JOURNALD.CONF

NAME
SYNOPSIS
æè¿°
éç½®ç®å½åå¶ä¼å级
é项
æ¥å¿è½¬å
åè§
NOTES
è·

---

NAME

journald.conf, journald.conf.d - æ¥å¿æå¡éç½®æ件

SYNOPSIS

/etc/systemd/journald.conf

/etc/systemd/journald.conf.d/*.conf

/run/systemd/journald.conf.d/*.conf

/usr/lib/systemd/journald.conf.d/*.conf

æè¿°

è¿äºæ件ç¨äºé置系ç»æ¥å¿æå¡ systemd-journald.service(8) çè¡ä¸ºã

éç½®ç®å½åå¶ä¼å级

é»è®¤è®¾ç½®æ¯å¨ç¼è¯æé´ç¡®å®çï¼ æ以ä»å¨ç¡®å®éè¦ä¿®æ¹é»è®¤è®¾ç½®çæåµä¸ï¼ æéè¦ä½¿ç¨éç½®æ件ãä½äº /etc/systemd/ ç®å½ä¸çåå§éç½®æä»¶ï¼ ä»åå«äºå±ç¤ºé项é»è®¤å¼ç注éï¼ ç®çå¨äºæ¹ä¾¿ç³»ç»ç®¡çåæ¥çåç´æ¥ä¿®æ¹ã

å¦æ软件åæ³è¦èªå®ä¹æäºé»è®¤è®¾ç½®ï¼ é£ä¹å¿é¡»å°èªå®ä¹çéç½®æ件å®è£å° /usr/lib/systemd/*.conf.d/ ç®å½ä¸ã /etc/ ç®å½ä»ä¾ç³»ç»ç®¡çå使ç¨ã ç³»ç»ç®¡çåå¯ä»¥å©ç¨ä¸é¢çé»è¾æ¥è¦çé»è®¤è®¾ç½®ï¼ 主éç½®æ件æå被读åï¼ ä¼å级ä¹æä½ã ææ *.conf.d/ ä¸çéç½®æ件 é½ä¼è¦ç主éç½®æ件ä¸ç设置ã ææ *.conf.d/ ä¸çéç½®æ件(æ è®ºä½äºåªä¸ªç®å½ä¸)ï¼ ç»ä¸æç§æ件åçåå¸é¡ºåºå¤çã å¦æå¨å¤ä¸ªéç½®æ件ä¸è®¾ç½®äºåä¸ä¸ªéé¡¹ï¼ é£ä¹ä»ä»¥æ件åæé å(å- å¸é¡ºåº)çé£ä¸ä¸ªä¸ºåã 为äºä¾¿äºæåºï¼ 建议ç»ææ *.conf.d/ ä¸çéç½®æ件 é½å ä¸ä¸¤ä½åè¿å¶æ°åçæ件ååç¼ã

å¦æç³»ç»ç®¡çåæ³è¦å±è½ /usr/lib/ ç®å½ä¸çæ个éç½®æä»¶ï¼ é£ä¹æä½³åæ³æ¯å¨ /etc/ ç®å½ä¸ å建ä¸ä¸ªæå /dev/null çåå符å·é¾æ¥ï¼ å³å¯å½»åºå±è½ /usr/lib/ ç®å½ä¸çååæ件ã

