sda                                     40G                   
├─sda1                                   1M                   
├─sda2                    ext4           1G /boot             
└─sda3                    LVM2_member   39G                   
  └─ubuntu--vg-ubuntu--lv ext4          20G /    

parted 

(parted) p                                                                
Model: VMware Virtual disk (scsi)
Disk /dev/sda: 42.9GB
Sector size (logical/physical): 512B/512B
Partition Table: gpt
Disk Flags: 

Number  Start   End     Size    File system  Name  Flags
 1      1049kB  2097kB  1049kB                     bios_grub
 2      2097kB  1076MB  1074MB  ext4
 3      1076MB  42.9GB  41.9GB

Disk /dev/sda: 40 GiB, 42949672960 bytes, 83886080 sectors
Disk model: Virtual disk    
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: gpt
Disk identifier: BC7CFF26-5C03-4E81-96AD-24F64C95FF13

Device       Start      End  Sectors Size Type
/dev/sda1     2048     4095     2048   1M BIOS boot
/dev/sda2     4096  2101247  2097152   1G Linux filesystem
/dev/sda3  2101248 83886046 81784799  39G Linux filesystem


Disk /dev/mapper/ubuntu--vg-ubuntu--lv: 20 GiB, 21474836480 bytes, 41943040 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes

pvdisplay
  --- Physical volume ---
  PV Name               /dev/sda3
  VG Name               ubuntu-vg
  PV Size               <29.00 GiB / not usable 0   
  Allocatable           yes 
  PE Size               4.00 MiB
  Total PE              7423
  Free PE               2303
  Allocated PE          5120
  PV UUID               BtcE1F-wgZj-f7SB-l8d7-wYdN-5P0n-epVcgu

 
VG:
vgdisplay
  --- Volume group ---
  VG Name               ubuntu-vg
  System ID             
  Format                lvm2
  Metadata Areas        1
  Metadata Sequence No  2
  VG Access             read/write
  VG Status             resizable
  MAX LV                0
  Cur LV                1
  Open LV               1
  Max PV                0
  Cur PV                1
  Act PV                1
  VG Size               <29.00 GiB
  PE Size               4.00 MiB
  Total PE              7423
  Alloc PE / Size       5120 / 20.00 GiB
  Free  PE / Size       2303 / <9.00 GiB
  VG UUID               Uky340-xdnN-zlJN-3Y1p-vgMz-gDKa-LUpKOQ

LV:
lvdisplay
  --- Logical volume ---
  LV Path                /dev/ubuntu-vg/ubuntu-lv
  LV Name                ubuntu-lv
  VG Name                ubuntu-vg
  LV UUID                b82Hpt-Mjcf-OpJK-NBpC-e5Mf-yeQo-jm6HpC
  LV Write Access        read/write
  LV Creation host, time ubuntu-server, 2021-05-20 10:57:25 +0000
  LV Status              available
  # open                 1
  LV Size                20.00 GiB
  Current LE             5120
  Segments               1
  Allocation             inherit
  Read ahead sectors     auto
  - currently set to     256
  Block device           253:0
 

  PV /dev/sda3   VG ubuntu-vg       lvm2 [<29.00 GiB / <9.00 GiB free]
  Total: 1 [<29.00 GiB] / in use: 1 [<29.00 GiB] / in no VG: 0 [0   ]
 

  /etc/lvm/archive/.lvm_gitlab_2339193_255526967: write error failed: No space left on device
  0 physical volume(s) resized or updated / 1 physical volume(s) not resized

  test -x /usr/sbin/logrotate || exit 0
  /usr/sbin/logrotate /etc/logrotate.conf

# rotate log files weekly
weekly

# use the syslog group by default, since this is the owning group
# of /var/log/syslog.
su root syslog

# keep 4 weeks worth of backlogs
rotate 4

# create new (empty) log files after rotating old ones
create

# uncomment this if you want your log files compressed
#compress

# packages drop log rotation information into this directory
include /etc/logrotate.d

# no packages own wtmp, or btmp -- we'll rotate them here
/var/log/wtmp {
    missingok
    monthly
    create 0664 root utmp
    rotate 1
}

