I have recently resized a logical volume group and a logical volume to fit into a RAID-0 configuration on Centos 6.10 system. Everything seems to be working fine.

However, the disk utility shows two Raid arrays, one with a status of "clean" and "running", the other with a status of "inactive" and "not running, partially assembled".

The clean one is named on /dev/md125 and has all the good stuff, e.g. the root volume and the lvm physical volume.

The second one is named /dev/md126, and the disk utility reveals little detail other than what I've previously described.

here's the output of the "mdadm --detail" command:

[root@Centos6svr guest]# mdadm --detail /dev/md125
/dev/md125:
      Container : /dev/md/imsm0, member 0
     Raid Level : raid0
     Array Size : 1937872896 (1848.10 GiB 1984.38 GB)
   Raid Devices : 2
  Total Devices : 2

          State : clean 
 Active Devices : 2
Working Devices : 2
 Failed Devices : 0
  Spare Devices : 0

     Chunk Size : 128K


           UUID : 2eac1934:ec8965c9:96e64de0:00020788
    Number   Major   Minor   RaidDevice State
       1       8        0        0      active sync   /dev/sda
       0       8       16        1      active sync   /dev/sdb
[root@Centos6svr guest]# mdadm --detail /dev/md126
/dev/md126:
        Version : imsm
     Raid Level : container
  Total Devices : 2

Working Devices : 2


           UUID : ec0c211b:e1d9358d:38d5ecf1:2a09f082
  Member Arrays : /dev/md/Volume1_0

    Number   Major   Minor   RaidDevice

       0       8        0        -        /dev/sda
       1       8       16        -        /dev/sdb

I'm not sure how this got there, or if it existed on the previous image. I had to delete and recreate the RAID volume initially, using the "ctrl-I" option from the bootup display.

It seems like it's harmless, but all the same I'd like to get rid of it. Any ideas how?

I recently had to shrink a Clonezilla image, but overdid it an now have to recover some unused free space.

Here is the output of vgadisplay:

  --- Volume group ---
  VG Name               vg_centos6svr
  System ID             
  Format                lvm2
  Metadata Areas        1
  Metadata Sequence No  27
  VG Access             read/write
  VG Status             resizable
  MAX LV                0
  Cur LV                4
  Open LV               4
  Max PV                0
  Cur PV                1
  Act PV                1
  VG Size               1.78 TiB
  PE Size               4.00 MiB
  Total PE              466366
  Alloc PE / Size       406298 / 1.55 TiB
  Free  PE / Size       60068 / 234.64 GiB
  VG UUID    

I need to expand the Allocated PE/Size to include the Free PE size.

This is the partial output of lvdisplay:

  --- Logical volume ---
  LV Path                /dev/vg_centos6svr/lv_mysql
  LV Name                lv_mysql
  VG Name                vg_centos6svr
  LV UUID                VwpGH0-DLnA-Ouf0-StWs-us8Y-rDwk-GLL2A9
  LV Write Access        read/write
  LV Creation host, time Centos6svr, 2018-09-28 07:31:11 -0400
  LV Status              available
  # open                 1
  LV Size                1.46 TiB
  Current LE             384000
  Segments               1
  Allocation             inherit
  Read ahead sectors     auto
  - currently set to     1024
  Block device           253:2

This is the one I need to expand to include the re-allocated space.

/dev/vg_centos6svr/lv_mysql

What's the process here? Just increase /dev/vg_centos6svr/lv_mysql? What is the command - pvresize?

I've been going through the process of reducing the size of a Centos 6.10 image by reducing an lvmgroup. I'm at the point where I've been able to run this command:

pvresize -tv --setphysicalvolumesize  1600G /dev/md125p2

And it's giving me the following error message:

 /dev/md125p2: cannot resize to 409599 extents as later ones are allocated.

I'm trying to understand how to construct the pvmove command to get rid of the error, but I don't quite get the concept.

Here is the output of this command pvs -v --segments /dev/md125p

  PV           VG            Fmt  Attr PSize PFree   Start  SSize  LV       Start Type   PE Ranges                 
  /dev/md125p2 vg_centos6svr lvm2 a--u 1.86t 320.11g      0 384000 lv_mysql     0 linear /dev/md125p2:0-383999     
  /dev/md125p2 vg_centos6svr lvm2 a--u 1.86t 320.11g 384000  81947              0 free                             
  /dev/md125p2 vg_centos6svr lvm2 a--u 1.86t 320.11g 465947  12800 lv_root      0 linear /dev/md125p2:465947-478746
  /dev/md125p2 vg_centos6svr lvm2 a--u 1.86t 320.11g 478747   1998 lv_swap      0 linear /dev/md125p2:478747-480744
  /dev/md125p2 vg_centos6svr lvm2 a--u 1.86t 320.11g 480745   7500 lv_home      0 linear /dev/md125p2:480745-488244

I know the move command has to look something like this:

pvmove --alloc anywhere /dev/md125p2 vg_centos6svr:yyyy-end

I'm just not clear how to calculate the yyyy-end part. I figure it means move that 81947 (blocks?) that start at 384000, but what is "yyyy" and "end"?

