My Rice Record

AppArmor on Ubuntu

2015-03-26T15:40:00.003+08:00

"AppArmor is a Mandatory Access Control (MAC) system which is a kernel (LSM) enhancement to confine programs to a limited set of resources. AppArmor's security model is to bind access control attributes to programs rather than to users. AppArmor confinement is provided via profiles loaded into the kernel, typically on boot. AppArmor profiles can be in one of two modes: enforcement and complain. Profiles loaded in enforcement mode will result in enforcement of the policy defined in the profile as well as reporting policy violation attempts (either via syslog or auditd). Profiles in complain mode will not enforce policy but instead report policy violation attempts.

AppArmor differs from some other MAC systems on Linux: it is path-based, it allows mixing of enforcement and complain mode profiles, it uses include files to ease development, and it has a far lower barrier to entry than other popular MAC systems.

AppArmor is an established technology first seen in Immunix and later integrated into Ubuntu, Novell/SUSE, and Mandriva. Core AppArmor functionality is in the mainline Linux kernel from 2.6.36 onwards; work is ongoing by AppArmor, Ubuntu and other developers to merge additional AppArmor functionality into the mainline kernel."

(From https://wiki.ubuntu.com/AppArmor)

AppArmor is similar with the SELinux on RedHat linux family. So if changing default location of files, we have to change these lines of the relevant AppArmor configuration file under the /etc/apparmor.d directory. For example, moving data files of mysql from which default place /var/lib/mysql to new directory /mnt/mysql, we should to add the following four lines to the setting file: /etc/apparmor.d/usr.sbin.mysqld.

/mnt/mysql/ r,

/mnt/mysql/** rwk,

/mnt/mysql/plugin/ r,

/mnt/mysql/plugin/*.so* mr,

Explanation briefly:

read /mnt/mysql/

read+write+lock /mnt/mysql/**

read /mnt/mysql/plugin/

read+PROT_EXEC(mapping into memory) /mnt/mysql/plugins/*.so*

Otherwise there are some error messages:

......

150326 6:59:44 InnoDB: Operating system error number 13 in a file operation.
InnoDB: The error means mysqld does not have the access rights to
InnoDB: the directory.
InnoDB: File name ./ibdata1
InnoDB: File operation call: 'open'.
InnoDB: Cannot continue operation.
......
"

OpenVPN Client issue

2014-09-16T09:33:00.001+08:00

Problem:

OpenVPN GUI could not connect to the VPN server and threw out the following error messages on Windows 8 :

netsh command failed: returned error code 1

Reason:

The http://openvpn.net/index.php/open-source/documentation/manuals/69-openvpn-21.html says

The --script-security option was introduced in OpenVPN 2.1_rc9. For configuration file compatibility with previous OpenVPN versions, use: --script-security 3 system

Solutions:

added "script-security 2 system" into the config.

Best Regards,
Jumping Qu

Love Story -- Talyor Swift

2014-07-27T06:44:00.000+08:00

We were both young when I first saw you.
I close my eyes and the flashback starts:
I'm standing there on a balcony in summer air.

See the lights, see the party, the ball gowns.
See you make your way through the crowd
And say, "Hello, "
Little did I know...

That you were Romeo, you were throwing pebbles,
And my daddy said, "Stay away from Juliet"
And I was crying on the staircase
Begging you, "Please don't go"
And I said...

"Romeo, take me somewhere we can be alone.
I'll be waiting; all that's left to do is run.
You'll be the prince and I'll be the princess,
It's a love story, baby, just say, 'Yes.'"

So I sneak out to the garden to see you.
We keep quiet 'cause we're dead if they knew
So close your eyes... escape this town for a little while.
Oh, oh.

'Cause you were Romeo – I was a scarlet letter,
And my daddy said, "Stay away from Juliet."
But you were everything to me,
I was begging you, "Please don't go."
And I said...

"Romeo, take me somewhere we can be alone.
I'll be waiting; all that's left to do is run.
You'll be the prince and I'll be the princess.
It's a love story, baby, just say, 'Yes.'

