My Rice Record

deploy newrelic （PHP version）

2012-01-20T10:36:00.001+08:00

1.added repo
rpm -Uvh http://yum.newrelic.com/pub/newrelic/el5/i386/newrelic-repo-5-3.noarch.rpm

2.install newrelic
yum install newrelic-php5 -y
newrelic-install

3.edit files
#edit /etc/newrelic/newrelic.cfg
sed -i '1 c\license_key=theyoukeynumber' /etc/newrelic/newrelic.cfg

#edit /usr/local/php/lib/php.ini
#add "extension=newrelic.so"
sed -i '656 a\extension=newrelic.so' /usr/local/php/lib/php.ini

4.restart services

/etc/init.d/httpd restart
/etc/init.d/newrelic-daemon start
/etc/init.d/newrelic-daemon status

echo "<?php phpinfo(); ?>" |php |grep -i Relic

Best Regards,
Jumping Qu

------
No pain , No gain.

欧阳修《朋党论》原文

2012-01-08T08:05:00.000+08:00

臣闻朋党之说，自古有之，惟幸人君辨其君子小人而已。大凡君子与君子，以同道为朋；小人与小人，以同利为朋。此自然之理也。

然臣谓小人无朋，惟君子则有之。其故何哉？小人所好者，利禄也；所贪者，货财也。当其同利之时，暂相党引以为朋者，伪也。及其见利而争先，或利尽而交疏，则反相贼害，虽其兄弟亲戚，不能相保。故臣谓小人无朋，其暂为朋者，伪也。君子则不然。所守者道义，所行者忠信，所惜者名节。以之修身，则同道而相益；以之事国，则同心而共济。终始如一，此君子之朋也。故为人君者，但当退小人之伪朋，用君子之真朋，则天下治矣。
尧之时，小人共工、驩兜等四人为一朋，君子八元、八恺十六人为一朋；舜佐尧退四凶小人之朋，而进元、岂君子之朋，尧之天下大治。及舜自为天子，而皋、夔、稷、契等二十二人，并立于朝，更相称美、更相推让，主二十二人为一朋，而舜皆用之，天下亦大治。《书》曰："纣有臣亿万，惟亿万心；周有臣三千，惟一心。"纣之时，亿万人各异心，可谓不为朋矣，然纣以亡国；周武王之臣三千人为一大朋，而周用以兴。后汉献帝时，尽取天下名士囚禁之，目为党人；及黄巾贼起，汉室大乱，后方悔悟，尽解党人而释之，然已无救矣。唐之晚年，渐起朋党之论；及昭宗时，尽杀朝之名士，或投之黄河，曰'此辈清流，可投浊流'，而唐遂亡矣。

夫前世之主，能使人人异心不为朋，莫如纣；有禁绝善人为朋，莫如汉献帝；能诛戮清流之朋，莫如唐昭宗之世，然皆乱亡其国。更相称美推让而不自疑，莫如逐年为聪明之圣者，以辨君子与人小也。周武之世，举其国之臣三千人共为一朋，自古为朋之多且大莫如周，然周用此以兴者，善人虽多而不厌也。

夫兴亡治乱之迹，为人君者可以鉴矣。

Apache + Tomcat + JIRA + CentOS5 + MySQL

2011-12-30T10:55:00.001+08:00

1. following Install JIRA on RHEL5, Single Tomcat with AJP and MySQL - JIRA Community Space - Atlassian Documentation - Confluence

2. cp mysql-connector-java-5.1.18-bin.jar to $JIRA_INST/webapps/jira/WEB-INF/lib

3. do some change according to your settings, make sure you can access the setup page

4. download atlassian-extras-1.17.jar (unzip the jar ) and JIR.rar ( has keygen.class and keygen.java) to generate "Your license key"

Download URLs:
atlassian-jira-3.13.5,
Apache/2.2.3,
apache-tomcat-6.0.35,
mysql-connector-java-5.1.18,
jdk1.6.0_18,
mod_jk-1.2.28

回答membase的3个问题

2011-12-28T18:00:00.000+08:00

Q.主从节点之间的关系
A. membase cluster中所有节点都是对等的（参考链接），数据的分布是均匀的。即同一个节点上的既有主数据也有备份数据，所有数据都可被读取。

Q. 自动rebalance
A. 这点目前支持还不完善，要实现的话可以使用membase自带的工具，在/opt/membase/lib/python下面

Q.查看每个节点的内容
A. cd /opt/membase/lib/python
python membase server-list -c 10.90.130.87:8091 -u Administrator -p passwd

python tap_example.py 10.252.171.50:11210

Best Regards,
Jumping Qu

use PDNSD for intranet IP

2011-12-27T10:52:00.000+08:00

1. install PDNSD

rpm -Uvh http://members.home.nl/p.a.rombouts/pdnsd/releases/pdnsd-1.2.8-par_el5.i386.rpm
OR
rpm -Uvh http://members.home.nl/p.a.rombouts/pdnsd/releases/pdnsd-1.2.8-par_el5.x86_64.rpm

2. create new configure

cp /etc/pdnsd.conf.sample /etc/pdnsd.conf

3. edit global section

change "server_ip" to allow other machines to query pdnsd
remove "#" before "cache_dir"

4. edit myisp section

change "ip" to DNS-server address

5.(re)start

service pdnsd restart

6. edit /etc/hosts
change nameserver to the host ip

7. all hosts ip and name in /etc/hosts could be query by PDNSD

8.check status

pdnsd-ctl status

Best Regards,
Jumping Qu

------
No pain , No gain.

enable sudo in fabric

2011-12-15T08:37:00.000+08:00

add the following lines to fabfile.py to enable sudo permission for a special user

"
def add_sudo(user):
sudofile ='/etc/sudoers'
run('sed -i \'$a%s ALL=(ALL) NOPASSWD: ALL\' %s' % (user, sudofile))
"

ps:
Sed - An Introduction and Tutorial

Best Regards,
Jumping Qu

------
No pain , No gain.

