Архив автора
OpenVPN: Real Speedup [DCO]
написано 30 января, 2025 - запись из раздела Linux, vpn | 2 комментария
We have a test bench of two servers, connected with physical 10G ports Let’s see what iperf3 will show [ 5] 0.00-1.00 sec 1.08 GBytes 9.29 Gbits/sec [ 5] 1.00-2.00 sec 1.08 GBytes 9.30 Gbits/sec [ 5] 2.00-3.00 sec 1.08 GBytes 9.29 Gbits/sec Now let’s put OpenVPN between those two and repeat iperf3 [ 5] […]
Ansible playbook to add users with ssh keys and sudo
написано 3 декабря, 2024 - запись из раздела Несортированное | Комментировать
# yamllint disable rule:line-length — — name: Add admin users hosts: all gather_facts: true become: true tasks: — name: Create account ansible.builtin.user: name: "{{ item.name }}" groups: "sudo" shell: /bin/bash append: true with_items: "{{ users }}" — name: Set authorized key taken from file ansible.posix.authorized_key: user: "{{ item.name }}" exclusive: true key: "{{ item.ssh_pub_key }}" […]
Sentry cleanup
написано 2 декабря, 2024 - запись из раздела Несортированное | Комментировать
To cleanup self hosted Sentry you can use a following script: docker exec -it sentry-self-hosted-clickhouse-1 clickhouse-client -q ‘TRUNCATE default.spans_local’ docker exec -it sentry-self-hosted-clickhouse-1 clickhouse-client -q ‘TRUNCATE default.generic_metric_distributions_aggregated_local’ docker exec -it sentry-self-hosted-clickhouse-1 clickhouse-client -q ‘TRUNCATE default.generic_metric_distributions_raw_local’ docker exec -it sentry-self-hosted-clickhouse-1 clickhouse-client -q ‘TRUNCATE system.metric_log’ docker exec -it sentry-self-hosted-clickhouse-1 clickhouse-client -q ‘TRUNCATE default.transactions_local’ docker exec -it sentry-self-hosted-clickhouse-1 […]
«firstBit.Сервер лицензий 2» Ubuntu Linux
написано 12 ноября, 2024 - запись из раздела Несортированное | Комментировать
/etc/systemd/system/firstBit.service [Unit] Description=firstBit.LicenseServer After=syslog.target After=network.target [Service] Type=simple Restart=on-failure PIDFile=/run/firstBit.pid KillMode=control-group ExecStart=/opt/firstBit.LicenseServer/linux/licenseserver —run —allow-ui-from-ip=* ExecStop=/bin/sh -c ‘[ -n «$1» ] && kill -s TERM «$1″‘ — «$MAINPID» RestartSec=10s User=root Group=root LimitNOFILE=8192 [Install] WantedBy=multi-user.target mkdir /opt/firstBit.LicenseServer/ cd /opt/firstBit.LicenseServer/ wget https://static.1cbit.online/updates/license-server/download/LicenseServer-v2.7z 7za x LicenseServer-v2.7z chmod +x /opt/firstBit.LicenseServer/linux/licenseserver systemctl daemon-reload systemctl start firstBit.service
HPE Smart Array E208i-a SR Gen10 firmware update
написано 24 октября, 2024 - запись из раздела Linux | Комментировать
No drives were found in this system.You may need to reboot You can obtain an rpm package here: https://downloads.linux.hpe.com/SDR/repo/spp-gen10/redhat/8/x86_64/current/ If you use RedHat based distro just install the rpm, otherwise extract it: rpm2cpio firmware-smartarray-f7c07bdbbd-4.11-1.1.x86_64.rpm | cpio -idmv and run an update process: ./usr/lib/x86_64-linux-gnu/firmware-smartarray-f7c07bdbbd-4.11-1.1/setup Supplemental Update / Online ROM Flash Component for Linux (x64) — HPE […]
GrayLog: Hostname datanode not verified
написано 23 октября, 2024 - запись из раздела Несортированное | Комментировать
After updating a graylog we get an errors like: Unable to retrieve version from Elasticsearch node: Hostname datanode not verified Host name ‘datanode’ does not match the certificate subject provided This can be fixed disabling ssl/tls betwen containers put into .env this string: GRAYLOG_DATANODE_INSECURE_STARTUP=true then restart containers docker compose stop docker compose up -d
ProxMox Qemu create Ubuntu template
написано 5 апреля, 2024 - запись из раздела Proxmox VE | Комментировать
wget https://cloud-images.ubuntu.com/releases/noble/release/ubuntu-24.04-server-cloudimg-amd64.img mv ubuntu-24.04-server-cloudimg-amd64.img ubuntu-24.04-server-cloudimg-amd64.qcow2 qemu-img resize ubuntu-24.04-server-cloudimg-amd64.qcow2 10G qm create 9000 \ —name ubuntu24 \ —bootdisk virtio0 \ —ostype l26 \ —sockets 1 \ —cores 2 \ —memory 1024 \ —scsihw virtio-scsi-single \ —onboot yes \ —serial0 socket \ —vga serial0 \ —net0 virtio,bridge=vmbr0 \ —agent 1 \ —ide2 local-zfs:cloudinit \ —virtio0 local-zfs:0,import-from=/root/ubuntu-24.04-server-cloudimg-amd64.qcow2 […]
Sentry: All events is empty
написано 25 марта, 2024 - запись из раздела Linux, Nginx | Комментировать
If you have a nginx revers proxy on your self-hosted Sentry you can get an issue with empty «All events» this can be fixed by adding to nginx config proxy_buffer_size 128k; proxy_buffers 16 256k; if you need a complete config, here it is:
ProxMox migration fails: Host key verification failed.
написано 22 марта, 2024 - запись из раздела Linux, Proxmox VE | Комментировать
If you get an error, on migrating VM from one ProxMox to another, like this: # /usr/bin/ssh -e none -o ‘BatchMode=yes’ -o ‘HostKeyAlias=pve-n23’ root@10.10.10.10 /bin/true Host key verification failed. ERROR: migration aborted (duration 00:00:01): Can’t connect to destination address using public key TASK ERROR: migration aborted And you have FreeIPA installed on proxmoxes, you can […]
LVM resize HOWTO
написано 15 марта, 2024 - запись из раздела Linux | Комментировать
We have an virtual machine with 165Gb disk, and added extra 10Gb. Now we need to extend filesystem inside a VM lets check trat extra 10Gb is available in VM # fdisk -l /dev/sdb Disk /dev/sdb: 175.2 GiB, 187924742144 bytes, 367040512 sectors Checkout the physical volume size, it’s 165Gbyte # pvdisplay — Physical volume — […]