A következő címkéjű bejegyzések mutatása: Debian. Összes bejegyzés megjelenítése
A következő címkéjű bejegyzések mutatása: Debian. Összes bejegyzés megjelenítése

2018. július 23., hétfő

Zabbix agent upgrade from 2.x to 3.4

It's not easy as it seems. After you execute the first steps...
wget http://repo.zabbix.com/zabbix/3.4/ubuntu/pool/main/z/zabbix-release/zabbix-release_3.4-1+xenial_all.deb
dpkg -i zabbix-release_3.4-1+xenial_all.deb
apt update
apt install zabbix-agent -y

You suddenly realize that something is definitely wrong because the agent dies.

Jul 23 14:52:22 sss systemd[1]: Failed to start Zabbix Agent.
Jul 23 14:52:22
sss systemd[1]: zabbix-agent.service: Unit entered failed state.
Jul 23 14:52:22
sss systemd[1]: zabbix-agent.service: Failed with result 'exit-code'.
dpkg: error processing package zabbix-agent (--configure):
 subprocess installed post-installation script returned error exit status 1
Processing triggers for libc-bin (2.23-0ubuntu10) ...
Processing triggers for systemd (229-4ubuntu21.2) ...
Processing triggers for ureadahead (0.100.0-19) ...
Errors were encountered while processing:
 zabbix-agent
E: Sub-process /usr/bin/dpkg returned an error code (1)


Some investigation shows /etc/zabbix/zabbix_agentd.conf.d directory does not exists and that's where the new agent looks for its configs and foolishly it does not create it. But you may have existing userparameter configs in existing /etc/zabbix/zabbix_agentd.d so the best way to continue the installation with:
ln -s /etc/zabbix/zabbix_agentd.d /etc/zabbix/zabbix_agentd.conf.d
service zabbix-agent restart
service zabbix-agent status



2016. április 6., szerda

Debian Wheezy Mail Server – Postfix Dovecot Sasl MySQL PostfixAdmin and RoundCube

Shamefully I didn't want to find my own way so the whole tutorial I followed is here.
For my personal further usage, I attached the working nginx, dovecot, postfix and php5 config to this post. There are two minor differences from the original tutorial: I don't use spam filtering because at me it's done by a 3rd party provider. Second, I use an outgoing TLS smarthost via mail submission 587 port, detailed in the postfix/main.cnf.
Note that sensitive infos are all removed and in the tgz there is a missing sock, obviously, because sockets can't be packed. (tar example/php5/fpm/socks/ssl_example.com.sock: socket ignored.)
Follow the original howto first.

Versions for my pack are:
Linux box 3.2.0-4-amd64 #1 SMP Debian 3.2.73-2+deb7u3 x86_64 GNU/Linux
ii  nginx                              1.2.1-2.2+wheezy4                 all          small, powerful, scalable web/proxy server
ii  nginx-common                       1.2.1-2.2+wheezy4                 all          small, powerful, scalable web/proxy server - common files
ii  nginx-full                         1.2.1-2.2+wheezy4                 amd64        nginx web/proxy server (standard version)
ii  dovecot-common                     1:2.1.7-7+deb7u1                  all          Transitional package for dovecot
ii  dovecot-core                       1:2.1.7-7+deb7u1                  amd64        secure mail server that supports mbox, maildir, dbox and mdbox mailboxes
ii  dovecot-gssapi                     1:2.1.7-7+deb7u1                  amd64        GSSAPI authentication support for Dovecot
ii  dovecot-imapd                      1:2.1.7-7+deb7u1                  amd64        secure IMAP server that supports mbox, maildir, dbox and mdbox mailboxes
ii  dovecot-ldap                       1:2.1.7-7+deb7u1                  amd64        LDAP support for Dovecot
ii  dovecot-lmtpd                      1:2.1.7-7+deb7u1                  amd64        secure LMTP server for Dovecot
ii  dovecot-mysql                      1:2.1.7-7+deb7u1                  amd64        MySQL support for Dovecot
ii  dovecot-pgsql                      1:2.1.7-7+deb7u1                  amd64        PostgreSQL support for Dovecot
ii  dovecot-pop3d                      1:2.1.7-7+deb7u1                  amd64        secure POP3 server that supports mbox, maildir, dbox and mdbox mailboxes
ii  dovecot-sieve                      1:2.1.7-7+deb7u1                  amd64        sieve filters support for Dovecot
ii  dovecot-sqlite                     1:2.1.7-7+deb7u1                  amd64        SQLite support for Dovecot
ii  postfix                            2.9.6-2                           amd64        High-performance mail transport agent
ii  postfix-mysql                      2.9.6-2                           amd64        MySQL map support for Postfix
ii  php5-common                        5.5.33-1~dotdeb+7.1               amd64        Common files for packages built from the php5 source
ii  php5-fpm                           5.5.33-1~dotdeb+7.1               amd64        server-side, HTML-embedded scripting language (FPM-CGI binary)
ii  php5-imap                          5.5.33-1~dotdeb+7.1               amd64        IMAP module for php5
ii  php5-intl                          5.5.33-1~dotdeb+7.1               amd64        internationalisation module for php5
ii  php5-mcrypt                        5.5.33-1~dotdeb+7.1               amd64        MCrypt module for php5
ii  p
hp5-mysql                         5.5.33-1~dotdeb+7.1               amd64        MySQL module for php5


