Home / user-129360

Jevgeni Smirnov's questions

Martin Hope
Jevgeni Smirnov
Asked: 2014-07-19 13:40:29 +0800 CST
  • 0

I have a problem with debconf-set-selections command. After I install percona server on my machine root password is located in several cache files. I am not sure if i can just delete this files or entire directory.

root@testing:/var/cache/debconf# grep -ir 'superpassword' .
./passwords.dat:Value: superpassword
./passwords.dat:Value: superpassword
./templates.dat-old:Default: superpassword
./templates.dat-old:Default: superpassword
./templates.dat:Default: superpassword
./templates.dat:Default: superpassword

So my question would be how to properly clean these files from root password?

linux
Martin Hope
Jevgeni Smirnov
Asked: 2014-04-07 00:15:00 +0800 CST
  • 2

I am using ansible to configure and deploy my app on several machines. The only problem I have now is that I am not sure how to properly initialize/automate the very first connection to this machines?

I am getting completely empty machine, so I have to put on this machine at least my public key into authorized_keys, git into known_hosts, as well as private_key for git user(I am using bitbucket). Currently I run small ansible task for every new machine to do all this things.

But I suppose there is more optimal way to do things?

Probably the only solution I see now is to setup single machine and then 'clone' it(I am using digital ocean). But this won't work for env where I am unable to clone images.

deployment
Martin Hope
Jevgeni Smirnov
Asked: 2013-06-04 20:55:43 +0800 CST
  • -4

I have clamav.log full of these messages, what might be the problem and how to fix this? I have Debian clamav-0.97.6+dfsg-1~squeeze1 spamassassin-3.3.1-1 dovecot-pop3d-1.2.15-7 postfix-2.7.1-1+squeeze1 and also there is somewhere near milter.

LocalSocket setting is ok

Tue Jun  4 07:43:34 2013 -> WARNING: No clamd server appears to be available
Tue Jun  4 07:44:34 2013 -> WARNING: No clamd server appears to be available
Tue Jun  4 07:45:34 2013 -> WARNING: No clamd server appears to be available
Tue Jun  4 07:46:34 2013 -> WARNING: No clamd server appears to be available
Tue Jun  4 07:47:34 2013 -> WARNING: No clamd server appears to be available
Tue Jun  4 07:47:58 2013 -> ERROR: Failed to initiate streaming/fdpassing
Tue Jun  4 07:47:58 2013 -> WARNING: No clamd server appears to be available
Tue Jun  4 07:48:58 2013 -> WARNING: No clamd server appears to be available
Tue Jun  4 07:49:33 2013 -> ERROR: Failed to initiate streaming/fdpassing
Tue Jun  4 07:49:33 2013 -> WARNING: No clamd server appears to be available
linux
Martin Hope
Jevgeni Smirnov
Asked: 2013-05-30 10:11:44 +0800 CST
  • 0

Cannot remove a file nor a directory containing it.

output of ls -la:

-????????? ? ?           ?                  ?            ? 1221036243.V905I191359M574755.domain.com:2$

UPDATE 1

[root@domain Maildir]# chmod -R 777 cur
chmod: cannot access `cur/1221036243.V905I191359M574755.domain.com:2$': No such file or directory

UPDATE 2

[root@domain Maildir]# rm -rf cur
rm: cannot remove `cur': Directory not empty

rm -rf 1221036243.V905I191359M574755.domain.com:2$
rm -rf 1221036243.V905I191359M574755.domain.com:2\$

NO output at all.

UPDATE 3

[root@domain cur]# getfacl .
# file: .
# owner: root
# group: root
user::rwx
group::rwx
other::rwx

UPDATE 4

[root@domain /]# umount backup
[root@domain /]# fsck /dev/md119
fsck from util-linux 2.19.1
e2fsck 1.41.14 (22-Dec-2010)
/dev/md119: clean, 1487811/183148544 files, 80994051/732566603 blocks
[root@domain /]# mount backup

UPDATE 5

[root@domain /]# fsck -f /dev/md119
fsck from util-linux 2.19.1
e2fsck 1.41.14 (22-Dec-2010)
Pass 1: Checking inodes, blocks, and sizes
Pass 2: Checking directory structure
Problem in HTREE directory inode 180886324: block #10437 has bad min hash
Invalid HTREE directory inode 180886324 (/.snapshots/daily.2/h1/mailboxs/magazin/Maildir/cur).  Clear HTree index<y>? yes

