Log2Ram works just like ramlog for systemd (on Debian 8 Jessie for example).

Useful for RaspberryPi for not writing on the SD card all the time. You need it because your SD card doesn't want to suffer anymore!

Explanations: The script creates a /var/log mount point in RAM. So any writing of the log to the /var/log folder will not actually be written to disk (in this case to the SD card on a Raspberry Pi) but directly to RAM. By default, every day the CRON will synchronize the contents in RAM with the folder located on the physical disk. The script will also make this copy of RAM to disk in case of machine shutdowns (but, of course, it still won't do it in case of power failures). This way you can avoid excessive writing on the SD card and extend its life.

Log2Ram's script works on every Linux system. If you don't have Systemd, you can still use Log2Ram with your own daemon manager.

Log2Ram is based on transient /var/log for Systemd. For more information, check here.

1. Installation
2. Is it working?
3. Upgrading
4. Customization
5. Troubleshooting
6. Uninstallation

echo "deb [signed-by=/usr/share/keyrings/azlux-archive-keyring.gpg] http://packages.azlux.fr/debian/ bookworm main" | sudo tee /etc/apt/sources.list.d/azlux.list
sudo wget -O /usr/share/keyrings/azlux-archive-keyring.gpg  https://azlux.fr/repo.gpg
sudo apt update
sudo apt install log2ram

curl -L https://github.com/azlux/log2ram/archive/master.tar.gz | tar zxf -
cd log2ram-master
chmod +x install.sh && sudo ./install.sh
cd ..
rm -r log2ram-master

For better performances, RSYNC is a recommended package.

REBOOT before installing anything else (for example apache2)

After installing and rebooting, use systemctl to check if Log2Ram started successfully:

systemctl status log2ram

This will show a color-coded status (green: active/red: failed), as well as the last few log lines. To show the full log (scrolled to the end), run:

journalctl -u log2ram -e

The log is also written to /var/log/log2ram.log.

You can also inspect the mount folder in RAM with:

df -hT | grep log2ram | awk '{print " Name: " $1 "\nMount: " $7 "\n Type: " $2 "\nUsage: " $6 "\n Size: " $3 "\n Used: " $4 "\n Free: " $5}'

Returns:

 Name: log2ram
Mount: /var/log
 Type: tmpfs
Usage: 72%
 Size: 128M
 Used: 93M
 Free: 36M

Or also:

mount | grep log2ram | awk -F'[ ()]+' '{print "   Name: " $1 "\n  Mount: " $3 "\n   Type: " $5 "\nOptions: " $6}'

Returns:

   Name: log2ram
  Mount: /var/log
   Type: tmpfs
Options: rw,nosuid,nodev,noexec,noatime,size=131072k,mode=755,uid=100000,gid=100000,inode64

If you do not get any line as response of these commands, something is not working. Refer to this section.

You need to stop Log2Ram (systemctl stop log2ram) and execute the installation process. If you used APT, this will be done automatically.

In the file /etc/log2ram.conf, there are nine variables:

• SIZE: defines the size the log folder will reserve into the RAM (default is 128M).
• USE_RSYNC: (commented out by default = true) use cp instead of rsync (if set to false).
• NOTIFICATION: disables the notification system mail if there is not enough place in RAM (if set to false).
• NOTIFICATION_COMMAND: Specify the command for sending error notifications (By default, it uses the mail command).
• PATH_DISK: activate log2ram for other path than default one. Paths should be separated with a ;.
• JOURNALD_AWARE: enable log rotation for journald logs before syncing. (default is true). Check the comment in the config file or the Troubleshooting section below for journald SystemMaxUse recommendations.
• ZL2R: enable zram compatibility (false by default). Check the comment in the config file. See https://github.com/StuartIanNaylor/zram-swap-config to configure a zram space on your raspberry before enabling this option.
• COMP_ALG: choose a compression algorithm from those listed in /proc/crypto. (default is lz4). See Compressor section below for options.
• LOG_DISK_SIZE: specifies the uncompressed zram disk size

By default, Log2Ram writes to disk every day. If you think this is too much, you can run systemctl edit log2ram-daily.timer and for example add:

[Timer]
OnCalendar=
OnCalendar=Mon *-*-* 23:55:00

Note: The > is important because it disables all existing times (e.g. the default one) for log2ram.

sudo du -hs /var/log/* | sort -h | tail -n 3

SystemMaxUse=20M

journalctl --vacuum-size=32M

sudo systemctl restart systemd-journald

sudo reboot

systemctl status log2ram

sudo apt remove log2ram

chmod +x /usr/local/bin/uninstall-log2ram.sh && sudo /usr/local/bin/uninstall-log2ram.sh