We've had a few instances in the past month where /var on deployment-bastion filled to a critical point (also, see T71604 for past trouble w/ pacct logs). The biggest offenders of usage are the two /var/log/account/pacct logs that remain uncompressed following rotation, and the vast majority of the process accounting activity is coming from deployments.
root@deployment-bastion:/var/log/account# sa -m | head -n 8 3751547 19511.41re 496.85cp 0avio 2699k mwdeploy 3671814 3013.74re 342.33cp 0avio 2663k l10nupdate 1397 237.33re 105.13cp 0avio 22077k root 67315 3448.54re 46.97cp 0avio 3127k udp2log 238 10051.94re 0.84cp 0avio 3348k www-data 1395 9.10re 0.58cp 0avio 6734k diamond 2320 2.44re 0.43cp 0avio 21544k nobody 11 18.96re 0.16cp 0avio 4123k
We should investigate whether we can safely remove delaycompress from the rotation config for this log to spare our tiny /var.