Pass 3: Checking directory connectivity
Pass 3A: Optimizing directories
Pass 4: Checking reference counts
Pass 5: Checking group summary information

/dev/md119: ***** FILE SYSTEM WAS MODIFIED *****
/dev/md119: 1487811/183148544 files (0.1% non-contiguous), 80980327/732566603 blocks

And many thanks goes to Michael Hampton with his fsck -f /dev/md119.

linux
Martin Hope
Jevgeni Smirnov
Asked: 2013-05-28 23:25:21 +0800 CST
  • 0

I have a task to move linux server from 1 dedicated server to another.

In general my plan following:

  1. night time - turn off httpd and mysql. RSYNC via SSH.
  2. day time - turn on http and mysql.
  3. night time turn off httpd and mysql. RSYNC via SSH.
  4. night time. turn on httpd and mysql on both servers. Change DNS entries.
  5. day time. monitoring server status.

So mostly both for syncing mysql and httpd I would use rsync(no mysqldump).

Sounds good? Any caveats?

linux
Martin Hope
Jevgeni Smirnov
Asked: 2013-05-24 21:54:45 +0800 CST
  • -1

I'v installed SSD on my server and moved tmp folder, mysql data folder and 2 most loaded websites(php) on it.

I'v expected that server load will fall a little bit, but it seems that it is on the same level as it was.

So the question is, should the server load decreased with ssd installation or installing an ssd is not a powerful mean to decrease load?

UPDATE 1

The system if Fedora. In general I struggle of CPU load, which is made mostly by MySQL.

My proposal is that mysql uses a lot of io ops, but might be I am wrong.

mysql
Martin Hope
Jevgeni Smirnov
Asked: 2013-05-11 23:37:25 +0800 CST
  • 2

I have following script, which I found somewhere in the Internet, and I modified it a little bit to suit my needs.

My question is: If I understood output of iptables-save my iptables rules are maderight, but I just want to make sure.

Here is my .sh file:

#!/bin/bash
ISO="af cn th vn in bd pk"

### Set PATH ###
IPT=/sbin/iptables
WGET=/usr/bin/wget
EGREP=/bin/egrep

### No editing below ###
SPAMLIST="countrydrop"
ZONEROOT="/root/iptables"
DLROOT="http://www.ipdeny.com/ipblocks/data/countries"

cleanOldRules(){
$IPT -F
$IPT -X
$IPT -t nat -F
$IPT -t nat -X
$IPT -t mangle -F
$IPT -t mangle -X
$IPT -P INPUT ACCEPT
$IPT -P OUTPUT ACCEPT
$IPT -P FORWARD ACCEPT
}

# create a dir
[ ! -d $ZONEROOT ] && /bin/mkdir -p $ZONEROOT

# clean old rules
cleanOldRules

# create a new iptables list
$IPT -N $SPAMLIST







for c  in $ISO
do
        # local zone file
        tDB=$ZONEROOT/$c.zone

        # get fresh zone file
        $WGET -O $tDB $DLROOT/$c.zone

        # country specific log message
        SPAMDROPMSG="$c Country Drop"

        # get
        BADIPS=$(egrep -v "^#|^$" $tDB)
        for ipblock in $BADIPS
        do
          # $IPT -A $SPAMLIST -s $ipblock -j LOG --log-prefix "$SPAMDROPMSG"
           $IPT -A $SPAMLIST -s $ipblock -j DROP
        done
        sleep 3
done


