Linux - :D All About Open Source :) ......

HOWTO SWITCH FASTEST MIRRORS FOR YUM UPDATES/DOWNLOAD FASTER IN Fedora

noreply@blogger.com (Unknown) — Mon, 6 Apr 2015 23:11:00 -0700

I just installed Fedora 21 in on my laptop and it seems great. I ran yum for the first time and it selected a mirror for me which was really very slow, almost useless. So, package updates and installation were taking a lot of time. I decided to switch to a different repo but didn't have an idea which, so I decided to let the same fastest-mirrors plugin decide the mirrors. To force yum-fastestmirror plugin to check for fastest mirrors, you must delete the file /var/cache/yum/x86_64/21/timedhosts.txt by running the following command as root:

rm -rf /var/cache/yum/x86_64/21//timedhosts.txt

Then, running yum will check for fastest mirror next time it is run. It should pick up a better mirror, but in my case, it just picked the same mirror over and over. So, I decided to block it altogether so that yum-fastestmirror is forced to choose another one.To do that, I opened the file /etc/yum/pluginconf.d/fastestmirror.conf as root and uncommented the line (removed the “#”) with “exclude” and added the culprit mirror “mirror.dhakacom.com” to the exclude list so that the line looked like the following:

exclude=.ee/ .dk/ .mirror.dhakacom.com

If yum-fastestmirror keeps on giving selecting slow mirrors, you can add additional mirrors to the exclude list (separate mirror names with commas) and remove /var/cache/yum/timedhosts.txt again and repeat it again and again till you are satisfied with the speeds.

************************************************************************************************************

Upgrading to Fedora 21 Workstation from Fedora 20

noreply@blogger.com (Unknown) — Thu, 11 Dec 2014 22:53:00 -0800

1. Make sure your current system is up-to-date and backed up

# yum update -y

2. Install the FedUp tool

# yum install fedup fedora-release

3. Start the update with FedUp

sudo fedup --network 21 --product=workstation

4. Reboot, and upgrade

Fedora 21 Post Installation Guide

noreply@blogger.com (Unknown) — Thu, 11 Dec 2014 01:51:00 -0800

Fedora is now more focused
Less setup, more innovation. Choose a flavor of Fedora streamlined for your needs, and get to work right away.

Fedora 21 also known as "Generic 21" is the latest version of Fedora distro. It comes with many new features and software updates. Note: Almost every command shown here requires root privileges. So make sure you are logged in as root. Run su command to login as root.

Rpmfusion Repo

RPM Fusion Repository includes variety of applications which are not included in the main distro. Like mp3 codec, multimedia player for playing DVDs and many more.
It is recommended that you install RPM Fusion repo because most of the following packages require you to install RPM Fusion otherwise it may not work

#yum localinstall --nogpgcheck http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-21.noarch.rpm
#yum localinstall --nogpgcheck http://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-21.noarch.rpm

Livna Repo

Some packages require you to install Livna Repo. Simply run he following commands to add and enable livna repo on your system.

#rpm -ivh http://rpm.livna.org/livna-release.rpm
#rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-livna

MP3 playback Rythmbox

Rythmbox is likely that it will be installed by default. If not installed then you can install it very easily.

#yum install rhythmbox

The default installation of rhytmbox wont allow you to play mp3. To play mp3 you need to add the codes
#yum install gstreamer-plugins-good gstreamer-plugins-bad gstreamer-plugins-ugly

Amarok

Amarok is the default audio player for KDE. It can also be installed on Gnome.

#yum install amarok phonon-backend-gstreamer

Audacious

Audacious is a winamp like audio player

#yum install audacious audacious-plugins

XMMS

XMMS is another winamp like audio player. And its one of my favorite. Its better than audacious in my eyes

#yum install xmms xmms-mp3

Banshee

Banshee allows you to import CDs, sync your music collection to an iPod, play music directly from an iPod, create playlists with songs from your library, and create audio and MP3 CDs from your music library.

#yum install banshee banshee-community-extensions

Video and DVD Playback

VLC player

VLC player is the best video player for Linux. It is capable of playing almost every video format.

#yum install vlc

XINE

Xine is another video player for Linux. It is very much like vlc player

#yum install xine xine-lib xine-lib-extras-freeworld

Mplayer with SM Player GUI

Mplayer is a VLC player like player for Linux. It is capable of playing almost all video and audio formats.

#yum install mplayer smplayer

Totem

Totem is the default video player for Fedora.

#yum install totem-xine xine-lib xine-lib-extras-freeworld

K9Copy

K9Copy is a free, open source DVD backup and DVD authoring program for Linux

#yum install k9copy

libdvdcss

libdvdcss is a free and open source software library for accessing and unscrambling DVDs encrypted with the Content Scramble System (CSS). libdvdcss is part of the VideoLAN project and is used by VLC media player and other DVD player software such as Ogle, xine-based players, and MPlayer.

#yum install libdvdcss

Adobe Flash Player Add the Adobe repo

#rpm -ivh http://linuxdownload.adobe.com/adobe-release/adobe-release-i386-1.0-1.noarch.rpm
#rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-adobe-linux
#yum install flash-plugin

Install Flash Player
#yum install flash-plugin

Acrobat Reader

Add adobe YUM Repo

#rpm -ivh http://linuxdownload.adobe.com/adobe-release/adobe-release-i386-1.0-1.noarch.rpm
#rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-adobe-linux
Install Adobe reader
#yum install AdobeReader_enu

Google Chrome
Add Google YUM Repo
#vi /etc/yum.repos.d/google.repo
And paste the following
Fedora 32-bit

[google-chrome]
name=google-chrome - 32-bit
baseurl=http://dl.google.com/linux/chrome/rpm/stable/i386
enabled=1
gpgcheck=1
gpgkey=https://dl-ssl.google.com/linux/linux_signing_key.pub
Fedora 64-bit

[google-chrome]
name=google-chrome - 64-bit
baseurl=http://dl.google.com/linux/chrome/rpm/stable/x86_64
enabled=1
gpgcheck=1
gpgkey=https://dl-ssl.google.com/linux/linux_signing_key.pub
Save the file using “:wq“.
Install Google Chrome

#yum install google-chrome-stable

Other Applications Filezilla

Filezilla is a FTP client and its one of the best

#yum install filezilla

7z or p7zip

#yum install p7zip

Unrar

Unrar utility for extracting, testing and viewing the contents of archives created with the RAR archiver version 1.50 and above.
#yum install unrar

Transmission bittorrent client

Transmission is a lightweight bittorrent client for Linux platform.
#yum install transmission

Wine

Wine is a is a compatibility layer capable of running Windows applications on Linux. It can run many windows applications even some games in Linux.
#yum install wine

Gparted

GParted is a free partition editor for graphically managing your disk partitions.
#yum install gparted

Gimp
Gimp is the most advanced Image Editor for Linux. This gimp has lot of useful features useful.
#yum install gimp yum install gimp-data-extras gimpfx-foundry gimp-lqr-plugin gimp-resynthesizer gnome-xcf-thumbnailer

Eclipse IDE

Eclipse is a multi-language Integrated development environment (IDE)
#yum install eclipse

Yum Extender : yumex
Yum Extender (yumex) is a GUI for the yum package manager. If you do not like installing everything from the terminal you can add a GUI installer.
Follow This Article to install Yum Extender (yumex) on Fedora 20

Skype

Skype Installation Dependencies:-
#yum install alsa-lib.i686 libXv.i686 libXScrnSaver.i686 qt.i686 qt-x11.i686 pulseaudio-libs.i686 pulseaudio-libs-glib2.i686 alsa-plugins-pulseaudio.i686 qtwebkit.i686 -y

#wget http://download.skype.com/linux/skype-4.2.0.11-fedora.i586.rpm

#yum localinstall skype-4.2.0.11-fedora.i586.rpm

Gnome Extension Installation
https://extensions.gnome.org/local/

Using "Gnome Link" create a account. List of extension.

Cockpit A remote manager for GNU/Linux servers Atomic Host & Containers

noreply@blogger.com (Unknown) — Mon, 3 Nov 2014 22:32:00 -0800

Cockpit is a server manager that makes it easy to administer your GNU/Linux servers via a web browser.

Easy to use
Cockpit is perfect for new sysadmins, allowing them to easily perform simple tasks such as storage administration, inspecting journals and starting and stopping services.

No interference
Jumping between the terminal and the web tool is no problem. A service started via Cockpit can be stopped via the terminal. Likewise, if an error occurs in the terminal, it can be seen in the Cockpit journal interface.

Multi-server
You can monitor and administer several servers at the same time. Just add them with a single click and your machines will look after its buddies.

Step 1

This post will provide instructions on installing Cockpit on the newly-released Fedora 20

#yum -y install git rpm-build yum-utils make firewalld openssl && git clone https://github.com/cockpit-project/cockpit.git && yum install trickle nbd-server npm python-libguestfs qemu mock qemu-kvm python curl libvirt-client libvirtd qemu-nbd krb5-workstation krb5-server docker-io -y && $ npm install

phantomjs && yum update -y && reboot

Step 2

#cd cockpit

#cd ./test

# srpm=$(./make-srpm)

# yum-builddep $srpm

# mkdir build

# cd build

# ../autogen.sh --prefix=/usr --enable-maintainer-mode --enable-debug

# make && make install

# cp ../src/bridge/cockpit.pam.insecure /etc/pam.d/cockpit

# sh -c "cat ../src/bridge/sshd-reauthorize.pam >> /etc/pam.d/sshd"

# systemctl start cockpit.socket

# firewall-cmd --reload

# firewall-cmd --add-service=cockpit

# firewall-cmd --add-service=cockpit --permanent

# docker pull fedora

Point your browser to https://IP-OR-NAME-OF-YOUR-VM:9090

http://news.softpedia.com/news/CEO-Satya-Nadella-Microsoft-Loves-Linux-462754.shtml

Our Dear Friend Mircosoft fall in Love with Linux

Red Hat Enterprise Virtualization

noreply@blogger.com (Unknown) — Mon, 29 Sep 2014 21:44:00 -0700

I am delighted to announce that my associate Pradeep S new book, Getting Started with Red Hat Enterprise Virtualization was published yesterday. It's available on Amazon and Packt now.

http://www.amazon.com/Getting-Started-Red-Enterprise-Virtualization/dp/1782167404

https://www.packtpub.com/virtualization-and-cloud/getting-started-red-hat-enterprise-virtualization

HOW TO CHECK FOR VULNERABLE SHELL

noreply@blogger.com (Unknown) — Thu, 25 Sep 2014 00:56:00 -0700

*HOW TO CHECK FOR VULNERABLE SHELL*
To determine if a Linux or Unix system is vulnerable, run the following command lines in your linux shell:

* env X="() { :;} ; echo shellshock" /bin/sh -c "echo completed"
* env X="() { :;} ; echo shellshock" `which bash` -c "echo completed"

If you see the words "/shellshock/" in the output, errrrr… then you are at risk.

