That's related to the heartbleed bug. While my server (12.04 LTS) was configured to perform unattended install of all security updates, it seems that nginx was not restarted so it was still affected by the bug.
By manually performing the restart the problem was solved, but I am looking for an automatic solution to this kind of problem.
Note: I am using the nginx from nginx.org, not the one from Ubuntu which is, ancient.
I observed that none of the included nginx blends has the spdy module enabled and I don't want to manually compile it for that.
I am looking for a apt repository solution but I wasn't able to find one yet.
I've got an inexpensive certificate from EssentialSSL (Comodo is the CA) and I was surprised to discover that Python didn't recognize it.
requests.exceptions.SSLError: [Errno 1] _ssl.c:509: error:14090086:SSL
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
The certificate seems to be properly recognized by all major browsers, still Python does not validate it.
If possible I would prefer a simple install solution like the one of installing a package or a script.
I was a little bit surprised not to see Comodo in the default list of recognized CA certs, all major (5) browsers accept it but not Ubuntu wget/python/... (openssl i guess is the cause).
If you press escape in grub menu you end up at the grub command prompt.
My question is, how can I go back to the menu, without rebooting?
If you ever used ssh shared connection you may also encounter the:
Shared connection to <hostname> closed.
Now, my question is if there is a way that would allow you to benefit from the speedup of using shared ssh connections that would not close your connection when the first ssh session is closed.
I am using autossh to build a reverse ssh tunnel but from time to time the tunnel stops working and I need to kill autossh and start it again.
/etc/cron.d/autossh
@reboot autossh -f -nNT -R 3269:intranet.example.com:3269 public.example.com &
autossh seems to remain in a strange state, where the forwarded port is still open but you get no response from the other side. By restarting autossh this is solved.
How can I prevent this problem from occurring?
I am looking for a solution that would prevent me from seeing things like:
W: GPG error: http://updates.example.com lenny Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 00AABBCCDDEE0011
The question applies for both Debian and Ubuntu.
Isn't possible to publish the key somewhere where it can be automatically downloaded by apt-get based on it's signature?
Note: I know that I can put my signature to an we server and use wget to get it and install it from there, still I am using for a better solution.
I am looking for a simple and generic solution that would allow you to execute any script or application in crontab and prevent it from running twice.
The solution should be independent on the executed command.
I assume it should look like lock && (command ; unlock) where lock will return false if there was another lock.
The second part would be like if it acquired the lock, run command and unlock after command is executed, even if it returns error.
Please provide:
Note: do not ask me to modify files that are auto-regenerated and overridden, like /etc/resolv.conf
What is the easiest way to enable PHP on nginx on Ubuntu 12.04?
Best solution is the one that request minimal work, ideally just a package installation :)
Because Unity and Gnome3 where too buggy and unstable I switched to Kubuntu and now I do have a really good speed and, so far, stability.
Still, the problem with Kuduntu, is the all the fonts are broken, ugly like s***, with an weird anti-aliasing.
I've seen other complaining but I wasn't able to find the proper set of settings to make it look uk.
Btw, I put a strong interest on having fonts look good in Chrome and Thunderbird.
Optional:
What can I do to configure SSH on both client and servers to prevent Write Failed: broken pipe errors? It often occurs if you sleep your client computer and resume later.
I know that I can run a local command when I establish a ssh connection, something which is quite useful for setting up terminal title for example.
Still, I'm looking for a solution to run a command when the ssh connection is closed.
Usage:
>ls
>ssh server2
# want to run something here on the client, this can be done with .ssh/config ProxyCommand
>ls
>exit
# I want to run something on the client, how!?
>ls
I know there are many tutorials on the net for setting up VPN client and server.
I you find one that is simple/short, I am interested only in the server part.
For client, I will use OS X so I prefer a solution that uses L2TP over IPsec or PPTP because I suppose Cisco IPsec would cost something.
I don't want to spent too many hours setting it up. You know, maybe someone already made a setup script :)
Note: I am using an EC2 micro instance running Ubuntu 12.04 on it.
My Ubuntu looks to be stuck at the purple screen with Ubuntu logo.
How can I find what the cause is?
When I press Ctrl+Alt+Del it will revive it and reboot, switching for a very short time to a console log before doing it.
Mainly I am looking for a way to pin an application to the Unity launch bar, and run it as root.
Currently, even if I start the application with sudo, and pin it after it starts, it will start as current user next time.
Sad, but there is no context menu option "run as ...".
Update: I switched to gnome3 and now I'm happy, I'm missing only the search.
What parameters do I have to set in /etc/default/grub in order to boot by default in 132x50 and verbose.
I discovered that Ubuntu 11.04 is kinda slow when you have your home directory on NFS, even when NIS itself doesn't have any performence issues.
Still it seems that many applications including Eclipse or Chrome are slow and I'm sure the cause is the NIS home directory.
How can I configure the system so it will behave decent.
In 99% of the time having home directory on NIS/NFS is not so important in my case so I'm looking for alternatives.
I would like to know if there is anyone that successfully installed a production Launchpad instance, one that it actively used - other than the launchpad.net one.
I tried to use the usb-creator.exe from Ubuntu 10.10 desktop i386 ISO image and it does create an USB stick that doesn't boot. When I try to boot from it I get:
Operating System not found.
I try to do this from Windows 7 x64. I'm not looking to create a live Ubuntu media, only an installation USB disk.
I repeated the process several times and I even tried to reformat the USB drive (FAT32), no success yet.
The USB stick is a 8GB one.