BAFM

About Me

Fri, 06 Feb 2026 00:00:00 +0000

This contains just a few details about me.

Exploring the Intersight API with a Python-Based Schema Browser

Fri, 06 Feb 2026 00:00:00 +0000

A comprehensive guide to using a Python tool for exploring Cisco Intersight's OpenAPI specification and accelerating PowerShell module development.

How to Use NAS Storage with Docker Compose: NFS, SMB, and Local Volumes

Tue, 03 Feb 2026 00:00:00 +0000

A practical guide to connecting your NAS (Synology, QNAP, TrueNAS, or any NFS/SMB server) to Docker Compose stacks. Learn how to mount network shares as volumes, configure permissions, and avoid common pitfalls.

LVM Quick Reference: Setup, Extend, and Resize Filesystems

Sun, 01 Feb 2026 21:43:50 +0000

A hands-on reference for creating and extending LVM Physical Volumes, Volume Groups, and Logical Volumes, plus growing XFS and ext3/ext4 filesystems.

Docker Swarm + Compose: Traefik Label Sync

Sun, 01 Feb 2026 00:00:00 +0000

How to enable Traefik auto-discovery for docker-compose containers on Swarm worker nodes

Impressum

Wed, 14 Jan 2026 21:30:00 +0000

Impressum

Angaben gemäß § 5 TMG

Christian Heim Leopoldstr. 32 D-76287 Rheinstetten

Kontakt

E-Mail: hello@pakiheim.de

Hinweis

Dies ist eine private, nicht-kommerzielle Webseite.

Haftung für Inhalte

Als Diensteanbieter bin ich gemäß § 7 Abs.1 TMG für eigene Inhalte auf diesen Seiten nach den allgemeinen Gesetzen verantwortlich. Nach §§ 8 bis 10 TMG bin ich als Diensteanbieter jedoch nicht verpflichtet, übermittelte oder gespeicherte fremde Informationen zu überwachen oder nach Umständen zu forschen, die auf eine rechtswidrige Tätigkeit hinweisen.

Privacy Policy

Wed, 14 Jan 2026 21:30:00 +0000

Who we are

Our website address is: https://christian.blog.pakiheim.de.

What personal data we collect and why we collect it

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Sort file into subdirectories structures by year and month

Sun, 16 Apr 2023 17:52:50 +0000

OwnCloud Camera Import Sort Script

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12


BASE_DIR=/var/www/owncloud.heimdaheim.de/data/christian/files/Camera-Import
SORT_DIR=/var/www/owncloud.heimdaheim.de/data/christian/files/Camera-Sorted

find "$BASE_DIR" -type f -name "*" | while IFS= read -r file; do
 year="$(date -d "$(stat -c %y "$file")" +%Y)"
 month="$(date -d "$(stat -c %y "$file")" +%b)"
 filestamp="$(date -d "$(stat -c %y "$file")" +%Y%m%d)"

 [[ ! -d "$SORT_DIR/$year/$month" ]] && mkdir -p "$SORT_DIR/$year/$month"

 mv "$file" "$SORT_DIR/$year/$month/${filestamp}_${file##*/}"
done

Description

This Bash script automatically sorts camera uploads from OwnCloud into a year/month directory structure. Files are organized based on their modification date and prefixed with a timestamp in the filename.

Bash sort files into date-subdirectories

Fri, 07 Apr 2023 20:48:33 +0000

This is how to sort files into date separated folders.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10


BASE_DIR=/var/www/owncloud.heimdaheim.de/data/christian/files/oldgallery
SORT_DIR=/var/www/owncloud.heimdaheim.de/data/christian/files/datedgallery

find "$BASE_DIR" -type f -name "*" | while IFS= read -r file; do
 year="$(date -d "$(stat -c %y "$file")" +%Y)"
 month="$(date -d "$(stat -c %y "$file")" +%b)"
 filestamp="$( date -d "$( stat -c %y "$file")" +%Y%m%d)"
 [[ ! -d "$SORT_DIR/$year/$month" ]] && mkdir -p "$SORT_DIR/$year/$month";
 mv "$file" "$SORT_DIR/$year/$month/${filestamp}_${file##*/}"
done

Shrink git repo directory

Fri, 26 Aug 2022 19:32:59 +0000

So I just had the issue, that I encountered a long running local tracking git repo to be huge.
And it wasn’t that there are huge (lfs) files stored in it.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17


# du -h --max-depth=1 --exclude=.git /var/www/pma.heimdaheim.de/www/
60K /var/www/pma.heimdaheim.de/www/.github
676K /var/www/pma.heimdaheim.de/www/doc
20K /var/www/pma.heimdaheim.de/www/examples
9.0M /var/www/pma.heimdaheim.de/www/js
5.8M /var/www/pma.heimdaheim.de/www/libraries
59M /var/www/pma.heimdaheim.de/www/po
92K /var/www/pma.heimdaheim.de/www/scripts
28K /var/www/pma.heimdaheim.de/www/setup
28K /var/www/pma.heimdaheim.de/www/sql
1.5M /var/www/pma.heimdaheim.de/www/templates
3.3M /var/www/pma.heimdaheim.de/www/test
9.0M /var/www/pma.heimdaheim.de/www/themes
20M /var/www/pma.heimdaheim.de/www/vendor
92M /var/www/pma.heimdaheim.de/www/node_modules
28K /var/www/pma.heimdaheim.de/www/tmp
200M /var/www/pma.heimdaheim.de/www/

Now after looking at that, we can take a closer look into the git-directory itself (as to what is consuming the space):

Create a Proxmox VM via CLI

Tue, 21 Jun 2022 23:09:44 +0000

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23


# Clone the VM
qm clone 9000 4140 --name nzbget.ka.beiheimdaheim.de --full=true --storage vmstorage

# Set the nameserver
qm set 4140 --nameserver=10.76.41.1

# Set the ipconfiguration
qm set 4140 --ipconfig0 ip=10.76.41.40/24,gw=10.76.41.1

# Configure the virtual network adapter.
qm set 4140 --net0 virtio,bridge=vmbr0,tag=41

# Enable autoboot
qm set 4140 --onboot 1

# Set the RAM of the VM
qm set 4140 --memory 2048

# Set the vCPU count for the VM
qm set 4140 --cores 2

# Start the VM
qm start 4140

Create a Proxmox Ubuntu Cloud-Init Template

Tue, 21 Jun 2022 19:02:19 +0000

Step 1: Download the Ubuntu image

1
2
3
4
5
6


SRC_IMG="https://cloud-images.ubuntu.com/jammy/current/jammy-server-cloudimg-amd64-disk-kvm.img"
#VMSTORAGE="/vmstorage"
VMSTORAGE="/var/lib/vz/images"
IMG_NAME="jammy-server-cloudimg-amd64-disk-kvm.qcow2"
IMG_PATH="$VMSTORAGE/$IMG_NAME"
wget -O $IMG_PATH $SRC_IMG

Step 2: Add necessary packages

1
2


sudo apt install -y libguestfs-tools
sudo virt-customize -a $IMG_PATH --install cloud-initramfs-growroot,atop,htop,nano,vim,qemu-guest-agent,curl,wget,unattended-upgrades,git

Step 3: Modify /etc/ssh/sshd_config

1

sudo virt-customize -a $IMG_PATH --run-command "sed -i 's/.*PasswordAuthentication.*/PasswordAuthentication yes/g' /etc/ssh/sshd_config"

Step 4: Modify `/etc/apt/apt.conf.d/50unattended-upgrades`

1
2


export EDITOR=nano
sudo -E virt-edit -a $IMG_PATH /etc/apt/apt.conf.d/50unattended-upgrades

Step 5: Modify `/etc/default/grub`

1
2
3


export EDITOR=nano
sudo -E virt-edit -a $IMG_PATH /etc/default/grub
sudo virt-customize -a $IMG_PATH --run-command "update-grub"

Step 6: Install `ohmybash`

1
2

sudo virt-customize -a $IMG_PATH --run-command "git clone https://github.com/ohmybash/oh-my-bash.git /opt/ohmybash"

Step 7: Fix timezone

1

sudo virt-customize -a $IMG_PATH --timezone "Europe/Berlin"

Step 8: Create the Proxmox template

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19


TEMPL_NAME="ubuntu2204-cloud"
VMID="9000"
MEM="512"
DISK_SIZE="10G"
DISK_STOR="vmstorage"
NET_BRIDGE="vmbr0"
qm create $VMID --name $TEMPL_NAME --memory $MEM --net0 virtio,bridge=$NET_BRIDGE
qm importdisk $VMID $IMG_NAME $DISK_STOR
qm set $VMID --agent enabled=1
qm set $VMID --scsihw virtio-scsi-pci --scsi0 $DISK_STOR:vm-$VMID-disk-0
qm set $VMID --ide2 $DISK_STOR:cloudinit
qm set $VMID --boot c --bootdisk scsi0
qm set $VMID --serial0 socket --vga serial0
qm set $VMID --ipconfig0 ip=dhcp
qm set $VMID --ciuser=christian
qm set $VMID --cipassword="bla"
qm set $VMID --searchdomain=ka.beiheimdaheim.de
qm resize $VMID scsi0 $DISK_SIZE
qm template $VMID

Dell notes

Fri, 15 Apr 2022 23:32:22 +0000

This is a quick note for some commands, I have found useful.

Get the currently configured OS hostname

`1`	`> racadm get System.ServerOS.Hostname`

Set the configured OS hostname

1
2
3


> racadm set System.ServerOS.Hostname hv-2.ka.beiheimdaheim.de
[Key=System.Embedded.1#ServerOS.1]
Object value modified successfully

Reset the SSL certificate

1
2


> racadm sslresetcfg
> racadm racreset

Get a list of all storage devices, and their blocksize (conversion of NetApp Disks - blocksize 520)

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25


$ for sg in $( ls /dev/sg* ); do output=$(sg\_format $sg 2>/dev/null); blocksize=$( echo "$output" \| grep 'Block size' \| cut -d\\= -f2 \| cut -d\ -f1); echo "$sg: $blocksize"; done
/dev/sg0: 512
/dev/sg1: 512
/dev/sg10: 512
/dev/sg11: 512
/dev/sg12: 512
/dev/sg13: 512
/dev/sg14: 512
/dev/sg15: 512
/dev/sg16: 512
/dev/sg17: 512
/dev/sg18: 512
/dev/sg19: 512
/dev/sg2: 512
/dev/sg20: 512
/dev/sg21: 512
/dev/sg22:
/dev/sg23:
/dev/sg3: 512
/dev/sg4: 512
/dev/sg5: 512
/dev/sg6: 512
/dev/sg7: 512
/dev/sg8: 512
/dev/sg9: 512

List the servers power status and try and turn the power off.

1
2
3
4


admin1-> racadm serveraction powerstatus
Server power status: ON
admin1-> racadm serveraction powerdown
ERROR: Timeout while waiting for server to perform requested power action.

If you happen to have 3rd party fans inside the system, you may get the above reaction.

Nagios: Service Check Timed Out

Fri, 07 Dec 2018 21:24:54 +0000

Since I got the pleasure of watching some Windows boxen with Nagios, I took the Windows Update plugin from Michal Jankowski and implemented it. It took me some time, to initially set up the nsclient++ correctly so it just works, but up till now the check plugin sometimes reported the usual “Service Check Timed Out”.

Usually I ended up increasing the cscript timeout, or the nsclient++ socket timeout, but it still kept showing up. Since I rely heavily on my surveillance tools, I have the demand, that as few as possible false positives show up. So I ended up chasing down this error today, and after that I have to say it was quite simple.

Mass-updating Tivoli Storage Manager drive status

Wed, 11 Oct 2017 19:48:40 +0000

I was fighting with our VTL again, and TSM was thinking all the drives were offline. In order to update the drive status, you’d need to go into the ISC and select each drive and set them to ONLINE. Since I’m a bit click-lazy, I wrote a simple nested for-loop, which gives me the output to update all the drives at once:

1
2
3
4
5


for i in 1 2; do
 for k in $( seq -w 1 32 ); do
 echo "UPDATE DRIVE VTL$i VTL${i}_DR${k} ONLINE=YES"
 done
done

Result is a list like this:

VMware Auto Deploy already registered / RuleEngine

Sun, 03 Sep 2017 19:19:28 +0000

I had this weird plugin error the other day which bothered me on Friday. I decided to go fixing it. So after poking around in the vCenter installed software list. I couldn’t find the Auto Deploy in the list, so I figured due to my recent vCenter reinstallation while keeping the database, I forgot to reinstall Auto Deploy.

I went ahead and started the Auto Deploy setup from the DVD again, until I received this weird looking error. Apparently the setup thought (and decided correctly) that Auto Deploy was already installed in my vCenter.

Debian: dmesg output contains Error: Driver 'pcspkr' is already registered, aborting…

Tue, 28 Feb 2017 15:18:42 +0000

Well, I recently prepared a bunch of Debian KVM guests, and today I got annoyed (basically because logwatch complains about it …) by this pesky error message on each startup. What causes this is error is really simple.

Udev loads the PC speaker driver (pcspkr) and then (for whatever reason) tries to load the alsa-module for the PC speaker (snd_pcsp). And the second one, basically fails. All we need to do, is create a blacklist.conf and add the latter one to it.

Synology DS213+: Disable Blue Status LED

Fri, 09 Sep 2016 08:03:18 +0000

Well, the title pretty much says what I want to do. Even if the DS213+ is on top of a living room cupboard, it’s still way to bright .. as I don’t need really need the LED, here’s a quick hack (the ID and the device is taken from the Synology Wiki) on how to disable it on each startup:

1
2
3
4
5
6
7
8


#!/bin/sh

case $1 in
 start)
 echo "Disabling Power LED"
 echo 6 > /dev/ttyS1
 ;;
esac

Just place the file in /opt/etc/init.d/S01leds and the script is gonna turn the LED off during a boot/reboot.

UCS blades w/ Boot-from-SAN and AutoYaST

Thu, 30 Jun 2016 14:49:01 +0000

As I wrote before about enabling multipathing for the AutoYaST installation it’s about time I write this one here.

Sadly AutoYaST needs a little push in the right direction (as to where to actually put the root device), so here’s part of my AutoYaST profile for such a Cisco blade:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54


<profile xmlns="http://www.suse.com/1.0/yast2ns" xmlns:config="http://www.suse.com/1.0/configns">

 <bootloader>
 <device_map config:type="list">
 <device_map_entry>
 <firmware>hd0</firmware>
 <linux>/dev/sda</linux>
 </device_map_entry>
 </device_map>
 </bootloader>

 <partitioning config:type="list">
 <drive>
 <device>/dev/sda</device>
 </drive>
 </partitioning>

 <scripts>
 <pre-scripts config:type="list">

 <script>
 <debug config:type="boolean">false</debug>
 <feedback config:type="boolean">false</feedback>
 <filename>config-ucs.sh</filename>
 <interpreter>shell</interpreter>
 <source><![CDATA[
cat /tmp/profile/autoinst.xml | sed "s,/dev/sda,/dev/mapper/`/sbin/multipath -ll | grep dm-0 | cut -d -f1`," > /tmp/profile/modified.xml
]]>
 </source>
 </script>

 </pre-scripts>

 <chroot-scripts config:type="list">

 <script>
 <chrooted config:type="boolean">true</chrooted>
 <debug config:type="boolean">true</debug>
 <feedback config:type="boolean">true</feedback>
 <filename>config-ucs-chroot.sh</filename>
 <interpreter>shell</interpreter>
 <location>http://install.home.barfoo.org/autoyast/scripts/config-ucs-chroot.sh</location>
 </script>

 </chroot-scripts>
 </scripts>

 <software>
 <packages config:type="list">
 <package>multipath-tools</package>
 </packages>
 </software>

</profile>

Now, the profile addition takes care of the placement of the root-device now (simply parses multipath -ll) and adjusts the pulled profile accordingly ( /tmp/profile/modified.xml), which AutoYaST then re-reads.

Extend a LVM btrfs partition

Fri, 11 Mar 2016 06:53:58 +0000

Recently I had the issue, that my root partition (/ or slash) was a bit too small for some update. So I had to look up how to resize the root partition. Luckily with LVM/btrfs this works like a charm (if you added enough free space):

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27


christian:(hans.heimdaheim.de) PWD:/
Fri Mar 11, 07:02:40 [0] > df -h
Filesystem Size Used Avail Use% Mounted on
udev 2.0G 4.0K 2.0G 1% /dev
tmpfs 396M 428K 395M 1% /run
/dev/dm-1 952M 789M 176M 82% /
none 4.0K 0 4.0K 0% /sys/fs/cgroup
none 5.0M 0 5.0M 0% /run/lock
none 2.0G 0 2.0G 0% /run/shm
none 100M 0 100M 0% /run/user
christian:(hans.heimdaheim.de) PWD:/
Fri Mar 11, 07:02:46 [0] > lvextend /dev/vg0/slash -L2G
 Extending logical volume slash to 2.00 GiB
 Logical volume slash successfully resized
christian:(hans.heimdaheim.de) PWD:/
Fri Mar 11, 07:04:51 [0] > btrfs filesystem resize max /
Resize '/' of 'max'
christian:(hans.heimdaheim.de) PWD:/
Fri Mar 11, 07:04:55 [0] > df -h
Filesystem Size Used Avail Use% Mounted on
udev 2.0G 12K 2.0G 1% /dev
tmpfs 396M 440K 395M 1% /run
/dev/dm-1 2.0G 647M 1.4G 32% /
none 4.0K 0 4.0K 0% /sys/fs/cgroup
none 5.0M 0 5.0M 0% /run/lock
none 2.0G 0 2.0G 0% /run/shm
none 100M 0 100M 0% /run/user

Windows *: mscorsvw-exe high CPU usage

Tue, 01 Sep 2015 17:14:06 +0000

Another .NET update later, an hour spent looking this up. Why is mscorsvw.exe using 25% CPU for >30 minutes?

Here’s a short outliner on how to speed it up:

The scripts we’ve provided are a convenience for people who don’t want to deal with a command prompt. If you prefer to use the command prompt, you can use the commands below instead. These commands depend on the version of the .NET Framework you have installed and the version of Windows that you have and whether it’s 32-bit or 64-bit.

NGINX reverse proxy for Synology DiskStation

Wed, 05 Aug 2015 15:47:22 +0000

Well, I’ve been tinkering with NGINX for a while at home, up till now I had a somewhat working reverse proxy setup (to access my stuff, when I’m not at home or away).

What didn’t work so far was the DSM web interface. Basically, because the interface is using absolute paths in some CSS/JS includes, which fuck up the whole interface.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14


<link rel="stylesheet" type="text/css" href="/scripts/ext-3/resources/css/ext-all.css?v=3211" />
<link rel="stylesheet" type="text/css" href="/scripts/ext-3/resources/css/xtheme-gray.css?v=3211" />
<link rel="stylesheet" type="text/css" href="/scripts/ext-3/ux/ux-all.css?v=3211" />
<link rel="stylesheet" type="text/css" href="resources/css/desktop.css?v=3211" />
<link rel="stylesheet" type="text/css" href="resources/css/flexcrollstyles.css?v=3211" />
...
<script type="text/javascript" src="/scripts/uistrings.cgi?lang=enu&v=3211"></script>
<script type="text/javascript" src="/webfm/webUI/uistrings.cgi?lang=enu&v=3211"></script>
<script type="text/javascript" src="uistrings.cgi?lang=enu&v=3211"></script>
<script type="text/javascript" src="/scripts/prototype-1.6.1/prototype.js?v=3211"></script>
<script type="text/javascript" src="/scripts/ext-3/adapter/ext/ext-base.js?v=3211"></script>
<script type="text/javascript" src="/scripts/ext-3/ext-all.js?v=3211"></script>
<script type="text/javascript" src="/scripts/ext-3/ux/ux-all.js?v=3211"></script>
<script type="text/javascript" src="/scripts/scrollbar/flexcroll.js?v=3211"></script>

After some googling and looking through the NGINX documentation I thought “Why don’t I create a vHost for each application that is being served by the reverse proxy?”.

foobar2000 File Operations Setup

Thu, 02 Jul 2015 07:19:29 +0000

As I said in the previous posts, I’ve reorganized my music library. That included creating sub directories based on the first letter of the artists name (say for example AC/DC would be sorted into the folder A, Iron Maiden would be sorted into I).

So here’s the file name pattern, that I’ve used to accomplish this:

`1`	`$left(%album artist%,1)\%album artist% - [%date% - ]%album%\$num(%discnumber%,1)%tracknumber%. %title%`

Kodi Shell Script: Find videos missing a thumbnail

Mon, 06 Apr 2015 19:55:16 +0000

Well, compared to the previous script, this one is a short one. It’ll find all Matroska containers lacking a corresponding thumbnail (-thumb.jpg or .tbn) file.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21


#!/opt/bin/bash

# Find all episodes/movies missing a thumb file

MKV="$( find . -name "*.mkv" | sed "s,./,," | sort )"

echo "These videos are missing a thumbnail file:"
echo ""
for mkv in $MKV; do
 basename="${mkv%.*}"

 # Check if there is a <xbmc11 thumbnail file
 if [ -f "$basename.tbn" ] ; then
 :
 elif [ -f "$basename-thumb.jpg" ] ; then
 :
 else
 echo " - $basename.mkv"
 fi
done
echo

Sickbeard Shell Script: Fix TV episodes name

Mon, 06 Apr 2015 19:52:27 +0000

Well, I use SickBeard. And sometimes (very often actually) the names are rather screwed up…. So I wrote myself a script, that’ll fix most episode errors (I’ve caught so far …).

 1
 2
 3
 4
 5
 6
 7
 8
 9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245


#!/opt/bin/bash

OPTS="$@"

[ "$( cat /etc/distribution 2>/dev/null )" == "OpenELEC" ] && openelec=1 || openelec=0
[ "$( mount | /opt/bin/grep "$( echo $PWD | /opt/bin/sed "s,/tvshows,," )" | awk '{ print $5 }' )" == "cifs" ] && cifs=1 || cifs=0

if [ $openelec -eq 0 -a $cifs -eq 0 ] ; then
 # Fix permissions
 chown -R nobody.users "$PWD"
 /opt/bin/findutils-find "$PWD" -type f ! -perm 0664 -exec chmod 0664 {} \;
 /opt/bin/findutils-find "$PWD" -type d ! -perm 0775 -exec chmod 0775 {} \;
fi

EXTENSIONS=".avi .mp4 .mkv .srt .tbn .nfo .xml -thumb.jpg"

# Needs renaming:
PATTERN="WEB.DL,WEB-DL
Web-Dl,WEB-DL
AVC.AC3,DD5.1.H.264
.AC3.PSIV,-PSIV
DD.5.1,DD5.1
DD5-1,DD5.1
Dd5.1,DD5.1
DD.2.0,DD2.0
WEB-DLAAC2,WEB-DL.AAC2
H.264.DD5.1,DD5.1.H.264
AAC.2.0,AAC2.0
DD5.1.AAC2.0,DD5.1
WEB-DL-pcsyndicate,WEB-DL.DD5.1.H.264-pcsyndicate
x264,H.264
X264,H.264
h264,H.264
H264,H.264
Forever.S0,Forever.2014.S0
H-264,H.264
h.264,H.264
DD5.1-H.264,DD5.1.H.264
.KiNGS,-KiNGS
-KINGS,-KiNGS
.TB,-TB
.BS,-BS
.~DG2~,
.~DG~,
.CtrlHD,-CtrlHD
1x,S01E
.ECI,-ECI
.NFHD,-NFHD
.POD,-POD
\.NTb,\-NTb
.DNR,-DNR
.pcsyndicate,-pcsyndicate
German.DD20.Synced.DL.720p.iTunesHD.AVC,720p.WEB-DL.DD2.0.DL.H.264
-ss,-SS
.Reaperza,-Reaperza
Grey's.Anatomy,Greys.Anatomy
Five-0,Five.0
Hawaii.Five.0.2010\.S0,Hawaii.Five.0.S0
WEBRip,WEB-DL
WEB-DL.H.264.AAC2.0,WEB-DL.AAC2.0.H.264
Hell.On.Wheels,Hell.on.Wheels
Mythbusters,MythBusters
Dont.Trust.The.B----.In.Apartment.23,Dont.Trust.The.B.In.Apartment.23
Dont.Trust.the.Bitch.in.Apartment.23,Dont.Trust.The.B.In.Apartment.23
Dont.Trust.the.B.in.Apartment.23,Dont.Trust.The.B.In.Apartment.23
Rizzoli.&.Isles,Rizzoli.and.Isles
Revolution.2012,Revolution
Orange.Is.The.New.Black,Orange.Is.the.New.Black
Castle.S,Castle.2009.S
/Agents.of.S.H.I.E.L.D.,/Marvels.Agents.Of.S.H.I.E.L.D.
Marvel.Agents.Of.SHIELD,Marvels.Agents.Of.S.H.I.E.L.D.
Marvel.Agents.Of.S.H.I.E.L.D..S,Marvels.Agents.Of.S.H.I.E.L.D.S
Marvel.Agents.Of.S.H.I.E.L.D.S,Marvels.Agents.Of.S.H.I.E.L.D.S
Marvels.Agents.Of.S.H.I.E.L.D..S,Marvels.Agents.Of.S.H.I.E.L.D.S
Marvels.Agents.of.S.H.I.E.L.D.,Marvels.Agents.Of.S.H.I.E.L.D.
Rizzoli.Isles,Rizzoli.and.Isles
The.Bridge.S,The.Bridge.US.S
Last.Man.Standing.US,Last.Man.Standing.2011
The.Americans.S,The.Americans.2013.S
Person.Of.Interest,Person.of.Interest
The.Tomorrow.People.S0,The.Tomorrow.People.US.S0
The.Code.AU,The.Code.2014
How.to.Get.Away.With.Murder,How.To.Get.Away.With.Murder
How.to.Get.Away.with.Murder,How.To.Get.Away.With.Murder
How.To.Get.Away.with.Murder,How.To.Get.Away.With.Murder
Izombie,iZombie
-SiCKBEARD,.720p.WEB-DL.DD5.1.H.264
DL.DD5.1.WEB-DL,WEB-DL.DD5.1.DL
XIII.The.Series.2011,XIII.2011"

FILEEXT="\\.nfo\\.
\\.par2\\."

# Find files containing spaces and rename them according to the scene rules
for ext in $EXTENSIONS; do
 [ "$ext" != ".srt" ] && \
 /opt/bin/find . -name "* *$ext" -type f -exec sh -c '
 fp="${0%/*}"
 fn="${0##*/}"
 fn="$( echo $fn | /opt/bin/sed -e "s,\!,," )"
 fn="$( echo $fn | /opt/bin/egrep -oi "[A-Z][A-Za-z0-9.-]+.$ext" | sort -u | tail -n1 )"
 echo "Enforcing naming scheme for $0"
 mv "$0" "$fp/$fn"
 read -t 1 line </dev/tty
 ' {} ';'
done

# Build the list of replacements. Do it here, since we need to
# do it only once, and not for each file.
for pat in $PATTERN; do
 set -- `echo $pat | tr , \ `
 REN="$REN -e ""s,$1,$2,g"""
done

for pat in $FILEEXT; do
 REN="$REN -e ""s,${pat},,g"""
done

REN="$REN -e ""s/[()]//g"""

# Main loop starts here. Only handle files with the specified extensions.
for ext in $EXTENSIONS; do
 REGEX="$REGEX|$ext"
done

REGEX="$( echo $REGEX | sed "s,|,," )"
MAIN_REN=$REN

for file in $( /opt/bin/find . -regextype posix-egrep -type f -regex ".*($REGEX)" ! -wholename '*tvshow*' ! -wholename '*season*' ! -wholename '*actors' | sort ); do
 OLD="$file"
 NEW="$file"
 REN="$MAIN_REN"

 if [ "$( echo $file | /opt/bin/egrep "\.(REPACK|REREPACK|PROPER|iNTERNAL|RERIP|REAL)\." )" == "" ] ; then
 if [ "$( echo $file | /opt/bin/grep "720p" )" != "" ] ; then
 REN="$REN -e ""s/\(.*S[0-9]\+\(E[0-9]\+\)\+\)\+.*\(720p.*\)/\1.\3/"""
 fi

 if [ "$( echo $file | /opt/bin/grep "1080p" )" != "" ] ; then
 REN="$REN -e ""s/\(.*S[0-9]\+\(E[0-9]\+\)\+\)\+.*\(1080p.*\)/\1.\3/"""
 fi
 fi
 NEW="$( echo $OLD | /opt/bin/sed $REN )"

 if [ ! -z "$NEW" -a "$NEW" != "$OLD" ] ; then
 echo "Enforcing naming scheme for $file"
 mv "$OLD" "$NEW"
 fi
done
[ "$OPTS" = "--force" ] && RESCAN_ALL=1 || RESCAN_ALL=0

IFS="
"

if [ $RESCAN_ALL -eq 1 ] ; then
 FILES="`/opt/bin/grep -rl 'episodedetails' */*/*.nfo 2>/dev/null`"
else
 # Get a list of all NFO files having incorrect information
 FILES="`/opt/bin/egrep -rli '(\(Guest Star\)|\(Writer\))' */*/*.nfo 2>/dev/null`"
fi

for episode in $FILES; do

 # First convert the nfo-file to use linux line-breaks.
 /opt/bin/sed -i 's/^M$//' $episode

 if [ "$( /opt/bin/grep '<director>.*</director>' $episode )" == "" ] ; then
 DIRECTOR_MISSING="$DIRECTOR_MISSING $episode"
 fi

 if [ "$( /opt/bin/grep '<credits>.*</credits>' $episode )" == "" ]; then
 CREDITS_MISSING="$CREDITS_MISSING $episode"
 fi

 if [ "$( /opt/bin/grep '<credits>.*\(Writer\).*</credits>' $episode )" == "" ]; then
 WRITER_MISSING="$WRITER_MISSING $episode"
 fi

 if [ "$( /opt/bin/grep '<credits>.*\&amp;.*</credits>' $episode )" != "" ]; then
 CREDITS_JUNK="$CREDITS_JUNK $episode"
 else
 # see if the file has new-style (multi-line) or old-style (single-line) credits.

 if [ "$( /opt/bin/grep '<credits>' $episode | wc -l )" -gt 1 ] ; then
 echo "Updating episode information in $episode (new-style)"
 mv $episode $episode.old
 /opt/bin/grep -v "(Guest Star)</credits>" $episode.old | /opt/bin/sed \
 -e "s, (Writer),,g" -e -e "s,|, / ,g" \
 -e "s, , ,g" -e 's/^[ \t]*//' | \
 tee $episode &>/dev/null
 else
 # Mangle the list, so we can work with it

 old_credits="$( /opt/bin/grep "<credits>" $episode | /opt/bin/sed -n \
 -e 's/.*<credits>\(.*\)<\/credits>.*/\1/p' )"

 # Fixup the credits line
 new_credits="$( echo $old_credits | tr '/' '\n' | /opt/bin/grep -v "Guest Star" | \
 tr '\n' '/' | /opt/bin/sed -e "s, (Writer),,g" \
 -e "s,|, / ,g" -e "s, , ,g" | /opt/bin/sed -e 's/^[ \t]*//' \
 -e "s/\/*$//" )"

 shopt -q -s extglob
 echo "Updating episode information in $episode (old-style)"
 if [ -n "$new_credits" ] ; then
 /opt/bin/sed -i "s|${old_credits##+([[:space:]])}|$new_credits|g" $episode
 fi
 shopt -q -u extglob
 fi
 fi
done

IFS=" "
if [ -n "$DIRECTOR_MISSING" ] ; then
 echo "The following episodes are missing a director:"
 for episode in $DIRECTOR_MISSING; do
 echo " $episode"
 done
 echo
fi

if [ -n "$CREDITS_JUNK" ] ; then
 echo "The following episodes credits' contain junk and should be fixed at thetvdb.com:"
 for episode in $CREDITS_JUNK; do
 echo " $episode"
 done
 echo
fi

if [ -n "$CREDITS_MISSING" ] ; then
 echo "The following episodes are missing credits:"
 for episode in $CREDITS_MISSING; do
 echo " $episode"
 done
 echo
fi

if [ -n "$WRITER_MISSING" ] ; then
 echo "The following episodes are missing a writer:"
 for episode in $WRITER_MISSING; do
 echo " $episode"
 done
fi

/opt/bin/findutils-find . -name "*.old" -exec rm {} \;

Bear in mind, this script is using ipkg/optware executables, mainly because the provided BusyBox ones are lacking some features.

PowerCLI: Delete all snapshots by name

Mon, 23 Feb 2015 19:45:22 +0000

I have the issue that we use a cloud automation software, which for whatever reason failed to delete the hypervisor snapshots.

Now I was looking into a quick way to delete all those 520 snapshots with PowerCLI, and I found something pretty quick.

Based on that, I came up with my own quick PowerCLI one-liner, that’ll list all VMs and their snapshots:

1

Get-VM | Get-Snapshot | Where { $_.Name -like "201502*" } | Format-Table -Property VM, Name, Created, Description, SizeMB -AutoSize

Now, I could use another one-liner to delete all snapshots, that’ll look like this:

Migrating from XenServer to ESXi

Thu, 19 Feb 2015 09:17:05 +0000

For the past two months we’ve been trying to migrate a bunch (90 or so) VMs from XenServer to ESXi … However for some reason on some of them, the Converter Service would crash.

VMware Converter crashing due to rsintcor32.dll

Up till Monday, I had no idea why. I decided to look into the error once again, and this time decided just to Google the failing module… And guess what ? Out came this Citrix forum post regarding the failing module. So, after knowing that rsintcor32.dll belongs to the Citrix System Monitoring Agent service (well, I could have guessed that from the DLLs path 😛) I decided to simply stop the service.

Tiny Tiny RSS init-script for multiple instances on Debian Wheezy

Mon, 09 Feb 2015 04:04:51 +0000

Well, I have a bunch of Tiny Tiny RSS instances running on my webhost, and I wanted a init-script that starts the update-daemons for all instances.

Now, there’s already a bunch of init scripts for Debian around ( 1, 2) however none of them were to my liking or did what I wanted it to do. So I ended up (yeah, I know again) rewriting them.

 1
 2
 3
 4
 5
 6
 7
 8
 9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135


#!/bin/sh
### BEGIN INIT INFO
# Provides: ttrss
# Required-Start: $local_fs $remote_fs networking
# Required-Stop: $local_fs $remote_fs
# Default-Start: 2 3 4 5
# Default-Stop: 0 1 6
# Short-Description: Tiny Tiny RSS update daemon
# Description: Update the Tiny Tiny RSS subscribed syndication feeds.
### END INIT INFO

set -e

PATH=/sbin:/usr/sbin:/bin:/usr/bin
DESC="Tiny Tiny RSS update daemon"
NAME=$(command basename "${0}")

DISABLED=1
FORKING=0

# Read configuration variable file if it is present
[ -r "/etc/default/${NAME}" ] && . "/etc/default/${NAME}"

DAEMON_SCRIPT="update.php --daemon"

if [ $FORKING -ne 0 ] ; then
 DAEMON_SCRIPT="update_daemon2.php"
fi

DAEMON=/usr/bin/php

# Exit if the package is not installed
[ -x "$DAEMON" ] || exit 0

[ -d "${TTRSS_PATH}" ] || exit 0

# Load the VERBOSE setting and other rcS variables
. /lib/init/vars.sh

# Define LSB log_* functions.
# Depend on lsb-base (>= 3.0-6) to ensure that this file is present.
. /lib/lsb/init-functions

if [ "$DISABLED" != "0" -a "$1" != "stop" ]; then
 log_warning_msg "Not starting $DESC - edit /etc/default/tt-rss and change DISABLED to be 0.";
 exit 0;
fi

# Function that starts the daemon/service
do_start()
{
 for dir in ${TTRSS_PATH}/*; do
 INSTANCE_NAME=${dir##*/}
 start-stop-daemon --start --make-pidfile --background --quiet
 --chuid "${TTRSS_USERID}" --group "${TTRSS_GROUPID}"
 --chdir "${dir}"
 --pidfile "${TTRSS_PIDDIR}/ttrss-${INSTANCE_NAME}.pid"
 --exec "${DAEMON}" --test >/dev/null
 || return 1

 start-stop-daemon --start --make-pidfile --background --quiet
 --chuid "${TTRSS_USERID}" --group "${TTRSS_GROUPID}"
 --chdir "${dir}"
 --pidfile "${TTRSS_PIDDIR}/ttrss-${INSTANCE_NAME}.pid"
 --exec "${DAEMON}" -- ${dir}/${DAEMON_SCRIPT} --log
 /var/log/ttrss/${INSTANCE_NAME}.log
 || return 2
 done
}

# Function that stops the daemon/service
do_stop()
{
 for dir in ${TTRSS_PATH}/*; do
 INSTANCE_NAME=${dir##*/}
 start-stop-daemon --stop --make-pidfile --quiet
 --retry=TERM/1/KILL/5
 --pidfile "${TTRSS_PIDDIR}/ttrss-${INSTANCE_NAME}.pid"

 RETVAL="$?"
 [ "$RETVAL" = 2 ] && return 2

 start-stop-daemon --stop --quiet --oknodo --retry=0/1/KILL/5
 --exec ${DAEMON}

 [ "$?" = 2 ] && return 2
 rm -f "${TTRSS_PIDDIR}/ttrss-${INSTANCE_NAME}.pid"
 return $RETVAL
 done
}

case "$1" in
 start)
 log_daemon_msg "Starting $DESC" "$NAME"
 do_start
 case "$?" in
 0|1) log_end_msg 0 ;;
 2) log_end_msg 1 ;;
 esac
 ;;
 stop)
 log_daemon_msg "Stopping $DESC" "$NAME"
 do_stop
 case "$?" in
 0|1) log_end_msg 0 ;;
 2) log_end_msg 1 ;;
 esac
 ;;
 restart|force-reload)
 # If the "reload" option is implemented then remove the
 # 'force-reload' alias
 log_daemon_msg "Restarting $DESC" "$NAME"
 do_stop
 case "$?" in
 0|1)
 do_start
 case "$?" in
 0) log_end_msg 0 ;;
 1) log_end_msg 1 ;; # Old process is still running
 *) log_end_msg 1 ;; # Failed to start
 esac
 ;;
 *)
 # Failed to stop
 log_end_msg 1
 ;;
 esac
 ;;
 *)
 echo "Usage: ${NAME} {start|stop|restart|force-reload}" >&2
 exit 3
 ;;
esac

:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12


# Set DISABLED to 1 to prevent the daemon from starting.
DISABLED=0

TTRSS_USERID="www-data"
TTRSS_GROUPID="www-data"
TTRSS_PIDDIR="/var/run"
TTRSS_PATH="/var/www/rss.heimdaheim.de/www"

# Allow the update_daemon script to use a forking daemon instead of a
# single-threaded instance.
# This option is only available for TinyTinyRSS 1.2.20 and above.
FORKING=0

Quick-Add a bunch of Virtual Machine Port-Groups from CSV

Sat, 03 Jan 2015 08:06:07 +0000

Well, I’m currently migrating between different cluster layouts, and I had to create the new PortGroups on the old hosts, in order for me to switch between old and new hosts.

1
2
3
4
5
6
7


$vmhosts = Get-Cluster "UCSCL01-02" | Get-VMHost
foreach ($vmhost in $vmhosts) {
 import-csv -Delimiter ";" .\pg.csv | foreach {
 $vmhost | Get-VirtualSwitch -Name "vSwitch3" | New-VirtualPortGroup `
 -Name $_.portgroup -VLanId $_.vlanid
 }
}

And the corresponding CSV would look like this:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41


portgroup;vlanid
1700_routers;1700
1701_routers;1701
1702_routers;1702
1703_routers;1703
1704_routers;1704
1705_routers;1705
1706_routers;1706
1707_routers;1707
1708_routers;1708
1709_routers;1709
1710_routers;1710
1711_routers;1711
1712_routers;1712
1713_routers;1713
1714_routers;1714
1715_routers;1715
1716_routers;1716
1717_routers;1717
1718_routers;1718
1719_routers;1719
2000_virtual-machines;2000
2001_virtual-machines;2001
2002_virtual-machines;2002
2003_virtual-machines;2003
2004_virtual-machines;2004
2005_virtual-machines;2005
2006_virtual-machines;2006
2007_virtual-machines;2007
2008_virtual-machines;2008
2009_virtual-machines;2009
2010_virtual-machines;2010
2011_virtual-machines;2011
2012_virtual-machines;2012
2013_virtual-machines;2013
2014_virtual-machines;2014
2015_virtual-machines;2015
2016_virtual-machines;2016
2017_virtual-machines;2017
2018_virtual-machines;2018
2019_virtual-machines;2019

ViMbAdmin and mod_rewrite

Tue, 02 Dec 2014 12:30:38 +0000

Well, I use ViMbAdmin for the mail box administration of my users (and aliases) on heimdaheim.de. After I while (well, over half a year I guess), I decided to look at it again. However it didn’t work. Well this was a multi-part problem.

ViMbAdmin has been updated to require PHP composer (which populates the vendor/ folder)
the application.ini was outdated

After I fixed all that, ViMbAdmin was working again. However I decided to replace my mod_rewrite stuff (I had in my apache config from the previous version) with the one from the Documentation and that actually made things worse. So I ended up redigging into mod_rewrite (again sigh) and rewrite the Rewrite Rules… This time I’m documenting it.

Adjust album list display in foobar2000

Thu, 13 Nov 2014 09:48:23 +0000

Well, as I said earlier I’ve been playing around with my Sonos (and in that regard cleaning up my music library). Now, I started setting up my foobar2000 to ignore articles (The, A) when moving/copying file to my music library.

For example, previously the structure would have looked like this:

`1`	`albums\T\The Beatles - 1963-03-22 - Please Please Me`

Now, after implementing the file operations adjustments (I’ll post them later), the structure looks like this:

Download a (legal) Windows 8-1 Media Refresh ISO

Thu, 13 Nov 2014 09:21:26 +0000

Well, Microsoft finally had an insight into the user complaints about not being able to download a (legal) Media Refresh ISO for people with preinstalled Windows 8(.1). Now, you just have to download the Media Creation Tool from http://windows.microsoft.com/en-us/windows-8/create-reset-refresh-media.

It’s portable, just execute the EXE and it’ll download you the selected Windows 8(.1) ISO you selected. Additionally, it finally accepts the Product Keys from Windows 8, which is a big step.

Display MusicBrainz info in foobar2000

Thu, 13 Nov 2014 09:08:15 +0000

I’ve been cleaning up my music library the past few days (well, I bought a Sonos 😀), so here’s how you display for example the tagging field MUSICBRAINZ ALBUM TYPE in foobar2000’s default metadata view.

Goto preferences (Ctrl+P or File->Preferences)
Navigate to Advanced
Extend the Display node, extend Properties Dialoge node
There you’ll find the option for Standard fields
Change it to the following:

Artist Name=ARTIST;Track Title=TITLE;Album Title=ALBUM;Date=DATE;Genre=GENRE;Composer=COMPOSER;Performer=PERFORMER;Album Artist=ALBUM ARTIST;Track Number=TRACKNUMBER;Total Tracks=TOTALTRACKS;Disc Number=DISCNUMBER;Total Discs=TOTALDISCS;Comment=COMMENT;Album Type=MUSICBRAINZ ALBUM TYPE

After changing the Standard fields option, the metadata view will look like this:

ARmA III - Cheats

Mon, 27 Oct 2014 11:44:16 +0000

Well, since most trainers won’t enable me to become “GOD” (yeah, I guess I’m too stupid for ARmA III), here’s a list of commands that’ll change things.

Disable damage to player and teammates:

`1`	`{ _x allowDamage false; } foreach units group player;`

Disable player fatigue:

`1`	`player enableFatigue true; player enableFatigue false;`

OpenELEC on CuBox i - Update to latest snapshot

Mon, 20 Oct 2014 16:57:44 +0000

Here’s an easy way to update the OpenELEC running on a CuBox-i easily:

1
2
3


cd ~/.update
curl http://snapshots.openelec.tv/`curl http://snapshots.openelec.tv/ | grep OpenELEC-Cuboxi | cut -d\" -f2` | tar x
mv OpenELEC*/target/* . && rm -r OpenELEC*

PowerShell - and how to add new DNS servers to remote systems

Wed, 01 Oct 2014 17:14:23 +0000

Well, I’ve been playing around with PowerShell today. I had the task to move (as in change the IP address) two domain controllers into another VLAN. I could have done it the easy way and added the DNS servers by hand (by RDP’ing to each system having these particular DNS servers configured) - which wouldn’t have been very hard considering the domain only has 7 members at this point …

Rename a Standard Port Group on all hosts in a cluster

Wed, 24 Sep 2014 10:59:27 +0000

Well, I recently decided to rename a bunch of my Standard Port Groups, since they did no longer reflect the network they were providing. Since I’m a lazy bastard (well lazy as in click lazy), I wrote this little PowerCLI script:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37


param(
 [string] $vcenter,
 [string] $cluster,
 [string] $oldpg,
 [string] $newpg,
 [string] $vlan )

# Add the VI-Snapin if it isn't loaded already
if ( (Get-PSSnapin -Name "VMware.VimAutomation.Core" -ErrorAction SilentlyContinue) -eq $null )
{
 Add-PSSnapin -Name "VMware.VimAutomation.Core"
}

If ( !($vcenter) -or !($cluster) -or !($oldpg) -or !($newpg) -or !($vlan) )
{
 Write-Host `n "pg-cluster-rename: <vcenter-server> <cluster> <oldpg> <newpg>" `n
 Write-Host "This script renames each port group with the name <oldpg> to <newpg>" `n
 Write-Host " <vcenter-server> - DNS name of your vCenter server." `n
 Write-Host " <cluster> - Display-Name of the vCenter cluster, on which we are"
 Write-Host " gonna create the new portgroup." `n
 Write-Host " <oldpg> - Name of the old Port Group that is to be replaced (ie VLAN2)." `n
 Write-Host " <newpg> - Name of the new Port Group (ie PG-VLAN2-Produktion)." `n
 Write-Host " <vlan> - VLAN-ID for of the new port group." `n
 exit 1
}

Connect-VIServer -Server $vcenter

Get-Cluster $cluster | Get-VMHost | Get-VirtualSwitch -Name $vswitch | `
 New-VirtualPortGroup -Name $pg -VLanId $vlan
Get-Cluster $cluster | Get-VM | Get-NetworkAdapter | Where { $_.NetworkName -eq "$oldpg" } | `
 Set-NetworkAdapter -NetworkName $newpg -Confirm:$false
Get-Cluster $cluster | Get-VMHost | %{Get-View (Get-View $_.ID).configmanager.networkSystem} | %{
 $_.RemovePortGroup($oldpg)
}

Disconnect-VIServer -server $vcenter -Confirm:$false

This script basically takes a vCenter instance and a single cluster, then creates a new Port Group on each host, after which it reconfigures all VMs possessing a virtual NIC with that Port Group and then deletes the old Port Group.

