Tag Info

New answers tagged

1

Note: I think that there's a typo and sudo mkfs.xfs -f /dev/xvdf should read sudo mkfs.xfs -f /dev/xvdb. Both of the approaches that you described are valid. There's absolutely no need to create a partition on an EBS block storage. What actually holds the files are filesystems. When you issue a command like sudo mkfs.xfs -f /dev/xvdb you will create a ...


1

Here's my suggestion: /dev/sda [root disk] filesystem mounted at / /dev/sdb [data disk] filesystem mounted at /var/www or /www /dev/sdc [log disk] filesystem mounted at /var/log Separating your application data to another disk is a good decision. If for some reason, e.g. faulty distro upgrade, your root disk becomes unbootable you could still be able to ...


1

If all your EC2 instances are of the same type and in the same region, I don't think there is any way to know which one is covered an which one is not, because a reserved instance is just a billing concept. A reserved instance is never really assigned to a specific EC2 instance. AWS will look at how many instances you have running and how many reserved ...


0

In my case I'd set up a security group to allow port 22 connections from my IP only. Some days later my ISP has changed my IP address, hence the security group needs updating.


0

Make sure there is no leading space in '/dev/sda' For some reason copying text out of the aws console often attaches a space in front of the string. A very annoying side effect that had me spinning my wheels for 15 minutes trying to get the primary drive on my production server remounted. I tried all of these solutions before figuring that out.


2

That machine is up and responding on 22. Have you added your SSH key into your agent? ssh-add -l should show it listed. Don't forget to ssh as ubuntu@


1

You can now move the EIP from standard to vpc scope. Check out http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html#migrating-eip


0

Yes, now you can. Check out http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html#migrating-eip !!


0

The system time of the problem EC2 instance is off by several minutes. See http://stackoverflow.com/questions/18703486/aws-sdk-error-signature-not-yet-current This turned out to solve my problem!


0

In order to use a custom AMI with elastic beanstalk, you have to install cloud-init on your AMI and launch it automatically during boot. More information here: Using Custom AMIs


1

But what are exact minimal policies https://console.aws.amazon.com/iam/home?#policies that should be allowed for User for this (or any another specific) command? There is not a single "minimal" policy such as you ask with the exception of the "AdministratorAccess" policy which gives you the ability to do all commands. But having that much power is ...


0

I am having similar experiences with my website and i initially thought it was the certificate but the certificate's algorithm is in SHA-2. I finally discovered that the problem wasn't from Chrome but my avast mail shield blocking the certificate.


0

I suspected for a while that human eyes might be involved in the approval. sometimes it is 3-4 minutes, other times almost 10 minutes. if my job only takes 10 minutes that's half of the run time waiting for launch. It is also too long for an automated patrol, unless there is an asynchronous feed to a central point of control and transmission delays are ...


0

I have been trying this for a while now, and there are still a number of issues with EC2 spot instances and attached storage. The volume you want to attach may not be in the same zone as the instance ? Zones cannot be specified at launch. Internally attaching with the init script will work, but is a little asynchronous so you will need to test for it or ...


0

The IP address is not bound to your interface. You can add the address via PowerShell with this: New-NetIPAddress –InterfaceIndex 12 –IPAddress 10.0.0.254 -PrefixLength 24


2

Yes. I've removed my access/secret keys across Ansible and use IAM roles. Note you'll need some role permissions on the "server" and others on the destination boxes.


0

Fixed! I just needed to edit the directory with AllowOverride All, as per below: <Directory "/usr/share/drupal7"> AllowOverride All Require all granted </Directory>


0

This problem is caused by 2 Windows updates: KB3000850 KB2992611 To fix the problem: Uninstall these 2 updates. Confirm you can add new users. Install this update as a replacent for the above 2 updates: http://support.microsoft.com/kb/3000850 Confirm you can still add new users. Note: The above resolution was given to me by AWS Support when I ...


