New answers tagged

0

I encountered this problem when I allowed the Ubuntu installer to install the Docker snap package. When I ditched that and switched to the official Docker package the problem resolved itself. sudo snap remove docker curl -fsSL https://get.docker.com -o get-docker.sh sh get-docker.sh


1

The timedatectl command reports that NTP is in use when either chronyd or systemd-timesyncd is enabled and running. Both of these are lightweight NTP clients suitable for most servers and workstations. It does not recognize the ntpd service, which is designed to be both an NTP client and server, and now that we have dedicated NTP client software, is no ...


0

I figured it out!!!!! <LimitExcept GET PROPFIND OPTIONS REPORT> Should be <LimitExcept PROPFIND> propfind will prompt the user for the user name and password instead of just displaying access.


0

So, I still don't have a perfect solution, but here what we tried: Guix has the ability to download and copy packages easily for as I wanted. If I understand correctly, one can design a system as a scheme file, download/build all the required packages and apply it to a distant system. That would have been the solution if Guix would package ROS, one of our ...


0

Ok with thanks to @yoonix (plus a few more hours of troubleshooting) I was able to come up with a combination that is working and will work for future users. For anyone else that stumbles upon this question, this worked for me but as you probably know all servers are different and your mileage will most certainly vary. I use what I want the full email ...


0

The right way to do this is to find the version of PHP you are using and then install that version of GD: ~$ php --version PHP 7.3.19-1+ubuntu16.04.1+deb.sury.org+1 (cli) ... I'm running PHP 7.3 so I check apt: ~$ apt search php7.3-gd Sorting... Done Full Text Search... Done php7.3-gd/xenial,now 7.3.19-1+ubuntu16.04.1+deb.sury.org+1 i386 [installed] GD ...


1

Not sure if this is what you have been looking for however this way, it will listen on 127.0.0.1:NodePort You need to change kube-proxy configmap but not bindAddress: (it should be left as it was bindAddress: 0.0.0.0) and default value nodePortAddresses: null should be changed to nodePortAddresses: ["127.0.0.0/8"]. It must be ["127.0.0.0/8&...


0

This happens if you specify Listen 80 (or some other port) more than once in your configuration. Each time it appears, Apache will try to bind the specified port. On its second appearance, Apache will fail to bind the port because, literally, the address is already in use. Inspect the configuration carefully and remove duplicate Listen directives.


0

Make sure you don't have libapache2-mod-php installed. Apache is reporting that it is using this module instead of php-fpm. sudo apt purge libapache2-mod-php Then restart httpd. sudo systemctl restart apache2


0

I suggest you to include the %D - "The time taken to serve the request, in microseconds." Tag in your Apache Log. High CPU Usage mostly originates from excessive Database Usage. This might not come from a single SQL Query but from 1000s of small SQL Queries in a PHP foreach(){} Loop. If you don't find any slow Petitions in the Apache Log you can ...


0

The answer may surprise you: lxc config set <container_name> security.privileged true


0

Open the file /lib/systemd/system/docker.service In ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock add --dns 8.8.8.8 Like this: ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock --dns 8.8.8.8 Restart docker service


0

It seems there was something interesting going on in our network, so I ended up routing the port 443 to 8443 using iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 443 -j REDIRECT --to-port 8443 This seems to work. In the end, this was what I was after anyways, so I managed to solve two problems at once.


0

Make sure the port (8443) is allowed or opened for your IP address. So that connection can reach from outside world.


0

First thing first. Recheck all the connection. In that case, it was most likely a bad connection somewhere.


1

How can I solve this error? Replace the harddrive, because it is obviously doing ATA resets. This is (in almost all cases) a sign of electronics at near death or a nagging loose contact. Maybe it's the SATA/SAS cable (or connector), so you can check/exchange that first. But in most cases I have seen the recent years it was the drive (electronics) itself. I ...


0

Your network has no route defined to reach the gateway of your default route. You need a gateway in the 202.8.24.0/24 range, since this is the only range you can reach directly. The IP you have commented out in your gateway4 entry is also invalid since it is not reachable. And you don't need to define the same route twice, just keep the gateway with the ...


