> Did you check if sysinst coredumped ? the / filesystem can be full because
> sysinst crashed and dumped a core in the ram disk.

Perhaps the shipped install root should have an immutable 0-length
/sysinst.core file?  That would, at least, prevent filling up the ramdisk.