logrotateと戯れて・・・。

目次

1. 前書き
2. 本題
3. 後書き或いは感想

前書き

本題

1. logrotateについて
2. cronについて
3. cronのカスタマイズ
4. logrotateのカスタマイズ
5. 資料：TLXW8のcron初期設定
6. 資料：TLXW8のlogrotate初期設定
7. 資料：logrotate実行時オプション（「man logrotate」より抜粋）
8. 資料：logrotate設定ファイルオプション（「man logrotate」より抜粋）

[fenjin@seisyuu fenjin]$ rpm -qf /usr/sbin/logrotate
logrotate-3.3.2-5

[fenjin@seisyuu fenjin]$ rpm -qil logrotate
Name        : logrotate  Relocations: (not relocateable)
Version     : 3.3.2      
Vendor: Turbolinux Japan K.K 
Release     : 5   Build Date: Sun Apr 28 21:15:17 2002
Install date: Tue Sep 10 07:28:20 2002
Build Host: y.jp.tlan
Group       : System Environment/Base 
Source RPM: logrotate-3.3.2-5.src.rpm
Size        : 39076  License: GPL
Packager    : Turbolinux Japan K.K 
Summary     : Rotates, compresses, removes and mails system log files.
Description :（省略）

Install the logrotate package if you need a utility to deal with the
log files on your system.
/etc/cron.daily/logrotate
/etc/logrotate.conf
/etc/logrotate.d
/usr/sbin/logrotate
/usr/share/man/man8/logrotate.8.gz

# RPM packages drop log rotation information into this directory
include /etc/logrotate.d

/var/log/wtmp {
    monthly
    create 0664 root utmp
    rotate 1
}

[root@seisyuu logrotate.d]# cat apache
/var/log/httpd/access_log {
    missingok
    postrotate
        /usr/bin/killall -HUP httpd
    endscript
}

[fenjin@seisyuu fenjin]$ rpm -qil crontabs
Name        : crontabs                     Relocations: (not relocateable)
（省略）
/etc/cron.daily
/etc/cron.hourly
/etc/cron.monthly
/etc/cron.weekly
/etc/crontab
/usr/bin/run-parts

[fenjin@seisyuu init.d]$ rpm -qil vixie-cron
Name        : vixie-cron
（省略）
/etc/cron.d
/etc/logrotate.d/cron
/etc/rc.d/init.d/crond
/usr/bin/crontab
/usr/sbin/crond
/usr/share/doc/packages/vixie-cron-3.0.1
（省略）
/usr/share/doc/packages/vixie-cron-3.0.1/THANKS
/usr/share/man/man1/crontab.1.gz
（省略）
/var/spool/cron

フィールド 指定可能な値
---------- --------------
分         0-59
時         0-23
月内日     0-31
月         0-12 (もしくは名前。下記を参照)
曜日       0-7 (0 と 7 は日曜日。もしくは名前)
・・・
CRON ファイルの例
       # (/etc/passwd の指定に関らず) コマンド実行に /bin/sh を使用する。
       SHELL=/bin/sh
       # (この crontab の所有者に関らず) あらゆる出力を `paul' にメールする。
       MAILTO=paul
       #
       # 毎日、日付変更の 5 分後に実行する
       5 0 * * *       $HOME/bin/daily.job >> $HOME/tmp/out 2>&1
       # 毎月初日の 2:15pm に実行する -- 出力は paul にメールされる
       15 14 1 * *     $HOME/bin/monthly
       # 週末の午後 10 時に実行してジョーを心配させる
       0 22 * * 1-5 mail -s "午後10時だ" joe%ジョー、%%お前の子どもはどこだい?%
       23 0-23/2 * * * echo "毎日 0,2,4..時 23 分に実行する"
       5 4 * * sun     echo "日曜 4 時 5 分に実行する"

# run-parts

01 * * * * root run-parts /etc/cron.hourly	#毎時間01分に実行
02 4 * * * root run-parts /etc/cron.daily	#毎日午前四時02分に実行

# run-parts

#01 * * * * root run-parts /etc/cron.hourly	#毎時間01分に実行
02 4 * * * root run-parts /etc/cron.daily	#毎日午前四時02分に実行

[fenjin@seisyuu etc]$ cat /etc/logrotate_local.conf
#
# Default configuration is not proper for Workstation.
# This configuration checkes the size of every log files.
# And executed by /etc/rc.d/rc.local so, every time when machine start ups,
# logrotate which use this configuration will automatically executed.

