• hostapd example configuration for high speed AC on 5GHz using WPA2


    This example is using RTL8821AU chipset from a TP-Link T2U Plus USB adapter and other similar ones should work the same. Here's how to get this chipset RTL8821AU working in Linux. Here's how to get RTL8812 and RTL8822 working in Linux.........
  • hostapd how to enable and use WPS to connect wireless devices like printers


    Edit your /etc/hostapd/hostapd.conf file like below and restart hostapd. #WPS stuff # Enable control interface for PBC/PIN entry ctrl_interface=/var/run/hostapd eap_server=1 wps_state=2 ap_setup_locked=1 wps_pin_requests=/var/run/hostapd.pin-req config_methods=label display push_button keypad #WPS model info stuff change to suit your needs device_name=USB2.0 WLAN manufacturer=ATHEROS model_name=WAP........
  • Cloned VM/Server/Computer in Linux won't boot and goes to initramfs busybox Solution


    This is mainly for if you've done something silly like trying to clone a Live, running VM image. In this example, the VM initially finds grub and tries to boot but is kicked straight into initramfs rescue mode/busybox right after this. If you've done this "silly" thing, you could have dataloss but a lot of times just using fsck will fix it as you are guaranteed at best to have some corruption and inconsistencies in the filesystem. My theory is that some files wer........
  • How to configure OpenDKIM on Linux with Postfix and setup bind zonefile


    This guide assumes you have a working Postfix server and want it to sign with DKIM. There are a few things we have to understand to make all of this work though, which require you to be familiar with DNS as well. 1.) Install OpenDKIM apt install opendkim systemctl enable opendkim 2.) Edit /etc/opendkim.conf Syslog yes SyslogSuccess yes Mode&nbs........
  • Debian Ubuntu 10/11/12 Linux how to get tftpd-hpa server setup tutorial


    apt install tftpd-hpa #change TFTP_ADDRESS to by setting address to 192.168.1.1:69 or the IP you need, otherwise it will listen on all IPs and interfaces which could be a security risk. # edit /etc/default/tftpd-hpa TFTP_USERNAME="tftp" TFTP_DIRECTORY="/srv/tftp" TFTP_ADDRESS="192.168.1.1:69" TFTP_OPTIONS="--secure"........
  • Apache Error Won't start SSL Cert Issue Solution Unable to configure verify locations for client authentication SSL Library Error: 151441510 error:0906D066:PEM routines:PEM_read_bio:bad end line SSL Library Error: 185090057 error:0B084009:x509 certif


    [Wed Nov 01 18:47:08 2023] [error] Unable to configure verify locations for client authentication [Wed Nov 01 18:47:08 2023] [error] SSL Library Error: 151441510 error:0906D066:PEM routines:PEM_read_bio:bad end line [Wed Nov 01 18:47:08 2023] [error] SSL Library Error: 185090057 error:0B084009:x509 certificate routines:X509_load_cert_crl_file:PEM lib It actually gives us a good clue that at last one component of our cert is invalid/improperl........
  • Linux Debian Mint Ubuntu Bridge br0 gets random IP


    This can break things easily in remove environments where it was normally easy to convert a normal eth0 to a bridge under br0, and that bridge would normally have the same MAC address by default, which is desirable for most situations. In Debian 11 this is different for some reason now. https://unix.stackexchange.com/questions/681013/bridge-gets-random-mac-........
  • redis requirements


    sysctl vm.overcommit_memory=1 echo never > /sys/kernel/mm/transparent_hugepage/enabled echo 511 > /proc/sys/net/core/somaxconn 1:M 26 Nov 2023 21:34:33.840 # WARNING: The TCP backlog setting of 511 cannot be enforced because /proc/sys/net/core/somaxconn is set to the lower value of 128. 1:M 26 Nov 2023 21:34:33.840 # Server initialized 1:M 26 Nov 2023 21:34:33.840 # WARNING overcommit_memory is set to 0! Background sa........
  • How to kill a docker swarm


    Assign way more replicas than you have of memory on all nodes and watch the Swarm crash which can easily reproduce in a small VMfor testing. root@Deb11Docker01:~# docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAM........
  • docker swarm silly issues


    The error below can be caused by a gateway that is unpingable: docker swarm join --token SWMTKN-1-1kogg8da68gtb1j7ezaddowyy9s0an5s9tue758o20k18liskw-5h3f61hrrmv3u6agshvbtcklf 172.16.1.80:2377 Error response from daemon: manager stopped: can't initialize raft node: rpc error: code = Unknown desc = could not connect to prospective new cluster member using its advertised address: rpc error: code = DeadlineExceeded desc = context deadline exceeded........
  • isc-dhcp-server dhcpd how to get longer lease


    You can do a static lease that is tied to the MAC address but what a lot of users prefer is that they come into the office or lab the next day and that their device gets assigned the same IP address (if possible). As we can see in the dhcpd logs that there is threshold that is defaulted as we'll show later. Whatever the threshold is set at, if the lease is younger than the threshold, it will keep the same lease. In other words, if the device goes to sleep or is powered off........
  • nvidia cannot resume from sleep Comm: nvidia-sleep.sh Tainted: Linux Ubuntu Mint Debian


    This seems to happen in many different drivers but it happened more often in newer versions such as 530 vs 525. Then nvidia-modeset goes to 100% There are many reports of this appearing since driver 4.70 and I can confirm I've seen this in various machines. https://forums.de........
  • [error] (28)No space left on device: Cannot create SSLMutex Apache Solution Linux CentOS Ubuntu Debian Mint


    Have you got this error from Apache? [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec) [error] (28)No space left on device: Cannot create SSLMutex At first glance it appears that you may be out of disk space but the issue is ipc or interprocess communication. This will clear out the ipcs processes so things can work, this often happens during high traffic and may be a sign of DDOS. The command below will fix it, it will list al........
  • Save money on bandwidth by disabling reflective rpc queries in Linux CentOS RHEL Ubuntu Debian


    Even today we see a lot of servers that have different services and ports open for rpc and this creates not only potential inward vulnerabilities but perhaps more common, the abuse of your network resources in reflective rpc queries. To stop this problem, you should disable and remove all services relating to rpc or at least block all relevant ports for the service. Surprisingly, there are still some providers and OS installs in Linux that install these services and leave them........
  • How to access a disk with bad superblock Linux Ubuntu Debian Redhat CentOS ext3 ext4


    Have you ever tried mounting a partition that you exists but you get this error? mount: /mnt: can't read superblock on /dev/sda1. The superblock in this example was bad because the physical disk had corruption and bad blocks/sectors. However, the data was generally accessible and you can always try this trick below (with caution and no warranty). This is specifically for filesystems that place superblocks in multiple locations, which........
  • Docker Swarm vs Kubernetes Comparison Guide


    A lot of companies are unsure which solution to choose and many may not be aware of Docker Swarm as an alternative to Kubernetes. One thing that many Sysadmins find is that Docker Swarm is simply easier, quicker to setup and maintain by far than Kubernetes.........
  • When is it time to leave your VPS/VDS Cloud Hosting Provider?


    When Is It Time to Leave Your VPS, VDS, and Dedicated Server Provider? Choosing the right hosting solution—be it Virtu........
  • 2024 Buyer's Guide: How to Choose and Buy the Best VPS/VDS for Your Needs - Tips and Strategies


    In today’s digital landscape, finding a reliable and secure Virtual Private Server (VPS) or Virtual Dedicated Server (VDS) goes beyond just comparing specs and prices. With increasing concerns over data privacy, security breaches, and government surveillance, the wisdom of choosing your VPS/VDS provider based on juri........
  • Install Grafana on Linux Debian Ubuntu Tutorial Guide


    First we need a few extra packages: apt update apt install -y adduser libfontconfig1 musl sudo wget https://dl.grafana.com/enterprise/release/grafana-enterprise_10.3.1_amd64.deb Install / Enable Grafana dpkg -i grafana-enterprise_10.3.1_amd64.deb dpkg -i grafana-enterprise_10.3.1_amd64.deb (Reading database ... 44309 files and directories currently installed.) Preparin........
  • Proxmox How To Rename Node Hostname Fix Solution


    Proxmox's documentation shows the following here. Which mainly just says change /etc/hosts and /etc/hostname with your new hostname. Here's what happens if you only do that: If you just do the above, you will find you have an inaccessible original hostname that contains those VMs and you cannot........
  • Linux how to get list of all timezones on system Ubuntu


    find /usr/share/zoneinfo/|sed s#"/usr/share/zoneinfo/"##g|grep "/"|grep -v posix|grep -v ^"Etc/"|grep -v ^right|grep -v ^"SystemV" Africa/Addis_Ababa Africa/Abidjan Africa/Blantyre Africa/Lusaka Africa/Casablanca Africa/Libreville Africa/Asmara Africa/Bujumbura Africa/Dakar Africa/Lagos Africa/Malabo Africa/Harare Africa/Kigali........
  • Proxmox install issue cannot see the buttons or install wrong / bad resolution cannot see the entire screen problem solution


    If you are using a hypervisor to test Proxmox (eg. Vbox) then changing the video card/display adapter can fix it. For example VboxSVGA causes the issue but switching to VMSVGA fixes it. For example VboxSVGA causes the issue but switching to VMSVGA fixes it. ........
  • How To Upgrade Debian 8,9,10 to Debian 12 Bookworm


    Step 1.) Upgrade to Debian 11 first The process to go to Debian 12 is not as smooth as 11, when trying to upgrade from Debian 10. In fact, it doesn't work directly, so you'll first need to follow this guide to update to Debian 11, reboot and come back here if successful. Step 2.) Update sources.list Update your /etc/apt/sources.list like this: deb http://........
  • apache2 httpd apache server will not start [pid 22449:tid 139972160445760] AH00052: child pid 23248 exit signal Aborted (6) solution Mint Debian Ubuntu Redhat


    If you get this error, it is often because you have configured Apache with modules that weren't actually installed. Eg. you try to load the PHPmodule but didn't actually install the apache2 php module, so the server can't start. In general, this error can often be caused by issues with problematic modules and/or Apache being configured for modules that have not actually be installed (eg. libapache2-mod-php) is missing. The above results in this less than obv........
  • How to use the FTDI USB serial cable to RJ45 adapter to connect to the console on Cisco/Juniper Switch Router Firewall in Linux Ubuntu Debian Redhat


    This should work for most console ports of other manufacturers too. It is a quick and simple method for emegencies or deploying a few appliances/devices in a non-standard environment or small environment. However, if this is a route thing, or the equipment is not physically close to you, it would be best to use some sort of "Terminal" server which is an IP connected switch with several serial ports built-in for this purpose. Normally they accessible by web/........
  • How To Setup Python3 in Ubuntu Docker Image for AI Deep Learning


    The issue is that Docker images are stripped down, so many tools and even python3 is missing, so you'll have to build or update the actual image yourself. I assume you have started an image with something like this and that you have the Nvidia Toolkit installed (assuming you are using GPUs). If you're not using nvidia just remove --runtime=nvidia --gpus all. docker run -it --runtime=nvidia --gpus all ubuntu bash These works for most images li........
  • How to Configure NVIDIA GPUs with Docker on Ubuntu: A Comprehensive Guide for AI Deep Learning CUDA Solution


    Welcome to our in-depth guide on configuring NVIDIA GPUs with Docker on Ubuntu. This post is tailored for developers, data scientists, and IT professionals who are looking to leverage the power of NVIDIA's GPU acceleration within Docker containers. Whether you're working on machine lea........
  • Linux Ubuntu Mint how to check nameservers when /etc/resolv.conf disabled solution


    You'll notice that /etc/resolv.conf contains dire warners on most Linux Desktops. # This file is managed by man:systemd-resolved(8). Do not edit. # # This is a dynamic resolv.conf file for connecting local clients to the # internal DNS stub resolver of systemd-resolved. This file lists all # configured search domains. # # Run "resolvectl status" to see details about the uplink DNS servers # currently in use........
  • ecryptfs how to manually encrypt your existing home directory or other directory


    Just in case, it is reocmmended to backup the original contents of the directory (especially your home dir) before proceeding. Setup ecryptfs Run this command: ecryptfs-setup-private It will ask you for your login password, this is so that when you login, everything is automatically decrypted by using a passphrase that is wrapped with your login. You can hit enter and leave things blank for an autogenerated passphrase (for mounting) or you can en........
  • Firefox how to restore and backup saved passwords and history which files/location


    The passwords are stored in the following locations on Unix/Linux: The directory is usually inside your home like this: ~/.mozilla/firefox logins.json contains the locations, username and password key*.db (usually then name could be key3.db or key4.db) Without the key file you will not see any passwords in Firefox as it is required to in order to decrypt the contents of logins.json........
  • Linux how to keep command line bash process running if you are disconnected or need to logout of SSH remotely


    So you started a process or other important task that is remote but it is in the foreground and on a pts. This means if you background with Ctrl + Z or otherwise logout or get disconnected that the process will be stopped. Here is how you can solve the problem: 1.) Hit Ctrl + Z to suspend the process. 2.) Type bg to restore the process into the background. If you do a ps aux on the process you will see it was restored with the & at the end, which puts........
  • Linux swapping too much? How to check the swappiness and stop swapping


    We could always disable swap but this would normally be a bad idea unless you have an incredible amount of RAM and a workload that will never exceed it. However, for live/containerized and high performance environments it could be desirable. Another middle ground may be to set swappiness to a lower number. You may also want to clear your kernel's cache, which could be eating up RAM unnecessarily by c........
  • How To Add Multiple SSH Keys Ubuntu Mint Linux Debian Redhat


    By default if you create a private key for SSH, it will create something like .ssh/id_rsa Linux will always search for and offer this key when connecting to servers. If you put extra keys in your .ssh directory like id_rsa_realtechtalk.com, they will be ignored by default and NOT used or offered (you can verify this with ssh -v) and see it is not being offered. Here is how you add the extra SSH keys so they are all offered: #this gives........
  • How to upgrade to the latest Python version on Linux Ubuntu Debian Mint 3.11


    A lot of developers want to go to 3.11 because of the speed improvements, but most distros never have the latest Python version. Using the deadsnakes third party repo is the easiest way aside from compiling it yourself (which is safer and recommended): Step 1 - Add the repo apt-add-repository ppa:deadsnakes/ppa If you get an error about requests then install it:........
  • python3 error Ubuntu Linux error solution SyntaxError: invalid syntax line 12 pip{sys.version_info.major}


    This sort of thing normally happens your python3 or pip3 has been updated, because you have to in order to use pip, but the newer pip now breaks compatibility with your old python (3.5 in this case). There are a few solutions, the easiest is perhaps to upgrade to a newer OS with a newer distro provided Python 3 or to manually install a newer version of Python/OR use a PPA like deadsnakes that provides newer versions. ........
  • How to install and configure haproxy on Linux Ubuntu Debian


    haproxy is one of the best known and widely used Open Source load balancers out there and a strong competitor to nginx. haproxy is used by many large sites per Wikipedia: HAProxy is used by a number of high-profile websites including GoDaddy, GitHub,........
  • How to install Windows or other OS and then bring to another computer by using a physical drive and Virtual Machine with QEMU


    This has been a tried and true method for Windows because it is finicky with hardware changes without a reinstall (eg BSOD on boot is what happens 9/10 times unless you move to the same hardwar). Surprisingly, if you use a QEMU VM and do a standard install, it has worked in every system I've thrown the drive in afterwards. So the play is this, use a USB SSD, physical SATA drive plugged internally or for convenience, you could use a SATA to USB adapter on another computer to perf........
  • RHEL 8 CentOS 8, Alma Linux 8, Rocky Linux 8 System Not Booting with RAID or on other servers/computers Solution for dracut and initramfs missing kernel modules


    This seems to have changed for RHEL 8 where a normal dracut to update your initramfs creates a system that only boots for the running kernel. For example if you have Kernel 5 and then chroot into a RHEL 8 variant which uses kernel 4.18, and run dracut, it seems that by default the system will be unbootable. It is also the case that if you move your RAID array or drives to another server that it will be unbootable, because dracut seems to only include modules needed for the curre........
  • Virtualbox Best Networking Mode In Lab/Work Environment without using NAT Network or Bridged


    Virtualbox is a very powerful tool, but for some use cases it is less than optimal. Say you are in a work, lab or other environment where you are not alone on the physical network and there could be overlap of IPs, but you need all of your VMs to be contactable from your host, VMs need to communicate with each other, and VMs need internet. NAT Network will give you VM to VM communication and internet, however, it is buggy and unstable. It also doesn't allow host to VM co........
  • debootstrap how to install Ubuntu, Mint, Debian install


    In this example we install debian 10 with --variant=minbase which gives us a minimal/tiny install. Don't use variant if you want the full size install. mkdir /tmp/deb10files debootstrap --variant=minbase buster /tmp/deb10files/ Did you get an error? debootstrap --variant=minbase buster /home/theuser/VMs/deb10files/ You'll get this error if you make a directory in your home........
  • Linux grub not using UUID for the root device instead it uses /dev/sda1 or other device name solution


    You can read lots of posts about this issue but there is not much information about why this is the case or how grub determines the root= device name. Some even suggest modifying grub.cfg manually which is a disaster as the next kernel update will cause grub to revert back to the device name. For most people this won't be an issue but those using template system, automated deployments and working in embedded may run into this issue with custom embedded and created minimal kernel........
  • Dell PowerEdge Server iDRAC Remote KVM/IP Default Username, Password Reset and Login Information Solution


    Are you new to the company, datacenter or a third party who is responsible for deploying a fleet of servers from scratch. The first step is to normally login to the KVM so you can perhaps manually reinstall, PXE boot the Cloud Image or reimage/reinstall an OS but you need access to the KVM/IP or what Dell calls iDRAC. It's common that you may have forgotten this information or that another employee or colleague has changed the info and did not tell you, that they have left the........
  • Generic IP Camera LAN Default IP Settings DVR


    If you are converting a generic wifi IP camera to ethernet, it may not be that simple as many are default hard coded to a static IP of 192.168.1.168 and login info admin/admin. From there you can login to the camera and assign it to DHCP by going to http://192.168.1.168 For security these cameras +DVR should be on a separate untagged VLAN or if possible a physically isolated non-internet connected switch/network. The reference below is applicable to many of the r........
  • How To Change Storage Location in Docker.io


    It sounds intuitive that you may just move the /var/lib/docker dir to another location and symlink it back but it won't work and you'll get an error. How to move Docker Storage the Correct Way This assumes that you want to use /mnt/raid as the new location. 1.) Stop Docker systemctl stop docker 2.) Move /var/lib/docker mv /var/lib/docker /mnt/raid/ 3.) Edit the Docker daemon file Specify the path you wan........
  • Cisco UC CME How To Enable Licensed Features


    Router#show license Index 1 Feature: ipbasek9 Period left: Life time License Type: Permanent License State: Active, In Use License Count: Non-Counted Lic........
  • from pip._internal.cli.main import main File "/usr/local/lib/python3.5/dist-packages/pip/_internal/cli/main.py", line 60 sys.stderr.write(f"ERROR: {exc}") from pip._internal.cli.main import main File "/usr/local/lib/python3.5/dist-packag


    Solution for python pip3 not working anymore from pip._internal.cli.main import main File "/usr/local/lib/python3.5/dist-packages/pip/_internal/cli/main.py", line 60 sys.stderr.write(f"ERROR: {exc}") wget https://bootstrap.pypa.io/pip/3.5/get-pip.py python3 get-pip.py DEPRECATION: Python 3.5 reached the end of its life on September 13th, 20........
  • ModuleNotFoundError: No module named 'pip._internal' solution python


    pip3 install requests Traceback (most recent call last): File "/home/user/.local/bin/pip3", line 7, in from pip._internal.cli.main import main ModuleNotFoundError: No module named 'pip._internal' As a quick and temp fix call the OS installed python and not the user .local/bin installed pip3 /usr/bin/pip3 install requests Collecting requests Cache e........
  • Cisco Switch / Router How To Restore Factory Default Settings


    1.) Make sure your conf register is 0x2102 Do show version and at the very end of the output you will see the Configuration register. show version Configuration register is 0x2102 If the config register is not 0x2102 then enter this command: r1#configure terminal r1(config)#config-register 0x2102 r1(config)#end 2.) Let's Erase the NVRAM/flash........
  • Cisco 2900 3900 Router Password Reset How To Reset Enable Password


    It is a bit different and annoying here for these types of routers/models as you need to physically remove the CF (Compact Flash) and only then, will it enter ROMMON mode (Ctrl + Pause remotely over the console will not do it for us). This means you cannot do this remotely, or at least not without the help of a remote/physical helper. Step 1.) Power off, router and remove CF Disk Slot#2 Go to the router and remove the slot#2 cover uses your hand or it may help to use a........
  • CentOS 7 / 8 cannot boot with with mdadm RAID array solution


    This article about migrating to a CentOS 7 /8 RAID mdadm array has a lot of info but I wanted to focus specifically on what newer versions of CentOS 7 require to boot mdadm and what changes are necessary on CentOS 7.8+ CentOS 7 / 8 mdadm RAID booting requirements This assumes you are chrooting into an existing install or using it to get a new deployment ready. However, these steps can........
  • Loaded: masked (Reason: Unit hostapd.service is masked.) Solution in Linux Debian Mint Ubuntu


    If you are getting this error from systemctl "Loaded: masked (Reason: Unit hostapd.service is masked.)" we need to unmask the service. Solution systemctl unmask hostapd Removed /etc/systemd/system/hostapd.service. It's fixed root@routerOS:/var/log# systemctl start hostapd root@routerOS:/var/log# systemctl status hostapd ● hostapd.service - Access point and authentication server for Wi-Fi and Ethern........
  • ecryptfs How To Backup / Migrate Linux Mint Ubuntu Debian system ecryptfs properly and restore access


    In this scenario, let's say you want to clone your OS at the filesystem level and the source system (the system you want to clone from) is in use. Doing a blind rsync / is a big problem because it uses twice as much space for no reason. The reason for this is that with ecryptfs you have a /home/.ecryptfs directory which has the actual encrypted versions of your files and folders. However your home directory (eg. /home/someuser) is mounted. Doing the blind rsync will ca........
  • i915 nouveau Nvidia GPU not starting lightdm Xorg failing solution for Could not determine valid watermarks for inherited state


    It may appear to be an Xorg or lightdm/gdm/mdm error but in reality for many users with this issue, it's a driver conflict and issue. I had a system that had two GPUs, an Intel and Nvidia GPU. The only thing that got it working was to remove the nouveau driver and blacklist it so it never came back, then the Intel GPU works fine without these issues. Solution sudo rmmod nouveau add nouveau/other driver to blacklist edit th........
  • How To Tell Which Repository a Package Comes From Debian Mint Ubuntu


    Just use apt-cache policy to find the repo of a package: apt-cache policy lxd lxd: Installed: 3.0.3-0ubuntu1~18.04.2 Candidate: 3.0.3-0ubuntu1~18.04.2 Version table: *** 3.0.3-0ubuntu1~18.04.2 500 500 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 Packages &nb........
  • ssh Too many authentication failures not prompting for password


    If you get this error when trying to SSHto a device or machine and you never even got a password prompt: Too many authentication failures This means that either the remote side is configured for key auth only, OR your client side may be attempting to auth using mulitple keys, and that exceeds the amount of attempted authorizations on the remote ssh server. If the issue is trying to auth too many times which ssh defaults to sending the keys to, you ca........
  • How To Upgrade Linux Mint 18.2 to 18.3 to 19.x and 20.x


    Linux Mint offers an easy and painless upgrade path through the last 3 versions, which means no more reinstalling to stay current with the latest version. The only catch is that you need the latest of each version, so for 18, you need 18.3 before you can go to 19, and then 19.3 (or latest), until you go to 20. However, it's really a small price to pay and on the machines we've tested, the upgrade went seamlessly each time (although sometimes video drivers/custom kernel modules l........
  • How To Do Linux Network Bonding Teaming in Mint Debian Ubuntu


    Bonding is an excellent way to get both increased redundancy and throughput. It is similar to the "Network Teaming" feature in Windows. There are a few different modes but we will use mode 6, I think it's the best of both worlds, as it is not just a failover, but it provides round robin, so you will get redundancy and load balancing. So if you have a 1G single port, you will have a combined throughput of 4G at this point. Just bear in mind that the true thr........
  • LXC Containers LXD How to Install and Configure Tutorial Ubuntu Debian Mint


    If you are using mint, delete the preference that stops snap from installing (as it is required for lxc) sudo rm /etc/apt/preferences.d/nosnap.pref 1. Install lxd: sudo apt install lxd Issues install lxd or errors? Click here Debian at this time does not have lxd so you'll need to use snap: sudo apt in........
  • GlusterFS HowTo Tutorial For Distributed Storage in Docker, Kubernetes, LXC, KVM, Proxmox


    This can be used on almost anything, since Gluster is a userspace tool, based on FUSE. This means that all Gluster appears as to any application is just a directory. Applications don't need specific support for Gluster, so long as you can tell the application to use a certain directory for storage. One application can be for redundant and scaled storage, including for within Docker and Kubernetes, LXC, Proxmox, OpenStack, etc or just your image/web/video files or even da........
  • How To Enable Linux Swapfile Instead of Partition Ubuntu Mint Debian Centos


    This may be necessary if you have a VM or if for some reason you just want to be more efficient with your space and have the flexibility of changing your swap space at will. What we mean is the ability to use a "swap file" or similar to the Windows "pagefile" that normally resides on the root or c: partition of Windows. Here's all you have to do and then you to can have a single partiton with everything, including the swap file on the root partition if you........
  • (firefox:9562): LIBDBUSMENU-GLIB-WARNING **: Unable to get session bus: Failed to execute child process "dbus-launch" (No such file or directory) Solution


    (firefox:9562): LIBDBUSMENU-GLIB-WARNING **: Unable to get session bus: Failed to execute child process "dbus-launch" (No such file or directory) ExceptionHandler::GenerateDump cloned child 9743 ExceptionHandler::WaitForContinueSignal waiting for continue signal... ExceptionHandler::SendContinueSignalToChild sent continue signal to child [Parent 9562, Gecko_IOThread] WARNING: pipe error (40): Connection reset by peer: file /build/firefox-EymEXX/fire........
  • Debian Mint Ubuntu Which Package Provides missing top, ps and w Solution


    Install procps and it will install the other packages you need: apt install procps Reading package lists... Done Building dependency tree Reading state information... Done The following additional packages will be installed: libgpm2 libncurses6 libprocps7 lsb-base psmisc Suggested packages: gpm The following NEW packages will be ins........
  • Docker Tutorial HowTo Install Docker, Use and Create Docker Container Images Clustering Swarm Mode Monitoring Service Hosting Provider


    The Best Docker Tutorial for Beginners We quickly explain the basic Docker concepts and show you how to do the most common tasks from starting your first container, to making custom images, a Docker Swarm Cluster Tutorial, docker compose and Docker buildfiles.........
  • Zoom Password Error 'That passcode was incorrect' - Solution Wrong Passcode Wrong Meeting Name


    Have you been given a Zoom password that the meeting owner says is correct but it doesn't work anymore or never works? If the meeting name says "Zoom Meeting" and it's not really named that (which most meetings are not), then the issue is usually that there is an initial password to be able to join, aside from the passcode. It basically means that Zoom has deauthenticated you randomly or maybe after X amount of uses, without clicking on the Join Meeting URL which contains a........
  • How To Startup and Open Remote/Local Folder/Directory in Ubuntu Linux Mint automatically upon login


    Just click on the Start Menu and go to "Startup Applications" Then click on the "Add"Button Now enter the command we need to open the folder/directory automatically using the filemanager For remote SSH host (you need pub key auth for it to open without a pa........
  • How To Reset Windows Server Password 2019, 2022, 7, 8, 10, 11 Recovery and Removal Guide Using Linux Ubuntu Mint Debian


    This was done on Mint 20 but works the same on nearly any new Linux, but is only recommended for people comfortable or familiar with Linux. This method will work on almost all versions of Windows from NT, 2000, 2003 Server, 2008 Server, 2012 Server, 2016 Server, 2019 Server, 2022 Server, XP, Vista, 7, 8, 10 and 11. However, if you want the easiest solution to........
  • How To Create OpenVPN Server for Secure Remote Corporate Access in Linux Debian/Mint/Ubuntu with client public key authentication


    Why choose OpenVPN instead of a firewall appliance? OpenVPN can be a reliable and easy replacement for traditional hardware or just be an additional tool that your company uses so that the firewall can focus on its job rather than acting as a VPNappliance at the same time. When comparing OpenVPN with traditional firewal........
  • ssh-keygen id_rsa private key howto remove the passphrase so no password is required and no encryption is used


    The key is that you need to know the passphrase to do it, if you don't know the password for the key then you can't remove the key since it cannot be decrypted. ssh-keygen is the easiest method and openssl can be used to manually remove the key and output it to a new file, which you can then copy back over top of the encrypted file. After that your public key authentication will work without any password prompt because it is no longer encrypted. Make sure you understand........
  • tag#4 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE tag#4 Sense Key : Illegal Request [current] res 40/00:b4:98:02:00/00:00:00:00:00/40 Emask 0x10 (ATA bus error) solution


    You might assume you have a bad drive or the SATA interface/cable is bad, or the power supply is bad/weak to the drive. These are all possible issues, but definitely check your SATA cable for "twisting". It is a big issue because until the error stops or times out, your system will not boot (in my case this was the case even though the drive with the issue was not part of the OS or booting process at all). If you run an open rig that you move around often that ha........
  • Wazuh / OSSEC Install and Configuration Howto Tutorial Guide for Monitoring Agents SIEM


    How To Install Wazuh Server / Quickest Installation Wazuh (forked from the well known OSSEC project) is a full SIEM (Security Information Event Management) that works extremely well with the platforms it natively supports as an "Agent", which allows you to do scans of everything such as all processes running, CVE vulnerability check, incident reporting etc... Prerequisites: A lot of issues with Wazuh seem to be caused by i........
  • How to allow SSH root user access in Linux/Debian/Mint/RHEL/Ubuntu/CentOS


    A lot of newer installs will automatically prohibit the root user from logging in directly, for security reasons or they will only allow key based access. If you know what you are doing/don't care about security or have an incredibly secure password for testing, then you can enable it. Edit this file: /etc/ssh/sshd_config Find the following line: PermitRootLogin Set it like this: PermitRootLogin yes Now rest........
  • Ansible Tutorial - Playbook How To Install From Scratch and Deploy LAMP + Wordpress on Remote Server


    1. Let's work from an environment where we can install Ansible on. If you are using an older version of Linux based on Mint 18 or Ubuntu 16, you may want to get the PPA and get the latest version of Ansible that way: sudo apt install gpg sudo add-apt-repository ppa:ansible/ansible sudo apt update........
  • Linux Ubuntu Debian Centos Mint - How To Check if Intel VT-x or AMD-V Hardware Virtualization is Enabled?


    From the terminal do this: cat /proc/cpuinfo|grep -E "svm|vmx" You should get output like this(svm = AMD-v and vmx=Intel-VTx): flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc cpuid aperfmperf pni pclmulqd........
  • Linux Mint 20 cannot install snapd missing solution


    The Linux Mint team has disabled it by setting an apt preference, you can edit or just remove the file: sudo apt install snapd Reading package lists... Done Building dependency tree Reading state information... Done Package snapd is not available, but is referred to by another package. This may mean that the package is missing, has been obsoleted, or is only available from another source........
  • How to install Kubernetes with microk8s and deploy apps on Debian/Mint/Ubuntu Linux


    Kubernetes Easy Beginners Tutorial/Architecture Guide Kubernetes is known as container orchestration and we should start at explaining the container part of it. A Container is what runs the actual application and based on an Image, and are more comparable to something like an LXC Container, Virtuozzo/OpenVZ using the Linux Kernel Namespaces feature. Containers run these images as independent, isolated operating environments under the O........
  • Cisco Howto Configure Console Port/Terminal/Comm Server with Async Cable Setup


    This assumes that you've already installed the relevant HWIC cards eg. Cisco Asynchronous Serial NIM These are essentially cards that you install into your router, once installed you connect an Async cable to one of the ports on the card which normally gives you 8 console cables and are normally labelled 1 through 8. You connect all of the cables to the devices you need (even non-Cisco devices) whether switches, routers or firewalls, they will usually work. The real m........
  • Ubuntu/Debian Linux/Unix Howto Setup Install Syslinux Bootable USB with EFI and MBR from Command Line/CLI Terminal


    There aren't too many simple guides that show you how to use commands to setup your USB or other drive as a normal bootable drive where you can easily boot custom kernels or whatever OS you would like. 1. Get the tools we need: We install "syslinux" for MBR and "syslinux-efi" for EFI and "MBR" as we need a tool that embeds the actual MBR into our USB: sudo apt install syslinux syslinux-efi mbr........
  • Cisco Switch Howto Reset Password


    This was done on a 2900 but applies to all the switches of the same era. Step 1 - Power Cycle and enter recovery mode If you have physical access you can power cycle and hold the mode button down for 15 seconds. After that the SYS light will flash on the switch and you will see the following screenshot. If you don't have physical access (eg. it is a datacenter swich over console only) then power cycle and hit "Ctrl+Pause/B........
  • SSH cannot connect to old servers/devices/switches/routers/Cisco/Juniper Unable to negotiate with 192.168.20.2 port 22: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hell


    A lot of older devices either support telnet or very old SSH keyx algorithms which are insecure and disabled by all newer/modern SSH clients for security reasons. However, sometimes you may be on a LAN via VPNor some other secured network or for whatever reason, absolutely, need to connect to this device and sometimes old/embedded devices may not be possible to update to a newer SSH server. If you run into this you may be using a modern/newer SSH client and get thi........
  • Cisco Router Password Reset Howto Guide Solution Cannot Login /Unknown Enable Password 2600, 2800, 2900, 3900


    It is common that you may get access to undocumented equipment and need to reset the password. This applies to many Cisco routers whether 2600, 2900, 3900 etc... Cisco's Guide says to hit Ctrl +Pause/Break but if it doesn't work on some devices causing people to say "cisco password reset pause break does not work", you can see Cisco's alternative key combinations here:........
  • VirtualBox VBox Nat Network Handing Out Wrong IP Address Subnet Solution


    This seems to be an ongoing issue that is still reproducable in the latest Ubuntu Vbox 6.x. The default NAT Network range is usually 10.0.2.0/24. If you change this range it does not seem to work properly. Say we change the range to 10.50.1.0/24 If you get a new lease you will find that you get an IP from the old range but the default gateway is from the new range. ........
  • Unable to mount location Failed to retrieve share list from server: Connection timed out - Samba/Linux Filesharing Not working Ubuntu Mint Linux Solution


    So you're trying to browse to a properly configured Samba share but you get this error: Unable to mount location Failed to retrieve share list from server: Connection timed out If your config is right, it can be due to a protocol miss-match where your client has not enabled SMB3 but by default the other side (server) has enabled it. You can test this out to see with the smbclient tool........
  • EFI PXE grub2 Howto guide for Linux EFI PXE Booting on Debian, Mint, Ubuntu, RHEL


    Just a quick note and warning is that if you are testing to see if EFIPXE booting works on a VM, MAKE SURE it actually works. For example Iinitially tested using my Distro's QEMU 2.5+dfsg-5ubuntu10.46 and ovmf BIOS firmware (OVMF supports EFI). However, I found on old versions of QEMU (like 2.5), EFIbooting with GRUB NEVER works so it may appear that you have made a mistake when everything is fine when you boot a physi........
  • Juniper JunOS Command Overview and Howtos Switch, Router, Firewall Tutorial Guide


    Enable "cli" mode equivalent in JunOS cli Configure Mode configure So rather than going to the console on a Cisco switch and typing "enable" and then "conf t", the equivalent in JunOS is "cli" and "configure". How Do You Apply Changes You've Made? You can make all kinds of changes to the switch, but remember they are not........
  • Aruba/HP/Dell IAP Wireless Controller Common Default Passwords


    Aruba has a very traditional "admin" for user and password by default for many of its appliances. If you've reset or just got some new units this will be the default password that you should change immediately for security reasons.........
  • Debian, Mint Ubuntu how to remove package and associated config files


    If you want to start fresh a lot of people falsely assume that an apt remove and then reinstall or apt --reinstall install package will start you off fresh. To be sure and remove all associated config files do the below with the example of ssh server (don't remove it though if you actually use it!) The key below is using the --purge flag or apt-get purge proftpd (eg sudo apt --purge remove packagename) apt purge proftpd; apt install proftpd........
  • Linux Grub not booting the intended kernel solution in Debian, Mint, Ubuntu how to specify which kernel to boot by default


    Traditionally kernels were numbered starting from 0 but by default the "new style" of grub boot loading considers each subkernel item to be different so if you have 3 entries for 4.40-148 rather than counting for 1. To get the expected behavior let's show this example and how we can boot it We do a grep on menuentry in /boot/grub/grub.cfg to see all of the bootable kernels rather than scrolling through loads of extra entries we don't care about (thou........
  • QEMU KVM Keyboard Problems Not Working Right Repeating Characters, Ctrl+C Copy and Paste not working right when using PS2 mouse in guests Solution


    It seems that QEMU/KVM's default PS2 mouse and keyboard doesn't work right in most cases. I have especially observed issues using Ctrl+C and Ctrl+V and in Linux you may see repeated key presses in the terminal and you will wonder why you copied something and it's not in the clipboard when you try to paste. The way to temporarily fix it is to press the key that is repeating once(works in Linux but not really in Windows). Sometimes when moving your mouse it will also s........
  • Linux how to compile binary with static sharedobjects embedded instead of dynamic to use on multi-distributions and avoid glibc compatiblity issues


    One simple flag to configure will create a makefile that statically links all the shared objects and embeds them instead the binary execute. This means as long as you have the same architecture that things should run. Eg. if you have an old version of Debian with a different version of glibc, then this will solve that problem. ./configure LDFLAGS="-static" To test that it is really statically linked run ldd: ldd src/wget........
  • Mikrotik RouterOS CHR/ISO Basic and Quick Setup Howto Guide


    Many people may not be aware that you can turn commodity hardware into a Mikrotik OS and there are various options which is "CHR" (Cloud Hosted Router) which is a VMimage meant for Virtualization only (seriously, I've tried to dd the image to a physical server and it just crashed as it does not contain any drivers for physical). One note as well if you are trying to do a baremetal install you may get an error "Error Loading Operating System" or........
  • qemu 4 compilation options


    How To Compile QEMU Manually (using sensible options) 1.) Download the QEMU source file you want. wget https://download.qemu.org/qemu-4.2.0.tar.xz 2.) Extract The Source File tar -Jxvf qemu-4.2.0.tar.xz 3.) Switch to the extracted source cd qemu-4.2.0 4.) Make sure we have the right libraries and tools to compile QEMU manually sudo apt install build-e........
  • Wordpress How To Add Featured Image To Post in Hueman Theme


    It is different than other Wordpress templates. You have to edit the following file: wp-content/themes/hueman/parts/single-heading.php Add the following PHPcode to the bottom: ........
  • Huion and Wacom Tablets How To Install in Linux Mint / Ubuntu and make the stylus work properly


    It took a lot of fiddling to make a Huion Kamvas 13 Pro work in Linux but it simple once you know what to do. Don't bother searching as it is unlkely there is a guide out there that will actually make your tablet work. It mainly comes down to the fact that the hid_uclogic kernel module is buggy or doesn't support MANYof these wacom based/Huion tablets properly. What was happening with me is that Ihad the Kamvas 13 Huion setup as a secondary screen/monitor.&nb........
  • ffmpeg how to cut certain parts of video out


