Thursday, April 21, 2022

Recent Questions - Server Fault

Recent Questions - Server Fault


What are the functions / AT commands to change BTS station via my GSM modem?

Posted: 21 Apr 2022 01:46 AM PDT

I have a GSM modem (Huawei E3276 LTE), is there any way in Python to change BTS station to another ? Regards

Cannot make any outgoing TLS/SSL connections from a server

Posted: 21 Apr 2022 01:25 AM PDT

As of yesterday it seems we have some magical error on the win server 2012-r2, where attempts to establish TLS/SSL fail with timeout.

Network appears to be reachable (ping, traceroute), however upon any attempts to establish TLS it fails.

Any ideas?

Thanks, Janis

Compare disk usage snapshots

Posted: 21 Apr 2022 01:17 AM PDT

I have a cloud server setup:

Ubuntu 20.04  CyberPanel  OpenLiteSpeed  

When I installed the setup, the disk space (40 GB) usage was 50%, now after a month it is 80%. I have removed all files in /usr/local/lsws/logs/ and there are not much emails.

How to find which file / folder is increasing in space? One way is to take a snapshot of all files and folder with file size, and compare it with today and a few days after.

Is there a way to do it? How to take complete snapshot of all files and older with their filesize?

Or any other way?

Is there a way to monitor remotly multiple windows server for hardware performance?

Posted: 21 Apr 2022 01:16 AM PDT

We have 5 server installed as VM with "Windows Server 2016" on VMWware. These servers are configured as RDS, means multiple users are working on it. Users which are connected on these servers are running heavy workload. Sometimes it happens, that the server is crashing. Means it has a black screen, so no possibility to access over RDP. However access on filesystem over UNC is still possible.

I would like to ask about a possiblity to real time monitor these servers. I was thinking about installing a server, which has the service installed and is doing remote monitoring these 5 servers in realtime.

Is there any role build in Windows Server to use it? Thank you.

Interface Metric is empty for VPN

Posted: 21 Apr 2022 01:13 AM PDT

When connected to VPN, the interface metric for the VPN interface is empty. I referred to Microsoft docs and it says the interface metric range is 5-50 depending on the link speed.

Does empty refer to any default value. This is not causing any issues but I just want to understand why is that empty and how it was set, if the valid range is 5-50.

Setup postfix as smtp relay

Posted: 21 Apr 2022 01:04 AM PDT

I have a running centos 7 server with postfix configured to allow incoming mails to my domain, say, to test@example.org

Now I want to send a mail FROM this test@example.org. My old ISP used to have a smtp-out server that would accept me as a known mail client with a username and password. But my current one doesn't provide a smtp server.

How can I configure postfix to do the same when the mail from is test@example.org and with a username and password?

Best,

masking after redrection using .htaccess [duplicate]

Posted: 21 Apr 2022 12:55 AM PDT

I have read many examples that use the .htaccess file method to mask a url. None of them works for me. It might be something simple that I am missing. Please bare with me.

Here is what i want to do:

I have a subdomain under a dns name, lets say it is mysub.domain . I have an index.html file there that redirects lets say to mycomplex.dns.site. The redirection is done successfully via

<meta http-equiv="refresh" content="0;url=http://mycomplex.dns.site:8081" /> in my index.html  

When the page is loaded in Firefox, the url on the address bar, says http://mycomplex.dns.site:8081.

I don't want this I would like to show mysub.domain, so I created a .htaccess file in the /var/www/html target directory that says:

RewriteEngine On  RewriteRule "^/mycomplex.dns.site:8081$" "http://mysub.domain/intex.html" [R]  

And this doesn't work! I keep getting the url as mycomplex.dns.site:8081

I have tried to redirect with a .htaccess redirection in mysub.domain which works but the target mycomplex.dns.site url description remains.

