[CentOS] [SPAM] Employee Needed

2011-06-27 Thread Scott McClanahan
Hey guys we are looking for an addition to our very small sys admin 
team.  We want somebody who either knows the [O/S, server, network, 
storage arena inside  out] OR [systems automation (chef, puppet), 
virtualization, python, ruby].  Either slot filled would allow me to 
focus more on the other.  Please head over to:

http://www.rayjobs.com/index.cfm?NavID=103

And search with this job req:  17135BR


It's with Raytheon but I can assure it resembles nothing even close to 
Raytheon.  Very startup culture  very exciting work.  Relocation 
assist. provided  if you think you are a seriously bad ass SA please 
reach out to me.

-- 
Scott McClanahan
W: 321-253-7892

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-17 Thread Scott McClanahan
On 09/17/2010 03:39 AM, Robert P. J. Day wrote:
(note:  i asked this a few days ago but it *appears* that that post
 was tossed due to getting excessive bounces from my account.  so i'm
 posting it again, apologies if you're seeing it a second time.)

over the next several weeks, i'm teaching some courses in RHEL admin
 but (unsurprisingly) i'll be using centos 5.5.  it's a
 decently-written, 3rd party course, all the generic, standard admin
 topics but it does leave me about a 1/2 day to throw in any cool stuff
 i want to add.

so, any recommendations for neat things that people here have done
 in the way of what can be added to or configured on a centos server
 system?  the course covers all the standard topics -- installation,
 package management, service management, filesystem maintenance, that
 sort of thing.  so i'm looking for bonus, neat stuff that others here
 do as a matter of course when putting together a centos system.

logging utilities?  intrusion detection?  monitoring?  anything that
 leaps to mind that i can use to fill up a few more hours.  i'm already
 thinking of showing how to build and boot a new kernel.  other ideas?
 thanks.

 rday



I've done quite a few things.  Recently, I just run puppet and let it do 
EVERYTHING for whatever a system might need.  But things I have done in 
the past are autodetect if the system is a vm and install vmware-tools, 
find the next ip address available in DNS for the particular subnet the 
newly installed system is in and dynamically update forward and reverse 
(including a helpful TXT record which fit a known convention), run yum 
update and reboot, and even create a qtree on netapp automatically.  
Just a quick few things.. I also do some stuff during pre installation 
like align the disk on proper boundaries and enable software raid 
according to the meta data associated with the system record in 
cobbler.  Cobbler is nice as a subscription means to dynamically alter 
kickstart configs so I can add 'raid=5' as meta data for instance the 
the vm will build itself with raid5 (if it can of course).  Same things 
applies to selinux, firewall, and other features that need to be enabled 
very early on and puppet just checks to make sure it's still true.

I've moved away from doing stuff in post install and instead let puppet 
handle pretty much everything.  API's are great for this.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Partition alignment

2009-11-10 Thread Scott McClanahan
On Tue, 2009-11-10 at 02:33 -0800, John Doe wrote: 
 From: Scott McClanahan smcclana...@sigovs.com
  I'd like to use cobbler
  for dynamically creating kickstart scripts and wasn't sure if I could
  align my disk during install some how.  Are there kickstart arguments to
  force the alignment on a 4k boundary?  Have any of you had to do this?
 
 Personaly, I run a pre_kickstart script that partition and format the volumes 
 as I want.
 Then I just use --onpart and --noformat in the kickstart.
 
 JD
 
I suspect this is what I'll be doing as well.  Seems easy enough.
Thanks.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Partition alignment

2009-11-09 Thread Scott McClanahan
I'll be setting up a vSphere 4 environment hosting CentOS 5.4 on Netapp
FAS and was curious how you guys are handling the automation of
partition alignment within your linux guests.  I'd like to use cobbler
for dynamically creating kickstart scripts and wasn't sure if I could
align my disk during install some how.  Are there kickstart arguments to
force the alignment on a 4k boundary?  Have any of you had to do this?
Thanks.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] IO statistic Centos 5.4

2009-10-23 Thread Scott McClanahan
On Fri, 2009-10-23 at 09:35 -0300, Sergio Belkin wrote: 
 Hi,
 
 Has kernel-2.6.18-128.1.1 support for IO statistic for example when
 using pidstat -d?
 