Create ComicRack compatible cb7 archives

Sun, 31 Aug 2014 14:04:34 +0000

Well, I have a few directories containing comics (in JPG/PNG) format. Since I’m lazy and didn’t want to create a 7z by hand for each directory, I wrote a short script that’ll do the work for me 😄

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84


#!/bin/bash

# Mangle IFS, since space is a valid default IFS
SAVEIFS=$IFS
IFS=$(echo -en "\n")

# Locate the 7z binary
if [ -x "/usr/bin/7zr" ] ; then
 ZIP='/usr/bin/7zr'
fi

if [ -x "/usr/syno/bin/7z" ] ; then
 ZIP='/usr/syno/bin/7z'
fi

ORIG_DIR="$PWD"

#find $DIR -mindepth 1 -maxdepth 1 -type d -print0 | sed "s,./,," | while IFS= read -r -d '' dir; do
find $DIR -mindepth 1 -maxdepth 1 -type d -print0 | while IFS= read -r -d '' dir; do

 dir="${dir##*/}"
 case $dir in
 extracted|@eaDir*) continue;;
 esac

 ARCHIVE="${dir}"

 # Remove tags from file names
 ARCHIVE="$( echo $ARCHIVE | sed -e "s,\[SaHa\] ,,g" )"
 ARCHIVE="$( echo $ARCHIVE | sed 's/([^)]*)//g' )"
 ARCHIVE="$( echo $ARCHIVE | sed -e "s,_, ,g" )"
 ARCHIVE="$( echo $ARCHIVE | sed -e 's/[ \t]*$//' )"

 # Decide, whether "," or "-" separates writer and series

 # Get series and author from directory name
 WRITER="$( echo ${ARCHIVE} | cut -d, -f1 | sed "s,./,," )"
 SERIES="$( echo ${ARCHIVE} | cut -d, -f2- | sed -e 's/^[ \t]*//' )"

 # Check if the pictures are directly beyond the subdirectory. Otherwise
 # report the directory and skip it.

 HAS_PICTURES="$( find "$dir" -mindepth 1 -maxdepth 1 -type f -regex ".*\.\(PNG\|png\|jpg\|JPG\|jpeg\|JPG\)" | wc -l )"

 if [ "$HAS_PICTURES" -lt 1 ] ; then
 echo
 echo "Attention: $dir"
 echo "has no pictures in the immediate directory. Please move the pictures"
 echo "from the subdirectory to the immediate directory."
 echo
 continue
 fi

 # Create a bare ComicInfo.xml
 cat > "$dir/ComicInfo.xml" << EOF
<?xml version="1.0"?>
<ComicInfo xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
 <Series>$SERIES</Series>
 <Writer>$WRITER</Writer>
 <Genre>Adult</Genre>
 <LanguageISO>en</LanguageISO>
 <AgeRating>Adults Only 18+</AgeRating>
</ComicInfo>
EOF

 if [ -f "$ORIG_DIR/$ARCHIVE.cb7" ] ; then
 echo "$ARCHIVE.cb7: Skipping, since the new archive already exists ?"
 continue
 else
 cd "$dir"
 # Create the cb7 archive
 echo "Creating $ARCHIVE.cb7"
 ret=$( $ZIP a "$ORIG_DIR/$ARCHIVE.cb7" * &>/dev/null && echo 0 || echo 1 )

 cd $ORIG_DIR
 if [ $ret -eq 0 -a -f "$ORIG_DIR/$ARCHIVE.cb7" ] ; then
 rm -rf "$dir" &>/dev/null
 fi

 fi
done

# restore $IFS
IFS=$SAVEIFS

Hetzner, Debian, KVM and IPv6

Mon, 25 Aug 2014 20:08:11 +0000

Well, I’ve had my share of troubles with Hetzner, Debian, KVM and IPv6 addresses. After figuring out how to get around the IPv6 neighbor stuff (npd6 for teh win!), I battled with the problem that after restarting (rebooting/resetting - doesn’t really matter) a domain it’s IPv6 address would no longer work.

Well, today I decided to take a closer look. After the reboot, the guest comes up with this:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14


pinguinfuss:(thanatos.heimdaheim.de/webs) PWD:~
Mon Sep 09, 19:01:27 [0] > ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
 inet 127.0.0.1/8 scope host lo
 inet6 ::1/128 scope host
 valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
 link/ether 52:54:00:96:ed:35 brd ff:ff:ff:ff:ff:ff
 inet 78.46.37.114 peer 78.46.37.118/32 brd 78.46.37.114 scope global eth0
 inet6 2a01:4f8:110:3148::5/64 scope global tentative dadfailed
 valid_lft forever preferred_lft forever
 inet6 fe80::5054:ff:fe96:ed35/64 scope link
 valid_lft forever preferred_lft forever

A quick peek into ip 6 neigh show reveals this:

Nagios: Integrating Cisco switches

Wed, 20 Aug 2014 08:20:53 +0000

Well, as I wrote recently, we received a new BladeCenter a few weeks back. Now, as we slowly take it into service I was interested in watching the utilization of the back planes as well as the CPU utilization of the Cisco Catalyst 3012 network switches.

The first mistake I made, was to trust Cisco with their guide about how to get the utilization from the device using SNMP. They stated some OID’s, which I tried with snmpwalk and got a result from.

1
2


snmpwalk -v1 -c public -O n 10.0.0.35 .1.3.6.1.4.1.9.5.1.1.8
.1.3.6.1.4.1.9.5.1.1.8.0 = INTEGER: 0

Now, as I tried retrieving the SNMP data by means of the check_snmp plugin, I got some flaky results:

1
2
3
4


/usr/lib/nagios/plugins/check_snmp -H 10.0.0.35 -C public
 .1.3.6.1.4.1.9.5.1.1.8
SNMP problem - No data received from host
CMD: /usr/bin/snmpget -t 1 -r 5 -m '' -v 1 [authpriv] 10.0.0.35:161

Those of you, who read the excerpts carefully will notice the difference between snmpwalk and the OID I passed on to check_snmp.

The point being, the OID’s Cisco gave in their Design tech notes are either old, or just not accurate at all. After passing on the .0 to each value given by Cisco, the check_snmp is all honky dory and integrated into Nagios.

As usual, the Nagios definitions are further down, for those interested.

Summer - finally

Sat, 16 Aug 2014 10:25:27 +0000

Well it’s mid of July and the weather seems to be my friend. 25°C ain’t that bad. I really liked the weather last week (although everyone at work was bitching about it being tooo warm 😛) and would like to keep it (for the rest of the year of course!).

Hrm, for everyone who loved the music within Kill Bill - Volume 1: Tomoyasu Hotei really rocks (playing Battle without Honor or Humanity).

SLES-9-2

Sat, 16 Aug 2014 10:23:06 +0000

Hrm, today I tried to install some extra programs I need for devel-stuff (quilt, git, subversion) on an ancient (not sooo ancient) SuSE Linux Enterprise Server 9.2.

Did I already mention I hate rpm-based distros ? Ah and I missed to tell you, that I really love USE-flags …

Ok, so it took me half the afternoon, to rebuild half of all installed packages (heh, kde* depends upon expat*; but who need X or even KDE on a server-machine?) and figured that everything was for nothing.

portage / eselect-compiler

Sat, 16 Aug 2014 10:22:49 +0000

On Monday I helped Ned fixing ebuilds using the following DEPEND/RDEPEND:

`1`	`*DEPEND=" \|\| ( app-admin/eselect-compiler >=sys-devel/gcc-config-1.3.1 )"`

Problems only popped up because app-admin/eselect-compiler got masked due to numerous, unresolved bugs (and Jeremy/eradicator being MIA again).

But that also revealed a bug within portage on handling the || ( a b ), where a is being masked.

So solar and I had being working on updating those ebuilds that use the above syntax (or something similar, some are using other versions, thanks Sven for the hint/reminder).

LiveCD, bootstraping and binary packages

Sat, 16 Aug 2014 10:22:11 +0000

Ok, as I said earlier I’m currently reinstalling my system from scratch (to finally and completly get rid of stupid eselect-compiler).

The first attempt was a bit, ehrm, error-prone (as in unpacking stage3-i686-2006.0.tar.bz2, chroot ing to that and running emerge -ek system). Result was a b0rked chroot after the first two packages (heh, it was pulling in =sys-libs/glibc-2.4-r3 as the second package, thus everything that hasn’t been merged from my binpkg-repo and still originating from the snapshot being broken).

Time-out

Sat, 16 Aug 2014 10:21:20 +0000

OK, as some of you may now (hah, you’re really a dear Mr. Gulleen); I’m currently practicing an extended time-out (sort of) from Gentoo.

I noticed devrel and all the other groups I have a responsibility for, that I’ll be more or less away till 30th November 2006. This is due some crazy stuff currently happening at work (like my desk being full of paperwork).

I also lately thought about retiring myself from Gentoo, but haven’t come to a conclusion yet. I really enjoy the work currently, but I can’t find as much motivation/time as I used to find earlier this year. True, work is currently eating myself up completely, with all that provisioning (which hopefully ends around 30th November this year - note to head: accounting at German universities sucks !).

DB Adventure Travels - part 3

Sat, 16 Aug 2014 10:21:01 +0000

Heh, I managed to catch the S1 to Hellenberg and got of in Stuttgart Rohr. The S-Bahn doors nearly squashed me.

I’m now at my aunt’s place, sitting on the sofa and relaxing a bit. My aunt was really happy when she saw me (as she always is if I or my brother comes by).

I’ll go to bed in a few minutes, Saturday is getting really stressing. I need to get to my cousin and his wife (and my little grand cousins). I even need to buy a new LCD display for my aunt, since she somewhere red that those need 70% less power.

Seemant, never ending wisdom and work (confession)

Sat, 16 Aug 2014 10:19:10 +0000

So Uncle Seemant just conceded his defeat (at least for yesterday’s battle) which gives me something I barely have. But for today’s battle I guess I have to concede, as he has some valid points.

#0: Why am I still awake ? It’s a bit after 12pm around here (that’s in Germany) and I’m usually in bed at that time, but not today. Basically I waited all the time for my dear Uncle Seemant to gimme his response, so I might be enlightened by his never ending wisdom. And I have to admit it was worth it 😛 so kids, listen to your Uncle Seemant! The other part of it is, I just don’t want to go to bed, as I’m trying to avoid some nightmares with blood and killing people and stuff like that.

Adapter teaming on SLES10

Sat, 16 Aug 2014 10:18:13 +0000

Since one of the requirements for my current project is having NIC redundancy, I didn’t get around looking at the available " adapter teaming" (or adapter bonding) solutions available for Linux/SLES.

First I tried to dig into the Broadcom solution (since the Blade I first implemented the stuff uses a Broadcom NetXtreme II card) , but found out pretty soon that the basp configuration tool, which is only available on the Broadcom driver CD’s shipped with the Blade itself, pretty much doesn’t work.

Bloody cluster solutions

Sat, 16 Aug 2014 10:17:48 +0000

In preparation to get our website (and all those other websites - like www.fh-neubrandenburg.de or www.hmt-rostock.de) clustered, someone bought the cluster version of the PacketPro 450. These things are nice, especially considering you don’t need to fiddle around with LVS yourself (which is a real pain in the ass).

The only problem I have currently with them is that they scan the database and web nodes every 30 seconds, and since we have an active node and a hot-standby both do this and producing this:

screen and UTF-8

Sat, 16 Aug 2014 10:15:32 +0000

Since I got annoyed by umlauts being printed as ░, I figured I’d install a UTF-8 capable font on this box here and all my problems would be gone. But not so fast.

screen is a real fucked up thing. If you’re starting screen via screen -U everything is nice and cosy, and you get your UTF-8 goodness. But, don’t think you’ll get away with just enabling UTF-8 as default and enabling UTF-8 for each new window by doing this:

VBscript undamp; Active Directory and printers

Sat, 16 Aug 2014 10:15:10 +0000

Well, since our current solution for mapping printers is an ugly batch file, which needs to be put into Startup, I today poked at doing it in VBscript (I know, but it’s less ugly than the batch script, trust me).

As some of you know, printers are only applicable to users (as in you can’t put a startup script onto an OU, which is going to map the printers). So as we store users and the computes in different OU’s in our Active Directory (we do have about 15.000 students), I can’t apply the printer.vbs to the users OU directly either, unless I implement some intelligence into the script itself.

Turning a simple chroot into a binpkg repository

Sat, 16 Aug 2014 10:12:40 +0000

OK, since Alex asked me last Sunday what exactly needs to be done to turn a simple chroot (or even a bloody box) into a binpkg producing environment, here’s a little howto …

First, lets start from a freshly unpacked stage3.

1
2
3
4
5


catalyst/x86 stage3-amd64-hardened # chroot . /bin/bash --login
# Now, make sure you turn on FEATURES=buildpkg
# (and setup anything else you need, like CFLAGS,
# LDFLAGS, whatever)
linux # echo 'FEATURES="buildpkg"' >> /etc/make.conf

With that single change you’re basically nearly finished with setting up the whole thing, the remaining things are just

stages

Sat, 16 Aug 2014 10:12:01 +0000

For what it’s worth, I’ve been trying to get some stages together the last few days. Thanks to solar and Brent, the ppc-stages are now coming along quite fast.

I haven’t really tested them yet, but for what it’s worth, you’ll find stages based on Saturday’s snapshot (that is 200780105 for those not smart enough to take a look at the calendar) here for the following profiles:

uclibc/ppc (normal/-softfloat)
uclibc/ppc/hardened
uclibc/x86
uclibc/x86/hardened
hardened/amd64
hardened/amd64/nomultilib
hardened/x86/2.6 (x86/i686)

Now remember, this isn’t official release material. This is just MY effort ( for now) to provide current stages.

Bloody cluster solutions (continued)

Sat, 16 Aug 2014 10:10:22 +0000

So, as the previous try on getting the teamix people to fix the bloody LoadBalancer (as in sending at least an identification string for the SSH check) didn’t work so well (they told me, I should configure MASQ uerading/ ROUTE ing on the PacketPro(which is kinda icky), I went on today and looked at what SLES10 installs as default logger.

Surprisingly they install a rather new syslog-ng (well, syslog-ng-1.6.8 is what they ship) so it was rather easy to workaround the situation.

Research project

Sat, 16 Aug 2014 10:07:08 +0000

OK, as I wrote earlier today I went onto a research mission for today, looking at the alternatives for the 2x stuff. Looks like Citrix Presentation Server is just the software I’m looking for. Watched the demo’s on their website, which are quite impressing, but sadly don’t tell me everything I’d like to know.

Maybe I’ll ask some people in Greifswald and in the vicinity, how stuff works with Citrix. Maybe I should even get in contact with Citrix itself and ask for a test version, or some other sort of demonstration.

OCFS2 fun yet again

Sat, 16 Aug 2014 10:05:13 +0000

I’m coming back today from a six day vacation in the warm south (that is Stuttgart), back at work and find three sheets of paper on my desk. Two tell me something I haven’t done yet, the other one tells me something I haven’t seen yet.

One of my colleagues had to restart one of our web nodes and now the thing can’t mount the logging volume (and thus, logrotate / awstats failed to do it’s job). OCFS2 ain’t spitting any error messages, when trying to mount the volume you see it joining the domain the volume belongs to on the other nodes, so from a first glance at things .. nothing is wrong ?

metadata-xml

Sat, 16 Aug 2014 10:04:45 +0000

So I ended up cleaning out some retired (~20) people from metadata.xml, where I found this interesting piece of metadata.xml:

1
2
3
4
5
6
7
8



kernel-misc

 crypto@gentoo.org
 Crypto herd

 masterdriverz@gentoo.org
 Charlie Shephered

And here the hint for all you people again: A DAMN HERD AIN’T NO MAINTAINER. SO IF YOUR HERD IS MAINTAINING A PACKAGE, PUT IT INTO and not into the . kthnxbye.

Windows XP Embedded and GPO settings

Sat, 16 Aug 2014 09:57:51 +0000

We’re currently having a weird issue (which we had before); the Windows XP Embedded powering our Wyse V90’s isn’t applying any GPO settings if you log on with a user that has a configured profile.

Googling (is that a valid word yet ?!) for it, only resulted in one useful link, which is apparently a guy with the exact same problem … 🤷 I’m completely out of ideas by now, as I don’t even have a place to start (as in where the reason might be located).

IBM RDAC and Windows Cluster Service

Sat, 16 Aug 2014 09:56:43 +0000

Okay, so we received a brand new x3650 the other day entitled to replace one (or better two) of our NAS frontend servers. We installed Windows on it the other day (had to create a custom Windows Server 2003 CD first, since the default one doesn’t recognize the integrated ServeRAID), and we prepped the box during the week with the usual things.

On Monday I started installing the " IBM StorageManager RDAC" MultiPath driver (since the box got two single port PCIe FC-HBA’s) and figured I’d be nice if we had this. I asked a IBM Systems Engineer of one of our partners, which told me generally there wouldn’t be a problem with Microsoft Cluster Services (MSCS) and the IBM MPIO driver. Only requirement would be that I’d install the new storport.sys driver (version 5.2.3790.4021) first (as in Microsoft KB932755).

Windows XP Embedded and GPO settings (continued)

Sat, 16 Aug 2014 09:56:20 +0000

Well, as I said in my previous post, I do have some weird things happening. Apparently adding the domain user to the local group “Administrators” makes everything just works fine, yet he can’t do administrator like stuff (like turning off the write protection, changing local user accounts, …).

Also, if you’re looking for a smart way of how to add a certain global group (as in Active Directory group) to a local group, try this:

VMware design rules

Sat, 16 Aug 2014 09:52:13 +0000

I’m just got back from four days in Rostock over at S&N, where I was attending a VMware design course and here’s a list of questions I did ask the trainer:

What’s the disadvantage of having a 1016 ported vSwitch ?
Any clues on how to exchange the default certificate of the Virtual Center ?
Are there any tools to stress test the virtual system ?
Are there any performance impacts of having more than 10 users in Virtual Center ?
Any clues and/or guides on how to do time synchronization in VMware guests, especially Linux guests ?
What’s the preferred NIC type for Linux guests ?
Any clues to using Raw Device Mappings with VMotion ?
Is there a way of defining CPU masks on a global level ?

Answers:

Building RPMs on SLES10SP2-ppc64

Sat, 16 Aug 2014 09:50:36 +0000

Well, it turns out that building stuff on ppc64 is a real pain in the ass, at least on anything SUSE related. I do have to tweak every damn spec to include this:

1
2
3


%ifarch ppc64
export LDFLAGS="$LDFLAGS -m64"
%endif

Otherwise, ld is gonna fail when linking, as it’s gonna try linking the generated 64bit code ( -m64 is passed on via RPM_OPT_FLAGS to CFLAGS) as 32bit code, which ain’t gonna work at all …

Extending vMotion compatiblity

Sat, 16 Aug 2014 09:49:58 +0000

Today I did something horrible. I yet again noticed that I bought the wrong CPU’s (basically I bought Xeon DP’s with four cores). Those have apparently a feature called SSSE3, which makes vMotion with our old Xeon DP’s (dual cores) fail before even trying.

But as we had a cooling outage today (basically ‘cause it broke), I needed to turn off some ESX servers. Thus leaving me with the new ones and one of the old ones. * yuck*

Nagios virtualization

Sat, 16 Aug 2014 09:49:36 +0000

As virtualization seems to be a trendy thing to do, I went ahead and virtualized our nagios (while reinstalling the whole thing …).

Now as I went into work today and started my email client, I received 4 nagios warnings about a LOAD service reaching critical state. Looked at the nagios box itself, opened up the VM console, looked into the syslog. Nothing.

Yet over 3/4 of the services were flapping, some ping checks were critical (for whatever reason). So I opened the nagios webinterface again, and noticed it dropping the connection over and over again (had to reauthentificate me again and again).

Nagios Hostgroup Inheritance

Sat, 16 Aug 2014 09:48:08 +0000

As I wrote earlier, I recently virtualized our nagios. Along with that came a complete " redesign" of how checks are applied. Up till now, I defined checks for each and every single server, thus ending up with ~25 files, each holding roughly 6 checks which are in the same file just sorted by hostname.

As you can imagine, it gets quite confusing with that amount of checks (~150). So the last two days I spent on reorganizing (with Visio), on which object/hostgroup placing a check would make sense. Now, this is my first result of two days planning, reorganizing, reordering and moving hosts into different hostgroups.

Cascading Style Sheets are really weird

Sat, 16 Aug 2014 09:47:42 +0000

So here I was, sitting around and thinking about formatted classes for my paragraphs. Now the result is quite pleasing, but has some side effects. But see for yourself …

Messed up CSS

As you can see, the browser is reusing the background-image URL from the element within the element, even though the element initially had none. Even defining putting an background-image: none; into the class doesn’t get me anywhere.The weird thing is only Firefox is displaying it this messed up (not so weird when you think about how IE 6 treats standards). So if any of you CSS wiz’ got a suggestion, I’m listening 😄

Windows Cluster Service (continued)

Sat, 16 Aug 2014 09:47:05 +0000

Well, guess my " solution" didn’t work sooo good. Lemme tell you what’s happening. I successfully added the node to the cluster group, but I can’t get any resources online.

The node tries bringing it online, then shows a failure and immidiately moves them over to the next node. There the resource is being successfully moved online .. So again, I’m out of ideas ..

Already tried reinstalling the box, after that I could get the third node successfully into the cluster, without the " Advanced (minimum)" trick … 🤷 still ain’t bringing any resources online.

SUSE Linux Enterprise Server 10 on VMware ESX

Sat, 16 Aug 2014 09:46:16 +0000

We’re currently having a really weird problem with our VM’s. Sometime last week, SUSE released a kernel update. Now, once you install it and you reboot the selected VM with a DVD/CD image present, you’re gonna see this:

msg.vmxaiomgr.retrycontabort.unkown

The only workaround so far has been to unmount any cleanse any CD-Drives attached to the VM. And yes, this is reproduceable, even reinstalling from scratch doesn’t change the fact, that after installing the patch the VM quits working.

SUSE Linux Enterprise Server 10 on VMware ESX (continued)

Sat, 16 Aug 2014 09:45:36 +0000

Well, after some searching today (we applied the VMware Update 2 today, thus the VMware Tools update too), I finally found out what is causing that problem.

Though the problem seems to be not limited to virtual systems alone, I just browsed through this Novell Forum thread which pretty much describes my problem. I found the same error in the VM’s I tried to mount a CD image.

More VirtualCenter troubles

Sat, 16 Aug 2014 09:44:54 +0000

Well, after my co-worker switched the VirtualCenter certificates with one produced by our RA a few days ago, I can’t clone anything using a customization specification anymore.

Unable to decrypt passwords in customization specification

Guess, we’re shit outa luck. At least both of those linked VMTN discussions don’t contain any (that is for us) workable solution (well besides storing the password in cleartext in the spec – which ain’t sooo good). Gonna bug him tomorrow to open up a VMware support request, maybe that’ll help somewhat. I sure hope so.

patch2mail for SLES10

Fri, 08 Aug 2014 09:51:16 +0000

Well, there is this “nifty” tool called patch2mail, which basically converts the XML for the updates to a more readable format. But you’re screwed if you want to do the same on SLES10. Since it ain’t shipping with the zypper xml wrapper thing, you need to do it a bit different.

So I ended up writing a small (and yet, ugly) shell script to generate me a mail of my liking ..

MessPC Ethernetbox 2 and Nagios

Fri, 08 Aug 2014 09:46:05 +0000

As I talked to Tobi yesterday, we came to talk about our Ethernet Box thermometer. It’s a neat device, which works pretty much out of the box. Integrating it with Nagios is a bit of a bummer.

That’s what the ~300 EUR box looks like. It’s basically a small black box with a RJ45 jack, and four RJ11 jacks for attached external devices. The box itself only functions as a " management station" and doesn’t come with a sensor. Normally, you can attach up till four RJ11 sensors to it. But, MessPC also has RJ11 port splitters, which enables you to attach up to eight RJ11 sensors to the MessPC.

As you can see, the box has a RJ45 jack on the other side, which you basically hook up to your network and then configure an IP address (or if you fancy DHCP for those things, it’s possible too).

On the opposite site, are the RJ11 jacks for the sensors. As you can see, we currently do have 4 splitters attachted to the box, enabling up till 8 sensors to be measured. Once you have it up and running, you can look at the web interface and you’ll be able to see the state of the sensors right on the first page.

Linux-HA and Tivoli Storage Manager

Fri, 08 Aug 2014 09:44:38 +0000

Well, since we received part of our shipment on Wednesday, I finally looked at how we’re gonna deploy our active/active Tivoli Storage Manager configuration. Right now, we do have a single pSeries box hosting ~100 client nodes which we’re looking to split by two (since we do have two x366 for that purpose now).

Now, as there ain’t no solution for this scenario yet (neither from International Business Machines nor someone out of the open source community), I sat down and started writing an OCF Resource agent for dsmserv (that is the Tivoli Storage Manager server).

USB weirdness

Fri, 08 Aug 2014 09:14:08 +0000

Well, I was at work for a brief moment, where I grabbed me one of our SATA->USB bridges, since I need to migrate some (~750GB) data of the old raid-array and onto a new one. The troublesome about that is simply, that the current RAID controller only supports four attached devices, that’s why I do have to use something like this … Sure I could have bought a new RAID controller, but why spend 45+ EUR on something, that you can solve differently ?

SIL 3114 barfing

Fri, 08 Aug 2014 09:13:36 +0000

Well, after I had so much trouble with the USB converter (which isn’t really suited for Linux), I went ahead and bought a DawiControl DC-154 (which is using a SIL3114) controller to migrate my stuff.

After fucking up the new RAID array with the 1TB disks on the old controller (luckily I had the old hard disks still lying around, which still contained the RAID array), I plugged the 1TB disks onto the new controller and started building the array. So after 760 minutes (that’s nearly 13 hours) of synchronizing the newly created array, I was finally able to create the file system – that should be without trouble, right ?

Advanced bashrc ('Turning a simple chroot into a binpkg repository' continued)

Fri, 08 Aug 2014 09:11:14 +0000

As I pointed out back in October, it’s rather easy to create a setup which syncs a built binary package to a remote node (which is serving them to the world - via http,rsync,ftp - pick your poison).

Now, ever since we had slight space problems on miranda ( 🤕 my binpkgs 🤕), I wanted to look into methods on how to get rid of storing them on the buildnode and the webnode. I think now (hehe, it’s only 7pm), I finally managed to get a " proper" bashrc which does a lot of that foo. Take a look at this:

Building opsview for SUSE Linux Enterprise 10

Fri, 08 Aug 2014 09:10:06 +0000

Disclaimer: I don’t take any responsibility for faults within the software, I just provide the RPM’s! Feel free to ask me about stuff concerning these RPM’s, but I ain’t accountable if your stuff goes kaboom …

Well, I just looked at opsview again (haha, thanks Alex 😛). Only trouble is, the people over at opsview don’t distribute RPM’s for that … After registering for their site, to download the SRPM’s (or to download anything), I got the RPM’s and started looking at them.

packages-barfoo-org is going away

Fri, 08 Aug 2014 09:09:37 +0000

For those of you, still using my binary packages. It’s just a waste of disk space for me (6.8G to be exact), so I decided to remove them. I’m gonna give people one week to grab yourself a copy. I’m gonna keep the bashrc and all the other stuff I wrote back when I was still interested in binary packages, but the binary packages are gonna vanish!

VMware vCenter: is not connected

Fri, 08 Aug 2014 09:08:15 +0000

Well, today I once again had the case where a virtual machine (in my case a Virtual Machine Template) was kinda stuck. You couldn’t remove the template (as in the entries for “Remove from inventory” was grayed out) and you couldn’t re-add the Virtual Machine’s VMX from the datastore browser either.

VI Client - Disconnected templates

Though, a simple putting the host into maintenance mode and rebooting helped that problem. Maybe there is a simpler solution for this, I just don’t know about it.

Tivoli Storage Manager Client and Microsoft Cluster Services

Fri, 08 Aug 2014 09:06:34 +0000

Well, I just had another look at our client scheduler services on our Microsoft Cluster. A while back we noticed that those scheduler services were going nuts after some time. Well, as it turns out, I can tell why. Microsoft Cluster Services have a feature called registration replication, which replicates a given key, if changed when the resource is online, to all connected cluster nodes.

Now, we added the obvious registry key to the settings of our cluster resources for the scheduler services ( SOFTWAREIBMADSMCurrentVersionBackupClientNodes) and the scheduler service would use the same registry key to store it’s passwords. But it seems we were far off with that assumption.

Short vacation

Fri, 08 Aug 2014 09:05:53 +0000

Well, Arne recently (not really recently though .. 😛 ) complained about my blog being waaay to technical, so I ended up writing this lil’ anecdote.

I’m finally on my long awaited, the remaining year lasting vacation. Last week was interrupted by a short job interview in Nuremberg, and also by the flu (not " again", I still got it in me, haven’t been able to shake it now for about three months).

IBM RDAC: Installing the driver for a (not yet) running version

Fri, 08 Aug 2014 09:04:36 +0000

Well, kernel updates on our Linux servers running IBM’s RDAC driver (developed by LSI) is a real pest .. especially if you have to reboot the box two times in order to install the drivers/initrd correctly.

So I sat down and looked at the Makefile. Turns out, it just needs four tweaks in order to be working with a different kernel version (which you have to pass using environment variables to make).

Novell KMP: KMP'ing IBM's RDAC driver

Fri, 08 Aug 2014 09:03:51 +0000

Well, after yesterday’s lesson about getting the IBM RDAC to install for a not-yet-running kernel, I decided to take it a step further. Novell does have some documentation about KMP’s, which is actually rather good, especially the guide written by Andreas Grünbacher.

After a short tinkering, I got it actually working. I was kinda surprised, at how easily it actually is. One problem I still have to deal with, is modifying the %post, to generate the mpp-initrd image. For now, the KMP only contains the default %post, which updates the modules.* stuff.

Novell KMP: Useable version of ibm-rdac-ds4000

Fri, 08 Aug 2014 09:03:03 +0000

After some more tinkering, a lot more looking at the macros in /usr/lib/rpm/rpm-suse-kernel-module-subpackage and /usr/lib/rpm/suse_macros, I think I finally have a usable RPM’ified version of IBM’s Multipathing driver ready for use.

There is still one major annoyance left: each time you install a new ibm-rdac-ds4000-kmp RPM, you also need to reinstall the corresponding ibm-rdac-ds4000-initrd package, as the macros in /usr/lib/rpm don’t allow for custom %post or %postun.

As mentioned before, I’m gonna send them to LSI/IBM for review, and maybe, MAYBE they are actually gonna make use of that.

Weird TS3500 problem

Fri, 08 Aug 2014 09:00:33 +0000

Well, today we had a rather weird problem with our TS3500. TSM running on AIX basically went bonko and spit out weird media sense errors, all stating that there is a hardware or media error of unknown nature:

1
2
3
4
5
6
7
8
9


ANR8943E Hardware or media error on library LIB3584 (OP=00006C03, CC=-1,
KEY=04, ASC=44, ASCQ=00,
SENSE=70.00.04.00.00.00.00.46.00.00.00.00.44.00.00.00.00-
 .00.40.82.00.00.00.40.00.00.02.00.48.01.A1.00.00.00.00.0-
 0.06.1B.00.01.09.00.00.00.00.00.00.00.00.00.00.00.00.00.-
 00.00.00.00.00.00.00.00.00.00.00.00.00.00.00.00.00.00.00-
 .00.00.00.00.00., Description=An undetermined error has occurred).
Refer to Appendix C in the 'Messages' manual for recommended action.
ANR8381E LTO volume HG4480L4 could not be mounted in drive DR9 (/dev/rmt8).

After restarting the TSM server (as in the service, not the whole box) five times, which didn’t resolve squat we decided to take a look at the TS3500 itself. We opened up the Management interface and tried moving a tape into a drive. That didn’t work. Hrmmmmm.

Linux-HA and Tivoli Storage Manager (Finito!)

Fri, 08 Aug 2014 08:59:07 +0000

As I previously said, I was writing my own OCF resource agent for IBM’s Tivoli Storage Manager Server. And I just finished it yesterday evening (it took me about two hours to write this post).

Only took me about four work days (that is roughly four hours each, which weren’t recorded in that subversion repository) plus most of this week at home (which is 10 hours a day) and about one hundred subversion revisions. The good part about it is, that it actually just works :-D (I was amazed on how good actually). Now you’re gonna say, “but Christian, why didn’t you use the included Init-Script and just fix it up, so it is actually compilant to the LSB Standard ?”

The answer is rather simple: Yeah I could have done that, but you also know that wouldn’t have been fun. Life is all about learning, and learn something I did (even if I hit the head against the wall from time to time ;-) during those few days) … There’s still one or two things I might want to add/change in the future (that is maybe next week), like

adding support for monitor depth by querying the dsmserv instance via dsmadmc (if you read through the resource agent, I already use it for the shutdown/pre-shutdown stuff)
I still have to properly test it (like Alan Robertson mentioned in his one hour thirty talk on Linux-HA 2.0 and on his slides, Page 100-102) in a pre-production environment
I’m probably configure the IBM RSA to act as a stonith device ( s hoot t he o ther n ode i n t he h ead) - just for the case one of them ever gets stuck in a case, where the box is still up, but doesn’t react to any requests anymore

XBMC: Adding the ppa keys to apt

Fri, 08 Aug 2014 08:55:05 +0000

I recently bought an Acer Aspire Revo and had one of my trainees put XMBC on a SDHC card today. So after a bit of toying earlier, I started looking at the thing (from the command line that is).

One thing, if you enable the PPA (ppa.launchpad.net) sources, apt/aptitude is gonna babble something about an unverified key.

1
2
3
4
5


Fetched 119kB in 2s (41.4kB/s)
Reading package lists... Done
W: GPG error: http://ppa.launchpad.net jaunty Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 6D975C4791E7EE5E
W: GPG error: http://ppa.launchpad.net jaunty Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 2BBD133164234534
W: GPG error: http://ppa.launchpad.net jaunty Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY A956EB81318C7509

I ended up looking the error up (since I only have an Ubuntu desktop). There’s a simple solution for this:

XBMC on the Acer Revo

Fri, 08 Aug 2014 08:53:15 +0000

As I wrote a month ago, one of my trainees put up with my stubbornness to put XBMC on said Acer Aspire Revo. Now, initially he put the Live Edition onto it, which didn’t really fly with me. I’m usually the CLI guy, so I needed to install it myself (again). Since I wanted to use the VDPAU features the later GeForce cards offer (and the Revo has such a graphics cad), I had to install the current development builds (you know – I love bleeding edge!)

Weird lighttpd troubles

Fri, 08 Aug 2014 08:51:30 +0000

Well, since about a week or so I keep having troubles with my vHost and lighttpd. The point being, after some time (up till now it’s been something between days and minutes) lighttpd completely freezes and doesn’t serve no content anymore. I don’t know if this is related to PHP (might be, I did perform an update to dev-lang/php-5.2.9-r2 on Thu May 28 12:18:57 2009), but I have to figure this out since the restart cron-job is getting annoying.

Lighttpd troubles resolved

Fri, 08 Aug 2014 08:50:47 +0000

Well, after last weeks lighttpd troubles with PHP (or was it without ?), they finally seem resolved. First thing I did, was upgrade to the new php-version (5.2.10). After that, I ran revdep-rebuild, which apparently found issues with lighttpd being linked to a wrong pcre-version. After remerging lighttpd the issues seem to be gone!

Well, guess I was to quick in saying the problem was resolved .. it’s still there, just not happening as fast as it would in the past ….

Lighttpd issues

Fri, 08 Aug 2014 08:47:28 +0000

At first, it seemed that my lighttpd issues were resolved by updating PHP/remerging lighttpd. But apparently not. After putting in a crontab entry, that restarts lighttpd every 15 minutes (which completely sucks), the issue was minimized in it’s impact but not really solved.

`1`	`/15 * * * root /etc/init.d/lighttpd restart &>/dev/null`

Thanks to Michél (I guess, again) – who helped me looking at the strace logs, and of course Christian (aka hoffie – one of my old Gentoo buddies), the issue seems finally resolved. It turns out it was neither a PHP nor lighttpd issue. It was a simple matter of (stale) symlinks in /etc/ssl/certs if you can imagine that. Apparently a stale symlink forced PHP into a loop or something, from which it couldn’t recover on it’s own.

VMware: New VirtualCenter 2-5 Update 4

Fri, 08 Aug 2014 08:47:01 +0000

As many people on the VM-Planet already blogged about this, I ain’t gonna write just about it. Let’s turn the clock back a few months, to January 2008.

As the institution I work for, is part of the DFN we took the opportunity to be a part of the " I want you to run our RA"-gang. In January 2008 we thought about changing the vCenter certificate. Now, apparently there’s a slight difference between the DFN-PCA and what VMware considers common practice.

Xen dom0 failing with kernel panic

Fri, 08 Aug 2014 08:45:02 +0000

I’m building a 6-node cluster, using Xen at the moment. For the last few days, I tried my setup in a virtual machine, simply because VM’s boot much faster than the real hardware. However, certain things you can only replicate on the real hardware (for example, the InfiniBand interfaces, as well as certain nfs-stuff).

So I spent most of the day to replicate my configurations onto the hardware. After getting all done, the moment of the first boot … kaput! Doesn’t boot, just keeps hanging before booting the real kernel. Now what ? I removed the Xen vga parameters and rebooted (waited ~2 minutes in the process) until I finally saw the root cause for my trouble:

portmap hanging on shutdown

Fri, 08 Aug 2014 08:43:51 +0000

Here’s yet another post about my compute cluster. It’s (obviously) running NFS and that works quite well. Up till now, I would always have trouble with portmap hanging on shutdown/reboot. After spending some time thinking about the problem, looking at the init script and googling, I stumbled upon this Ubuntu bug on portmap.

As noted in the bug, a pmap_dump would hang indefinitely. After taking another look at our nfs-root configuration (in regard to the first comment on the bug), it turns out it’s exactly that. We didn’t setup lo which seems vital for some things.

IBM RSA II adapter and Java RE

Fri, 08 Aug 2014 08:43:14 +0000

Today, after a short break (you can call it break, I think), I sat down and looked at the IBM RSA II adapter’s remote management GUI and it’s trouble with JRE versions. Ever since the last Java updates, I was unable to access the RSA console because Java would throw an error like this:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21


Initializing RemoteDisk v2.2
MCS v.3.6 initialized
Established connection to rsa.home.barfoo.org:1045
Connected via socket: Socket[addr=rsa.home.barfoo.org/10.0.0.150,port=2000,localport=4292]
Closing socket
java.lang.NullPointerException
 at mcsClient.Row.isValid(Unknown Source)
 at java.awt.Component.invalidateIfValid(Unknown Source)
 at java.awt.Component.setLocale(Unknown Source)
 at javax.swing.JComponent.(Unknown Source)
 at javax.swing.JPanel.(Unknown Source)
 at javax.swing.JPanel.(Unknown Source)
 at javax.swing.JPanel.(Unknown Source)
 at mcsClient.Row.(Unknown Source)
 at mcsClient.Options.(Unknown Source)
 at mcsClient.McsToolBar.(Unknown Source)
 at mcsClient.McsClient.begin(Unknown Source)
 at mcsClient.McsClient.init(Unknown Source)
 at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
 at java.lang.Thread.run(Unknown Source)
Ausnahme: java.lang.NullPointerException

In the end, I downloaded every version since JRE 1.5.0.11 (that is 20 different versions ❗), as wittnessed by Michael Ellerbeck that the last working version for him was JRE 1.5.0.11, and gave each one a try (since I want to report the issue to IBM, so that they gonna release a fix sometime soon).

Loooong time

Fri, 08 Aug 2014 08:42:36 +0000

It’s been very quiet around here, I’ve been rather busy with my real life. During that busy time, a lot of things happened. I switched jobs starting on October 1st, I’m now working in Karlsruhe (as compared to the 870km northern Greifswald). It may sound far, but it’s actually quite pleasant. You know, I was born down here (well not exactly here – 70 kilometers afar) and I still had the feeling that this is my home.

SLES11 and AutoYaST

Fri, 08 Aug 2014 08:41:46 +0000

After the first week passed awfully quick, the last week I worked on refining the way on how we are doing openSuSE / SUSE Linux Enterprise Server installations. Up till now, they were done by hand (without a predefined schema) and were getting ugly to maintain. Working my way through the Novell documentation on AutoYaST was pretty straight forward, but the little details were getting hairy. So I decided to write them down, in case someone was gonna end up in the same situation like me.

Run a command on a list of Fibre-Channel switches (fc-switch-commands-pl)

Fri, 08 Aug 2014 08:40:32 +0000

Up till now, we did have a bunch of shell and perl scripts doing this work. Today, as I was looking for some stuff to do, I found them and decided rewriting it, so you wouldn’t need a shell script to call the perl worker script … This is pretty much the result!

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63


#!/usr/bin/perl

# LICENSE: GNU General Public License v2. (see LICENSE.txt)
# COPYRIGHT: Copyright 2010 Christian Heim <christian.heim@barfoo.org>

# This script runs a batch of commands on a list of FC-switches. For example:
# fc-switch-commands.pl statsclear | configupload | supportsave

use strict;
use warnings;
use Net::Telnet;

our( @san_fabric1_core, @san_fabric1_edge_1, @san_fabric1_edge_2 );
our( @san_fabric2_core, @san_fabric2_edge_1, @san_fabric2_edge_2 );
our( @switches );
our( $ftp_host, $ftp_username, $ftp_password );
our( $telnet );
our( $i, $version, @debug );

@san_fabric1_core = ( "10.144.20.50", "admin", "JuNxJFSAS!", 'san_fabric1_core' );
@san_fabric1_edge_1 = ( "10.144.20.51", "admin", "JuNxJFSAS!", 'san_fabric1_edge_1' );
@san_fabric1_edge_2 = ( "10.144.20.52", "admin", "JuNxJFSAS!", 'san_fabric1_edge_2' );
@san_fabric2_core = ( "10.144.20.60", "admin", "JuNxJFSAS!", 'san_fabric2_core' );
@san_fabric2_edge_1 = ( "10.144.20.61", "admin", "JuNxJFSAS!", 'san_fabric2_edge_1' );
@san_fabric2_edge_2 = ( "10.144.20.62", "admin", "JuNxJFSAS!", 'san_fabric2_edge_2' );

$ftp_host = '10.144.20.45';
$ftp_username = 'brocade_cfg';
$ftp_password = 'JuNxJPFC!';

@switches = ( @san_fabric1_core, @san_fabric2_core,
 @san_fabric1_edge_1, @san_fabric1_edge_2,
 @san_fabric2_edge_1, @san_fabric2_edge_2 );

@debug = ( Dump_Log => 'dump.log', Output_Log => 'out.log', Input_Log => 'in.log' );

$telnet = new Net::Telnet(Timeout=>240, Errmode=>'die',
 Prompt => '/.*:admin> $/is', @debug);

for ($i = 0; $i < $#switches + 1; $i++) {
 $telnet->open($switches[$i][0]);
 $telnet->login($switches[$i][1], $switches[$i][2]);

 if ( $ARGV[0] eq "statsclear" ) {
 $telnet->cmd("statsclear");
 } elsif ( $ARGV[0] eq "configupload" ) {
 # Check the FabricOS version, as Brocade decided to break compatiblity with
 # earlier firmware versions w/ v6 (at least configupload)
 $telnet->cmd("firmwareshow");
 $version = $telnet->lastline;
 $version =~ s/s+|s+$//g;

 if ( $version =~ "v6" ) {
 $telnet->cmd("configupload -all -ftp "$ftp_host","$ftp_username","$switches[$i][3].cfg","$ftp_password"");
 } else {
 $telnet->cmd("configupload "$ftp_host","$ftp_username","$switches[$i][3].cfg","$ftp_password"");
 }
 } elsif ( $ARGV[0] eq "supportsave" ) {
 $telnet->cmd("supportsave -n -u "$ftp_username" -p "$ftp_password" -h "$ftp_host" -d "supportsave/$switches[$i][3]" -l ftp");
 }

 $telnet->close();
}

Monitoring Brocade FC switches with SNMP/Nagios

Fri, 08 Aug 2014 08:39:27 +0000

I looked into the mess a bit more, and as it turns out, the weird crap I was talking about only happens if you have a port with LossofSynchronization, LossofSignal or LinkFailures value with the base of ten (i.e. 10, 101 or 10.000).

Additionally, the OID’s for those three failure elements seem to be dependent on the firmware version, as with 6.3.x they appear as different OIDs. So I may need to introduce another command-line switch, which selects the firmware version and depending on that, the OID.