The host computer with index.html is a raspberry with apache2. I have tried many variations but it doesn't work. Should it be something is Apache2 config files?

ksetup - Failed /GetEncTypeAttr : 0xc0000034

Posted: 21 Apr 2022 12:34 AM PDT

On the DC of a single-AD forest, I am logged in as the default domain administrator Administrator (in this case also the enterprise administrator). In an elevated PowerShell, I try to get the Kerberos encryption types with the following command (as documented here):

ksetup /getenctypeattr my.example.com  

But I get an error message instead:

Query of attributes on MY.EXAMPLE.COM failed with 0xc0000034  Failed /GetEncTypeAttr : 0xc0000034  

In consequence (most probably), I also get this error when trying to set the encryption types, as described in this question, which currently does not have a serious answer, unfortunately.

This does happen on Windows Server 2016 and also on Windows Server 2019, which have been setup by mostly using default settings. How can a simple get fail? The error code does not seem to be documented. Does someone know how to troubleshoot or solve this problem?

How do I add the file location in data of exim

Posted: 21 Apr 2022 01:25 AM PDT

catchall:      driver = redirect      domains = lsearch;/etc/userdomains      address_data = \          "router=$router_name \          redirect=${quote:${lookup \                  {\N*\N} \                  nwildlsearch{${extract{5}{::}}/etc/${perl{untaint}{$domain}}/aliases} \                  {$value} \              }}"      data = ${extract{redirect}{$address_data}}      allow_fail  

in case instead of address data if I use data = :fail:Reason then its working.

can any one help if I place this data in /home/user/etc/domain.com/aliases file so how will I read this?

MariaDB / MySQL start fails: [ERROR] Can't create IP socket: Temporary failure in name resolution

Posted: 20 Apr 2022 11:59 PM PDT

On my debian after upgrading from MySQL to MariaDB, I can't start the database anymore. The error I get is:

2022-04-21  9:53:13 0 [Note] mysqld (mysqld 10.3.34-MariaDB-0+deb10u1) starting as process 30342 ...  2022-04-21  9:53:13 0 [Note] InnoDB: Using Linux native AIO  2022-04-21  9:53:13 0 [Note] InnoDB: Mutexes and rw_locks use GCC atomic builtins  2022-04-21  9:53:13 0 [Note] InnoDB: Uses event mutexes  2022-04-21  9:53:13 0 [Note] InnoDB: Compressed tables use zlib 1.2.11  2022-04-21  9:53:13 0 [Note] InnoDB: Number of pools: 1  2022-04-21  9:53:13 0 [Note] InnoDB: Using generic crc32 instructions  2022-04-21  9:53:13 0 [Note] InnoDB: Initializing buffer pool, total size = 128M, instances = 1, chunk size = 128M  2022-04-21  9:53:13 0 [Note] InnoDB: Completed initialization of buffer pool  2022-04-21  9:53:13 0 [Note] InnoDB: If the mysqld execution user is authorized, page cleaner thread priority can be changed. See the man page of setpriority().  2022-04-21  9:53:14 0 [Note] InnoDB: 128 out of 128 rollback segments are active.  2022-04-21  9:53:14 0 [Note] InnoDB: Creating shared tablespace for temporary tables  2022-04-21  9:53:14 0 [Note] InnoDB: Setting file './ibtmp1' size to 12 MB. Physically writing the file full; Please wait ...  2022-04-21  9:53:14 0 [Note] InnoDB: File './ibtmp1' size is now 12 MB.  2022-04-21  9:53:14 0 [Note] InnoDB: Waiting for purge to start  2022-04-21  9:53:14 0 [Note] InnoDB: 10.3.34 started; log sequence number 230364887; transaction id 89889  2022-04-21  9:53:14 0 [Note] Plugin 'FEEDBACK' is disabled.  2022-04-21  9:53:14 0 [Note] InnoDB: Loading buffer pool(s) from /home/mysql/ib_buffer_pool  2022-04-21  9:53:14 0 [Note] InnoDB: Buffer pool(s) load completed at 220421  9:53:14  2022-04-21  9:53:14 0 [ERROR] Can't create IP socket: Temporary failure in name resolution  2022-04-21  9:53:14 0 [ERROR] Aborting  

How to assign a static IP with molecule-podman?