$IPT -I INPUT -j $SPAMLIST
$IPT -I OUTPUT -j $SPAMLIST
$IPT -I FORWARD -j $SPAMLIST

#My part
$IPT -P INPUT ACCEPT
$IPT -P FORWARD ACCEPT
$IPT -P OUTPUT ACCEPT
$IPT -A INPUT -p tcp -m tcp --dport 21 -j ACCEPT
$IPT -A INPUT -p tcp -m tcp --dport 143 -j ACCEPT
$IPT -A INPUT -p tcp -m tcp --dport 110 -j ACCEPT
$IPT -A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
$IPT -A INPUT -s 188.92.161.49/32 -j ACCEPT
$IPT -A INPUT -s 127.0.0.1/32 -p tcp -m tcp --dport 25 -j ACCEPT
$IPT -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
$IPT -A INPUT -s 188.92.163.198/32 -j ACCEPT
$IPT -A INPUT -p tcp -m tcp --dport 25 -j DROP
$IPT -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
$IPT -A INPUT -p icmp -j ACCEPT
$IPT -A INPUT -i lo -j ACCEPT
$IPT -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
$IPT -A FORWARD -j REJECT --reject-with icmp-host-prohibited
$IPT -A INPUT -j REJECT --reject-with icmp-host-prohibited


exit 0

And output of iptables save

# Generated by iptables-save v1.4.10 on Thu May  9 17:00:59 2013
*mangle
:PREROUTING ACCEPT [128952:24289058]
:INPUT ACCEPT [128944:24288514]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [180927:208852344]
:POSTROUTING ACCEPT [180927:208852344]
COMMIT
# Completed on Thu May  9 17:00:59 2013
# Generated by iptables-save v1.4.10 on Thu May  9 17:00:59 2013
*nat
:PREROUTING ACCEPT [3169:170149]
:INPUT ACCEPT [3118:164866]
:OUTPUT ACCEPT [909:54321]
:POSTROUTING ACCEPT [909:54321]
COMMIT
# Completed on Thu May  9 17:00:59 2013
# Generated by iptables-save v1.4.10 on Thu May  9 17:00:59 2013
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [134106:154955595]
:countrydrop - [0:0]
-A INPUT -j countrydrop
-A INPUT -p tcp -m tcp --dport 21 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 143 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 110 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
-A INPUT -s 127.0.0.1/32 -p tcp -m tcp --dport 25 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25 -j DROP
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j countrydrop
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
-A OUTPUT -j countrydrop
-A countrydrop -s 202.56.176.0/20 -j DROP
-A countrydrop -s 202.86.16.0/20 -j DROP
-A countrydrop -s 203.174.27.0/24 -j DROP
-A countrydrop -s 203.215.32.0/20 -j DROP
-A countrydrop -s 210.80.0.0/19 -j DROP
-A countrydrop -s 210.80.32.0/19 -j DROP
-A countrydrop -s 91.109.216.0/21 -j DROP
-A countrydrop -s 193.201.151.64/26 -j DROP
-A countrydrop -s 192.124.154.0/24 -j DROP

If I understood first of all traffice is directed to countrydrop, and then to my rules.

Am I right?

linux
Martin Hope
Jevgeni Smirnov
Asked: 2013-02-14 23:44:30 +0800 CST
  • 0

I have following problem:

Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.

The apache tries to reach non-existing files.

This is my .htaccess:

RewriteEngine  on

Options +FollowSymlinks    

RewriteCond %{HTTP_HOST} ^(www.)?domain.com$   

RewriteCond %{REQUEST_URI} !^/subfolder/$   

RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d

RewriteRule ^(.*)$ /subfolder/$1   

RewriteRule ^\??$ index.php [L]

I'v turned on logs and in logs there was like:

/nonexistingfile -> /subfolder/nonexistingfile
/subfolder/nonexistingfile -> subfodler/subfolder/nonexistingfile 
/subfodler/subfolder/nonexistingfile -> subfodler/subfodler/subfolder/nonexistingfile

And like this 10 times.

apache-2.2
Martin Hope
Jevgeni Smirnov
Asked: 2013-02-07 09:37:27 +0800 CST
  • 0

I have RAID1 with 2 3TB disks.

The general problem as I see is that for some reason this array have some problems with naming. It has md/19 md/19_0 and md127

My goal is to make this 3TB Raid1 automounted at system startup AND to not have mess with names.

