Philippe Gachoud's questions

The default location of the virsh save myVm goes into /var/lib/something which makes my slash partition full on a Vm save, which is really anoying.

I could not figure out where is the virsh save myVm directory location defined! The default is into /var/lib/libvirt/qemu/save which doesn't seem to be defined in the /etc/libvirt/qemu.conf which defines only auto_dump_path.

I couldn't find it neither into the virsh edit myVm XML, nor into the pool virsh pool-dumpxml myPool my VM belongs to.

It could be explained in the redhat comunity I'm not a member.

In Chile the case is very particular as the days of daylight saving changes are different a year from another...

Is there a function to get for given day at given UTC time the UTC offset?

I saw on a Suse documentation that something like zdump -v /usr/share/zoneinfo/Chile/Continental makes me enable to get all changings through years, but the job has to be done still... any command to do that?

Or/and is there a function with a given date and time from given timezone to UTC? And its reverse?

How does linux handle these changes? didn't find more documentation than Suse one.

I'm trying to make SMA LCS tool work through openVPN.

Context

The hardware Inverter Manager permits to manage the inverters. The LCS tool, is the only windows application (no other OS) which permits to interact with the inverter manager. It's the way I can get extracted data from the solar plant generation I need, and don't want to go on LAN each time I need to get them.

On the LAN of a solar plant, I have a GSM router which doesn't have a static IP (LAN IP 192.168.0.1). I have a raspberry Pi on the plant which makes me able to connect remotely to the LAN with reverse SSH. The LCS tool seems to:

1. Discover the the inverter manager through sending every 20sec a broadcast packet as I saw with wireshark on UDP port 1414, first I don't understand why it does it through this port, the inverter manager is a linux machine on a Moxa.
2. Then it seems to send requests to the postgresql database (I don't have the credentials of course) to export the data to a CSV.

Tried

• To map with ssh tunnels on another linux machine of my office LAN the postgresql, ssh and 1414 ports, which seem to be the ones used by the LCS tool, it doesn't work, I don't get any device into the LCS tool
• Create an openVPN connection with an openVPN server on the raspberry Pi and an openVPN client on the windows 10 office machine (172.16.10.155). This is working through a tunnelled SSH TCP connection on port 1194 (ssh -L 1194:localhost:1194 my_plant_rpi). Unfortunately, when doing that, the LCS tool is still sending the broadcast requests to the LAN of my office's interface AND subnet. I tried to set a bridge as suggested in some posts, but more than disconnecting my plant connection after closing it, It didn't work more than that either.

Any idea * how to manage that the windows machine of my office could be more seen as into the LAN of the plant? * Or how to make the LCS tool able to discover the inverter manager which has the 192.168.0.68 IP into the LAN of the plant through the win10 machine of my office?

I'm really lost on the solutions or ways to do that...

Thx in advance, any help or suggestion would be greatly appreciated.

I have both kvm guests and hosts installed on a Debian 9.9 with kde on an AMD Machine

qemu-kvm 1:2.8+dfsg-6+deb9u7 amd64

• When connecting with a virt-viewer, my keyboard layout is working (fr-ch) actually, I don't know where is the list of available layouts to confirm my fr-ch is available
• When connecting with any vnc client, my keyboard layout is not working the layout is un-understandable....

I tried

• Changing the directive into xml with sudo virsh edit myVmGuest => keymap='fr-ch' into graphics section (not working)
• Changing the keyboard layout into kde guest (neither working)
• Changing my vnc client

Trying to rsnapshot to an nfs share I get some ownership and access errors, even if I can visibly do any operation on my shares with UID 1000 and GID 1000 on both server/client.

Server exports

/etc/exports

# Data (insecure for MACOS clients)
/mnt/data       172.16.10.0/24(rw,sync,no_subtree_check,insecure)

Client mounted directory

/etc/systemd/system/mnt-data.mount

[Unit]
Description=ServerData
After=network.target

[Mount]
What=172.16.10.171:/mnt/data
Where=/mnt/data
Type=nfs
Options=_netdev,auto

[Install]
WantedBy=multi-user.target

Error got in crons

require Lchown
Lchown module loaded successfully
Setting locale to POSIX "C"
echo 24722 > /var/run/rsnapshot.pid
mv /mnt/backups/vmDebDevSrv1/alpha.1/ /mnt/backups/vmDebDevSrv1/alpha.2/
/bin/cp -al /mnt/backups/vmDebDevSrv1/alpha.0 \
    /mnt/backups/vmDebDevSrv1/alpha.1
/bin/cp: cannot access '/mnt/backups/vmDebDevSrv1/alpha.0/localhost/usr': Permission denied
/bin/cp: failed to preserve ownership for '/mnt/backups/vmDebDevSrv1/alpha.1/localhost/usr': Operation not permitted
/bin/cp: cannot access '/mnt/backups/vmDebDevSrv1/alpha.0/localhost/var': Permission denied
/bin/cp: failed to preserve ownership for '/mnt/backups/vmDebDevSrv1/alpha.1/localhost/var': Operation not permitted
/bin/cp: failed to preserve ownership for '/mnt/backups/vmDebDevSrv1/alpha.1/localhost': Operation not permitted
/bin/cp: failed to preserve ownership for '/mnt/backups/vmDebDevSrv1/alpha.1': Operation not permitted
----------------------------------------------------------------------------
rsnapshot encountered an error! The program was invoked with these options:
/usr/bin/rsnapshot alpha
----------------------------------------------------------------------------
ERROR: /bin/cp -al /mnt/backups/vmDebDevSrv1/alpha.0 /mnt/backups/vmDebDevSrv1/alpha.1 failed (result 256, exit status 1).
ERROR: Error! cp_al("/mnt/backups/vmDebDevSrv1/alpha.0/", "/mnt/backups/vmDebDevSrv1/alpha.1/")
/usr/bin/logger -p user.err -t rsnapshot[24722] /usr/bin/rsnapshot alpha: \
    ERROR: Error! cp_al("/mnt/backups/vmDebDevSrv1/alpha.0/", \
    "/mnt/backups/vmDebDevSrv1/alpha.1/")
rm -f /var/run/rsnapshot.pid 