Pure-FTPd Passive Mode in Amazon EC2

2011-12-06T08:48:00.001+08:00

For instances of Amazon EC2 only have an internal IP address like as 10.*.*.* and a mapped public ip address. Following the below steps to enable the pure-ftpd PASV mode.

1. setup Security Group
choose a suitable port rang(ex：50000,51000) for the ftp and allowed IP address(ex: 184.22.76.8)

2. setup Pure-FTPd
get the instance's public ip, like as 50.13.124.10
open configure file pure-ftpd.conf, edit lines start with "ForcePassiveIP" and "PassivePortRange" like as:

"
PassivePortRange 50000 51000
ForcePassiveIP 50.13.124.10

"

3.restart Pure-FTPd

/usr/local/sbin/pure-ftpd --daemonize -A -c50 -B -C30 -D -fftp -H -I15 -lpuredb:/etc/sys/pureftpd.pdb -L10000:8 -m4 -p50000:51000 -P50.13.124.10 -s -U133:022 -u100 -j -g/var/run/pure-ftpd.pid -k90 -Z -4

4.notice
If the ftp server's security group example A opens to another security group example B, all hosts in A or B could not access the ftp through the public ip(50.13.124.10).

Updated @ Thu Dec 15 08:39:46 CST 2011

solr optimize

2011-12-01T12:02:00.005+08:00

Before:
[root@ip-10-118-57-42 ~]# du -sh *
4.0K README.txt
4.0K bin
356K conf
2.3G data
4.0K solr.xml

After:
[root@ip-10-118-57-42 ~]# du -sh *
4.0K README.txt
4.0K bin
356K conf
19M data
4.0K solr.xml

Commands:

[root@ip-10-118-57-42 ~]#curl "http://127.0.0.1:8080/solr/select/?q=*:*&version=2.2&start=0&rows=0&indent=on&wt=json" 
{ 
"responseHeader":{ 
"status":0, 
"QTime":18, 
"params":{ 
"indent":"on", 
"start":"0", 
"q":"*:*", 
"wt":"json", 
"rows":"0", 
"version":"2.2"}}, 
"response":{"numFound":18835,"start":0,"docs":[] 
}} 
 
[root@ip-10-118-57-42 ~]#curl "http://127.0.0.1:8080/solr/update?stream.body=<optimize/>" 
<?xml version="1.0" encoding="UTF-8"?> 
<response> 
<lst name="responseHeader"><int name="status">0</int><int name="QTime">4672</int></lst> 
</response> 
 
 
[root@ip-10-118-57-42 ~]# curl "http://127.0.0.1:8080/solr/select/?q=*:*&version=2.2&start=0&rows=0&indent=on&wt=json" 
{ 
"responseHeader":{ 
"status":0, 
"QTime":18, 
"params":{ 
"indent":"on", 
"start":"0", 
"q":"*:*", 
"wt":"json", 
"rows":"0", 
"version":"2.2"}}, 
"response":{"numFound":18835,"start":0,"docs":[] 
}}

an Amazon RDS error message

2011-11-30T08:45:00.000+08:00

1. Problem

the following message from one of MySQL RDS (database engine is MyISAM):

SQLSTATE[HY000]: General error: 126 Incorrect key file for table '/rdsdbdata/tmp/#sql_133_0.MYI'; try to repair it

2. Analysis

there is group by and order by in query sql, which will use disk to cache results, but the disk remains < 1GB.

3. Solution

expand

the storage nearly 20GB, the whole

Best Regards,
Jumping Qu

------
No pain , No gain.

ip range of s3

2011-11-07T15:01:00.000+08:00

route add -net 72.21.192.0/19 gw 192.168.1.2
route add -net 87.238.80.0/21 gw 192.168.1.2
route add -net 207.171.160.0/19 gw 192.168.1.2

Best Regards,
Jumping Qu

------
No pain , No gain.

a problem of django run on freebsd 8 by wsgi

2011-10-14T10:04:00.001+08:00

1.
apache error logs:

