4,251 reputation
1720
bio website BlackMesh.com
location
age
visits member for 4 years
seen yesterday

Director of Emerging Technology at BlackMesh Managed Hosting, longtime Linux aficionado, sometime Drupal developer (and d.o sysadmin), and occasional filesystem tinkerer.


Jan
3
comment Running drupal as root in order for it to run bash scripts
If running on RHEL (or similar), you'll also need to add: Defaults:www-data !requiretty
Aug
14
comment One ip on port 80 with mutiable vhost different names and ports
Why are the VHosts on port 8080 and 8081, respectively? What is port 80 doing, then? Is there a proxy in here somewhere, or is Apache acting as one?
Jul
31
comment large number of InnoDB tables plus SHOW TABLE STATUS
You didn't mention whether you were using 5.5, 5.1 with InnoDB plugin, or something older/nastier. If using something older, you may need to adjust the innodb_additional_mem_pool_size. Related question: Do you see anything in the mysql error log during SHOW TABLE STATUS runs?
Jul
31
comment large number of InnoDB tables plus SHOW TABLE STATUS
Your table_open_cache appears to be too small, but otherwise your settings seem reasonable, if a bit arbitrary (5400 MB buffer pool, rather than 5 GB even?). Try bumping table_open_cache to 1536 and see what happens.
Jul
25
comment large number of InnoDB tables plus SHOW TABLE STATUS
Are these databases actually in their own .ibds? What's the size of your innodb_buffer_pool? How are table_open_cache, open_files_limit, and the sysctl fs.file-max set? How much memory do you have under Cached in free -m? What's your vm.vfs_cache_pressure set to? Is your disk subsystem performant? I'm beating so hard on this because generating table statistics should be very, very fast in the vast majority of cases; if it's not, that's at best a misconfiguration, because otherwise it's a bug.
Jul
25
comment DNS resolve timeout on RHEL 6.3 behind firewall
Excellent reply. Deleting mine so as to better emphasize yours. :)
Jul
25
comment large number of InnoDB tables plus SHOW TABLE STATUS
By any chance, do you have innodb_file_per_table enabled? If not, try enabling it (and dumping, dropping, and re-importing the tables). I suspect that would allow the disk reads to be much more intelligent than they are when ibdata1 is getting hit for everything.
Jul
13
comment How would you simplify this command?
This script straces into the telnet, not into the Apache process that's serving it.
Jun
15
comment CentOS - PHP - Yum Install with Custom ./configure params
--target is typically not necessary unless you're cross-compiling, but check your spec file for other requirements. For example, for building a CentOS 6 kernel, you'll typically want --with-firmware and -D 'dist el6' -D 'rhel 6'.
May
16
comment Redirect to SSL only if browser supports SNI
This will throw a name/cert mismatch error; they will only be downgraded back to HTTP (assuming you've set up an appropriate redirect) after accepting the mismatched cert. Further, you can't auto-upgrade them to HTTPS without some sort of state maintenance, or they'll jump right back into the SSL VHost again.
May
7
comment Why is this tee losing stdout?
Since the evolution of my answer can be confusing to read: I've updated my answer with the final analysis of why this failed in the first place.
May
4
comment Correct recursive chmod, separate for files & dirs
@Safado: find . type d -print0 | xargs -0 chmod 0755 and find . -type f -print0 | xargs -0 chmod 0664.
May
4
comment Correct recursive chmod, separate for files & dirs
@Iain: I recently discovered this behavior, but I'm not insignificantly baffled by it, and I'm pretty sure find hasn't always worked this way. Thus, my "depending on your version" disclaimer.
May
4
comment Correct recursive chmod, separate for files & dirs
If you're doing this so frequently that you can't be subjected to the numbing repetition of the few extra characters of a simple find, it begs the question: why not fix the permissions via umask (or some program-specific option) so that they're correct in the first place?
May
4
comment Correct recursive chmod, separate for files & dirs
Dangerous with files whose names contain certain reserved characters (like spaces, depending on your version of find). Consider -print0 and xargs -0.
Mar
27
comment Two SSL certs for a domain in DirectAdmin
@sonassi: You can likely ask Verisign to provide a replacement certificate that covers both (I've asked this of GeoTrust in the past when I've accidentally submitted in a way that didn't result in a SAN being attached for both name variations). Otherwise, switch to a cheaper cert that includes SANs; most CAs offer a competitive-replacement program for low, no, or sometimes negative cost (i.e., they give you a rebate).
Mar
27
comment Two SSL certs for a domain in DirectAdmin
A certificate with a SAN specifically avoids the SNI requirement. SNI is only required when you have two different certificates from which to choose.
Mar
19
comment Two SSL certs for a domain in DirectAdmin
@sonassi: I've yet to have a client willing to accept SNI's limitations. Give it another five years (sadly, that's literal—*another* five years) and it'll hit effectively 100% of clients, at which point the argument may change. Even then, personally, the information-disclosure MitM potential of SNI creeps me out.
Mar
16
comment Two SSL certs for a domain in DirectAdmin
A given (IP address,port) tuple can only have a single SSL certificate associated with it. So you'll need to have a second IP address available to you to be able to run both certs.
Mar
16
comment PHP on command line displays “Out of Memory”, no file name, line number or memory value
Please run: which php, rpm -qf $(which php), and rpm -qf $(which php) --verify .