New answers tagged

1

Discussion The source command is the textual version of the . (source) syntax. This allows you to include / import code from one file and merge it into a parent. However, what is not clear from a base install of Ubuntu 16.04 is why the source line would be first. Meaning, if one wanted to use a static IP for interface enp0s3 below, does that mean I must ...


0

There used to be an Identity Management for Unix piece of AD that would allow you to specify home directories, user shells and other Posix attributes and allow users to authenticate from Linux via AD. This is no longer the case. As of Server 2008 that piece has been deprecated. You can try using ADSI Edit to set values by hand but the free-form entry can ...


0

I've recently run into this issue on Amazon Linux. My crontab outbound email queue /var/spool/clientmqueue was 4.5GB. I solved it by: Locating large files: sudo find / -type f -size +10M -exec ls -lh {} \; Deleting large files: /bin/rm -f <path-to-large-file> Restart server instance Problem solved!


1

Keepalived with VRRP should be able to do this, yes.


0

You don't need up vconfig... statements in the enp2s0f1 section of the interfaces file. Vlan interfaces will be created at bring up corresponded interfaces automatically. For better control use ACCEPT/DROP all instead DROP/ACCEPT all. In your case the rules will be look like: # allow replies and port forwarding iptables -A FORWARD -m conntrack --ctstate ...


2

If you want to use a regex, then ^([^:]*:){6}[^:]*$ is probably sufficient to match seven fields seperated by : on each line, so you could do: find /store -name passwd -type f -exec grep -hIE '^([^:]*:){6}[^:]*$' {} + > all_passwds.txt -h omit the filenames in the output -I skip binary files -E enable extended regular expressions (ERE)


0

With inspiration from answers here, and from the Samba mailing list, I wrote a tool called ADAM to assign UID/GID values: https://gitlab.com/JonathonReinhart/adam Currently (June 2019), this has only been tested on Linux, running against a Samba Active Directory domain. However, it should work (or be very close) running on Windows, and/or against a Windows ...


0

If you're having this problem with a Synology NAS, then check that the vers= option specified to mount and the min/max SMB versions on the NAS are compatible. Specifically, I'm using vers=2.0, but my Synology Diskstation was triggering the Host is down error. I found a page, Windows 10 access to NAS share. SMB 1.0 and 3.0, on the Synology website that ...


2

First: The binaries are likely bin/passwd - i.e. the password change tool... Simple solution that might work if all your wanted passwd files are in subdirectories called etc:  find /store/ -wholename '*/etc/passwd' This will only find etc/passwd files, which should be the correct format. If that's not working, construct a loop with the file utility ...


0

Looks like you hit this systemd issue. It fixed in v239. Check your systemd version, if it not v239, you could try workaround from git issue.


3

Please note the small print in the addendum to the -L flag in iptables and use the -v option: -L, --list [chain] List all rules in the selected chain. ... The exact rules are suppressed until you use iptables -L -v Personally I prefer dumping the complete rule-set with iptables-save to get a quick overview as iptables -L also only displays the ...


2

The first line of iptables -L target prot opt source destination ACCEPT all -- anywhere anywhere corresponds to the first rule of the iptables-save output: -A INPUT -i lo -j ACCEPT This rule only matches traffic coming from the interface lo, the loopback interface. It does not match any traffic coming from another interface (e.g. eth0). Therefore the ...


0

After searching for several years, I recently created a tool for synchronising LVM snapshots between servers. It is designed to use minimal IO and allow the systems to run while the synchronsation is happening. It is similar to ZFS send / receive in that in synchronises the differences between LVM snapshots, and uses thin provisioning so that performance ...


-2

As Best i know : instead of struggling with iptables stuff, Execute below command where your HTTPD / Apache web-servers installed iptables -F Have a great day future friend .!


0

I get the feeling you're assuming its an EXT4 partition and its probably not. You can use a filesystem agnostic option which should work instead. fsadm resize /dev/sdc1 This should detect and resize no matter the filesystem (provided its one of the common filesystem types). Other than that you can run file -s /dev/sdc1 to see what actual filesystem it is.


0

I use this: 1. Pull directories from remote host to specific hosts - name: Gather hosts stats from other hosts shell: " scp -r {{results_root_dir_src}} root@{{groups['profiling_server'][0]}}:{{results_root_dir_dest}}/abc/" when: "'profiling_server' not in group_names" #It will not run on the node where the directories need to be copied. Pull ...


1

You haven't specified much about your disk layout so I am going to make some assumptions. Please modify for your application, or provide the additional details and I can edit this. Assumptions: 1 physical disk 2 partitions (boot + LVM PV) 2 LV (root + swap) This is pretty much a default install of CentOS/Red Hat and is very, very common. You can use ...


