Fix timedrifts after VM live migration
After performing a live migration of a VM you may encounter issues with the clock of the migrated VM. The time drifts fairly fast in the future or the past and ntpd doesn't seem to be able sync the time.
A bit of testing showed that the problem disappeared when we replaced openntpd with chrony. So it seems to be a openntpd issue probably.
To fix the issue on Ubuntu:
-
sudo apt-get purge openntpd -
sudo rm /var/lib/openntpd/db/ntpd.drift -
reinstall
openntpdand deploy the config again. In the makandra setup this is done bypuppet.
Related cards:
Installing throttled to fix Lenovo laptops with nvidia graphics running Ubuntu losing performance after a while
We have observed Lenovo laptops with nvidia graphics losing performance after they have been in use for a few minutes. While we have not been able to pinpoint exactly what triggered the performance loss, we have found it mostly correlated with hig...
Fix Imagemagick CVE-2022-44268 in Ubuntu packages
A severe bug was found in ImageMagick by Bryan Gonzalez from Ocelot Team.
It allows to embed the content of an arbitrary remote file when ImageMagick parses PNG files.
We found lots of older vers...
fix clamav freshclam failing database updates
If freshclam updates are failing even though the update servers are available and you find error messages like the following in the log you may have outdated or wrong data in freshclams data files:
Thu Mar 29 12:49:52 2018 -> ClamAV update pr...
FAQ for When PostgreSQL Indexes Are Corrupted After Locale Changes
When changing glibc versions, it's possible to end up with corrupt indexes in PostgreSQL.
Are My Indexes Affected?
If your database has...
Fix "A client error (MalformedCertificate) occurred: Invalid Private Key." at AWS SSL Certificate upload
I'm creating certificate requests with this command:
openssl req -new -out www.example.com.csr -keyout www.example.com.key -newkey rsa:2048 -nodes
When I try to upload the certificate to AWS IAM I get this error:
$ aws iam upload-se...
Set a fixed PGAPPNAME when using PgBouncer in transaction mode
When you are using PgBouncer with e.g. a Ruby on Rails application which uses different application_names for the PostgreSQL connection (for Puma, Sidekiq, Cronjobs, ...) PgBouncer will set the application name accordingly on each statement whic...
Terraform/Terragrunt: Hide Refreshing State..., Reading..., Read complete after... output
Terraform (and terragrunt) gives a lot of output when running plan or apply, outputting a lot of progress information when refreshing the state before creating the plan. [They have reasons for this but it doesn't look like there is going to be...
restart puppetmaster after changing custom functions
The puppet master caches custom functions. If you edit an existing function (e.g. while you’re developing it), you’ll need to restart the puppet master before the new version can be used.
That also means you can't test functions in a different ...
HowTo: Fix nginx not reloading with long gzip_types lines
When using many or very long entries of MIME-types that shoudl be gziped in gzip_types directives in nginx you might not be able to successfully reload the service and get this error message instead:
nginx: [emerg] could not build the tes...
Find unmaintained packages with apt-forktracer
If you use third party APT sources you might end up with unmaintained packages after removing the external source or performing a dist-upgrade. The reason for this is how external sources overwrite official package versions.
[apt-forktracer](ht...
