Tag Info

Hot answers tagged

3

Did you expand the storage at any point? It looks like the file system wasn't resized when the underlying storage was increased. For ext3/ext4 you would use resize2fs to grow the file system. For XFS you would use grow_xfs. More information.


2

Amazon run on Xen, which provides Para-virtualization (PV) or Hardware-assisted virtualization (HVM). Para-virtualization used to be the recommended choice, as it gave you better performance (with a much closer integration to the virtualization host, through patched specialized kernels/drivers on both the host and the guest). Hardware-assisted ...


2

Hosting Active Directory (AD) off-site is a pretty atypical configuration, even with the most current versions of Windows. You're not going to find a lot of people who recommend it. From a security perspective, AD wasn't designed with the threat model of being directly exposed to the Internet. You're going to need some kind of secure tunnel from clients to ...


2

DNS resolution. Pass the -n option to iptables to disable DNS resolution when listing your rules (ie iptables -nvL). I doubt this is breaking anything. The DNS resolution is only performed when the rules are displayed, supposedly for your convenience, but I have no idea who actually finds this useful.


2

A snapshot will first reboot the instance (optional, but default) to prevent issues with data corruption. You should be fine - they recommend a manual shutdown so you can determine when it's OK to do so rather than it happening without warning. Once the snapshot is initiated you can start the instance back up at will.


2

After you launch an instance in EC2-Classic, you can't change its security groups. The same does not apply to VPC (Amazon EC2 Security Groups). You could try creating AMI from current instance and then launch new instance with appropriate security groups.


2

When you install Windows Server 2012, you have to choose between the Standard and the Datacenter edition; the installation image is exactly the same, hence the single available download on MSDN. The two editions are technically identical, only the licensing is different (a Datacanter edition, when used as a Hyper-V virtualization host, allows running ...


2

I'm doing something similar - with a laravel install in the home directory of the ec2-user so that when I want to update the site, I can do so without root permissions. The crucial bit, or the part that got me stuck was that you need to allow directory execute access to the home directory of the ec2-user. Not doing this caused me quite some time wondering ...


2

I would suggest avoiding NFS shares as they create a single point of failure for your system and NFS clients may sometimes have trouble recovering from NFS server downtime. NFS is not really the "cloud way" of doing things. The AWS way of doing data sharing between virtual machines involves the use of various decentralized AWS services. For this particular ...


2

This is due to a limitation of RPM/YUM on Amazon Linux, and the way that the multiple versions of php are packaged. One of the features of Amazon Linux is that there are multiple versions of several languages and other opensource software packages. In many cases these packages have to conflict with one another, as the software is not designed to be installed ...


1

Check CloudWatch monitoring to see what the CPU as doing. If the CPU was max'ed out, you would not have been able to make a HTTP or SSH connection. If you're running something like Wordpress on an EC2 instance, prolonged CPU spikes are common.


1

It makes more sense to add new EBS volumes, and mount them in the locations you want as opposed to partitioning a small root drive. Remember that the ephemeral storage you get (/mnt) is ephemeral, meaning it is not persistent if there is a reboot for whatever reason.


1

A root volume in Amazon EC2 is not the same as a root volume anywhere else, so assuming that you can manipulate it in the same way as a root volume on server in a rack in your Comms Room will get you into trouble If you want to separate volumes in your server instance, add an EBS volume to it, create a partition on it using fdisk, create a file system on it ...


1

Once you create a host from an AMI you can create a snapshot of the volume (should be done before starting the instance to avoid having irrelevant state on the disk), and create a new AMI from that snapshot. Then you have your own AMI with the same contents. As for which one to choose, there are only two 14.04 images available: EBS (presumably PV) and HVM. ...


1

You should instead use a version of SQL Server that is still supported. Also, SQL Server 2005 is not supported on Windows Server 2012. Sorry. If, for whatever reason, you have to have 2005, you'll need Windows server 2008 or 2008 R2. You'll have to copy the installer onto the Amazon EC2 instance and install it over remote desktop.


