Reputation
15,657
Top tag
Next privilege 20,000 Rep.
Access 'trusted user' tools
Badges
1 34 62
Newest
 Yearling
Impact
~712k people reached

Oct
19
comment Server hitting high loads and becoming very slow
@srchulo Your options basically boil down to smaller memory footprint or larger server. You could run fewer Apache instances or configure MySQL for a low amount of memory usage. Other commonly installed software that will monitor IO usage includes iostat. Despite that, atop is part of most distributions, though rarely installed by default. If you've got root, I highly suggest adding it.
Oct
18
comment Create hosting accounts on the fly
@MartinG perhaps you want to look into Powershell? They are a lot of good scripts around to refernce for that.
Oct
13
comment How to securely manage private keys for EC2-managed key pairs?
@Jeff If SSH is configured to reference LDAP and ignore authorized_keys, then the launch key will only matter for controlling instance launch and termination. That depends on how you build your image.
Oct
12
comment Can read/write jobs be put in a queue?
@Dave It's more that implementing a job queuing system is an intensive approach to a more easily solved problem.
Oct
11
comment How to securely manage private keys for EC2-managed key pairs?
The ssh login is controlled by the ~/.authorized_keys entries. Those are initially seeded by the EC2 launch process, hence the need to use puppet or scripting to replace them or relaunch.
Oct
11
comment Can read/write jobs be put in a queue?
@voretaq7 I've seen disk contention issues often. The disk is so busy with somebody else's read / write that it takes a full second for ls to list a directory. Heck, just trying to open applications immediately upon boot of my laptop is a drag.
Oct
11
comment How to use tshark to do this task
wireshark is the gui version of tshark... would that possibly work? It makes it easy to apply filters to the display and save the results. I'm not sure if tshark can filter by conversation flow.
Oct
4
comment Transfer 10TB of files from USA -> UK datacenter
Even if your data is private, you can use Bittorrent in a private network.
Oct
4
comment How do I setup an SMTP service to accept MX bound mail and deliver all of it to two separate SMTP servers
It can be done with Postfix and some fancy work involving filters. It may be possible to do with Postfix directly through some configuration wizardry. I can't tell you what will work without setting up my own dummy network to figure it out, and that won't happen until at least the weekend.
Oct
3
comment ssh hangs on “Last login” line
More desperate! ssh root@machine /sbin/ifconfig eth0 mtu 1000 (God help you if you can't root login directly, you might have to write a program to do the sudo operation for you). From bugs.debian.org/cgi-bin/bugreport.cgi?bug=296811
Oct
3
comment ssh hangs on “Last login” line
In desperation, I'd attempt ssh -t screen, ssh -t bash, or even ssh -t vim... if one of those works, you can run commands from it. Vim might be the best bet because it won't spawn a shell at the start, so that may avoid login shell issues and you can spawn a non-login shell from it.
Oct
3
comment ssh hangs on “Last login” line
I wager your SSH config is just fine and something is going on in your login scripts -- probably a process that is hanging.
Oct
2
comment How do I setup an SMTP service to accept MX bound mail and deliver all of it to two separate SMTP servers
Your own postfix server can deliver to both. If you point your MX record at it, then that will work. You just can't somebody else's server that isn't under your control to send it to two places for you using MX records.
Sep
24
comment Good tutorial for security on a server
See security.stackexchange.com for learning more about security. Also, there are a few consultants from the UK there that would be able to help outside of SO.
Aug
17
comment Git daemon doesn't work properly when run from xinetd
Your path may not be the same path that xinetd is operating with. That said, it appears that the daemon command is running appropriately. I think you may need to look at a lower level... I'd start confirming each step with external tools -- atop, wireshark, etc. Also, consider the possibility of a version mismatch.
Aug
17
comment multiple load-balanced servers: avoiding local duplication of application data
I'm concerned because this question talks about not duplicating data, but your answer talks about not duplicating code. These are very different problems!
Aug
17
comment Amazon ec2 spot instance storage confusion
+1 as that's another good answer. There are possible issues with half-written files, etc. that need to be thought of if you go that route. Treat it like you would any machine with an HDD that you would expect to get the plug pulled on all the time. This may also be a bit more complicated if you have several instances that may spawn at once -- one EBS can only be attached to one instance at a time.
Aug
17
comment Amazon ec2 spot instance storage confusion
Amazon only provides an API through the SDK. You could create your own tools, write it into whatever application you're running, or script something around it using existing tools. One place to look is s3tools.org/s3tools
Aug
16
comment How do I monitor who's logged in?
@Zoredache you're already trusting the machine to run a script that remotely push data to a server. How does this script result in a different level of trust? At least with audit logs, you may find somebody didn't fully clear things without leaving breadcrumbs. Happens all the time in forensics cases.
Aug
16
comment How do I monitor who's logged in?
Windows has this functionality built into the logging system if you turn it on. You can centrally pull logs from each machine. I feel that provides a much better trail and clearer tamper evidence.