New answers tagged

0

We have been able to install oci8 and oracle client using .ebextensions. We created 2 config files, one for the oracle stuff: commands: 01_install_basic: command: | cd /tmp wget https://download.oracle.com/otn_software/linux/instantclient/oracle-instantclient-basic-linuxx64.rpm rpm -i oracle-instantclient-basic-...


2

The number itself doesn't mean you're using UDP. Most probably, sshd is running on TCP with port 69. In this case, try to allow incoming traffic to TCP 69 by modifying a security group attached to this instance.


0

You have two routes for the same subnet, that's why its not working. You need your route rules to concern stricktly different subnets. This configuration forward all request in destination of all the ip from 192.168.0.1 to 192.168.1.255 through eth0 : Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 192.168.0.1 ...


-1

use sudo fdisk -l to list your disks. Identify which of the entity is Linux filesystem. this is the disk that we need to mount. Pass args -o nouuid to mount command. sudo mount -o nouuid /dev/nvme1n1p3 /mnt/disk This will mount the disk and you can recover/backup your data or add your key, You can then add your key like this echo "PASTE CONTENTS OF ...


0

When configuring ProxyPass in older Apache versions the full ALB names were sometimes too long. As a workaround we had to create a shorter name as an ALIAS in a Route53 domain, for example: alb.mydomain.com. A ALIAS alb-dns-name.region.elb.amazonaws.com. And then do ProxyPass https://alb.mydomain.com. I wonder if this could be the same problem? Having ...


0

This may not be the answer, but it certainly is an answer because it worked for me in the same situation: Execute the following command to elevate yourself to super user for the session: sudo su Info about sudo su (aka super user) here


0

I'd use the DNS-01 challenge type, that way you don't need connectivity to your private instance. If you wanted to allow your private instance access to the internet to use the HTTP-01 challenge type then you deploy a NAT gateway or NAT instance to your public subnet, and have the private subnet route 0.0.0.0/0 to that resource. A NAT instance is much ...


0

Currently it looks like that: # yum list \*gcc10\* Loaded plugins: extras_suggestions, langpacks, priorities, update-motd Installed Packages gcc10.x86_64 10.3.1-1.amzn2.0.1 @amzn2-core gcc10-binutils.x86_64 2.35-21.amzn2.0.1 @amzn2-core gcc10-binutils-gold....


0

Your question duplicates https://stackoverflow.com/questions/989967/best-way-to-log-post-data-in-apache Steps to log HTTP request body in Apache: Enable dumpio module for Apache. Set the LogLevel to dumpio:trace7 and DumpIOInput On. Restart Apache for the changes to take effect. See also: mod_dumpio Guide


1

Best I've found for this so far... Thanks for the comment from @Tim, CodeBuild runs on ECS. When it does that, it pulls credentials from container credentials. Those are apparently pulled from a different IP address, which can be accessed via 169.254.170.2$AWS_CONTAINER_CREDENTIALS_RELATIVE_URI You can extract the role credentials from that call and then ...


0

I learned that when a windows instance boots for the first time it records logs in C:\Windows\Panther\setup.etl. By stopping a troubled instance and attaching its root volume to another instance; I was then able to use 'tracerpt.exe' setup.etl -of csv -o logs.csv to gain access to the logs. In my case I discovered the following error messages in those logs. &...


0

BurstBalance is an EC2 / EBS metric (EBS falls under the EC2 namespace). EBSIOBalance% is an RDS metric. Under RDS you can't see the EBS volume burst balance directly which is why RDS has to expose it.


0

You can try the amazon systems manager to log into your system. Then you need to reverse engineer the authorized_keys file inside the ~/.ssh/authorized_keys Hope this works.


0

EBS snapshots are EBS snapshots. Those created by AMI images aren't "special" in any way. You can safely delete the older EBS snapshots for the same EBS volumes and the data in your recent snapshots will be preserved.


0

When you create an AMI it creates a new set of snapshots, one for each EBS. And these snapshots can't be deleted until you delete the AMI first. So yes, they are independent and you can delete all your other "maintenance" snapshots. Hope that helps :)


1

Ok so I found the solution. Steps taken to solve it: I tried to use python3 manage.py runserver on my instance, and found out that the files were updated fine , therefore the issue was with the production side I figured out that only static and html files were being updated (nginx serves those) , so the problem was not with that I was using gunicorn to ...


1

if you want your EC2 instance to be accessible from the internet via IP, then you would need to configure your subnet to assign public IP addresses, If you want the IP to be static (e.g. if you reboot the instance the IP would remain the same, then you would need to attach an EIP) If the instance is in the private subnet then it will be only accessible from ...


0

CreateImage now supports resource level policies. The following policy allows creating an image but only for the specified instance id: { "Version": "2012-10-17", "Statement": [ { "Sid": "AllowCreateImage", "Effect": "Allow", "Action&...


1

I found the solution after hours of research. The issue is quite simple. Crontabs are designed to place the output of the cronjob somewhere. Since this destination was not specified in my setup the destination for the output was placed in the /var/spool/exim/input-folder with one individual file per output which quickly lead to a huge amount of files and ...


3

I also faced similar issue a few months back in Amazon linux. Fixed this by installing certbot via pip. The commands that I used: pip install virtualenv virtualenv ~/.certbot source ~/.certbot/bin/activate pip install 'setuptools<41' pip install certbot pip install 'parsedatetime<2.6' Now simply generate the certificate by issuing below command sudo ~/...


6

Option 5 - stop managing Security Groups (essentially IP-based firewalls) and use TLS Client Certificates. If you're using modern user management systems like Azure AD or LDAP, you already have the right tool to issue and distribute the certificates. You'll setup a private CA and configure the HTTP server (Nginx, Apache2 or AWS ALB) to authenticate by ...


0

Turns out I needed to allow HTTP and HTTPS traffic on my instance. I used this as a guide to enable it


3

The AWS page literally does say what to choose. Bold text highlighted by me. When you launch your initial instances, we recommend that you accept the default Availability Zone, because this allows us to select the best Availability Zone for you based on system health and available capacity. If you launch additional instances, specify a Zone only if your new ...


2

It generally doesn't matter which availability zone you choose. Performance and price is the same in each AZ in a region. In some regions some specialty instance types aren't available in every AZ, but that's rare. AZs let you deploy highly available applications. This is something you could consider as your knowledge of AWS improves. Also make sure you set ...


1

The quickstart document you linked to clearly says: Two Kubernetes clusters are deployed into your AWS account, one running Rancher Server and the other ready for experimentation deployments. You can find Kubernetes clusters in your AWS console by going to Elastic Kubernetes Service, and then clicking Clusters.


29

Option 4 - stop controlling the access through Security Groups and instead implement some decent authentication mechanism. For example put an Application Load Balancer in front of the web app and configure the ALB to require Cognito authentication. Only authenticated users will make it through the ALB to your web app - problem solved. The Cognito can have ...


0

You may need to add a partition number if the first partition is not of type "freebsd-ufs". For example, if you have a boot volume from machine A that you want to mount, for maintenance purposes, to machine B, then your first partition may be type freebsd-boot, and mount /dev/<device> /yourvol will fail with a "No such file or directory&...


Top 50 recent answers are included