Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I just rebuild ossec using the mock tool on Centos 6.4 and my /var space rack up almost by 900m is this normal ?

share|improve this question

closed as unclear what you're asking by mdpc, dawud, Hyppy, Jenny D, masegaloeh Apr 7 '15 at 23:48

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question.If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 5 down vote accepted

You said you used mock. This tool builds packages in a clean chroot environment, but it also keeps a cache of the minimal environment for use in building the next package.

If you don't intend to build any other packages ever again, then you can clean out all of the data that mock keeps around:

mock -r epel-6-x86_64 --scrub=all
share|improve this answer
yes I plan to build when there is a next update of ossec. Is it ok to keep the files there ? What is your experience with mock is reliable and issues with dependency ? – biz14 Sep 1 '13 at 16:55
Yes, you can leave the cache in place. It will be updated or rebuilt as necessary automatically. – Michael Hampton Sep 1 '13 at 16:56
Is it safe to use mock ? I am first time using the reason being ossec is not available in .rpm format and only atomic repo have it but then it requires me to upgrade mysql which centos comes with the stability preference. – biz14 Sep 1 '13 at 17:04
No, the old version will be cleaned out of the mock chroot when you build a new one. – Michael Hampton Sep 1 '13 at 17:46
You update it like every other package. This is now far off the topic of your question; if you have more questions about basic system administration you should ask your senior admin, or consult the documentation. – Michael Hampton Sep 1 '13 at 18:21

I believe you have installed ossec to default location ie /var/ossec. That's the problem.Its better to install it in other partitions since /var is small.

share|improve this answer
I rebuild it using mock so it automatically goes into /var I cant control the rebuild ? – biz14 Aug 31 '13 at 7:03

Not the answer you're looking for? Browse other questions tagged or ask your own question.