/var/log/btmp {
    missingok
    monthly
    create 0660 root utmp
    rotate 1
}

  /ClFS/squid/logs/access.log {
    rotate 5
    daily
    compress
    delaycompress
    missingok
    notifempty
    create 0640 proxy proxy
    sharedscripts
    postrotate
    test ! -e /var/run/squid.pid || test ! -x /usr/sbin/squid || /usr/sbin/squid -k rotate
    endscript
  }
  
  /var/log/squid/*.log {
          daily
          compress
          delaycompress
          rotate 2
          missingok
          nocreate
  }

rotating pattern: /ClFS/squid/logs/access.log  after 1 days (5 rotations)
empty log files are not rotated, old logs are removed
switching euid to 0 and egid to 106
considering log /ClFS/squid/logs/access.log
  Now: 2019-12-10 14:22
  Last rotated at 2019-12-10 06:25
  log does not need rotating (log has been rotated at 2019-12-10 6:25, that is not day ago yet)
not running postrotate script, since no logs were rotated
switching euid to 0 and egid to 0

rotating pattern: /var/log/squid/*.log  after 1 days (2 rotations)
empty log files are rotated, old logs are removed
switching euid to 0 and egid to 106
considering log /var/log/squid/cache.log
  Now: 2019-12-10 14:22
  Last rotated at 2019-12-10 06:00
  log does not need rotating (log has been rotated at 2019-12-10 6:0, that is not day ago yet)
switching euid to 0 and egid to 0

/dev/mapper/vg01-lv01               89G   75G  9,1G  90% /GlFS
SQUID-02:/SquidFS               89G   76G  9,1G  90% /ClFS

А если смотреть объем того, что там находится, то показывает значительно меньше - 21ГБ:
root@squid-01:/ClFS# du -h --max-depth=1 | sort -hr
21G     .
19G     ./squid
1,6G    ./lightsquid
400K    ./lightsquid_cfg
5,0K    ./apache2
root@squid-01:/ClFS# cd /GlFS/
root@squid-01:/GlFS# du -h --max-depth=1 | sort -hr
21G     ./dv0
21G     .
16K     ./lost+found

network:
    version: 2
    ethernets:
        ens160:
            addresses:
            - 10.10.255.171/25
            gateway4: 10.10.255.129

vrrp_instance internal {
    state MASTER
    interface ens160
    virtual_router_id 10
    priority 100
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass +hinFang75
    }
    virtual_ipaddress {
        10.10.255.170/25
    }
}

vrrp_instance external {
    state BACKUP
    interface ens160
    virtual_router_id 20
    priority 50
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass +hinFang75
    }
    virtual_ipaddress {
        212.79.91.71/28 gw 212.79.91.65 dev ens192
    }
}

Создаем таблицы
 echo '100 local' >> /etc/iproute2/rt_tables 
 echo '101 inet' >> /etc/iproute2/rt_tables

Добавляем дефолтный шлюз 
 ip route add default via 10.10.255.129 table 100
 ip route add default via 212.79.91.65 table 101

Определяем правила:
 ip rule add from 10.10.255.170 table 100
 ip rule add from 212.79.91.71  table 101

Привязка ответа по тому же интерфейсу, по которому был получен пакет. 
 iptables -t mangle -A INPUT -i ens160 -j CONNMARK --set-mark 0x1 
 iptables -t mangle -A INPUT -i ens192 -j CONNMARK --set-mark 0x2
 iptables -t mangle -A OUTPUT -j CONNMARK --restore-mark 
 iptables -t mangle -A OUTPUT -m mark ! --mark 0x0 -j ACCEPT
 iptables -t mangle -A OUTPUT -d 10.10.255.170/32 -j MARK --set-mark 0x1
iptables -t mangle -A OUTPUT -d 212.79.91.71/32 -j MARK --set-mark 0x2


