Hi Stuart,

Thanks for that,

I like your  approach using syslog memory buffer (I need to do that) or use
the syslog to a syslog server
I need to get better at the Syslog

agreed that the loss of logs on unscheduled  / power related  reboots is a
problem with my approach of mfs mounting /var/log
I like your idea chmod 000 reorder_kernel ...

perhaps reordering after patching and upgrading would be enough instead of
at every boot time

I have left the reorder_kernel alone up to now...   but I can see the
benefit in your approach...

Thanks again,


On Thu, 4 Sept 2025 at 15:25, Stuart Henderson <[email protected]> wrote:

> On 2025/09/04 15:14, Tom Smyth wrote:
> > The biggest issue I have seen is where you have a chatty daemon
> > talking to /var/log  we find that wears  out the flash quite
> > quickly... and the probabilty it will be writing to disk during a
> > power event was approaching 100%
> >
> > so I wanted to reduce the probability of a write to the disk during
> > a  power event (as a lot of these devices are in less than ideal
> > locations beside users / customers  even :) and without any power
> > backup / conditioning  ...
>
> fwiw, though I mostly stopped using openbsd on that type of device
> anyway, for the ones that still remain I normally use syslog's memory
> buffer logging for anything chatty, but keep mounting /var/log as
> normal and have more important things written there. this can help
> when I'm diagnosing a failure (there's a higher chance of a log entry
> getting to disk if it doesn't rely on e.g. rsync in rc.shutdown).
>
> (for those, I also modify /etc/rc to force -y for fsck, disable
> library_aslr, and "chmod 000 reorder_kernel" in rc.local so that it's
> disabled in normal conditions but easily reenabled if needed)
>
>

-- 
Kindest regards,
Tom Smyth.

Reply via email to