I'm trying to reduce the size of a partition in a Centos 10 system. I created a bootable thumb drive with Gparted, but it showed no space available to reduce the partition.

So I tried resizing the largest filesystem from 1.8 to 1.7 GB using the resize2fs command, and that worked.

However, GPartd still shows the same partition size, and I'm still unable to reduce it.

According to GParted, the partition name is:

/dev/md126p2. The filesystem is lvm2_pv.

The mount point is vg_contos6svr.

The other partition name is /dev/md126p1.

The df -h command shows /dev/md126p1, but not /dev/md126p2.

The file system I reduced is named: /dev/mapper/vg_contos6svr_lv_mysql

and it's mounted on /var/lib/mysql.

I need to fit the entire image into a 1848.1TB drive (actually two drives as it's a RAID 0 as set up in the BIOS).

GParted says /dev/md126p2 is 1.86 TB. So I just need to have the partition size reflect the file system change.

How do I do that? I'm not clear if it's do-able without destroying the image, but it would be great if possible.

We're having issues with a customer having RedHat 7 PC's shutdown intermittently.

One was just sent in for repair, and I'd like to check the journald output.

However, I've read the rebooting the system overwrites it.

How can I view this journal without rebooting the system? Do I need a bootable RedHat or Centos USB stick? If so, how to I create it? How would I then view the drive/file?

I'm trying to create a service on Centos 6, but it's executing on the startup console instead of in background, which means it never reaches the user interface - it just hangs on the startup display.

Here is the service:

#!/bin/bash
#
# run red5 server 
#
# chkconfig: 5 70 30
# description: app server
# processname: red5  

# Source function library.
. /etc/init.d/functions

RETVAL=0
prog="red5"
LOCKFILE=/var/lock/subsys/$prog

# Declare variables for red5 Server
ANALYTICS_DIR=/home/engineering/SVP/app-server

start() {
        echo -n "Starting $prog: "
        cd $ANALYTICS_DIR
        daemon ./red5.sh
        RETVAL=$?
        [ $RETVAL -eq 0 ] && touch $LOCKFILE
        echo
        return $RETVAL
}

stop() {
        echo -n "Shutting down $prog: "
        cd $ANALYTICS_DIR
        nohup ./red5-stop.sh && success || failure
        RETVAL=$?
        [ $RETVAL -eq 0 ] && rm -f $LOCKFILE
        echo
        return $RETVAL
}

status() {
        echo "stub"
}


case "$1" in
    start)
        start
        ;;
    stop)
        stop
        ;;
    status)
        status
        ;;

Here's the red5.sh script (which runs another script)

#!/bin/bash

if [ -z "$RED5_HOME" ]; then
  export RED5_HOME=`pwd`;
fi
export JAVA_OPTS="${JAVA_OPTS} -Xms1g -Xmx1g -Xss256K"
LOG_OPTS="-DSERVER_LOGS=/var/opt/SVP/svp-server/log"
source ${RED5_HOME}/red5-start.sh

Here's red5-start.sh

#!/bin/bash

if [ -z "$RED5_HOME" ]; then
  export RED5_HOME=`pwd`;
fi

P=":" # The default classpath separator
OS=`uname`
case "$OS" in
  CYGWIN*|MINGW*) # Windows Cygwin or Windows MinGW
  P=";" # Since these are actually Windows, let Java know
  ;;
  Darwin*)

  ;;
  *)
  # Do nothing
  ;;
esac

echo "Running on " $OS
# JAVA options
# You can set JAVA_OPTS to add additional options if you want
JAVA_OPTS="$JAVA_OPTS -Xverify:none -XX:+TieredCompilation -XX:+UseBiasedLocking -XX:+UseParNewGC -XX:InitialCodeCacheSize=8m -XX:ReservedCodeCacheSize=32m -Dorg.terracotta.quartz.skipUpdateCheck=true"
# Set up logging options
LOGGING_OPTS="-Dlogback.ContextSelector=org.red5.logging.LoggingContextSelector -Dcatalina.useNaming=true"
# Set up security options
SECURITY_OPTS="-Djava.security.debug=failure"
# Set up MySQL encryption
export APP_ENC=encrypt
# Set up Java system property for location of the application server log files
export JAVA_OPTS="$LOGGING_OPTS $SECURITY_OPTS $JAVA_OPTS $LOG_OPTS"

if [ -z "$RED5_MAINCLASS" ]; then
  export RED5_MAINCLASS=org.red5.server.Bootstrap
fi

