Moon's questions

I was tracking down an unknown timeout problem in our cluster and found something interesting.

We currently have 30 pods for a service. When I run kubectl get event Those 30 pods have been failing for readiness. All of them have "LASTSEEN" less than 10 mins and they are keep failing.

However, I can still access the service without a problem.

I thought Kube removes those pods that failed readiness from being accessed.

Why can I still access the service? I've doubled checked that every single one of them are still failing every 10 minutes or so.

I'm using a docker image that comes with Debian 8 (jessie). I'm trying to upgrade curl package to the latest (7.58) from 7.38.

Running apt-cache showpkg curl shows that 7.38 is the latest version, but curl is at 7.58 (http://www.linuxfromscratch.org/blfs/view/8.2/basicnet/curl.html)

I also checked Debian package website and it it looks like 7.38 is the latest. https://packages.debian.org/jessie/curl

Is there a way to upgrade curl 7.38 on my system to the latest?

I'm trying to see if my pods are using tcp_keepalive_time.

When I ssh into my node and run sysctl -a I see that there is value for tcp_keepalive_time, but pods don't have them when run the same command in the pod.

In this case, do pods inherit their node's kernel values?

How do I confirm that a pod has its node's kernel value when a pod does not show with sysctl -a command?

I'm trying to create a private key and having an issue.

When I use ssh-keygen -t rsa -b 4096 -C "[email protected]", I get a private key in the following format.

-----BEGIN OPENSSH PRIVATE KEY-----
uTo43HGophPo5awKC8hoOz4KseENpgHDLxe5UX+amx8YrWvZCvsYRh4/wnwxijYx
...
-----END OPENSSH PRIVATE KEY-----

And this is not being accepted for an application that I'm trying to use.

I'm expecting a key in the following RSA format.

-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: AES-128-CBC,25737CC2C70BFABADB1B4598BD8AB9E9

uTo43HGophPo5awKC8hoOz4KseENpgHDLxe5UX+amx8YrWvZCvsYRh4/wnwxijYx
...
-----END RSA PRIVATE KEY-----

How do I create the correct format? This is weird because every other mac I have creates the correct format, except the one I'm having problem with.

I'm on a fresh installed Mac OS Mojave

I'm trying to connect to a FTP to upload a file from a cent os box. I can access to the server, but the connection times out whenever I try to upload with 'put' command.

I can upload a file without a single problem on my local machine. It sounds like a port issue.

I've already opened outbound port 21. Are there any other ports that I need to open for uploading?

logs

ftp> put localFile remote
227 Entering Passive Mode.
ftp: connect: Connection timed out

I'm trying to redirect a page based on the parameters passed.

I would like redirect

rewrite ^/join_trial to /test? permanent;

and

rewrite ^/join_trial?discount=free(.*) /test2? permanent;

The first one works, but the second one doesn't. It looks like nginx doesn't take (.*) regex.

For the first one, the following cases work.

/join_trial?test=aaaaa

/join_trial?923849=aaa

Basically, you can put anything after /join_trial.

I want to have a redirect when a user appends ?discount=free(anything goes here).

Is this possible with nginx?

Helo,

I was asked to sign up a dynamic dns service and give the address to a server administrator. He told me that he added my dynamic dns to the server so that I can ssh to the server, but didn't tell me the next step.

Give the fact that the dynamic dns name is test.testdns.com and he has added the dns to the server, What's the next?

1. Do I just ssh to the server normally? ssh username@serverip ?

or do I need to do it differently?

I have a website with about 10 external links to other websites. Some of them have SSL, but some of them don't.

Everything works fine in all the browsers, except for the IE6. Users get "This page contains both secure and nonsecure items" message.

Is there a solution to get around it?

I created an AMI image, but cancelled it after 30 minutes of waiting. After that, my elastic IP which was assigned to the original instance is gone. It's not even in the Elastic IPs page.

How do I fix this, and is it possible to get the IP back?

I'm trying to install a SSL with my nginx setup.

I configured nginx with those two files, but it doesn't work. Nginx complained the following error message.

SSL: error:0906D06C:PEM routines:PEM_read_bio:no start line error:140DC009:SSL routines:SSL_CTX_use_certificate_chain_file:PEM lib

I looked up google then found out that Nginx can't read either the cert or key file.

I opened the cert file and everything looked good. When I opened the key file then I realized it is a binary file.

is this normal? I thought a key file is just a plain text file.

