Tag Info

New answers tagged

0

People like to hate on OVZ for some reason but seem to forget that LXC is a derivative of OVZ. If OVZ is such old tech then why is it's DNA in brand new tech? Other than doing something with cgroups, I don't see OVZ going away any time soon. There is cross polination with LXC and if and when LXC is a drop in replacement for OVZ then OVZ can go away. It's ...


1

Directories need an executable flag to access files and directories inside. The execute bit allows the affected user to enter the directory, and access files and directories inside. You can still use 666 on the files it contains. On the other hand it is not good idea use 666 or 777 for your directories and files. See ...


1

I'm fairly confident this will be closed as off-topic (product recommendation) soon, but the only "mature" program I've seen that does this type of thing is the sosreport (formerly sysreport) package/script in RHEL / Fedora.


3

Has anybody tried to patch their systems to solve this vulnerability and what's the impact of the patch across Linux platforms/applications running? Running applications will stay using the old version until they're restarted - just installing the patch should not have any impact. This is why it's probably best to just flat-out-reboot. I don't ...


0

Enter in shell as root vi /etc/passwd find your username, and on the end of line see: /bin/false change to: /bin/bash and solve it! (or any one displayed in: vi /etc/shells) Now ftp is working in your own user.


0

I did it with LVM. Initial configuration: - sda2, sdb2 - and created raid1 md1 on top. sda1 and sdb1 were used for second raid1 for /boot partition. - md1 was pv in volume group space, with some lvm's on it. I've added disks sdc and sdd and created there partitions like on sda/sdb. So: created md10 as: mdadm --create /dev/md10 --level raid10 ...


0

It might be something to do w/ the space (" ") in the path. I would first try a directory w/ out space in fstab and see if that works on reboot. I have a bind mount entry on my fstab, and it gets mounted on reboot as expected. The only difference is that I don't have space.


0

The smartcard authentication on the client side performs a normal challenges response. I.e. the ssh server encrypts a challenge with the public ssh key from the .ssh/authorized_keys. You smartcard decrypts this challenge using the private key on the smartcard. But at this point no x509 certificates are involved. If you want to include x509 certificates and ...


3

With a vanilla configuration, this isn't supported as you would violate ARP rules on routers doing so. However, most Operating Systems have a mechanism of teaming/bonding two physical ports together to act as one logical port. Since you tagged linux, below is a link to setup NIC bonding on RHEL. It basically creates a virtual interface that is shared ...


1

The suggested solution is lacking (or smart) in the sense that it does not save IPTABLES so the changes made to IPTABLES will be lost on next boot. You should save your blocked IPs by committing them: /sbin/service iptables save CHANGE done /sbin/service iptables save rm .ips On the other hand, since the system is an automation, maybe it is wise to only ...


2

from the INSTALL file: $ ./config --prefix=/usr/local --openssldir=/usr/local/openssl replace the optional locations with your own. Can't think of any risks other than cumbersome to manage in the long run and you will need to setup your startup scripts accordingly to obtain the shared libs in all other programs.


0

Did you change your routing table? You need to add route to gateway with src 192.168.1.2, maybe. You can look at routing table using iproute2: ip route If you have something like that: default via 192.168.1.254 dev eth1 you add a route to this address: ip route add 192.168.1.254 dev eth1 src 192.168.1.2 or you can add route to subnet: ip route add ...


1

Because drupal relies heavily on file_exists statements which can not be cached in APC and causes glusterfs to check with the quorum of servers to see if the file exists. So crazy horrible performance.


0

Perhaps TCPdump can give you an insight. Watch the NIC card sending traffic to that target i.e tcpdump -i eth0 -p smtp -Z root (or add the IP, instead of SMTP)


0

I personally turn off automatic updates and do not regularly perform any sort of updating of packages on servers in my environments, unless: (a) there is an important CERT advisory for one of packages on my system; (b) I need to upgrade individual packages for specific reasons; (c) OS or packages are reaching end-of-cycle, they won't be supported any more ...


1

If you also have a rootkit exploit then you will not be able to see the processes, network connections, etc. from the compromised machine. This is because the executables you use have been compromised and adjusted not to show the other compromised tools and services. In this kind of situation you must, at the very least, boot from a verifiable separate OS ...


