I have two sites (home server and linode VPS) and I have some subdomains of one domain on one site and some on the other. I also have two or three other domains on both servers. I currently use Apache VirtualHost on both sites. None of them are currently using https.
Is it possible to start rolling out https one subdomain at a time, or is it all or nothing? Do I need to use a front end like nginx or can I do it all in Apache?
I do hourly backups doing snapshots, and every time I do it creates files in /etc/lvm/archive. But lvm doesn't appear to pay any attention to the "retain_days" parameter under "backup" in /etc/lvm/lvm.conf, because I've got 9000+ files there, going back to 2012. Should I set up a cron job to purge them myself?
Here's the backup section of the config file:
# Configuration of metadata backups and archiving. In LVM2 when we
# talk about a 'backup' we mean making a copy of the metadata for the
# *current* system. The 'archive' contains old metadata configurations.
# Backups are stored in a human readeable text format.
backup {
# Should we maintain a backup of the current metadata configuration ?
# Use 1 for Yes; 0 for No.
# Think very hard before turning this off!
backup = 1
# Where shall we keep it ?
# Remember to back up this directory regularly!
backup_dir = "/etc/lvm/backup"
# Should we maintain an archive of old metadata configurations.
# Use 1 for Yes; 0 for No.
# On by default. Think very hard before turning this off.
archive = 1
# Where should archived files go ?
# Remember to back up this directory regularly!
archive_dir = "/etc/lvm/archive"
# What is the minimum number of archive files you wish to keep ?
retain_min = 10
# What is the minimum time you wish to keep an archive file for ?
retain_days = 30
}
I have a fairly minimal setup server, and it doesn't allow password authentication, only using keys. And it definitely doesn't have Java installed. Normally I don't pay any attention to the thousands of attempts a day of script kiddies to guess my passwords - I figure the time they waste on my system is time they're not wasting on systems that do allow password authentication. But I am seeing this message in /var/log/auth.log:
Dec 7 13:43:43 hostname sshd[7412]: Received disconnect from 189.203.240.57: 3: com.jcraft.jsch.JSchException: Auth fail [preauth]
Is that mention of what looks like a Java exception coming from the attacker, or is that from something on my side?
I have a Linux server which uses Postfix for email. Its on a dynamic ip so I use the "relayhost" parameter to send outgoing mail through an ssh tunnel to another server on a static ip and from there it goes out to the real world. That's been working fine since about 1998 or so.
I'm currently developing some software for a client, and it sends email to various people in that client's organization based on information in a database. For my initial testing, I created fake people who all had email addresses like ptomblin+client1@{mydomain}.com, which worked fine and sent all the email to me. But now I'm working with a live database, and all the email addresses are for real people in the client's organization. I don't particularly want to send email to those people telling them that the system access they requested has been provisioned, so I'd like a way to redirect all email to that client's domain to either my email address or to a file.
A few months ago I build a 1u server to go into a colo facility. Not knowing any better, I used WD Caviar Green drives. My users have been complaining that the system can be a little slow off the mark, and smartctl shows a very high Load_Cycle_Count. I've been reading that this is due to the "Green" meaning that they attempt to spin down frequently, and so the lag people are seeing is when the drives are spinning back up. The only suggestions I've seen for stopping them from spinning down involve bringing the server home and putting the disks into a Windows box to run a program. But I had a similar problem with a Seagate external drive once and fixed it with sdparm. Is there an sdparm command that will fix this problem?
=== START OF READ SMART DATA SECTION ===
SMART Attributes Data Structure revision number: 16
Vendor Specific SMART Attributes with Thresholds:
ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE
1 Raw_Read_Error_Rate 0x002f 200 200 051 Pre-fail Always - 0
3 Spin_Up_Time 0x0027 168 133 021 Pre-fail Always - 4558
4 Start_Stop_Count 0x0032 100 100 000 Old_age Always - 65
5 Reallocated_Sector_Ct 0x0033 200 200 140 Pre-fail Always - 0
7 Seek_Error_Rate 0x002e 200 200 000 Old_age Always - 0
9 Power_On_Hours 0x0032 092 092 000 Old_age Always - 6213
10 Spin_Retry_Count 0x0032 100 253 000 Old_age Always - 0
11 Calibration_Retry_Count 0x0032 100 253 000 Old_age Always - 0
12 Power_Cycle_Count 0x0032 100 100 000 Old_age Always - 58
192 Power-Off_Retract_Count 0x0032 200 200 000 Old_age Always - 42
193 Load_Cycle_Count 0x0032 196 196 000 Old_age Always - 14941
194 Temperature_Celsius 0x0022 120 106 000 Old_age Always - 27
196 Reallocated_Event_Count 0x0032 200 200 000 Old_age Always - 0
197 Current_Pending_Sector 0x0032 200 200 000 Old_age Always - 0
198 Offline_Uncorrectable 0x0030 200 200 000 Old_age Offline - 0
199 UDMA_CRC_Error_Count 0x0032 200 200 000 Old_age Always - 0
200 Multi_Zone_Error_Rate 0x0008 200 200 000 Old_age Offline - 0
After I rebooted one of my servers, Munin (which runs on another server) seems to have picked up some garbage response from it in the process of rebooting.
http://xcski.com/munin/xcski.com/linode.xcski.com-cpu.html
I would like to remove that garbage value, even if it means losing all the data for that node up to now. I tried removing the .rrd files in /var/lib/munin but all that did was remove the history from before the reboot. Is there a way to clean this up?
