lsof -n | grep deleted
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
nginx 4066 root 8w REG 8,1 5140282353 186205 /var/log/nginx/access.log (deleted)
命令打lsof -n | grep deleted印出所有针对已删除文件的读写操作,这类操作是无效的,也正是磁盘空间莫名消失的根本原因!