Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Hot answers tagged

4

There isn’t a default password. The default authentication mode for PostgreSQL is set to ident, not to sql DB user/password. Running cat /var/lib/pgsql/9.3/data/pg_hba.conf will show you that. What that actually means is that in order correctly connect to PostgreSQL you must be logged in as the correct OS user that was used to install it. You practically ...


2

The following requirements must be met to implement nested virtualization in Hyper-V: The host operating system must be Windows Server 2016 or Windows 10 (Anniversary update or later). Older Windows versions don’t support nested virtualization. The Hyper-V VM must be of version 8 or higher. The physical server must have a compatible CPU that supports the ...


2

ufw shows only the ufw configuration and any rules inserted directly in your firewall configuration (with iptables directly or another tool such as docker) without going through ufw are NOT displayed. Firewall rules in Linux are applied in the order they are listed. When you start a docker container docker will insert the rules your docker containers need ...


2

Your issue is that OUTPUT doesn't catch packets coming out of containers. FORWARD does. Why is that? Every Docker container runs in its own network namespace. Every network namespace has its own routing table and iptables rules, and behaves exactly as if it was a separate physical machine. In iptables: INPUT matches packets going to local processes ...


1

That is what Overlay is about -- to enable the container to access the host's whole file system. If you want to impose a limit on the container, you should mount a disk volume (something other than the disk volume holding the root filesystem) at some convenient place in the server root filesystem, then define the container volumes to paths under that ...


1

/app_api directory is empty in both containers because you mounted emptyDir over it (it's called "empty" for reason). You have two ways to "share" files between containers: Add files to both images (nginx and django) on build stage and do not use volume in pod. Technically you will have 2 different copy of data, so changes in one container will not be ...


1

docker stats reporting pages that are used for disk caching as well as used, which is a bit misleading. If your project is sensitive for resource utilization, you should definitely use resource requests and limits parameters. In order to protect your cluster running out of resources, you might also want to enable Resource Quotas Once you enable it, you'...


1

You didn't escape the $, thus the variable $releasever was interpreted in your shell, instead of being inserted literally into the echo command output. Try \$releasever.


1

According to the posted nginx configuration, you mainly wan to do three things: Listen on test.xxx.yyy.com:80 Serve files vom C:/www/html-dev directly (I'm assuming this is static content like img/css/js) Expect /api/, this simply got proxied to http://localhost:7000 (Should be the app server) You can use this config, but this requires some configuration ...


1

You can pull the new version of the image without stopping the original. Docker does not see them as the same image as their layer hashes will differ.


1

I do not know much about Docker Swarm but I can share my thoughts about Kubernetes side. You will anyway need some additional machines if you want to make changes in the environment - your machines are on 90% usage so I don't see how could you migrate or start using Kubernetes there in current scenario. Other than switching off your nodes one by one and ...


1

You've configured sftp-server to log to syslog, not stderr. You need to rip off the -l/-f options and replace them with -e.


1

It appears this behavior is due to a Docker configuration setting. I was able to get this to work by adding the "Linux Capability" CAP_SYS_ADMIN at Docker runtime. docker run -d -t --cap-add SYS_ADMIN -v /mnt.btrfs:/mnt.btrfs debbtrfs CAP_SYS_ADMIN Perform a range of system administration operations including: quotactl(2), mount(2), umount(2), swapon(2), ...


1

This seems to be working now. I simplified in this example to keep it easy on the eye. my_php_1 | [26-May-2019 09:40:40] NOTICE: fpm is running, pid 1 my_php_1 | [26-May-2019 09:40:40] NOTICE: ready to handle connections my_php_1 | 172.22.0.3 - 26/May/2019:09:40:51 +0000 "GET /index.php" 500 my_nginx_1 | 172.22.0.1 - - [26/May/2019:09:40:51 +0000]...


1

This issue is not specific to helm install. The problem is in nginx running in the front of Laravel app, making a mess. So if you were changing server.php for your project to, let's say, run index.html instead of index.php require_once __DIR__.'/public/index.html'; and run local server sukhoversha@master:~/suh$ php artisan serve Laravel development ...


1

There is one known to me existing solution to your problem, currently still in alpha stage, and implemented as a Custom Resource Defitnion (CRD). Please refer to kube-static-egress-ip project on github.


1

One difference is that --privileged mounts /dev and /sys as RW, where as SYS_ADMIN mounts them as RO. This means that a privileged container has full access to devices on the system. SYS_ADMIN doesn't give you that.


Only top voted, non community-wiki answers of a minimum length are eligible