92
votes
6answers
31k views

SSH keypair generation: RSA or DSA?

SSH supports two signature algorithms for key pairs: RSA and DSA. Which is preferred, if any? For RSA, what is the minimum acceptable key length?
92
votes
5answers
253k views

Does Windows have a built-in ZIP command for the command line?

Since Windows Explorer (since at least Windows XP) has some basic support for ZIP files, it seems like there should be a command-line equivalent, but I can't seem to find any sign of one. Does ...
91
votes
8answers
136k views

How do I create a symbolic link in Windows?

Windows Vista added the ability to create symbolic links to files and directories. How do I create a symbolic link and what are the current consumer and server versions of Windows that support it?
90
votes
2answers
44k views

IPTABLES - Limit rate of a specific incoming IP

I do not wish to limit the rate of a specific service. My goals is to limit rate based solely on the incoming IP address. For example using a pseudo-rule: john.domain.local (192.168.1.100) can only ...
90
votes
7answers
39k views

Sudo as different user and running screen

Found out today that running screen as a different user that I sudo into won't work! i.e. ssh bob@server # ssh into server as bob sudo su "monitor" - screen (fails) I have a script that ...
90
votes
7answers
22k views

How can the little guys effectively learn and use Puppet?

Six months ago, in our not-for-profit project we decided to start migrating our system management to a Puppet-controlled environment because we are expecting our number of servers to grow ...
89
votes
9answers
101k views

Shell command to monitor changes in a file - What's it called again?

I know there was a command on Unix that I could use to monitor a file and see changes that are getting written to it. This was quite useful especially for checking log files. Do you know what it is ...
89
votes
4answers
80k views

how to disable SSH login with password for some users?

On Linux (Debian Squeeze) I would like to disable SSH login using password to some users (selected group or all users except root). But I do not want to disable login using certificate for them. ...
88
votes
8answers
107k views

Dump Microsoft SQL Server database to an SQL script

Is there any way to export a Microsoft SQL Server database to an sql script? I'm looking for something which behaves similarly to mysqldump, taking a database name, and producing a single script ...
88
votes
21answers
18k views

Why should I firewall servers?

PLEASE NOTE: I'm not interested in making this into a flame war! I understand that many people have strongly-held beliefs about this subject, in no small part because they've put a lot of effort into ...
88
votes
2answers
16k views

Can you help me with my capacity planning?

This is a Canonical Question about Capacity Planning Related: How do you do Load Testing and Capacity Planning for Web Sites? How do you do Load Testing and Capacity Planning for ...
86
votes
3answers
13k views

Smell of rotten eggs in the server room

A week ago I got the following error on my APC Smart-UPS 1000 which I muted. Warning State: Connect battery Load: 55% Batt: 100% Today, I could smell a sort of sulfur/sulphur/rotten egg smell when ...
86
votes
1answer
18k views

Why do I need Nginx and something like Gunicorn?

I'm looking for an overly simplified answer to the following question. I'm trying to build a foundational understanding of how Nginx works alongside something like Gunicorn. Do I need both Nginx and ...
86
votes
11answers
96k views

How to know from which yum repository a package has been installed?

After I have installed a package by yum (with multiple repositories configured), how can I find from which repository it has been installed? If I run yum info package-name (or yum list package-name), ...
85
votes
8answers
93k views

how to set global PATH on OS X?

I'd like to append to the global PATH variable on OS X so that all user shells and GUI applications get the same PATH environment. I know I can append to the path in shell startup scripts, but those ...
85
votes
5answers
34k views

How do I rename a task in Task Scheduled on Windows Server 2008 R2

I have some tasks in the Task Scheduler on Windows 2008 R2. I created them as the admin and I'm logged in as the admin. I have no easy way to rename the tasks. The only way I can is to export the task ...
84
votes
9answers
65k views

How to stop people from using my domain to send spam? [duplicate]

I receive Mailer Daemon messages saying certain emails fail. My domain is itaccess.org which is administered by Google apps. Is there any way I can identify who is sending emails from my domain, and ...
83
votes
13answers
33k views

Why is RAID not a backup?

