Cloudstack – Agent rebooting KVM host

CloudStack 4.0.0

In some cases, Cloudstack agent reboots KVM host, when it can’t access primary NFS shares (because Agent starts heartbeat, trying to write to primary NFS storage every now and then to check if the storage is alive)

So, in order to disable CloudStack Agent (on KVM host) from rebooting that KVM host, simpy edit the “kvmheartbeat.sh” by commenting out the “reboot” part:

Read more of this post

389 DS (Directory Services) Multi-master replication setup

We need to implement multi-master replication between 2 LDAP servers (389-DS servers).

General (hi-level) steps

  1. Create supplier bind DN to be used on each server
  2. Enable replication change log (directory server, replication section, supplier tab), default location for files
  3. Enable multi-master replication, diferent ID for each server (directory server, replication section, userRoot subsection, Replication Settings tab)
  4. Create “Replication Agreement” on both servers

Read more of this post

Installing 389 DS (Directory Services) on CentOS 6

Need to install 389 DS on clean CentOS 6.3 x64. Setup TLS encryption, etc.

Prepare the server:

Read more of this post

Upgrading Galera/Percona XtraDB Cluster

Having 3-node Percona XtraDB Cluster (or native Galera MySQL cluster), need to upgrade for various bug fixes, etc.

So called “Rolling Upgrade” – can’t get simpler than that:

[root@sql1 ~]# service mysql stop
[root@sql1 ~]# yum update percona* Percona*
[root@sql1 ~]# reboot

Read more of this post

fail2ban – add apache POST flood rule

If you have problems with POST flood attacks on your web site, fail2ban may be right tool for you. fail2ban can via regex scan any log file and add appropriate ban rule for undesirable behavior IPs. In this example we will block any client which exceed 10 POST requests in 10 seconds.

Read more of this post

whatismyip – Varnish way

Varnish is very powerful tool and many things can be accomplished by it. One simple example is WhatIsMyIP server (HTTP server that shows you your public IP) served only by varnish (no backend).

In your main vcl (by default is default.vcl) configuration file you need to add couple of lines to accomplish this:

Read more of this post

Re-enable Java on OSX 10.6

Java security issue found, stupid Apple disables Java remotely (YES REMOTELY !!!!),

So can’t access KVM over IP, server down, being unproductive…all because of Apple !!!

To re-enable, open terminal,  find installed version:

Read more of this post

Follow

Get every new post delivered to your Inbox.