"systemd" Commands to Manage Linux System

noreply@blogger.com (Unknown) — Sun, 7 Sep 2014 23:29:00 -0700

Systemd is the new system and service manager for Linux. It is a replacement for init system and can manage system startup and services. It starts up and supervises the entire system. In article we are using Fedora 20 installed with "systemd-208-21.fc20.x86_64" version

PID 1 is occupied by “systemd” and can be seen from pstree command as well:

[root@rajat rajat]# pstree
systemd─┬─ModemManager───2*[{ModemManager}]
├─NetworkManager─┬─nm-vpnc-service─┬─vpnc
│ │ └─{nm-vpnc-service}
│ ├─pppd
│ └─3*[{NetworkManager}]
├─2*[abrt-watch-log]
├─abrtd
├─accounts-daemon───2*[{accounts-daemon}]
├─alsactl
├─at-spi-bus-laun─┬─dbus-daemon───{dbus-daemon}
│ └─3*[{at-spi-bus-laun}]
├─at-spi2-registr───{at-spi2-registr}
├─atd
├─auditd─┬─audispd─┬─sedispatch
│ │ └─{audispd}
│ └─{auditd}
├─avahi-daemon───avahi-daemon
├─bitlbee
├─bluetoothd
├─chronyd
├─colord───2*[{colord}]
├─crond
├─cupsd
├─2*[dbus-daemon───{dbus-daemon}]
├─dbus-launch
├─dconf-service───2*[{dconf-service}]
├─evolution-calen───4*[{evolution-calen}]
├─evolution-sourc───2*[{evolution-sourc}]
├─gconfd-2
├─gdm─┬─gdm-simple-slav─┬─Xorg
│ │ ├─gdm-session-wor─┬─gnome-session─┬─abrt-applet───{abrt-applet}
│ │ │ │ ├─deja-dup-monito───2*[{deja-dup-monito}]
│ │ │ │ ├─gnome-settings-───4*[{gnome-settings-}]
│ │ │ │ ├─gnome-shell─┬─chrome─┬─2*[cat]
│ │ │ │ │ │ ├─chrome─┬─chrome
│ │ │ │ │ │ │ └─2*[{chrome}]
│ │ │ │ │ │ ├─chrome-sandbox───chrome─┬─chrome─┬─8*[chrome───7*[{chrome}]]
│ │ │ │ │ │ │ │ ├─4*[chrome───8*[{chrome}]]
│ │ │ │ │ │ │ │ └─chrome───13*[{chrome}]
│ │ │ │ │ │ │ └─chrome-sandbox───nacl_helper
│ │ │ │ │ │ └─41*[{chrome}]
│ │ │ │ │ ├─gedit───3*[{gedit}]
│ │ │ │ │ ├─nautilus───3*[{nautilus}]
│ │ │ │ │ ├─thunderbird───28*[{thunderbird}]
│ │ │ │ │ └─6*[{gnome-shell}]
│ │ │ │ ├─seapplet
│ │ │ │ ├─tracker-miner-f───3*[{tracker-miner-f}]
│ │ │ │ ├─tracker-store───7*[{tracker-store}]
│ │ │ │ └─3*[{gnome-session}]
│ │ │ └─2*[{gdm-session-wor}]
│ │ └─2*[{gdm-simple-slav}]
│ └─2*[{gdm}]
├─geoclue───2*[{geoclue}]
├─gnome-keyring-d───7*[{gnome-keyring-d}]
├─gnome-shell-cal───4*[{gnome-shell-cal}]
├─gnome-terminal-─┬─bash───weechat-curses───2*[{weechat-curses}]
│ ├─bash───su───bash───pstree
│ ├─gnome-pty-helpe
│ └─3*[{gnome-terminal-}]
├─goa-daemon───3*[{goa-daemon}]
├─gsd-printer───{gsd-printer}
├─gvfs-afc-volume───2*[{gvfs-afc-volume}]
├─gvfs-goa-volume───{gvfs-goa-volume}
├─gvfs-gphoto2-vo───{gvfs-gphoto2-vo}
├─gvfs-mtp-volume───{gvfs-mtp-volume}
├─gvfs-udisks2-vo───2*[{gvfs-udisks2-vo}]
├─gvfsd───{gvfsd}
├─gvfsd-burn───{gvfsd-burn}
├─gvfsd-fuse───4*[{gvfsd-fuse}]
├─gvfsd-metadata───{gvfsd-metadata}
├─gvfsd-trash───2*[{gvfsd-trash}]
├─ibus-daemon─┬─ibus-dconf───3*[{ibus-dconf}]
│ ├─ibus-engine-sim───2*[{ibus-engine-sim}]
│ └─2*[{ibus-daemon}]
├─ibus-x11───2*[{ibus-x11}]
├─irqbalance
├─lvmetad
├─mcelog
├─mission-control───2*[{mission-control}]
├─monit───{monit}
├─obexd
├─packagekitd───2*[{packagekitd}]
├─pcscd───2*[{pcscd}]
├─polkitd───5*[{polkitd}]
├─pulseaudio───2*[{pulseaudio}]
├─rngd
├─rpc.statd
├─rpcbind
├─rsyslogd───3*[{rsyslogd}]
├─rtkit-daemon───2*[{rtkit-daemon}]
├─smartd
├─4*[systemd───(sd-pam)]
├─systemd-journal
├─systemd-logind
├─systemd-udevd
├─udisksd───4*[{udisksd}]
├─upowerd───2*[{upowerd}]
├─vnstatd
└─wpa_supplicant

1. Faster startup

The sysvinit starts the processes serially, one at a time. Systemd starts services in parallel and starts only those services which are actually required, reducing the boot time significantly. The command systemd-analyze time also shows the same information.

[root@rajat rajat]# systemd-analyze
Startup finished in 1.646s (kernel) + 2.661s (initrd) + 25.804s (userspace) = 30.113s

The blame option to systemd-analyze command can provide you with that, ordered by the time taken to initialize.

[root@rajat rajat]# systemd-analyze blame
9.931s openshift-tc.service
4.279s NetworkManager.service
1.712s proc-fs-nfsd.mount
1.693s accounts-daemon.service
1.638s lvm2-pvscan@8:2.service
1.635s var-lib-nfs-rpc_pipefs.mount
1.475s rsyslog.service
1.458s lvm2-monitor.service
1.240s systemd-fsck@dev-disk-by\x2duuid-0dc7dcae\x2d7fd8\x2d4d80\x2dad47\x2d6bc66f6e4c7c.service
1.193s plymouth-start.service
1.028s systemd-tmpfiles-setup-dev.service
969ms user@0.service
962ms home.mount
930ms user@983.service
826ms colord.service
813ms systemd-udev-trigger.service
797ms sys-kernel-debug.mount
797ms dev-mqueue.mount
796ms dev-hugepages.mount
755ms tmp.mount
752ms systemd-fsck-root.service
742ms systemd-tmpfiles-setup.service
609ms dev-mapper-fedora_rajat\x2dswap.swap
580ms systemd-sysctl.service
539ms systemd-remount-fs.service
521ms user@42.service
485ms sysstat.service
397ms systemd-fsck@dev-mapper-fedora_rajat\x2dhome.service
287ms kmod-static-nodes.service
285ms fedora-import-state.service
253ms plymouth-read-write.service
240ms boot.mount
224ms openshift-iptables-port-proxy.service
216ms bluetooth.service
216ms fedora-readonly.service
204ms rtkit-daemon.service
198ms ModemManager.service
188ms systemd-readahead-replay.service
184ms nfs-lock.service
162ms systemd-tmpfiles-clean.service
160ms systemd-random-seed.service
156ms rc-local.service
131ms chronyd.service
128ms avahi-daemon.service
119ms systemd-logind.service
112ms systemd-user-sessions.service
108ms mcelog.service
102ms systemd-readahead-collect.service
95ms gdm.service
82ms user@1000.service
75ms systemd-vconsole-setup.service
48ms upower.service
41ms udisks2.service
35ms packagekit.service
31ms rpcbind.service
28ms abrt-ccpp.service
15ms systemd-backlight@backlight:acpi_video0.service
15ms systemd-udevd.service
11ms lvm2-pvscan@7:0.service
11ms polkit.service
11ms plymouth-quit-wait.service
10ms wpa_supplicant.service
8ms systemd-readahead-done.service
7ms systemd-journal-flush.service
7ms auditd.service
5ms sys-fs-fuse-connections.mount
5ms systemd-update-utmp.service
3ms systemd-update-utmp-runlevel.service
2ms systemd-backlight@backlight:intel_backlight.service
1ms sys-kernel-config.mount

2. The systemctl command

The systemctl command is the most talked command that comes with systemd. You can manage a whole lot of your system with this command.

2.1 List Units

systemctl command without any option lists all the running units.