    With ffmpeg it literally takes out what you want so you can use it later. Eg. below -ss means starting time is 16 minutes and 30 seconds and -to means extract until 17 minutes and 23 seconds -i = the input file output file = CCME-flash-and-2-phone-setup-final.mp4 ffmpeg -i CCME-flash-and-2-phone-setup.mp4 -ss 00:16:30 -to 00:17:23 -c copy CCME-flash-and-2-phone-setup-fin........
  • ffmpeg how to concat and join two video clips


    This normally works but if not use my mencoder solution if the output video does not play past the joined time. the contents of list.txt need to look like this: file somefile.mp4 file somefile2.mp4 then run ffmpeg ffmpeg -f concat -i list.txt -c copy CME-2-router-dial-peer-final.mp4 The result is almost instant joining since there is no video processing since we are........
  • Linux How To Stop Missing Drive from Halting Boot Process in fstab


    When you automount a drive in /etc/fstab even if it's not important like an external drive that you only use sometimes and is not required for booting, it will prevent a successfuly boot. If you disable quiet mode for booting you will see something like below "A start job is running for dev-disk ...." How do we fix an fstab entry from preventi........
  • How To Replace Audio Track of Video using ffmpeg


    A very common use case is that you don't want to waste time using a video editor that requires you to open it up and manually import the video clip and audio clip, then manually delete the old audio track and import the video and new audio. That's too much work and time since we don't want to go through the hassle. ffmpeg is our solution, all we have to do is specify 3 variables and we're done! -i Windows2019-Server-Noaudio.mp4 is our in........
  • Linux and Windows Dual Boot Crazy Time Issues


    The problem is that Linux uses UTC and Windows uses the local time from the RTC. This means whenever you boot Linux or Windows and then go back to the other OS, you will find your time is incorrect because of the two different clock modes fighting. This results in very annoying issues when booting between the two because the clock is set based on the different standards once you boot (eg. Linux UTC by default and Windows RTC). For example it may cause issues with fsck and........
  • Linux Mint Ubuntu Debian CentOS Dual Boot Install Issues


    The best way to avoid this problem is to understand how your BIOS is setup to boot. Often newer machines will default to U(EFI) which is different than the traditional MBR/Legacy mode. The problem is that this may not be apparent, often a BIOS Boot Menu will show a Legacy Boot Option and EFIOption without defining it. A good example of this is if your USB is called "Kingston" you may see in your Boot Menu "Kingston" and also "Ubuntu"........
  • Linux Mint Ubuntu Debian Centos RHEL no sound solution


    This assumes your system is a fresh and normally working install. What often happens is that many new devices have multiple audio outputs which are generally analog and HDMI/Digital out. Sometimes the OS defaults to the wrong one that you didn't want. For example if your sound is supposed to play over the HDMI, perhaps the output is set to analog or vice versa.........
  • Linux Mint/Debian/Ubuntu/Centos Installer black grub screen and blank screen after trying to boot installer or main OS


    This happens to a lot of Nvidia users especially users of newer cards like the RTX series. If for example you are trying to boot and install Linux and you get a black and white grub2 screen instead of a nice graphical welcome installer, you probably suffer from this bug. It is normally followed by the user booting and finding they just have a blank/black screen. Here is the quick flow of steps to fix it: If you get a black grub scree........
  • Virtualbox Error Cannot register the hard disk because a hard disk with UUID already exists solution


    Cannot register the hard disk '/some/path/windows-marking.vdi' {f54def00-2252-43f5-9178-0998636cad61} because a hard disk '/other-path/windows-marking.vdi' with UUID {f54def00-2252-43f5-9178-0998636cad61} already exists. Result Code: NS_ERROR_INVALID_ARG (0x80070057) Component: VirtualBoxWrap Interface: IVirtualBox {0169423f-46b4-cde9-91af-1e9d5b6cd945} Callee RC: VBOX_E_OBJECT_NOT_FOUND (0x80BB0001)........
  • kernel: [549267.368859] mate-terminal[7871]: segfault at 2000000101 ip 00007f5d0a9548f0 sp 00007fff7012c610 error 4 in libgobject-2.0.so.0.4800.2[7f5d0a920000+52000]


    kernel: [549267.368859] mate-terminal[7871]: segfault at 2000000101 ip 00007f5d0a9548f0 sp 00007fff7012c610 error 4 in libgobject-2.0.so.0.4800.2[7f5d0a920000+52000] This seems to be a long-time bug in Mint mate-terminal where you sometimes move or detach a terminal and it crashes losing all of the other open terminal sessions.........
  • apcupsd how to setup and monitor APC UPS units


    It really seems limited in that it can mainly give you the things you would see on the physical unit such as load etc.. wget https://downloads.sourceforge.net/project/apcupsd/apcupsd%20-%20Stable/3.14.14/apcupsd-3.14.14.tar.gz?r=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fapcupsd%2Ffiles%2Flatest%2Fdownload&ts=1598115866 tar -zxvf apcupsd-3.14.14.tar.gz cd apcupsd-3.14.14 [root@somebox apcupsd-3.14.14]# ./conf........
  • How To Password Reset, Recover, Bypass, Remove and Unlock on Windows 10,8,7,Vista,XP,NT,2000,2003,2008,2012,2016,2019 Administrative Login Programs


    If you've come here, don't be embarraassed, working in IT, this is the MOST common computer problem that almost everyone will encounter. The reason why I'm doing this post is because I've seen an increase from colleagues and admins having this problem and many times it's not even your fault. A common scenario is that someone acquires a new or used computer which they weren't given the password for. Fortunately Ihave a detailed list of all the options whether free or pa........
  • Nvidia Ubuntu Linux Screentearing Video with solution driver


    This seems to happen on most if not all Nvidia cards but the good news is that if you are using any of the Linux drivers and have the nvidia-settings tool installed it is just a simple command. Solution: nvidia-settings --assign CurrentMetaMode="nvidia-auto-select +0+0 { ForceFullCompositionPipeline = On }" Enter the above command in your terminal and the screentearing will be fixed which is like enabling Tear Free on AMD cards.&........
  • ?? Question Marks for time, permissions and size of a file?


    -?????????? ? ? ? ? ? shadow ----------. 1 root root 748 Jul 10 04:35 shadow- cat: shadow: Input/output error If you see this you are probably in big trouble, it could be a physical error or if it's a VM image that it is corrupted due to a physical error on the underlying disk/array/NAS or it could a........
  • Linux Ubuntu Wifi Disabled Only Works When Laptop Plugged Into Wall AC Power


    This is very frustrating but the fix is usually easy once you read this blog. It's very frustrating when you find that your Linux / Ubuntu laptop's wifi will NEVER work unless it is plugged into the power. The wifi menu may say "Wifi disabled by hardware switch". You may find that your laptop has no switch or has a function wifi button on the keyboard but this does not work or have any effect. The cause is usual a "wmi" kernel module and simply doing an........
  • CentOS 6 impossible to compile a newer libguestfs


    yum -y install gcc make gperf genisoimage flex bison ncurses ncurses-devel pcre-devel augeas-devel augeas readline-devel checking for cpio... cpio checking for gperf... no configure: error: gperf must be installed configure: error: Package requirements (augeas >= 1.2.0) were not met: Requested 'augeas >= 1.2.0' but version of augeas is 1.0.0 yum remove augeas augeas-libs augeas-devel wget http://downl........
  • How To Get Started on Ubuntu with gpt-2 OpenAI Text Prediction


    apt install software-properties-common add-apt-repository ppa:deadsnakes/ppa apt update apt install python3-pip apt install python3.7 curl gnupg python3.7-dev git ln -s /usr/bin/python3.7 /usr/bin/python3 pip3 install numpy keras_preprocessing curl https://bazel.build/bazel-release.pub.gpg | sudo apt-key add - echo "deb [arch=amd64] http://storage.googleapis.com/bazel-apt stable jdk1.8" | sudo tee /etc/apt/sources.list.d/bazel........
  • Remove cloud-init in your VM


    Unless you are using OpenStack, AWS etc then cloud-init is just some bloat that slows down the booting of your VMand can actually halt it from booting if it doesn't have a proper working IP (not good!). #remove cloud init! Debian based Ubuntu / Mint sudo apt remove cloud-init RHEL / CentOS based yum remove cloud-init ........
  • How To Speed Up Linux Ubuntu and Debian Based Computers By Improving CPU Performance and Changing the CPU Governor


    I used to believe that for Desktops especially that the "ondemand" CPUfrequency changing that kernels included with Ubuntu and Debian based distros have would be sufficient for snappy performance. However, you can feel the lack of performance on the fastest computer if you have ondemand. A lot of times even under high load 100% of your CPUfrequency in MHz will not be used. For example a 2.8Ghz CPUmay only run at 1.8MHz or even .9GHz. Now........
  • Linux Mint Ubuntu Debian radeon slow 2D performance issues radeon_dp_aux_transfer_native: 158 callbacks suppressed


    radeon_dp_aux_transfer_native: 158 callbacks suppressed The simple answer is that radeon driver sucks and is a remnant of typical AMD/ATI issues. Use AMDGPUif you support it:........
  • How To Install NextCloud on Centos 7 and Centos 8


    yum -y install wget unzip wget https://download.nextcloud.com/server/releases/nextcloud-18.0.2.zip unzip nextcloud-18.0.2.zip yum -y install php php-mysqlnd php-json php-zip php-dom php-xml php-libxml php-mbstring php-gd mysql mysql-server Last metadata expiration check: 0:58:02 ago on Fri 13 Mar 2020 02:12:49 PM EDT. Dependencies resolved. ===================================================================........
  • AH01630: client denied by server configuration:


    This happens when upgrading to Apache 2.4 from 2.2 or just because you don't have the right permissions set which we'll get into. You need this in the ........
  • How To Install OpenProject on Centos 7 Step-by-Step Guide


    There are a few caveats that may not be obvious to everyone so I am going to cover them here but keep this in mind before starting. Before starting install epel or you will be missing tesseract: yum -y install epel-release #1) When you specify your SSL certificate with a full path, it really needs to exist where you tell it to (including the default location of /etc/ssl/certs and /etc/ssl/c........
  • How To Install python 3.4 3.5 and up on Linux with wine - Working Solution


    This is sure simple if you follow the guide but it took a lot of hacking around to make this work on Debian/Ubuntu! Now before you ask why bother running wine and python, the reason is because Python executables are NOT cross-platform. If you run pyinstaller in Linux, that binary will only run on Linux and the same if you do it in Windows. So it is preferable if you have a single environment that you can create Linux and Windows binaries from rather than running 2 separate........
  • using Xvfb on virtual remote ssh server to have X graphical programs work


    The scenario here is that you have some sort of remote headless Linux server but would like to run some programs on them and get graphical access to them. The problem is that the remote server may be an image or VMwithout any virtual GPU and even if so, it is likely without KDE or Gnome, so there's no real way to do this, unless you follow our guide. Install xvfb apt install xvfb Reading package lists... D........
  • ssh Received disconnect from port 22:2: Too many authentication failures


    If you are getting this error it is usually caused by having more than 5 keys in your ".ssh" directory. It is a bit of a bug and this is how it manifests itself. You will find at this point that you are not given any chance to enter a password, or if you are using key based auth that the same thing happens. You'll also find that this is happening with ALLservers you try connecting to. The solution is to move away key pairs from .ssh so that there ar........
  • httpd: Syntax error on line 221 of /etc/httpd/conf/httpd.conf: Syntax error on line 6 of /etc/httpd/conf.d/php.conf: Cannot load modules/libphp5.so into server: /lib64/libresolv.so.2: symbol __h_errno, version GLIBC_PRIVATE not defined in file libc.s


    httpd: Syntax error on line 221 of /etc/httpd/conf/httpd.conf: Syntax error on line 6 of /etc/httpd/conf.d/php.conf: Cannot load modules/libphp5.so into server: /lib64/libresolv.so.2: symbol __h_errno, version GLIBC_PRIVATE not defined in file libc.so.6 with link time reference This is usually caused by a mismatch in OpenSSLversion. Interestingly enough a lot of times if it has happened during an update of your system, or after, usually just restarting httpd........
  • Radeon R3 GPU on Debian Crashing


    Occasionally my whole screen locks up and I cannot even swith to the console and I find this in my syslog: *-display description: VGA compatible controller product: Mullins [Radeon R3 Graphics] vendor: Advanced Micro Devices, Inc. [AMD/ATI]  ........
  • MySQL 5.7 on Debian and Ubuntu - How To Reset Root Password


    MySQL on Debian versions is configured differently than the native local MySQL plugin so you will be disappointed when your password on the mysql client fails by default. Here is how you reset the MySQL root password the proper and "working way" #first we gracefully stop mysql sudo systemctl stop mysql; #then we forcefully kill any mysqld process just in case sudo killall -9 mysqld mysqld_safe;........
  • SSH and sshfs timeout settings keepalive


    A big problem over ssh and especially sshfs is that your connection will often timeout and disconnect after inactivity. To fix this you can modify the server but it may not be practical or you may not have access. Why not send keep alives fom your end (client side)? Just edit /etc/ssh/ssh_config (not to be confused with sshd_config as that is the server side): Find the line that says "Host *" and change it like this:........
  • Howto Set Static IP on boot in initramfs for dropbear or other purposes NFS, Linux, Debian, Ubuntu, CentOS


    This is only really necessary in the case you don't want DHCP. If you are dealing with an encrypted LUKS server on the internet, you will often want to have a static IP so you know which IP to connect to (or if you have a semi-static IP assigned by DHCP). SET IP Address by /etc/initramfs-tools/initramfs.conf IP Address=192.168.1.27 Gateway=192.168.1.1 Subnet Mask: 255.255.255.0 Hostname=myhome.com IP=192.1........
  • Convert and install to LUKS Encrypted Drive Ubuntu 18.04 19.10 Linux Mint and Debian Based Linux


    The reason for doing this is that the installer doesn't seem to work properly for LUKS and the server installer doesn't even support LUKS anymore. When you use the GUI install on Desktop for LUKS it won't boot and will just hang after you enter your password. So the only reliable way is to do it ourselves. 1.) Make a default minimal install of Ubuntu 2.) Have a secondary disk on the server or VM. 3.)........
  • Debian and Netplan


    Create your netplan file vi /etc/netplan/01-netcfg.yaml network: version: 2 renderer: networkd ethernets: ens3: dhcp4: no ........
  • CentOS 8 how to convert to a bootable mdadm RAID software array


    The cool thing here is that we only need 1 drive to make a RAID 10 or RAID 1 array, we just tell the Linux mdadm utility that the other drive is "missing" and we can then add our original drive to the array after booting into our new RAID array. Step#1 Install tools we need yum -y install mdadm rsync Step #2 Create your partitions on the drive that will be our RAID array Here I assume it is /dev........
  • ADATA USB Thumb Drive Issues


    This is the reason that I don't like the new ADATA USB drives such as the UV128/64GB or 128GB drives and other ones that look to be the same style (the green sliding USB connector). They just don't work well from new and never work properly at any point. [ 788.242463] usb 1-1.2: new high-speed USB device number 16 using ehci-pci [ 788.339816] usb 1-1.2: New USB device found, idVendor=125f, idProduct=db8a [ 7........
  • SSH How To Create Public/Private Key Pair and with a Larger Keysize than 2048 bits


    The problem is that by default ssh-keygen loves to generate an easy to crack 2048 bit key (RSA). Supposedly having a larger keysize helps such as 4096 or 8096 but it is thought to be useless still against Quantum computing. How can I check my existing keysize and type? ssh-keygen -lf /path/to/your/id_rsa.pub The output will be something like below followed by the hash. The first number is the key size and the second part will b........
  • ssh how to connect using a SOCKS 5 proxy with nc and proxycommand


    This is not about using ssh as a proxy, but rather, using a proxy when you are SSHing to another host and using ProxyCommand (where we normally use nc as our proxy tool). In newer versions of nc the syntax has changed to the following: ssh -o ProxyCommand="nc -x 127.0.0.1:1234" %h %p user@host The format must be like above in newer nc versions. Just be sure to change the 1234 to the port of your SOC........
  • apache symlinks denied even with followsymlinks


    Symbolic link not allowed or link target not accessible: /path/httpdocs/news.html There are a few reasons that can cause this message and this is for people who have ruled out the basics, eg. your symlinks are enabled and the right permissions are applied (but read on to learn about ownership requirements above the directory in question). So there are a few key things here that cause Apache not to follow symlinks:........
  • dd how to backup and restore disk images including compression with gzip


    dd is a very handy tool and there are some more practical things we can do. For example if we want to dump a 3TB drive and want to preserve it and only 200GB are being used on the 3TB we can save a lot of space with gzip. Backing Stuff up with dd How to Use dd to backup a raw hard drive and tar gzip at once Change /dev/sda to the drive you want to backup Change /mnt/extras........
  • mpv / mplayer with Radeon / AMD GPU Video Card Driver enable VDPAU GPU Accelerated Video Decoding


    The easiest way to know if your videos are playing with GPU acceleration are to watch the process of xplayer, mpv or whatever you are playing. The CPU usage should be no more than 10% for that process/program if it is using acceleration. Let's manually play with vdpau to make sure it works before we make it permanent: First make sure you have libvdpau installed: sudo apt install vdpau-driver-all If yo........
  • Wordpress Reset Blog User Password from MySQL Using Linux Bash and not PHPMyadmin


    The reason we use the command below is because we need the md5sum value hash of the password. This means that we cannot use the md5sum Change "yournewpass" to the pass you want to set echo -n "yournewpass" | md5sum Then you get the md5sum hash of whatever you entered eg. in this case "yournewpass" 5a9351ed00c7d484486c571e7a78c913 ........
  • MariaDB / MySQL Reset Root Forgotten Password on Centos 7


    mysql reset root password. Oops I can't remember my MySQL root password! [root@centos7test etc]# mysql -u root -p Enter password: ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES) First we need to stop mariadb: systemctl stop mariadb Now we need to restart it with skip-grant-tables whic........
  • Centos 7 How to install Mysql/Mariadb


    yum -y install mariadb-server systemctl start mariadb mysql_secure_installation Now we need to secure our install and set the MariaDB root password: The lines you need to act on are marked in bold shown with the answer you need. mysql_secure_installation NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB SER........
  • Linux 3D Performance benchmarks with glxgears 59-60fps solution


    You need to disable vsync like this when running glxgears: vblank_mode=0 glxgears For Nvidia drivers do this: __GL_SYNC_TO_VBLANK=0 glxgears Notice the higher than 59-60 fps results with vblank_mode=0: ATTENTION: default value of option vblank_mode overridden by environment. 7919 frames in 5.0 seconds = 1583.704 FPS 8187 frames in 5.0 seconds = 1637.266 FPS........
  • How To Install Asterisk 16 17 on Debian Ubuntu Linux


    Downloading and compiling from source to get the latest version of Asterisk is really simple with this guide. apt install gcc make g++ libedit-dev uuid-dev libjansson-dev apt install libxml2-dev sqlite3 libsqlite3-dev wget http://downloads.asterisk.org/pub/telephony/asterisk/asterisk-16-current.tar.gz tar -zxvf asterisk-16-current.tar.gz cd asterisk-16.6.2/ ./configure If you get this error change y........
  • How To Restore Windows MBR Bootsector from Linux using syslinux


    There are many ways but a favorite way is to boot any Linux LiveCD and to use the syslinux package like so: Just change the "sdx" to your sd for example /dev/sda or whatever the drive is that is supposed to boot Windows. sudo dd if=/usr/lib/syslinux/mbr/mbr.bin of=/dev/sdx 0+1 records in 0+1 records out 440 bytes copied, 0.0197808 s, 22.2 kB/s........
  • Cannot Print PDF Solution and Howto Resize


    If you can print other PDFs but not a particular one it is very likely that the PDF size is A4 (the longer, skinnier Asian paper size) instead of the North American letter size ( 8.5" x 11"). This breaks printing in most cases. Or it may print if you find a program that ignores the size issue. Here is an example of an A4 being rejected by a printer in Ubuntu Linux via CUPS Cannot print PDF CUPS Samsung C460: Processin........
  • Linux Console Login Screen TTY Change Message


    This is all controlled by /etc/issue You can basically enter anything in there that you like, but there are preset variables that are mentioned at the end of the page that discuss this. Some examples of /etc/issue: Centos 7: S Kernel r on an m Ubuntu 16.04: Ubuntu 16.04.6 LTS n l You can also insert any of t........
  • MySQL Bash Query to pipe input directly without using heredoc trick


    Most of us know the heredoc method but what if you need a basic query done repeatedly and manually while working from bash? It is a pain to manually type mysql and login each time. With this command below you can semi-automate those queries: echo "use somedb; select * from auctions" | mysql -u root --password="yourpassword" Just modify the above to suit your needs and you can add more queries by adding a sem........
  • MySQL Cheatsheet Guide and Tutorial


    Create Database: create database yourdbname; Show All Databases: show databases; Change Database: use mysql; Drop / Delete a MySQL Database: drop database nameofyourdatabase;........
  • python import docx error


    sudo pip3 install python-docx [sudo] password for : Downloading/unpacking python-docx Downloading python-docx-0.8.10.tar.gz (5.5MB): 5.5MB downloaded Running setup.py (path:/tmp/pip_build_root/python-docx/setup.py) egg_info for package python-docx no previously-included directories found matching 'docs/.build' warning: no previously-included files matching '.DS_Store' foun........
  • Cisco Unified Communications Manager Express Cheatsheet CUCME CME Tutorial Guide


    Video Links: How To Setup 2 Phones on a Single CME Router and get the GUI going. How to use Dialpeers with CME with two routers How to implement call restrictions using COR / Class of Restriction Getting started, let's enable ephones and DNs we can add a phone with........
  • Linux Ubuntu Debian Missing privilege separation directory: /var/run/sshd


    service sshd status ● ssh.service - OpenBSD Secure Shell server Loaded: loaded (/lib/systemd/system/ssh.service; enabled; vendor preset: enabled) Active: failed (Result: start-limit-hit) since Wed 2019-10-02 11:07:54 EDT; 36s ago Process: 476 ExecStartPre=/usr/sbin/sshd -t (code=exited, status=255) Oct 02 11:07:54 box systemd[1]: Failed to start OpenBSD Secure Shell server. Oct 02 11:07:54 box sys........
  • bash if statement how to test program output without assigning to variable


    A common method in bash is to assign output to a variable like this: somevar=`uptime` That works too but it could be more efficient to do something like this: if [[ $(uptime|awk '{print $3}') > 20 ]]; then echo "uptime greater than 20 days"; fi........
  • RTNETLINK answers: Network is unreachable


    This often happens if you are adding a secondary route, especially with Linux source based routing. ip route add default via 10.10.10.254 table 10 RTNETLINK answers: Network is unreachable If that happens you will probably find that it is unreachable because your NIC does not have an IP in the 10.10.10.0/24 range so just assign an IP in that range to your NIC and try again. eg. ifconfig eth0 10.10.10.254 netmask 255.255.255.0 up........
  • LUKS unable to type password to unlock during boot on Debian, Ubuntu and Mint


    I think this is more so an issue with kernel modules not being included. I had this issue on Linux Mint because a new kernel I upgraded to DIDNOT have the "extra" modules and part of that reason is also because older kernels are named differently than new ones. Take this example article below that shows it in action. If you were previously........
  • Debian Ubuntu and Linux Mint Broken Kernel After Date - New Extra Module Naming Convention


    I don't consider a lot of these "extra" kernel modules "nice to have" as they often contain drivers for essential items like your soundcard, your NIC and many other devices that may not work. Sometimes you may find that "sound" or "ethernet" worked before a kernel/OS upgrade and now in the new version they don't. Often it will be because you need to install the "extra" kernel modules. One other weird thing is that sometimes........
  • Wordpress overwrites and wipes out custom htaccess rules and changes soluton


    cat .htaccess RewriteEngine On RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . index.php [L] I keep reading there is a "# BEGIN WordPress" and a "# END WordPress" in the wordpress htaccess above but there is clearly not. Even more strange is that my permissions are just 444 (read only). so i changed it........
  • Apache htaccess and mod_rewrite how to redirect and force all URLs and visitors to the SSL / HTTPS version


    It is really simple using .htaccess with mod_rewrite. Here is all you need: RewriteCond %{SERVER_PORT} 80 RewriteRule ^(.*)$ https://site.com/$1 [R=301,L] Another more graceful way is to use the %{SERVER_NAME}variable to make it dynamic. Just be careful that the server name will always match what you expect. (eg. if you are doing load balancing or clustering what if the server name may be somethi........
  • ssh how to verify your host key / avoid MIM attacks


    SSH helps keep us secure in many ways, one of those is the host-key fingerprint which is unique. If you have been connecting to an SSH server that you've made no changes to and suddenly ssh warns that the key doesn't match then you have a problem. But how about connecting to an existing server for the first time on a new machine or client? A lot of new clients calculate it using an SHA256 hash but it is not as easy on your host machine to produce the sam........
  • Cisco IP Phone How To Reset To Factory Settings Instructions CP 9971, 8800, 8900, 8845, 8851, 8841, 8831, 7961, 7960, 7945, 7942, 7941, 7940.


    This would be crucial especially if the phone is hardened, not being able to reset or change settings could prevent a phone registering in a new environment or even when migrating from office to office. This applies even if you are trying to migrate the phone to another platform such as Asterisk/FreePBX etc... This guide applies to nearly all of the Cisco IP phones that you would use in CME or CUCM from several years ago including models: 9900, 9971, 8800, 8900, 8845, 8851, 8841........
  • How to encrypt your SSH private key file id_rsa


    ssh-keygen -p -f /path/to/your/id_rsa Enter new passphrase (empty for no passphrase): After that your rsa private key will be encrypted which is a layer of protection and security in the event that somehow someone acquires your key and tries to access servers that the key is authorized on.........
  • Firefox Cannot Hit Enter Key In Address Bar and Location History Not Working


    Opening Firefox from the CLI reveals the following as the cause of the error: Query failed: Error: Error(s) encountered during statement execution: no such table: moz_favicons The symptoms of this issue are that in the address bar you cannot hit enter to browse to a site/url/address and your history cannot be accessed, nor does your history show up in the address bar when typing previously used addresses. This usually happens because you've........
  • Cisco Unified Communications Manager / CUCM IP 8.6,10,12 Install Error Solution


    Install Errors on Version 12: This error happened on QEMU emulator version 2.11.1 pve-qemu-kvm_2.11.1-5 on Proxmox/Debian but installing on QEMU.12 on Centos 6 did not produce the error. *Update it is not related to the OS or QEMU version. This happened in Centos 6 too after a second install. What really causes this even though you successfully install........
  • Ubuntu Debian Mint Linux SSHD OpenSSH Server Not Starting After Reboot Solution


    If you get error messages like this it is usually because /var/run/sshd does not exist. root@userbox:/# service sshd status ● ssh.service - OpenBSD Secure Shell server Loaded: loaded (/lib/systemd/system/ssh.service; enabled; vendor preset: enab Active: failed (Result: start-limit-hit) since Wed 2019-04-10 02:24:44 EDT; 1 Process: 511 ExecStartPre=/usr/sbin/sshd -t (code=exited, status=255)........
  • Cisco Unified Communications Manager 12 Install Errors on Proxmox/KVM


    The strange thing is that usually the first install or two will work on any new machine but then it suddenly won't. I had this experience on QEMU 2.13 on a different machine. There is something finicky or buggy about the CUCM installer even when choosing the same virtual hardware specs. qemu-kvm command: /usr/libexec/qemu-kvm -version QEMU PC emulator version 0.12.1 (qemu-kvm-0.12.1.2-2.506.el6_10.1), Copyright (c) 2003-2008 Fabrice Bellard ........
  • Cisco Unified Communications Manager / CUCM IP Telephony Definitions


    DN = Directory Number: It is basically the extension of the phone In the example below, 55 is a DN assigned to the phone.........
  • Linux qemu-kvm How To Enable Soundcard in Guestl


    Pass QEMU this flag: -soundhw ac97 Or you could use (for a Ensoniq soundcard): -soundhw es1370 However on some machines I get this error: pulseaudio: pa_simple_new for capture failed pulseaudio: Reason: Connection terminated pulseaudio: pa_simple_new for capture failed pulseaudio: Reason: Connection terminated audio: Failed to create voice `ac9........
  • SSH Keep Alive To stop Disconnections


    Are you tired of coming back to your computer only to find your SSH connections have been broken? Even worse are the ones that hang where it appears to be connected but it is really not. The one option you have is an SSHclient side modification to send KeepAlive packets, sometimes this can also keep up your WiFi connection and stop it from disconnecting you as well. To make the keep alive changes for your just yourself (not system wide)........
  • Linux How To Disable SATA NCQ For Better Performance


    This is the closest way to disabling it without using the "libata.force=noncq" kernel boot option is to set the queue to a depth of 1 which doesn't actually disable it. Change the sdc below to match the device you want to disable NCQ for. [root@officebox ~]# echo "1" > /sys/block/sdc/device/queue_depth Errors that indicate you are having a performance issue are these in messages or dmesg relating to N........
  • WebRTC Vulnerability Shows Local IP Address Even When Using a Proxy or VPN Firefox Fix And Disable Solution


    If you visit a site that exploits the WebRTC vulnerability including whatismyipaddress.com it may show "Local IP Address" which would be the real IP of your machine. The vulnerability works on Windows and Linux machines (contrary to false information on the web which claims it only affects Windows). The above works and happens even if you are using a proxy or VPNaccount like ProVPNAccounts.com It is easy........
  • qemu-kvm qemu-system Image format was not specified for '/mnt/space/cucm12.img' and probing guessed raw. Automatically detecting the format is dangerous for raw images, write operations on block 0 will be restricted. Specify the 'ra


    WARNING: Image format was not specified for '/mnt/space/cucm12.img' and probing guessed raw. Automatically detecting the format is dangerous for raw images, write operations on block 0 will be restricted. Specify the 'raw' format explicitly to remove the restrictions. #you should manually specify the format q........
  • How to install and setup LXC Containers (OpenVZ alternative) on Centos 6 / 7


    If you don't aleady have it, you'll need EPEL Install LXC yum -y install lxc lxc-templates Loaded plugins: fastestmirror Setting up Install Process Loading mirror speeds from cached hostfile * base: mirror.it.ubc.ca * epel: mirrors.kernel.org * extras: mirror.it.ubc.ca * updates:........
  • Cisco CUCM Unified Communication Manager Howto Guide and Tutorials


    Install Issues: How to Make CUCM iso /modify to work on non-VMWare machines like QEMU/Xen/OpenStack If you get kernel panic errors in VBOX usually disabling Nested Paging will fix the issue (thanks to Mark). ks_pre.sh error is caused by having the wrong VDX pattern (change it do sd per guide link above) and/or the wrong VMSpecs (Cisco req........
  • SSH persistent and automatic login script for proxy


    #!/bin/bash sshcommand="ssh -N -R 20000:localhost:22 user@8.8.8.8" result=`ps aux|grep $sshcommand"|grep -v grep` if [ -z "$result" ]; then echo "we are going to connect" $sshcommand else echo "we are already connected" fi This is a handy script you can use and then add it to cron. Save........
  • SSH proxy/command in the background or from cron script


    If you have an SSHproxy that you need to run automatically from cron you will need it in the background to work. ssh -N -D 22000 user@domain.com Basically the -N let's it continue running in the background.........
  • ssh reverse proxy to enable remote access behind a LAN and firewall


    So say you are behind a typical NAT/LAN setup whether at home, work or while travelling. What if you have a computer or server that you need to connect to from the outside? Yes you could use a VPN but a quick and dirty, temporary and secure way is to use SSH's Reverse Tunneling Proxy feature. Requirements On the remote ssh server host you need the GatewayPorts option enabled in sshd_config (be........
  • How To Use Letsencrypt SSL/TLS Encryption to Create Certificates without installing on the target machine


    For some reason, perhaps you don't want to run a daemon or let Letsencrypt have access to your production server. There is a way to use it like a normal CSR/CA setup in manual mode. ./letsencrypt-auto certonly --manual -d realtechtalk.com - www.realtechtalk.com   Eventually you will get prompted to create a certain path and file with certain data: Create a file containing just this data: Casdfasfadsfsad........
  • Cisco Router Setup Guide and Tutorial Howto With Commands and Examples


    In most of the Cisco router IOS I find the ports like ge0/0 ge0/1 and ge0/2 or whatever your ports are down. They will not even give you a link light. So one of the first tasks should be getting the port you are working with up. In my case the first goal is often connectivity with the LAN and WAN. LAN = your local area network (eg. in the office/home ) WAN= your ISP/public internet (eg. fiber/cable/dsl/ethernet).........
  • Cisco Switch Setup Guide Command List


    Enter configuration console: enable configure terminal This is important because if your console doesn't look like below none of the commands will work! Switch(config)# Save and Apply Settings wr Show Switch Configuration: show run Show Port List/Sta........
  • Cisco Switch Reset To Factory Defaults


    This works on the 2000 and 3000 series generally. *The easy way is to just hold the mode button for 10+ seconds. The full/proper way is below: 1.) Either power on the unit and hold the "mode" button or hold the "mode" button until you see the below: 00:04:08: %SYS-7-NV_BLOCK_INIT: Initalized the geometry of nvram 00:04:08: %EXPRESS_SETUP-6-CONFIG_IS_RESET: The configur........
  • How To Boot Cisco CUCM UCSInstall 8.6, 10, 11 and 12 on KVM/Proxmox


    The key thing is that you must use a "machine"id of "pc-1.3" or it will say your hardware is not supported. Additionally you MUST use a virtio disk or you will get a ks_pre.sh error as soon as the install starts (a look at logs will show it can't find a disk). This is funny because even though the OS finds the disk and an fdisk -l shows it, it looks like the script looks for a /dev/vda device (virtio) and nothing else, so if you didn't use Virtio as you........
  • VBOX VirtualBox How To Import Raw .img Disk File


    What you need to do if you have taken a dd or real raw image dump of a hard disk: VBoxManage convertdd windows2019-eval-template.img windows2019.vdi --format VDI The .img is the raw dd dump and the .vdi is the output file. --format VDIspecifies to output to .vdi format If you are in a pinch you can always use qemu-kvm binary and manually specify the .img as your disk and i........
  • LUKS Hard Drive Encryption on Linux Mint Ubuntu Debian etc how to mount encrypted hard drive


    The key thing here is to know the actual partition that is encrypted. Often in Linux Mint's installer that ends up being partition 5 or /dev/sda5 sudo cryptsetup luksOpen /dev/sda5 anynamehere You will then be prompted for your irrecoverable passphrase: Enter passphrase for /dev/sda5: If all goes well it won't say anything further. If it says ""No key available with this passphr........
  • sudoers file in /etc warning about comments/includes!


    If you see this in /etc/sudoers it is NOT a comment but an include. #includedir /etc/sudoers.d For example in Linux mint sudoers.d contains the following files: casper mintupdate README casper for example contains the following sudoers line: mint ALL=(ALL) NOPASSWD: ALL So if you are messing ar........
  • Centos 7 Reallocate logical volume space to another


    Do you hate how Centos 7 defaults to allocating most of your valuable space to /home even though it is a production server? Here is a quick guide on how to take back that space live, while online (of course make sure you have backups just in case something goes wrong!): First we will reduce our home dir by 100G: lvreduce -L -100G /dev/mapper/centos-home WARNING: Reducing active and open logical volume to ........
  • lvm how to reduce volume size


    lvreduce -L -100G /dev/mapper/centos-home Do you really want to reduce centos/home? [y/n]: y Size of logical volume centos/home changed from ........
  • SSH error cannot Forward or Listen "bind: Cannot assign requested address"


    debug1: Local connections to LOCALHOST:18006 forwarded to remote address 192.168.1.93:8006 debug1: Local forwarding listening on 127.0.0.1 port 18006. debug1: channel 0: new [port listener] debug1: Local forwarding listening on ::1 port 18006. bind: Cannot assign requested address What we are seeing is that we can't listen on an IPV6 address of ::1. We need to tell SSH to stop using IPV6 so we'll edit ssh_config to take care of this issue........
  • X11 SSH Linux Forwarding Error


    Jan 30 17:16:10 localhost sshd[25385]: error: Failed to allocate internet-domain X11 display socket. The solution for me on the server side was the following in sshd_config: AddressFamily inet *Remember to restart sshd and also reconnect from the client side. Ihad all the normal X11 settings on the server but it just stopped........
  • Using Microsoft's Group Policy Management Editor (GPME) To Change Default Permissions and Internet Explorer Security Settings


    The defaults in Windows 2016 server leave clients crippled so they can't even download basic files or software. But Group Policy Management Editor comes to our rescue! Use cmd or Powershell and run: gpme.msc Choose your domain/computer and then navigate like below and create a new menu entry for IE11 or whatever your version is. Don't be worried if the highest version is IE10 it means that it applies to IE10 AND above.........
  • iptables linux firewall recommended rules for public computing


    Whether you are at work, at the coffee shop or on the public internet here are some basic but effective rules for iptables that lock things down (eg. no one can SMB or SSH to you or really anything): # Generated by iptables-save v1.4.21 on Fri Dec 14 14:00:08 2018 *nat :PREROUTING ACCEPT [160:19844] :INPUT ACCEPT [4:357] :OUTPUT ACCEPT [2955:182236] :POSTROUTING ACCEPT [2955:182236] COMMIT # Completed on Fri Dec 14........
  • VMWare Pro Workstation Nic Disconnected and No IP Using NAT


    By default VMWare Workstation often doesn't work as we would like. If you create a VM with a default NAT IP it won't work you will find the NIC is disconnected (even though on the VMWare side it says connected including at Power On). How To Solve It 1.) Create New VMNet for NAT Click "Edit" -> "Virtual Network Editor" Click "Add Network" Select Network To Add "VMNet1" (........
  • Debian 9 SSH root password authentication failure password not working problem / solution


    In Debian a lot of times SSH disables the root user to login by password by default. This means you will get an authentication failure as if you typed in the wrong password. The logs also indicate the password is wrong but what is often the case is in the config file Check /etc/ssh/sshd_config cat /etc/ssh/sshd_config|grep -i permitrootlogin Make sure it says: PermitRootLogin yes If not change it and restart SSH........
  • Linux wlan0 check all wireless clients


    iw dev wlan0 station dump This is very useful because it is helpful if you are running something like hostapd and need to see the signal strength and negotiated connection speed. Station ff:ff:ff:ff:ff:ff (on wlan0) inactive time: 16309 ms rx bytes: 25451 rx packets: 325 tx bytes: 44381 tx packets: 159 tx retries: 0 tx failed: 0 signal: -72 [-72] dBm signal avg: -72 [-72] dBm........
  • iptables how to log ALL dropped incoming packets


    A lot of people just have a -j DROP to drop all unwanted traffic or traffic not explicitly allowed but there is a better solution if you want real and proper logging: Here is another example of more advanced iptables rules. Take an example iptables rules file -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -i eth1 -p icmp -j ACCEPT........
  • Adobe Acrobat Reader for Linux to use and view XFA Fillable Forms


    The reason for not being able to read one of these dreaded/ fillable "XFA" forms is because no Linux PDF reader that I'm aware of supports them. Part of this reasoning is for security. It is really silly, they should ban these XFA forms or at least replace the Please Wait with the non-fillable version. Download Adobe Reader 9.5 for Linux from here: This is the solution but only so much, at least for me I was able to view th........
  • Why SMART is not smart at all and doesn't properly predict disk errors that cause a kernel panic or crash


    Before getting into the output here is my typical experience with SMART, there is what I call a "bad disk" with pending and uncorrectable sectors that cannot be reallocated. It has caused a kernel panic and system crash repeatedly as we can see from the logs. But SMART says it has "PASSED" its self assessment. SMART is still useful to me but it is more about looking at Current_Pending_Sector. Any time I have had anything but 0 for that attribute it........
  • iSCSI on Centos 7 Configuration and Setup Guide for Initiator and Target


    initiator = client target = server These are the first concepts you should understand which is that in iscsi essentially the "initiator" is the client and the "target" is the server. iSCSI is derived from the old fashioned SCSI that us oldtimers grew to love. The "i" stands for Internet and the SCSI stands for "Small Computers Systems Interface" (SCSI). iSCSI Target (Server)Setup targetcli is the pac........
  • Python and BeautifulSoup4's BS4's Decompose Method To Remove Unwanted Inner Tags


    < a href="/Products/MX72244"> < span class="c-shca-icon-item__body-name-brand"> ADATA < / span> &nbs........
  • How Does Cisco CUCM (Cisco Unified Communication Manager) Work?


