runfcgi.py:18: RemovedInDjango19Warning: FastCGI support has been deprecated and will be removed in Django 1.9.
What to use instead? I don't want Nginx and Django site to share user account, chroot and other things and want a UNIX socket between them.
Is there any supported way to run Django disjointed from the web server?
There is TCPMSS target to edit MSS value of connections (including forwarded).
How to edit window size (for example, cap to some maximum value) by iptables rule?
Expecting something like
iptables -t mangle -A OUTPUT -p tcp --dport 1234 -j TCPWINDOW --tcpwindow-set 'min(val,100000)'
With unshare or lxc-execute I can create environments with separate network/mount/whatever namespaces. But starting programs there from outside is not really straightforward. Usually network and sshd is used, I also use UNIX socket with socat executing shell to start new processes on it.
Is there already a program that allows to starting applications inside unshares easily? Client program is expected to connect to UNIX socket and send (SCM_RIGHTS) stdin/stdout/stderr to server. Server is expected to be started inside unshare and receive argv, environment and fds and start them.
Something like that:
# unshare -nm /usr/local/bin/dived /var/run/myunshare.socket
# # (Non-abstract unix sockets are preserved across "unshare -m")
# dive /var/run/myunshare.socket ping 8.8.8.8
connect: Network is unreachable
Jobs I add to the queue stays there in "Queued" state without attempts to be executed (unless I manually qrun them)
/var/spool/torque/server_logs say just
04/11/2011 12:43:27;0100;PBS_Server;Job;16.localhost;enqueuing into batch, state 1 hop 1
04/11/2011 12:43:27;0008;PBS_Server;Job;16.localhost;Job Queued at request of test@localhost, owner = test@localhost, job name = Qqq, queue = batch
The job requires just 1 CPU on 1 node.
# qmgr -c "list queue batch"
Queue batch
queue_type = Execution
total_jobs = 0
state_count = Transit:0 Queued:0 Held:0 Waiting:0 Running:0 Exiting:0
max_running = 3
acl_host_enable = True
acl_hosts = localhost
resources_min.ncpus = 1
resources_min.nodect = 1
resources_default.ncpus = 1
resources_default.nodes = 1
resources_default.walltime = 00:00:10
mtime = Mon Apr 11 12:07:10 2011
resources_assigned.ncpus = 0
resources_assigned.nodect = 0
kill_delay = 3
enabled = True
started = True
I can't set resources_assigned to nonzero because of Cannot set attribute, read only or insufficient permission resources_assigned.ncpus.
When I qrun some task, this goes to mom's log:
04/11/2011 21:27:48;0001; pbs_mom;Svr;pbs_mom;LOG_DEBUG::mom_checkpoint_job_has_checkpoint, FALSE
04/11/2011 21:27:48;0001; pbs_mom;Job;TMomFinalizeJob3;job 18.localhost started, pid = 28592
04/11/2011 21:27:48;0080; pbs_mom;Job;18.localhost;scan_for_terminated: job 18.localhost task 1 terminated, sid=28592
04/11/2011 21:27:48;0008; pbs_mom;Job;18.localhost;job was terminated
04/11/2011 21:27:48;0080; pbs_mom;Svr;preobit_reply;top of preobit_reply
04/11/2011 21:27:48;0080; pbs_mom;Svr;preobit_reply;DIS_reply_read/decode_DIS_replySvr worked, top of while loop
