Header Shadow Image


Archive for the 'NIX Posts' Category

GlusterFS: Renaming a Brick

So you want to replace a GlustetFS brick? In other words, how do I rename a brick path in glusterfs? NOTICE: Anytime there is any data manipulation on any environment, backups should always be taken.  So please make a copy or a backup of your files prior to executing any of the commands.  The steps […]

Got permission denied while trying to connect to the Docker daemon socket

Getting this? Got permission denied while trying to connect to the Docker daemon socket Solve it with this: sudo chmod 666 /var/run/docker.sock Cheers, Tom

FreeIPA: Adding and removing CNAME records.

To add a cname record:  ipa dnsrecord-add nix.mds.xyz portal –cname-rec='long-host01.nix.mds.xyz.' to remove a cname record:  ipa dnsrecord-del nix.mds.xyz portal –cname-rec='long-host01.nix.mds.xyz.' Cheers, TK

Atlassian Confluence:Component ‘Operating System’ alerted ‘Low free memory’ and Component ‘Java’ alerted ‘Garbage collection exceeded time limit’

Seeing the following alerts? [2020-04-17 21:53:30,207] 2020-04-18T01:53:30.200Z Component 'Operating System' alerted 'Low free memory' (details: {"freeInMegabytes":62,"totalInMegabytes":5805,"minimumInMegabytes":256}, trigger: {"pluginKey": "not-detected"}) [2021-12-13 06:44:52,432] 2021-12-13T11:44:48.953Z Component ‘Java’ alerted ‘Garbage collection exceeded time limit’ (details: {“durationInMillis”:2181,”windowInMillis”:20000,”limitPercent”:10,”threadMemoryAllocations”:””,”threadDump”:[]}, trigger: {"pluginKey": "not-detected"}) Time to up the memory on the host and adjust the environment properties: /atlas/atlassian/confluence/ cat bin/setenv.sh # See the CATALINA_OPTS below […]

MySQL Galera while using HAProxy prints following error: DOWN, reason: Layer4 connection problem, info: Connection refused

MySQL Galera while using HAProxy gives the following: # Dec 11 22:45:43 localhost haproxy[24265]: Proxy mysql-back started. Dec 11 22:45:43 localhost haproxy[24265]: Server mysql-back/mysql01.nix.mds.xyz is DOWN, reason: Layer4 connection problem, info: "Connection refused", check duration: 0ms. 2 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue. Dec 11 22:45:43 […]

Atlassian Confluence: Reducing GlusterFS IO, Disk Log Usage, and DEBUG Logging.

So it became apparent that, while sitting on a GlusterFS on two of my nodes, Confluence was dumping 18GB of logs to catalina.out. Unfortunately, there isn't a good way to rotate that file: https://confluence.atlassian.com/confkb/catalina-logs-are-not-rotated-or-removed-289276264.html All the while writing to the GlusterFS, which by itself network copies this to the secondary host, atlas01: atlas02 # du […]

OpenVPN: Cannot ping or access internal VLAN’s

Seeing timed out accessing external and internal VLAN's after connecting to the OpenVPN server? Reply from 98.136.103.23: bytes=32 time=673ms TTL=47 Request timed out. Request timed out. Reply from 10.3.0.100: bytes=32 time=673ms TTL=47 Request timed out. Request timed out. Moreover, also seeing timeout on accessing local VLAN's? root@DD-WRT-INTERNET-ASUS:~# tail -f /var/log/messages|grep -Ei "DROP"|grep -Ei "10.3.0.100" Nov […]

OpenWRT: Disable invalid default gateway selection

It indeed happened that the default GW provided on various network interfaces was the router that we do not want to be the GW.  In our case the OpenWRT Raspberry Pi 2 became the GW for any hosts dynamically getting an IP.  So all requests, were sent via the Raspberry Pi 2, which is not […]

OpenWRT: Resolving the /etc/resolv.conf lack of proper DNS resolution.

OpenWRT links /etc/resolv.conf to /tmp/resolv.conf and only adjust entries in /tmp/resov.conf if $localuse is enabled in the UI: The above entered as text, is: DHCP and DNS -> [General Settings] -> [Local domain] : openwrt.mds.xyz mds.xyz nix.mds.xyz mws.mds.xyz DHCP and DNS -> [General Settings] -> Allow localhost : Yes DHCP and DNS -> [General Settings] -> Local Service […]

Your connection is not private: Trusting your own LAB SelfSigned Certificates in Kaspersky, Windows and Chrome

This use case scenario is aimed at those folks who are developing on their local environment and need to trust a set of certificates. This is so they are not always prompted for verification to a domain they know is already trusted and safe.  Despite that site having self signed certificates as is the case […]


     
  Copyright © 2003 - 2013 Tom Kacperski (microdevsys.com). All rights reserved.

Creative Commons License
This work is licensed under a Creative Commons Attribution 3.0 Unported License