1

The problem is that you provided a directory to the --location option. When you do this, virt-install can only boot with the kernel/initrd in that directory, but the contents of the directory are not provided to the virtual machine. The man page also warns about this: DIRECTORY Path to a local directory containing an installable ...


0

Check the counters of the DNAT rule with iptables-save -c -t nat command. It shouldn't be zero. Also you should allow the incoming packets for this port. iptables -A INPUT -p tcp --dport 9100 -j ACCEPT Use the conntrack tool to list the conntrack table. You can use conntrack -E to monitor conntrack events in the real time. Check output of ip route get 127....


-1

probably this link can be useful for you: https://www.deonsworld.co.za/2012/12/20/understanding-and-using-htop-monitor-system-resources/ In short: The system load is a measure of the amount of computational work that a computer system performs. The load average represents the average system load over a period of time. 1.0 on a single core cpu represents ...


0

Are there any tools I can run to further investigate why this happens? The discrepancy could be because you are using the wrong calculation. The answer you linked to does not highlight this, but look at the linked commit message: [People] generally do this by adding up "free" and "cached", which was fine ten years ago, but is pretty much guaranteed to ...


0

I had several problems at the same time. Docker left the garbage after deleting, I executed the command: apt remove --purge ubuntu-fan sudo apt autoremove Next, I cleaned the Samba share file removed the mount settings sudo nano /etc/fstab Correctly write hostname to file hostname I added the resulting name to the file sudo nano /etc/hosts I added ...


2

Yes the server is overloaded/busy. Load average is not as straightforward just CPU. Other things are mixed in too e.g.tasks waiting for disk i/o to complete etc. You need to install some monitoring and gather data about the overall performance of your system. You can then use this to figure out what is the cause of your load issue.


0

For a rough estimation, you can use Load Average value shown on htop right upper corner. Value more than number of the cores is a sign that the system is overloaded, which is apparently true in your case as 42 is greater than 12. For more info about system load and LA particularly a good read is here


3

WARNING Graphics requested but DISPLAY is not set. Not running virt-viewer. WARNING No console to launch for the guest, defaulting to --wait -1 This WARNING is received because the virt-install command is trying to connect you to the console of the virtual machine using your display. However, it cannot do that in your environment because you don't have a ...


0

you could also add these command into /etc/rc.local and don't forget to make it executable: touch stagingfile.txt echo "ip rule add fwmark 3 table 3" >> stagingfile.txt echo "ip route add default via 192.168.0.1 table 3" >> stagingfile.txt sudo mv stagingfile.txt /etc/rc.local chmod +x /etc/rc.local should work


1

SCP is over SSH - so if you know how to log into your instance using SSH then that's half the battle the -i keyword is a path to your private keyfile, not the file you want to upload, which should be in /Users/myname/.ssh/id_rsa where "myname" is your account. how do you normally access the VM over SSH? You will use those creds with scp EDIT BASED ON ...


0

Ubuntu uses /etc/ssl/certs. It also has the command update-ca-certificates which will install certificates from /usr/local/share/ca-certificates. So installing your custom certificates in /usr/local/share/ca-certificates and running update-ca-certificates seems to be recommended. http://manpages.ubuntu.com/manpages/latest/man8/update-ca-certificates.8.html


2

numgen nftables has all features in place, but for some unknown reason, it's not documented in any version of the nft manpage. The kernel side handling this, nft_numgen has been available since Linux 4.9 and the userland side since the nftables 0.7 release: Add number generation support. Useful for round-robin packet mark setting, eg. # nft add rule ...


2

Use a verbose flag when testing with wget or curl to see more of what's happening rather than just the resulting time-out. Without that I can only make some educated guesses: actual web clients will not only make a connection but will also follow HTTP protocol directives: the clients will honor web proxy settings (for instance a http_proxy environment ...


0

That Broadwell server CPU should have several advantages over the Haswell desktop CPU. Implying that there is some overhead when scheduling jobs on the server. E5-2650 v4 is a 12 core part for 2 socket servers. One server of this should only get 24 threads of a CPU intensive workload; limit your Linux load average to around 24. 96 cores in one system would ...


1

Try systemctl restart firewalld


1

iptables -t nat -I PREROUTING -d 10.10.10.11 -j DNAT --to-destination 192.168.0.11 But if I try, on said OpenVPN server itself, telnet 10.10.10.11 80 This will not work in principle as you are trying another use case. In case you are going directly from openVPN server the proper chain would be iptables -t nat -I OUTPUT, while iptables -t nat -I ...