I think that several command outputs might be helpful:

mdadm --detail --scan

ARRAY /dev/md123 metadata=0.90 UUID=d8e13d02:42e15bdd:a7ee4ba9:042b6983
ARRAY /dev/md124 metadata=0.90 UUID=bebc5077:0da808fe:c80b1c52:51eaca74
ARRAY /dev/md/19_0 metadata=1.0 name=19 UUID=106e24cd:72126345:5561dd7d:adcb9008
ARRAY /dev/md1 metadata=0.90 UUID=4606ff38:63608632:8ddec75b:5960982f
ARRAY /dev/md125 metadata=0.90 UUID=3f29bed2:645f6822:fd798925:a402af0e
ARRAY /dev/md120 metadata=0.90 UUID=0233db18:f9536858:df0b9ebc:7a95f77b
ARRAY /dev/md126 metadata=0.90 UUID=fb5d1ab5:0f1b97ec:06b1995e:dfaa5770
ARRAY /dev/md122 metadata=0.90 UUID=6ad2e633:3e80e563:531dca77:79bf01e0
ARRAY /dev/md121 metadata=0.90 UUID=aab82674:d97f02db:6a840782:80492029

mdadm --examine --scan

ARRAY /dev/md/19 metadata=1.0 UUID=106e24cd:72126345:5561dd7d:adcb9008 name=19
ARRAY /dev/md124 UUID=bebc5077:0da808fe:c80b1c52:51eaca74
ARRAY /dev/md123 UUID=d8e13d02:42e15bdd:a7ee4ba9:042b6983
ARRAY /dev/md1 UUID=4606ff38:63608632:8ddec75b:5960982f
ARRAY /dev/md126 UUID=fb5d1ab5:0f1b97ec:06b1995e:dfaa5770
ARRAY /dev/md120 UUID=0233db18:f9536858:df0b9ebc:7a95f77b
ARRAY /dev/md125 UUID=3f29bed2:645f6822:fd798925:a402af0e
ARRAY /dev/md122 UUID=6ad2e633:3e80e563:531dca77:79bf01e0
ARRAY /dev/md121 UUID=aab82674:d97f02db:6a840782:80492029

cat /proc/mdstat

Personalities : [raid1]
md121 : active raid1 sde2[1] sdf2[0]
      293065664 blocks [2/2] [UU]

md122 : active raid1 sde1[1] sdf1[0]
      195318144 blocks [2/2] [UU]

md126 : active raid1 sdc5[0] sdd5[1]
      7823552 blocks [2/2] [UU]

md120 : active raid1 sdc6[0] sdd6[1]
      1959808 blocks [2/2] [UU]

md125 : active raid1 sdc7[0] sdd7[1]
      20659456 blocks [2/2] [UU]

md1 : active raid1 sdd3[1] sdc3[0]
      1959808 blocks [2/2] [UU]

md127 : active raid1 sdb1[1] sda1[0]
      2930266412 blocks super 1.0 [2/2] [UU]

md124 : active raid1 sdc1[0] sdd1[1]
      803136 blocks [2/2] [UU]

md123 : active raid1 sdc2[0] sdd2[1]
      2939776 blocks [2/2] [UU]

unused devices: <none>

blkid

...
/dev/md127: UUID="612fb467-a78d-4b40-b8c5-745055c5a1ee" TYPE="ext4"
...

fdisk -l

...
Disk /dev/md127: 3000.6 GB, 3000592805888 bytes
...

cat /etc/fstab

UUID=05b64e47-1afb-47b9-ba4d-fa1e6fd27f7f /                       ext3    defaults,noatime         1 1
UUID=30ca72f8-6723-49d1-8f76-f66aa3b0cdf0 /boot                   ext3    defaults        1 2
#/dev/md122                               /home                   ext3    defaults,nodev  0 2
#/dev/md126                               /var/lib/mysql          ext3    defaults        0 2
#/dev/md120                               /tmp                    ext3    defaults        0 2
tmpfs                   /dev/shm                tmpfs   defaults        0 0
devpts                  /dev/pts                devpts  gid=5,mode=620  0 0
sysfs                   /sys                    sysfs   defaults        0 0
proc                    /proc                   proc    defaults        0 0
#/dev/md1               swap                    swap    deafults        0 0

mdadm --detail /dev/md127

/dev/md127:
        Version : 1.0
  Creation Time : Wed Jan  5 00:11:25 2011
     Raid Level : raid1
     Array Size : 2930266412 (2794.52 GiB 3000.59 GB)
  Used Dev Size : 2930266412 (2794.52 GiB 3000.59 GB)
   Raid Devices : 2
  Total Devices : 2
    Persistence : Superblock is persistent