"
[Fri Oct 14 09:40:51 2011] [error] [client 192.168.1.185]   File "build/bdist.freebsd-8.2-RELEASE-i386/egg/pkg_resources.py", line 962, in get_cache_path
[Fri Oct 14 09:40:51 2011] [error] [client 192.168.1.185]     self.extraction_error()
[Fri Oct 14 09:40:51 2011] [error] [client 192.168.1.185]   File "build/bdist.freebsd-8.2-RELEASE-i386/egg/pkg_resources.py", line 928, in extraction_error
[Fri Oct 14 09:40:51 2011] [error] [client 192.168.1.185]     raise err
[Fri Oct 14 09:40:51 2011] [error] [client 192.168.1.185] TemplateSyntaxError: Caught ExtractionError while rendering: Can't extract file(s) to egg cache
[Fri Oct 14 09:40:51 2011] [error] [client 192.168.1.185]
[Fri Oct 14 09:40:51 2011] [error] [client 192.168.1.185] The following error occurred while trying to extract file(s) to the Python egg
[Fri Oct 14 09:40:51 2011] [error] [client 192.168.1.185] cache:
[Fri Oct 14 09:40:51 2011] [error] [client 192.168.1.185]
[Fri Oct 14 09:40:51 2011] [error] [client 192.168.1.185]   [Errno 13] Permission denied: '/.python-eggs'
[Fri Oct 14 09:40:51 2011] [error] [client 192.168.1.185]
[Fri Oct 14 09:40:51 2011] [error] [client 192.168.1.185] The Python egg cache directory is currently set to:
[Fri Oct 14 09:40:51 2011] [error] [client 192.168.1.185]
[Fri Oct 14 09:40:51 2011] [error] [client 192.168.1.185]   /.python-eggs
[Fri Oct 14 09:40:51 2011] [error] [client 192.168.1.185]
[Fri Oct 14 09:40:51 2011] [error] [client 192.168.1.185] Perhaps your account does not have write access to this directory? You can
[Fri Oct 14 09:40:51 2011] [error] [client 192.168.1.185] change the cache directory by setting the PYTHON_EGG_CACHE environment
[Fri Oct 14 09:40:51 2011] [error] [client 192.168.1.185] variable to point to an accessible directory.

"

2.
On freebsd the www user which runs as apache user/group has no home directory and could not login. In /etc/passwd file:
"
www:*:80:80:World Wide Web Owner:/nonexistent:/usr/sbin/nologin

"

3.
So trying to add two lines at the head part of the settings.py:

"
import os

os.environ['PYTHON_EGG_CACHE'] = '/tmp/django_cache'

"

4.
Then reload the apache process.

Best Regards,
Jumping Qu

------
No pain , No gain.

bandwithd on CentOS 5.2

2011-09-26T15:23:00.001+08:00

1. download
http://sourceforge.net/projects/bandwidthd/

2. compile
tar xzf bandwidthd-2.0.1.tgz &&　cd bandwidthd-2.0.1 && ./configure　LDFLAGS=-lz -x-libraries=/usr/lib --prefix=/usr/local

3. configure

change dev in
/usr/local/bandwithd/etc/bandwidthd.conf　file to right device， the following is monitor all interfaces：

"
dev "any"
"

4. start

/usr/local/bandwithd/bandwithd

5. link
create symbol link

/usr/local/bandwithd/htdocs --> to correct place, which could access from http.

Best Regards,
Jumping Qu

------
No pain , No gain.

What is the maximum length of a URL?

2011-09-20T16:56:00.000+08:00

1. Maximum URL length is 2,083 characters in Internet Explorer
http://support.microsoft.com/kb/q208427/

2.WWW FAQs: What is the maximum length of a URL?
http://www.boutell.com/newfaq/misc/urllength.html

Firefox 6.0.2

URI: 8176 characters,
Over this values, it will report:
＂
Request-URI Too Large

The requested URL's length exceeds the capacity limit for this server.
＂

Apache said:
"
(36)File name too long: access to
"

OR

"
(36)File name too long: Cannot map GET

"

Best Regards,
Jumping Qu

------
No pain , No gain.

trick of Amazon ELB

2011-09-16T18:28:00.001+08:00

1. apache log:
"
"-" - - [16/Sep/2011:10:05:28 +0000] "GET /favicon.ico HTTP/1.1" 302 221 "-" "ELB-HealthChecker/1.0"
"-" - - [16/Sep/2011:10:05:34 +0000] "GET /favicon.ico HTTP/1.1" 302 221 "-" "ELB-HealthChecker/1.0"
"-" - - [16/Sep/2011:10:05:40 +0000] "GET /favicon.ico HTTP/1.1" 302 221 "-" "ELB-HealthChecker/1.0"
"-" - - [16/Sep/2011:10:05:46 +0000] "GET /favicon.ico HTTP/1.1" 302 221 "-" "ELB-HealthChecker/1.0"
"-" - - [16/Sep/2011:10:05:52 +0000] "GET /favicon.ico HTTP/1.1" 302 221 "-" "ELB-HealthChecker/1.0"
"

2. 302

302 Found

http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html

3. configure in httpd.conf

"
    RewriteCond %{HTTP_HOST}   !^www\.expmoxie\.com [NC]
    RewriteCond %{HTTP_HOST}   !^$
    RewriteRule ^/(.*)         http://www.expmoxie.com/$1 [L,R]
"
There is a redirection.

Best Regards,
Jumping Qu

------
No pain , No gain.

CentOS act as vpn client gateway

2011-09-14T11:12:00.000+08:00

We registered a strongvpn package(StrongVPN Lite Open) which could not support multi connections at the same time, that's concurrent. So I had to setup a openvpn client which acts as a gateway for intranet users. The vpn client bases on a CentOS 5.2.

