Instead of less, we could use most. It's the newest and feature rich pager tool:

more < less < most.

Instead of less, we could use most. It's the newest and feature rich pager tool:

more < less < most.

Done :D

Just a general thought:

Is there a specific reason to put the rspamd.log inside the container instead of the central (usually volumed) logging directory in /var/log/mail ?

I'm currently using the following patches to add logrotate + change the path:

/etc/rspamd/local.d/logging.inc
filename = "/var/log/mail/rspamd.log";

/etc/logrotate.d/rspamd

/var/log/mail/rspamd.log
{
  compress
  copytruncate
  delaycompress
  rotate 4
  weekly
}

Is there a specific reason to put the rspamd.log inside the container instead of the central (usually volumed) logging directory in /var/log/mail ?

supervisord manages the services by running them in the foreground with stdout + stderr logs written to files in /var/log/supervisor/${service}.log. Often these logs are empty / minimal or repeated in the main mail log.

I imagine it's just been that way since supervisor was introduced. There has been talk about refactoring how we manage logging, where Vector may be suitable. Ideally each service will keep it's logs separate and Vector would support configuration to output a log that combines those streams at whatever log level desired. It wouldn't be fixed to /var/log/mail then either.

Yeah, that sounds good.

My reasoning for the comment was somewhat along the lines of: If you write to /var/log/supervisor you will likely write inside the container as well as not performing any log rotation. This does not matter for small files, but might matter for larger one - especially on systems with many users/mail and/or very infrequent restarts.

If I look at the file sizes of the files in /var/log/supervisor on my system I can see that they are either empty or really small (with the exception of saslauthd_ldap.log for me). The rspamd.log also has a significant size (tough I'm using the Abuseix RBL - mileage may vary here).

For me it's just a bit odd that we use a somewhat centralized logging directory + logrotate for many things mail-related, but not here. But this is also the wrong ticket to discuss this anyway, so this is just a +1 for centralized logging.

I'll come up with an update tomorrow

I adjusted the PR so that the changes proposed by @reneploetz are incorporated. I will provide another PR that introduces updates to debug-packages later to have this PR only care about Rspamd and its logs.

The Rspamd logs are now managed by logrotate as well. Until Vector is used, I think this is the best way to move forward.

Thanks for the updated pull request!

Documentation preview for this PR is ready! 🎉

Built with commit: 011b298