    Update Time : Wed Feb  6 19:19:40 2013
          State : clean
 Active Devices : 2
Working Devices : 2
 Failed Devices : 0
  Spare Devices : 0

           Name : 19
           UUID : 106e24cd:72126345:5561dd7d:adcb9008
         Events : 7

    Number   Major   Minor   RaidDevice State
       0       8        1        0      active sync   /dev/sda1
       1       8       17        1      active sync   /dev/sdb1

Thank you in advance.

linux
Martin Hope
Jevgeni Smirnov
Asked: 2012-05-10 22:02:05 +0800 CST
  • 0

I want to create a user on debian which can do following:

  1. Login via SSH.
  2. Create SVN repo and create post-commit hook.
  3. chmod and chown another directory to apache and 777.

How I can achieve that? As far as I see I have several tasks to deal with:

  1. Create user
  2. Enable SSH login for it.
  3. Restrict it's access to several directories and files.
  4. Restrict it's access to several commands.
debian svn ssh permissions
Martin Hope
Jevgeni Smirnov
Asked: 2012-04-06 05:46:25 +0800 CST
  • 2

For single project, which uses a lot of images( ± 1k-3k per day) I use custom PHP script to process images and save them to server.

Currenty PHP script processes them and saves in the following folder structure: enter image description here So the max lvl is 5. But currently I think how does following directory structure influences on inodes count? Should I put the lvl down to 2 or 3?

linux php debian inode
Martin Hope
Jevgeni Smirnov
Asked: 2012-03-27 23:47:47 +0800 CST
  • 3

We have an issue with a dedicated server load.

We have 16 processors with 4 core @ 2.40GHz, if I understood correctly cat /proc/cpuinfo output.

Unfortunately, I don't have access to free -m or vmstat.

But from top I got that we have 24 GB.

And snapshot from top about processes: Top

As far as I see, memory is not used at all. But the cpu is used heavily. Apache consumes most of CPU.

Another useful piece of information:

Every 1.0s: ps u -C httpd,mysqld,php                                                                                                                                                                                                                                                                                                           Tue Mar 27 10:48:19 2012

