Reputation
10,861
Top tag
Next privilege 15,000 Rep.
Protect questions
Badges
12 64 133
Impact
~1.0m people reached

Jul
24
comment ZFS reads on FreeBSD incredibly slow
FWIW, our experience on FreeBSD 8 & 9 shows that ZFS snapshots have no notable impact on performance; unlike UFS and LVM snapshots which seem to suffer performance impacts after only a few snapshots. We've had 30+ snapshots on some very active filesystems. But that's just our experience.
Jul
19
comment freebsd-update from 8.3-RELEASE to 9.0-RELEASE: How to deal with dozens of diffs?
My systems do have that setting (I think it's a default). The trouble is, the files are slightly modified and FreeBSD forces a diff for those (The $ID$ tag is different between 8 -> 9, the root password is set, etc.). It's a known problem that FreeBSD never fixed. Now that we're on FreeBSD 9, this may not be an issue upgrading to 10 if we decide to stay with FreeBSD.
Jul
16
comment Database backup encryption
Can you elaborate about generating multiple keys? Would we just encrypt with multiple --recipient statements?
Jul
9
comment How to maintain site.pp with many nodes?
Would an ENC be a reasonable solution to this question? I would love to see someone comparing site.pp to ENCs.
Jul
9
comment How to maintain site.pp with many nodes?
@Felipe There is no simple alternative that I know of. Classifying nodes using files like site.pp or import 'nodes/*.pp has fallen out of favor in the Puppet community, particularly by PuppetLabs. I'm still not clear what the best alternative is, but it seems that the favored workarounds are Heira or use an ENC such as The Foreman or Puppet Enterprise. Discussion of those alternatives are fairly detailed and worth a whole discussion. I did try: ask.puppetlabs.com/question/10975/…
Jul
3
comment Difference between RH-Firewall-1-INPUT and INPUT
The RH-Firewall-1-INPUT chain was indeed removed with EL6. However, I cannot find any mention of this in the Release Notes. Does anyone have a link to the authoritative documentation stating the RH-Firewall-* should be replaced with INPUT? This is the source of much confusion for EL6 admins.
Jul
2
comment List of packages for RH 5.x
RH 5.3, 5.4, and 5.4 Beta are very old versions of RHEL 5. The latest available version of RHEL5, and the only version that should be used these days, is RHEL5.11. Anything older has missed out on security and stability updates and is at risk of being hacked. Consider a move to RHEL6 or RHEL7, which are the new versions of RHEL.
Jul
1
comment Changing network boot order (pxe) using ipmitool
> It is very,very rare there are multiple physical Ethernets on a server that support IPMI. I'm not sure what you mean by this. Every Intel and Supermicro server that I've had has two NICs on the back. NIC0 does the PXE by default.
Jul
1
comment Changing network boot order (pxe) using ipmitool
Using Supermicro X8 & X9 motherboards, you cannot specify the interface. You can only tell the system to PXEboot, and it will PXEboot in the order specified in the BIOS. You can reorder the PXEboot order in the BIOS, and change/disable which interfaces provide PXE, but that's all I've been able to do.
May
18
comment famd/gamin timeout issue with courier-imap
Okay. Our experimentation shows that we can reduce the number of errors by disabling IMAP_ENHANCEDIDLE, possibly disabling TLS_CACHEFILE & TLS_CACHESIZE (This is suggested in the config file). This issue also seems to be resource related, so we're looking at more general resource tweaks.
May
15
comment famd/gamin timeout issue with courier-imap
Tonin, did you ever figure out the answer to this? We're running into a similar error. CentOS 6, VMware ESXi, Courier IMAP. No obvious load issues.
May
15
comment What is the difference between syslog, rsyslog and syslog-ng?
I would argue that both syslog-ng and rsyslog are 'next gen', or at least the newer replacement for the older syslog. Both are comparable in terms of features, but the syntax for both is very different. syslog-ng has it's own unique syntax, while rsyslog's syntax is more like the older syslog syntax.
Apr
27
comment Apache refused to include TLS1.2
Don't replace /usr/bin/openssl with something else. It will break your system, as many things depend on it. Instead, install OpenSSL to another location like /usr/local and point Apache at that.
Apr
27
comment Apache refused to include TLS1.2
/usr/bin/openssl is the commandline utility for using openssl. The Ssl module for Apache is different. Look at the LoadModule pines on your httpd.conf file. You probably do not need to recompile Apache.
Apr
27
comment Apache refused to include TLS1.2
You need to make sure you are loading the new module which is in a different location from your old module. What do you have for your load module statement?
Apr
15
comment How to uninstall newly installed dependencies for a RPM package?
Also see unix.stackexchange.com/questions/40179/remove-unused-packages
Apr
14
comment MySQL PID Errors
Note that this may result in some database corruption, but generally MySQL should be able to recover just fine.
Apr
6
comment Apache on CentOS 6 Unresponsive
I'm glad you found enough information to help out.
Mar
31
comment Apache on CentOS 6 Unresponsive
Check your access and error log and look for the 404 error, and then see if the page mentioned in the logfile matches what you set in the configuration file. You will need to restart or reload Apache.
Mar
31
comment Apache on CentOS 6 Unresponsive
Steven, to check for issues with Swap, use a utility like top. Many basic sysadmin books will show you how to do this.