Ashark's questions

In ssh config you can easily edit a hostname by appending or prepending it with something. For example, when you want to connect to server with ssh test5, but actually the server name is test5.mail, you can specify the server as like this:

Match exec "echo %h | grep -q '^test[0-9]$'"
    HostName %h.mail

The same approach could be applied if you need to prepend hostname.

But what if I want to edit the middle of the hostname? For example, I want to connect as ssh server1.storage, but the actual address I want to connect to is server1.int.storage.

In other words, I want to insert substring in the middle of %h.

I have a cisco and a monitoring server with icinga (a.k.a. nagios, thruk). I want to receive traps from cisco and show them in icinga. But I am unable to see the interface and vlan for the errdisable trap.

I have downloaded mibs from cisco, incliding CISCO-ERR-DISABLE-MIB.my. Then I converted it for snmptt with this command:

snmpttconvertmib --in=CISCO-ERR-DISABLE-MIB.my --out=snmptt.conf --exec='/bin/bash /usr/local/bin/trap/submit_check_result $r '"errdisable 2" -net_snmp_perl --format=4

which produced the following config (I replaced the absolute path to mib with ... and variable values with ...):

#
#
#
#
MIB: CISCO-ERR-DISABLE-MIB (file:/.../CISCO-ERR-DISABLE-MIB.my) converted on Wed Sep  8 16:49:53 2021 using snmpttconvertmib v1.4.2
#
#
#
EVENT cErrDisableInterfaceEvent .1.3.6.1.4.1.9.9.548.0.1.1 "Status Events" Normal
FORMAT cErrDisableInterfaceEvent - cErrDisableIfStatusCause:$1 
EXEC /bin/bash /usr/local/bin/trap/submit_check_result $r errdisable 2 "cErrDisableInterfaceEvent - cErrDisableIfStatusCause:$1 "
SDESC
The cErrDisableInterfaceEvent is generated when an interface
or {interface, vlan} is error-disabled by the feature
specified in cErrDisableIfStatusCause.
cErrDisableInterfaceEvent is deprecated and replaced by 
cErrDisableInterfaceEventRev1.
Variables:
  1: cErrDisableIfStatusCause
     Syntax="INTEGER"
       1: udld
       ...
       9: portSecurityViolation
     Descr="This object specifies the feature/event that caused the
        {interface, vlan} (or the entire interface) to be
        error-disabled."
EDESC
#
#
#
EVENT cErrDisableInterfaceEventRev1 .1.3.6.1.4.1.9.9.548.0.2 "Status Events" Normal
FORMAT cErrDisableInterfaceEventRev1 - cErrDisableIfStatusCause:$1 
EXEC /bin/bash /usr/local/bin/trap/submit_check_result $r errdisable 2 "$N - $+1 "
SDESC
The cErrDisableInterfaceEventRev1 is generated when an
interface or {interface, vlan} is error-disabled by the 
feature specified in cErrDisableIfStatusCause.
cErrDisableInterfaceEventRev1 deprecates 
cErrDisableInterfaceEvent to make it RFC 2578 compliant. 
According to section 8.5 of RFC 2578, the next
to last sub-identifier in the name of any newly-defined
notification must have the value zero.
Variables:
  1: cErrDisableIfStatusCause
     Syntax="INTEGER"
       1: udld
       ...
       9: portSecurityViolation
     Descr="This object specifies the feature/event that caused the
        {interface, vlan} (or the entire interface) to be
        error-disabled."
EDESC

There are two traps, I am interested only in cErrDisableInterfaceEventRev1, but not in deprecated cErrDisableInterfaceEvent.

This is my send-errdisable.sh which I use to generate a test errdisable event:

TO_HOST=icinga.example.com
community=abcabc

snmptrap -m ALL -v 2c -c $community $TO_HOST '' CISCO-ERR-DISABLE-MIB::cErrDisableInterfaceEventRev1 \
CISCO-ERR-DISABLE-MIB::cErrDisableIfStatusCause.2.0 i 1 \
2>/dev/null

Now when I generate an errdisable event, in icinga plugin output for the errdisable service I get the following text: cErrDisableInterfaceEventRev1 - cErrDisableIfStatusCause:udld
but I expect the interface and vlan to be there, like this:
cErrDisableInterfaceEventRev1 - cErrDisableIfStatusCause.2.0:udld

Why it is not shown? And how to fix that?

I have a motherboard on Supermicro server (model X9SCM(+)/X9SCM). And it is not possible to update it via Supermicro Update Manager - looks like bmc just cannot communicate with bios at all on this motherboard.

I have read that AMI joined LVFS service in 2018. However, in their account it is said:

Restricted to upload firmware for any hardware with vendor ID: DMI:American Megatrends Inc.

I misunderstand that. They restrict uploads to their hardware? So how it is then possible to update?