0

I highly recommend change if you are using default weird 22 port. If you dont have a firewall, you must have one. I use csf in my environment and it has some block rules for brute force attackers.


1

If the account you are using is named root (or something else rather common) and sshd is exposed to the internet, yes this within the normal range. You say you are using an ssh key for login. Is password authentication permitted? You could disable it. (If the account is root consider PermitRootLogin without-password.) Also, install fail2ban.


2

No, it's not 'normal', but within the realm of being targetted. Check your logs for ssh login attempts. It looks like a bruteforce password attempt with your username. Please make sure ssh is disabled for root. And I hope you have a strong password. => actually, if you are using a key/cert to login, you should disable ssh logins with passwords, unless you ...


2

In php.ini find mail.log. Activate logging PHP mails. mail.log = /var/log/phpmaillog Also activate x-mail-headers mail.add_x_header = 1 Reboot httpd to activate the PHP changes. Than start monitoring this log. tail -f /var/log/phpmaillog Delete those PHP files. Install iThemes Wordpress plugin.


0

Supposing your DHCP-server and DHCP-client are both connected to the same ethernet segment, and supposing such ethernet segment spans several L2-switches interconnected with various "trunk" (802.1q) links, I've run into similar issues when there was a mismatch between the configuration of at least one trunk link. In detail, the never-ending cycle of ...


1

I think I know what you're getting at. Here's a scenario that could arrive at higher CPU utilization while simultaneously having lower load average. Although in all honestly having CPU at 50% should at least imply a load of 0.5. So something is amiss at a level outside your control. That said, consider the following: 1) The virtual server has a ...


2

That sort of change rarely leaves audit traces around. It can be done, sort of, but you have to get creative with your audit policies and do some inference. Which is to say, it isn't easy and doesn't give you a clear locale changed audit-line to grep for. If you're looking to see if it has historically happened on a system that has not already been ...


0

Just to give a feedback about this issue. I also changed the SATA cables and the problem persists. After running the memtest for more than 24 hours, it started to increase the error counter. Now we are trying to figure out which memory module is bad.


0

Had the same issue. Not seeing any DHCPACKs. Problem here was: disk full dhcpd could not write to /var/lib/dhcp/dhcpd.leases.


0

I don't believe puttysc can. But I think this is what you are looking for https://www.risacher.org/putty-cac/


0

You need to load the mod_ldap. Also make sure your are actually loading those modules (you have a IfDefine in your configuration).


0

First check the basics: the contents of your .ssh/authorized_keys are correct? No extra line breaks in the public key? the file permissions are correct? sshd can be very strict about this: you should see lots 600, or even 400 (read-only for root). Quoting your log: debug1: trying public key file /home/importer/.ssh/authorized_keys debug1: fd 4 clearing ...


13

When you connect in something like this happens [user@an02-east ~]$ ps aux | grep ssh root 13789 0.0 0.0 98932 3888 ? Ss 03:16 0:00 sshd: user [priv] 502 13791 0.0 0.0 98932 1740 ? S 03:17 0:00 sshd: user@pts/0 root 15378 0.0 0.0 64728 1168 ? Ss 04:13 0:00 /usr/sbin/sshd So ssh is forking off a ...


0

Seems like the issue has nothing to do with memory, but with process limits. The user I'm running the process as had a really low process limit set to 1024. ulimit -u 1024 and the thread count of all the proceses run by this user is close to that: ps -eLf | grep 'myuser' | wc -l 1022


0

Have a look into the jvm min max memory, do you use any web server? Look into the number of treads, memory settings for it- for Tomcat most of them are @server.xml. Look into Java Mission Control http://www.oracle.com/technetwork/java/javaseproducts/mission-control/java-mission-control-1998576.html to get extra insight. Linux usually keeps more memory to be ...


1

I use this write-only bit of scripting to do the job. I think I found this in a previous answer to a similar question on StackExchange, but I cannot find it just now. Anyway - this script keeps the running version of the kernel and related files but deletes all other versions: dpkg -l 'linux-' | sed '/^ii/!d;/'"$(uname -r | sed ...


1

Uninstall the old kernel versions that you're not using any more. I normally keep the last two or three versions installed, and remove the older ones. So for example you can run apt-get purge linux-image-3.13.0-{24,35,36,37,39,40}-generic When you do that, the old files that you listed above will be removed from /boot.