When someone mentions RAID in a conversation about backups, invariably someone declares that "RAID is not a backup." Sure, for striping, that's true. But what's the difference between redundancy and ...
83
votes
12answers
10k views

Transfer 10TB of files from USA -> UK datacenter

I am migrating my server from the USA to the UK from one data center to another, my host said I should be able to achieve 11 megabytes per second. Operating system is Windows Server 2008 at both ...
83
votes
5answers
53k views

How to change an EC2 instance's security group

I have created a new EC2 instance. It got assigned the default security group. I want to change that security group. How?
82
votes
7answers
121k views

How to forcibly close a socket in TIME_WAIT?

I run a particular program on linux which sometimes crashes. If you open it quickly after that, it listens on socket 49201 instead of 49200 as it did the first time. netstat reveals that 49200 is in ...
81
votes
9answers
494k views

Command line to list users in a Windows Active Directory group?

Is there a command line way to list all the users in a particular Active Directory group? I can see who is in the group by going to Manage Computer --> Local User / Groups --> Groups and double ...
81
votes
6answers
157k views

List all DNS records in a domain using dig?

My company runs an internal DNS for mycompany.com There is a machine on the network that I need to find, but I’ve forgotten its name. If I could see a list, it would probably jog my memory. How ...
81
votes
11answers
17k views

How bad is it really to install Linux on one big partition?

We will be running CentOS 7 on our new server. We have 6 x 300GB drives in raid6 internal to the server. (Storage is largely external in the form of a 40TB raid box.) The internal volume comes to ...
81
votes
8answers
12k views

How can a single disk in a hardware SATA RAID-10 array bring the entire array to a screeching halt?

Prelude: I'm a code-monkey that's increasingly taken on SysAdmin duties for my small company. My code is our product, and increasingly we provide the same app as SaaS. About 18 months ago I moved ...
80
votes
13answers
23k views

Are networks now faster than disks?

This is a software design question I used to work on the following rule for speed cache memory > memory > disk > network With each step being 5-10 times the previous step (e.g. cache ...
80
votes
6answers
155k views

Boot and Install Windows from a USB thumb drive

Installing Windows from a thumb drive is vastly superior to burning a copy to a DVD which will fill some landfill somewhere with toxic stuff. Not to mention it's about 50x faster to install Windows ...
80
votes
4answers
14k views

Why is TCP accept() performance so bad under Xen?

The rate at which my server can accept() new incoming TCP connections is really bad under Xen. The same test on bare metal hardware shows 3-5x speed ups. How come this is so bad under Xen? Can you ...
79
votes
3answers
49k views

What is archive mode in rsync?

I know you can use -a or --archive to activate archive mode when using rsync. Unfortunately, I have no idea what archive mode is supposed to do, and the man page is not at all explicit about what this ...
79
votes
2answers
24k views

Amazon EC2 terminology - AMI vs. EBS vs. Snapshot vs. Volume

I have been poking around Amazon EC2, and am a little confused on some of the terminology. Specifically with regard to AMI, snapshots and volumes, and an EBS Please correct me if I am wrong, or fill ...
79
votes
5answers
30k views

How do you do load testing and capacity planning for web sites?

This is a canonical question about capacity planning for web sites. Related: Can you help me with my capacity planning? How do you do Load Testing and Capacity Planning for ...
79
votes
8answers
39k views

Heartbleed: how to reliably and portably check the OpenSSL version?

I was looking at a reliable and portable way to check the OpenSSL version on GNU/Linux and other systems, so users can easily discover if they should upgrade their SSL because of the Heartbleed bug. ...
78
votes
17answers
47k views

Should network hardware be set to “autonegotiate” speeds or fixed speeds?