    Cisco's CUCM (Cisco Unified Communication Manager) is a system that combines voice, video, data and mobile products into a single unified management suite. At its core, the CUCMis like a "Super PBX" that controls the flow of all communications through an organization even single or multiple site deployments. Cisco's CUCMmakes communication more effective and simple through centralized management and unification of communications resources.........
  • systemd management using systemctl and journalctl to check systemd logs


    systemd is like the service manager for your Centos and other modern Linux distributions (including Debian/Mint/Ubuntu) allows you to enable services, stop them, restart them, check their status and even reboot your system. The key commands or arguments you will use with systemctl are the following: Unit Commands: list-units [PATTERN...] List loaded units &nbs........
  • css how to format code in the code tag


    code { background: #f4f4f4; border: 1px solid #ddd; border-left: 3px solid #f36d33; color: #666; page-break-inside: avoid; font-family: monospace; font-size: 15px; line-height: 1.6; margin-bottom: 1.6em; max-width: 100%; &nb........
  • css br with extra blank line


    The problem I was having is that a css template Iwas using was causing br's to have an empty line in between which is very undesirable especially when displaying code. br { display:none; margin: 0px; height: 0px; } Using CSS code like above will fix it. You technically shouldn't need the margin or height either.........
  • What is /dev/pts and why do we need it in Linux?


    A quick check in /dev/pts shows a lot of entries but what are they for?: ls /dev/pts 0 10 12 14 16 18 2 21 23 25 27 29 30 32 4 6 8 ptmx 1 11 13 15 17 19 20 22 24 26 28 3 31 33 5 7 9 Basically they are pseudo-termi........
  • Linux What is umask (user mask) for file and directory creation permissions and how to calculate umask and change the defaults


    umask are the default permissions that are applied when a file or directory are created. To see this in action simply just "touch filename" or "mkdir somedir" and you'll see what default permissions are applied. The first thing Ialways tell people you should know is to NEVER change the defaults unless you are making them more restrictive. But they work well and if you change the defaults you could end up creating a file without permission to read........
  • Linux Permissions and Groups Real Usecase for Group Access


    Ihave a directory structure which the primary user needs full access on but wanted a user to access only a specific directory within the main directory (so they could write in there only and nowhere else). Here's what Idid: [root@compevo8001 dllnow]# ls -alh drwxrwxr-x 2 someuser software 4.0K Oct 19 2017 ExpireYMD-2017-11-20 drwxrwxr-x 2 someuser software 4.0K Nov 19 2017 ExpireYMD-20........
  • Linux Kernel USB Export Errors


    4.374647] usb_common: exports duplicate symbol usb_get_dr_mode (owned by kernel) [ 4.403334] usbcore: exports duplicate symbol __usb_get_extra_descriptor (owned by kernel) [ 4.427736] xhci_hcd 0000:00:15.0: xHCI Host Controller [ 4.427844] xhci_hcd 0000:00:15.0: new USB bus registered, assigned bus number 1 [ 4.429040] xhci_hcd 0000:00:15.0: hcc params 0x200077c1 hci version 0x100 quirks 0x01109810 [ 4.429141] xhci_hcd 0000:00:15.0: cache line size of 64 is not sup........
  • HP DL385 G7 Linux BIOS Update Flash


    wget https://downloads.linux.hpe.com/repo/spp/rhel/6/x86_64/current/CP017004.scexe --2018-08-16 05:11:16-- https://downloads.linux.hpe.com/repo/spp/rhel/6/x86_64/current/CP017004.scexe Resolving downloads.linux.hpe.com (downloads.linux.hpe.com)... 15.249.152.85 Connecting to downloads.linux.hpe.com (downloads.linux.hpe.com)|15.249.152.85|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 1525561 (1.5........
  • hwloc-nox set CPU affinity in Linux


    sudo apt-get install hwloc-nox Reading package lists... Done Building dependency tree Reading state information... Done The following NEW packages will be installed: hwloc-nox 0 upgraded, 1 newly installed, 0 to remove and 530 not upgraded. Need to get 151 kB of archives. After this operation, 453 kB of additional disk space will be used. Get:1 http://archive.ubuntu.com/ubunt........
  • Firefox An error occurred during a connection to some-ip-or-domain. SSL peer reports incorrect Message Authentication Code. Error code: SSL_ERROR_BAD_MAC_ALERT Solution


    An error occurred during a connection to some-ip-or-domain. SSL peer reports incorrect Message Authentication Code. Error code: SSL_ERROR_BAD_MAC_ALERT The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem. **Solution** Go to about:config........
  • gvfs mount in /run/user cannot be accessed or displayed wrong permissions Error: Location is already mounted


    You get errors like below and see you have all question marks for the permissions if you go to /run/user/1000/gvfs If you try to access the mounted share such as anything mounted as gvfs like an SSH share in your file manager you may get an error like this. It generally means an interruption in communication or a fault with gvfsd has caused it. Solutio........
  • vi error solution E166: Can't open linked file for writing


    This is not so much of a vi error as it is a physical filesystem error in the sense that the file you are trying to write to is a symlink and the destination doesn't exist or for some other reason is inacessible. So vi is tellng you "you're writing to a symlinked file and the file the symlink points to cannot be written to". This is especially highlighted byt he fact that if you are using wq! to write and you still get the error.........
  • zenity popup messages, windows, dialogs, error messages calendars and more howto on Gnome Linux including Ubuntu, Linux Mint, Centos and more


    zenity is a nice utility as part of the gnome window manager that allows you to script from bash and retrieve the input from the user. It could also be helpful in just notifying a user when they login with a popup window. I'll give an overview of what's available with zenity: Application Options: --calendar Display calendar dialog --entry Display tex........
  • VMWare ESXi 6.7 SSH/PowerShell CLI Commands


    [root@localhost:~] BootModuleConfig.sh echo host-ind nfcd........
  • VMWare Vsphere VCSA Graphical Install Creates json


    yes it does create its own json ============================================ cat /tmp/vcsaUiInstaller/ovftool-20180809-175238948-20180809-175603497.log |grep -i json 2018-08-09T17:56:04.238-07:00 verbose OVFTool[30966] [Originator@6876 sub=Default] Manifest file entry: SHA1(VMware-vCenter-Server-Appliance-6.7.0.12000-8832884_OVF10-file1.json) = 1deb658c724767697587d5909c4051c01813e6a1 --> ........
  • ./xmr-stak: error while loading shared libraries: libmicrohttpd.so.10: cannot open shared object file: No such file or directory


    The solution is just to install libmicrohttpd-dev ./xmr-stak ./xmr-stak: error while loading shared libraries: libmicrohttpd.so.10: cannot open shared object file: No such file or directory libmicrohttpd libmicrohttpd10 - library embedding HTTP server functionality libmicrohttpd-dbg - library embedding HTTP server functionality (debug) libmicrohttpd-dev - library embedding HTTP server functionality (development) $ sudo apt-get i........
  • Debian Mint Ubuntu compiling xmr-stak


    sudo apt-get install libcurl4-openssl-dev git build-essential autotools-dev autoconf libcurl3 sudo apt-get install libcurl4-gnutls-dev git clone https://github.com/wolf9466/cpuminer-multi sudo apt-get install cmake libpthread-* libmicrohttpd-dev libssl-dev libhwloc-dev git clone https://github.com/fireice-uk/xmr-stak-cpu.git make install cd bin chmod +x xmr-stak-cpu ./xmr-stak -O xmr........
  • [warn] VirtualHost 10.2.5.101:443 overlaps with VirtualHost 10.2.5.101:443, the first has precedence, perhaps you need a NameVirtualHost directive


    [root@thetor2017 conf]# service httpd restart Stopping httpd: [ OK ] Starting httpd: WARNING: MaxClients of 3000 exceeds ServerLimit value of 300 servers, lowering MaxClients to 300. To increase........
  • Ethereum Client Errors


    INFO [07-19|12:11:51] Imported new block receipts count=590 elapsed=8.440s bytes=74117699 number=4870906 hash=6bc60b…934753 ignored=0 INFO [07-19|12:11:57] Imported new state entries count=499 elapsed=9.963ms processed=71076 pending=1526 retry=2&nbs........
  • Centos 7 - How To Install NFS and Mount Remotely


    Server Side Config 1.) First install nfs-utils yum -y install nfs-utils 2.) Configure nfs share Create a directory for your NFS share mkdir /datastore Create your NFS share in /etc/exports echo "/datastore 10.220.101.0/24(rw,sync,no_root_squash)" >> /etc/exports systemctl restart nfs........
  • wodim / cdrecord error cannot burn DVD or BDR .iso Errno: 5 (Input/output error), write_g1 scsi sendcmd: no error


    dvd+rw-mediainfo /dev/sr0 INQUIRY: [ASUS ][BW-16D1HT ][3.00] GET [CURRENT] CONFIGURATION: Mounted Media: 11h, DVD-R Sequential Media ID: RITEKF1&n........
  • linux mint image convert menu option missing solution


    Ialready have the caja-image-converter option installed but it shows nothing. Weirdly enough if you install nemo and nautilus converter it does show and work inside caja: The solution is to install *-image-converter sudo apt-get install *-image-converter Reading package lists... Done Building dependency tree Reading state information... Done Note, selecting 'n........
  • Linux Mint 18 Screen Goes Dark or Black After Screensaver or even when using the Desktop Solution


    You can search for this bug and it seems like it may be related to ecryptfs and is many years old. The symptoms are that you return to the computer and the screensaver was active or the screen was asleep/black and it doesn't seem to come back. But you check by SSH the computer is running fine and are frustrated you'll lose your running programs and have to reboot. There is a simple solution: Ctrl + Alt + F1 Ctrl +Alt + F8 Ba........
  • Postfix How To Change Sending IP Address To Specific IP Binding or Interface


    Ithought I'd post this becuase there is some bad information out there. Some guides tell you to edit /etc/postfix/master.cf (-o smtp_bind_address=) but this doesn't work. The same guide also says if you don't change it there you end up changing the listening IP/bind interface which is also not true. Here is a simple and effective way to change Postfix's sending/binding/outgoing IP address (very important for reverse DNS and so mail servers don't block you)........
  • VSphere InternalServerError - Error When Adding Permissions


    InternalServerError (com.vmware.vapi.std.errors.internal_server_error) => { messages = [LocalizableMessage (com.vmware.vapi.std.localizable_message) => { id = vapi.bindings.method.impl.unexpected, defaultMessage = Provider method implementation threw unexpected exception: com.vmware.vapi.std.errors.InternalServerError, args = [com.vmware.vapi.std.errors.InternalServerError] }], data = } I was getting the........
  • OVF Tool: Error: Task failed on server: This host does not support Intel VT-x. VMWare VCenter install On ESXi ERror


    Intel VT-X is enabled in Virtualbox but it doesn't seem to pass through the needed vmx extension despite the following variables on the host confirming it is enabled: cat /sys/module/kvm_intel/parameters/nested Y cat /sys/module/kvm_intel/parameters/ept Y OVF Tool: Disk progress: 99% OVF Tool: Transfer Completed OVF Tool: Powering on VM: Embedded-vCenter-Server-Appliance- OVF Tool: Task p........
  • Relocating modules and starting up the kernel - VMWare ESXi 6.7 Error and Solution


    I had this error in an unsupported CPUon VMWare 6.7 and apparently this sometimes works especially on older VMWare versions like 6.5 5.5 etc (but in my case it did not). To make sure it proceed when you see "Loading VMWare" Hit "Shift+O" Then add "ignoreHeadless=TRUE" See an example below:........
  • VMWare 6.7 VCSA VSphere ESXi Management SSO Install Guide on Linux using the CLI


    #mount the VCSA DVD mount /dev/sr0 /mnt/cd #alternatively you could mount the iso directly mount -o loop vcsa.iso /your/mount/path #for this purpose we are using the CLI installer on Linux cd /mnt/cd/vcsa-cli-installer/lin64 #no it's not going to be that easy you can't just run vcsa-deploy like that you need to use a template or configured .json file ./vcsa-deploy Usage: vcsa-deploy [-h] [--version] [--supported-deploymen........
  • vino server error cannot login


    10/07/2018 03:05:14 PM [IPv4] Got connection from client10.10.25.1 10/07/2018 03:05:14 PM other clients: 10/07/2018 03:05:14 PM Client Protocol Version 3.7 10/07/2018 03:05:14 PM Advertising security type 18 10/07/2018 03:05:14 PM Client returned security type 18 10/07/2018 03:05:14 PM TLS Handshake failed: Could not negotiate a supported cipher suite. 10/07/2018 03:05:14 PM Client10.10.25.1 gone 10/07/2018 03:05:14 PM Statistics:........
  • OpenVPN auth-user-pass-verify ENV script error


    Starting with newer versions of OpenVPN Ibelieve 2.2+ you need to have "script-security 3" set or you can't execute a third party script. Prior to that you could also use the auth-user-pass-verify like this: auth-user-pass-verify ./validate.pl "$username $password $ip" via-env Options error: the --auth-user-pass-verify directive should have at most 2 parameters. To pass a list of arguments as one of the paramete........
  • Cannot create gradle for conversations


    The main issue is it looks like Java is not configured to accept the invalid ssl cert that is coming from the download location. Exception in thread "main" java.lang.RuntimeException: javax.net.ssl.SSLException: java.security.ProviderException: java.security.InvalidKeyException: EC parameters error export ANDROID_HOME=/home/user/Downloads/tools/ Conversations-master$ ./gradlew Downloading https://services.gradle.org/distributions/grad........
  • not allowed to execute '/usr/bin/apt-get install eclipse' as root linux sudo user permisson issue and solution


    This is most likely to happen on a normal GUI system like Ubuntu or Linux Mint. If you or the user is meant to have sudo / root privileges it is as simple as editing the following files: Now assume your username is "iamtheuser" vi /etc/group adm:x:4:syslog,iamtheuser sudo:x:27:anotheruser,iamtheuser Find the above lines and add a comma and "ia........
  • Database Error One or more of the WHMCS database tables appear to be either missing or corrupted. Please check and repair. - WHMCS Solution


    Database Error One or more of the WHMCS database tables appear to be either missing or corrupted. Please check and repair. This error can be misleading especially if you know you are using a known good backup or restoration of the WHMCS database. The error can also be that the user lacks permissions to read and write to the database. To check to this in MySQL shell: GRANT read,write to dbusername@localhost on dbna........
  • postfix errors fatal: no SASL authentication mechanisms /usr/libexec/postfix/smtpd: bad command startup -- throttling solution


    Jul 3 22:12:17mailserver postfix/smtpd[6195]: fatal: no SASL authentication mechanisms Jul 3 22:12:18mailserver postfix/master[4881]: warning: process /usr/libexec/postfix/smtpd pid 6195 exit status 1 Jul 3 22:12:18mailserver postfix/master[4881]: warning: /usr/libexec/postfix/smtpd: bad command startup -- throttling This only ever happens in my experience when the authentication method is actually Dovecot. Usually the problem........
  • mail command line examples of how to send an email using Linux / Unix and the Bash Shell or Scripting


    A simple way that may work for a lot of people who just need basic output for their scripts or daemons to announce an action is this: echo "body or message" | mail -s "realtechtalk.com" user@domain.com If you want to send a text file as the body just do this instead: mail -s "realtechtalk.com" user@domain.com < /tmp/sometxtfile.txt These are some ve........
  • Maximum number of connections from user+IP exceeded (mail_max_userip_connections=10) Dovecot Solution


    This happens because Dovecot limits the maximum IMAPconnections per IPto just 10. This may be fine for a single client side IPbut if an entire office or multiple users are behind one IPor a single heavy user is active then you will get bizarre errors in your e-mail clients such as "Password Incorrect" or similar in Thunderbird. It won't be obvious on the client side as to what the problem is and they will probably just think the server is misconfi........
  • No comments are allowed here Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request.


    Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator, root@localhost and inform them of the time the error occurred, and anything you might have done that may have caused the error. More information about this error may be available in the server error log. Apache/2.2.15 (CentOS) Server at testdomain.com Port 80........
  • Linux Mint Black Screen after boot no graphics solution


    This is not the normal "black screen"issue and I was shocked to eventually find out why. The normal advice of reconfiguring Xorg didn't work. Even booting into "Recovery Mode" did not help. Here is the short end of the stick that fixed it: sudo apt-get install mdm mate-desktop-environment Yes you got it right, mdm and the mate-desktop-environment / gnome were somehow uninstalled. This must be whe........
  • sign_and_send_pubkey: signing failed: agent refused operation - SSH Solution


    sign_and_send_pubkey: signing failed: agent refused operation This happens when you don't manually add your ssh key with ssh-add it is some weird new feature in SSH or Ubuntu/Debian that causes this weird problem. Solution: ssh-add Identity added: /home/user/.ssh/id_rsa (/home/user/.ssh/id_rsa)........
  • Centos PXEBoot NetInstall Failure - Pane is dead


    ValueError: new value non-existent xfs filesystem is not valid as a default fs type Pane is dead From what Iread this is misleading and has to do with the fact that the initrd and kernel are mismatched. This is a hard situation because for some older hardware Iam using the Centos Plus kernel which has modules that Irequire for an older server/NIC. This seems to have cropped up in the past few months and there is no simple fix........
  • Intel NUC J3455 Linux Kernel freeze slowness 4.4.98 errors


    It looks like this has something to do with APIC but I am not sure. I have similar CPUs with a different MB and BIOS that work fine on the same type of kernel. A lot of time the issue is because of the C-step setting in the BIOS. The same thing happened on the 2.6 kernel with Centos 6 but this is a homebrew 4.4 kernel soI am not sure why it is happening when even Centos 7 (3.2) kernel works OK. Solution - It comes down to the BIOS set........
  • Prevent SSH Bruteforce and Hacks By Disabling Password Authentication


    One simple way to keep your server public but almost impossible to hack via SSHis to disable password authentication over SSH. This means the only way in is via your own private key that only you should have. Edit your /etc/ssh/sshd.conf file Set this option PasswordAuthentication no Restart your SSH server. service sshd restart ........
  • SMF Forums / Simple Machines Forums Not Displaying Images Theme or Styles Properly using 127.0.0.1


    This is one thing that has me wondering about SMF. It is apparently a known issue but in the latest version and new install nothing looked right because it was using http://127.0.0.1 to find everything! How on earth would it ever do this or think it is normal? Excerpt of crazy html code it produces that causes the issue: ........
  • vzquota : (error) Quota on syscall for id 4532: No such file or directory vzquota on failed [3] OpenVZ Error and Solution


    Starting container... vzquota : (error) Quota on syscall for id 4532: No such file or directory vzquota on failed [3] Solution vzquota drop 4532 Then start the container and it should work. It actually happened after migrating the VPS manually to ano........
  • Apache htaccess Custom ErrorDocument not working properly for root home page 403 Error Issue and Solution


    So I have a domain "testdomain.com". Inside test domain.com's root is the following .htaccess: Options +FollowSymLinks -Indexes ErrorDocument 403 /launch/index.html Order Deny,Allow Deny From All Allow From 192.168.1.2 When you visit anything other than root things work fine. Eg. if you visit http://testdomain.com/somedirfile.html It will show the right error in /launch/........
  • samba how to listen on specific IP only


    This is useful for security purposes especially on a server which may have a public IP assigned to it but has a second NIC for the LAN. Here is how you edit smb.conf: [global] interfaces = 192.168.1.50 bind interfaces only = yes As you can see above it will only listen on 192.168.1.50 and remind to keep the "bind interfaces only"option.........
  • error: Could not locate RPC credentials. No authentication cookie could be found, and no rpcpassword is set in the configuration file Bitcoin Litecoin Error


    error: Could not locate RPC credentials. No authentication cookie could be found, and no rpcpassword is set in the configuration file This is usually because the .cookie file cannot be read by the user you are running Litecoin or Bitcoin client/daemon as. You can adjust the permissions of the file so that the user or group they are apart of has read permissions. ........
  • curl: (35) Unknown SSL protocol error in connection Solution Centos


    curl: (35) Unknown SSL protocol error in connection The main solution is to update curl and nss. If you are having an issue with curl through Apache/PHPyou will need to restart PHPafter. It's important to remember that this error could mean a lot of things but most often it simply means that curl and openssl may be outdated and only allow newer secure ways of connecting to SSL. In general here is how you would fix it in most c........
  • Wordpress Instagram Post Modify Plugin To Add Tags


    I modified this code after quickly learning how Wordpress plugins actually work, how they're called etc.. was the first trick to modifying the code to add tags. Add this code after line 570 in wp-content/plugins/wp-instagram-post/classes/class-woo-igp.php &nb........
  • Linux input/output error invalid program cannot read data on some CD-Rs and DVD-Rs on ASUS BW-16D1HT


    I've never seen this before in all of my years. Ihave some very old CDs and DVDs 12-15 years old that seem not to work in this BD-R/DVD-R/CD-R Asus drive. The discs are fine actually and ironically they even work fine on a normal LG USB based BD-R drive! Here are the errors in Linux: [2914936.884924] attempt to access beyond end of device [2914936.884927] loop1: rw=0, want=730424, limit=688384 [2914954.556873] attempt to........
  • Installing SSL Certificate with Chain Intermediary CA File


    Some of the cheaper or newer SSL suppliers will require this to work properly (otherwise you may be prompted that the cert is invalid when it's not the case but it will certainly scare off your users!). In the Apache vhost conf for the domain here is what you add: SSLCACertificateFile /path/to/your/cafile.pem Here is a full example of an SSL Vhost config in Apache using a CA Certificate file ........
  • Linux How To Clone One System Harddrive to another remote system


    The easiest way is to use SSHand DD or a combination of netcat. SSHwill be a little slower due to encryption but is the most secure way (on two older systems the average clone speed is about 40-50MB/s). This is also OS independent as it doesn't matter what the source OS is because you are literallly cloning the drive so you retain the partition table and settings. Clone HDD using SSH and DD........
  • Unable to negotiate with 192.168.1.99 port 22: no matching host key type found. Their offer: ssh-dss Solution


    ssh rtt@192.168.1.199 Unable to negotiate with 192.168.1.99 port 22: no matching host key type found. Their offer: ssh-dss It looks like the DSS option is not considered secure so when connecting from newer Linux systems to an older one you will get the above error. It can be fixed (but you should consider upgrading your SSH daemon): ssh -oHostKeyAlgorithms=+ssh-dss rtt@192.168.1.199........
  • Debian Mint Ubuntu Linux Server Password Forgotten Reset Password Solution Centos 7 8 Root Password Reset Recovery


    This guide will work for most modern Linux versions like Centos RHEL 7, Debian, Mint, Ubuntu etc... In Centos 7 the days of editing the "kernel"line and adding "single"are gone. On top of that sometimes after a new install passwords do not work, maybe you forgot your password or for some other reason you need to break in or fix your system? It could also be because you can't mount your root / or some other /etc/fstab error and many other err........
  • mysql how to reset passwords with a few commands


    The commands below will help you reset any mysql user password. use mysql; update user set password=PASSWORD('thenewpass') where User='theusername'; flush privileges; The first line says to use the "mysql" database which contains all the user info. the second update line sets the new password "thenewpass" for the u........
  • htaccess apache how deny/allow to block or allow by IP address


    order deny,allow Deny From All Allow From 8.8.8.8 A simple and quick way to improve security by only allowing specific IPs to your web application. In this case the above allows only the IP 8.8.8.8 to access things and everything else is denied.........
  • How To Create Apache htpasswd file


    This just simply outputs what you need a username and password that can be used to authenticate from .htaccess htpasswd -nb user password user:Gnb6uE9Lp4gt2 If you want to write it straight to a file htpasswd -cb /tmp/somefile.pw user password How To Use This In .htaccess AuthUserFile /tmp/somefile.pw AuthName GetLost!! AuthType B........
  • Install Windows From a Linux TFTP Server instead of using WDS Solution


    yum -y install samba vi /etc/samba/smb.conf https://www.kernel.org/pub/linux/utils/boot/syslinux/syslinux-6.03.zip mkdir syslinux;cd syslinux;unzip syslinux-6.03.zip mkdir -p /tftpboot/libs/ cp bios/com32/modules/linux.c32 /tftpboot/libs/ cp bios/com32/libutil/libutil.c32 /tftpboot/libs/ cp bios/com32/lib/libcom32.c32 /tftpboot/libs/ #add lib path echo "PATH libs" >> /tftpboot/pxeli........
  • How To Secure Samba NMBD/SMBD to bind to a specific IP address


    By default Samba SMB/NMB listen on ANY and ALLIPs on your system by binding to 0.0.0.0. Obviously this is a huge security risk if you have a public facing server with both internal and external access. Usually when a system administrator sets up a samba server their intention is just to share with a LAN. To do this you need to the following options under the [global] section in smb.conf bind interfaces only = yes interfaces = 192........
  • Linux how to view video card make and exact model


    Normally lspci will show you just like this and would suggest they are exactly the same card: 1a:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Ellesmere [Radeon RX 470/480/570/580] (rev e7) 1c:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Ellesmere [Radeon RX 470/480/570/580] (rev e7) lspci -vnn is the answer As we can see one is a Gigabyte and the other is an MSI card. Wha........
  • Authentication refused: bad ownership or modes for directory /home/user SSH Public Key Authentication Failed Solution


    First of all I got this error after accidentally messing up my usergroup by using usermod -G user group When I would login using SSHkeys it would fail: sshd[2020]: Authentication refused: bad ownership or modes for directory /home/one No worries, the fix is simple! chmod g-w /home/use........
  • How to disable Google Fonts in Wordpress


    edit theme css: Click "Appearance -> Editor -> Stylesheet" http://yourblog.com/wp-admin/theme-editor.php?file=style.css&theme=twentysixteen textarea { color: #1a1a1a; /*font-family: Merriweather, Georgia, serif;*/ font-family: "Lucida Sans Unicode", "Lucida Grande", sans-serif........
  • Unable to load dynamic library /usr/lib64/php/modules/php_openssl


    Unable to load dynamic library '/usr/lib64/php/modules/php_openssl' not sure how to fix this........
  • mysqld in Linux hacked


    Check for crap in /var/lib/mysql like this ls -al /var/lib/mysql/ total 20888 drwxr-xr-x 24 mysql mysql 4096 Oct 3 18:30 . drwxr-xr-x 20 root root 4096 Oct 3 04:23 .. -rw-rw-rw- 1 mysql mysql 11776 Oct 3 17:10 c:exp.exe -rw-rw-rw- 1 mysql mysql 48128 Oct 3 17:10 c:exp1.exe........
  • css responsive images


    add this style="background-size: contain;max-width: 100%; height: auto;" to your img code. Example: ........
  • yum how to install old obsolete packages


    This is important as unfortunately Centos may designate a package obsolete and the replacement breaks everything (eg. you have a config file and the new replacement is not at all compatible with it and it breaks your application). This is where disabling obsoletes comes into play, it can be done from yum but it doesn't work at the time I find. yum --setopt=obsoletes=0 install someapp However Ifind it still installs the new app and not the one you ask for........
  • ffmpeg vidstab to stabilize video


    I'm having trouble making it work on very shaky video the result seems kind of warped/blurry/fish eye like and not as good as some other examples I've seen: ffmpeg -i MVI_1285.MOV -vf vidstabdetect=shakiness=10:accuracy=15 -f null MVI_1285.trf ffmpeg -i MVI_1285.MOV -vf vidstabtransform=smoothing=30:input="transforms.trf" MVI_1285.MOV.mp4 I've played around with the shakiness, accuracy etc.. but not the smoothing part.........
  • userdel user userdel: cannot lock /etc/passwd; try again later.


    I am not sure why this happened I think it's because the file was in use by another duplicate process or script. userdel user userdel: cannot lock /etc/passwd; try again later. ........
  • M2Crypto.SSL.Checker.WrongHost: Peer certificate subjectAltName does not match host, expected fedora-archive.ip-connect.vn.ua, got DNS:mirror.ip-connect.vn.ua


    You are using Centos 5 which is deprecated so nothing in yum will work until you follow this post to use the vault: http://realtechtalk.com/Centos_59_Working_Vault_Repo_file-1921-articles yum update Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * epel: fedora-archive.ip-connect.vn.ua Traceback........
  • [Wed Sep 20 15:34:44 2017] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec) [Wed Sep 20 15:34:44 2017] [error] Init: Unable to read server certificate from file /www/ssl-certs/server.crt [Wed Sep 20 15:34:44 2017] [error] SSL Library Err


    [Wed Sep 20 15:34:44 2017] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec) [Wed Sep 20 15:34:44 2017] [error] Init: Unable to read server certificate from file /www/ssl-certs/server.crt [Wed Sep 20 15:34:44 2017] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag [Wed Sep 20 15:34:44 2017] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error........
  • vbulletin 4.2.5 after upgrading from 3.6 white screen fatal php errors


    The code may lead you to believe you have an incompatible template but if you are not trying to use an old template currently that is not the issue. I actually deleted all 3.x style templates to make sure. What the issue is, is old plugins that are not compatible but Vbulletin does not seem to account for this except that you'll see a fatal PHPerror. You should disable all plugins and then enable one by one until you find the one that is causing the issue. &........
  • Linux and FreeBSD how to set time and date


    Linux Set Date date -s "YYYY-MM-DD HH:MM:SS" date -s '2014-12-25 12:34:56' BSD Unix Set Date date yymmddhhmmss date 170809121156........
  • kdenlive - No LADSPA plugins were found! Check your LADSPA_PATH environment variable. [producer_xml] failed to load transition "qtblend"


    This happens if you are running a kdenlive script from the shell of a remote machine without using SSH "-X" forwarding and it will also cause any areas where you write text to be a white screen for that duration. melt FusionFestival.kdenlive No LADSPA plugins were found! Check your LADSPA_PATH environment variable. [producer_xml] failed to load transition "qtblend" [producer_xml] failed to load transition &q........
  • MySQL: table is marked as crashed solultion


    myisamchk can fix it But be careful and use the right options to avoid losing data. In fact if you haven't you should make a backup or at least manually copy /var/lib/mysql. Replace "YourDB" with the name of your database Replace "yourcrashedtable" with the name of your crashed table. The -o option is the safest and should avoid dataloss whereas -r is more aggressive and is a last option (I have lost data using -r and........
  • l2tp ipsec VPN Error Sep 12 18:16:25 vps pluto[7299]: ERROR: asynchronous network error report on eth0 (sport=500) for message to 192.5.6.2 port 20640, complainant 192.5.6.2: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated


    Sep 12 18:16:25 vps pluto[7299]: ERROR: asynchronous network error report on eth0 (sport=500) for message to 192.5.6.2 port 20640, complainant 192.5.6.2: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated)] Some say changing the "leftprotoport=17/%any" will fix this but I have not found this to be the case. Essentially it means at least one end is blocking the ipsec packets. Sometimes the %any allows an alt........
  • Disable SSH Password Authentication to Increase Security and Harden SSH Linux Unix Server Ubuntu Mint Centos Debian


    Just a note before you do this you should have a sure, guaranteed way into the system such as local, KVMor preferably publickey making bruteforce SSH absolutely impossible since there is no password to bruteforce and even if someone knew the password they wouldn't be able to login except from the local console (presumably you should make sure no one unauthorized has physical access). 1. Edit /etc/ssh/sshd_config Find the section like this:........
  • ecryptfs how to mount or recover from a backup


    The easiest way to recover or mount an off-line ecryptfs directory is the built-in command from ecryptfs sudo ecryptfs-recover-private It will find your wrapped passphrase and ask for your password and mount it in tmp. Much easier especially when your current active OS is using ecryptfs too. This a fantastic tool when going through old backups.........
  • rsync specify alternate port non-standard port than 22


    It is not obvious but the rsync --help rsync --help|grep port --port=PORT specify double-colon alternate port number --port does not do anything at all actually for some strange reason it still uses 22 You have to specify a manual ssh command to make it work: -e 'ssh -........
  • Intel NUC Lower Power Green Computing Boxes Review/Comparison of J3160 and J3455 Models


    Intel NUC J3455 vs Vorke V1 J3160 Both are excellent units but the J3160 is nicer if you require even lower power usage (6W vs the Intel 10W). The price is attractive on the Vorke V1 as well. It's been said that the Intel J3455 NUC has a buggy BIOS and some other issues that require attention. The Intel J3455 is still nice because it has 2 RAMslots but it does get hotter due to lack of fan. The Vorke V1 runs cooler, uses less power an........
  • kdenlive titles/text renders as white screen when using .sh script


    When using the .sh script the rendering doesn't work after an upgrade of related packages to kdenlive. kdenlive (kdenlive:amd64 (4:17.04.1+git201705191233~ubuntu16.04.1)) with affine or composite transitions was fine but is now broken during the time of transition it is just a white screen. The previous version was fine: kdenlive:amd64 (4:17.04.1+git201705191233~ubuntu16.04.1 But now I can't find it or install it:........
  • [1035724.274610] [drm:intel_pipe_update_end [i915_bpo]] *ERROR* Atomic update failure on pipe A (start=62076478 end=62076479) time 102 us, min 894, max 899, scanline start 893, end 900 W: Possible missing firmware /lib/firmware/i915/kbl_dmc_ver1.bin


    [1035724.274610] [drm:intel_pipe_update_end [i915_bpo]] *ERROR* Atomic update failure on pipe A (start=62076478 end=62076479) time 102 us, min 894, max 899, scanline start 893, end 900 W: Possible missing firmware /lib/firmware/i915/kbl_dmc_ver1.bin for module i915_bpo I've been getting those errors on a J3455 NUC box with the latest kernel on Linux Mint 18.2. When updating the initramfs I also got the error about the firmware........
  • /usr/bin/ld: cannot find -lboost_system-mt-s /usr/bin/ld: cannot find -lboost_filesystem-mt-s /usr/bin/ld: cannot find -lboost_program_options-mt-s /usr/bin/ld: cannot find -lboost_thread-mt-s collect2: error: ld returned 1 exit status make: *** [cag


    cagecoin linux compile: sudo apt-get install qt4-qmake libqt4-dev build-essential libboost-dev libboost-system-dev libboost-filesystem-dev libboost-program-options-dev libboost-thread-dev libssl-dev libdb++-dev libminiupnpc-dev Solution: sed -i s/"BOOST_LIB_SUFFIX=-mt-s"/"#BOOST_LIB_SU........
  • Wine uninstalled broken on Linux Mint


    Solution: Aptitude is very smart and fixed the issues it was because of nvidia cuda and opencl and nothing else suggested or hinted this using apt sudo aptitude install wine The following NEW packages will be installed: ocl-icd-libopencl1{ab} ocl-icd-libopencl1:i386{ab} wine wine1.6 wine1.6-amd64{a} wine1.6-i386:i386{a} The following packages will be REMOVED:........
  • ffmpeg trouble concatenating similar but different files


    When things go wrong your video is basically unplayable or the first video plays fine and then freezes when moving on to the next. Generally if both videos weren't produced with the exact 100% same settings you will have issues. You can try the basic concat but it often won't work right. Solution for me: My example uses 3 videos in total so "n=3" and a=1 to include audio. ffmpeg -threads 12 -i file1.mp4 -........
  • ffmpeg Unable to Use Hardware Encoding with Nvidia 3.40 Driver and GT210 card


    I believe from what I've read that this card's driver doesn't support the features after trying all known troubleshooting methods. ffmpeg -i uservideoRendered.mp4 -filter:v hwupload_cuda,scale_npp=w=1920:h=1080:format=nv12:interp_algo=lanczos,hwdownload -c:v hevc_nvenc -profile main -preset slow -rc vbr_hq -c:a copy uservideoRendered.mp4-test ffmpeg -i uservideoRendered.mp4 -filter:v hwupload_cuda,scale_npp=w=1920:h=1080:format=nv12:interp_algo=lanczos,hwdownload........
  • Linux Mint USB Kernel Tainted and Locked Port/Dev File


    Essentially a program I was running for mining did not terminate properly with Ctrl+C it is listed as defunct and cannot be killed, kernel is tainted and normal tricks to disable the port are impossible the dev and sys entries for the device cannot be browsed or interacted with in any form without a lockup of the request. The only solution is to reboot due to the kernel taint as far as I can find so far. [1130246.811056] INFO: task minerd:21861 blocked for more th........
  • ffmpeg Linux Mint download, compile and install howto


    #if you have nvidia make sure you install the nvidia-cuda-toolkit so hardware acceleration can be used wget http://ffmpeg.org/releases/ffmpeg-3.3.2.tar.bz2 tar -jxvf ffmpeg-3.3.2.tar.bz2 cd ffmpeg-3.3.2/ ./configure --disable-yasm install prefix /usr/local source path ........
  • How to change reserved blocks in Linux partition


    user@box:~$ sudo tune2fs -l /dev/md99 [sudo] password for user: tune2fs 1.42.9 (4-Feb-2014) Filesystem volume name: Last mounted on: /mnt/md50 Filesystem UUID: 976a8655-2619-4587-878c-dab07f7b7652 Filesystem magic number: 0xEF53 Filesystem revision #: 1 (dynamic) Fi........
  • USB 3.0 External HDD Enclosure Seagate UAS problems - [sdd] tag#1 CDB: Write(16) 8a 00 00 00 00 01 70 04 08 68 00 00 00 08 00 00


    This is a 8TB Seagate external USB 3.0 device apparently newer kernels use a module called "UAS" instead of "USB Storage" which causes issues as a lot of devices are not properly supported in UAS mode by the kernel driver. The solution some say is to disable UAS specifically for your USB device but I'd rather just disable UAS altogether. Solution blacklist UAS: *do not do this it does not work and just causes your USB 3.0........
  • Centos 7 Cudaminer Nvidia setup guide


    I am using a GTX 1060 but replace the download for the driver with the correct/current version for your particular card by visiting: http://www.nvidia.com/Download/index.aspx?lang=en-us yum install automake curl openssl-devel libcurl-devel gcc gcc-c++ yum -y install kernel-devel-`uname -r` yum -y install unzip #the........
  • USB 3.0 PCI x1 Card Review VIA VL805 on Linux Review and Experience


    This is a VIA made VL805 USB 3.0 Chipset with 4-ports and MOLEX powered. First of all this unit was cheap at about only 9 USD with fast shipping. My biggest concern was if this was a quality unit and would it really give you full USB 3.0 speeds (some people reported with similar cards that for some weird r........
  • rsync run as root sudo without password


    This is a common issue, what if a issue shouldn't have root but you want to use that user to make a full backup of a system? They of course need root access. You can actually just give them passwordless sudo access to rsync in /etc/sudoers: sudo vi /etc/sudoers yourusername ALL = NOPASSWD: /usr/bin/rsync Here is how you would execute rsync: The key thing for the remote host is to........
  • cudaminer freezes Linux Mint taints kernel


    When running cudaminer once it tries to initialize the card the entire screen freezes. The computer itself is still running but the Xorg is done for, you cannot even switch to another console window and must reboot (even an mdm or Xorg restart does not help). At first cudaminer will give you these errors: stratrum_recv_line failed ...retry after 15 seconds GPU #0: Geforce 210 with compute ca........
  • Linux Mint Intel Screen Tearing Horizontal Line Solution Fix Intel i915 Intel HD 4400 GPU Debian / Ubuntu


    sudo mkdir -p /etc/X11/xorg.conf.d/ sudo vi /etc/X11/xorg.conf.d/20-intel.conf On newer Ubuntu / Mint / Debian systems the file would go in: /usr/share/X11/xorg.conf.d/20-intel.conf Type "i" and enter the following: Section "Device" Identifier "Intel Graphics" Driver&n........
  • process_usershare_file: stat of /var/lib/samba/usershares/dump failed. Permission denied - samba error solution


    [2017/06/12 21:14:04.991169, 0] ../source3/param/loadparm.c:3259(process_usershare_file) process_usershare_file: stat of /var/lib/samba/usershares/dump failed. Permission denied Issue was the parent directory needed chmod 755........
  • Nvidia Linux Mint/Ubuntu screentearing horizontal line solution


    Finally after ages I found the solution which is on many pages on the net but not obvious and should have been standard or more common info! Instant Solution: Type this into the terminal (unfortunately the driver config menu doesn't have the option as itis hidden): nvidia-settings --assign CurrentMetaMode="nvidia-auto-select +0+0 { ForceCompositionPipeline = On }" Make permanent Cli........
  • Openshot 2.2 is very unstable always crashing in Linux Mint 18.1!