Romeo, save me, they try to tell me how to feel.
This love is difficult but it's real.
Don't be afraid, we'll make it out of this mess.
It's a love story, baby, just say, 'Yes.'"

Oh, oh.

I got tired of waiting
Wondering if you were ever coming around.
My faith in you was fading
When I met you on the outskirts of town.
And I said...

"Romeo, save me, I've been feeling so alone.
I keep waiting for you but you never come.
Is this in my head? I don't know what to think."
He knelt to the ground and pulled out a ring and said...

"Marry me, Juliet, you'll never have to be alone.
I love you, and that's all I really know.
I talked to your dad – go pick out a white dress
It's a love story, baby, just say, 'Yes.'"

Oh, oh, oh, oh, oh.

'Cause we were both young when I first saw you...

岁月神偷

2014-07-27T06:28:00.001+08:00

岁月神偷   -- 金玟岐

能够握紧的就别放了
能够拥抱的就别拉扯
时间着急的
冲刷着
剩下了什么
原谅走过的那些曲折
原来留下的都是真的
纵然似梦啊 半醒着
笑着哭着都快活
谁让
时间是让人猝不及防的东西
晴时有风阴有时雨
争不过朝夕
又念着往昔
偷走了青丝却留住一个你
岁月是一场有去无回的旅行
好的坏的都是风景
别怪我贪心
只是不愿醒
因为你只为你愿和我一起
看云淡风轻

[Mac OS] Command line using proxy

2014-02-19T11:56:00.000+08:00

        export HTTP_PROXY='http://xxx.yyy.zzz.www:8080'
    export http_proxy=$HTTP_PROXY
export HTTPS_PROXY='https://xxx.yyy.zzz.www:8080'
export https_proxy=$HTTPS_PROX

URL:

1. Set the Mac OS X SOCKS proxy on the command line

https://gist.github.com/jordelver/3073101

2. BASH: PROXY SETTINGS

http://blog.marcon.me/post/20217812089/bash-proxy-settings

Redmine2.4 + FastCGI + Apache2 Ubuntu 12.04

2013-11-22T20:10:00.000+08:00

1. apt-get install libfcgi-dev libapache2-mod-fcgid libmysqlclient-dev libmysqlclient18 ruby-dev gem libcurl4-openssl-dev apache2-threaded-dev libapr1-dev libaprutil1-dev redmine-mysql

gem install fcgi

gem install bundler

gem install mysql -v '2.8.1'

bundle install --without development test

3. apache configure

a. virtual host

# Admin email, Server Name (domain name) and any aliases

ServerName domain.com.redmine

ServerAlias redmine.domain.com

# Index file and Document Root (where the public files are located)

DocumentRoot /var/www/redmine/public

Options +Indexes +FollowSymLinks +ExecCGI

AddHandler fcgid-script .fcgi

Options +Indexes +ExecCGI +FollowSymLinks

AllowOverride All

Order allow,deny

allow from all

</Directory>

# Custom log file locations

LogLevel warn

ErrorLog /var/log/redmine/error.log

CustomLog /var/log/redmine/access.log combined

</VirtualHost>

b. /var/www/redmine/public/.htaccess

AddHandler fcgid-script .fcgi

RewriteEngine On

RewriteBase /

RewriteRule ^$ index.html [QSA]

RewriteRule ^([^.]+)$ $1.html [QSA]

RewriteCond %{REQUEST_FILENAME} !-f

RewriteRule ^(.*)$ dispatch.fcgi [QSA,L]

#URLs
1. http://www.redmine.org/projects/redmine/wiki/HowTos

[AWS ELB]upload SSL Certificate of GoDaddy

2013-10-27T07:52:00.012+08:00

1. generate csr

openssl req -new -newkey rsa:2048 -nodes -keyout apps.com.key -out apps.com.csr

Note: apps.com.key : Private Key

2. uploading the apps.com.csr to GoDaddy and complete the request processing

3. waiting the request has been active

4. download the crt from GoDaddy

the package contain three files:
xxxx.crt : Public Key Certificate
gd_bundle.crt : Certificate Chain

5. Decrypt the encryption private key(apps.com.key) file

openssl rsa -in apps.com.key -out private.pem

Note: the apps.com.key could use in apache2 directly, but the ELB could not recognize

6. upload to AWS

iam-servercertupload -b xxxx.crt -k private.pem -s godaddy_apps

way to solve could not display value of utf8-bin on phpmyadmin 4.0.5

2013-08-14T15:10:00.001+08:00

1. issue
the phpmyadmin 4.0.5 could not display fields which type is utf8-bin.