0

The PERC H310 is a RAID controller. In order to use the disks you've connected to it, you must set up virtual disks either in the RAID BIOS, with the MegaRaid Storage Manager for Linux which runs on the Linux desktop GUI, or with the MegaCli command line tool. The virtual disks you set up will appear in Linux as /dev/sda, /dev/sdb et seq.


0

As you said with cloudfare enabled, (TTFB) is high. Any firewall rules on the machine (Ubuntu) might delay the incoming request via cloudfare to the destination server. Try disabling the firewall & check whether it lowers the (TTFB).


0

Interesting. At 9 oclock, Apache is being hit quite a lot , and is having to spin up extra worker threads to handle the request spike. Spinning up new threads requires time. You can soak up this surge if you increase the number of stand by worker threads that apache has ready to serve requests. something is definitely putting load on the server around 9AM. ...


1

You only have one server{} for your HTTPS on port 443. The location / { return 404; } applies to plain HTTP on port 80, alone. You could e.g. server { listen 80; listen 443 ssl; server_name example.com; ssl_certificate /etc/nginx/certificate.cer; ssl_certificate_key /etc/nginx/ppk2.key; location / { return 404; } } BTW, ...


1

if you're using passwords for sftp connections - then "PasswordAuthentication no" should be replaced to "PasswordAuthentication yes" don't forget to restart sshd.


0

Run sudo smartctl -A /dev/<your disk> and look the following indicators: Data Units Read (how much data was read over the lifetime of the disk) Data Units Written (how much data was read over the lifetime of the disk) Host Read Commands (how many read commands were issued to the disk over its lifetime) Host Write Commands (how many write commands were ...


1

systemd.path units do not restart services, but only start them. Here is a method where you define new "watcher" service unit and path unit that will start and restart your service(s): https://superuser.com/questions/1171751/restart-systemd-service-automatically-whenever-a-directory-changes-any-file-ins


0

After doing more research on the situation, I've realized that I had a fundamental misunderstanding about how RAIDz worked. For some reason, I thought it would work with heterogeneous devices without wasting space, but that is not actually the case (I must have just been thinking about non-redundant storage pooling, which is not something I want to consider ...


0

Django is a Python application that imports your configuration, which makes hot-reloading it near impossible. So yes, for changes to take effect, you'll need to restart the Django server. Now in your case, your change doesn't actually change anything to the code once loaded (unless the content of the key changed as well), so you could ignore this particular ...


0

The following issue can be useful for more information: https://github.com/fail2ban/fail2ban/issues/2765, although it relates to more recent versions of fail2ban than the one mentioned in the question. By default, the sshd filter doesn't ban repeated failed passkey login attempts for an existing/valid user. On more recent versions (although not yet available ...


0

just after 4 days I stopped sudo service openvpnas stop and everything works now. dont' know why it was started. thank for your support! my bad


1

As of OpenSSL 1.1.1, providing subjectAltName directly on command line becomes much easier, with the introduction of the -addext flag to openssl req Example: export HOST="my.host" export IP="127.0.0.1" openssl req -newkey rsa:4096 -nodes -keyout ${HOST}.key -x509 -days 365 -out ${HOST}.crt -addext 'subjectAltName = IP:${IP}' -subj '/C=US/...


0

You can connect using ssh to ubuntu 18.04 and use do-release-upgrade command to upgrade to 20.04. You could do the same in 16.04, but then you would have to gradually upgrade, 16.04 -> 18.04 -> 20.04. On the other hand it's a bit risky to upgrade release, it would be better to be near the machine in case something goes wrong (ie the sshd doesn't come ...


0

Create the file with a text editor of your choice. ~/.bash_profile would however not be an ideal location for this, because it's only read by bash. There are better places to set the environment variables. ~/.profile Is read by other shells as well, but those files are only read when the shell is called as a login shell. When you run an application as a ...


0

I personally did the following to destroy the drive of a VPS I retired: Reboot into Finnix recovery image (I'm using Linode like another user answered). Execute the following command (change the of= field if your device isn't /dev/sda): dd if=/dev/zero of=/dev/sda bs=10M Delete the VPS from my service.