Posted: 20 Apr 2022 11:58 PM PDT

As the generated inventory look like a pair of instance name - ip (see above), I need to test recipe using the variable ansible_host with an IP value and not the instance name.

So the generated inventory look like:

[all]  idm ansible_host=10.0.1.1  client1 ansible_host=10.0.1.2  [client]  client1 ansible_host=10.0.1.2  

Thus the molecule.yml contains:

platforms:    - name: idm      image: quay.io/freeipa/freeipa-server:rocky-8-4.9.6      pre_build_image: true      privileged: false      network: testing      hostname: idm.org.test      command: ipa-server-install -U --realm=ORG.TEST --domain=org.test --ds-password=IsASecret --admin-password=IsASecret --hostname=idm.org.test      - name: client1      image: quay.io/rockylinux/rockylinux      pre_build_image: true      privileged: false      network: testing      hostname: client1.org.test      groups:        - all        - client  

Following this configuration I am able to put into the same network these 2 instances but I can not assign a static IP to them. Moreover here, ansible_host take the instance name as value (idm, client1).

Note: as it is wrote in title I use molecule-podman to create instances and test

Thanks for your help

Best regards

PMTUD/ICMP black hole problems across a VXLAN tunnel

Posted: 20 Apr 2022 11:24 PM PDT

I'm running a Proxmox PVE host and am trying to use VXLAN to connect the machines running on it to various networks in our Lab. However, I'm running into weird MTU-related problems that I don't understand.

First my setup. The basic layout is that virtual machines on the PVE host connect via a bridge to a VXLAN tunnel. On the other side of the tunnel I have a physical machine in the lab that acts as an VXLAN endpoint (EP). It connects to VTEP via bridge to one of it's ethernet ports, which in turns connects to the switch that holds the network I'm trying to put my VM into.

On the PVE Host (one VM and one VXLAN as example):

 ___________     __________     __________     ___________  |  VM eth0  |   |  Bridge  |   |  VXLAN   |   | Host eno1 |  | 192.168.. |___|   ----   |___|  VNI 1   |___|   10...   |___ to LabNet  | MTU 1500  |   | MTU 1550 |   | MTU 1550 |   | MTU 1600  |  |___________|   |__________|   |__________|   |___________|  

In the lab (the endpoint with one tunnel + one lab device as example):

 ___________                        __________     __________     __________     ___________  | LabDevice |                      | EP eth1  |   |  Bridge  |   |  VXLAN   |   | EP eth0   |  | 192.168.. |___ lab switch etc ___|  ----    |___|   ----   |___|  VNI 1   |___|   10...   |___ to PVE Host  | MTU 1500  |                      | MTU 1500 |   | MTU 1550 |   | MTU 1550 |   | MTU 1600  |  |___________|                      |__________|   |__________|   |__________|   |___________|  

Now, I get that PMTUD will not really work here because - being L2 - most of those devices can't report back, which is why I increased MTU for those devices that have to deal with the VXLAN overhead (that it's 1600 and not 1550 is unrelated, I just want to describe the as-is state exactly).

However, I'm still running into MTU mismatch/ICMP Black Hole issues:

Problem 1) Something in the chain claims to only support an MTU of 1450. If I try to connect from VM to LabDevice via SSH the connection hangs and then times out. If I test MTUs via ping -M do -s 1450 something somewhere answers with the usual fragmentation required... message, the max MTU of 1450 is stored and subsequent SSH connection attempts work (until the stored MTU1450-entry times out). The PVE host does have devices with a MTU set to 1450, but none of them are connected to the VM.

