Sysadmin Mega Thread

NFS server disconnected? Try mounting with intr option?

AWS Glue is starting to annoy me…

Just trying to write a map function but trying to figure out how they want me to edit a Dynamic Frame by looking at the docs is unclear?

Looks like that option is depreciated after kernel 2.5.26 :frowning:

Anyone ever notice that visudo opens in nano on Ubuntu?

Ugh, installing ipa-server is failing when selinux is enabled, but there’s no evidence that selinux is blocking anything… the logs are clean. I keeps failing saying that ports 8080 and 8443 aren’t available.

sudo semanage port -a -t http_port_t -p tcp 8443

?

1 Like

It is by default. 8080 is http_cache_port_t. I tried changing it but no difference.

The main web interface is on 80/443 anyway. When you go to 8080/8443, its a certificate pki tomcat thing, so maybe http_port_t isn’t correct…

sudo semanage port -l | grep pki
pki_ca_port_t                  tcp      829, 9180, 9701, 9443-9447
pki_kra_port_t                 tcp      10180, 10701, 10443-10446
pki_ocsp_port_t                tcp      11180, 11701, 11443-11446
pki_ra_port_t                  tcp      12888-12889
pki_tks_port_t                 tcp      13180, 13701, 13443-13446
pki_tps_port_t                 tcp      7888-7889

Hmm…


Eh, so far it’s working after re-enabling selinux after the install so I’m not going to waste time trying to figure out what’s going on. It also installed fine on a vanilla CentOS install, so I suspect that using the sysadm type/role for sudo is causing the problem. I had the same issue installing clamav, but I assumed the IPA process would have been more polished since it’s a core RHEL service.

1 Like

https://www.phoronix.com/scan.php?page=news_item&px=Netflix-NUMA-FreeBSD-Optimized

1 Like

Are Fedora repos failing for anyone else right now?

I was getting intermittent failures, yeah.

1 Like

Haven’t ran into this one yet, but basically I have an unmounted sda drive with three partitions, sda1 is the root partition/fs of a device. sda2 is a 1kb partition, and sda3 is a swap partition. This was the default for an installation of Ubuntu.

Originally, the disk was 40 GB. I have increased the size of the hard disk to be 75gb. Below is the output of lsblk

image

Assuming I want to do this as simply as possible. How would I extend sda1 to be 74GB and keep SWAP at 975MB.
If there’s anymore needed let me know and I’ll reply.

Thanks!

Edit:

To me the simplest way would be to:

  • Firstly, add another 2GB HDD to the machine while it’s running,
  • Parition and create a SWAP drive on it.
  • Remove old swap mount and add the new disk as the SWAP mount,
  • Boot into live distro,
  • Delete the sda2 and sda5 partitions,
  • Extend (delete and then add) sda1 to the end of the drive.
  • Extend the sda FS to the end of the drive.
  • Reboot.

Thoughts?

Can’t you just make one? Can’t be that hard. I haven’t put a lot of research into it but there has to be a group of nerds somewhere that have attempted this and made a kit for it.

The rack mount kvm console?

welcome back

So I am becoming a bigger fan of Terraform.

The DSL is nicer than cloudformation.

I got all the docs searchable by Emacs and there is a decent LSP for it as well.

Also a Kubernetes book arrived today.

1 Like

Terraform is the least shitty solution to cloud rollouts.

It’s easier than python scripts but not as powerful.

Oh, which one?

1 Like

Make sure sda2 isn’t your boot partition. It shouldn’t because it need to be at the start of the drive, but i don’t understand why a 1k partition is for :frowning:

visudo opens $EDITOR

1 Like

Will be (im)patiently waiting for when you get to PAM hardening and auditd config.

1 Like

Done a while ago.

The new authselect tool managed to do all the pam stuff I was interested in via the sssd profile, but if you do want to manually configure pam, you should do so with a custom authselect profile.

For auditd I found a repository with the rulesets they use for OpenSCAP and copied those with some minor modifications.

1 Like