    Jun 1 15:45:42 videoeditor-desktop org.mate.panel.applet.MintMenuAppletFactory[1882]: project_data:INFO Missing folder chosen by user: Jun 1 15:45:42 videoeditor-desktop org.mate.panel.applet.MintMenuAppletFactory[1882]: project_data:INFO Removed missing file: MAH02949.MP4 Jun 1 15:45:57 videoeditor-desktop org.mate.panel.applet.MintMenuAppletFactory[1882]: ui_util:WARNING Icon theme media-playback-start not found. Will use backup........
  • Apache SSL very slow response with Firefox Freezes/Loads Very slow when checking self-signed SSL certificate


    I was sure this was a Centos bug with OpenSSL, Apache, MySQL or even PHP. I tried everything but nothing helped. One clue is that if you check the Apache logs you will see nothing in the access logs until minutes later (this means Firefox has not even passed your request to the remote Apache/htttpd server). When even accepting the invalid certificate message that would show up minutes later when trying to "View the Certificate" Firefox would freeze. This bu........
  • Track 01: 34 of 1726 MB written (fifo 100%) [buf 99%] 3.6x.Errno: 5 (Input/output error), write_g1 scsi sendcmd: cmd timeout after 1.897 (40) s CDB: 2A 00 00 00 44 A9 00 00 1F 00 resid: 6144 cmd finished after 1.897s timeout 40s write track da


    These errors believe it or not are simply because of not being the root user or running with sudo! However if you didn't know to try as root you'd think there was a problem with your burner or disc Essentially it looks like without root you cannot send the required scsi commands to continue writing. Ithink cdrecord should have built-in tests or safeguards to see if it has the permissions to run the required commands. I guess for more advanced users the idea is simila........
  • Intel NUC J3455 Linux Support Ubuntu/Linux Mint Issues


    I get the following error "Installer Crashed" on 18.1 MATE 64-bit when installing by NFS/PXE. Yet it was able to at least detect and use my NIC (perhaps the driver was only activated because of PXE/NFS being used)? When using 18.1 Cinnamon on CD the NIC does not work but the installer did succeed. However it doesn't work right, I can't login graphically and get some Cinnamon OOMerror but how can this be with 8GB of RAM straight from login?........
  • Linux Mint Install Netboot PXE Guide Howto


    *Update so this doesn't work it must be something to do with the path of nfs or something else but the installer fails with "Installer crashed" at the end whereas with the CD/USB it works. This assumes you've already installed and configured a separate PXE/DHCP server somewhere else and your /tftpboot directory is setup. This is for Linux Mint 18.1 but generally applies to most versions although you may have tro change things like "casper"........
  • xdebug easiest howto get going


    Just make sure you have php-xdebug installed and edit your php.ini: [xdebug] xdebug.profiler_enable = 0 xdebug.profiler_enable_trigger = 1 xdebug.profiler_output_dir = "/tmp/xdebug/" xdebug.output_name = "cachegrind.out.%t-%s" Also make and set permissions on /tmp/xdebug: mkdir /tmp/xdebug chmod 777 /tmp/xdeb........
  • [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) - Apache Error Solution


    Does this mean? [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) Basically it means you created your SSL Certificate as a CA the wrong way, usually with this command: openssl req -new -x509 -nodes -days 1530 -out server.crt -keyout server.key How can you fix it and do it properly? Step 1.) Make a new Private KeyCreate server pass key:........
  • Windows 2012 Essentials r2 error - "system_thread_exception_not_handled (srv.sys)"


    I'm getting this error randomly but suspect it is an update or application conflict. It also takes ages for this "collection" to happen. "system_thread_exception_not_handled (srv.sys)"........
  • cPanel error Access denied for user 'root'@'localhost' when adding remote MySQL IP address solution


    Error while connecting to MYSQL: (XID 4ea7s9) Access denied for user 'root'@'localhost' (using password: YES) at /usr/local/cpanel/Cpanel/Mysql.pm line 181 Solution This error occurs because the /root/.my.cnf has the wrong/outdated password for MySQL root user. Simply edit /root/.my.cnf with the correct user. This normally happens if you update outside of cPanel.........
  • Linux shows my drive as being dead is it really? Buffer I/O error on device sdb, logical block 0 sd 3:0:0:0: [sdb] CDB: Read(10): 28 00 00 00 00 00 00 00 08 00


    Normally the below would indicate a failing or failed drive. In this case the SATA port was unplugged and sometimes the Linux kernel/motherboard even with AHCIjust don't play nice and can't handle it. What happened is Iplugged in a new drive after removing another one. However the log shows that after the old drive was plugged in the Linux kernel kept complaining thinking the drive was there but not responding properly. This continued even with reseating........
  • Linux Mint/Ubuntu/Debian Nvidia driver becomes slow graphics performance issue


    I've had this issue since Ubuntu 9 and now even on Linux Mint 17 no matter what latest version of the Nvidia proprietary driver that I use. It just becomes slower and slower and only gets better after rebooting or restarting Xorg. Someone here has it as well https://askubuntu.com/questions/822449/graphics-becomes-slow-after-a-while/917886 It's very fru........
  • Linux Mint missing ffmpeg solution to install from Ubuntu PPA


    This is very annoying that ffmpeg is missing from Linux Mint! They have ffmpeg2theora which is a totally different codec and does not work as ffmpeg does at all (it is basically totally different). However on Linux Mint 17 I was able to use a Ubuntu PPA and sucessfully install ffmpeg! https://launchpad.net/~mc3man/+archive/ubuntu/trusty-media Adding this PPA to your system........
  • phpBB3 slow and internal dummy connection


    Using Apache 2.2 and PHP5.6 PHPBB3 is very slow to respond. Actually for some reason it takes so long to even register a log entry in access_log as in several seconds or a few minutes later it shows up in Apache. All other vhosts and Apache access stops working and freezes until the request to access PHPBB3 slowly completes. It seems to randomly be slow if you stop using it whether for posting or reading the forums. I've migrated to different machines including........
  • How to convert xlsx/xls Excel file into csv


    A lot of times these files seem to lag and be incredibly slow even if just a few dozens rows of data. Here is how you can convert it with "gnumeric": ssconvert file.xlsx file.csv You may get lots of weird errors like this but the conversion seems to work fine: (ssconvert:15244): GLib-GObject-WARNING **: g_object_set_valist: object class 'SheetObjectImage' has no property named 'style'........
  • Linux bash script how to generate a random password using /dev/urandom


    This command will generate a random password using all letters and numbers that is 20 characters wrong based on /dev/urandom (for the most truly random output). echo `< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c${1:-20};echo;`........
  • ssh forward multiple ports in the same connection and command even works with NAT!


    You can actually just pass multiple "-L" statements to achieve this. An example is as below: ssl -L 80:192.168.10.5:80 -L443:192.168.10.5:443 -L2068:192.168.10.5:2068 -L 8192:192.168.10.5:8192 user@remotehost.com The above essentially is saying forward ports 80,443,2068,8192 to the remote IPof 192.168.10.5 (even though it is behind NAT). Essentially SSH will do the NAT part even if the........
  • How to create openssl md5 password hash to use in /etc/shadow using bash


    Very useful in embedded and other non-standard deployments. The above makes a random salt of 14 random characters from /dev/urandom (you can change the -14 to whatever number of characters you want for your salt). openssl passwd -1 -salt `< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c${1:-14};echo;` YourPassword Output: $1$eW-ScuyL$f/iKMJ5mbJ..7bSzvX6EO0 How To Create Password Has........
  • Avocent DSR8020 KVM/IP - Network Connect Error - Solution


    This error is commonly due to Java security or TLS settings but there is a second issue with forwarded ports that also causes it. 1. Java Security/TLS Settings issue: This article has the solution to change them all in Linux automatically 2. Port Forwarding Issue if your Avocent DSR is behind NAT/private IP........
  • zip warning: name not matched: in Linux Solution


    There are usually two reasons for this. #1 The most common is that you need to enable the -r (recursive) flag with zip to make it recurse into directories. So the solution is to use -r zip -r somefile.zip yourfiles #2 If you are using bash scripting based on ls without the full path or for some other reason the full path is missing, zip looks for the files in the current directory so this will always fail.........
  • css .ul and .li how to remove the identation padding/margin from list items?


    A common mistake is people think you should tell the li padding to be 0px but this is wrong. All you need is the following code in line: your item your item In a css class: .yourclass { ul.margin: 0px;........
  • how to extract .xz file in Linux Centos/Debian/Ubuntu


    tar -xvJf somefile.tar.xz It is very annoying that so many are now using the .xz archive format as standard instead of .tar.gz but nevertheless above is how you would extract it with the "J" flag (not lower case j as that is for bz).........
  • Linux how to whois query other gTLDs such as .club solution


    whois in Linux is incredibly out of date and does not seem to recognize most new TLDs domains, but there is a quick and easy tip/hack/tweak for this. An example of new TLD's site as .review .site .club whois somesite.club No whois server is known for this kind of object. bash to the rescue Now I did try to apply this in .bashrc but DONOT! Ithink the * wil........
  • How to verify SSL SHA-1 Certificate Fingerprnit Signature of your mail/web server to avoid hijacking/man-in-the-middle attacks


    This is especially helpful if you run your own servers. If you are presented with an error message or warning that the signature has changed or does not match the IP/domain you are connecting to you always want to verify manually. So your e-mail/web client will show you an SHA-1 fingerprint like this: "Could not verify this certificate because the issuer is unkown" or other reasons such as a mismatch in IP/domain. It will also show you........
  • ecryptfs errors


    ecryptfs-mount-private Enter your login passphrase: Inserted auth tok with sig [ee16d84] "into the user session keyring mount: No such file or directory" [ 156.118113] ecryptfs_mount: kern_path() failed [ 156.118431] Reading sb failed; rc = [-2] [ 164.233055] traps: mate-notificati[3472] trap int3 ip:7f43d7002c13 sp:7fff162c6600 error:0 [ 166.017061] ecryptfs_mount: kern_path() failed........
  • What happens when you unplug 1 or more devices from an mdadm RAID array to simulate a failure in Linux Ubuntu/Centos/Debian?


    In short the two drives in the array were /dev/sdd and /dev/sde. The kernel sees they were unplugged and have gone down as you can see below. mdadm caught the first one being unplugged /dev/sde and disabled the missing drive. However when the final drive that was part of the array is unplugged it didn't notice at all. Instead it complains about an IO error later for drives that the kernel knows do not exist anymore. [45817.162728] ata4: exception........
  • ENOM TRANSFER passwords do not match - solution


    The "passwords do not match" implies or makes it appear that your auth code is wrong but actually you have to click "View additional settings" and then see there are 2 password fields to manage the domain once it is transferred (the password is typed twice for confirmation). Simply fill out a password twice or remove the first password fields contents and all will be well.........
  • How to Execute PHP in .html files with Apache in Linux Centos/Debian/Ubuntu etc


    Add this to the .htaccess file #right/working: AddType application/x-httpd-php .html .htm #wrong (won't work in many cases): AddHandler application/x-httpd-php5 .html .htm........
  • Using a proxy with yum in Centos 6


    Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=6&arch=x86_64&repo=os error was 12: Timeout on http://mirrorlist.centos.org/?release=6&arch=x86_64&repo=os: (28, 'Operation too slow. Less than 1 bytes/sec transfered the last 30 seconds') Error: Cannot find a valid baseurl for repo: base You would think this should be fine and simple like using a proxy with most other software? However........
  • How Do you Open/Extract .WARC Internet Archive Files on Linux Ubuntu/Mint/Centos?


    Get the python "warc extractor" from here. WARC just seems to be such an unnecessary and complicated format. Why not use tar, rar, zip etc...? ./warc-extractor.py -dump content !http:content-type:pdf yourfile.warc........
  • How To Disable htaccess inheritance or exclude a directory


    The only real way us to do the following in the root of your site's .htaccess RewriteRule ^somedirectory-not-to-inherit/.*$ - [L]........
  • mdadm and lvm how to completely disable and remove vg/pv/lv


    In short the solution is just to use vgremove for the actual /dev/mapper device: vgremove /dev/mapper/backups-backuplv box mnt # mdadm --manage /dev/md8 --stop mdadm: Cannot get exclusive access to /dev/md8:Perhaps a running process, mounted filesystem or active volume group? box mnt # lv lvchange lvconvert lvcreate l........
  • sshd[10470]: Authentication refused: bad ownership or modes for directory /root


    This can be a case of bad permissions or modes as the error says. Normally one would assume permissions but often a script may change ownership of /root to something else. This was the case half the time I've encountered this. So in short make sure ownership is correct chown -R root.root /root........
  • LG Phoenix 2 Escape Disable AT&T Phonebook/Contacts Error Message


    A friend has this issue where you try to go to contacts and you get a message saying you need to enable data (basically if you are not really on the AT&T network). The Solution - You can disable this by the following code in the dialer: *#*#2666#*#*........
  • mdadm frozen and doesn't realize array is dead/missing failed due to unplugged drives


    This was a surprising bug but I unplugged all drives for an array md127. At first it was just 1 drive and mdadm seemed to notice this. I unplugged the second drive taking the array offline but mdadm did not realize it was offline and still showed a non-existent disk as being part of it. This created problems trying to unmount it or even to stop this array with mdadm freezing. As for how to fix it I can only think of making sure you are not in a mounted path of........
  • mdadm how to make inactive array active


    This happens when you assemble array it doesn't mean it will be active for many reasons: md20 : inactive sdf1[2](S) 732442488 blocks super 1.2 Solution: sudo mdadm --manage /dev/md20 --run........
  • Centos 5 OpenSSL does not support TLS 1.2 Apache Error


    [Thu Jan 26 14:13:31 2017] [notice] caught SIGTERM, shutting down [Thu Jan 26 14:14:00 2017] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec) [Thu Jan 26 14:14:00 2017] [error] Server certificate is expired: 'Server-Cert' [Thu Jan 26 14:14:00 2017] [notice] SSL FIPS mode disabled [Thu Jan 26 14:14:07 2017] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec) [Thu Jan 26 14:14:07 2017] [error] Server certificate is expired: 'Server-Ce........
  • How to Properly Secure SSL/TLS Apache Settings against Heartbleed Poodle (TLS) Poodle (SSLv3) FREAK BEAST CRIME


    Many users still are not aware but simply patching OpenSSL does not secure you against many known and easy to exploit attacks that will render your encryption useless by an attacker. Use the following setings in /etc/httpd/conf.d/ssl.conf SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH EDH+aRSA !CAMELLIA !SEED !3DES !RC4 !aNULL !eNULL !LOW !MD5 !EXP !PSK !........
  • K9 Mail Android Cannot See or View E-mails Disappear after reading - with Dovecot server. Solution


    This actually only happened after an e-mail server ran out of space due to run away log files. Normal Desktop clients were not affected. It appeared to be a bug in K9 mail but even reinstalling/wiping all settings did not fix it (read e-mails would still not reappear). This is moreso a bug in Dovecot where it probably messes up the index files. How do you fix this in Dovecot/your e-mail server? You need to delete the do........
  • ERROR 2013 (HY000): Lost connection to MySQL server during query


    The solution is simple but strange, if you copy your /var/lib/mysql directory to another server and think it will work, be sure to check if you have /var/log/mysql and binary log files. If you do, the server will not work and will give you errors like below and crash without the proper log files. UPDATE user SET password=password("newpass") WHERE user='root'; flush privileges; ERROR 2013 (HY000): Lost connection to MySQL server durin........
  • fdisk wq causes hung process


    I created a new partition table on a newly plugged in device and it caused fdisk to hang (even force kill does not work). It also may be a bad drive or some other issue because fdisk -l hangs after the first 2 HDDs (totaly of 8 HDDs on this system): [1232879.903596] INFO: task fdisk:27176 blocked for more than 120 seconds. [1232879.903607] Tainted: P&nbs........
  • ADATA SU800 256GB 3D NAND Flash SSD Test & Review


    I keep reading these drives are slower, but they are cheap and still SSDand work very fast for my needs. As you can see the sequential read is 481-491MB/s, if I put them in MDADM RAID10 mode (normal RAID1) they should give me well over 900MB/s and with redundancy and being very cheap for what they offer. [1232206.315622] scsi 8:0:1:0: Direct-Access ATA ADATA SU800&........
  • remove gpt partition linux


    sudo fdisk /dev/sdh WARNING: GPT (GUID Partition Table) detected on '/dev/sdh'! The util fdisk doesn't support GPT. Use GNU Parted. WARNING: The size of this disk is 8.0 TB (8001563221504 bytes). DOS partition table format can not be used on drives for volumes larger than (2199023255040 bytes) for 512-byte sectors. Use parted(1) and GUID partition table format (GPT). The device presents a l........
  • OpenVZ Solution CPT ERR: c02fa000,73 :CPT: lock fd is closed incorrectly: 1 and vps-net_add ERROR: Unable to add route ip route add 192.168.5.2 dev venet0


    The only solution after trying many suggestions was to simply restart the "vz" service (definitely not preferable). Even doing an ifdown and ifup for venet0 did not help. ifup venet0 Bringing up interface venet0: Configuring interface venet0: net.ipv4.conf.venet0.send_redirects = 0 RTNETLINK answers: Network is down Some errors from log: CPT ERR: d2dc60........
  • mdadm change wrong device name md127 fix and solution in Linux


    md127 issue, it should be /dev/md3 per mdadm.conf Any time something is mounted as md127 it almost always means there is no entry for this mdadm array in the mdadm.conf in initramfs (which is separate from your actual /etc/mdadm.conf). cat /etc/mdadm.conf ARRAY /dev/md3 metadata=1.2 UUID=b6722845:381cc94e:7a2c5b5f:8e3b7c4f The reason for this is something strange, most Linux OS's bizarrely always keep their own copy of /etc/mdadm.con........
  • /dev/drbd0: State change failed: (-2) Need access to UpToDate data solution


    Everytime I've seen this error "/dev/drbd0: State change failed: (-2) Need access to UpToDate data" it is because DRBD has no disk: cat /proc/drbd version: 8.3.13 (api:88/proto:86-96) GIT-hash: 83ca112086600faacab2f157bc5a9324f7bd7f77 build by root@sighted, 2012-10-09 12:47:51 0: cs:Connected ro:Secondary/Secondary ds:Diskless/Inconsistent A r----- ns:0 nr:0 dw:0 dr:0 al........
  • cPanel how to change main IP to fix licensing issue


    Your cPanel may not work if you enter your non-main IP when setting it up. The way to fix it is to go back to the setup screen by removing the following file: rm /etc/.whostgrft........
  • Apache Log Error Message when starting


    Usage: geoiplookup [-h] [-?] [-d custom_dir] [-f custom_file] [-v] [-i] [-l] Usage: geoiplookup [-h] [-?] [-d custom_dir] [-f custom_file] [-v] [-i] [-l] grep: Address: No such file or directory grep: not: No such file or directory grep: found: No such file or directory sh: -c: line 1: syntax error near unexpected token `|' sh: -c: line 1: `|cut -d ',' -f 2' ........
  • Linux Mint 17 How to Enable File Sharing Option in File Manager


    I still cannot understand how this would not be enabled by default and I struggled to find the reason why with manually installing samba etc.. wondering why the option for sharing was not in the menu. On Linux Mint "MATE" the package is called "caja-share" and on Cinnamon it is called "nemo-share" so edit the below command as necessary: *Also note that the "samba" package is necessary as it is not inst........
  • 99.99 % [jbd2/drbd0-8] highiowait


    I have not found the source of this but essentially it seems like drbd and ext4 may not play well but I have to confirm still. In either case an older DRBD setup with older hard drives seems to have little to no iowait, but the main difference is the drbd partition is ext3 and not ext4. I will experiment and see if that fixes this, then we will know that DRBD and ext4 have issues.........
  • blocked for more than 120 seconds issues with iowait and timeout on Live Linux distribution while writing to physical disk


    This happened while an mdadm array was syncing, all access from writing a new blank file to opening a small .txt file was very slow: [222117.312078] kjournald starting. Commit interval 5 seconds [222117.685060] EXT3-fs (md0): using internal journal [222117.685096] EXT3-fs (md0): mounted filesystem with ordered data mode [222122.376847] kjournald starting. Commit interval 5 seconds [222122.602825] EXT3-fs (md2): using internal jour........
  • astrachat connection problems in Android 5.01 Lollipop


    I wanted to use Astrachat because it seems to be the only app that has video, pic and file sharing for Jabber butI cannot even connect despite any other client working fine including Xabber and others. astrachat "Oops.. We can't connect to the account that you provide above. Please recheck your account detail". Unfortunately to make it worse there doesn't seem to be any error log or more details about the issue. The jab........
  • sed how to avoid escaping


    sed gets to be a pain and a real mess and is hard to read and understand when you have to escape things like / etc. Idid not realize until recently that you don't need to use / as a separator, you can use virtually any non letter or number character. Eg we have used # as the separator to avoid having to escape the forward slashes and in this way the command is plain, easy to understand, edit and saves time/hassle without the need for escaping. sed -i s#http........
  • Ubuntu/Debian OpenVZ Template Problems No Networking and SSH not starting


    It all comes down to a bug essentially where you are running an older kernel that doesn't support the newer Debian templates. The solution is to update your OpenVZ kernel. Here are some symptoms of the problem/lack of kernel support: Ubuntu Template 12.04 requires a manual network start: service networking start sshd will not start: /usr/sbin/sshd PRNG is not seeded mknod /dev/random c 1 8........
  • HTML files in Apache still displaying as raw text even with DefaultType, ForceType etc.


    There was only one solution here and it was the following: edit /etc/httpd/conf/httpd.conf Comment the lines for the Mime Magic Module: # MIMEMagicFile /usr/share/magic.mime # MIMEMagicFile conf/magic *Don't forget to restart Apache and clear your browser cache twice I was using DefaultType and ForceType a........
  • Uploading Error HTTP error. Wordpress Upload Error Solution


    When you start uploading larger images in Wordpress you have to make sure your maximum attachment size is large enough and that the execution time is not too short: Uploading Error HTTP error. [Thu May 12 16:32:25 2016] [error] [client 10.10.5.2] PHP Fatal error: Maximum execution time of 30 seconds exceeded in /httpdocs/blog/wp-includes/class-wp-image-editor-gd.php on line 182 Solution Edit p........
  • Cannot Read License File cPanel Solution


    This can happen because port 80 is not open, or your license has expired and/or your IP is out of date and also if the license server itself from cPanel is having issues. In most cases as long as you have a valid license the following command will solve it: /usr/local/cpanel/cpkeyclt Updating cPanel license...Done. Update succeeded. Building global cache for cpanel...Done Cannot........
  • Centos and obfsproxy install errors


    pip install obfsproxy /usr/lib/python2.6/site-packages/pip/_vendor/requests/packages/urllib3/util/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning. InsecurePlatformWarning You are using pip version 7.1.0, however version 8.1.1 i........
  • curl: (35) SSL connect error solution


    curl -k https://somesite.org curl: (35) SSL connect error The site used to work until I got a new SSL cert Updating curl with (yum -y install curl) made it work again. ........
  • openvpn 2.3.10-1.el6 issues auth-env does not work correctly for auth-user-pass-verify


    openvpn 2.3.10-1.el6 issues in the .conf auth-user-pass-verify "passwordcheck $username $password $untrusted_ip" via-env auth-env does not work correctly in OpenVPN 2.3: Sat Apr 23 02:30:22 2016 - $username - $untrusted_ip - login failure But OpenVPN 2.2 does work as expected. It could be that the specified script automatically receive........
  • How to modify HTML/Themeforest Themes to work in any path statically using unix/linux's sed command


    For themes and custom CMS setups, the typical HTML theme is not ready to go at all but here are some common sed commands (search and replace that will get most of them working without breaking as you'd expect). The problem is that often the theme directory will be separate from the content and this will break the relative paths that these themes use. sed -i s/'href="'/'href="/themes/yourtheme/'/g index.html sed -i s/'src="'/'src="/themes/y........
  • cp copy all contents of directory to another one including hidden files and folders howto


    cp -a /your/source/. /your/dest/ -a preserves all file atributes and symlinks the "." at the end of /source/ includes all hidden files such as .htacess, .bash_history, .ssh etc.. The / in /dest/ makes sure the contents go into it instead of replacing /dest itself (eg. if you did not have the / at the end).........
  • Cannot load /etc/httpd/modules/mod_file_cache.so into server: /etc/httpd/modules/mod_file_cache.so:


    Stopping httpd: [FAILED] Starting httpd: httpd: Syntax error on line 73 of /etc/httpd/conf/httpd.conf: Cannot load /etc/httpd/modules/mod_file_cache.so into server: /etc/httpd/modules/mod_file_cache.so: cannot open shared obje........
  • Apache SSL Reverse Proxy Very Slow Solution


    This is a simple fix but not a simple problem and it still doesn't make sense to me. But in a nutshell if your target proxy server works fast when accessing directly over SSL then this may be your issue. It seems SSL does not play nicely when the target proxy destination/host has a riduculously long key (such as 8192 bits long). Now this is normally not a problem, in fact the target server could be accessed with hardly any delay directly despite such a long key.........
  • esniper error on Linux Mint 17.2 Debian/Ubuntu: Cannot connect to URL : SSL connect error: gnutls_handshake() failed: Illegal parameter Retrying... esniper encountered a bug. It looks like your esniper version is not current. You have version 2.28


    Auction 262382440107: Cannot connect to URL : SSL connect error: gnutls_handshake() failed: Illegal parameter Retrying... esniper encountered a bug. It looks like your esniper version is not current. You have version 2.28.0, the newest version is 2.31.0. Please go to http://esniper.sf.net/ and update your copy of esniper.........
  • Nvidia Linux Card not working due to LSI 9200/SAS2008 IRQ conflict


    At first my BIOS said the card may not work right because there is no more option ROM space. I disabled the Option ROM for both LSI 1068 and 2008 chipsets, Network Boot ROM and most other PCI slots, Serial Port, etc... and the message went away but the card still does not work properly. But it still cannot initialize the card properly(does not work): [ 33.943272] NVRM: This PCI I/O region assigned to your NVIDIA device is invalid:........
  • SAS2008 LSI 9200-E Linux Upgrade Flash Firmware with sas2flash


    Download from here http://www.avagotech.com/products/server-storage/host-bus-adapters/sas-9200-8e#downloads sudo Installer_P20_for_Linux/sas2flash_linux_i686_x86-64_rel/sas2flash -listall LSI Corporation SAS2 Flash Utility Version 20.00.00.00 (2014.09.18) Copyright (c) 2008-2014 LSI Corporation. All rights reserved &nbs........
  • Apache Vhost HowTo Serve Same Content using a different domain and IP


    There are a few ways of doing this and all basically involve using the reverse proxy or "ProxyPass" feature of Apache to accomplish it. 1.) Create a normal vhost and simply symlink the root directory of the site you want to mirror. Eg. originalsite.com and newsite.com /vhosts/originalsite.com/httpdocs You would symlink like this: ln -s /vhosts/originalsite.com/httpdocs vhosts/originalsite.com/........
  • MySQL PHP adding a backslash/escaping apostrophes Solution


    The first thing to diagnose is what is actually in the database (use PHPMyAdmin or CLI). You will of course either find that the backslash is either in the database or not. If the backslash is in the database you probably have magic quotes gpc/runtime on and/or are calling the "addslashes()" function which does this. If you are escaping your data with mysql_real_escape_string() then think again, you probably have magic quotes gpc enabled either in php.ini or........
  • Linksys E2500 DD-WRT Upgrade Instructions and Enabling 5ghz with Tomato Firmware


    1.) Flash directly to this file: http://tomato.groov.pl/download/K26RT-N/build5x-132-EN/Linksys%20E-series/tomato-E2500-NVRAM60K-1.28.RT-N5x-MIPSR2-132-Max.zip *I was never able to get the larger "Mega" file to work, at least not initially so I recommend the file above. To enable 5ghz I had to do the "Clear NVRAM" Option before it was shown. 2.) Or if you don't need 5ghz (most devices do not support it and cannot........
  • Linux Mint/Ubuntu/Debian Window Controls Missing Solution


    If Linux Mint 17 or other has no window buttons/controls you can do the following from terminal: marco --replace& Sometimes it can be fixed if you go to your themes/appearance and choose a new one but in the case like mine where Compiz is installed but not running/working then that fix will not work and will require the marco command above. What if you can't type in a terminal Window? If you close........
  • Linux Mint/Ubuntu/Debian Dual NICs networks problem when enabling and disabling one device


    The Scenario You have dual NICs and you disable NIC1 which uses 192.168.1.1 as its gateway. With NIC2 you enable it/connect it to another network which also has the gateway 192.168.1.1 Everything will work fine at this point. When switching back to NIC1 even with NIC2 disabled and even unplugged, the OS basically can't pick up the new/updated ARP entry of the old device for 192.168.1.1 and perhaps thinks it is a security risk or spoof of some sorts and blocks i........
  • Force SSL for all URLs Apache htaccess modrewrite


    The best way is as below in .htaccess using modrewrite, any request that is not SSL will be redirected to https://domain.com and the exact same URL RewriteCond %{SERVER_PORT} 80 RewriteRule ^(.*)$ https://domain.com/$1 [R=301,L]........
  • Debian Linux Ubuntu Mint connect to pptp from terminal bash shell


    apt-get install pptp-linux echo "yourvpnusername * yourpasspass *" >> /etc/ppp/chap-secrets vi /etc/ppp/peers/provpnaccounts.com enter (ignore the lines): ============ pty "pptp server.provpnaccounts.com --nolaunchpppd" name testuser #remotename PPTP require-mppe-128 file /etc/ppp/options.pptp ==========........
  • Linux Debian/Ubuntu/Centos How To Force Internet Traffic Through PPTP L2TP OpenVPN Account Only


    The following assumes the computer is local/physical to you and/or it always has a LANIP so it can be accessed on site without having a default gateway. The key to this is not to set a default gateway for your computer or you can set a script on boot or other time to delete the gateway (where eth0 is the NIC you are using): route del default eth0 50.80.20.2 is the VPN server you connect to 192.168.1.1 is your........
  • vi Debian Linux Ubuntu Mint arrow key problem linux ssh bash shell terminal


    Debian/Ubuntu vi keyboard problem, up and down arrows do not work and instead make an A (Up), B (Down), C (Right) or D(Left). The working solution (you could also add the set nocompatible to /etc/vim/vimrc to make it system wide-will not be applied until reboot I believe): echo "set nocompatible" > ~/.vimr........
  • Avocent 8020 KVM Java Icedtea Viewer


    This command in Debian/Ubuntu/Mint will get everything need installed for most Java based KVM viewers: sudo apt install icedtea-netx The following additional packages will be installed: ca-certificates-java icedtea-netx-common openjdk-8-jre openjdk-8-jre-headless It seems every other updated version of Java or Icedtea breaks things and I will save the frustration of Java for another post.........
  • Centos Add Multiple IP Addresses in a range without manually setting each static IP


    This is actually very simple and this example assumes your network device is "eth0" In Centos your network config would be the following: /etc/sysconfig/network-scripts/ifcfg-eth0 Take the same path and just add a "-range0" So to add a range create the following file: /etc/sysconfig/network-scripts/ifcfg-eth0-range0 IPADDR_START=192.168.1.50 IPADD........
  • Cannot get mono to work properly on Linux Mint


    mono/wine not working in Ubuntu/Linux Mint/Debian: The assembly mscorlib.dll was not found or could not be loaded. It should have been installed in the `/usr/lib/mono/2.0/mscorlib.dll' directory. solution: sudo apt-get install mono-complete Problems: mono does not work well for even simple things like a Winrar self extracting .exe fi........
  • CPanel SNI error


    Your server does not support SNI, so all of your SSL websites must use the same SSL certificate. An update to the certificate on an existing SSL website will affect all of your SSL websites, and new SSL websites must use the currently installed certificate.........
  • How to get/display full path to file in Linux/Unix


    It is just the readlink command with the -f switch and it will display the full path, very handy to save time when you want to copy and paste the location of a file or script etc.. readlink -f updatehtaccess.sh /var/lib/updatehtaccess.sh ........
  • bash script Get Model and Serial Number of All Hard Disks in Server on Linux


    for disk in `fdisk -l|grep "Disk /dev"|awk '{print $2}'|sed s/://g`; do echo "$disk" && smartctl -d ata -a "$disk" -T permissive|grep -iE 'Device Model:|Serial Number:' echo "---------------" done *Make sure you have smartctl from smartmon tools installed Sample output: /dev/sdc Device Model: ........
  • How to scp transfer a file in Linux with spaces


    Say you have a path like this "/some/path/here with spaces/". If you try to transfer it you will get a message along the lines of: scp -rp 192.168.0.12:"/some/path/here space/" . scp: /some/path/here: No such file or directory scp: space: No such file or directory You can escape each space but what a pain that is especially if you have multiple spaces in the path. The simplest way is to use the follow........
  • unfortunately lg keyboard has stopped - LG Phone Keyboard Issue


    This seems to effect many other LG phones , specifically their keyboard app and basically makes your phone unusable where you cannot use the keyboard because that message keeps popping up and the keyboard will not load. unfortunately lg keyboard has stopped solution: 1. Go to your settings and manage apps and find the LG Keyboard app: 2. Stop it from running, delete all data and clear all cache. After the above you will probably find that your........
  • Windows showing wrong drive size after resizing the VPS/image or cloning howto fix


    How to Increase The Disk and Partition Size in Windows 2022,2019,11,10,8,7 etc.. Server 1, Enter the command prompt Start -> cmd 2. Start diskpart diskpart 3. Find the drive that has the wrong size list volume 4. Select the volume (in this example we use volume 2) select volume 2 5. Extend the volume........
  • How to manually save bash history


    This is useful in the case you are not properly logged in via an OpenVZ session or even a normal SSH session that you fear may go down(if the connection is broken the history is not saved). Save your bash_history like this: history -w ~/.bash_history You can always change the above to another file eg /tm........
  • Centos 6 how to guide convert LVM non-RAID into mdadm 1/10 RAID array live without reinstalling


    Here is the scenario you or a client have a remote machine that was installed as a standard/default minimal Centos 6.x machine on a single disk with LVM for whatever reason. Often many people do not know how to install it to a RAID array so it is common to have this problem and why reinstall if you don't need to? In some cases on a remote system you can't easily reinstall without physical or KVM access. So in this case you add a second physical or disk or already ha........
  • Centos cannot login by console or ssh session closed immediately


    In my case I could login with the initial install but I rsync'd everything over while preserving ownership and permissions to another RAID partition and booted from that.was fine before. The problem is that you are kicked out the second you login and the problem was SELINUX for some reason (perhaps it noticed something strange when it was moved to the new partition) login: pam_unix(login:session): session opened for user root by LOGIN(uid=0) login: ROOT LOG........
  • openvz yum problem Centos 6.5 cannot find file on mirror:


    #solution Edit /etc/yum.repos.d/openvz.repo For the first two entries comment out #mirrorlist and uncomment #baseurl and then it worked openvz yum problem Centos 6.5 cannot find file on mirror: yum update Loaded plugins: fastestmirror Determining fastest mirrors * openvz-kernel-rhel6: mirrors.ustc.edu.cn * openvz-utils: mirrors.ustc.edu.cn base ........
  • Virtualbox errors on Ubuntu/Debian/Mint


    The solution was to reinstall the vbox dkms package and do a manual modprobe of the modules it makes. I never sorted out the unable to start due to the USB issue, I did have the guest additions installed but the only way to boot was to change the pointing device from USB to PS2 and then to disable the USB controller (if your pointing device is set as USB, disabling USB will not work because it will re-enable by default when it sees your pointing device is USB, this is w........
  • Linux sudo config sudoers to run command without a password howto


    Before reading on remember to put the line at the bottom of /etc/sudoers as from experience what happen is that other rules cancel out what you have added. If your sudoers setup is correct it will work immediately upon saving without requiring a reboot. Edit /etc/sudoers yourusername ALL = NOPASSWD: /path/to/command *Once again remember the above should be on the bottom of the sudoers file or........
  • ONVIF Linux Security Camera Setup


    First of all this seems to apply to many ONVIF devices Hard coded IP: 192.168.1.10 (yes not kidding no DHCP!) 00:12:12:9C:C2:00 To view RTSP stream use VLC, or openRTSP or other RTSP capable software: rtsp://192.168.1.10/user=admin_password=tlJwpbo6_channel=1_stream=0.sdp user: admin password: blank http://ip/Login.htm Uses Quicktime and is a poor quality picture and slow Cannot change pass........
  • clamav freshclam out of date won't update solution


    freshclam ERROR: Can't open /var/log/clamav/freshclam.log in append mode (check permissions!). ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log). Tue Oct 13 13:49:35 2015 -> WARNING: Incremental update failed, trying to download daily.cvd Tue Oct 13 13:49:35 2015 -> WARNING: Can't download daily.cvd from db.local.clamav.net Tue Oct 13 13:49:35 2015 -> Trying again in 5 secs...........
  • Installing zoneminder on Ubuntu/Debian Linux Howto


    sudo apt-get install zoneminder [sudo] password for one: Reading package lists... Done Building dependency tree Reading state information... Done The following packages were automatically installed and are no longer required: libuser-perl python-evince kdebase-apps kwrite unixodbc libgnomeprint2.2-data python-soappy vgabios python-metacity hddtemp python-mediaprof........
  • status: { DRDY ERR } error: { ICRC ABRT } failed command: WRITE FPDMA QUEUED MCP55 Linux Errors


