Joel Divekar's questions

My problem statement is how to auto sync /home/username/script folder to /var/www/html. So whenever files under script folder are updated then it will update them in destination folder, and also chown apache:apache & chmod 755. I tried using lsyncd and this is my conf file.

settings {
    logfile    = "/var/log/lsyncd/lsyncd.log",
    statusFile = "/var/log/lsyncd/lsyncd-status.log"
}

sync{default.rsync, delete=false, source="/home/joel/script", target="/var/www/html/script", rsync = {chmod = "755", chown = "apache:apache"}}

This does sync the folder script in the destination when I try running it from commandline, but chmod or chown never works. Kindly advice

Trying to use mariabackup to take backup of all our databases. First created backup directory as

mkdir -p /mnt/data/backup/mariadb
chown -R mysql:mysql /mnt/data/backup/mariadb

And proceed to do backup

# mariabackup --backup --target-dir=/mnt/data/backups/mariadb/ --user=root --password=xxxxxxxx
[00] 2022-02-06 11:28:46 Connecting to MySQL server host: localhost, user: root, password: set, port: not set, socket: /mnt/data/mysql/mysql.sock
[00] 2022-02-06 11:28:46 Using server version 10.3.28-MariaDB
mariabackup based on MariaDB server 10.3.28-MariaDB Linux (x86_64)
[00] 2022-02-06 11:28:46 uses posix_fadvise().
[00] 2022-02-06 11:28:46 cd to /mnt/data/mysql/
[00] 2022-02-06 11:28:46 open files limit requested 0, set to 1024
[00] 2022-02-06 11:28:46 mariabackup: using the following InnoDB configuration:
[00] 2022-02-06 11:28:46 innodb_data_home_dir = 
[00] 2022-02-06 11:28:46 innodb_data_file_path = ibdata1:12M:autoextend
[00] 2022-02-06 11:28:46 innodb_log_group_home_dir = ./
[00] 2022-02-06 11:28:46 InnoDB: Using Linux native AIO
2022-02-06 11:28:46 0 [Note] InnoDB: Number of pools: 1
[00] 2022-02-06 11:28:46 Error: cannot mkdir 2: /mnt/data/backups/mariadb/

tried goggling and various options it did not worked so finally tried without --target-directory option and did backup again and it worked successfully and got this

# ls -ld /mnt/data/backup
drwxr-xr-x 3 mysql mysql 21 Feb  6 11:41 /mnt/data/backup

# pwd
/mnt/data/mysql

# ll
total 8
drwxr-xr-x  3 mysql mysql   21 Feb  6 11:41 backup
drwxr-xr-x 27 mysql mysql 4096 Feb  4 19:07 mysql
drwx------ 27 root  root  4096 Feb  6 11:22 xtrabackup_backupfiles

What did I do wrong or how do I run this with ----target-directory

We are trying to run 2 different flask applications with different domain names from same server using mod_wsgi + Apache2.

This is the settings configured in httpd.conf

# For www.yyy.com
WSGIDaemonProcess yyy python-path=/var/www/yyy
WSGIScriptAlias / /var/www/yy/wsgi.py process-group=yyy application-group=%{GLOBAL}

# For www.zzz.com
WSGIDaemonProcess zzz python-path=/var/www/zzz
WSGIScriptAlias / /var/www/zzz/wsgi.py process-group=zzz application-group=%{GLOBAL}

and created /etc/httpd/conf.d/yyy.conf & zzz.conf similar to

<VirtualHost *:80>
        ServerName www.yyy.com
        ServerAdmin joel
        DocumentRoot /var/www/yyy
        ErrorLog /var/log/httpd/error.log
        CustomLog /var/log/httpd/access.log combined
        Alias /static /var/www/yyy/static
        <Directory /var/www/yyy/static>
                Require all granted
        </Directory>
        <Directory /var/www/yyy>
        <Files wsgi.py>
                Require all granted
        </Files>
        </Directory>
</VirtualHost>

but whatever we try we end up getting only first application that is configured in httpd.conf.

Trying to connect to web servers running on Centos 7 via jump server, earlier this connection used to work fine without any problems, but not sure now what went wrong.

Following is the status

$ ssh -vvv abc@JUMP_SERVER_IP -J 10.10.0.5 -i .ssh/id_rsa_iit
OpenSSH_8.2p1 Ubuntu-4ubuntu0.2, OpenSSL 1.1.1f  31 Mar 2020
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: include /etc/ssh/ssh_config.d/*.conf matched no files
debug1: /etc/ssh/ssh_config line 21: Applying options for *
debug2: resolve_canonicalize: hostname JUMP_SERVER_IP is address
debug1: Setting implicit ProxyCommand from ProxyJump: ssh -vvv -W '[%h]:%p' 10.10.0.5
debug1: Executing proxy command: exec ssh -vvv -W '[JUMP_SERVER_IP]:22' 10.10.0.5
debug1: identity file .ssh/id_rsa_iit type 0
debug1: identity file .ssh/id_rsa_iit-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.2
OpenSSH_8.2p1 Ubuntu-4ubuntu0.2, OpenSSL 1.1.1f  31 Mar 2020
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: include /etc/ssh/ssh_config.d/*.conf matched no files
debug1: /etc/ssh/ssh_config line 21: Applying options for *
debug2: resolve_canonicalize: hostname 10.10.0.5 is address
debug2: ssh_connect_direct
debug1: Connecting to 10.10.0.5 [10.10.0.5] port 22.
debug1: connect to address 10.10.0.5 port 22: Connection timed out
ssh: connect to host 10.10.0.5 port 22: Connection timed out
kex_exchange_identification: Connection closed by remote host

I am using my bastion host to connect to internal servers as follows

ssh -J user@BastionHost user@InternalServer

Is it required to create user on Bastion host to jump to internal servers ? Or can we just use this server to Jump to internal servers ?

I am trying to setup a bastion host for my online infrastructure. All my servers will be using public key for authentication. Currently I am able to connect to my bastion host using public key but I do not want to store private keys of my internal servers on the bastion host.

So how do I configure my bastion host to be a proxy server which will allows me to connect to my internal servers using private key stored on my local box.