Tag Info

Hot answers tagged

29

Most Linuxes these days should perform a forced fsck at boot time when the file /forcefsck is present on the system. If you are at liberty to reboot the VM, run touch /forcefsck Then reboot at your convenience


26

For our ec2 ubuntu instance, the above answers did not work completely. On Ubuntu, by default, the check is not enabled in the rcS file. So Edit rcS file sudo vi /etc/default/rcS below the line #FSCKFIX=no Add FSCKFIX=yes Then do as suggested above. sudo touch /forcefsck Reboot from ec2 console. Delete the line FSCKFIX=yes to get back rcS ...


14

Your certificate is using the outdated SHA-1 algorithm, which because of security risks Google Chrome now warns about. http://googleonlinesecurity.blogspot.com/2014/09/gradually-sunsetting-sha-1.html https://community.qualys.com/blogs/securitylabs/2014/09/09/sha1-deprecation-what-you-need-to-know https://shaaaaaaaaaaaaa.com/check/aws.hatchlings.com ...


10

You should not be sharing these keys. Period. Each user should generate their own SSH keypair and their public key should be deployed to each system they need access to. Private keys are named as they are for a reason - they should be private to each user, generated by them, protected with a passphrase, and kept in a secure location on that user's ...


8

How would this be setup connection wise without forcing all traffic through the domain controller? With site to site VPNs. You'd set up your cloud assets as a site, and then establish a site-to-site VPN between your cloud site and each of your physical sites. An alternate option, that Microsoft uses, but is generally ill-advised (unless you really, ...


7

This is due to a limitation of RPM/YUM on Amazon Linux, and the way that the multiple versions of php are packaged. One of the features of Amazon Linux is that there are multiple versions of several languages and other opensource software packages. In many cases these packages have to conflict with one another, as the software is not designed to be installed ...


7

Amazon run on Xen, which provides Para-virtualization (PV) or Hardware-assisted virtualization (HVM). Para-virtualization used to be the recommended choice, as it gave you better performance (with a much closer integration to the virtualization host, through patched specialized kernels/drivers on both the host and the guest). Hardware-assisted ...


7

This is clearly a bug in the software computing the traffic rate. You need to show the image to the vendor of the software, which produced the graph. That's the only way, you are going to get an answer as to what happened. Probably some negative number showed up where a positive number was expected, and wrapped around to around 18EB. Use that erroneous ...


7

I have done this, please read my article before you actually do this here: http://neonos.net/white-labeled-dns-name-servers-on-amazon-route-53-with-delegation-sets/ The functionality has been programmed by Amazon in Nov 2014, however it has not been implemented in the web based console, hopefully they will do this soon. There is also no documentation or ...


6

If your VPC EC2 instances are in private subnets, then to access EC2-Classic, your VPC will need a NAT. Give your NAT an elastic IP address so it's a constant public IP address. Then in your RDS security group, allow access only for that Elastic IP address. If your VPC EC2 instances are in public subnets, then you could give each of them elastic IP ...


6

Since you cannot boot into live disc, this is may sounds a bit weird, but i guess it'll do the job) high level: boot into new (another) instance. attach storage from old instance to new (current). run fsck. detach storage from new (current) and reattach it to old instance.


6

Using a VPC will solve a lot of your problems, as private IP addresses will be static there. Amazon is strongly encouraging people to move to VPC for reasons like this. Once you have one, your two systems should be able to talk over the AWS-internal network. To answer your question about exposure along the aws-public <---> aws-public route, it is ...


6

You want to setup NTP. See: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/set-time.html Extra content here.


6

No, t1.micro uses PV instances. Use t2.micro for an HVM instance.


6

Is S3 a proper choice to keep live linux user home directories? Amazon has announced their EFS service, which is exactly what you need for this. Either use EFS or roll your own NFS server for home directories.


