Tag Info

New answers tagged

0

You need to point to an inventory file (even an empty one), because the playbook only says which hosts the play applies to, but does not provide the means to define such list, the inventory does. Luckily, localhost is available by default: $ cat playbook.yml --- - hosts: localhost connection: local gather_facts: no tasks: - shell: echo foo $ ...


0

I was wondering if AWS Route 53 offers the creation and removal of sub-domains using an API call that I can generate from my backend. You can definitely use the Route 53 API to create sub-domains, but you don't actually need to. (e.g. USERNAME.mywebapp.com) To support this you only need a *.mywebapp.com wildcard DNS record, as opposed to an ...


0

So the answer about another process using port 80 or 443 or something is probably correct more or less, but this looks like a classic mistake which I thought I'd share. You should never ever kill -9 pidof httpd or otherwise kill apache abruptly. If you do, you will get that error until the system kills all the remaining tcp connections to/from port 80. Try ...


0

With the Access, and Secret key you can use the api based tools (cli. powershell, boto) to perform some actions at the instance level but you won't be able to ssh into it without the key generated (or selected) at the instance's launch time.


1

No, you will need the private key that matches the public key that was deployed to the instance when it was created.


0

Depending on what access level you have to your hosting environment and if you are running an Apache web server you may also be able to use Apache VHosts service. See this article: domain redirection with virtualhost


0

AWS has separate security groups for VPC and non-VPC instances, so you need to somehow find out if you are on VPC or not (just go to VPC console and check if you see your instances there) and then make sure security groups you have created are in the same context. Then you can just add security Group A to Security group B as trusted and do the opposite too. ...


2

Assuming OpenSSH on Linux/MacOS. Putty likely offers something similar. Tell your users to use the ProxyCommand in their ~/.ssh/config files: cat ~/.ssh/config Host !bastion.example.com *.example.com ProxyCommand ssh -q -a user@gateway.example.com nc %h %p IdentityFile ~/.ssh/id_rsa If you then try to connect to test.example.com, ssh will ...


0

(1) you can check to see if your instance is in a VPC via the AWS console. In the EC2 dashboard, you can select your instance, then in the Description tab, on the left hand column, there is a VPC ID field. If this is blank, you are in EC2-classic. (2) You cannot access the public IP of an instance from within another instance in EC2 unless that port is ...


1

If you cannot modify the security settings of the running instances, they are NOT launched into a VPC. Even for instances not in VPC, EC2 launches them into private networks which are interconnected. So you should specify the private IP address of instance B in the security group of instance A.


2

Spot instances requests are a type of EC2 resource. The AWS documentation notes that this type of resource can be tagged, but the resulting tags are not carried over to the actual instances: The tags that you create for your Spot Instance requests only apply to the requests. These tags are not added automatically to the Spot Instance that the Spot ...


0

Based on modifications I saw in pull request 384 I modified the cookbook to lock both the 'mongo' and 'bson_ext' versions to 1.x and that fixes it for me (pessimistically allowing 1.x didn't work). attributes/default.rb # install the mongo and bson_ext ruby gems at compile time to make them globally available # TODO: remove bson_ext once mongo gem ...


0

In my case, I use the public key password to login Windows server, have you checked the key pair of security group and vm instance?


1

You don't go into detail on how you're logging in but if you're copying, and pasting the password using the mouse login often fails. Your answer describes a work-around but there is a hot-fix available for Windows 7 here: https://support.microsoft.com/en-us/kb/2547752


0

Well, from the API, you can obtain the AMI ID it was launched with, then by looking at the AMI metadata, you can determine which OS it is and therefore what username you should use.


0

That policy statement won't grant you full privileges on the bucket prefix. The section: { "Effect": "Allow", "Action": ["s3:"], "Resource": [ "arn:aws:s3:::scrape-pool/daily/" ] } Should look like (adding a *): { "Effect": "Allow", "Action": ["s3:*"], "Resource": [ "arn:aws:s3:::scrape-pool/daily/" ] } This will grant you full S3 permissions on that ...


2

You cannot specify the private IP in an Auto Scaling Group, but there is a way to accomplish the same goal. Use a userdata script to attach the same EIP to the instance upon launch. You can then use the public DNS of the EIP as the remote host for your NFS clients. When the NFS clients use DNS to perform a lookup on the public DNS of the NFS server, they ...


