Running Debian 12. According to df, I have only 22G remaining space on my main disk (nvme0n1p2); according to ncdu, I should have like 960G:
$ df -H Filesystem Size Used Avail Use% Mounted on udev 17G 0 17G 0% /dev tmpfs 3.4G 4.0M 3.4G 1% /run /dev/nvme0n1p2 1.1T 934G 22G 98% / tmpfs 17G 0 17G 0% /dev/shm tmpfs 5.3M 8.2k 5.3M 1% /run/lock /dev/nvme0n1p1 536M 6.2M 530M 2% /boot/efi tmpfs 3.4G 87k 3.4G 1% /run/user/1000 XXX.XXX.XXX.XXX:/volume1/data 27T 14T 14T 50% /mnt/data XXX.XXX.XXX.XXX:/volume1/media 27T 14T 14T 50% /mnt/robmedia # ncdu . 8.2 TiB [######################] /mnt 29.6 GiB [ ] /var 7.2 GiB [ ] /usr 3.6 GiB [ ] /home 224.8 MiB [ ] /boot 125.2 MiB [ ] /opt 12.0 MiB [ ] /etc . 3.8 MiB [ ] /run 136.0 KiB [ ] /tmp 44.0 KiB [ ] /root e 16.0 KiB [ ] /lost+found 12.0 KiB [ ] /media e 4.0 KiB [ ] /srv e 4.0 KiB [ ] /.cache . 0.0 B [ ] /proc 0.0 B [ ] /sys 0.0 B [ ] /dev Most of what I've found for this phantom drive problem suggests the culprit is usually an enormous reservation of space for a file that has been deleted. lsof +L1 lists many deleted files,maybe as many as a couple hundred, but they're small, and we're maybe talking about 5 GB total phantom space, not 960.
The answer may have something to do with drive overlays - # df -H shows me 20 overlays, one for each docker container I'm running. But when I stop the docker compose file and kill all those containers, the overlays go away but the problem remains.
What do?
ncdu -x /, and replace yourncduoutput with the output of that :) afterwards, your/mntshould count 0! That is, unless you have files in there that do not actually reside on a different file system but your nvme0n1p2# ncdu -x /does take /mnt down to zero, but my problem remains, which is that ncdu accounts for about 40 GB on a 1 TB drive thatdfthinks is 98% full.