#STEP1: start vpn client
openvpn ovpn212.ovpn

#STEP2: modify firewall
#enable forward
sysctl -w net.ipv4.ip_forward=1

#eth0: 192.168.1.2
#tun0: 10.8.6.166 P-t-P:10.8.6.165 Mask:255.255.255.255

iptables -A FORWARD -i eth0 -j ACCEPT
iptables -I INPUT -s 192.168.1.0/24 -i tun0 -j ACCEPT
iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE

Best Regards,
Jumping Qu

------
No pain , No gain.

output of pptp

2011-09-09T11:14:00.002+08:00

1.CREATE vpn, which name mypptp
[root@demo ~]# pptpsetup --create mypptp --username test --password kF=[tCn9224 --server 123.22.25.176 --encrypt --start

#/etc/ppp/chap-secrets has three new lines:
[root@demo ~]# cat /etc/ppp/chap-secrets
# Secrets for authentication using CHAP
# client server secret IP addresses

# added by pptpsetup for mypptp
test mypptp "kF=[tCn9224" *

2.DEBUG

[root@demo ~]# pppd call mypptp logfd 2 nodetach debug dump
pppd options in effect:
debug # (from command line)
nodetach # (from command line)
logfd 2 # (from command line)
dump # (from command line)
noauth # (from /etc/ppp/peers/mypptp)
name test # (from /etc/ppp/peers/mypptp)
remotename mypptp # (from /etc/ppp/peers/mypptp)
 # (from /etc/ppp/peers/mypptp)
pty pptp 123.22.25.176 --nolaunchpppd # (from /etc/ppp/peers/mypptp)
ipparam mypptp # (from /etc/ppp/peers/mypptp)
nobsdcomp # (from /etc/ppp/peers/mypptp)
nodeflate # (from /etc/ppp/peers/mypptp)
require-mppe-128 # (from /etc/ppp/peers/mypptp)
using channel 16
Using interface ppp0
Connect: ppp0 <--> /dev/pts/8
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x1a5a1af2> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x56ef096c> <pcomp> <accomp>]
sent [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x56ef096c> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x1a5a1af2> <pcomp> <accomp>]
rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x1a5a1af2> <pcomp> <accomp>]
rcvd [CHAP Challenge id=0x66 <d45767c770c9a8668d82ca40d632618d>, name = "pptpd"]
Warning - secret file /etc/ppp/chap-secrets has world and/or group access
sent [CHAP Response id=0x66 <27f3196998249a1bc417b5558f04f106b70200270009cafa09ab286e21fc41098ed0701bfd54def3fbe4e2116bfe138dbf>, name = "test"]
rcvd [LCP ConfReq id=0x2 <asyncmap 0x0> <auth chap MS-v2> <magic 0x7ebdee4d> <pcomp> <accomp>]
sent [LCP ConfReq id=0x2 <asyncmap 0x0> <magic 0x8ef53bee> <pcomp> <accomp>]
sent [LCP ConfAck id=0x2 <asyncmap 0x0> <auth chap MS-v2> <magic 0x7ebdee4d> <pcomp> <accomp>]
rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x1a5a1af2> <pcomp> <accomp>]
rcvd [LCP ConfAck id=0x2 <asyncmap 0x0> <magic 0x8ef53bee> <pcomp> <accomp>]
rcvd [CHAP Challenge id=0xec <b736bac467ccf323426602b4f843ee52>, name = "pptpd"]
Warning - secret file /etc/ppp/chap-secrets has world and/or group access
sent [CHAP Response id=0xec <720931dd9c8f48404dc379d6d666c220b70200270009cafa22eb6f88d1d5f1f0814a4ad874db312817f53211bfff9186bf>, name = "test"]
rcvd [CHAP Success id=0xec "S=0C67DC46E349BF84C028ED704B01CAE1D9AE9E8C"]
CHAP authentication succeeded
sent [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>]
sent [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>]
MPPE 128-bit stateless compression enabled
sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0>]
rcvd [IPCP ConfReq id=0x1 <addr 192.168.200.1>]
sent [IPCP ConfAck id=0x1 <addr 192.168.200.1>]
rcvd [IPCP ConfRej id=0x1 <compress VJ 0f 01>]
sent [IPCP ConfReq id=0x2 <addr 0.0.0.0>]
rcvd [IPCP ConfNak id=0x2 <addr 192.168.200.2>]
sent [IPCP ConfReq id=0x3 <addr 192.168.200.2>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.200.2>]
local IP address 192.168.200.2
remote IP address 192.168.200.1
Script /etc/ppp/ip-up started (pid 22120)
Script /etc/ppp/ip-up finished (pid 22120), status = 0x0

3. START normal
[root@demo ~]# pppd call mypptp

4. CHECK
[root@demo ppp]# ifconfig ppp0
ppp0 Link encap:Point-to-Point Protocol
inet addr:192.168.200.2 P-t-P:192.168.200.1 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1496 Metric:1
RX packets:1131 errors:0 dropped:0 overruns:0 frame:0
TX packets:1144 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:1309259 (1.2 MiB) TX bytes:178260 (174.0 KiB)

Best Regards,
Jumping Qu

------
No pain , No gain.