#systemctl list-units or systemctl

[root@rajat rajat]# systemctl
UNIT LOAD ACTIVE SUB DESCRIPTION
proc-sys-fs-binfmt_misc.automount loaded active waiting Arbitrary Executable File Formats File System Automount Point
sys-devices-pci0000:00-0000:00:02.0-backlight-acpi_video0.device loaded active plugged /sys/devices/pci0000:00/0000:00:02.0/backlight/acpi_video0
sys-devices-pci0000:00-0...card0-card0\x2dLVDS\x2d1-intel_backlight.device loaded active plugged /sys/devices/pci0000:00/0000:00:02.0/drm/card0/card0-LVDS-1/intel_backligh
sys-devices-pci0000:00-0000:00:16.3-tty-ttyS0.device loaded active plugged 7 Series/C210 Series Chipset Family KT Controller
sys-devices-pci0000:00-0000:00:19.0-net-em1.device loaded active plugged 82579LM Gigabit Network Connection
sys-devices-pci0000:00-0...\x2d1.2-1\x2d1.2:1.0-ttyUSB0-tty-ttyUSB0.device loaded active plugged ZTE_WCDMA_Technologies_MSM
sys-devices-pci0000:00-0...\x2d1.2-1\x2d1.2:1.1-ttyUSB1-tty-ttyUSB1.device loaded active plugged ZTE_WCDMA_Technologies_MSM
sys-devices-pci0000:00-0...\x2d1.2-1\x2d1.2:1.2-ttyUSB2-tty-ttyUSB2.device loaded active plugged ZTE_WCDMA_Technologies_MSM
sys-devices-pci0000:00-0...:1.3-host7-target7:0:0-7:0:0:0-block-sr1.device loaded active plugged USB_SCSI_CD-ROM
sys-devices-pci0000:00-0...host7-target7:0:0-7:0:0:1-block-sdb-sdb1.device loaded active plugged MMC_Storage
sys-devices-pci0000:00-0...:1.3-host7-target7:0:0-7:0:0:1-block-sdb.device loaded active plugged MMC_Storage
sys-devices-pci0000:00-0...2d1-1\x2d1.4-1\x2d1.4:1.0-bluetooth-hci0.device loaded active plugged /sys/devices/pci0000:00/0000:00:1a.0/usb1/1-1/1-1.4/1-1.4:1.0/bluetooth/hc
sys-devices-pci0000:00-0000:00:1b.0-sound-card0.device loaded active plugged 7 Series/C210 Series Chipset Family High Definition Audio Controller
sys-devices-pci0000:00-0000:00:1c.1-0000:03:00.0-net-wlp3s0.device loaded active plugged Centrino Ultimate-N 6300 (3x3 AGN)
sys-devices-pci0000:00-0...host0-target0:0:0-0:0:0:0-block-sda-sda1.device loaded active plugged HGST_HTS725050A7E630
sys-devices-pci0000:00-0...host0-target0:0:0-0:0:0:0-block-sda-sda2.device loaded active plugged LVM PV fZ6boN-bWsF-iFqv-JHFJ-Ws5g-XoIv-7Mk7Ke on /dev/sda2
sys-devices-pci0000:00-0...ata1-host0-target0:0:0-0:0:0:0-block-sda.device loaded active plugged HGST_HTS725050A7E630
sys-devices-pci0000:00-0...ata2-host1-target1:0:0-1:0:0:0-block-sr0.device loaded active plugged HL-DT-ST_DVDRAM_GT80N
sys-devices-platform-serial8250-tty-ttyS1.device loaded active plugged /sys/devices/platform/serial8250/tty/ttyS1
sys-devices-platform-serial8250-tty-ttyS2.device loaded active plugged /sys/devices/platform/serial8250/tty/ttyS2
sys-devices-platform-serial8250-tty-ttyS3.device loaded active plugged /sys/devices/platform/serial8250/tty/ttyS3
sys-devices-platform-thinkpad_acpi-sound-card29.device loaded active plugged /sys/devices/platform/thinkpad_acpi/sound/card29
sys-devices-virtual-block-dm\x2d0.device loaded active plugged /sys/devices/virtual/block/dm-0
sys-devices-virtual-block-dm\x2d1.device loaded active plugged /sys/devices/virtual/block/dm-1
sys-devices-virtual-block-dm\x2d2.device loaded active plugged /sys/devices/virtual/block/dm-2
sys-devices-virtual-block-loop0.device loaded active plugged LVM PV hoCHOb-3sy4-vTFG-cbZD-5nxh-FwVJ-pSY92M on /dev/loop0
sys-devices-virtual-net-ppp0.device loaded active plugged /sys/devices/virtual/net/ppp0
sys-devices-virtual-net-tun0.device loaded active plugged /sys/devices/virtual/net/tun0
sys-module-configfs.device loaded active plugged /sys/module/configfs
sys-module-fuse.device loaded active plugged /sys/module/fuse
sys-subsystem-bluetooth-devices-hci0.device loaded active plugged /sys/subsystem/bluetooth/devices/hci0
sys-subsystem-net-devices-em1.device loaded active plugged 82579LM Gigabit Network Connection
sys-subsystem-net-devices-ppp0.device loaded active plugged /sys/subsystem/net/devices/ppp0
sys-subsystem-net-devices-tun0.device loaded active plugged /sys/subsystem/net/devices/tun0
sys-subsystem-net-devices-wlp3s0.device loaded active plugged Centrino Ultimate-N 6300 (3x3 AGN)
-.mount loaded active mounted /
boot.mount loaded active mounted /boot
dev-hugepages.mount loaded active mounted Huge Pages File System
dev-mqueue.mount loaded active mounted POSIX Message Queue File System
home.mount loaded active mounted /home
proc-fs-nfsd.mount loaded active mounted RPC Pipe File System
run-media-rajat-New\x20Volume.mount loaded active mounted /run/media/rajat/New Volume
run-media-rajat-Vodafone\x20K3800.mount loaded active mounted /run/media/rajat/Vodafone K3800
run-user-1000-gvfs.mount loaded active mounted /run/user/1000/gvfs
sys-fs-fuse-connections.mount loaded active mounted FUSE Control File System
sys-kernel-config.mount loaded active mounted Configuration File System
sys-kernel-debug.mount loaded active mounted Debug File System
tmp.mount loaded active mounted Temporary Directory
var-lib-nfs-rpc_pipefs.mount loaded active mounted RPC Pipe File System
cups.path loaded active running CUPS Printer Service Spool
systemd-ask-password-plymouth.path loaded active waiting Forward Password Requests to Plymouth Directory Watch
systemd-ask-password-wall.path loaded active waiting Forward Password Requests to Wall Directory Watch
session-3.scope loaded active running Session 3 of user rajat
abrt-ccpp.service loaded active exited Install ABRT coredump hook
abrt-oops.service loaded active running ABRT kernel log watcher
abrt-xorg.service loaded active running ABRT Xorg log watcher
abrtd.service loaded active running ABRT Automated Bug Reporting Tool
accounts-daemon.service loaded active running Accounts Service
alsa-state.service loaded active running Manage Sound Card State (restore and store)
atd.service loaded active running Job spooling tools
auditd.service loaded active running Security Auditing Service
avahi-daemon.service loaded active running Avahi mDNS/DNS-SD Stack
bitlbee.service loaded active running BitlBee IRC/IM gateway
bluetooth.service loaded active running Bluetooth service
chronyd.service loaded active running NTP client/server
colord.service loaded active running Manage, Install and Generate Color Profiles
crond.service loaded active running Command Scheduler
cups.service loaded active running CUPS Printing Service
dbus.service loaded active running D-Bus System Message Bus
fedora-import-state.service loaded active exited Import network configuration from initramfs
fedora-readonly.service loaded active exited Configure read-only root support
gdm.service loaded active running GNOME Display Manager
irqbalance.service loaded active running irqbalance daemon
kmod-static-nodes.service loaded active exited Create list of required static device nodes for the current kernel
lvm2-lvmetad.service loaded active running LVM2 metadata daemon
lvm2-monitor.service loaded active exited Monitoring of LVM2 mirrors, snapshots etc. using dmeventd or progress poll
lvm2-pvscan@7:0.service loaded active exited LVM2 PV scan on device 7:0
lvm2-pvscan@8:2.service loaded active exited LVM2 PV scan on device 8:2
mcelog.service loaded active running Machine Check Exception Logging Daemon
ModemManager.service loaded active running Modem Manager
monit.service loaded active running Pro-active monitoring utility for unix systems
NetworkManager.service loaded active running Network Manager
nfs-lock.service loaded active running NFS file locking service.
openshift-iptables-port-proxy.service loaded active exited OpenShift IPTables Port Proxy
openshift-tc.service loaded failed failed OpenShift Traffic Control
pcscd.service loaded active running PC/SC Smart Card Daemon
polkit.service loaded active running Authorization Manager
rc-local.service loaded failed failed /etc/rc.d/rc.local Compatibility
rngd.service loaded active running Hardware RNG Entropy Gatherer Daemon
rpcbind.service loaded active running RPC bind service
rsyslog.service loaded active running System Logging Service
rtkit-daemon.service loaded active running RealtimeKit Scheduling Policy Service
smartd.service loaded active running Self Monitoring and Reporting Technology (SMART) Daemon
sysstat.service loaded active exited Resets System Activity Logs
systemd-backlight@backlight:acpi_video0.service loaded active exited Load/Save Screen Backlight Brightness of backlight:acpi_video0
systemd-backlight@backlight:intel_backlight.service loaded active exited Load/Save Screen Backlight Brightness of backlight:intel_backlight
systemd-fsck-root.service loaded active exited File System Check on Root Device
systemd-fsck@dev-disk-by...x2d7fd8\x2d4d80\x2dad47\x2d6bc66f6e4c7c.service loaded active exited File System Check on /dev/disk/by-uuid/0dc7dcae-7fd8-4d80-ad47-6bc66f6e4c7
systemd-fsck@dev-mapper-fedora_rajat\x2dhome.service loaded active exited File System Check on /dev/mapper/fedora_rajat-home
systemd-journald.service loaded active running Journal Service
systemd-logind.service loaded active running Login Service
systemd-random-seed.service loaded active exited Load/Save Random Seed
systemd-readahead-collect.service loaded active exited Collect Read-Ahead Data
systemd-readahead-replay.service loaded active exited Replay Read-Ahead Data
systemd-remount-fs.service loaded active exited Remount Root and Kernel File Systems
systemd-sysctl.service loaded active exited Apply Kernel Variables
systemd-tmpfiles-setup-dev.service loaded active exited Create static device nodes in /dev
systemd-tmpfiles-setup.service loaded active exited Create Volatile Files and Directories
systemd-udev-trigger.service loaded active exited udev Coldplug all Devices
systemd-udevd.service loaded active running udev Kernel Device Manager
systemd-update-utmp.service loaded active exited Update UTMP about System Reboot/Shutdown
systemd-user-sessions.service loaded active exited Permit User Sessions
systemd-vconsole-setup.service loaded active exited Setup Virtual Console
udisks2.service loaded active running Disk Manager
upower.service loaded active running Daemon for power management
user@0.service loaded active running User Manager for 0
user@1000.service loaded active running User Manager for 1000
user@42.service loaded active running User Manager for 42
user@983.service loaded active running User Manager for 983
vnstat.service loaded active running VnStat - Lightweight Network Traffic Monitor
wpa_supplicant.service loaded active running WPA Supplicant daemon
-.slice loaded active active Root Slice
system-getty.slice loaded active active system-getty.slice
system.slice loaded active active System Slice
user-0.slice loaded active active user-0.slice
user-1000.slice loaded active active user-1000.slice
user-42.slice loaded active active user-42.slice
user-983.slice loaded active active user-983.slice
user.slice loaded active active User and Session Slice
avahi-daemon.socket loaded active running Avahi mDNS/DNS-SD Stack Activation Socket
cups.socket loaded active running CUPS Printing Service Sockets
dbus.socket loaded active running D-Bus System Message Bus Socket
dm-event.socket loaded active listening Device-mapper event daemon FIFOs
iscsid.socket loaded active listening Open-iSCSI iscsid Socket
iscsiuio.socket loaded active listening Open-iSCSI iscsiuio Socket
lvm2-lvmetad.socket loaded active running LVM2 metadata daemon socket
pcscd.socket loaded active running PC/SC Smart Card Daemon Activation Socket
rpcbind.socket loaded active running RPCbind Server Activation Socket
systemd-initctl.socket loaded active listening /dev/initctl Compatibility Named Pipe
systemd-journald.socket loaded active running Journal Socket
systemd-shutdownd.socket loaded active listening Delayed Shutdown Socket
systemd-udevd-control.socket loaded active running udev Control Socket
systemd-udevd-kernel.socket loaded active running udev Kernel Socket
dev-dm\x2d1.swap loaded active active /dev/dm-1
basic.target loaded active active Basic System
bluetooth.target loaded active active Bluetooth
cryptsetup.target loaded active active Encrypted Volumes
getty.target loaded active active Login Prompts
graphical.target loaded active active Graphical Interface
local-fs-pre.target loaded active active Local File Systems (Pre)
local-fs.target loaded active active Local File Systems
multi-user.target loaded active active Multi-User System
network.target loaded active active Network
nfs.target loaded active active Network File System Server
paths.target loaded active active Paths
remote-fs.target loaded active active Remote File Systems
slices.target loaded active active Slices
sockets.target loaded active active Sockets
sound.target loaded active active Sound Card
swap.target loaded active active Swap
sysinit.target loaded active active System Initialization
timers.target loaded active active Timers
systemd-readahead-done.timer loaded active elapsed Stop Read-Ahead Data Collection 10s After Completed Startup
systemd-tmpfiles-clean.timer loaded active waiting Daily Cleanup of Temporary Directories

LOAD = Reflects whether the unit definition was properly loaded.
ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
SUB = The low-level unit activation state, values depend on unit type.

164 loaded units listed. Pass --all to see loaded but inactive units, too.
To show all installed unit files use 'systemctl list-unit-files'.

2.2 Listing failed units

The failed units can be listed with --failed switch.

[root@rajat rajat]# systemctl --failed
UNIT LOAD ACTIVE SUB DESCRIPTION
openshift-tc.service loaded failed failed OpenShift Traffic Control
rc-local.service loaded failed failed /etc/rc.d/rc.local Compatibility

LOAD = Reflects whether the unit definition was properly loaded.
ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
SUB = The low-level unit activation state, values depend on unit type.

2 loaded units listed. Pass --all to see loaded but inactive units, too.
To show all installed unit files use 'systemctl list-unit-files'.