Problem 2) PMTUD does not work even for devices not involved with the tunnel. If I lower the MTU of the VM eth0 and ping -s... it from the LabDevice with something too large for the VM but OK for everything else I get zero response even though the VM should from my understanding be able to answer with ICMP fragmentation required... messages.

Semi-related: Is there anything I can do on the PVE host and the endpoint device to allow devices connected to the endpoint to discover a reduced MTU? Because there are some labs I might not be able to send Jumbo Frames to, and I'd prefer not to have to set a lower MTU on every single device in those labs.

Edit: Maybe also relevant: I'm currently not running multicast, but have set up the remote IPs via bridge fdb .... Also on the VM host, the VMs aren't connected directly to the bridge but via some veth magic.

Samba server not releasing record locks on network disconnection

Posted: 20 Apr 2022 11:22 PM PDT

I was experimenting with a network file sharing scenario over SMB/samba. Record locks taken on a remote file remains valid, even after 1 hour of network disconnection. The following test case describes the set of activities done in chronological order:

->  A process (P1) on a windows client (C1) and another process (P2) on a Linux client (C2) are connected to       a common Linux server and accessing the same remote file.  ->  Both P1 and P2 opens the remote file and gets a handle each.  ->  P1 takes exclusive lock on offset 0.  ->  P2 tries to take exclusive lock on offset 0 in a loop but does not get since P1 holds an exclusive       lock on the same offset.  ->  Now, P1 is disconnected from remote file (C1 is disconnected from server).  

Result: P2 does not get lock, returns 'EACCES' instantaneously, tried for around an hour.

The results were surprising, since in a Wi-Fi environment, where systems keep coming in and out, it can potentially stall the system.

OS specs of C1                  - Windows 10 Enterprise (version: 20H2, build: 19042.1237)  OS specs of C2                  - Ubuntu 20.04.3 LTS (GNU/Linux 5.13.0-1021-azure x86_64)  OS specs of Linux Server        - Ubuntu 20.04.1 LTS (GNU/Linux 5.13.0-37-generic x86_64)    Samba version on C2             - 4.13.17-Ubuntu                   Command used - smbststus  Samba version on Linux server   - 4.13.17-Ubuntu                   Command used - smbstatus  SMB version on C1               - SMBv2/v3                         Command used - sc.exe qc lanmanworkstation    Protocol version                - 3.1.1 (same on both connections) Command used - smbstatus  

Is it possible to have a practical timeout on the server such that other clients will not have to wait for long to get exclusive locks? Any inputs would help.

These are the contents of smb config file in the Linux Server (name of share used - sambashare):

[global]     workgroup = WORKGROUP     server string = %h server (Samba, Ubuntu)     log file = /var/log/samba/log.%m     max log size = 1000     logging = file     panic action = /usr/share/samba/panic-action %d     server role = standalone server     obey pam restrictions = yes     unix password sync = yes     passwd program = /usr/bin/passwd %u     passwd chat = *Enter\snew\s*\spassword:* %n\n  *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .     pam password change = yes     map to guest = bad user     usershare allow guests = yes    [printers]     comment = All Printers     browseable = no     path = /var/spool/samba     printable = yes     create mask = 0700    [print$]     comment = Printer Drivers     path = /var/lib/samba/printers    [sambashare]      comment = Samba on Ubuntu      path = /home/ubuntu/smb      read only = no  

How can I set the 'The other domain supports Kerberos AES Encryption' setting programmatically?

Posted: 21 Apr 2022 01:02 AM PDT

In the GUI (Active Directory Domains and Trusts MMC Snap-in (domain.msc)), you can set the "The other domain supports Kerberos AES Encryption" setting for a trust relationship:

The other domain supports Kerberos AES Encryption

I am looking for a way to set this setting programmatically. I already reviewed the Install-ADDSDomain PowerShell cmdlet and also the netdom TRUST tool, but both do not seem to include an option to set the Kerberos AES encryption setting.