é项

ææé项é½ä½äº "[Journal]" å°èï¼

Storage=

å¨åªéåå¨æ¥å¿æä»¶ï¼ "volatile" 表示ä»ä¿åå¨ååä¸ï¼ ä¹å°±æ¯ä»ä¿åå¨ /run/log/journal ç®å½ä¸(å°ä¼è¢«èªå¨æéå建)ã "persistent" 表示ä¼åä¿åå¨ç£çä¸ï¼ ä¹å°±ä¼åä¿åå¨ /var/log/journal ç®å½ä¸- (å°ä¼è¢«èªå¨æéå建)ï¼ ä½è¥å¤±è´¥(ä¾å¦å¨ç³»ç»å¯å¨æ©æ"/var"å°æªæè½½)ï¼ å转èä¿åå¨ /run/log/journal ç®å½ä¸(å°ä¼è¢«èªå¨æéå建)ã "auto"(é»è®¤å¼) ä¸ "persistent" ç±»ä¼¼ï¼ ä½ä¸èªå¨å建 /var/log/journal ç®å½ï¼ å æ- ¤å¯ä»¥æ ¹æ®è¯¥ç®å½çåå¨ä¸å¦å³å®æ¥å¿çä¿åä½ç½®ã "none" 表示ä¸ä¿å- ä»»ä½æ¥å¿(ç´æ¥ä¸¢å¼æææ¶éå°çæ¥å¿)ï¼ ä½æ¥å¿è½¬å(è§ä¸æ)ä¸åå½±åã é»è®¤å¼æ¯ "auto"

Compress=

é»è®¤å¼"yes"è¡¨ç¤ºï¼ å缩åå¨å¤§äºç¹å®éå¼ç对象ã

Seal=

é»è®¤å¼"yes"表示ï¼å¦æåå¨ä¸ä¸ª"sealing key"(ç± journalctl(1) ç --setup-keys å½ä»¤å建)ï¼ é£ä¹å°±ä¸ºæææä¹ä¿åçæ¥å¿æ件å¯ç¨ FSS(Seekable Sequential Key Generators [1] )ä¿æ¤ï¼ 以é¿åæ¥å¿æ件被æ¶æææ æçä¿®æ¹ã

SplitMode=

设置å¦ä½æç¨æ·åå²æ¥å¿æ件ï¼ä»¥å®ç°ä¸åç访é®æ§å¶ç- ç¥(æ¥å¿å®æ¤è¿ç¨ä¼ç¡®ä¿æ¯ä¸ªç¨æ·é½è½è¯»åèªå·±çæ¥å¿æ件)ã 注æï¼ä»åå²æä¹ä¿åçæ¥å¿(/var/log/journal)ï¼æ°¸ä¸åå²ååä¸- çæ¥å¿(/run/log/journal)ã å¯ä»¥ä½¿ç¨çåå²çç¥å¦ä¸ï¼ "uid" 表示æ¯ä¸ªç¨æ·é½æèªå·±ä¸å±çæ¥å¿æ件(æ è®ºè¯¥ç¨æ·æ¯å¦æ¥æç»å½ä¼è¯)ï¼ ä½ç³»ç»ç¨æ·çæ¥å¿ä¾ç¶è®°å½å°ç³»ç»æ¥å¿ä¸ãè¿æ¯é»è®¤å¼ã

"none" 表示ä¸å¯¹æ¥å¿æ件è¿è¡åå²ï¼èæ¯å°æææ¥å¿é½è®°å½å°ç³»ç»æ¥å¿ä¸ã è¿æå³çéç¹æç¨æ·æ ¹æ¬æ æ³è¯»åå±äºèªå·±çæ¥å¿ä¿¡æ¯ã