3. Managing services

3.1 Active services

All the active services can be checked

[root@rajat rajat]# systemctl list-units -t service
UNIT LOAD ACTIVE SUB DESCRIPTION
abrt-ccpp.service loaded active exited Install ABRT coredump hook
abrt-oops.service loaded active running ABRT kernel log watcher
abrt-xorg.service loaded active running ABRT Xorg log watcher
abrtd.service loaded active running ABRT Automated Bug Reporting Tool
accounts-daemon.service loaded active running Accounts Service
alsa-state.service loaded active running Manage Sound Card State (restore and store)
atd.service loaded active running Job spooling tools
auditd.service loaded active running Security Auditing Service
avahi-daemon.service loaded active running Avahi mDNS/DNS-SD Stack
bitlbee.service loaded active running BitlBee IRC/IM gateway
bluetooth.service loaded active running Bluetooth service
chronyd.service loaded active running NTP client/server
colord.service loaded active running Manage, Install and Generate Color Profiles
crond.service loaded active running Command Scheduler
cups.service loaded active running CUPS Printing Service
dbus.service loaded active running D-Bus System Message Bus
fedora-import-state.service loaded active exited Import network configuration from initramfs
fedora-readonly.service loaded active exited Configure read-only root support
gdm.service loaded active running GNOME Display Manager
irqbalance.service loaded active running irqbalance daemon
kmod-static-nodes.service loaded active exited Create list of required static device nodes for the current kernel
lvm2-lvmetad.service loaded active running LVM2 metadata daemon
lvm2-monitor.service loaded active exited Monitoring of LVM2 mirrors, snapshots etc. using dmeventd or progress polli
lvm2-pvscan@7:0.service loaded active exited LVM2 PV scan on device 7:0
lvm2-pvscan@8:2.service loaded active exited LVM2 PV scan on device 8:2
mcelog.service loaded active running Machine Check Exception Logging Daemon
ModemManager.service loaded active running Modem Manager
monit.service loaded active running Pro-active monitoring utility for unix systems
NetworkManager.service loaded active running Network Manager
nfs-lock.service loaded active running NFS file locking service.
openshift-iptables-port-proxy.service loaded active exited OpenShift IPTables Port Proxy
openshift-tc.service loaded failed failed OpenShift Traffic Control
pcscd.service loaded active running PC/SC Smart Card Daemon
polkit.service loaded active running Authorization Manager
rc-local.service loaded failed failed /etc/rc.d/rc.local Compatibility
rngd.service loaded active running Hardware RNG Entropy Gatherer Daemon
rpcbind.service loaded active running RPC bind service
rsyslog.service loaded active running System Logging Service
rtkit-daemon.service loaded active running RealtimeKit Scheduling Policy Service
smartd.service loaded active running Self Monitoring and Reporting Technology (SMART) Daemon
sysstat.service loaded active exited Resets System Activity Logs
systemd-backlight@backlight:acpi_video0.service loaded active exited Load/Save Screen Backlight Brightness of backlight:acpi_video0
systemd-backlight@backlight:intel_backlight.service loaded active exited Load/Save Screen Backlight Brightness of backlight:intel_backlight
systemd-fsck-root.service loaded active exited File System Check on Root Device
systemd-fsck@dev-disk-by...\x2d7fd8\x2d4d80\x2dad47\x2d6bc66f6e4c7c.service loaded active exited File System Check on /dev/disk/by-uuid/0dc7dcae-7fd8-4d80-ad47-6bc66f6e4c7c
systemd-fsck@dev-mapper-fedora_rajat\x2dhome.service loaded active exited File System Check on /dev/mapper/fedora_rajat-home
systemd-hostnamed.service loaded active running Hostname Service
systemd-journald.service loaded active running Journal Service
systemd-logind.service loaded active running Login Service
systemd-random-seed.service loaded active exited Load/Save Random Seed
systemd-readahead-collect.service loaded active exited Collect Read-Ahead Data
systemd-readahead-replay.service loaded active exited Replay Read-Ahead Data
systemd-remount-fs.service loaded active exited Remount Root and Kernel File Systems
systemd-sysctl.service loaded active exited Apply Kernel Variables
systemd-tmpfiles-setup-dev.service loaded active exited Create static device nodes in /dev
systemd-tmpfiles-setup.service loaded active exited Create Volatile Files and Directories
systemd-udev-trigger.service loaded active exited udev Coldplug all Devices
systemd-udevd.service loaded active running udev Kernel Device Manager
systemd-update-utmp.service loaded active exited Update UTMP about System Reboot/Shutdown
systemd-user-sessions.service loaded active exited Permit User Sessions
systemd-vconsole-setup.service loaded active exited Setup Virtual Console
udisks2.service loaded active running Disk Manager
upower.service loaded active running Daemon for power management
user@0.service loaded active running User Manager for 0
user@1000.service loaded active running User Manager for 1000
user@42.service loaded active running User Manager for 42
user@983.service loaded active running User Manager for 983
vnstat.service loaded active running VnStat - Lightweight Network Traffic Monitor
wpa_supplicant.service loaded active running WPA Supplicant daemon

LOAD = Reflects whether the unit definition was properly loaded.
ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
SUB = The low-level unit activation state, values depend on unit type.

69 loaded units listed. Pass --all to see loaded but inactive units, too.
To show all installed unit files use 'systemctl list-unit-files'.

3.2 Service status
[root@rajat rajat]# systemctl status bluetooth.service
bluetooth.service - Bluetooth service
Loaded: loaded (/usr/lib/systemd/system/bluetooth.service; enabled)
Active: active (running) since Mon 2014-09-08 09:57:56 IST; 1h 40min ago
Docs: man:bluetoothd(8)
Main PID: 685 (bluetoothd)
Status: "Running"
CGroup: /system.slice/bluetooth.service
└─685 /usr/libexec/bluetooth/bluetoothd

Sep 08 09:57:56 rajat.patel.fc20 systemd[1]: Starting Bluetooth service...
Sep 08 09:57:56 rajat.patel.fc20 bluetoothd[685]: Bluetooth daemon 5.18
Sep 08 09:57:56 rajat.patel.fc20 bluetoothd[685]: Starting SDP server
Sep 08 09:57:56 rajat.patel.fc20 systemd[1]: Started Bluetooth service.
Sep 08 09:57:57 rajat.patel.fc20 bluetoothd[685]: Bluetooth management interface 1.5 initialized
Sep 08 09:58:22 rajat.patel.fc20 bluetoothd[685]: Endpoint registered: sender=:1.51 path=/MediaEndpoint/A2DPSource
Sep 08 09:58:22 rajat.patel.fc20 bluetoothd[685]: Endpoint registered: sender=:1.51 path=/MediaEndpoint/A2DPSink

3.3 Stopping a service
[root@rajat rajat]# systemctl stop bluetooth.service
[root@rajat rajat]# systemctl status bluetooth.service
bluetooth.service - Bluetooth service
Loaded: loaded (/usr/lib/systemd/system/bluetooth.service; enabled)
Active: inactive (dead) since Mon 2014-09-08 11:39:24 IST; 13s ago
Docs: man:bluetoothd(8)
Process: 685 ExecStart=/usr/libexec/bluetooth/bluetoothd (code=exited, status=0/SUCCESS)
Main PID: 685 (code=exited, status=0/SUCCESS)
Status: "Quitting"

Sep 08 09:57:56 rajat.patel.fc20 bluetoothd[685]: Starting SDP server
Sep 08 09:57:56 rajat.patel.fc20 systemd[1]: Started Bluetooth service.
Sep 08 09:57:57 rajat.patel.fc20 bluetoothd[685]: Bluetooth management interface 1.5 initialized
Sep 08 09:58:22 rajat.patel.fc20 bluetoothd[685]: Endpoint registered: sender=:1.51 path=/MediaEndpoint/A2DPSource
Sep 08 09:58:22 rajat.patel.fc20 bluetoothd[685]: Endpoint registered: sender=:1.51 path=/MediaEndpoint/A2DPSink
Sep 08 11:39:24 rajat.patel.fc20 systemd[1]: Stopping Bluetooth service...
Sep 08 11:39:24 rajat.patel.fc20 bluetoothd[685]: Terminating
Sep 08 11:39:24 rajat.patel.fc20 bluetoothd[685]: Endpoint unregistered: sender=:1.51 path=/MediaEndpoint/A2DPSource
Sep 08 11:39:24 rajat.patel.fc20 bluetoothd[685]: Endpoint unregistered: sender=:1.51 path=/MediaEndpoint/A2DPSink
Sep 08 11:39:24 rajat.patel.fc20 systemd[1]: Stopped Bluetooth service.

3.4 Start a service
[root@rajat rajat]# systemctl start bluetooth.service
[root@rajat rajat]# systemctl status bluetooth.service
bluetooth.service - Bluetooth service
Loaded: loaded (/usr/lib/systemd/system/bluetooth.service; enabled)
Active: active (running) since Mon 2014-09-08 11:40:35 IST; 1s ago
Docs: man:bluetoothd(8)
Main PID: 29802 (bluetoothd)
Status: "Running"
CGroup: /system.slice/bluetooth.service
└─29802 /usr/libexec/bluetooth/bluetoothd

Sep 08 11:40:35 rajat.patel.fc20 systemd[1]: Starting Bluetooth service...
Sep 08 11:40:35 rajat.patel.fc20 bluetoothd[29802]: Bluetooth daemon 5.18
Sep 08 11:40:35 rajat.patel.fc20 systemd[1]: Started Bluetooth service.
Sep 08 11:40:35 rajat.patel.fc20 bluetoothd[29802]: Starting SDP server
Sep 08 11:40:35 rajat.patel.fc20 bluetoothd[29802]: Bluetooth management interface 1.5 initialized
Sep 08 11:40:35 rajat.patel.fc20 bluetoothd[29802]: Endpoint registered: sender=:1.51 path=/MediaEndpoint/A2DPSource
Sep 08 11:40:35 rajat.patel.fc20 bluetoothd[29802]: Endpoint registered: sender=:1.51 path=/MediaEndpoint/A2DPSink

3.5 Restart a service

Similarly, restarting a service is managed using ‘systemctl restart ‘:

[root@rajat rajat]# systemctl restart bluetooth.service
[root@rajat rajat]# systemctl status bluetooth.service
bluetooth.service - Bluetooth service
Loaded: loaded (/usr/lib/systemd/system/bluetooth.service; enabled)
Active: active (running) since Mon 2014-09-08 11:41:25 IST; 13s ago
Docs: man:bluetoothd(8)
Main PID: 29955 (bluetoothd)
Status: "Running"
CGroup: /system.slice/bluetooth.service
└─29955 /usr/libexec/bluetooth/bluetoothd

Sep 08 11:41:25 rajat.patel.fc20 bluetoothd[29955]: Bluetooth daemon 5.18
Sep 08 11:41:25 rajat.patel.fc20 systemd[1]: Started Bluetooth service.
Sep 08 11:41:25 rajat.patel.fc20 bluetoothd[29955]: Starting SDP server
Sep 08 11:41:25 rajat.patel.fc20 bluetoothd[29955]: Bluetooth management interface 1.5 initialized
Sep 08 11:41:25 rajat.patel.fc20 bluetoothd[29955]: Endpoint registered: sender=:1.51 path=/MediaEndpoint/A2DPSource
Sep 08 11:41:25 rajat.patel.fc20 bluetoothd[29955]: Endpoint registered: sender=:1.51 path=/MediaEndpoint/A2DPSink

3.6 Reload a service

#systemctl reload sshd

4. Managing services at boot

The chkconfig command was used to manage services at boot.