Official Statement: AMI enables customers to create BIOS update packages that can be uploaded to LVFS. So users can create update packages themselves?

I have not found any information about how to do it. Maybe there is some unofficial (external) repository with .cub files for fwupdmgr?

I have loaded archlinux live iso, installed fwupd and run fwupdmgr get-devices, but got:

root@archiso ~ # fwupdmgr get-devices 
Unknown                  [***************************************]
WARNING: UEFI capsule updates not available or enabled
  See https://github.com/fwupd/fwupd/wiki/PluginFlag:capsules-unsupported for more information.
X9SCL/X9SCM

At that url they say that bios setting that enabling capsule updates may fix that, but I cannot see such option in bios settings.

Am I missing something? Or it is just AMI completely restricted updates only to its proprietary utility?

In the downloadable update archive file from supermicro web site there is a firmware file and afudos utility. It is Ami Firmware Update utility for DOS. While it is possible to update such way, it is inconvenient.

I have seen several variants of AFU utility for different kinds of operating systems:

• afudos for Disk Operating System
• afuefi for Unified Extensible Firmware Interface Shell
• afuwin for Microsoft Windows
• afulnx for Linux

I have successfully tested updating with afuefi from uefi shell. From hdd it works perfectly fine. I used aptio 4 version of afuefi, because aption 5 version said to do so, looks generation dependent. I have also made an eltorito bootable iso with needed files. But the problem it the ipmi virtual media speed, which is unusably slow and impossible to even begin flashing.

Probably, afulnx version could do the trick, but it is only mentioned in pdf files when you download AFU archives from official page. But there is no afulnx there. Is it possible to find it somewhere? Why it is not in official archives?

Maybe there are some other semi-official ways of upgrading? For example, "UEFI BIOS Updater" (UBU)?

Is it possible to update AMI bios/uefi from Linux?

I have updated config of my dhcp server, so that server should get a new ipmi address. But the server stay at its old address for some time. If I do not want to wait, I want to go to the server and force it to ask for the dhcp address. Is there a special command for that?

I know I can make

ipmitool bmc reset cold

and it works, but just wondering if it is possible without rebooting ipmi.

How does Virtual Media Web ISO work on SuperMicro ipmi? I am using SuperMicro sever. I want to be able to mount bootable ISO image to a server, launch long process there (disk formatting), and then turn off my laptop. But if I do it, the remote booted OS will hang, because of virtual CD ROM will become unreadable.

In ipmi java application in Virtual Storage there is an item called Web ISO. I thought I could upload my ISO to a personal site, and make it available over http(s), so media will stay online even when I turn off my laptop. But the "Image File Name and Full Path" field and "Open Image" button for the web iso are greyed out, so I cannot select it. I also checked that java application in Windows OS, and still that button is greyed out there. Is it possible to mount an iso image from a web site as a virtual storage?

I am using Thruk as a monitoring interface. At the top left corner of the page there is a button which opens a stack with filters of which hosts/services etc. you want to apply. You can easily add such filters as Host, Service, Duration, and so on.

But I have several services with different sets of descriptions in the Status Information column. I want to be able to only show interested set, but I cannot see a "Status Information" choise in the drop-down list in filters stack.

Is filtering by Status Information possible in Thruk?

I have several different SuperMicro servers and I want to create an internal repository with firmwares and create a package with updating utility. In the ipmi firmware archives that I downloaded from supermicro web site, they include update utility for linux. For older motherboards (for example, X9DRW-7TPF) it is called lUpdate, but for more modern motherboards (for example, X10SLM-F), it is called AlUpdate and have higher version. Seems like internally that utility has the same name and developed by the same vendor. When you launch that utility, you get a header message, that looks like this:

***************************************************************************** 
* ATEN Technology, Inc.                                                     * 
***************************************************************************** 
* FUNCTION   :  IPMI FIRMWARE UPDATE UTILITY                                * 
* VERSION    :  2.07                                                        * 
* BUILD DATE :  Jul 13 2016                                                 *

Are they interchangeble? Could I use a more recent version of utility for more older motherboards?

I am using a Supermicro server, and its ipmi firmware has a so called "Virtual Media" function. It allows you to mount an ISO file, which is then presented to server as a USB CD-ROM.

I cannot understand why some of the ISO files are not mountable. When I choose an ISO file in Virtual Storage menu, and then click Plug in button, I got message:

Device1: Can not open ISO Image File

But some other ISO files are able to be mounted correctly with the message:

Device1: VM Plug-In OK!!

I thought that the ISO file size could be a problem, but seems it is not.

Edit: there is a similar question, but in that case the cause was firewall.

I am trying to configure dhcp PXE server, but client is not booting as expected. Is there a way how you can watch transferred requested and responded options between client and server? I want to be able to see each individual option value.