1

I recommend using S3 Usage Report for large buckets, see my How To on how to get it Basically you need to download Usage Report for S3 service for the last day with Timed Storage - Byte Hrs and parse it to get disk usage. cat report.csv | awk -F, '{printf "%.2f GB %s %s \n", $7/(1024**3 )/24, $4, $2}' | sort -n


1

Permissive. According to AWS here: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html#security-group-rules "If there is more than one rule for a specific port, we apply the most permissive rule. For example, if you have a rule that allows access to TCP port 22 (SSH) from IP address 203.0.113.1 and another rule that allows access ...


1

This is a more updated answer for AWS EC2 users as of April 2015: As of Amazon Linux AMI 2015.03, Python 2.7 or Python 3 is supported directly by Amazon by default. Python 2.6, 2.7, and 3.4 can be installed simultaneously and are managed by the alternatives command. All of this is documented clearly on the top half of: ...


0

When I copied the password from the dialog on AWS, and pasted it into the Remote Desktop session on my local machine, it didn't work. I had to type it out.


0

Okay, I guess 0.0.0.0/0 meant I opened the port up to the world for each port forwarded. I just edited security and chose "My IP" for each rule.


0

If you don't want to use the command-line, on Windows and OSX, there's a general purpose remote file management app called Cyberduck. Log into S3 with your access/secret key pair, right-click on the directory, click Calculate.


1

Yes, you can setup your Sage software installation on Google Cloud. For connecting your current LAN infrastructure or local drives to your Cloud server, you can use Google Compute Engine VPN as described in this article: https://cloud.google.com/compute/docs/vpn


0

I had the same issue and figured out that the root problem is because Ubuntu does not automatically register the new network interface as plug and play. You can confirm this using $ ifconfig . Even upon reboot it still does not see the new ENI, you need to manually create it to make it work. Step 1, create a new .cfg file for eth1: ...


1

AWS has a variety of different storage options. Off the top of my head these include: Local magnetic disks (ephemeral storage) Local SSD's EBS (essentially SAN/NAS) EBS with Provisioned IOPS AWS has a lot of different options for you, including the ability to pay them more for better IO performance. You can also get high IO performance using SSD's ...


1

You said: My sshd_config file has two changes from the default UsePAM was set to no and PasswordAuthentication was set to yes. I don't think that had anything to do with it. Actually that almost certainly is your problem. On a Linux system with PAM, attempting to login bypassing PAM is not guaranteed to work, and generally does not. Set UsePAM yes and ...


1

You can create a site-to-site VPN connection, If your users are on different LAN networks, you have to option to create a point-to-site VPN connection. technically, both options will allow your VM to appear as if it's in your local LAN, you will have the ability to map network drives with this. ...


1

I would say there are two approaches: Use the AWS API to determine the IP of all group members and then do SSH. -- This itself is possible on different levels, ranging from a shell script using aws-cli (describe-auto-scaling-instances and describe-instances) to a more sophisticated setup e.g. with Python boto and Fabric. Have all instances register ...


0

Looks like you forgot to actually create a swap filesystem via: $ mkswap /swap/swapfile


1

AWS supports RDS Instances provisioned with SSD's either manually via the AWS Console or using a CloudFormation template to assign SSD storage to your RDS Instance when you spin it up, with a few caveats: As of this writing, if you specify any DBSecurityGroups in your CloudFormation template, the StorageType attribute will be ignored You CAN specify both a ...


0

I know this is an older question but here is a PowerShell example: Get-S3Object -BucketName <buckename> | select key, size | foreach {$A += $_.size} $A contains the size of the bucket, and there is a keyname parameter if you just want the size of a specific folder in a bucket.


1

Using the official AWS s3 command line tools: aws s3 ls s3://bucket/folder --recursive | awk 'BEGIN {total=0}{total+=$3}END{print total/1024/1024" MB"}'


0

I had this issue when I was trying to login from a NAT instance that I set up. The NAT instance is not something I can specify (to the best of knowledge) what OS to use, and I presume that it is using AWS CentOS. Anyways, I was always being asked for a passphrase when trying to connect to an instance on my private network. Here was how i resolved it, ...