04/11/2011 21:27:48;0080; pbs_mom;Svr;preobit_reply;in while loop, no error from job stat
04/11/2011 21:27:48;0080; pbs_mom;Job;18.localhost;obit sent to server
Scheduler log (/var/spool/torque/sched_logs/20110705):
07/05/2011 21:44:53;0002; pbs_sched;Svr;Log;Log opened
07/05/2011 21:44:53;0002; pbs_sched;Svr;TokenAct;Account file /var/spool/torque/sched_priv/accounting/20110705 opened
07/05/2011 21:44:53;0002; pbs_sched;Svr;main;/usr/sbin/pbs_sched startup pid 16234
qstat -f:
Job Id: 26.localhost
Job_Name = qwe
Job_Owner = test@localhost
job_state = Q
queue = batch
server = localhost
Checkpoint = u
ctime = Tue Jul 5 21:43:31 2011
Error_Path = localhost:/home/test/jscfi/default/0.738784810485275/qwe.e26
Hold_Types = n
Join_Path = n
Keep_Files = n
Mail_Points = a
mtime = Tue Jul 5 21:43:31 2011
Output_Path = localhost:/home/test/jscfi/default/0.738784810485275/qwe.o26
Priority = 0
qtime = Tue Jul 5 21:43:31 2011
Rerunable = True
Resource_List.ncpus = 1
Resource_List.neednodes = 1:ppn=1
Resource_List.nodect = 1
Resource_List.nodes = 1:ppn=1
Resource_List.walltime = 00:01:00
substate = 10
Variable_List = PBS_O_HOME=/home/test,PBS_O_LANG=en_US.UTF-8,
PBS_O_LOGNAME=test,
PBS_O_PATH=/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games,
PBS_O_MAIL=/var/mail/test,PBS_O_SHELL=/bin/sh,PBS_SERVER=127.0.0.1,
PBS_O_WORKDIR=/home/test/jscfi/default/0.738784810485275,
PBS_O_QUEUE=batch,PBS_O_HOST=localhost
euser = test
egroup = test
queue_rank = 1
queue_type = E
etime = Tue Jul 5 21:43:31 2011
submit_args = run.pbs
Walltime.Remaining = 6
fault_tolerant = False
How to make it execute jobs automatically, without manual qrun?
# cat /proc/mdstat
Personalities : [raid1]
md0 : active raid1 nbd0[3] sda10[0]
53246315 blocks super 1.2 [3/1] [U__]
[>....................] recovery = 1.0% (537088/53246315) finish=203.0min speed=4326K/sec
bitmap: 1/1 pages [4KB], 65536KB chunk
unused devices: <none>
# nbd-client -d /dev/nbd0
Disconnecting: que, disconnect, sock, done
# cat /proc/mdstat
Personalities : [raid1]
md0 : active raid1 nbd0[3](F) sda10[0]
53246315 blocks super 1.2 [3/1] [U__]
bitmap: 1/1 pages [4KB], 65536KB chunk
unused devices: <none>
# mdadm /dev/md/raidy --remove /dev/nbd0
mdadm: hot removed /dev/nbd0 from /dev/md/raidy
# nbd-client 10.99.99.250 7777 /dev/nbd0
Negotiation: ..size = 53247411KB
bs=1024, sz=53247411
# mdadm --incremental --run /dev/nbd0
mdadm: /dev/nbd0 attached to /dev/md/raidy which is already active.
# cat /proc/mdstat
Personalities : [raid1]
md0 : active raid1 nbd0[3] sda10[0]
53246315 blocks super 1.2 [3/1] [U__]
[>....................] recovery = 0.0% (31616/53246315) finish=196.2min speed=4516K/sec
bitmap: 1/1 pages [4KB], 65536KB chunk
unused devices: <none>
# uname -a
Linux vi-notebook 2.6.35-zen2-08220-g2c56b9e #14 ZEN PREEMPT Thu Oct 21 02:48:18 EEST 2010 i686 GNU/Linux
# mdadm --version
mdadm - v3.1.4 - 31
How to properly disconnect and reconnect the device to RAID-1 to take advantage of the write-intent bitmap?
