Hot answers tagged

6

Most distro libvirt packages will be configured to run qemu as qemu:qemu user. See the UID+GID reported by virsh --connect qemu:///system capabilities | grep baselabel. If that's the case for your distro, then qemu doesn't have permissions to access /dev/kvm, so libvirt is not advertising kvm support. chmod 666 /dev/kvm should fix it. This is the default in ...


6

It seems that during the upgrade process your network device got renamed. Change every occurrence of enp0s3 to ens3 in /etc/network/interfaces, and it should get the IP address from the DHCP server.


5

Here is a solution we have found working: AllowUsers user1 user2 Match group ssh-users AllowUsers *


5

While I am not sure if this will work on I350 NIC I think the answer is in the ip-link man page: vf NUM specify a Virtual Function device to be configured. The associated PF device must be specified using the dev parameter. [--cut--] state auto|enable|disable - set the virtual link state as seen by the specified VF. Setting to auto means a ...


4

Like many enterprises, Hetzner runs switch port security on its network switches, meaning that only authorized MAC addresses can talk to the network. This means that the hardware address of the NIC in your server can speak, but the virtual MAC addresses of your virtual machines cannot. Thus it does not work to bridge your VMs directly to the outside world. (...


4

This looks more like a problem where you have improperly installed the new certificate, so that only the server certificate is provided in the TLS handshake but not the intermediate certificate(s). Browser will usually successfully try to work around such misconfiguration and fill in the missing chain certificates themselves while other client don't. Please ...


4

You configured your system to use packages from several distributions at once (a so-called Frankenstein-Debian), so dependency errors are normal. Run cat /etc/apt/sources.list{,.d/*.list} in bash to list all sources. Your libc6 (version 2.27-6) is stuck somewhere between stretch (version 2.24-11+deb9u4) and buster (version 2.28-10). My guess is you pulled ...


4

This is caused by the configuration option net.ifnames=1 which is enabled by default in Debian 9. You can either: Update the interface name(s) in /etc/network/interfaces Set the net.ifnames=0 as a kernel parameter See https://wiki.debian.org/NetworkInterfaceNames for more details


3

If like me you are dealing with an embedded wheezy system and just need to make something work, here are the complete steps that worked for me. The original sources no longer exist which causes the 404 error (not found), so we need to modify the source list. Remove the original line add the two archive lines. vi /etc/apt/sources.list deb http://archive....


3

You may be missing the libsasl2-modules-gssapi-mit package. Without: # ldapsearch -H ldap://dc1 -Y GSSAPI -b 'DC=ad-test,DC=vx' ldap_sasl_interactive_bind_s: Unknown authentication method (-6) additional info: SASL(-4): no mechanism available: No worthy mechs found Install: # apt install libsasl2-modules-gssapi-mit With: # ldapsearch -H ldap://dc1 -...


3

You can modify the systemd unit which starts Jenkins to set the CPU scheduling policy, using CPUSchedulingPolicy=. Sets the CPU scheduling policy for executed processes. Takes one of other, batch, idle, fifo or rr. See sched_setscheduler(2) for details. So you might create a drop-in for your Jenkins systemd service with a path such as /etc/systemd/system/...


3

It sounds as though bind9 may not be allowed to write to the folder for other reasons. Check to see if AppArmor is running via aa-status. AppArmor is another mandatory access control mechanism for Linux, comparable to SELinux. In reality, you want it there because it keeps applications from being used maliciously if exploited. If it is, temporarily ...


3

The plus sign after the keyword netmask causes ifconfig to take the corresponding value from /etc/init/netmasks. # ifconfig eth0 192.168.1.50 netmask + Would tell ifconfig to look in the netmasks file for the subnet for this interface. The line would look something like: 192.168.1.0 255.255.255.0 This is a leftover from the Sun days, most of the time you ...


3

Your problem here is that at some point in time, you installed a package from a source which contained a newer libc6, and that version of libc6 got installed. Now your packages are broken, since the libc6-dev package has a version of 2.24-11+deb9u4, but the libc6 package is at 2.27-6. This is probably because of the buster repository you mentioned. The big ...


3

100% uptime is not attainable. Their business continuity plan is not complete or realistic if they think it is. Define what availability they are actually willing to pay for. As little as possible downtime means that multiple nodes are a necessity, such as a load balancer or cluster. Rolling upgrades mean the service stays available even when one host ...