Теперь добавим правила роутинга так, чтобы с помощью файрвола выставив нужные значения fwmark мы могли выбрать нужную таблицу роутинга:

 ip rule add priority 101 fwmark 0x1/0x1 lookup  100
 ip rule add priority 102 fwmark 0x2/0x2 lookup  101

network:
    version: 2
    ethernets:
        ens160:
            addresses:
            - 10.10.255.171/25
            gateway4: 10.10.255.129
            dhcp4: no
            nameservers:
                addresses:
                - 10.199.2.2
                - 10.199.2.3
            routes:
                - to: 10.10.255.128/25
                  via: 10.10.255.129
                  table: 101
            routing-policy:
                - from: 10.10.255.128/25
                  table: 101
#
        ens192:
            addresses:
            - 212.79.91.71/28
            gateway4: 212.79.91.65
            dhcp4: no
            nameservers:
                addresses:
                - 8.8.8.8
            routes:
               - to: 212.79.91.64/28
                 via: 212.79.91.65
                 table: 102
            routing-policy:
               - from: 212.79.91.64/28
                 table: 102

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         10.10.255.129  0.0.0.0         UG    0      0        0 ens160
0.0.0.0         212.79.91.65    0.0.0.0         UG    0      0        0 ens192
10.10.255.128  0.0.0.0         255.255.255.128 U     0      0        0 ens160
212.79.91.64    0.0.0.0         255.255.255.240 U     0      0        0 ens192

"Этот веб-сайт не защищен. Код ошибки DLG_FLAGS_INVALID_CA. На сайте используется Transport Security HTTP". 

 ERROR: negotiating TLS on FD 46: error:1425F175:SSL routines:ssl_choose_client_version:inappropriate fallback (1/-1/0)

it@srv-01:~$ zabbix_get -s 10.199.0.15 -p 10050 -k "exim[complete]"
153

it@srv-01:~$ zabbix_get -s 10.199.0.15 -p 10050 -k "exim[complete]"
153

it@srv-01:~$ zabbix_get -s 10.199.0.15 -p 10050 -k "exim[complete]"
tail: невозможно открыть «/var/log/exim4/main-20181105.log» для чтения: Отказано в доступе
awk: cannot open /var/log/exim4/main-20181105.log (Permission denied)
/opt/zexim4.sh: line 78: /tmp/exim_log_pars.txt: Отказано в доступе
exim: permission denied
Couldn't opendir /var/spool/exim4/input: Отказано в доступе
exim: permission denied
Error closing pipe:
/opt/zexim4.sh: line 99: /tmp/stats.txt: Отказано в доступе
153

root@ex2:/opt# cat /etc/sudoers
#
# This file MUST be edited with the 'visudo' command as root.
#
# Please consider adding local content in /etc/sudoers.d/ instead of
# directly modifying this file.
#
# See the man page for details on how to write a sudoers file.
#
Defaults        env_reset
Defaults        mail_badpass
Defaults        secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"

# Host alias specification

# User alias specification

# Cmnd alias specification

# User privilege specification
root    ALL=(ALL:ALL) ALL

# Allow members of group sudo to execute any command
%sudo   ALL=(ALL:ALL) ALL

# See sudoers(5) for more information on "#include" directives:

zabbix ALL=(ALL) NOPASSWD: /sbin/iptables -L INPUT -n

zabbix ALL=(ALL) NOPASSWD: /sbin/iptables -S fail2ban-permanent

zabbix ALL=(ALL) NOPASSWD: /sbin/iptables -S fail2ban-banned

zabbix ALL=(ALL) NOPASSWD: /usr/sbin/exim -bp

zabbix ALL=(ALL) NOPASSWD: /usr/sbin/dmidecode

zabbix ALL=(ALL) NOPASSWD: /usr/bin/stat

zabbix ALL=(ALL) NOPASSWD: /usr/bin/md5sum

zabbix ALL=(ALL) NOPASSWD: /usr/bin/du

Defaults:zabbix        !requiretty

zabbix ALL=(ALL) NOPASSWD: /opt/zexim4.sh

zabbix ALL=(ALL) NOPASSWD: /var/log/exim4

zabbix ALL=(ALL) NOPASSWD: /tmp/

zabbix ALL=(ALL) NOPASSWD: /var/spool/exim4