# Jython options
JYTHON="-Dpython.home=lib"
#for JAVA in "${JAVA_HOME}/bin/java" "${JAVA_HOME}/Home/bin/java" "/usr/bin/java" "/usr/local/bin/java"
for JAVA in "${JAVA_HOME}/bin/java" "${JAVA_HOME}/Home/bin/java" "/usr/bin/java" "/usr/local/bin/java"
do
  if 
[ -x "$JAVA" ]
  then
    break
  fi
done

export JAVA=/usr/bin/java

if [ ! -x "$JAVA" ]
                                                                                                                                           
  then
    break
  fi
done

export JAVA=/usr/bin/java

if [ ! -x "$JAVA" ]
then
  echo "Unable to locate Java. Please set JAVA_HOME environment variable."
  exit
fi

export RED5_CLASSPATH="${RED5_HOME}/red5-service.jar${P}${RED5_HOME}/lib/mail.jar${P}${RED5_HOME}/conf${P}${CLASSPATH}"

# start Red5
echo "Starting Red5"
echo "JAVA is: $JAVA"
exec "$JAVA" "$JYTHON" -Dred5.root="${RED5_HOME}" $JAVA_OPTS -cp "${RED5_CLASSPATH}" "$RED5_MAINCLASS" $RED5_OPTS

Is the problem the fact that the service is calling another script?

Do I need to run the red5-start.sh as a deamon from red5? I would prefer not to do that, and I know this has worked before as a service without having to do that. It's just that I don't have a copy of the service that was originally set up, so I'm trying to figure out how it worked.

We have a customer that our manufacture shipped some (4) PCs to a customer with a Windows Enterprise 1607 edition on them. The customer found a virus and want to run Windows update on these systems.

As I test, I ran Windows updates on the same OS. After about 3 hours it, was stuck on this download:

2019-04 Cumulative Update for Windows 10 version 1607 for x64-based Systems (KB4493470) at 95%.  

I was accidentally cut the power to it, and after several reboots, it now seems to be successfully updated to Windows 10 1903.

Question: Is there a way I can do all the downloads offline, then just apply them? How would I identify exactly which files I need?

WSUS is not an option as this is a customer site and we have no control over how they do Windows updates.

I also that you can do it with an iso. I this possible, or would that wipe out the existing software?

Any help or suggestions are much appreciated. The hardest part is knowing if it's downloading or just stuck (as it apparently was this morning).

I'm having a lot of trouble connecting to an application running on my newly created EC2 instance from its public IP address. I'm able to log into the server via rdp, however. Once there, I can access the from http://localhost:8443.

To make sure the app wasn't the issue, I loaded a test TCP server (Hercules) and ran it listining on port 9999. I was also unable to connect from the Hecules client via its public IP address.

An nmap port scan shows neither the application port (8443) nor the Hercules 9999 port are available.

I am able to ping the server. Also, there's only one security group attached, which allows all IPv4 traffic, specifically:

type: all traffic Protocol: all Port Range: all Source: 0.0.0.0/0

This instance belongs to the same VPC and subnet as another server which I have had no trouble accessing. That server also also has the same security group)

The server's current IP address is 3.15.34.4,

What am I missing?

[Edit] I got it to work using this thread:

https://access.redhat.com/discussions/1422213

The actual script was simlar to this:

 mkdir "/var/tmp/RHEL-7.6 Server.x86_64"
# cd "/run/media/jradtke/RHEL-7.6 Server.x86_64"
# cp -rPf * "/var/tmp/RHEL-7.6 Server.x86_64"
# cd "/var/tmp/RHEL-7.7 Server.x86_64"
# mkisofs -r -T -J -V "RHEL-7.7 Server.x86_64" \
-b isolinux/isolinux.bin -c isolinux/boot.cat \
-no-emul-boot -boot-load-size 4 -boot-info-table \
-o  /home/images/rhel-server-7.1-jr-x86_64-dvd.iso .