Monitoring Brocade FC switches with Nagios

Fri, 08 Aug 2014 08:37:46 +0000

The last four days I spent looking for ways on monitoring a Brocade Fibrechannel switch (in my case IBM 2145 B32/F40). The first thing I came up with, is using SNMP. As it was already configured for the previous monitoring with Munin, getting information should be quite easy. After looking through Google for a bit, there is already one script that worked for me.

Only trouble I had with that script, is that it crams every single port into one result. As I wanted something, that a) could watch a single port and b) return performance data, I went ahead an used the script to do a basic rewrite. But after a short while, I grew antsy and started writing a script from scratch, using the OIDs I got from that script and a Cacti template.

Windows Server 2003 SP1, WSUS and Security Updates

Fri, 08 Aug 2014 08:35:23 +0000

Recently, we found some systems (sadly, customer systems) that weren’t getting any Security Updates anymore. Much more sadly, them is running Windows Server 2003, and as you know Security Updates are pretty important for Windows Systems.

At the time of finding this, I had no clue as to why the were not getting any updates. At first we thought it had something to do with the WSUS server, so I upgraded the WSUS 3.0 SP1 to SP2. Since that didn’t solve nothing, I went searching for a internal VM, that showed the same symptoms and I quickly found one.

VBscript: Query remote OS and SP info

Fri, 08 Aug 2014 08:34:49 +0000

As I wrote on Thursday, I am battling with Windows Server 2003. Now I got a list out of our change management database, which sadly ain’t that accurate. So in order to get reliable information about the target systems (in order to do some accurate planning), I ended up writing a small vbscript which simply takes the hostname on the command line (cscript //NoLogo win_sp_level.vbs 10.0.0.5) and returns a csv-like element.

Reset Master Boot Record (MBR)

Fri, 08 Aug 2014 08:34:04 +0000

Since I’ve been playing with my AutoYAST setup for the last few days, working out the kinks (for example SLES10 not being able to install into the MBR), I needed a way to zap the MBR (as in remove grub to see whether or not the installation would install a new loader). So after quickly googling, I found this:

`1`	`dd if=/dev/zero of=/dev/hda bs=512 count=1`

That actually does the trick. The loader as well as the partition table are gone after wards!

Enabling multipathing in autoyast installations

Fri, 08 Aug 2014 08:30:46 +0000

As I mentioned before, we’re starting to utilize Boot-from-SAN as a means to strip the blades of their local disk. As the title says, after trying a manual installation of SLES 11.1 via CD/HTTP I wanted to automate the process, in order to get a reproducible, consistent installation method. As you might have figured, AutoYaST doesn’t have any built in support for configuring multipathing (hey, that’s what Novell says here). Now, they also provide a comprehensive how-to on how to “add” this to your AutoYaST, using a DUD (or D river U pdate D isk).

NetApp FAS/Data ONTAP public key authentification with CIFS/NFS license

Fri, 08 Aug 2014 08:29:59 +0000

Well as the title says, sadly we bought our FAS6210 without CIFS/NFS license. Thus, in order to create the folder structure/add the authorized_keys file, you’ll have to work for your money a little bit.

First, you need to run cifs setup / cifs passwd somewhere. I did it on our Data ONTAP simulator, which comes in handy for things like that.

You’ll get a cryptic looking password (no clue which format that is), looking like this: _OnWddr)xa.

IBM SVC: Copy VDisk Host-Mapping from one host to another

Fri, 08 Aug 2014 08:28:32 +0000

As I wrote a few days ago, I started a new job. One of my first (voluntary) tasks was writing a shell script which would copy a VDisk Host-Mapping from a given host to another. This is useful, if you do have a lot of ESX servers for example and a few roaming ones.

Now, if say, you need to do some ESX-Updates and you would like to add the roaming one to a given farm, you would be in a dark an deary place. You would be required to either click through the GUI a dozen times (in my case, it might have needed ~200 clicks) or type svcinfo lshostvdiskmap and svctask mkhostvdiskmap -force (these are incomplete command references) a few times.

NetApp - Copy LUN mappings

Fri, 08 Aug 2014 08:27:40 +0000

Well, today I had another idea (basically like the one I wrote for SVC’s VDisk mappings a while back) for a script:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44


#!/bin/bash

KEY_FILE="/root/.ssh/netapp.dsa"
SSH_OPTS="/root/.ssh/netapp-ssh_config"

if [ $# -ne 3 ] ; then
 echo "fas-copy-lunmap: FAS_CONTROLLER SOURCE_IGROUP TARGET_IGROUP"
 echo
 echo "Copy the LUN map from one igroup to another, ie for ESX reinstallation"
 echo
 echo " Usage:"
 echo " - FAS_CONTROLLER: Hostname/IP-adress of the DATA ONTAP controller"
 echo " - SOURCE_IGROUP: igroup that is used as a reference for the copy process"
 echo " - TARGET_IGROUP: igroup that is actually modified"
 echo
 exit 1
fi

FAS_CTRL=$1
SOURCE=$2
TARGET=$3

ssh_fas() {
 # $@: commands for Data ONTAP
 COMMANDS="$@"
 /usr/bin/ssh -i $KEY_FILE -l root -F $SSH_OPTS $COMMANDS
}

#set -x

# Get the lun list.
for lun in $( ssh_fas $FAS_CTRL lun show -g $SOURCE | awk '{ print $1 }' | sort -u ); do

 # Get the LUN number its mapped
 LUN_ID="$( ssh_fas $FAS_CTRL lun show -m $lun | grep "^/vol" | awk '{ print $3 }' )"

 # If the LUN id is 0, skip otherwise we would copy the boot LUN
 if [ "$LUN_ID" != "0" ] ; then
 # Actually map the lun to our host
 echo "Mapping $lun to $TARGET as LUN_ID $LUN_ID"
 ssh_fas $FAS_CTRL lun map $lun $TARGET $LUN_ID
 fi
done
#set +x

I’ll post the counterpart of the script (to remove the LUNs) in a second post later on.

Installserver: Regenerate PXE base menu

Fri, 08 Aug 2014 08:27:12 +0000

Well, here’s the promised script to regenerate the main PXE menu based on the menu entries created by register-suse and register-vmware.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52


#!/bin/bash

TFTP_DIR=/srv/tftpboot/pxelinux.cfg

mkdir -p $TFTP_DIR &>/dev/null

# Iterate through the pxelinux.cfg directory and recreate the index menues.
for dir in $( find $TFTP_DIR -mindepth 1 -maxdepth 1 -type d ); do
 echo "Generating summary menu for: $dir"
 count=1

 cat > $dir.menu << EOF

 MENU TITLE Linux Installationservices
 MENU BACKGROUND addons/background.png

 MENU COLOR screen 37;40 #80ffffff #00000000
 MENU COLOR border 0 #ffffffff #ee000000 std
 MENU COLOR title 0 #ffffffff #ee000000 std
 MENU COLOR unsel 0 #ffffffff #ee000000 std
 MENU COLOR sel 0 #ffffffff #85000000 std
 MENU COLOR scrollbar 30;44 #40000000 #00000000
 MENU COLOR tabmsg 0 #ee000000 #ffffffff std
 MENU COLOR cmdmark 0 #ff00ff00 #00000000 std
 MENU COLOR cmdline 0 #ee000000 #ffffffff std
 MENU COLOR timeout_msg 0 #ee000000 #ffffffff std
 MENU COLOR timeout 0 #ee000000 #ffffffff std
 MENU COLOR disabled 0 #ffffffff #ee000000 std
 MENU COLOR pwdheader 0 #ff000000 #99ffffff rev
 MENU COLOR pwdborder 0 #ff000000 #99ffffff rev
 MENU COLOR pwdentry 0 #ff000000 #99ffffff rev
 MENU COLOR hotkey 0 #ff00ff00 #ee000000 std
 MENU COLOR hotsel 0 #ffffffff #85000000 std
EOF

 for file in $( find $dir -mindepth 1 -name "*.menu" | sort -r ); do
 FILE_LABEL="$( grep ^#LABEL $file | cut -d -f2- )"
 FILE_OSARCH="$( grep ^#OSARCH $file | cut -d -f2- )"

 cat >> $dir.menu << EOF

 LABEL $count
 MENU LABEL $FILE_LABEL ($FILE_OSARCH)
 KERNEL addons/vesamenu.c32

 APPEND pxelinux.cfg/${dir##*/}/${file##*/}
EOF

 count=$(( $count + 1 ))
 done

done

 1
 2
 3
 4
 5
 6
 7
 8
 9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229


Tue Jul 24, 17:18:35 [0] > ll -R /srv/tftpboot/
/srv/tftpboot/:
total 28K
drwxr-xr-x 2 root root 4.0K Jun 20 2011 addons/
drwxr-xr-x 7 root root 4.0K Jun 24 2011 boot/
drwxr-xr-x 6 root root 4.0K Jul 20 13:14 pxelinux.cfg/
-rw-r--r-- 1 root root 15K Oct 7 2009 pxelinux.0
/srv/tftpboot/addons:
total 280K
-rw-r--r-- 1 root root 16K Dec 28 2009 background.png
-rw-r--r-- 1 root root 23K Dec 28 2009 background-sles.png
-rw-r--r-- 1 root root 24K Dec 28 2009 background-suse.png
-rw-r--r-- 1 root root 20K Dec 28 2009 background-vmware.png
-rw-r--r-- 1 root root 48K Oct 7 2009 mboot.c32
-rw-r--r-- 1 root root 142K Oct 7 2009 vesamenu.c32
/srv/tftpboot/boot:
total 20K
drwxr-xr-x 3 root root 4.0K Jun 24 2011 esx/
drwxr-xr-x 2 root root 4.0K Oct 14 2009 firmware/
drwxr-xr-x 5 root root 4.0K Dec 14 2011 opensuse/
drwxr-xr-x 10 root root 4.0K Mar 9 17:28 sles/
drwxr-xr-x 3 root root 4.0K Oct 7 2009 tests/
/srv/tftpboot/boot/esx:
total 4.0K
drwxr-xr-x 2 root root 4.0K Jun 24 2011 4.1-348481/
/srv/tftpboot/boot/esx/4.1-348481:
total 81M
-r--r--r-- 1 root root 79M Jun 24 2011 initrd.img
-r--r--r-- 1 root root 1.5M Jun 24 2011 vmlinuz
/srv/tftpboot/boot/firmware:
total 4.3M
-rw-r--r-- 1 root root 1.5M Oct 14 2009 fdboot.img
-rw-r--r-- 1 root root 20K Oct 14 2009 memdisk
-rw-r--r-- 1 root root 1.5M Oct 14 2009 qmh2462_1.76.img
-rw-r--r-- 1 root root 1.5M Oct 14 2009 qmh2462_1.81.img
/srv/tftpboot/boot/opensuse:
total 12K
drwxr-xr-x 4 root root 4.0K Jun 20 2011 11.3/
drwxr-xr-x 4 root root 4.0K Jun 20 2011 11.4/
drwxr-xr-x 4 root root 4.0K Dec 14 2011 12.1/
/srv/tftpboot/boot/opensuse/11.3:
total 8.0K
drwxr-xr-x 2 root root 4.0K Jun 20 2011 x64/
drwxr-xr-x 2 root root 4.0K Jun 20 2011 x86/
/srv/tftpboot/boot/opensuse/11.3/x64:
total 32M
-r--r--r-- 1 root root 28M Jun 20 2011 initrd
-r--r--r-- 1 root root 3.8M Jun 20 2011 linux
/srv/tftpboot/boot/opensuse/11.3/x86:
total 32M
-r--r--r-- 1 root root 28M Jun 20 2011 initrd
-r--r--r-- 1 root root 3.7M Jun 20 2011 linux
/srv/tftpboot/boot/opensuse/11.4:
total 8.0K
drwxr-xr-x 2 root root 4.0K Jun 20 2011 x64/
drwxr-xr-x 2 root root 4.0K Jun 20 2011 x86/
/srv/tftpboot/boot/opensuse/11.4/x64:
total 37M
-r--r--r-- 1 root root 33M Jun 20 2011 initrd
-r--r--r-- 1 root root 4.1M Jun 20 2011 linux
/srv/tftpboot/boot/opensuse/11.4/x86:
total 37M
-r--r--r-- 1 root root 33M Jun 20 2011 initrd
-r--r--r-- 1 root root 3.9M Jun 20 2011 linux
/srv/tftpboot/boot/opensuse/12.1:
total 8.0K
drwxr-xr-x 2 root root 4.0K Dec 14 2011 x64/
drwxr-xr-x 2 root root 4.0K Dec 14 2011 x86/
/srv/tftpboot/boot/opensuse/12.1/x64:
total 43M
-r--r--r-- 1 root root 39M Dec 14 2011 initrd
-r--r--r-- 1 root root 4.5M Dec 14 2011 linux
/srv/tftpboot/boot/opensuse/12.1/x86:
total 43M
-r--r--r-- 1 root root 38M Dec 14 2011 initrd
-r--r--r-- 1 root root 4.4M Dec 14 2011 linux
/srv/tftpboot/boot/sles:
total 32K
drwxr-xr-x 4 root root 4.0K Jun 24 2011 10.2/
drwxr-xr-x 4 root root 4.0K Sep 28 2011 10.3/
drwxr-xr-x 4 root root 4.0K Jun 17 2011 10.4/
drwxr-xr-x 4 root root 4.0K Jun 17 2011 11/
drwxr-xr-x 4 root root 4.0K Jun 17 2011 11.1/
drwxr-xr-x 4 root root 4.0K Jun 17 2011 11.1-vmware/
drwxr-xr-x 3 root root 4.0K Mar 9 17:28 11.2/
drwxr-xr-x 4 root root 4.0K Jul 24 17:04 11.2-vmware/
/srv/tftpboot/boot/sles/10.2:
total 8.0K
drwxr-xr-x 2 root root 4.0K Jun 24 2011 x64/
drwxr-xr-x 2 root root 4.0K Jun 24 2011 x86/
/srv/tftpboot/boot/sles/10.2/x64:
total 11M
-r--r--r-- 1 root root 9.0M Jun 24 2011 initrd
-r--r--r-- 1 root root 1.4M Jun 24 2011 linux
/srv/tftpboot/boot/sles/10.2/x86:
total 11M
-r--r--r-- 1 root root 8.9M Jun 24 2011 initrd
-r--r--r-- 1 root root 1.3M Jun 24 2011 linux
/srv/tftpboot/boot/sles/10.3:
total 8.0K
drwxr-xr-x 2 root root 4.0K Sep 28 2011 x64/
drwxr-xr-x 2 root root 4.0K Sep 28 2011 x86/
/srv/tftpboot/boot/sles/10.3/x64:
total 12M
-r--r--r-- 1 root root 11M Sep 28 2011 initrd
-r--r--r-- 1 root root 1.4M Sep 28 2011 linux
/srv/tftpboot/boot/sles/10.3/x86:
total 12M
-r--r--r-- 1 root root 11M Sep 28 2011 initrd
-r--r--r-- 1 root root 1.3M Sep 28 2011 linux
/srv/tftpboot/boot/sles/10.4:
total 8.0K
drwxr-xr-x 2 root root 4.0K Jun 17 2011 x64/
drwxr-xr-x 2 root root 4.0K Jun 17 2011 x86/
/srv/tftpboot/boot/sles/10.4/x64:
total 13M
-r--r--r-- 1 root root 12M Jun 17 2011 initrd
-r--r--r-- 1 root root 1.4M Jun 17 2011 linux
/srv/tftpboot/boot/sles/10.4/x86:
total 13M
-r--r--r-- 1 root root 12M Jun 17 2011 initrd
-r--r--r-- 1 root root 1.3M Jun 17 2011 linux
/srv/tftpboot/boot/sles/11:
total 8.0K
drwxr-xr-x 2 root root 4.0K Jun 17 2011 x64/
drwxr-xr-x 2 root root 4.0K Jun 17 2011 x86/
/srv/tftpboot/boot/sles/11/x64:
total 24M
-r--r--r-- 1 root root 21M Jun 17 2011 initrd
-r--r--r-- 1 root root 2.5M Jun 17 2011 linux
/srv/tftpboot/boot/sles/11/x86:
total 23M
-r--r--r-- 1 root root 21M Jun 17 2011 initrd
-r--r--r-- 1 root root 2.4M Jun 17 2011 linux
/srv/tftpboot/boot/sles/11.1:
total 8.0K
drwxr-xr-x 2 root root 4.0K Jun 17 2011 x64/
drwxr-xr-x 2 root root 4.0K Jun 17 2011 x86/
/srv/tftpboot/boot/sles/11.1/x64:
total 27M
-r--r--r-- 1 root root 23M Jun 17 2011 initrd
-r--r--r-- 1 root root 3.1M Jun 17 2011 linux
/srv/tftpboot/boot/sles/11.1/x86:
total 26M
-r--r--r-- 1 root root 23M Jun 17 2011 initrd
-r--r--r-- 1 root root 3.1M Jun 17 2011 linux
/srv/tftpboot/boot/sles/11.1-vmware:
total 8.0K
drwxr-xr-x 2 root root 4.0K Jun 17 2011 x64/
drwxr-xr-x 2 root root 4.0K Jun 17 2011 x86/
/srv/tftpboot/boot/sles/11.1-vmware/x64:
total 27M
-r--r--r-- 1 root root 23M Jun 17 2011 initrd
-r--r--r-- 1 root root 3.1M Jun 17 2011 linux
/srv/tftpboot/boot/sles/11.1-vmware/x86:
total 26M
-r--r--r-- 1 root root 23M Jun 17 2011 initrd
-r--r--r-- 1 root root 3.1M Jun 17 2011 linux
/srv/tftpboot/boot/sles/11.2:
total 4.0k
drwxr-xr-x 2 root root 4.0K Mar 9 17:29 x64/
/srv/tftpboot/boot/sles/11.2/x64:
total 36M
-r--r--r-- 1 root root 33M Mar 9 17:29 initrd
-r--r--r-- 1 root root 3.7M Mar 9 17:29 linux
/srv/tftpboot/boot/sles/11.2-vmware:
total 8.0K
drwxr-xr-x 2 root root 4.0K Mar 9 16:52 x64/
drwxr-xr-x 2 root root 4.0K Jul 24 17:05 x86/
/srv/tftpboot/boot/sles/11.2-vmware/x64:
total 36M
-r--r--r-- 1 root root 33M Jul 20 12:46 initrd
-r--r--r-- 1 root root 3.7M Jul 20 12:46 linux
/srv/tftpboot/boot/sles/11.2-vmware/x86:
total 35M
-r--r--r-- 1 root root 32M Jul 24 17:17 initrd
-r--r--r-- 1 root root 3.6M Jul 24 17:17 linux
/srv/tftpboot/boot/tests:
total 4.0K
drwxr-xr-x 2 root root 4.0K Oct 7 2009 memtest/
/srv/tftpboot/boot/tests/memtest:
total 164K
-rw-r--r-- 1 root root 157K Oct 7 2009 memtest86+-4.00
/srv/tftpboot/pxelinux.cfg:
total 48K
-rw-r--r-- 1 root root 2.0K Jun 20 2011 default
drwxr-xr-x 2 root root 4.0K Jun 24 2011 esx/
-rw-r--r-- 1 root root 1.3K Jul 24 17:18 esx.menu
drwxr-xr-x 2 root root 4.0K Jun 20 2011 esxi/
-rw-r--r-- 1 root root 1.1K Jul 24 17:18 esxi.menu
-rw-r--r-- 1 root root 423 Oct 20 2009 firmware.menu
drwxr-xr-x 2 root root 4.0K Dec 14 2011 opensuse/
-rw-r--r-- 1 root root 1.8K Jul 24 17:18 opensuse.menu
-rw-r--r-- 1 root root 2.6K Jun 4 2010 rescue.menu
drwxr-xr-x 2 root root 4.0K Jul 24 17:05 sles/
-rw-r--r-- 1 root root 2.7K Jul 24 17:18 sles.menu
-rw-r--r-- 1 root root 329 Oct 20 2009 tests.menu
/srv/tftpboot/pxelinux.cfg/esx:
total 8.0K
-rw-r--r-- 1 root root 1.9K Jun 24 2011 esx-4.1-260247.menu
-rw-r--r-- 1 root root 1.9K Jun 24 2011 esx-4.1-348481.menu
/srv/tftpboot/pxelinux.cfg/esxi:
total 4.0K
-rw-r--r-- 1 root root 1.7K Jun 20 2011 esxi41.menu
/srv/tftpboot/pxelinux.cfg/opensuse:
total 24K
-rw-r--r-- 1 root root 1.8K Jun 20 2011 opensuse-11.3-x64.menu
-rw-r--r-- 1 root root 1.8K Jun 20 2011 opensuse-11.3-x86.menu
-rw-r--r-- 1 root root 1.8K Jun 20 2011 opensuse-11.4-x64.menu
-rw-r--r-- 1 root root 1.8K Jun 20 2011 opensuse-11.4-x86.menu
-rw-r--r-- 1 root root 1.8K Dec 14 2011 opensuse-12.1-x64.menu
-rw-r--r-- 1 root root 1.8K Dec 14 2011 opensuse-12.1-x86.menu
/srv/tftpboot/pxelinux.cfg/sles:
total 60K
-rw-r--r-- 1 root root 1.8K Jul 24 16:58 sles-10.2-x64.menu
-rw-r--r-- 1 root root 1.8K Jul 24 16:57 sles-10.2-x86.menu
-rw-r--r-- 1 root root 1.8K Jul 24 16:57 sles-10.3-x64.menu
-rw-r--r-- 1 root root 1.8K Jul 24 16:57 sles-10.3-x86.menu
-rw-r--r-- 1 root root 1.8K Jul 24 16:57 sles-10.4-x64.menu
-rw-r--r-- 1 root root 1.8K Jul 24 16:57 sles-10.4-x86.menu
-rw-r--r-- 1 root root 1.8K Jul 24 16:58 sles-11-x64.menu
-rw-r--r-- 1 root root 1.8K Jul 24 16:58 sles-11-x86.menu
-rw-r--r-- 1 root root 1.8K Jul 24 16:59 sles-11.1-vmware-x64.menu
-rw-r--r-- 1 root root 1.8K Jul 24 16:59 sles-11.1-vmware-x86.menu
-rw-r--r-- 1 root root 1.8K Jul 24 16:59 sles-11.1-x64.menu
-rw-r--r-- 1 root root 1.8K Jul 24 17:00 sles-11.1-x86.menu
-rw-r--r-- 1 root root 1.8K Jul 24 17:00 sles-11.2-vmware-x64.menu
-rw-r--r-- 1 root root 1.8K Jul 24 17:17 sles-11.2-vmware-x86.menu
-rw-r--r-- 1 root root 1.8K Jul 24 17:00 sles-11.2-x64.menu

NetApp: Archive SnapManager SQL snapshots

Fri, 08 Aug 2014 08:25:56 +0000

As I wrote before, we’re using SnapManager (for SQL/Oracle) to create consistent snapshots. However my database guys don’t want to name their snapshots daily. (which I can understand), as once you archive those snapshots to a secondary (and tertiary) system, the names become junk.

So, they’re naming the snapshots like snap__vcsrv_29_12_2012-10.00.01. Sadly, when it comes to SnapVault, it expects the names in form of daily. otherwise you won’t be able to transfer the snapshots with the CLI (none that I have found anyway).

But we didn’t want to move away from naming the snapshots the way they are, so I ended up writing a PowerShell script, that once triggered archives the Snapshots needed for a set of databases. It took me a while to figure a bunch of stuff out, but in the end I think I have a working way of archiving custom-named snapshots.

Implementing SnapVault backups - the hard way

Fri, 08 Aug 2014 08:25:10 +0000

Well, I recently had the pleasant task of implementing SnapVault backups, that are being shipped to an offsite location with SnapMirror.

That in itself isn’t the bad thing, however we decided against Protection Manager (since it was a charged product back when we decided on this). So I basically had the three tasks:

Actually implement the SnapVault stuff (and learn my way around it and also document it)
Write a bunch of scripts, that help us in creating scheduled backups of our databases
Create a monitoring script, that’ll fit into our Nagios environment already in place

Well, two months later (sadly it still has some kinks - I can’t figure out this one bug though for the life of it) and a few hundred hours of working on/with it and out came four things:

NetApp: Establishing SnapVault relations

Fri, 08 Aug 2014 08:22:46 +0000

I’ve been spending a lot of my time the last week on getting SnapVault with out FAS-filers to work. Out came a script, which does this for a given volume (and of course SnapVault Primary and Secondary).

The script expects, that SSH public key authentification has been set up.

Setting up a phpMyAdmin auto-update

Wed, 06 Aug 2014 19:20:11 +0000

Well, just like everybody else, I’ve been using phpMyAdmin to do my casual MySQL fixing/work on this website. However, recently the phpMyAdmin developers switched to Git on SourceForge and then to GitHub shortly after that.

So, the guy over at Network Jack wrote down what I had already been doing:

1
2
3


git clone --depth=1 git://phpmyadmin.git.sf.net/gitroot/phpmyadmin/phpmyadmin
cd phpmyadmin
git checkout --track -b PMASTABLE origin/STABLE

However, as I said before, they switched from SourceForge to GitHub, thus you need another URL.

mdadm: Add a hot-spare after failing a disk

Sun, 27 Jul 2014 21:46:33 +0000

Once the disk is failed (or is actually defective), mdadm will automatically remove it from the RAID. After that, you’ll either have to add the disk back as a data disk or as a hot-spare (which was in my case). Now, here’s after the rebuild for the failed disk started:

1
2
3
4
5
6
7
8


root:(charon.ka.heimdaheim.de) PWD:~
Sun Jul 27, 23:40:35 [0] > cat /proc/mdstat
Personalities : [raid6] [raid5] [raid4]
md127 : active raid5 sdi1[0] sdh1[6] sdj1[7] sdk1[8] sdf1[9] sdb1[5] sde1[4] sdd1[2] sdc1[1]
 15626121216 blocks super 1.2 level 5, 512k chunk, algorithm 2 [9/8] [UUUUU_UUU]
 [===================>.] recovery = 97.9% (1913176308/1953265152) finish=12.3min speed=53936K/sec

unused devices: <none>

In order to add the replaced disk back to the RAID, you’ll have to prepare a partition for it (see this post for more details). After that, it’s a simple call with mdadm to re-add the hot-spare:

diskinfo

Sun, 27 Jul 2014 16:39:24 +0000

Get a list of all disks and show the serial numbers

 1
 2
 3
 4
 5
 6
 7
 8
 9
10


#!/bin/bash

if [ ! -x /usr/sbin/hdparm ] ; then
 echo "Missing hdparm"
 exit 1
fi

for disk in /dev/sd?; do
 echo "$disk: `hdparm -I $disk | grep "Serial Number:" | awk '{ print $3 }'`"
done

idle3 wrapper

Sun, 27 Jul 2014 16:33:12 +0000

Another wrapper (like mdstat), that’ll look through my Western Digital disks and fix any disk not having the head parking timeout set to a configured value.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19


#!/bin/bash

FIRMWARE_TIMEOUT_SH=138

if [ ! -x /usr/sbin/idle3ctl ] ; then
 echo "idle3-tools is missing."
 exit 1
fi

for disk in /dev/sd?; do
 # idle time should be set to: 138 (300s)
 # 138-128=10
 # 10x30=300 seconds
 FIRMWARE_TIMEOUT_IS="$( /usr/sbin/idle3ctl -g $disk | awk '{ print $5 }' )"

 if [ "$FIRMWARE_TIMEOUT_IS" -ne "$FIRMWARE_TIMEOUT_SH" ]; then
 /usr/sbin/idle3ctl -s$FIRMWARE_TIMEOUT_SH $disk
 fi
done

mdstat

Sun, 27 Jul 2014 16:31:26 +0000

Well, I needed a way to watch the mdstat progress (because a disk just failed …).

1
2
3


#!/bin/bash

watch -n1 cat /proc/mdstat

XBMC thumbnail generation

Sat, 19 Jul 2014 11:43:04 +0000

Well, I have a few movies and series that ain’t represented in TMDB/TVDB. So here’s a little script, that will parse over any video files, check if a thumb file is already present, and if not generate one using ffmpegthumbnailer…

1
2
3
4
5
6
7
8


#!/bin/bash

find /srv/smb/tv/ -name "*.wmv" -o -name "*.avi" -o -name "*.mp4" \
 -o -name "*.mkv" | while read file; do
 if [ ! -f "${file%.*}-thumb.jpg" ] ; then
 fmpegthumbnailer -i $file -o "${file%.*}-thumb.jpg" -s 0 &>/dev/null
 fi
done

Linux NAS optimizations

Wed, 09 Jul 2014 20:04:40 +0000

Well, I recently had to flatten my archive NAS (well only the OS part … wheeeh). Since I didn’t have the chance to backup the old settings I had to do everything from scratch … And this time I decided, I wasn’t doing a script but rather the proper way.

I spent a while reading through the Internetz about the various settings until I stumbled upon a Frauenhofer Wiki entry. From there I ended up writing those udev-rules and the sysctl configs…

SFdisk - Partition table for 2TB RAID-Disks

Wed, 09 Jul 2014 13:18:09 +0000

So, when I create (or add RAID disks) I have this handy sfdisk template (I created once when I first added the 2TB disks):

1
2
3
4
5
6
7


root:(charon.ka.heimdaheim.de) PWD:~
Wed Jul 09, 15:13:04 [0] > sfdisk -d /dev/sdj > ~/raid-disk-template.sf
root:(charon.ka.heimdaheim.de) PWD:~
Wed Jul 09, 15:13:04 [0] > cat ~/raid-disk-template.sf
# partition table of /dev/sdj
unit: sectors
/dev/sdj1 : start= 2048, size=3906793472, Id=da

So, if I wanted to add more disks, I’d just have to run the following:

Nexus 5000: Configure CEST

Tue, 24 Jun 2014 21:07:52 +0000

Since I’m living and working in Germany, most of my hardware is using timezone configuration for CEST (or Europe/Berlin).

This here is the simple configuration for our Nexus 5000’s:

1
2
3
4
5


conf t
clock timezone CET 1 0
clock summer-time CEST 5 Sun Mar 02:00 5 Sun Oct 03:00 60
exit
copy running-config startup-config

UCS 5108 power redundancy lost

Sun, 22 Jun 2014 10:41:22 +0000

Well, another day - another UCS error. Out of the blue, one of our chassis started displaying that one PSU had failed, however the UCS was showing no PSU had failed 🤷

Well, as it turns out - this is yet another known bug in 2.0.2(r). You’ll either have to unplug and plug all the power cables (that’s four) in a maintainance window - or simply change the Equipment Power Policy (found in the Root of your UCS, tab Policy)

sa-learn, dovecot virtual users and virtual user configs

Mon, 23 Dec 2013 06:13:22 +0000

Well, I wanted independent SpamAssassin Bayes databases per user (different users, different preferences). For that, RoundCube already set up the Junk folder. However, I wanted the ability (for myself, as well for my other users) to individually mark messages as either Spam or Ham.

RoundCube: Inbox view

Now, as I said before I wanted a trivial way to mark messages as Spam or Ham (without using the command line each time).

NetApp: Monitoring of SnapVault/SnapMirror/LUN/Snapshot information with Nagios

Sun, 15 Dec 2013 15:51:03 +0000

As I wrote before, we have a bunch of filers (and a ton of volumes w/ luns on them), that I need to monitor. At first, I tried the existing NetApp Nagios-Plugin(s), but they all use SNMP and with that I can either watch all volumes or none. And that didn’t satisfy me.

Don’t get me wrong, the existing plugins are okay and I still use them for stuff (like GLOBALSTATUS or FAN/CPU/POWER) which isn’t present in the API or real hard to get at, however I wanted more. So I ended up looking at the NetApp API, and ended up writing a “short” plugin for Nagios using Perl.

Maybe if I’m ever bored, I’ll rewrite it using C, but for now the Perl plugin has to suffice.

So far the plugin supports the following things:

Monitoring FlexVolumes (simply watching the free space)
Monitoring LUN space (the allocated space inside a FlexVolume for iSCSI/FC LUNs)
Monitoring Snapshot space (the allocated space inside a FlexVolume for Snapshots)
Monitoring SnapVault relations (and their age)
Monitoring SnapMirror relations (and their age)

The plugin will return performance data for most (if not all) of those classes. It needs a user on the filer you wish to monitor - which sadly needs to have the admin role.

NetScaler: Generate a simple usage statistic per Vserver

Thu, 21 Nov 2013 16:39:08 +0000

One of my co-workers recently approached me, that he needed a simple shell script which would generate a simple report about a Vserver’s current connections. After ironing out a few things with him (he had the intention of it being on a CIFS share on our file-server - which I changed to a simple HTML page) I went to work.

Out came two scripts. One is the collection instance, and the other is the processing instance. First the collection script runs, finds the current HA master node and then collects the Vserver’s current connections. After that script has dumped the information (date, time, current connections) into a file, the processing script will go and create a simple HTML page that’ll show exactly those informations.

VMware templates: post-processing for SUSE Linux Enterprise Server and openSUSE

Thu, 21 Nov 2013 16:31:40 +0000

Well, I’ve been fiddling around with SLES and openSUSE VMware templates. I know it’s a stupid idea when you have a PXE server from which you could install this in a matter of minutes (seriously the SLES PXE installation takes about 5 minutes).

However, when dealing with DMZ’s (yeah, they exist!) you usually don’t have any PXE servers there. So I decided to go with simple VMware templates (like we do with Windows already), but had to iron out a few kinks.

MDS9100 firmware updates - generating copy commands

Sun, 20 Oct 2013 11:20:02 +0000

Well, I went to work today … yeah, I know it’s Sunday right ? I ended up updating two MDS9148 switches and I didn’t want to figure out everything all over again. So I put the system image and kickstart onto one of our FTP servers and ran a short bash loop on it:

1
2
3
4


root:(ftp.daheim.heimdaheim.de) PWD:~
Sun Oct 20, 08:57:24 [0] > for file in `ls /srv/ftp/firmware/mds9148/*6.2.3*`; do
echo "copy ftp://10.0.0.55/`echo $file | sed 's,/srv/ftp/,,'` bootflash:/`echo $file | sed 's,/srv/ftp/firmware/mds9148/,,'`"
done

Now that’ll generate me two lines, which in turn I can use on the MDS’n:

XenServer 6-x: Update all hosts in pool

Sun, 15 Sep 2013 16:23:51 +0000

Well, what annoyed me in the past was that I had to patch each XenServer patch by patch (no bulk applying) and when used in combination with UCS blades (especially if those have >250GB RAM), it takes ages to keep a pool up-to-date. So I ended up writing yet another script (I know why I hate Citrix XenServer … the XenCenter GUI is lacking sooooo much) which will download new patches from a directory on a HTTP server and then print the lines necessary to apply the patches to all hosts in a pool.

XenServer 6-x: Quick VM Protection Policy to VM name-label script

Sun, 15 Sep 2013 16:14:04 +0000

Well, today I ended up writing a short script that’ll give me a list of VMPPs with the VMs that are associated to it.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12


#!/bin/bash

# Get a list of VMPPs
for vmpp in `xe vmpp-list params=uuid --minimal | sed "s/,/ /g"`; do
 VMPP_NAME=`xe vmpp-list params=name-label uuid=$vmpp --minimal`

 for vm in `xe vmpp-list params=VMs --minimal uuid=$vmpp | sed -e "s/;//g" -e "s/,//g"`; do
 VM=`xe vm-list params=name-label uuid=$vm --minimal`

 echo "$VMPP_NAME: $VM"
 done
done

vmware-config-tools-pl finished with Could not find Parent Node

Mon, 09 Sep 2013 19:15:53 +0000

Well, today I encountered a old problem (or so I thought). Basically a specific udevadm version causes the vmware-config-tools.pl script to error out like this:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16


The vmblock enables dragging or copying files between host and guest in a
Fusion or Workstation virtual environment. Do you wish to enable this feature?
[no]

!!! [EXPERIMENTAL] !!!
VMware automatic kernel modules enables automatic building and installation of
VMware kernel modules at boot that are not already present. By selecting yes,
you will be enabling this experimental feature. You can always disable this
feature by re-running vmware-config-tools.pl.

Would you like to enable VMware automatic kernel modules?
[no]

No X install found.

Could not find Parent Node...

I’ve had encountered this before in the past, and before there was some explanation on the VMware forums, which I couldn’t locate. Lucky me, the VMware Tools updater keeps modified versions of vmware-tools-config.pl around. So I ended up creating this short diff, so that I may find it in the future - if I still need it:

DiskStation 213+: LAN throughput

Sun, 25 Aug 2013 14:51:49 +0000

Well, I’ve been moving stuff to my archive NAS, and in case anyone is wondering - the DS213+ actually nearly gets to the 1GE transmission limit… It’s near the CPU limit then anyhow, but … 😄

XenServer 6-0-2: Fixing Root-Disk-Multipathing with Boot-from-SAN

Tue, 16 Jul 2013 16:27:12 +0000

As the title pretty much tells, I’ve been working on fixing the Root-Disk-Multipathing feature of our XenServer installations. Our XenServer boot from a HA-enabled NetApp controller, however we recently noticed that during a controller fail-over some, if not all, paths would go offline and never come back. If you do a cf takeover and cf giveback in short succession, you’ll end up with a XenServer host that is unusable, as the Root-Disk would be pretty much non-responsive.

OpenWRT on DIR-615 H1 - Port mappings

Sat, 22 Jun 2013 14:46:55 +0000

Well, I’ve been fiddling with OpenWRT to replace my crappy Vodafone Easybox 602. Up till now I had DD-WRT on the DIR-615’s (yes, two) however recently (I think due to the Synology DiskStation in combination with a WDS setup) I had to filter SSDP broadcasts storms (which in turn kill the Easybox), which isn’t quite so easy on DD-WRT, but rather easy on OpenWRT.

Today I went thinking about VLAN-Tagging and stuff, and I had to figure out the physical to logical port mapping for the DIR-615. So let’s run swconfig dev rt305x show on the DIR-615 after plugging in the RJ45 cable to a port.

Postfix, soft_bounce=yes and redelivering mails

Wed, 19 Jun 2013 16:07:18 +0000

Well, I’m setting up spam/virus filter at the moment. Somewhere I found, that when doing so one should enable soft_bounce=yes in your /etc/postfix/main.cf. Now, once I finished setting up my mailing setup, I wanted to manually force the delivery.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13


# Check for mails still in the mail-queue
root:(eris.heimdaheim.de/mailing) PWD:~
Wed Jun 19, 17:57:10 [0] > mailq
-Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
B404F1B42C 2751 Wed Jun 19 17:58:01 christian.th.heim@gmail.com
 (user unknown)
 christian@heimdaheim.de

C250F1B427 2770 Wed Jun 19 17:53:31 christian.th.heim@gmail.com
(lost connection with 127.0.0.1[127.0.0.1] while receiving the initial server greeting)
 christian@heimdaheim.de

-- 6 Kbytes in 2 Requests.

Now, if you fixed the mail delivery, you just need to enter the following:

Hetzner KVM guest networking

Mon, 17 Jun 2013 16:39:48 +0000

Now, since we’re using bridged routing, we need to adjust the guest.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13


auto eth0
iface eth0 inet static
 address 78.46.37.114
 netmask 255.255.255.255
 pointopoint 78.46.37.118
 gateway 78.46.37.118
 post-up ping -c2 78.46.37.118 &>/dev/null

iface eth0 inet6 static
 address 2a01:4f8:110:3148::5
 netmask 64
 gateway 2a01:4f8:110:3148::2
 post-up ping6 -c2 2a01:4f8:110:3148::2 &>/dev/null

This’ll take care of the bridged routing and the ICMPv6 announcement to the host. Without the ping/ping6, guest and host won’t be able to communicate (no clue why).

Hetzner KVM host bridge configuration

Mon, 17 Jun 2013 16:37:41 +0000

Firstoff, adjust the /etc/network/interfaces file to look like this:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34


# device: eth0
auto eth0
iface eth0 inet static
 address 78.46.37.118
 netmask 255.255.255.255
 gateway 78.46.37.97
 pointopoint 78.46.37.97

iface eth0 inet6 static
 address 2a01:4f8:110:3148::2
 netmask 64
 gateway fe80::1

auto vmbr0
iface vmbr0 inet static
 address 78.46.37.118
 netmask 255.255.255.255
 bridge_ports none
 bridge_stp off
 bridge_fd 0
 post-up ip route add 78.46.37.108/32 dev vmbr0
 post-up ip route add 78.46.37.110/32 dev vmbr0
 post-up ip route add 78.46.37.114/32 dev vmbr0

iface vmbr0 inet6 static
 address 2a01:4f8:110:3148::2
 netmask 64
 post-up ip -6 neigh add proxy 2a01:4f8:110:3148::3 dev eth0
 post-up ip -6 neigh add proxy 2a01:4f8:110:3148::4 dev eth0
 post-up ip -6 neigh add proxy 2a01:4f8:110:3148::5 dev eth0
 post-up ip -6 neigh add proxy 2a01:4f8:110:3148::6 dev eth0
 post-up ip -6 neigh add proxy 2a01:4f8:110:3148::7 dev eth0
 post-up ip -6 neigh add proxy 2a01:4f8:110:3148::8 dev eth0
 post-up ip -6 neigh add proxy 2a01:4f8:110:3148::9 dev eth0

Secondly, adjust you KVM guest network config to look like this (similar, you might want to replace the MAC address of the guest):

Automating/Standardizing Hetzner server installs with installimage

Sun, 16 Jun 2013 15:52:04 +0000

Create a file /autosetup in the rescue system, that may (or may not) look like this:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22


DRIVE1 /dev/sda
DRIVE2 /dev/sdb

SWRAID 1

SWRAIDLEVEL 1

BOOTLOADER grub

HOSTNAME nyx

PART /boot ext2 512M
PART swap swap 12G
PART lvm vg0 all

LV vg0 root / ext3 5G
LV vg0 home /home ext3 50G
LV vg0 usr /usr ext3 10G
LV vg0 tmp /tmp ext3 5G
LV vg0 var /var ext3 5G

IMAGE /root/.oldroot/nfs/install/../images/Debian-70-wheezy-64-minimal.tar.gz

virt-viewer: qemu+ssh to a KVM host running SSH on a different port

Wed, 12 Jun 2013 18:26:54 +0000

Well, I’ve been tinkering with KVM the last few days and I’ve been stuck accessing the KVM guests (as the guests are running on a host I don’t have my Xorg server running on). After a bit of searching, I actually found what I was looking for.

Piecing together from both sources, to connect to a KVM host, that has SSH running on a different port:

`1`	`virt-viewer --connect qemu+ssh://root@kvm.home.barfoo.org:222/system guest`

Act of War: High Treason cheats

Thu, 09 May 2013 07:49:41 +0000

**Code:****Result:**fortknoxAdd $1000 CashkeyholemasterReveal MapineedalltechnosAll TechyeepeekayeNuclear Strike at CursorbigbrotherUnlock Camera ModemotherrussiaSummon M80 TankcoolihaveanewcarSummon CIA Armored VancoolimthepresidentSummon U.S. PredisentswatatyourordersSummon SWATymcaSummon U.S. CopgreenjellySummon U.K. CopbringoutthedeadSummon AmbulanceduckhuntSummon a Flying DuckblackhawkdownSummon SA12 Anti-Aircraft Missile

Cheats MOD: **Code:****Result:**abramsSummon a M1A2 Abrams tankapcSummon a M1A1 Bradley APChindSummon a MI24 Hind gunshipburkeSummon a DDG-51 Arleigh Burke Missile DestroyertarawaSummon a Tarawa class Landing Helicopter DockoliverSummon a FFG-7 Oliver-Hazard-Perry class FrigateddxSummon a DDX Zumwalt class destroyersananSummon a San Antonio-class amphibious transport dockbulldSummon bulldozer constructor (US army builder)seastalSummon a CH-53 Sea StallionhipconSummon a Hip Constructor (consortium builder)hoshawkSummon a Medivac BlackhawkhawkSummon a BlackhawkvrepairSummon a V22 repairmarineSummon a U.S. marinesniperSummon a U.S. sniperblackhawkdownSummon a 9K22 TunguskafortknoxAdd $10.000 Cash

5 year flashback

Wed, 08 May 2013 06:00:17 +0000

Today I looked at my ADSL router and had a flashback about five years ago. Back then I was working for the university and used a dual line ISDN link for internet which had about the same bandwidth as my ADSL currently has …

After that experience I know how people must feel in some areas where internet isn’t as advanced as my normal 2MBit ADSL line … Loading YouTube or even a simple forum is a real waiting game (took me about two minutes to load up a hit out of Google), and I even attest myself a dependency on even normal ADSL (not one of that superfast 32MBit lines - just 2MBit).

UCS Manager 2-0-2r KVM bug

Sun, 28 Apr 2013 19:02:56 +0000

Well, we’ve been battling with a KVM bug in our UCS installation, that’s been driving me (and apparently the Cisco L3 support and development) nuts. But lets back up a bit. If you’ve worked with UCS before, once you open up the KVM console you’ll see the KVM and a shortcut commands (Shutdown, Reset) and another tab that allows you to mount virtual media.

Once you open it up, it should look like this:

VMware ESXi - Free memory limits corrected

Sun, 28 Apr 2013 18:33:36 +0000

Well, a coworker of mine asked me about this. Since I didn’t know (yeah, I don’t know everything) I went to my trusted friend - Google - and searched for it. There seems to be a lot of confusion about this, so I thought I’d clarify this.

I ended up putting a license to one of my hosts in vCenter.

Yeah well, the host has a bit more memory than the allowed 32GB vRAM per Socket (the host has two sockets) - thus you’re allowed to have 64GB RAM if your host has two sockets.

