inodes IUsed IFree IUse% Mounted on
            /dev/mapper/VolGroup-lv_root 313K 9.5K 304K 4% /
            tmpfs 984K 1 984K 1% /dev/shm
            /dev/sda1 126K 44 125K 1% /boot
            /dev/mapper/VolGroup-lv_var 250K 250K 0 100% /var


            If you have 100% somewhere - you will need to delete some files or to move them on other partition or other storage.





            share








            New contributor




            Kompjuteras is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
            Check out our Code of Conduct.

























              0














              The most possible cause of this problem in case you have free space in the disk (did you check with df -h?) is a problem with inodes. Just run df -i to check inodes usage, for example check var partition here...



              [root@test-kompjuteras ~]# df -hi
              Filesystem Inodes IUsed IFree IUse% Mounted on
              /dev/mapper/VolGroup-lv_root 313K 9.5K 304K 4% /
              tmpfs 984K 1 984K 1% /dev/shm
              /dev/sda1 126K 44 125K 1% /boot
              /dev/mapper/VolGroup-lv_var 250K 250K 0 100% /var


              If you have 100% somewhere - you will need to delete some files or to move them on other partition or other storage.





              share








              New contributor




              Kompjuteras is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
              Check out our Code of Conduct.























                0












                0








                0







                The most possible cause of this problem in case you have free space in the disk (did you check with df -h?) is a problem with inodes. Just run df -i to check inodes usage, for example check var partition here...



                [root@test-kompjuteras ~]# df -hi
                Filesystem Inodes IUsed IFree IUse% Mounted on
                /dev/mapper/VolGroup-lv_root 313K 9.5K 304K 4% /
                tmpfs 984K 1 984K 1% /dev/shm
                /dev/sda1 126K 44 125K 1% /boot
                /dev/mapper/VolGroup-lv_var 250K 250K 0 100% /var


                If you have 100% somewhere - you will need to delete some files or to move them on other partition or other storage.





                share








                New contributor




                Kompjuteras is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                Check out our Code of Conduct.










                The most possible cause of this problem in case you have free space in the disk (did you check with df -h?) is a problem with inodes. Just run df -i to check inodes usage, for example check var partition here...



                [root@test-kompjuteras ~]# df -hi
                Filesystem Inodes IUsed IFree IUse% Mounted on
                /dev/mapper/VolGroup-lv_root 313K 9.5K 304K 4% /
                tmpfs 984K 1 984K 1% /dev/shm
                /dev/sda1 126K 44 125K 1% /boot
                /dev/mapper/VolGroup-lv_var 250K 250K 0 100% /var


                If you have 100% somewhere - you will need to delete some files or to move them on other partition or other storage.






                share








                New contributor




                Kompjuteras is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                Check out our Code of Conduct.








                share


                share






                New contributor




                Kompjuteras is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                Check out our Code of Conduct.









                answered 6 mins ago









                KompjuterasKompjuteras

                1




                1




                New contributor




                Kompjuteras is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                Check out our Code of Conduct.





                New contributor





                Kompjuteras is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                Check out our Code of Conduct.






                Kompjuteras is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                Check out our Code of Conduct.






























                    draft saved

                    draft discarded




















































                    Thanks for contributing an answer to Unix & Linux Stack Exchange!


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid



                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.


                    To learn more, see our tips on writing great answers.




                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function () {
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f435049%2fsudo-unable-to-mkdir-var-log-sudo-io-00-2a-no-space-left-on-device%23new-answer', 'question_page');
                    }
                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    Popular posts from this blog

                    Accessing regular linux commands in Huawei's Dopra Linux

                    Can't connect RFCOMM socket: Host is down

                    Kernel panic - not syncing: Fatal Exception in Interrupt