GRE package by hping2

2011-09-09T10:59:00.001+08:00

#try to test GRE package whether pass through the gateway, because pptp is using GRE

hping2 -0 163.24.115.176 -H 47 -d 10 --traceroute

hop=1 TTL 0 during transit from ip=192.168.1.1 name=UNKNOWN
hop=2 TTL 0 during transit from ip=124.7.7.21 name=UNKNOWN
hop=3 TTL 0 during transit from ip=218.1.2.189 name=UNKNOWN
hop=4 TTL 0 during transit from ip=124.74.215.77 name=UNKNOWN
hop=5 TTL 0 during transit from ip=61.152.86.186 name=UNKNOWN
hop=6 TTL 0 during transit from ip=202.97.35.146 name=UNKNOWN
hop=7 TTL 0 during transit from ip=202.97.33.102 name=UNKNOWN
hop=8 TTL 0 during transit from ip=202.97.51.54 name=UNKNOWN
hop=9 TTL 0 during transit from ip=202.97.49.118 name=UNKNOWN
hop=10 TTL 0 during transit from ip=64.71.131.133 name=10gigabitethernet6-1.core1.lax1.he.net
hop=11 TTL 0 during transit from ip=65.19.176.70 name=UNKNOWN
ICMP Protocol Unreachable from ip=163.24.115.176 name=unassigned.psychz.net
ICMP Protocol Unreachable from ip=163.24.115.176 name=unassigned.psychz.net
ICMP Protocol Unreachable from ip=163.24.115.176 name=unassigned.psychz.net
ICMP Protocol Unreachable from ip=163.24.115.176 name=unassigned.psychz.net
ICMP Protocol Unreachable from ip=163.24.115.176 name=unassigned.psychz.net
ICMP Protocol Unreachable from ip=163.24.115.176 name=unassigned.psychz.net
ICMP Protocol Unreachable from ip=163.24.115.176 name=unassigned.psychz.net
ICMP Protocol Unreachable from ip=163.24.115.176 name=unassigned.psychz.net

Best Regards,
Jumping Qu

------
No pain , No gain.

trick of console output on Amazon EC2

2011-09-01T06:56:00.001+08:00

Running
"
ec2-get-console-output i-a62b48cb
"
will display the instance's console output. On the top of output has instance id and timestamps,
the timestamps is the collected time by amazon more than created time by instances.

"
i-a62b48cb
2011-08-31T17:25:07+0000
Linux version 2.6.16-xenU (builder@xenbat.amazonsa) (gcc version 4.0.1 20050727 (Red Hat 4.0.1-5)) #1 SMP Mon May 28 03:41:49 SAST 2007
BIOS-provided physical RAM map:
Xen: 0000000000000000 - 0000000026700000 (usable)
0MB HIGHMEM available.
...............................
"

Best Regards,
Jumping Qu

------
No pain , No gain.

migrating MySQL on EBS

2011-08-30T17:33:00.001+08:00

We have few mysql instances, which data directories on EBS blocks. For some reasons, need change instance.

If we simply created snapshot for the ebs block and then created a new block, could not start normally, the InnoDB engine could not be initiated.

"
InnoDB: Database physically writes the file full: wait…
InnoDB: No valid checkpoint found.
InnoDB: If this error appears when you are creating an InnoDB database,
InnoDB: the problem may be that during an earlier attempt you managed
InnoDB: to create the InnoDB data files, but log file creation failed.
InnoDB: If that is the case, please refer to
InnoDB: http://dev.mysql.com/doc/refman/5.1/en/error-creating-innodb.html
[ERROR] Plugin 'InnoDB' init function returned error.
[ERROR] Plugin 'InnoDB' registration as a STORAGE ENGINE failed.
"

Because those " ib_logfile*" file keeped some massages of configuration, need to relocate or backup them at first.

Next changed
"

innodb_log_group_home_dir = /mnt/logs/mysql

" in my.cnf.

Best Regards,
Jumping Qu

------
Don't tell me how many enemies we have, but where they are!
(ADV:Perl -- It's like Java, only it lets you deliver on time and under budget.)

PPTP VPN

2011-08-17T15:07:00.002+08:00

内网192.168.1.0/24 --> 120.64.75.202 --> 123.22.25.176 --> outside

| |

           -----------        VPN            --------------

又由于无法直接在内网网关上连接VPN，只能在内网找一个服务器A（192.168.1.2）。

注：
192.168.1.2        VPN接入网关
120.64.75.202    内网网关外部地址
123.22.25.176 VPN服务器地址

192.168.1.0/24     内网网段
192.168.200.0/24 VPN网段

STEP:
1.安装 PPTP

在173.224.215.176，下载并运行（http://www.vps-tutorial.info/Files/PPTP.sh）, 记住username和password

2.单机测试

在PC上用浏览器打开http://tools.whois.net/yourip/，验证ip是否是VPN服务器地址123.22.25.176

3.config PPTP Client on 服务器A（192.168.1.2）

install:
wget "http://downloads.sourceforge.net/project/pptpclient/pptp/pptp-
1.7.2/pptp-1.7.2.tar.gz?r=http%3A%2F%2Fsourceforge.net%2Fprojects%
2Fpptpclient%2Ffiles%2Fpptp%2Fpptp-1.7.2%2F&ts=1313554011&use_mirror=ncu"

tar xzf pptp-1.7.2.tar.gz
cd pptp-1.7.2
make
make install
ln -s /sbin/ip /bin/ip

start:
pptpsetup --create pptp --username test --password kF=[tCn9224 --server 123.22.25.176 --encrypt --start

verify:

[root@A ~]# ifconfig
eth0      Link encap:Ethernet HWaddr 78:2B:CB:36:44:A1
          inet addr:192.168.1.2 Bcast:192.168.1.255 Mask:255.255.255.0
          inet6 addr: fe80::7a2b:cbff:fe36:44a1/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
          RX packets:1545040533 errors:0 dropped:129782 overruns:0 frame:0
          TX packets:1384568430 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:2291108388 (2.1 GiB) TX bytes:1757727223 (1.6 GiB)
          Interrupt:169

lo        Link encap:Local Loopback
          inet addr:127.0.0.1 Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING MTU:16436 Metric:1
          RX packets:25032674 errors:0 dropped:0 overruns:0 frame:0
          TX packets:25032674 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:557492089 (531.6 MiB) TX bytes:557492089 (531.6 MiB)

ppp0      Link encap:Point-to-Point Protocol
          inet addr:192.168.200.2 P-t-P:192.168.200.1

Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1496 Metric:1
          RX packets:1717 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2193 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3
          RX bytes:2317306 (2.2 MiB) TX bytes:418140 (408.3 KiB)

route:
route add -host 91.189.90.217 gw 192.168.200.2 dev ppp0

firewall:

echo 1 > /proc/sys/net/ipv4/ip_forward

iptables --insert FORWARD 1 --source 192.168.1.0/24 --destination 0.0.0.0/0.0.0.0 --jump ACCEPT

iptables --table nat --append POSTROUTING --out-interface 'ppp0' --jump MASQUERADE

4.using the A to route On B(192.168.1.22)

route add -host 91.189.90.217 gw 192.168.1.2

用浏览器打开http://tools.whois.net/yourip/

Best Regards,
Jumping Qu

python: No module named PIL

2011-07-21T16:29:00.001+08:00

Problem:
After run "easy_install PIL",

>>> import PIL
Traceback (most recent call last):
File "<stdin>", line 1, in ?
ImportError: No module named PIL

Resolve:

Download source code from:
http://effbot.org/downloads/Imaging-1.1.7.tar.gz

tar xzf Imaging-1.1.7.tar.gz
cd Imaging-1.1.7

python setup.py install

lower price of traffic of amazon

2011-07-01T08:34:00.001+08:00

From July 1, 2011 : there are no charge for data transfer in.

Mail from Amazon AWS:

Dear Amazon Web Services Customer,

We've often told you that one of our goals is to drive down costs continuously and to pass those savings on to you. And indeed, we've reduced prices on over a dozen occasions over the last four years. We're pleased to announce that we're lowering our pricing again for AWS Data Transfer, effective July 1, 2011. You'll notice below that we will no longer charge a separate fee for AWS Data Transfer in. For AWS Data Transfer out, we've added three new tiers -- at 1 PB, 5 PB and greater than 5 PB -- for our high volume users. Finally, in the US and Europe, we've reduced prices for AWS Data Transfer out at every existing usage tier of usage. Pricing for data transfer between Amazon regions remains unchanged.

AWS Data Transfer Pricing (other than Amazon CloudFront):

Inbound AWS Data Transfer price for all regions (through June 30, 2011)

$0.100 per GB - data transfer in

Outbound data transfer price for US-Standard, US-West and Europe regions (through June 30, 2011)

$0.000 - first 1 GB / month data transfer out
$0.150 per GB - up to 10 TB / month data transfer out
$0.110 per GB - next 40 TB / month data transfer out
$0.090 per GB - next 100 TB / month data transfer out
$0.080 per GB - data transfer out / month over 150 TB

New inbound data transfer price for all regions (effective July 1, 2011)

$0.000 - all data transfer in

New data transfer price for US-Standard, US-West and Europe regions (effective July 1, 2011)

$0.000 - first 1 GB / month data transfer out
$0.120 per GB - up to 10 TB / month data transfer out (10 TB total)
$0.090 per GB - next 40 TB / month data transfer out (50TB total)
$0.070 per GB - next 100 TB / month data transfer out (150 TB total)
$0.050 per GB - next 350 TB / month data transfer out (500 TB total)
Contact us - next 524 TB / month data transfer out (1PB total)
Contact us - next 4 PB / month data transfer out (5PB total)
Contact us - data transfer out / month over 5 PB

The result of this pricing change is that all customers with internet data transfer fees in the US-Standard, US-West and Europe regions will see a reduction in data transfer costs. For example, a customer transferring 10 TB in and 10 TB out of one of these regions in a month will save 52% on internet data transfer with the new pricing. A customer transferring 500 TB in and 500 TB out of one of these regions in a month will save 68% on internet data transfer with the new pricing.

We're also pleased to announce that for our Content Delivery Network, Amazon CloudFront, we're also lowering prices effective July 1, 2011. We've added new pricing tiers in every region. Also, in the US and Europe, we've reduced data transfer pricing at every tier.