 Thanks in advance!
 

Is pidstat available in the 5.4 sysstat package or are you deviating
from the stock sysstat package?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [Slightly OT] Data Preservation

2009-10-02 Thread Scott McClanahan
On Fri, 2009-10-02 at 13:15 -0700, John R Pierce wrote: 
 ML wrote:
  HI All,
 
  So I have 5 1U servers (running Windows) that have Ultra 320 SCSI  
  Drives in them.
 
  The owner of these boxes wants the drives captured in their current  
  states to .iso or .cdr or something where if the need arises the data  
  can be viewed, used again, etc.
 
  So what is the best approach? Boot from a Live CD, hook up a USB  
  external HD and do what? Can I create a .iso or .cdr (or some other  
  portable format) and have it created on the external USB?
 
  Thoughts on this process would be appreciated.


Maybe not the right tool for the job but I always like using
physical-to-virtual tools for archiving installed images.  It frees up
the hardware for me and I can have access to the data if I need it again
by spinning up the VM.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [Slightly OT] Data Preservation

2009-10-02 Thread Scott McClanahan
 It's still a one-way trip, though, where with clonezilla you can restore back 
 to the hardware.
 

Exactly.  Once I do this type of operation I've made the decision that
the OS will never need to run on physical hardware again.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] [OT] Conference room software

2009-09-04 Thread Scott McClanahan
We have a very decentralized user base with no standard operating system
or utilities except for a web browser of some kind (no Exchange either).
What recommendations does the list have for software to coordinate
conference room reservations?  It doesn't need to be responsible for any
kind of invitations or email notifications, really just a pretty
calendar where scheduled events can go.  It will first be used for
reserving conference rooms but eventually could be used for more.

Basically, a web application that can run on whatever web container
installs on linux which supports shared calendars.  Google calendar
behind the firewall :)  ... any suggestions?  Thanks.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ntp time server

2009-07-22 Thread Scott McClanahan


Not knowing what country your from but at a U.S. taxpayer I have no
reservations about using time.nist.gov myself, some people think it's
rude to directly query stratum 1 servers.

I typically have 2-3 NTP servers per location behind a load balancer and
my internal servers sync against the load balanced VIP, and the NTP
servers themselves sync against time.nist.gov

nate



I'm not trying to hijack this thread but I have a question about how
typical this is for *core* infrastructure services.  Do you load balance
other services as well?  I'm thinking of dns, ldap, proxy, internal web
servers like a cms, radius, and probably more but those are some of the
services I try to make fault tolerant.  Thanks.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] authentication loosely tied to active directory?

2009-06-16 Thread Scott McClanahan

 
 Same here - which is why I raised the question.  Although I probably 
 could get permission to join the domain I want to be able to add users 
 on the Linux side that don't exist in AD.  Pam_smb works but I think 
 something that used LDAP would be better if the ldap server could have 
 local entries and proxy for the AD.
 

The strategy I took was far from best practices in my opinion but was
really the best solution for us at the time we needed it (including AD
licensing costs and several disparate facilities across the country).

I have all of my servers use the pam_ldap module in addition to setting
my nsswitch.conf to use ldap.  Accounts in my openldap server which also
exist in AD and which I would like to authenticate against use a local
saslauthd daemon to support kerberos5 to our AD infrastructure.
Accounts which do not exist in AD and I don't want them to are added to
openldap as well but because of the value of the userPassword attribute
they use local authentication instead of passing the request to
saslauthd.  Basically, I only use AD for authentication (SSO) when
needed (typically for humans) and openldap for universal daemon accounts
or other ancillary type accounts (plus rfc2307 type NIS data).
Modifying the AD schema to support rfc2307 was not an option at the time
either.