1

Solution: (assumes your dns for example.com is in route53): Create an A record for the apex of example.com (no hostname), and select YES for alias. For the Alias Target, use the ELB entry point for elastic beanstalk (there should be a drop-down list you can choose from. After the dns record propagates, you can reach the site correctly via ...


1

To be honest the cause could be dozens of different things, you really need to systematically profile each component and narrow down where latencies are being introduced, rather than trying to guess where the problem is. Having said that, here's two things that come to mind: ELB does not scale instantly If you're using ELB (which I'm assuming you are) you ...


1

This is an issue that will be fixed in Bamboo 5.9. Refer to this bug. You will need to make a custom image configuration using the AMI appropriate to your region. Here are the fixed AMIs from a comment in the bug: image.ASIA_PACIFIC_SE_1.EBS.x86_64.windows.Windows=ami-1cb0824e image.SOUTH_AMERICA_1.EBS.x86_64.windows.Windows=ami-31ec692c ...


1

Can we mirror one EC2-Instance data to another? You can mirror data yourself using software like rsync. You could also take advantage of Amazon S3 or Amazon Elastic File System as a central location for your data. You have other options too, these are just a few examples. In the instance A I’ve created simple PHP file call “test.php”. This sounds ...


1

Can we upgrade versions in multiple EC2-Instance at the same time? Put simply, yes. You're responsible for everything at the Operating System level (including upgrades, software, config). You could use configuration management systems to manage a fleet of servers, or some form of orchestration to perform actions on your fleet at the same time. Here ...


0

I have tried a lot of different configurations and got it working, though I am not sure what was really the case. What I think was the case was the directive called proxy_buffering. It is now set to off. Also, what might solve this problem is setting proxy_buffer_size size. Here is the official documentation about this directive.


0

I had to tweak the following knobs (in /etc/ansible/ec2.ini): # This is the normal destination variable to use. If you are running Ansible # from outside EC2, then 'public_dns_name' makes the most sense. If you are # running Ansible from within EC2, then perhaps you want to use the internal # address, and should set this to 'private_dns_name'. The key of an ...


1

Amazon EC2 does not have automated mirroring of EBS volumes. So when you modify data on EBS volume A, you need to repeat it on EBS volume B. There are some ways to use network drives to share data between EC2 instances. In these cases, you have an external server hosting a network drive that each of your EC2 instances connects to. NFS is one example, Amazon ...


0

You need to be sure that cloud-init is not running during this time. Otherwise you need to delete it again. This is especially true if you try to delete /var/lib/cloud/ inside user-data. In this case you should use something like: echo "rm -rf /var/lib/cloud/*" | at now + 1 min at the end of user-data script.


0

What exactly do you expect to happen? EC2 instances are separate VMs with their own filesystems. To synchronize data across multiple EC2 instances you have the same options as with any other server/VM solution: create custom boot device (AMI) with you application, use a deployment process that copies to all instances, or use some shared file system (setup ...


1

You can create A/B with a custom user-data: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html Either that, or create a new AMI. http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/creating-an-ami-ebs.html


3

You can absolutely launch an EC2 instance without an ELB in front of it, but I would also do the following: Associate an Elastic IP (EIP) so that you have a static public address OS-based security/firewalling software since this instance will be directly accessible from the internet. I have to ask, though, how cost-averse your customer really is. If ...


7

Your certificate is using the outdated SHA-1 algorithm, which because of security risks Google Chrome now warns about. http://googleonlinesecurity.blogspot.com/2014/09/gradually-sunsetting-sha-1.html https://community.qualys.com/blogs/securitylabs/2014/09/09/sha1-deprecation-what-you-need-to-know https://shaaaaaaaaaaaaa.com/check/aws.hatchlings.com ...


4

ELB is a load balancer. It's only worth using if you have multiple back ends, or if your back ends are in an ASG. Neither of which apply to your situation. Your backend server is perfectly capable of terminating connections directly. That said, if your client is cost-averse, AWS is not the solution you should be using. Instead, consider using VPSes from ...


0

ttportal.co.uk is currently delegated to a set of four name servers (the below according to nsd.nic.uk which is one of the servers authoritative for uk as well as co.uk): ;; AUTHORITY SECTION: ttportal.co.uk. 172800 IN NS ns-2015.awsdns-59.co.uk. ttportal.co.uk. 172800 IN NS ns-1407.awsdns-47.org. ttportal.co.uk. ...



Top 50 recent answers are included