RateLimitIntervalSec=, RateLimitBurst=

ç¨äºéå¶æ¥å¿ççæé度(设为é¶è¡¨ç¤ºä¸ä½éå¶)ã RateLimitIntervalSec= ç¨äºè®¾ç½®ä¸ä¸ªæ¶é´æ®µé¿åº¦ï¼é»è®¤å¼æ¯30ç§ã RateLimitBurst= ç¨äºè®¾ç½®ä¸ä¸ªæ£æ´æ°ï¼è¡¨ç¤ºæ¶æ¯æ¡æ°ï¼é»è®¤å¼æ¯1000æ¡ã è¡¨ç¤ºå¨ RateLimitIntervalSec= æ¶é´æ®µåï¼ æ¯ä¸ªæå¡æå¤å许产ç RateLimitBurst= æ°é(æ¡æ°)çæ¥å¿ã å¨åä¸ä¸ªæ¶é´æ®µåï¼è¶åºæ°ééå¶çæ¥å¿å°è¢«ä¸¢å¼ï¼ç´å°ä¸ä¸ä¸ªæ¶é´æ®µæè½å次å¼å§è®°å½ã 对äºææ被丢å¼çæ¥å¿æ¶æ¯ï¼ä»ç¨ä¸æ¡ç±»ä¼¼"xxxæ¡æ¶æ¯è¢«ä¸¢å¼"çæ¶æ¯æ¥ä»£æ¿ã è¿ä¸ªéå¶æ¯é对æ¯ä¸ªæå¡çéå¶ï¼ä¸ä¸ªæå¡è¶é并ä¸ä¼å½±åå°å¦ä¸ä¸ªæå¡çæ¥å¿è®°å½ã RateLimitIntervalSec= å¯ä»¥ä½¿ç¨ä¸é¢çæ¶é´åä½ï¼"ms", "s", "min", "h", "d"

SystemMaxUse=, SystemKeepFree=, SystemMaxFileSize=, SystemMaxFiles=, RuntimeMaxUse=, RuntimeKeepFree=, RuntimeMaxFileSize=, RuntimeMaxFiles=

éå¶æ¥å¿æ件ç大å°ä¸éã 以 "System" å¼å¤´çé项ç¨äºéå¶ç£ç使ç¨éï¼ ä¹å°±æ¯ /var/log/journal ç使ç¨éã 以 "Runtime" å¼å¤´çé项ç¨äºéå¶åå使ç¨éï¼ ä¹å°±æ¯ /run/log/journal ç使ç¨éã 以 "System" å¼å¤´çé项ä»å¨ /var/log/journal ç®å½ç¡®å®åå¨ä¸å¯åæ¶æææä¹ã ä½ä»¥ "Runtime" å¼å¤´çé项永è¿ææä¹ã ä¹å°±æ¯è¯´ï¼ å¨ç³»ç»å¯å¨æ©æ /var å°æªæè½½æ¶ã æèç³»ç»ç®¡çåç¦æ¢å¨ç£çä¸åå¨æ¥å¿çæ¶åï¼ ä»æ "Runtime" å¼å¤´çé项ææä¹ã journalctl ä¸ systemd-journald å·¥å·ä¼å¿½ç¥æ¥å¿ç®å½ä¸ ææåç¼åä¸çäº ".journal" æ ".journal˜" çæ件ã æ¢å¥è¯è¯´ï¼ æ¥å¿ç®å½ä¸ä¸åºè¯¥åå¨åç¼åä¸çäº ".journal" æ ".journal˜" çæä»¶ï¼ å ä¸ºè¿äºæ件永è¿ä¸ä¼è¢«æ¸çã

SystemMaxUse= ä¸ RuntimeMaxUse= éå¶å¨é¨æ¥å¿æ件å å¨ä¸èµ·æå¤å¯ä»¥å ç¨å¤å°ç©ºé´ã SystemKeepFree= ä¸ RuntimeKeepFree= 表示é¤æ¥å¿æ件ä¹å¤ï¼è³å°ä¿çå¤å°ç©ºé´ç»å¶ä»ç¨éã systemd-journald ä¼åæ¶èèè¿ä¸¤ä¸ªå ç´ ï¼ 并ä¸å°½ééå¶æ¥å¿æ件çæ»å¤§å°ï¼ä»¥åæ¶æ»¡è¶³è¿ä¸¤ä¸ªéå¶ã