2. change the config.inc.php file like as

"$cfg['Servers'][$i]['extension'] = 'mysqli';"

3. check
use mysqli instead of mysql for php.

Updated:
1. 2014-05-19
added the section about how to change the mysql to mysqli.

AWS support Crash Screenshot

2013-07-08T10:29:00.002+08:00

Recently the support page has been unstable. No reason.

Fixed error messages of aapt on CentOS 5.2

2013-07-03T16:55:00.002+08:00

1. Problem:

#>/usr/bin/aapt d badging /tmp/1344836948.apk

/usr/bin/aapt: /usr/bin/../lib/libz.so.1: no version information available (required by /usr/bin/aapt)
package: name='com.mob.test_126' versionCode='100' versionName='1.0.0'
sdkVersion:'4'
application: label='测试126' icon='res/drawable-mdpi/icon.png'
launchable activity name='com.mob.test_126.MY_TEST_APP_47Activity'label='测试126' icon=''
uses-feature:'android.hardware.touchscreen'
main
supports-screens: 'small' 'normal' 'large'
supports-any-density: 'true'
locales: '--_--'
densities: '120' '160' '240'

2. Checking:

# ldd /usr/bin/aapt
/usr/bin/aapt: /usr/bin/../lib/libz.so.1: no version information available (required by /usr/bin/aapt)
linux-gate.so.1 => (0xb7f8b000)
librt.so.1 => /lib/i686/nosegneg/librt.so.1 (0xb7f79000)
libpthread.so.0 => /lib/i686/nosegneg/libpthread.so.0 (0xb7f62000)
libz.so.1 => /usr/bin/../lib/libz.so.1 (0xb7f4f000)
libstdc++.so.6 => /usr/bin/../lib/libstdc++.so.6 (0xb7e65000)
libm.so.6 => /lib/i686/nosegneg/libm.so.6 (0xb7e3e000)
libgcc_s.so.1 => /lib/libgcc_s.so.1 (0xb7e32000)
libc.so.6 => /lib/i686/nosegneg/libc.so.6 (0xb7cec000)
/lib/ld-linux.so.2 (0xb7f8c000)

3. Reason

The zlib lib is outdate, need update it.

4.Updating to zlib-1.2.5

a. compile zlib-1.2.5

wget zlib-1.2.5.tar.gz

tar xzf zlib-1.2.5.tar.gz && cd zlib-1.2.5 && ./configure
cat Makefile | sed -e 's/-m64/-m32/g' > Makefile.32
make -f Makefile.32

b. backup 1.2.3
mkdir zlib-1.2.3
cp -p /usr/lib/libz.so.1 /usr/lib/libz.so.1.2.3 zlib-1.2.3/

c. active 1.2.5
cp libz.so* /usr/lib/

how to make aapt run on CentOS 5.7 64bit

2013-05-03T17:34:00.000+08:00

========================
Steps
========================

1. /etc/yum.conf
A. backup
cp /etc/yum.conf /etc/yum.conf.orig

B. added the following :
"
multilib_policy=best
"

C. replace
"
exclude=*.i386 *.i686 kernel kernel-xen kernel-debug
"
with
"
exclude=kernel kernel-xen kernel-debug
"

2. add new packages
yum install libstdc++.i386 zlib.i386 glibc.i686

3. try aapt
aapt -h

4. recovery to the /etc/yum.conf to the original
cp /etc/yum.conf.orig /etc/yum.conf