As part of learning kickstart, I created a bootable CD using instructions found here:

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/installation_guide/s1-kickstart2-putkickstarthere

The created USB successfully boots into the the system it was created from. However, when I try to use the system to boot into another machine (same model and disk setup), I get the following message:

"Reboot and select proper boot device or Insert Boot Media in selected Boot Device_"

What could be the issue? I've checked many times to be sure I'm selecting the correct drive (USB) to boot from on both the original and the second system.

FYI, here is more complete description of the process I followed:

1. mkdir /tmp/workdir
2. mkdr /mnt/iso
3. mount the redhat iso:
   mount /var/run/media/root/PC_Image/system/rhel-server-xxxx /mnt/iso
4. cp -pRf /mnt/iso /tmp/workdir
5. cp /root/anaconda-ks.cfg /tmp/workdir/iso/ks.cfg

6. In /tmp/workdir/iso/isolinux/isolinux.cfg, append after the "quiet" in the section "label check" rd.live.check quiet ks=hd:UUID=FE44-B535:ks.cfg

7. Generate the iso: genisoimage -U -r -v -T -J -joliet-long -V "RHEL-7.6" -volset "RHEL-7.6" -A "RHEL-7.6" -b isolinux/isolinux.bin -c isolinux/boot.cat -no-emul-boot -boot-load-size 4 -boot-info-table -eltorito-alt-boot -e images/efiboot.img -no-emul-boot -o ../NEWISO.iso .

8. Create the image on USB: dd if=/tmp/workdir/NEWISO.iso of=/dev/sdb

I'm running RHEL 7.6 from behind a proxy. I've entered the proxy information in a few configuration files and have generally succeeded in gaining access to the rhel repositories, especially when using yum from the command line.

However, I keep getting "New SELinux Security Alert, AVC denial, click icon to view". I'm getting erratic results from the package installer GUI, so I'm wondering if this is the problem.

If I do this search:

sealert -a /var/log/audit/audit.log

It reveals the following error message:

If you want to allow rhsmd to connect to network port 10415
Then you need to modify the port type.
Do
semanage port -a -t PORT_TYPE -p tcp 10415
where PORT_TYPE is one of the following: dns_port_t, dnssec_port_t, http_cache_port_t, http_port_t, netport_port_t, squid_port_t, websm_port_t.

Any idea which port_type is would be the correct one? I tried http_port_t, but no luck.

p.s. I also tried another option suggested in the error message as as well, but no luck there:

ausearch -c 'rhsmd' --raw | audit2allow -M my-rhsmd
semodule -i my-rhsmd.pp

Edit: Here's the entire text of the message:

SELinux is preventing rhsmd from name_connect access on the tcp_socket port 10415.

***** Plugin connect_ports (92.2 confidence) suggests *********************

If you want to allow rhsmd to connect to network port 10415 Then you need to modify the port type. Do

semanage port -a -t PORT_TYPE -p tcp 10415

where PORT_TYPE is one of the following: dns_port_t, dnssec_port_t, http_cache_port_t, http_port_t, netport_port_t, squid_port_t, websm_port_t.

***** Plugin catchall_boolean (7.83 confidence) suggests ******************

If you want to allow nis to enabled Then you must tell SELinux about this by enabling the 'nis_enabled' boolean.

Do setsebool -P nis_enabled 1

***** Plugin catchall (1.41 confidence) suggests **************************

If you believe that rhsmd should be allowed name_connect access on the port 10415 tcp_socket by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing:

ausearch -c 'rhsmd' --raw | audit2allow -M my-rhsmd

semodule -i my-rhsmd.pp

Additional Information: Source Context system_u:system_r:rhsmcertd_t:s0-s0:c0.c1023 Target Context system_u:object_r:unreserved_port_t:s0 Target Objects port 10415 [ tcp_socket ] Source rhsmd 1,1 Top

I'm testing a backup of a production server on EC2 I created from the ami of the instance. Everything is checking out except the ftp connection. The service is running, and an nmap probe shows port 21 is open. However, when I try to connect to it via a browser using "ftp://ftp2.mysite.com" as the address, I get this error:

This site can’t be reached

The webpage at ftp://ftp2.mysite.com/ might be temporarily down or it may have moved permanently to a new web address.
ERR_CONNECTION_ABORTED

I have a similar issue when trying to connect via filezilla. It successfully opens the connection, but fails when it issues the "PASV" command. Here are the last few lines from the Filezilla log:

Command:    PWD
Response:   257 "/" is the current directory
Command:    TYPE I
Response:   200 Type set to I
Command:    PASV
Error:  Disconnected from server: ECONNABORTED - Connection aborted
Error:  Failed to retrieve directory listing

The security groups for the backup and the production server are identical. I checked to see if iptables was running, and it's not in the case of both the server and the backup.