CloudFront Data Transfer Pricing:

Data transfer price for US and Europe regions (through June 30, 2011)

$0.15 per GB - next 10 TB / month data transfer out
$0.10 per GB - next 40 TB / month data transfer out
$0.08 per GB - next 100 TB / month data transfer out
$0.07 per GB - next 100 TB / month data transfer out
$0.06 per GB - next 250 TB / month data transfer out
$0.05 per GB - next 250 TB / month data transfer out
$0.04 per GB - next 250 TB / month data transfer out
$0.03 per GB - over 1,000 TB data transfer out / month

New data transfer price for US and Europe regions (effective July 1, 2011)

$0.120 per GB - first 10 TB / month data transfer out
$0.080 per GB - next 40 TB / month data transfer out
$0.060 per GB - next 100 TB / month data transfer out
$0.040 per GB - next 350 TB / month data transfer out
$0.030 per GB - next 524 TB / month data transfer out
$0.025 per GB - next 4 PB / month data transfer out
$0.020 per GB - over 5 PB data transfer out / month

As a result of this pricing, CloudFront customers will see a reduction in their CloudFront costs of up to 43%, depending on how much data they transfer each month. Plus, there is even lower CloudFront pricing available if you know you will reach minimum monthly usage levels each month. Please contact us for details.

For more information on the new data transfer prices effective July 1, 2011, please visit our AWS Data Transfer Pricing Update detail page.

Sincerely,
The Amazon Web Services Team

We hope you enjoyed receiving this message. If you wish to remove yourself from receiving future product announcements and the monthly AWS Newsletter, please update your communication preferences.

Amazon Web Services LLC is a subsidiary of Amazon.com, Inc. Amazon.com is a registered trademark of Amazon.com, Inc. This message produced and distributed by Amazon Web Services, LLC, 410 Terry Avenue North, Seattle, WA 98109.

Advice Usage of Amazon:IP

2011-07-01T08:22:00.000+08:00

Every instance has a public IP, which you can access the instance from. Also you can attach an EIP to the instance, after attached, the instance's private ip will not be changed.
In Amazon EC2, the adjacent ip which are not necessarily in the same segment.

Please see the following, traceroute 174.129.198.96 and 174.129.198.98.

traceroute to 174.129.198.96 (174.129.198.96), 30 hops max, 40 byte packets
1 192.168.1.1 (192.168.1.1) 3.242 ms 3.818 ms 4.375 ms
2 124.74.79.21 (124.74.79.21) 10.388 ms 10.604 ms 10.804 ms
3 218.1.2.189 (218.1.2.189) 18.318 ms 18.550 ms 18.739 ms
4 124.74.215.61 (124.74.215.61) 18.924 ms 19.104 ms 19.285 ms
5 61.152.86.142 (61.152.86.142) 19.517 ms 19.713 ms 19.913 ms
6 202.97.50.250 (202.97.50.250) 20.488 ms 17.994 ms 18.578 ms
7 (202.97.35.14) 21.548 ms 8.374 ms *
8 * * *
9 * * *
10 * * *
11 * * *
12 * ae-4.r21.asbnva02.us.bb.gin.ntt.net (129.250.4.102) 241.188 ms 246.344 ms
13 ae-8.r02.asbnva02.us.bb.gin.ntt.net (129.250.4.27) 245.558 ms 247.533 ms 247.033 ms
14 * * *
15 * * *
16 * * *
17 216.182.224.55 (216.182.224.55) 229.817 ms 216.182.232.55 (216.182.232.55) 246.352 ms 216.182.224.51 (216.182.224.51) 252.320 ms
18 216.182.224.20 (216.182.224.20) 233.521 ms 216.182.232.173 (216.182.232.173) 240.106 ms 216.182.232.73 (216.182.232.73) 236.267 ms
19 216.182.232.130 (216.182.232.130) 241.248 ms 216.182.232.134 (216.182.232.134) 223.366 ms ec2-75-101-160-49.compute-1.amazonaws.com (75.101.160.49) 243.627 ms
20 ec2-75-101-160-49.compute-1.amazonaws.com (75.101.160.49) 239.119 ms ec2-75-101-160-51.compute-1.amazonaws.com (75.101.160.51) 241.627 ms 243.077 ms
21 174.129.198.96 (174.129.198.96) 237.102 ms 237.904 ms 236.391 ms