0

Upon further investigation, it seems that UFW was "telling the truth" - but it merely creates rules for iptables on your behalf.. and there were a bunch of iptables rules already in place superseeding UFW. After a good cleanup it now works.


3

It looks like your system is using NetworkManager to manage its connection to the network. This is helpful, because what you want to do needs to be done in NM, and cannot be done in the interfaces file. You need to modify a NetworkManager setting for your connection to tell it to ignore the DNS servers provided by DHCP so that it will only use your chosen ...


0

So, the mystery is solved. It had to do with an apache sshd configuration which I accidentally copied over from an example. In short, the SshServer.host property does not configure anything about the host of the server, rather it configures another host as a valid client, so only that host is able to connect. Once I removed that configuration, connection ...


0

In my environment /var is a separate filesystem. I think you can try separate /var instead of /var/lib/sss. Because when users login some logs writing in /var/log/. I think best practise not only separate /var, you must separate /usr, /tmp, /opt, / and /home. You can do this with LVM.


2

It looks like MySQL upgrade process fails. If you have modified MySQL system users, then the upgrade might fail because it cannot authenticate via the MySQL socket. Another possibility is that your MySQL server is not running, and therefore upgrade process cannot connect to the server.


0

Edge case: It may happen that you are trying to cd into a file. The same message is thrown then. This may happen when something that you think should be a directory, is a file in reality.


2

Apply configuration to both with your automation solution of choice. The commands are well defined as playbooks or recipes. Test going from a blank operating system image to a working, tested application. Excellent at repeating identical tasks on the test and production environments. Backup data and operating system at a frequency to meet your desired ...


0

After a gruelling couple of days, I found out what the issue was. The DDOS basically caused hundreds of thousands of sessions to be created at /storage/framework/sessions (using the file driver), so when the session garbage collector ran, it was checking every single file. I solved this by changing the expiry of the session to 1 hour (I had it set to 24 ...


0

You may grant yourself the necessary permissions assuming you have the right to edit PostgreSQL configuration under /etc/postgresql. First, check what version of PostgreSQL is installed and the name of the cluster/instance (see the output of pg_lsclusters). For instance with Ubuntu 16.04 the version would be 9.5 with the default repository because that's ...


1

While the following is not strictly the answer to the above, I am posting it as my problem is now solved. I found that I did not NEED either SSLProxyVerify or SSLVerifyClient because the SSL config was secure enough to enable both apps to work correctly. I have learned that it wasn't an SSL failure that was causing the authentication failure. The actual ...


2

I've did this , exactly this But ... ... since the results with XtraDB ON TOP of gluster were mixed , in the end the thingy was moved to a triple-headed percona Cluster with ProxySQL , your database speeds will be much faster without the "high-latency" glusterFS Layer (at least in production database scenario with "live responses" , if ...


0

I had faced similar issues . Then I tried to reverse the certificates sequence by placing root on the top followed by intermediate and server certificate respectively. It had worked.


1

Just ran into a very simalar problem and by deleting the problem key in /etc/apt/trusted.gpg.d/{Problem-Key}.asc I was able to solve the issue! Hope this helps!


0

I have done a similar procedure in the past to test that a recovered MySQL database is working (after recovery from a failed drive). This was on Windows but it should be a similar idea. Make sure you have an extra copy of your database folders in case something goes wrong. You'll need to install the same version of MySQL server. Downloads by version are here ...


0

What you're actually doing is adding the signing key of that repo (in this case Sublime's) to the list of authorized signing keys on your system. These are stored in /etc/apt/trusted.gpg.d/ - feel free to check them out. I suggest looking for a file called '/tmp/apt-key-gpghome.Mi0IvTayBR/home:hawkeye116477:waterfox.asc.gpg' - I guess it's either an empty ...


1

Uninstall MySQL on staging. Test the procedure there first. Take a backup of the data. I would be very surprised if a install script deleted existing databases. But make a copy anyway just in case. Install MySQL. In the future, remove access to production when you work on test. Close all sessions to it. Perhaps remove its keys from ssh-agent.


0

If you can recieve emails from gmail, then your firewall is ok and postfx are working. You need to explore maillog to find out what happening with emails you sent from problem domain. Typically its located in: /var/log/maillog


Top 50 recent answers are included