USER         PID %CPU %MEM    VSZ   RSS TTY  STAT START   TIME COMMAND
root        7476  0.0  0.1 446808 37880 ?        SNs  Mar06   0:43 /opt/zone/sbin/httpd -D SSL -D SLOT_ID0 -f /etc/opt/zone/apache/ssl_httpd.conf
mysql      36061 41.6  2.1 1113672 529876 ?  SNl  Feb20 21503:48 /opt/zone/sbin/mysqld --basedir=/opt/zone --datadir=/srvdata/mysql --user=mysql --log-error=/srvdata/mysql/dn79.err --pid-file=/srvdata/mysql/mysqld.pid --socket=/tmp/mysql.sock --port=3306
root       37257  0.0  0.0 424056 16840 ?        SNs  Mar22   1:03 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       52743  0.0  0.1 447100 30360 ?        SN   10:40   0:00 /opt/zone/sbin/httpd -D SSL -D SLOT_ID0 -f /etc/opt/zone/apache/ssl_httpd.conf
http       52744  0.0  0.1 447100 30360 ?        SN   10:40   0:00 /opt/zone/sbin/httpd -D SSL -D SLOT_ID0 -f /etc/opt/zone/apache/ssl_httpd.conf
http       52745  0.0  0.1 447100 30360 ?        SN   10:40   0:00 /opt/zone/sbin/httpd -D SSL -D SLOT_ID0 -f /etc/opt/zone/apache/ssl_httpd.conf
http       52746  0.0  0.1 447100 30360 ?        SN   10:40   0:00 /opt/zone/sbin/httpd -D SSL -D SLOT_ID0 -f /etc/opt/zone/apache/ssl_httpd.conf
http       52747  0.0  0.1 446956 30324 ?        SN   10:40   0:00 /opt/zone/sbin/httpd -D SSL -D SLOT_ID0 -f /etc/opt/zone/apache/ssl_httpd.conf
http       52980 69.1  1.8 852468 458088 ?   RN   10:41   5:02 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       53483 47.0  0.8 615088 221040 ?       RN   10:43   2:05 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       53641  1.8  0.2 446580 54632 ?        SN   10:45   0:03 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54384 81.2  0.9 625828 229972 ?       RN   10:45   2:14 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54411 47.7  0.5 535992 142416 ?       RN   10:45   1:09 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54470 41.7  0.4 512528 120012 ?       RN   10:46   0:54 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54475  0.1  0.1 437016 41528 ?        SN   10:46   0:00 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54486  1.5  0.2 445636 53916 ?        SN   10:46   0:02 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54531  2.5  0.2 445424 53012 ?        SN   10:46   0:02 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54549  0.0  0.0 424188  9188 ?        SN   10:46   0:00 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54642  0.0  0.0 424188  9200 ?        SN   10:47   0:00 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54651  0.0  0.0 424188  9188 ?        SN   10:47   0:00 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54661  0.0  0.0 424188  9208 ?        SN   10:47   0:00 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54663  6.9  0.2 449936 58560 ?        SN   10:47   0:03 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54666  6.0  0.2 453356 61124 ?        SN   10:47   0:02 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54667  2.8  0.1 437608 42088 ?        SN   10:47   0:01 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54670  1.5  0.1 437540 42172 ?        SN   10:47   0:00 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54672  2.1  0.1 439076 43648 ?        SN   10:47   0:01 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54709  0.0  0.0 424188  9192 ?        SN   10:47   0:00 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54711  1.0  0.1 437284 41780 ?        SN   10:47   0:00 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54712 11.8  0.2 448172 54700 ?        SN   10:47   0:02 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54720  0.0  0.0 424188  9192 ?        SN   10:48   0:00 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54721  0.0  0.0 424188  9188 ?        SN   10:48   0:00 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54747  9.1  0.2 443568 51848 ?        SN   10:48   0:01 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54782  1.8  0.1 438708 37896 ?        RN   10:48   0:00 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54784  0.0  0.0 424188  9180 ?        SN   10:48   0:00 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54785  0.0  0.0 424188  9188 ?        SN   10:48   0:00 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54789  0.0  0.0 424188  9188 ?        SN   10:48   0:00 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54790  0.0  0.0 424188  9188 ?        SN   10:48   0:00 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54791  0.0  0.0 424188  9188 ?        SN   10:48   0:00 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0
http       54792  0.0  0.0 424056  8352 ?        SN   10:48   0:00 /opt/zone/sbin/httpd -f /etc/opt/zone/apache/httpd.conf -D SLOT_ID0

Webalizer shows following: Webalizer

What can be done in the following situation? The application is Magento.

apache-2.2 optimization dedicated-server webalizer
Martin Hope
Jevgeni Smirnov
Asked: 2012-03-24 01:35:48 +0800 CST
  • 14

After entering

shutdown now

in terminal I get everything running normally and then:

All processes ended withing 2 seconds...done
INIT: Going single user
INIT: Sending processes the TERM signal
INIT: Sending processes the KILL signal
Give root password for maintenance(or....

I press Ctrl + D, and it shows me login screen Debian. Shutdown through GUI works properly.

UPDATE 1

It seems some process hangs.

Moreover, I've managed to power off the server through several retries. Recently I've installed only ntp and ntpdate, nothing more.

I suppose it might be it conflicting with iptables.

linux debian
Martin Hope
Jevgeni Smirnov
Asked: 2012-02-28 06:29:03 +0800 CST
  • 1

I want to setup a web server. I'v already obtained static IP and I have debian server running with apache+nginx. And, I want to make my webserver visible from outside of the office.

Here I have following scheme of routers -

  1. Provider router(or modem?), which gets phone connection and gives internet to whole office.
  2. Router(TP-Link TL-R860) which connects to router 1.
  3. WI-FI Router (TRENDNET TEW-652BRP), which connects to router 2.
  4. Web server, which connects to router 3.

It is possible at all somehow to get what I want or for example, I need to somehow reconfigure all connections?

routing debian apache-2.2 static-ip
Martin Hope
Jevgeni Smirnov
Asked: 2012-02-24 00:47:02 +0800 CST
  • 1

I have a server with (Apache2 + nginx as reverse proxy, memcached cache and eaccelerator). The application is Magento - it is very heavy, due to high modularity and a lot of php files(5000-10000+).

