Monday, June 20, 2022

Recent Questions - Server Fault

Recent Questions - Server Fault


Create Docker nginx but browser returns site not found error

Posted: 20 Jun 2022 03:12 PM PDT

Windows 11 Pro

I'm following the Hashicorp Terraform Docker tutorial :

$ docker run --name hashicorp-learn --detach --publish 8080:80 nginx:latest  dc26543abdf895e638e4c5fcb968a9ce317c57e945060e97afe03b3991646682    $ docker ps --filter="name=hashicorp-learn"  CONTAINER ID   IMAGE          COMMAND                  CREATED          STATUS          PORTS                  NAMES  dc26543abdf8   nginx:latest   "/docker-entrypoint.…"   28 seconds ago   Up 27 seconds   0.0.0.0:8080->80/tcp   hashicorp-learn  

Everything seems ok but when I open browser and go to

http://0.0.0.0:8080   

I get error

This site can't be reached  The webpage at http://0.0.0.0:8080/ might be temporarily down or it may have moved permanently to a new web address.  ERR_ADDRESS_INVALID  

I've tried this in Chrome, Firefox, Edge and receive similar errors.

I've tried switching off internal/external Windows Defender Firewall but still receive error.

How to mark output packet to make ip-rule see it?

Posted: 20 Jun 2022 03:12 PM PDT

I have a routing configured:

# ip rule    0:      from all lookup local  32763:  from all fwmark 0x3000 lookup main  32766:  from all lookup another_one  32767:  from all lookup default  

I'm trying to mark output HTTP-requests (e.g. curl http://ifconfig.io/ip) with 0x3000 to make 32763 work:

# iptables -A OUTPUT -t mangle -p tcp --dport 80 -j MARK --set-mark 0x3000  

But it's not working. What am I missing?

Postfix + Dovecot + MySQL -- for both virtual and local (shell) accounts

Posted: 20 Jun 2022 03:13 PM PDT

Overview

Caveat: I'm a repentant sendmail user from the 80s.

The basic problem to solve is how to modify the dovecot (I assume dovecot) configuration to permit emails coming into the system that are addressed to non-virtual users (and have shell accounts on the system) that those emails are spooled up like typical unix users (as if there was no Dovecot involvement).

I have configured it successfully to handle all incoming email as if every candidate incoming message is run through the Dovecot plumbing.

The virtual domain/virtual user config operates perfectly. charlie@example.com arrives at the maildir specified and the SSL/cert (self-signed) is setup, and when dialoging with the user charlie@example.com, Dovecot+Postfix do the Right Thing.

I was just following some of the documentation and guides and this behavior is obtained. This is OK. I want this.

But.. about the local users. The users with shell accounts.. Now add the request -- for the shell users.. Users who are not virtual. They need to get email also.

Question: I am not sure what I should be looking for in the Dovecot config to specify that a candidate message addressed to a shell user gets shunted off to Postfix without further disposition by Dovecot?

EDIT: I realized after posting this question that the remarks may be that if the system has a FQDN itself, users like root@example.com make sense if example.com is the domain name. True. But do I really want to expose all of the shell users as virtual users in Dovecot? I don't think I do. Maybe I have to, but it seems heavy handed.

eg:

  1. Domain name of the system is coincidentally example.com
  2. Shell users on system: alice and bob
  3. Virtual account in the Dovecot plumbing: charlie@example.com

(assume plain old mail like the good old days)

Desired use cases:

alice@host:~$ mail -s "lunch?" bob

Result: mail from alice is spooled on /var/spool/mail/bob as traditionally (as if there was no Dovecot plumbing) because bob is a shell user on the system.

alice@host:~$ mail -s "happy birthday" charlie@example.com

Result: mail to charlie@example.com is shoved through the Dovecot plumbing because 1) Charlie is not a shell user and 2) Charlie is in the virtual users databases used by Dovecot.

System details

$ lsb_release  -a  Distributor ID: Ubuntu  Description:    Ubuntu 18.04.6 LTS  Release:        18.04  Codename:       bionic    $ cat packages-of-interest  ii  dovecot-core                           1:2.2.33.2-1ubuntu4.7                            ii  dovecot-imapd                          1:2.2.33.2-1ubuntu4.7                             ii  dovecot-lmtpd                          1:2.2.33.2-1ubuntu4.7                             ii  dovecot-mysql                          1:2.2.33.2-1ubuntu4.7                             ii  dovecot-pop3d                          1:2.2.33.2-1ubuntu4.7   ii  postfix                                3.3.0-1ubuntu0.4                                  ii  postfix-mysql                          3.3.0-1ubuntu0.4                                                            

Thanks in advcance. I'll summarize if warranted and adjust question if asked.

Perforce client AND server no longer connecting, 127.0.0.1:1666 refusing all connections on server, even local connections

Posted: 20 Jun 2022 02:38 PM PDT

I have a server running Ubuntu server 18.04, and it's the catch-all local server - hosts a samba share, media server, and a Perforce server. I connect to that depot via a local network IP (ssl:192.x.x.x:1666). Everything was working great until...

...I also tried to add a wiki.js install to it. There was a lot of package and config thrashing. Apache got removed, wiki.js / mongodb / mariadb / postgresql all got thrown around and deleted more than once, and nginx got installed and torn out many times.

Here's why - (context for what I was up to that probably caused this):

I have DNS filtering for the whole network via PiHole and with that, I created local DNS names & CNAME entries for the various processes on that Ubuntu server. The idea was I could point a client machine elsewhere in the network to, say, "perforce.RackServer.net" instead of "192.168.0.x:1666" and get the same result with some reverse proxy'ing by nginx. We were trying to make addressing human-readable instead of everyone having to ask me for IPs and port numbers for everything.

I did not have success setting up nginx. It's uninstalled now. That's fine - I'll come back to it later. Here's the problem.

Somewhere in all that, something with the network configuration (the machine has eth0 and eth1) got whacked, and now when I try #sudo systemctl start helix-p4dctl.service

I get

Job for helix-p4dctl.service failed because the control process exited with error code.
See "systemctl status helix-p4dctl.service" and "journalctl -xe" for details.

A systemctl status check of that gives me:

Jun 20 14:10:07 RackServer p4dctl[4186]: error: Connect to server failed; check $P4PORT.
connect: 127.0.0.1:1666: Connection refused
Jun 20 14:10:07 RackServer p4dctl[4188]: error: Connect to server failed; check $P4PORT.
connect: 127.0.0.1:1666: Connection refused
Jun 20 14:10:07 RackServer p4dctl[4189]: error: Connect to server failed; check $P4PORT.
connect: 127.0.0.1:1666: Connection refused
Jun 20 14:10:07 RackServer p4dctl[4190]: error: Connect to server failed; check $P4PORT.
connect: 127.0.0.1:1666: Connection refused
Jun 20 14:10:08 RackServer p4dctl[4181]: error: 'PerforceServer' p4d: '/opt/perforce/sbin/p4d' exited with status 255.
Jun 20 14:10:08 RackServer p4dctl[4181]: Started 0 services.
Jun 20 14:10:08 RackServer p4dctl[4181]: error: Not all services started successfully.
Jun 20 14:10:08 RackServer systemd[1]: helix-p4dctl.service: Control process exited, code=exited status=1
Jun 20 14:10:08 RackServer systemd[1]: helix-p4dctl.service: Failed with result 'exit-code'.
Jun 20 14:10:08 RackServer systemd[1]: Failed to start LSB: Starts all Perforce services.

