Logrotate started failing with this error:
error: syslog-ng:7 duplicate log entry for /var/log/messages
The cause was subtle. The logrotate.conf file includes all files in the logrotate.d dir. One of the entries in this directory was syslog-ng which did logrotate on /var/log/messages.
One of my Gentoo emerge --updates had created another file called ._000cfg-syslog-ng (or something similar, I've deleted it now) ready for env-update to merge with the current config. However, env-update didn't delete this file, leaving me with two files trying to logrotate /var/log/messages. Logrotate is clever enough to check all entries for duplicates before doing anything. I compared the two files and there are only differences in the cvs headers.
Lessons Learned:
- env-update is flaky
- check for random hidden files scattered about.
|