1

ppk format keys are for putty only. For OpenSSH you need to use OpenSSH format keys. http://unix.stackexchange.com/questions/74545/what-difference-between-openssh-key-and-putty-key


1

Looks like you have partitioned that block device. In this case, you need to mount /dev/xvdf1, not just /dev/xvdf.


1

You may install an ec2 Windows Server instance inside of your VPC network, setup there PPTP VPN (or any other, but PPTP would be better if you're using Windows). If you'll have all these instances in one subnet, you may establish VPN connection from outer client to your VPN server, and after that you may establish RDP connections to other Windows instances, ...


1

If you want to limit editing to a single security group, I think that you need 2 statements, the following worked for me: { "Version": "2012-10-17", "Statement": [ { "Sid": "Stmt1413232782000", "Effect": "Allow", "Action": [ "ec2:DescribeInstanceAttribute", "ec2:DescribeInstanceStatus", ...


1

When adding an instance to a layer in OpsWork, the Existing tab will show existing instances that are already defined in another layer in your stack. This might be useful if you had a web server layer and an app server layer and wanted the same EC2 instance to act as both the web server and the app server. The Existing tab will not show any EC2 instances ...


1

Programatically, in ruby, given an openssh-format public key in file : require 'net/ssh/authentication/agent' require 'net/ssh/key_factory' require 'openssl' OpenSSL::Digest.new('md5',Net::SSH::KeyFactory.load_public_key(<pubkey>).to_der).hexdigest


1

Be careful with your code. I had once changed to a 32-bit instance and had problems. In my code I was typecasting the facebook ids to int. So in a 64-bit it was fine. But when I downgraded, this resulted in wrong FB ids. In your case its an upgrade. So you shouldn't be facing this issue.


1

If you can create a script (on the Puppet master) that will print the name (likely through calls to the AWS CLI), you can use the generate function to use the name in your Puppet manifests and templates. You can add this call right in your site.pp file. $rds_internal_name = generate('/usr/local/sbin/get-rds-internal-name')


1

If your upload speed is generally pretty good, then it looks to be a slow upload to amazon, so using any sort of third party in the middle my help your speed, say uploading to and FTP site, then downloading from Amazon, which should be quicker than upload. Yes it involves an extra step, but it may make it quicker in the long run.


1

The statement "Security Group settings do not affect internal IPs " is incorrect. You have to add the inbound traffic to the security group for the private IP, just like an external IP. I had to add entries from a specific private IP so that I could allow one instance to conenct to another using subversion, CouchDB, map a network drive, etc. However, ping ...


1

The easiest way to provide your access keys to the Amazon EC2 CLI is to set the AWS_ACCESS_KEY and AWS_SECRET_KEY environment variables. First, add the following lines to ~/.bashrc and save the file. export AWS_ACCESS_KEY=your-aws-access-key-id export AWS_SECRET_KEY=your-aws-secret-key After you've updated ~/.bashrc, run the following command: source ...


1

/opt/aws/bin/ec2-metadata -p will print the public hostname of that instance. You can write a script that loops through all your $PATH and find the location of ec2-metadata if it is not at the location I have mentioned.


1

In addition to the other answers. The aws_ssh_key_id must be one of the 'key pair names' registered with your AWS account. This usually corresponds with your ssh key file name, but it can differ. You can see these aws ec2 'Key pair name' values in the EC2 'Network & Security -> Key Pairs' screen. If you are using AWS CLI, you can also look at the ...


1

Why Amazon SES threw that error when sending email? For example, you have verified your domain example.com. Now, someone@yahoo.com send email to myaccount@example.com. Postfix gladly accepted it and because of alias file, postfix will forward it to otheraccount@gmail.com. The problem is, postfix use someone@yahoo.com as envelope sender in SMTP ...


1

I was receiving this error because of selecting the wrong AKI id while launching the instance. As soon as i selected the correct id, this error disappeared and instance started working fine.



Only top voted, non community-wiki answers of a minimum length are eligible