5

This log has two important lines Mar 7 03:37:32 ip-179-45-37-216 postfix/smtp[24973]: connect to ASPMX.L.GOOGLE.com[2607:f8b0:400e:c02::1b]:25: Network is unreachable Mar 7 03:37:34 ip-179-45-37-216 postfix/smtp[24973]: 92963C1550: to=<anthony@work.com>, relay=ASPMX.L.GOOGLE.com[74.125.28.27]:25, delay=1.8, delays=0.09/0/0.17/1.5, dsn =2.0.0, ...


5

The first problem isn't on your instance at all... it's your terminal, which isn't correctly configured for utf-8, so you're seeing characters other than what's supposed to be displayed. Googling ΓΆΓΆ linux will find many examples of this, such as https://bugzilla.redhat.com/show_bug.cgi?id=517447 The second problem is that you are confusing volumes (disks) ...


5

Yes there is! Embrace the power of DNS eventual consistency. Set up an ELB, point it at your instance. Update the A record for your public instance with a CNAME for the ELB. Wait a week. Associate an Elastic-IP with the instance. Update the CNAME record for your app with a new A record for the EIP. Wait a week. Turn off the ELB. For the two weeks of ...


5

Supposedly this is supported now https://aws.amazon.com/blogs/aws/route-53-update-private-dns-more Reusable Delegation Sets When you use Route 53 to host DNS for a domain, it sets up four authoritative name servers collectively known as a delegation set. As part of today's release we are simplifying domain management by allowing you to use the same ...


5

The answers here seem to be missing a few steps prior to re-sizing specially for people who are changing their EBS volume size. If you have used a snapshot to create the EBS or with certain AMIs you will need to extend the disk (xvda), extend the partition (xvda1), then extend the filesystem (/). If I'm reading this correctly, your disk looks like this: ...


5

Turns out EC2 was blocking the forwarded packets from the OpenVPN server. There is a setting on the EC2 Dashboard under Network & Security -> Network Interfaces -> Actions -> Change Source/Dest. Check. When I disabled this on all my instances traffic through the VPN is flowing as intended. Hopefully this will help someone else.


5

I noticed you're using the db.micro instance. As with EC2, the micro instances are designed to be budget-friendly, but at a cost of performance. That said, you'll get a much worse performance when loading these types of servers versus the normal instances because the CPU time is given to the instance "last" compared to other instances sharing the same ...


5

Amazon announced ClassicLink literally just yesterday. I haven't had time to try it out yet so I'm not sure exactly what it's capable of but from that blog post: You can now enable this feature for any or all of your VPCs and then put your existing Classic instances in to VPC security groups. It sounds like this feature might be ideally suited to ...


4

This is by design. You will need to re-associate the EIP when starting your instance.


4

If it's genuinely a new instance, you likely have an autoscaling group and launch configuration set up. Check those sections of the console. If it's the same instance ID, your termination command is failing for some reason. If no error is being shown in the console, contact AWS Support.


4

Did you run out of physical memory or did you run out of backing store? If the latter, swap would have let your system continue to operate normally even without any data being written to it! "[I]s there a reason I might not want to enable swap if I don't need it for normal operation?" Yes. Having swap available is necessary for the OS to make efficient use ...


4

*.example.com covers all subdomains of example.com, but not example.com itself. You need a second DNS record.


4

Use a dynamic DNS service. Get a hostname for each site. configure VPN connections to use hostname for each connection instead of the sites IP address (Since you said its dynamic and subject to change) The dynamic DNS service should come with an application that monitors for an IP address change, and updates the hostname record automatically.


4

You can set up a bastion host to connect to any instance within your VPC: http://blogs.aws.amazon.com/security/post/Tx3N8GFK85UN1G6/Securely-connect-to-Linux-instances-running-in-a-private-Amazon-VPC You can choose to launch a new instance that will function as a bastion host, or use your existing NAT instance as a bastion. If you create a new instance, ...


4

Looks like you have partitioned that block device. In this case, you need to mount /dev/xvdf1, not just /dev/xvdf.



Only top voted, non community-wiki answers of a minimum length are eligible