# rotate log files daily
daily

# default size of log files which should be rotated is bigger than 200KB
size 200k

# Log files are rotated 9 times.
rotate 9

# send errors to root
errors root

# create new (empty) log files after rotating old ones
create

# Original Log Rotate Configuration files are included in this directory
include /etc/logrotate_local.d

# no packages own lastlog or wtmp -- we'll rotate them here
/var/log/wtmp {
    monthly
    create 0664 root utmp
    rotate 1
}

[fenjin@seisyuu etc]$ cd /etc/logrotate_local.d/
[fenjin@seisyuu logrotate_local.d]$ ls
apache  syslog

[fenjin@seisyuu logrotate_local.d]$ cat apache
# ソースコードからビルドしたApacheにあわせてあります。
/usr/local/apache/logs/access_log {
    missingok
    postrotate
        /usr/bin/killall -HUP httpd
    endscript
}

/usr/local/apache/logs/agent_log {
    missingok
    postrotate
        /usr/bin/killall -HUP httpd
    endscript
}

/usr/local/apache/logs/error_log {
    missingok
    postrotate
        /usr/bin/killall -HUP httpd
    endscript
}

/usr/local/apache/logs/referer_log {
    missingok
    postrotate
        /usr/bin/killall -HUP httpd
    endscript
}

[fenjin@seisyuu logrotate_local.d]$ cat syslog
# デフォルトのsyslogを修正して、必要なログファイルだけ、
# 不必要な処理を省いて設定し直しました。
/var/log/messages {
    postrotate
        /usr/bin/killall -HUP syslogd
    endscript
}

/var/log/secure {
    postrotate
        /usr/bin/killall -HUP syslogd
    endscript
}

/var/log/maillog {
    postrotate
        /usr/bin/killall -HUP syslogd
    endscript
}

/var/log/spooler {
    postrotate
        /usr/bin/killall -HUP syslogd
    endscript
}

/var/log/boot.log {
    postrotate
        /usr/bin/killall -HUP syslogd
    endscript
}

[root@seisyuu etc]# cat crontab
SHELL=/bin/bash
PATH=/sbin:/bin:/usr/sbin:/usr/bin
MAILTO=root
HOME=/

# run-parts

01 * * * * root run-parts /etc/cron.hourly	#毎時間01分に実行
02 4 * * * root run-parts /etc/cron.daily	#毎日午前四時02分に実行
22 4 * * 0 root run-parts /etc/cron.weekly	#毎週日曜日午前四時22分に実行
42 4 1 * * root run-parts /etc/cron.monthly	#毎月一日午前四時42分に実行

[root@seisyuu cron.daily]# ls
inn-cron-expire*  inn-cron-rnews*  logrotate*  makewhatis.cron*
 medusa.cron*  slocate.cron*  tetex.cron*  tmpwatch*
[root@seisyuu cron.daily]# cat logrotate
#!/bin/sh

/usr/sbin/logrotate /etc/logrotate.conf

[root@seisyuu cron.hourly]# ls
inn-cron-nntpsend*  logcheck*  rmmod*
[root@seisyuu cron.hourly]# cat inn-cron-nntpsend
#!/bin/sh
/sbin/chkconfig innd && su - news -c /usr/bin/nntpsend
[root@seisyuu cron.hourly]# cat logcheck
#!/bin/sh
/usr/sbin/logcheck
[root@seisyuu cron.hourly]# cat rmmod
#!/bin/sh
/sbin/rmmod -as
[root@seisyuu cron.hourly]# file /usr/sbin/logcheck
/usr/sbin/logcheck: Bourne shell script text executable

[root@seisyuu cron.weekly]# ls
makewhatis-ja.cron*  makewhatis.cron*
[root@seisyuu cron.weekly]# cat makewhatis-ja.cron
#!/bin/bash
/usr/sbin/makewhatis /usr/share/man/ja_JP.eucJP
exit 0
[root@seisyuu cron.weekly]# cat makewhatis.cron
#!/bin/bash