I'm having trouble figuring out what to try next. Any suggestions would be welcome.

I'd like redirect access to a url from http to https for only a couple of pages on my website.

I know how to do it for a whole site using the rewrite in apache virtual hosts:

RewriteEngine On
  RewriteCond %{HTTP:X-Forwarded-Proto} !https
  RewriteRule (.*) https://%{SERVER_NAME}%{REQUEST_URI}

But is there a way to do it for one page of the site? E.g. "www.example.com/protected-page"

We've been having trouble recently with a DOS attack on our main website, which is run using Apache httpd 2.2.9 and Drupal 6.35. The attack is a post to Dupal's xmlrpc.php, which is a known exploit which has been patched in recent versions of Drupal. Because it's an older version, however, the fix for the exploit isn't in our Drupal installation - and won't be because we're migrating to a hosted platform within three months.

I initially tried to counteract the DOS by renaming xmlrpc.php, which returns a 404, but that's still enough to create an apache thread for each post The result is the multiple threads combined consume a lot of memory, so there's still a problem.

So, based on some more googling, I've just modified .htaccess with the following:

<Files "xmlrpc.php">
Order Allow,Deny
deny from all
</Files>

From here on, presumably, there will no longer be an httpd thread created for each call.

Is this sufficient, do you think? I could go one step further by enabling the capability to track traffic on the VPC and find and block the originating IP address/es, but I don't know if that will be effective, because thee attacks may be coming from a bunch of hijacked systems. Although I am curious to find out. Any thoughts?

We have two sites, sub.example1.com and example2.com. Neither one is specifically configured to handle ssl requests. One site https:/sub.example1.com, handles a secure request to port 443 successfully by treating is as an http request. A secure request to the other site, https://example2.com, times out and logs a "\x16\x03\x01" error in hte apache log.

Here's the configuration for example1 in /etc/httpd/sites-enabled/

ServerAdmin webmaster@localhost ServerName sub.example1.com

    DocumentRoot /opt/example1/web/
    DirectoryIndex index.php index.html
    <Directory />
            Options FollowSymLinks
            AllowOverride All
    </Directory>
    <Directory /opt/example/web/>
            Options Indexes FollowSymLinks MultiViews
            AllowOverride All
            Order allow,deny
            allow from all
            # This directive allows us to have apache2's default start page
            # in /apache2-default/, but still have / go to the right place
            #RedirectMatch ^/$ /apache2-default/
    </Directory>


    ErrorLog /var/log/httpd/errorExample1.log

    # Possible values include: debug, info, notice, warn, error, crit,
    # alert, emerg.
    LogLevel warn

    CustomLog /var/log/httpd/accessExample1.log combined
    ServerSignature On

~

The is no .htaccess file for example1.

Here's the configuration for example2 in /etc/httpd/sites-enabled/

<VirtualHost *:80>
        ServerAdmin webmaster@localhost
        ServerName www.example2.com
    DocumentRoot /opt/example2/web
    <Directory />
            Options FollowSymLinks
            AllowOverride All
    </Directory>
    <Directory /opt/example2/web/>
            Options Indexes FollowSymLinks MultiViews
            AllowOverride All
            Order allow,deny
            allow from all
            # This directive allows us to have apache2's default start page
            # in /apache2-default/, but still have / go to the right place
            #RedirectMatch ^/$ /apache2-default/
    </Directory>

    ErrorLog /var/log/httpd/errorExample2.log

    # Possible values include: debug, info, notice, warn, error, crit,
    # alert, emerg.
    LogLevel warn

    CustomLog /var/log/httpd/accessExample2.log combined
    ServerSignature On

Here's the .htaccess for example2

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

httpd.conf

UseCanonicalName Off

NameVirtualHost *:80
# NameVirtualHost *:443
# Include generic snippets of statements
Include conf.d/*.conf

# Include the virtual host configurations:
Include /etc/httpd/sites-enabled/

conf.d/*.conf entries:

TraceEnable On

serverName.conf

ServerName ec2-xx-xx-xx-xxx.compute-1.amazonaws.com

welcome.conf

<LocationMatch "^/+$">
    Options -Indexes
    ErrorDocument 403 /error/noindex.html
</LocationMatch>

I can't figure out why one translates an https request to http, and the other one doesn't. Any help appreciated.

We're running an Ubuntu 10.10 on EC2 Classic and are migrating to a VPC. My question - is it best to first replicate the existing servers into VPC, then upgrade to Ubuntu 14, or just create the latest version of Ubuntu (or Amazon Linux) in the VPc and copy our apps into it?