0

Route 53 health checks specifically support ELB instance health monitoring and failover. Once enabled, Route 53 automatically configures and manages health checks for individual ELB nodes. Route 53 DNS Failover is able to evaluate the health of the load balancer and the health of the application running on the EC2 instances behind it. In ...


0

1.Create a directory called .ebextensions under the root of your project. 2.Create a file called java.config in that directory and paste the below content. sources: /home/ec2-user: http://URL/MXB.jar commands: 01_java_start: cwd: /home/ec2-user command: nohup java -jar mxb.jar > foo.out 2> foo.err < /dev/null & ...


1

You need to write custom SSH commands which ill be executed when the instance in launched. Elastic beanstalk offers this feature. Read more here http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/customize-containers.html


-1

Amazon ELB is a SaaS offering and as a result it's very difficult to make recommendations without knowing the underlying technologies, so you should really use the Amazon support channels to get answers to these questions, However I would make the following suggestions about your implementation of the ELB: Spread your back-end instances across multiple ...


0

Found the solution, it actually was an issue with the metatags and not the configurations of the server nor SSL. Made some changes in the and tags as suggested in this link.


0

Migrating from Ansible to Salt is a 2-3 step process if you exclude all of the details such as writing new statefiles and defining minions and groups of servers in the top file, setting up pillar data and mine functions, and so on. Make a Salt-master server. Use Ansible to install salt-minion on your nodes. Accept minion keys, unless you set your master to ...


0

I filed a support ticket with AWS and the issue is no longer occurring. I believe they refreshed/fixed some of the packages.


2

Relevant post with some answers and a related bug report. https://askubuntu.com/questions/41605/trouble-downloading-packages-list-due-to-a-hash-sum-mismatch-error https://bugs.launchpad.net/ubuntu/+source/apt/+bug/972077 TLDR; 1) it's an issue with the amazon mirror and 2) this is a common workaround that is generally considered "ok" but annoying.


0

If you are trying to run a website on each private IP you have then in the Apache Virtual Host configuration you need to specify the Private IP that website should listen on. For example assuming you have the following scenario Elastic IP 1 -- Mapped to -- x.x.x.1 Private IP Elastic IP 2 -- Mapped to -- x.x.x.2 Private IP Site 1 -- using Elastic IP 1 as A ...


1

You cannot do a 'docker run' from the upstart, what you should do is create a container from a docker image, and then do 'docker start' in upstart. If you check /var/log/messages you will probably see something like: init: test_server main process (6570) terminated with status 1 init: test_server respawning too fast, stopped To work around it, try ...


1

I use a bunch of EC2 instances; I've also seen wide variance in how long the same job would take to complete - processing the same video again and again. Sometimes, two runs are very fast, variance less than 1%; other runs the variance is 5 to 10x! I've noticed that these issues occur more on our smaller instances. We have a few that are the M*.large or ...


2

depending on your instance type (burstable cpu instances), you may be dealing with CPU credit. ==> http://stackoverflow.com/questions/28984106/whats-is-cpu-credit-balance-in-ec2 if you find vast fluctuations on a non-burstable instance, you may want to stop and start (not reboot) instance. this will make the instance come up on a different hypervisor ...


2

Zoredache answered it quite well there. Answering the last question: You will be increasing the probability of failure in a big way since the failure of just one of the devices will make the whole virtual disk fail. That's why most of us use RAID 10.


2

You will need to set up ClassicLink to allow your classic EC2 instance to communicate with your new instance in the VPC. This has two steps: Edit the VPC to enable ClassicLink. Click your VPC in the list of VPCs, select Actions, then Enable ClassicLink. Attach the classic instance to the VPC. Click your old instance in the list of instances, select ...


1

You're probably hitting a bottleneck on the NAT instance. Driving 200 servers worth of large HTTP requests through the one server is probably taxing it too much (be it CPU or network bandwidth). Split your servers across multiple subnets with multiple NAT instances, or put them in a public subnet with direct networking to S3 rather than via a NAT.