That's similar to the error I now get trying to connect remotely with the p4v visual client:
Connect to server failed; check $P4PORT.
connect: 192.168.0.117:1666: Connection refused

Checking the P4PORT environment variable on the server gives me:

...nothing. It SHOULD be ssl:1666 or just 1666. It used to be, until now. So if I set that to what it should be with

export $P4PORT=ssl:1666

and then go try to start the service, I get the same error as the first time.

Let's check the actual connection...

admin@RackServer:~$ ping 192.168.0.117
PING 192.168.0.117 (192.168.0.117) 56(84) bytes of data.
64 bytes from 192.168.0.117: icmp_seq=1 ttl=64 time=0.052 ms
64 bytes from 192.168.0.117: icmp_seq=2 ttl=64 time=0.022 ms
64 bytes from 192.168.0.117: icmp_seq=3 ttl=64 time=0.017 ms

Same with: admin@RackServer:~$ ping 127.0.0.1
PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data.
64 bytes from 127.0.0.1: icmp_seq=1 ttl=64 time=0.045 ms
64 bytes from 127.0.0.1: icmp_seq=2 ttl=64 time=0.022 ms
64 bytes from 127.0.0.1: icmp_seq=3 ttl=64 time=0.016 ms

And: admin@RackServer:~$ ping localhost
PING localhost (127.0.0.1) 56(84) bytes of data.
64 bytes from localhost (127.0.0.1): icmp_seq=1 ttl=64 time=0.054 ms
64 bytes from localhost (127.0.0.1): icmp_seq=2 ttl=64 time=0.018 ms
64 bytes from localhost (127.0.0.1): icmp_seq=3 ttl=64 time=0.014 ms

However, nmap doesn't show 1666 open... 21/tcp open ftp
22/tcp open ssh
25/tcp open smtp
139/tcp open netbios-ssn
445/tcp open microsoft-ds
631/tcp open ipp
3306/tcp open mysql
3389/tcp open ms-wbt-server

Here's the ifconfig, just for reference.
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.0.117 netmask 255.255.255.0 broadcast 192.168.0.255
inet6 fe80::da16:9fa8:aff2:2aef prefixlen 64 scopeid 0x20<link>
ether 00:04:23:d3:d0:92 txqueuelen 1000 (Ethernet)
RX packets 33063 bytes 2652752 (2.6 MB)
RX errors 0 dropped 2 overruns 0 frame 0
TX packets 1872 bytes 269690 (269.6 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
device interrupt 18 memory 0xb8820000-b8840000

eth1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.0.116 netmask 255.255.255.0 broadcast 192.168.0.255
inet6 fe80::659f:d321:8607:cc5f prefixlen 64 scopeid 0x20<link>
ether 00:04:23:d3:d0:93 txqueuelen 1000 (Ethernet)
RX packets 31082 bytes 2047269 (2.0 MB)
RX errors 0 dropped 2 overruns 0 frame 0
TX packets 531 bytes 41557 (41.5 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
device interrupt 19 memory 0xb8800000-b8820000

lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1000 (Local Loopback)
RX packets 5185 bytes 278583 (278.5 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 5185 bytes 278583 (278.5 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

I'm not actually a networking guy by trade - and I'm still learning *nix - so I'm in way over my head, and I have to get that Perforce depot back online. Everything is there, the machine is just suddenly refusing to take connections - remote OR local - on 1666 for whatever reason. All the other services that have been working correctly are either still working or back to working. It's just this one.

Retrieve Win32_UserAccount object by its full (not "pre-Windows 2000") logon name

Posted: 20 Jun 2022 02:10 PM PDT

I'm attempting to look up the SID for a specific user account in a PowerShell script. Prior research suggests that this can be done using the Get-CimInstance command, like so:

# This doesn't work for me  Get-CimInstance -ClassName Win32_UserAccount -filter "Name='this_is_a_long_username'" | Format-List -Property *  

In my case however, this doesn't work. This is because the username of the account I need to look up is especially long, longer that what Windows versions older than Windows 2000 can support. Despite the fact that it is currently 2022, not 2000, that means my code above is actually broken. Indeed, if I instead use a shorter version of the account's username, what Microsoft's Active Directory Users and Computers tool refers to as the account's "User logon name (pre-Windows 2000)", then the above code works fine:

# This works  Get-CimInstance -ClassName Win32_UserAccount -filter "Name='this_is_a_long_usern'" | Format-List -Property *  

However, my script doesn't have a way to retrieve the account's "pre-Windows 2000" name; it only has the account's real (post Windows 2000) username, which may not have any relation at all to the account's pre-Windows 2000 name, since those two values can apparently be set independently in Active Directory. How can I get the SID of a user (and other Win32_UserAccount properties) given only that account's full (post Windows 2000) username?

Putting a caching nameserver in front of ad

Posted: 20 Jun 2022 02:04 PM PDT

I would like to set up a caching nameserver to meet some requirements in the datacenter. Some of these requirements make me to put this caching nameserver between my servers and AD (e.g. collecting some statistics, managing whole dns things at one spot etc)

When I run some tests like joining a windows server to AD domain while the server is looking to this caching nameserver (lets say 10.10.10.10) and its forwarding (or replying from cache) that domain (lets say my.domain.com) to AD DNS, it actually works but partially.

Server can join AD domain, I can login to server with my domain user, there is no trust issues, I can see the computer object in AD users and computers console, however, there is no DNS record created. I can't get an answer from nslookup. Whats going on during the join process?

The caching name server I use is unbound btw.

vCenter Installation stuck at 56%

Posted: 20 Jun 2022 01:05 PM PDT

I installed vCenter on Virtualbox by importing the vmdk files. But afterI start the vCenter VM and go the UI, I see that its stuck at 56% and not progressing at all.

I've ensured that DNS is working on the vCenter VM.

Any idea what the issue is or what to check in order to resolve it.

enter image description here

Apache2 SSL: None of the common names in the certificate match the name that was entered (works with www. but not without)

Posted: 20 Jun 2022 12:40 PM PDT

I'm using https://www.sslshopper.com/ssl-checker.html to check my site, and it's failing with this error message:

None of the common names in the certificate match the name that was entered (example.net). You may receive an error when accessing this site in a web browser. It looks like you just need to add the "www." when accessing the site with SSL. Learn more about name mismatch errors.

My 000-default-le-ssl.conf is set up like this:

<IfModule mod_ssl.c>  <VirtualHost *:443>          ServerAdmin webmaster@localhost          DocumentRoot /var/www/html          ServerName example.net          ServerAlias www.example.net            <Directory /var/www/html/>              Options Indexes FollowSymLinks              AllowOverride All              Require all granted          </Directory>            ErrorLog ${APACHE_LOG_DIR}/error.log          CustomLog ${APACHE_LOG_DIR}/access.log combined            <IfModule mod_dir.c>              DirectoryIndex index.php index.pl index.cgi index.html index.xhtml index.htm          </IfModule>      Include /etc/letsencrypt/options-ssl-apache.conf    RewriteEngine on  RewriteCond %{SERVER_NAME} =example.net  RewriteRule ^ https://www.%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]    SSLCertificateFile /etc/letsencrypt/live/www.example.net-0001/fullchain.pem  SSLCertificateKeyFile /etc/letsencrypt/live/www.example.net-0001/privkey.pem  </VirtualHost>    <VirtualHost *:80>    ServerName example.net    ServerAlias www.example.net    Redirect permanent / https://www.example.net/  </VirtualHost>    </IfModule>  <IfModule mod_ssl.c>  <VirtualHost *:80>          ServerAdmin webmaster@localhost          DocumentRoot /var/www/html            <Directory /var/www/html/>              Options Indexes FollowSymLinks              AllowOverride All              Require all granted          </Directory>           ErrorLog ${APACHE_LOG_DIR}/error.log          CustomLog ${APACHE_LOG_DIR}/access.log combined            <IfModule mod_dir.c>              DirectoryIndex index.php index.pl index.cgi index.html index.xhtml index.htm          </IfModule>    </VirtualHost>  

Is it because I only have SSLCertificateFiles for www.example.net and I'm missing one for example.net? I tried to force a redirect to www.example.net to work around this if so.