LOCKFILE=/var/lock/makewhatis.lock

# the lockfile is not meant to be perfect, it's just in case the
# two makewhatis cron scripts get run close to each other to keep
# them from stepping on each other's toes.  The worst that will
# happen is that they will temporarily corrupt the database...
[ -f $LOCKFILE ] && exit 0
trap "rm -f $LOCKFILE" EXIT
touch $LOCKFILE
makewhatis -w
exit 0

[root@seisyuu cron.monthly]# ls
[root@seisyuu cron.monthly]#

[root@seisyuu etc]# cat logrotate.conf
# see "man logrotate" for details
# rotate log files weekly
weekly

# keep 4 weeks worth of backlogs
rotate 4

# send errors to root
errors root

# create new (empty) log files after rotating old ones
create

# uncomment this if you want your log files compressed
#compress

# RPM packages drop log rotation information into this directory
include /etc/logrotate.d

# no packages own lastlog or wtmp -- we'll rotate them here
/var/log/wtmp {
    monthly
    create 0664 root utmp
    rotate 1
}

# system-specific logs may be configured here

[root@seisyuu logrotate.d]# cat apache
/var/log/httpd/access_log {
    missingok
    postrotate
        /usr/bin/killall -HUP httpd
    endscript
}

/var/log/httpd/agent_log {
    missingok
    postrotate
        /usr/bin/killall -HUP httpd
    endscript
}

/var/log/httpd/error_log {
    missingok
    postrotate
        /usr/bin/killall -HUP httpd
    endscript
}

/var/log/httpd/referer_log {
    missingok
    postrotate
        /usr/bin/killall -HUP httpd
    endscript
}

[root@seisyuu logrotate.d]# cat cron
/var/log/cron {
    missingok
    notifempty
    postrotate
        /bin/kill -HUP `/bin/cat /var/run/crond.pid`
    endscript
}

[root@seisyuu logrotate.d]# cat syslog
/var/log/messages {
    postrotate
        /usr/bin/killall -HUP syslogd
    endscript
}

/var/log/secure {
    postrotate
        /usr/bin/killall -HUP syslogd
    endscript
}

/var/log/maillog {
    postrotate
        /usr/bin/killall -HUP syslogd
    endscript
}

/var/log/spooler {
    postrotate
        /usr/bin/killall -HUP syslogd
    endscript
}

/var/log/boot.log {
    postrotate
        /usr/bin/killall -HUP syslogd
    endscript
}

　logrotate reads everything about the log files it should be handling from the series of configuration files specified on the command line.  Each configuration file can set global options (local definitions override  global  ones,  and  later definitions override earlier ones) and specify a logfile to rotate. A simple configuration file looks like this:

# sample logrotate configuration file
errors sysadmin@my.org
compress
/var/log/messages {
	rotate 5
	weekly
	postrotate
		/sbin/killall -HUP syslogd
endscript
}

"/var/log/httpd/access.log" {
	rotate 5
	mail www@my.org
	errors www@my.org
	size=100k
	postrotate
		/sbin/killall -HUP httpd
	endscript
}

/var/log/news/* {
	monthly
	rotate 2
	missingok
	errors newsadmin@my.org
	postrotate
		kill -HUP `cat /var/run/inn.pid`
	endscript
	nocompress
}

　The  first  few lines set global options; any errors that occur during log file processing are mailed to sysadmin@my.org and logs are compressed after they are rotated.  Note that comments may appear anywhere in the config file  as  long  as the first non-whitespace character on the line is a #.
　The  next section of the config files defined how to handle the log file /var/log/messages. The log will go through five weekly rotations before being removed. After the log file has been rotated (but before the old version of  the  log  has been compressed), the command /sbin/killall -HUP syslogd will be executed.
　The  next  section  defines  the parameters for /var/log/httpd/access.log.  It is rotated whenever is grows over 100k is size, and the old logs files are mailed (uncompressed) to www@my.org after going through 5 rotations, rather then  being removed.  Likewise,  any  errors  that occur while processing the log file are also mailed to www@my.org (overriding the global errors directive).  Note that the double quotes around the filename at  the  beginning  of  this  section  allows logrotate to rotate logs with spaces in the name.
　The last section definest the parameters for all of the files in /var/log/news. Each file is rotated on a monthly basis, and the errors are mailed to newsadmin@my.org. This is considered a single rotation directive and if  errors  occur  for more then one file they are mailed in a single message. In this case, the log files are not compressed.

後書き或いは感想