opHASnoNAME's questions

We are facing the following problem: How to run RabbitMQ in a Docker-Swarm with persistent Data.

Currently we have the following setup in place:

• Docker-Swarm 3 Nodes
• GlusterFS as replicated Filesystem between all nodes
• RabbitMQ with Consul Image: gavinmroy/alpine-rabbitmq-autocluster

This works most of the times fine.. but now we have to use durable queues to persist data.

We have tried to use --hostnames or to set the RABBITMQ_NODENAME, than we get a subdirectory for every started node like "rabbit@CONTAINERID" the problem: when the containers are restarted a new Folder is used to persist the data (new ContainerID).. any suggestions how to get a working setup, with usage of the the Docker Swarm features?

We are just trying out Docker-Swarm with 3 Nodes, each node is acting as Master and as Worker. This works fine, but i don't know if the following behavior is "normal".

If I shutdown one of those 3 nodes, the swarm handles the reallocation of the services fine.

If I shutdown two of those 3 nodes, the services are still working but if i connect to the "last man standing" and try to get my swarm overview with:

docker node ls

i get the following error message:

Error response from daemon: rpc error: code = 4 desc = context deadline exceeded

I am not sure if the swarm can operate when only one node is left? i would guess .. yes?

We are using docker since 1 1/2 Year with "single Host" Setups without trouble. But now we want to go further and use the Docker Swarm (latest version).

Our old setup was just, single hosts with nginx as Reverse-Proxys and some magic to update the configs and request SSL certificates for new services.

What i do not understand: How to setup Failover/HA with Docker Swarm

For example:

• 3 VMs all acting as Master + Worker (i know not the perfect setup, but we have to save money).

Now let's say GoDaddy with a Domain like myswarm.com, this domain has to be set to one external IP, i would choose on of the Swarms VM's external IPs and it should work.

But what happens when the VM linked to the Domain goes down? How to handle this scenario with Docker? Or does i need 2 more VMs with HAProxy and some VIPs facing outside?

we have to (want to..) rename our DB Subnet Groups on AWS, so i created a new DB Subnet Group with same settings as the old one. When i want to switch the Group on "Modify Tab" in AWS GUI and hit apply, aws returns:

You cannot move DB instance XXX to subnet group XXX. The specified DB subnet group and DB instance are in the same VPC. Choose a DB subnet group in different VPC than the specified DB instance and try again. (Service: AmazonRDS; Status Code: 400; Error Code: InvalidVPCNetworkStateFault; Request ID: 7d46c84c-b22a-11e6-be20-b5bb6bd6cc6d)

Any suggestions? Or is it just not possible without recreating whole instance?

I am just starting with IPTables, and I am wondering if I really have to create so many rules for a simple setup:

DMZ (Reverse Proxy) port 80 + 443
Frontend Subnet: Apache Webserver

The Reverse Proxy should be available on Port 80
Reverse Proxy outbound to the Internet on Port 443 (download updates)
Apache reachable from DMZ on Port 80
Apache Outbound to Internet on Port 443 (download updates)

In theory, I would create those rules now:

Reverse Proxy

• Accept INPUT from "www" to Port 80 - Established, New
• Accept OUTPUT to "www" with Port 80 - Established
• Accept OUTPUT to "www" with Port 443 - Established, New
• Accept INPUT on Port 443 - Established
• Accept OUTPUT to Frontend with Port 80 - Established, New
• Accept INPUT from Frontend on Port 80 - Established

Apache

• Accept INPUT from DMZ to Port 80 - Established, New
• Accept OUTPUT to DMZ with Port 80 - Established
• Accept OUTPUT to "www" with Port 443 - Established, New
• Accept iNPUT from "www" with Port 443 - Established

Question: Is this correct, or is this to complicated and I miss some more easy going way.

I' am trying to write ChefSpec tests for some of our Cookbooks. One of those is including a lot of other cookbooks, to setup an Jenkins CI Enviroment.

Iam wondering how other people are testing the included recepies. My "_spec.rb" looks like this in the moment (example to test, that jenkins master is included):

  it 'includes the `jenkins` recipe' do
    expect(chef_run).to include_recipe('jenkins::master')
  end 

Now the coverage goes down, because i am not testing the included cookbooks (they have there own chefspec tests).