This is far from elegant because many ldap attributes must be duplicated
and made consistent in both AD and openldap but it has worked out quite
well for us.  The more sophisticated overlays weren't available to us
when we rolled this out and I wasn't really familiar with any solid and
free meta directory servers.  I wonder if I could have done something
with referrals for the ldap attributes that are duplicated... or does
anyone recommend a solid and free meta directory server?  Hope this
helps someone.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] [OT] DR

2009-05-26 Thread Scott McClanahan
I remember a thread many months ago where someone asked about a disaster
recovery template or guide and several people on this list linked some
really good content.  I can't seem to find that thread now and neglected
to make note of the links but I do recall that some of the guides came
from a site that had many other industry best practices type guides.
Any insight here or do you need more info?  Thanks.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [OT] Network switches

2009-03-26 Thread Scott McClanahan

 
 
 A 3548 is only layer 2 anyway, i.e. ethernet switching, i.e. below
 IP... A model sometimes confused with the 3548 is the 3550-48, the
 48x100M member of the 3550 series that replaced the 3500 series and as
 such the 3548, which does have layer 3 functionality in the EMI
 releases, it's pretty good too with wire speed forwarding even when
 using some of the layer 3 featureset... But, it won't do any layer 3
 IPv6 stuff as some of the tricks used to get the speed include having
 certain functions done with dedicated silicon which can't cope with
 IPv6 and of course can't be upgraded with firmware (some versions of
 firmware have claimed some IPv6 support, but, I've not seen any
 success with it)
 
 d
 
 

I'm the OP in case you've forgotten since this thread has been so active
but just wanted to say thanks to everyone for the feedback!

On the subject of layer 3 switching, it's an absolute must for us.  IPv6
is not important at all to us.  I, as the admin, care most about
manageability, servicability (not sure if that's a word),  and security.

I'll probably rule out anything that doesn't offer at least 48 ports of
10/100/1000, ssh, port mirroring or spanning sessions, snmp, unique
spanning trees per vlan, and something like vrrp.  It would be nice to
have 802.3ad (I think that's the right one) capability to do some link
aggregation between the switches as well.  

Not really asking for anything in this post but just providing more
information in case you're interested.  Thanks again.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] [OT] Network switches

2009-03-23 Thread Scott McClanahan
I'm looking to acquire a few new core switches for our network which
would be a major upgrade from the cheap unmanaged things we currently
have.  Basically, just users, servers, and other simple network devices
will be plugged into them but I'd like to start doing some testing with
iSCSI for various non-production reasons.  I have no allegiance to a
particular vendor although I do have a Cisco background.  I'd like them
to be at least 10/100/1000 (no need for power over ethernet) and include
many of the features that are most important to me in a managed switch,
including:


* vlans
* mstp or some well established form of per vlan spanning tree
* acl's
* port mirroring or what cisco calls span sessions
* snmp
* ssh enabled remote management
* support w/ updates and bugfixes


I need at least 48 ports per device and obviously would like them to be
fast.  Most importantly, I'd like to know what you guys prefer as
operations dudes and what pitfalls to avoid.  Also, are there other
features you folks would demand to have in your switches that I haven't
mentioned?  I can provide more information if you'd like.  Thanks.

Oh, cost is sort of an issue (small/medium sized business) but right now
insight from you guys is what's important and I can work out the cost
issue later.  Thanks again.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] cisco netflow analyzer?

2009-02-25 Thread Scott McClanahan
  
  i've been pretty impressed with nfsen.  took a little bit of fiddling to 
  figure out, but lets me drill down into things pretty well.
 
 Seconded.  nfsen is awesome.  Bit of a learning curve, but extremely
 powerful once you get the hang of it!
 
 You can also use iptables and the ULOG target to generate flow
 information from your Linux boxes and send the output to nfsen/nfcapd
 as well!
 
 Ray

I'm not trying to hijack this thread but do you find any significant
overhead involved with using the ULOG target or packet loss in your
statistics?  Would you have a ULOG target very early on in your FORWARD
filter to log all packets?  Do those packets go to a ulogd instance and
then to disk (rrd to limit disk usage) for nfsen to use?