========================
Error mssages during installation
========================
aapt: /bin/../lib/libz.so.1: no version information available (required by aapt)

aapt: error while loading shared libraries: libstdc++.so.6: cannot open shared object file: No such file or directory

aapt: error while loading shared libraries: libz.so.1: cannot open shared object file: No such file or directory

Python: super function

2013-04-26T13:34:00.002+08:00

Things to Know About Python Super
http://www.artima.com/weblogs/viewpost.jsp?thread=236275

How-To Guide for Descriptors

http://users.rcn.com/python/download/Descriptor.htm

Python's Super is nifty, but you can't use it

https://fuhm.net/super-harmful/

Python’s super() considered super!

http://rhettinger.wordpress.com/2011/05/26/super-considered-super/

A Guide to Python's Magic Methods

http://www.rafekettler.com/magicmethods.html

Dependancy problem on CentOS 5.2

2013-04-17T14:02:00.000+08:00

1.Problem

running the "yum update ", it said
"
.........

--> Finished Dependency Resolution
Error: Missing Dependency: libyaml-0.so.1 is needed by package python26-PyYAML

"

2.Reason
need update the rpmforge repository

a. yum --disablerepo=rpmforge remove libyaml*
b. yum update

[AWS S3] share bucket between two separate accounts

2013-02-27T10:52:00.000+08:00

Story:

The user '1111name_iam' under of 111111111111 wants to access objects in the S3 bucket(testlog) under 222222222222.

Setps:

1. edit / add permission on the bucket under the account(222222222222), for example s3://testlog

2. check the permission of the account (111111111111) which want to access the bucket

1. edit the S3 bucket policy and apply under 2222-2222-2222

{

"Version": "2008-10-17",

"Id": "Policy1361927233086",

"Statement": [

{

"Sid": "Stmt1361927216946",

"Effect": "Allow",

"Principal": {

"AWS": "arn:aws:iam::111111111111:user/1111name_iam"

]

"Action": [

"s3:List*",

"s3:Get*"

"Resource": [

"arn:aws:s3:::testlog/*",

"arn:aws:s3:::testlog"

]

}

]

}

2. edit IAM policy of the account 1111name_iam under 1111-1111-1111

make sure he could list/get as you need.

3. now you can access the bucket s3://testlog like as the bucket under 1111-1111-1111.

4. Some URLs:

A. Policy generator
http://awspolicygen.s3.amazonaws.com/policygen.html

B. Element Descriptions
http://docs.aws.amazon.com/IAM/latest/UserGuide/AccessPolicyLanguage_ElementDescriptions.html

C. S3 case
http://docs.aws.amazon.com/AmazonS3/latest/dev/AccessPolicyLanguage_UseCases_s3_a.html

D. ARN & namespace
http://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html

E.Delegating Cross-Account Permissions to IAM Users
http://docs.aws.amazon.com/IAM/latest/UserGuide/DelegatingAccess.html

5. Notice
a. The value of Principal could be Role ARN, like as :

"Principal": {
"AWS": "arn:aws-cn:iam::18xxx8530:role/dxtahxb-prod_azkaban-prod_role"
},

b. the role of arn:aws-cn:iam::18xxx8530:role/dxtahxb-prod_azkaban-prod_role should has a police which related to the s3 object under the bucket of 2222-2222-2222

Update:
1. added reference urls
2. added story section @ 2014-01-25 17:12
3. updated most of content @ 2014-03-06 19:00
4. added the 4.E @2014-03-06 23:01
5. updated @2016-11-11 02:20
6. auto sync between two buckets
http://docs.aws.amazon.com/AmazonS3/latest/dev/crr-how-setup.html

Desktop of Ubuntu precise and FreeNX on AWS EC2

2013-02-20T10:42:00.000+08:00

1. launch a new instance from the AMI(ami-3fec7956)
2. configure the instance and install these obligatory softwares
#
sudo apt-get ugrade

sudo apt-get install build-essential

#add user, if not prompt passwd, should passwd the user

adduser test
mkdir /home/test

chown -R test /home/test
chown -R test:test /home/test
passwd test

visudo

#make sure the value of " PasswordAuthentication" is "yes"
vim /etc/ssh/sshd_config
/etc/init.d/ssh restart