    [ 2868.041375] ata1: EH in SWNCQ mode,QC:qc_active 0x40 sactive 0x40 [ 2868.041554] ata1: SWNCQ:qc_active 0x40 defer_bits 0x0 last_issue_tag 0x6 [ 2868.041556] dhfis 0x40 dmafis 0x40 sdbfis 0x20 [ 2868.041874] ata1: ATA_REG 0x41 ERR_REG 0x84 [ 2868.042013] ata1: tag : dhfis dmafis sdbfis sactive [ 2868.042163] ata1: tag 0x6: 1 1 0 1 [ 2868.042301] ata1.00: exception Emask 0x1 SAct 0x40 SErr 0x400000 action 0x6 frozen [........
  • Centos/obfsproxy errors


    I never did get it working, it is too bad as obfsproxy should really be an option and integrated into the OpenVPN client and server or something similar: yum -y install python-pip python-devel No package python-pip available. #install the EPEL repo python-pip install obfsproxy python-pip install obfsproxy -bash: python-pip: command not found pip install obfsproxy &........
  • ssh session and port forward or reverse port matching or assocation howto


    Use netstat with the -anpe option. The e option shows the inodes and I do not know if it will always work or if it was by fluke but I was dealing with dozens of SSHsessions and needed to know which session was related to which forward (the PIDs of the SSHand SSHD did not match etc...) Notice the "59560675" and "59560762" those are almost identical, if you find two sets that are nearly identical except for the last 3 digits they may match (in my ca........
  • ECC Errors in action


    Message from syslogd@server at Sep 14 11:35:59 ... kernel:[Hardware Error]: MC4 Error (node 1): DRAM ECC error detected on the NB. Message from syslogd@server at Sep 14 11:35:59 ... kernel:[Hardware Error]: Error Status: Corrected error, no action required. Message from syslogd@server at Sep 14 11:35:59 ... kernel:[Hardware Error]: CPU:6 (10:8:0) MC4_STATUS[Over|CE|MiscV|-|AddrV|CECC]: 0xdc00400021080813........
  • Avocent Unable to load resource avctVideo.jar


    Avocent Unable to load resource avctVideo.jar Avocent requires port 80 and 443 to be forwarded or you will get a message like above if it's on a NAT network and you are accessing it from the outside (internet).........
  • Dell CS24 NV5/NV7 Gigabyte GA-3CESL-RH Motherboard ROM Chip info


    If you remove the white label on the chip (near the CMOS battery) you will find the following details about it: SST 49LF080A 33-4C-NHE It is the PLCC32 type and can be pried and removed safely (but be very careful) with an eye glass flat head screw driver. If you just have a bad flash you may be able to reprogram your original or just buy another one with the part# above and reprogram it. This is great news for people who have bricked th........
  • Weird Ubuntu Issues with NVIDIA driver/Compiz


    1.) My screensaver would take a long time to disable after hitting a key. 2.) Usually errors like below will follow. 3.) Compiz sometimes uses 100% or high CPU 4.) My window controls will disable (eg. the minimize, maximize and close buttons). It seems like Compiz or appearance/effects disable themselves. Re-enabling Desktop Effects under Appearance temporarily fixes it. 5.) high load in general from things like "Migration" pr........
  • HP Procurve Switch 2824 CLI Telnet Experience , Guide and Tutorial


    ------------------------------------- ProCurve J4903A Switch 2824 Software revision I.10.77 Copyright (C) 1991-2009 Hewlett-Packard Co. All Rights Reserved. RESTRICTED RIGHTS LEGEND Use, duplication, or disclosure by the Government is subject to restrictions........
  • HP XW9400 Motherboard In Desktop Issues


    Fortunately the format is EATX so an EATX case will work and the screw layout is standard. You will need to remove the HEX/TORX screws that are connecting the stock HP standoffs (meant to slide into an HP case). XW9400 Motherboard Issues Size: 12" x 13" Proprietary Power Connector Proprietary CPU Power Connector Proprietary Memory Power Connector Fan connectors are 4 pin so you will need some kind of adapter.........
  • Dell CS24-NV7 lspci dmidecode info


    0000:00:00.0 RAM memory: NVIDIA Corporation MCP55 Memory Controller (rev a2) 0000:00:01.0 ISA bridge: NVIDIA Corporation MCP55 LPC Bridge (rev a3) 0000:00:01.1 SMBus: NVIDIA Corporation MCP55 SMBus (rev a3) 0000:00:02.0 USB controller: NVIDIA Corporation MCP55 USB Controller (rev a1) 0000:00:02.1 USB controller: NVIDIA Corporation MCP55 USB Controller (rev a2) 0000:00:05.0 IDE interface: NVIDIA Corporation MCP55 SATA Controller (rev a3) 0000:00:05.1 I........
  • Dell CS24,FS12 NV5 and NV7 1U Server Information & Parts


    Motherboard: Gigabyte GA-3CESL: http://b2b.gigabyte.com/products/product-page.aspx?pid=2658#dl Dell Part Numbers for the motherboard: R1232 R1232L R2232S SERVER MOTHERBOARD GENUINE 408P9 CN-0408P9 GA-3CESL Manual Download here RAMSlots: 16 (8 controlled by each CPU) RAMType: DDR2 ECC 5300P........
  • sed linux bash how to remove non-ASCII english characters


    sed -i 's/[d128-d255]//g' file.txt........
  • Unable to configure RSA server private key SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch


    [Tue Jun 23 02:05:52 2015] [error] Unable to configure RSA server private key [Tue Jun 23 02:05:52 2015] [error] SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch The above is an accurate description of what is wrong. In our case the client made a simple mistake of thinking the localhost.crt and localhost.key (default key locations for Apache SSL in Centos) were in the same directory but they we........
  • Error code: ssl_error_rx_record_too_long


    An error occurred during a connection to site.com. SSL received a record that exceeded the maximum permissible length. (Error code: ssl_error_rx_record_too_long) The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem. When the above happens in our experience it is a misconfiguration of........
  • dir2slideshow Centos rpm requirements


    yum -y install dvdauthor ffmpeg mjpegtools sox bc rpm -ivh dvd-slideshow-0.8.4-2.noarch.rpm Preparing... ########################################### [100%] 1:dvd-slideshow ########################################### [100%] /usr/bin/dir2slideshow: line 553: bc: command not f........
  • No response from subprocess (whostmgr (whostmgr)): The subprocess exited with status 12 (ENOMEM).


    No response from subprocess (whostmgr (whostmgr)): The subprocess exited with status 12 (ENOMEM). This happened on a client's VPS which ran out of memory.........
  • htaccess modrewrite query string to another URL howto


    This example is based on Wordpress but applies to any other query string eg. http://wordpress.com/?p=55 If you want to manually redirect that p=55 to /some/other/url how do you do it? RewriteCond %{QUERY_STRING} p=55 [NC] RewriteRule .* /new-url/? [R=301,L] You can change the p=55 to whatever your query string looks like. Remember to keep the "?" at the end of the new URLunless you really want the query s........
  • Linux Kernel EDAC errors EDAC MC0: UE row 0, channel-a= 0 channel-b= 1 labels "-": NON-FATAL recoverable (Branch=0 DRAM-Bank=0 Buffer ID = 0 RDWR=Read RAS=0 CAS=0 NON-FATAL recoverable Err=0x800 (Non-Aliased Uncorrectable Patrol Data ECC))


    I'm not sure why I'm getting these but all memory modules are the exact same and all passed memtest successfully although they are ECC. I've heard that ECC RAM can't be tested as well and the kernel seems to indicate they are non-fatl recoverable errors. I wonder if the BIOS has aggressive RAM timing or maybe the controller or motherboard is bad. [ 12.716515] EDAC MC: Ver: 2.1.0 [ 12.717771] EDAC MC0: Giving out device to........
  • VPN Account Buyers Guide and General Info


    What matters most about VPNproviders in 2024? We are highly suspicious of VERYLARGE VPN providers that have LOW PRICES and HUGE DISCOUNTS. The suspicion is that for those who know what costs are involved to purchase thousands of IPs and servers are not small. At the prices that many of the big mainstream providers offer, it is likely unprofitable or barely profitable. Then, how are those companies making money or is that even the goal? There use........
  • Centos scp or sftp program missing solution/what rpm provides them


    You need the "openssh-clients" package which contains sftp and scp. yum -y install openssh-clients........
  • How to install grub on virtio KVM with Linux


    I messed up the bootloader by accident on a standard Centos 6.3 install because I turned the /dev/vda1 boot partition into an mdadm raid 1. This was all done correctly aside from one point Ididn't realize was an issue metadata=00.90 is the only thing that will allow you to boot (otherwise grub won't work and you won't boot). So the next step is rescue mode from a CD right? The problem you will find is that grub does not detect your hard drives, this is Ibelieve is be........
  • KVM: unknown exit, hardware reason 0x80000021 kvm_run returned -22 solution


    If the below is happening on KVM (a very weird and scary looking error) it's probably because of Windows. This has happened countless times to me where the bootsector on Windows 7/2008 becomes corrupted easily (even by a crash or shutdown). KVM: unknown exit, hardware reason 0x80000021 kvm_run returned -22 rax 0000000000000010 rbx 0000000000000080 rcx 0000000000000000 rdx 0000000000000080 rsi 000000000025db2a rdi 000000000007db2a rsp 0000000000000200 rbp........
  • cPanel How to set SSL and Dedicated IP in cPanel


    Account Functions -> Change Site's IP Address Choose the domain and then click "Change" Choose the new IP 1.) Setup SSL Certificate in cPanel Click on "SSL/TLS Manager" under the "Security" section. 2.) Under " Private Keys (KEY)" Click "Generate, view, upload, or delete your private keys." Choose "Key Size: 4096........
  • Wordpress Plugin manual install how-to


    This is the most secure way since we don't know if using the built-in ftp method of Wordpress is secure (that is do they store, record or transmit the ftp login information to a third party like the NSA?). Upload or wget the plugin and then unzip it from the Wordpress website tot he following path of your wordpress: /yourwordpressinstall/wp-content/plugins Then navigate to the "Plugins" section on the left side o........
  • Disable cphulk in CPanel if you can't login even with the right password


    It's a great feature to ward off bruteforce but is also annoying because you think you have the wrong password when you can't login. How to Disable cp hulk for 5 minutes /usr/local/cpanel/etc/init/stopcphulkd........
  • Vbox/Virtualbox devices grayed out for non-root user solution


    It is a permissions issue that is hard to fix. All but one USB device is greyed out. I am already a member of "vboxusers" I have already enabled and disabled USB support for the guest. I have already reinstalled the latest VBOx guest editions If running as root it all works fine Changing........
  • NS_ERROR_FAILURE (0x80004005) The virtual machine 'XP' has terminated unexpectedly during startup with exit code 1.


    The solution is to run '/etc/init.d/vboxdrv setup' and sometimes happens when upgrading VBox and the kernel modules don't get upgraded with it. Sometimes the above doesn't work until you reboot because sometimes other unknown processes (even the file manager possibly) may be locking the old module from being unloaded. Failed to open a session for the virtual machine XP. The virtual machine 'XP' has terminated unexpectedly during startup with exit code 1.........
  • Directadmin compile error solution cc: Internal error: Killed (program cc1)


    cc: Internal error: Killed (program cc1) Please submit a full bug report. See for instructions. make: *** [ext/fileinfo/libmagic/apprentice.lo] Error 1 make: *** Waiting for unfinished jobs.... Stopping crond: ........
  • Samsung Printer Password Login to change settings CLP


    First of all to find your IP you can hold the "X" button for a few seconds and it will print out the DHCP IP. Another way to find the IP that I prefer is to login to your router or switch and find a hostname that says something like "SEC001599CD2948" which will be your Samsung printer (at least for the C3xx or C4xx series of Samsung printers). The login and password for Samsung Syncthru Webservice:........
  • How to root and unlock S4 in Canada Bell/Rogers/Telus/Fido I337 4.4.2


    i337 Canada on Bell is hard to root or even install TWRP Installed TWRP from Odin and my computer gave me the bluescreen at the end but it seemed to be successful (after ODIN said reset). TWRP mode does not seem to enter, instead you get the Android recovery mode with Volume up + Home http://galaxys4root.com/galaxy-s4-root/how-to-root-att-or-verizon-galaxy-s4-on-android-4-4-2/ 1.)........
  • /usr/libexec/mysqld: The table 'session' is full solution


    First of all if you're getting this error it is a result of extreme database activity. If you aren't expecting it or it doesn't make sense to you 99% of the time this is a database driven script being exploited (some common examples I see often are things like phpBB being hit by dozens, hundreds or thousands of bots making constant DB write requests). The easiest way to identify this is to restart MySQL and then run the third party tool "mtop" and you'll see all........
  • Postfix how to secure outgoing authenticated e-mails for privacy and hide the IP address, mailer and other things


    The most common solution is to use the /etc/postfix/header_checks but this is a big problem. Why is header_checks a problem? Because it does it to all mail whether incoming or outgoing and whether authenticated or not. We of course want as much header information for incoming as we can get for many reasons but many organizations want to secure and make their mail clients as secure as possible. I adapted this solution to the client's custom config, they are configur........
  • Samsung Galaxy Note Upgrade/Update Experience from 4.0.4 with aftermarket ROMs


    It really seems that 4.4.4 is not ready or stable for the i717 yet and this makes sense since it takes a lot of work/development and testing to get the factory stock ROMs working well. In the end I used the 4.1.2 based Blackstra BlackJelly because it was fast, stable and just works and feels great. The aftermarket support is great but many devs are focussed on adding features and customization that most of us don't want or need rather than getting things smooth and stable.........
  • .htaccess mod_rewrite preserve access to custom query string solution


    I struggled with this for awhile because sometimes you have rewritten URLs that you want to pass a query string but most of the info and examples do not support this. Take a typical example like this: RewriteRule ^(.*)-(.*)-(.*) /?module=$3&id=$2 You need to add the QSA flag to make it work like below: RewriteRule ^(.*)-(.*)-(.*) /?module=$3&id=$2 [QSA] The QSA preserves the original query string but also appends it wit........
  • Stop Wordpress new user notification how-to


    It's just a simple plugin that you get from here. After that you can stopped having a barrage of annoying e-mails from WP:)........
  • 2CO/2Checkout Howto Enable IPN/Notification Setup & Script Info


    https://www.2checkout.com/documentation/notifications/order-created It shows all the parameters that get passed so you can make a simple script to process it. To enable 2CONotifications you need to do the following: Login Browse to the top right to an icon that looks like a "circle with horizontal lines inside" - Notifications. Enter the appropriate URL for your IPN/Notification processing script (........
  • 2CO/2Checkout how to create recurring payment subscription button dynamically


    It was hard to find this as I find most online payment processors don't just put the basic information in plain view. Remember to set your sid (your seller id). The below can easily be turned into a scripted PHP template to integrate into your own custom or existing payment solution. http://help.2checkout.com/articles/How_to/How-to-Sell-Recurring-Products-with-2Checkout/........
  • CPanel Link to all of the command line options


    CPanel says you can access 98% of the functions through CLI which experienced Unix/Linux admins prefer for simplicity and for scripting.  I've never found CPanel easy to use from the admin panel, it seems everything is hard to find and a simple task becomes a series of hunts. So for people like me here's the list: http://cpanel.net/system-administrators/command-line-scrip........
  • Sipura/Linksys VOIP Adapter How to Check your IP Address


    Dial **** Then 110# It will then say what your current IP address is.........
  • Ubuntu Linux Slow/Delayed SSH ping response Solution


    I've only ever seen this in Ubuntu for some reason and it is because of the /etc/nsswitch.conf settings. So the issue is that if the hostname's reverse DNS cannot be found that you need to go back to DNS which was not the default in this nsswitch.conf file for some strange reason. Edit /etc/nsswitch.conf and replace your "hosts" line with this: #hosts: files dns mdns4_minimal [NOTFOUND=return] mdns........
  • phpBB guests unable to view forums without logging in Anonymous account solution


    This is still a weird quirk about phpBB, you can allow everyone+guests to see a forum. What also controls the first layer is this weird built-in "Anonymous" account. You have to actually give that account specific rights to view all the forums or otherwise the above will happen and you'll wonder why your group permissions don't seem to apply.........
  • phpBB create new email hash manually when modifying or adding user manually directly through MySQL


    Many may ask why would you need to do this? When upgrading from phpBB 2 to 3 the conversion does not keep the admin user you create. If your old admin user has an email address associated that no longer works or is accessible this makes it impossible to reset the admin password. Some may just say "I'll just manually edit the e-mail address" but it won't work and phpBB will fail to find that user if you don't update the "user_email_hash" field but how do........
  • drbd 8.3 hard drive failure recovery example


    drbd 8.3 hard drive failure recovery drbdadm attach r0 DRBD module version: 8.3.10 userland version: 8.3.8 you should upgrade your drbd tools! 0: Failure: (119) No valid meta-data signature found. ==> Use 'drbdadm create-md res' to initialize meta-data area. ........
  • The Best NoSQL Solution


    To first start off, there are many misconceptions about NoSQL and especially its strengths and weaknesses. Even the popular NoSQL solution MongoDB is fraught with issues that no one seems to be concerned about aside from a few but there are serious issues with database integrity and verified writes. MySQL was considered dangerous or incomplete at one point without having the transactional safety features of Oracle for example. However the NoSQLimplementations seem........
  • mysql how to kill individual process/query


    Enter the console as root mysql -u root -p Then kill the process (where 1234 = the thread ID) kill 1234 It's also a good idea to use a tool like "mtop" to monitor which processes and queries are slow, killing them is a temporary fix while you try to isolate the actual problem.........
  • CPanel mysql root password location how to find


    It is located in /root/.my.cnf This is truly a horrible idea and a security flaw and on top of that MySQL port 3306 is wide open by default with CPanel.........
  • WHMCS Sending Blank E-mails Solution


    After the "latest" update one of our clients asked us to figure out the issue and it turns out it is related to the mail settings. Basically all e-mails were being sent with blank text/no body. The solution Go to "Setup ->General Settings ->Mail" and just click on "Save" and it will work again. Note that this assumes you didn't break things yourself by changing any settings. WHMCS may tell y........
  • drbd won't sync 8.3.13 on OpenVZ kernel


    I used the matching 8.3.13 utilities and it didn't work but strangely the newer 8.3.16 which makes DRBD complain works just fine. GIT-hash: 83ca112086600faacab2f157bc5a9324f7bd7f77 build by root@sighted, 2012-10-09 12:47:51  0: cs:SyncSource ro:Secondary/Primary ds:UpToDate/Inconsistent A r-----     ns:0 nr:0 dw:0 dr:0 al:0 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 wo:b oos:5236960   &am........
  • heartbeat ERROR: make_io_childpair: cannot open ucast br0


    ERROR: make_io_childpair: cannot open ucast br0 You cannot specify ucast br0 without an IP address associated with it.........
  • Wordpress Security Hole, Plug it by manually installing themes and plugins


    It's always bothered me how Wordpress basically forces the user to provide their hosting credentials to install themes and plugins. How do know for sure the data is not being saved, intercepted and being provided backdoor access to the NSA or other agencies or even just being misused by others with access? Here's how to close the security hole above and if you're already given Wordpress your credentials make sure you change everything associated it with it. Eg. change your........
  • LVM Tutorial how to create a Physical Volume (PV), Volume Group (vg), and a Logical Volume (LV) within it


    # first we need a physical volume which we use the pvcreate tool to create # I create mine on /dev/sdb3 pvcreate /dev/sdb3 dev_is_mpath: failed to get device for 8:19 Physical volume "/dev/sdb3" successfully created # pvdisplay shows the newly created volume pvdisplay "/dev/sdb3" is a new physical volume of "1.35 TiB" --- NEW Physical volume --- PV N........
  • lvm how to resize and extend a volume


    lvextend -L +10G /dev/kvmvm/w2k8r2evalstandard Extending logical volume w2k8r2evalstandard to 20.00 GiB Logical volume w2k8r2evalstandard successfully resized The above adds 10GB to the logical volume. Of course you must resize the filesystem using other tools to take advantage of the space.........
  • Asterisk VOIP Sipura/Linksys PAP2T Calls Not Being Received Solution


    This problem seemed to happen recently but was likely causing issues before where the phone(s) do not ring. Now there are a few reasons why this can happen especially if your adapter has DND mode enabled (disable it). However that wasn't my issue and Ionly figured it out the other day when by fluke if you're on the phone (making a call) then calls will come in. That's when Ifigured out the solution: This likely app........
  • Enable Multiple RDP Sessions on Windows XP, Vista, 7 Howto


    http://deepxw.blogspot.ca/search/label/Universal%20Termsrv.dll%20Patch The above site has the patch that does this essentialy turning a Desktop Windows into a full fledged RDP server.........
  • mencoder howto trim split edit time of mp4 from Samsung Note


    mencoder -fps 30 -ss 00:00:38 -oac lavc -ovc copy 152408.mp4 -o soundedit.mp4 The -ss flag means to start at 38 seconds (so the first 38 seconds of video will be removed).........
  • How to read a conf file without the comments


    cat /etc/some.conf|grep -Ev '^#|^;|^$' This assumes that comments start with # or ; (adjust as necessary). Also note that the ^$ omits blank lines.........
  • yum Centos 386 and 64 bit conflict resolution


    This can happen when you install RPMForge or other repos with the wrong architecture and here's how you fix it (simply uninstalling won't usually fix it): solution yum clean all yum -y install openvpn Loaded plugins: fastestmirror, presto Loading mirror speeds from cached hostfile * base: mirror.its.sfu.ca * extras: centos.mirror.nexicom.net * rpmforge: mirror.cpsc.ucalgary.ca * up........
  • yum error installing php solution - exclude php from being installed from third party repos


    Error: Package: php-Monolog-dynamo-1.7.0-1.el6.noarch (epel) Requires: php-aws-sdk Error: php-pecl-zendopcache conflicts with 1:php-eaccelerator-0.9.6.1-1.el6.x86_64 Error: php-xcache conflicts with php-pecl-apc-3.1.9-2.el6.x86_64 Error: php-pecl-zendopcache conflicts with php-pecl-apc-3.1.9-2.el6.x86_64 Error: Package: php-horde-Horde-Vfs-2.1.2-2.el6.noarch (epel) &n........
  • CPanel Apache httpd won't start solution: Starting httpd: Syntax error on line 2 of /etc/httpd/conf/httpd.conf: Invalid command 'Alias', perhaps misspelled or defined by a module not included in the server configuration


    root@hkhosting [/]# service httpd start Starting httpd: Syntax error on line 2 of /etc/httpd/conf/httpd.conf: Invalid command 'Alias', perhaps misspelled or defined by a module not included in the server configuration ........
  • Centos Howto Upgrade to PHP 5.3 from 5.2


    It's not as simple as "yum install" as you can see below and it doesn't stop there. yum install php53 Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * rpmforge: mirror.us.leaseweb.net * extras: centos.mirror.rafal.ca * updates: centos.mirror.nexicom.net * base: centos.mirror.nexicom.net * addons: centos.mirror.nexicom.net Setting up Install Process........
  • Directadmin Install Error Cannot find /usr/include/openssl/ssl.h. Did you run the pre-install commands?


    Cannot find /usr/include/openssl/ssl.h. Did you run the pre-install commands? http://help.directadmin.com/item.php?id=354 yum -y install openssl*........
  • cPanel VPS Server Cannot Login as root


    I was worried the server was hacked, I was logged in already as root but couldn't login to CPanel or a new SSHsession. I even reset the password from the shell and it did not work still. The reason is CPanel Hulk, it detected a brute-force attack so it locked down the root account entirely even from the correct password. According to cPanel the best way around this is to whitelist your IP.........
  • Gnome Terminal Cannot Open Error "There was an error creating the child process for this terminal" "Failed to create pipe for communicating with child process (Too many open files)"


    There was an error creating the child process for this terminal Failed to create pipe for communicating with child process (Too many open files) I get this when trying to open a new tab or new window even. I've had far more sessions open (literally dozens)before without getting this error.........
  • SSH HowTo Create Port Forwards


    ssh -L 5905:localhost:5900 root@yourserver.com The "-L" means to create a port forward to a port on your server. The 5905 means the port on your computer that will be used to access the port 5900 on the remote server. localhost is the IP that you use to access the port forward (you can change it to 0.0.0.0 which will be all IPs on your system/computer but localhost is good for security and privacy unless a whole network of people need access).........
  • /usr/local/cpanel/bin/apache_conf_distiller 100% cpu


    On some CPanel installs we see complaints of "/usr/local/cpanel/bin/apache_conf_distiller" causing 100% cpu usage without any solution. Killing the process causes it to spawn again, actually it seems it tends to spawn multiple processes itself. Restarting CPanel itself is a temporary but not permanent solution.........
  • What a hdd hard drive and mdadm RAID array failure looks like in Linux


    [3805108.257042] sd 0:0:0:0: [sda] 1953525168 512-byte hardware sectors: (1.00 TB/931 GiB) [3805108.257052] sd 0:0:0:0: [sda] Write Protect is off [3805108.257054] sd 0:0:0:0: [sda] Mode Sense: 00 3a 00 00 [3805108.257066] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA [3805108.257083] sd 0:0:0:0: [sda] 1953525168 512-byte hardware sectors: (1.00 TB/931 GiB) [3805108.257090] sd 0:0:0:0: [sda] Write Protect is off........
  • Linux Ubuntu Debian Howto Manually Update/Install Thunderbird


    wget http://download-location sudo tar xjvf thunderbird-24.2.0.tar.bz2 -C /opt ln -s /opt/thunderbird/thunderbird /usr/bin/thunderbird [sudo] password for one: ln: creating symbolic link `/usr/bin/thunderbird': File exists sudo rm /usr/bin/thunderbird ln -s /opt/thunderbird/thunderbird /usr/bin/thunderbird The above is how Idid it, if you don't do it properly you'll find that you are still using the old version (........
  • Howto Execute PHP from within an HTML or other file with an htaccess file on Apache


    Add this to a new ".htaccess" file inside the directory where the .html resides: AddType application/x-httpd-php .php .html........
  • css rounded image and background setting tutorial/example


    ........
  • openssh-server has no installation candidate Debian/Ubuntu Solution


    Idon't know why but some installations don't have this in the database by default. To fix it to an: sudo apt-get update;sudo apt-get install openssh-server and then it will work........
  • Fatal error: Out of memory (allocated 6291456) (tried to allocate 7680 bytes)


    Fatal error: Out of memory (allocated 6291456) (tried to allocate 7680 bytes) This is usually caused by Wordpress, Drupal or other ridiculously inefficient CMS' out there, as a temporary fix you can increase PHP's memory limit but it's best to find the actual culprit, by disabling add-ons and other scripts etc...........
  • Asterisk iptables block bruteforce attacks howto with fail2ban


    yum -y install fail2ban vi /etc/fail2ban/jail.conf [asterisk-tcp] enabled = true filter = asterisk action = iptables-multiport[name=asterisk-tcp, port="5060,5061", protocol=tcp] sendmail-whois[name=Asterisk, dest=you@example.com, sender=fail2ban@example.com] logpath = /var/log/asterisk/messages maxret........
  • Update wordpress script


    Requirements: 1.) Enter your root wordpress directory. 2.)Download the latest wordpress.zip to it. #backup your current files just in case cp -a . wp-current-bk`date +%Y%m%d` unzip wordpress-3.7.1.zip rm -rf wp-includes rm -rf wp-admin echo y|cp -a wordpress/wp-includes . echo y|cp -a wordpress/wp-admin . echo y|cp -a wordpress/wp-content/* wp-content echo y|cp wordpress/* .........
  • htaccess allow only certain IPs howto


    order deny,allow deny from all allow from your.ip.here ........
  • CPanel Log File Locations for access_log,error_log, mysql


    All Errors (CPanel does not report by domain, but puts everything in a single log which Ithink is a bit silly and annoying): /usr/local/apache/logs/error_log Access_Logs They are found within the home directory of the site user eg.: /home/admin/access-logs/yoursite.com MySQL Logs /var/lib/mysql/yourhostname.err........
  • Delete all comments from wordpress (in case of extreme SPAM)


    *Note this will delete all comments indiscriminately. DELETE FROM `wp_comments` To delete all but save specific comments based on "author e-mail use the following". Add more e-mails below in the same format if you have more. DELETE FROM `wp_comments` WHERE NOT comment_author_email IN ('user@hotmail.com','another@hotmail.com')........
  • Dell CS24-NV7 Howto Enable LAN/NICs and PXEBoot in the BIOS


    Dell CS24-NV7 Unusually the Virtualization was enabled when I got this server but all the NICs were diabled in the BIOS including PXE boot! Advanced -> Advanced Chipset Control PCI Slot 1 Option ROM: Enabled Onboard LAN1 Control: Enabled LAN1 Option ROM Scan: Enabled (you need it for PXE boot) Onboard LAN2 Control: Enabled LAN2 Option ROM Scan: Enabled *you will need to reboot and........
  • VBulletin Enhanced Captcha / RegSecure not showing/working images solution.


    This happened after a customer migrated their hosting and the issue was being unable to access PHP sessions. Warning: session_start(): open(/var/lib/php/session/sess_3e0oms763m6mrqekdnnmodlhs3, O_RDWR) failed: Permission denied (13) in /register.php(202) : eval()'d code on line 1 Solution:(use the correct ownership/permissions) chown apache.apache -R /var/lib/php........
  • kvm centos cannot compile error


    ./configure ./configure: cannot locate gcc 3.x. please install it or specify with --qemu-cc yum -y install gcc make ./configure ./configure: cannot locate gcc 3.x. please install it or specify with --qemu-cc yum -y install compat-gcc-* ./configure Error: Could not find alsa Make sure to have the alsa libs and headers installed. yum -y install alsa-lib-devel ./configure........
  • Linux Howto Mount CD/DVD drive for sharing for other users


    sudo mount -o user /dev/sr0 cd You need the "user"option otherwise non-root or non-owners cannot view the CD and this would make it so no anonymous access to the CD/DVD mount would work. Note that most distributions including Ubuntu DONOT work unless you manually mount and share as shown above (Icouldn't find any other way in Ubuntu).........
  • MySQL Error : Table 'datastore' is read only Error Number : 1036 solution


    This happens because of a permissions or ownership issue. Generally /var/lib/mysql should be all owned by mysql.mysql (check that). To fix it use chown -R mysql.mysql /var/lib/mysql Also make sure the files are at least readable and writable by mysql (eg. 700).........
  • Linux find what processes are swapping


    Here is a handy script that will check all processes and report what is swapping #!/bin/bash for pid in `ps x|awk '{print $1}'`; do result=`cat /proc/$pid/status|grep VmSwap|awk '{print $2}'|grep -v ^"0"` if [ ! -z "$result" ]; then programresult=`ps x|grep $pid|grep -v grep` if [ $? == 0 ]; then program=`echo $programresult|awk '{print $5}'|grep -v ^grep`........
  • Openvz OOM Centos Issue Memory Config Settings Solution


    Linux box13. 2.6.32-042stab076.5 #1 SMP Mon Mar 18 20:41:34 MSK 2013 x86_64 x86_64 x86_64 GNU/Linux even setting privvmpages to a specific setting DOES not affect "free -m" in containers. This is probably a kernel issue 23:36:29 up 159 days, 7:12, 4 users, load average: 0.42, 0.44, 0.33 [root@box13 ~]# free -m total&n........
  • tar how to include hidden files solution


    tar -czf yourfile.tar.gz . The . dot is the crucial part, normally many will use * and that will exclude hidden files by default which is very undesirable as many hidden files are important such as .htaccess and conf files in your home directory etc.. It seems the default behavior of tar should be the opposite but these are all very old tools.........
  • Show Directory/File Listing in httpd/Apache Howto with htaccess


    Add this to htaccess: Options +Indexes After that people will be able to browse files and directories of your site.........
  • strange kernel dmesg errors


    Sep 26 16:56:21 box kernel: 00 00 00 00 00 00 00 00 Sep 26 16:56:21 box kernel: [37007.155690] d_alias libdl-2.12.so d_count=9 d_flags=8 Sep 26 16:56:21 box kernel: [37007.155697] 09 00 00 00 08 00 00 00 9f 05 9f 05 00 00 00 00 c0 71 1d 18 04 88 ff ff 00 00 00 00 00 00 00 00 a0 7e 48 00 00 c9 ff ff 78 a9 21 18 04 88 ff ff 3a 7b fa 4e 0d 00 00 00 98 5c 2d 18 04 88 ff ff 18 5c 2d 18 04 88 ff ff 18 5c 2d 18 04 88 ff ff 00 01 10 00 00 00 ad de 00 02 20 00 00 00 ad de f8........
  • Apache SNI is not needed what is the issue?


    Iread this article and still don't understand the issue. If I understand correctly the client negotiates after the first SSLconnection and then gets the correct hostname and thus correct certificate. http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI To their credit I know I'm not using SNIbecuase Iget this message in the Apache log :) [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!! B........
  • PHP Security - Enable Safe Mode to increase security


    Everyone should be running with safe_mode on in /etc/php.ini (on Centos) as it makes exploiting your system more difficult is PHPcan't execute anything on the system if a script is exploited. For example with Safe_Mode on the only executable files on the system are ones in the safe_mode_exec_dir = /safephp This is crucial, if you must execute anything from PHPthen you have to copy the binary and assign to the user that Apache runs your site under.&........
  • CPanel suhosin install failed


    /scripts/phpextensionmgr install PHPSuHosin Updating md5sum list Fetching http://httpupdate.cpanel.net/cpanelsync/easy/targz.yaml (connected:0).......(request attempt 1/12)...Resolving httpupdate.cpanel.net...(resolve attempt 1/65)... Fetching http://httpupdate.cpanel.net/mirror_addr_list (connected:0).......(request attempt 1/3)......connecting to 74.50.120.123...@74.50.120.123......connected......receiving...100%......request success......Done........
  • Android how to copy rsync binary to main system for use in shell/ssh


    Install rsync4randroid and in the shell/ssh do this: ln -s /data/data/eu.kowalczuk.rsync4android/files/rsync /system/xbin/rsync........
  • Wordpress Custom Menu Limit Fix/Solution


    This is usually solved by two variables alone: max_input_vars=5000 memory_limit=256M Now you should be able to have unlimited amounts of custom menus in Wordpress.........
  • htaccess block IPs while RewriteEngine/modrewrite is enabled solution


    Istruggled with this for awhile because the normal setup won't work if modrewrite is being used: ORDER ALLOW, DENY So the solution is something like this: order allow,deny deny from 12.43.12.0/24 allow from all ........
  • Linux create htaccess file with username and password


    htpasswd -b -c filename username "password" -b = take the password that we specify in the command (don't prompt for it) -c = create the filename username=username password=password (I use quotes because it breaks if you use special characters)........
  • MySQL Allows blank user with no password to login


    I just realized I have some blank users which I deleted butI can still login to this dummy account without a password for some reason. mysql -u -p Welcome to the MySQL monitor. Commands end with ; or g. Your MySQL connection id is 5 Server version: 5.1.69 Source distribution Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights reserved. Oracle is a registered trademark of Oracle Corporation an........
  • Dell FS12-NV7 2U Server Information and Guide


    I've got one of these for testing projects from work at home and got more than I bargained for with the time I've spent on it due to the storage handing/Perc 6/i cards. My particular model came with the following: 2U Rack Mount Server with Rails 2xOpteron 2373 EE (Quad Core, there is a 6-core version that can be found at times) 16GB RAM 2 x 250GB Seagate SATA 2 x Dell Perc 6/i (horrible and a nightmare to work........
  • Dell Perc 6/i Restore BIOS/Bricked Solution Guide Howto


    I bricked one of my cards by following a guide from UNRAID. Step #1 from them wipes out the BIOS, but guess what? The step where you restore the BIOS should have been done first, which is sas2flash but no version supports or is able to find my Perc 6/i. So now I'm a bit stuck. I tried using megarec but it's funny that it can wipe the BIOS but can't forcefully reload it: megarec -writesbr 0 mpt2sas.rom Supports 1078 control........
  • Dell Perci 6/i Firmware Upgrade Guide Tutorial


    One thing to remember is that you need MegaCli to do the flashing. You also need the correct file,I tried at least 2 different Perc 6 firmwares from Dell that kept getting rejected as corrupt by MegaCli(they were really the wrong version). I have an external PCI-E Dell 6 Perc/I butI chose images from the 'Integrated" on motherboard version as it was allI could find. They are different, and below is my first time finding success.........
  • Dell Perc 6/i cannot downgrade


    I flashed an LSI Logic firmware to it and it broke the BIOS (cannot do Ctrl+R) for booting purposes but allows other functionality to work normally. I tried downgrading to a Dell firmware for Perc 6i but it won't work, not even with MegaCli wget http://downloads.dell.com/FOLDER00416606M/1/SAS-RAID_Firmware_W83M2_LN32_6.3.1-0003_A14.BIN --2013-08-26 12:53:39-- http://downloads.dell.com/FOLDER00416606M/1/SAS-RAID_Firmware_W83M2_LN32_6.3.1-0003_A14.BIN Resolvi........
  • LSI MegaRAID Adventures, Guide and HowTo


    LSi Megaraid At first it was configured as a RAID 0, then I deleted the Virtual Disk Group. I thought both drives would be shown and detected in Linux as sda and sdb but it actually shows nothing. To make them work you have to hit Ctrl+R before the system boots (when prompted) and create a Virtual Disk Group. In my case I created each one as RAID 0 (with a single drive only) as I just wanted JBOD but there is no such option or default in these Dell Pe........
  • pxe-32 tftp open timeout


    pxe-32 tftp open timeout The solution was to enable tftp in xinetd with "chkconfig tftp on". See the troubleshooting below: chkconfig --list NetworkManager 0:off 1:off 2:off 3:off 4:off 5:off 6:off acpid 0:off&n........
  • CPanel domain not working properly: http://vps.thedomain.com/domainnotknown.html Solution


    The Cause Basically it's usually because your Cpanel has new IPs and the old IPs it knows are no longer available/working/valid. The solution is to change the site's IP but you may run into issues for various reasons. Here is what I encountered below. It redirects there even though public_html is empty and doesn't have any index or htaccess redirect. --- This issue happened after a CPanel migration, the site is bein........
  • bash for loop with specific numbers


    Say if you need to make a firewall script to block certain ports this works great. for ports in 21 25 443; do iptables rules here done........
  • bash script howto use heredocand assign to a variable and write to a file


    zonetemplate=$(cat ........
  • Execute Local Bash Scripts remotely by SSH


    for ip in `cat fixlist.txt`; do sudo -u apache ssh root@$ip "`cat iptablesrules.sh`" done In the above example we are going to execute the commands within the local file "iptablesrules.sh" on all the machines in "fixlist.txt". This is a great way of performing server maintenance in a clustered or cloud environment.........
  • iptables redirect ports to a different host and port + NAT Masquerade howto/solution


    This is important if you need public access to internal IPs such as at your office and don't want to use a VPN just to SSHinto different servers: Below forwards the port "10001" to the IP192.200.5.53 on port 22 (of course adjust it to your needs). iptables -t nat -A PREROUTING -p tcp --dport 10001 -j DNAT --to-destination 192.200.5.53:22 Remember to enable MASQUERADE on your NAT IPs or they won't be able to talk to the outside world (........
  • Ubuntu Download Packages/Updates for EOL Unsupported Old Releases


    I installed Ubuntu 11.04 for testing purposes but I couldn't even download SSH server: sudo sed -i -e 's/us.archive.ubuntu.com/old-releases.ubuntu.com/g' /etc/apt/sources.list After running the above make sure you do a "apt-get update" Note with the above that Ihave the search string of "us.archive.ubuntu.com" change it to whatever is in your sources.list The above does not fix all repositories either, I haven't had a chance t........
  • css custom table class howto


    table.custom { border-collapse: collapse; border-style: solid; border-width: 1px; border-color: black; font-size: 11px; } table.custom td { border-collapse: collapse; border-style: solid; border-color: black; &........
  • MySQL HowTo Copy Duplicate a Table for backup purposes


    This is a great way to test and experiment without risking your current table, or to make a backup of your current table to avoid corruption or dataloss due to malicious activity eg. deletion etc.. There are two steps and two commands 1.)Copy Table Structure "cars_backup" is the new table and it will be a copy of the table called "cars"........
  • MySQL Show Print List of Field Names only without other data or attributes


    SELECT column_name FROM information_schema.columns W........
  • WD 20EARX Dead Again


    Another new drive bad from the start: Jun 2 15:14:18 one-desktop kernel: [15895.386779] ata2.00: exception Emask 0x50 SAct 0x1 SErr 0x280900 action 0x6 frozen Jun 2 15:14:18 one-desktop kernel: [15895.386782] ata2.00: irq_stat 0x08000000, interface fatal error Jun 2 15:14:18 one-desktop kernel: [15895.386784] ata2: SError: { UnrecovData HostInt 10B8B BadCRC } Jun 2 15:14:18 one-desktop kernel: [15895.386788] ata2.00: cmd 60/0........
  • Either the lower file is not in a valid eCryptfs format, or the key could not be retrieved. Plaintext passthrough mode is not enabled; returning -EIO


    I'm using ecryptfs and was suddenly unable to access or even ls my home directory (but every subfolder is accessible). It just hangs and throws this message in messages/dmesg: Either the lower file is not in a valid eCryptfs format, or the key could not be retrieved. Plaintext passthrough mode is not enabled; returning -EIO I read somewhere that perhaps some file or folder is owned by root somehow, sure enough there are some and sudoing to root allows me to........
  • Powersupply Issue, Motherboard AHCI issue?