4.1 Enable/Disable a service at boot

[root@rajat rajat]# systemctl is-enabled bluetooth.service
enabled

[root@rajat rajat]# systemctl disable bluetooth.service
rm '/etc/systemd/system/dbus-org.bluez.service'
rm '/etc/systemd/system/bluetooth.target.wants/bluetooth.service'

5. Logging in "systemd"

[root@rajat rajat]# journalctl
-- Logs begin at Sat 2014-03-01 03:10:01 IST, end at Mon 2014-09-08 11:47:36 IST. --
Mar 01 03:10:01 rajat.patel.fc20 systemd[7536]: Failed to open private bus connection: Failed to connect to socket /run/user/996/dbus/user_bus_socket: No such file or direct
Mar 01 03:10:01 rajat.patel.fc20 systemd[7536]: Starting Default.
Mar 01 03:10:01 rajat.patel.fc20 systemd[7536]: Reached target Default.
Mar 01 03:10:01 rajat.patel.fc20 systemd[7536]: Startup finished in 406ms.
Mar 01 08:21:19 rajat.patel.fc20 systemd[7536]: Stopping Default.
Mar 01 08:21:19 rajat.patel.fc20 systemd[7536]: Stopped target Default.
Mar 01 08:21:20 rajat.patel.fc20 systemd[7536]: Starting Shutdown.
Mar 01 08:21:20 rajat.patel.fc20 systemd[7536]: Reached target Shutdown.
Mar 01 08:21:20 rajat.patel.fc20 systemd[7536]: Starting Exit the Session...
-- Reboot --
May 01 03:10:01 rajat.patel.fc20 systemd[6183]: Failed to open private bus connection: Failed to connect to socket /run/user/996/dbus/user_bus_socket: No such file or direct
May 01 03:10:01 rajat.patel.fc20 systemd[6183]: Starting Default.
May 01 03:10:01 rajat.patel.fc20 systemd[6183]: Reached target Default.
May 01 03:10:01 rajat.patel.fc20 systemd[6183]: Startup finished in 63ms.
May 01 03:16:39 rajat.patel.fc20 systemd[6183]: Stopping Default.
May 01 03:16:39 rajat.patel.fc20 systemd[6183]: Stopped target Default.
May 01 03:16:40 rajat.patel.fc20 systemd[6183]: Starting Shutdown.
May 01 03:16:40 rajat.patel.fc20 systemd[6185]: pam_unix(systemd-user:session): session closed for user unbound
-- Reboot --
Jun 01 03:10:01 rajat.patel.fc20 systemd[5306]: Failed to open private bus connection: Failed to connect to socket /run/user/996/dbus/user_bus_socket: No such file or direct
Jun 01 03:10:01 rajat.patel.fc20 systemd[5306]: Starting Default.
Jun 01 03:10:01 rajat.patel.fc20 systemd[5306]: Reached target Default.
Jun 01 03:10:01 rajat.patel.fc20 systemd[5306]: Startup finished in 415ms.
-- Reboot --
Jul 01 03:10:02 rajat.patel.fc20 systemd[26153]: Failed to open private bus connection: Failed to connect to socket /run/user/996/dbus/user_bus_socket: No such file or direc
Jul 01 03:10:02 rajat.patel.fc20 systemd[26153]: Starting Default.
Jul 01 03:10:02 rajat.patel.fc20 systemd[26153]: Reached target Default.
Jul 01 03:10:02 rajat.patel.fc20 systemd[26153]: Startup finished in 107ms.
-- Reboot --

5.1 Boot messages

[root@rajat rajat]#journalctl -b
-- Logs begin at Sat 2014-03-01 03:10:01 IST, end at Mon 2014-09-08 11:49:06 IST. --
Sep 08 09:57:42 rajat.patel.fc20 systemd-journal[128]: Runtime journal is using 8.0M (max allowed 384.3M, trying to leave 576.4M free of 3.7G available → current limit 384.3
Sep 08 09:57:42 rajat.patel.fc20 systemd-journal[128]: Runtime journal is using 8.0M (max allowed 384.3M, trying to leave 576.4M free of 3.7G available → current limit 384.3
Sep 08 09:57:42 rajat.patel.fc20 kernel: Initializing cgroup subsys cpuset
Sep 08 09:57:42 rajat.patel.fc20 kernel: Initializing cgroup subsys cpu
Sep 08 09:57:42 rajat.patel.fc20 kernel: Initializing cgroup subsys cpuacct
Sep 08 09:57:42 rajat.patel.fc20 kernel: Linux version 3.15.10-201.fc20.x86_64 (mockbuild@bkernel01.phx2.fedoraproject.org) (gcc version 4.8.3 20140624 (Red Hat 4.8.3-1) (GC
Sep 08 09:57:42 rajat.patel.fc20 kernel: Command line: BOOT_IMAGE=/vmlinuz-3.15.10-201.fc20.x86_64 root=/dev/mapper/fedora_rajat-root ro rd.lvm.lv=fedora_rajat/swap vconsole
Sep 08 09:57:42 rajat.patel.fc20 kernel: e820: BIOS-provided physical RAM map:
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009d7ff] usable
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x000000000009d800-0x000000000009ffff] reserved
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x00000000000e0000-0x00000000000fffff] reserved
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000001fffffff] usable
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x0000000020000000-0x00000000201fffff] reserved
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x0000000020200000-0x0000000040003fff] usable
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x0000000040004000-0x0000000040004fff] reserved
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x0000000040005000-0x00000000ced2ffff] usable
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x00000000ced30000-0x00000000dae9efff] reserved
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x00000000dae9f000-0x00000000daf9efff] ACPI NVS
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x00000000daf9f000-0x00000000daffefff] ACPI data
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x00000000dafff000-0x00000000df9fffff] reserved
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x00000000f8000000-0x00000000fbffffff] reserved
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x00000000fec00000-0x00000000fec00fff] reserved
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x00000000fed08000-0x00000000fed08fff] reserved
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x00000000fed10000-0x00000000fed19fff] reserved
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x00000000fee00000-0x00000000fee00fff] reserved
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x00000000ffc00000-0x00000000ffffffff] reserved
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x0000000100000000-0x000000021e5fffff] usable
Sep 08 09:57:42 rajat.patel.fc20 kernel: BIOS-e820: [mem 0x000000021e600000-0x000000021e7fffff] reserved
Sep 08 09:57:42 rajat.patel.fc20 kernel: NX (Execute Disable) protection: active
Sep 08 09:57:42 rajat.patel.fc20 kernel: SMBIOS 2.7 present.
Sep 08 09:57:42 rajat.patel.fc20 kernel: DMI: LENOVO 2429BQ2/2429BQ2, BIOS G4ET94WW (2.54 ) 05/23/2013
Sep 08 09:57:42 rajat.patel.fc20 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved
Sep 08 09:57:42 rajat.patel.fc20 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable
Sep 08 09:57:42 rajat.patel.fc20 kernel: e820: last_pfn = 0x21e600 max_arch_pfn = 0x400000000
Sep 08 09:57:42 rajat.patel.fc20 kernel: MTRR default type: uncachable
Sep 08 09:57:42 rajat.patel.fc20 kernel: MTRR fixed ranges enabled:
Sep 08 09:57:42 rajat.patel.fc20 kernel: 00000-9FFFF write-back
Sep 08 09:57:42 rajat.patel.fc20 kernel: A0000-BFFFF uncachable
Sep 08 09:57:42 rajat.patel.fc20 kernel: C0000-FFFFF write-protect
Sep 08 09:57:42 rajat.patel.fc20 kernel: MTRR variable ranges enabled:

5.2 Follow logs

[root@rajat rajat]# journalctl -f
-- Logs begin at Sat 2014-03-01 03:10:01 IST. --
Sep 08 11:51:45 rajat.patel.fc20 gdm-password][31086]: gkr-pam: unlocked login keyring
Sep 08 11:51:45 rajat.patel.fc20 gdm[736]: GdmSlave: could not fetch type of session 'c1': No such file or directory
Sep 08 11:52:01 rajat.patel.fc20 crond[31108]: PAM unable to dlopen(/usr/lib64/security/pam_ldap.so): /usr/lib64/security/pam_ldap.so: cannot open shared object... directory
Sep 08 11:52:01 rajat.patel.fc20 crond[31108]: PAM adding faulty module: /usr/lib64/security/pam_ldap.so
Sep 08 11:52:01 rajat.patel.fc20 systemd[1]: Starting Session 149 of user root.
Sep 08 11:52:01 rajat.patel.fc20 systemd[1]: Started Session 149 of user root.
Sep 08 11:52:01 rajat.patel.fc20 CROND[31110]: (root) CMD (run-parts /etc/cron.minutely)
Sep 08 11:52:01 rajat.patel.fc20 run-parts[31113]: (/etc/cron.minutely) starting openshift-origin-cron-minutely
Sep 08 11:52:01 rajat.patel.fc20 run-parts[31139]: (/etc/cron.minutely) finished openshift-origin-cron-minutely
Sep 08 11:52:06 rajat.patel.fc20 ModemManager[693]: <info> Modem /org/freedesktop/ModemManager1/Modem/0: signal quality updated (87)
Sep 08 11:52:12 rajat.patel.fc20 fprintd[31081]: ** Message: No devices in use, exit

5.3 Service specific logs
[root@rajat rajat]# journalctl /usr/sbin/NetworkManager
-- Logs begin at Sat 2014-03-01 03:10:01 IST, end at Mon 2014-09-08 11:54:36 IST. --
Sep 07 17:27:34 rajat.patel.fc20 NetworkManager[707]: <info> NetworkManager (version 0.9.9.0-43.git20131003.fc20) is starting...
Sep 07 17:27:34 rajat.patel.fc20 NetworkManager[707]: <info> Read config: /etc/NetworkManager/NetworkManager.conf
Sep 07 17:27:34 rajat.patel.fc20 NetworkManager[707]: <info> WEXT support is enabled
Sep 07 17:27:34 rajat.patel.fc20 NetworkManager[707]: <info> VPN: loaded org.freedesktop.NetworkManager.l2tp
Sep 07 17:27:34 rajat.patel.fc20 NetworkManager[707]: <info> VPN: loaded org.freedesktop.NetworkManager.openvpn
Sep 07 17:27:35 rajat.patel.fc20 NetworkManager[707]: <info> VPN: loaded org.freedesktop.NetworkManager.vpnc
Sep 07 17:27:35 rajat.patel.fc20 NetworkManager[707]: <info> VPN: loaded org.freedesktop.NetworkManager.openconnect
Sep 07 17:27:35 rajat.patel.fc20 NetworkManager[707]: <info> VPN: loaded org.freedesktop.NetworkManager.pptp
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: Acquired D-Bus service com.redhat.ifcfgrh1
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: <info> Loaded plugin ifcfg-rh: (c) 2007 - 2010 Red Hat, Inc. To report bugs please use the NetworkManager mailing list
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: <info> Loaded plugin keyfile: (c) 2007 - 2010 Red Hat, Inc. To report bugs please use the NetworkManager mailing list.
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: parsing /etc/sysconfig/network-scripts/ifcfg-ssid ...
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: read connection 'ssid'
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: parsing /etc/sysconfig/network-scripts/ifcfg-qogdpqneazl-a2adp ...
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: read connection 'qogdpqneazl-a2adp'
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: parsing /etc/sysconfig/network-scripts/ifcfg-Profile_1 ...
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: read connection 'Profile 1'
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: parsing /etc/sysconfig/network-scripts/ifcfg-O_Teri ...
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: read connection 'O Teri'
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: parsing /etc/sysconfig/network-scripts/ifcfg-donteven ...
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: read connection 'donteven'
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: parsing /etc/sysconfig/network-scripts/ifcfg-epezojccijh-a2adp ...
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: read connection 'epezojccijh-a2adp'
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: parsing /etc/sysconfig/network-scripts/ifcfg-guggle.co.in ...
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: read connection 'guggle.co.in'
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: parsing /etc/sysconfig/network-scripts/ifcfg-2806 ...
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: read connection '2806'
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: parsing /etc/sysconfig/network-scripts/ifcfg-Lords_Silvassa_WiFonic ...
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: read connection 'Lords Silvassa WiFonic'
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: parsing /etc/sysconfig/network-scripts/ifcfg-HP-HOTSPOT-33-LaserJet_M1218 ...
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: read connection 'HP-HOTSPOT-33-LaserJet M1218'
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: parsing /etc/sysconfig/network-scripts/ifcfg-donteventhingyoucanhackthis ...
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: read connection 'donteventhingyoucanhackthis'
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: parsing /etc/sysconfig/network-scripts/ifcfg-uxfmhmjbvwo-a2adp ...
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: read connection 'uxfmhmjbvwo-a2adp'
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: parsing /etc/sysconfig/network-scripts/ifcfg-AndroidAP_1 ...
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: read connection 'AndroidAP 1'
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: parsing /etc/sysconfig/network-scripts/ifcfg-Red_Hat_Guest ...
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: read connection 'Red Hat Guest'
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: parsing /etc/sysconfig/network-scripts/ifcfg-chalbhag ...
Sep 07 17:27:36 rajat.patel.fc20 NetworkManager[707]: ifcfg-rh: read connection 'chalbhag'

5.4 Power management

The systemctl command can be used to put the system down, or reboot or hibernate.