3

The problem is that the key installed by the Gitlab installation script has expired. This can be verified by running sudo apt-key list user@gitlab:~$ sudo apt-key list /etc/apt/trusted.gpg -------------------- pub rsa4096 2015-04-17 [SC] [expired: 2020-04-15] 1A4C 919D B987 D435 9396 38B9 1421 9A96 E15E 78F4 uid [ expired] GitLab B.V. (...


3

You can use the logger command to create arbitrary syslog messages. For example: logger --server 172.17.0.2 --priority local7.info --tag TEST Sample log message


3

Sooooo, what exactly is happening here? The apt-get upgrade does not add new packages. The linux-image-amd64 is a meta package that often depends on installing a new package that is the newest version of the kernel. A new package is used whenever the ABI changes, this can be very important for anyone with any locally compiled modules, that aren't managed by ...


3

Why? This is well explained in the official documentation on Choosing a Debian distribution. Debian has chosen to value stability over new features. That's why some of its software is quite old. I'd recommend also reading Advice For New Users On Not Breaking Their Debian System, especially: Don't suffer from Shiny New Stuff Syndrome The reason that Debian ...


3

You need to switch your grep statements. Your second statement to filter out grep will always succeed, because it is always there. So, first filter out grep and then check for the process: ps auxw | grep -v grep | grep nrpe > /dev/null || /etc/init.d/nagios-nrpe-server start According to the Debian package list the binary of the nagios-nrpe-server is ...


3

Using pgrep: pgrep nrpe > /dev/null || /etc/init.d/nagios-nrpe-server start > /dev/null or using a subshell: (pgrep nrpe || /etc/init.d/nagios-nrpe-server start) > /dev/null From the pgrep(1) manpage: pgrep looks through the currently running processes and lists the process IDs which match the selection criteria to stdout. If the process name is ...


2

Searching for command for macos ends up here. For those mac user who want to see the real-time connections of a process: nettop -p 60683 You can also restrict the interface type, like wifi or wired... nettop -t wifi -n -p 60683


2

I think https://github.com/google/pam-cryptsetup can do what you want. Edit: + you can achieve the same with systemd and PAM alone


2

You can do smartctl -a -l ssd /dev/sda -d cciss,1 or smartctl -a -l ssd /dev/sda -d sat+cciss,1 you can count the last number then up to select the new HDD. this will result in: root@pve:~# smartctl -a -l ssd /dev/sda -d cciss,1 smartctl 7.1 2019-12-30 r5022 [x86_64-linux-5.4.44-2-pve] (local build) Copyright (C) 2002-19, Bruce Allen, Christian Franke, www....


2

mysql.service may already be partially enabled, try sudo systemctl disable mysql.service sudo systemctl enable mysql.service


2

I had exactly the same problem as you (I even referenced your serverfault question in this posting to the Debian User Forums) My problem turned out to be another instance of "Boottime Entropy Starvation" (I'm guessing that wpa-supplicant needed some random data for key exchange, and that the kernel blocked while waiting for the random number generator to ...


2

For Windows: try WinSCP, it support that Feature since a while. I don't know any other client that implemts that feature. I assume it's just that FTP(S) is quite out of scope nowadays as implementation of that feature should be mor or less a no-brainer in most applications. Edit: include some explanation why this feature depends on client support, as ...


2

It's a PATH variable bug. Try this: apt-get install mlocate updatedb locate a2enmod the output is: /usr/sbin/a2enmod then grep PATH /etc/profile PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/sbin" PATH="/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games" Export PATH As you can see, /usr/sbin in not in root $PATH So, ...


2

ls -d /sys/class/net/*/device | cut -d/ -f5 will list only real NICs, leaving out bonds, loopback devices and so on. As a bonus, ls -l /sys/class/net/*/device/driver/module | cut -d/ -f5,13 | sed 's?/? -> ?' will also show the driver bound to it. Example on a hardware firewall from a major vendor out there: # ls -l /sys/class/net/*/device/driver/module ...


2

Make sure you don't have OS Login enabled. Docs read: If you manage your SSH keys by using OS Login on instances, metadata-based SSH key configurations on those instances are disabled and Caution: Enabling OS Login on instances disables metadata-based SSH key configurations on those instances. Disabling OS Login restores SSH keys that you have ...


Only top voted, non community-wiki answers of a minimum length are eligible