Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I just rebuild ossec using the mock tool on Centos 6.4 and my /var space rack up almost by 900m is this normal ?

share|improve this question

2 Answers 2

up vote 4 down vote accepted

You said you used mock. This tool builds packages in a clean chroot environment, but it also keeps a cache of the minimal environment for use in building the next package.

If you don't intend to build any other packages ever again, then you can clean out all of the data that mock keeps around:

mock -r epel-6-x86_64 --scrub=all
share|improve this answer
yes I plan to build when there is a next update of ossec. Is it ok to keep the files there ? What is your experience with mock is reliable and issues with dependency ? –  biz14 Sep 1 '13 at 16:55
Yes, you can leave the cache in place. It will be updated or rebuilt as necessary automatically. –  Michael Hampton Sep 1 '13 at 16:56
Is it safe to use mock ? I am first time using the reason being ossec is not available in .rpm format and only atomic repo have it but then it requires me to upgrade mysql which centos comes with the stability preference. –  biz14 Sep 1 '13 at 17:04
No, the old version will be cleaned out of the mock chroot when you build a new one. –  Michael Hampton Sep 1 '13 at 17:46
You update it like every other package. This is now far off the topic of your question; if you have more questions about basic system administration you should ask your senior admin, or consult the documentation. –  Michael Hampton Sep 1 '13 at 18:21

I believe you have installed ossec to default location ie /var/ossec. That's the problem.Its better to install it in other partitions since /var is small.

share|improve this answer
I rebuild it using mock so it automatically goes into /var I cant control the rebuild ? –  biz14 Aug 31 '13 at 7:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.