2015. augusztus 19., szerda

ntopng install on Debian Sqeeze

If you are careless enough to just follow a step-by-step tutorial like this being on a good old Squeeze you surely will end up with a failing and buggy ntopng. E.g. you won't be able to see your newly created users (users tab is totally empty: No Results Found)
Looks somewhat broken
or can not switch between your monitored interfaces. If you start ntopng from shell you may see something like this:
19/Aug/2015 13:28:28 [src/Redis.cpp:170] ERROR: ERR unknown command 'HSET' [HSET ntopng.host_labels ]
19/Aug/2015 13:28:28 [src/Redis.cpp:170] ERROR: ERR unknown command 'HSET' [HSET ntopng.host_labels ]
19/Aug/2015 13:28:30 [src/Redis.cpp:148] ERROR: ERR unknown command 'HGET'
19/Aug/2015 13:28:30 [src/Redis.cpp:148] ERROR: ERR unknown command 'HGET'
19/Aug/2015 13:28:30 [src/Redis.cpp:148] ERROR: ERR unknown command 'HGET'
19/Aug/2015 13:28:30 [src/Redis.cpp:148] ERROR: ERR unknown command 'HGET'
19/Aug/2015 13:28:36 [src/Redis.cpp:148] ERROR: ERR unknown command 'HGET'
19/Aug/2015 13:28:36 [src/Redis.cpp:148] ERROR: ERR unknown command 'HGET'
19/Aug/2015 13:28:36 [src/Redis.cpp:148] ERROR: ERR unknown command 'HGET'

This whole thing is because your Redis installation is out of date. Another nice thing in Debian Squeeze is its repositories includes Version: 2:1.2.6-1 Redis. Simply fix that with:
echo "deb http://backports.debian.org/debian-backports squeeze-backports main" >> /etc/apt/sources.list
apt-get update
apt-get -t squeeze-backports install redis-server

Now it is:
redis-server                       2:2.4.15-1~bpo60+2    
How to reset your forgotten ntopng admin password.
You might don't want to bother with compiling ntopng-2.0 packages on a simple standard Squeeze. In that case here are the x64 and x86 versions. You're welcome.

2015. április 3., péntek

Dell OMSA services installation trouble on Debian 7 (wheezy how to)