0

Old question but let make a review... I am missing log file content related to the zone file during the bind (re-)load but I would expect something like "ignoring out-of-zone data"... This zone would be ignored. The reason is that once the zone is defined for adras.af it can contain the defined zone or its subzone. Exception could be Glue records but it is ...


0

Local to your site, you can put things wherever you want, including /usr/prog. No one has bothered to document this as any kind of convention. Linux FHS, as well as hier man pages from a variety of systems, say nothing about it. Who knows where it came from originally. On a system following FHS, site local software would be in /opt. Maybe /usr/local.


1

I've encountered the same problem when setting up named in a container. You must run named as the correct user, which is named on Redhat/Fedora: named -u named # Possibly in the foreground using an additional -g named drops all capabilities when starting (except the one to bind to low ports), so root loses its capability to read everyone's files, too. I....


1

Your RHEL server does not have an active subscription, but this is required to install packages. You need to register the system using subscription-manager register and an existing or new entitlement. If you haven't got a Red Hat Enterprise Linux subscription, you will need to purchase one. Once your system is properly subscribed, the warning message will ...


2

Try using pvresize. Eventually the partition was resized, but not the physical volume in lvm. https://linux.die.net/man/8/pvresize


0

Based on the symptoms, it may be caused by Windows' TCP autotuning (TCP Window Size auto negotiation) or chimney offload (offloading workload to network adapter) technology not working as intended (maybe because one end, or some old network equipment in-between doesn't support TCP Autotuning typically) You can test these settings on a Windows 7 client: ...


1

Let's start by checking the man page. Sadly, it is ambiguous at best. Percentage Options These options are defined to all but esic. … … -t Available for tcpsic and tcpsic6 only, the percentage of TCP packets with bad TCP checksum. … So the -t option applies to isic per the "defined to all but esic" part. Yet it also ...


0

Solved: In /etc/default/shellinabox I changed: SHELLINABOX_ARGS=--no-beep to: SHELLINABOX_ARGS="--no-beep --service=/:SSH" This boots the shell as an SSH session. It then follows the rules set in /etc/ssh/sshd_config: PermitRootLogin yes


1

You expanded your filesystem correctly. The "49GB" you are concerned about is the space currently used on the filesystem by files under /, not the total space.


0

Current nftables version, 0.9.0, was released on 2018-06-08, more than a year ago, and this feature is not available in this version. Only testing having been decapsulated is available. Kernel support for additional handling of ipsec in nftables was added in version 4.201. On userland side, corresponding support for additional ipsec features was added in ...


0

netsh is no longer the preferred method for network interface management on a Windows system. Where possible, you should use Windows Powershell or Powershell Core. First you need to find out the interface index of the interface you wish the ARP cache entry to apply to: Get-NetIPInterface Which returns a list of your interfaces, and specifically a property ...


-1

As CloudLinux staff said: The best way is to install cPanel in Centos 7 and then convert Centos 7 to CloudLinux. It will correct all cPanel settings.


2

The commands you ran install and configure the repos. You don't appear to have installed the package. No output from rpm -qa | grep rabbitmq is also a clue. Try installing them with yum install rabbitmq-server erlang


1

You must do a cost benefit analysis of the threats you face in your environment. Large databases usually are difficult to impossible to malware scan in time. Rather, that cost may be more effectively spent on securing the application, and restore testing backups in case of disaster. On the other hand, a mail server that sees all your email attachments ...


0

SQL Distributed Management Objects (SQL-DMO) is no longer included in SQL Server 2012, SQL-DMO applications should be converted to use SQL Server Management Objects (SMO). https://docs.microsoft.com/en-us/sql/database-engine/dev-guide/sql-dmo-mapping-to-smo?view=sql-server-2014 So no, on either Windows or Linux. Looks like the DMO replacement SMO ...


0

Yes it is possible following David Schwartz suggestion: echo -ne 0 > /proc/sys/net/ipv4/conf/all/rp_filter echo -ne 0 > /proc/sys/net/ipv4/conf/eth0/rp_filter echo -ne 0 > /proc/sys/net/ipv4/conf/eth3/rp_filter //For proper functionality i.e. ARP replies from eth1 to get generated when both eth0 and eth1 are in same subnet echo -ne 0 > /proc/...


1

I think you created your question and answer after you solved your problem. Please note that the GNU ls long listing -l will show you if an alternate access method such as an access control list applies to a file, by appending a character to the file mode bit listing. And rather than: drwxrwxr-x 2 nobody nobody 4096 May 26 14:42 Directory ...


Top 50 recent answers are included