Maven task, field Goal:
release:prepare -DpushChanges=false
Bamboo maven release
Leave a reply
Elasticsearch UNASSIGNED shards
Symptoms
$ curl localhost:9200/_cat/allocation?v
shards disk.indices disk.used disk.avail disk.total disk.percent host ip node
97 2.2gb 39.2gb 29.4gb 68.7gb 57 10.0.1.1 10.0.1.1 es-cluster
192 UNASSIGNED
zabbix agent: Timeout while executing a shell script
Symptoms in zabbix agent log:
Failed to execute command "/etc/zabbix/scripts/exim-ping.sh": Timeout while executing a shell script. Failed to execute command "/etc/zabbix/scripts/phpfpm.sh php7-www ": Timeout while executing a shell script.
ansible reboot hosts playbook
cat <<EOF > playbook_reboot.yml - name: "Reboot" hosts: all become: yes become_method: sudo gather_facts: no tasks: - reboot: EOF
rabbitmq: service can not start
Initial state
OS: Amazon Linux 2
Try to install and start rabbitmq-server from packages
Continue reading
Terraform rename resource
Vendor documentation – https://www.terraform.io/docs/cli/commands/state/mv.html
Rename ec2 from static name to array element
terraform state mv aws_instance.ec2_service-1 aws_instance.ec2_service[0] terraform state mv aws_instance.ec2_service-2 aws_instance.ec2_service[1]
docker-compose notes
version: '3.8'
services:
filebeat-app:
image: docker.elastic.co/beats/filebeat:${ELK_VERSION}
hostname: "{{.Service.Name}}-{{.Task.Slot}}"
deploy:
mode: global
placement:
max_replicas_per_node: 1
constraints:
- "node.labels.zoom-connector==true"
ansible filter to_yaml and encrypted values
Initial state
Variable
kibana_config_yml:
server.name: kibana
server.host: "0"
...
elasticsearch.username: "kibanaserver"
elasticsearch.password: !vault |
$ANSIBLE_VAULT;1.1;AES256
65653662323563643132363436646335323539343530333361656432656333373034346234636462
...
SearchGuard helpful commands
Elasticsearch helpful commands
rabbitmq: cluster on docker swarm can not be assembled
RabbitMQ cluster on docker swarm can not be assembled
Symptoms
oqpqhlailzzn myproject_rabbitmq-2.1 rabbitmq:3.7-management-alpine ip-10-103-32-185.us-east-1.compute.internal Shutdown Failed 22 seconds ago "task: non-zero exit (69)" ngo5qnu2n4lk myproject_rabbitmq-3.1 rabbitmq:3.7-management-alpine ip-10-103-47-234.us-east-1.compute.internal Shutdown Failed 22 seconds ago "task: non-zero exit (69)"
Pull image from AWS ECR of other account with EC2 IAM Role
AWS Account ECR Owner: 933747831396
Added IAM Role: CrossRoleForPuller
arn:aws:iam::933747831396:role/CrossRoleForPuller
Docker stack deploy does not pull images from AWS ECR: SOLVED
Issue
docker stack deploy does not pull images from AWS ECR (private registry)
Reason
Docker in swarm mode using credentials from swarm managers for deploy command
Continue reading
cassandra cluster on docker swarm
Varmilo VA87M keyboard issue: Caps Lock and Left CTRL keys has been switched
Description of problem
Date: 2021-02-15
Keyboard model: Varmilo VA87M
Article: VA87MR
After “magic combination” keys Caps Lock and Left CTRL switched between themselves.
Continue reading
docker helpful commands
Get labels from nodes in swarm cluster
# execute on manager
docker node ls -q | xargs docker node inspect -f '[{{ .ID }} {{ .Description.Hostname }}]: {{ .Spec.Labels }}'
#
docker node ls -q | xargs docker node inspect \
-f '{{ .ID }} [{{ .Description.Hostname }}]: {{ range $k, $v := .Spec.Labels }}{{ $k }}={{ $v }} {{end}}'
msmtp notes
transmission notes
Issue: Transmission Remote GUI 403 Forbidden
Package: transmission-daemon Version: 2.94-2+deb10u1
find / -mount -type f -name settings.json -exec ls -l {} \;
-rw------- 1 root root 2186 Sep 20 22:29 /root/.config/transmission-daemon/settings.json
-rw-rw---- 1 debian-transmission debian-transmission 2398 Oct 30 16:37 /etc/transmission-daemon/settings.json
-rw------- 1 debian-transmission debian-transmission 2226 Oct 30 16:45 /home/debian-transmission/.config/transmission-daemon/settings.json
certbot notes
Issue: Unable to recover files from /var/lib/letsencrypt/temp_checkpoint
# certbot 1.7.0, CentOS 7 certbot --nginx -d site.domain.com # echo Saving debug log to /var/log/letsencrypt/letsencrypt.log Unable to recover files from /var/lib/letsencrypt/temp_checkpoint Incomplete or failed recovery for /var/lib/letsencrypt/temp_checkpoint Unable to revert temporary config
I did. Solved:
yum update mv /var/lib/letsencrypt /var/lib/letsencrypt.original
viber linux desktop increase font size
sed -i 's|^Exec=.*$|Exec=bash -c "QT_SCALE_FACTOR=1.3 /opt/viber/Viber" %u|g' /usr/share/applications/viber.desktop
pillar for pseudo random hour value in cron
The value will not be random. Value will be generated from static server data, and will be in some range using python function.
For range [0..2]:
( N % 3 )
Monitoring Bad Practices
salt notes
# master configuration dump salt --config-dump
auditd and cagefs
uname -r Linux 2.6.32-673.26.1.lve1.4.29.el6.x86_64
auditctl -l -w /home/ -p w -k rule_home222222222222222
Nextcloud notes
Move server to other host
- Install Nextcloud on the new server
- Set the old and new server to maintenance mode
- Dump the database on the old
- Copy the complete data directory to the new server
- Restore the database on the new server
- Edit the config.php on the new server. I think you have to copy passwordsalt a d secret from the old to the new server.
- Change the DNS record to point at your new server.
- Turn off maintenance mode on the new server.
Asterisk stop log to syslog
Issue
Asterisk put logs to /var/log/syslog
Affected OS: Ubuntu, Debian 9
Solution:
# Step1: create file for rsyslog
cat << EOF > /etc/rsyslog.d/10-asterisk.conf
if \$programname == "asterisk" then { stop }
EOF
# Step2:
systemctl restart rsyslog.service
jinja create file from template without empty lines
Issue
Creation of file from pillar simple list with Jinja template will be create empty line, in top or bottom of file, dependence for template syntax.
You can not create file without empty lines.
#!/usr/bin/python
from jinja2 import Template
d = {'testlist':['item1','item2','item3']}
tmpl = '''{%- for item in testlist %}
{{ item }}
{%- endfor %}'''
t = Template(tmpl)
print( t.render( d ) )
jinja set dictionary variable
Host name pattern
{host-id}[.dev].{dc-id}.{domain}
Host name examples
h01.kyiv01.domain.com h01.lon1.domain.com vs02.lon2.domain.com vs02.dev.lon1.domain.com h01.ny01.domain.com
salt class with jinja for timezone definition
Virtualbox on linux Troubleshooting
The vboxdrv kernel module is not loaded.
Symptoms:
$ VBoxManage --version
WARNING: The vboxdrv kernel module is not loaded. Either there is no module
available for the current kernel (5.4.28-1-MANJARO) or it failed to
load. Please recompile the kernel module and install it by
sudo /sbin/vboxconfig
You will not be able to start VMs until this problem is fixed.
using map.jinja in salt states
Description from vendor https://docs.saltstack.com/en/latest/topics/best_practices.html
My opinion: NEVER USE
Reason 1
It is not possible to see the values from this map on node or salt-master by any command, like:
pillar.get pillar.items
Reason 2
State will applied to the minion, even when node (or/and any parent class) has no any pillar data to this state.
Continue reading