0

The detailed billing reports have much more information, although if you're asking "which URLs are consuming the most bandwidth" then the detailed reports won't answer that. Assuming you serve HTTP, if you what to know which requests are using the most bandwidth then you'll need to analyse your HTTP access logs. Personally I have my HTTP access logs go to ...


2

CloudFormer and CloudFormation would be good tools for this. CloudFormer lets you create AWS CloudFormation templates from resources that are already existing in your account. These generated templates are basically just JSON that expresses each type of resource that CloudFormer examined. You can then take the generated template as a base, tweak the ...


2

In fact, the problem is simple: your JAMES server is running in an instance that's probably geographically far from where you usually are when you log in to your Gmail account, so it appears to Google like someone is trying to break into your account (after all, how can you be logging in from California and Virginia within a couple of hours of each other?). ...


1

Well, the obvious thing is to throw a small transcoding job at the instance and see how it performs. You can set a low bound on performance and if the instance doesn't match up, kill it and redeploy. As an aside, have you considered using their Elastic Transcoding service?


0

I had a similar frustrating problem when I installed JetBrains YouTrack on a Windows Server 2012 ec2 instance. What worked for me was opening the Windows firewall ports that java was using specifically and disabling the World Wide Publishing service port. I also had to run the YouTrack service under the LocalSystem account instead of the default account. ...


0

The solution is in tuned, as pointed out by @michael-hampton. The tricky part is that the vm plugin can only configure the /sys/kernel/mm/transparent_hugepage/enabled setting. To disable the /sys/kernel/mm/transparent_hugepage/defrag setting too, I had to create a script that is called by the profile on start. At the end, the complete solution is: step 1: ...


2

In addition to setting the grub command line, you also need to configure tuned. But not using the instructions you linked to, as they are so full of errors it would take half a day just to explain them all. Create a custom tuned profile (which I'll call custom), and then set the profile. You will base it on an existing profile, such as virtual-guest if you ...


-1

EDIT: the reply above is wrong, because the transparent huge page knobs are missing from sysctl at the moment. Sorry for the noise. You can put the desired values in /etc/sysctl.conf. From sysctl.conf(5) man page: SYSCTL.CONF(5) File Formats ...


-3

try using malwarebytes or trojan killer instead


0

Check your Windows Firewall to make sure port 80/443 is open. Windows doesn't create rules automatically for IIS.


0

With the Access, and Secret key you can use the api based tools (cli. powershell, boto) to perform some actions at the instance level but you won't be able to ssh into it without the key generated (or selected) at the instance's launch time.


1

No, you will need the private key that matches the public key that was deployed to the instance when it was created.


0

I had to make changes for SELinux, my instance was RHEL6. setsebool httpd_can_network_connect=1 setsebool httpd_can_network_connect_db on What I found odd was that SELinux logged nothing unusual to /var/log/audit/audit.log


3

A default Windows instance based on modern AMI images is 30 GB. This is smaller than the old default of 35 GB. Under the free-tier, you can get 30 GB of EBS volume space each month. But you can have more EBS volume space if you want; you'll just pay for any extra. Once the volume is full, the volume cannot be resized. However, there are 2 options that you ...


2

Spot instances requests are a type of EC2 resource. The AWS documentation notes that this type of resource can be tagged, but the resulting tags are not carried over to the actual instances: The tags that you create for your Spot Instance requests only apply to the requests. These tags are not added automatically to the Spot Instance that the Spot ...


0

In my case, I use the public key password to login Windows server, have you checked the key pair of security group and vm instance?


1

You don't go into detail on how you're logging in but if you're copying, and pasting the password using the mouse login often fails. Your answer describes a work-around but there is a hot-fix available for Windows 7 here: https://support.microsoft.com/en-us/kb/2547752



Top 50 recent answers are included