I have received a p7b file from my co-worker and he asked me to install it on one of our servers. It looks like p7b is same as .cert file. I looked up google to find out how to install the file and it looks like I also need to have .key file.

Is it possible to make the key file with .cert or .p7b file?

My index.php files has suddenly been deleted today. I downloaded the FTP log file from the server. I see that an unknown user has accessed my FTP server today. I have the following line in my FTP log, but don't know how to read it:

Fri Dec 31 13:25:51 2010 0 ::ffff:[IP HERE] 10079 [FILE NAME] a _ o r [USERNAME] ftp 0 * c

What do the following pieces of information mean? 10079 and a_ o r and 0 * c ?

I have a weird problem.

I have two exact website on two servers - dev and qa.

The dev one shows that my javascript size is 100kb, but the qa says 400kb. When I save the script on my local, it is 400kb.

I looked at the header of the javascript on the dev and it looks like..it's sending

"Content-Encoding   gzip".

What is this and how do I enable this on the qa to make my script smaller?

So I have a main domaing pointing to my server (xx.xx.xx.xx).

I tried to create a subdomain with the following virtualhost file.

<VirtualHost myip:80>

    ServerName  sub.mydomain

</VirtualHost>

<VirtualHost myip:80>

    ServerName mydomain.com


</VirtualHost>

• I didn't put all the other codes here.

I can't even ping sub.mydomain.com. My domain.com works just fine.

Am I doing something wrong here?

I am following http://wiki.nginx.org/HttpBrowserModule tutorial.

I have the following configuration.

ancient_browser "MSIE 6.0";

if ($ancient_browser){
  rewrite  ^  /ie6;
}

the problem with this is that I get an infinity loop.

How do I make it work!? I'm surprised that even an example on an official doc. doesn't work.

Updated:

My current code

server {

        listen 83;
        server_name {my ip goes here}


        location / {

                ancient_browser "MSIE 6.0";

                if ($ancient_browser){
                        rewrite ^ /ie6 break;
                }

                proxy_pass http://localhost:34881 ;

                proxy_set_header Host $host ;
                proxy_set_header X-Real-IP $remote_addr ;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for ;
                proxy_set_header Country $geoip_country_code;

                proxy_cache cache;
                proxy_cache_valid 200 302 1h;
                proxy_cache_valid 404     1m;
                 add_header Pragma no-cache;
                expires epoch;
                if_modified_since off;
                add_header Last-Modified "";
}

Update 2:

I came up with the following code snippet and it works.

if ($http_user_agent ~ "MSIE 6.0") {
    set $IE T;              
}

if ($uri != "/ie6/") {
    set $IE "${IE}RUE";
}

if ($IE = TRUE) {
    rewrite ^ /ie6 break;
}

if anyone has a better solution, please leave a comment..thanks!!!

I have two postgres database servers. Let's name that A and B respectively.

When I create a database in A, I don't have to run the following command to install a language.

createlang -U postgres plpgsql {database name}

Somehow...I have to run the above command in B.

How do I make it so that server B installs 'plpgsql' language when I create a database?

I'm trying to read log files of Varnish server in Ubuntu environment.

I actually never used Varnish before.

so...I cd to /var/log/varnish, but the folder is empty.

it tells me that I have to configure my varnish server to save logs...is that true?

I'm having a little issue with video files. Apparently, for mobile videos, server should support byte range. The following is response headers from my video request.

Server  Apache-Coyote/1.1
Content-Disposition filename=test.mp4
Expires Sat, 10 Sep 2011 21:02:51 +0000
Cache-Control   public, max-age=2592000
Last-Modified   Tue, 09 Aug 2011 22:42:45 +0000
Etag    dot:9aa53bc0-703e-4628-929f-15a874a8a172:1312929765000:14351674
Content-Type    video/mp4
Content-Length  14351674
Date    Thu, 11 Aug 2011 21:02:51 GMT

How do I add "Accept Ranges: byte" to my server configuration?

Thanks

My co-worker sent me a '.ssh' directory with files in it. He said that I can put that directory in my user directory then connect to ssh without password (ssh root@ip).

I put that directory in my home directory then tried ssh root@ip, but it didn't work.

Am I missing something?

While I was talking with my co-workers few days ago, one of them mentioned that apache creates a thread per connection.

What does he mean by per connection exactly?

Let's say I have a HTML file that contains three images. When I access the file, my browsers request three images to a server. so...does apache make a thread for each images?