    This is the most I can get when plugging in a hard drive hot and only on some power connectors. [71656.314271] ata5: exception Emask 0x50 SAct 0x0 SErr 0x90a02 action 0xe frozen [71656.314277] ata5: irq_stat 0x00400000, PHY RDY changed [71656.314285] ata5: SError: { RecovComm Persist HostInt PHYRdyChg 10B8B } [71656.314294] ata5: hard resetting link [71660.360686] ata5: softreset failed (device not ready) [71660.360694] ata5: applying........
  • Apache SSL Change Default SSL Vhost and Listening Port for SSL


    vi /etc/httpd/conf.d/ssl.conf Change the following from "Listen 443" to something like below Listen 2243 Then find the SSLVirtual Host Context and edit like below (to your new listening port) ## ## SSL Virtual Host Context ## ........
  • MySQL my.cnf Server How To Secure/Bind to Localhost and Prevent Outside Connections Solutions


    [mysqld] datadir=/var/lib/mysql socket=/var/lib/mysql/mysql.sock user=mysql # Disabling symbolic-links is recommended to prevent assorted security risks symbolic-links=0 bind-address=127.0.0.1 The key is "bind-address", set that to 127.0.0.1 and no one from outside the server can connect.........
  • mysqldump: Couldn't execute 'show create table `general_log`': SHOW command denied to user 'user'@'localhost' for table 'general_log' (1142) - Solution


    mysqldump: Couldn't execute 'show create table `general_log`': SHOW command denied to user 'user'@'localhost' for table 'general_log' (1142) One of my clients almost found out the hard way, here is an unlikely situation that happened. 1.) Years ago the client had another VPS to which they backed up a BLOG nightly to an .sql file, what they forgot is that the file also contained all databases (they used the --all-databases option but forgot). So imagi........
  • mysql how to execute script from the bash prompt .sql


    mysql -u username --password='yourpassword' ........
  • PHP How To Create and Assign Variables from POST/Submit FORM


    foreach ($_POST as $key => $value) { if ( $key != submit ) { $values.="$key=$value<........
  • Country List Names in HTML Select From


    This is useful for developing a lot of applications, I'm putting it here to keep it handy for myself and hopefully others: Choose CountryCanadaJapanUnited StatesUnited KingdomAfghanistan........
  • How to wipe/erase hard drives clean so data cannot be recovered for privacy reasons


    This is something many people and especially businesses worry about, or at least they should. Before throwing away a hard drive, returning a hard drive, or especially Warrantying/RMAing it, you should wipe the drive. Linux provides the "shred" and "dd" utlities which work quite well. It seems even a single pass is good enough but by default shred will do 3 passes. Here's an example of using shred in Linux (I use a custom made distribution from........
  • postfix/dovecot Sent emails missing sometimes


    On occassion and from a variety of networks and clients, Sent messages don't get saved. I'm wondering if these log messages could be why: May 3 14:16:39 mail.box postfix/smtpd[5195]: connect from 192.168.1.58 May 3 14:16:39 mail.box postfix/smtpd[5195]: SSL_accept error from 192.168.1.58: -1 May 3 14:16:39 mail.box postfix/smtpd[5195]: lost connection after CONNECT from 192.168.1.58 May 3 14:16:39 mail.box postfix/smtpd[5195]:........
  • SMARTCTL Enable SMART on Device Solution for Error "Device does not support SMART Error Counter logging not supported"


    smartctl -a /dev/sda smartctl version 5.36 [i686-pc-linux-gnu] Copyright (C) 2002-6 Bruce Allen Home page is http://smartmontools.sourceforge.net/ Device: ATA WDC WD1600YS-01S Version: 20.0 Serial number: WD-WCAP03024940 Device type: disk Local Time is: Mon Apr 29 21:40:07 2013 PDT Device does not support SMART Error Counter logging not supported........
  • eth0 changed to eth1 or eth2 and the solution to fix it


    If you move your hard drive(s) around to other computers/servers, you'll find that your eth0 keeps getting higher, the first time it will become eth1 and then eth2 etc and even higher if your server has dual or quad NICs. The reason is that udevd basically assigns eth0 tot he first NIC it finds and remembers it, if it encounters a NIC with a differentMAC, it assigns it one higher (eg. eth1). See the example below, I have eth2 now so how doI fix it?........
  • SSH Can't Login/Hang


    Client Log OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 debug1: Reading configuration data /etc/ssh/ssh_config debug1: Applying options for * debug1: Connecting to 192.168.1.253 [192.168.1.253] port 22. debug1: Connection established. debug1: permanently_set_uid: 0/0 debug1: identity file /root/.ssh/identity type -1 debug1: identity file /root/.ssh/id_rsa type 1 debug1: identity file /root/.ssh/id_d........
  • Kernel panic - not syncing: Attempted to kill init! Pid: 1,comm: init Tained: G I------------- 2.6.32-358.el6.x86_64 #1 Call Trace: [] ? panic+0xa0/0x16f [] ? do_exit+0x862/0x870 [] ? fput+0x25/0


    Kernel panic - not syncing: Attempted to kill init! Pid: 1,comm: init Tained: G I------------- 2.6.32-358.el6.x86_64 #1 Call Trace: [] ? panic+0xa0/0x16f [] ? do_exit+0x862/0x870 [] ? fput+0x25/0x30 [] ? do_group_exit+0x58/0xd0 [] ? sys_exit_........
  • Directadmin Log File Locations


    This is a handy link and list of all the relevant Directadmin log files and related servers. http://help.directadmin.com/item.php?id=11 DirectAdmin: /var/log/directadmin/error.log /var/log/directadmin/errortaskq.log /var/log/directadmin/system.log /var/log/directadmin/security.log Apache:........
  • Directadmin error/** Found 7 pre-existing rpmdb problem(s), 'yum check' output follows: e2fsprogs-devel-1.41.12-3.el6.i686 has missing requires of e2fsprogs-libs = ('0', '1.41.12', '3.el6') e2fsprogs-devel-1.41.12-3.el6.i686 has missing requires of l


    Solution To The Following: yum -y install zlib-devel yum -y install e2fsprogs* *** Cannot find /usr/include/et/com_err.h. (yum install libcom_err-devel) *** Installation didn't pass, halting install. Once requirements are met, run the following to continue the install: cd /usr/local/directadmin/scripts ./install.sh Common pre-install commands: http://help.directadmin.com/it........
  • Samsung Galaxy Note I717M Canadian Version, Root and Unlock


    I chose this because I heard a lot of stories about scams and that many providers I contacted said they can't unlock the Canadian I717s (one said "my Bell server" is down). This method worked perfectly on my Bell I717M and should work for all I717 in Canada, I was able to insert a foreign SIMcard. This will work abroad too but remember entering CWM mode is different for I717's in other countries (at least theUS). Step 1 - Root + CWM........
  • Bad Hard Drive Slows Down Computer


    Here's a proven example of what a bad hard drive can do, it was technically functioning OKin a RAID array but the system became extremely low and the load become high and IOWAIT was even higher and I always thought it was a bad application. The truth is that this failing 1TBHitachi has slowly gotten worse and caused huge slowdowns, (eg. 100% load on Thunderbird waiting for e-mails to load etc..). After swapping it out, tabs change instantly, emails are not lagged, and........
  • Linux/Ubuntu Samsung Linux Driver Praise with CLP-365W


    Usually a lot of things don't work right on Linux, but Samsung printers aren't one of them. I used to have a CLP310N that never worked right in Linux, it would print strange lines over pictures or with some programs, no picture at all. I was using whatever the default driver that Ubuntu found. Now I upgraded to a CLP-365W which is basically the same thing with wireless but no driver from Ubuntu (eg CLP-350) works. I was forced to go to Samsung's site and was surprise........
  • Nearly 100% CPU Usage from processes called dma0chan0 dma0chan1 dma0chan2 dma0chan3


    Inever started these processes but they are from a custom based bootable Linux I've made and I've never seen this behavior on other machines or even with the same machine using different kernels. These processes seemed to spawn on their own and I have no idea why and even worse why the CPU usage is so high? Here's the output from top: 907 extaudit 30 10 0 0 0 R 90.7 0.0........
  • Lantronix KVM/IP Keyboard/Mouse not working in BIOS before booting the OS


    I've run into two issues with Lantronix based KVMs on various servers and here's how I solved them (with that said I like these units as they are Java based and OS independent and work very well, unike some other models like Startech). 1.) If you are connected by USB only and you're sure USB support from the BIOS is enabled, you just need to click the following in Lantronix Interfaces -> Keyboard/Mouse Check "Force USB Full Speed Mode", this fixed the issu........
  • Login and download all files script


    This is very handy if you're too busy and don't have time to download whatever files you need. The -D specifies the domains allowed, this is because I specified -H which means foreign hosts are allowed, if you don't restrict them you'll end up going to the whole internet via ads and other links just like a search Engine would follow. -l 0 specifies to go deep, to as many levels as possible/as exist. -e robots=off is important because robots.txt often says you can't vie........
  • Setup PXE Boot using Centos and dhcpd, tftp and syslinux


    This is something I often setup for clients because it's very helpful for people in datacenters, this allows custom OS installs on demand, you can customize it more by using kickstart etc.. but here's a base I use before customizing more: This little script below will install everything you need to get booting by PXE Linux. It also assumes you set a local IP (be sure not to overwrite your existing IP) on eth0:0 (note the :0) as 192.168.1.10 and it........
  • Thunderbird How-To Copy/Backup/Restore Accounts and Settings to Another Computer


    The best way is to use rsync, I've set it up so it doesn't copy unnecessary files, or at least ones I'm sure aren't needed. Here is the rsync command Iused (adapt to your specific Thunderbird profile location): rsync -hazv user@remotehost.com:/home/user/.thunderbird/sbrer.default/* /home/user/.thunderbird/4nyb0.default/ --exclude=global* --exclude=Cache --exclude=ImapMail --exclude=Mail This is a great way to get your e-mail accounts going on a new c........
  • Disable SELinux How To Tutorial Solution


    Here is a quick script that works on most Centos versions to disable the virus/SELinux from blocking basic functionality. The first echo 0 statement disables SELinux instantly but it will still be enabled on reboot. The second line disables it permanently. #!/bin/bash #disable SELinux Immediately echo 0 > /selinux/enforce #disable SELinux Permanently sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config........
  • mdadm: /dev/sdb1 not large enough to join array solution


    mdadm --manage /dev/md1 --add /dev/sdb1 mdadm: metadata format 00.90 unknown, ignored. mdadm: metadata format 00.90 unknown, ignored. mdadm: metadata format 00.90 unknown, ignored. mdadm: /dev/sdb1 not large enough to join array md1's first primary member /dev/sda3 has 57394 cylinders while the /dev/sdb1 has 57393 (1 less cylinder) which is why it won't work. fdisk -l /dev/sda3 Disk /dev/sda3: 47........
  • CPanel error: "Your SSL certificate failed to install on your site."


    This error in my experience is user error although CPanel doesn't help, this message doesn't give you much to go on. Let's talk more about the process of setting up SSL with CPanel. Your site must have a dedicated/non-shared IP to even have the option of creating an SSL Certificate. You must create a Private Key (do not delete this private key!) You must create a CSR (Certificate Signing Request) Use CSR to create cert........
  • Linux/Centos how to block SSH bruteforce/dictionary attacks automatically with denyhosts


    A lot of people become nervous (and understandably so) when checking their auth or security logs, in Centos /var/log/secure and see dozens, hundreds of even thousands of attempted logins to various services, especially SSH. Of course you could manually block these people/IPs but no one has time to read the logs like that, what if some program or script could do it for you? This is what denyhosts does for you, it checks the logs and based on a certain number of failed SSH attem........
  • Samsung Galaxy Note Upgrade to ICS 4.0 microSDHC card not detected/dataloss after upgrading - possible solutions


    I backed up everything in the /mnt/sd_card directory thinking that some dataloss could occur for some reason but purposely left my microSDHC unbacked up thinking that "it won't touch that since it's external" and Samsung's and other manufacturers website even say this (that it won't be affected and not to worry etc). Apparently I was wrong, my microSD was "undetected" and asked to be formatted after the upgrade (there goes 3-months worth of family photos). No........
  • Centos how to upgrade from PHP 5.2 to 5.3 without downtime


    This may sound silly but there will be conflicts/issues with the default Centos repository so you have to use a third party like remi (I prefer not to do this but it's the only option unless you migrate your sites/data to another server or can stand some downtime-not an option IMHOon a production server). You may need to upgrade to PHP5.3 to run Joomla or many other reasons. Your host needs to use PHP 5.2.4 or higher to run this version of Jo........
  • xen how to resize an image properly


    The best way I could figure out is to use another guest of some sort to do this, while assigning the disk that needs to be resized to the same guest. So say we have /dev/xvda as the guests drive and we've booted it up. We also have /dev/xvdb (this is going to be the image/disk to be resized). In this case it's based on an ext3/4 image. Run e2fsck on it to ensure there are no filesystem errors. e2fsck /dev/xvdb........
  • Joomla Error - JFolder::create: Could not create directory


    JFolder::create: Could not create directory Plugin Install: Failed to create directory: This can occur when trying to upload content or when installing themes/templates. It's usually not a permissions issue per say but doing a 777 (which is very insecure) will fix it. But the real problem solution is that the owner of the files is different than the owner of the Apache process/server. Eg. if your Apache is running as user "apache........
  • MySQL Authentication fails after Upgrade to Version 5.5


    ERROR 1045 (28000): Access denied for user 'contentmanager'@'localhost' (using password: YES) For fun I thought I'd reset the password: GRANT ALL ON thecontent.* TO contentmanager IDENTIFIED by 'dfdfsdfdsfsdfsd'; ERROR 1470 (HY000): String 'contentmanager' is too long for user name (should be no longer than 16) This is ridiculous that this new version has some bizarre 16 character username limit and not only that but i........
  • mdadm how to add a device to an array after a failure


    This array is a RAID 1 and in this case 1 of the 2 drives failed (a WD drive and I've found them to be the weakest and most unreliable of any brand and are easily damaged/DOA when shipping them). mdadm --manage /dev/md0 --add /dev/sdb1 The above assumes the array you want to add to is /dev/md0 and the device we are adding is /dev/sdb1 *One thing to remember is to make sure the partition you are adding is the correct size for the array. You can also g........
  • Windows Secret Hidden Temp Directory to free out of disk space issues


    Replace "Administrator" with your username. C:Documents and SettingsAdministratorLocal SettingsTemp Ihave often found several gigabytes of temporary files in there! Just be warned that they may not all be deletable if the files are being used by open programs (so close everything you can). This helped me in a pinch many times when for apparently no reason gigs of disk space are being used for an unknown reason.........
  • Firefox 11 solution for hidden tabs to the right


    After about 15 tabs I believe, they become hidden on the right side and are accessible only by furiously clicking the "right arrow" and even then it takes forever and honestly this hidden tab feature seems to slow down everything. If you enter "about:config" in your browser without the quotes just set this value to get rid of this annoying (one of many new) feature from Firefox (set it to false and restart your browser): services.sync.prefs.sync.brows........
  • bash script remove non-printable special characters/white space


    In bash you test like this for problems that can be caused by non-printable characters since if you don't know how to identify it because it basically breaks your script. echo "url=$url" should print something like this normally if you have properly formatted input/text: url=::http://someaddress.com:: But if you have some weird hidden characters (not visible in a text editor of any sort you'll get something like this ::l=::http://s........
  • Error code: sec_error_unknown_issuer Solution Valid SSL Certificate Throwing Error in Firefox


    So you've just purchased your SSL cert, renewed it and installed it or maybe you've had it installed and working fine all the time with all other browsers but you've upgraded to a recent version of Firefox and suddenly get the warning "Error code: sec_error_unknown_issuer" error. This is terrible since if you bought an SSL cert, you are most likely using it for trust purposes for your business and obviously that message will scare away most potential customers.........
  • iptables v1.3.5: can't initialize iptables table `nat': Table does not exist (do you need to insmod?) - OpenVZ Container Problem iptables module problem solution


    iptables v1.3.5: can't initialize iptables table `nat': Table does not exist (do you need to insmod?) This solution applies to all other iptables modules/problems for OpenVZ, you'll just need to add them to both lists/lines below if you have modules other than what I have below. The modules need to be enabled in both iptables and the OpenVZ hostnode itself and then the containers which need it must be restarted. How To Enable IPTables Modules in OpenVZ........
  • HowTo Migrate and Import iPhone/Outlook Contacts into Android without using GMail using .vcf files


    I searched for days after getting my Galaxy Note and couldn't find a way to do this (at least not without buying programs for either Android/Windows). All I read was ways to sync and import the contacts to GMail but I don't want to use GMail for privacy reasons. GMail/Google steal all of your personal information and use it for whatever purposes they want to and may sell or release it to who knows where (I don't care what their policy says but this stuff happens), just like the default........
  • Directadmin Enable SSL


    It's really silly how DA doesn't enable SSL by default but is otherwise a stable, fast and secure control panel. Here's a copy and paste way of enabling SSL for Directadmin in just a few seconds: *setup SSL openssl req -x509 -newkey rsa:1024 -keyout /usr/local/directadmin/conf/cakey.pem -out /usr/local/directadmin/conf/cacert.pem -days 9999 -nodes That creates the public certificate and private key pair in the location Directadmin expects to fi........
  • pcnet32: eth0: transmit timed out, status 97fb, resetting - NIC card problem solution


    I've encountered this problem before and I believe it may affect other drivers (I could test but I don't have time). This was happening on my custom Linux system with the pcnet32 driver. pcnet32: eth0: transmit timed out, status 97fb, resetting (and some other kernel module tracing in dmesg) Basically it means the card is connected (it shows connected in full duplex etc.. and recognized if the cable is disconnected too) but no packets can be sent or received........
  • SSH error slow login debug1: An invalid name was supplied Cannot determine realm for numeric host address - Solution


    debug1: An invalid name was supplied Cannot determine realm for numeric host address debug1: Local version string SSH-2.0-OpenSSH_4.3p2 Debian-9etch3 debug1: An invalid name was supplied Cannot determine realm for numeric host address debug1: An invalid name was supplied A parameter was malformed Validation error Solution, disable auth from the ssh client (this is a client side error)........
  • How To Install CPanel


    wget -N http://httpupdate.cpanel.net/latest;sh latest That one command above will do it all (and it takes a long time to install/compile). After that you can access CPanel with your root login information by visiting https://yourdomain-or-ip.com:2087 I personally don't like CPanel (bloated, full of bugs, no shared SSL, difficult to use etc..)but I admit it's easier to install than........
  • LOG: MAIN PANIC failed to expand condition "${if eq {$authenticated_id}{}{0}{${if eq {$sender_address}{$local_part@$domain}{0}{${if match{$received_protocol}{N^e?smtps?a$N}{${perl{checkbx_autowhitelist}{$authenticated_id}}}{${if eq{$received_prot


    I experienced this with CPanel's Exim after an auto-update (a Google of this error produces lots of complaints with few clear solutions). In this case I'll put the solution at the top. Run /scripts/buildeximconf to rebuild the Exim config and it should be fine after that. mail -vs "from test" user@dest.com < .bash_history LOG: MAIN cwd=/root 4 args: send-mail -i -v user@dest.com LOG: MAIN &........
  • Linux Ubuntu Nvidia GT430 Lockups/Errors/Freezes NVRM: os_schedule: Attempted to yield the CPU while in atomic or interrupt context


    I'm running Ubuntu 10.10 with Asus NVIDIA GT430 2.6.35-32-generic-pae #65-Ubuntu SMP Tue Jan 24 14:06:16 UTC 2012 i686 GNU/Linux Nvidia binary driver: 260.19.06 The screen sometimes completely freezes and locks up or everything starts going very slow: [1903398.100007] NVRM: os_schedule: Attempted to yield the CPU while in atomic or interrupt context [1903402.373210] NVRM: Xid (0001:00): 53, CMDre 00000000 00000080 00000000 00000005 00........
  • Ubuntu 10 Nvidia Drivers Not Updated After Kernel Update Solution/How-To Manually Rebuild nvidia kernel modules for Ubuntu


    I dread updating the kernel and rebooting to find the Ubuntu graphics aren't working and you have to manually intervene. This is usually because Ubuntu for whatever reason didn't update the drivers you need (eg. the manually compiled Nvidia Kernel driver that MUST be recompiled for each and every kernel update unfortunately). The most common reason may be that "linux-source" hasn't been installed automatically on my system. I tried to manually reinstall the........
  • OpenVPN don't use bridgestart.sh or bridge at all use iptables


    I used the suggested script to bridge from OpenVPN and it took my client's server off-line! Don't ever use their "sample" scripts if you don't have another way of accessing the server than SSH. I actually found it easier to use iptables to tell it to route IPs based on a certain subnet to route through eth0: iptables -t nat -A POSTROUTING -s 192.168.200.0/24 -o eth0 -j MASQUERADE Replace "192.168.200.0/24" with your subnet of cour........
  • postfix lopback error solution


    This is the mail system at host mail.postmail.com. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to If you do so, please include this problem report. You can delete your own text from the attached returned message. &........
  • Drupal/MySQL database error: PDOException: SQLSTATE[42000] [1044] Access denied for user 'db_user'@'localhost' to database 'dbname' in lock_may_be_available() (line 167 of /home/user/public_html/includes/lock.inc).


    PDOException: SQLSTATE[42000] [1044] Access denied for user 'db_user'@'localhost' to database 'dbname' in lock_may_be_available() (line 167 of /home/user/public_html/includes/lock.inc). The username and password were correct but some reason CPanel added the user with no permissions! Edit the user's permissions to include "All" from Cpanel or MySQL and that is the solution.........
  • iPhone Restore/Backup Location of Notes and Contact/Address Book


    *Make sure that the ownership is 501.501 or mobile.mobile when copying back (especially if using ssh or sftp as root on the iPhone) otherwise things will break. Eg. the contacts will be blank even after trying to update due to incorrect ownership/permissions. iPhone Notes Location/Restore: /private/var/mobile/Library/AddressBook AddressBookImages.sqlitedb AddressBook.sqlitedb Once you restore the contacts and restar........
  • Install Android SDK and start testing on Debian/Ubuntu: How To Guide/Tutorial


    Visit http://linux.softpedia.com/get/Programming/Interpreters/Android-32340.shtml Basically copy and paste all of that below and you'll have installed and started the Android SDK before you know it. wget http://dl.google.com/android/android-sdk_r12-linux_x86.tgz sudo apt-get install openjdk-6-jre openjdk-6-lib openjdk-6-jre-headless tar -xvf android-sdk_r12-linux_x86.tgz cd android-sdk-linux_x86/tools ./android........
  • Linux Kernel Panic Messages - Symptoms of bad RAM module/stick


    These were caused by a bad stick of Corsair RAM [] free_hot_cold_page+0xfc/0x150 [] __pagevec_free+0x14/0x1a [] release_pages+0x127/0x12f [] __pagevec_release+0x15/0x1d [] __invalid_mapping_pages+0x120/0x156 [........
  • Hitachi HDD/Drive RMA Process Experience


    The first Hitachi Deskstar 2TB 5K3000 drive I bought arrived DOA for whatever reason (not recognized by the BIOS or OS). Perhaps it was shipping since I bought only 1 hard drive. When I bought 4 through another Vendor, all 4 checked out fine. I was worried about the RMA process because a lot of people have complained about Hitachi taking weeks to send out their hard drive and almost implied the warranty is useless. I'm happy to report that my experience was great a........
  • MySQL Import CSV data tutorial guide


    It's actually fairly straight forward: load data local infile 'billpayments-payments.csv' into table payments fields terminated by ',' enclosed by '"' lines terminated by 'n' The above assumes that your fields are terminated by a comma (some programs like OpenOffice change this to a semi-colon ;) and that they are enclosed with " The above will insert the data from billpayments-payments.csv into the table payments.........
  • scp not found - solution


    Some minimal installs of Centos may be missing the scp command, which is actually part of the "openssh-clients" package. scp not found yum install openssh-clients........
  • wget download all files on page/directory automatically recursively


    Have you ever found a website/page that has several or perhaps dozens, hundreds or thousands of files that you need downloaded but don't have the time to manually do it? wget's recursive function called with -r does that, but also with some quirks to be warned about. If you're doing it from a standard web based directory structure, you will notice there is still a link to .. and wget will follow that. Eg. let's say you have files in http://serverip/documen........
  • samba/smbd connection to share problems and solutions


    I'll start by showing some problems in the logs: [2011/08/07 16:22:06, 0] param/loadparm.c:8569(process_usershare_file) process_usershare_file: stat of /var/lib/samba/usershares/movie failed. Permission denied [2011/08/07 16:22:06, 1] smbd/service.c:676(make_connection_snum) create_connection_server_info failed: NT_STATUS_ACCESS_DENIED That means you don't have permission to access the fi........
  • screen Cannot open your terminal '/dev/pts/2' - please check.


    The solution to this screen issue is simple. This happened to me in Centos 5 as a user, but I also su'd to it and I don't have any password for it. I've read some people say this is more common when su'ing. The solution is simple though, just give others rw access to the corresponding pts whether it's 0,1,2 etc..: As root do chmod o+rw /dev/pts/2 ........
  • Did Rogers and other wireless block Mobile Twitter on government/police orders during the Canucks Stanely Cup Riot?


    I am watching the Canucks riot and a reporter said Twitter is down. My home connection on Shaw is fine, but when Iused my Rogers network over the cell, it says "Rate Limit Exceeded". I wonder if this is a transparent redirect by Rogers under police order? I noticed that the Telus network loaded Twitter just fine.........
  • How to view UDP and other protocol connections?


    netstat is weak and can't show udp connections and most other protocols, use "ss" which is what netstat should have been: The "-u" switch stands for udp, here's a list of other options: Usage: ss [ OPTIONS ] ss [ OPTIONS ] [ FILTER ] -h, --help this message -V, --version output ver........
  • Linux Out of Memory OOM Object Killer Solution "Out of memory: kill process 1955 (sshd) score 81 or a child"


    I had a system running a 128MB live CD image with 2.8 gigs of available RAM and the OOM kernel killer went crazy when using dd for more than 8 minutes and kept killing everything. I've read that this is due to a low-memory issue and paging in the kernel and 32-bit systems with lots of RAM. I even enabled swapspace on my LiveCD and the issue happened 25 minutes into dd rather than 8 minutes, so what gives? Also no swap space was ever used! cat /proc/s........
  • How To Test If Your Hard Drive Is Good/Signs of dying hard drive


    I like dd, although it only reads it, usually a read test of the entire disk will uncover if your hard drive is bad in some parts. This is a good thing to do at least once a month, a lot of times bizarre program behavior, laginess and crashing/unnmounting problems etc.. are due to a failing disc and SMART won't know it or indicate a problem: We must also remember there's never a guarantee, I've found that ever since we moved to larger and more platters per drive with 1TB drives........
  • smart is not smart, it thinks a dead drive is still good


    I had a dying drive that smart thought until it totally disappeared was a good drive, and actually all parameters did look fine but this system was causing my system to lockup and other bad behavior: === START OF INFORMATION SECTION === Device Model: WDC WD20EARS-00MVWB0 Serial Number: WD-WMAZ20139 Firmware Version: 50.0AB50 User Capacity: 2,000,398,934,016 bytes Device........
  • Hitachi 2TB HDS5C3020ALA632 drive DOA


    I had one of these shipped and it was not recognized when plugged in, here's what a dead drive looks like (I assume it's teh circuit board which is dead): ata1: link is slow to respond, please be patient (ready=0) ata1: softreset failed (device not ready) ata1: SATA link up 3.0 Gbps (SStatus 123 SControl 300) ata1: link online but device misclassified, retrying ata1: link is slow to respond, please be patient (ready=0) ata1: softreset f........
  • How to recover from dead DRBD partition/hard drive in two simple commands


    This assumes that you've at least created the correct partition for your DRBD already. Notice that I am "diskless", that's because either your DRBD partition doesn't exist/has been renamed (eg. sdb becomes sda when sdb dies and you reboot) or because that drive is really actually dead/gone. *If you need to permanently change the partition/device for your resource be sure to edit /etc/drbd.conf on both hosts and reload the config. (replace r0 with........
  • Kernel/make compilation time and how to improve compile times/compile the Linux kernel faster without hardware upgrades


    I thought only a faster CPUand SSDwould help but I already have a Quad-Core CPU and it wasn't being maxed out. The actual tests were performed on an AMD-V enabled 128MB dual core VMWare container though. There is a flag that can be passed to make in order to start multiple threads, by specifying 4 threads I was able to reduce the whole kernel compilation time from scratch by about 50%! (65minutes vs 31minutes!). *Yes I did do a make clean before each co........
  • List of Free Public DNS Servers IP Addresses


    One thing to note about DNS servers and providers is that they aren't always trustworthy, not even if they're Google or your favorite ISP. Any DNS server can compromise your privacy, and they are likely tracking your browsing habits and keeping logs of it. Sometimes it's for Marketing/Research purposes such as Google's GMail service which they admit is scraped/datamined. I would expect nothing less from their DNS service. The other danger with such widely used and pu........
  • Kernel linux-2.6.39 In file included from drivers/block/cciss.c:1015: include/asm-generic/pci-dma-compat.h: In function `cmd_special_free': drivers/block/cciss.c:196: sorry, unimplemented: inlining failed in call to 'cciss_tag_discard_error_bits': fu


    In file included from drivers/block/cciss.c:1015: include/asm-generic/pci-dma-compat.h: In function `cmd_special_free': drivers/block/cciss.c:196: sorry, unimplemented: inlining failed in call to 'cciss_tag_discard_error_bits': function body not available include/asm-generic/pci-dma-compat.h:25: sorry, unimplemented: called from here make[2]: *** [drivers/block/cciss.o] Error 1 make[1]: *** [drivers/block] Error 2 make: *** [drivers] Error 2........
  • SPAMASSASSIN/spamcd solution - spamc[16225]: connect to spamd on 127.0.0.1 failed, retrying (#2 of 3): Connection timed out


    May 6 08:16:57 devbox spamc[16225]: connect to spamd on 127.0.0.1 failed, retrying (#2 of 3): Connection timed out May 6 08:17:02 devbox spamc[20214]: connect to spamd on 127.0.0.1 failed, retrying (#1 of 3): Connection timed out spamc[16225]: connect to spamd on 127.0.0.1 failed, retrying (#3 of 3): Connection timed out First make sure that the spamd service is actually running, this is your spamd (spamassassin server) cannot be reached. In my c........
  • Apache Crash Solution Can't Restart Due to Socket In use - (98)Address already in use: make_sock: could not bind to address [::]:80 (98)Address already in use: make_sock: could not bind to address 0.0.0.0:80 no listening sockets available, shutting d


    (98)Address already in use: make_sock: could not bind to address [::]:80 (98)Address already in use: make_sock: could not bind to address 0.0.0.0:80 no listening sockets available, shutting down This will even trip you up if you have a service like monit to save you if httpd crashes. The only way to fix this is to either wait (it's not an option for production situations) or to kill the ghost httpd processes that wouldn't gracefully close: So........
  • mysql enable slow query logging/Query Cache Solution - find/track cause of slow mysqld/high IO/CPU usage


    If you have a webserver and find you have high IO/lagginess MySQL is one of the first things to check. It turns out MySQL was my problem and it was creating a high load on my server, especially for IO. How to Enable MySQL Slow Query Logging To Find Slow Performance/Queries vi /etc/my.cnf Add this anywhere under [mysqld] #slow queries log-slow-queries = /var/log/mysql/mysqlslowqueries.log long_query_time = 1........
  • Apache High CPU Usage Enable Mod_Status Guide Solution - Find Cause of High CPU Usage Script/Domain


    mod_status is a great way to track down the source of high CPU usage and to find what vhost/script is the cause of it. It gives you a live view of bandwith usage, CPU usage, and memory usage broken down by domain/vhost and script/URI. Enable mod_status vi /etc/httpd/conf/httpd.conf ExtendedStatus On SetHandler server-status Order Deny,Allow Deny from all All........
  • vnstat setup guide/tutorial


    yum -y install vnstat chown nobody.nobody -R /var/lib/vnstat/ #replace venet0 below with your desired interface sudo -u nobody vnstat -u -i venet0 #edit: vi /etc/sysconfig/vnstat #VNSTAT_OPTIONS="-i venet0" # only use the sed below if you are using venet0 instead of eth0 or replace accordingly sed -i 's/eth0/venet0/g' /etc/sysconfig/vnstat [root@monitor]# yum install vn........
  • htaccess modrewrite problem with rewriting url with- dashes solution


    I was getting frustrated with trying to write a simple URL like this: /example-withdash I used the htaccess code like this: Rewriterule ^example-withdash$ / [R=301] I also tried escaping the dash which I thought should have treated it as a literal but that didn't work either: Rewriterule ^example-withdash$ / [R=301] But it wouldn't work, apparently the "-" dash means don't substitute,........
  • iPhone 3G/3GS/4 Undelete Photos/Videos Datarecovery


    I found this technique listed in many places which shows you how to use a common Linux tool "dd" to dump the raw partition of your iPhone. I give credit to this site for showing me the correct way to dd from the iPhone, I never thought to try it in the other direction:http://log.ijulien.com/post/182804914/iphone-3gs-data-recovery Requirements 1.) Jailbreak your........
  • phpMyAdmin - Error Cannot start session without errors, please check errors given in your PHP and/or webserver log file and configure your PHP installation properly.


    The fix for this was setting the correct permissions in /var/lib/php, it needs to be "root.root" And /var/lib/php/session needs to be "root.apache" to work properly. After that I was able to login to phpMyAdmin as normal. This whole thing happened because I accidentally changed all of /var/lib to root.root.........
  • SMARTCTL additional SMART command testing using short and long tests


    smartctl -t long /dev/sda (note you can specify short, but it's not as thorough as long of course). smartctl version 5.38 [i686-pc-linux-gnu] Copyright (C) 2002-8 Bruce Allen Home page is http://smartmontools.sourceforge.net/ === START OF OFFLINE IMMEDIATE AND SELF-TEST SECTION === Sending command: "Execute SMART Extended self-test routine immediately in off-line mode". Drive command "Execute SMART Extended sel........
  • MYSQL Error Can't find file: './wf/Sessions.frm' (errno: 13) Solution


    mysql errors even though these files do exist: 110405 13:21:37 InnoDB: Operating system error number 13 in a file operation. InnoDB: The error means mysqld does not have the access rights to InnoDB: the directory. InnoDB: File name ./ibdata1 InnoDB: File operation call: 'open'. InnoDB: Cannot continue operation. 110405 13:26:15 InnoDB: Operating system error number 13 in a file operation. InnoDB: The error means my........
  • Dying Samsung DVDRW Drive


    My Samsung drive failed on me, at first I thought it was the enclosure but a direct SATA connection causes the same problems for discs that are inserted. It will work fine for a few minutes but then starts spewing the errors below. I've never been a fan of Korean made optical drives and have always had trouble with them. The problem is that I don't believe NEC and Lite-ON make drives anymore, and I considered them the leaders. Apr 7 11:58:48 bo........
  • monit example tutorial how to enable status checking and manipulation


    You need to enable the httpd daemon with monit to actually view the status and control, it's not only for the web interface since the httpd is theONLY way of controlling monit and viewing the status. monit monitor all will also reinstate disabled services if they've timed out too much. Just restarting the service will do nothing to re-monitor a service that monit has stopped monitoring due to too many failures. *Also note that /etc/monit.conf i........
  • 2011 Best Laptop - HP 15.6" Laptop featuring AMD Athlon II P340 Processor (G62-420CA)


    My mother needed a new laptop and I recommended her the same one I would have bought myself or my wife, that means the cheapest possible laptop with the most features for the money. This HP shines at this price point and one thing that made me stay away from buying more and recommending HP/Compaq was the poor battery life. Not anymore, this model has an industry leading up to 4 hours of battery life. Key Factors for Choosing It: HDMI Out........
  • pgina can't login after installing


    After Installing pgina I couldn't login to Windows anymore with my blank password Administrator account! An unknown error has prevented your account from being created.nrThis may be due to policy or security settings as well as other machine configuration.nrPlease consult your administrator. Hit F8 to start Windows in Safe Mode and you can login normally and then remove PGina, it shouldn't cause this problem or behavior out of the box.........
  • Drupal 6.2 Install and how to move install to root/non-subdirectory


    drup 6.2 install $cd drupgoodinst3883/ [ drupgoodinst3883]$ ls CHANGELOG.txt cron.php index.php INSTALL.pgsql.txt INSTALL.txt MAINTAINERS.txt modules robots.txt sites update.php xmlrpc.php COPYRIGHT.txt includes INSTALL.mysql.txt install.php LICENSE.txt misc&........
  • Yahoo Mail (email) DNS Server Out Of Date Problems


    I don't expect this to be solved soon but some of Yahoo's DNS servers are out of whack. I changed the IPs of some nameservers of some domains and now most Yahoo users can't e-mail to those domains! As you can see below by the "No MX or A records for mychangedomain.com", now Yahoo's DNS/mailserver DNS cache is wrong. You would think they would at least have cached the old incorrect records, but instead for some reason their DNS cache has no entry and doesn't seem........
  • 95th Percentile Billing vs Usage Billing, what's better?