We recently had a little problem with networking where multiple servers would intermittently lose network connectivity in a fairly painful-to-resolve way (required hard reboot). This has been going on ...
77
votes
13answers
31k views

Is Ping a reliable way to check if a server is available?

In my application I am pinging a server and waiting for a response. I am using this to determine whether the server is available and responsive or not. Is this a reliable way of determining ...
77
votes
6answers
38k views

Fighting Spam - What can I do as an: Email Administrator, Domain Owner, or User?

This is a Canonical Question about Fighting Spam. Also related: How to stop people from using my domain to send spam? What are SPF records, and how do I configure them? There are ...
76
votes
8answers
78k views

How much network latency is “typical” for east - west coast USA?

At the moment we're trying to decide whether to move our datacenter from the west coast to the east coast. However, I am seeing some disturbing latency numbers from my west coast location to the east ...
76
votes
2answers
76k views

How do VLANs work?

What are VLANs? What problems do they solve? I'm helping a friend learn basic networking, as he's just become the sole sysadmin at a small company. I've been pointing him at various questions/answers ...
76
votes
6answers
47k views

What does 'set -e' do, and why might it be considered dangerous?

This question has appeared on a pre-interview quiz and it's making me crazy. Can anyone answer this and put me at ease? The quiz has no reference to a particular shell but the job description is for a ...
75
votes
10answers
43k views

How to create a UUID in bash?

In Java it is possible to create a random UUID: UUID uuid = UUID.randomUUID(); How to do this in Bash?
75
votes
4answers
168k views

How to make Windows 7 USB flash install media from Linux?

I have: ISO image of Windows 7 install media 4 GB USB flash drive no DVD drive Linux installed
75
votes
9answers
59k views

Is it possible to detach a process from its terminal? (Or, “I should have used screen!”) [duplicate]

Possible Duplicate: Can I nohup/screen an already-started process? On Unix (specifically, Linux), I've started a job in a regular ssh->bash session. I'd like to leave work soon, but I now ...
75
votes
8answers
11k views

How to backup 20+TB of data?

We have a NAS server at the company I work for that is being used for storing photography sessions. Each session is approximately 100gb. Over the last couple of years this server has accumulated 10+ ...
75
votes
4answers
36k views

What is a glue record?

This is a Canonical Question about DNS glue records. What exactly (but briefly) is a DNS glue record? Why are they needed and how do they work?
75
votes
5answers
12k views

Tips for Securing a LAMP Server

This is a Canonical Question about Securing a LAMP stack What are the absolute guidelines for securing a LAMP server?
75
votes
3answers
111k views

Is there a way to view the members of an Active Directory group if you aren't a domain admin and can't log into to a domain controller?

Is there a way to view the members of an Active Directory group if you aren't a domain admin and can't log into to a domain controller?
75
votes
1answer
45k views

How do I change my private key passphrase?

I have an existing public/private key pair, the private key is password protected, the encryption may be either RSA or DSA. These keys are the kind you generate with ssh-keygen and generally store ...
74
votes
7answers
100k views

How to determine JAVA_HOME on Debian/Ubuntu?

On Ubuntu it is possible to have multiple JVMs at the same time. The default one is selected with update-alternatives. But this does not set the JAVA_HOME environment variable, due to a debian policy. ...
74
votes
3answers
96k views

How to add dependency on a Windows Service AFTER the service is installed

I have a Windows Service that makes use of a SQL Server database. I don't have control over the installation of the service, but would like to add a dependency on the service to ensure that it starts ...
74
votes
6answers
52k views

Top level domain/domain suffix for private network?

At our office, we have a local area network with a purely internal DNS setup, on which clients all named as whatever.lan. I also have a VMware environment, and on the virtual-machine-only network, I ...
74
votes
2answers
91k views

How do I add Access-Control-Allow-Origin in NGINX?

How do I set the Access-Control-Allow-Origin header so I can use web-fonts from my subdomain on my main domain? Notes: You'll find examples of this and other headers for most HTTP servers in the ...

15 30 50 per page