root@omsa:~# echo 'deb http://linux.dell.com/repo/community/deb/latest /' > /etc/apt/sources.list.d/linux.dell.com.sources.list
root@omsa:~# apt-get update
Hit http://ftp.hu.debian.org wheezy Release.gpg
Hit http://ftp.hu.debian.org wheezy-updates Release.gpg
Hit http://ftp.hu.debian.org wheezy Release
Hit http://ftp.hu.debian.org wheezy-updates Release
Hit http://ftp.hu.debian.org wheezy/main Sources
Hit http://ftp.hu.debian.org wheezy/main i386 Packages
Hit http://ftp.hu.debian.org wheezy/main Translation-en
Hit http://ftp.hu.debian.org wheezy-updates/main Sources
Hit http://ftp.hu.debian.org wheezy-updates/main i386 Packages/DiffIndex
Hit http://ftp.hu.debian.org wheezy-updates/main Translation-en/DiffIndex
Hit http://security.debian.org wheezy/updates Release.gpg
Hit http://security.debian.org wheezy/updates Release
Hit http://security.debian.org wheezy/updates/main Sources
Hit http://security.debian.org wheezy/updates/main i386 Packages
Hit http://security.debian.org wheezy/updates/main Translation-en
Get:1 http://linux.dell.com  Release.gpg [827 B]
Get:2 http://linux.dell.com  Release [1,392 B]
Ign http://linux.dell.com  Release
Get:3 http://linux.dell.com  Packages [12.2 kB]
Ign http://linux.dell.com  Translation-en_US
Ign http://linux.dell.com  Translation-en
Fetched 14.4 kB in 4s (3,136 B/s)
Reading package lists... Done
W: GPG error: http://linux.dell.com  Release: The following signatures couldn't                                                                                                                    be verified because the public key is not available: NO_PUBKEY 1285491434D8786F
root@omsa:~# gpg --keyserver pool.sks-keyservers.net --recv-key 1285491434D8786F                                                                                                                
gpg: directory `/root/.gnupg' created
gpg: new configuration file `/root/.gnupg/gpg.conf' created
gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during this run
gpg: keyring `/root/.gnupg/secring.gpg' created
gpg: keyring `/root/.gnupg/pubring.gpg' created
gpg: requesting key 34D8786F from hkp server pool.sks-keyservers.net
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key 34D8786F: public key "Dell Inc., PGRE 2012 (PG Release Engineering Build Group 2012) <PG_Release_Engineering@Dell.com>" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:               imported: 1  (RSA: 1)
root@omsa:~#
root@omsa:~# gpg -a --export 1285491434D8786F | apt-key add -
OK
root@omsa:~# apt-get update
Hit http://ftp.hu.debian.org wheezy Release.gpg
Hit http://ftp.hu.debian.org wheezy-updates Release.gpg
Hit http://ftp.hu.debian.org wheezy Release
Hit http://ftp.hu.debian.org wheezy-updates Release
Hit http://ftp.hu.debian.org wheezy/main Sources
Hit http://security.debian.org wheezy/updates Release.gpg
Hit http://ftp.hu.debian.org wheezy/main i386 Packages
Hit http://ftp.hu.debian.org wheezy/main Translation-en
Hit http://ftp.hu.debian.org wheezy-updates/main Sources
Hit http://ftp.hu.debian.org wheezy-updates/main i386 Packages/DiffIndex
Hit http://security.debian.org wheezy/updates Release
Hit http://ftp.hu.debian.org wheezy-updates/main Translation-en/DiffIndex
Hit http://security.debian.org wheezy/updates/main Sources
Hit http://security.debian.org wheezy/updates/main i386 Packages
Hit http://security.debian.org wheezy/updates/main Translation-en
Get:1 http://linux.dell.com  Release.gpg [827 B]
Hit http://linux.dell.com  Release
Hit http://linux.dell.com  Packages
Ign http://linux.dell.com  Translation-en_US
Ign http://linux.dell.com  Translation-en
Fetched 827 B in 4s (187 B/s)
Reading package lists... Done
root@omsa:~#
root@omsa:~# apt-get install srvadmin-omcommon
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation: The following packages have unmet dependencies:
 srvadmin-omcommon : Depends: libssl0.9.8 (>= 0.9.8k-1) but it is not installable
E: Unable to correct problems, you have held broken packages.
root@omsa:~# dpkg -l|grep libssl
ii  libssl1.0.0:i386                     1.0.1e-2+deb7u16              i386         SSL shared libraries
WTF happens
root@omsa:~# wget http://snapshot.debian.org/archive/debian/20110406T213352Z/pool/main/o/openssl098/libssl0.9.8_0.9.8o-7_i386.deb

--2015-04-03 11:55:41--  http://snapshot.debian.org/archive/debian/20110406T213352Z/pool/main/o/openssl098/libssl0.9.8_0.9.8o-7_i386.deb
Resolving snapshot.debian.org (snapshot.debian.org)... 185.17.185.187, 193.62.202.30, 2001:630:206:4000:1a1a:0:c13e:ca1e, ...
Connecting to snapshot.debian.org (snapshot.debian.org)|185.17.185.187|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3090794 (2.9M) [application/x-debian-package]
Saving to: `libssl0.9.8_0.9.8o-7_i386.deb'
100%[=========================================================================================================================================================>] 3,090,794   1.11M/s   in 2.6s

2015-04-03 11:55:44 (1.11 MB/s) - `libssl0.9.8_0.9.8o-7_i386.deb' saved [3090794/3090794]

root@omsa:~# dpkg -i libssl0.9.8_0.9.8o-7_i386.deb
Selecting previously unselected package libssl0.9.8.
(Reading database ... 24865 files and directories currently installed.)
Unpacking libssl0.9.8 (from libssl0.9.8_0.9.8o-7_i386.deb) ...
Setting up libssl0.9.8 (0.9.8o-7) ...