I'm concerned with losing packets in my current ntop configuration (not
using pf_ring) and am looking at less obtrusive alternatives like gulp
or ulog to first get ALL of the packets and with as little overhead as
possible move that data to a location where analysis can happen using
ntop or nfsen.  Thanks.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] BiND Failover

2009-02-20 Thread Scott McClanahan
On Fri, 2009-02-20 at 15:36 +0100, Per Qvindesland wrote:
 Hi All
 
 Thanks for all your answers, I agree it would be better with heartbeat then
 to mock around with dns and a very slow update time.
 
 Regards
 Per Qvindesland
 

Another benefit is that failover occurs much more quickly when using a
floating IP managed with heartbeat compared to using multiple server
listings in your clients dns and ldap config files.  The default timeout
for EACH lookup is killer (if not using client side caching) when the
first server is down and the responses must come from the second one in
the list.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] LDAP and expired passwords

2008-10-31 Thread Scott McClanahan
On Fri, 2008-10-31 at 16:32 -0400, Steve Thompson wrote:
 CentOS 5.2 with OpenLDAP 2.3.27, nss_ldap_253.13, using TLS, i686 and 
 x86_64.
 
   LDAP password information update failed: Referral
 
 If I comment out ssl start_tls, the referral to the master is followed 
 and the password change operation succeeds. I've found references to 
 problems with earlier releases of pam_ldap when referrals were not 
 properly followed when using TLS, and these are supposed to be fixed; 
 apparently not in my case. Can anyone hit me with the clue stick?

Does the common name in the certificate or the x509 v3 extensions match
the hostname used in the referral in your slapd.conf?  Is the
certificate issued by the ldap server you are being referred to signed
by a trusted CA?  Following referrals using start_tls works just fine
for me.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] device driver useage

2008-10-23 Thread Scott McClanahan
On Thu, 2008-10-23 at 13:22 +0200, Geoff Galitz wrote:
 
 
 Under Centos 5.X, how can I determine with 100% certainty what driver is
 associated with a given device other than referencing dmesg?  For example,
 what tool can I use to tell for sure what driver is attached to my eth0
 device?  
 

One way is to crawl the sys file system.  On one of my systems the
driver can be seen by viewing the target in
the /sys/class/net/eth0/driver link.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] [OT] VPN/DMZ best practices

2008-08-14 Thread Scott McClanahan
There is such a wealth of knowledge and personal experience on this list
that I'd like to get your opinions on our current situation.

Currently, we have a simple tri-homed firewall with the internal network
on one interface, the dmz on another, and the dirty internet on the
last.  Also, there is a spare interface on the box which is unused.  We
use CentOS and manually maintain our rule sets and routes since it's not
really that complex.

I'd like to setup a vpn connection between our office and a remote
office, as well as, allow remote users to vpn into there desktops and
map samba shares.  I would prefer to tie in the openvpn software with
our internal openldap server.  Our dmz is currently not in use at all
but will be soon, hosting our software.  Having said all of this, what
insights do you have for the following:

1.  What are your recommendations for where the vpn (openvpn on linux)
appliance should reside?  In the dmz?  Internally and configure the
firewall to allow (and nat) vpn connections?  On the unused interface in
a different dmz than our hosting software?  Somewhere else?

2.  Should I abandon the single firewall approach and instead use two
firewalls in a more traditional setup (gateway firewall - dmz -
internal firewall)?  If so, where should the vpn appliance go?

I'll probably have more questions based on your answers and I look
forward to the responses.  Thanks.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] [OT] Firefox 3

2008-06-17 Thread Scott McClanahan
This is completely off topic but just curious if you guys had any extra
insight into what time today Firefox 3 will be released.  Thanks.
 
 
- scott
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] [OT] Firefox 3

2008-06-17 Thread Scott McClanahan
Sorry for the waisted disk space.  Found it below.
 
ftp://mozilla.isc.org/pub/mozilla.org/firefox/releases/3.0/linux-i686/en
-US/index.html



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Scott McClanahan
Sent: Tuesday, June 17, 2008 10:48 AM
To: centos@centos.org
Subject: [CentOS] [OT] Firefox 3


This is completely off topic but just curious if you guys had any extra
insight into what time today Firefox 3 will be released.  Thanks.
 