0

This is a solution if your script runs in python (or you could create a python command to run before the next command) - I ran into this exact problem last week, and although I did find some good solutions, I decided to make a very simple and clean python package and uploaded it to PyPI. You could certainly lock __file__ to not have to think about giving it ...


1

You can get detailed information on the path MTU for a host as follows. Note that the cache information must be populated first. This testing was performed with a 3.13 Ubuntu kernel. I first validate the current cache for a host, I haven't communicated with it and have no information: johnf@mtutest:~$ ip ro get 192.168.3.48 192.168.3.48 dev eth0 src ...


2

Check /etc/anacrontab Cron runs anacron, which runs then cron.daily/weekly/monthly... If you have the default files, you'll see something like: # /etc/anacrontab: configuration file for anacron # the maximal random delay added to the base delay of the jobs RANDOM_DELAY=45 # the jobs will be started during the following hours only START_HOURS_RANGE=3-22 ...


0

As mentioned in the comment of the question, I needed to edit some DNS records on DigitalOcean, not in the registar administration. Seems that I missed this link during my research, hope it helps other folks. https://www.digitalocean.com/community/tutorials/how-to-set-up-and-test-dns-subdomains-with-digitalocean-s-dns-panel


0

Well, theres a number of reasons it does not work. You create a veth pair, then fail to add one side of it into the new network namespace. One of the veths sides is not up. Specifying the broadcast address as 255.255.255.255 as in your example cause a routing table lookup and the packet to be sent against the default route. Consequently you dont use ...


1

AFAIK OpenSSH doesn't have a support for that. <opinion>The probable reason behind that, that the OpenSSH guys favorize the minimal feature, maximal security concept which is quite visible on their other projects, too.</opinion> But it is not unconditionally a problem. You can do this by watching the system log, and setting up condition for ...


1

pvmove moves allocated PEs off a PV. There are no allocated PEs on /dev/vda2 so there is nothing to move. Yes you can safely run the vgreduce command.


1

I am unable to comment so I'll make do here. First off, 'Better' is a subjective term at best. What work for me, may not work for you. All we can do is suggest, depending on your company backup policies and other requirements, ie. what needs to be backed-up, how long to keep a back up, how far back to keep, will affect what you are able to do. Things you ...


1

You can remove only unused physical volumes from a group. If you don't pvmove or lvremove all of the lvs on it, the vgreduce will give back only an error message.


0

For Linux to forward packets between interfaces you need to set net.ipv4.ip_forward=1 in /etc/sysctl.conf and either reboot the system for the changes to take effect or run sysctl -p Regarding your ping results, if I remember correctly, by specifying -I ethX on the ping command, you are forcing the packets to actually leave from the specified interface ...


3

In the manual : anon_root This option represents a directory which vsftpd will try to change into after an anonymous login. Failure is silently ignored


-2

You have too low max open files (1024), try change and restart nginx. (cat /proc/<nginx>/limits to confirm) ulimit -n 10240 And increase worker_connections to 10240 or higher.


0

Since you are a VPS provider and I assume your customers get root on their VPS, there is very little you can do on the network stack, since filtering won't block or detect everything and very likely you'll get a lot of false poitives. You could configure iptables to filter certain repeting tcp flags in short time span intervals, log them and use something to ...


0

The OpenConnect VPN client has (nascent) support for Juniper SSL VPN. See the announcement at http://lists.infradead.org/pipermail/openconnect-devel/2015-January/002628.html


0

This might not work in a lot of cases, but saved me once. Asumming all the disks still respond to SMART queries. There is a SMART attribute that might hint to what the last failed disk was: 9 Power_On_Hours The smart log might also give useful information: # smartctl -l error /dev/sda Some sample output for a failed disk: Error 47 occurred at disk ...


0

I would suggest that you use the EC2 Container Service provided by AWS. It comes with tons of features solving the issues you just asked about.


0

Stop container and service sudo docker stop CONTAINER_NAME sudo service docker stop Edit config file (JSON) [You should make backup first] /var/lib/docker/containers/CONTAINER_ID/config.json Replace "Hostname":"WHATEVER" with "Hostname":"NEW_HOSTNAME" Start container and service sudo service docker start sudo docker start CONTAINER_NAME ...



Top 50 recent answers are included