root@omsa:~# apt-get install srvadmin-omcommon
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
  libsmbios2 python-libsmbios smbios-utils srvadmin-omilcore
Suggested packages:
  libsmbios-doc
The following NEW packages will be installed:
  libsmbios2 python-libsmbios smbios-utils srvadmin-omcommon srvadmin-omilcore
0 upgraded, 5 newly installed, 0 to remove and 0 not upgraded.
Need to get 4,685 kB of archives.
After this operation, 24.5 MB of additional disk space will be used.
Do you want to continue [Y/n]? y
[.....]
Setting up python-libsmbios (2.2.13-0ubuntu4) ...
Setting up smbios-utils (2.2.13-0ubuntu4) ...
Setting up srvadmin-omilcore (7.1.0-3) ...
     **********************************************************
     After the install process completes, you may need
     to log out and then log in again to reset the PATH
     variable to access the Dell OpenManage CLI utilities
     **********************************************************
Setting up srvadmin-omcommon (7.1.0-2) ...
root@omsa:~#

root@omsa:~# apt-get install srvadmin-all
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
  libargtable2-0 libasound2 libopenipmi0 libperl5.14 libsensors4 libsnmp-base libsnmp15 libxi6 libxslt1.1 libxtst6 openipmi setserial snmpd srvadmin-base srvadmin-deng srvadmin-hapi
  srvadmin-idrac srvadmin-idrac-ivmcli srvadmin-idrac-vmcli srvadmin-idrac7 srvadmin-idracadm srvadmin-idracadm7 srvadmin-isvc srvadmin-jre srvadmin-megalib srvadmin-omacore
  srvadmin-rac-components srvadmin-rac4 srvadmin-rac4-populator srvadmin-rac5 srvadmin-racadm4 srvadmin-racadm5 srvadmin-racdrsc srvadmin-racsvc srvadmin-smcommon srvadmin-smweb
  srvadmin-storage srvadmin-storageservices srvadmin-storelib srvadmin-storelib-sysfs srvadmin-sysfsutils srvadmin-tomcat srvadmin-webserver srvadmin-xmlsup x11-common
Suggested packages:
  libasound2-plugins lm-sensors snmp-mibs-downloader
The following NEW packages will be installed:
  libargtable2-0 libasound2 libopenipmi0 libperl5.14 libsensors4 libsnmp-base libsnmp15 libxi6 libxslt1.1 libxtst6 openipmi setserial snmpd srvadmin-all srvadmin-base srvadmin-deng
  srvadmin-hapi srvadmin-idrac srvadmin-idrac-ivmcli srvadmin-idrac-vmcli srvadmin-idrac7 srvadmin-idracadm srvadmin-idracadm7 srvadmin-isvc srvadmin-jre srvadmin-megalib srvadmin-omacore
  srvadmin-rac-components srvadmin-rac4 srvadmin-rac4-populator srvadmin-rac5 srvadmin-racadm4 srvadmin-racadm5 srvadmin-racdrsc srvadmin-racsvc srvadmin-smcommon srvadmin-smweb
  srvadmin-storage srvadmin-storageservices srvadmin-storelib srvadmin-storelib-sysfs srvadmin-sysfsutils srvadmin-tomcat srvadmin-webserver srvadmin-xmlsup x11-common
0 upgraded, 46 newly installed, 0 to remove and 0 not upgraded.
Need to get 115 MB of archives.
After this operation, 319 MB of additional disk space will be used.
Do you want to continue [Y/n]?
Get:1 http://ftp.hu.debian.org/debian/ wheezy/main libasound2 i386 1.0.25-4 [463 kB]
Get:2 http://linux.dell.com/repo/community/deb/latest/  srvadmin-deng 7.1.0-3 [1,230 kB]
Get:3 http://ftp.hu.debian.org/debian/ wheezy/main libsensors4 i386 1:3.3.2-2+deb7u1 [53.9 kB]
Get:4 http://ftp.hu.debian.org/debian/ wheezy/main libxi6 i386 2:1.6.1-1+deb7u1 [76.6 kB]
[.......]
Setting up srvadmin-racsvc (7.1.0-3) ...
Setting up srvadmin-rac4-populator (7.1.0-3) ...
Setting up srvadmin-rac-components (7.1.0-2) ...
Setting up srvadmin-racdrsc (7.1.0-2) ...
Setting up srvadmin-rac4 (7.1.0-3) ...
Setting up srvadmin-racadm5 (7.1.0-2) ...
update-alternatives: using /opt/dell/srvadmin/sbin/racadm-wrapper-rac5 to provide /opt/dell/srvadmin/sbin/racadm (racadm) in auto mode
Setting up srvadmin-rac5 (7.1.0-2) ...
Setting up srvadmin-idracadm (7.1.0-2) ...
Setting up srvadmin-idrac-vmcli (7.1.0-2) ...
Setting up srvadmin-idrac-ivmcli (7.1.0-2) ...
Setting up srvadmin-idrac (7.1.0-2) ...
Setting up srvadmin-idracadm7 (7.1.0-2) ...
Setting up srvadmin-idrac7 (7.1.0-2) ...
Setting up srvadmin-all (7.1.0-3) ...
root@omsa:~#

