I want to use dd under linux to make a backup image of my disk. With sata devices there is a /dev/sda for the disk, and /dev/sdaX for each partition.
But with this nvme I see /dev/nvme0, /dev/nvme0n1, and /dev/nbme0n1pX. That last is clearly the partitions, but which of the former should I use to backup my disk? (nvme0 vs nvme0n1).
What is the purpose of having 2 devices representing the disk?
And when I restore the disk, to which device do I write?
We are planning to migrate away from VMware ESXi for our company servers. We have a LOT of Windows virtual machines used for testing (different configurations, combinations of options, etc) in our test lab. These include Windows 10 and Windows Server 2019 VM's.
I want to ensure that all of our test VM's don't trigger activation when Windows detects the hardware signature has changed, as I suspect would happen when moving to a new hypervisor.
We are considering what hypervisor to move to next, and we like the Red Hat 9's KVM.
Does anyone have experience with this migration?
Do your Windows VM's require activation after moving?
Please note that our test lab containing the VM's is air-gapped, and must never connect to the Internet.
So don't suggest 'just reactivate'...not an option.
I have a single domain with 2 sites, each site has it's own 2019 DC. On the (secondary) site I see an alert that the KPSSVC service (KDC Proxy Server Service) is not started. And it's startup type is set to automatic.
When I try to start the service Windows replies with "Windows could not start the KDC Proxy Server service (KPSSVC) on the local computer. Error 5: Access is denied". I am trying to start the service while logged in as the domain admin.
I do not have any sub-OU's, this is a very simple domain.
I have an avago raid controller managing an array of 4 disks + 1 hot spare.
----------------------------------------------------------------------------------
EID:Slt DID State DG Size Intf Med SED PI SeSz Model Sp Type
----------------------------------------------------------------------------------
252:0 3 Onln 0 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-01WD5B1 U -
252:1 5 Onln 0 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-01WD5B1 U -
252:2 6 Onln 0 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-01WD5B1 U -
252:3 7 Onln 0 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-01WD5B1 U -
252:4 4 GHS - 7.276 TB SATA HDD N N 512B WDC WD8004FRYZ-01VAEB0 U -
----------------------------------------------------------------------------------
All is working well, but I notice that the storcli output shows the GHS disk as spun up. Why keep the GHS spun up - won't that just wear out a disk which is otherwise idle? Is it possible to spin down this drive until it is needed?
I have an LSI controller with a R10 array consisting of 4 drives + 1 spare. Storcli reports:
----------------------------------------------------------------------------------
EID:Slt DID State DG Size Intf Med SED PI SeSz Model Sp Type
----------------------------------------------------------------------------------
252:0 3 Onln 0 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-01WD5B1 U -
252:1 5 Onln 0 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-01WD5B1 U -
252:2 6 Onln 0 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-01WD5B1 U -
252:3 7 Onln 0 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-01WD5B1 U -
252:4 4 UGood - 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-01WD5B1 U -
----------------------------------------------------------------------------------
Details of slt 4 shows:
Drive /c0/e252/s4 Policies/Settings :
===================================
Enclosure position = 1
Connected Port Number = 4(path0)
Sequence Number = 3
Commissioned Spare = No
Emergency Spare = No
I would like to make drive 4 a global hot spare. Another post suggested using the command:
storcli /c0/e252/s4 add hotsparedrive
But how does that relate to "Commissioned Spare" vs "Emergency Spare" above. I just want this disk to be a spare in case any drive fails.
I'm investigating the state of an LSI raid array that might have recently suffered a drive failure. The array had a spare configured, so the array is not degraded. However, the storcli command ( /opt/lsi/storcli/storcli /c0/e252 show ) shows that 2 of the drives have a background task (BT:Y) running.
Does that mean it is rebuilding? What would a background task be?