    There are all kinds of threads and links on the internet, and this seems to be a contentious issue butI don't know why. 95th percentile is either a good deal for some or a big rip off for others, Ijust said it there :) But the reality is that for MOST people who transfer low amounts of data but burst to higher speeds such as 40mbit+ even for short periods of time, then you'll pay a lot of money to do that. Basically 95th percentile is an-old archaic method........
  • Apache MPM worker vs prefork


    find what MPM Apache is using, it will either be using "worker" or "prefork" apachectl -l Compiled in modules: core.c prefork.c http_core.c mod_so.c In my case it is "prefork" vi /etc/httpd/conf/httpd.conf Find the section that looks like this (by default one will normally exist for prefork and for worker, but in my case I only care a........
  • SPAMASSASSIN Enable Pyzor and DCC


    *Remember to restart spamassassin after all of this. DCC wget http://www.dcc-servers.net/dcc/source/dcc.tar.Z tar -zxvf dcc.tar.Z cd dcc-1.3.138/ ./configure;make;make install #enable DCC, uncomment the line that disables it near the top vi /etc/mail/spamassassin/v310.pre pyzor wget http://sourceforge.net/projects/pyzor/files/pyzor/0.5.0/pyzor-0.5.0.tar.gz/down........
  • VPS Server Scam/Review/Complaint List


    These are the only two I've encountered but here is the low-end and note my story is not at all unique. In my case I was scammed out of money and did not receive any service at all from either company. Santrex Review/Scam/Complaint Santrex never provided any working server, I believe it was just a dummy management Solus server because the server said it was booted but never connected to the console. I complained to them and eventually the support adm........
  • Enable SPAMASSASSIN on Postfix in 5 minutes


    Centos 5 Postfix and SPAMASSASSIN Tutorial yum install spamassassin chkconfig spamassassin on vi /etc/mail/spamassassin/local.cf ############## #required_hits 5 #report_safe 0 #rewrite_header Subject [SPAM] #5 is the least restrictive (means only the most obvious SPAM is caught. 0 is obviously the most restrictive/sensitive and would have lots of false positives require........
  • VOIP/Asterisk/FAX Error Problems Solution NOTICE[11389]: rtp.c:1808 ast_rtp_read: Unknown RTP codec 100 received from


    NOTICE[11389]: rtp.c:1808 ast_rtp_read: Unknown RTP codec 100 received from I've found that trying several times may work, but I also read changing your Sipura VOIP adapter settings as follows helps (but it still fails for me sometimes): In adapter change the following under SIP/Advanced Codec to G711a from G711u Passthru Method from: NSE to ReINVITE FAX CED Detect Enable: Yes FAX CNG Detect........
  • SPAMASSASSIN Disable OpenWhois RBL (it is dead/defunct/no longer active):


    SPAMASSASSIN Disable OpenWhois RBL (it is dead/defunct/no longer active): You might see this in your headers 2.4 DNS_FROM_OPENWHOIS RBL: Envelope sender listed in bl.open-whois.org comment out this inside /usr/share/spamassassin/72_active.cf ##{ DNS_FROM_OPENWHOIS ifplugin Mail::SpamAssassin::Plugin::DNSEval header DNS_FROM_OPENWHOIS eva........
  • Directadmin DA Install Guide


    yum -y install openssl* gcc-c++ gcc flex g++ make;wget http://www.directadmin.com/setup.sh;chmod +x ./setup.sh;./setup.sh #enable SSL /usr/bin/openssl req -x509 -newkey rsa:1024 -keyout /usr/local/directadmin/conf/cakey.pem -out /usr/local/directadmin/conf/cacert.pem -days 9999 -nodes chown diradmin:diradmin /usr/local/directadmin/conf/cakey.pem chmod 400 /usr/local/directadmin/conf/cakey.pem sed -i "s/SSL=0/SSL=1/g" /usr/local/dire........
  • Postfix header_checks using regexp and multiple lines


    I'm posting this because it wasn't easy or obvious how this would be accomplished and the man page leaves it to guesswork. Multi-line body_checks Example 1 /........
  • ls: error while loading shared libraries: libtermcap.so.2: cannot open shared object file: No such file or directory solution


    ls ls: error while loading shared libraries: libtermcap.so.2: cannot open shared object file: No such file or directory This is not an ldd problem or case of anything missing, this only happened after I upradedUbuntu. declare -x PATH="/home/user/bin:/usr/local/bin:/usr/bin:/bin:/usr/games" "/home/user/bin" is the problem! It's weird because I have no idea how it happened.........
  • Linux use XMessage to popup a message in XWindows


    xmessage "Your message here" -display :0 This will popup a window with the message, it would be cool if it allowed two way communication though. I found the info in this post: http://en.andregondim.eti.br/?p=72........
  • Convert doc images/jpg/jpeg to PDF


    Use "ImageMagick" which can be installed easily on most UNIX/Linux distros. Remember that it will go with the standard file listing to determine the order but I believe you can manually specify multiple jpg's in the arguments. Convert image/jpg to PDF convert *.jpg yourpdf.pdf This is a very handy and free tool. Convert DOC/TXT documents to PDF If you wanted to convert a .doc file or text........
  • Plesk Get List of E-mail Users & Aliases


    When migrating away from Plesk I couldn't figure out an easy way to get a straight list of all e-mails, but here is where I found the solution: http://nakuls77.wordpress.com/2008/08/30/details-of-email-ftp-database-users-from-psa-database/ mysql> SELECT mail.mail_name, accounts.password, domains.name FROM mail, accounts, domains WHERE domains.id=mail.dom_id AND mail.account_id=accounts.id; mysql> SELECT CONCAT(mail.mail_name,’@’,domains.name) AS Em........
  • OpenOffice Calc SUM function not working Solution - Result is always 0/apostrophe appears in front of all numbers.


    I right clicked all applicable cells and chose "number" but that's enough. I notice when I click the cell there is an invisible ' in front of the number: '33.64 Calc imported my CSV and decided to add a ' in front of the numeric currency values!!!*Actually the problem occurs when you right click the cells and change the type from text to number, no matter what format you choose. If I change it to be currency i........
  • SSH Tunnel Dynamic Proxy Stops Working Right Away even with Root and High Port


    I keep getting messages like this shortly after using the proxy (it works for a few seconds/page loads and then stops): channel 12: open failed: administratively prohibited: open failed I'm not sure what the issue is unless there's some kind of hardware firewall on the other end. I've used this exact configuration on multiple servers with no issue and even disabled iptables etc..........
  • sshfs cannot unmount error: device is busy. (In some cases useful info about processes that use the device is found by lsof(8) or fuser(1))


    umount: /home/diret/mount: device is busy. (In some cases useful info about processes that use the device is found by lsof(8) or fuser(1)) I tried everything (fusermount -u) to unmount it but the only thing that worked was actually doing this: ps aux|grep sshfs Then I identified the sshfs connection and did: kill -kill pid........
  • Thunderbird/MBOX to IMAP/Maildir migration done easy with mb2md


    Convert MBOX Mail files into Maildir using Linux *You need perl an the TimeDate module Get the free Perl script mb2md from the project/author's site: wget http://batleth.sapienti-sat.org/projects/mb2md/mb2md-3.20.pl.gz gunzip mb2md-3.20.pl.gz #remember you need timedate or you'll get this error: ./mb2md-3.20.pl Can't locate........
  • Postfix/Any Email Server check for Open Relay


    The first thing you need to remember is not to check from the same host/server itself. This is a silly mistake I made, the reason is that many mailservers and especially postfix are configured to allow relaying from the localhost/same host. If you do that you'll get a false positive. *Make sure you test from another host/system than the mail server itself! telnet yourmailserverhost.com 25 220 Courier (FreeBS........
  • sshd[9217]: Authentication refused: bad ownership or modes for file /root/.ssh/authorized_keys


    sshd[9217]: Authentication refused: bad ownership or modes for file /root/.ssh/authorized_keys I made sure the entire .ssh subdir is owned by the user root (this is root's account); chown -R root.root .ssh chmod 600 .ssh/authorized_keys but it still doesn't work and gives me the same message sshd[7339]: Authentication refused: bad ownership or modes for directory /root chmod 700 /root........
  • email server messsages rejected without reverse DNS DNS check failure Client host rejected: cannot find your reverse hostname Cannot resolve PTR record


    Basically you should always be 100% sure that whatever IPyour mail server sends out with has reverse DNS/PTR records. Remember that unless you own your IPs then you won't be able to set your own reverse DNS. Even if you were to create a reverse PTR record on your DNS servers it will be ignored. Reverse DNS is queried to pre-assigned DNS servers of your ISP, so therefore you'll need to contact your ISP/Colo/Hosting provider to do a reverse DNS entry. If you don't have........
  • Dovecot Enable SSL/TLS with your certificate


    Dovecot enable SSL (by default it uses an old expired cert if you choose pop3s and imaps as protocols) =================== Create Cert & Key: openssl req -new -x509 -nodes -days 1530 -out server.crt -keyout server.key mkdir /etc/mailssl chmod 700 /etc/mailssl cp server.* /etc/mailssl Edit /etc/dovecot.conf ssl_cert_file = /etc/mailssl/server.crt s........
  • Postfix Enable SSL/TLS with your certificate


    Create Cert & Key: openssl req -new -x509 -nodes -days 1530 -out server.crt -keyout server.key mkdir /etc/mailssl chmod 700 /etc/mailssl cp server.* /etc/mailssl Postfix SSL config Edit /etc/postfix/main.cf: #SSL stuff smtpd_tls_cert_file = /etc/mailssl/server.crt smtpd_tls_key_file = /etc/mailssl/server.key To make smtps w........
  • CPU #1 not responding - cannot use it.


    I think this will be useful to others because I have a server that kept crashing mysteriously during intense disk usage/RAID checks. It would only crash during the weekly RAID integrity check. ThenI noticed during a reboot that not all CPUs were being brought up, as a result this actually creates much higher temperatures with the output I got from sensors, just booting the system produced higher than normal temperatures. You can imagine that a full blown RAID check........
  • Understanding /etc/aliases from sendmail when using with postfix or other MTA's


    understanding /etc/aliases *remember to apply changes you need to run "newaliases" after editing /etc/aliases one thing I don't get is that it doesn't allow you to specify the whole e-mail address on the left-hand side eg: yourfullemail@domain.com: someotheremail@domain.com postalias: warning: /etc/aliases, line 109: name must be local (if you try the above) It works more like this: your........
  • Apache Forbidden You don't have permission to access / on this server.


    Forbidden You don't have permission to access / on this server. [Sun Jan 23 15:28:12 2011] [crit] [client 96.44.31.12] (13)Permission denied: /www/vhosts/domain.com/httpdocs/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable Solution I've done a chmod 755 .htaccess and index.php and restarted Apache That wasn't the only issue, the issue was the httpdocs direc........
  • tar how to include hidden files such as .htaccess when it doesn't automatically


    tar include hidden files such as .htaccess just add . to the path eg. tar -czvf tarfile.tar.gz /home/directory/.........
  • Ubuntu 9.04 Crash


    CPU/Kernel/MB/RAID problem? Jan 5 12:45:05 testbox kernel: [653298.890004] BUG: soft lockup - CPU#0 stuck for 61s! [hal-acl-tool:4168] Jan 5 12:45:05 testbox kernel: [653298.890005] Modules linked in: vmnet vmci vmmon binfmt_misc drbd video output input_polldev ocfs2_stackglue ocfs2_dlmfs ocfs2_dlm ocfs2_nodemanager configfs k8temp hwmon_vid lp snd_hda_intel snd_pcm_oss snd_mixer_oss snd_pcm snd_seq_dummy snd_seq_oss snd_seq_midi snd_rawmidi........
  • mysql backup/dump all databases with mysqldump command


    mysqldump --all-databases > allDB.sql The above dumps ALL the mysql databases to "allDB.sql". If you want to compress with gzip you could do this instead: mysqldump --all-databases > gzip > ALLDB.sql.gz........
  • Installing Webmin & Enabling SSL


    Webmin Setup Centos 5: wget http://downloads.sourceforge.net/project/webadmin/webmin/1.530/webmin-1.530-1.noarch.rpm?r=http%3A%2F%2Fwww.webmin.com%2Fstandard.html&ts=1294339690&use_mirror=surfnet [1] 24229 [2] 24230 [root@host ~]# --2011-01-06 21:48:20-- http://downloads.sourceforge.net/project/webadmin/webmin/1.530/webmin-1.530-1.noarch.rpm?r=http%3A%2F%2Fwww.webmin.com%2Fstandard.html Resolving downloads.sourceforge.net... 216.34.181.........
  • mdadm Centos 5 automatic resync


    This made me nervous but it's clearly a cronjob based on the messages log that happens every Sunday at about 4:22. I actually can't find any evidence of it in cron.d cron.daily but it is there somewhere obviously. What I don't get is why doesn't this cronjob do a datacheck like Ubuntu's cronscript does? When you unnecessarily rebuild the array you lose your redundancy during that point which makes your data extremely vulnerable. *Update I did a grep of &q........
  • SSH delay problem UseDNS and disabling GSSAPI does not help


    The normal solution doesn't help or apply here: ssh -v user@192.168.5.41 OpenSSH_4.3p2 Debian-9etch3, OpenSSL 0.9.8c 05 Sep 2006 debug1: Reading configuration data /etc/ssh/ssh_config debug1: Applying options for * debug1: Connecting to 192.168.5.41 [192.168.5.41] port 22. debug1: Connection established. debug1: permanently_set_uid: 0/0 debug1: identity file /root/.ssh/identity type -1 debug1: i........
  • Linux Realtek Gigabit NIC huge/high latency problem after sleep?


    That is pinging to the gateway IP on the same switch, the same IP is pingable externally without any problems which makes me think the switch is fine. 64 bytes from 55.55.55.55: icmp_seq=4 ttl=255 time=1.07 ms 64 bytes from 55.55.55.55: icmp_seq=1 ttl=255 time=3536 ms 64 bytes from 55.55.55.55: icmp_seq=2 ttl=255 time=2536 ms 64 bytes from 55.55.55.55: icmp_seq=3 ttl=255 time=1536 ms 64 bytes from 55.55.55.55: icmp_seq=8 ttl=255 time=1.20 ms 64 by........
  • Cygwin and crontab backups via ssh/scp/rsync


    Install the "Editors" and "Net" groups that will give you rsync, ssh, ssh-keygen and cron. The trickiest thing that I keep forgetting about each time is you have to run "cron-config" which adds the cron service to Windows, and without doing that obviously no cron jobs will be run thus making automatic backups impossible. Warning about rsync/cygwin and using the -a archive switch. It's a good thing I caught this because it doesn't work ri........
  • md: data-check of RAID array md3


    This really made me nervous but notice the mdstat says "check". This is because in Ubuntu there is a scheduled mdadm cronscript that runs everyday on Sunday at 00:57 that checks your entire array. This is a good way because it prevents gradual but unnoticed data corruption which Inever thought of. As long as the check completes properly you have peace of mind knowing that your data integretiy is assured and that your hard drives are functioning properly (I'........
  • Dying Seagate 7200.11 SD15


    [137392.910057] ata4.00: exception Emask 0x0 SAct 0x1 SErr 0x80000 action 0x6 frozen [137392.910077] ata4: SError: { 10B8B } [137392.910095] ata4.00: cmd 60/20:00:00:00:00/00:00:00:00:00/40 tag 0 ncq 16384 in [137392.910099] res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout) [137392.910122] ata4.00: status: { DRDY } [137392.910135] ata4: hard resetting link [137393.440060] ata4: SATA link........
  • rsync preserve attributes, permissions/ownership and times without being root non-root user


    One of the purposes of rsync is to backup whole filesystems and archive them but how can you do that properly and restore things to normal if all permissions and ownerships are not preserved from your root filesystem? It's not desirable to have everything running as root, especially not just for an rsync. The Easy rsync preserve permission solution for non-root users sudo is the answer and all you have to do is edit /etc/sudoers At the end o........
  • Ubuntu/Debian DRBD 8.0 Setup Guide


    I've only used it on Centos, soI thought I'd make a quick Debian guide: Install the DRBD Package apt-get install drbd8-utils Reading package lists... Done Building dependency tree Reading state information... Done The following packages were automatically installed and are no longer required: libswfdec-0.8-0 Use 'apt-get autoremove' to remove them. The following........
  • VMWare Server cannot connect to web interface SSL Handshake on client connection failed: SSL Exception


    VMWare log: /var/log/vmware/hostd.log SSL Handshake on client connection failed: SSL Exception sudo /etc/init.d/vmware-mgmt restart Stopping VMware management services: VMware Virtual Infrastructure Web Access VMware Server Host Agent&nb........
  • VMWare Server is on SSL port 8333


    I'm mentioning this because I keep forgetting what port the management is on for the web interface (since newer releases of VMWare server took away the superior stand alone client). So remember it is port 8333 and sometimes you need to restart vmware-mgmt service and also enable sslv2 in your Firefox or it won't connect.........
  • Outsourced VPS Support


    The Xen VPSI had was not working properly and when they asked for the login information I found the support was coming directly from India: whois 122.178.148.* [Querying whois.apnic.net] [whois.apnic.net] % [whois.apnic.net node-5] % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html inetnum: 122.178.128.0 - 122.178.191.255 netname:&........
  • yum in Centos 5/Xen halts and exits suddenly


    yum exits in the middle The problem is this VPS seems to be an OpenVZ template from HyperVM. The only way to make it work was to disable i386 packages since this was an x64 kernel. That shouldn't be necessary but it was the only way to make yum stop quitting after the first package or two. I couldn't find any issue by checking the logs either. echo y|yum install vim-minimal telnet expect jwhois net-tools slocate iptables elinks gawk L........
  • vzquota : (warning) Incorrect quota shutdown for id 2333, recalculating disk usage vzquota : (error) quota check : lstat `sess_a5078fce5f569e453ab1fb39b0fc69f8': No such file or directory vzquota on failed [1]


    first container would not come up: Starting CT 2333: service vz stop OpenVZ is locked [FAILED] 2010-11-29T23:26:23-0800 vzctl : CT 2333 : Starting container ... 2010-11-29T23:37:21-08........
  • mdadm RAID 1 adventures


    I separated the 2 drives in the RAID 1 array. 1 is the old one /dev/sda and is out of date, while the separated other one /dev/sdc was in another drive and mounted and used with more data (updated). I wonder how mdadm will handle this: usb-storage: device scan complete md: md127 stopped. md: bind md: md127: raid array is not clean -- starting background reconstruction raid1: raid set md127 active with 1 out of 2 m........
  • WD (Western Digital) Advanced Format Drive Lagged/Slow Speed/Performance/Design Flaw EAD/EARS problem WDC WD20EARS-00S8B1


    Let the numbers speak for themselves, from what I read the Load_Cycle_Count which is very high (more than 500,000/half a million times) is the number of head parks. What a stupid"Green" design and design flaw which will probably mean an early life for the drive. This is almost as silly as Seagate's new reputation for BSY/poor quality disks since the 7200.11 series. To make it worse this is also when Western Digital introduced "Advanced Format" o........
  • VirtualBox some USB passthrough devices greyed/grayed out unavailable solution


    The solution is simple but it's a wonder why VBOX doesn't address it directly? Perhaps newer versions will but you have to add your user to the "vboxusers" group and then login and logout and you'll see the devices you wanted but couldn't access are now available. The weird thing is that the grayed out issue doesn't happen with all devcies but one notable thing is the Apple iPhone especially in DFU or Recovery Mode which is an big issue for some people.........
  • Ubuntu 10.04/GRUB2 mdadm won't boot


    Moving to RAID was a pain. What you have to do is the following from an existing install: Install mdadm Create your mdadm RAID 1 array on your spare hard drive. Start it with the missing disk. rsync the entire contents of your current / to the md partition. Here's a good way of doing it: rsync -Pha --exclude=/proc/* --exclude=/sys/* --exclude=/mnt/* /. /mnt/md2........
  • PHP Email Attachment Corrupt Solution


    I couldn't figure out why this wouldn't work, a test script in the root of my htdocs folder worked fine. Within some subdirectories the same code would produce different base64 results but I didn't know hwy. Archive: /tmp/archive.zip Zip file size: 6888 bytes, number of entries: 92 error [/tmp/archive.zip]: missing 242827681 bytes in zipfile (attempting to process anyway) error [/tmp/archive.zip]: attempt........
  • GNOME/Nautilus Resize Images/Pictures from File Manager by right clicking


    Just install the following package "nautilus-image-converter" and you will be able to right click any image and convert the size and rotate it. My only wish is that you could also convert the image type from say tiff to jpg etc... This is an awesome/handy/feature and great tool to have. This is one way where GNOME/Nautilus excel, the possibilities are endless to simplify and make simple/mundane tasks quicker and more efficient than ever.........
  • PHP CURL SSL won't work or connect


    I spent so much time debugging this, most sites don't tell you a very important option to use with CURL and you will only find out this is the problem by running the PHP script from the command line you get the following output that shows the issue (I don't see any way to get this output from Apache itself). * About to connect() to ip.ip.ip.ip port 25000 * Trying ip.ip.ip.ip... * connected * Connected to ip.ip.ip.ip (ip.ip.ip.ip) port 25000 * succes........
  • Error: DBus error org.freedesktop.DBus.Error.ServiceUnknown: The name :1.1127 was not provided by any .service files Please select another viewer and try again.


    This is an SFTP mount that does not work or prompt for password. Error: DBus error org.freedesktop.DBus.Error.ServiceUnknown: The name :1.1127 was not provided by any .service files Please select another viewer and try again. It seems to me that the connection often times out after being opened and the application doesn't know how to handle the disconnection and doesn't realize it needs to kill the instance and restart the connection.........
  • connect: No buffer space available Oct 18 12:21:03 vps kernel: printk: 177 messages suppressed. Oct 18 12:21:03 vps kernel: Neighbour table overflow.


    ping test.com connect: No buffer space available /var/log/messages Oct 18 12:21:03 vps kernel: printk: 177 messages suppressed. Oct 18 12:21:03 vps kernel: Neighbour table overflow. Solution in /etc/sysctl.conf: net.ipv4.neigh.default.gc_thresh1 = 4096 net.ipv4.neigh.default.gc_thresh2 = 8192 net.ipv4.neigh.default.gc_thresh3 = 8192 net.ipv4.neigh.default.base_reachab........
  • [function.vB-Registry-include]: failed to open stream: No such file or directory in /www/vhosts/site.com/forums/includes/class_core.php on line 2394


    [function.vB-Registry-include]: failed to open stream: No such file or directory in /www/vhosts/site.com/forums/includes/class_core.php on line 2394 This happens on a new vBulletin install where you haven't created the config.php file. Simply copy the config.php.new file into config.php and you'll be good to go.........
  • NotifyByPopup::slotDBusNotificationClosed: 465 -> 0 knotify(31135) NotifyByPopup::slotDBusNotificationClosed: failed to find knotify id for dbus_id 465


    I keep getting this in my SSH/Bash console: NotifyByPopup::slotDBusNotificationClosed: 465 -> 0  ........
  • DRBD WFConnection Problem/Solution


    This has stumped me a few times because I keep forgetting that Centos 5.5 comes with a default iptables configuration that ends up blocking DRBD traffic,I tried all the normal things and couldn't understand why I couldn't make my normal DRBD config work. So if you have WFConnection problems and have tried the normal "mailing list" fixes, check your firewall status first! Both Nodes Say the Following: version: 8.3.8 (api:88/prot........
  • VirtualBox Error Failed to start the virtual machine Centos 5.5 Mirror. Medium '/home/testuser/.VirtualBox/HardDisks/Centos 5.5 Mirror.vdi' is not accessible. UUID {a1a9fad7-0402-4867-b8f3-39fb49454bc5} of the medium '/home/testuser/.VirtualBox/HardD


    Virtualbox Error I tried to copy a .vdi of one container to use in another one, basically to clone instead of having to install the OS again. Failed to start the virtual machine Centos 5.5 Mirror. Medium '/home/testuser/.VirtualBox/HardDisks/Centos 5.5 Mirror.vdi' is not accessible. UUID {a1a9fad7-0402-4867-b8f3-39fb49454bc5} of the medium '/home/testuser/.VirtualBox/HardDisks/Centos 5.5 Mirror.vdi' does not match the value {4945a0e8-0ed5-4736-9088-bcaf........
  • Ubuntu 10.04 Linux is still not ready for the Desktop world


    I am a huge fan of Linux and the idea of OpenSource but I've said it many times, there are still hurdles in today in 2010 for Linux as a Desktop. Linux is still intended for servers at its very core. This can be changed succesfully though, as Apple has shown us with Mac OS X based on FreeBSD. Half of the issue is lack of driver support and the other half is the Linux Kernel and Window Manages, KDE and GNome still both don't cut it (but they're getting closer). I'll........
  • GNOME/Ubuntu how to navigate without a keyboard


    The most basic is the start menu, which is accessed with Alt+F1........
  • How to Enable SMART on a device


    smartctl -a -d ata -T permissive --smart=on /dev/sda -d ata is usually required for most SATA drives or you get an error. -T permissive is required if it's the first time you are running SMART on this device (it's not enough just to enable SMART in the BIOS) --smart=on is also required for the first time........
  • Local policy does not permit you to log on interactively. - Solution/Fix


    For a standalone system the solution is simple, just use the same version of Windows a copy a good version of: C:windowsSecurityDatabasesecedit.sdb from another computer. Then you should be able to login again without getting the nasty message "Local policy does not permit you to log on interactively." Of course you will probably need a way of accessing the filesystem off-line in order to get to it such as a Linux boot disc. Some........
  • jailkit for chroot ssh account security tutorial and fix for error


    This was done on Centos butI think it's easier on Debian machines, the paths that it is set to use are tailored towards Debian, so there is some fiddling that needs to be done on Centos. This is for chrooting ssh, but jailkit has other uses than just SSH jails but I won't cover them in this writeup. 1. Install jailkit yum install jailkit 2. Setup Jail Home mkdir /home/jail chown root:root /home/ja........
  • exim high load and dozens of processes


    This server was experiencing loads of up to 80 and maxing out the RAM and kmemsize on a CPanel VPS. There were literally dozens if not hundreds of exim processes. I have no idea why exim has such a design that would allow it to consume this much CPU and RAM. Any normal MTA should not be spawning so many processes, it should be processing them in sequence and if it is going to spawn hundreds of processes in response to a large volume of mail, it's better to have a delayed del........
  • mencoder Linux CLI video editing how to encode video file into xvid and split by time into multiple parts


    Mencoder is great, you can throw anything at it, including video files from your camera and have it encode into xvid or almost any other format. In my case I took 640x480 video from my Canon and reduced the size by 1/3 with the options below (there are many other options that you can read about in the manual but I like to keep it simple). Mencoder Encode mencoder -ovc xvid -oac mp3lame -xvidencopts fixed_quant=4 -o ........
  • Linux Burn MP3 CD On the Fly using


    I finally decided to look into some utils that did this, and the first one I found is "mp3burn". It is unbelievable simple and perfect. *2017-11 update and mp3burn is still available in standard repos such as Ubuntu 14/16 so this is a current and working project. Just install the package and it gets all required libraries to convert and then burn's on the fly. And you won't believe how simple it is. I just want to a directory that had the MP3's I wanted t........
  • Realtek r8169 1gbit/1000mbit NIC/Ethernet Goes Down/Halts on Large File Transfer/Heavy Network Usage


    This is obviously a bug in the r8169 kernel module and it seems to affect a lot of people. I upgraded to the latest kernel and hope this won't happen anymore, as it is a very serious error. This is especially serious for those who are running servers with this chipset, who can afford for the NIC to randomly go off-line for no apparent reason? [655548.189113] type=1505 audit(1277067560.902:5): operation="profile_load" name="/usr/bin/freshclam&q........
  • FUSE/Curlftpfs mount ftp account as drive partition in Linux


    This is a great way to use your ftp server space, for example on your web hosting account (althoughI believe many hosts don't allow storage like this), but if you have a VPS/Dedicated Server etc.., this would be perfect. Imagine how easy it is to work with an ftp account that you can just mount as a normal partition or directory in Linux, it would be great for backups etc.. Name curlftpfs - mount a ftp host as a local directory Synopsis........
  • Install Mac OS X 10.4.6 Tiger on AMD32 VMWare


    *Note OS X is strange to install, I thought my HDD was not being detected by you just have to go to Diskutil and create a partition for the root filesystem and then close/move the Window and proceed with the install. After install Mac OS X 10.4.6 Tiger I get a black screen that says: b0 error Most people say the partition has to be marked as "active", actually that just means marked as "bootable". Instead of t........
  • LUKS/cryptsetup Tutorial for Linux Hard Drive Partition Encryption


    This is based on Debian Linux but should apply equally to any *nix distro. Install LUKS/crypt-setup apt-get install cryptsetup Setup your LUKS Partition Of course change /dev/md2 with whatever partition you intend to use LUKS on. cryptsetup --verbose --verify-passphrase luksFormat /dev/md2 You'll be asked to verify your decryption password twice *DO NOT FORGET THIS PASSWORD AS IT IS NOT RECOVERABLE!........
  • Use rcconf to edit startup/init.d/init scripts on Debian/Ubuntu based distributions


    I've never understood how to enable and disable services for different run levels in Debian based distros, it's just weird, annoying and doesn't make sense. I much prefer chkconfig from RHEL. Just install the package called 'rcconf' and be done with it. rcconf makes things easy for you. apt-get install rcconf Reading package lists... Done Building dependency tree Reading state information... Done........
  • Fix Slow 2D Graphics Xorg.conf Ubuntu/Debian/Mandriva Linux


    I'm using Ubuntu 8.04 but anyone using older kernels will find this may apply to them. My Intel graphics are very slow with the default Xorg settings but by using "EXA" acceleration, scrolling down windows of text becomes pretty snappy. Just edit /etc/X11/xorg.conf Section "Device" Identifier "Configured Video Device" &nb........
  • cPanel complaint - No Shared SSL! cPanel 11.25.0-R46156 - WHM 11.25.0 - X 3.9


    I've recently used CPanel on the admin side for the first time and have to say I hate it. Everything from the layout to the functionality screams "hackish". It just lacks so many common sense features and way of working. I was never 100% impressed with Plesk but the basics were definitely laid out and done in a sensible manner, even though it is made by a Russian company, they definitely thought about how to make a Control Panel. I have no idea why people........
  • How To Set DHCP/Static IP Address in Centos/RHEL/Fedora & Debian/Ubuntu/Kubuntu/MEPIS Set DHCP/Static IP Address


    Basically the two main types of distros are Debian and RHEL/Centos based. I'm just going to give a quick overview of how the configuration of IP interfaces works in Debian/Centos based distros. *Just one thing to remember, when setting IPs statically you have to manually specify a DNS server in /etc/resolv.conf (since DHCP is what normally does it automatically) Debian/Ubuntu/Kubuntu/MEPIS The IP (DHCP &........
  • mdadm force/fix proper md127 name


    I have an md0 arary that my Centos install refers to. I feel this is half the reason why it won't boot anymore. I saw the initrd for Centos was assembling it as md127 even though it was known as md0. The reason for this is because I used mdadm --assemble --scan to detect the array on a LiveCD. I had no idea this name would stick (but now I realize the name is permanently stored in the metadata once you mount md127 or whatever random name assemble gives it). W........
  • Openvz Enable Most Common iptables modules


    The default options for iptables are very basic. Here is what you need to do in order to enable them in OpenVZ. 1.) Add the modules to iptables and restart iptables: vi /etc/sysconfig/iptables-config Edit the line as so: IPTABLES_MODULES="ipt_REJECT ipt_tos ipt_TOS ipt_LOG ip_conntrack ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_state iptable_nat ip_nat_ftp" 2.........
  • MySQL Recover/Reset Lost/Forgotten root Password


    One note is to secure MySQL, I don't know for sure but I believe you could login to MySQL remotely with no password during this operation (I'm not sure, maybe it doesn't accept blank passwords but I firewall MySQL port anyway and recommend you do the same). First edit /etc/my.cf Under the [mysqld] field add the following line somewhere: skip-grant-tables Now restart mysql: service mysql restart or on Debian sty........
  • Debian 5.04 RAID 1 mdadm boot problem GRUB error


    I successfully created a single RAID 1 partition which includes /boot inside it and my root directory through the Debian installer. It said GRUB installed successfully but when I try booting the OS it seems GRUB can't read anything. When trying to boot from GRUB GRUB Loading stage 1.5. GRUB loading, please wait... Error 2 I get "Error 2" when trying to boot Debian. I also notice from a LiveCD that........
  • Centos 5.5 RAID 1 boot issue


    I installed 5.5 with a 300GB RAID 1 partition (boot is also on this partition). It booted up fine the first few times until after I used a Live CD and accessed the array, and it became named /dev/md127 for some reason. Now whenI boot into CentOS I get a kernel panic and different errors, once I got "invalid superblock", even though the array is fine (it didn't happen again, probably because I was sure to dismount and stop the mdadm array properly). Here's what........
  • Intel Corei5 750 Complaint/Onboard Video Issue on Intel H57 chipset not working


    Do you have an LGA1156 board and wonder why your onboard video isn't working? It's probably because there is no GPU integrated on the board itself, it is supposed to be on the CPU and new CPU's from Intel don't come with it! I was shocked to learn that you can buy a motherboard with onboard video which doesn't work. Inever knew it was being done or possible, but to make it worse the latest Core i5's don't have video on the die of the CPU. This means having on........
  • Gigabyte GA-H57M-USB3 Complaint Review/Comments


    I'm not impressed with this motherboard, I was impressed with my Gigabyte AM3 board which seems to work flawlessly. Everyone knows that the firmware is flawed, even though I have the F6, it still seems that the system doesn't reset properly or quickly enough. Another HUGE problem is that in most Linux kernels the NIC won't work (if you try 10 times by rebooting it might). I also notice that you need to power down for it to work. This board does not seem very com........
  • Compile PHP 5.3.2 on Centos 5 and CPanel/WHM because of error - Fatal error: Call to > undefined function imagecreatefromjpeg()


    This function and others may not work with the stock PHPinstall on Centos/CPanel: Fatal error: Call to > undefined function imagecreatefromjpeg() Even with libjpeg-devel installed it won't work because PHP was not compiled with jpeg support, so we have to do the dirty work ourselves :) Here is the command/yum's I did to install missing libraries for PHP that configure will complain about (yes it is a one by one process). yum install bzip2-........
  • Unixbench Score on Core i5 750 with OpenVZ Kernel vs Xen/Openvz


    This was unbelievable how much the Xen kernel slows things down, keep in mind both tests were done on the hostnode, one was with the Openvz-Xen hybrid kernel and the other was just OpenVZ. You can see the performance difference is nearly 300% better when not using the Xen kernel. OpenVZ-Xen Kernel Test Results (I was wondering what was wrong/so slow with my Core i5!) # # # # # #&n........
  • WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!


    The easiest way is if you have a secure way to connect and verify the hostkey of the remote host by using this guide. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS POSSIBLE THAT SOMEONE IS DOING SOME........
  • Canel Default VHOST DocumentRoot/Contents Directory is /usr/local/apache/htdocs


    This can be very annoying and CPanel doesn't seem to document it, or it's not found or made as obvious as it should be. It's always funny when I find it more difficult to work with a control panel than to do everytihng manually without CPanel or even Plesk. So once again, the default serve path for contents is: /usr/local/apache/htdocs and this is especially applicable when accessing Apache by just an IP which is unbound to any domain at this point.........
  • OpenVZ user_beancounters kmemsize failcnt Processes Timing Out/Doing Nothing/Zombie


    cat /proc/user_beancounters produces the following: kmemsize 1861537 5139870 12752512 12752512 26965041 Notice the failcnt "26965041", that is for kmemsize and at first it confused me. The system had enough guaranteed and enough burst RAM available. kmemsize is a variable indepedent of that, but who cars about the explanation right, let's just make thing........
  • CPanel OpenVZ VPS Error - *** Notice *** No working loopback device files found. Try running `modprobe loop` as root via ssh and running this script again.


    Ihave no idea how to get the loopback device working in OpenVZ, but what's more frustrating is that I purchased a CPanel license for my VPS and clearly it is not "VPS Optimized". Although everything does seem to work at this point despite that error. The suggestions here: http://forum.openvz.org/index.php?t=msg&goto=1339 don't seem to work at all. This is an OpenVZ issue, but also a CPanel isue, why on earth would loopback support be expected in a VPS a........
  • SSH Automatic/Passwordless Logon - Setup Public Key Encryption In Single Command


    This is a very simple solution, but most guides out there make you login twice (once to scp the key) and once to put the key in authorized_keys. There's no need for that. If you don't already have a ~/.ssh/id_rsa.pub just type "ssh-keygen -t rsa" and keep hitting enter until it's done :) Just use this code to easily enable passwordless login with SSHD key=`cat ~/.ssh/id_rsa.pub`;ssh user@192.168.5.25 "echo $key >> ~/.ssh/auth........
  • Linux 2.6.33.3 Kernel Error CC drivers/message/fusion/mptsas.o drivers/message/fusion/mptsas.c: In function `mptsas_port_delete': drivers/message/fusion/mptsas.c:106: sorry, unimplemented: inlining failed in call to 'mptsas_set_rphy': function b


    CC drivers/message/fusion/mptsas.o drivers/message/fusion/mptsas.c: In function `mptsas_port_delete': drivers/message/fusion/mptsas.c:106: sorry, unimplemented: inlining failed in call to 'mptsas_set_rphy': function body not available drivers/message/fusion/mptsas.c:462: sorry, unimplemented: called from here make[3]: *** [drivers/message/fusion/mptsas.o] Error 1 make[2]: *** [drivers/message/fusion] Error 2 mak........
  • mdadm Linux Software RAID auto-detect and assemble RAID Array


    mdadm --assemble --scan mdadm: /dev/md/diaghost05102010:2 has been started with 2 drives. mdadm: /dev/md/diaghost05102010:1 has been started with 2 drives. mdadm: /dev/md/diaghost05102010:0 has been started with 2 drives. -bash-3.1# cat /proc/mdstat Personalities : [linear] [raid0] [raid1] [raid6] [raid5] [raid4] [multipath] md125 : active raid1 sda1[0] sdb1[1] 14658185 blocks super 1.2........
  • rsync halted froze Out of memory: kill process 7559 (rsync) score 635 or a child Killed process 7559 (rsync)


    Out of memory: kill process 7559 (rsync) score 635 or a child Killed process 7559 (rsync) I was surprised to see this in my dmesg whenmy rsync backup suddenly stalled/stopped. This system has 3 gigs of RAM and lots of free memory so I don't understand what is happening. rsync invoked oom-killer: gfp_mask=0x200d2, order=0, oomkilladj=0 Pid: 7600, comm: rsync Not tainted 2.6.24.2 #83 [] oom_kill_pr........
  • rsync my favorite/best/optimal default switches and options


    Not sure what rsync switches/options to use? rsync -PDrphogtl The short version would be: rsync -Pha I think these are really common sense options to use and probaby should be the default. Explanation of rsync switches P = display the progress D = hybrid of --specials and --devices so all special and device files will be copied as well. r = recursive (otherwise rsync won't copy files deeper than........
  • Seagate Drive 500GB Drive Dying


    This drive is clearly on the way out, the Kernel knows it but I'm surprised that SMART is not concerned. I didn't blame Seagate for their past issues until now. This hard drive has hardly been used and has not even been powered on for a year according to SMART. Home page is http://smartmontools.sourceforge.net/ === START OF INFORMATION SECTION === Model Family: Seagate Barracuda 7200.11 Device........
  • MySQL TEXT field size length limit reminder, don't truncate your data!