#install desktop
export DEBIAN_FRONTEND=noninteractive
apt-get install -y ubuntu-desktop
add-apt-repository ppa:freenx-team

#install FreeNX Server
aptitude install freenx
wget https://bugs.launchpad.net/freenx-server/+bug/576359/+attachment/1378450/+files/nxsetup.tar.gz
tar zxvf nxsetup.tar.gz
mv nxsetup /usr/lib/nx/nxsetup
chown root:root /usr/lib/nx/nxsetup
/usr/lib/nx/nxsetup --install

3. install NX client
download from here

4. try to connect

5. The ubuntu-3d session doesn’t work with Freenx and will give you an error message “Failed to load session “gnome-fallback”".
then running the command "

sudo echo -e "\n#Use unity 2d for client sessions\nCOMMAND_START_GNOME='gnome-session --session=ubuntu-2d'"|sudo tee -a /etc/nxserver/node.conf

"

Ref:
1. https://help.ubuntu.com/community/FreeNX
2. http://www.dickson.me.uk/2012/06/18/installing-freenx-server-on-12-04-precise-pangolin/
3. http://stackoverflow.com/questions/5132575/how-do-i-setup-ubuntu-desktop-in-ec2
4. http://michaelhallsmoore.com/blog/Desktop-Ubuntu-in-Amazon-EC2-The-Right-Way

auto proxy for Lion

2013-02-18T18:06:00.000+08:00

1. create a .pac file
[root@jumping]# cat simple.pac
//http://www.proxypacfiles.com
//http://tektab.com/2012/09/26/setting-up-automatic-proxy-configuration-pac-file/
//http://www.cses.tcc.edu.tw/~chihwu/proxy-pac.htm

function FindProxyForURL(url, host) {

//Convert to lower case
var lhost = host.toLowerCase();
host = lhost;

// set proxy variable
http_proxy = "PROXY 192.168.18.8:8080";
socket_proxy = "SOCKS 127.0.0.1:7777";

if (dnsDomainIs(host, ".google.com") ||
dnsDomainIs(host, ".ip.cn")||
dnsDomainIs(host, ".blogger.com")||
dnsDomainIs(host, ".gmail.com")||
dnsDomainIs(host, ".appspot.com")||
dnsDomainIs(host, ".facebook.com")||
dnsDomainIs(host, ".twitter.com")) {
return socket_proxy;
}

}

2. config apache by editing httpd.conf
added two lines under define "IfModule mime_module":
"

AddType application/x-ns-proxy-autoconfig .pac
AddType application/x-ns-proxy-autoconfig .dat

"

3. put the simple.pac to the web directory

4. goto "auto proxy configuration" in "Network -> Advanced", then fill in "http://webserver/simple.pac"

5. post check

using procedure to hide/replace fields from results of mysqldump

2013-02-16T14:21:00.001+08:00

1. create procedure
"

DELIMITER //
CREATE PROCEDURE `user_proc` ()
BEGIN
DECLARE email_a VARCHAR(255) DEFAULT 'a@a.com';
DECLARE email_b VARCHAR(255) DEFAULT 'b@b.com';
DECLARE email_c VARCHAR(255) DEFAULT 'c@c.com';
DECLARE email_d VARCHAR(255) DEFAULT 'd@d.com';
DECLARE qq_a VARCHAR(255) DEFAULT '1234';
SELECT CONCAT_WS(',',
user.id,
user.username,
email_a,
IFNULL(user.partner_id,'0'),
IFNULL(user.password,'NULL'),
IFNULL(user.full_name,'NULL'),
email_b,
IFNULL(user.province,'0'),
IFNULL(user.city,'0'),
IFNULL(user.address,'NULL'),
IFNULL(user.zip_code,'NULL'),
IFNULL(user.profession,'NULL'),
IFNULL(user.birthday, 'NULL'),
IFNULL(user.phone,'NULL'),
IFNULL(user.mobile,'NULL'),
IFNULL(user.website,'NULL'),
IFNULL(user.weibo,'NULL'),
qq_a,
email_c,
email_d,
IFNULL(user.hobby,'NULL'),
IFNULL(user.subscription_flg,'1'),
IFNULL(user.delete_flg,'0'),
IFNULL(user.common_market_user_flg,'1'),
IFNULL(user.max_upload_app_count,'5'),
IFNULL(user.receive_app_status_mail,'1'),
user.create_time,
user.last_active_time
) FROM mob2.user;
END //
DELIMITER ;