(Update: Solved below)

How to put a command that autostart daemon before login in Ubuntu server 20.04

Posted: 20 Jun 2022 12:27 PM PDT

I have two programs in Ubuntu server 20.04, that located in:

 /home/kiko/go-btfs/cmd/btfs   /home/kiko/node5007/cmd/btfs  

They both run with command: ./btfs daemon How to make this command for both directories to autostart before login for server? I tried to create autostart service with sudo nano /etc/systemd/system/btfs_main.service and then put the following settings in the unit btfs_main.service:

[Unit]  Description=Starting_btfs_daemon    Wants=network.target  After=syslog.target network-online.target    [Service]  Type=simple  ExecStart=/home/kiko/go-btfs/cmd/btfs/./btfs daemon  ExecStart=/home/kiko/node5007/cmd/btfs/./btfs daemon  Restart=on-failure  RestartSec=10  KillMode=process    [Install]  WantedBy=multi-user.target  

and then: sudo systemctl daemon-reload, sudo systemctl enable btfs_main.service, sudo systemctl start btfs_main.service, systemctl status btfs_main.service. With the final command i have some error: Unit btfs_main.service has a bad unit file setting. How do I configure unit settings for the both commands to run automatically?

memtest freezes, but otherwise system works OK (Debian)

Posted: 20 Jun 2022 01:38 PM PDT

I have a Debian 11 x64 system (info below) that works OK in general, but memtest simply freezes. It's not that it shows any errors, it just stops at say 40% of the test done and becomes unreactive.

I've unplugged all of the 4 memory modules and tried them one by one with the same result.

I've noticed that due to my Virtualbox Windows VMs regularly crashing. That's the only replicable problem I can find on the system. dmesg doesn't output anything in particular apart from that:

[    4.685877] EDAC skx: ECC is disabled on imc 1  [    4.712627] EDAC MC: Removed device 0 for skx_edac Skylake Socket#0 IMC#0: DEV 0000:64:0a.0  [    4.997329] EDAC MC0: Giving out device to module skx_edac controller Skylake Socket#0 IMC#0: DEV 0000:64:0a.0 (INTERRUPT)  [    4.997336] EDAC skx: ECC is disabled on imc 1  [    5.064602] EDAC MC: Removed device 0 for skx_edac Skylake Socket#0 IMC#0: DEV 0000:64:0a.0  [    5.529025] EDAC MC0: Giving out device to module skx_edac controller Skylake Socket#0 IMC#0: DEV 0000:64:0a.0 (INTERRUPT)  [    5.529038] EDAC skx: ECC is disabled on imc 1  [    5.533872] intel_rapl_common: Found RAPL domain package  [    5.533883] intel_rapl_common: Found RAPL domain dram  [    5.533888] intel_rapl_common: DRAM domain energy unit 15300pj  [    5.568563] EDAC MC: Removed device 0 for skx_edac Skylake Socket#0 IMC#0: DEV 0000:64:0a.0  [    5.945331] EDAC MC0: Giving out device to module skx_edac controller Skylake Socket#0 IMC#0: DEV 0000:64:0a.0 (INTERRUPT)  [    5.945338] EDAC skx: ECC is disabled on imc 1  [    5.964568] EDAC MC: Removed device 0 for skx_edac Skylake Socket#0 IMC#0: DEV 0000:64:0a.0  [    6.153759] EDAC MC0: Giving out device to module skx_edac controller Skylake Socket#0 IMC#0: DEV 0000:64:0a.0 (INTERRUPT)  [    6.153773] EDAC skx: ECC is disabled on imc 1  [    6.184555] EDAC MC: Removed device 0 for skx_edac Skylake Socket#0 IMC#0: DEV 0000:64:0a.0  [    6.253825] EDAC MC0: Giving out device to module skx_edac controller Skylake Socket#0 IMC#0: DEV 0000:64:0a.0 (INTERRUPT)  [    6.253840] EDAC skx: ECC is disabled on imc 1  [    6.284599] EDAC MC: Removed device 0 for skx_edac Skylake Socket#0 IMC#0: DEV 0000:64:0a.0  [    6.345738] EDAC MC0: Giving out device to module skx_edac controller Skylake Socket#0 IMC#0: DEV 0000:64:0a.0 (INTERRUPT)  [    6.345757] EDAC skx: ECC is disabled on imc 1  [    6.376584] EDAC MC: Removed device 0 for skx_edac Skylake Socket#0 IMC#0: DEV 0000:64:0a.0  [    6.409120] igb 0000:06:00.0 eno1: igb: eno1 NIC Link is Up 100 Mbps Full Duplex, Flow Control: RX/TX  [    6.409337] IPv6: ADDRCONF(NETDEV_CHANGE): eno1: link becomes ready  [    6.481324] EDAC MC0: Giving out device to module skx_edac controller Skylake Socket#0 IMC#0: DEV 0000:64:0a.0 (INTERRUPT)  [    6.481337] EDAC skx: ECC is disabled on imc 1  [    6.516619] EDAC MC: Removed device 0 for skx_edac Skylake Socket#0 IMC#0: DEV 0000:64:0a.0  [    6.581855] EDAC MC0: Giving out device to module skx_edac controller Skylake Socket#0 IMC#0: DEV 0000:64:0a.0 (INTERRUPT)  [    6.581870] EDAC skx: ECC is disabled on imc 1  [    6.600557] EDAC MC: Removed device 0 for skx_edac Skylake Socket#0 IMC#0: DEV 0000:64:0a.0  [    6.673544] EDAC MC0: Giving out device to module skx_edac controller Skylake Socket#0 IMC#0: DEV 0000:64:0a.0 (INTERRUPT)  [    6.673565] EDAC skx: ECC is disabled on imc 1  [    6.704593] EDAC MC: Removed device 0 for skx_edac Skylake Socket#0 IMC#0: DEV 0000:64:0a.0  [    6.773816] EDAC MC0: Giving out device to module skx_edac controller Skylake Socket#0 IMC#0: DEV 0000:64:0a.0 (INTERRUPT)  [    6.773837] EDAC skx: ECC is disabled on imc 1  [    6.808606] EDAC MC: Removed device 0 for skx_edac Skylake Socket#0 IMC#0: DEV 0000:64:0a.0  [    6.913167] EDAC MC0: Giving out device to module skx_edac controller Skylake Socket#0 IMC#0: DEV 0000:64:0a.0 (INTERRUPT)  [    6.913182] EDAC skx: ECC is disabled on imc 1  [    6.940595] EDAC MC: Removed device 0 for skx_edac Skylake Socket#0 IMC#0: DEV 0000:64:0a.0  [    6.993580] EDAC MC0: Giving out device to module skx_edac controller Skylake Socket#0 IMC#0: DEV 0000:64:0a.0 (INTERRUPT)  [    6.993602] EDAC skx: ECC is disabled on imc 1  [    7.008595] EDAC MC: Removed device 0 for skx_edac Skylake Socket#0 IMC#0: DEV 0000:64:0a.0  

I'm not sure if those are memory modules or something on motherboard failing. How can I diagnose that?