 
- scott
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] sed

2008-05-23 Thread Scott McClanahan
Not specific to CentOS but I know you guys would be really helpful
anyhow.  Basically, I have a file which has been editted in the past
very similarly to the hosts file only now I want to use it as a hosts
file and need to run some fancy sed to massage the data into shape.
Currently, the data in the file is in the form of ip address tab
short hostname space short hostname alias.  In some cases there
may not be any aliases so the end of line would be right after the short
hostname (no space at the end either).  In other cases there could be
many space separated short hostname aliases.  What I have been trying to
do without success is add our domain name to the first string after the
ip address and tab character.  As an example,
 
== Before ==
 
1.1.1.1foo
10.10.10.10bar bar2
100.100.100.100foobar foobar2 foobar3
 
 
== After ==
 
1.1.1.1foo.contoso.com
10.10.10.10bar.contoso.com bar2
100.100.100.100foobar.contoso.com foobar2 foobar3
 
Any advice on how to pull this off?  Thanks.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] local root exploit

2008-02-11 Thread Scott McClanahan

On Mon, 2008-02-11 at 10:45 -0800, Akemi Yagi wrote:
 On Feb 11, 2008 8:19 AM, Scott McClanahan [EMAIL PROTECTED] wrote:
 
  On Mon, 2008-02-11 at 04:52 -0800, Michael A. Peters wrote:
   Valent Turkovic wrote:
I saw that there is a local root exploit in the wild.
http://blog.kagesenshi.org/2008/02/local-root-exploit-on-wild.html
   
And I see my centos box still has:  2.6.18-53.1.4.el5
   
yum says there are no updates... am I safe?
   
Valent.
 
   The current kernel is 53.1.6.el5
  
   If yum isn't seeing it - it probably needs to clean its cached headers.
  
   try:
  
   yum clean headers
   yum update kernel
  
   However - the 53.1.6.el5 release also is vulnerable, so you may as well
   wait for the exploit to be fixed before updating. I'm guessing CentOS
   will do it fairly quickly after rhel does.
  
 
  I understand that a known root exploit must be patched but I'm curious
  to know if we upgrade to the fixed kernel once released will it also
  include the degraded nfs performance discussed here:
 
  https://bugzilla.redhat.com/show_bug.cgi?id=431092
 
 We have to wait and see, but my impression is that the nfs fix would
 not be in the updated kernel (I hope I am wrong).  They are talking
 about getting it into 5.2 (even possibly into 5.3).  I can see that
 this is a problem.  Now, we can not stay with 53.1.4  on the systems
 where the local root exploit is a serious problem.
 
 Akemi
 
 Akemi

Yes, until now we had no problem stalling on 53.1.4.  I guess we'll have
to test how badly the nfs performance degradation actually is under a
heavy load in our environment.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] local root exploit

2008-02-11 Thread Scott McClanahan

On Mon, 2008-02-11 at 04:52 -0800, Michael A. Peters wrote:
 Valent Turkovic wrote:
  I saw that there is a local root exploit in the wild.
  http://blog.kagesenshi.org/2008/02/local-root-exploit-on-wild.html
  
  And I see my centos box still has:  2.6.18-53.1.4.el5
  
  yum says there are no updates... am I safe?
  
  Valent.
  ___
  CentOS mailing list
  CentOS@centos.org
  http://lists.centos.org/mailman/listinfo/centos
 
 The current kernel is 53.1.6.el5
 
 If yum isn't seeing it - it probably needs to clean its cached headers.
 
 try:
 
 yum clean headers
 yum update kernel
 
 However - the 53.1.6.el5 release also is vulnerable, so you may as well 
 wait for the exploit to be fixed before updating. I'm guessing CentOS 
 will do it fairly quickly after rhel does.
 