"

The email_a, email_b, email_c, email_d, qq_a are constants, which will replace corresponding values in mob2.user.

2. call procedure

echo "call user_proc;" | mysql test > /tmp/1.csv

3. import (At first, should delete the some head lines from /tmp/1.csv, that are procedure define)
LOAD DATA INFILE '/tmp/1.csv' INTO TABLE user_temp FIELDS TERMINATED BY ',' LINES TERMINATED BY '\n';

Updated:
1. added import
2. added IFNULL

Gmail Shortcuts

2013-01-29T08:53:00.001+08:00

http://r.evhead.com/hodgepodge/gmail-shortcuts.html

Key	Definition	Action
Gmail Shortcuts
c	Compose	Allows you to compose a new message. <Shift> + c allows you to compose a message in a new window.
<tab> then <Enter>	Send message	After composing your message, use tdis combination to send it automatically. (Supported in Internet Explorer and Firefox, on Windows.)
k	Move to newer conversation	Opens or moves your cursor to a more recent conversation. You can hit <Enter> to expand a conversation.
j	Move to older conversation	Opens or moves your cursor to the next oldest conversation. You can hit <Enter> to expand a conversation.
n	Next message	Moves your cursor to the next message. You can hit <Enter> to expand or collapse a message. (Only applicable in 'Conversation View.')
p	Previous message	Moves your cursor to the previous message. You can hit <Enter> to expand or collapse a message. (Only applicable in 'Conversation View.')
o or <Enter>	Open	Opens your conversation. Also expands or collapses a message if you are in 'Conversation View.'
u	Return to conversation list	Refreshes your page and returns you to the inbox, or list of conversations.
y	Archive* Remove from current view	Automatically removes the message or conversation from your current view. From 'Inbox,' 'y' means Archive From 'Starred,' 'y' means Unstar From any label, 'y' means Remove the label * 'y' has no effect if you're in 'Spam,' 'Sent,' or 'All Mail.'
x	Select conversation	Automatically checks and selects a conversation so tdat you can archive, apply a label, or choose an action from the drop-down menu to apply to tdat conversation.
s	Star a message or conversation	Adds or removes a star to a message or conversation. Stars allow you to give a message or conversation a special status.
!	Report spam	Marks a message as spam and removes it from your conversation list.
r	Reply	Reply to the message sender. <Shift> + r allows you to reply to a message in a new window. (Only applicable in 'Conversation View.')
a	Reply all	Reply to all message recipients. <Shift> +a allows you to reply to all message recipients in a new window. (Only applicable in 'Conversation View.')
f	Forward	Forward a message. <Shift> + f allows you to forward a message in a new window. (Only applicable in 'Conversation View.')
<Esc>	Escape from input field	Removes the cursor from your current input field.
y then o	Archive and next	class="desc"Archive your conversation and move to the next one.
g then a	Go to 'All Mail'	Takes you to 'All Mail,' the storage site for all mail you've ever sent or received (and have not deleted).
g then s	Go to 'Starred'	Takes you to all conversations you have starred.
g then c	Go to 'Contacts'	Takes you to your Contacts list.
g then d	Go to 'Drafts'	Takes you to all drafts you have saved.
g then i	Go to 'Inbox'	Returns you to the inbox.
/	Search	Puts your cursor in the search box.

This is a reformatted version of http://mail.google.com/support/bin/answer.py?answer=6594. Ya know, for printing!