My goal is to host various sites (local virtualhosts) on my apache webserver in the LAN of my enterprise (Debian 9 server).

So that:

• openproject.myenterprise.local => /opt/openproject
• wiki.myenterprise.local => /var/www/location/wiki
• etc.

I configured virtualhosts on my apache2 webserver with

• /etc/apache2/sites-available/openproject.conf ServerName openproject.myenterprise.local
• /etc/apache2/sites-available/000-main-static-site.conf ServerName vmDebDevSrv1.myenterprise.local ServerAlias salado.myenterprise.local
• /etc/apache2/sites-available/001-wiki.conf ServerName wiki.myenterprise.local

Now its working with a local configuration in /etc/hosts

172.16.12.171 openproject.myenterprise.local
172.16.12.171 wiki.myenterprise.local

When I add the DNS resolution with bind9 it doesn't work anymore. I guess it is because of the incapacity of my server to relay the FQDN I use.

• When I ping or put the url into my browser wiki it works but gives me the main directory of my webserver not the wiki virtualhost

Edit: ping wiki gives me:

ws1: ~$ ping wiki
PING ns1.myenterprise.local (172.16.10.174): 56 data bytes
64 bytes from 172.16.10.174: icmp_seq=0 ttl=64 time=0.282 ms
^C--- ns1.myenterprise.local ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max/stddev = 0.282/0.325/0.368/0.043 ms

/edit

• When I ping wiki.myenterprise.local it doesn't work ping: unknown host, Edit: nslookup works with FQDN /Edit

My /etc/resolv.conf

domain myenterprise.local
search myenterprise.local
nameserver 172.16.12.174
nameserver 172.16.12.1
nameserver ...

/etc/bind/db.myenterprise.local

$TTL|   604800
@|      IN|     SOA|    ns1.myenterprise.local. root.vmDebDevSrv1.myenterprise.local. (
|       |       |       20181129|       ; Serial
|       |       |        604800||       ; Refresh
|       |       |         86400||       ; Retry
|       |       |       2419200||       ; Expire
|       |       |        604800 )|      ; Negative Cache TTL

;Name server information
@|      IN|     NS|     ns1.myenterprise.local.

;IP Address of Domain Name Server(DNS) setted on line above
ns1|    IN|     A|      172.16.12.174

;CNAME Records
vmDebDevSrv1|   IN|     CNAME|  ns1.myenterprise.local.
wiki|   IN|     CNAME|  vmDebDevSrv1.myenterprise.local.
openproject|    IN|     CNAME|  vmDebDevSrv1.myenterprise.local.

;tried too with 
;wiki|   IN|     A  172.16.12.174
;openproject|   IN|     A  172.16.12.174

What Am I missing?!!! I thought the path would be short-name=>DNS=>FQDN=>Apache2=>well page returned

So I guess its impossible to get

On my client on pam authentication (libnss-ldap and libpam-ldap packages and configuration) there is a configuration which leads me to

nss_ldap: failed to bind to LDAP server ldapi://172.16.10.174/: Can't contact LDAP server

My server is started as followings (seems ldapi is available):

● slapd.service - LSB: OpenLDAP standalone server (Lightweight Directory Access Protocol)
Loaded: loaded (/etc/init.d/slapd; generated; vendor preset: enabled)
Active: active (running) since Thu 2018-10-04 09:40:14 -03; 8min ago
    Docs: man:systemd-sysv-generator(8)
Process: 1026 ExecStart=/etc/init.d/slapd start (code=exited, status=0/SUCCESS)
    Tasks: 3 (limit: 4915)
CGroup: /system.slice/slapd.service
        └─1180 /usr/sbin/slapd -h ldap:/// ldapi:/// -g openldap -u openldap -F /etc/ldap/slapd.d

with ldap it works

ldapsearch -H ldap://172.16.10.174/ -b dc=myDomain,dc=local -x

but with ldapi no either on localhost or with a machine within the LAN:

ldapsearch -H ldapi://localhost:389 -b dc=solarity,dc=local -x
ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)`

Shall I change the server's configuration to be able to connect with client as ldapi:// or change the client to authenticate with ldap://??

1. Client: Where is the configuration file in debian 9 of nssd so that I can change the protocol to ldap instead of ldapi?
2. Server: If there is any sense of staying with ldapi protocol, how can I test it and configure the server to do what expects my client which seems to be (ldapsearch -H ldapi://172.16.10.174/ -b dc=solarity,dc=local -x doesn't work)