yes correct and when it was added I assumed (perhaps ignorantly) it would be used by anything. it is used by backups (the main reason for adding it) which are being added and deleted on a regular basis. but the (/) just continues to fill (it is not just logs)
at least this morning something happened and the red warning cleared
yes it is a small VM but then there is not much on it (mostly email + a fairly idle webserver) it really should not be filling up with much. I do not understand why 3 tmpfs
Probably package caches were flushed, but you’re probably going to keep running out of disk space until you sort out what’s consuming space, and whether you need to expand your / filesystem.
Everything has a place. If you add an, e.g., /backup filesystem with tons of space, and that’s where you configure Virtualmin and other tools to put backups, then you’ll have tons of room for anything using /backup. Most stuff will be using space in / or /var or /home (all of which could be in / or separate filesystems). You should get familiar with what services write where and with how your system is using disk space and plan accordingly.
yes probably there were a couple of packages updated (presumably the cache was in one of those tmpfs) I have other VMs with smaller dev/sda and they just do not seem to be filling up anywhere like this one has (apparently quickly) It is scheduled for a rebuild on a different OS (probably Debian 12) is currently Ubuntu 22. but would like to get to the rot in this first.