    I thought there would be an error message or warning from MySQL in the case that the text you submit is greater than the allowed limit based on the field. So essentially I submitted text that was about 120,000 characters long, whereas the limit of TEXT is just 65,535 characters! I almost lost half of my data/what I typed without knowing it! I just altered the field type in my database from TEXT to LONGTEXT. I can't see how LONGTEXT wouldn't be long enough for MOST........
  • Seagate 7200.11 firmware defect in 500GB, 1000GB (1TB) and 1500GB (1.5TB) Hard Drives


    Seagate Inventory/Firmware Check I heard about this issue a long time ago but never looked into it. I figured I wasn't affected since my 500GB drives were running for so long. I've been using Seagate's since 2002 and to this day all of the drives I have are alive from Seagate. *Update the bad news is that I realize one of my 500GB's is about to die, it's not even a year old, but is also not affected by the recall according to Seagate! Seagate Inventory/Firm........
  • Linux AHCI Hotswap Tips - Remember To Reread The Partition Table WITHOUT rebooting


    From the package "parted" you can use the command "partprobe" to re-read the partition table. I really hate rebooting, and that's what Iloved to hear about AHCI motherboards, that they allow hotswap so you don't have to reboot. But that's only as good as the OS, if the OS does not reload the partition table you won't be able to do anything with that new drive you attached without rebooting. Yes, even without re-reading the partiton table Linux will........
  • nginx - the ultimate load balancer


    You can find it for free at http://nginx.org/ I find nginx is simpler to setup than pound (it's not hard but I found it unintuitive and annoying), it seemed to make some basic setups overly complicated with the config file syntax. nginx on the other hand is perfectly suited in everyway, it is even simpler to setup and seems to be the most stable and most efficient any load balancer. I would go as far as to say that a good nginx setup is more relia........
  • Convert HDD/Hard Drive Partition(s) into non-RAID into RAID 1 using existing data without data loss and without reformatting.


    Before we start I take no responsibility for this, you should have a backup and if you make a mistake during this process you could wipe out all of your data. So backup somewhere else before starting this as a precaution, or make sure it's data you could afford to lose. The RAID 1 Setup (Hardware Wise) I've already setup my 2 x 1TB (Seagate) drives with identical partitions, make sure your new hard drive (the empty one) is setup like your curr........
  • Monitor MB/s Disk IO Usage/Bandwidth - Use iostat from the sysstat Package


    The binary "iostat" comes from the package "sysstat" and is available on all Linux/Unix like platforms. Use the "-m" option to give you what you probably want, which is to see in MB/s how much bandwidth each disk is doing. iostat -m Linux 2.6.24.2 ((none)) 04/16/10 avg-cpu: %user %nice %system %iowait %steal %idle ........
  • tar gzip: stdout: File too large - Error Size Limit on Large file > 17GB


    The folder I was trying to archive is about 72GB, but much like rsync at about 17GB it chokes because of the filesize. What's with so many common and essential Linux tools having such limitations? I guess it is likely that the authors never wrote their code with the idea that files would be so large but it's still very annoying. It's important to stay on top of these limitations on production servers because I didn't realize what happened until I checked the file with "........
  • Rsync Timeout/Stall On Large files bigger than 16GB/Cannot Transfer large files with rysnc


    The last transfer I was able to do was 16.77GB according to rsync's output and it worked fine. 16.77G 100% 10.66MB/s 0:25:00 (xfer#17484, to-check=234753/256249) But on a file over 17GB (gigs) it stalls. Trust me, it really is stalled, it's been about 8 hours with no progression from that point for some reason. 17.24G 54% 10.65MB/s 0:22:07........
  • Picking an FTPD (vsftpd) Server in Linux Centos/Debian


    I decided on using yum to help me decide even though I normaly use proftpd I decided to see what else I could find. yum search ftp Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * rpmforge: ftp-stud.fht-esslingen.de * base: mirrors.netdna.com * updates: updates.interworx.info * addons: yum.singlehop.com * extras: mirrors.netdna.com rpmforge........
  • OpenVZ backup container to a single file while it's running using "vzdump"


    Proxmox has made this free utility to backup running OpenVZ containers. It's a great program which is actually just a PERL script but gets the job done. This program is not 100% required because all it really does is cp -a from your container's path as far as I know but it is still good to have uniformity to how you backup your containers. For RPM distros such as Centos/RHEL/Fedora etc.. download and install this: wget http://www.proxmox.com/cms_proxm........
  • Compaq V2405CA Laptop - Unixbench Performance Test


    Here are the results, it is Sempron 3000+ AMD Mobile, 500Gig HDD, 512MB RAM with shared ATI Radeon graphics. # # # # # # # ##### ###### # # #### # # # # ## # # # #&nb........
  • heartbeat is stopped for some reason


    heartbeat is stopped for some reason Anyway hnode2 was active and the services are running fine but I see heartbeat has been stopped somehow. Here is the last log I see of heartbeat: [quote:23c84415f5] Sep 9 17:15:32 hnode2 heartbeat: [16738]: info: MSG stats: 9/1762471 ms age 0 [pid16738/MST_CONTROL] Sep 9 17:15:32 hnode2 heartbeat: [16738]: info: cl_malloc stats: 716/51784021 152624/74519 [pid16738/MST_CONTROL] Sep 9 17:15:32........
  • PHP cannot access /usr/bin/openssl


    PHP cannot access /usr/bin/opensslI have verified the username that runs the process is able to access /usr/bin/openssl and it does exist but the PHP script is saying it doesn't exist: [code:1:1fd0f3abbe] if (!file_exists($OPENSSL)) { //echo "ERROR: OPENSSL $OPENSSL not foundn"; }[/code:1:1fd0f3abbe] I don't get itI can clearly see the contents of /usr/bin by using the PHP system fu........
  • JavasScript how to set or write value in id tag


    JavasScript how to set or write value in id tagbla I need to set a value inside that DIV tag using Javascript, how would I do it?Doesn't work for me: [quote:c6b5f693a5]Warning: Element referenced by ID/NAME in the global scope. Use W3C standard document.getElementById() instead. Source File: http://hosting.com/vps-order.html Line: 19[/quote:c6b5f693a5] [code:1:c6b5f693a5]........
  • SSH automatic login without password


    SSH automatic login without passwordlocal> ssh-keygen -t rsa -f .ssh/id_rsa -t is the encryption type -f tells where to store the public/private key pairs. In this case, the .ssh directory on home is being used A password will be asked; leave this part blank, just pressing Now, go the .ssh directory, and you will find two new files: id_dsa and id_dsa.pub. The last one is the public part. Now, copy the public key to the serv........
  • CREATE Database/Granting Privileges


    CREATE Database/Granting PrivilegesCREATE your first database Code: [code:1:0668cd8e74]CREATE database myfirstdb; [/code:1:0668cd8e74] CREATE a user for your first database This one creates the user 'sqladmin' and gives them 'usage' on your new database 'myfirstdb' Code: [code:1:0668cd8e74]mysql> GRANT usage on myfirstdb.* to sqladmin@localhost; Query OK, 0 rows affected (0.00 sec)[/code:1:0668........
  • Setup Static IP Address ONBOOT


    Setup Static IP Address ONBOOTAssuming you are using eth0 Note this will work for any version of CentOS and basically any version of Redhat Linux or Redhat based distribution. You would need to create a new file [code:1:02f8d34c30] /etc/sysconfig/network-scripts/ifcfg-eth0:0[/code:1:02f8d34c30] DEVICE=eth0:0 the ":0" at the end specifies alias 0 we could actually change this to ":99" or "........
  • Updated to Version 3.8 and can't login


    Updated to Version 3.8 and can't loginSSHD accepts my password but then hangs at "Last login: Wed Sep 13 21:30:02 2006 from" This occurred during a yum update after upgrading my release, installing the new kernel and rebooting. I got kicked out of sshd after seeing the following during yum update: telnet 100 % done 85/476 tux 100 % done 86/476 ntsysv 100 % done 87/476 rpmdb-redhat 94 % done 88/476........
  • Telus + 2Wire 2700 Router Horrible


    Telus + 2Wire 2700 Router HorribleWell first of all let me say this is the only router/switch that sometimes seems to crash/disconnect computers on the local network. This device also thought it would be smart to block VOIP packets coming from my Sipura ATA VOIP adapters so I disabled the [quote:cb89ba7bff]"Invalid TCP Flag Attacks (NULL/XMAS/Other)"[/quote:cb89ba7bff] option Then all of a sudden I couldn't get onto any web pages, the wireless........
  • SSH Public Key Authentication (Login Without Passwords)


    SSH Public Key Authentication (Login Without Passwords)I've gone over this before but just a quick note! the "authorized_keys" file in ~/.ssh must be chmodded to "600" or public key authentication won't work. I guess it's kind of a security/failsafe feature that I've seen on all Linux and Unix OS's........
  • Xorg fonts missing Xorg.0.log


    Xorg fonts missing Xorg.0.logThis happened on a PCBSD installation but it could happen on any Unix/Linux Xorg installation: If the text on your screen is too small and you're running at a high resolution if you do a [code:1:04ca0d3455]cat /var/log/Xorg.0.log | more [/code:1:04ca0d3455] You'll see a bunch of fonts missing, specifically the 75dpi and 100dpi ones that you really need :) (WW) The directory "/usr/X11........
  • E-Mail Tip


    E-Mail TipI just thought I'd give you guys a good tip about e-mail. It seems a lot of people like to use a Hotmail or ISP (eg. Telus) account for their e-mail but the problem is what happens if you switch ISPs, then your e-mail address no longer works and old friends might not be able to contact you. The same thing has happened for excite.com e-mail addresses where they just shut down. Whether you are a business owner or personal user can you afford to lose an e-mail........
  • Vonage & Linksys Offer Trade-In Program


    Vonage & Linksys Offer Trade-In ProgramVonage & Linksys Offer Trade-In Program Monday, June 13 @ 09:22:36 PDT Vonage is offering customers a way to get a free 802.11g router when they turn in their old one. advertising For a limited time, customers can trade-in their used router any brand, any model for a Linksys Wireless-G Router with 2 Phone Jacks for broadband telephony (WRTP54G) for free (after rebates), when they si........
  • The New Chips on the Block


    The New Chips on the BlockThe New Chips on the Block By Bruce Gain Story location: http://www.wired.com/news/infostructure/0,1377,67795,00.html 02:00 AM Jun. 13, 2005 PT We have embarked upon a new era in x86 PC computing -- so say chip giants AMD and Intel following their launches of dual-core PC processors. So how will dual-core processing change your PC computing experience? Our FAQ should help you decide whether or when you sho........
  • Intel's Finnish Fetish


    Intel's Finnish FetishIntel's Finnish Fetish By Dave Mock June 13, 2005 Chipmaker Intel (NASDAQ: INTC) has successfully topped the personal computer market for decades. Breaking into related areas such as communications has been much difficult for the world's largest semiconductor maker. But a new partnership with Nokia (NYSE: NOK) could help to change that. Intel's forays into cellular-phone and home-entertaiment-device chips have........
  • Starting/Creating Services


    Starting/Creating Serviceshttp://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/configtuning-starting-services.html That might help........
  • MySQL root password


    MySQL root passwordWhen I installed MySQL I didn't set a root password nor do I know what it is![/b]........
  • MySQL Server 3.23 won't start after switching from 4.1


    MySQL Server 3.23 won't start after switching from 4.1I was using a 4.1 alpha version of mysql-server and some how version 3.23 of the client and 4.1 of the client were also both installed! So I forced uninstalled everything because after trying and trying even though MySQL server was using the short 16byte password authentication I got some other errors. After trying with the ports and having it fail because I had existing database data I force installe........
  • FreeBSD Desktop OSs


    FreeBSD Desktop OSsI would probably choose these over Linux. In many ways these are probably more stable and just as easy to use as any Linux distros but the benefit of stable, updated and secure packages! PC-BSD - http://www.pcbsd.org DesktopBSD - http://www.desktopbsd.net/index.php?id=37 Personally PC-BSD is Beta at this point and is not easy if you are installing it on a non-primary partition. I have not used Deskt........
  • PHPBB Drop All Tables


    PHPBB Drop All TablesSQL Syntax: [quote:75acd496c1]drop table phpbb_auth_access, phpbb_banlist, phpbb_categories, phpbb_config, phpbb_confirm, phpbb_disallow, phpbb_forum_prune, phpbb_forums, phpbb_groups, phpbb_posts, phpbb_posts_text, phpbb_privmsgs, phpbb_privmsgs_text, phpbb_ranks, phpbb_search_results, phpbb_search_wordlist, phpbb_search_wordmatch, phpbb_sessions, phpbb_smilies, phpbb_themes, phpbb_themes_name, phpbb_topics, phpbb_topics_watch, phpbb_user_group, p........
  • Comment lines in #htaccess


    Comment lines in #htaccessYou can create a hash '#' at the beginning of the line: eg: [quote:2d67449f2c]#[/quote:2d67449f2c]........
  • Helpful IPFW Examples


    Helpful IPFW ExamplesSomeone's real life examples: http://lists.freebsd.org/pipermail/freebsd-security/2004-July/002181.html Or you can try the FreeBSD Handbook guide: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipfw.html........
  • Proftp Passive Ports


    Proftp Passive PortsIf you use a locked down firewall you can edit proftpd.conf and tell it something like this: [quote:8419cab1f8]PassivePorts 6170 6270[/quote:8419cab1f8] That would force all passive ftp traffic to ports 6170 6270 which you could then open on your firewall rather than leaving open ports 1024-65000 open........
  • Bash Script Info


    Bash Script Infohttp://www.faqs.org/docs/Linux-HOWTO/Bash-Prog-Intro-HOWTO.html#ss10.5 http://www.scit.wlv.ac.uk/~jphb/spos/notes/shell/shell5.html http://quong.best.vwh.net/shellin20/#LtohTOCentry-41 http://www.cactus.org/~dak/shellscript.html http://db.ilug-bom.org.in/Documentation/abs-guide/ http://pegasus.rutgers.edu/~elflord/unix/bash-tute.html http://heather.cs.ucdavis.edu/~matloff/UnixAndC/Unix/CShellII.html Since bash i........
  • sed is great for pattern matching or retrieving lines


    sed is great for pattern matching or retrieving linesHere is a cool example Say you type df: The output would be something like: [quote:3bb8d51437]Filesystem 1k-blocks Used Available Use% Mounted on /dev/hda2 1712432 1206664 418780 75% / /dev/hda1 31201 10505 19085 36% /boot none 30932 0 30932 0% /dev/shm [/quote:3bb8d51........
  • CVSUp the Easy Way


    CVSUp the Easy WayIf you're reading this you probably have never used CVSUp or don't know how. CVSUp can be used for two things or just one if you prefer. *Keeping your kernel up to date *Keeping your port list up to date Start by editing the following file in: [b:76928b387d]vi /usr/share/examples/cvsup/cvs-upfile[/b:76928b387d] It can be quite overwhelming with all the crazy options. Basically there are only 3........
  • Norton Antivirus is the worst - who would have known?


    Norton Antivirus is the worst - who would have known?http://www.software-antivirus.com/ Check the link above, that review site lists Norton as one of the ones to stay away from. With good reason too, I always wondered why Norton seemed to miss so many viruses, spyware and such. Even when it didn't, it was absolutely useless because it was either unable to delete the file and it was never able to repair or disinfect. So in essence, from my experience, N........
  • CDR Manufacturers - Why is so much media bad?


    CDR Manufacturers - Why is so much media bad?I have searched for good media and tried many kinds for years. I guess I'll try to summarize my findings and conclusions. Dye is irrelevant, dye of any color can be good or bad, it more likely depends on the manufacturer. Speaking of manufacturers, the name at the top of the disc means nothing. For example, Memorex along with any other 'brand' is actually always made by another manufaturer including CMC Mag........
  • African money SCAM


    African money SCAMI have received countless of these sorts of emails where the person claims to be from an African nation which has a deposed finance minister or some other strange situation which puts millions of dollars at their disposal. The only problem is that they need a partner to get the money out. And they have entrusted only you, yes that's right, to donate your bank account information along with SIN number so they can secretly wire the money over and you w........
  • Use Mozilla Firefox, not Internet Explorer - You'll be glad!


    Use Mozilla Firefox, not Internet Explorer - You'll be glad!Hey guys, I just thought I'd recommend that everyone switch to Mozilla Firefox as their web browser. You can find it at http://mozilla.org It is free and it is much better than IE. It has a built-in popup blocker which works great and most importantly, it doesn't have a million critical security flaws which could compromise your security such as passwords for on-line banking etc..........
  • Basic Port Listing


    Basic Port ListingHopefully someone finds this useful or at least interesting. http://www.sans.org/top20/#u9 Name Port Protocol Description Small services ........
  • My list of handy security links - Ongoing


    My list of handy security links - Ongoing[b:6f8d25be68][size=18:6f8d25be68]News[/size:6f8d25be68][/b:6f8d25be68] Security Focus http://www.securityfocus.net - Nice Security News Site CERT http://www.cert.org/ Common Criteria (see if your OS/software is EAL4 certified) EAL(Evaluation Assurance Levels is the industry standard for evaluation of security in software) http://www.commoncriteria.com [size=18:6f8d25be68][b:6f8d25be68]Tools[........
  • Other Security Web Sites


    Other Security Web SitesSeveral websites actively track security issues. This list provides you with the major providers of security information on the Web. Many of these organizations also provide newsletters and mailings to announce changes or security threats: Center for Education and Research in Information Assurance and Security (CERIAS) CERIAS is an industry-sponsored center at Purdue University that is focused on technology and relate........
  • Clustering Links


    Clustering LinksI thought this might be interesting for people with spare time. [b:6423c19973]Great clustering article from Linux Mag[/b:6423c19973] http://www.linux-mag.com/2003-11/clusters_01.html [b:6423c19973]General Linux cluster information[/b:6423c19973] http://www.gdargaud.net/Hack/ClusterNotes.html#HighA http://www.faqs.org/docs/Linux-HOWTO/Cluster-HOWTO.html#s3 http://www.yolinux.com/TUTORIALS/LinuxClustersAndFileSys........
  • Load Balancing/Clustering


    Load Balancing/ClusteringAn interesting article that discusses the pros, cons and viability of load balancing/clustering http://www.wwwcoder.com/main/parentid/493/site/4189/68/default.aspx ZoneEdit seems to offer an interesting Fail Over Service as well: http://www.zoneedit.com/doc/faq.html#fo........
  • Wireless/xmit power - DD-WRT v23 SP2 (09/15/06) std - build 3932 Linksys WRT54G/GL/GS


    I played around with xmit power (how much power in mW) to see if I could increase the range and signal strength. Idon't think this Linksys WRT54G's strength is the wireless, it seems to have poor signal quality and transfer rates all around. Ithink part of the problem is also that there are several wireless networks around my house that could be interfering and the walls are thick here. Anyaway, moving on now :) The default is 28mW and I increased it to........
  • SATA Power cable for 1U Server Solutions - Rosewill 8" SATA Power Cable Model RC-8"-PW-4P-2SA


    NewEgg is one of the few companies that stocks this great right angle 1U SATA power cable. I've purchased some no-name ones and they face the wrong way (towards the bottom of the chassis) which makes it worse/impossible than standard SATA connectors. The price is high but if you're building a 1U server and want SATA disks and don't have much space (eg. the 1U Supermicro cases) then these are simply a must and........
  • pound a Linux Load Balance and Reverse Proxy


    I have played around with Pound a little bit. It is a reverse proxy and load balancer in one, and it can be used as only a reverse proxy if you like. It is very simple to configure as either, and Pound even senses if one of the systems is down and stops sending requests to the dead server. It supports SSL (but passes the request to the destination server unencrypted) and even the Apache log format. Pound is very simple, fast a........
  • auth/auth_util.c:make_server_info_sam(840) User nobody in passdb, but getpwnam() fails! - SAMBA/SMB Error How To Fix


    auth/auth_util.c:make_server_info_sam(840) User nobody in passdb, but getpwnam() fails! I never found the solution to this in the web, as usual so Ithought I'd post the fix. In plain English smbd is telling us that the user "nobody" does not exist in /etc/passwd. You can simply add this to your /etc/passwd file like so: nobody:x:65534:65534:nobody:/nonexistent:/sbin/nologin Now SAMBA/smbd should........
  • Enable/Disable PHP Warnings/Logs and Errors from .htaccess with Apache


    Put what you see below into your .htaccessand it will enable errors and notices. (change on to off and 1 to 0 to disable though) php_flag display_startup_errors on php_flag display_errors on php_flag html_errors on Now you'll be able to see errors and notices but this should really only be used for debugging purposes and only temporarily as it can be a security issue since errors can reveal information you wouldn't want hacker........
  • Process/Parse PHP from HTML files using .htaccess and allowoverride


    RemoveHandler .html .htmAddType application/x-httpd-php .php .htm .html Just add the above into the .htaccess file for your website. Also remember that you need to be allowed to override the Apache and this should go into the vhost for your site as shown below: # you need the AllowOverride otherwise .htaccess directives will be ignoredOptions FollowSymLinksAllowO........
  • Apache/Mod_SSL not serving the right/expected certificate?


    There is actually by default a "Default SSL" vhost that can mess things up for you and can cause surprising and unexpected results. Default Apache SSL Cert in /etc/httpd/conf.d/ssl.conf there is a default SSL Virtual Host which screws things up by offering itself instead of the SSL cert I specify in my own vhosts........
  • Create/Enable SSL Certificates for Apache on Linux/Unix Systems eg. Redhat,Centos,Debian


    Shortcut/Easiest Way To Create A Self-Signed Key: openssl req -new -x509 -nodes -days 1530 -out server.crt -keyout server.key Using the above, you instantly create a self-signed certificate valid for 1530 days and you can simply skip to step #5.) below. If You Need a Real SSLCertificate (eg. Equifax/Openssl) then you need to create a CSR request (you'll need to follow Steps 1.) and 2.) in order to create the CSR. You then upload the CSR Certi........
  • MySQL Error "ERROR 1045 (28000): Access denied for user"


    This happened with a select statement which writes the result to an external file. I didn't remember the privilege "FILE" must be granted on *.* for this to work successfully, it wasn't actually an authentication issue as it implies since I was already in the SQL prompt and doing the query. SELECT some_id FROM sometable INTO OUTFILE '/tmp/result.txt'........
  • How to Track Down/Find Cause of Linux high disk iowait/wa


    top - 09:34:12 up 2 days, 20:57, 2 users, load average: 1.83, 1.99, 2.03 Tasks: 59 total, 2 running, 57 sleeping, 0 stopped, 0 zombie Cpu(s): 0.3%us, 0.0%sy, 0.0%ni, 0.0%id, 99.7%wa, 0.0%hi, 0.0%si, 0.0%st That 99.7% wa is iowait, it means the server is waiting for a process to complete an IOoperation or in plain English, there is a delay in........
  • Openvz "Container already locked" Error Message Solution/Fix


    I didn't find any useful information that actually fixed this. My VPS was in the "Running State" and I could not stop or restart it. I kept getting "Container already locked" no matter what Idid (I tried all the suggestions in the Google results for this error). Most of the suggestions were for Windows but I only use Linux. The other solutioins also said to restart the VZ service or even the entire hostnode and this was not acceptable to me........
  • Adventures in pre-paid SIM Cards and data GPRS/Edge/3G in China with China Mobile in Shenzhen, Guangzhou, Shanghai, Beijing and other cities


    This really is a difficult and confusing process for non-Mandarin speakers, but here's what I've done and learned so far: You can purchase an "M-Zone" China Mobile pre-paid SIMCard from almost anywhere but I tried to purchase mine from Suning (a large electronics dealer) hoping they would be able to help me or answer my questions but my plan didn't work out at all. At Suning once I found someone who spoke some English they gave me the 55 RMB M-Zone China Mobile P........
  • iPhone Enable Tethering Manually Update ipcc Carrier Settings/Update via SSH


    Everyone says there is a "manual" way of doing it and then they tell you to use iTunes, but if you're like me, you're travelling on business in a foreign country and your laptop does not have iTunes and you don't have a way of getting it and/or don't want it. For this example I'm using the provider "du" in Dubai, UAE (United Arab Emirates) but this method works for virtually all providers. The requirements in this case to truly "manually update........
  • How to avoid web content hijacking/copying/Force content to be accessed by only 1 domain name


    This is something that happens a lot and it is very dirty, as you probably know each site is hosted on a certain IP address. Sometimes a domain is hosted by a single IP address and the IP address defaults to this very same domain. This means that if someone buys domain abcd.com and enters your IP address (the one of your website) as the A record, your content will show up on their domain as if it was their own. There is an easy way to prevent this by using .htacces........
  • The power of passive vs air cooling. Small fans make a world of difference.


    I bought a Dynatron A46G for my AMD X4 620 AM3 Quad Core CPU. Just judging by touch, the stock OEM fan/heatsink combo kept things so cool, I could leave the 1U server on the floor and it barely felt warm to the touch, including the heatsink itself. I thought the Dynatron A46G would be enough with passive cooling (it has no fan), but the same setup became burning hot on the underside of the server and also by touching the heatsink itself within minutes. I thought that th........
  • Hard Drive Not Working/Not Detected By Your BIOS Anymore?


    I was starting to panic because suddenly my 1TB Seagate SATA drive wasn't working,I thought it was a BIOS issue because it seemed to have happened after I tried overclocking my Desktop too much. I tried powering down and waiting, but I still couldn't hear the drive spin up at all. I tried a second 1TB hard drive and it wouldn't work either. I checked all power connections again and again until one of the pins in the MOLEX connector popped completely loose. Th........
  • Clustered/Distributed Network Filesystems, Which Ones live up to the hype?


    I've tried to find a good sensible solution to cluster with and each technology has it's pros and cons and there is no perfect solution and I've found a lot of "exaggerations" in the applications, benefits and performance of these different filesystems. DRBD I first started off with DRBD and Ihave to say it does live up to the hype, is quite reliable (although it can be annoying to match up the kernel module and user applications since they must match and whe........
  • Tyan S2735-8M Maximum Hard Drive Limit/Not Working/Doesn't work with 1TB 1000GB hard drives


    Inever saved any of the logs, but basically no matter what OS (Linux)I used, I could not get my 1000GB hard drive to work (Seagate SATA). The BIOS recognizes the drive and fdisk -l shows the hard drive as it should. The tricky thing is that different OS's will give you different results, but don't be fooled. You can't use these larger drives for long. Iwas getting all kinds of seek/IOerrors and also messages that the port could not be read.........
  • Unixbench Score with Glusterfs/Openvz & Quad Core Xeon


    This is very disappointing since GlusterFS markets itself as a solution to deploy VPS servers on. On the HNitself I get a Unixbench of about 360. I'm also using an SSH tunnel to secure the communications, but even before that, things seemed very slow. # # # # # # # #####&n........
  • Linux/Unix Open SSH Login Without Password Key Exchange including Debian, Redhat, Fedora, Ubuntu, BSD etc..


    In those 4 simple commands you can setup mutual key exchange between two sshservers by using a single login shell session and single window. *Just change the IP address examples of (10.10.0.2) to the target of your mutual key exchange. It doesn't matter if the server is on a LANor WAN(well unless the server is behind a firewall and you cannot SSHinto it).........
  • Have an OpenVZ VPS/Linux Virtual Private Server and nothing works right?


    A VPS Server I had just wasn't working right, code that I migrated there just wasn't working. For example, it kept telling me the connection to the database was unsuccessful, halfway through iterating through results it already had. Then I realized it wasn't my code. Ichecked my /proc/user_beancounters and found this: cat /proc/user_beancounters Version: 2.5 uid resource held maxheld barrier limit failcnt........
  • MySQL Restoring And Dumping/Backing UP MySQL Data/Tables/Databases


    Backing MySQL Databases Backing Up/Dumping All Mysql Databases To A Single File mysqldump --all-databases -u admin -p > allmysqldatabases.sql The "-all-databases" clause is pretty obvious isn't it? It means that it will backup all databases. The "-u admin" means login using the user "admin", if you h........
  • Apache Ignoring/Not processing .htaccess file


    I was getting very frustrated one day wondering why it appeared my .htaccess file was being ignored and not processed by Apache. No matter what I did it was obvious that Apache didn't care about my .htaccess file. Then I realized that the default settings must be in effect, which is that my vhost didn't explicitly allow me to override the default settings. This usually comes down to your vhost settings. Make sure you have an entry like this in your Apache vhost settings in........
  • Why Apple should thank the jailbreakers and not patch/stop the jailbreaking exploits


    First of all, the iPhone is crippled in many ways, but most of my complaints about functionality have been addressed through the jailbreak, Ican run apps in the background of my choosing, I can install a terminal, acccess my phone through SSH and SCP and so much more. It even addresses the 15 minute e-mail problem, I installed a program called "PushMod" and now set the checking time to just 1 minute. Apple should really thank the developers for this gift, it ma........
  • iPhone 3GS and Bigboss Warning


    Everything was working fine but I believe when Iturned off "EDGE" in Big Boss everythign went haywire, at first my WiFi dropped, then 3G didn't work and I couldn't even make phone calls. If you're having this trouble with your jailbroken 3GS running 3.0 firmware, make sure you don't turn off EDGE, it seems to disrupt all service to your phone.........
  • iPhone Backgrounder Adds True and Real iPhone multitasking on jailbroken phones


    Apple crippled the iPhone by not allowing multi-tasking of the non-primary apps. I use SSH a lot and I don't want to close my session just to check my e-mail, etc, now an app found in Cydia called "Backgrounder" allows just that. Although it's not perfect, we installed the correct one for "3.x" iPhones and hit "Reload SpringBoard" and the hour/circle glass has just been going for minutes. It seems like it installed fine even with the crash t........
  • iPhone 3GS Jailbreak Information & Benefits


    Truly, the only way to unleash the capabilities and customization abilities of iPhone are to jailbreak, it's not just for hackers anymore. A few days ago someone by the named of "geohot" released a single click application called "purplera1n", which does the entire operation smoothly and seamlessly. In our case, the first time it went as far as "done, wait for reboot" on our Windows machine and for minutes we waited and saw the pic on the iPhone w........
  • iPhone 3GS 32GB "Harsh Review"


    Yes, Iadmit I finally got bitten by the hype as much as I can usually see through it all. Keep in mind this review is of the "stock" phone, no jailbreaking yet which is what really unleashes the customizability and whyI bought iPhone. I had better things to say about this phone before buying it, and it is a great phone, perhaps the best on the market by far, if not because of the Mac OS port onto the iPhone and all the apps, etc, etc. With that said........
  • iPhone has no password/wand manager saving feature in Safari Web Browser


    I kind of expected this feature to be there in some form, to stay ahead of the pack Apple needs to stay on top of this. User's of HTC's Android smart phone which uses a Linux based OS with Google's power behind it, note that you can save passwords in the browser on that phone. Apple needs to continuously evaluate the needs in its core apps and make sure the features are cutting edge and top notch, if other phones come out with some of these seemingly small but essential features........
  • Weird characters in Linux putty shell


    Iused to get all kinds of weird annoying characters like "" during compilation with gcc especially. example: dmg2img.c:456: error: BZ_OK undeclared (first use in this function) dmg2img.c:471: warning: implicit declaration of function BZ2_bzCompressEnd dmg2img.c:482: warning: implicit declaration of function BZ2_bzDecompress dmg2img.c:484: error: BZ_PARAM_ERROR undecl........
  • Using a Mac OSX DMG Image in Windows and Converting to Standard ISO Format use dmg2iso


    The dmg format is silly and annoying to work with, why couldn't Apple stick with the .iso standard? Anyway, there's an excellent Linux and Windows based tool to convert it back to a normal .iso Image called dmg2iso I'll only cover theLinux version although the Windows pre-built binary works the same way. Download dmg2iso here for free (from the author's website) It's just silly and doesn't make sense that Ubuntu doe........
  • Apple iPhone 3GS and predecessors are leading a revolution


    As much of a computer nerd as Iam, I'm usually a late adopter to technology for a few reasons. Ifeel most new hyped technologies and electronics are mainly fads, and I'm also cheap. Adopting later means you avoid the bugs, kinks and most importantly pay the lowest price, that's me being cheap again :) I never read much about the iPhone but Isaw all the hype around it and until recently I wasn't a big fan of anything Apple until a few years ago I realize........
  • Nokia N97 review, feedback and complaints


    I've had an old Blackberry for a few years and I was ready to spend some serious cash on a nice Nokia. I love the idea of the Linux based Symbian S60 OS, so I was looking at phones like the E63, E71 (both are basically the same, at least CPU/screensize although E71 is thinner, has a 3MP camera, has GPS, and has dedicated buttons to adjust the volume). Then Iheard about the N97 and what a revolution it was supposed to be and it was even compared to iPhone. To........
  • RTL8111/8168B R8169 Gigabit Link slow speeds


    This is the Intel Atom 330 motherboard with integrated Realtek Gigabit NIC (Intel Desktop Board D945GCLF2 Motherboard W/ Atom 330 1.6 GHz Dual Core Processor - Mini-ITX) I cannot achieve more than 15 MB/s, even doing a local transfer through eth0 to it's own IP. 100% 95MB 15.9MB/s 00:06 So this is not a cabling, switch or hardware issue, it seems like a driver or chipset limitation problem. Here is my........
  • SSH Slow Login even with SSHD UseDNS no parameter


    Icouldn't understand why on one system it took a few minutes to get the SSHlogin prompt when connecting to other systems. The other systems all had the UseDNS parameter set to no, which almost always resolves the login prompt delay. The reason is Ubuntu and perhaps Debian and other distributions /etc/nsswitch.conf file Edit yours to have the "hosts" line like so (notice that files and dns are the primary resolution choice........
  • SSH Server Slow/Lagged/Delayed Login Response


    This is really something the SSHServer developers should consider. The cause of this annoyance is because of failed DNS lookups on your IPaddress, which is especially common for many dedicated/col-located servers and also computers on internal NAT/private networks. The chances are this is the cause of your SSHSlow/Delayed Login problems. The easy solution to SSH Login Problems Edit /etc/ssh/sshd_config Add this line to disable r........
  • OCFS2 crash


    When trying to even cd or ls the mounted OCFS2 partition it crashes. Ithink this is a combination of VMWare Server's problem and the way I mounted and symlinked to it. More than anything this shows the problem and lack of forsight with VMWare, but also that OCFS2 is easily crashed if you do strange things. Output of /var/log/messages for OCFS2 Apr 10 15:57:45 localhost kernel: [84331.691258] Modules linked in: vmnet vmci vmmon ocfs2_stac........
  • Samba SMB Error - Server not using user level security and no password supplied. tree connect failed: NT_STATUS_WRONG_PASSWORD


    Server not using user level security and no password supplied. tree connect failed: NT_STATUS_WRONG_PASSWORD That happens when trying to use smbclient to connect to a share. The weird thing is that I can authnenticate just fine from Windows XP. It is partially my mistake, I forgot this share does have a password. I've tried authenticating with the correct user and also with "Guest" because this works in Windows. In Linux I ........
  • Configuring OCFS2 Clustered File System on Debian Based Linux including Ubuntu and Kubuntu


    There's a lot of information and guides on OCFS2 for RHELand Centos Linux but the package setup and configuration is slightly different and this has thrown some people off. Installing OC2FS You should install the following packages to get started: apt-get install ocfs2-tools ocfs2console Configure OC2FS In RHEL/Centos the main configuration file is located in /etc/sysconfig/o2cb However in Debian based Linux it is located........
  • Viewing and Connecting to an SMB Samba Share on Windows/Linux/Unix


    This will give you the basic info needed to browse and connect to Samba shares from the command line. From the GUI of Gnome or KDE etc, it is pretty standard and straight forward. However, I've found very little guides on how to do it from the command line and if you're like me, a nerd who prefers command line for its simplicity and for remote use, this is the way to go. First get a list of all the Samba/SMB shares on the target. smbclient -L hostname........
  • Rackable Systems and their Microslice Clustered 1U Servers


    Ithink there has been a lot of negative press towards Rackable Systems. We will give their new solution credit that it is marketed very well, and comes prepackaged and ready to go. But let's cut through the hype of both sides, the people who love this concept and the people who hate it. What Rackable Systems have done is a first, to minimize space, power and costs into small servers. This is great, and many companies have already built their own servers based........
  • SSH Problem User username from 127.0.0.1 not allowed because not listed in AllowUsers


    User username from 127.0.0.1 not allowed because not listed in AllowUsers What's going on? The user was created properly, it has been defined as having a shell entry and the entry for /etc/passwd and /etc/shadow is set just fine. This is a new and very smart/secure feature of SSHD. It is simple and yet effective, but also very annoying if you didn't know about it being implemented and that hand editing of /etc/ssh/sshd_config is required to allow a newly add........
  • LAME MP3 Encoder Segmentation Faults


    This happened on one of my Ubuntu machines where Igot some kind of segfault on line 21 from LAME at random while encoding MP3s (a second try is fine usually). I've read that it's best to compile it from source and that has solved most issues for people. Here is my preferred configure line: ./configure --enable-mp3x --with-fileio=lame --enable-debug --with-vorbis Even with that I got a different error this tim........
  • BIND/NAMED woes


    Feb 5 01:39:33 server named[19768]: zone myzone.com/IN: serial number (12331465) received from master 127.0.0.2#53 < ours (200901281) The above is taken from /var/log/messages This can be annoying, it can happen for a variety of reasons. What seems to be happening here is that the slave realizes the time on the slave is ahead of the master, so it therefore assumes it has the most up to date copy and won't actually transfer the zone. The solutio........
  • Writing/Burning a data CD-R/DVD-R or DVD+RW in Unix/Linux


    There's a lot of outdated information and confusion for system administrator's out there. One annoying task for many an Administrator has been backing up data in Linux. You don't need any GUI tools such as K3B or GnomeBaker. Both are excellent tools but for veteran command line users working remotely, using the keyboard is a great and possibly automated way to save yourself pain and hassle. At a later date we'll cover how scripting can automatically backup certain........
  • Latest Articles

  • How high can a Xeon CPU get?
  • bash fix PATH environment variable "command not found" solution
  • Ubuntu Linux Mint Debian Redhat Youtube Cannot Play HD or 4K videos, dropped frames or high CPU usage with Nvidia or AMD Driver
  • hostapd example configuration for high speed AC on 5GHz using WPA2
  • hostapd how to enable and use WPS to connect wireless devices like printers
  • Dell Server Workstation iDRAC Dead after Firmware Update Solution R720, R320, R730
  • Cloned VM/Server/Computer in Linux won't boot and goes to initramfs busybox Solution
  • How To Add Windows 7 8 10 11 to GRUB Boot List Dual Booting
  • How to configure OpenDKIM on Linux with Postfix and setup bind zonefile
  • Debian Ubuntu 10/11/12 Linux how to get tftpd-hpa server setup tutorial
  • efibootmgr: option requires an argument -- 'd' efibootmgr version 15 grub-install.real: error: efibootmgr failed to register the boot entry: Operation not permitted.
  • Apache Error Won't start SSL Cert Issue Solution Unable to configure verify locations for client authentication SSL Library Error: 151441510 error:0906D066:PEM routines:PEM_read_bio:bad end line SSL Library Error: 185090057 error:0B084009:x509 certif
  • Linux Debian Mint Ubuntu Bridge br0 gets random IP
  • redis requirements
  • How to kill a docker swarm
  • docker swarm silly issues
  • isc-dhcp-server dhcpd how to get longer lease
  • nvidia cannot resume from sleep Comm: nvidia-sleep.sh Tainted: Linux Ubuntu Mint Debian
  • zfs and LUKS how to recover in Linux
  • [error] (28)No space left on device: Cannot create SSLMutex Apache Solution Linux CentOS Ubuntu Debian Mint