Dealing with SnapVault replication issues

Tue, 09 Apr 2013 16:05:30 +0000

Well, for the past two months I had a case open with NetApp to figure out this SnapVault replication issue we were seeing. The initial transfer of the SnapVault relation would complete with a hick up, manual snapshot transfers also work - just the scheduled, auto-created Snapshots won’t replicate.

At first I (and the NetApp support) thought this was an issue with SnapVault itself, however after being away for the last four weeks I looked at the issue with fresh eyes. After a short peek into the logs, I found what I had found back when I first looked into this.

Office 2010 Professional

Sat, 09 Mar 2013 17:05:19 +0000

Download links:

Office 2010 Professional Plus (incl. SP1) 32bit/ 64bit
Business Contact Manager 2010 32bit/ 64bit
Microsoft Lync 2010 32bit/ 64bit

Product Key:

C74VQ-8YRBX-YCF3V-C8XRH-4YCHF

Windows 7 Keys

Sat, 09 Mar 2013 15:40:52 +0000

Windows 7 Installations-Keys:

Windows 7 Professional: YKHFT-KW986-GK4PY-FDWYH-7TP9F

Windows 7 Ultimate: 7JQWQ-K6KWQ-BJD6C-K3YVH-DVQJG

Windows 7 Ultimate: D9RHV-JG8XC-C77H2-3YF6D-RYRJ9

Windows 7 Ultimate: 482XP-6J9WR-4JXT3-VBPP6-FQF4M

Windows 7 Ultimate: RFFTV-J6K7W-MHBQJ-XYMMJ-Q8DCH

Windows 7 Anytime Upgrade-Keys:

Windows 7 Professional: VTDC3-WM7HP-XMPMX-K4YQ2-WYGJ8

Windows 7 Home Premium: RHPQ2-RMFJH-74XYM-BH4JX-XM76F

Windows 7 Ultimate: 22TKD-F8XX6-YG69F-9M66D-PMJBM

Installationsmedien:

Windows 7 Professional: 32bit/ 64bit

SABnzbd: Start daemon in paused mode

Sat, 23 Feb 2013 21:39:21 +0000

Well, I have a openvpn script on my DiskStation, and apparently the “normal” services (like the packages) start before optware (that’s where my openvpn client is located), it immidiatly starts downloading (which isn’t really that desired). So looking at the SABnzbd command line parameters there’s one option that looks like it’s what I want:

-p–pauseStart in paused mode

Synology: pyLoad - Clickundamp;Load from a remote host

Sun, 17 Feb 2013 07:31:20 +0000

First, you need to enable Click&Load link submittion from external hosts (Config->Plugins->ClickAndLoad->Allow external link adding).

After that, simply add the forwarding rule using an elevated command prompt:

1

netsh interface portproxy add v4tov4 listenaddress=127.0.0.1 listenport=9666 connectaddress=<nasip> connectport=9666

Synology: New openvpn init script

Wed, 06 Feb 2013 15:04:33 +0000

My VPN provider isn’t being supported by the Synology VPN client (because they aren’t using the standard port 1194, instead 1195). After tinkering with the ovpn files the Synology VPN client uses to store the connection settings (and failing), I just installed openvpn with ipkg.

However after tinkering around with the init-script provided by the openvpn ipkg from the NSLU2 feed, I got tired and just rewrote the damn thing:

Generate Nagios config for check_netapp-api-pl

Tue, 05 Feb 2013 19:46:24 +0000

As so often, I wanted a script, that’ll crawl my filers and regenerate the configuration if there are any new volumes/snapvaults/snapmirrors or if one of them has been removed.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96


#!/bin/bash

FAS_HOSTS="$( ls /etc/nagios/objects/hosts/san/fas*{a,b}.cfg | cut -d/ -f7 | cut -d. -f1 )"

for host in $FAS_HOSTS; do
 OUTPUT_FILE=/etc/nagios/objects/hosts/san/$host-vol.cfg

 # Clear the output file
 echo "" > $OUTPUT_FILE

 # Get the volume list
 for volume in `ssh $host vol status | awk '{ print $1 }' | grep ^vol | sort -u | grep -v vol0$`; do
 user="$( grep "USER=" /etc/netapp-sdk/$host | cut -d= -f2 )"
 pass="$( grep "PASS=" /etc/netapp-sdk/$host | cut -d= -f2 )"
# echo "define service {"
# echo " use generic-service"
# echo ""
# echo " check_command check_netapp-volfree!$user!$pass!${volume}!92!98"
# echo " check_interval 5"
# echo " host_name ${host}"
# echo " notifications_enabled 0"
# echo " notification_interval 720"
# echo " service_description VOLSPACE ${volume}"
# echo "}"
 echo
 echo "define service {"
 echo " use generic-service-san-perfdata"
 echo ""
 echo " check_command check_netapp-lunspace!$user!$pass!${volume}"
 echo " check_interval 5"
 echo " host_name ${host}"
 echo " notifications_enabled 0"
 echo " notification_interval 720"
 echo " service_description LUNSPACE ${volume}"
 echo "}"
 echo

 SR="$( ssh $host snap reserve $volume | cut -d -f7 )"
 if [ "$SR" != "0%" ] ; then
 echo "define service {"
 echo " use generic-service-san-perfdata"
 echo ""
 echo " check_command check_netapp-snapreserve!$user!$pass!${volume}"
 echo " check_interval 10"
 echo " host_name ${host}"
 echo " notifications_enabled 0"
 echo " notification_interval 720"
 echo " # SR: $SR"
 echo " service_description SNAPRESERVE ${volume}"
 echo "}"
 echo
 fi
 done | tee -a $OUTPUT_FILE

 # Check snapvault foo
 for sv in `ssh $host snapvault status -l 2>/dev/null | awk '{ print $2 }' | grep vol`; do
 # only do the checks on sv_secondary
 if [ "$( echo $sv | grep $host | cut -d: -f1 )" == "${host}" ]; then
 vol="$( echo $sv | cut -d/ -f3 )"
 user="$( grep "USER=" /etc/netapp-sdk/$host | cut -d= -f2 )"
 pass="$( grep "PASS=" /etc/netapp-sdk/$host | cut -d= -f2 )"
 echo "define service {"
 echo " use generic-service-san-perfdata"
 echo ""
 echo " check_command check_netapp-snapvault!$user!$pass!$vol!38!42!"
 echo " check_interval 60"
 echo " host_name ${host}"
 echo " notifications_enabled 0"
 echo " notification_interval 720"
 echo " service_description SNAPVAULT ${vol}"
 echo "}"
 echo
 fi
 done | tee -a $OUTPUT_FILE

 # Check snapmirror foo
 for sm in `ssh $host snapmirror status 2>/dev/null | awk '{ print $2 }' | grep vol | grep $host`; do
 # only do the checks on sm_secondary
 if [ "$( echo $sm | grep $host | cut -d: -f1 )" == "${host}" ]; then
 vol="$( echo $sm | cut -d/ -f3 | cut -d: -f2 )"
 user="$( grep "USER=" /etc/netapp-sdk/$host | cut -d= -f2 )"
 pass="$( grep "PASS=" /etc/netapp-sdk/$host | cut -d= -f2 )"
 echo "define service {"
 echo " use generic-service-san-perfdata"
 echo ""
 echo " check_command check_netapp-snapmirror!$user!$pass!$vol!38!42!"
 echo " check_interval 60"
 echo " host_name ${host}"
 echo " notifications_enabled 0"
 echo " notification_interval 720"
 echo " service_description SNAPMIRROR ${vol}"
 echo "}"
 echo
 fi
 done | tee -a $OUTPUT_FILE
done

XFS: Change FS label

Thu, 31 Jan 2013 20:29:15 +0000

In order to change the XFS label, you need to complete the following steps:

1
2
3


umount /mnt/xfs_vol # only if the volume is mounted by label
xfsadmin -L newlabel /dev/md/aggr2
mount /dev/disk/by-label/newlabel /mnt/xfs_vol

mdadm: Prepare partitions for RAID

Sun, 27 Jan 2013 20:59:28 +0000

Well, as it turns out if have “special” hard disks … the WD20* disks are susceptible to misalignment issues due to them having a logical sector size of 512 byte …

So here we go:

1
2
3
4
5
6
7
8


parted --alignment optimal /dev/sdx
mklabel msdos
print
# now figure out how big you want the disks. make sure you
# don't use the whole space, as a replacement disk
# might have ~20 sectors less
mkpart primary 1 -1800
quit

Now, dump the partition layout to a file:

extfs: Change FS label

Thu, 10 Jan 2013 23:11:54 +0000

`1`	`e2label /dev/md/aggr0 vol1`

mdadm: Update md name

Thu, 10 Jan 2013 23:06:52 +0000

1
2
3


mdadm --stop /dev/md127
mdadm --assemble /dev/md127 --name=charon:aggr0 --update=name
 /dev/sdb1 /dev/sdd1 /dev/sde1 /dev/sdf1 /dev/sda1

Generate Nagios config for NetApp filers

Tue, 01 Jan 2013 09:46:39 +0000

At some point in the last few weeks, I repeatedly had to recreate my Nagios config for currently six filers. After doing that a few times, I ended up (like sooo often) writing a short Bash script, that’ll do this for me - without any fuss.

The only thing the script needs, is that the filers and the filers are registered in DNS … Here’s an example:

1
2
3
4


fas3240a IN A 172.31.76.150
fas3240a-sp IN A 172.31.74.150
fas3240b IN A 172.31.76.151
fas3240b-sp IN A 172.31.74.151

With that done, the script will create the necessary Nagios config for those filers.

NetApp: Establishing SnapMirror relationships

Mon, 31 Dec 2012 09:44:19 +0000

After figuring out the SnapVault stuff, I needed to implement a whole bunch of SnapMirror relations. As I am lazy (as in click-lazy), I ended up writing a somewhat short Bash script, that’ll either establish a bunch of SnapMirror relations (for a single host) or just for a single volume.

The script expects, that SSH public key authentification has been set up, and that the source for the SnapMirror exists and is online/not-restricted.

NetApp: SnapVault snapshot retention for non-standard snapshot names

Sat, 29 Dec 2012 09:37:48 +0000

Well, the name says it pretty much. Once you rename the snapshot on the SnapVault destination from daily.0 to something else, the whole builtin SnapVault snapshot retention isn’t gonna work anymore.

Back when I started all the code-writing, I wasn’t aware of this. One of my co-worker complained to me about it on Wednesday that there are an assfull of snapshots on the SnapVault destination (one snapshot each day since the end of October, meaning more than 50 snapshots per volume, in a total of 12 or so FlexVolumes, making the total about 500 snapshots).

So I took the time to write this little Bash script (yeah, I know I’m mixing a bunch of languages - I really like the KISS principle), which will get the necessary information from the filer (snapvault snap sched needs to be set) and then deletes the over-aged snapshots.

NetApp: Archive SnapManager SQL Snapinfo

Sat, 29 Dec 2012 09:16:45 +0000

The MSSQL admins decided to dump the SMSQL Snapinfo stuff on a separate volume, that SMSQL also snapshots. Same as before, I need a PowerShell script that’ll archive the snapshot and rename it.

NetApp: Archive SnapManager Oracle Snapshots

Sat, 29 Dec 2012 09:12:57 +0000

And here’s the script for SMO. However, since different people administrate the Oracle Databases, they don’t want me to tinker with the database like the MSSQL admins. They give me a CSV-list of volumes, that should be backed up and I work with that.

Finding files bigger than 20MiB

Sat, 15 Dec 2012 13:05:50 +0000

Well,

up till now I’ve been using du -sh * | grep G, however that didn’t quite do what I wanted. So I looked at the manpage of find a little bit today, and I found this:

`1`	`find . -type f -size +20000k -exec ls {} ; \| sort`

Recent downtime

Wed, 28 Nov 2012 21:01:40 +0000

Well, you might have noticed that barfoo.org hasn’t been available for the last week or so … I had to change the DNS provider (thanks at this point again to Bene from xnull.de for putting me up as long as he did).

Sadly my new provider, when purchasing the domain hosting, doesn’t allow sub-domains. So after opening a service ticket with them, they switched me into a webhosting contract which allows sub-domains (wtf…).

MDS9000: Setting summer time for CET

Wed, 17 Oct 2012 20:37:36 +0000

After rebuilding two MDS9148, I wanted them to correctly switch the summer/winter time for my time zone. Currently I’m in CET (or CEST during the summer), so I googled for that. The search came up with Cisco-FAQ, however that needed a slight adjustment.

Apparently the NXOS doesn’t support the feature “recurring” in the clock configuration. So I had to slightly adapt the configuration line:

1
2


clock timezone MET 2 0
clock summer-time MET 5 Sun Mar 02:00 5 Sun Oct 03:00 60

vCenter: Removing VSC custom attributes

Wed, 17 Oct 2012 20:10:01 +0000

Well, yesterday I got pissed of those Virtual Storage Console custom attributes.

Currently we don’t use the Provisioning & Cloning feature of the VSC, thus we don’t need the custom attributes. After poking around, I decided to write a short PowerCLI script to do the task.

It’s really rather simple, so here goes:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23


param( [string] $vCenter )

# Add the VI-Snapin if it isn't loaded already
if ( (Get-PSSnapin -Name "VMware.VimAutomation.Core" -ErrorAction SilentlyContinue) -eq $null )
{
 Add-PSSnapin -Name "VMware.VimAutomation.Core"
}

If ( !($vCenter) )
{
 Write-Host
 Write-Host "vcenter-remove-vsc-attributes: <vcenter-server>"
 Write-Host
 Write-Host " <vcenter-server> - DNS name of your vCenter server."
 Write-Host
 exit 1
}

Connect-VIServer -Server $vCenter

Remove-CustomAttribute -CustomAttribute "PnC.CustSpec", "PnC.Deployed", "PnC.GroupID", "PnC.Source" -Confirm:$false

Disconnect-VIServer -server $vCenter -Confirm:$false

NetApp: Changing DS4243 shelf ID

Thu, 11 Oct 2012 21:17:39 +0000

I’m working on a project right now, providing a SnapVault target for our “big” NetApp. So we moved our 3240 to it’s target location, I spent most of my time yesterday doing the cabling (SAS and ACP, as well as power).

I’m still not finished, I still need to " beautify" the power cables, need to fix the network cables (currently I don’t have none ….) and some other minor stuff. But lemme skip back a bit.

NetApp: Migrating FCP luns with ndmpcopy to another controller

Sat, 06 Oct 2012 06:31:10 +0000

Well, I’m in a situation, where I need to move all volumes from one controller to two others. So I looked at the ways I had available:

Freshly implementing everything: No option at all!
vol copy: Is rather slow, thus no option
ndmpcopy: That’s exactly what I needed!

ndmpcopy is a great way to copy over a whole volume including it’s files (thus FCP luns) to another volume/controller.

First I threw in a crossover cable, since at around 6 PM our backup system starts it’s daily run, and everything else running via IP in between 6 PM and 6 AM is seriously impaired by this. Configured the additional ports on all three controllers (picked a private, not-routed range just in case) and then kicked of a simple bash script that ran the following:

NetApp LUN creation/vol sizing

Thu, 20 Sep 2012 04:49:43 +0000

Well, as you might know I’ve been tinkering with a NetApp FAS at work. The last few months, I’ve been trying to figure out a few things, which I actually did.

One “error” I ran into with creating the lun’s and volumes by hand was that the volumes were running out of space. Even if the volume was a bit larger than the LUN. After that happened a few times, I decided to see how to fix that. As it turns out, the GUI “fixes” that already in a way I wouldn’t have expected.

UCS 5108: VIF down

Mon, 17 Sep 2012 18:20:26 +0000

Well, I have yet another weird UCS problem. I have a single blade, that has trouble with it’s primary fabric attachment.

The problem get’s even more weird, if you look at the details.

After looking at the IO modules, the error doesn’t become any clearer:

So far, I have tried nearly everything. I’ve tried resetting the active and passive Connectivity of the vNIC, I tried resetting the DCE adapter for the vNIC, but nothing. I even tried resetting the vHBA that’s associated with this fabric, but that didn’t result to anything. Not even the usual flogi (fibre channel login) errors, that you get when either booting/resetting the blade.

UCS 5108: Power problem

Tue, 04 Sep 2012 17:09:12 +0000

Well, I recently had yet another UCS display/I2C communication problem. Somehow one of my chassis’ started to think, that the power redundancy was lost.

After looking at it a bit deeper, it seems only the GUI or the chassis did notice this power glitch:

As you can see, all PSU’s still have power. Now, since I had a big maintainance window the last weekend anyhow (and I spent ~14 hours at work), I decided to restart the IO modules in that chassis. And guess what: The error is gone! Another weird I2C communication issue with the firmware release 2.0.2 …

SMT mirroring troubles

Thu, 30 Aug 2012 17:46:27 +0000

Well, I’ve been having issues with our SMT. Basically after the release of SLES11 SP2 in February, I’ve been waiting for the repositories to turn “mirrorable”, which they haven’t yet. So I wrote a mail to the EMEA customer support.

And yesterday I got a reply, stating that my mirror credentials had been regenerated. And guess what ? I can mirror stuff again. So if you ever have any issues like the ones I described (or any of the people in the forum threads experienced), write a mail to your Novell customer support. 😛

SnapManager for SQL Server: Service fails to respond in a timely fashin

Thu, 30 Aug 2012 17:34:58 +0000

Well, we recently upgraded the SnapManager version on our test box to 6.4.1. Now however, after restarting the box the SnapManager service failed to start … The error was something like this:

Now, first I stumbled upon this NetApp Community post, which only contained the “solution” to increase the global! wait time for services. That didn’t sit well with me.

So after looking through NOW! for a bit, I actually found the correct way. The fix is described in KB2010835. Yet again, another certificate error. Why do vendors deploy SSL certificates, when they use untrusted ones, which defeats the purpose of SSL certs or at least “brings up” users to ignore any error message they get concerning SSL certificates ?

Total Commander: Generate the sum of all directories

Tue, 07 Aug 2012 07:39:58 +0000

In a Total Commander file list press Shift+Alt+Enter to calculate the directory size of all sub-directories.

Installserver: Publish a VMware ESX ISO - register-vmware

Tue, 24 Jul 2012 16:21:12 +0000

Here’s an old script, that also uses the magic provided by pxe-menu-generation (the script I posted before), but for VMware ESX/ESXi.

 1
 2
 3
 4
 5
 6
 7
 8
 9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111


#!/bin/bash

TFTP_DIR=/srv/tftp
INSTSRC_DIR=/srv/instsrc

if [ -z $@ ] ; then
 echo "Usage: register-vmware <path to iso-file> labelname"
 exit 1
fi

#set -x

ISO_FILE=$1
mkdir /mnt/loop
mount -o loop $ISO_FILE /mnt/loop

if [ -f /mnt/loop/packages.xml ] ; then
 # Determine ISO information
 OS_LABEL="$( grep "<name>" /mnt/loop/packages.xml | sed -e "s,<name>,," -e "s,</name>,," )"
 OS_NAME="$( grep "<ProductLineId>" /mnt/loop/packages.xml | sed -e "s,<ProductLineId>,," -e "s,</ProductLineId>,," )"
 OS_RELEASE="$( grep "<version>" /mnt/loop/packages.xml | sed -e "s,<version>,," -e "s,</version>,," )"
 OS_BUILD="$( grep "<release>" /mnt/loop/packages.xml | sed -e "s,<release>,," -e "s,</release>,," )"

 shopt -s extglob
 OS_LABEL=${OS_LABEL##*( )}
 OS_NAME=${OS_NAME##*( )}
 OS_RELEASE=${OS_RELEASE##*( )}
 OS_BUILD=${OS_BUILD##*( )}
elif [ -f /mnt/loop/README.txt ] ; then
 OS_LABEL=""
 OS_NAME=""
 OS_RELEASE=""
 OS_BUILD=""
fi

# Create directories
mkdir -p $TFTP_DIR/boot/$OS_NAME/$OS_RELEASE-$OS_BUILD
mkdir -p $TFTP_DIR/pxelinux.cfg/$OS_NAME
mkdir -p $INSTSRC_DIR/$OS_NAME/$OS_RELEASE-$OS_BUILD

#set +x

# Copy CD/DVD content
rsync -av /mnt/loop/* $INSTSRC_DIR/$OS_NAME/$OS_RELEASE-$OS_BUILD

# Copy the PXE boot file (initrd/kernel)
cp $INSTSRC_DIR/$OS_NAME/$OS_RELEASE-$OS_BUILD/isolinux/initrd.img
 $TFTP_DIR/boot/$OS_NAME/$OS_RELEASE-$OS_BUILD/initrd.img

cp $INSTSRC_DIR/$OS_NAME/$OS_RELEASE-$OS_BUILD/isolinux/vmlinuz
 $TFTP_DIR/boot/$OS_NAME/$OS_RELEASE-$OS_BUILD/vmlinuz

# Create the PXE boot menu
cat > $TFTP_DIR/pxelinux.cfg/$OS_NAME/$OS_NAME-$OS_RELEASE-$OS_BUILD.menu << EOF
#LABEL $OS_LABEL $OS_RELEASE - build $OS_BUILD
#OSNAME $OS_NAME
#OSARCH x86_64

MENU TITLE VMware Installservice
MENU BACKGROUND addons/background-vmware.png

MENU COLOR screen 37;40 #80ffffff #00000000
MENU COLOR border 0 #ffffffff #ee000000 std
MENU COLOR title 0 #ffffffff #ee000000 std
MENU COLOR unsel 0 #ffffffff #ee000000 std
MENU COLOR sel 0 #ffffffff #85000000 std
MENU COLOR scrollbar 30;44 #40000000 #00000000
MENU COLOR tabmsg 0 #ee000000 #ffffffff std
MENU COLOR cmdmark 0 #ff00ff00 #00000000 std
MENU COLOR cmdline 0 #ee000000 #ffffffff std
MENU COLOR timeout_msg 0 #ee000000 #ffffffff std
MENU COLOR timeout 0 #ee000000 #ffffffff std
MENU COLOR disabled 0 #ffffffff #ee000000 std
MENU COLOR pwdheader 0 #ff000000 #99ffffff rev
MENU COLOR pwdborder 0 #ff000000 #99ffffff rev
MENU COLOR pwdentry 0 #ff000000 #99ffffff rev
MENU COLOR hotkey 0 #ff00ff00 #ee000000 std
MENU COLOR hotsel 0 #ffffffff #85000000 std

LABEL DESC
MENU LABEL $OS_LABEL $OS_RELEASE
MENU DISABLE

MENU SEPARATOR

LABEL kickstart
MENU LABEL ^Kickstart Installation
KERNEL boot/$OS_NAME/$OS_RELEASE-$OS_BUILD/vmlinuz
APPEND initrd=boot/$OS_NAME/$OS_RELEASE-$OS_BUILD/initrd.img vmkopts=debugLogToSerial:1 mem=512M ks=http://install.home.barfoo.org/kickstart/$OS_NAME-$OS_RELEASE-$OS_BUILD.cfg HOSTNAME=
IAPPEND 1

TEXT HELP
Es ist zu beachten, das mit TAB der Hostname angepasst werden muss!
ENDTEXT

LABEL netinst
MENU LABEL ^Netzwerkbasierte Installation
KERNEL boot/$OS_NAME/$OS_RELEASE-$OS_BUILD/vmlinuz
APPEND initrd=boot/$OS_NAME/$OS_RELEASE-$OS_BUILD/initrd.img vmkopts=debugLogToSerial:1 mem=512M url=http://install.home.barfoo.org/instsrc/$OS_NAME/$OS_RELEASE-$OS_BUILD
IAPPEND 1

MENU SEPARATOR

LABEL back
MENU LABEL <-- ^Vorherige Ansicht
KERNEL addons/vesamenu.c32
APPEND pxelinux.cfg/$OS_NAME.menu
EOF

umount /mnt/loop
rmdir /mnt/loop

Installserver: Publish a SLES/OpenSUSE ISO - register-suse

Tue, 24 Jul 2012 13:20:34 +0000

Well, I’ve been tinkering with a way to “unify” the way we deploy new OpenSUSE/SLES ISOs onto our installation server, once they are released. So here, I’ll show you the script I came up with:

 1
 2
 3
 4
 5
 6
 7
 8
 9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128


#!/bin/bash

TFTP_DIR=/srv/tftpboot
INSTSRC_DIR=/srv/instsrc

if [ -z $@ ] ; then
 echo "Usage: register-suse <path to iso-file> labelname"
 exit 1
fi

ISO_FILE=$1

mkdir /mnt/loop
mount -o loop $ISO_FILE /mnt/loop

# Determine ISO information
OS_LABEL="$( grep '^LABEL' /mnt/loop/content | cut -d -f10- )"
if [ -z "$OS_LABEL" ] ; then
 OS_LABEL="$( grep '^LABEL' /mnt/loop/content | cut -d -f2- | head -n1 )"
fi

OS_NAME="$( grep '^DISTRIBUTION' /mnt/loop/content | cut -d -f3- | tr '[:upper:]' '[:lower:]' )"

if [ -z "$OS_NAME" ] ; then
 OS_NAME="$( grep '^PRODUCT' /mnt/loop/content | cut -d -f2- | cut -d_ -f1-2 | tr '[:upper:]' '[:lower:]' )"
fi

case "$OS_NAME" in
 suse_sle|suse_sles) OS_NAME=sles;;
esac

OS_RELEASE="$( grep ^VERSION /mnt/loop/content | awk '{ print $2 }' | cut -d- -f1 )"

if [ "$( echo $OS_LABEL | grep -i vmware )" != "" ] ; then
 OS_RELEASE="$OS_RELEASE-vmware"
fi

OS_ARCH="$( grep ^BASEARCHS /mnt/loop/content | awk '{ print $2 }' )"

if [ -z "$OS_ARCH" ] ; then
 OS_ARCH="$( grep ^DEFAULTBASE /mnt/loop/content | awk '{ print $2 }' )"
fi

OS_SHORTLABEL="$( grep ^SHORTLABEL /mnt/loop/content | awk '{ print $2 }' | cut -d( -f1 | sed -e "s,SLES-,SLES," -e "s,-, ,g" )"

case "$OS_ARCH" in
 i*86) OS_ARCH=x86;;
 x86_64) OS_ARCH=x64;;
esac

# Create directories
mkdir -p $TFTP_DIR/boot/$OS_NAME/$OS_RELEASE/$OS_ARCH
mkdir -p $TFTP_DIR/pxelinux.cfg/$OS_NAME
mkdir -p $INSTSRC_DIR/$OS_NAME/$OS_RELEASE/$OS_ARCH

# Copy CD/DVD content
rsync -av /mnt/loop/* $INSTSRC_DIR/$OS_NAME/$OS_RELEASE/$OS_ARCH/

# Create the info file
cat > $INSTSRC_DIR/$OS_NAME/$OS_RELEASE/$OS_ARCH/info <<EOF
Language: en_US
Keytable: de-lat1-nd
Install: http://install.home.barfoo.org/{INSTSRC_DIR//srv/}/$OS_NAME/$OS_RELEASE/$OS_ARCH/
Autoyast: http://install.home.barfoo.org/autoyast/
Textmode: 1
EOF

# Copy the PXE boot file (initrd/kernel)
cp $INSTSRC_DIR/$OS_NAME/$OS_RELEASE/$OS_ARCH/boot/*/loader/initrd
 $TFTP_DIR/boot/$OS_NAME/$OS_RELEASE/$OS_ARCH/initrd

cp $INSTSRC_DIR/$OS_NAME/$OS_RELEASE/$OS_ARCH/boot/*/loader/linux
 $TFTP_DIR/boot/$OS_NAME/$OS_RELEASE/$OS_ARCH/linux

# Create the PXE boot menu
cat > $TFTP_DIR/pxelinux.cfg/$OS_NAME/$OS_NAME-$OS_RELEASE-$OS_ARCH.menu << EOF

#LABEL $OS_SHORTLABEL
#OSNAME $OS_NAME
#OSARCH $OS_ARCH

MENU TITLE Linux Installationservices
MENU BACKGROUND addons/background-suse.png

MENU COLOR screen 37;40 #80ffffff #00000000
MENU COLOR border 0 #ffffffff #ee000000 std
MENU COLOR title 0 #ffffffff #ee000000 std
MENU COLOR unsel 0 #ffffffff #ee000000 std
MENU COLOR sel 0 #ffffffff #85000000 std
MENU COLOR scrollbar 30;44 #40000000 #00000000
MENU COLOR tabmsg 0 #ee000000 #ffffffff std
MENU COLOR cmdmark 0 #ff00ff00 #00000000 std
MENU COLOR cmdline 0 #ee000000 #ffffffff std
MENU COLOR timeout_msg 0 #ee000000 #ffffffff std
MENU COLOR timeout 0 #ee000000 #ffffffff std
MENU COLOR disabled 0 #ffffffff #ee000000 std
MENU COLOR pwdheader 0 #ff000000 #99ffffff rev
MENU COLOR pwdborder 0 #ff000000 #99ffffff rev
MENU COLOR pwdentry 0 #ff000000 #99ffffff rev
MENU COLOR hotkey 0 #ff00ff00 #ee000000 std
MENU COLOR hotsel 0 #ffffffff #85000000 std

LABEL DESC
 MENU LABEL $OS_LABEL ($OS_ARCH)
 MENU DISABLE

MENU SEPARATOR

LABEL autoyast
 MENU LABEL ^Automatisierte Installation
 KERNEL boot/$OS_NAME/$OS_RELEASE/$OS_ARCH/linux
 APPEND initrd=boot/$OS_NAME/$OS_RELEASE/$OS_ARCH/initrd info=http://install.home.barfoo.org/${INSTSRC_DIR//srv/}/$OS_NAME/$OS_RELEASE/$OS_ARCH/info splash=native ramdisk_size=65535 vga=791 barrier=off

LABEL netinst
 MENU LABEL ^Netzwerkbasierte Installation
 KERNEL boot/$OS_NAME/$OS_RELEASE/$OS_ARCH/linux
 APPEND initrd=boot/$OS_NAME/$OS_RELEASE/$OS_ARCH/initrd install=http://install.home.barfoo.org/${INSTSRC_DIR//srv/}/$OS_NAME/$OS_RELEASE/$OS_ARCH/ splash=native ramdisk_size=65535 vga=791 barrier=off

MENU SEPARATOR

LABEL back
 MENU LABEL <-- ^Vorherige Ansicht
 KERNEL addons/vesamenu.c32
 APPEND pxelinux.cfg/$OS_NAME.menu
EOF

umount /mnt/loop
rmdir /mnt/loop

This also needs a second script, as this will only create a menu entry, not the menu itself. You’ll find the script in the next post!

VMs in Alarm state after scheduled maintainance

Sun, 22 Jul 2012 10:38:04 +0000

Well, I’m back at work after three weeks of vacation (some pictures to follow) and the provider hosting our disaster datacenter had their annual (or is it monthly now?) SAN maintainance, so we shut down everything over there by 9:00 am.

After things were back up around 5pm, I booted the ESX hosts, however the VMs we’re all displaying the alert state - as if either the VMs had an HA event or we’re using to much CPU time. It didn’t matter whether or not the VM was running or not, the state persisted.

Vacation

Mon, 25 Jun 2012 14:28:51 +0000

As might have noticed, I haven’t posted anything in the last week. Well, as you might have figured, (oh I don’t know - maybe from the blog title) I’m enjoying a three week long vacation.

I’m staying with my parents, doing day trips and getting a tan (I’m working pretty hard on that!). I still have two weeks left (well, actually only 11 days - makes it one week and change), as I’m leaving for Stuttgart next Friday.

NetApp - Remove LUN mappings

Fri, 15 Jun 2012 14:30:58 +0000

As promised in the earlier post, for completeness sake, here’s the counterpart for removing the LUNs in the first place.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41


 #!/bin/bash

KEY_FILE="/root/.ssh/netapp.dsa"
SSH_OPTS="/root/.ssh/netapp-ssh_config"

if [ $# -ne 2 ] ; then
 echo "fas-remove-lunmap: FAS_CONTROLLER TARGET_IGROUP"
 echo
 echo "Remove every mapped lun from the target igroup (for example reinstallation)"
 echo
 echo " Usage:"
 echo " - FAS_CONTROLLER: Hostname/IP-adress of the DATA ONTAP controller"
 echo " - TARGET_IGROUP: igroup that is actually modified"
 echo
 exit 1
fi

FAS_CTRL=$1
TARGET=$2

ssh_fas() {
 # $@: commands for Data ONTAP
 COMMANDS="$@"
 /usr/bin/ssh -i $KEY_FILE -l root -F $SSH_OPTS $COMMANDS
}

# Get the hostname of the controller, necessary for the reporting
CTRL_HOSTNAME="$( ssh_fas $FAS_CTRL rdfile /etc/rc | grep ^hostname | cut -d -f2 | tr 'a-z' 'A-Z' )"

#set -x
# Get the lun list.
for lun in $( ssh_fas $FAS_CTRL lun show -g $SOURCE | awk '{ print $1 }' | sort -u ); do

 # If the LUN id is 0, skip otherwise we would remove the boot LUN
 if [ "$LUN_ID" != "0" ] ; then
 # Actually remove the mapping to our host
 echo "Removing $lun from $TARGET"
 ssh_fas $FAS_CTRL lun unmap $lun $TARGET
 fi
done
#set +x

With that, you can simply run it against a NetApp controller and remove every LUN map except the one with LUN ID 0 (which is pretty handy when installing/reinstalling ESX servers).

NetApp - Get a list of volumes containing too much LUNs

Fri, 08 Jun 2012 19:04:53 +0000

Well, after figuring things out (and realizing that if you create a LUN in the same size as the volume it’ll break), I decided to write yet another script to figure out which LUNs needed fixing.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62


#!/bin/bash

KEY_FILE="/root/.ssh/netapp.dsa"
SSH_OPTS="/root/.ssh/netapp-ssh_config"
FAS_CTRL=$1

ssh_fas() {
 # $@: commands for Data ONTAP
 COMMANDS="$@"
 /usr/bin/ssh -i $KEY_FILE -l root -F $SSH_OPTS $COMMANDS
}

for volume in $( ssh_fas $FAS_CTRL vol status | grep "vol.* online" | awk '{ print $1 }' ); do
 VOL_SIZE="$( ssh_fas $FAS_CTRL vol size $volume | awk '{ print $8 }' | sed "s,.,," )"
 VOL_UNIT_PARAM="$( echo "${#VOL_SIZE} - 1" | bc )"
 VOL_UNIT="${VOL_SIZE:$VOL_UNIT_PARAM:1}"

 case $VOL_UNIT in
 k) CONV="1024";;
 m) CONV="1024 * 1024";;
 g) CONV="1024 * 1024 * 1024";;
 esac

 VOL_SIZE="$( echo "scale=0; ${VOL_SIZE/$VOL_UNIT/} * $CONV" | bc )"

 # Subtract the snap reserve (if any)
 SNAP="$( ssh_fas $FAS_CTRL snap reserve $volume | cut -d -f7 | sed "s,%,," )"

 if [ $SNAP -gt 0 ] ; then
 SNAP_SIZE="$( echo "$VOL_SIZE * $SNAP / 100" | bc )"
 REMAINING_VOL_SIZE="$( echo "$VOL_SIZE - $SNAP_SIZE" | bc )"
 else
 SNAP_SIZE=0
 REMAINING_VOL_SIZE=$VOL_SIZE
 fi

 # Get the luns created inside the volume
 LUN_SIZE_TOTAL=0
 for lunsize in $( ssh_fas $FAS_CTRL lun show -l ${volume} | awk '{ print $3 }' | sed -e "s,(,," -e "s,),," ); do
 LUN_SIZE_TOTAL="$( echo "$LUN_SIZE_TOTAL + $lunsize" | bc )"
 REMAINING_VOL_SIZE="$( echo "$REMAINING_VOL_SIZE - $lunsize" | bc )"
 done

 # Get the estimated space necessary.
 VOL_RESERVE="$( echo "$VOL_SIZE * 3 / 100" | bc )"
 echo " VOL_NAME: $volume"
 echo " VOLUME_SIZE: $( echo "scale=2; $VOL_SIZE / 1024 / 1024 / 1024" | bc )G"
 echo " - SNAP_SIZE: $( echo "scale=2; $SNAP_SIZE / 1024 / 1024 / 1024" | bc )G"
 echo " SUB_TOTAL: $( echo "scale=2; ($VOL_SIZE - $SNAP_SIZE) / 1024 / 1024 / 1024" | bc )G"
 echo
 echo " - TOTAL_LUN_SIZE: $( echo "scale=2; $LUN_SIZE_TOTAL / 1024 / 1024 / 1024" | bc )G"
 echo " SUB_TOTAL: $( echo "scale=2; ($VOL_SIZE - $SNAP_SIZE - $LUN_SIZE_TOTAL) / 1024 / 1024 / 1024" | bc )G"
 echo
 echo " MISSING_SPACE:"
 DIFFERENCE_VOL_LUN="$( echo "scale=2; ($VOL_SIZE - $SNAP_SIZE - $LUN_SIZE_TOTAL)" | bc | sed "s,-,," )"
 echo " DIFFERENCE_VOL_LUN: $( echo "scale=2; $DIFFERENCE_VOL_LUN / 1024 / 1024 / 1024" | bc )G"
 echo " + VOL_RESERVE: $( echo "scale=2; $VOL_RESERVE / 1024 / 1024 / 1024" | bc )G"
 echo " SUB_TOTAL: $( echo "scale=2; ($DIFFERENCE_VOL_LUN + $VOL_RESERVE) / 1024 / 1024 / 1024" | bc )G"
 echo
 echo
 echo
done

And with that you have a list of volumes, with the amount of space they need to resized in order to accomodate the contained LUNs and the snapshots.

XenServer - Automation Metdata backups

Tue, 05 Jun 2012 18:59:48 +0000

Well, we had some issues with XenServers “automated” metadata backup, so I decided - with the help of one of our consultants - to automate it on our own to an external target.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57


#!/bin/bash

# Crontab entry for each server:
# 02 5 * * * root /usr/local/sbin/xen-pool-backup.sh

# Get the pool name
POOL_NAME="$( xe pool-list | grep name-label | awk '{ print $4 }' )"
HOST_UUID="$( xe host-list hostname=`hostname` | grep "uuid ( RO)" |
 awk '{ print $5 }' )"

DAILY_GENERATIONS=7
WEEKLY_GENERATIONS=4

NFS_MOUNT="nfs.home.barfoo.org:/srv/xenbackup"
NFS_LOCAL="/tmp/backup-mount/$POOL_NAME"

# Figure out if we're the pool master
POOL_MASTER="$( xe pool-list | grep master | awk '{ print $4 }' )"

if [ "$POOL_MASTER" == "$HOST_UUID" ] ; then
 # Only the pool master should backup the pool database, as this is the only
 # one who has a authoritive pool database

 # Create the necessary directory and mount the NFS volume
 mkdir -p ${NFS_LOCAL%/*}
 mount -t nfs $NFS_MOUNT ${NFS_LOCAL%/*}
 mkdir -p $NFS_LOCAL

 if [ -f $NFS_LOCAL/daily.$DAILY_GENERATIONS.gz ]; then
 rm -f $NFS_LOCAL/daily.$DAILY_GENERATIONS.gz
 fi

 OLD_DAILY="$( echo "scale=0; $DAILY_GENERATIONS - 1" | bc )"

 for OLD in $( seq $OLD_DAILY -1 1 ); do
 if [ -f $NFS_LOCAL/daily.$OLD.gz ] ; then
 NEW="$( echo "scale=0; $OLD+1" | bc )"

 # Save the time stamp somewhere
 touch $NFS_LOCAL/.timestamp -r $NFS_LOCAL/daily.$OLD.gz
 mv $NFS_LOCAL/daily.$OLD.gz $NFS_LOCAL/daily.$NEW.gz

 # Restore the date
 touch $NFS_LOCAL/daily.$NEW.gz -r $NFS_LOCAL/.timestamp
 fi
 done

 [ -f $NFS_LOCAL/daily.0.gz ] && mv $NFS_LOCAL/daily.0.gz
 $NFS_LOCAL/daily.1.gz
 xe pool-dump-database file-name=$NFS_LOCAL/daily.0
 gzip -9 $NFS_LOCAL/daily.0

 [ -f $NFS_LOCAL/.timestamp ] && rm $NFS_LOCAL/.timestamp
 umount ${NFS_LOCAL%/*}

 rm -rf ${NFS_LOCAL%/*}
fi

With that, I have at least a daily backup - and in combination with our daily TSM backup, I have at least month long history of metadata backups.

XenServer - Metadata Backup

Tue, 05 Jun 2012 17:13:21 +0000

Well, we had some issues with XenServer and its Metadata Backup in the past, thus I decided to write my own crontab-able script, which is installed/running on each XenServer.

 1#!/bin/bash
 2# Crontab entry for each server:
 3# 02 5 * * * root /usr/local/sbin/xen-pool-backup.sh
 4
 5# Get the pool name
 6POOL_NAME="$( xe pool-list | grep name-label | awk '{ print $4 }' )"
 7HOST_UUID="$( xe host-list hostname=`hostname` | grep "uuid ( RO)" | awk '{ print $5 }' )"
 8
 9DAILY_GENERATIONS=7
10WEEKLY_GENERATIONS=4
11NFS_MOUNT="10.76.5.10:/srv/backup"
12NFS_LOCAL="/tmp/backup-mount/$POOL_NAME"
13
14# Figure out if we're the pool master
15POOL_MASTER="$( xe pool-list | grep master | awk '{ print $4 }' )"
16
17if [ "$POOL_MASTER" == "$HOST_UUID" ] ; then
18 # Only the pool master should backup the pool database, as this is the only
19 # one who has a authoritive pool database
20
21 # Create the necessary directory and mount the NFS volume
22 mkdir -p ${NFS_LOCAL%/*}
23 mount -t nfs $NFS_MOUNT ${NFS_LOCAL%/*}
24 mkdir -p $NFS_LOCAL
25
26 if [ -f $NFS_LOCAL/daily.$DAILY_GENERATIONS.gz ]; then
27 rm -f $NFS_LOCAL/daily.$DAILY_GENERATIONS.gz
28 fi
29
30 OLD_DAILY="$( echo "scale=0; $DAILY_GENERATIONS - 1" | bc )"
31
32 for OLD in $( seq $OLD_DAILY -1 1 ); do
33 if [ -f $NFS_LOCAL/daily.$OLD.gz ] ; then
34 NEW="$( echo "scale=0; $OLD+1" | bc )"
35 # Save the time stamp somewhere
36 touch $NFS_LOCAL/.timestamp -r $NFS_LOCAL/daily.$OLD.gz
37 mv $NFS_LOCAL/daily.$OLD.gz $NFS_LOCAL/daily.$NEW.gz
38 # Restore the date
39 touch $NFS_LOCAL/daily.$NEW.gz -r $NFS_LOCAL/.timestamp
40 fi
41 done
42
43 [ -f $NFS_LOCAL/daily.0.gz ] && mv $NFS_LOCAL/daily.0.gz $NFS_LOCAL/daily.1.gz
44
45 xe pool-dump-database file-name=$NFS_LOCAL/daily.0
46 gzip -9 $NFS_LOCAL/daily.0
47
48 [ -f $NFS_LOCAL/.timestamp ] && rm $NFS_LOCAL/.timestamp
49
50 umount ${NFS_LOCAL%/*}
51 rm -rf ${NFS_LOCAL%/*}
52fi

NetApp - Get a list of all volumes not being used

Wed, 30 May 2012 17:40:12 +0000

Well, I had another task for today … I have an amount of FlexVolumes (sixty currently per controller), and I didn’t know if we had any, that didn’t have any LUNs on them. Now I thought there was a command for that since my co-worker mentioned something like that. However, once again … there isn’t.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39


#!/bin/bash

MAILTO="san@barfoo.org"
KEY_FILE="/root/.ssh/netapp.dsa"
SSH_OPTS="/root/.ssh/netapp-ssh_config"
FAS_CTRL=$1
TMPDIR="$( mktemp -d )"

ssh_fas() {
 # $@: commands for Data ONTAP
 COMMANDS="$@"
 /usr/bin/ssh -i $KEY_FILE -l root -F $SSH_OPTS $COMMANDS
}

# Get the hostname of the controller, necessary for the reporting
CTRL_HOSTNAME="$( ssh_fas $FAS_CTRL rdfile /etc/rc | grep ^hostname |
 cut -d -f2 | tr 'a-z' 'A-Z' )"

# Get a list of all volumes / luns
VOL_LIST="$( ssh_fas $FAS_CTRL vol status | grep ^vol |
 egrep -v '(nfs|cifs)' | awk '{ print $1 }' )"
LUN_LIST="$( ssh_fas $FAS_CTRL lun show | grep '/vol' |
 awk '{ print $1 }' )"

for lun in $LUN_LIST; do
 VOL_EXTRACT="$( echo $lun | cut -d/ -f3 )"
 VOL_LIST=${VOL_LIST/${VOL_EXTRACT}/}
done

for vol in $VOL_LIST; do
 echo "Empty Flex Volume: $vol."
done > $TMPDIR/mailcontent

if [ "$( grep Flex $TMPDIR/mailcontent )" ] ; then
 cat $TMPDIR/mailcontent | mailx -r $MAILTO
 -s "$CTRL_HOSTNAME: Empty volume check" $MAILTO
fi

rm -r $TMPDIR

Automating qual_devices updates

Wed, 30 May 2012 17:23:58 +0000

Well, once again I was presented with a nice AutoSupport warning once I logged into my NOW account. Since we don’t have CIFS and/or NFS licensed on our filers, I wrote a cute little script that does the whole work for me.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88


#!/bin/bash

TMPDIR="$( mktemp -d )"
KEY_FILE="/root/.ssh/netapp.dsa"
SSH_OPTS="/root/.ssh/netapp-ssh_config"
FAS_CTRL=$1
QUALDEVICES=$2

ssh_fas() {
 # $@: commands for Data ONTAP
 COMMANDS="$@"
 /usr/bin/ssh -i $KEY_FILE -l root -F $SSH_OPTS $COMMANDS
}
#set -x

echo "Updating qual_devices on $FAS_CTRL"

# Enable ftpd if it isn't enabled already
echo -n "Checking FTP subsystem"

FTPD_INITIAL_STATE="$( ssh_fas $FAS_CTRL options ftpd.enable |
 awk '{ print $2 }' )"
if [ $FTPD_INITIAL_STATE == "off" ] ; then
 ssh_fas $FAS_CTRL options ftpd.enable on
 echo " .... ok"
else
 echo " .... ok"
fi

echo
read -s -p "Please supply the root password for $FAS_CTRL: "
ROOT_PASSWD=$REPLY

echo
echo "Checking qual_devices:"
echo -n " Running: "
mkdir $TMPDIR/fas-version
# Check the old version.
ftp -n $FAS_CTRL >/dev/null <<END_SCRIPT
prompt
user root $ROOT_PASSWD
lcd $TMPDIR/fas-version
cd /etc
mget qual_devices*
quit
END_SCRIPT

FAS_VERSION="$( grep Datecode $TMPDIR/fas-version/qual_devices_v3 |
 head -n1 | cut -d -f3 )"

echo "$FAS_VERSION"
# Unzip the qual_devices.zip file and compare it.
ORIGPWD=$PWD
mkdir $TMPDIR/new-version
cd $TMPDIR/new-version
unzip $QUALDEVICES >/dev/null
echo -n " New: "
NEW_VERSION="$( grep Datecode $TMPDIR/new-version/qual_devices_v3 |
 head -n1 | cut -d -f3 )"
echo "$NEW_VERSION"
echo

# Upload the supplied version if the new file doesn't match the one running
# on the controller
if [ $NEW_VERSION != $FAS_VERSION ] ; then
 echo "Uploading qual_devices to $FAS_CTRL"
 ftp -n $FAS_CTRL >/dev/null <<END_SCRIPT
prompt
user root $ROOT_PASSWD
lcd $TMPDIR/new-version
cd /etc
mput qual_devices*
quit
END_SCRIPT

 # Send an asup message, that the issue is corrected
 echo "Generating AutoSupport message"
 ssh_fas $FAS_CTRL options autosupport.doit qual_devices_fixed_$NEW_VERSION
fi

#set +x

# Enable ftpd
if [ $FTPD_INITIAL_STATE == "off" ] ; then
 ssh_fas $FAS_CTRL options ftpd.enable off
fi

rm -r $TMPDIR

The whole thing is surly based, that FTP is configured ( as I described previously).