Most of the lshw output, I had to cut large swaths of it due to 30k character limitation:

titan      description: Computer      product: SYS-5039AD-I (Default string)      vendor: Supermicro      version: 0123456789      serial: .....      width: 64 bits      capabilities: smbios-3.1.1 dmi-3.1.1 smp vsyscall32      configuration: boot=normal family=Default string sku=Default string uuid=00000000-0000-0000-0000-AC1F6B660721    *-core      description: Motherboard      product: C9X299-PGF      vendor: Supermicro      physical id: 0      version: 1.01      serial: ....      slot: Default string    *-firmware      description: BIOS      vendor: American Megatrends Inc.      physical id: 0      version: 1.1      date: 02/14/2018      size: 64KiB      capacity: 16MiB      capabilities: pci upgrade shadowing cdboot bootselect socketedrom edd int13floppy1200 int13floppy720 int13floppy2880 int5printscreen int14serial int17printer acpi usb biosbootspecification uefi    *-memory      description: System Memory      physical id: 1c      slot: System board or motherboard      size: 32GiB   *-bank:0     description: DIMM Synchronous [empty]     product: NO DIMM     vendor: NO DIMM     physical id: 0     serial: NO DIMM     slot: DIMMA1   *-bank:1     description: DIMM Synchronous [empty]     product: NO DIMM     vendor: NO DIMM     physical id: 1     serial: NO DIMM     slot: DIMMA2   *-bank:2     description: DIMM Synchronous [empty]     product: NO DIMM     vendor: NO DIMM     physical id: 2     serial: NO DIMM     slot: DIMMB1   *-bank:3     description: DIMM Synchronous [empty]     product: NO DIMM     vendor: NO DIMM     physical id: 3     serial: NO DIMM     slot: DIMMB2   *-bank:4     description: DIMM DDR4 Synchronous 2400 MHz (0.4 ns)     product: HMA81GU7AFR8N-UH     vendor: SK Hynix     physical id: 4     serial: ....     slot: DIMMC1     size: 8GiB     width: 64 bits     clock: 2400MHz (0.4ns)   *-bank:5     description: DIMM DDR4 Synchronous 2400 MHz (0.4 ns)     product: 18ASF1G72AZ-2G3B1     vendor: Micron     physical id: 5     serial: ...     slot: DIMMC2     size: 8GiB     width: 64 bits     clock: 2400MHz (0.4ns)   *-bank:6     description: DIMM DDR4 Synchronous 2400 MHz (0.4 ns)     product: M391A1K43BB1-CRC     vendor: Samsung     physical id: 6     serial: ...     slot: DIMMD1     size: 8GiB     width: 64 bits     clock: 2400MHz (0.4ns)   *-bank:7     description: DIMM DDR4 Synchronous 2400 MHz (0.4 ns)     product: M391A1K43BB1-CRC     vendor: Samsung     physical id: 7     serial: ....     slot: DIMMD2     size: 8GiB     width: 64 bits     clock: 2400MHz (0.4ns)    *-cache:0      description: L1 cache      physical id: 2f      slot: L1 Cache      size: 512KiB      capacity: 512KiB      capabilities: synchronous internal write-back instruction      configuration: level=1    *-cache:1      description: L2 cache      physical id: 30      slot: L2 Cache      size: 8MiB      capacity: 8MiB      capabilities: synchronous internal varies unified      configuration: level=2    *-cache:2      description: L3 cache      physical id: 31      slot: L3 Cache      size: 11MiB      capacity: 11MiB      capabilities: synchronous internal varies unified      configuration: level=3    *-cpu      description: CPU      product: Intel(R) Core(TM) i7-7820X CPU @ 3.60GHz      vendor: Intel Corp.      physical id: 32      bus info: cpu@0      version: Intel(R) Core(TM) i7-7820X CPU @ 3.60GHz      slot: CPU      size: 1199MHz      capacity: 4500MHz      width: 64 bits      clock: 100MHz      capabilities: lm fpu fpu_exception wp vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp x86-64 constant_tsc art arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc cpuid aperfmperf pni pclmulqdq dtes64 monitor ds_cpl vmx est tm2 ssse3 sdbg fma cx16 xtpr pdcm pcid dca sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand lahf_lm abm 3dnowprefetch cpuid_fault epb cat_l3 cdp_l3 invpcid_single pti ssbd mba ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm cqm mpx rdt_a avx512f avx512dq rdseed adx smap clflushopt clwb intel_pt avx512cd avx512bw avx512vl xsaveopt xsavec xgetbv1 xsaves cqm_llc cqm_occup_llc cqm_mbm_total cqm_mbm_local dtherm ida arat pln pts md_clear flush_l1d arch_capabilities cpufreq      configuration: cores=8 enabledcores=8 threads=16    *-pci:0      description: Host bridge      product: Sky Lake-E DMI3 Registers      vendor: Intel Corporation      physical id: 100      bus info: pci@0000:00:00.0      version: 04      width: 32 bits      clock: 33MHz   *-generic:0     description: System peripheral     product: Sky Lake-E CBDMA Registers     vendor: Intel Corporation     physical id: 4     bus info: pci@0000:00:04.0     version: 04     width: 64 bits     clock: 33MHz     capabilities: msix pciexpress pm bus_master cap_list     configuration: driver=ioatdma latency=0     resources: irq:79 memory:90944000-90947fff   *-generic:1     description: System peripheral     product: Sky Lake-E CBDMA Registers     vendor: Intel Corporation     physical id: 4.1     bus info: pci@0000:00:04.1     version: 04     width: 64 bits     clock: 33MHz     capabilities: msix pciexpress pm bus_master cap_list     configuration: driver=ioatdma latency=0     resources: irq:82 memory:90940000-90943fff   *-generic:2     description: System peripheral     product: Sky Lake-E CBDMA Registers     vendor: Intel Corporation     physical id: 4.2     bus info: pci@0000:00:04.2     version: 04     width: 64 bits     clock: 33MHz     capabilities: msix pciexpress pm bus_master cap_list     configuration: driver=ioatdma latency=0     resources: irq:79 memory:9093c000-9093ffff   *-generic:3     description: System peripheral     product: Sky Lake-E CBDMA Registers     vendor: Intel Corporation     physical id: 4.3     bus info: pci@0000:00:04.3     version: 04     width: 64 bits     clock: 33MHz     capabilities: msix pciexpress pm bus_master cap_list     configuration: driver=ioatdma latency=0     resources: irq:82 memory:90938000-9093bfff   *-generic:4     description: System peripheral     product: Sky Lake-E CBDMA Registers     vendor: Intel Corporation     physical id: 4.4     bus info: pci@0000:00:04.4     version: 04     width: 64 bits     clock: 33MHz     capabilities: msix pciexpress pm bus_master cap_list     configuration: driver=ioatdma latency=0     resources: irq:79 memory:90934000-90937fff   *-generic:5     description: System peripheral     product: Sky Lake-E CBDMA Registers     vendor: Intel Corporation     physical id: 4.5     bus info: pci@0000:00:04.5     version: 04     width: 64 bits     clock: 33MHz     capabilities: msix pciexpress pm bus_master cap_list     configuration: driver=ioatdma latency=0     resources: irq:82 memory:90930000-90933fff   *-generic:6     description: System peripheral     product: Sky Lake-E CBDMA Registers     vendor: Intel Corporation     physical id: 4.6     bus info: pci@0000:00:04.6     version: 04     width: 64 bits     clock: 33MHz     capabilities: msix pciexpress pm bus_master cap_list     configuration: driver=ioatdma latency=0     resources: irq:79 memory:9092c000-9092ffff   *-generic:7     description: System peripheral     product: Sky Lake-E CBDMA Registers     vendor: Intel Corporation     physical id: 4.7     bus info: pci@0000:00:04.7     version: 04     width: 64 bits     clock: 33MHz     capabilities: msix pciexpress pm bus_master cap_list     configuration: driver=ioatdma latency=0     resources: irq:82 memory:90928000-9092bfff   *-generic:8 UNCLAIMED     description: System peripheral     product: Sky Lake-E MM/Vt-d Configuration Registers     vendor: Intel Corporation     physical id: 5     bus info: pci@0000:00:05.0     version: 04     width: 32 bits     clock: 33MHz     capabilities: pciexpress cap_list     configuration: latency=0   *-generic:9 UNCLAIMED     description: System peripheral     product: Sky Lake-E RAS     