-----------------------------------------------------------------------------
DG Arr Row EID:Slot DID Type State BT Size PDC PI SED DS3 FSpace TR
-----------------------------------------------------------------------------
0 - - - - RAID10 Optl N 10.915 TB dflt N N dflt N N
0 0 - - - RAID1 Optl N 5.457 TB dflt N N dflt N N
0 0 0 252:0 3 DRIVE Onln N 5.457 TB dflt N N dflt - N
0 0 1 252:1 5 DRIVE Onln N 5.457 TB dflt N N dflt - N
0 1 - - - RAID1 Optl N 5.457 TB dflt N N dflt N N
0 1 0 252:2 6 DRIVE Onln Y 5.457 TB dflt N N dflt - N
0 1 1 252:3 7 DRIVE Onln Y 5.457 TB dflt N N dflt - N
-----------------------------------------------------------------------------
Is there a way to find out what those 2 drives are doing in the background?
I have taken over responsibility for a new server with an LSI RAID card, configured with 4 drives (in R10) plus one spare. I normally manage RAID arrays by taking down the server and configuring via the LSI GUI (rom).
However, I cannot take this server down at the moment, so I installed the LSI CIM (on ESXi 6.7). The storcli command shows the following:
----------------------------------------------------------------------------------
EID:Slt DID State DG Size Intf Med SED PI SeSz Model Sp Type
----------------------------------------------------------------------------------
252:0 3 Onln 0 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-01WD5B1 U -
252:1 5 Onln 0 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-01WD5B1 U -
252:2 6 Onln 0 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-01WD5B1 U -
252:3 7 Onln 0 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-01WD5B1 U -
252:4 4 UBad F 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-0 U -
----------------------------------------------------------------------------------
As you can see disk in slot 4 is marked as "UBad". However, does this really mean it is failed? It shows as spinning (Sp:U). DG (Drive Group) shows as "F" - no idea what that means. Could it be the drive was simply not configured as a hot spare?
Anything more I can do from the command line to see what is going on? Is there any way to manage this from a GUI (in Linux, or second choice windows) which connects to the host computer via IP?
UPDATE:
I used the 'set good' parameter on the drive as suggested below, and also '/fall delete' and it no longer shows as a foreign config:
----------------------------------------------------------------------------------
EID:Slt DID State DG Size Intf Med SED PI SeSz Model Sp Type
----------------------------------------------------------------------------------
252:0 3 Onln 0 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-01WD5B1 U -
252:1 5 Onln 0 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-01WD5B1 U -
252:2 6 Onln 0 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-01WD5B1 U -
252:3 7 Onln 0 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-01WD5B1 U -
252:4 4 UGood - 5.457 TB SATA HDD N N 512B WDC WD6002FRYZ-01WD5B1 U -
----------------------------------------------------------------------------------
Notice the full model number appears now...strange. Is this a sign something is flaky?
I purchased an older LSI 9300-4i card and before I put it into production I want to flash the latest firmware. In addition to IT vs IR flavours of available firmware, there's also an IT vs IT_ACM flavour.
What is the ACM suffix for?
I will be connecting only a single drive (no raid) to this card, for hot-swapping a drive tray. So I don't wait raid, which is why I thought I would just flash the IT firmware. But IT_ACM has me scratching my head.
I have 2 hosts (h1 and h2) where h2 takes over services if h1 fails. The hostnames are unique, they have different MAC addresses, and each has one unique IP and one shared IP (moved between hosts on failover).
Is it possible to share SSL certificates between the hosts? That way up/downstream devices that look for TLS protected services think they are connecting to the same host as before (pre-failover)?
Or is there something in these certificates that's tied to the hardware and will refuse to operate properly if they are moved to a new host?
I purchased a multi-year certificate (from Godaddy) for my exchange 2016 in 2020. They sent me the first (1 year) cert, which will expire soon, in response to my original request generated in the ECP. I understand that certs cannot extend beyond 1 year now.
Now, GoDaddy sent me a new cert to replace the old one ( I did not have to request it). However, there is no open request. How do I install the new cert without an open request in the ECP?
I tried clicking RENEW and providing this new cert as the response, but ECP complains that a certificate with that thumbprint already exists.
How do I proceed? (GoDaddy is no help - they tell me to contact Microsoft). Shouldn't I have to send the CA (GoDaddy) a new request before they can send me a cert? Or is there some other way to install the updated certificate?
I have an AWS lightsail instance running wordpress. It is getting pounded with hits from Chinese IP addresses - and they keep changing IP's. I started making hundreds of iptables rules but am giving up as this is clearly the wrong approach.