Can someone tell me, how I can set this setting programmatically?

how to stop that ip requests and how to find that files who start the progress

Posted: 21 Apr 2022 01:25 AM PDT

i have that problem, that if i take a view over

iftop -i eth0 -o 10s -p -P  

command i get a ton of list information

192.168.8.119:ssh   => 192.168.8.98:62424                            5.12Kb  5.60Kb  8.94Kb                      <=                                                320b    320b    453b  224.0.0.251:mdns    => 192.168.8.98:mdns                                0b      0b      0b                      <=                                                  0b    285b    641b  192.168.8.119:smtp  => 87.246.7.246:53274                             160b     32b      8b                      <=                                                240b     48b     12b  192.168.8.119:smtp  => 5.34.207.59:1832                                 0b     32b      8b                      <=                                                  0b     48b     12b  192.168.8.119:smtp  => 5.34.207.107:34708                               0b     32b      8b                      <=                                                  0b     48b     12b  192.168.8.119:smtp  => 5.34.207.107:58290                               0b     32b      8b                      <=                                                  0b     48b     12b  192.168.8.119:smtp  => 5.34.207.59:50034                                0b      0b     16b                      <=                                                  0b      0b     24b  192.168.8.119:45822 => 192.168.8.118:microsoft-ds                       0b      0b     22b                      <=                                                  0b      0b     12b  192.168.8.119:45824 => 192.168.8.118:microsoft-ds                       0b      0b     22b                      <=                                                  0b      0b     12b  192.168.8.119:45826 => 192.168.8.118:microsoft-ds                       0b      0b     22b                      <=                                                  0b      0b     12b  192.168.8.119:45828 => 192.168.8.118:microsoft-ds                       0b      0b     22b                      <=                                                  0b      0b     12b  192.168.8.119:45830 => 192.168.8.118:microsoft-ds                       0b      0b     22b                      <=                                                  0b      0b     12b  ...  ..  .  

as example i blocked a couple of ip addresses but it ruin my day if i see allmost that full screen

ufw deny from 5.34.207.107 to any  ufw deny out from any to 5.34.207.107  

how can i find and stop finaly that process which makes that calls for 5.34.207.107,...? Its an ubuntu 20.x system.

Jenkins Pipeline: Build docker within docker container

Posted: 21 Apr 2022 12:06 AM PDT

I'm trying to do the following

  1. Checkout the code
  2. Do some prechecks using some other docker images (don't want to install these on Jenkins node)
  3. Build jar using docker image maven:3.6-jdk-8
  4. Then run Dockerfile to build app image
  5. Push the image to repository

Now, I don't want to install anything apart from Docker on Jenkins node. I want to run the full pipeline in Docker container to achieve this. What I'm struggling is how to build the 4th step from within the container.

I wrote the Jenkinsfile as below

pipeline {        agent none            stages {          stage('Maven build') {              agent {                  docker {                      image 'maven:3.6-jdk-8'                      args '-u root:root'                  }              }              steps {                  checkout(                      [                          $class: 'GitSCM',                          branches: [                              [name: '*/master']                          ],                          doGenerateSubmoduleConfigurations: false,                           extensions: [],                           submoduleCfg: [],                           userRemoteConfigs: [                              [                                  credentialsId: '<cred-id>',                                  url: '<github-url>']                              ]                          ])                                            sh '''                      set -eux pipefail                        mvn -e clean install                  '''              }          }          stage('Build docker image') {               // Which docker image to use?          }      }  }  

But I'm not sure how to build a docker image within container. The search didn't help that much. I tried using the Jenkins node for the docker image building but it seems I cannot mix and match. I totally understand this is quite an open question but I think it would be helpful to know the straightforward answer(s).

Windows Firewall causes TCP inbound connection time-out instead of connection refused when no server is connecting clients

Posted: 21 Apr 2022 01:04 AM PDT

So we noticed a different behavior from W7 systems with no firewall/av to W10 systems with firewall/av that causes our thir-party clients to raise a false positive error that is new to these W10 firewalled systems.