vendor: Intel Corporation     physical id: 5.2     bus info: pci@0000:00:05.2     version: 04     width: 32 bits     clock: 33MHz     capabilities: pciexpress cap_list     configuration: latency=0   *-generic:10 UNCLAIMED     description: PIC     product: Sky Lake-E IOAPIC     vendor: Intel Corporation     physical id: 5.4     bus info: pci@0000:00:05.4     version: 04     width: 32 bits     clock: 33MHz     capabilities: pciexpress pm io_x_-apic bus_master cap_list     configuration: latency=0     resources: memory:90951000-90951fff   *-generic:11 UNCLAIMED     description: System peripheral     product: Sky Lake-E Ubox Registers     vendor: Intel Corporation     physical id: 8     bus info: pci@0000:00:08.0     version: 04     width: 32 bits     clock: 33MHz     capabilities: pciexpress cap_list     configuration: latency=0   *-generic:12 UNCLAIMED     description: Performance counters     product: Sky Lake-E Ubox Registers     vendor: Intel Corporation     physical id: 8.1     bus info: pci@0000:00:08.1     version: 04     width: 32 bits     clock: 33MHz     configuration: latency=0   *-generic:13 UNCLAIMED     description: System peripheral     product: Sky Lake-E Ubox Registers     vendor: Intel Corporation     physical id: 8.2     bus info: pci@0000:00:08.2     version: 04     width: 32 bits     clock: 33MHz     capabilities: pciexpress cap_list     configuration: latency=0   *-communication     description: Communication controller     product: 200 Series PCH CSME HECI #1     vendor: Intel Corporation     physical id: 16     bus info: pci@0000:00:16.0     version: 00     width: 64 bits     clock: 33MHz     capabilities: pm msi bus_master cap_list     configuration: driver=mei_me latency=0     resources: irq:81 memory:9094d000-9094dfff   *-sata     description: SATA controller     product: 200 Series PCH SATA controller [AHCI mode]     vendor: Intel Corporation     physical id: 17     bus info: pci@0000:00:17.0     logical name: scsi1     version: 00     width: 32 bits     clock: 66MHz     capabilities: sata msi pm ahci_1.0 bus_master cap_list emulated     configuration: driver=ahci latency=0     resources: irq:62 memory:90948000-90949fff memory:9094c000-9094c0ff ioport:4050(size=8) ioport:4040(size=4) ioport:4020(size=32) memory:9094b000-9094b7ff   *-disk     description: ATA Disk     product: ST4000NM0035-1V4     physical id: 0.0.0     bus info: scsi@1:0.0.0     logical name: /dev/sda     version: TN04     serial: ....     size: 3726GiB (4TB)     capabilities: gpt-1.00 partitioned partitioned:gpt     configuration: ansiversion=5 guid=9176314b-cdd6-4a53-99e3-1fc255958b93 logicalsectorsize=512 sectorsize=512      *-volume:0    -pci:0     description: PCI bridge     product: 200 Series PCH PCI Express Root Port #17     vendor: Intel Corporation     physical id: 1b     bus info: pci@0000:00:1b.0     version: f0     width: 32 bits     clock: 33MHz     capabilities: pci pciexpress msi pm normal_decode bus_master cap_list     configuration: driver=pcieport     resources: irq:24   *-pci:1     description: PCI bridge     product: 200 Series PCH PCI Express Root Port #19     vendor: Intel Corporation     physical id: 1b.2     bus info: pci@0000:00:1b.2     version: f0     width: 32 bits     clock: 33MHz     capabilities: pci pciexpress msi pm normal_decode bus_master cap_list     configuration: driver=pcieport     resources: irq:25 memory:90800000-908fffff   *-usb     description: USB controller     product: ASM2142 USB 3.1 Host Controller     vendor: ASMedia Technology Inc.     physical id: 0     bus info: pci@0000:02:00.0     version: 00     width: 64 bits     clock: 33MHz     capabilities: msi msix pm pciexpress xhci bus_master cap_list     configuration: driver=xhci_hcd latency=0     resources: irq:18 memory:90800000-90807fff      *-usbhost:0    product: xHCI Host Controller    vendor: Linux 5.10.0-15-amd64 xhci-hcd    physical id: 0    bus info: usb@3    logical name: usb3    version: 5.10    capabilities: usb-2.00    configuration: driver=hub slots=2 speed=480Mbit/s      *-usb    description: USB hub    product: Hub    vendor: ATEN International Co., Ltd    physical id: 2    bus info: usb@3:2    version: 1.00    capabilities: usb-1.10    configuration: driver=hub maxpower=100mA slots=4 speed=12Mbit/s      *-usb    description: Keyboard    product: HDMI KVM V1.2.114    vendor: ATEN Advance Tech Inc.    physical id: 1    bus info: usb@3:2.1    version: 1.00    capabilities: usb-1.10    configuration: driver=usbhid maxpower=100mA speed=12Mbit/s      *-usbhost:1    product: xHCI Host Controller    vendor: Linux 5.10.0-15-amd64 xhci-hcd    physical id: 1    bus info: usb@4    logical name: usb4    version: 5.10    capabilities: usb-3.10    configuration: driver=hub slots=2 speed=10000Mbit/s   *-pci:2     description: PCI bridge     product: 200 Series PCH PCI Express Root Port #21     vendor: Intel Corporation     physical id: 1b.4     bus info: pci@0000:00:1b.4     version: f0     width: 32 bits     clock: 33MHz     capabilities: pci pciexpress msi pm normal_decode bus_master cap_list     configuration: driver=pcieport     resources: irq:26 memory:90700000-907fffff   *-storage     description: Non-Volatile memory controller     product: NVMe SSD Controller SM961/PM961/SM963     vendor: Samsung Electronics Co Ltd     physical id: 0     bus info: pci@0000:03:00.0     version: 00     width: 64 bits     clock: 33MHz     capabilities: storage pm msi pciexpress msix nvm_express bus_master cap_list     configuration: driver=nvme latency=0     resources: irq:16 memory:90700000-90703fff   *-pci:3     description: PCI bridge     product: 200 Series PCH PCI Express Root Port #1     vendor: Intel Corporation     physical id: 1c     bus info: pci@0000:00:1c.0     version: f0     width: 32 bits     clock: 33MHz     capabilities: pci pciexpress msi pm normal_decode bus_master cap_list     configuration: driver=pcieport     resources: irq:27 memory:90600000-906fffff   *-usb     description: USB controller     product: ASM2142 USB 3.1 Host Controller     vendor: ASMedia Technology Inc.     physical id: 0     bus info: pci@0000:04:00.0     version: 00     width: 64 bits     clock: 33MHz     capabilities: msi msix pm pciexpress xhci bus_master cap_list     configuration: driver=xhci_hcd latency=0     resources: irq:16 memory:90600000-90607fff      *-usbhost:0    product: xHCI Host Controller    vendor: Linux 5.10.0-15-amd64 xhci-hcd    physical id: 0    bus info: usb@5    logical name: usb5    version: 5.10    capabilities: usb-2.00    configuration: driver=hub slots=2 speed=480Mbit/s      *-usb    description: Audio device    product: Plantronics C320-M    vendor: Plantronics    physical id: 2    bus info: usb@5:2    version: 1.35    serial: ...    capabilities: usb-2.00 audio-control    configuration: driver=usbhid maxpower=100mA speed=12Mbit/s      *-usbhost:1    product: xHCI Host Controller    vendor: Linux 5.10.0-15-amd64 xhci-hcd    physical id: 1    bus info: usb@6    logical name: usb6    version: 5.10    capabilities: usb-3.10    configuration: driver=hub slots=2 speed=10000Mbit/s   *-pci:4     description: PCI bridge     product: 200 Series PCH PCI Express Root Port #4     vendor: Intel Corporation     physical id: 1c.3     bus info: pci@0000:00:1c.3     version: f0     width: 32 bits     clock: 33MHz     capabilities: pci pciexpress msi pm normal_decode bus_master cap_list     configuration: driver=pcieport     resources: irq:28 memory:90000000-904fffff   *-network     description: Ethernet interface     product: AQC108 NBase-T/IEEE 802.3bz Ethernet Controller [AQtion]     vendor: Aquantia Corp.     physical id: 0     bus info: pci@0000:05:00.0     logical name: eth0     version: 02     serial: ....     