Home / user-66057

rorycl's questions

Martin Hope
rorycl
Asked: 2019-09-09 12:25:22 +0800 CST
  • 1

We have two important production servers on (fairly ancient) Supermicro X8DT6 motherboards. I've never updated BMC firmware before, but I'm keen to see if we can get some HTML5 kvm consoles running on these machines, and to know if the upgrade is safe to do while the server continues to operate.

The BMCs are running 

Firmware Revision : 2.08
Firmware Build Time : Dec 2 2011 19:21:51

according to the BMC web interface (the revision is confirmed in ipmitool).

It appears that Supermicro has updated IPMI firmware version 2.22 available for the X8DT6-F motherboard which I assume is a family member of the X8DT6.

It appears possible to upload the firmware file (X8DT6222.ima in this case) via the BMC web interface. The document with the download bundle has the following note, however:

2.0  System will reboot after upgrade complete.

Does that reboot refers only to the BMC, or to the whole server?

ipmi
Martin Hope
rorycl
Asked: 2013-04-18 07:31:08 +0800 CST
  • 1

I have many sites each using the same 5 Django applications (with local settings), hosted on Apache. At present each site app has its own config as follows:

WSGIDaemonProcess api_example threads=15 maximum-requests=2000
WSGIProcessGroup api_example
WSGIScriptAlias /api /var/www/sites/example/api/site.wsgi

Is it possible to share daemons between vhosts, but keep the local settings active? My aim is to save memory, and reduce the number of Apache processes launched to service requests (several of these apps are management/support consoles that are only used occasionally).

-- edit --

As Graham Dumpleton sets out here: mod_wsgi daemon mode - WSGIDaemonProcess per virtual host configuration?, it should be possible to "reach across to daemon process definition in prior virtual host so long [as it has the] same server name." Note that, as Graham points out, the WSGIApplicationGroup directive will have to be adjusted from the default, probably to %{GLOBAL} or %{ENV:variable}.

I'm not sure how to "use" server-level declarations within a vhost. Is it possible to use a server-level daemon with local settings?

apache-2.2
Martin Hope
rorycl
Asked: 2011-04-29 14:25:27 +0800 CST
  • 15

I've generated an ssh certificate like this:

  1. ssh-keygen -f ca_key # generate a ssh keypair for use as a certificate
  2. generate a host key ssh-keygen -s ca_key -I cert_identifier -h host_key.pub
  3. specify the host key in the server's sshd config file: TrustedUserCAKeys /etc/ssh/ssh_cert/host_key.pub
  4. generate a local certificate to access the host using an ssh certificate: ssh-keygen -s ca_key -I cert_identifier user_key.pub. This should generate user_key-cert.pub

I can now log into the server using ssh -i user_key user@host (which uses user_key-cert.pub). How can I revoke the certificate other than disabling the TrustedUserCAKeys file?

ssh ssh-keys