I discovered the AWS WAF service, and created an ACL which drops traffic from China. And the WAF is in the same region as my lightsail instance.
Great. But it's not doing anything...still getting hit. I can't figure out how (or IF) I connect my lightsail traffic to the WAF. Is it even possible?
I don't need a load balancer, nor cloudfront, nor do a have a gateway (I think). This setup is really simple...
I created a new dovecot installation, and my client (Outlook 2013) is having trouble syncing (frequent errors). On the server side I see the errors below.
Dec 01 17:14:36 imap-login: Info: Login: user=<[email protected]>, method=PLAIN, rip=125.3.26.22, lip=172.16.15.26, mpid=13497, TLS, session=<8HjEPf17CuaHF+zy>
Dec 01 17:14:38 imap([email protected]): Error: Sync failed for mbox file /data/mail/mydomain.com/myuser: UID inserted in the middle of mailbox (10804 > 10802, seq=2, idx_msgs=1)
Dec 01 17:14:38 imap([email protected]): Error: Sync failed for mbox file /data/mail/mydomain.com/myuser: UID inserted in the middle of mailbox (10804 > 10802, seq=2, idx_msgs=1)
On the client side I see errors like
8:04:58 Error synchronizing folder
8:04:58 [800CCCD3-0-0-560]
I've seen some FAQ in Dovecot docs relating to OTHER programs manipulating the mbox store. However, I only run dovecot and postfix - nothing is manipulating messages on the server.
What is causing this?
I would like to replace the (self signed) SSL certs on various ESXi 5.5 hosts with ones generated by our own CA. I found docs on the VMware site on how to overwrite the key and cert files on the ESXi host, but NOT on how to generate a CSR on the host.
Can someone explain how to generate the CSR on the esxi host?
A simple version of this question has been asked before (and links to VMware site for simple scenarios exist) - but this is a bit more complicated. I have 4 snapshot scenarios under VMware esxi 5.5:
and I want to know what happens when I click "DELETE ALL" snapshots. Is this correct?
According to VMware, deleting any snapshot merges it into the parent only if it is the current chain. But I think their article is poorly worded - and it conflicts with other VMware postings that suggest snapshots below the current (you are here) state in the current chain are simply discarded
I am upgrading a server which has four drive bays. I'll be putting a new Adaptec RAID card into the server so it will support large drive sizes. I need to squeeze as much capacity as possible out of this four-drive cage, so 8 TB drives are my most likely choice.
This is a generic file server (but it handles recording video streams from a security system). I would like to use one of the drive bays for a hot standby, which leaves me with three disks to form the RAID array.
Although I could simply use two disks for mirroring + one hot spare, I've seen RAID 1E (spread over three disks + one hot spare, or RAID 5 three disks + one spare.
Is there a good reason to go one way or the other?
I read the question R5 vs R1E, but it doesn't really answer if R5 or R1E is better in the case of a good controller and multiple write streams.
I am working on a network of 500 Windows workstations with Linux servers. SAMBA 4 is in use as the domain controller.
Users can move between workstations, and as a results the contents of their profiles (including MyDocuments) appear to replicate everywhere they login, causing very slow login (up to 20 min)
Can I create and push out Windows Group Policies to force the contents of My Documents onto a network samba share (folder redirection)? If so, what tool do I use to create the GPO under Linux? (Debian)
Is there a better approach to solving this problem?
I have a host which is multihomed, eth0 is on 172.31.254.0/24 and eth0.10 is on 172.31.253.0/24 . Obviously eth0.10 is a subinterface on vlan id 10.
From this host I can succesfully ping hosts on the 172.31.253.0/24 network but not consistently on the 172.31.254.0/24 network. For example, notice the dropout in pings #5-#25:
[root@pbx1 ~]# ping -I eth0 172.31.254.37
PING 172.31.254.31 (172.31.254.31) from 172.31.254.13 eth0: 56(84) bytes of data.