The problem can summarize as we get a 'TimeOut' (Socket ErrorCode 10060) after more than 20s instead of getting almost instantly before a 'ConnectionRefused' (Socket ErrorCode 10061). Please note that the issue only manifests when our tcp socket server does not connect to clients yet on that port (process is not launched yet), it works fine when it is connecting so the port is not blocked by our firewall.

When disabling completely our firewall this issue disappears as Windows now again actively refuses connections, making our third party system to behave as expected again.

How to keep my FW on and it setup such as I get the old behavior on our new W10 firewalled server side machine (i.e. simply raise a connection refused (10061) error instead of a timeout (10060) error) ?

How to install Mysql 5.6 on RHEL8 from Mysql repos?

Posted: 21 Apr 2022 12:16 AM PDT

I'm new to dnf, so this is probably obvious to someone.

I did check versionlock and checked for any exclude lines in any of the /etc/yum.repos.d files. But, when I have any other repos enabled, I cannot find mysql server to install. I can try to install it with all other repos disabled, but then it cannot find all the dependencies.

[root@ip-10-9-10-242 yum.repos.d]# dnf clean all  42 files removed  [root@ip-10-9-10-242 yum.repos.d]# dnf --disablerepo "*"  --enablerepo "mysql56-community" list available  Last metadata expiration check: 0:07:40 ago on Tue 30 Jul 2019 12:38:45 UTC.  Available Packages  mysql-community-bench.x86_64                                                                                        5.6.45-2.el7                                                                          mysql56-community  ...  mysql-community-server.x86_64                                                                                       5.6.45-2.el7                                                                          mysql56-community  mysql-community-test.x86_64                                                                                         5.6.45-2.el7                                                                          mysql56-community  [root@ip-10-9-10-242 yum.repos.d]# dnf --enablerepo "mysql56-community" search mysql-community-server.x86_64  Last metadata expiration check: 0:07:59 ago on Tue 30 Jul 2019 12:38:48 UTC.  No matches found.  [root@ip-10-9-10-242 yum.repos.d]# dnf search mysql-community  Last metadata expiration check: 0:10:57 ago on Tue 30 Jul 2019 12:38:48 UTC.  ============================================================================================== Name Matched: mysql-community ==============================================================================================  mysql-community-bench.x86_64 : MySQL benchmark suite  mysql-community-release.noarch : MySQL repository configuration for yum  mysql-community-release.noarch : MySQL repository configuration for yum  mysql-community-embedded.i686 : MySQL embedded library  mysql-community-embedded.x86_64 : MySQL embedded library  mysql-community-embedded-devel.i686 : Development header files and libraries for MySQL as an embeddable library  mysql-community-embedded-devel.x86_64 : Development header files and libraries for MySQL as an embeddable library  

So, you can see some of the stuff in mysql56 repo is found (like bench) but the server isn't. I'd also previously done :

yum-config-manager --disable mysql80-community  yum-config-manager --enable mysql56-community  

And can see :

[root@ip-10-9-10-242 yum.repos.d]# dnf repolist  Last metadata expiration check: 0:00:04 ago on Tue 30 Jul 2019 13:03:47 UTC.  repo id                         repo name                                status  mysql-connectors-community      MySQL Connectors Community                 118  mysql-tools-community           MySQL Tools Community                       95  mysql56-community               MySQL 5.6 Community Server                 169  rhui-client-config-server-8     Red Hat Update Infrastructure 3 Client C     3  rhui-rhel-8-appstream-rhui-rpms Red Hat Enterprise Linux 8 for x86_64 -  5,472  rhui-rhel-8-baseos-rhui-rpms    Red Hat Enterprise Linux 8 for x86_64 -  2,029  

For anyone still confused, what can't be found, can't be installed.