To poweroff, reboot, suspend and hibernate, use the following commands respectively:

# systemctl poweroff

# systemctl reboot

# systemctl suspend

# systemctl reboot

[root@rajat rajat]# hostnamectl
Static hostname: rajat.patel.fc20
Icon name: computer-laptop
Chassis: laptop
Machine ID: 41f6085a86774b4a9047c5a5110e1b22
Boot ID: 473ba3c20f124de18f5035a27c479662
Operating System: Fedora 20 (Heisenbug)
CPE OS Name: cpe:/o:fedoraproject:fedora:20
Kernel: Linux 3.15.10-201.fc20.x86_64
Architecture: x86_64

Linux performance observability tools

noreply@blogger.com (Unknown) — Fri, 5 Sep 2014 05:08:00 -0700

Openstack 5 on CentOS 7

noreply@blogger.com (Unknown) — Mon, 11 Aug 2014 00:19:00 -0700

CentOS 7 Install minimal.

Step 1 wget http://dl.fedoraproject.org/pub/epel/beta/7/x86_64/epel-release-7-0.2.noarch.rpm
Step 2 vi /etc/sysconfig/selinux # Set: SELINUX=permissive
Step 3 yum update -y
Step 4 systemctl disable NetworkManager
Step 5 yum install ntp -y
Step 6 systemctl disable firewalld #Openstack dont understand firewalld rules
Step 7 vi /etc/ntp.conf
server 1.in.pool.ntp.org
server 1.asia.pool.ntp.org
server 0.asia.pool.ntp.org
Step 8 vi /etc/hosts
192.168.122.113 guggle.co.in. # Openstack need static ip address.
Step 9 yum install -y http://rdo.fedorapeople.org/rdo-release.rpm
Step 10 yum install -y openstack-packstack
Step 11 packstack --gen-answer-file=/root/answers.txt
Step 12 packstack --answer-file=/root/answers.txt
Welcome to Installer setup utility
Packstack changed given value to required value /root/.ssh/id_rsa.pub

Installing:
Clean Up [ DONE ]
Setting up ssh keys [ DONE ]
Discovering hosts' details [ DONE ]
Adding pre install manifest entries [ DONE ]
Preparing servers [ DONE ]
Adding AMQP manifest entries [ DONE ]
Adding MySQL manifest entries [ DONE ]
Adding Keystone manifest entries [ DONE ]
Adding Glance Keystone manifest entries [ DONE ]
Adding Glance manifest entries [ DONE ]
Adding Cinder Keystone manifest entries [ DONE ]
Adding Cinder manifest entries [ DONE ]
Checking if the Cinder server has a cinder-volumes vg[ DONE ]
Adding Nova API manifest entries [ DONE ]
Adding Nova Keystone manifest entries [ DONE ]
Adding Nova Cert manifest entries [ DONE ]
Adding Nova Conductor manifest entries [ DONE ]
Creating ssh keys for Nova migration [ DONE ]
Gathering ssh host keys for Nova migration [ DONE ]
Adding Nova Compute manifest entries [ DONE ]
Adding Nova Scheduler manifest entries [ DONE ]
Adding Nova VNC Proxy manifest entries [ DONE ]
Adding Openstack Network-related Nova manifest entries[ DONE ]
Adding Nova Common manifest entries [ DONE ]
Adding Neutron API manifest entries [ DONE ]
Adding Neutron Keystone manifest entries [ DONE ]
Adding Neutron L3 manifest entries [ DONE ]
Adding Neutron L2 Agent manifest entries [ DONE ]
Adding Neutron DHCP Agent manifest entries [ DONE ]
Adding Neutron LBaaS Agent manifest entries [ DONE ]
Adding Neutron Metering Agent manifest entries [ DONE ]
Adding Neutron Metadata Agent manifest entries [ DONE ]
Adding OpenStack Client manifest entries [ DONE ]
Adding Horizon manifest entries [ DONE ]
Adding Swift Keystone manifest entries [ DONE ]
Adding Swift builder manifest entries [ DONE ]
Adding Swift proxy manifest entries [ DONE ]
Adding Swift storage manifest entries [ DONE ]
Adding Swift common manifest entries [ DONE ]
Adding Provisioning Demo manifest entries [ DONE ]
Adding MongoDB manifest entries [ DONE ]
Adding Ceilometer manifest entries [ DONE ]
Adding Ceilometer Keystone manifest entries [ DONE ]
Adding Nagios server manifest entries [ DONE ]
Adding Nagios host manifest entries [ DONE ]
Adding post install manifest entries [ DONE ]
Installing Dependencies [ DONE ]
Copying Puppet modules and manifests [ DONE ]
Applying 192.168.122.113_prescript.pp
192.168.122.113_prescript.pp: [ DONE ]
Applying 192.168.122.113_amqp.pp
Applying 192.168.122.113_mysql.pp
192.168.122.113_amqp.pp: [ DONE ]
192.168.122.113_mysql.pp: [ DONE ]
Applying 192.168.122.113_keystone.pp
Applying 192.168.122.113_glance.pp
Applying 192.168.122.113_cinder.pp
192.168.122.113_keystone.pp: [ DONE ]
192.168.122.113_cinder.pp: [ DONE ]
192.168.122.113_glance.pp: [ DONE ]
Applying 192.168.122.113_api_nova.pp
192.168.122.113_api_nova.pp: [ DONE ]
Applying 192.168.122.113_nova.pp
192.168.122.113_nova.pp: [ DONE ]
Applying 192.168.122.113_neutron.pp
192.168.122.113_neutron.pp: [ DONE ]
Applying 192.168.122.113_neutron_fwaas.pp
Applying 192.168.122.113_osclient.pp
Applying 192.168.122.113_horizon.pp
192.168.122.113_neutron_fwaas.pp: [ DONE ]
192.168.122.113_osclient.pp: [ DONE ]
192.168.122.113_horizon.pp: [ DONE ]
Applying 192.168.122.113_ring_swift.pp
192.168.122.113_ring_swift.pp: [ DONE ]
Applying 192.168.122.113_swift.pp
Applying 192.168.122.113_provision_demo.pp
192.168.122.113_swift.pp: [ DONE ]
192.168.122.113_provision_demo.pp: [ DONE ]
Applying 192.168.122.113_mongodb.pp
192.168.122.113_mongodb.pp: [ DONE ]
Applying 192.168.122.113_ceilometer.pp
Applying 192.168.122.113_nagios.pp
Applying 192.168.122.113_nagios_nrpe.pp
192.168.122.113_ceilometer.pp: [ DONE ]
192.168.122.113_nagios_nrpe.pp: [ DONE ]
192.168.122.113_nagios.pp: [ DONE ]
Applying 192.168.122.113_postscript.pp
192.168.122.113_postscript.pp: [ DONE ]
Applying Puppet manifests [ DONE ]
Finalizing [ DONE ]

**** Installation completed successfully ******

Additional information:
* Time synchronization installation was skipped. Please note that unsynchronized time on server instances might be problem for some OpenStack components.
* Did not create a cinder volume group, one already existed
* File /root/keystonerc_admin has been created on OpenStack client host 192.168.122.113. To use the command line tools you need to source the file.
* To access the OpenStack Dashboard browse to http://192.168.122.113/dashboard .
Please, find your login credentials stored in the keystonerc_admin in your home directory.
* To use Nagios, browse to http://192.168.122.113/nagios username: nagiosadmin, password: 55209fe74e694f3c
* The installation log file is available at: /var/tmp/packstack/20140808-001328-M74eSH/openstack-setup.log
* The generated manifests are available at: /var/tmp/packstack/20140808-001328-M74eSH/manifests

RHEL 7 /CentOS 7 Boot Single User Mode

noreply@blogger.com (Unknown) — Tue, 22 Jul 2014 02:13:00 -0700

init=/bin/sh at the end of line that starts with linux in Grub2 (In case of VMWare like KVM or VirtualBox use rb.break instead of inti=/bin/sh)
run mount -o remount,rw /sysroot when the system boots
run chroot /sysroot
run passwd
run touch /.autorelabel
run exit to leave chroot
run exit to logout

RHEL 7 Minimal Installation

noreply@blogger.com (Unknown) — Tue, 22 Jul 2014 02:06:00 -0700

Using "weechat" config Gtalk.

noreply@blogger.com (Unknown) — Sun, 29 Jun 2014 23:14:00 -0700

Installation weechat on Fedora 20

yum -y install weechat libnotify notify-python wget python-xmpp

Configuration

$weechat-curses

Setup scripts

$ cd ~/.weechat/python/autoload
$ wget http://weechat.org/files/scripts/weeget.py

/python load weeget
/weeget
/weechat install buffers
/set weechat.bar.buffers.position top
/weechat install jabber

/jabber add gtalk rajatjpatel@gmail.com yousetthatpasswdisworkingnow talk.google.com:5223
/jabber connect gtalk

To install Docker on Fedora

noreply@blogger.com (Unknown) — Tue, 20 May 2014 23:46:00 -0700

Docker-based container sandbox provides a number of advantages for application deployment environment, such as lightweight isolation, deployment portability, ease of maintenance, etc.

Why docker?
• Smaller than VMs • Improved performance • Secure • Flexible

Not only for the cloud environment, Docker can also be quite useful for end users, especially when you want to test out particular software under a specific Linux environment. You can easily spin up a Docker container for the target environment, install and test the software in it, and then throw away the container once you are done. The whole process from beginning to end is quite efficient, and you can avoid messing up your end system all along.

In this post, I am going to describe how to create and manage Docker containers on Fedora.

To install Docker on Fedora, use the following commands:

# yum install docker-io
# systemctl start docker.service
# systemctl enable docker.service

Basic Usage of Docker
To start a new Docker container, you need to decide which Docker image to use for the container. You can search the official Docker image index which lists publicly available Docker images. The Docker index includes Linux base images managed by Docker team (e.g., Ubuntu, Debian, Fedora, CentOS), as well as user-contributed custom images (e.g., MySQL, Redis, WordPress).

For example, to start a Fedora/Ubuntu container in the interactive mode, run the following command. The last argument '/bin/bash' is to be executed inside a container upon its launch.

docker run -i -t ubuntu /bin/bash or docker pull ubuntu /docker pull fedora

The first time you run the above command, it will download available Ubuntu docker image(s) over networks, and then boot up a Docker container using the image. A Ubuntu container will boot up instantly, and you will see a console prompt inside the container. You can access a full-fledged Ubuntu operating system inside the container sandbox.

list of all containers

docker ps -a

Start container of your choice

docker start [container-id]

Remove container from you local repo

docker rm [container-id]

Running container in order to view or interact with the container

docker attach [container-id]

To remove a container image from the local repository:

docker rmi [image-id]

To search a container image from repositry

docker search fedora or docker search centos

Linux Performance Analysis and Tuning

noreply@blogger.com (Unknown) — Mon, 5 May 2014 23:51:00 -0700

What is “tuned” ?

Tuning profile delivery mechanism

Red Hat ships tuned profiles that improve performance for many workloads...hopefully yours!