If someone has an example or good ideas... would be great.

Ok found an Issu, looks like this is my "problem" with the CodeCoverage - iam on Windows: https://github.com/sethvargo/chefspec/issues/594

.. same issue under Ubuntu, no OSX to verify the issue (-:

Iam getting crazy with Chef, Vagrant and Test-Kitchen.

We have an customized Jenkins Cookbook, it works on "normal" Clients without Cooperate Network Proxys, but fails behind with the following error.

 - create new file /tmp/kitchen/cache/jenkins-cli.jar
             - update content in file /tmp/kitchen/cache/jenkins-cli.jar from none to 0b49c2
             (new content is binary, diff output suppressed)


           * remote_file[/tmp/kitchen/cache/update-center.json] action create_if_missing     
       [2015-05-11T16:28:32+00:00] ERROR: Error connecting to http://mirrors.jenkins-ci.org/updates/update-center.json, retry 1/5
       [2015-05-11T16:30:43+00:00] ERROR: Error connecting to http://mirrors.jenkins-ci.org/updates/update-center.json, retry 2/5
       [2015-05-11T16:32:54+00:00] ERROR: Error connecting to http://mirrors.jenkins-ci.org/updates/update-center.json, retry 3/5
       [2015-05-11T16:35:06+00:00] ERROR: Error connecting to http://mirrors.jenkins-ci.org/updates/update-center.json, retry 4/5
       [2015-05-11T16:37:17+00:00] ERROR: Error connecting to http://mirrors.jenkins-ci.org/updates/update-center.json, retry 5/5

All other ressources are downloaded without any problems (using vagrant proxy plugin). The Host is based on Windows 7, the guest is CentOS 6.6

Problem identfied: jenkins-cli.jar is not using system proxy, iam not able to download plugin when logged in to the VM. But no solution found so far (;

Some strange situation, we are running to webserver Linux/Apache 2.2.22.

Development System runs fine with SAML Authentication QA System throws "Your browser sent a request that this server could not understand. The number of request header fields exceeds this server's limit."

If compared the httpd.conf, the only difference is that the QA System (wich throws the rror) has the following apache setting:

LimitRequestFieldSize 16380

But after checking the Docs, Apaches default Limit is something around 8000 Bytes, so it cant be the source of all evil or?

I have some trouble with Nginx and Jenkins (Hudson). I am trying to use Nginx as Reverse Proxy for the Jenkins instance with HTTP Basic Authentication.

It works so far, but i have no idea how to pass the Header with the Authentication Username.

location / {
  auth_basic "Restricted";
  auth_basic_user_file /usr/share/nginx/.htpasswd;
  sendfile off;

  proxy_pass         http://192.168.178.102:8080;
  proxy_redirect     default;
  proxy_set_header   Host             $http_host;
  proxy_set_header   X-Real-IP        $remote_addr;
  proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
  proxy_set_header   X-Forwarded-User $http_authorization; 
  proxy_max_temp_file_size 0;

  #this is the maximum upload size
  client_max_body_size       10m;
  client_body_buffer_size    128k;

  proxy_connect_timeout      90;
  proxy_send_timeout         90;
  proxy_read_timeout         90;             
  proxy_buffer_size          4k;
  proxy_buffers              4 32k;
  proxy_busy_buffers_size    64k;
  proxy_temp_file_write_size 64k;
}

What is the best solution to store the cach files? One directory for all or explicit directorys for each running vhost? Is there any difference?

we are running an open suse 10 on an: AuthenticAMD, Dual-Core AMD Opteron(tm) Processor 1212 HE with 2 Gigabytes of ram.

Hosted as Apache Vhots are:

• Bulletin Board System with 30.000 Pagehits per Day
• Some Wordpress Blogs (5) with 25.000 Pagehits per Day
• Plesk 9.3.x
• MySQL
• OsCommerce Online shop with 4000 Pagehits per Day

Sometimes the cpu load rises up to 15. We have no idea why? Altough the server crashed when load is rising higher.

Is it just to much for such a machine?