capacity: 1Gbit/s     width: 64 bits     clock: 33MHz     capabilities: pciexpress pm msix msi vpd bus_master cap_list rom ethernet physical tp 100bt-fd 1000bt-fd autonegotiation     configuration: autonegotiation=on broadcast=yes driver=atlantic driverversion=5.10.0-15-amd64 firmware=1.5.58 latency=0 link=no multicast=yes port=twisted pair     resources: irq:19 memory:90440000-9044ffff memory:90450000-90450fff memory:90000000-903fffff memory:90400000-9043ffff   *-pci:5     description: PCI bridge     product: 200 Series PCH PCI Express Root Port #5     vendor: Intel Corporation     physical id: 1c.4     bus info: pci@0000:00:1c.4     version: f0     width: 32 bits     clock: 33MHz     capabilities: pci pciexpress msi pm normal_decode bus_master cap_list     configuration: driver=pcieport     resources: irq:29 ioport:3000(size=4096) memory:90500000-905fffff   *-isa     description: ISA bridge     product: X299 Chipset LPC/eSPI Controller     vendor: Intel Corporation     physical id: 1f     bus info: pci@0000:00:1f.0     version: 00     width: 32 bits     clock: 33MHz     capabilities: isa bus_master     configuration: latency=0   *-memory UNCLAIMED     description: Memory controller     product: 200 Series/Z370 Chipset Family Power Management Controller     vendor: Intel Corporation     physical id: 1f.2     bus info: pci@0000:00:1f.2     version: 00     width: 32 bits     clock: 33MHz (30.3ns)     capabilities: bus_master     configuration: latency=0     resources: memory:90924000-90927fff   *-multimedia     description: Audio device     product: 200 Series PCH HD Audio     vendor: Intel Corporation     physical id: 1f.3     bus info: pci@0000:00:1f.3     version: 00     width: 64 bits     clock: 33MHz     capabilities: pm msi bus_master cap_list     configuration: driver=snd_hda_intel latency=32     resources: irq:90 memory:90920000-90923fff memory:90900000-9090ffff   *-serial     description: SMBus     product: 200 Series/Z370 Chipset Family SMBus Controller     vendor: Intel Corporation     physical id: 1f.4     bus info: pci@0000:00:1f.4     version: 00     width: 64 bits     clock: 33MHz     configuration: driver=i801_smbus latency=0     resources: irq:16 memory:9094a000-9094a0ff ioport:4000(size=32)    *-generic:0 UNCLAIMED      description: System peripheral      product: Sky Lake-E VT-d      vendor: Intel Corporation      physical id: 1      bus info: pci@0000:16:05.0      version: 04      width: 32 bits      clock: 33MHz      capabilities: pciexpress cap_list      configuration: latency=0    *-generic:1 UNCLAIMED      description: System peripheral      product: Sky Lake-E RAS Configuration Registers      vendor: Intel Corporation      physical id: 2      bus info: pci@0000:16:05.2      version: 04      width: 32 bits      clock: 33MHz      capabilities: pciexpress cap_list      configuration: latency=0    *-generic:2 UNCLAIMED      description: PIC      product: Sky Lake-E IOxAPIC Configuration Registers      vendor: Intel Corporation      physical id: 4      bus info: pci@0000:16:05.4      version: 04      width: 32 bits      clock: 33MHz      capabilities: pciexpress pm io_x_-apic bus_master cap_list      configuration: latency=0      resources: memory:92300000-92300fff    *-generic:3 UNCLAIMED    *-generic:31 UNCLAIMED      description: System peripheral      product: Sky Lake-E PCU Registers      vendor: Intel Corporation      physical id: 1e.4      bus info: pci@0000:16:1e.4      version: 04      width: 32 bits      clock: 33MHz      configuration: latency=0    *-generic:32 UNCLAIMED      description: System peripheral      product: Sky Lake-E PCU Registers      vendor: Intel Corporation      physical id: 1e.5      bus info: pci@0000:16:1e.5      version: 04      width: 32 bits      clock: 33MHz      configuration: latency=0    *-generic:33 UNCLAIMED      description: System peripheral      product: Sky Lake-E PCU Registers      vendor: Intel Corporation      physical id: 1e.6      bus info: pci@0000:16:1e.6      version: 04      width: 32 bits      clock: 33MHz      configuration: latency=0    *-pci:1      description: PCI bridge      product: Sky Lake-E PCI Express Root Port A      vendor: Intel Corporation      physical id: 101      bus info: pci@0000:64:00.0      version: 04      width: 64 bits      clock: 33MHz      capabilities: pci msi pciexpress pm normal_decode bus_master cap_list      configuration: driver=pcieport      resources: iomemory:2000b0b00-2000b0aff irq:31 ioport:b000(size=4096) memory:b2000000-b30fffff ioport:a0000000(size=301989888)   *-display     description: VGA compatible controller     product: GP102 [GeForce GTX 1080 Ti]     vendor: NVIDIA Corporation     physical id: 0     bus info: pci@0000:65:00.0     version: a1     width: 64 bits     clock: 33MHz     capabilities: pm msi pciexpress vga_controller bus_master cap_list rom     configuration: driver=nvidia latency=0     resources: irq:95 memory:b2000000-b2ffffff memory:a0000000-afffffff memory:b0000000-b1ffffff ioport:b000(size=128) memory:c0000-dffff   *-multimedia     description: Audio device     product: GP102 HDMI Audio Controller     vendor: NVIDIA Corporation     physical id: 0.1     bus info: pci@0000:65:00.1     version: a1     width: 32 bits     clock: 33MHz     capabilities: pm msi pciexpress bus_master cap_list     configuration: driver=snd_hda_intel latency=0     resources: irq:91 memory:b3080000-b3083fff    *-generic:34 UNCLAIMED      description: System peripheral      product: Sky Lake-E VT-d      vendor: Intel Corporation      physical id: 8      bus info: pci@0000:64:05.0      version: 04      width: 32 bits      clock: 33MHz      capabilities: pciexpress cap_list      configuration: latency=0    *-generic:35 UNCLAIMED      description: System peripheral      product: Sky Lake-E RAS Configuration Registers      vendor: Intel Corporation      physical id: 9      bus info: pci@0000:64:05.2      version: 04      width: 32 bits      clock: 33MHz      capabilities: pciexpress cap_list      configuration: latency=0    *-generic:36 UNCLAIMED      description: PIC      product: Sky Lake-E IOxAPIC Configuration Registers      vendor: Intel Corporation      physical id: 10      bus info: pci@0000:64:05.4      version: 04      width: 32 bits      clock: 33MHz      capabilities: pciexpress pm io_x_-apic bus_master cap_list      configuration: latency=0      resources: memory:b3100000-b3100fff    *-generic:37      description: System peripheral      product: Sky Lake-E Integrated Memory Controller      vendor: Intel Corporation      physical id: 11      bus info: pci@0000:64:08.0      version: 04      width: 32 bits      clock: 33MHz      capabilities: pciexpress cap_list      configuration: driver=skx_uncore latency=0      resources: irq:0    *-pci:2      description: PCI bridge      product: Sky Lake-E PCI Express Root Port D      vendor: Intel Corporation      physical id: 3      bus info: pci@0000:b2:03.0      version: 04      width: 32 bits      clock: 33MHz      capabilities: pci msi pciexpress pm normal_decode bus_master cap_list      configuration: driver=pcieport      resources: irq:33 ioport:f000(size=4096) memory:fa000000-fb0fffff ioport:e0000000(size=301989888)   *-display     description: VGA compatible controller     product: GV100 [TITAN V]     vendor: NVIDIA Corporation     physical id: 0     bus info: pci@0000:b3:00.0     version: a1     width: 64 bits     clock: 33MHz     capabilities: pm msi pciexpress vga_controller bus_master cap_list rom     configuration: driver=nvidia latency=0     resources: irq:96 memory:fa000000-faffffff memory:e0000000-efffffff memory:f0000000-f1ffffff ioport:f000(size=128) memory:fb000000-fb07ffff   *-multimedia     description: Audio device     product: NVIDIA Corporation     vendor: NVIDIA Corporation     physical id: 0.1     bus info: pci@0000:b3:00.1     version: a1     width: 32 bits     clock: 33MHz     capabilities: pm msi pciexpress bus_master cap_list     configuration: driver=snd_hda_intel latency=0     resources: irq:92 memory:fb080000-fb083fff    *-generic:63 UNCLAIMED  ...  