Software versions:

Server version: Apache/2.2.16 (Debian)
Server built:   Sep 25 2011 22:18:56

PHP 5.3.3-7+squeeze3 with Suhosin-Patch (cli) 

memcached STAT version 1.4.5(not php module)

eaccelerator php module 0.9.6.1

CPU:

root@grandpa:~# cat /proc/cpuinfo
processor   : 0
vendor_id   : GenuineIntel
cpu family  : 15
model       : 2
model name  : Intel(R) Pentium(R) 4 CPU 2.40GHz
stepping    : 7
cpu MHz     : 2399.701
cache size  : 512 KB
fdiv_bug    : no
hlt_bug     : no
f00f_bug    : no
coma_bug    : no
fpu     : yes
fpu_exception   : yes
cpuid level : 2
wp      : yes
flags       : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe up pebs bts cid xtpr
bogomips    : 4799.40
clflush size    : 64
cache_alignment : 128
address sizes   : 36 bits physical, 32 bits virtual

RAM

root@grandpa:~# cat /proc/meminfo
MemTotal:        1293792 kB
MemFree:           77980 kB
Buffers:           89776 kB
Cached:           423168 kB
SwapCached:          160 kB
Active:           689012 kB
Inactive:         445392 kB
Active(anon):     443016 kB
Inactive(anon):   182060 kB
Active(file):     245996 kB
Inactive(file):   263332 kB
Unevictable:           0 kB
Mlocked:               0 kB
HighTotal:        404744 kB
HighFree:          24676 kB
LowTotal:         889048 kB
LowFree:           53304 kB
SwapTotal:       2526200 kB
SwapFree:        2525556 kB
Dirty:               816 kB
Writeback:             0 kB
AnonPages:        621300 kB
Mapped:            57088 kB
Shmem:              3616 kB
Slab:              47800 kB
SReclaimable:      35400 kB
SUnreclaim:        12400 kB
KernelStack:        2176 kB
PageTables:         4508 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:     3173096 kB
Committed_AS:    1307224 kB
VmallocTotal:     122880 kB
VmallocUsed:       41768 kB
VmallocChunk:      70512 kB
HardwareCorrupted:     0 kB
HugePages_Total:       0
HugePages_Free:        0
HugePages_Rsvd:        0
HugePages_Surp:        0
Hugepagesize:       4096 kB
DirectMap4k:       36856 kB
DirectMap4M:      868352 kB

Currently magento's ApacheBench shows following output

Keefir-Samolet-iMac:~ jevgenismirnov$ ab -n 1000 -c 20 -e out.csv http://magento.sv/index.php
This is ApacheBench, Version 2.3 
Copyright 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/
Licensed to The Apache Software Foundation, http://www.apache.org/

Benchmarking magento.sv (be patient)
Completed 100 requests
Completed 200 requests
Completed 300 requests
Completed 400 requests
Completed 500 requests
Completed 600 requests
Completed 700 requests
Completed 800 requests
Completed 900 requests
Completed 1000 requests
Finished 1000 requests


Server Software:        nginx/1.0.11
Server Hostname:        magento.sv
Server Port:            80

Document Path:          /index.php
Document Length:        21497 bytes

Concurrency Level:      20
Time taken for tests:   842.750 seconds
Complete requests:      1000
Failed requests:        0
Write errors:           0
Total transferred:      21955000 bytes
HTML transferred:       21497000 bytes
Requests per second:    1.19 [#/sec] (mean)
Time per request:       16854.999 [ms] (mean)
Time per request:       842.750 [ms] (mean, across all concurrent requests)
Transfer rate:          25.44 [Kbytes/sec] received

Connection Times (ms)
              min  mean[+/-sd] median   max
Connect:        0 4694 2456.3   5107   21387
Processing:     0 12121 2630.6  11442   19787
Waiting:        0 10798 2575.2  10114   18369
Total:       4985 16815 1367.8  16471   24861

Percentage of the requests served within a certain time (ms)
  50%  16471
  66%  16728
  75%  16931
  80%  17226
  90%  18477
  95%  18763
  98%  21116
  99%  21388
 100%  24861 (longest request)

Is there any way to raise 

Requests per second:    1.19 [#/sec] (mean)

and lower

Time per request:       16854.999 [ms] (mean)

Here is bigger test:

Keefir-Samolet-iMac:~ jevgenismirnov$ ab -n 5000 -c 40 -e out.csv http://magento.sv/index.php
This is ApacheBench, Version 2.3 
Copyright 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/
Licensed to The Apache Software Foundation, http://www.apache.org/

Benchmarking magento.sv (be patient)
Completed 500 requests
Completed 1000 requests
Completed 1500 requests
Completed 2000 requests
Completed 2500 requests
Completed 3000 requests
Completed 3500 requests
Completed 4000 requests
Completed 4500 requests
Completed 5000 requests
Finished 5000 requests


Server Software:        nginx/1.0.11
Server Hostname:        magento.sv
Server Port:            80

Document Path:          /index.php
Document Length:        21497 bytes

Concurrency Level:      40
Time taken for tests:   4230.975 seconds
Complete requests:      5000
Failed requests:        0
Write errors:           0
Total transferred:      109795470 bytes
HTML transferred:       107505012 bytes
Requests per second:    1.18 [#/sec] (mean)
Time per request:       33847.804 [ms] (mean)
Time per request:       846.195 [ms] (mean, across all concurrent requests)
Transfer rate:          25.34 [Kbytes/sec] received

Connection Times (ms)
              min  mean[+/-sd] median   max
Connect:        1 4786 2006.4   5111   37051
Processing:     0 28979 2955.3  28296   39951
Waiting:        0 27638 2904.5  26962   39950
Total:      13425 33765 2189.4  33309   39953

Percentage of the requests served within a certain time (ms)
  50%  33309
  66%  33829
  75%  34390
  80%  34915
  90%  36747
  95%  37618
  98%  37962
  99%  38306
 100%  39953 (longest request)

apache2.conf(prefork is used,only changed settings):

Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15


    StartServers          5
    MinSpareServers       5
    MaxSpareServers      10
    MaxClients          20
    MaxRequestsPerChild   0

nginx.conf:

worker_processes        1;
events {
        worker_connections      1024;
}
http {
        include /etc/nginx/mime.types;
        default_type    application/octet-stream;
        server_names_hash_bucket_size   64;
        access_log      /var/log/nginx/access.log;

        sendfile        on;
        #tcp_nopush     on;

        #keepalive_timeout      0;
        keepalive_timeout       65;
        tcp_nodelay     on;


        gzip    on;
        gzip_proxied    any;
        gzip_min_length 1100;
        gzip_http_version       1.0;
        gzip_buffers    4 8k;
        gzip_comp_level 9;
        gzip_types      text/plain text/css application/x-javascript text/xml application/xml application/xml+rss text/javascript;


        include /etc/nginx/conf.d/*.conf;
        include /etc/nginx/sites-enabled/*;
}

eAccelerator from php.ini:

; eAccelerator configuration
; Note that eAccelerator may also be installed as a PHP extension or as a zend_extension
; If you are using a thread safe build of PHP you must use
; zend_extension_ts instead of zend_extension
extension                       = "eaccelerator.so"
eaccelerator.shm_size           = "16"
eaccelerator.cache_dir          = "/var/cache/eaccelerator"
eaccelerator.enable             = "1"
eaccelerator.optimizer          = "1"
eaccelerator.check_mtime        = "1"
eaccelerator.debug              = "0"
eaccelerator.filter             = ""
eaccelerator.shm_max            = "0"
eaccelerator.shm_ttl            = "0"
eaccelerator.shm_prune_period   = "0"
eaccelerator.shm_only           = "0"
eaccelerator.compress           = "1"
eaccelerator.compress_level     = "9"
eaccelerator.allowed_admin_path = "/var/www/eaccelerator"
php apache-2.2 optimization nginx memcached
Martin Hope
Jevgeni Smirnov
Asked: 2012-02-23 00:17:49 +0800 CST
  • 0

Is there any way, to restrict access to SSH and FTP account down to only several directories.

For example on our VPS we have some paths like: 

@project root/proj1
@project root/proj2
@project root/proj3

And i want that user1 could access all three, user2 only second and user3 only first and second. Moreover is there any way to show to users only directories allowed to access?

I mean, if for example there are such directorys as:

/var/www/project
/var/www/project2
/var/www/project3

And user might go only to project and project2, but not to project3. So he could access /var/www, but not /var.

P.S. We have DirectAdminand Debian Squeeze.

linux ftp debian debian-squeeze