Tag Info

Hot answers tagged

21

Most Linuxes these days should perform a forced fsck at boot time when the file /forcefsck is present on the system. If you are at liberty to reboot the VM, run touch /forcefsck Then reboot at your convenience


20

AWS EC2 shows the SSH2 fingerprint, not the OpenSSH fingerprint everyone expects. It doesn't say this in the UI. It also shows two completely different kinds of fingerprints depending on whether the key was generated on AWS and downloaded, or whether you uploaded your own public key. Fingerprints generated with ssh-keygen -l -f id_rsa will not match ...


9

For our ec2 ubuntu instance, the above answers did not work completely. On Ubuntu, by default, the check is not enabled in the rcS file. So Edit rcS file sudo vi /etc/default/rcS below the line #FSCKFIX=no Add FSCKFIX=yes Then do as suggested above. sudo touch /forcefsck Reboot from ec2 console. Delete the line FSCKFIX=yes to get back rcS ...


8

From the AWS Developer Forum post on this topic: Try stopping the broken instance, detaching the EBS volume, and attaching it as a secondary volume to another instance. Once you've mounted the broken volume somewhere on the other instance, check the /etc/sshd_config file (near the bottom). I had a few RHEL instances where Yum scrogged the ...


8

How would this be setup connection wise without forcing all traffic through the domain controller? With site to site VPNs. You'd set up your cloud assets as a site, and then establish a site-to-site VPN between your cloud site and each of your physical sites. An alternate option, that Microsoft uses, but is generally ill-advised (unless you really, ...


7

The EC2 monitoring documentation suggests a method of doing this by installing the Monitoring Scripts for Amazon EC2 Instances and then configuring a cron job to gather the data and reprt back.


7

This is due to a limitation of RPM/YUM on Amazon Linux, and the way that the multiple versions of php are packaged. One of the features of Amazon Linux is that there are multiple versions of several languages and other opensource software packages. In many cases these packages have to conflict with one another, as the software is not designed to be installed ...


7

This is clearly a bug in the software computing the traffic rate. You need to show the image to the vendor of the software, which produced the graph. That's the only way, you are going to get an answer as to what happened. Probably some negative number showed up where a positive number was expected, and wrapped around to around 18EB. Use that erroneous ...


7

VPC does not make any difference in latency. The main thing you can consider if you need especially low latency is using placement groups. There are some limitations on which instance sizes support this, but if you use them, you are guaranteed very low-latency interconnects on the EC2 10Gbps network.


6

Using a VPC will solve a lot of your problems, as private IP addresses will be static there. Amazon is strongly encouraging people to move to VPC for reasons like this. Once you have one, your two systems should be able to talk over the AWS-internal network. To answer your question about exposure along the aws-public <---> aws-public route, it is ...


6

No, t1.micro uses PV instances. Use t2.micro for an HVM instance.


6

You want to setup NTP. See: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/set-time.html Extra content here.


6

If your VPC EC2 instances are in private subnets, then to access EC2-Classic, your VPC will need a NAT. Give your NAT an elastic IP address so it's a constant public IP address. Then in your RDS security group, allow access only for that Elastic IP address. If your VPC EC2 instances are in public subnets, then you could give each of them elastic IP ...


5

If you are trying to mange crontabs programmatically, just create a file in /etc/cron.d/ for example, /etc/cron.d/example-cron, and populate it with the aforementioned lines: @daily ubuntu /home/ubuntu/db-backup-to-s3-daily.sh @hourly ubuntu /home/ubuntu/db-backup-to-s3-hourly.sh The only difference is that you have to include a user to run the cron as, ...


5

Supposedly this is supported now https://aws.amazon.com/blogs/aws/route-53-update-private-dns-more Reusable Delegation Sets When you use Route 53 to host DNS for a domain, it sets up four authoritative name servers collectively known as a delegation set. As part of today's release we are simplifying domain management by allowing you to use the same ...


5

Came across the same issue with Server version: Apache/2.4.6 As per the documentation at [1], "In 2.4.5 and later, SSLProxyCheckPeerCN has been superseded by SSLProxyCheckPeerName, and its setting is only taken into account when SSLProxyCheckPeerName off is specified at the same time." So adding following entry did the trick.. SSLProxyCheckPeerName off ...