Best Regards,
Jumping Qu

------
Failure will absolutely happen. Things will absolutely go wrong. The best way to deal with failure is to expect it and have a contingency plan in place.

Building Squid 3.2.5 with https_port on ubuntu 12.04 at AWS EC2

2013-01-06T16:36:00.000+08:00

For the https_port only available if Squid is rebuilt with the --enable-ssl option. So could not only run "apt-get install squid3" to install Squid, if need https_port.

apt-get update

apt-get install build-essential libldap2-dev libpam0g-dev libdb-dev dpatch cdbs libsasl2-dev debhelper libcppunit-dev libkrb5-dev comerr-dev libcap2-dev libexpat1-dev libxml2-dev libcap2-dev dpkg-dev curl libssl-dev libssl1.0.0 libssl1.0.0-dbg libcurl4-openssl-dev

cd /mnt

wget http://www.squid-cache.org/Versions/v3/3.2/squid-3.2.5.tar.gz

tar xzf squid-3.2.5.tar.gz

cd squid-3.2.5

./configure --enable-ssl

make

make install

cd /usr/local/squid/etc/

openssl req -new > bpoj.csr

openssl rsa -in privkey.pem -out bpoj.key

openssl x509 -in bpoj.csr -out bpoj.crt -req -signkey bpoj.key -days 730

/usr/local/squid/etc/squid.conf

https_port 443 cert=/usr/local/squid/etc/bpoj.crt key=/usr/local/squid/etc/bpoj.key

/usr/local/squid/sbin/squid -z

/usr/local/squid/sbin/squid start

E: stunnel configuration: /usr/local/etc/stunnel/stunnel.conf

verify = 0

cert=/usr/local/etc/stunnel/bpoj.crt

key=/usr/local/etc/stunnel/bpoj.key

client=yes

fips=no

[ssl2http]

accept = intranet_ip:8080

connect = squid_server_ip:443

F: URL

1. http://ubuntuforums.org/showthread.php?t=1847884

2. http://www.bbken.org/2011/05/16/5661/

3. http://blog.sciencenet.cn/home.php?mod=space&uid=303817&do=blog&id=380853
4. http://www.chinagfw.org/2012/05/stunnel.html

Best Regards,
Jumping Qu

------
No pain , No gain.

Filezilla client FTP客户端显示中文乱码的解决方法

2013-01-06T09:21:00.001+08:00

文件-站点管理-选中要登陆的站点-字符集-选择"强制UTF-8″ 或使用自定义字符集GB2312,二者之一定能解决中文显示乱码的问题。

Best Regards,
Jumping Qu

------
No pain , No gain.

SSH Socket Tunnel

2012-12-28T10:44:00.000+08:00

#/etc/ssh/sshd_config

AllowTcpForwarding Yes

PermitTunnel yes

#########error

channel 100: open failed: connect failed: Connection timed out

channel 82: open failed: administratively prohibited: open failed

Chef Reference Tips

2012-12-28T10:42:00.000+08:00

1. recipes

https://github.com/37signals/37s_cookbooks

2. rackspace Cookbook

https://github.com/rcbops/chef-cookbooks

https://github.com/rcbops/chef-cookbooks/tree/master/environments

http://wiki.opscode.com/display/chef/Chef+Repository

2. install client

curl -L http://opscode.com/checf/install.sh | bash

chef-client -v

a. install all of the embedded dependencies for Chef

b. install an embedded version of Ruby and Rubygems

c. install chef-client and knife version 10.12.0

3. workstation on Mac

http://wiki.opscode.com/display/chef/Workstation+Setup+for+Mac+OS+X

4. Manage Nodes through the Management Console

http://wiki.opscode.com/display/chef/Managing+Nodes+through+the+Management+Console

5. Data Bags

http://wiki.opscode.com/display/chef/Data+Bags

6. knife-ec2

http://wiki.opscode.com/display/chef/Launch+Cloud+Instances+with+Knife

http://wiki.opscode.com/display/chef/Installing+Chef+Client+and+Chef+Solo

8. bootstrap

knife bootstrap IP_ADDR -d centos5-gems

9.git

http://wiki.opscode.com/display/chef/Working+with+Git+and+Cookbooks

10. processing 

a. sequence of loading cookbook components

Libraries

Providers

Resources

Attributes

Definitions

Recipes

b. compile resource collection

c. execution phase

d. Chef::Runner converges the node

e. Chef::Resource calls run_action

f. Provider is chosen by Chef::Platform

g.