I have a disk that I took out of a failed system. One of the partitions on the disk was one half of a software RAID-1, and that RAID-1 was a lvm2 volume group. There are several logical volumes on that volume group. Thanks to this answer I got the RAID-1 mounted and the volume group seen and recognized. I can mount most of the partitions and back them up, but one of them (of course the one I care about the most) won't mount. The system crashed while I had a snapshot partition snapshotting this partition for a backup, but I've now removed that snapshot. lvdisplay reports:
lvdisplay -v /dev/xen-disk/xen1-disk
Using logical volume(s) on command line
--- Logical volume ---
LV Name /dev/xen-disk/xen1-disk
VG Name xen-disk
LV UUID li3NC9-jRwg-ndbM-oplJ-1Omd-PcX9-qv9aB2
LV Write Access read/write
LV Status NOT available
LV Size 150.00 GB
Current LE 38400
Segments 1
Allocation inherit
Read ahead sectors 0
How do I repair whatever is making this unavailable and get it mounted?
I have one disk out of a system which used LVM on top of software RAID-1. I can't seem to mount the partition.
Here is the output of mdadm --examine
mdadm --examine /dev/sdd3
/dev/sdd3:
Magic : a92b4efc
Version : 00.90.00
UUID : 796cb574:f1263d29:de01a688:bcce49e1
Creation Time : Mon May 3 20:56:55 2010
Raid Level : raid1
Used Dev Size : 973828096 (928.71 GiB 997.20 GB)
Array Size : 973828096 (928.71 GiB 997.20 GB)
Raid Devices : 2
Total Devices : 2
Preferred Minor : 0
Update Time : Sun Sep 5 14:42:20 2010
State : active
Active Devices : 2
Working Devices : 2
Failed Devices : 0
Spare Devices : 0
Checksum : 80fcf82e - correct
Events : 0.29
Number Major Minor RaidDevice State
this 0 8 3 0 active sync /dev/sda3
0 0 8 3 0 active sync /dev/sda3
1 1 8 19 1 active sync /dev/sdb3
How can I mount this and get the data off it?
I've been setting up this Debian Stable system with a dom0 and 3 domUs. It was working fine for several days, and I'm almost ready to deploy it to the rack. But last night I shut it down with all three domUs still running for the first time, and today when I started it up, xend won't start. In /var/log/messages, I have:
Apr 18 13:01:33 xen-test BLKTAPCTRL[4248]: blktapctrl: v1.0.0
Apr 18 13:01:33 xen-test BLKTAPCTRL[4248]: Found driver: [raw image (aio)]
Apr 18 13:01:33 xen-test BLKTAPCTRL[4248]: Found driver: [raw image (sync)]
Apr 18 13:01:33 xen-test BLKTAPCTRL[4248]: Found driver: [vmware image (vmdk)]
Apr 18 13:01:33 xen-test BLKTAPCTRL[4248]: Found driver: [ramdisk image (ram)]
Apr 18 13:01:33 xen-test BLKTAPCTRL[4248]: Found driver: [qcow disk (qcow)]
Apr 18 13:01:33 xen-test BLKTAPCTRL[4248]: couldn't find device number for 'blktap0'
Apr 18 13:01:33 xen-test BLKTAPCTRL[4248]: Unable to start blktapctrl
and in /var/log/xen/xend.log, I have this:
[2010-04-18 12:46:32 3523] INFO (SrvDaemon:219) Xend exited with status 1.
[2010-04-18 13:01:34 4255] INFO (SrvDaemon:331) Xend Daemon started
[2010-04-18 13:01:34 4255] INFO (SrvDaemon:335) Xend changeset: unavailable.
[2010-04-18 13:01:34 4255] INFO (SrvDaemon:342) Xend version: Unknown.
