Logrotate tuning – how to deal with high logs traffic

Logs are one of the most important data on server as they can indicate what is causing problems on system. I was struggled to implement logrotate on almost 300 servers at once and get things work as expected. That’s why I decided to share Ansible scripts for logrotate tuning and write an article about problems I overcame.

Czytaj dalej „Logrotate tuning – how to deal with high logs traffic”

How to allow supervisord to run as non-root user?

Supervisor is running as root by default, but it creates security side effects. This opens us to a possibility of executing code as root for users who don’t have root access but do have access to repo that is going to generate supervisor config files in user space.

In order to mitigate that, supervisor should be ran as non-root user.

Czytaj dalej „How to allow supervisord to run as non-root user?”