Experimenting again:
Personalities : [raid1]
md0 : active raid1 nbd0[3] sda10[0]
53246315 blocks super 1.2 [3/2] [UU_]
bitmap: 1/1 pages [4KB], 65536KB chunk
unused devices: <none>
/dev/md/raidy:
Version : 1.2
Creation Time : Tue Mar 30 05:42:53 2010
Raid Level : raid1
Array Size : 53246315 (50.78 GiB 54.52 GB)
Used Dev Size : 53246315 (50.78 GiB 54.52 GB)
Raid Devices : 3
Total Devices : 2
Persistence : Superblock is persistent
Intent Bitmap : Internal
Update Time : Mon Jan 31 18:18:03 2011
State : active, degraded
Active Devices : 2
Working Devices : 2
Failed Devices : 0
Spare Devices : 0
Name : vi-notebook:0 (local to host vi-notebook)
UUID : bc325b24:fa0a4957:47820c56:fc818fa3
Events : 2661551
Number Major Minor RaidDevice State
0 8 10 0 active sync /dev/sda10
3 43 0 1 active sync /dev/nbd0
2 0 0 2 removed
Now removing one of the devices:
# mdadm /dev/md/raidy --fail /dev/nbd0
mdadm: set /dev/nbd0 faulty in /dev/md/raidy
# mdadm /dev/md/raidy --remove /dev/nbd0
mdadm: hot removed /dev/nbd0 from /dev/md/raidy
Now re-adding it:
mdadm --incremental --run /dev/nbd0
It starts resyncing from the beginning:
Personalities : [raid1]
md0 : active raid1 nbd0[3] sda10[0]
53246315 blocks super 1.2 [3/1] [U__]
[>....................] recovery = 0.4% (244480/53246315) finish=289.5min speed=3050K/sec
bitmap: 1/1 pages [4KB], 65536KB chunk
unused devices: <none>
/dev/md/raidy:
Version : 1.2
Creation Time : Tue Mar 30 05:42:53 2010
Raid Level : raid1
Array Size : 53246315 (50.78 GiB 54.52 GB)
Used Dev Size : 53246315 (50.78 GiB 54.52 GB)
Raid Devices : 3
Total Devices : 2
Persistence : Superblock is persistent
Intent Bitmap : Internal
Update Time : Mon Jan 31 18:22:07 2011
State : active, degraded, recovering
Active Devices : 1
Working Devices : 2
Failed Devices : 0
Spare Devices : 1
Rebuild Status : 0% complete
Name : vi-notebook:0 (local to host vi-notebook)
UUID : bc325b24:fa0a4957:47820c56:fc818fa3
Events : 2661666
Number Major Minor RaidDevice State
0 8 10 0 active sync /dev/sda10
3 43 0 1 spare rebuilding /dev/nbd0
2 0 0 2 removed
Usual HTTPS setup requires certificate that is signed by some rich authority and requires [monthly] fees and periodic maintenance (to prevent expiring). This way Firefox displays happy green badge that certificate is OK and users knows that he connects to server at least managed by someone rich enough to afford a certificate.
Simple HTTPS setup is based on self-signed certificate (or some temporary "advertisment offer" of some minor certificate authority). While connecting to this server Firefox almost always shows Big Fat Warning that can frighten users and lower the usability of site. So the simplest way of solving it is just to ignore security and revert to plain unencrypted HTTP.
How to make the traffic from Firefox encrypted (at least from passive sniffing), but not so high security level that requires third parties? Something like in OpenSSH.
The same network interfaces interfaces in my laptop (eth1, wifi0, br0) are often connected to different networks (home/work/university network, virtual network with Virtualbox, ad-hoc network with my laptop as router), so dhcpd can listen to various combinations of interfaces.
I want it to run for ad-hoc and virtual networks, but not to "big" networks which already have dhcp server. So in my network configuration scripts there is often killall dhcpd; dhcpd -i some_interface (or just killall dhcpd), which makes them interfere each other.
How to dynamically change listen interfaces in dhcpd or run multiple instances.
Or I should make it just listen to all interfaces but manage iptables rules to prevent dhcpd interference in scripts instead?
Installed Cygwin's NFS server. It works. But I can't make it allow writing to the filesystem. Why does it fail?
Server:
$ cat /etc/exports #/ 10.99.98.2(rw,no_root_squash) /cygdrive/c/foranevia *(rw,no_squash_root,anon_uid=0,anon_gid=0,no_subtree_check)
Client:
root@vi-notebook:/mnt# mount wpc:/cygdrive/c/foranevia nfs root@vi-notebook:/mnt# mkdir nfs/qqq mkdir: cannot create directory `nfs/qqq': Read-only file system
Update: Fixed configuration line to /cygdrive/c/foranevia *(rw,no_root_squash) and now it seems to work, although not all hosts can mount until I explicitly list them in /etc/exports.