SystemMaxUse= ä¸ RuntimeMaxUse= çé»è®¤å¼æ¯10%空é´ä¸4G空é´ä¸¤èä¸- çè¾å°èï¼ SystemKeepFree= ä¸ RuntimeKeepFree= çé»è®¤å¼æ¯15%空é´ä¸4G空é´ä¸¤èä¸çè¾å¤§èï¼ å¦æå¨ systemd-journald å¯å¨æ¶ï¼ æ件系ç»å³å°è¢«å¡«æ»¡å¹¶ä¸å·²ç»è¶è¶äº SystemKeepFree= æ RuntimeKeepFree= çéå¶ï¼é£ä¹æ¥å¿è®°å½å°è¢«æåã ä¹å°±æ¯è¯´ï¼å¦æå¨å建æ¥å¿æ件æ¶ï¼æ件系ç»æå足ç空é²ç©ºé´ï¼ ä½æ¯åæ¥æ件系ç»è¢«å¶ä»éæ¥å¿æ件è¿å¤å ç¨ï¼ é£ä¹ systemd-journald åªä¼ç«å³æåæ¥å¿è®°å½ï¼ ä½ä¸ä¼å é¤å·²ç»åå¨çæ¥å¿æ件ã

SystemMaxFileSize= ä¸ RuntimeMaxFileSize= éå¶å个æ¥å¿æ件çæ大ä½ç§¯ï¼ å°è¾¾æ¤éå¶åæ¥å¿æ件å°ä¼èªå¨æ»å¨ã é»è®¤å¼æ¯å¯¹åºç SystemMaxUse= ä¸ RuntimeMaxUse= å¼ç1/8 ï¼ è¿ä¹æå³çæ¥å¿æ»å¨é»è®¤ä¿ç7个åå²æ件ã

æ¥å¿å¤§å°çå¼å¯ä»¥ä½¿ç¨ä»¥1024为åºæ°ç K, M, G, T, P, E åç¼ï¼ åå«å¯¹åºäº 1024, 1024², ... åèã

SystemMaxFiles= ä¸ RuntimeMaxFiles= éå¶æå¤å许åæ¶å- å¨å¤å°ä¸ªæ¥å¿æä»¶ï¼ è¶åºæ¤éå¶åï¼ æèçæ¥å¿æ件å°è¢«å é¤ï¼ èå½åçæ´»å¨æ¥å¿æ件åä¸åå½±åã é»è®¤å¼ä¸º100个ã

MaxFileSec=

æ¥å¿æ»å¨çæ¶é´é´éã é常并ä¸éè¦ä½¿ç¨åºäºæ¶é´çæ¥å¿æ»å¨çç¥ï¼ å ä¸ºç± SystemMaxFileSize= ä¸ RuntimeMaxFileSize= æ§å¶çåºäºæ件大å°çæ¥å¿æ»å¨çç¥ å·²ç»å¯ä»¥ç¡®ä¿æ¥å¿æ件ç大å°ä¸ä¼è¶æ ã é»è®¤å¼æ¯ä¸ä¸ªæï¼ è®¾ä¸ºé¶è¡¨ç¤ºç¦ç¨åºäºæ¶é´çæ¥å¿æ»å¨çç¥ã å¯ä»¥ä½¿ç¨ "year", "month", "week", "day", "h", "m" æ¶é´åç¼ï¼ è¥ä¸ä½¿ç¨åç¼å表示以ç§ä¸ºåä½ã

MaxRetentionSec=

æ¥å¿æ件çæ大ä¿çæéã å½æ¥å¿æ件çæåä¿®æ¹æ¶é´è¶è¿æ¤æéåå°è¢«å é¤ã é»è®¤å¼é¶è¡¨ç¤ºä¸ä½¿ç¨åºäºæ¶é´çæ¥å¿å é¤çç¥ã é常并ä¸éè¦ä½¿ç¨åºäºæ¶é´çæ¥å¿å é¤çç¥ï¼å ä¸ºç± SystemMaxUse= ä¸ RuntimeMaxUse= æ§å¶çåºäºæ件大å°çæ¥å¿æ»å¨çç¥ å·²ç»å¯ä»¥ç¡®ä¿æ¥å¿æ件ç大å°ä¸ä¼è¶æ ã å¯ä»¥ä½¿ç¨ "year", "month", "week", "day", "h", "m" æ¶é´åç¼ï¼ è¥ä¸ä½¿ç¨åç¼å表示以ç§ä¸ºåä½ã