11. knife commands

knife cookbook site  search redisio

knife cookbook site install redisio

knife cookbook site  download aws

knife cookbook upload -a

#launch RabbitMQ on EC2

knife ec2 server create \

'role[production]' 'role[base]' 'role[rabbitmq]' \

-S my-aws -I ~/.ssh/my-aws.pem -x ubuntu \

-G production,rabbitmq -i ami-88f504e1 -f m1.large

#bootstrap the node

knife bootstrap 10.1.1.110 -r 'recipe[chef-client]' -x username -P password --sudo

12. Cookbook LWRP

Resource DSL describe: two possible states

  Current (@current_resource)

  Desired (@new_resource)

Providers load_current_resource

13. introduce

http://www.slideshare.net/rberger/deploying-infrastructure-with-opscode-chef

http://www.slideshare.net/vhata/devops-and-chef

http://www.slideshare.net/sickill/chef-or-how-to-make-computers-do-the-work-for-us

http://www.slideshare.net/flankerfc/chef-introduction-8737820

14. COOKBOOKS

Attributes: 

Key-Value pairs associated with a node;Hierarchy of overrides

Files:

Static Files to be copied to node

Library:

Place to DRY up Ruby code used in Recipes

Recipes:

Where the Action is; Specifies resources that the chef client should take action on

Templates:

ERB files to build config files on node

Providers/Resources

DIY DSL Extensions

You only need Recipes. Most cookbooks are just Recipe[s] and Templates.

15. How to create a cookbook 

http://reiddraper.com/first-chef-recipe/

http://blog.loftninjas.org/2011/02/16/the-power-of-chef-and-ruby/

http://wiki.opscode.com/display/chef/Guide+to+Creating+A+Cookbook+and+Writing+A+Recipe

http://blog.afistfulofservers.net/post/2011/03/16/a-brief-chef-tutorial-from-concentrate/

http://wiki.opscode.com/display/chef/Build+a+LAMP+Stack

16.

http://allanfeid.com/content/cooking-chef

17. workstation setup

http://wiki.opscode.com/display/chef/Installing+Chef+Server+Manually#InstallingChefServerManually-ConfiguretheCommandLineClient

URLs of optimizing mysql

2012-12-24T14:49:00.001+08:00

https://tools.percona.com

https://raw.github.com/rackerhacker/MySQLTuner-perl/master/mysqltuner.pl

https://github.com/rackerhacker/MySQLTuner-perl/blob/master/mysqltuner.pl

http://www.howtoforge.com/tuning-mysql-performance-with-mysqltuner

Best Regards,
Jumping Qu

------
No pain , No gain.

mysql: incorrect key file for table ; try to repair it!

2012-12-07T10:38:00.001+08:00

This morning one of our instances on EC2 was outage, on which running a mysql service. When it's back, the slaver mysql reported there was a error of a table's MYI.

Tried to resolve the issue by the following STEPs:
1. myisamchk -of /path/of/file.MYI
2. myisamchk -r /path/of/file.MYI
3. mysql> stop slaver;
mysql> start slaver;

Win7更改到英文版

2012-11-26T08:37:00.000+08:00

Firefox
1. 在 Firefox 地址栏输入 about:config，找到 general.useragent.locale 把其值zh-CN 改为 en-US
2. download and install
ftp://ftp.mozilla.org/pub/mozilla.org/firefox/releases/9.0/win32/xpi/en-US.xpi

Chrome
设置-高级选项-更改字体和语言设置-语言-谷歌浏览器语言-下拉菜单选择english

Best Regards,
Jumping Qu

------
No pain , No gain.