Mass-fix language order of Matroska files

Sun, 27 May 2012 14:02:12 +0000

Well, I recently started backing up my not-copyrighted DVDs to hard drive; however the language is sometimes mixed up. In some English is the first, in others it’s German. So, I’ve come up with this little script which fixes it - and puts each file into order.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42


#!/bin/bash

[ -x /usr/bin/bc ] || exit 1
[ -x /usr/bin/mkvmerge ] || exit 1
[ -x /usr/bin/mediainfo ] || exit 1

for file in $1/*.mkv; do
 # First, run mediainfo on the file.
 TRACK_ORDER="$( mediainfo '--Output=Audio;%ID/String% %Language%x' $file |
 grep -v '^$' )"

 TRACK1_ID="$( echo $TRACK_ORDER | cut -dx -f1 | cut -d&nbsp; -f1 )"
 TRACK1_LANG="$( echo $TRACK_ORDER | cut -dx -f1 | cut -d&nbsp; -f2 )"

 TRACK2_ID="$( echo $TRACK_ORDER | cut -dx -f2 | cut -d&nbsp; -f1 )"
 TRACK2_LANG="$( echo $TRACK_ORDER | cut -dx -f2 | cut -d&nbsp; -f2 )"

 case $TRACK1_LANG in
 "de") NEEDS_FIX=1 ;;
 *) NEEDS_FIX=0 ;;
 esac

 if [ $NEEDS_FIX -eq 1 ] ; then
 OPTS_1="--language $TRACK1_ID:ger --track-name $TRACK1_ID:German"
 OPTS_2="--default-track $TRACK1_ID:no --forced-track $TRACK1_ID:no"
 OPTS_3="--language $TRACK2_ID:eng --track-name $TRACK2_ID:English"
 OPTS_4="--default-track $TRACK2_ID:yes --forced-track $TRACK2_ID:no"
 OPTS_5="--track-order 0:1,0:$TRACK2_ID,0:$TRACK1_ID"
 OPTS="$OPTS_1 $OPTS_2 $OPTS_3 $OPTS_4 $OPTS_5"
 else
 OPTS_1="--language $TRACK2_ID:ger --track-name $TRACK2_ID:German"
 OPTS_2="--default-track $TRACK2_ID:no --forced-track $TRACK2_ID:no"
 OPTS_3="--language $TRACK1_ID:eng --track-name $TRACK1_ID:English"
 OPTS_4="--default-track $TRACK1_ID:yes --forced-track $TRACK1_ID:no"
 OPTS="$OPTS_1 $OPTS_2 $OPTS_3 $OPTS_4"
 fi

 mkvmerge -o $file.new --language "1:eng" --default-track "1:yes"
 --forced-track "1:no" --audio-tracks "$TRACK1_ID,$TRACK2_ID"
 --video-tracks "1" --no-subtitles --no-track-tags
 --no-global-tags $OPTS $file
done

TSM and NetApp - Another Quick Hint

Sun, 27 May 2012 13:45:22 +0000

Well, we’ve been trying to come up with a decent way to backup NetApp snapshots to tape (SnapMirror To Tape), so we evaluated all the available methods of using NDMP backups.

There’s Image Backup in two different variants - FULL and DIFFerntial
There’s SnapMirror To Tape

So the Image Backup is one of the ways. However the DIFFerntial backup only works for CIFS and NFS shares (which we don’t use). We only have FC luns (or rather FCoE luns), so there’s only a single (or in case of the boot luns more than one) file in each volume. With that however, each run of the Image Backup with the DIFFerential option, it’s gonna backup the full size of the volume (plus the deduplicated amount).

vm-online-backup - Another day, another PowerCLI script

Mon, 30 Apr 2012 16:38:47 +0000

Well, on Friday I had a short chat with someone from one of our application departments, stating he wanted a backup copy of a VM (ain’t to hard), but a) they don’t want any downtime and b) it has to be identical to the original.

So I sat down today, googled for a bit and actually found something that pretty much does what I want, though I had to fix it up a bit … So find attached a script, which creates a hot-clone from a snapshot and then only if the latest clone was successful deletes the old one.

TSM and NetApp - Quick Hint

Wed, 25 Apr 2012 20:09:24 +0000

Well, to save everyone else the trouble (since it isn’t documented anywhere - and I just spent about an hour finding the cause for this), if you need to configure NDMP on your NetApp Filer, make sure you also configure an interface other than e0M.

Apparently the necessary controlport for NDMP (10000) is being blocked on e0M, thus ndmp may be configured and running, however TSM is gonna complain that it is unable to connect to the specified data mover.

SLES11-1 and updated multipath-tools

Sat, 07 Apr 2012 10:15:21 +0000

Well, after I scripted the installation the other day, I tried installing SLES11.1-Updates to the freshly installed systems. Guess what ? The thing broke. Initially (it was late Friday afternoon - like 6 PM - before my one week vacation) I didn’t have much time to debug the issue, so I sat down last week and looked at the issue.

During the installation, when first starting multipath via command line, the scsi-mpatha device appears, and each and every occurance of this is subsequentially being used (and other stuff replaced by this actually) during the whole installation phase.

VMware Update Manager issues

Sat, 31 Mar 2012 21:14:28 +0000

Well, I recently (last Wednesday) had a lot of trouble with Update Manager.

First I thought, upgrading vCenter and modules to 5.0U1 would solve my troubles, however it did not. Update Manager was still complaining about something. Since neither in the vCenter Update Manager nor the vCenter log itself were having any useful information I enabled SSHd and the ESXi Shell via the vCenter client:

SSH’ed into the ESX host and looked at /var/log/esxupdate.log, and found this particular log:

hama_mce client for XBMC on Ubuntu

Tue, 20 Mar 2012 18:42:36 +0000

Well, I finally switched back to the official builds of XBMC (well, semi-official).

Now, since my previous and my current media center doesn’t come with a remote like, say a Boxee box, I built myself a custom one using a Hama MCE Remote Control and a Logitech Harmony 300. After trying a bunch of things (it actually works like a standard mouse), I stumbled upon this Trac ticket.

Running XBMC/Ubuntu on Zotac HD-ID34

Thu, 08 Mar 2012 17:50:45 +0000

I recently bought a replacement for my aging Acer Revo R1600. I decided to go with the HD-ID34, since I didn’t wanna fiddle with buying a bunch of components. Installed a copy of Windows 7 on it (just to try it out …. 😛), and downloaded the Ubuntu 11.10 mini.iso. However the mini.iso apparently has issues (no clue which), basically it boots but gets stuck when bringing up the network connectivity (which is fucked up, since the mini.iso needs network connectivity to contiune the installation).

WDS and multi-architecture boot images

Fri, 24 Feb 2012 17:31:26 +0000

Well, I recently stumbled upon another cute bug/feature with Windows Deployment Services. When you already have 32bit boot images (as we do) and then add an 64bit boot image (which we needed, since the drivers for UCS firmware v2.0 only support Windows Server 2008 R2) you still only see the 32bit images.

Why ? Because apparently the client (in my case a UCS blade) isn’t reporting it’s architecture correctly in the PXE phase. Microsoft actually has a KB article for this. You only need to enable architecture discovery.

Convert a bunch of PDF documents to JPEG

Wed, 15 Feb 2012 20:17:19 +0000

Well, I found a bunch of PDF documents on my disk today, which I wanted converted to JPEG. Now, Debian replaced ImageMagick in the past for GraphicsMagick, which is supposedly a bit faster and leaner than ImageMagick. So first you need to install graphicsmagick – or rewrite the script to use /usr/bin/convert instead.

The script basically takes every .PDF you have in your current working directory, creates a sub-directory, and then extracts each page of the PDF into a single JPEG image in that subdirectory.

Microsoft Cluster on VMware and Devices

Sat, 11 Feb 2012 08:40:44 +0000

Well, once again the Microsoft Cluster on VMware bit my ass … As you might know, MSCS on VMware is a particular kind of pain, with each upgrade you end up with the same problem over and over again (SCSI reservations on the RDM-LUNs being one, and the passive node not booting being the other).

So I opened up another support case with VMware, and the responded like this:

Please see this kb entry: http://kb.vmware.com/kb/1016106

Reconfiguring NTP settings vCenter-wide

Sat, 04 Feb 2012 19:55:40 +0000

I recently started reinstalling all my ESX hosts, so I wrote up a short script that is reconfiguring all hosts and sets the NTP configuration according to my wish:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30


param( [string] $vcenter, [string] $ntpserver1, [string] $ntpserver2 )

# Add the VI-Snapin if it isn't loaded already
if ( (Get-PSSnapin -Name "VMware.VimAutomation.Core" -ErrorAction SilentlyContinue) -eq $null )
{
 Add-PSSnapin -Name "VMware.VimAutomation.Core"
}

If ( !($vcenter) -or !($ntpserver1) -or !($ntpserver2) )
{
 Write-Host `n "vcenter-ntp-reconfigure: <vcenter-server> <ntpserver1> <ntpserver2>" `n
 Write-Host "This script clears the NTP servers currently configured and" `n
 Write-Hsot "adds the ones supplied on the command line." `n
 Write-Host " <vcenter-server> - DNS name of your vCenter server." `n
 Write-Host " <ntpserver1> - NTP server #1" `n
 Write-Host " <ntpserver2> - NTP server #2" `n
 exit 1
}

Connect-VIServer -Server $vcenter

foreach ($esxhost in Get-VMHost)
{
 Get-VMHost $esxhost | Remove-VMHostNtpServer -Confirm:$false -NtpServer (Get-VMHost $esxhost | `
 Get-VMHostNtpServer)
 Get-VMHost $esxhost | Add-VMHostNtpServer -NtpServer $ntpserver1
 Get-VMHost $esxhost | Add-VMHostNtpServer -NtpServer $ntpserver2
}

Disconnect-VIServer -server $vcenter -Confirm:$false

As you can see, the script takes the vCenter hostname and two NTP servers and basically applies it to each host in your vCenter environment.

Using HPs vibdeposit with VMware Update Manager

Sat, 04 Feb 2012 17:34:28 +0000

As we’re finally at the point, where I only need to bother with HP hardware (which in itself is troublesome enough), I wanted to use HPs vibdeposit with our Update Manager. The whole purpose of the repository is the integration of HPs custom vibs (download able on each hardware under VMware ESXi 5.0) into the VMware Update Manager. That makes it easy to integrate, say the nmi-sourcing driver, into the VMware built ESXi images.

Xoom: Install ClockWorkRecovery

Fri, 03 Feb 2012 20:15:46 +0000

1
2
3


adb reboot bootloader
fastboot flash recovery recovery-solarnz-XXXXXX-XXXX.img
fastboot reboot

Xoom: Restore factory firmware

Fri, 03 Feb 2012 20:03:06 +0000

`1`	`adb reboot fastboot`

1
2
3
4
5
6


fastboot flash boot boot.img
fastboot flash system system.img
fastboot flash recovery recovery.img
fastboot flash userdata userdata.img
fastboot erase cache
fastboot oem lock

Xoom: Unlocking

Fri, 03 Feb 2012 19:58:55 +0000

1

adb reboot bootloader

Your XOOM will reboot into the bootloader showing “Starting Fastboot Protocol Support.”

`1`	`fastboot oem unlock`

Read the warning on your XOOM’s screen.
You may have to tap Volume Down to switch it to “Accept.”
Then press Volume Up to actually “Accept.”
Once you accept, your XOOM will be unlocked and formatted.

Emptying a VMFS datastore with PowerCLI

Thu, 26 Jan 2012 21:14:41 +0000

Well, once again I hacked at the Powershell/PowerCLI the other day. Since we don’t yet have a Enterprise Plus license at work (which would support Datastore Maintaince and Storage DRS), I needed a way to empty one datastore and move all the content into another one, while enabling Thin-Provisioning.

So I googled for a bit, and actually found a few hints … So without further yada-yada, here’s the script I came up with:

Doing TSM's job on Windows Server 2008

Thu, 26 Jan 2012 21:02:09 +0000

Ran into another weird problem the other day … Had a few Windows boxens running out of space. Why ? Well, because TSM includes a System-State backup when creating the daily incremental. Now, apparently (as stated by the IBM support) it isn’t TSM’s job to keep track of the VSS snapshots but rather Windows’. Now by default, if you don’t click on the VSS properties of a Windows drive, there is no limit on the volume. Thus, VSS is slowly eating up all your space.

Empty Port SSL after ADAM installation

Wed, 18 Jan 2012 20:43:56 +0000

I’ve been meaning to post this, but never actually got around to doing that. When installing vCenter 5.0, an instance of ADAM is installed, which stores all the configration data for Linked Mode.

It basically boils down to running this script and rebooting the box:

1
2


reg DELETE "HKLMSYSTEMCurrentControlSetservicesADAM_VMwareVCMSDSParameters" /v "Port SSL" /f
reg ADD "HKLMSYSTEMCurrentControlSetservicesADAM_VMwareVCMSDSParameters" /v "Port SSL" /t REG_DWORD /d 0000027c /f

This is no new invention of myself, just writing it down for myself from here or here.

Rebooting a virtual machine via Task scheduler

Mon, 16 Jan 2012 09:03:06 +0000

Since the Scheduled Tasks in vCenter ain’t exportable, I went ahead and wrote a rather simple script, which lets me do this in Windows own Task Scheduler. What this script does, is initiate a graceful shutdown and if the VM isn’t shutdown within 60 seconds (12 * 5 seconds) it simply powers the VM off and immediately after that powers it back on.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48


param( [string] $vCenter, [string] $VMname )

# Add the VI-Snapin if it isn't loaded already
if ( (Get-PSSnapin -Name "VMware.VimAutomation.Core" -ErrorAction SilentlyContinue) -eq $null )
{
 Add-PSSnapin -Name "VMware.VimAutomation.Core"
}

If ( !($vCenter) -or !($VMname) )
{
 Write-Host
 Write-Host "vm-reboot: <vcenter-server> <VMname>"
 Write-Host
 Write-Host " <vcenter-server> - DNS name of your vCenter server."
 Write-Host " <VMname> - Display name of the VM in this vCenter server."
 Write-Host
 exit 1
}

Connect-VIServer -Server $vCenter

$VM = Get-VM $VMname

# First, try shutting down the virtual machine gracefully
Write-Host "Stopping VM $( $VM )"
Write-Host " - Graceful shutdown"
Shutdown-VMGuest -VM $VM -Confirm:$false
$VM = Get-VM $VMname

$i = 0
While ($VM.PowerState -ne "PoweredOff") {
 # If that doesn't work, break out the hammer and just kill it
 if ( $i -gt 12 ) {
 Write-Host " - Forced shutdown"
 Stop-VM -VM $VMname -Confirm:$false
 }

 Start-Sleep -Seconds 5
 $VM = Get-VM $VMname
 $i++
}

If ($VM.PowerState -eq "PoweredOff") {
 Write-Host "Starting VM $( $VM )"
 Start-VM -VM $VM -Confirm:$false >$NULL
}

Disconnect-VIServer -server $vCenter -Confirm:$false

Before this implementation in PowerCLI, I needed three tasks for each VM that was to be scheduled. And when migrating vCenters (and I usually do an empty install) vCenter’s scheduled tasks are not exportable, thus you need to re-create the tasks on the new vCenter by yourself again, which for more than four virtual machines is really a pain in the ass …

Reoccurring memory limits in vCenter

Fri, 13 Jan 2012 15:00:20 +0000

We recently had, after we migrated from vSphere 4 to vSphere 5, a memory limit in size of the configured memory on each and every VM. Since memory limits on VM level pretty much destroy performance, I went ahead an wrote this simple script to remove all memory limits on all VMs that don’t have “Unlimited” configured:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24


param( [string] $vCenter )

# Add the VI-Snapin if it isn't loaded already
if ( (Get-PSSnapin -Name "VMware.VimAutomation.Core" -ErrorAction SilentlyContinue) -eq $null )
{
 Add-PSSnapin -Name "VMware.VimAutomation.Core"
}

If ( !($vCenter) )
{
 Write-Host
 Write-Host "cluster-remove-mem-limits: <vcenter-server>"
 Write-Host
 Write-Host " <vcenter-server> - DNS name of your vCenter server."
 Write-Host
 exit 1
}

Connect-VIServer -Server $vCenter

Get-VM | Get-VMResourceConfiguration | Where-Object { $_.memlimitmb -ne '-1' } |`
 Set-VMResourceConfiguration -memlimitmb $null

Disconnect-VIServer -server $vCenter -Confirm:$false

This script is basically what the guy over at get-admin.com did, just only for memory limits.

Been a while

Mon, 09 Jan 2012 20:35:33 +0000

Well, it’s been a while since I last blogged about anything. I’ve been real busy with work with the move from vSphere 4 to vSphere 5 (well planning takes a while …), reorganizing our vSphere Clusters/Farms, a lot of PowerCLI voodoo (some of it, I’m gonna post), the usual Windows honky-donky (Windows group policy for certain stuff).

Besides that, you know, I have some kind of personal life. That basically took all of my free time. So I’m gonna try to write some posts up in the next few weeks, with some PowerCLI scripts mostly, some Shell scripts for SVC-automation, as well as some NetApp foo, guess we’ll see.

Acer Revo/XBMC installation guide

Wed, 19 Oct 2011 08:05:00 +0000

Today I decided to upgrade all my boxes at home to Maverick Meercat. First I started with my Netbook, then followed my NAS and now the XBMC box (Acer Revo 3600).

As a base point, you’ll need a minimal installation of Maverick Meercat (simply put the mini.iso onto an usb pen drive and boot from it), which luckily is rather easy:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24


# First we'll need these tools on the box where we're preparing the stick
sudo aptitude install syslinux mbr mtools

# Create a FAT16 partition on your USB stick
sudo fdisk /dev/sdb

# Format the partition as VFAT
sudo mkfs.vfat /dev/sdb1

# Need to install the bootloader (syslinux) before doing anything else!
sudo syslinux /dev/sdb1

# Now mount the mini.iso file as loop, copy the content to the usb stick
sudo mkdir /media/usb; sudo mkdir /media/cdrom0
sudo mount -o loop ~/mini.iso /media/cdrom0; sudo mount /dev/sdb1 /media/usb
sudo cp -r /media/cdrom0/* /media/usb

# Rename the isolinux.cfg
sudo mv /media/usb/isolinux.cfg /media/usb/syslinux.cfg

sudo umount /media/usb /media/cdrom0

# Create a MBR on the usb stick
sudo install-mbr /dev/sdb

After that is done, boot your box with the USB stick. Make the minimal command line installation. After that finishes, switch to the adjacent console (i.e. tty2) hit ENTER, and install a few packages that we need for after the reboot:

Adobe CS3 on Windows 7

Sun, 17 Jul 2011 10:41:47 +0000

Well it took me exactly two full Windows reinstallations till I figured that one out, thanks to Google. Basically the Creative Suite 3 installs an mDNSresponder as system service (named " ##Id_String2.6844F930_1628_4223_B5CC_5BB94B879762##" -- don't ask me why the cryptic name), which basically screws up your Windows! It lays another physical network on top of the current one and once you reboot the system you’re gonna sit there and try and figure out, why the fuck you ain’t getting a DHCP address on boot. And since a simple deactivate/activate of the nic fixes it 🤷

PowerCLI undamp; Windows jump list for recent items set to zero

Tue, 05 Jul 2011 17:22:27 +0000

Today I had to install PowerCLI on my workstation. When I tried launching it for the first time, it simply opened and closed again instantly. After browsing the VMware community for this error and not finding a useful solution, I ended up googling the error. As it turns out, this only happens when you did set the " Number of recent items to display in jump lists" to something less than 4.

Changing the vCenter hostname

Wed, 01 Jun 2011 17:56:10 +0000

I recently reinstalled the vCenter Server at work, and in my never ending wisdom cough, I decided to do that on new hardware. That entitled using the same host name plus the appendix _NEW. Now, I know this isn’t conforming with DNS naming schemes (iirc underscore isn’t a valid DNS char), however it worked …

So once I had everything installed on the new hardware, I switched the ESX servers from the old vCenter to the freshly installed one. Once that was finished, I shut down the old vCenter server, changed IP address and host name of the new one and rebooted. That basically worked, even though suddenly every ESX in my inventory was disconnected. After reconnecting all ESX servers everything was back online.

Ember MM, XBMC and 0s Video Duration

Tue, 22 Feb 2011 14:06:35 +0000

Some of you out there may know, I am using Ember MM to scrape my movies and TV episodes. One thing about that is, that Ember MM is kinda stupid doing so.

After the 9.10-release of XMBC, they apparently changed the XML format, introducting durationinseconds, which is basically like duration, just … yeah you guessed right, in seconds.

Now Ember MM doesn’t know that, and still writes the old duration-tag. Now, everytime when something goes kaboom! with my library, I do have to rescrape all my episodes and movies, which isn’t a big deal since the NFO’s are still on disk. However, since I didn’t watch them (as Ember doesn’t know about the lastplayed-tag) XBMC is not showing any runtime in the GUI. Now this isn’t annoying per se, but it was just bugging me (and since I got lots of spare time, due to being chained to the sofa).

WDS and DL580 G7

Sat, 15 Jan 2011 17:14:56 +0000

We recently received a shipment of Hewlett Packards all-new DL580 G7. While I’m impressed with what they did with the iLO3, I’m quite disappointed with what they did to the PXE-ROM.

Sure, gPXE may be the future and is offering more possibilites than “normal” PXE, however breaking customers deployment option(s) – at least for Windows that is – really wouldn’t be an option.

Now for the long story, we needed to install a temporary Windows on this DL580 (one with testing purposes). That said, we tried for three days to actually make this work (trying different things with the boot image), but it kept ending with the same result.

SVC: Find WWPN

Mon, 15 Nov 2010 17:50:56 +0000

Today we had (once again) hardware troubles. We ended up replacing a lot of things, but in the end it was a) the HBA and b) apparently some memory DIMMs. Now, that isn’t SVC related. However, we built in another HBA (from our Standby hardware), which apparently already had been assigned to a host.

Now, since you can’t search for a WWPN (at least not that I know of), I ended up writing a little script (yup, AGAIN) in order to do that for me!

PowerShell brush for jQuery-Syntax

Fri, 05 Nov 2010 13:56:03 +0000

As you might have noticed, I’m using jQuery.Syntax as my Syntax Highlighting engine. As I recently started writing PowerShell scripts, I wanted syntax hightlighting for it.

Since I knew, someone already wrote syntax highlighting for GeSHi for PowerShell (I am lazy after all!), I simply took the color scheme (shame on me), and made hacked ahead. After about three hours (yeah, I had some trouble with editing the wrong damn file), I came up with this:

TSM Client: Service Script for Solaris 10

Wed, 27 Oct 2010 15:31:05 +0000

Today I’ve been fighting with Solaris 10 and the SMF Manifest (others would call it init-script …). Since I wanted to do it the proper way (I could have used a “old-style” init-script, but I didn’t wanna ..), I ended up combing the interweb for examples .. As it turns out, not even IBM has documented a way, on how to do this.

In the end this is what I’ve come up with:

Install issues with Proliant BL460c G6 and Windows Deployment Services

Fri, 22 Oct 2010 17:56:53 +0000

We’ve been dealing with authentification issues on newly delivered HP Proliant BL460c G6 blade servers. Most threads on HPs customer forum, suggests changing the NIC driver, embedded within the WDS boot image.

We tried that, but still were getting the following error:

WDS: installation issues

As it turns out, it ain’t really so damn hard .. we tried several times changing various things within the boot image, but it still didn’t change anything. Somehow it was rather easy.

Create an offline snapshot of a VM

Fri, 22 Oct 2010 16:11:25 +0000

We’re currently thinking about automating Windows Updates and the involved disaster snapshot-copy to a degree, where we don’t need to intervene anymore.

Right now, we already have a rudimentary scheduler in place, which does the reboots for some (200 ..) systems already. Now, we’d like to extend it to also cover the bi-weekly Windows Update spree.

Since PowerShell (and PowerCLI) work quite well with vSphere automation, I cooked up the below script to first shutdown a virtual machine (for snapshot consistency reasons), then take a snapshot and power on the virtual machine again afterwards.

Locking down Firefox

Tue, 12 Oct 2010 17:52:37 +0000

Once again, I had the task of locking down Firefox, so users couldn’t use it to do any harm on a terminal server. Thankfully there’s the guide over at the Faculty of Engineering of the University of Waterloo (by David Collie), who shows which parts to modify.

However, finding the particular part in the Javascript is rather hindersome, so here a short Unix-Diff (for thos who’re able to read unified diffs) as well as the whole file.

Modified SnapReminder

Fri, 08 Oct 2010 16:06:57 +0000

Well, PowerCLI makes my life a little bit easier. Believe it or not, each of us vCenter infrastructure admins has one of these: a Windows admin, thinking a snapshot is also a backup. Thankfully, Alan Renouf over at virtu-al.net wrote the SnapReminder, which already helped me a lot! However, occasionally the script isn’t finding the snapshot author (for whatever reason).

Since I want a notification in that case, I modified the script a little bit to suit my needs.

Fix Path Selection Policy for a whole vCenter Cluster

Thu, 07 Oct 2010 18:38:49 +0000

These last few weeks, I’ve been toying with PowerCLI (and PowerShell for that matter). One thing I do have to say, is that Microsoft finally did it right! It’s a useable, program-able command line interface for Windows after all! Thanks to Ivo Beerens and his post " Best practices for HP EVA, vSphere 4 and Round Robin multi-pathing", I was able to come up with the below:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47


# LICENSE: GNU General Public License v2. (see LICENSE.txt)
# COPYRIGHT: Copyright 2010 Christian Heim <christian.heim@barfoo.org>

# Add the VI-Snapin if it isn't loaded already
if ( (Get-PSSnapin -Name "VMware.VimAutomation.Core" -ErrorAction SilentlyContinue) -eq $null )
{
 Add-PSSnapin -Name "VMware.VimAutomation.Core"
}

if ($args.length -lt 2) {
 Write-Host
 Write-Host "fix_multipathing: "
 Write-Host " - Display-Name of the vCenter cluster, we should check all LUNs"
 Write-Host " on all available Hosts, and set the Path Selection Policy"
 Write-Host " to the selected one."
 Write-Host ""
 Write-Host " - Path Selection Policy"
 Write-Host " Possible:"
 Write-Host " - RoundRobin (VMW_PSP_RR, Round Robin)"
 Write-Host " - Fixed (VMW_PSP_FIXED, Fixed)"
 Write-Host " - MostRecentlyUsed (VMW_PSP_MRU , Most Recently Used)"
 Write-Host
 exit 1
}

$vcserver = "vcenter.home.barfoo.org"
$cluster = $args[0]
$target_policy = $args[1]

# Since I do have only SVC-Disks connected to my hosts, I limit the search to those
$canonical_name = "naa.6005076801808021*"

Write-Host "Target vCenter Cluster: " $cluster
Write-Host "Target PSP: " $target_policy
Write-Host

switch ($target_policy) {
 RoundRobin { $display_policy = "VMW_PSP_RR"; }
 MostRecentlyUsed { $display_policy = "VMW_PSP_MRU"; }
 Fixed { $display_policy = "VMW_PSP_FIXED"; }
 default { Write-Warning "Unknown PSP selected! Please consult the help and try again."; exit }
}

Connect-VIServer $vcserver >/dev/null 2>&1

Write-Host "Found "@(Get-VMHost -location ( get-cluster $cluster ) | Get-ScsiLun -CanonicalName $canonical_name -LunType "disk" | where {$_.MultipathPolicy -ne $target_policy }).Count" LUNs in "$cluster" not using Path Selection Policy "$display_policy
Get-VMHost -location ( get-cluster $cluster ) | Get-ScsiLun -CanonicalName $canonical_name -LunType "disk" | where {$_.MultipathPolicy -ne $target_policy } | Set-ScsiLun -MultipathPolicy $target_policy >/dev/null 2>&1

This works great, however you could make it work on the whole vCenter inventory, which I don’t want. We usually add LUNs to a single cluster at one time. Only thing you might need to change, is the canonical name. Mine simply says “find all SVC LUNs” and you might need to change it, if you’re using a different storage.

Blog is back!

Thu, 30 Sep 2010 16:39:57 +0000

As you can see, the blog is finally back! I haven’t been visiting the blog on a daily basis (actually, I haven’t been here for some time), so it apparently took me ten days to figure that the wp_posts table of my wordpress installation was marked as crashed.

To repair that, I had to take down the MySQL instance and use myisamchk on the .MYI file. Once again, it’s back now, only one draft has disappeared into thin air (well, that ain’t so bad), but that’s a minor loss.

SAN reporting

Fri, 20 Aug 2010 14:34:52 +0000

We do have some customers, who get charged on a monthly basis for their SAN usage. We already had “reporting” in place, but that wasn’t very flexible. So I went ahead and rewrote the current reporting script from scratch, and this is what I’ve come up with:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51


#/bin/bash

# LICENSE: GNU General Public License v2. (see LICENSE.txt)
# COPYRIGHT: Copyright 2010 Christian Heim <christian.heim@barfoo.org>

svc_sshkey="~/.ssh/svc-id_dsa"
svc_addr="10.144.0.150"
svc_user="admin"

if [ -z $1 ] ; then
 echo "Please rerun this script with some kind of filter value"
 echo "(for example '$0 NAS')"
 exit 1
else
 filter=$1
fi

IFS="
"

DISK="$( ssh -i $svc_sshkey -l $svc_user $svc_addr svcinfo lsvdisk -nohdr -bytes -delim :
 | egrep -i "V.*$filter" | cut -d: -f2,8 | sort )"

# Get a unique list of systems
SYSTEMS="$( echo $DISK | sed "s, ,n,g" | cut -d -f1 | sed 's,^V,,' | cut -d_ -f1 | sort -u )"

for system in $SYSTEMS ; do
 VDISKS="$( echo $DISK | sed "s, ,n,g" | grep $system | sed "s,:,: ," )"
 SYSTEM_TOTAL="$( echo $DISK | sed "s, ,n,g" | grep $system | cut -d: -f2 | awk '{SUM += $1} END { printf "%.2f", SUM }' )"
 for vdisk in $VDISKS ; do
 NAME="$( echo $vdisk | cut -d: -f1 )"
 SIZE="$( echo $vdisk | cut -d: -f2 | sed "s,^ ,," )"
 GB_SIZE="$( echo "$SIZE / 1024 / 1024 / 1024" | bc )"
 if [ $GB_SIZE -eq 0 ] ; then
 GB_SIZE="$( echo "scale=2; $SIZE / 1024 / 1024 / 1024" | bc )"
 GB_SIZE="${GB_SIZE/./0.}"
 fi
 echo "$NAME: ${GB_SIZE/./,} GB"
 done
 SUB_TOTAL_SYSTEM="$( echo "scale=2; $SYSTEM_TOTAL / 1024 / 1024 / 1024" | bc )"
 echo "SUB TOTAL: ${SUB_TOTAL_SYSTEM/./,} GB"
 echo
done

TOTAL="$( echo $DISK | sed "s, ,n,g" | cut -d: -f2 | awk '{SUM += $1} END { printf "%.2f", SUM }' )"
TOTAL="$( echo "scale=2; $TOTAL / 1024 / 1024 / 1024" | bc ) GB"

echo "------------------------------------------------"
echo $TOTAL

exit 0

I gotta say, once again I learned a lot … two new things about awk!

me + flying = chaos!

Mon, 26 Jul 2010 08:40:19 +0000

It’s been one of these days (yeah, I know … AGAIN). I was scheduled to depart from Stuttgart (STR) to Rostock - Laage (RLG) on 16:45 on Sunday. Well, if you know me, I did actually miss that flight the check-in for that flight by 15 minutes. 15 FUCKING minutes! Immediately called my Taxi (that is my parents) and told them to turn around, since they already had left to collect me from the airport ..

Displaying Windows Architecture with bginfo

Fri, 18 Jun 2010 15:22:08 +0000

On all our servers in the basement, we do have bginfo installed, in order to quickly get certain information. Now as I was struggling with a big Service Pack roll out, I looked into making bginfo also display the OS architecture. But apparently it isn’t that easy … At least bginfo doesn’t provide it by default.

After (yet another hour in front of Google), I finally found what I was looking for. At first I didn’t limit the query on a specific CPU, but that turned out to be shitty (x32 being displayed twice, once for each CPU). But after limiting it to DeviceID=‘CPU0’ it works like a charm 😉

Vuvuzela's should be banned!

Sun, 13 Jun 2010 20:32:01 +0000

It’s just past the first game of our national team, and the vuvuzela’s are actually getting on my nerves. It’s not really the vuvuzela’s per se, it’s just this one kid running around with it all day long. At first I was like “wtf kind of animal is this ?” Until I saw him running around with this weird instrument …

AutoYAST and custom swap partitioning

Thu, 03 Jun 2010 18:34:24 +0000

Well, we’ve been discussing our swap partitioning the last few days at work, and I finally got around to implementing it. Again, it proved to be kinda hard, basically because AutoYAST decides to do things differently.

SLES10 not installing boot loader in MBR

Thu, 03 Jun 2010 18:15:23 +0000

Well, as I mentioned in my earlier post, I had some trouble during the week. I was having issues with SLES10 installations not finishing during the bootloader installation phase. After trying out different flavors (as in 10SP2 x64/x86, …), and not having any luck with this, I went searching on Google as a last effort try. Guess what, yet again Google helped me out!

It was pretty simple. Putting /dev/cciss/c0d0 into /boot/grub/device.map as (hd0) made the grub-installer finish. Now, figuring out how to transfer those information during the installation proved difficult. I was just about to give up, while reading through the AutoYAST documentation, when it struck me. There is even an extra chapter for this stuff, so simply putting the following into my profile solved my issues:

distributions-barfoo-org going away

Thu, 03 Jun 2010 17:50:46 +0000

Since I didn’t have any time to actually maintain my own repository of RPMs, as well as I don’t have any need for the RPMs contained within (simply I don’t use them at work anymore), the whole shebang is going away!

I know a few people actually still use it, so I’m gonna put in a disclaimer and let some time pass before completely removing it. Just be warned, it’s going away! Again:

VMware Consolidated Backup and TRANSPORT_MODE=hotadd

Thu, 18 Mar 2010 17:03:38 +0000

As the title says, I’ve been playing with vCB (inside a VM) and the TSM integration with newer (>6.0) clients for work. Result of all this work should be a feasibility study. We’re currently thinking about replacing our VMware server(s) with ESXi. But as most of you know, if you install ESXi, you simply can’t install anything (well, you can .. on ~100KB of disk space, which is compared to a TSM client weighing roughly 120MB nothing!). As we would like the possibility to backup VMs on image-level, I went looking at solutions.

Windows Server 2003: taskmgr giving Logon failure

Thu, 25 Feb 2010 17:58:22 +0000

I had myself a lot of fun today. I ended up patching a Windows Server 2003 x64 SP1, where the Task Manager wouldn’t start anymore. It simply failed (or in case of right clicking on the task bar wouldn’t even appear), so I went downstairs and pulled a hard disk out of the RAID1 array, just to be sure.

Really weird Windows error

I went ahead, installed SP2 (as you can see on the above picture) while having the jitters. Also installed the VirusScan I was scheduled to install, and the system came back online. Phewww.

XBMC installation Guide

Wed, 24 Feb 2010 16:35:39 +0000

Yesterday out of a sudden, the sound on my Acer Revo stopped working. Don’t ask me why, I didn’t update anything in between New Years eve and today. Just no sound. Tried removing my .asoundrc, tried rebooting, tried powering off; but nothing worked.

Since the Revo was running Jaunty Jackalope, I decided to reinstall the box (yeah, yet again) – but this time with Karmic Koala. Took this forums post and this blog entry as pointer (ie what needed to be installed), and started from there. And guess what … after finishing all that, changing the settings in XBMC – tada sound works. After finishing, I turned the box off and then back on, booted to the “old” installation – guess what .. Sound is working again. I really don’t have a single clue as to why the heck the sound stopped working and the started working without any doing, but I’m glad :-P

VMware vSphere: Safely remove network controller

Tue, 23 Feb 2010 18:24:01 +0000

Well, it’s another day another fight. As we started migrating our VM’s from the old VMware ESX farms to the new environment, and upgraded the hardware suddenly the network devices were hot-plug-able, thus they did turn up in the “Safely Remove” dialog.

I myself don’t have any trouble with that. The trouble I do have is the people working with those VM’s and their possibly hazardous “uuuh, what’s this ? I don’t need this! <click-click, network-device unplugged>”

VBscript: Query remote OS and SP info (continued)

Mon, 15 Feb 2010 20:34:34 +0000

After some more crunching on my VBscript, I think I finally have a working script that runs through a csv-list I point it to and walk onto each system (by ip-address only sadly) and query the os and the Service Pack that is installed. The CSV may look like this:

1
2
3


Hostname;IP;Model;Description;OS;Service-Pack;BL;Priority
epimetheus;10.0.0.2;VMware guest;File-Server
hades;10.0.0.1;VMware guest;Core-Router

After saving that one, and running a cscript //NoLogo win_sp_level.vbs you should find a completed list like this:

Converting TIVSM RPMs to deb

Mon, 15 Feb 2010 09:59:31 +0000

We received a preinstalled customer server the other day, for which we had declared “as-is” support only, since it is running Lucid Lynx. Now today, I started getting the TSM client to work. Was kinda weird, since at first dsmc was reporting something like this:

# ./dsmc: no such file or directory

After fiddling with it a bit more, here are the control files, as well as the prerm and postinst-scripts for TIVSM-API, TIVSM-API64 and TIVSM-BA:

Flying home with GermanWings

Sun, 14 Feb 2010 17:32:48 +0000

Last month I had this epiphany to fly home for a visit on my mother’s birthday. Well, the idea was great but the implementation kinda sucks.

I started my trip around 12:00 AM from work to Stuttgart. Initially I had much more fear of the trip down to Stuttgart, since I have to drive on the A8 (which is kinda infamous for huge traffic jams), but as it turned out; those fears were without reason. It took me an hour to get to Stuttgart, which is fairly normal.

Samsung NC10 Anynet (HAT2DE), Ubuntu Karmic Koala and UMTS

Thu, 07 Jan 2010 11:55:25 +0000

My little brother bought himself this fancy netbook (it’s okay I guess, only the keyboard takes getting used to). A few days after he bought it, he told me he wanted something different on it than the shipped Windows XP.

At first, I favored a normal Ubuntu 9.10 Desktop. While thats okay, it simply isn’t the right thing for a netbook. Why ? For example, if the programs bar is larger than the vertical desktop resolution, it gets kinda tiring to work with this thing.

VMware Data Recovery

Tue, 05 Jan 2010 17:11:35 +0000

I’ve been tinkering with VMware’s Data Recovery for the last two weeks (as in configured it some time before Christmas) and had it running all that time. I have to say the integration into the vCenter Client GUI is amazing, I’d love to see that for VCB also. The Changed Block Tracking is a neat way to minimize the amount backup data as well as your backup window (which is nearly zero anyhow due to vDR using snapshots).

HOWTO: Installing XBMC on a Acer Revo R3600 with Ubuntu Jaunty/Karmic

Sat, 02 Jan 2010 18:38:25 +0000

VCP410 exam

Thu, 24 Dec 2009 20:25:55 +0000

I’ve been learning for my VCP-410 exam the last week or so, and what can I say ? It helped … 463 points of a total of 500 points ain’t that bad at all (considering I spend twenty minutes doing it).

Sure, I could have spent more time, and do better than 92,6%, but then again: why should I ?

The achieved points (nor the percentage) don’t appear on the certificate (or at least it didn’t on the old one), so why bother. Anyway, that was my christmas present to myself, it that light; happy christmas ya’ll.

PXEBoot the VMware ESXi installer

Fri, 20 Nov 2009 20:19:46 +0000

Some of you may know, that VMware released vSphere 4.0 Update 1 yesterday. I took this as a reason, to finally wrap my head around booting the VMware ESXi installer from my PXE/TFTP box. Since VMware was kind enough to provide (a somewhat worthless) document, that explains how to extract the necessary files on Windows. But that quite doesn’t work with Linux – and VMware just states that you should be using mount and it’s option offset.

Custom Keymap-xml with XBMC

Sun, 15 Nov 2009 22:06:04 +0000

If you intend to use a custom Keymap.xml with XBMC you might need to be aware of a change that recently happened. Up till now the Keymap.xml was placed in ~/.xbmc/keymaps. Recently (not exactly sure, which svn revision it changed) although it changed.

Since r21442 (that’s after the current 9.04.1 release), the default keymapping files are stored in the system/keymaps/ subfolder of your installation. To alter the default keymapping simply add one or more xml-files in the Userdata/keymaps/ folder with the changes you wish to make. If the keymaps folder doesn’t exist, create it. For backwards compatibily, Userdata/Keymap.xml is still read.

Linksys WUSB600N on Ubuntu

Sun, 15 Nov 2009 12:17:01 +0000

Since I recently moved, I also needed to make a few changes to my home setup. Up till now, I always had a wall or a border where I could hide the CAT5/CAT6 cable for my boxen. But my new flat has doors everywhere. So I decided to buy two Linksys WUSB600N for my XBMC-box as well as for the NAS-box.

The setup was pretty straight forward, I didn’t have to fiddle with it too long. The only thing I had to do, was setup wpa_supplicant in /etc/network/interfaces, as the router supplied by my provider comes with WPA2 enabled (which is a good thing).

Configuring nagios-plugins-zypper

Thu, 12 Nov 2009 17:45:43 +0000

Since I’m running check_zypper via nrpe (which in turn runs as nobody), I need to set up sudo. In order for the plugin to work, we need to add the following line to /etc/sudoers (by means of visudo):

`1`	`nobody ALL = NOPASSWD: /usr/bin/zypper sl, /usr/bin/zypper --non-interactive --no-gpg-checks --terse list-updates`

(Keep in mind this needs to be a single line …)

Linux: Convert Gigabyte into Blocks

Mon, 02 Nov 2009 16:55:32 +0000

I just googled again for a Gigabyte to Blocks converter when I stumbled upon this:

`1`	`echo "(1510241024*1024)/512" \| bc`

Easy to use and yet handy.

SVC: Migrate VDisks off a MDisk Group onto another

Thu, 29 Oct 2009 18:09:17 +0000

Out of necessity, another SVC shell script was just born. If you ever need to migrate a whole MDisk group onto another, you quickly discover the limited application of the SVC GUI. Now, you could query the VDisks using your original MDisk Group and then copy and paste the VDisk’s name (or the VDisk ID) into a command line and simply reuse that svctask migratevdisk command over and over.

Luckily IBM blessed the SVC with an SSH interface. So again, we can write a (kinda) simple shell script which may look like this:

ESX: Query CDP information from the command line

Thu, 29 Oct 2009 17:20:46 +0000

I’m just tracing some troubles I’m having with a backup server and two (independent) network adapter ports (as in two ports on two different dual-port nics). If I enable the port and set it to auto configuration, it’ll get 100MBit/Half-Duplex, but the Portgroup becomes unavailable.

In order to get the connection back, I need to logon on the console (thank god even the backup server got an iLO2), and manually (as in esxcfg-nics -s 1000 -d full vmnic1) configure the adapter to 1GBit/s and full-duplex.