traceroute to 174.129.198.98 (174.129.198.98), 30 hops max, 40 byte packets
1 192.168.1.1 (192.168.1.1) 3001.614 ms 3005.558 ms 3006.140 ms
2 124.74.79.21 (124.74.79.21) 3009.582 ms 3009.804 ms 3009.997 ms
3 124.74.54.25 (124.74.54.25) 3010.193 ms 3010.383 ms 19.231 ms
4 124.74.209.49 (124.74.209.49) 19.287 ms 19.349 ms 22.255 ms
5 61.152.86.142 (61.152.86.142) 22.632 ms 22.938 ms 23.139 ms
6 202.97.50.254 (202.97.50.254) 26.395 ms 9.405 ms 9.583 ms
7 (202.97.35.22) 9.886 ms 8.494 ms 8.629 ms
8 * * *
9 * * *
10 xe-0-3-0-1.r04.lsanca03.us.bb.gin.ntt.net (129.250.9.9) 147.806 ms 149.209 ms 148.848 ms
11 ae-6.r21.lsanca03.us.bb.gin.ntt.net (129.250.5.69) 149.530 ms 149.501 ms 147.638 ms
12 ae-2.r20.asbnva02.us.bb.gin.ntt.net (129.250.3.54) 265.092 ms 245.861 ms 239.680 ms
13 ae-1.r01.asbnva02.us.bb.gin.ntt.net (129.250.3.11) 216.510 ms 216.939 ms 221.292 ms
14 * * *
15 * * *
16 * * *
17 216.182.224.51 (216.182.224.51) 254.513 ms 216.182.232.55 (216.182.232.55) 233.666 ms 236.352 ms
18 216.182.224.19 (216.182.224.19) 240.505 ms 244.462 ms 216.182.232.173 (216.182.232.173) 236.982 ms
19 ec2-75-101-160-185.compute-1.amazonaws.com (75.101.160.185) 245.677 ms 249.574 ms 216.182.232.135 (216.182.232.135) 242.718 ms
20 ec2-174-129-198-98.compute-1.amazonaws.com (174.129.198.98) 241.554 ms ec2-75-101-160-185.compute-1.amazonaws.com (75.101.160.185) 245.634 ms 242.660 ms

optimize Amazon RDS DB

2011-06-29T11:53:00.000+08:00

Based on m1.small instance and mysql 5.1 and default.mysql5.1, mostly databases use MyISAM engine.

name=slow_query_log, value=on
#enable record slow query
#Default: off

name=table_open_cache, value=256
#the number of table_open_cache
#Default: 64

name=key_buffer_size, value=67108864
#the size of the buffer used for index blocks. The key buffer is also known as the key cache.
#Default: 33554432

name=join_buffer_size, value=1048576
#The minimum size of the buffer that is used for plain index scans, range index scans, and joins that do not use indexes and thus perform full table scans.
#Default: 131072

name=sort_buffer_size, value=8388608
#Each session that needs to do a sort allocates a buffer of this size.
#Default: 2097144

name=read_buffer_size, value=1048576
#Each thread that does a sequential scan allocates a buffer of this size (in bytes) for each table it scans.
#Default: 262144

name=read_rnd_buffer_size, value=4194304
#When reading rows in sorted order following a key-sorting operation, the rows are read through this buffer to avoid disk seeks.
#Default: 524288

name=myisam_sort_buffer_size, value=67108864
#The size of the buffer that is allocated when sorting MyISAM indexes during a REPAIR TABLE or when creating indexes with CREATE INDEX or ALTER TABLE.
#Default: 8388608

name=bulk_insert_buffer_size, value=67108864
#This variable limits the size of the cache tree in bytes per thread.
#Default: 8388608

name=tmp_table_size, value=33554432
#The maximum size of internal in-memory temporary tables.
#Default: 16777216

name=query_cache_type, value=1
#Set the query cache type.
#Default: 1

name=query_cache_size, value=25165824
#The amount of memory allocated for caching query results.
#Default: 0

name=thread_cache_size, value=16
#How many threads the server should cache for reuse.
#Default: 0

name=max_connect_errors, value=1000
#this number of interrupted connections from a host, that host is blocked from further connections
#Default: 10

name=max_allowed_packet, value=2097152
#The maximum size of one packet or any generated/intermediate string
#Default: 1048576

#################
#Full command lines, the ssbdbv1 db is clone of default.mysql5.1
#################

rds-modify-db-parameter-group ssbdbv1 \
--parameters="name=slow_query_log, value=on, method=immediate" \
--parameters="name=table_open_cache, value=256, method=immediate" \
--parameters="name=key_buffer_size, value=67108864, method=immediate" \
--parameters="name=join_buffer_size, value=1048576, method=immediate" \
--parameters="name=sort_buffer_size, value=8388608, method=immediate" \
--parameters="name=read_buffer_size, value=1048576, method=immediate" \
--parameters="name=read_rnd_buffer_size, value=4194304, method=immediate" \
--parameters="name=myisam_sort_buffer_size, value=67108864, method=immediate" \
--parameters="name=bulk_insert_buffer_size, value=67108864, method=immediate" \
--parameters="name=tmp_table_size, value=33554432, method=immediate" \
--parameters="name=query_cache_type, value=1, method=immediate" \
--parameters="name=query_cache_size, value=25165824, method=immediate" \
--parameters="name=thread_cache_size, value=16, method=immediate" \
--parameters="name=max_connect_errors, value=1000, method=immediate" \
--parameters="name=max_allowed_packet, value=2097152, method=immediate"

Advice Usage of Amazon: support

2011-06-28T12:19:00.001+08:00

There are three way to report and seek help from Amazon, 1.Service Health Dashboard, click "Report an Issue" on the top right side; 2.AWS Premium Support; 3. forums.

The first one only report an issue, after submitted, amazon will send a mail to demonstrate they received your issue. And amazon never reply the mail at all.
The second is a paid way, but most of the time the reason is their own fault, like as hardware issue, is this suitable ? They have four classes, Bronze,Silver,Platinum,
the Fastest guaranteed response from 12 hours to 15 minutes and the pricing from $49/month to $15K/month or 10% of monthly AWS usage, all these show time is money.

The third is better, but the guys from amazon may answer your question very quickly or slowly more than 24 hours or days. You should refresh the questions and get attention.