SyncIntervalSec=

åç£çå·åæ¥å¿æ件çæ¶é´é´éï¼é»è®¤å¼æ¯äºåéã å·åä¹åï¼æ¥å¿æ件å°ä¼å¤äºç¦»çº¿(OFFLINE)ç¶æã 注æï¼å½æ¥æ¶å° CRIT, ALERT, EMERG 级å«çæ¥å¿æ¶æ¯åï¼ å°ä¼æ æ¡ä»¶çç«å³å·åæ¥å¿æ件ã å æ- ¤è¯¥è®¾ç½®ä»å¯¹ ERR, WARNING, NOTICE, INFO, DEBUG 级å«çæ¥å¿æ¶æ¯ææä¹ã

ForwardToSyslog=, ForwardToKMsg=, ForwardToConsole=, ForwardToWall=

ForwardToSyslog= 表示æ¯å¦å°æ¥æ¶å°çæ¥å¿æ¶æ¯è½¬åç»ä¼ ç»ç syslog [2] å®æ¤è¿ç¨ï¼é»è®¤å¼ä¸º"no"ã å¦æ设为"yes"ï¼ä½æ¯æ²¡æä»»ä½è¿ç¨çå¬å¯¹åºçå¥æ¥å- ï¼é£ä¹è¿ç§è½¬åæ¯æ æä¹çã æ¤é项å¯ä»¥è¢«åæ ¸å¼å¯¼é项 "systemd.journald.forward_to_syslog=" è¦çã ForwardToKMsg= 表示æ¯å¦å°æ¥æ¶å°çæ¥å¿æ¶æ¯è½¬åç»åæ ¸æ¥å¿ç¼å²åº(kmsg)ï¼é»è®¤å¼ä¸º"no"ã æ¤é项å¯ä»¥è¢«åæ ¸å¼å¯¼é项 "systemd.journald.forward_to_kmsg=" è¦çã ForwardToConsole= 表示æ¯å¦å°æ¥æ¶å°çæ¥å¿æ¶æ¯è½¬åç»ç³»ç»æ§å¶å°ï¼é»è®¤å¼ä¸º"no"ã å¦æ设为"yes"ï¼é£ä¹å¯ä»¥éè¿ä¸é¢ç TTYPath= æå®è½¬åç®æ ã æ- ¤é项å¯ä»¥è¢«åæ ¸å¼å¯¼é项 "systemd.journald.forward_to_console=" è¦çã ForwardToWall= 表示æ¯å¦å°æ¥æ¶å°çæ¥å¿æ¶æ¯ä½ä¸ºè- ¦åä¿¡æ¯åéç»ææå·²ç»å½ç¨æ·ï¼é»è®¤å¼ä¸º"yes"ã æ- ¤é项å¯ä»¥è¢«åæ ¸å¼å¯¼é项 "systemd.journald.forward_to_wall=" è¦çã