How to change DefaultTasksMax in system.conf?

Posted: 20 Jun 2022 02:00 PM PDT

I want to change the DefaultTasksMax in /etc/systemd/system.conf but won't change.

The command:

systemctl show --property=DefaultTasksMax  

still (even after server restart) produces this output:

DefaultTasksMax=105  

What am I doing wrong?

Some other informations: the server is hosted on Strato.com, it runs Ubuntu 20.04.4 LTS.

Correct way to put a MySQL replicated environment safely into maintenance mode?

Posted: 20 Jun 2022 12:54 PM PDT

I need to perform some maintenance on our master/slave/slave MySQL cluster. The maintenance involves optimising three tables, at least one of which is being locked for a duration of approximately 2 hours. The optimise operation for each table runs to completion on the master and then propagates to the slaves in turn via the binary log when complete.

The way I see it I currently have 3 options:

  1. Restart master with skip-networking, run the optimise and then bring it back online afterwards and allow the slaves to catch up.
  2. Bring all 3 nodes offline concurrently, run the optimise operations in parallel in parallel, and reset replication afterwards.
  3. Cleanly stop MySQL on the nodes, shut off networking to the outside world, bring them back up, run the optimise on master and allow it to propagate to the slaves before restoring network access.

I'm struggling to find any documentation on best practices for this, or the exact behaviour of the shutdown, is anybody able to confirm the best way to safely bring the boxes offline to perform the necessary work?

Performing the operation cleanly is of bigger concern than the time taken, as the maintenance will be performed overnight.

The MySQL version is 5.6, it unfortunately is an older version, plans are in place to upgrade in the near future but I'm stuck with it for the time being. The replication method is GTID.

Many thanks.

CORS error - Website is not reachable (ERR_FAILED), then redirects and works by itself

Posted: 20 Jun 2022 01:50 PM PDT

Error: I get "This site can't be reached ..." and then it automatically redirects and then the page works. Please see the screengrab GIF below.

enter image description here

This error happens in random unpredictable intervals. On average it occurs once in ten times.

It happens even in a plain HTML page where there is no content. I tested with only a "Hello World" text. There are no CSS or other file includes, and no access to third-party websites.

In Chrome Dev Tools, Status says CORS error and then redirects and the page displays.

This is occurring only on the latest Chrome browsers (Chromium: 102.0.5005.) Latest as of the moment.

This issue started from 25-May-2022 which coincides with the date of launch of this Chrome 102.0.5005. I tested on Chrome Beta (103.0.5060 the next version due) and it is reproducible.

The traffic stats from Google Analytics has also dropped by around 20%. This drop started from the same date 25-May-2022.

I checked the hosting server error log and there are no errors. I have hosted all my websites in DreamHost VPS and it occurs in all my websites. I checked a random website (not mine) hosted in DreamHost and can reproduce this issue.

Steps to reproduce:

  1. Use latest Chrome browsers (Chrome or Brave) Chromium: 102.0.5005.
  2. Go to Website https://www.mattbeno.com/
  3. Refresh like around 10 times with a few seconds interval between each refresh.

Please help to fix this issue.

ESX hosts crash within same vcenter cluster

Posted: 20 Jun 2022 02:02 PM PDT

I have a vcenter cluster of 12 ESX hosts (ClusterA) and another cluster of 3 ESX hosts (ClusterB). All of these are a mix of poweredge r620s and r630s.

Some of the hosts have hardware errors that can be seen in the iDRAC logs and front LCD screen such as:

  • CPU machine check error
  • Correctable memory error rate exceeded As expected, this is causing those hosts to be unavailable (Not responding) in the cluster.

Fixing these hardware errors usually involves these steps:

  1. power off
  2. remove network cards
  3. power on and wait for successful boot to OS
  4. power off
  5. place the same network cards back in
  6. power on It's strange to me that this would fix CPU & memory errors, but that's what happens consistently.

ClusterB is fine - no problems ever. The real problem I'm facing is that when I fix a couple hosts from ClusterA, 1-3 other random hosts in ClusterA will crash within a day or two. After those initial 1-3 crashes, if I leave things alone, no more hosts crash afterwards for weeks. This puts me back to where I started and I've observed this behavior several times now.

Any ideas on what to check?

Dell PowerEdge R410: Format SAS NetApp drives to 512B sector size for use in RAID

Posted: 20 Jun 2022 02:30 PM PDT

Thanks for helping out. Some time ago I got two 400GB NetApp drives for use in my Poweredge server. I attempted for a while to get them to work but they would not join a RAID disk group. I found this is because the drives have been formatted with 520 byte sector size, and they need to be 512 bytes. I attempted to format the drives but I cannot access them within the stored operating system (Proxmox) or a live USB of Mint or Ubuntu.

I'm looking for some way to somehow directly access these drives from some Linux system so I can run the necessary commands to format the drive sector sizes, but if there's a better way to do that I'm open to suggestions.

The only way I can access these drives are through the front hard drive slots of my server. I have no other device that allows SAS đrives. Unless there's some way inside the server, which there did not appear to be but I could have glanced over it.

I've tried for a while to get the SAS NetApp drives to work but to of no avail, so I'm hoping that any of you can give me hints or help me out, feel free to ask questions. Thanks again.

Dell iDRAC on dedicated NIC not accessible from the server itself

Posted: 20 Jun 2022 02:35 PM PDT

I have a Dell PE R720xd server with an enterprise iDRAC license. I have iDRAC configured to use the dedicated NIC.

