...might experience a Host key verification error if you try to connect to the server via ssh or sftp. Be aware that a Host key verification error is always suspicious...

...the currently provided host key (and type) in your known_hosts file. When the server stops providing that locally stored host key you get a mismatch and need to trust...

puppet.com

The puppet server caches custom functions. If you edit an existing function (e.g. while you’re developing it), you’ll need to restart the puppet server before the new version...

...assume that all commands will be executed as local postgres user on a database server master. Please mind that you should stop the replication on a slave PostgreSQL server before...

...this dump. This is useful for moving the content of a database to another server. WARNING: Sourcing this dump will drop the existing databases in the cluster if they exist...

wkhtmltopdf/wkhtmltopdf wkhtmltopdf/packaging Please note: We do not compile the package ourselves on the server. Instead, we install the most recent available version of the prebuilt package. Example:

...app server runs on Ubuntu 24.04, and you request version 0.12.6.1-3, we would install the corresponding package for Ubuntu 22.04 (Jammy). Be aware that using a package not compiled...

The Oracle mysql client has an odd behavior if your server uses latin1 as default character-set-server. Command mysql --version mysql Ver 8.0.31-0ubuntu0.20.04.2 for Linux on x86...

...character_set_database | utf8mb4 | | character_set_filesystem | binary | | character_set_results | latin1 | | character_set_server | latin1 | | character_set_system | utf8 | +--------------------------+----------------------------------------------+ Explanation The client can't handle the --default-character-set...

Nginx is capable of forwarding a unix socket to UDP backend servers. This is quite handy for load balance syslog traffic. Example nginx configuration load_module /usr/share/nginx/modules/ngx_stream_module.so; stream { upstream syslog...

server 192.0.2.10:514; server 192.0.2.11:514; server 192.0.2.12:514; } server { listen unix:/run/nginx/log.sock udp; proxy_pass syslog_server; } } Testing the connection echo "Hello Syslog!" | socat - /run/nginx/log.sock Info

...generated by requests should be stored in public/system. Execute assets:precompile only on one server with Capistrano 3 If the assets directory is linked to glusterfs asset:precompile should only...

...on one of the appservers. The asset precompile is by default executed on all Servers with the role web. You can overwrite this in deploy.rb: set :assets_roles, [:assets]

If you want to perform a failover on another haproxy backend server this is the way you should do it: Gather information Via hatop Note: Please mind that the names...

...of frontends / backends / servers are only examples. Mind this when you want to use the shown CLI commands. The path to the haproxy socket may also vary. Example: We have...

jetmore.org

...package management system. This example send an email from from@example.com to to@example.com via the server mail23.example.com with the user from@example.com and password mysupersecurepasswordyouneverget for authentication and require the connection to...

$ swaks -tls --to to@example.com --from from@example.com --auth-user from@example.com --server mail23.example.com Password: mysupersecurepasswordyouneverget === Trying mail23.example.com:25... === Connected to mail23.example.com. <- 220 mail23.example.com ESMTP Exim 4.76 Mon, 04 Nov...

...Cli is working: $ aws iam list-server-certificates { "ServerCertificateMetadataList": [ { "Path": "/", "Arn": "arn:aws:iam::5xxxxxxxxxxx:server-certificate/www.example.com-201307-201407", "ServerCertificateId": "AXXXXXXXXXXXXXXXXXXXX", "ServerCertificateName": "www.example.com-201210-201310", "UploadDate": "2012-10-10T11...

} ] } Upload your certificate: $ aws iam upload-server-certificate --server-certificate-name www.example.com-2013010-2014010 --certificate-body file://www.example.com.crt --private-key file://www.example.com.key --certificate-chain file://www.example.com.ca-bundle { "ServerCertificateMetadata": {

...are two ways within systemd to manage the fact that you need the gluster service active before mounting the mountpoint. Thus in the past the mount triggered before the gluster...

...service was running and didn't mount again. /etc/fstab You can use the x-systemd.autmount feature which mounts the mountpoint as soon as it's accessed localhost:/shared /gluster/shared glusterfs defaults...

makandra Operations

Sending a testmail from a server with a configured exim is easy as pie. From your usershell: tell exim that we want to send a mail to an recipient and...

If a users password for https://monitor.makandra.de/ is unknown one can set it like this: sudo python /opt/graphite/webapp/graphite/manage.py changepassword ${USERNAME...

makandra Operations

You can use wscat: sudo apt-get install node-ws # wscat -c ws://echo.websocket.org connected (press CTRL+C to quit...

tools.ietf.org

In case you're wondering, when concat-ing server certificate and intermediate certificates, the server certificate comes first. RFC 4346: certificate_list This is a sequence (chain) of X.509v3 certificates...

nginx.org

...proxy_hide_header in different contexts: Syntax: proxy_hide_header field; Default: — Context: http, server, location Source But if you use it in multiple contexts only the "lowest" occurrences are...

So if you specify it in the server and location context (even if you hide different header) only the proxy_hide_header in the location block are used.

...affected table. Warning pg_repack writes a copy of the whole table. The database server needs to have at least ($size_of_biggest_table * 2) + some buffer free disk space...

Install pg_repack, e.g. for Ubuntu install the package according to your PostgreSQL Server version. There is no need to restart the PostgreSQL Server. $ sudo apt-get install postgresql...

sysadmincasts.com

Like Railscasts or Ruby Tapas, but for Linux.

We had a strange behaviour on one of our mariadb-servers: Everyday at around midnight we saw that the root-account on one of our servers is trying to access...

# journalctl -u mariadb Dec 16 00:00:03 cool-server mariadbd[788]: 2022-12-16 0:00:03 34996 [Warning] Access denied for user 'root'@'localhost' (using password...

This is a way to run multiple redis server on one ubuntu server. These steps you have to do only once: Adjust init script Change some Variables. From this:

...ARGS=/etc/redis/redis.conf NAME=redis-server DESC=redis-server PIDFILE=/var/run/redis.pid to this: NAME=`basename ${0}` DAEMON_ARGS=/etc/redis/${NAME}.conf DESC=${NAME} PIDFILE=/var/run/${NAME}.pid Move redis configuration ^

You might use screen or tmux to run a temporary command on a server which continues to run after the SSH session is closed. Consider systemd-run as alternative. It...

...will turn every command in a systemd service unit: # Run `openssl speed` as unit run-benchmark.service $ sudo systemd-run --unit=run-benchmark openssl speed # Query the current status $ systemctl status run-benchmark.service...

First we export the checks on the nodes we want to monitor: @@nagios_service { “check_unicorns-${::hostname}”: host_name => $::hostname, service_description => ‘Unicorn Status’, check_command => ‘check_unicorn-${::hostname...

...Then we realize the resources on the Nagios server Nagios_service <<| |>> Now it is quite easy to create new monitoring checks with Puppet. With the ease of creating monitoring checks...

...BY c.relpages DESC; This requires superuser permissions to install the amcheck extension to the server. If you're a makandra customer, we've already added this extension for you.

...Test All Indexes In All Databases? If you have admin permissions on your database servers, you can use this script to check all databases on your server: #!/usr/bin/env bash

...good thing. It's possible to configure this requirement at the web- or proxy server level, where nginx or apache will just redirect every request on http to https. Some...

...application directly on the VM it's running and usually it's the proxy server or webserver that does handles SSL, the port where the application is running is often...