To install tuned:

# yum install tuned -y

Now start the services provided by tuned:

# service tuned start

# chkconfig tuned on

# service ktune start

# chkconfig ktune on

To find the current active profile and state of service:

# tuned-adm active
Current active profile: default
Service tuned: enabled, running
Service ktune: enabled, running

To list all the available profiles:

# tuned-adm list
Available profiles:
- default
- throughput-performance
- laptop-ac-powersave
- spindown-disk
- desktop-powersave
- laptop-battery-powersave
- latency-performance
- server-powersave
- enterprise-storage
Current active profile: default

To switch to a different profile:
# tuned-adm profile spindown-disk
NOTE: spindown-disk is one of the profiles

Each profile has 4 configuration file under /etc/tune-profiles/<profile-name>. If you want to create a profile of your own, simply copy one of the profile directory with a different name, change the config files inside it according to your own requirement and activate it.
# cd /etc/tune-profiles/
# cp -a default myprofile
# cd myprofile
# ls
ktune.sh ktune.sysconfig sysctl.ktune tuned.conf

# tuned-adm list
Available profiles:
- balanced
- desktop
- latency-performance
- powersave
- sap
- throughput-performance
- virtual-guest
- virtual-host
Current active profile: balanced

# tuned-adm profile myprofile

In case if you want to disable all tuning, then run:
# tuned-adm off or #server tuned stop

# tuned-adm profile throughput-performance
# tuned-adm active
Current active profile: throughput-performance
# time taskset -c 0 seq 1 60000000 > /dev/null

real 0m0.689s <--
user 0m0.676s
sys 0m0.012s
# service tuned stop
Redirecting to /bin/systemctl stop tuned.service
# time taskset -c 0 seq 1 60000000 > /dev/null

real 0m0.698s <--
user 0m0.686s
sys 0m0.012s

Above sample from laptop.

# uname -a

Linux rajat.patel.fc20 3.14.2-200.fc20.x86_64 #1 SMP Mon Apr 28 14:40:57 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux

Guidelines on hardening Linux server installation

noreply@blogger.com (Unknown) — Mon, 5 May 2014 02:03:00 -0700

A. Use the least amount of permissions to accomplish the required task.
B. Use the minimum of software tools and packages to implement the required services.
C. Securing your server is a continuous process, not a one-time activity.

1. Always start with a minimal server installation and add packages as they're needed. Reasoning: every piece of software can be a potential vulnerability. There's no need to insert a vulnerability with something you'll not use in the first place.

2. Set up a user account and install sudo. Add user to the sudoers file and configure system to allow root login only on tty1-tty8.

3. Install ssh and reconfigure it to listen on non-standard efemeral port (> 1024). If possible, install port knocking to unlock the new ssh port - do not use default knocking sequence!

4. Configure ssh to disable password authentication and permit only pubkey authentication. Install your public key in authorized_keys of a user account. Always use strong passphrase for your keys and keep private keys as best as you can!

5. If server requires ordinary users to log in onto it, configure PAM to harden password policy, if possible. If a users that logs in do not require full access to command, give him a restricted shell.

6. Install only necessary services for your server. If you can choose, choose services that implement some kind of encryption when accessing server. For example, if your users need some sort of remote file services and they can use both FTP and SCP/SFTP, choose SCP/SFTP. Avoid telnet service if at all possible (but have telnet client as you'll probably need it when troubleshooting tcp connections).

7. Use SELinux or AppArmor if you can. Learn to create custom SELinux policies if needed (some software just won't work with SELinux in enforcing mode).

8. Set up iptables in the most restrictive way. On INPUT chain block all ports except those that your services use on that server. Limit open ports by IP addresses that are permitted to access them, if at all possible.

9. Set rules to the OUTPUT chain as well. Lots of exploits work by establishing connection from compromised server back to the attacker's machine which usually bypass external firewalls. Limiting outgoing traffic can mitigate attacks and render them useless.

10. Implement remote central log server and install some sort of log analyzing software. Check logs frequently and search for unusual patterns.

11. Check your /etc/fstab and add 'nodev,noexec,nosuid' options on filesystems that will not have executables and devices. This is far from bullet-proof protection and it can be thwarted by competent attacker, but can still stop some script kiddies and automated attacks.

12. Use chroot when possible. I know this is also almost trivial to evade, but still, why would I ease the attacker's job?

13. Implement tripwire or similar software if you can keep your file-signature database on some non-volatile media (like CD-ROM).

14. Upgrade and apply patches if at all possible.

15. Run some audit tool, both local (Lynis) and remote (OpenVAS, Nessus) to check if you managed to cover all the bases. Analyze reports made by those apps and apply necessary changes to your system.

List of Network Diagnostic Tools

noreply@blogger.com (Unknown) — Thu, 17 Apr 2014 02:33:00 -0700

In RHEL/Centos/Fedora
ip -- show / manipulate routing, devices, policy routing and tunnels
ifconfig --configure a network interface
ethtool -- query or control network driver and hardware settings
tcpdump -- dump traffic on a network
wireshark -- Interactively dump and analyze network traffic
netstat -- Print network connections, routing tables, interface statistics, masquerade connections, and multicast memberships
ss -- another utility to investigate sockets
dropwatch -- dropwatch aims to consolidate several of those checks into one tool, making it easier for a sysadmin or developer to detect lost packets.
systemtap -- systemtap script translator/driver
nmap -- Network exploration tool and security / port scanner
nc -- arbitrary TCP and UDP connections and listens
ping -- send ICMP ECHO_REQUEST to network hosts
ping6 -- send ICMP ECHO_REQUEST to network hosts
iptables -- administration tool for IPv4 packet filtering and NAT
ip6tables -- administration tool for IPv6 packet filtering and NAT
arp -- Linux ARP kernel module.
arping -- send ARP REQUEST to a neighbour host
tc -- show / manipulate traffic control settings, is used to configure Traffic Control in the Linux
lnstat -- unified linux network statistics
nstat -- rtacct - network statistics tools
traceroute -- print the route packets trace to network host
tracepath -- traces path to a network host discovering MTU along this path
tunctl --create and manage persistent TUN/TAP interfaces

OpenLDAP server on Fedora 20

noreply@blogger.com (Unknown) — Sun, 9 Feb 2014 21:34:00 -0800

Installation

# yum install openldap-servers migrationtools -y

Initial Start

Genrate new passwd for openldap server.

# slappasswd

{SSHA}KMAAqJoh0gUxs8TPZfa2MvZezcp5+O4E

Configuration Files
[root@localhost openldap]# ls -l
total 20
drwxr-xr-x. 2 root root 4096 Feb 7 11:53 certs
-rw-r--r--. 1 root root 121 Jan 13 19:50 check_password.conf
-rw-r--r--. 1 root root 364 Jan 13 19:50 ldap.conf
drwxr-xr-x. 2 root root 4096 Feb 7 11:53 schema
drwx------. 3 ldap ldap 4096 Feb 7 11:53 slapd.d
[root@localhost openldap]# cd slapd.d/
[root@localhost slapd.d]# ls -l
total 8
drwxr-x---. 3 ldap ldap 4096 Feb 7 12:12 cn=config
-rw-------. 1 ldap ldap 589 Feb 7 11:53 cn=config.ldif
[root@localhost slapd.d]# cd cn\=config
[root@localhost cn=config]# ls -l
total 24
drwxr-x---. 2 ldap ldap 4096 Feb 7 11:53 cn=schema
-rw-------. 1 ldap ldap 378 Feb 7 11:53 cn=schema.ldif
-rw-------. 1 ldap ldap 513 Feb 7 11:53 olcDatabase={0}config.ldif
-rw-------. 1 ldap ldap 408 Feb 7 11:53 olcDatabase={-1}frontend.ldif
-rw-------. 1 ldap ldap 562 Feb 7 11:53 olcDatabase={1}monitor.ldif
-rw-------. 1 ldap ldap 609 Feb 7 11:53 olcDatabase={2}hdb.ldif

Fedora configuration for Openldap server.
[root@localhost cn=config]# cat olcDatabase\=\{2\}hdb.ldif

1 # AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify.
2 # CRC32 2792fd93
3 dn: olcDatabase={2}hdb
4 objectClass: olcDatabaseConfig
5 objectClass: olcHdbConfig
6 olcDatabase: {2}hdb
7 olcDbDirectory: /var/lib/ldap
8 olcSuffix: dc=my-domain,dc=com
9 olcRootDN: cn=Manager,dc=my-domain,dc=com
10 olcDbIndex: objectClass eq,pres
11 olcDbIndex: ou,cn,mail,surname,givenname eq,pres,sub
12 structuralObjectClass: olcHdbConfig
13 entryUUID: 147058b0-240c-1033-97b1-2b95e7519548
14 creatorsName: cn=config
15 createTimestamp: 20140207062318Z
16 entryCSN: 20140207062318.835797Z#000000#000#000000
17 modifiersName: cn=config
18 modifyTimestamp: 20140207062318Z

[root@localhost cn=config]# cat olcDatabase\=\{1\}monitor.ldif

1 # AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify.
2 # CRC32 98c50304
3 dn: olcDatabase={1}monitor
4 objectClass: olcDatabaseConfig
5 olcDatabase: {1}monitor
6 olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external
7 ,cn=auth" read by dn.base="cn=Manager,dc=my-domain,dc=com" read by * none
8 structuralObjectClass: olcDatabaseConfig
9 entryUUID: 147053f6-240c-1033-97b0-2b95e7519548
10 creatorsName: cn=config
11 createTimestamp: 20140207062318Z
12 entryCSN: 20140207062318.835676Z#000000#000#000000
13 modifiersName: cn=config
14 modifyTimestamp: 20140207062318Z

# cd /usr/share/migrationtools/

# vi migrate_common.ph
48 $NAMINGCONTEXT{'group'} = "ou=Group" (need to “s” in “ou=Groups”)

70 # Default DNS domain
71 $DEFAULT_MAIL_DOMAIN = "tomjerry.and";
72
73 # Default base
74 $DEFAULT_BASE = "dc=tomjerry,dc=and";

90 $EXTENDED_SCHEMA = 1; ## "0" edit to "1"##

Config FQDN for openldap.