5

TLDR: ec2-register -a x86_64 -d '3.15.7-200.fc20.x86_64' -n 'Fedora_20_HVM_AMI' --sriov simple --virtualization-type hvm -s snap-b44feb18 --root-device-name /dev/sda1 Detailed steps: Answering further based upon Jeff Strunk's response to simplify the steps and giving a bit more details on the ec2 register image: Create Instance using PV Image. Make / ...


5

Provide your script via "user-data" during your launch process and it will be executed upon first boot. If you're using awscli, use the --user-data option" $ aws ec2 run-instances --image-id ami-xxxxxxxx --count 1 --instance-type m1.small --key-name foo-key --security-group-ids sg-xxxxxxxx --subnet-id subnet-xxxxxxxx --placement AvailabilityZone=us-west-2a ...


5

Since you cannot boot into live disc, this is may sounds a bit weird, but i guess it'll do the job) high level: boot into new (another) instance. attach storage from old instance to new (current). run fsck. detach storage from new (current) and reattach it to old instance.


5

Amazon announced ClassicLink literally just yesterday. I haven't had time to try it out yet so I'm not sure exactly what it's capable of but from that blog post: You can now enable this feature for any or all of your VPCs and then put your existing Classic instances in to VPC security groups. It sounds like this feature might be ideally suited to ...


5

The first problem isn't on your instance at all... it's your terminal, which isn't correctly configured for utf-8, so you're seeing characters other than what's supposed to be displayed. Googling ΓΆΓΆ linux will find many examples of this, such as https://bugzilla.redhat.com/show_bug.cgi?id=517447 The second problem is that you are confusing volumes (disks) ...


5

Your certificate is using the outdated SHA-1 algorithm, which because of security risks Google Chrome now warns about. http://googleonlinesecurity.blogspot.com/2014/09/gradually-sunsetting-sha-1.html https://community.qualys.com/blogs/securitylabs/2014/09/09/sha1-deprecation-what-you-need-to-know https://shaaaaaaaaaaaaa.com/check/aws.hatchlings.com ...


4

To do this, you'll need to configure an ELB that balances TCP, not HTTPS. If you do this, it will not ask you for a certificate.


4

Yes there is! Embrace the power of DNS eventual consistency. Set up an ELB, point it at your instance. Update the A record for your public instance with a CNAME for the ELB. Wait a week. Associate an Elastic-IP with the instance. Update the CNAME record for your app with a new A record for the EIP. Wait a week. Turn off the ELB. For the two weeks of ...


4

An SSL certificate depends on the IP address of host too, right (besides the hostname)? No, only the Hostname ("DNS-Name") is relevant for a X.509 certificate and the Application Layer. Such a certificate has a field called Common Name (CN) which holds the domain name (which also apprears in the address bar of your browser). The browser validates the ...


4

Don't use Amazon Linux. The Puppet Labs Apache module is not compatible with Amazon Linux. You will need to use one of the distributions which it is compatible with, or create your own Puppet module.


4

*.example.com covers all subdomains of example.com, but not example.com itself. You need a second DNS record.


4

Use a dynamic DNS service. Get a hostname for each site. configure VPN connections to use hostname for each connection instead of the sites IP address (Since you said its dynamic and subject to change) The dynamic DNS service should come with an application that monitors for an IP address change, and updates the hostname record automatically.


4

This log has two important lines Mar 7 03:37:32 ip-179-45-37-216 postfix/smtp[24973]: connect to ASPMX.L.GOOGLE.com[2607:f8b0:400e:c02::1b]:25: Network is unreachable Mar 7 03:37:34 ip-179-45-37-216 postfix/smtp[24973]: 92963C1550: to=<anthony@work.com>, relay=ASPMX.L.GOOGLE.com[74.125.28.27]:25, delay=1.8, delays=0.09/0/0.17/1.5, dsn =2.0.0, ...


4

This is by design. You will need to re-associate the EIP when starting your instance.



Only top voted, non community-wiki answers of a minimum length are eligible