I can access iDRAC from anywhere except the actual server itself. I could understand this happening if I were sharing iDRAC with one of the four onboard NICs, but I'm not -- it's the dedicated NIC.

Google searches for this were not helpful.

Using a RAID Controller as Pass-thru vs RAID0

Posted: 20 Jun 2022 02:45 PM PDT

I have a server with DellPerc H750 Storage controller.

I want to use the controller as Pass-thru/Non-RAID but I have the below questions:

A) Is it possible in the future to replace the controller with a HBA one without losing data ?

B) If I used the RAID0 configuration for each disk independently instead of the pass-thru config , would that lead to a better performance or not ?

kolla ansible deployment stuck at Nova API bootstrap container

Posted: 20 Jun 2022 12:28 PM PDT

I am deploying openstack (for kypo cyber range) using kolla-ansible. I have followed all the steps on official guide. However I am stuck on Nova API bootstrap container for almost half a day. I have looked into mariadb.log file and it says

2022-01-17 11:40:36 1009 [Warning] Aborted     connection 1009 to db: 'placement' user: 'placement' host: 'kypo-virtual-machine' (Got an error reading communication packets)  2022-01-17 11:41:14 1028 [Warning] Aborted connection 1028 to db: 'placement' user: 'placement' host: 'kypo-virtual-machine' (Got an error reading communication packets)  2022-01-17 11:41:52 1047 [Warning] Aborted connection 1047 to db: 'placement' user: 'placement' host: 'kypo-virtual-machine' (Got an error reading communication packets)  2022-01-17 11:42:29 1064 [Warning] Aborted connection 1064 to db: 'placement' user: 'placement' host: 'kypo-virtual-machine' (Got an error reading communication packets)  2022-01-17 16:49:41 0 [Warning] WSREP: last inactive check more than PT1.5S ago (PT2.13542S), skipping check  2022-01-17 16:49:46 0 [Warning] WSREP: last inactive check more than PT1.5S ago (PT2.49028S), skipping check  2022-01-17 16:51:21 0 [Warning] WSREP: last inactive check more than PT1.5S ago (PT1.56325S), skipping check  2022-01-17 21:23:02 0 [Warning] WSREP: last inactive check more than PT1.5S ago (PT2.2194S), skipping check  

All I can see is its a connection problem. Can anyone please guide how to get over it?

Azure Scale-set how to monitor memory utilization

Posted: 20 Jun 2022 02:03 PM PDT

How do I monitor memory utilization for Azure Scale-set default metrics is only CPU Disk and network. Why does Azure not provide memory utilization by default

Outlook and OWA search not working - no results

Posted: 20 Jun 2022 01:00 PM PDT

Our environment consists of a single Exchange 2016 CU8 server and multiple clients using Outlook and OWA.

Searching (fast search and advanced find) both are not working in either OWA or Outlook desktop. The results are simply empty with "no items found."

Additional weird symptoms:
MSExchangeFastSearch is throwing the following in Event Viewer:

An operation attempted against a FAST endpoint exprienced an exception. This operation may be retried. Error details: Microsoft.Exchange.Search.Fast.PerformingFastOperationException: An Exception was received during a FAST operation. ---> System.ServiceModel.FaultException: Could not load file or assembly 'Microsoft.Exchange.TransportFlowMdm.105, Version=1.0.0.0, Culture=neutral, PublicKeyToken=0fbbedb750799a68' or one of its dependencies. The system cannot find the file specified.  

And when checking on the database content status of the newly created DB:

ContentIndexState            : Unknown  ContentIndexErrorMessage     : Could not find registry value of Index Status for database                                 {3c0560f8-3c41-45cc-b176-823123ba9e26}.  

Steps I've tried:
1) Rebuilding content index (now it shows "healthy"
2) Moving mailboxes to new database

I'll be upgrading to CU9 over the weekend as a last-ditch effort. Anyone have ideas?

Make IIS server max_file_upload size 10GB

Posted: 20 Jun 2022 01:00 PM PDT

I am working on a website that is hosted with the company's own server, using IIS. I was wondering if it's possible to make the make file upload size 10GB? Their assets they send and receive to clients are generally between 5GB to 10GB.

Just wondering what changes are necessary to achieve this (changing upload_max_filesize, post_max_size, memory_limit). I am going to try to raise the limit tomorrow.

Best,

Matt

Start/stop windows service as user from command line

Posted: 20 Jun 2022 03:01 PM PDT

How can I start a service from the command line e.g. net start "sql server (sqlexpress2016)" without running with elevated privileges?

The short answer is "you can't".
But how come then Services services.msc can start the same service without elevated privileges?
Is there a way to mimic this through the command line?

Clarification:
I am not looking for a way to change the service's security level but more like something on the command prompt like C:\>win-su net start SqlServer2016. where win-su has the rights and super powers to automagically recognise me as an admin and raise the security level for the net process.

Proper Way to set Preferred DNS Server on the Windows Domain Controllers themselves?

Posted: 20 Jun 2022 02:29 PM PDT

This may be a basic question, but I'm not sure how to properly phrase what I'm looking for, with a google search.

I have two Windows Server 2012 R2 domain controllers on the local network. Let's say Controller1 has an IP address of 192.168.1.1. Controller2 has an IP address of 192.168.1.2.

Our client machines on the network have Controller1 set as the preferred DNS, and Controller2 as the alternate choice.

My question is: What should the "Use the Following DNS Server Addresses" fields be set to, on the Domain controllers themselves? Currently, Controller1 has 192.168.1.1 (itself) set as the Preferred, and nothing set for the alternate. Controller2 has 192.168.1.1 set as the preferred, and 127.0.0.1 as the alternate.

This was set up a year ago, by someone who I'm not entirely sure knew what they were doing. I'm certainly no expert myself, and so I'd like to doublecheck if the current settings they had made make sense.

Thank you for your time.

How to serve static files with version number with Nginx?

Posted: 20 Jun 2022 03:01 PM PDT

I just finished installing Nginx for wordpress but all static files with ?ver=x is redirecting to nginx's default page.

Working

/jquery-ui-1.8.6.custom.min.js

Redirecting to default Nginx page

/jquery-ui-1.8.6.custom.min.js?ver=1

Here is my configuration. What am I missing here?

server {          listen   80;            root /var/www/domain.com;          index index.php index.html index.htm;            server_name domain.com;            location / {                  try_files $uri $uri/ /index.php?q=$uri&$args;          }            error_page 404 /404.html;            error_page 500 502 503 504 /50x.html;          location = /50x.html {                root /usr/share/nginx/www;          }            # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000          location ~ \.php$ {                  try_files $uri =404;                  #fastcgi_pass 127.0.0.1:9000;                  # With php5-fpm:                  fastcgi_pass unix:/var/run/php5-fpm.sock;                  fastcgi_index index.php;                  include fastcgi_params;           }          }  

Thanks everyone in advance.

Roundcube domain change for a single account

Posted: 20 Jun 2022 02:03 PM PDT

I have inherited a server that is running some ugly roundcube php interface for mail accounts. I would like to change a domain for specific account to custom domain that I have set up on my DNS. I have added users to system and created aliases in my postfix configuration. In file /usr/local/www/roundcube/config/main.inc.php I have a line like $rcmail_config['default_host'] = 'mail.domain.com'; and this is setting all new accounts to have @mail.domain.com domain in their mails. I also have tried to change this by logging in to this account through roundcube interface and in Settings -> Identies I have E-Mail line that I can't change. I see there is also some mysql database for this roundcube installation. If someone could point me where exactly I should change domain name for specific accounts (not for all accounts, like in the line I quoted above).

No comments:

Post a Comment