64 bytes from 172.31.254.37: icmp_seq=1 ttl=128 time=1.03 ms
64 bytes from 172.31.254.37: icmp_seq=2 ttl=128 time=0.247 ms
64 bytes from 172.31.254.37: icmp_seq=3 ttl=128 time=0.236 ms
64 bytes from 172.31.254.37: icmp_seq=4 ttl=128 time=4.00 ms
64 bytes from 172.31.254.37: icmp_seq=26 ttl=128 time=0.237 ms
64 bytes from 172.31.254.37: icmp_seq=27 ttl=128 time=0.299 ms
My interfaces look right:
[root@myhost1 ~]# ifconfig
eth0 Link encap:Ethernet HWaddr 00:22:4D:B2:28:AC
inet addr:172.31.254.13 Bcast:172.31.254.255 Mask:255.255.255.0
inet6 addr: fe80::222:4dff:feb2:28ac/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:121808 errors:0 dropped:0 overruns:0 frame:0
TX packets:120948 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:16685937 (15.9 MiB) TX bytes:23059300 (21.9 MiB)
Interrupt:16 Memory:d0020000-d0040000
eth0.10 Link encap:Ethernet HWaddr 00:22:4D:B2:28:AC
inet addr:172.31.253.4 Bcast:172.31.253.255 Mask:255.255.255.0
inet6 addr: fe80::222:4dff:feb2:28ac/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2732 errors:0 dropped:0 overruns:0 frame:0
TX packets:828 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1394817 (1.3 MiB) TX bytes:417925 (408.1 KiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:30573 errors:0 dropped:0 overruns:0 frame:0
TX packets:30573 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:2225449 (2.1 MiB) TX bytes:2225449 (2.1 MiB)
and the routing table looks right:
[root@myhost1 ~]# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
172.31.254.0 * 255.255.255.0 U 0 0 0 eth0
172.31.253.0 * 255.255.255.0 U 0 0 0 eth0.10
link-local * 255.255.0.0 U 1002 0 0 eth0
default firewall.mydomain.com 0.0.0.0 UG 0 0 0 eth0
So why are my packets not getting to (or responses getting back from) hosts on the 172.31.254.0/24 network? I set /proc/sys/net/ipv4/conf/eth0/rp_filter to 0 but it makes no difference
Update: Routing table for destination host:
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 172.31.254.1 172.31.254.37 266
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
172.31.252.0 255.255.255.0 172.31.254.2 172.31.254.37 11
172.31.253.0 255.255.255.0 172.31.254.2 172.31.254.37 11
172.31.254.0 255.255.255.0 On-link 172.31.254.37 266
172.31.254.37 255.255.255.255 On-link 172.31.254.37 266
172.31.254.255 255.255.255.255 On-link 172.31.254.37 266
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 172.31.254.37 266
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 172.31.254.37 266
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
172.31.252.0 255.255.255.0 172.31.254.2 1
172.31.253.0 255.255.255.0 172.31.254.2 1
0.0.0.0 0.0.0.0 172.31.254.1 Default
===========================================================================
Synology has introduced some interesting terminology with their products that is confusing (to someone used to traditional storage terminology).
It appears that "volumes" on Synology is equivalent to RAID volumes. But then:
I am new to postfix and am trying to pipe a message to a particular email address to a bash script. I am running CentOS 6 in case that matters.
My script has 777 permission (for testing), and when I email to the test account I see that postfix tries to run the script. This is the relevant line from the maillog:
Feb 16 15:08:40 lserver2 postfix/local[19675]: F4045103000: to=, orig_to=, relay=local, delay=1737, delays=1737/0.01/0/0.01, dsn=4.3.0, status=deferred (temporary failure. Command output: local: fatal: execvp /data/scripts/testscript: Permission denied )*
This looks like a permissions issues. When I try to run my script as us 'postfix' or 'nobody' I get the error: This account is currently not available.
I'm not sure where to go from here....I've read several posts that don't give a clear next step. (I don't want to redirect ALL mail to a script, and one answer looks WAY to complicated for something so simple)
I have 2 sites (HO + Branch), both with Win Servers 2003, connected by a tunnel. I want to have a DC in each location to allow for local login/authentication.
Can someone tell me what roles I should assign to the DC's in the remote branches?
I am about to install a Win 2012 DC's in each location in case that matters.