RPM: Query a specific rpm-file for information

Wed, 28 Oct 2009 18:12:44 +0000

Since I end up googling it each time I need this, it’s about time I write it down … If you want to query a specific RPM for information (Requires/Information/…) you’ll need to use the –package/-p option.

-p <file> — Query a Specific RPM Package File

Up to now, every means of specifying a package to an RPM query focused on packages that had already been installed. While it’s certainly very useful to be able to dredge up information about packages that are already on your system, what about packages that haven’t yet been installed? The -p option can do that for you.

KMP: Define a new subpkg template

Sat, 24 Oct 2009 16:43:36 +0000

There might be reasons, you’d wish you could make the kernel module package do other things. Two already pop into my head: 1) The mpp-Image upgrades for the ibm-rdac kernel module packages and 2) the " adjustments" which need to be done post install for the VMware kernel module package in /etc/vmware-tools/locations.

What you basically do is this:

Add the new subpkg template to your sources list
Call the %suse_kernel_module_package macro with the option -s and then add your source number

For me this looks like this:

SMT: Disable unmirrorable catalogs

Sat, 24 Oct 2009 16:22:50 +0000

Today I got this report from my SMT:

1
2
3
4
5


WARNING: The following repositories cannot be mirrored.
 Maybe you have not enough permissions to download these repositories?

* SLES10-SP2-Pool sles-10-x86_64
* SLES10-SP2-Pool sles-10-i586

However, if you try and disable that repository with smt-catalogs -d, SMT is gonna quit your action with " 0 repositories disabled". Since I didn’t want the error to show up again, here’s a quick way on how to disable it.

Open up a mysql shell (mysql -u root -p preferably) and enter those queries:

Creating a custom RPM repository for SMT

Thu, 22 Oct 2009 17:59:45 +0000

I spent some time yesterday figuring out ways on how to assign custom (as in self-built) RPMs to a installation using SMT. First you obviously need a " external" repository, that can be integrated into the SMT.

So we need to create repository someplace, where the SMT can go and grab it. I ain’t gonna cover the sharing part, since that is your job! I’m just gonna cover the steps on how to create the custom repository and how to integrate it into the SMT.

Active Directory authentification for Samba on SLES11

Wed, 21 Oct 2009 18:46:25 +0000

I recently “redesigned” the PXE-installation server, which comes with a Samba service to easily move files on/off the box. The old one had the restriction, you need to create local user accounts. Since I also did an distribution upgrade, I wanted to try the integration of SLES11 into Active Directory.

And as it turns out, it really is simple. Just follow the steps outlined in the handbook.

Open the Windows Domain Membership module, yast samba-client (or yast, then Network Services -> Windows Domain Membership) and enter your Domain information
Open the Samba Server Module, yast samba-server (or yast, then Network Services -> Samba Server) and also enter your Domain information

Just make sure, you also check the box labeled Also Use SMB Information for Linux Authentication, otherwise it won’t work – don’t ask me why …

3ware 9550SXU-8LP trouble

Wed, 21 Oct 2009 17:45:52 +0000

My home NAS, powered by a (used) 3ware 9550SXU-8LP, started behaving weird during the weekend. The box would boot one time, but if you’d reboot it again it wouldn’t come back up. Now, since I don’t have a monitor attached to it (I didn’t take the monitor with me when I moved), I needed to borrow one from work – I’m gonna buy a DVI-D to HDMI-adapter soon, since the 42" LCD-TV is right besides the NAS.

Using the integrated kickstart generator

Wed, 14 Oct 2009 16:36:00 +0000

VMware built an kickstart generator into ESX 3.5. You just need to enable it, simply by editing an XML configuration and restarting the webAccess service. Simply edit /usr/lib/vmware/webAccess/tomcat/apache-tomcat-5.5.26/webapps/ui/WEB-INF/struts-config.xml and look for the line saying:

`1`	`<action path="/scriptedInstall" type="org.apache.struts.actions.ForwardAction" parameter="/WEB-INF/jsp/scriptedInstall/disabled.jsp" />`

This line needs to be commented out (<– and –>) and the lines following, having those comment marks around them needs to be removed.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11


<!--
<action path="/scriptedInstall" type="com.vmware.webcenter.scripted.ProcessAction">
 <forward name="scriptedInstall.form1" path="/WEB-INF/jsp/scriptedInstall/form1.jsp" />
 <forward name="scriptedInstall.form2" path="/WEB-INF/jsp/scriptedInstall/form2.jsp" />
 <forward name="scriptedInstall.form3" path="/WEB-INF/jsp/scriptedInstall/form3.jsp" />
 <forward name="scriptedInstall.form4" path="/WEB-INF/jsp/scriptedInstall/form4.jsp" />
 <forward name="scriptedInstall.form5" path="/WEB-INF/jsp/scriptedInstall/form5.jsp" />
 <forward name="scriptedInstall.form6" path="/WEB-INF/jsp/scriptedInstall/form6.jsp" />
 <forward name="scriptedInstall.form7" path="/WEB-INF/jsp/scriptedInstall/form7.jsp" />
</action>
-->

After doing that, you should be able to restart the webAccess service, and after that access your ESX host.

Autoinstalling VMware-Tools

Tue, 13 Oct 2009 16:30:08 +0000

As I wrote before, I have been working on our AutoYaST setup. That entitles determining whether or not we’re currently inside a VMware environment. AutoYaST rules wise, that’s pretty easy (even though the MAC-tag is empty 😳):

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15


 <!-- Addons: Install VMware Tools / KMP -->
 <rule>
 <custom1>
 <script>
if ip a | grep "link/ether 00:50:56" >/dev/null ; then
 echo -n vmware
fi;
 </script>
 <match>*</match>
 <match_type>exact</match_type>
 </custom1>
 <result>
 <profile>addons/@custom1@.xml</profile>
 </result>
 </rule>

The hard part is figuring out ways, to make the VMware Tools installation as pain free as possible. One thing I can’t do, is running vmware-config-tools.pl …

New IBM RDAC version (or not)

Wed, 09 Sep 2009 20:03:30 +0000

A week ago (September 02nd), I received a mail detailing the release of IBM’s new multipathing device driver for the DS4x00 series, which finally works with SLES11 (the available software up till now doesn’t – as in fails with kernels > 2.6.26 iirc).

ESC+ notification detailing the release

There wouldn’t be any trouble, if IBM (or rather the vendor providing the driver – LSI) would actually release the driver … up till today, I have yet to see the new version appear on the download page. I already tried to notify IBM about the trouble, but as usual there is lack of ways to actually get this to the right person.

Tivoli Storage Manager Server 5-5-3

Fri, 28 Aug 2009 14:19:14 +0000

I spent yesterday afternoon upgrading our TS7530, and in my fad I also upgraded TSM to 5.5.3. Now, once I started TSM it quickly started complaining about the paths to the drives.

1
2
3
4
5
6
7
8
9


ANR8873E The path from source TSM1 to destination VTL1_DR03
(/dev/lin_tape/IBMtape03) is taken offline.
ANR8873E The path from source TSM1 to destination VTL1_DR03
(/dev/lin_tape/IBMtape03) is taken offline.
HBA_LoadLibrary: previously unfreed libraries exist, call HBA_FreeLibrary().
ANR8873E The path from source TSM1 to destination VTL1_DR07
(/dev/lin_tape/IBMtape07) is taken offline.
ANR8873E The path from source TSM1 to destination VTL1_DR07
(/dev/lin_tape/IBMtape-07) is taken offline.

I thought maybe this is a mere device problem (we have had them before), so I rebooted the boxes. But still no luck and I went home after about an hour of trying without any luck. In the morning, my co-worker called our trustworthy IBM service partner, and the TSM consultant said he had the exact, same problem yesterday. We would have two options:

IBM RSA II adapter and Java RE (fini)

Wed, 19 Aug 2009 04:32:44 +0000

If you remember back to July, I looked into some troubles I had with the IBM RSA II adapter’s Java interface and the latest JRE updates. I just noticed, that IBM released a new firmware yesterday for the RSA. The ChangeLog states this:

Version 1.13, GFEP35A Problem(s) Fixed:

* Suggested o Fix for Remote Control General Exception in JRE 1.6 update 12 and above. o Corrected a problem that DHCP renew/release may fail after a long time. o Corrected a problem that remote control preference link disapears after creating new key buttons. o Corrected a problem that cause event number shows only from 0 to 255 when views RSA log via telnet session.

rpc-statd starting before portmap

Tue, 04 Aug 2009 14:51:49 +0000

One problem gone, another one turns up. When rpc.statd (nfs-common) tries to start before portmap, it’s gonna result in failure. Now, the logfile (/var/log/daemon.log) is gonna print a rather cryptic error message:

1
2


Aug  4 15:54:25 xen2 rpc.statd[3419]: Version 1.1.2 Starting
Aug  4 15:54:25 xen2 rpc.statd[3419]: unable to register (statd, 1, udp).

After fixing the start order (I really hate SUSE/Debian* for not having init-script dependencies – like Gentoo’s baselayout/Roy’s openrc does have), everything is like it should be and I’m able to put the /srv/xen mount into the fstab …

OFED packages for Debian

Tue, 04 Aug 2009 12:25:08 +0000

As I mentioned yesterday, I’m currently doing some project work. Said project includes InfiniBand technology.

Apparently we bought a “cheap” InfiniBand switch, which comes without a subnet manager. So, in order to communicate between the nodes, you need to install the subnet manager (opensm in my case) on each node.

1
2
3
4


echo 'deb http://pkg-ofed.alioth.debian.org/apt/ofed ./' >
 /etc/apt/sources.list.d/openfabrics.list;
 aptitude update;
 aptitude install opensm

In order to utilize the InfiniBand interface you need to do a few things first though:

TS7530 authentification failure

Sat, 01 Aug 2009 05:20:04 +0000

Today, I had a rather troublesome morning. Once I got to work, Nagios was already complaining about the lin_taped on one of our TSM servers, which apparently failed due to too many SCSI resets. Additionally, I can’t login using the VE console (I can login however using SSH) so I ended up opening up a IBM Electronic Service Call (ESC+).

Using SSH, I can get some information on the VE’s status:

VMware vSphere and templates

Fri, 31 Jul 2009 13:51:01 +0000

I just converted one of my (old) templates, as I wanted to refresh the updates and the virus scanner. After converting, I was asked about the UUID (no clue why), and expected to be done with it. But after looking at the console, I got the following, completely cryptic message:

Unable to connect to MKS

After digging a bit deeper (that is looking at the vmware.log of the virtual machine, since the message of the GUI is real cryptic), I’m a bit wiser:

IBM TS7530 and the Virtualization Engine for Tape Console

Fri, 31 Jul 2009 12:44:16 +0000

I just had yet another support call with IBM, concerning the Tape Console (or VE console, courtesy of Falconstor). My basic problem was/is, that I, as a german person, do have a german Windows Server 2003 installation. Now, if you do have german decimal number format selected in the regional settings, the display is gonna be kinda impaired and you’re gonna see something like this:

VE console with german decimal number format

Praxisbuch Nagios by Tobias Scherbaum

Sat, 25 Jul 2009 11:58:20 +0000

Tobi recently finished writing yet another book, which he also talked about in a blog post. Shortly after, I asked him a rather curious question. What exactly is the plant or animal on the cover of the book ? He was kind enough to send a voucher copy of the book my way.

Praxisbuch Nagios

He actually mentions it in the credits at the beginning of the book. Turns out it is an animal, a sea pen or sea feather (I’m guessing at Pennatula aculeata).

Exclude a directory from tar

Fri, 24 Jul 2009 13:40:18 +0000

Damn tar is kinda weird .. usually, you specifiy excludes in the manner of –exclude="/path/to/exclude". But tar needs to do things differently.

1
2


tar -cvpf /xen-dom0.tar --exclude "/proc/*" --exclude "/sys/*"
 --exclude "/dev/*" --exclude "/xen-dom0.tar" /

Custom certificates in VMware vSphere

Fri, 24 Jul 2009 13:34:57 +0000

Finally, after about 6 months (I last talked about that on February 25th, when Virtual Center 2.5U4 was released) our troubles with our " custom" certificates seems to be resolved! As it turns out, it really was our fault and not VMware’s.

When generating the pfx from the signed certificate and the key-file, you need to supply a password, otherwise the vCenter service is unable to utilize the private key of the pfx, since it’s unable to access the PFX with the default password ( testpassword is the default for Virtual Center as well as vSphere).

Windows XP(e) refusing to connect to a terminal server

Thu, 23 Jul 2009 14:48:52 +0000

Today a error message reappeared I thought I wouldn’t see again. We use Wyse Thin Clients and 2X running on two terminal servers, to provide the thin clients with applications. Now, once a while one of the thin clients (not all at once, just a single one) refuse to connect to the terminal server jabbing about this:

`1`	`The remote computer disconnected the session because of an error in the licensing protocol.`

The error message you get from the 2X client ain’t the slightest bit more helpful.

Burning CD/DVDs as unprivileged user

Tue, 21 Jul 2009 15:26:50 +0000

After the last reinstallation of Windows (both at home and at work), I decided that from this day forth, I’d be working as unprivileged user (ie not as local administrator). Now, working as unprivileged user is some kind of relief (since not every program is able to wreak havoc within your computer), but also somewhat of a burden.

Up until now, I had serious troubles burning CDs and/or DVDs as unprivileged user. Basically InfraRecorder refused to work at all. Only way that I had left, was copying the ISO to my local disk and then use runas in conjunction with InfraRecorder, to execute as Administrator.

Setting up a OpenVPN server with DD-WRT

Sat, 18 Jul 2009 18:18:12 +0000

In the past I had toyed with the thought of setting up a VPN-Server at home, so that I could do stuff from elsewhere. Now, I finally got around doing so. First obstacle ? How exactly would I be doing that ?

Get the DD-WRT VPN flavor of course!
Configure the VPN server

Now, the second part seems to be a bit harder. There is a wiki article on how to configure OpenVPN in the DD-WRT wiki, but not for v24 SP1. Lucky me, someone already made himself the work of writing somewhat of a guide down. But, guess according to Murphy’s law, things ain’t ever gonna be easy. As I’m running Ubuntu Karmic on my workbook, the commands ain’t matching the current openvpn package being delivered with Karmic. So here is, intended only as a guide, the list of steps one has to do in order to get the certs …

My neverending lighttpd troubles

Thu, 16 Jul 2009 10:31:13 +0000

Well, after a day or so my lighttpd troubles reappeared. But this time, the lighttpd process would simply put out this:

1
2
3
4


(mod_fastcgi.c.2913) backend is overloaded; we'll disable it for 2 seconds and send the request to another backend instead: reconnects: 0 load: 131
(mod_fastcgi.c.2668) fcgi-server re-enabled: 0 /var/run/lighttpd/lighttpd-fastcgi-php-17242.socket
(mod_fastcgi.c.2913) backend is overloaded; we'll disable it for 2 seconds and send the request to another backend instead: reconnects: 0 load: 131
(mod_fastcgi.c.2668) fcgi-server re-enabled: 0 /var/run/lighttpd/lighttpd-fastcgi-php-17242.socket

And as the message says, PHP (or rather mod_fastcgi?) would simply stop to process requests. In the end, I tuned some of the lighttpd/mod_fastcgi parameters.

Hammock

Fri, 10 Jul 2009 07:41:03 +0000

Well, out of boredom I stated on Friday that I’d gonna go look for a hammock, since the beach chair quite isn’t enough. I went through every DIY superstore in Stralsund, but none of them had anything like I wanted (basically I wanted a wooden hammock, which would be able to carry me). Thanks to the Internet though, I was quite fast at a point where I found something (Amazon rules!)

Updating a Linux VM from Virtual Infrastructure to vSphere

Wed, 08 Jul 2009 13:51:50 +0000

Well, if you’re gonna update a SLES10 (or even a SLES11) VM, you created with Virtual Infrastructure, you’re gonna run into a snag (like I do). Grub (or rather the kernel itself) is gonna barf.

Now, I searched for a while and didn’t find anything specific on the net, so I’m gonna write it down. Up till 3.5U4 the maximal resolution you’d be able to enter within a virtual machine was vga=0x32d (at least for my 19" TFT’s at work). But now, after the upgrade to vSphere that isn’t working anymore.

GermanWings travels

Thu, 02 Jul 2009 06:27:08 +0000

Well, I had the pleasure of flying with Germanwings on Friday and Sunday. As it turns out, if you fly with Germanwings you should plan some more time. On Friday, we were scheduled for departure at 17:00 (that’s 5 P.M.). Around 6 P.M. the flight assistant(s) guarding the gate announced that the flight is being delayed for a unspecified amount of time due to maintenance. At 7 P.M. they announced that again.

Intel X25-M powering Ubuntu Karmic

Thu, 11 Jun 2009 12:58:29 +0000

I recently ordered a Intel X25-M Solid State Disk as a replacement for the oldish SATA 2,5" disk powering my Fujitsu Celisus M250 (called workbook). I figured it’d be a bit faster as compared to running from the old hard disk, but I didn’t figure it be that fast!

Since it is blazing fast, my trainee figured he’d install bootchart and see how the disk/the whole notebook performed.

bootchart map of the X25-M

XBMC Keymap

Thu, 11 Jun 2009 05:15:24 +0000

After I had the initial stuff done, I spent some time yesterday (roughly one hour) figuring out, why Play/Pause/Stop aren’t working any longer (they worked at some point).

After looking at the XBMC debug log for some time, I went back and looked at my Lircmap.xml. As it turns out, you can’t map one Lirckey to two functions (in my case, I mapped KEY_7 to as well as ). XBMC doesn’t like that, and in return quits functioning for those keys.

New vmware-tools-kmp

Wed, 10 Jun 2009 11:31:04 +0000

Since we recently upgraded our VMware Infrastructure to VMware vSphere, I finally had a chance to refresh the RPM’s for the KMP for 2.6.16.60-0.39.3-0.1 and 2.6.27.21-0.1. You can find the source RPM here.

OCF agent for Tivoli Storage Manager: redux

Fri, 05 Jun 2009 09:35:50 +0000

Well, after I finished my first OCF agent back in October 2008, we have it running in production now for about ten months. During that time, we found quite a few points in which we’d like to improve the behaviour with that Linux-HA should handle TSM.

Shutdown TSM nicely if possible (Cancel client sessions, cancel running processes and dismount mounted volumes)
Better error handling

So, after another week of writing and testing with a small instance, I present the new OCF agent for Tivoli Storage Manager. It still has one or two weak points, but they are negligible. I still need to write the documentation for it, but the script should just work …

Weird TS3500 problem: redux

Wed, 03 Jun 2009 12:49:35 +0000

Well, after yesterday’s episode with our tape library today continued to be a taxing day. After restarting a few exports that were hanging yesterday due to our library problems, something similar returned. TSM was unable to locate a few (two to be exact) tapes in the library.

1
2
3
4
5
6
7
8
9


ANR8300E I/O error on library LIB3584 (OP=00006C03, CC=314, KEY=05, ASC=3B,
ASCQ=0E, SENSE=70.00.05.00.00.00.00.0A.00.00.00.00.3B.0E.00.C0.00-.04.,
Description=The source slot or drive was empty in an attempt to move a
volume). Refer to Appendix C in the 'Messages' manual for recommended action.
ANR8312E Volume 000400 could not be located in library LIB3584.
ANR8358E Audit operation is required for library LIB3584.
ANR8381E LTO volume 000400 could not be mounted in drive DR6 (/dev/rmt0).
ANR1402W Mount request denied for volume 000400 - volume unavailable.
ANR1410W Access mode for volume 000400 now set to "unavailable".

Yet the library reported the tapes were still inventoried. 🤷 Here we are again, looking completely baffled. After a short while trying to figure out what to do, we went through the Data Cartridge inventory again. As it turns out, through putting the library in “Pause”-Mode and restarting TSM multiple times, TSM apparently completely forgot that it had these tapes put into drives.

Reviewing Mobile Admin by Rove

Mon, 01 Jun 2009 19:16:52 +0000

Well, Laura Kedziora (Marketing Manager) from Rove contacted me about two months ago, whether or not I’d be willing to write up a review about their upcoming release of Mobile Admin supporting Nagios!

At first, I didn’t even know what " Mobile Admin" was .. though I heard some good things about Rove. After playing with it in a VM, I do have to admit that it’s a real neat piece of software.

You can cover the whole (well, pretty much everything) shebang dealing with Nagios with the cell phone. But not just that. I could also manage our VMware Infrastructure (or vCenter) with it, as well as a SCCM environment (if we had any that is). Since I only have a shitty-old Nokia (not the required Nokia 6xxx), I ended up borrowing my brothers BlackBerry to take some photos.

DawiControl SIL3114

Sun, 10 May 2009 13:42:44 +0000

Well, if you remember back to last December, I had some severe troubles with this fake ass RAID controller. At the time I posted my last problem (or rather, my conclusion) I already bought a 3WARE Escalade 9550SXU-8LP on EBay (used, since I didn’t want to spend ~400 EUR). Now after the controller arrived in mid-January, I ended up buying a new main-board, processor, memory, … in order to put the 3WARE card to use; initially I thought the 3WARE card would fit into my A7N8X-X, but apparently that only had a 16bit PCI-slot.

Novell KMP: vmware-tools-kmp and ibm-lin_tape-kmp

Sun, 10 May 2009 11:27:22 +0000

After working with the novell-kmp solution, I think it’s actually rather easy to create a " Kernel Module Package". In the end, I created two additional KMP’s, one for the tools component of the VMware-Tools shipped with VMware ESX, and another for the lin_tape SCSI driver, used by our IBM TS3400 as well as the IBM TS7530.

Winter on Spiekeroog

Mon, 04 May 2009 17:05:43 +0000

Well, as I wrote last year, I spent some time with my brother on Spiekeroog (that’s where he’s currently living and working). As I left on December 4th, it started snowing like crazy ..

If you read the old article, you might remember that I mentioned Spiekeroog is 100% free of fossil fueled vehicles. That being said, let’s continue with the story I’m about to tell.

Anyway, my brother was walking me back to the hotel boat and we waited a bit in the harbour since we were a bit early. Now, every item is delivered by ship to the island, since there’s no other way (besides by air, which is kinda expensive ..). Anyway, them dockworkers ain’t stupid. They needed some snow-free space, and they started clearing the snow. But how ?

Firefox: Hosting Xmarks (formerly Foxmarks) on lighttpd

Sun, 03 May 2009 14:30:58 +0000

Well, I am an enthusiastic user of Xmarks (or Foxmarks) and played with this again and again. So this weekend, I finally decided to do it properly. I sat down, recreated the whole WebDAV stuff (even if I cheated of this HowtoForge article).

Always redirect traffic to HTTPS, since transmitting username and passwords via HTTP ain’t that secure (MITM)

Okay, so here are the shortended setup instructions:

Enable mod_access, mod_auth, mod_redirect and mod_webdav in /etc/lighttpd/lighttpd.conf
Create the necessary directories
Create the htpasswd-file
Configure the redirections

1
2
3


mkdir -p /var/www/dav/{web,auth,sql}
chown -R lighttpd:lighttpd/var/www/dav/{web,sql}
htpasswd -c /var/www/dav/auth/htpasswd chrischie

Since we just created the necessary directories, as well as a htpasswd-file containing a user we should be able to change the configuration now:

TSM: Restoring the database/recovery log to a point-in-time

Fri, 24 Apr 2009 12:38:34 +0000

Well, my co-worker just called on my cell (it’s Friday, 16:00), and asked me which start-up script he needed to change in order to restore the database. My first response was, “ummm, that’s gonna be hard, we’re using heartbeat”.

Okay, so after a bit of asking I got out of him what he wanted to achieve by changing the start-up script. Apparently he did something to crash Tivoli Storage Manager (or rather repeatedly crash it) and wanted to restore the database. He talked to one of the systems partner we do have (and I’m happy we have them most of the time), who in return told him how to do it, but forgot a minute after he hung up the phone.

SLES10: zypper-log

Fri, 03 Apr 2009 04:34:49 +0000

Well, I just stumbled upon something .. My Nagios at work wasn’t working anymore, and I went looking.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11


nagios3 ~ [0] > tail -f /var/log/nagios/nagios.log
[1238658394] Error: Unable to save status file: No space left on device
[1238658403] Error: Unable to save status file: No space left on device
[1238658413] Error: Unable to save status file: No space left on device
[1238658423] SERVICE ALERT: tsm1;POWER WARN;OK;SOFT;4;-u OK - 0
[1238658423] Error: Unable to save status file: No space left on device
[1238658433] SERVICE ALERT: tsm2;LOAD;WARNING;SOFT;1;WARNING - load average: 6.25, 5.72, 5.36
[1238658433] Error: Unable to save status file: No space left on device
[1238658443] Error: Unable to save status file: No space left on device
[1238658453] Error: Unable to save status file: No space left on device
[1238658463] Error: Unable

After that, zip - nada. Next thing, check whether or not the device is really full … Okay, df ..

Nagios: SNMP OID's for IBM's RSA II adapter

Wed, 01 Apr 2009 10:10:15 +0000

Well, after some poking around I finally found some OID’s for the RSA’s (only through these two links: check_rsa_fan and check_rsa_temp).

For Nagios, I dismissed the fans, since the fan speed is only passed on in percent values. So I only added this:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28


define hostgroup{
 hostgroup_name rsa-snmp
 alias Remote Supervisor Adapter (allowing SNMP connections)
}

define service{
 use generic-perfdata

 check_command check_rsa_snmpv1_public!.1.3.6.1.4.1.2.3.51.1.2.1.2.1.1!45!60!°C!Temperature CPU0!
 hostgroup_name rsa-snmp
 service_description TEMP CPU0
}

define service{
 use generic-perfdata

 check_command check_rsa_snmpv1_public!.1.3.6.1.4.1.2.3.51.1.2.1.2.2.1!45!60!°C!Temperature CPU1!
 hostgroup_name rsa-snmp
 service_description TEMP CPU1
}

define service{
 use generic-perfdata

 check_command check_rsa_snmpv1_public!.1.3.6.1.4.1.2.3.51.1.2.1.5.1.0!29!35!°C!Temperature Ambient!
 hostgroup_name rsa-snmp
 service_description TEMP AMBIENT
}

Oh, and if anyone else is curious like me, here’s the list with the OID’s, courtesy of Gerhard Gschlad and Leonardo Calamai.

RPM spec: Installing a custom init-script

Thu, 26 Mar 2009 15:14:51 +0000

Well, I’m sitting again here grinding my head on how to fix up a certain package. Now, I had to look it up again, so this time I’m writing it down!

1
2
3


Source1: ${name}.initd
...
install -o root -g root -m 755 %{S:1} $RPM_BUILD_ROOT/etc/init.d/ndo2db

Windows: Running msconfig as non privileged user

Wed, 25 Mar 2009 10:38:38 +0000

Well, the title is kinda misleading since you need administrator privileges to run msconfig in it’s full scope. But this is just a hint to myself on how to execute msconfig without logging out and then logging in as administrator.

`1`	`runas /user:Administrator C:WINDOWSpchealthhelpctrbinariesmsconfig.exe`

Nagios: Watching Clustered environments (the other way)

Thu, 19 Mar 2009 08:36:22 +0000

Well, recently I stepped up to watch our cluster environments … Michael has a good howto on how to watch Windows Cluster environments in the NSclient++ wiki.

Now, this has it’s own perks … Which I stumbled upon when trying to write a Linux-HA OCF resource agent for the Nagios NRPE server. Combining that Linux-HA with SLES10 is a good thing generally, but using startproc in that resource agent is not such a good idea.

Apparently Novell (or SuSE GmbH) thought it might be wise to include some additional logic into the wrapper. startproc, checkproc and killproc do check for the name of the executable. So if you try to start an additional process with the same name, you need to dig a bit deeper.

For this to work, you need two additional things (quotations directly from man 8 startproc):

-p pid_file (Former option -f changed due to the LSB specification.) Use an alternate pid file instead of the default (/var/run/ .pid). The pid read from this file is being matched against the pid of running processes that have an executable with specified path of the program. In order to avoid confusion with stale pid files, a not up-to-date pid will be ignored.

Now, then apparently this isn’t enough. startproc is still refusing to start a second process.

-i ignore_file The pid found in this file is used as session id of the same binary program which should be ignored by startproc.

Linux-HA: Creating a random authkey

Wed, 18 Mar 2009 13:00:47 +0000

I just looked over the slides of a presentation one of my trainees bought back from Chemnitz, and there was this nifty one-line command, with which you can generate a random sha1sum for your authkeys file.

Now, since I’m a bit lazy here’s the full command line to fill /etc/ha.d/authkeys for you:

1
2


node2 ~ [0] > echo "auth 1
1 sha1 $( dd if=/dev/urandom count=4 2> /dev/null | openssl dgst -sha1 )"

TSM client: Backing up files with umlauts on SLES

Mon, 02 Mar 2009 13:21:10 +0000

In the past, I always had problems with SLES and our Tivoli Storage Manager client’s when backing up files with german umlauts. Well, today I looked a bit harder, and quite quickly found a solution.

1
2


sles9 root [0] > env | grep ^LC
LC_CTYPE=de_DE.UTF-8

As you can see from the above, SLES9/10 ain’t setting LANG or LC_ALL (which I searched for first), but is setting LC_CTYPE.

So, simply changing the LC_CTYPE in the init-script and/or prepending the dsmc command line with a new LC_CTYPE fixes my umlauts problems!

Nagios: check_snmp again

Fri, 27 Feb 2009 10:59:25 +0000

Well, today I had to grind my head again, regarding the way check_snmp handles WARNING and CRITICAL events. From my point of view, check_snmp is really just retarded sometimes.

As you know, all the other plugins accept WARNING and CRITICAL-thresholds based on the calculation, if the return integer is above this threshold it reached WARNING/CRITICAL state. But check_snmp doesn’t play that way.

It expects only ranges, which are NOT gonna result in warning or critical events. Which is kinda stupid, since you gotta rethink twice about the thresholds 😛

Nagios: NSclient++ in a clustered Environment

Thu, 26 Feb 2009 10:50:36 +0000

Well, most of you already know that I’m a Nagios fanatic. I like to watch as many aspects as I possibly can. So, yesterday I started figuring out ways to watch our different cluster groups (housing a bunch – try above 20.000 – of file shares).

Now, my first tries failed horribly. I brought down a complete cluster group, resulting in a major annoyance. Now, today I went at it a bit smarter 😛 I cloned myself two VM’s off my Windows Server 2003 Enterprise R2 template, created a new cluster.

MySQL: Beware of sync_binlog on EXT3

Mon, 23 Feb 2009 21:35:38 +0000

Well, I just glazed again over my my.cnf for our web-cluster because I just moved a database from one cluster to another and getting quite different performance from it. So, as I expected, there is a slight difference between both configuration files:

1
2
3
4
5


@@ -55,8 +58,6 @@
 innodb_log_group_home_dir = /var/lib/mysql/db
 innodb_log_file_size = 512M
 innodb_thread_concurrency = 8
-sync_binlog = 1

And apparently, according to the MySQL Performance Blog that’s really, really bad (as well, we’re currently running without write caching, as the battery module of the storage is dead).

Tivoli Storage Manager Client and Microsoft Cluster Services (continued)

Mon, 16 Feb 2009 15:19:57 +0000

As you might recall from my first article about this topic, I had some troubles with the Microsoft Cluster Services and the registration replication. Now, today as we tried switching the TSM-Server for some resources, we ran into this again.

We were using the service install tool (dsmcutil install scheduler) to set the new password as well as the GUI. Now, as we brought the resource online with the local service manager, everything was honky dory. But as soon as we brought it online using the Cluster Manager, it failed horribly. Why ?

MySQL: Replication and hostname wild cards

Sun, 15 Feb 2009 19:06:13 +0000

Yeah, yeah .. I know, it’s weekend. But I usually can think much better when no one is rattling my cage. So I had another look at my replication problems.

Don’t you never ever change InnoDB settings when migrating between hardware, because InnoDB is rather sensitive regarding those parameters.
When you’re setting up the replication (don’t ask me why) and copying over the database to the second replication partner, be aware if you’re using wild cards you’re gonna get seriously bitten in the back.

Now, let’s look at the constellation.

Linux: Getting information about an EXT3 filesystem

Fri, 13 Feb 2009 11:52:01 +0000

You know, I’m not getting any younger. It’s getting harder remembering every damn command … so here is how you get information out of your EXT3 filesystem:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10


sles10sp2 ~ [0] > tune2fs -l /dev/sda2 | grep "^Filesystem"
Filesystem volume name: <none>
Filesystem UUID: 8eec8235-4d9e-4b58-acf9-3c68c977d5ea
Filesystem magic number: 0xEF53
Filesystem revision #: 1 (dynamic)
Filesystem features: has_journal resize_inode filetype
 needs_recovery sparse_super large_file
Filesystem state: clean
Filesystem OS type: Linux
Filesystem created: Tue May 27 10:48:56 2008

Restarting the NSclient++ service without the management applet

Wed, 11 Feb 2009 14:21:36 +0000

For people, who are as click and point-lazy as me, here is how you restart the service without using the service management applet.

1
2


net stop "NSClientpp (Nagios) 0.3.5.2 2008-09-24 w32"
net start "NSClientpp (Nagios) 0.3.5.2 2008-09-24 w32"

MySQL: Setting up an InnoDB raw device

Wed, 11 Feb 2009 13:34:45 +0000

Well, since I had to brood about this (again I might add), I’m gonna write it down this time …

Setting up the InnoDB raw device isn’t that hard, just make sure the device has proper permissions (either add mysql to the disk group or create a udev rule).

`1`	`KERNEL="sdb2", OWNER="mysql", GROUP="mysql"`

Now after that (and a reboot/udevcontrol reload_rules later), you should be able to initialize the InnoDB device. Yes, the InnoDB device needs initializing.

Monitoring the IBM BladeCenter chassis with Nagios

Tue, 10 Feb 2009 11:40:00 +0000

Today I ended up working out the details on what we want to monitor regarding our BladeCenter. The most interesting details (for us that is) are these:

Fan speeds for Chassis Cooling/Power Module Cooling Bay(s)
Temperature
Power Domain utilization

It wasn’t * that* hard to implement. Only trouble(s) I ran into, were ( 1) IBM did a real shitty job with the MIB’s. If you look closely into the mmblade.mib, you’re gonna notice, that not a single OID is specified for the events. ( 2) As the MIB’s weren’t documented anywhere, I had to look them up via snmpwalk (which I had never used before). So as a reminder (to myself), here’s how it is done:

`1`	`snmpwalk -v1 -c public -O n 10.0.0.35 .1.3.6.1.4.1.2.3.51.2.2`

This will get you a list, with a lot of output (5154 lines to be exact). Lucky me, the web interface of the management module/ssh interface is rather verbose, so all you need to do is compare those values with what you are looking for.

So for myself (and anyone interested) read ahead for the list of checks we are currently running on the management module.

Installing SLES10 via network with no DHCP available

Fri, 30 Jan 2009 11:24:08 +0000

In our current fight against the BladeCenter switches, we’re currently facing the problem that the blades ain’t able to send/receive DHCP-traffic.

So in order to move forward, we had to use static IP addresses. And since SLES10 ain’t straight forward on that, I had to look it up. Now, here’s for me (and everyone else tired of searching) how to do it:

1
2
3
4
5
6
7
8
9


install=http://ftp.barfoo.org/install/SLES10-x64/CD1
 netdevice=eth0
 hostip=10.0.1.240
 netmask=255.255.255.0
 gateway=10.0.1.1
 nameserver=10.0.1.2
 domain=home.barfoo.org
 insmod=bnx2
 splash=verbose

Setting up the BladeCenter H

Fri, 30 Jan 2009 10:50:40 +0000

Well, we finally had our maintenance window today, in which we planned the hardware exchange for our current Dell Blade Chassis (don’t ask!). The exchange went fine, but as we started exploring the components (like the IBM BladeCenter SAN switches – which are in fact Cisco MDS 9100) we hit a few road blocks.

First, the default user name/password combo for the Cisco MDS 9100 for the BladeCenter is USERID/PASSW0RD (just as the rest of the password combinations).

Updating path information for TSM

Wed, 28 Jan 2009 15:11:31 +0000

As I did some switching today (between the new lin_tape version by IBM and our own lin_tape version), I ended up writing those lines a dozen times. Here is (just for me, if you don’t care .. skip ahead) on how to generate a list of commands:

1
2
3
4
5
6


for i in $( seq -w 1 32 ); do
 token="${i/0/}"
 path_prefix="/dev/lt/IBMtape12245775"
 echo "DELETE PATH TSM1 VTL1_DR$i SRCTYPE=SERVER DESTTYPE=DRIVE LIBRARY=VTL1"
 echo "DEFINE PATH TSM1 VTL1_DR$i SRCTYPE=SERVER DESTTYPE=DRIVE LIBRARY=VTL1 DEVICE=$path_prefix$((token+11))A1"
done

which should get you a list like this:

Sidenote: Amount of Slots per Virtual Tape Library

Tue, 27 Jan 2009 20:32:57 +0000

Well, I just stumbled about this again (and I don’t know right now whether or not this is documented inside a RedBook or not) today, so I thought maybe I’m gonna write it down.

Slot-Amount Property of a Virtual Tape Library

Please keep in mind, when creating the virtual library to think hard about the amount of slots you might need. It ain’t that bad, you just can’t decrease the amount anymore. So if you think about creating 50 different virtual tape libraries with 500 slots each on your TS7530, think again. The current software level only supports 25.000 slots on a global level.

Working with IBM's Virtualization Engine Console

Tue, 27 Jan 2009 17:27:31 +0000

Recently, we got the recommendation from our system partner to use static allocated tape cartridges instead of dynamic allocated ones. Apparently using dynamic allocating cartridges comes with a performance penalty if more than a few nodes are backing up a large amount of data at once.

And yet again, I noticed that the IBM Virtualization Engine Console (aka Falconstor Software) is really error prone.

In order to change the allocation type, we had to shred the old cartridges first (500 x ~100M up till now), chance the allocation type at the virtual tape library level, and then recreate the 500 cartridges with a fixed size (500x 102400MB). Now, as I was kinda optimistic, I decided to create all 500 cartridges at once.

Sunday afternoon playtime

Sun, 25 Jan 2009 15:29:09 +0000

Well, it’s yet again Sunday afternoon. And I had (again I might add) the urge to play around with all the stuff I have at home.

So at first, I “fixed” the ground wire off my NAS box.

Ground wire for the CPU fan

Afterwards, I went back upstairs. Hooked my Philips up to my notebook and figured I really need a wireless keyboard. Because typing with the Windows on-screen keyboard is a huge pain in the ass (as well as a pain for the mouse-hand)!

Gentoo packages are gone now!

Sun, 25 Jan 2009 14:08:30 +0000

Just like I announced last week, my binary packages repository is now history. I’m gonna remove the redirections from lighttpd and DNS in a few.

Opsview installation reviewed

Sat, 24 Jan 2009 11:33:50 +0000

Well, I recently (well, yesterday) built the opsview RPM’s for SLES10, and started fiddeling about with it today. Alex " recommended" I should rather look at Opsview instead of Centreon, but boy was there a surprise waiting for me …

Opsview has the advantage that it at least lets you use the package manager. But, it also needs a lot of handy work (just like Centreon, which I really dislike since it’s real error prone).

Automatic updates on SUSE Linux Enterprise 10

Fri, 23 Jan 2009 11:30:01 +0000

I had the problem, that the automatic update function of YaST doesn’t work like I want it to. I just wanted it to install only those updates, that ain’t interactive, don’t need a service restart and don’t need a reboot.

YaST does only feature an online update that skips “interactive” updates (I’ve never even encountered an interactive update up till now). So I went ahead and wrote a (hackish) script, that achieves what I need.

Trusted vendors in SUSE Linux Enteprise 10

Mon, 19 Jan 2009 20:31:19 +0000

The other day I had a closer look at the zypper logs (well, I was digging for a time-history of installed packages). First … damn does zypper produce a lot of logs on a " productive" (or rather on a maintained - as in up-to-date) system.

But glazing over the logs, I found out something new about zypper. It actually has an internal list, which only purpose is to identify a trusted vendor …

Cleaning up /tmp

Sun, 18 Jan 2009 13:26:59 +0000

Well, I just looked into /tmp on one of our boxes and noticed that SSHd left behind some (try 400) directories .. Now, I could use a simple rm -rf /tmp/ssh-*, but I didn’t want to kill my current agent forward file.

After looking at the man-page of find, I stumbled about -mtime. And that seems to work out quite well.

`1`	`find /tmp -name "ssh-*" -mtime +5 \| xargs rm -rf`

Automating zypper updates

Sat, 17 Jan 2009 18:16:27 +0000

Well, I just looked into using ` zypper up ` to update some of our boxen (I do have a script, which holds the boxen it needs to process in a variable and simply goes through them one by one) – yes, I could activate auto-update, I just don’t want that at this point 😉

So at first I tried just using zypper to automatically update that given list, but even if you pass –no-confirm, zypper would still ask for your confirmation (which seems kinda stupid). After a short while thinking about it, a lesson from solar@gentoo.org came to mind. When working in a chroot, he simply used this:

VI Client: Changing the language from the system default

Wed, 14 Jan 2009 08:12:45 +0000

Well, as I am in fact running a german Windows XP, the VI Client started displaying all menus and operations in German when I updated to 2.5u2. Normally, I wouldn’t have much of a problem with that, but recently it started to annoy me, since the translation is a bit off from the real meaning of much of the operations.

So today, in the morning I started looking for ways to revert the VI Client back to displaying everything in English. And guess what. There’s no way to switch the language from the VI Client itself. There’s just a workaround.

Distribution running on IBM TS7530 Virtualization Engine

Fri, 09 Jan 2009 14:18:35 +0000

Well, I was just a bit curious earlier what distribution might be running on our IBM TS7530 Virtualization engines .. well, I just had a look-see ..

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27


vetapeservice@VTL-B:~> cat /etc/SuSE-release
SUSE Linux Enterprise Server 10 (x86_64)
VERSION = 10
PATCHLEVEL=1

vetapeservice@VTL-B:~> uname -a
Linux VTL 2.6.16.46-229-smp #1 Sun Apr 13 05:21:49 UTC 2008 x86_64 GNU/Linux

vetapeservice@VTL-B:~> free -m
 total used free shared buffers cached
Mem: 4022 1378 2643 0 342 552
-/+ buffers/cache: 484 3537
Swap: 3815 0 3815

vetapeservice@VTL-B:~> cat /proc/cpuinfo
processor : 1
vendor_id : AuthenticAMD
cpu family : 15
model : 65
model name : Dual-Core AMD Opteron(tm) Processor 8218
stepping : 3
cpu MHz : 2600.186
cache size : 1024 KB
physical id : 0
siblings : 2
core id : 1
cpu cores : 2

Main difference to a " normal" SUSE Linux Enterprise Server 10 installation (there’s about zip normal with that kind of installation, thus the quotes) thus far are:

the build for the VE uses busybox as init
IBM stripped man/info
they are running Xorg/Fluxbox on it

Just don’t ask me why there’s a DE ( d esktop e nvironment) running, it ain’t even hooked up to a monitor. Only reason would be for the RSA’ remote monitor stuff … lala

VMware

Mon, 05 Jan 2009 17:52:23 +0000

Here’s where I’m at currently with my progress to getting my VMware certifications.

VMware Certified Professional on Virtual Infrastructure 3.5 - passed in 12/2008
VMware Certified Professional on vSphere 4 - passed in 12/2009

VMware Certified Professional certificate

Microsoft

Mon, 05 Jan 2009 17:49:51 +0000

Here’s where I’m at currently with my progress to getting the MCSE - Messaging certification.

Core exams on networking systems (0/4)
- Managing and Maintaining a Server 2003 Environment (70-290) - 04/2009
- Implementing and Managing a Server 2003 Network Infrastructure (70-291)
- Planning and Maintaining a Server 2003 Network Infrastructure (70-293)
- Planning and Maintaining a Server 2003 AD Infrastructure (70-294)
Core exams on client operating systems (1/1)
- Installing, Configuring, and Administering 2000 Professional (70-210) - 09/2003
Design exams (0/1)
- Designing Security for a Server 2003 Network (70-298)
Messaging exams (0/2)
- Implementing and Managing Exchange Server 2003 (70-284)
- Designing a Exchange Server 2003 Organization (70-285)

New Theme

Sun, 04 Jan 2009 17:47:48 +0000

Well, since it’s yet another new year (oh, Happy new year! by the way ..), I decided to drop the old crybook and switch over to iNove, which I think looks quite good with a few additions.

If anyone finds something that ain’t working or looks just wrong, tell me please.

More MD weirdness

Mon, 29 Dec 2008 17:55:17 +0000

Well, at last I’m getting somewhere with my troubles. This only seems to be happening when creating an RAID5 multiple device with four disks, this doesn’t happen with three.

Now, the next thing I tried was to create a three disk array, and then adding the fourth disk as spare and then extending the array with that fourth disk. After that, all these errors seem to appear again yuck So I either possess rather faulty disks, or something else is fishy, since I’m having another four disk RAID5 array with the old disks …

MD (Multiple Devices) weirdness

Mon, 29 Dec 2008 17:15:20 +0000

Well, I don’t think my problem has anything to do with the DawiControl card anymore. I did a little experiment today. I created a 1TiB EXT3 file system on a single drive (one of the new 1TiB drives obviously) and started syncing data over to it (roughly 800MiB).

Now, then I unmounted the drive(s), ran fsck -C -f /dev/sd${deviceletter}1 and it went through without any trouble. Then I removed the partition and created a 1GiB partition on each drive, which I then used to build a new device mapper RAID5 array (with EXT3 on top …).

VBscript undamp; Active Directory and printers (continued)

Fri, 05 Dec 2008 21:54:09 +0000

As I posted earlier, I tried working around some limitations in Microsoft’s Active Directory by teaching the script some intelligence.