MaxLevelStore=, MaxLevelSyslog=, MaxLevelKMsg=, MaxLevelConsole=, MaxLevelWall=

MaxLevelStore= 设置记å½å°æ¥å¿æ件ä¸çæé«æ¥å¿ç- 级ï¼é»è®¤å¼ä¸º"debug"ï¼ MaxLevelSyslog= 设置转åç»ä¼ ç»ç syslog [2] å®æ¤è¿ç¨çæé«æ¥å¿ç级ï¼é»è®¤å¼ä¸º"debug"ï¼ MaxLevelKMsg= 设置转åç»åæ ¸æ¥å¿ç¼å²åº(kmsg)çæé«æ¥å¿ç级ï¼é»è®¤å¼ä¸º"notice"ï¼ MaxLevelConsole= 设置转åç»ç³»ç»æ§å¶å°çæé«æ¥å¿ç- 级ï¼é»è®¤å¼ä¸º"info"ï¼ MaxLevelWall= 设置ä½ä¸ºè- ¦åä¿¡æ¯åéç»ææå·²ç»å½ç¨æ·çæé«æ¥å¿ç级ï¼é»è®¤å¼ä¸º"emerg"ï¼ è¿äºé项æ¢å¯ä»¥è®¾ä¸ºæ¥å¿ç级çåç§°ï¼ ä¹å¯ä»¥è®¾ä¸ºæ¥å¿ç- 级对åºçæ°åï¼ "emerg"(0), "alert"(1), "crit"(2), "err"(3), "warning"(4), "notice"(5), "info"(6), "debug"(7) ã ææé«äºè®¾å®ç- 级çæ¥å¿æ¶æ¯é½å°è¢«ç´æ¥ä¸¢å¼ï¼ ä»ä¿å/转åå°äºçäºè®¾å®ç级çæ¥å¿æ¶æ¯ã

TTYPath=

æå® ForwardToConsole=yes æ¶æ使ç¨çæ§å¶å°TTYï¼ é»è®¤å¼æ¯ /dev/console

æ¥å¿è½¬å

æ两ç§ä¸åçæ¥å¿è½¬åæ¹æ³ï¼ (1)éè¿å¥æ¥åæ件(/run/systemd/journal/syslog) å¯ä»¥å°æ¶éå°çæ¥å¿æ¶æ¯ ç«å³è½¬åç»å¥æ¥åççå¬è¿ç¨(ä¼ ç»ç syslog [2] å®æ¤è¿ç¨)ã æ¤æ¹æ³å ForwardToSyslog= æ令çæ§å¶ã (2)æ¥å¿æ¥æ¶è¿ç¨ä½ä¸ºå®¢æ·ç«¯è¿è¡ï¼å°±å journalctl(1) ä¸æ ·è¯»åæ¥å¿æ件ã å æ¤ï¼æ¤æ¹æ³å¨ Storage=none æ¶æ æã æ¤æ¹æ³ä¸è½å®æ¶è¯»åæ¥å¿æ¶æ¯ï¼ ä½æ¯å¯ä»¥è¯»åååä¿å- çæ¥å¿æ¶æ¯(ä¾å¦å¨ç³»ç»å¯å¨å®æä¹å读åç³»ç»å¯å¨æ©æçæ¥å¿æ¶æ¯)ã æ- ¤æ¹æ³è¿å¯ä»¥è¯»åå°å®æ´çæ¥å¿åæ°æ®ã æ¤æ¹æ³ä¸è¬æ æ³è¯»åå½åææ°çæ¥å¿æ¶æ¯ï¼ åªè½è¯»åå·²ç»è¢«è®°å½å°æ件系ç»ä¸çæ¥å¿æ¶æ¯ã 注æï¼syslog [2] å®æ¤è¿ç¨é常使ç¨æ¤æ¹æ³(èä¸æ¯åä¸ç§æ¹æ³)ï¼ å æ¤ Storage= é项(èä¸æ¯ ForwardToSyslog= é项) ä¸åºè¯¥è®¾ä¸º"none"ã

åè§

systemd(1), systemd-journald.service(8), journalctl(1), systemd.journal-fields(7), systemd-system.conf(5)

NOTES

1.

Seekable Sequential Key Generators

https://eprint.iacr.org/2013/397

2.

syslog

//linux/sysklogd.html

è·

æ¬é¡µé¢ä¸æçç±ä¸æ man æå页计åæä¾ã

ç¿»è¯äººåï¼éæ¥å½
éæ¥å½ä½åéï¼http://www.jinbuguo.com
ä¸æ man æå页计åï¼https://github.com/man-pages-zh/manpages-zh

---