I understand that a known root exploit must be patched but I'm curious
to know if we upgrade to the fixed kernel once released will it also
include the degraded nfs performance discussed here:

https://bugzilla.redhat.com/show_bug.cgi?id=431092


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: tail command

2008-02-04 Thread Scott McClanahan

On Mon, 2008-02-04 at 14:09 -0800, Scott Silva wrote:
 on 2/4/2008 1:56 PM Scott McClanahan spake the following:
  In centos 4 we used tail in the following way:
  
  tail +83 file
  
  That would tail the contents of the file starting at line 83.  In centos
  5 that same command complains about the file +83 not being found.  It
  appears that the + option in tail doesn't work the same way in centos 5.
  Is there another easy way to grab the contents of a file starting at a
  certain line number and beyond.
 I think it would be tail -n +83 file

Ahh, yes.  Because it can be a line count or byte count.  The -n wasn't
necessary in the old coreutils.  Thanks alot.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] tail command

2008-02-04 Thread Scott McClanahan
In centos 4 we used tail in the following way:

tail +83 file

That would tail the contents of the file starting at line 83.  In centos
5 that same command complains about the file +83 not being found.  It
appears that the + option in tail doesn't work the same way in centos 5.
Is there another easy way to grab the contents of a file starting at a
certain line number and beyond.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HA software advice

2008-01-23 Thread Scott McClanahan
I neglected one obvious detail, this will running on 32 bit CentOS 5.1.

On Wed, 2008-01-23 at 15:51 -0500, Scott McClanahan wrote:
 We are in need of some very basic software that will give us the ability
 to swing an ip address from one host to another during controlled
 maintenance or host failure.  For now the IP address will be the only
 resource that is shared and there will never be a need for shared
 storage.  Eventually we may want to monitor processes for health
 (probably just read in pid file) and it would be great if the
 recommended software had this ability as well but not completely
 necessary.  The process monitoring part is just me trying to think ahead
 but it definitely wouldn't be needed in the near future.
 
 Ideally, this should be light weight user land code that hopefully
 already comes easily with the distribution :)
 
 Any suggestions?  Thanks.
 
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] HA software advice

2008-01-23 Thread Scott McClanahan

On Wed, 2008-01-23 at 22:20 +0100, Tomas Ruprich wrote:
 yum install heartbeat 
 
 Very robust, very reliable, easy to configure, easy to use :-) We use it 
 for almost every critical server for about 3 years without any problem.
 
 http://www.linux-ha.org/
 
   Tomáš Ruprich [EMAIL PROTECTED]
   DCD IICT MUAF Brno www.mendelu.cz, is.mendelu.cz
   tel.: +420 545 132 885, +420 602 127 744
   [EMAIL PROTECTED]
 

I had originally considered heartbeat but just didn't know if version 2
was overkill.  It's a pretty capable package and I just didn't want to
get in over my head for this project.  Is version 2 still pretty simple
if you want it to be?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] tick_divider

2007-12-06 Thread Scott McClanahan
Just installed CentOS 5.1 on VMware ESX and am attempting to play with
the newly added tick_divider feature.  It doesn't seem to be making any
difference in the number of timer interrupts though.  I set
tick_divider=10 which should reduce the number of timer interrupts to
100.

I wrote a nasty little scripts that queries /proc/interrupts every 1
second and still see an increase each second in about 1000 interrupts.  

The server is:

uname -srvmpio

Linux 2.6.18-53.1.4.el5 #1 SMP Fri Nov 30 00:45:16 EST 2007 i686 i686
i386 GNU/Linux

Obviously not running 64bit.  Only one cpu has been allocated to this
vm.  Has anybody else used this successfully?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] weird load values

2007-12-06 Thread Scott McClanahan
On Thu, 2007-12-06 at 16:48 +0100, Tomasz 'Zen' Napierala wrote:
 Wednesday 05 December 2007 15:39:41 J. Potter napisał(a):
  Hi List,
 
  I'm stumped by this:
 
  load average: 10.65, 594.71, 526.58
 
  We're monitoring load every ~3 minutes. It'll be fine (i.e. something
  like load average: 2.14, 1.27, 1.03), and then in a single sample,
  jump to something like the above. This seems to happen once a week or
  so on a few different servers (all running in a similar application).
  I've never seen the 1 minute sample spike as high as the 5 or 15
  minute samples.
 
  Seeing as that last value is a 15 minute period, well, it doesn't seem
  possible that one can have a 500+ 15 minute sample without having
  observed a spike in the 5 minute sample at least 5 minutes before.
 