But, since we recently started using Thin Clients, all the stuff I did with the fancy vbs was just a waste-of-time. Turns out, Windows XP Embedded doesn’t work quite the same as a " normal" Windows XP (that’s where I tested the script on), and it simply dies when running the WMI Query. Bollocks.

IBM TS7530 and DNS

Sat, 22 Nov 2008 17:31:50 +0000

Well, we had our TS7530 delivered in late September, the day after the IBM service guys came by to prep the VTL for our needs (IBM sells the thing as black box). Now, since that day; they fought with the Call Home functionality. The trouble was simply, that the Call Home Service running on the Virtualization Engines just didn’t start.

After about 6 weeks of trial and error (and the IBM service guys popping in every second week), they finally found the cause of the Call Home Service not being able to start. Domain Name Resolution. Neither the IP addresses of the VE’s nor the VE console were registered in our DNS/or local host files.

Nagios and check_ram yet again

Fri, 14 Nov 2008 18:08:30 +0000

As some people know, I previously " created" (mostly modified the check_swap plug-in to print RAM usage) check_ram in C. Now one of my problems for the past few months was putting the C plug-in as well as " supported" environment under the same hat. Today I had another look at the amount of available plug-ins in NagiosExchange. There are quite a few plug-ins available, but as I do have some experience with Python, I used the one written in Python.

It was rather easy hacking in support for performance data into it, as the below shows. Someone else already posted a non-unified diff for performance data support, but that ain’t quite right according to the Nagios plug-in development guidelines.

IBM TS7530 engine failover and HBA mode

Tue, 28 Oct 2008 15:21:06 +0000

Well, when they delivered the VTL about four weeks ago, nobody figured this thing would be such a mess. Apparently IBM hasn’t set up that much VTL’s with engine failover.

Point being, the VE’s have eight HBA ports (four inside, four outside the black box). Now, as they configured the VTL, the ports were all in initiator mode. And we needed the fourth port in target mode as well, as it’s better to have 4 independent paths to the VTL. The only problem was, the VE console didn’t think so.

IBM TS7530 zoning

Mon, 27 Oct 2008 15:41:59 +0000

At first, as we prepped the zoning for the VTL, we did it WWN-based. Now the trouble with the HBA’s of the VTL is simply that it has different WWPN’s on the same WWN. And WWN-based zoning simply doesn’t allow access to that.

So off we went and switched to Switchport-based zoning, and see. It just works 🤷

Defragmenting all fragmented MyISAM tables

Thu, 16 Oct 2008 20:18:22 +0000

I just had another look at what I wrote the week before last (you know, being home-sick/on vacation has it’s advantages) and additionally read up on " OPTIMIZE TABLE" again. The comments in the manual mention " SHOW TABLE STATUS", which gives you a complete list, but it doesn’t allow you to filter certain kinds of things out (like I only wanted to see MyISAM tables in the list, I only wanted database and table).

Adapter bonding on Linux

Thu, 16 Oct 2008 16:47:23 +0000

Well, today I had a rather weird error. I was testing the adapter bonding on one of the boxen designated as Tivoli Storage Manager Server, when I noticed that the bonding wasn’t working as expected when simulating an error (that is unplugging one of the TP cables for the bond).

Now, the bond had “mode=6 miimon=100” as options. After running “linux bond debug” through Google (which turned up nothing useful, besides one document on the Oracle Wiki about IOS/Linux adapter teaming), I figured “Hey, just lets test switching the arguments.” And guess what ?

Windows Server 2003 Terminal services

Wed, 15 Oct 2008 12:11:18 +0000

Well, once you thought you don’t have any more problems, another one just pops up. I’m currently bashing my head against the wall, why the hell the forwarded (or is it redirected ?) drives are not shown in the in the “My Computer” explorer view. I pretty sure have an idea why (basically, HKEY_CURRENT_USERS\Software\Classes isn’t writeable, but that’s where Windows, or rather the Terminal Services – or whatever is creating the associations), just don’t know a clever way around/by it.

Setting up Linux-HA

Wed, 01 Oct 2008 08:17:09 +0000

Well, initially I thought writing the OCF resource agent for Tivoli Storage Manager was the hard part. But as it turns out, it really ain’t. The hard part, is getting the resources into the heartbeat agent (or whatever you wanna call it). The worst part about it, is that the hb_gui is completely worthless if you want to do a configuration without quorum.

First of all, we need to setup the main Linux-HA configuration file ( /etc/ha.d/ha.cf). Configuring that, is rather simple. For me, as I do have two network devices, over which both nodes see each other (one is an adapter bond of comprising of two simple, plain, old 1G copper ports; the other is the 1G fibre cluster port), the configuration looks like this:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22


udpport 694
autojoin none
crm true
use_logd on
debug false
coredumps false

auto_failback on

ucast bond0 10.0.0.10
ucast bond0 10.0.0.20
ucast eth2 10.0.0.29
ucast eth2 10.0.0.30

node tsm1
node tsm2

respawn root /usr/lib64/heartbeat/pingd -m 100 -d 5s
ping 10.0.0.1

respawn root /sbin/evmsd
apiauth evms uid=hacluster,root

After configuring the service itself is done, one just needs to start the heartbeat daemon on both nodes. Afterwards, we should be able to configure the cluster resources.

I find it particularly easier to just update the corresponding sections with cibadmin (the man-page really has some good examples). So here are my configuration files for two resource groups ( crm_mon doesn’t difference between resources and grouped resources, it’ll just show you that you configured two resources).

Subversion via HTTP(s) and mod_rewrite

Sun, 28 Sep 2008 19:17:01 +0000

Well, I just finished my wild-goose chase with Apache and subversion regarding a rather weird error. I recently reinstalled our subversion box, and ever since then I was unable to commit anything new to any of the repositories. Subversion told me this:

1
2
3


svn-client admin-scripts [1] > svn ci -m "Directories for Tivoli Storage Manager Scripts."
svn: Commit failed (details follow):
svn: MKACTIVITY of '/svn/admin-scripts/!svn/act/someid': 302 Found

Apache didn’t say much about it either, besides this particular line:

High Definition Multimedia Interface

Thu, 18 Sep 2008 06:25:40 +0000

Well, I bought myself a new TV last week (and it was finally delivered on Monday), which came with a HDM Interface. I also bought me a DVD player some time between New years eve and now (I don’t really remember when, I guess I could look at the invoice, but I’m lazy) with an HDM Interface.

Up till now, I had a SCART cable to interface the DVD player with my TV (the old one was really old, didn’t have no other interface). So when my brother said he was gonna go shopping, I told him he should bring me a HDMI cable. And he did that without any whining or complaining. He only said, I owe him 40 EUR …

What's up, dude

Tue, 16 Sep 2008 08:49:49 +0000

Some people might ask, " Gosh, what’s up with you ?" .. Well I’ve been incredibly busy with work the last month (sheeesh, another month already passed by). We finally finished the public tender; gonna get some of the components next week (that is the library extension, the LTO4 drives and cartridges, two brand new Cisco MDS9134 and some Fibre channel hard disks for the existing DS4700). After work, I made my usual visits in the gym and well, after I was home some relaxing, kicking up my feet and doing nothing (as in zip).

zypper-update-report (was: patch2mail for SLES10)

Tue, 09 Sep 2008 23:11:01 +0000

Well, after some more refining I think I finally have a script I ain’t never gonna touch again (unless something breaks, which can happen quick as we all know).

The script now uses a sysconfig file for the common settings (like sender, receipents, categories to scan for), so it may be deployed en mass.

/etc/sysconfig/zypper-update-report

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20


## Type: string
## Default: root
## Config: ""
#
# Sender address for the update report
FROM="Yourupdatemonkey "

## Type: string
## Default: root
## Config: ""
#
# Receiver address for the update report
#RECEIPENTS="tehsysadmin@barfoo.org"

## Type: string
## Default: "securty recommended optional"
## Config: ""
#
# List of groups, to include in the report
CLASSES="security recommended optional"

/usr/local/sbin/zypper-update-report

Custom macros in host definitions

Sat, 16 Aug 2008 19:10:37 +0000

Well, I was playing with the hostgroup inheritance earlier. One problem with that is, if you define a duplicate service Nagios is really unpredictable or rather inconsistent. Now, as Thomas Guyot-Sionnest told me, I should try custom macros for the check definition. So what I did was the following:

templates/host-windows.cfg

1
2
3
4
5


define host {
 name         generic-windows
 register 0
 _RDPPORT 3389
}

hostgroups/windows.cfg

Debugging rug

Fri, 15 Aug 2008 19:19:06 +0000

Well, it’s 7pm. I’m sitting at home and thinking about why in gods name rug isn’t adding my update repository. I can add the service using yast inst_source, but when yast then syncs with ZenWorks, it tells me something like:

Failed to get repomd/repodata.xml; Reason: 530 - Access denied

So my fellow co-worker turned on the debug-logging and we quickly found out why: rug isn’t using the command line credentials I was passing.

Suspected NRPE weirdness

Sun, 10 Aug 2008 07:55:28 +0000

Well, I just noticed a really weird thing, when you have command line arguments enabled.

Here’s a snippet from my nrpe.cfg:

1
2


dont_blame_nrpe=1
command[check_disk]=/usr/lib/nagios/plugins/check_disk -E -w $ARG1$ -c $ARG2$ -p $ARG3$

Now, if you’d check the free space for the root, it ain’t gonna show any inode percentage (that one isn’t what I’m talking about). But if you have to use bind mounts like I do (Tivoli needs a separate " domain" -- that is a separate mount point for each domain), you might wanna check the free space on the real device, rather than the free space on the bind mount (which is gonna show you the free space of the parent file system - in my case the root fs).

Nagios 3 and hostgroup inheritance

Fri, 08 Aug 2008 12:24:01 +0000

As I wrote some time ago, I was trying to utilize Nagios 3.x’s neat feature of " nested" hostgroups. Well, as it turned out I thought it worked differently; basically like this:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24


define hostgroup {
 hostgroup_name a-parent-hostgroup
 alias Our toplevel parent hostgroup
}

define service {
 use generic-service
 check_command check_dummy!0!
 service_description SSH
 hostgroup_name a-parent-hostgroup
}

define hostgroup {
 hostgroup_name a-child-hostgroup
 hostgroup_members a-parent-hostgroup
 alias Our child hostgroup
}

define service {
 use generic-service
 check_command check_dummy!0!
 service_description LOAD
 hostgroup_name a-child-hostgroup
}

As you can cleary see on line 14, I thought you define the relation between two hostgroups in the child hostgroup. The problem with it was basically (as I said in the earlier posts), that all the services defined for the child hostgroups are handed on upwards to the parent hostgroup(s).

Nagios 3-x and check_pcmeasure-pl

Thu, 07 Aug 2008 18:23:18 +0000

Recently we purchased a MessPC station for our server room, and my co-worker and myself had the wish it to be integrated within Nagios. Well, so far so good. The first I did was put both keywords into Google.

That pretty fast brought up the manufacturer’s page (sorry it’s German only) about the device supporting Nagios by means of either SNMP or a specific plugin called pcmeasure. So I went ahead and tried both ways.

More VirtualCenter troubles (fini)

Thu, 07 Aug 2008 18:03:46 +0000

Well, today the support request came back. Seems one of the originally linked VMTN dicussions really is the only way:

Export the customization specification
Edit the XML file
Import it again

The related part inside the customization specification should then look like this:

1
2
3
4


<type>vim.vm.customization.Password</type>
<plainText>true</plainText>
<value>Password01</value>
</password>

So if you ever think about switching the default VirtualCenter certificate (for whatever reason), make sure you use the above workaround. Otherwise VirtualCenter is gonna fail miserably during the customization phase of the cloning process.

SUSE Linux Enterprise Server 10 on VMware ESX (finished)

Wed, 30 Jul 2008 18:08:59 +0000

As I pointed out in my past posts, I was having some weird errors with SLES10 regarding mounting CD images inside the guest (as well, as it turned out, on the physical hardware).

Now, finally, after about a week or so Novell finally released an updated kernel package today. So the error per se is fixed, I can use my CD drives again, as well as update my virtual machines by means of virtual center, without the trickery of copying the linux.iso from /vmimages/tools to the guest and mount it by means of mount -o loop.

Yet another VMware error

Wed, 30 Jul 2008 18:00:49 +0000

Today I was moving a pretty standard SLES10 virtual machine to another host, when the migration dialog showed me this:

fault.MemorySizeNotRecommended

And if you now think, the virtual machine is something special take a look at those settings:

Virtual machine configuration

I don’t know what to think about that error message. Googling for it doesn’t reveal that much about it. If anyone out there got an idea, I’m open for suggestions.

Fixing vmkernel symlinks

Wed, 30 Jul 2008 07:19:32 +0000

Since I do happen to be in the situation pretty often where the kernel inside a VM is newer than what VMware currently has in their tools (as in the SUSE kernel is newer than the binary modules built by VMware), here’s a quick reminder for myself on how to to fix the .ko symlinks.

1
2
3
4
5


for file in /lib/modules/$( uname -r )/misc/*.ko ;
do
 rm $file &&
 ln -s /lib/modules/$( uname -r )/misc/${file/.ko/.o} $file
done

Relaxing weekend

Mon, 28 Jul 2008 17:18:10 +0000

There I was, enjoying our new patio and trying to get a tan outside (we had plenty great weather during the weekend).

The new patio

Now, all of the sudden there was this weird noise I couldn’t classify (which I heard while listening to my iPod completely cranked up …), so I stood up.

Combine harvester mowing down rape

They were finally mowing the rape field behind our house … hah!

Microsoft Cluster Services powered by IBM

Sat, 26 Jul 2008 18:47:46 +0000

If you think back, I talked about my problems with MSCS while utilizing the IBM RDAC Multipath driver for Windows.

Everyone I talked to about this, including our IBM business partner and it’s systems engineers; as well as some IBM systems engineer (who in fact was an freelance guy hired by IBM), told me it had to do with how we did the zoning (stuffing every controller into a single zone), and that would be the reason why the x3650 was seeing that many drives.

Connecting to a remote console with MSTSC 6-0-6001

Wed, 23 Jul 2008 13:02:00 +0000

Well, as one can read in about every damn post you can find for that topic, the /console switch is now silently ignored, as well as the rdp file option " connect to console:i:1".

Now, what you don’t find anywhere (only in some scenario explanation), that it is allowed to specify the mode (ie /console previously and now /admin) within the full address parameter.

Scenario: In the RDC client UI, you specify Computer_name /console in the Computer box (where Computer_name represents the name of the remote computer to which you want to connect), and then click Connect.

Nagios Hostgroup Inheritance (continued)

Sat, 19 Jul 2008 09:41:21 +0000

Well, it turns out that my thought was ultimativly flawed. When defining the hostgroup_members in the lower tiers, nagios is association the checks from the lower tier with the upper tiers. Thus propagandating all checks upwards, and me ending up with ~250 checks instead of ~150.

Gonna have to try to define the dependency backwards, maybe that’ll help. But that’s a topic for Monday. Guess I’ll finish viewing Ghost in the Shell - Stand Alone Complex first.

Extending VMotion compatiblity (continued)

Mon, 14 Jul 2008 17:41:40 +0000

Remember my last post about cpu masking ? Well, turns out that you can do it to a “template”.

The only point you don’t need to do, is to mark the VM as a " template". You still can clone it and move it around and all that other stuff, but the good part is, that the cloned VM keeps the cpu mask set to the " template" 🤷

Nagios3 with Active Directory authorization on SLES10

Mon, 14 Jul 2008 17:32:04 +0000

Well, it seems to be getting a “trend” for me, to integrate stuff into our Active Directory. Now that I know why, and how easy that is, I expect to add more stuff. The good thing about the integration is, that you only need to maintain a single source for authorization.

The bad thing about that is, that stuff becomes dependent on the Active Directory (we do have four domain controllers, so that should be fine).

Managing unixODBC connections on SLES10

Thu, 03 Jul 2008 06:42:27 +0000

Recently I got the task, to implement unixODBC/freetds on one (well, it’s really three) of our web servers, as someone wanted to use Microsoft SQL Server 2005 with PHP (without using the MSSQL functions, which PHP provides soo nicely; don’t ask me why).

With that I also got a set of " instructions" on how to install freetds from source (remember, I was a Gentoo dev, so I know my way around, when it comes to building from source), as well as a small set of instructions on how to create the connection.

subversion on WebDAV with Active Directory authorization on SLES10

Sun, 29 Jun 2008 17:49:29 +0000

Okay, so I ended up toying with subversion via WebDAV on SLES today (I know, I know .. it’s bloody Sunday). It wasn’t much of a hassle though, after reading this. Sure, I made a few errors at first (simply confused the logic behind " Location" and " Directory"), but after that plain subversion commits via WebDAV (thus utilizing Apache) worked fine.

For POC or as a hint to myself, here’s where and what I needed to add/change:

The clue to build ppc64 RPM's

Thu, 26 Jun 2008 15:52:22 +0000

Remember, I talked about building RPM’s on SLES10SP2 on ppc64 ? Well, turns out I was rather stupid .. and it was rather simple (don’t ask me why I didn’t think of that). I tried asking solar, I used Google (apparently with the wrong search parameters), nothing though. Not a clue.

Today it bugged me again, so I used Google again. This time with " ppc64 suse rpmbuild", and guess what I saw within the preview of the second hit ..

Removing newlines (n) with sed

Tue, 24 Jun 2008 17:35:42 +0000

Today I had to search again on how to remove newline special characters with sed. Thanks to Kamil over at linux.dsplabs.com.au, I found it again rather quickly.

Now, this is just for my own safekeeping, so I don’t end up googling for it again … 🤷

`1`	`echo -e "Line containing nnewlines!" \| sed ':a;N;$!ba;s/n//g'`

Looong time

Fri, 20 Jun 2008 00:23:38 +0000

Well, it’s been a loong time since I first thought about retiring (yes, I know that #-dev’s topic states " developer blogs" ain’t for announcing important things, but my blog has to do for this; if not, I don’t care anymore :!: ).

But I think it’s about time for me to leave. I haven’t done much lately, I’ve been soo damn busy with work these last months like I would never have imagined. I gave it some more thought, and I finally got to the point ( again I might add) where all just annoys and/or frustrates me.

All the damn bickering, the childish behaviour Josh talked about (" noooo, that’s my TOY!"), the constant abuse of power (hey #-chat, #-kde ops). I thought most of us would at least try and behave like the elderish people we are (well besides the few of us, who really are children by law’s definition - hey there welp, omp, keytoaster ;-) ). But I guess that’s just been an imaginary thought I had .. * shrug*

Updated `check_ram' plugin

Tue, 17 Jun 2008 09:25:21 +0000

As I was building the updated RPMs for SLES10, though needed to refresh my old patch. Also, I was getting strange messages from autotools and fixed these quirks, Now, I prepped a patch for it, and finished building new RPMs for i586 and x86_64.

GPO (behind the scenes)

Thu, 05 Jun 2008 06:46:20 +0000

Well, to begin with we had this really weird problem that the thin clients as well as the terminal server would only load user based group policy if you are a member of the group of local administrators. While that’s ok for the thin clients (users can’t actually change something unless they log in as “Administrator” - don’t ask me why), it’s a real no-no on the terminal server.

Windows XP Embedded, Windows Server 2003 and GPO settings (the solution)

Wed, 04 Jun 2008 19:35:57 +0000

OK, so about an hour (yeah, yeah; I know .. I shouldn’t be working at that time, but it really gave me sleepless nights) ago, I finally figured out why the hell both my Windows XP Embedded thin clients as well as my Windows Server 2003 systems where showing this real weird behaviour when applying group policies, or more precise the user based configuration of a group policy.

Can't find sheep^Hsleep

Sun, 01 Jun 2008 13:37:57 +0000

Ok, so I ended up lying in bed for two hours, so I stood back up and searched for some stuff that floated my mind. The end result seems to be the following:

VIA EPIA SN10000EG (199,30€)
2x Kingston ValueRAM SO-DIMM 2GB PC2-5300U CL5 (DDR2-667) (each 31,31€)
Club 3D GeForce 7300 GT, 256MB DDR2, 2x DVI, TV-out, PCIe (CGNX-HG736) (55,00€) – still need to find a riser card
Transcend SSD/IDE 8GB (169,00€)
2x Samsung SyncMaster 204B, 20.1", 1600x1200, VGA, DVI (LS20BRDBSQ) (each 309,00€)

I still need to find a fitting power supply, but I’ll leave that for tomorrow. The above leads me with about 520,00€ for the “PC” and 680€ for the TFT’s (as I don’t have any). And that’ll give me a full silent (as in not a single moving part), quiet workstation for my desk.

Retiring people

Wed, 28 May 2008 12:55:34 +0000

I’m not sure whether or not I blogged about this before, but here it is just for me to actually remember what, in which order I need to do. If you got the list in form of a csv file, simply do the following:

1
2
3
4


wget -q http://tinyurl.com/4atkz7 -O - | grep "(" | cut -d'(' -f2 | cut -d')' -f1 | awk '{ print tolower($1) }' > retirements
for developer in $( < retirements ); do
 retire.py --metadata $developer /cvs/gentoo-x86/ | diffstat > ~/metadata.$developer
done

That’ll give you a detailed list of which metadata.xml need to be changed.

Rescuing a rebooting machine that's hanging

Sat, 24 May 2008 17:14:56 +0000

One of my co-worker approached me today with a weird problem. Yesterday he had a disk in a 900GiB array failing which he replaced. After that, he run a rebuild/verification, fsck’ed the file system and tried to mount the volume again.

Apparently the mount produced a kernel oops (guess what, the 900GiB is running reiserfs), thus leaving the kernel tainted (or what do they call it ?). So he tried to reboot the box but it didn’t reboot. It started rebooting but then hung (as in not continuing the reboot). He tried to ssh back to the box, and it worked just fine.

IBM (Tivoli) Integrated Solutions Console

Fri, 23 May 2008 17:28:03 +0000

Here I am, preparing our environment for the first (of hopefully many) tester for our upcoming VTL project. So I ended up installing the ISC and Administration Center for Tivoli Storage Manager on a 64bit guest (that is SLES10 for AMD64), just because I forgot to include support for later versions with our current running one. Guess what, na- na na na na. Exactly, didn’t work, the same errors I got while trying it before in a virtual environment. “Portlet is not available.”

Getting a FC HBA to rescan it's attached devices

Mon, 19 May 2008 11:50:48 +0000

If you’re using a 2.6 based distribution, the FC HBA (or more correctly the corresponding driver) should create entries in /sys/class/scsi_host. Now you only need to get the host-number (basically the # of the host bus adapter) and you can get started ..

Simply doing this, is going to tell the FC HBA “rescan” and discover new devices ..

`1`	`echo "1" > /sys/class/fc_host/host/issue_lip`

That should do the trick, and you should be able to get udev to recognize the new devices attached via FibreChannel without the need to reboot the whole box (which might be a bit tricky).

April 19th

Sun, 20 Apr 2008 18:51:05 +0000

Well, as some people already figured out; yesterday was my birthday. Chrissy noted it on my blog, as well as about every channel we’re together in (so did Chris); so thanks a lot for that 😉

Anyway, Saturday morning as I was forced to head downstairs due to my aunt calling (that was at 9am), my brother managed to take a shot at the presents as well as something else:

open-vm-tools for Debian Etch

Sun, 20 Apr 2008 12:16:29 +0000

Well, after a loooong time of trying to get the modules and all the other stuff (read: init-script for the guest daemon and modules) working, I think I’m about there.

I finally fixed a long-standing issue, with the postinst/prerm scripts, and the tools should be about ready. Gonna try and send it Daniel Baumann’s way (that is the Debian Maintainer), for proper inclusion into Lenny.

I (successfully) tried splitting the Xorg parts from the " normal" open-vm-tools, as I usually don’t want Xorg installed on any of my virtual machines. Thus leaving me with open-vm-tools, open-vm-modules and open-vm-toolbox (and open-vm-source) as a list of packages one could install.

That's why ---

Sat, 19 Apr 2008 08:06:51 +0000

… I’d break a butterfly on a wheel … I was coming out of the office, and found my car this way:

Up close

Birdie view

Well happy me, I had some sort of cleanup detail for 20:00 local time (as in get all that birdie poooo of my damn roof!), and surprisingly once I was finished cleaning all the shit up, it started raining. Now, I’m never, * ever* gonna park below that dove/whateverdamndevilbirdyouare housing tree no more!

Software support and key account managers

Mon, 14 Apr 2008 12:24:59 +0000

As Mike wrote about his experiences with hardware vendors, I’m gonna devote this here post to my favorite software company in the world. We recently bought two copies of a software called " 2X Application Server Enterprise Edition". As one would think from reading the spe cs of the software, it’s near a Citrix solution (which it is, at least for a small part); but in return it’s faaaar away concerning the price. Just so you get an idea, about what I’m meaning with " faaar":

1
2
3
4
5
6


Windows Server 2003:
Standard Edition: 2 * 91,00
CAL: 50 * 6,00
Terminal Server CAL: 50 * 17,00
 ___________
 1.332,00

The above are fixed costs, you need them anyway as both Citrix as well as the 2X solution is only working * on top* of Windows Server 2003 Terminal Services.

Now, here’s the real comparison between 2X Application Server & Loadbalancer and Citrix XenApp Platinum Edition:

1
2


2X 2 * 1510,00 = 3.020,00
Citrix 50 * 393,00 = 19.650,00

While 2X is licensed per terminal server, XenApp is licensed per user. As you can see from the above prices, the 2X solution is roughly 1/6 of the Citrix XenApp solution.

TYPO3 hogging

Tue, 08 Apr 2008 21:28:44 +0000

Well, we do appear to be having some strange load problems with our main TYPO3 box hosting several home pages of the local universities, as you can see below.

LOAD on t3node1 between 05:00-19:00 on 2008/04/07

We repeatedly tried to figure out which of them was the one responsible, but neither I nor the other Unix sysadmin knew a better way to figure out the load each TYPO3 installation was causing (since there ain’t no phptop or something similar). But since today the new semester started, we figured it might be good to finally figure which one it was. And a few minutes (as in one or two) wouldn’t be much of a problem compared to the advantage we’re getting out of it.

April weather

Tue, 08 Apr 2008 07:22:29 +0000

Well, it’s April. And usually when it’s April, there’s April’s weather. In the morning I was rather surprised by the weather.

And after I picked up Michel, we some when arrived at work (that is one hour later), we had our own adventure park in front of the work place:

Collapsed trees

Apparently, the trees in at the entrance collapsed (thanks to Michel for the pictures), so we had to make our way through somehow … was rather funny way to start the day … 🤷

Creating multi-distribution RPM/XML repositories

Wed, 02 Apr 2008 14:36:05 +0000

Well, as we do have quite a few custom built RPM’s, I was searching for a new solution to manage the repo(s). Currently I do have a single repository per distribution.

One thing one needs to know about createrepo (from createrepo), it doesn’t support this type of thing in the first place. So I had to come up with another way of doing it. First, I created a proper layout (much like the Debian Official Repository layout):

metadata-xml (the second)

Sat, 15 Mar 2008 00:04:27 +0000

As I was kinda bored after work today, I had a closer look at what I saw during my fuckup in the morning. Well, Steve said, that when he looked at metadata.xml it’d be " really common" .. still that isn’t making it right ..

There is a reason we do have a herds.xml (exactly for the reason to associate people with packages, and that’s what the tag is for in metadata.xml) file. So after a preliminary look through the repository, here are the winners:

metadata-xml (the third)

Fri, 14 Mar 2008 20:14:28 +0000

So Petteri came up with a nifty python script ( local), which in return spit out this. Which generated a rather complete list ( local), that looks like this:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50


700: perl
569: maintainer-needed
128: media-video
126: xemacs
47: sound
32: ha-cluster
32: crypto
19: desktop-misc
16: netmon
15: forensics
13: web-apps
10: pam-bugs
8: vserver-devs
8: mips
8: embedded
8: app-backup
8: apache-bugs
8: alsa-bugs
7: net-im
7: kde
6: tcltk
6: media-tv
6: dev-embedded
5: voip
5: theology
5: samba
5: net-p2p
5: freedesktop-bugs
4: sparc
4: java
4: graphics
2: net-mail
2: ldap-bugs
2: kernel
2: fonts
2: cpp
1: x11
1: wxwidgets
1: www-servers
1: tex
1: shell-tools
1: sgml
1: sci
1: qmail-bugs
1: python
1: proaudio
1: media-optical
1: kerberos
1: hp-cluster
1: amd64

To be or not to be ---

Mon, 10 Mar 2008 12:25:56 +0000

… that’s the question. I’ve been thinking lots and lots about my involvement with our " beloved" distribution.

I talked to some of the users (that is Gordon), some fellow developers (hello Christina, Łukasz, solar, Jorge, Anders) about whether or not I’m actually still wanted and/or needed. Turns out, the collective opinion is, that I am fun to have around ( 🤷 don’t ask me why, I don’t find myself particularly funny/amusing) and that’d I’d be the person to have around.

Integrating Windows XPe into Active Directory

Fri, 07 Mar 2008 22:12:44 +0000

As the guys over at FreeWyseMonkeys demonstrated with JoinDomain.zip, it ain’t hard to integrate a Windows XP Embedded system into Active Directory.

You basically need this:

A system powered by Windows XP Embedded
netdom.exe (from any Windows XP - SP2 in your MUI language)
some know-how, on how to use netdom to integrate it into your AD

Everything else is already present on the Windows XP Embedded systems I’ve seen. Then let’s get it on !

Backup solutions

Fri, 07 Mar 2008 21:38:52 +0000

Well some people apparently completely don’t understand the use of a backup client like dsmc, additionally they don’t seem to have the slightest clue on how to draw up a “clever” backup solution.

Lemme describe the situation for you. We do have two Solaris systems at work, housing our mailing system(s). Now apparently, people are unable to install the Tivoli Storage Manager Client on Solaris (or get it working properly - which people are blaming on the software not working).

OCFS2 follow-up

Fri, 07 Mar 2008 07:29:26 +0000

OK, it turned out that said colleague wasn’t responsible at all. Turns out, the real trigger was me creating a new volume on our SAN, on the same array that houses the OCFS2 volume.

Apparently, during creation of an additional SAN volume, all other SAN volumes in this array are either read-only or delayed during that time, as you can see from the following log:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29


kernel: (13,3):o2hb_write_timeout:242 ERROR: Heartbeat write timeout to device sdd1 after 12000 milliseconds
kernel: Heartbeat thread (13) printing last 24 blocking operations (cur = 4):
kernel: Heartbeat thread stuck at waiting for read completion, stuffing current time into that blocker (index 4)
kernel: Index 5: took 0 ms to do submit_bio for read
kernel: Index 6: took 0 ms to do waiting for read completion
kernel: Index 7: took 0 ms to do bio alloc write
kernel: Index 8: took 0 ms to do bio add page write
kernel: Index 9: took 0 ms to do submit_bio for write
kernel: Index 10: took 0 ms to do checking slots
kernel: Index 11: took 0 ms to do waiting for write completion
kernel: Index 12: took 2002 ms to do msleep
kernel: Index 13: took 0 ms to do allocating bios for read
kernel: Index 14: took 0 ms to do bio alloc read
kernel: Index 15: took 0 ms to do bio add page read
kernel: Index 16: took 0 ms to do submit_bio for read
kernel: Index 17: took 0 ms to do waiting for read completion
kernel: Index 18: took 0 ms to do bio alloc write
kernel: Index 19: took 0 ms to do bio add page write
kernel: Index 20: took 0 ms to do submit_bio for write
kernel: Index 21: took 0 ms to do checking slots
kernel: Index 22: took 0 ms to do waiting for write completion
kernel: Index 23: took 2004 ms to do msleep
kernel: Index 0: took 0 ms to do allocating bios for read
kernel: Index 1: took 0 ms to do bio alloc read
kernel: Index 2: took 0 ms to do bio add page read
kernel: Index 3: took 0 ms to do submit_bio for read
kernel: Index 4: took 9995 ms to do waiting for read completion
kernel: (13,3):o2hb_stop_all_regions:1682 ERROR: stopping heartbeat on all active regions.
kernel: Kernel panic - not syncing: *** ocfs2 is very sorry to be fencing this system by panicing ***

OCFS2 fun

Thu, 06 Mar 2008 10:31:05 +0000

Turns out, that said colleague has been playing with NFS on one off the web nodes, thus apparently rendering the remaining nodes offline (or semi-offline).

Now after all web nodes hung themselves, we had to hard reset them, now everything is tingly again .. yay for a great first day …

EPIA fun

Tue, 04 Mar 2008 19:39:07 +0000

Well, as for replacing my current fileserver (which I seriously need to consider replacing), I’ll just pick up these things:

3WARE 9550SXU-8LP (that’s 399,00€) plus riser card
VIA EPIA EK 8000EG (that’s 201,69€)
Kingston ValueRAM DIMM 1 GB DDR-400 (that’s 57,00€)
4x Seagate ST31000340NS (that’s 279,00€ each - making a subtotal of 1.116,00€)

So after browsing some more for a replacement for my current fileserver, I’d like to share the latest stages with you people. Thanks to Mike (who mentioned that binutils-2.18* already does the LDFLAGS="-Wl,-z,relro" part) I replaced it with "-Wl,-O1". Same old place, there’s fresh stages … (and thanks again to Mike, with working util-linux-2.13-r2).

Getting the 2X service up and running

Thu, 21 Feb 2008 19:31:18 +0000

As I mentioned before, we decided against the Citrix Presentation Server solution in favour of the 2X LoadBalancer and ApplicationServer combination. You’re gonna say, but Citrix does the same and it’s only one " application frame". 2X is exactly the same.

Zend Optimizer again

Tue, 19 Feb 2008 19:15:54 +0000

Well, I happen to be back at my favorite application. Today I stumbled upon a " nice" thing. If you turn on the Zend Optimizer (doesn’t matter whether it is 2.6.2 or 3.3.0), one of the TYPO3 back ends ain’t showing any content in the preview pane. Once you turn the Zend Optimizer stuff off, it works without a problem.

O RLY ?

And as Zend stated on their " Support Forum", they don’t really support the Zend Optimizer stuff in the first place. Which is nice, what for do you need the Zend Guard shit in the first place ??

Been a while

Sun, 17 Feb 2008 08:53:16 +0000

Well, it’s been quite a while since most of the people last heard a word from me. The last few months I’ve been extremely busy with work-related tasks (and as a side-effect of that, didn’t want to spend much time in front of the computer after 9 hours of work). I also started spending more and more time in the gym, like nearly two hours every Tuesday and Thursday.

I finally fixed our replication issues, we do now have a working! MySQL Multi-Master ( 1. Node, 2. Node -- bear in mind, this boxes are only serving MySQL and nothing else, so don’t use these configurations on mixed setups) Replication Setup as database back end for our TYPO3-vHosts.
all the web nodes are now serving the content from a clustered, shared SAN volume (is that a good thing ? 😛 - don’t know yet …)
our VI environment is getting more and more acceptance (even if you hear some complaints now and then, like “awww, damn that crap my 4GiB RAM, 2x3.0GHz Windows 2008 is running soooo choppy” - simple answer, don’t use Windows Server 2008 and/or Windows Vista!)
I finished prepping our VM templates (at least the Windows ones)
we’re still putting together the plans on whether or not invest into a VDI solution.

The next few weeks are gonna be as frantic as the weeks before, I still have to migrate a lot of TYPO3 installations to our new cluster (which sadly needs time, as we need to wait for DNS changes to propagate). Honestly, I might be ending up extending the SAN volume for the MySQL data storage, as even with only three somewhat busy sites, the binary log of the last 5 days is about 2GiB in size. And we still have ~ 20 other busy sites on a separate box.

Scaring people

Sun, 17 Feb 2008 08:49:24 +0000

I just found a rather oldish picture of myself. The date says it’s from last year ( Fri Feb 9 22:33:06 2007 to be exact) …

Me with beard! (Or: WHO THE HELL IS THIS ?)

One year later, I can’t imagine having such a beard ever again …

Windows Server 2008

Sat, 16 Feb 2008 17:41:11 +0000

Well, as it is Saturday and I’m having lots of time (whereas I’d usually spend it working), I thought I’d give Windows Server 2008 a try. What interested me most, is the Windows Server 2008 " Server Core Installations", as it’s supposed to lower the security risk (as there is no Internet Explorer, no Explorer nothing running by default, only a simply cmd.exe).

As one of my co-workers requested me to upload the Standard/Enterprise/Datacenter DVD (which he got through our Microsoft Select 6.0(?) agreement) to our ISO’ VMFS, I had the DVD already at hand. As for that, I really love the feature set of VMware.

Other people's property

Sat, 16 Feb 2008 17:34:03 +0000

Well, apparently some people don’t have any value for other people’s property. It’s that way in big cities, but apparently it’s the same is this shitty, lil’ village.

Scratch, top view

Scratch, side view

Whoever did that had serious fun with a key or something else. Tough, if I ever gonna get that person, I’m gonna rip his arse apart. The painters tell me, I do have to expect to pay ~300 EUR, as to the scratch being up to the primer below the upper color layer. So they’ll either have to paint half the door, or the whole door which really pisses me off!

Flushing the disk cache

Tue, 05 Feb 2008 02:46:21 +0000

I’ve been looking for this over and over and over, until I had some inspiration today (thanks to Andew and Chris) .. this has one and only one sole purpose: safekeeping, so I don’t end up searching for it all over again …

To free pagecache:

`1`	`# sync; echo 1 > /proc/sys/vm/drop_caches`

To free dentries and inodes:

`1`	`# sync; echo 2 > /proc/sys/vm/drop_caches`

To free pagecache, dentries and inodes:

PacketPro 1-7-0

Tue, 15 Jan 2008 08:37:41 +0000

After blogging the last time about the PacketPro 450 LoadBalancer appliance, the guys over at teamix seem to have taken that to heart and implemented a rather nifty thing for their new release.

It’s called " Port forwarding", which is basically what you’d figure from the name. It bounces ports around the load balancer, but saves you from creating a separate virtual server (and adding the physical servers to that one), but also saves you from modifying the syslog-ng configuration on the balanced servers.

Deploying VM templates

Tue, 08 Jan 2008 09:38:03 +0000

Ok, so after my first day yesterday after a rather long vacation I today wanted to look at the problem that the Administrator password isn’t changed when using VirtulCenter’s clone customization functionality (which relies at least for Windows on sysprep).

After a short googling, I stumbled upon this.

Simple problem short … Don’t specify an Administrator password for the template. Then you should be able to change the Administrator password when cloning the template. It’s " should", as the VM’s are still updating.

Looking back (yet again)

Mon, 31 Dec 2007 16:10:53 +0000

Well, it’s yet again New Year’s Eve. Yet again a whole year passed by blazing fast, I didn’t manage to get everything done like I wanted.

That includes the following things:

getting a better job (and probably better paid too!)
getting a better life (well, it’s as it sounds like - my current life is rather unhealthy, and thanks to a friend I got the grip onto myself and started changing a few things - like doing a small workout every day, a bit more movement all over the day and so forth)

Which also means I do have some resolutions for the next year …

Nothing to see here - wget stdout

Mon, 10 Dec 2007 18:22:41 +0000

Actually there’s nothing to see here. It’s just to get it somewhere more obvious then my irc logs …

1
2


$ wget -q http://www.kernel.org/pub/linux/kernel/v2.6/incr/patch-2.6.23.8-9.gz -O - |
 gunzip | patch -p1

Life as God it wrote

Wed, 05 Dec 2007 20:21:43 +0000

Well, some of you know I’m a bit clumsy. Ok, I went buying some stuff for Saint Nicholas for the ones I love, which came to me about ten minutes before the shops are closing. Navigated my butt into the car, drove the ~6km to the nearest store (which still had open, that was around 20:00).

Got all I wanted, went back to my car (you know, this one)

this

and put the stuff into the trunk. When closing the trunk, I felt some opposition, so I closed it a bit harder. “Closed” I thought to myself and went back into my car. When turning on the ignition the onbord computer suddenly complained “trunk open”, so I went back out, trying to open the trunk. WTF .. I couldn’t get it open. So I tried again, still nothing.

Device CAL's ain't no Device CAL's

Tue, 04 Dec 2007 08:21:13 +0000

I stumbled upon a real weird problem. Apparently the terminal server licenses called " per Device" ain’t a real per device. From reading on it Microsoft states it like this:

Device-based versus User-based Terminal Server CALs

Two types of Terminal Server Client Access Licenses are available: TS Device CAL or TS User CAL.

A TS Device CAL permits one device (used by any user) to conduct Windows Sessions on any of your servers.

A TS User CAL permits one user (using any device) to conduct Windows Sessions on any of your servers.

You may choose to use a combination of TS Device CALs and TS User CALs simultaneously with the server software.

Frantic work, private life, friends

Sat, 01 Dec 2007 21:19:59 +0000

Well, it’s been a full month since I last wrote something. Back then I had some problems with 2X, Windows Terminal Server and printing (I still have problems, but not those anymore - I resolved them).

Work has been unusual frantic the last month, as well as I don’t pay much interest to all the things in Gentoo anymore (that was an advice from my shrink), as it just keeps putting on my anger/urge to do something nobody wants me to do even more. So I invested my time into doing other things (like baking or reading one of the many books that I buyed of Amazon and didn’t ever get a chance to read) I enjoy more.

Windows terminal services undamp; network printers

Sun, 04 Nov 2007 14:08:05 +0000

Yes, yes. I do list a lot of crappy products (go on, laugh; I don’t really care). Yesterday I had quite a struggle with Microsoft Windows Server 2003 and Terminal services (or more precisely with their way on how to deal with network printers).

As most of you know, there a two (possibly three) different ways on how to do network printers.

would be, to simply share a local connected printer by simply creating a share for the printer
buy a smart printer with integrated print server
a combination of 1. and 2.

We luckily enough do have printers with integrated print servers, so that wouldn’t be a problem. But you get a problem if you’re trying to monitor the printer queue if you simply create a new TCP/IP connection from another target. You simply can’t tell who’s printing what.

screen and UTF-8 (continued)

Fri, 26 Oct 2007 03:47:24 +0000

OK, since I last posted about my problems with screen and irssi being unable to handle unicode chars, I got a lot of feedback (here or on IRC), and actually it was Alexander who pointed me into the right direction. LANG=C doesn’t seem to support UTF-8 characters. So after adding

1
2


export LC_ALL="en_US.UTF8"
export LANG="en_US.UTF8"

to my environment everything is just fine … 😳

Customizing Thin Clients

Fri, 12 Oct 2007 22:14:53 +0000

As some of you know, the company I’m currently working for, recently acquired some thin clients to replace our old computers for the students to work on. Those PC’s are like P3 800 MHz with 512MB RAM and sadly don’t run Office 2007 anymore, so we replaced them with thin clients and are streaming those applications from a Windows Terminal Server cluster (created by and with 2X Application LoadBalancer).

So far so good, getting them to display the applications ain’t hard, the real hard part starts when you want additional things from this Windows XPe (Embedded), like lets say getting them to display a German language.

Nagios undamp; plugins

Sat, 06 Oct 2007 15:12:43 +0000

Since we started utilizing Nagios’s power two months ago, I finally came up with a C-based ram-plugin for nagios. The biggest problem I had with the python and perl based plugins, that some distributions (yes, SLES and Debian) don’t install either Python or Perl.

Since I wanted a manageable setup (as in unified code base across all distributions), I wanted it to work without installing too much. So I took the swap plugin and basically removed what wasn’t necessary and voila!

Thin clients

Sat, 06 Oct 2007 14:13:44 +0000

As some of you people know, we (as in the University) recently purchased some Thin Clients in order to replace some oldish’ computers and solve the software management at the same time.

The Thin Clients ain’t bad, they are Wyse V90L’s and they (as in Wyse) use their own management software to manage and deploy those thin clients and software. The bad thing about that, is it’s using it’s own “Scripting Language” (if you can call it that way - it’s more pseudo scripting since you can’t do much with it besides some basic actions).

Drivers license

Sun, 09 Sep 2007 13:18:47 +0000

Somehow, there still seem to exist honest people on this world … I just found my drivers license in the mail, somehow the office responsible for the district I lost it in (it seems I lost it somewhere in Greifswald, since I got mail from the office in Landhagen) found it in their postbox and immediately mailed it to my address. YAY!

TYPO3 and MySQL replication

Sat, 08 Sep 2007 20:33:13 +0000

Apparently the TYPO3 version we are using, doesn’t play too nice with the MySQL MasterMaster replication.

Sometimes, something like this is going to happen:

1
2


070826 0:44:32 [ERROR] Slave: Error 'Duplicate entry '75-222419149' for key 1' on query. Default database: 't3nb'. Query: 'INSERT INTO cache_pagesection
070826 0:44:32 [ERROR] Error running query, slave SQL thread aborted. Fix the problem, and restart the slave SQL thread with "SLAVE START". We stopped at log 'dbc-mysql1.000192' position 611861372

Well, as you can see from the last line in the log, the Slave-SQL thread found a duplicate entry and thought it is smart to just turn off the thread instead of disregarding the just made entry. So from now on, both databases drift since there ain’t no replication anymore until someone kick starts the replication again (someone being me).

Being oblivious

Sat, 08 Sep 2007 20:25:31 +0000

Well, the title nearly says everything .. I managed to loose my second pair of car keys, today I somehow found out that I was driving without a drivers license, so I have to go to the registration office and apply for a new one, hopefully should be done in about 4-6 weeks. Oh hell, and I have to spend about 40 € on it ..

Well, live kinda sucks if you’re oblivious. Anyway, work is giving me a ass-load of fun right now, so I’m kinda happy, though it’s Saturday evening, I’m sitting back home, just lost all my custom build Debian packages (yes, I happen to use that at work, right after SLES) and listening to Hed PE.

git-lkml for stupid people (like me)

Thu, 16 Aug 2007 14:06:43 +0000

OK, as Stephen recently asked why there is a double inclusion of in kernel/sysctl.c (and I asked Greg and Randy); I finally decided to write a patch to the LKML for possible inclusion.