[2010-04-18 13:01:34 4255] ERROR (SrvDaemon:353) Exception starting xend (no element found: line 1, column 0)
Traceback (most recent call last):
File "/usr/lib/xen-3.2-1/lib/python/xen/xend/server/SrvDaemon.py", line 345, in run
servers = SrvServer.create()
File "/usr/lib/xen-3.2-1/lib/python/xen/xend/server/SrvServer.py", line 251, in create
root.putChild('xend', SrvRoot())
File "/usr/lib/xen-3.2-1/lib/python/xen/xend/server/SrvRoot.py", line 40, in __init__
self.get(name)
File "/usr/lib/xen-3.2-1/lib/python/xen/web/SrvDir.py", line 82, in get
val = val.getobj()
File "/usr/lib/xen-3.2-1/lib/python/xen/web/SrvDir.py", line 52, in getobj
File "/usr/lib/xen-3.2-1/lib/python/xen/xend/server/SrvNode.py", line 30, in _
_init__
self.xn = XendNode.instance()
File "/usr/lib/xen-3.2-1/lib/python/xen/xend/XendNode.py", line 709, in instance
inst = XendNode()
File "/usr/lib/xen-3.2-1/lib/python/xen/xend/XendNode.py", line 164, in __init__
saved_pifs = self.state_store.load_state('pif')
File "/usr/lib/xen-3.2-1/lib/python/xen/xend/XendStateStore.py", line 104, in load_state
dom = minidom.parse(xml_path)
File "/usr/lib/python2.5/xml/dom/minidom.py", line 1915, in parse
return expatbuilder.parse(file)
File "/usr/lib/python2.5/xml/dom/expatbuilder.py", line 924, in parse
result = builder.parseFile(fp)
File "/usr/lib/python2.5/xml/dom/expatbuilder.py", line 211, in parseFile
parser.Parse("", True)
ExpatError: no element found: line 1, column 0
[2010-04-18 13:01:34 4253] INFO (SrvDaemon:219) Xend exited with status 1.
Any clues as to what might be going wrong?
I bought a 1U server used on eBay (a Supermicro motherboard, but branded "Asempra"), and I also bought a set of "Supermicro" rails, but unfortunately the rails didn't fit the server.
The side of the server looks like: http://hphotos-snc3.fbcdn.net/hs441.snc3/25351_686753868807_122602581_40791051_5292592_n.jpg
Can you tell me where I can find rails for this machine?
My server box has a hardware problem, so I unracked it and brought it home. While it was home, I figured it was time to upgrade from Etch to Lenny. Unfortunately, now that I've done so, all my domUs hang while starting up. I even tried making a new domU using
xen-create-image --lvm xen-space --hostname=test1 --size=8Gb --dist=lenny --memory=512M --dhcp
and when it starts up, it hangs in startup as well. The last message on the console is
Starting periodic command scheduler: crond.
The last thing in xend.log is
INFO (XendDomain:1165) Domain test1 (7) unpaused.
[ 5526.429198] blkback: ring-ref 8, event-channel 8, protcol 1 (x86_32-abi)
[ 5526.441788] blkback: ring-ref 9, event-channel 9, protcol 1 (x86_32-abi)
I am trying to reconstruct a server from backups after a hardware crash. Rather than restore the entire image, I'm trying a combination of installing software and then restoring configuration files from backups. But Apache2 doesn't seem to be honouring the "ServerName" directives in my /etc/apache2/sites-enabled/* files. /server-info shows that it's picking up the right configuration, but it's not displaying my sites, just the default index page in /var/www/html/index.html. Here's a snippet from /server-info:
Module Name: core.c
Content handlers: yes
...
Current Configuration:
In file: /etc/apache2/apache2.conf
57: LockFile /var/lock/apache2/accept.lock
66: PidFile /var/run/apache2.pid
71: Timeout 300
107: MaxRequestsPerChild 0
136: AccessFileName .htaccess
156: DefaultType text/plain
167: HostnameLookups Off
175: ErrorLog /var/log/apache2/error.log
182: LogLevel warn
In file: /etc/apache2/mods-enabled/alias.conf
17: <Directory "/usr/share/apache2/icons">
18: Options Indexes MultiViews
19: AllowOverride None
: </Directory>
In file: /etc/apache2/ports.conf
8: NameVirtualHost *:80
In file: /etc/apache2/conf.d/security
27: ServerTokens Full
38: ServerSignature On
49: TraceEnable On
In file: /etc/apache2/conf.d/servername
1: ServerName xen1.xcski.com
2: ServerAdmin [email protected]
4: ServerSignature EMail
In file: /etc/apache2/sites-enabled/000-default
1: <VirtualHost *:80>
2: ServerAdmin [email protected]
4: DocumentRoot /var/www/html
5: <Directory />
6: Options FollowSymLinks
7: AllowOverride None
: </Directory>
9: <Directory /var/www/html>
10: Options Indexes FollowSymLinks MultiViews
11: AllowOverride None
: </Directory>
17: <Directory "/var/www/cgi-bin">
18: AllowOverride None
19: Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
: </Directory>
80: ErrorLog /var/log/apache2/error.log
84: LogLevel warn
87: ServerSignature EMail
: </VirtualHost>
In file: /etc/apache2/sites-enabled/rochesterflyingclub.com
2: <VirtualHost *>
3: ServerName rochesterflyingclub.com
4: ServerAlias www.rochesterflyingclub.com
5: ServerAdmin [email protected]
7: DocumentRoot /www/rochesterflyingclub.com/www
8: <Directory />
9: Options FollowSymLinks
10: AllowOverride None
: </Directory>
12: <Directory /www/rochesterflyingclub.com/www/>
13: Options Indexes FollowSymLinks MultiViews Includes
15: AllowOverride FileInfo AuthConfig Limit
: </Directory>
20: <Directory "/www/rochesterflyingclub.com/cgi-bin/">
21: AllowOverride None
22: Options ExecCGI -MultiViews +SymLinksIfOwnerMatch
: </Directory>
27: ErrorLog /var/log/apache2/error.log
31: LogLevel warn
34: ServerSignature EMail
: </VirtualHost>
I export an oracle "schema" using
exp userid=/ file=pt.dmp log=pt.log owner=FOO buffer=10000000 statistics=NONE direct=Y
and then import it into a different schema on the same oracle instance on the same SID using
imp userid=/ file=pt.dmp fromuser=FOO touser=paul
When I try to access the stored procedures, I get
ORA-29541: class PAUL.ESMQOracleStoredProc could not be resolved
Any idea why one user can resolve this but another one can't?