  Also, there aren't 500+ processes on these systems -- it's typically
  around 100 total processes (ps auxw | wc -l). (Is there a way to see
  the total count of kernel-level threads?)
 
  Thoughts?
 
 As mentioned before, IO could give such strange results. I suggest launching 
 dstat with logging to a file, and analyzing the file afterwards.
 

What about using sar to report the previous run queue history.  AFAIK
the run queue figures don't include processes in an uninterruptable
sleep state (disk IO).

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] A special kernel for linux as guest os

2007-09-21 Thread Scott McClanahan
On Thu, 2007-09-20 at 15:46 -0700, Akemi Yagi wrote:
 On 9/20/07, Yuji Tsuchimoto [EMAIL PROTECTED] wrote:
  Dear Yagi-san,
 
   I heard from the horse's mouth that the CentOS team is working on the
   100Hz centosplus kernel. I think your request triggered the action :-)
They want make people happy.
  That sounds nice!
  This TIPS, CONFIG_HZ=100, is one of FAQs. It will make most of us happy.
 
  Now we can get kernel-vm package on dev.centos.org.
  Is it a test release of the special kernel?
  I installed the kernel-vm. Its change-log shows HZ=100.
  And the kernel seems better for clock interval on VMWare.
  Thanks a lot.
  Yuji
 
 Tsuchimoto-san,
 
 Yes, they are in testing.  Some of us have been running the 100HZ
 kernel for more than 2 months and have not seen any problem so far.
 If you wish to know more details about the development of the
 virtualization-optimized kernel, please take a look at:
 
 http://bugs.centos.org/view.php?id=2189
 
 And feel free to add any comments you have on that report.
 
 Akemi
 ___

Will the only deviation from the base/updates kernels be the decreased
number of timer interrupts?  Thanks.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] grep

2007-08-28 Thread Scott McClanahan
On Tue, 2007-08-28 at 10:08 -0400, Stephen Harris wrote:
  Not a CentOS specific question, although I am running grep on CentOS 4.3
  but how would you grep out a series of lines in a file starting at a
  specific point.  For instance, if I have a file named foo and I want to
  grep out the next 5 lines after the first and only instance of the
  string bar how could I pull that off?  Thanks so much.
 
 What do you mean by grep out ?  Do you want to display those lines,
 or skip those lines?  Do you want to see the bar line?  Is that included
 in the 5 lines?
 
 Anyway, you probably want to use sed here, rather than grep.
 
I'd like to skip those lines.  I'd like to skip the line with bar and
the following five lines.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] grep

2007-08-28 Thread Scott McClanahan
On Tue, 2007-08-28 at 10:27 -0400, Stephen Harris wrote:
 On Tue, Aug 28, 2007 at 10:13:00AM -0400, Scott McClanahan wrote:
  On Tue, 2007-08-28 at 10:08 -0400, Stephen Harris wrote:
Not a CentOS specific question, although I am running grep on CentOS 4.3
but how would you grep out a series of lines in a file starting at a
specific point.  For instance, if I have a file named foo and I want to
grep out the next 5 lines after the first and only instance of the
string bar how could I pull that off?  Thanks so much.
   
   What do you mean by grep out ?  Do you want to display those lines,
   or skip those lines?  Do you want to see the bar line?  Is that included
   in the 5 lines?
   
   Anyway, you probably want to use sed here, rather than grep.
   
  I'd like to skip those lines.  I'd like to skip the line with bar and
  the following five lines.
 
 Like this?
 
   $ cat xx
   line 1
   line 2
   line bar
   line after 1
   line after 2
   line after 3
   line after 4
   line after 5
   line after 6
   line after 7
   $ sed '/bar/,+5d' xx
   line 1
   line 2
   line after 6
   line after 7
 
Beautiful man! Hats off. I've never used sed like that but I'll surely
remember that one.  Thanks from everybody.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] grep

2007-08-28 Thread Scott McClanahan
Not a CentOS specific question, although I am running grep on CentOS 4.3
but how would you grep out a series of lines in a file starting at a
specific point.  For instance, if I have a file named foo and I want to
grep out the next 5 lines after the first and only instance of the
string bar how could I pull that off?  Thanks so much.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos