I wanted to play around with Chef locally for testing pulling encrypted variables from data bags. Prerequisites ChefDK (includes chef-solo) Encryption Create a Cookbook: chef generate cookbook “firstcookbook” Data Bags Create the encryption key for encrypting data bag items: openssl rand -base64 512 > ~/.chef/encrypted_data_bag_secret Create a local data bag: knife data bag create ssh-private-keys… Read more »
Posts By: jonny
I had to fiddle a bit with this so possibly worth keeping a note of it. I wanted to pull all the node hostnames and ip addresses from chef for use in hostname lookups and ssh config.
In newer versions of MySQL it looks like the ‘Password’ field has been replaced with the ‘authentication_string’ field so older instructions online may not work. Stop the currently running MySQL service: systemctl stop mysql Start mysql skipping permissions tables: mysqld_safe –skip-grant-tables Then in another terminal run the mysql client: mysql Then the following SQL: UPDATE… Read more »
I wired a CP2102 USB to TTL Serial Converter to the LHT65 UART connector – see images below: Then on the linux command line ran: dmesg | tail to check the device name that was added by the system. I then connected to that serial device using screen: sudo screen /dev/ttyUSB0 If you type you… Read more »
The example below uses the database named netbox so change as needed. It gets a list of the tables in the database and for each one performs a full vacuum and analyze. There is probably a more efficient way to do this from the psql prompt but this is what worked for me: su -… Read more »
In this scenario I wanted to be able to run several VMs that can communicate with each other on a private subnet e.g. 10.10.10.* and also be access the internet for updates etc. Eventually I want to expose some of the internal services. My proxmox server has one network interface with an internet facing IP… Read more »
Had a problem with Nagios/NRPE checks that are configured to write a status file as part of their check. The path /var/logstate was the target created the policy below. Andrew (Urban Penguin) Youtube video is an excellent resource. Install selinux utilities: yum install policycoreutils policycoreutils-devel setools-console setroubleshoot The audit log (/var/log/audit/audit.log) was showing the type=AVC… Read more »
Nagios check for Dell OpenManage was failing after upgrade to srvadmin 9.2 with: UNKNOWN: Problem running ‘omreport chassis memory’: Error: SMStatus: 700 UNKNOWN: Problem running ‘omreport chassis batteries’: Error! XML Transformation failed UNKNOWN: Problem running ‘omreport chassis pwrmonitoring’: Error: SMStatus: 700 UNKNOWN: Problem running ‘omreport chassis removableflashmedia’: Error: SMStatus: The check command: /usr/lib64/nagios/plugins/check_openmanage -s -b… Read more »
In the WATO menu choose ‘Check Plugins’ and then ‘Networking checks without an agent’. Find the ‘HTTP/HTTPS connection’ option and then click on ‘Check HTTP service’ beside Parameter rule set: Scroll down to the bottom and click ‘Create rule in folder’ Set the parameters for the check , then save and activate.
On your check_mk install under the WATO menu navigate to ‘Monitoring Agents’ find and click on the link for ‘Check for APT updates (Debian, Ubuntu)’. This is the check plugin to add to the server so copy that code. Copy the contents of that check file to a file named mk_apt file in the /usr/lib/check_mk_agent/local… Read more »