Further reading: http://linux.dell.com/repo/community/deb/latest/
http://serverfault.com/questions/425322/how-to-set-up-dell-omsa-tools-on-debian-6-squeeze-pe2950

2013. február 14., csütörtök

Debian és IBM SAN

Linux foto 2.6.26-2-amd64 #1 SMP Thu Sep 16 15:56:38 UTC 2010 x86_64 GNU/Linux

Must have: firmware-bnx2_0.14+lenny2_all.deb  + firmware-qlogic_0.14+lenny2_all.deb



foto:/etc# cat multipath.conf
defaults {
            polling_interval    30
            failback            immediate
            no_path_retry       5
            rr_min_io           100
            path_checker        tur
            user_friendly_names yes
    }

multipaths {
    multipath {
        wwid 360050768018e03081000000000000038
        alias 1000G
            }
    multipath {
        wwid 360050768018e03081000000000000039
        alias 300G
        }
    multipath {
    wwid 360050768018e03081000000000000045
    alias 400G
    }
    }

#devnode_blacklist {
#        devnode "*"
#        }

#        blacklist {
#        devnode "sdq"
#        }

devices {
    device {
            vendor                   "IBM"
            product                  "2145"
            path_grouping_policy     group_by_prio
            prio_callout             "/sbin/mpath_prio_alua /dev/%n"
            }
        }


Extended lvm, xfs......
 

   84  lvdisplay
   85  pvdisplay
   86  vgdisplay
   87  lvdisplay
   88  pvs
   89  vgdisplay -v
   90  vgremove kiskepek
   91  vgremove kiskepek
   92  pvcreate /dev/kiskepek/kiskepek-p1
   93  df -h
   94  pvcreate /dev/mapper/300G
   95  pvdisplay
   96  vgextend nagykepek /dev/dm-1
   97  vgdisplay
   98  df -h
   99  mc
  100  vgdisplay
  101  lvdisplay
  102  lvextend /dev/nagykepek/nagykepek-p1 --size=+300G
  103  mc
  104  mount
  105  vgdisplay
  106  df -h
  107  xfs_growfs /www/pix
  108  df -h

2013. január 12., szombat

"szakmai blog"

Idestova 8 éve dolgozok rendszergazdaként, de előtte is számítógépekkel foglalkoztam. Rengetegszer felmerült már bennem a gondolat, hogy indítsak egy blogot és elmeséljem benne angolul és magyarul is azokat az érdekes problémákat, amikkel szembesültem (angolul, hogy a gugli is szeressen és legalább esély legyen rá, hogy lesznek látogatóim) - és a megoldást is, amennyiben megtaláltam rá. Nem vagyok egy nagy blogger, így sosem jutottam el idáig.... Egészen mostanáig.

Úgy alakult, hogy megszűnik a munkahelyem. Több önéletrajzot is benyújtottam, egyiket a BalaBit -hez. A jelentkező form-on volt egy érdekes rovat, ahol meg kellett volna adnom a szakmai blogom címét. Nos, ez volt a végső lökés. Így most már van blogom... Igyekszem feltölteni a szívásokkal az elmúlt évekből, legalább címszavakban, mozaikszerűen, vagy linkekkel. Amennyire még emlékszem. :-) Talán 1-2 dolog majd eszembe jut...

Rendszergazdaként és rendszermérnökként főleg Linuxokkal foglalkoztam, sok mindent láttam és sok mindent csináltam is. De Windows 2k3 2k8 és Exchange 2k3 2k7 esetében sem lehetne eladni, bár újat mutatni biztos...  De most nem ilyesmivel indítok. Már tudom is, hogy mi lesz az első komoly bejegyzésem, egy olyan probléma, amivel épp a héten küzdöttem meg. Több-kevesebb sikerrel.