[root@ip-10-9-10-242 ~]# dnf install mysql-community-server  Last metadata expiration check: 0:00:12 ago on Thu 01 Aug 2019 09:14:02 UTC.  No match for argument: mysql-community-server  Error: Unable to find a match  

OK, so a bit of "-v" action and it says the packages are excluded. BUT I can disable all excludes and it still says they're excluded.

[root@ip-10-9-10-242 dnf]# dnf repoquery --repo mysql56-community --available mysql-community-server-0:5.6.45-2.el7.x86_64  Last metadata expiration check: 0:13:17 ago on Thu 01 Aug 2019 17:12:25 UTC.  mysql-community-server-0:5.6.45-2.el7.x86_64      [root@ip-10-9-10-242 dnf]# dnf --enablerepo=mysql56-community  --disableexcludepkgs all --disableexcludes all  install mysql-community-bench  Last metadata expiration check: 0:14:46 ago on Thu 01 Aug 2019 17:13:30 UTC.  Error:    Problem: package mysql-community-bench-5.6.45-2.el7.x86_64 requires mysql-community-server(x86-64) >= 5.6.10, but none of the providers can be installed    - cannot install the best candidate for the job    - package mysql-community-server-5.6.15-4.el7.x86_64 is excluded    - package mysql-community-server-5.6.16-1.el7.x86_64 is excluded  .....    - package mysql-community-server-5.6.44-2.el7.x86_64 is excluded    - package mysql-community-server-5.6.45-2.el7.x86_64 is excluded        [root@ip-10-9-10-242 dnf]# dnf --disablerepo "*" --enablerepo=mysql56-community  --disableexcludepkgs all --disableexcludes all  install mysql-community-bench    Last metadata expiration check: 0:18:12 ago on Thu 01 Aug 2019 17:12:25 UTC.    Error:      Problem: cannot install the best candidate for the job      - nothing provides /usr/bin/perl needed by mysql-community-bench-5.6.45-2.el7.x86_64      - nothing provides perl(Getopt::Long) needed by mysql-community-bench-5.6.45-2.el7.x86_64      - nothing provides perl(Data::Dumper) needed by mysql-community-bench-5.6.45-2.el7.x86_64      - nothing provides perl(POSIX) needed by mysql-community-bench-5.6.45-2.el7.x86_64      - nothing provides perl(Cwd) needed by mysql-community-bench-5.6.45-2.el7.x86_64      - nothing provides perl(DBI) needed by mysql-community-bench-5.6.45-2.el7.x86_64      - nothing provides perl(Benchmark) needed by mysql-community-bench-5.6.45-2.el7.x86_64      - nothing provides perl(sigtrap) needed by mysql-community-bench-5.6.45-2.el7.x86_64    (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)  

How to monitor nginx running on a docker container with ngxtop running on my mac host?

Posted: 21 Apr 2022 01:04 AM PDT

The official Nginx Docker image does a redirection of access.log to /dev/stdout, so that one can access the log with docker log from outside docker i.e. on the host. This is an issue because then from within the docker container I can't access access.log.

I finally resorted to install nginx on my mac and perform the following command docker logs -f competent_edison &>> ~/Dev/monitoring/access.log

While the redirection works fine and the access.log on my mac, mirror the output of the container in realtime, ngxtop output nothing when i pass that file as parameter: ngnix -l ~/Dev/monitoring/access.log

I wonder if there is a way for ngxtop to be installed on an host, to monitor an nginx running in a container.

Please any indication would be helpful as i spend 2 days around that and can't figure out how to deal with it.

Tap interface using netplan?

Posted: 20 Apr 2022 11:00 PM PDT

How does one set up tun and tap interfaces on systems that use netplan?

Normally you'd use pre-up in /etc/network/interfaces to call ip tuntap for creating the interface, but I haven't found anything in the netplan docs to do this.

MariaDB Galera SST Fails

Posted: 21 Apr 2022 12:06 AM PDT

I am running a 3 node MariaDB 10 Galera Cluster on CentOS 6. I have use this set-up before without issue else where but now when adding a 3rd node the SST fails with this error in the logs:

150212 18:03:02 [Warning] WSREP: 1.0 (server1.example.com): State transfer to 0.0 (server3.example.com) failed: -22 (Invalid argument)  150212 18:03:02 [ERROR] WSREP: gcs/src/gcs_group.c:gcs_group_handle_join_msg():723: Will never receive state. Need to abort.  

Checking the logs of the donor node shows:

150212 18:03:01 [ERROR] WSREP: Failed to read from: wsrep_sst_xtrabackup-v2 --role 'donor' --address '192.168.0.3:4444/xtrabackup_sst' --auth 'wsrep_sst:wsrep_pass' --socket '/var/lib/mysql/mysql.sock' --datadir '/var/lib/mysql/' --defaults-file '/etc/my.cnf'  --binlog 'mysql-bin' --gtid '8561e69a-9beb-11e4-825a-f2380deeda3b:18365'  150212 18:03:01 [ERROR] WSREP: Process completed with error: wsrep_sst_xtrabackup-v2 --role 'donor' --address '192.168.0.3:4444/xtrabackup_sst' --auth 'wsrep_sst:wsrep_pass' --socket '/var/lib/mysql/mysql.sock' --datadir '/var/lib/mysql/' --defaults-file '/etc/my.cnf'  --binlog 'mysql-bin' --gtid '8561e69a-9beb-11e4-825a-f2380deeda3b:18365': 22 (Invalid argument)  150212 18:03:01 [ERROR] WSREP: Command did not run: wsrep_sst_xtrabackup-v2 --role 'donor' --address '192.168.0.3:4444/xtrabackup_sst' --auth 'wsrep_sst:wsrep_pass' --socket '/var/lib/mysql/mysql.sock' --datadir '/var/lib/mysql/' --defaults-file '/etc/my.cnf'  --binlog 'mysql-bin' --gtid '8561e69a-9beb-11e4-825a-f2380deeda3b:18365'  

My config looks like so:

[server]  wsrep_provider="/usr/lib64/galera/libgalera_smm.so"  wsrep_cluster_address="gcomm://192.168.0.1,192.168.0.2,192.168.0.3"  wsrep_cluster_name='MY_CLUSTER'  wsrep_sst_auth=wsrep_sst:wsrep_pass  wsrep_sst_method=xtrabackup-v2  wsrep_sst_receive_address=192.168.0.3  default_storage_engine=InnoDB  innodb_autoinc_lock_mode=2  innodb_doublewrite=1  innodb_file_per_table=1  query_cache_size=0  binlog_format=ROW  log-bin=mysql-bin    [mysqld]  datadir=/var/lib/mysql  tmpdir=/tmp  user=mysql  bind-address=0.0.0.0  

Nodes only differ in their wsrep_sst_receive_address value.

Fatal error: Incompatible file format: The encoded file has format major ID 1, whereas the Loader expects 4 in ... on line 0

Posted: 20 Apr 2022 11:00 PM PDT

I am using Ubuntu 10.04 and for some time I had to keep a downgraded PHP 5.2 package because I need to run Zend encrypted scripts. Recently I noticed that Zend released beta version of their loader (http://forums.zend.com/viewtopic.php?f=57&t=1365&start=80#p22073) so I updated to the native PHP 5.3 package, downloaded the .so file, added this to php.ini

;zend_extension=/etc/php5/ZendOptimizer.so  zend_extension=/etc/php5/ZendGuardLoader.so  zend_loader.enable=1  zend_loader.disable_licensing=0  zend_loader.obfuscation_level_support=3  

and restarted the server. Now I am getting this error:

Fatal error: Incompatible file format: The encoded file has format major ID 1, whereas the Loader expects 4 in ... on line 0

Do you by chance know an easy fix for this? Or should I downgrade back and wait till when they release something more stable?

No comments:

Post a Comment