I was given an "EAR" file and told to try to deploy it on an Oracle WebLogic server. I had successfully deployed it on a IBM WebSphere server. When I attempt to start it on WebLogic, however, I get the following error:
Could not load user defined listener: org.springframework.web.context.ContextLoaderListener java.lang.ClassNotFoundException: org.springframework.web.context.ContextLoaderListener at weblogic.utils.classloaders.GenericClassLoader.findLocalClass(GenericClassLoader.java:296) at weblogic.utils.classloaders.GenericClassLoader.findClass(GenericClassLoader.java:269) at weblogic.utils.classloaders.ChangeAwareClassLoader.findClass(ChangeAwareClassLoader.java:56) at java.lang.ClassLoader.loadClass(ClassLoader.java:307) at java.lang.ClassLoader.loadClass(ClassLoader.java:252) at weblogic.utils.classloaders.GenericClassLoader.loadClass(GenericClassLoader.java:177) at weblogic.utils.classloaders.ChangeAwareClassLoader.loadClass(ChangeAwareClassLoader.java:37) at
I've checked that spring.war is in WEB-INF/lib in the appropriate war files.
What am I missing?
I built a Drupal site for an organization and handed over the keys a couple of years ago. Now I see that the forums are full of spam, and the version of Drupal is well out of date.
There is a bulk delete to delete the hundreds of fake logins that the spammers have created, and I've done that, but is there a way to bulk delete all the spam in the forums? As far as I can tell it takes about three or four steps just to delete a single spam topic, and there are hundreds of them.
My boss just switched her web hosting to MediaTemple VPS (in spite of my recommendation of Linode or Panix). I've got everything running now except for one thing - the app only shows up on port 8080. Does anybody know how to set up a mod_proxy or mod_jk redirect on MediaTemple so that it will show up on http://<our domain>/foo?
I have end users who are allergic to the command line, and they want some way to create, edit, delete and move their files much as they do with Plesk desktop. Is there a way to give them a way to edit files without logging in and using the command line and vi?
Ever since I started using Postfix virtual_alias_maps to forward all my email to gmail, I'm getting a ton more spam than when I delivered the mail locally and used SpamAssassin/spamd to filter it. I'm already using smtpd_recipient_restrictions to do the standard spam filtering.
smtpd_recipient_restrictions =
reject_invalid_hostname,
reject_non_fqdn_hostname,
reject_non_fqdn_sender,
reject_non_fqdn_recipient,
reject_unknown_sender_domain,
reject_unauth_pipelining,
permit_mynetworks,
reject_unauth_destination,
reject_rbl_client zen.spamhaus.org,
reject_rbl_client list.dsbl.org,
reject_rbl_client korea.services.net,
permit
Is there anyway to run the mail through SpamAssassin before virtual_alias_maps forwarding?
Can I set up a virtual domain on one box so that a few specific email addresses get forwarded to gmail, and everything else (using a wildcard) goes to another system I control? For example, can I put in /etc/postfix/virtual
[email protected] [email protected]
[email protected] [email protected]
*@xcski.com *@home.xcski.com
How do I set up my colo box to relay email for my domain (xcski.com) to my home box? Both are currently running postfix, and currently the colo box receives email for a bunch of domains and my home box receives the email for xcski.com. I'd rather receive the mail on the colo box since it's on a static IP. Ideally since my wife forwards all her mail to gmail, I'd like it so I can forward mail for some of the accounts on the colo box directly.