But, git ain’t easy for people like me (who are used to the easiness of say - subversion or even cvs). So here’s what I did (thanks to Fernando for the help earlier today):

1
2
3
4
5
6
7
8
9


$ vim kernel/sysctl.c
// change something
$ git checkout -b sysctl
// create a new branch from your changes, based upon the master repository
$ git commit -a -s
// commit the changes to your newly created branch
$ git format-patch master..sysctl
// Enter a subject and then a separate description
// and you should have a new file in the current working directory starting like 0001-*.patch

Now you should have a mailable patch, ready to be sent upstream that looks like this:

Praise teh sed

Mon, 06 Aug 2007 22:56:22 +0000

Since my talk with Robin on Thursday regarding the autogenerated userinfo.xml, I finally found some time today to get all the info’s I need out of userinfo.xml.

Since I don’t really want to manually enter all those mail addresses from userinfo into LDAP manually, I figured sed might be my best friend. BUT sed ain’t easy .. But thanks to Fabian and Gilles, I learned something new about sed today ..

Basically I searched for a way to transform userinfo.xml into a datafile for ldapedit.

PacketPro 450 and SSH checks

Sun, 05 Aug 2007 14:51:56 +0000

As apparently the guys at Teamix read my recent blog post about their cluster solution, someone of their technical support called me on friday at work 😳

And pointed out

That I’m free to express my thoughts about their product (which I recently did)
That there is a better way to workaround this issue

He also said, its something which they had asked multiple times. It’s as simple as editing the Virtual Server and changing the service inspection from “Connection” to “None” .. duh

Fujitsu Siemens, onboard NIC's, Quality assurance and vendors

Thu, 12 Jul 2007 19:15:56 +0000

So we bought some Fujitsu Siemens P5916 Intel vPro back in January/February for the Boss and his secretary.

These boxes are quite nice, come with a Core 2 Duo (which is waaay to overrated for simple business applications like Word, Excel, Access and Outlook), but he insisted on having Windows Vista Ultimate ready PC’s.

We got them, as expected completely blank. Wasn’t so much of a problem though, since we have a Select 5.0 6.0 contract with M$. Only problem was, they refused to install Vista (as in freezing after preping the HDD). So I called our local vendor, who told me " Go, grab the latest BIOS from the support page and perform a BIOS update!" - Which I wasn’t so happy about to hear and to do … That didn’t work, the box would freeze on boot now …

SLES, ZendOptimizer and IBM PowerPC(4)+

Wed, 11 Jul 2007 08:40:57 +0000

What would you figure from the above ? Hopefully the rather obvious, that it’s a really shitty combination.

So we figured it would be a nice thing to test our new setup before going into pre-production testing or production, but we don’t have an extra spare box. So we took one of the power4 boxes we have mounted in the rack basically consuming energy all day (that’s about 38kWh a day) and installed SLES10 onto it. Which wasn’t all that bad (at first the box repeatedly started back to AIX, from CD and after convincing the SMS - that’s basically the bios on the power*-boxes also known as System Management Services with a hammer to boot from the first hard disk).

Handling files/directories with spaces in `for'-loops

Sun, 08 Jul 2007 18:58:54 +0000

So I have one or the other file, that needs to be extracted to a directory. And why not name it as the archive itself .. Only problem with it is the handling of variables with bash …

Try it yourself, stuff some directories with a space in inside a variables, and use something like this:

1
2
3


epimetheus tmp [0] $ mkdir files
epimetheus tmp [0] $ touch files/"I hate directories.archive" files/"Me luuv you looong time.archive"
epimetheus tmp [0] $ for i in $( /bin/ls --color=none files/ ); do mkdir "${i/.archive/}"; done

And now take a look at the output of that ..

Dell PowerEdge 1855, DRAC/MC, firmware updates, telnet and csr's

Fri, 06 Jul 2007 09:39:38 +0000

Today I played a bit with our PE Chassis, or more specifically the DRAC/MC (remote management console). One of the things I’ve been experiencing was that the DRAC/MC was rather slow when browsing on the web interface (as in waiting a minute for the jnlp for the KVM to download). So I went ahead, fired up net-misc/atftp on my notebook, put the firmware update provided by Dell in the TFTPROOT and executed this in my telnet session on the DRAC/MC:

miimon, arp_interval and the code

Wed, 04 Jul 2007 19:50:14 +0000

After today’s adventure with the kernel bonding, I just took a look at the code …

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28


 if (miimon) {
 printk(KERN_INFO DRV_NAME
 ": MII link monitoring set to %d msn",
 miimon);
 } else if (arp_interval) {
 int i;

 printk(KERN_INFO DRV_NAME
 ": ARP monitoring set to %d ms, validate %s, with %d target(s):",
 arp_interval,
 arp_validate_tbl[arp_validate_value].modename,
 arp_ip_count);

 for (i = 0; i < arp_ip_count; i++)
 printk (" %s", arp_ip_target[i]);

 printk("n");

 } else {
 /* miimon and arp_interval not set, we need one so things
 * work as expected, see bonding.txt for details
 */
 printk(KERN_WARNING DRV_NAME
 ": Warning: either miimon or arp_interval and "
 "arp_ip_target module parameters must be specified, "
 "otherwise bonding will not detect link failures! see "
 "bonding.txt for details.n");
 }

If I read it right, you only get the KERN_WARNING for “either miimon or arp_interval” only if miimon or arp_interval isn’t set … but at least my config says it is .. 🤷 .. bed time for me :rolling_eyes:

SLES10 on pSeries

Wed, 04 Jul 2007 15:58:39 +0000

Okay, yet another day passed by blazing fast. I had a good day at work, spent nearly the whole day trying to get my bloody systems hooked up to our SAN (which was interrupted by a non-working SAN-switch, disappearing WWN’s, lunch and my trainees), messing around with our internal network, hacking our Blade Chassis switches to get me what I want and some random paperwork.

But first things first .. We installed SLES10 on a pSeries box the other day (I think on Monday), and now I’m trying to get the WWN of it’s Emulex HBA, out of either sysfs or procfs. But whatcha’ thinking ?

Being back home

Fri, 29 Jun 2007 13:31:06 +0000

Yessir, I’m back home. Bought a new bed (god, I forgot how good sleeping can feel) and spent the first two days at work already (yes, it’s Friday afternoon already).

I really thought catching up after having a 2 week vacation would take more time, but it just took yesterday morning (till ~9am). I’m surprised by the taste of black tea with milk and sugar (yes, I was like yikes initially, but I like it pretty much now 😀 ) and by the ability to rise at 7am in the morning 😛

Stuttgart

Fri, 29 Jun 2007 13:24:56 +0000

On Monday I finally got to do an expanded test drive with my shiny, new car (that is driving it up from Stralsund down to Stuttgart). I really can’t complain, the fuel consumption is like I expected (~6.6l/100km while driving between 160 and 180km/h), the noise while driving that fast is quite low (as in you hear the engine but you don’t really consider it noise) and the acceleration is nearly like the one of a F1-car 😛 (at least I’d wish 😉 ). Spent the evening relaxing from the near 950km nonstop trip (yes, only had one stop to put some fuel back into the car), had nice curry (my cousin’s husband made yummy potato curry!!!).

Vacation

Sun, 17 Jun 2007 17:12:22 +0000

Here’s just a note for you people out there, how’re crazy enough and want something from me in the next week (that’s 18th till 26th June):

I’m on vacation …

Means I won’t be around to fix anything (as I’m gonna try and relax a bit), so if you encounter something that you want to fix; consult with the herd (that’s apache/hardened/kernel …) and/or fix it YOURSELF. Just make sure you don’t break it more :rolling_eyes:

Continuing on SLES10

Sat, 16 Jun 2007 16:14:15 +0000

OK, it turns out that I was rather stupid when configuring the my.cnf. As it turned out, the effect I was seeing was due to the presence of two log-bin lines, which looked like the following:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12


[mysqld]
port = 3306
datadir = /mysql/dbase
log = /mysql/logs/dbc-mysql1.log
log-error = /mysql/logs/dbc-mysql1.err
socket = /var/lib/mysql/mysql.sock
bind = 172.16.234.31

# custom paths for binary logs
log-bin = /mysql/binlogs/dbc-mysql1
log-bin-index = /mysql/binlogs/dbc-mysql1.idx
relay-log = /mysql/binlogs/dbc-mysql1.relay

And some lines down there was this:

Back at SLES10

Tue, 12 Jun 2007 19:42:22 +0000

Here I am, sitting at my desk on a Thuesday evening thinking about what happened the last few days.

I finally got to play around with our PacketPro 450 Cluster(nifty LoadBalancing appliance)
We reworked the network the way we want it (and not that tool of a wannabe sysadmin)
We mostly figured out how to do the LoadBalancing right, we just need to find some bugs in the LoadBalancer software (like the thing is failing over to its slave from time to time, but keeping the IP address for himself) or let the guys at teamix do their work and hopefully get a working release within the next week or so
I figured out how to setup interface bonding with SLES10 (it was quite straight forward, thanks to the excellent in-kernel documentation), and we’re using an active-backup mode for now
I still need to figure out how to do the MySQL Master<->Master replication right .. I’m currently building fresh RPM’s on one of those Dell blades (yes, they ROCK!) which will hopefully be finished till I’m at the office tomorrow.
Pt. 5 also includes figuring out how to pass MySQL a custom location for the binary-log, at least that’s what the handbook says in Chapter “5.11.3. The Binary Log” …

When started with the –log-bin[=base_name] option, mysqld writes a log file containing all SQL commands that update data. If no base_name value is given, the default name is the name of the host machine followed by -bin. If the basename is given, but not as an absolute pathname, the server writes the file in the data directory. It is recommended that you specify a basename; see Section B.1.8.1, “Open Issues in MySQL”, for the reason.

Progress with apache-2-2

Mon, 28 May 2007 16:04:10 +0000

We’re finally making some progress with apache-2.2. It left the package.mask on the 8th of May (that’s like 3 weeks from tomorrow), we split some helper scripts into a separate package (app-admin/apache-tools).

I already fixed a few screwup I did myself (like apxs missing from either apache and apache-tools, or the compatibility symlinks being missing), so we “just” need to fix all the modules in the tree before apache-2.2 is going to get the new stable version (and of course anything else depending on. What also remains to do, is committing the new-style virtuals for bug 11007.

Personal progress

Mon, 28 May 2007 15:03:44 +0000

Well, I haven’t blogged in ages (like about a month).

To answer some of the questions I got either via mail or on IRC …

yes, I’m still alive; you ain’t gonna get away that easy 😛
yes, I finally managed to buy my shiny new car

new car
I’m still working on apache, virtualization, mobile, kernel, hardened …

Though I may haven’t been that active recently (I don’t look at CIA or do I count my own commits), I think I managed to close some apache bugs and some of my own. I’m still looking for someone interested in working on the ipw3945 related packages, as I’m kinda sick of that buggish thing.

Bla-bla-bla, yada-yada-yada

Fri, 04 May 2007 06:48:36 +0000

Interesting title … 🤷 I’m sitting back home, in my bed, while I’m supposed to be at work. I’m now a certified sicko due to a common cold.

Watching the toaster series once again (that’s Battlestar Galactica) and trying to think about some things. Heh, well thinking isn’t the right term; it’s more like meditate over stuff happening in the last few months.

Guess this stupid cold is dictating my weekend 😠 and hopefully I’m gonna be better on Monday. Have fun.

AIX 5-3 Linux Toolkit

Fri, 20 Apr 2007 13:07:04 +0000

OK, so I skipped rebuilding a newer RPM version (for now) and I’m currently rebuilding anything that fit’s into app-dev according to IBM …

The list reads like this:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19


$ ls -al ~/app-dev
autoconf-2.59-1.aix5.1.noarch.rpm
automake-1.8.5-1.aix5.1.noarch.rpm
binutils-2.14-3.aix5.1.ppc.rpm
bison-1.875-3.aix5.1.ppc.rpm
coreutils-5.2.1-2.aix5.1.ppc.rpm
cpio-2.5-1.aix5.1.ppc.rpm
diffutils-2.8.1-1.aix4.3.ppc.rpm
flex-2.5.4a-6.aix4.3.ppc.rpm
gawk-3.1.3-1.aix5.1.ppc.rpm
gcc-4.0.0-1.aix5.1.ppc.rpm
gcc-cplusplus-4.0.0-1.aix5.1.ppc.rpm
gdb-6.0-1.aix5.1.ppc.rpm
libgcc-4.0.0-1.aix5.1.ppc.rpm
libstdcplusplus-4.0.0-1.aix5.1.ppc.rpm
libstdcplusplus-devel-4.0.0-1.aix5.1.ppc.rpm
libtool-1.5.8-1.aix5.1.ppc.rpm
m4-1.4.1-1.aix5.1.ppc.rpm
make-3.80-1.aix5.1.ppc.rpm

OK, I’m not exactly rebuilding these old versions, I’m actually using their old specs to compile newer versions of these. I’m currently at coreutils-6.7, which really takes ages. But will see about the rest.

Learning french

Thu, 19 Apr 2007 21:31:22 +0000

The last few days in Brussels really made me think about learing some french again. There were times, I/we was/were completely lost, and I really hate being lost … So I’m going to look into learning french again. Will see if the local academy has something scheduled in their upcoming program. I really hope so, as I think french is something I could use.

Also I’m thinking about taking dance-lessons (yeah, yeah I know - I suck 😛 ), as I’d really like to dance … mmmmmh

Saying thank you

Thu, 19 Apr 2007 21:28:14 +0000

As I’m way better writing stuff than saying it with my own words, here a short " Thank you! "

Christel, you have been a gracious and honest person, thanks for all the advice and help in the last year
Chrissy, thanks for the inspiring words, you really made/make me feel better
Alec (antarus), you’ve been a real friend and to say it with your own words “It sucks to be you”; to phrase it differently, I’m really going to miss you
Bryan, thanks for all the help, thanks for all the fun at FOSDEM (and after FOSDEM, hah)
Ned, Alexander (pappy); you’ve both been an inspiration, thanks for letting me work on hardened foo; it has been real fun
Mike (vapier), thanks for being a smart ass and inspiration at the same time
Chris, thanks for the inspiration and for being a sarcastic person 😉
Andrew, thanks for trying to make a fun out of me 😛 and thanks for warning me of Chris’s sarcasm

grub via serial console

Tue, 10 Apr 2007 15:09:17 +0000

As I have quite some trouble every time I need grub via serial console, here’s just my personal reminder on how to do it right:

1
2
3
4
5
6
7


# cat /boot/grub/grub.conf
serial --unit=0 --speed=38400
terminal --timeout=15 console serial

title hardened-sources-2.6.20-r1
root (hd0,0)
kernel (hd0,0)/boot/vmlinuz-2.6.20-hardened-r1 root=/dev/hda1 console=ttyS0,38400 console=tty0

Additionally the agetty entry for ttyS0 in /etc/inittab needs to be uncommented and changed accordingly to the serial speed

The Letting Go (why does it hurt so much )

Sun, 08 Apr 2007 10:44:13 +0000

As some of you know, I had some company the last few weeks by two amiable girls from Belgium. We did some hanging out, went out a couple of times and basically had a great time.

One thing I didn’t thought was possible, is them getting close to me (as in “I’d really like them to stay some time”) and as I gave them a ride to the train station yesterday, I really had my problems. Out of the sudden I had a feeling not to let them go, or is it the feeling to let friends (and I’m talking about real friends) slip by, without even knowing them for more than 3 weeks.

Post FOSDEM 2007 thoughts (do I know you )

Mon, 26 Mar 2007 19:19:09 +0000

Some of us attended this years FOSDEM in Brussels (thanks to Dimitry it was really, really great).

We (at least the ones attending) got to know each other a bit better (I even got to know some pre Gentoo devs .. yeah, you), and some time after FOSDEM (I think it was ~3 days afterwards), Petteri (betelgeuse) asked me why people all of the sudden start to call him with his first name on IRC.

Cisco sucks

Wed, 14 Mar 2007 16:10:38 +0000

OK, today we had somewhat of an emergency. The core-router for our entire network at work had some kind of hardware defect and repeatedly rebooted every three minutes caused the whole network to go cabooom. Usually (you would think), stuff in the same subnet (or VLAN) would still see each other (again, you would think) .. but apparently the VLAN/subnet database is stored on the core router and took all subnets with it.

SLES-9 (once again)

Thu, 08 Mar 2007 22:55:36 +0000

OK, so today was the highlight of the week … We updated apache2 on Tuesday (yeah, that’s still 2.0.49, so if you have some exploits - try them 😛 ) and now out of the sudden we have major performance issues. We looked nearly the whole forenoon for a reason, why the frackin’ apache was using 236% of the CPU’s.

In the afternoon, when my co-worker decided to go home (that was ~1500), I decided to revert back to the old patch level. But that isn’t as easy as you think (at least on SLES). The only thing I wanted to do, was something like this:

Waiting

Wed, 28 Feb 2007 14:58:05 +0000

We are still waiting for the money promised by the state and the country for our HBFG (again, it’s “Hochschulbauförderungsgesetz”), that hopefully is reducing or eliminating our storage/SAN problem we have currently. Right now we have to Cisco MDS9216 (that’s a 16-port 2GBps SAN-switch, two for redundancy), which means we only have 16 SAN-ports. That isn’t much, but still is to less, as we have like 30 machines or so, that really need access to the SAN, so we either end up unplugging some of them from the SAN or merge them onto some big machines (like our x366).

Shibboleth (WTF is that)

Wed, 28 Feb 2007 08:51:05 +0000

OK, I’m sitting now again in train (hrm, I get the feeling I’ve done that already in the last few days - oh wait, I was doing that just on Monday) this time to Berlin.

My boss ordered me to attend a workshop covering the implementation of Shibboleth (for those of you, who can’t associate anything with that term - it’s an implementation for single sign-on, also covering distributed authorization and authentication) somewhere in Berlin Spandau (Evangelisches Johannesstift Berlin).

Gentoo/hardened and the new toolchain

Mon, 26 Feb 2007 09:28:44 +0000

OK, as some of you have noticed; I prepared my box for the new toolchain, recompiled the stuff Kevin mentioned in the exact same order wrote down in his README, and it looks like it actually works with all my stuff I have on my box; except sys-libs/grub! sigh

Apparently, grub segfaults at boot and/or while running it from the chroot in the exact same spot, the new QA warnings complain about ..

FOSDEM 2007 4 (abstract)

Mon, 26 Feb 2007 09:14:34 +0000

The last three days have been quite amazing, I’m still stunned by all these impressions (basically meeting all those people you usually know though IRC), how nice people can be if they want (yeah dad, I’m talking about you 😛)

Although I was pretty sad about leaving so early (I think, if I’m going to attend next year, I’m going by train and starting on Monday morning so I got one night more in Brussels), I’m also quite happy to be home again, as I was pretty phreaked (haha, self-pun intended) by all those people.

FOSDEM 2007 3 (WHUT)

Mon, 26 Feb 2007 05:20:14 +0000

Today, I got up again at 0630 ugh went to bath, woke up Torsten, afterwards the mystery guy and went downstairs to get some breakfast. I ate some cornflakes and some bread along with a glass of chilled orange juice, then went back up to get all our stuff and prepare the room the way we found it.

After we finished that, we went downstairs and met Alex along the way went to the cars and Torsten led us to the university. I went to the booth and noticed that Torsten and me where the only ones that early at the booth. So we sat down for a moment, cleaned up the booth space a bit and finally sat again preparing the notebooks.

FOSDEM 2007 2 (more friends, Bryan and superman)

Sat, 24 Feb 2007 23:57:05 +0000

So, as I earlier mentioned, we finally found the U.L.B. and also found the booth and staffed it for nearly the whole day (I haven’t managed to view any of the speeches, neither one of the Gentoo ones nor any of the others), I talked to some interested people asking about Gentoo itself, but also asking about the EFIKA’s (the Genesi PPC’s), one by Camille and Julien providing video forwarding (from one EFIKA to another via cross-over cable), and the other one by Chris playing Descent 2 and Quake 2 at the end. Peter (I think the PR guy from Genesi Europe, will have to ask Chris / Mike again).

FOSDEM 2007 1 (long time friends and gay horseporn)

Sat, 24 Feb 2007 22:54:16 +0000

We arrived in Brussels on Friday around 2230, since we kept searching the centre of Brussels, we really tried hard since we didn’t have a map, we tried navigating by bus cards (which was quite fun). So after we finally found the city centre (which is quite bad signposted), we went to the pub supposedly having the free beer, but they told us the FOSDEM area was closed due to christel drinking all beer (just kidding), but we did find Pylon and kugelfang I think.

AIX-5-3 undamp; rpm-4-4-7

Mon, 05 Feb 2007 14:24:50 +0000

OK, so I tried to install the AIX Toolkit today, to build some newer rpm’s (yaaaaah, I hate RPMS myself, still it’s way better than distributing plain tar.gz archives) but looks like either AIX or rpm-4.4.7 doesn’t like me.

Now I’ve to figure out how to get libm (that’s /lib/libm.so) installed on AIX. Will see about that later and/or tomorrow.

Beach

Tue, 30 Jan 2007 23:05:07 +0000

Remember ? Back in November I had this discussion with uncle Seemant about getting some time off, which resulted in driving to the beach for a whole day.

I finally found some time to get the pictures off the digital camera, and here they are (some of them) …

View at the beach (looking at Goehren)

I consider that a really fine day, it wasn’t too windy, the sun was shining (for a few moments 😛 ) and I enjoyed nature’s weirdness …

media-video/codeine

Fri, 26 Jan 2007 19:36:15 +0000

OK, as Diego posted earlier last week, to switch to something else than xine-ui ( #161913 is really annoying), I decided to use codeine. It looks nice so far, supports what I need, so everything is fine now.

Thanks to Diego for the heads-up.

Qualcomm Eudora vs- Microsoft Outlook

Thu, 25 Jan 2007 20:44:52 +0000

OK, so I’ve spent the last day working on my bosses $MAILPROGRAM. In detail, I’ve been trying to get his mails from Eudora (which really is complete crap) to Outlook (yeah, yeah I KNOW but he really needs a decent calendar with his E-Mail program, which neither KMail, nor Thunderbird nor Mozilla Suite - aka SeaMonkey can provide).

Problem with all that is Eudora’s crappy way of saving mails (and their attachments). Eudora is saving the mails in regular MBX format, but is putting the attachments into a separate folder. I’ve looked all over the web, and only found one application capable of importing his mails into Outlook including the attachments from the Attach folder.

The Gentoo’ish look back

Sun, 31 Dec 2006 16:37:41 +0000

I had a very moving year with Gentoo. At first I only focussed on the stuff I already had (being vServer / openVZ related stuff), but later on also on suspend2-sources and other stuff I took over back when Hendrik retired.

Sometime this year (I think it was somewhere in the early summer) I joined up with the kernel herd, helped out Daniel while he was moving from London(?) to Boston, took over hardened-sources from John (who’s pretty much away). I had a rough break (you remember, the break that turned out to be my most active time) in October till late November, while fighting with my private life and work.

My private look back

Sun, 31 Dec 2006 16:07:41 +0000

The year has left its marks in my head. I had a biiig rock bottom this year, which froze some of the best relationships (friend-wise) I had in my whole life (which I really regret), but I got to know a few people (most within Gentoo) better and even become friends with some of them (you know, whom I mean).

With focus at my physical and mental health the year has also left some marks. Mentally I’m looking forward to get some counselling in the next year, after I focussed my attention at the physical illnesses I currently suffer from.

Happy new Year!

Sun, 31 Dec 2006 15:52:34 +0000

I just watched CNN Live three hours ago, showing the New Year’s in Sydney Harbour, AU.

Looked really great, and as a matter of fact, I wish everyone a happy new year. I know, Diego kept saying its bad luck to wish that in advance, but what the hell ..

I wish every fellow Gentoo Developer and even those Gentoo Users reading the Universe from the bottom of my heart a happy new year and may be Gentoo with you.

Again Deutsche Bahn

Thu, 28 Dec 2006 22:05:18 +0000

So, as some of you know, I decided to spend New Year’s Eve with my cousin and my aunt. And how did I get from the warmish north to the coldish south ?

By train as usual, that means Deutsche Bahn … I already had my gooood experiences with German Rails back in May when I headed to LinuxTag 2006.

This time it was a bit different. At first the train from Stralsund to Hamburg was a replacement train, which had no reservations and only first class wagons. One pro and one con. The contra being that my reservation was nullified (meaning I had ordered one but didn’t get one).

Merry frackin Christmas

Mon, 25 Dec 2006 19:54:18 +0000

Wow, it has been quite a year, this year. Christmas Eve was over pretty fast, we had a nice (smallish) lunch and in the evening we had meat fondue (which was really tasty). Today is Christmas Day, we had lunch earlier (a nice duck with Spätzle of course - to get my weekly dose) and I’m sitting now upstairs in front of my Notebook, listening to some tunes (to keep myself calm).

Weekend

Sat, 18 Nov 2006 21:44:50 +0000

OK, you probably remember Seemant telling me I should take the weekend off. I had a nice day so far, didn’t do anything work or Gentoo related (which is a bit of a shame), had a small battle with my younger brother about him arguing with my father while having lunch, but afterwards I headed into town ( Stralsund that is), did a bit of window shopping; spotted a nice watch (which is for sale for only ~ 300 €), even tried to get into a movie, but it seems CineStar (that’s a local chain of cinema’s) is trying to boycott me.

Bloggo-battle/-war, time-out, holiday

Tue, 14 Nov 2006 19:23:59 +0000

OK, Seemant just started our little Bloggo-war he promised me yesterday (don’t even think about it, I just applied for protection of trademarks), I guess I need to address his questions.

#1: Holiday vs. Time-out Holiday ain’t exactly what I refer to as time-out. Holiday is something for old and lazy people or those that got taken into holiday with their parents (hah, always wanted to say that 😛 haven’t had real holidays since, err, I was 10 or so). Time-out is something that I refer to when I need some time off my irssi/mail. Usually I hang out with the irssi session attached, watching my mails. Probably that’s also the reason, why I can’t take a real break along with my brain that seems to think about random stuff that happened in the last few months all day long.

The Illusion of holiday

Mon, 13 Nov 2006 18:02:12 +0000

Hrm, Seemant … were did I mention something about holidays / vacation ? 🤷 I remember that I told you (and also in my previous blog post); its even in my .away file feeding the devaway; that I’m taking a break due to increased real-time work load. 😄

I never ever said something about going on vacation or being on holiday. That would actually be great (and I could use the break from everything, even the distance to some very people) but is currently virtually impossible. Basically it’s because of an HBFG (that’s something like " University building assistance law" translated - for the Germans it’s " Hochschulbauförderungsgesetz") application that has been recommended for implementation. Now I’m stuck in the middle of an tendering procedure that has to be announced all over Germany.

hardened-sources-2-6-18

Fri, 10 Nov 2006 23:56:45 +0000

Today (OK, it’s yesterday now, it’s again after 12:00) I had a little fun with pappy (Alexander Gabert) preparing 2.6.18 for prime time 😀

 1
 2
 3
 4
 5
 6
 7
 8
 9
10


$ ls -AGg 2.6.18
-rw-r--r-- 1 1593 Jan 25 23:25 1500_cvs-2007-1000.patch
-rw-r--r-- 1 797 Jan 25 23:25 4000_deprecate-sk98lin.patch
-rw-r--r-- 1 32192 Jan 25 23:25 4105_dm-bbr.patch
-rw-r--r-- 1 125781 Jan 25 23:25 4300_squashfs-3.1.patch
-rw-r--r-- 1 5710 Jan 25 23:25 4405_alpha-sysctl-uac.patch
-rw-r--r-- 1 864955 Jan 25 23:25 4450_grsec-2.1.9-2.6.18.6-200611100917.patch
-rw-r--r-- 1 910 Jan 25 23:25 4451_grsec-2.1.9-2.6.18.2-mute-warnings.patch
-rw-r--r-- 1 1034 Jan 25 23:25 4452_selinux-avc_audit-log-curr_ip-grsec.patch
-rw-r--r-- 1 2097 Jan 25 23:25 4453_pax_curr_ip-fixes.patch

So far all patches are applying fine and according to Alexander it even works on his workstation. But I’ll wait for Steve/Ned to get back to me telling me if this release works for them or not (as they had serious issues with their hardened desktops - something about the cursor being stuck in the corners).

continued gentoo-dev fun

Sat, 04 Nov 2006 15:57:36 +0000

OK, today I finally took the steps of adding Hans (that’s Hans de Graaf), and just after I kicked him from #gentoo-dev so he gets his +o and suddenly Astinus took over .. but see for yourself 😀

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14


(15:28) < @Astinus> graaff: So graaff, what'd they con^H^H^persuade you into doing?
(15:29) < @phreak``> Astinus: xemacs ;-)
(15:29) < @Astinus> phreak``: hah!
(15:31) < @graaff> Astinus: yes, xemacs, and when all of that is in order I'll see if I can help out
with ruby and/or gnome
(15:32) < @Astinus> graaff: to the former, good luck ;) to the latter, are you suicidal? ;-P
(15:32) < @phreak``> Astinus: actually it seem like he is :D
(15:32) < @Astinus> phreak``: Excellent, I see you went through the recruiting checklist thoroughly
(15:32) < @phreak``> Astinus: lol
(15:32) * graaff thinks better than to engage in a troll-fest about gnome on his first day
(15:32) < @Astinus> (a) Should be suicidal to a degree less than ciaranm
(15:32) < @Astinus> (b) should have a passion for Gentoo, but not the stalking developer kind
(15:33) < @Astinus> graaff: ;-P
(15:33) < @Astinus> graaff: *bait*

gentoo-dev fun

Tue, 31 Oct 2006 20:10:36 +0000

O boy, have I had a wonderful evening. I was watching We were heroes (after the eponymous book " We were heroes … and young"), while I took a peak at #gentoo-dev and look what I found:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15


(19:24) will be masked, resistance is futile
(19:24) hehe
(19:24) lol
(19:24) Flameeyes: you're definitely watching waaay to much star trek (including Borg involvement :P)
(19:24) *plop*
(19:25) phreak``, watching voyager right now :P
...
(19:25) phreak``, how do you know that Diego is not a borg?
(19:25) bonsaikitten, I'd like to be one
(19:25) who has met him? who has seen him sleep, eat or do anything else besides commiting stuff?
(19:26) bonsaikitten: a human couldn't take all that crap happening to him ;)
(19:26) * phreak`` runs
...
(19:26) Flameeyes, let me guess, suppress emotions, optimize language, work work work?
(19:26) what? Flameeyes is human? I thought he was one of vapiers scripts...

Depression coming up

Tue, 05 Sep 2006 11:10:18 +0000

As you may now (or not), I haven’t been pretty active in the last couple of days (OK, I admit it has been the last two weeks).

Work is currently being a bitch (I have a 6,36 h day normally, but lately that evolved into a 8+ h day which I’m not even payed for), personal life is also a bit frustrating (yeah you know those people-people relations called friendship and stuff).

gcc-config and CHOST

Wed, 16 Aug 2006 09:11:05 +0000

Okay, I admit I might be a bit stupid.

After my previous rant about gcc-config and eselect-compiler, it turns out that my CHOST was somehow b0rked. Just removing the -pc from CHOST=“i686-pc-linux-gnu” fixed the issues.

IBM

Mon, 14 Aug 2006 10:16:28 +0000

We just received the long awaited shipment of sixteen 300GB FC-HDD’s (2Gbps with 10000rpm) for our SAN (a pretty old DS4500/FaStT 900).

But there’s still the software option missing we ordered within the same breath. So I called our trustworthy IBM distributor (hah!) and asked the guy responsible for sales, what the ETA on this software option is (if someone is interested its VolumeCopy/FlashCopy).

He told me, that we’ll receive a letter with the license key about 4 weeks after commission !!!!!!

The somehow different vacation photo

Thu, 10 Aug 2006 13:09:01 +0000

Heh, while driving to work I had an idea …

That would make a niiiiice vacation photo 😛 (well not so nice if you get the bill …)

SLES-9 SP2 (continued)

Wed, 09 Aug 2006 12:27:50 +0000

OK, so after yesterdays battle with SLES and rpm, I decided to simply upgrade rpm (again rpmbuild -bb rpm.spec as in from source).

I had to tune (hah, remove stuff that isn’t working on this ancient gcc-3.3.3 ie. -fstack-protector) a bit to get it working, wasted 20 minutes worth of CPU time and ~30 of my time. I finally gave up. I couldn’t persuade neither rpm, nor git to compile on the damn SLES/Dell.

15 million pieces

Mon, 07 Aug 2006 08:21:38 +0000

So Joshua asked my why the heck I was doing that puzzle (OK, I said it actually is a puzzle) and here’s now the story for that ..

As you see on the image above, the plaster is completely bursted. The dome also started to get some crannies, so my parents decided to cover the whole plaster with pebbles. Only catchy thing about that is: you need to glue every single pebble (diameter ~1cm) by hand onto the cement. And that pretty much sucks.

Plaything

Fri, 04 Aug 2006 03:51:31 +0000

Ok, today I received another WRT54GL (yah, too much money 😛 ) and updated it to dd-wrt v23-SP1 instantly and is now (once again) powering my wireless network.

Yay! and thanks to Cisco/Linksys for that fine piece of hardware and to NewMedia-NET GmbH for providing such a great image for this hardware 😄

Ah, nearly forgot that: remember, never put the same IP twice in the static DHCP lease table, or dnsmasq is refusing to start (thus no DHCP/DNS)!

Mood sucks

Thu, 03 Aug 2006 06:50:04 +0000

christel, you remember the mood-swings we were talking about ?

I think I’m undergoing just another 😞 I’m currently pretty much pissed. Basically everything is pestering me currently (except #gentoo-dev and Gentoo work).

Work just ripped another piece of me (hah, thanks VMware & BigBlue). I started the day with a ice cold shower (if I’m talking about ice cold it was ice cold), they’re currently replacing our old gas heating and unfortunately that means no warm water at all! arg

Braindead

Thu, 03 Aug 2006 05:32:52 +0000

Ok, I know I’ve been absent the last 2 or 3 days (but only in the evening). I know Seemant 😛 and I’m pretty sorry for that. As some of you may know, I recently aquired a Linksys WRT54GL to replace my stupid, crappy Netgear WG602 (which, sorry for the words, is completly junk right now).

I managed to flash an dd-wrt image to it, right the first day I got it. But a recent update made it broke and now I’m completly unable to reflash the device (as in bricked).

Chris (the White variety)

Sun, 30 Jul 2006 18:26:48 +0000

Hrm, I think I tortured christel a bit too much, earlier ..

1
2
3


(16:53) <@phreak``> here we go ;-P /uploads/2008/08/dscn0739.jpg
(16:57) <@christel> LOL
(16:58) <@christel> the first one made me laugh so much

Actually Chris, I think that was your and Diego’s comment(s) in combination with esammer (thanks for the decent laughing flash I had btw 😮 )

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11


(22:33) <@phreak``> night everyone ;-P
(22:33) <@ChrisWhite> phreak``: what's that?
(22:33) <@ChrisWhite> phreak``: you thought you were going to get sleep?
(22:33) <@esammer> ChrisWhite: as well as well formed sentences and punctuation. well said.
(22:33) <@ChrisWhite> phreak``: sorry pal, this is Gentoo, you're a developer
(22:33) <@ChrisWhite> phreak``: we don't let you sleep
(22:33) <@ChrisWhite> phreak``: you're over your sleep rations
(22:33) <@phreak``> ChrisWhite: yeah, again .. need to get up 2 hours before sunrise (thats in 5 hours to be exact)
(22:34) <@Flameeyes> phreak``, what happens to sunrise in 2 hours?
(22:34) <@ChrisWhite> phreak``: what if it's cloudy?
(22:34) <@ChrisWhite> phreak``: or what if the sun dies out?

F*cking summer

Sun, 30 Jul 2006 09:56:21 +0000

Oh, yeah baby g. It’s finally hot f*cking summer and I really like it. We have now three weeks in a row sunny weather with no rain at all.

Everyone running around with less or nearly no clothes (heh, especially the girls) is also a nice present from above.

Personally I haven’t felt better the last two years. Maybe that’s depending on my previous depressions and the like (you know these thoughts .. ) but this summer is definitely going rock my life!

Live sucks (again)

Sun, 21 May 2006 10:46:25 +0000

Now is again such a time in live, where you have the motivation or wish to just fade away.

I’m just listening to Fort Minor - Where’d you go and thinking about the stuff Mike Shinoda is singing …

I want you to know it’s a little fucked up, That I’m stuck here waitin’, no longer debatin’, Tired of sittin’ and hatin’ and makin’ these excuses, For while you’re not around, and feeling so useless, It seems one thing has been true all along, You don’t really know what you got ’til it’s gone.

Munich - part 2

Mon, 15 May 2006 17:15:57 +0000

Today we got up bit later (07:40 am) to do some sight-seeing and shopping. We took the car “ Candidplatz”, that’s where Paula is working currently and got into the subway to “ Sendlinger Tor”. The day was starting sunny featuring 23°C at 9:00 am. Certainly I was wearing short pants and a tank top, as I’m used to have a weak till moderate wind blowing around me. We finally stopped at SportScheck to get something for Paula. She badly needed short pants and polo shirts for her physic therapy lessons she is giving at physico.

DB Adventure Travels - part 2

Mon, 08 May 2006 09:29:22 +0000

Boy, right after I wrote those lines they announced everyone heading to Stuttgart should get of that train and take another since they had to replace the damaged end car. I even had to switch platforms again.

I’m now sitting in that other train, it’s pretty much overfilled with people who are all and everyone angry at DB. I’m gonna take a cab from Stuttgart Central Station to my aunt’s place since it’s getting later and later. We’re now supposed to arrive at 22:48 but the train already has ten minutes delay.

DB Adventure Travels - part 1

Mon, 08 May 2006 09:29:10 +0000

I’m now sitting in the ICE (on a little child seat), it arrived with 20 minutes delay here at Frankfurt Airport but we’re still standing here with problems on the end car, so it’s gonna take a while.

It’s one of the newer ICE’s and the interior looks really great. I even managed to get some wireless connection!

LinuxTag - part 3

Mon, 08 May 2006 09:27:51 +0000

I’m now at Frankfurt Airport and I nearly got on the earlier train to Stuttgart which I wasn’t able to catch, according to the service guy. I was facing the same problem than the morning before. The damn doors closed right in front of my face. Meh, Friday seems to be my bad luck day.

I’m still waiting for the ICE supposed to leave at 20:54 but it’s currently having eighteen minutes delay. My cousin messaged me earlier that she’ll collect me at Stuttgart Central Station. The day is nearly finished now and I’m awake since yesterday morning 07:40 minus that three hour break. I’m still pretty excited that I really got to Wiesbaden and I really enjoyed that little trip (even if it was a bit expensive).

LinuxTag - part 2

Mon, 08 May 2006 09:26:16 +0000

I’m sitting in the S8 to Frankfurt Airport where I’ll switch to the ICE to Stuttgart to visit my cousins and my aunt. Linux Tag was quite amazing, I finally met some of the people behind OpenVZ (Kir and Kirill), saw a bit of Andrew Morton’s Kernel FAQ (Kir told us that) and met some people including Bertl, doener, derjohn, zeng, foo, … of the linux-vserver community. Both workshops were quite interesting and I learned a lot of things about openvz and it’s userland tools and linux-vserver (finally I understood the CPU Tokenbucket system).

LinuxTag - part 1

Mon, 08 May 2006 09:25:24 +0000

Boy, that day started great (irony). I was supposed to get my lazy ass up at 04:20 am to be at the station at 05:27 am, taking the train to Wiesbaden (together with Hollow).

But someone in this odd world doesn’t like me. I somehow managed to turn off the damn cell (that was supposed to wake me up) and slept till 05:10 am, till Paula came in and woke me up. She told me she was awake since half an hour and she waited on me to step into her bedroom.

Munich

Thu, 04 May 2006 15:59:38 +0000

I just woke up and thought I really should blog about that.

The trip was quite interesting so far, saw some things that really looked odd.

At first the was some kind of Police protection (30 or so with shield visor) for only 5 people at Pasewalk Hbf.

Pasewalk Hbf - Lots, and lots of policemen!

A friend of mine picked me up at Berlin Ostbahnhof and we drove all the way to Munich. While we stopped for gas (1,44€ per liter super unleaded)

Birthday

Tue, 25 Apr 2006 13:31:55 +0000

Today being my Birthday pretty much started my day. Somehow I managed to accept a call at 00:12 (while I was asleep) but I don’t even remember taking it. Somehow my real live is getting better and better (as in finding some friends as I pretty much was a hermit for the last couple of years).

Also I found someone to share my toughts with, someone who understands it, how to really get to me (read it as a very good friend 😛)

Bitching

Fri, 10 Mar 2006 19:57:11 +0000

Once again, I’m compelled to play (other call it administering 😛) with our TYPO3 cluster (which is sadly running SLES).

One thing I just learned about SLES (for the ones curious, its Novell’s SuSE Linux Enterprise Server and yes, it suffers the same pain as SuSE/openSuSE). They split one single config file (at least the apache2 one) into 9 (or more) different files.

Another thing is, for what the hell does a simple LAMP need a full blown Xorg w/ KDE installed ?

Work sometimes sucks

Fri, 10 Mar 2006 16:22:46 +0000

Today they finally let me fiddle around on an AIX 5.3 system. Well AIX ain’t bad, but misses (by default installation) some features and comfort.

The first thing I noticed, they only! install telnet and don’t even give an option to install sshd .. That sucks, especially if you’re supposed to log in via the internet (yay! an telnet open to the internet 😯)

So I googled a bit around and found out, that we should have some Bonus CD’s (from IBM of course) featuring openssl/openssh, looked into the cubicle behind the rack and look what I’ve found … Go, go … 😛

vserver related stuff

Tue, 21 Feb 2006 08:07:42 +0000

Well, so I finally got around to fix some pending bugs ..

vzquota and vzctl is finally bumped ( #122532), new baselayout-vserver is in the tree (fixing some issues with rebooting a vps) and I’m finally working on getting dietlibc updated.

So let’s see what the day reveals 😄

Work sometimes sucks

Fri, 20 Jan 2006 17:08:39 +0000

Today was again horrible. The boss started to drive me nuts on 8.30 and it even got worser and worser ….

Sometimes I start thinking how it would be, if I had decided not to move with my parents into the outback (yeah, we’ve also outback in Germany, it’s called East Germany 😛)

BAFM

About Me

Exploring the Intersight API with a Python-Based Schema Browser

How to Use NAS Storage with Docker Compose: NFS, SMB, and Local Volumes

LVM Quick Reference: Setup, Extend, and Resize Filesystems

Docker Swarm + Compose: Traefik Label Sync

Impressum

Impressum

Angaben gemäß § 5 TMG

Kontakt

Hinweis

Haftung für Inhalte

Privacy Policy

Who we are

What personal data we collect and why we collect it

Comments

Media

Sort file into subdirectories structures by year and month

OwnCloud Camera Import Sort Script

Description

Bash sort files into date-subdirectories

Shrink git repo directory

Create a Proxmox VM via CLI

Create a Proxmox Ubuntu Cloud-Init Template

Step 1: Download the Ubuntu image

Step 2: Add necessary packages

Step 3: Modify /etc/ssh/sshd_config

Step 4: Modify /etc/apt/apt.conf.d/50unattended-upgrades

Step 5: Modify /etc/default/grub

Step 6: Install ohmybash

Step 7: Fix timezone

Step 8: Create the Proxmox template

Dell notes

Get the currently configured OS hostname

Set the configured OS hostname

Reset the SSL certificate

Get a list of all storage devices, and their blocksize (conversion of NetApp Disks - blocksize 520)

List the servers power status and try and turn the power off.

Nagios: Service Check Timed Out

Mass-updating Tivoli Storage Manager drive status

VMware Auto Deploy already registered / RuleEngine

Debian: dmesg output contains Error: Driver 'pcspkr' is already registered, aborting…

Synology DS213+: Disable Blue Status LED

UCS blades w/ Boot-from-SAN and AutoYaST

Extend a LVM btrfs partition

Windows *: mscorsvw-exe high CPU usage

NGINX reverse proxy for Synology DiskStation

foobar2000 File Operations Setup

Kodi Shell Script: Find videos missing a thumbnail

Sickbeard Shell Script: Fix TV episodes name

PowerCLI: Delete all snapshots by name

Migrating from XenServer to ESXi

Tiny Tiny RSS init-script for multiple instances on Debian Wheezy

Quick-Add a bunch of Virtual Machine Port-Groups from CSV

ViMbAdmin and mod_rewrite

Adjust album list display in foobar2000

Download a (legal) Windows 8-1 Media Refresh ISO

Display MusicBrainz info in foobar2000

ARmA III - Cheats

OpenELEC on CuBox i - Update to latest snapshot

PowerShell - and how to add new DNS servers to remote systems

Rename a Standard Port Group on all hosts in a cluster

Create ComicRack compatible cb7 archives

Hetzner, Debian, KVM and IPv6

Nagios: Integrating Cisco switches

Summer - finally

SLES-9-2

portage / eselect-compiler

LiveCD, bootstraping and binary packages

Time-out

DB Adventure Travels - part 3

Seemant, never ending wisdom and work (confession)

Adapter teaming on SLES10

Bloody cluster solutions

screen and UTF-8

VBscript undamp; Active Directory and printers

Turning a simple chroot into a binpkg repository

stages

Bloody cluster solutions (continued)

Research project

Step 4: Modify `/etc/apt/apt.conf.d/50unattended-upgrades`

Step 5: Modify `/etc/default/grub`

Step 6: Install `ohmybash`