# ./migrate_base.pl
dn: dc=tomjerry,dc=and
dc: tomjerry
objectClass: top
objectClass: domain
objectClass: domainRelatedObject
associatedDomain: tomjerry.and

dn: ou=Mounts,dc=tomjerry,dc=and
ou: Mounts
objectClass: top
objectClass: organizationalUnit
objectClass: domainRelatedObject
associatedDomain: tomjerry.and

dn: ou=Rpc,dc=tomjerry,dc=and
ou: Rpc
objectClass: top
objectClass: organizationalUnit
objectClass: domainRelatedObject
associatedDomain: tomjerry.and

dn: ou=People,dc=tomjerry,dc=and
ou: People
objectClass: top
objectClass: organizationalUnit
objectClass: domainRelatedObject
associatedDomain: tomjerry.and

dn: ou=Hosts,dc=tomjerry,dc=and
ou: Hosts
objectClass: top
objectClass: organizationalUnit
objectClass: domainRelatedObject
associatedDomain: tomjerry.and

dn: nisMapName=netgroup.byuser,dc=tomjerry,dc=and
nismapname: netgroup.byuser
objectClass: top
objectClass: nisMap
objectClass: domainRelatedObject
associatedDomain: tomjerry.and

dn: ou=Netgroup,dc=tomjerry,dc=and
ou: Netgroup
objectClass: top
objectClass: organizationalUnit
objectClass: domainRelatedObject
associatedDomain: tomjerry.and

dn: ou=Networks,dc=tomjerry,dc=and
ou: Networks
objectClass: top
objectClass: organizationalUnit
objectClass: domainRelatedObject
associatedDomain: tomjerry.and

dn: ou=Services,dc=tomjerry,dc=and
ou: Services
objectClass: top
objectClass: organizationalUnit
objectClass: domainRelatedObject
associatedDomain: tomjerry.and

dn: nisMapName=netgroup.byhost,dc=tomjerry,dc=and
nismapname: netgroup.byhost
objectClass: top
objectClass: nisMap
objectClass: domainRelatedObject
associatedDomain: tomjerry.and

dn: ou=Aliases,dc=tomjerry,dc=and
ou: Aliases
objectClass: top
objectClass: organizationalUnit
objectClass: domainRelatedObject
associatedDomain: tomjerry.and

dn: ou=Group,dc=tomjerry,dc=and
ou: Group
objectClass: top
objectClass: organizationalUnit
objectClass: domainRelatedObject
associatedDomain: tomjerry.and

dn: ou=Protocols,dc=tomjerry,dc=and
ou: Protocols
objectClass: top
objectClass: organizationalUnit
objectClass: domainRelatedObject
associatedDomain: tomjerry.and

To gentrate base.ldif

# ./migrate_base.pl > /root/base.ldif

Add user to system and ldap server

# mkdir /home/ldappeople
# useradd -d /home/ldappeople/ldappeople1 ldappeople1
# useradd -d /home/ldappeople/ldappeople2 ldappeople2
# useradd -d /home/ldappeople/ldappeople3 ldappeople3
# useradd -d /home/ldappeople/ldappeople4 ldappeople4
# useradd -d /home/ldappeople/ldappeople5 ldappeople5

#passwd ldappeople1
#passwd ldappeople2
#passwd ldappeople3
#passwd ldappeople4
#passwd ldappeople5

# getent passwd

# getent passwd | tail -n 5 > /root/users

#getent shadow

#getent shadow | tail –n 5 > /root/passwords

#getent group |tail -n 5

#getent group |tail -n 5 > /root/groups

# openssl req -new -x509 -nodes -out /etc/pki/tls/certs/tomjerry.pem -keyout /etc/pki/tls/certs/tomjerrykey.pem -days 365

Generating a 2048 bit RSA private key

...+++

..................................................+++

writing new private key to '/etc/pki/tls/certs/tomjerry.pem'

-----

You are about to be asked to enter information that will be incorporated

into your certificate request.

What you are about to enter is what is called a Distinguished Name or a DN.

There are quite a few fields but you can leave some blank

For some fields there will be a default value,

If you enter '.', the field will be left blank.

-----

Country Name (2 letter code) [XX]:IN

State or Province Name (full name) []:MAHA

Locality Name (eg, city) [Default City]:MUMBAI

Organization Name (eg, company) [Default Company Ltd]:TOMJERRY. INC,

Organizational Unit Name (eg, section) []:IT

Common Name (eg, your name or your server's hostname) []:tomjerry.and

Email Address []:rajat@tomjerry.and

# chown -R root:ldap /etc/pki/tls/certs/yeswedeal*

# cp -rvf /etc/pki/tls/certs/yeswedeal* /var/ftp/pub/

`/etc/pki/tls/certs/yeswedealkey.pem' -> `/var/ftp/pub/yeswedealkey.pem'

`/etc/pki/tls/certs/yeswedeal.pem' -> `/var/ftp/pub/yeswedeal.pem'

# ln -s /var/ftp/pub/ /var/www/html/

# vi /usr/share/migrationtools/migrate_passwd.pl
186 sub read_shadow_file
187 {
188 open(SHADOW, "/root/passwords") || return; ## add your path exmple :/root/passwords ##
189 while(<SHADOW>) {
190 chop;
191 ($shadowUser) = split(/:/, $_);
192 $shadowUsers{$shadowUser} = $_;
193 }
194 close(SHADOW);
195 }

Migrate all user and they password to ldap.

# ls -l /root/
total 24
-rw-------. 1 root root 980 Feb 7 11:39 anaconda-ks.cfg
-rw-r--r--. 1 root root 2088 Feb 10 10:16 base.ldif
-rw-r--r--. 1 root root 100 Feb 10 10:24 groups
-rw-r--r--. 1 root root 713 Feb 7 14:30 ldap.sh
-rw-r--r--. 1 root root 650 Feb 10 10:24 passwords
-rw-r--r--. 1 root root 320 Feb 10 10:23 users

# ./migrate_passwd.pl /root/users
dn: uid=ldappeople1,ou=People,dc=tomjerry,dc=and
uid: ldappeople1
cn: ldappeople1
sn: ldappeople1
mail: ldappeople1@tomjerry.and
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
userPassword: {crypt}$6$yX9pRsgh$73UTx9iUPGhzGmTRw0C2c2SueSLcgTpV.6xlWuUrJdiZsCdV0b2er.kynPcgyqT/4VtJYLSu/fYKakeHC/2az1
shadowLastChange: 16111
shadowMax: 99999
shadowWarning: 7
loginShell: /bin/bash
uidNumber: 1001
gidNumber: 1001
homeDirectory: /home/ldappeople/ldappeople1

dn: uid=ldappeople2,ou=People,dc=tomjerry,dc=and
uid: ldappeople2
cn: ldappeople2
sn: ldappeople2
mail: ldappeople2@tomjerry.and
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
userPassword: {crypt}$6$jHCMjc3c$kX5.rv15RUh3FFRpb5WPuHo/w2Lz.CA1fV9u7Mv0C921yKl6BNuRSW2yuyRZnzFkgqSuz7zFfRPaH8CZbpqx.1
shadowLastChange: 16111
shadowMax: 99999
shadowWarning: 7
loginShell: /bin/bash
uidNumber: 1002
gidNumber: 1002
homeDirectory: /home/ldappeople/ldappeople2

dn: uid=ldappeople3,ou=People,dc=tomjerry,dc=and
uid: ldappeople3
cn: ldappeople3
sn: ldappeople3
mail: ldappeople3@tomjerry.and
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
userPassword: {crypt}$6$OJjfVqpu$mziIRrTz0ZD1LYQsul5ELhEAaps2aX/d5oV62OlOexaVtu0hD1zp8ChYcdKCu1qn4E/5hiLo5ubNE4ytWy8tF0
shadowLastChange: 16111
shadowMax: 99999
shadowWarning: 7
loginShell: /bin/bash
uidNumber: 1003
gidNumber: 1003
homeDirectory: /home/ldappeople/ldappeople3

dn: uid=ldappeople4,ou=People,dc=tomjerry,dc=and
uid: ldappeople4
cn: ldappeople4
sn: ldappeople4
mail: ldappeople4@tomjerry.and
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
userPassword: {crypt}$6$bOo7/SBC$yjDSZCCoaLfJwemlW3Cwh84EJNVLmTImYubHnfzfrpG7ROBV66PTcWorZ1EUdxNRZVM5izY2sMJ3VQXgfcy9J1
shadowLastChange: 16111
shadowMax: 99999
shadowWarning: 7
loginShell: /bin/bash
uidNumber: 1004
gidNumber: 1004
homeDirectory: /home/ldappeople/ldappeople4

dn: uid=ldappeople5,ou=People,dc=tomjerry,dc=and
uid: ldappeople5
cn: ldappeople5
sn: ldappeople5
mail: ldappeople5@tomjerry.and
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
userPassword: {crypt}$6$ONFG4JSW$WR.eRoK6oO2lwuAVTYDVSAwfaEIyd3EKVRL7//9J80dk6XkkooFY73oCf0JDkEZ1f9wib3/VaXotwmgaoZd6h1
shadowLastChange: 16111
shadowMax: 99999
shadowWarning: 7
loginShell: /bin/bash
uidNumber: 1005
gidNumber: 1005
homeDirectory: /home/ldappeople/ldappeople5

# ./migrate_passwd.pl /root/users > /root/users.ldif

# ./migrate_group.pl /root/groups
dn: cn=ldappeople1,ou=Group,dc=tomjerry,dc=and
objectClass: posixGroup
objectClass: top
cn: ldappeople1
userPassword: {crypt}x
gidNumber: 1001

dn: cn=ldappeople2,ou=Group,dc=tomjerry,dc=and
objectClass: posixGroup
objectClass: top
cn: ldappeople2
userPassword: {crypt}x
gidNumber: 1002

dn: cn=ldappeople3,ou=Group,dc=tomjerry,dc=and
objectClass: posixGroup
objectClass: top
cn: ldappeople3
userPassword: {crypt}x
gidNumber: 1003

dn: cn=ldappeople4,ou=Group,dc=tomjerry,dc=and
objectClass: posixGroup
objectClass: top
cn: ldappeople4
userPassword: {crypt}x
gidNumber: 1004

dn: cn=ldappeople5,ou=Group,dc=tomjerry,dc=and
objectClass: posixGroup
objectClass: top
cn: ldappeople5
userPassword: {crypt}x
gidNumber: 1005

# ./migrate_group.pl /root/groups > /root/groups.ldif

# ls -ltr /root/
total 32
-rw-------. 1 root root 980 Feb 7 11:39 anaconda-ks.cfg
-rw-r--r--. 1 root root 713 Feb 7 14:30 ldap.sh
-rw-r--r--. 1 root root 2088 Feb 10 10:16 base.ldif
-rw-r--r--. 1 root root 320 Feb 10 10:23 users
-rw-r--r--. 1 root root 650 Feb 10 10:24 passwords
-rw-r--r--. 1 root root 100 Feb 10 10:24 groups
-rw-r--r--. 1 root root 2785 Feb 10 10:34 users.ldif
-rw-r--r--. 1 root root 720 Feb 10 10:35 groups.ldif

Now time to upload ldif file to LDAP Server
# slaptest -u
52f86020 ldif_read_file: checksum error on "/etc/openldap/slapd.d/cn=config/olcDatabase={1}monitor.ldif"
52f86020 ldif_read_file: checksum error on "/etc/openldap/slapd.d/cn=config/olcDatabase={2}hdb.ldif"
config file testing succeeded

#systemctl restart slapd.service

# systemctl status slapd.service
slapd.service - OpenLDAP Server Daemon
Loaded: loaded (/usr/lib/systemd/system/slapd.service; enabled)
Active: active (running) since Mon 2014-02-10 10:48:59 IST; 5min ago
Process: 799 ExecStart=/usr/sbin/slapd -u ldap -h ${SLAPD_URLS} $SLAPD_OPTIONS (code=exited, status=0/SUCCESS)
Process: 771 ExecStartPre=/usr/libexec/openldap/check-config.sh (code=exited, status=0/SUCCESS)
Main PID: 801 (slapd)
CGroup: /system.slice/slapd.service
└─801 /usr/sbin/slapd -u ldap -h ldapi:/// ldap:///

Feb 10 10:53:10 localhost.localdomain slapd[801]: conn=1002 op=2 UNBIND
Feb 10 10:53:10 localhost.localdomain slapd[801]: conn=1002 fd=11 closed
Feb 10 10:53:27 localhost.localdomain slapd[801]: conn=1003 fd=11 ACCEPT from IP=[::1]:47273 (IP=[::]:389)
Feb 10 10:53:27 localhost.localdomain slapd[801]: conn=1003 op=0 BIND dn="cn=Manager,dc=tomjerry,dc=and" method=128
Feb 10 10:53:27 localhost.localdomain slapd[801]: conn=1003 op=0 BIND dn="cn=Manager,dc=tomjerry,dc=and" mech=SIMPLE ssf=0
Feb 10 10:53:27 localhost.localdomain slapd[801]: conn=1003 op=0 RESULT tag=97 err=0 text=
Feb 10 10:53:27 localhost.localdomain slapd[801]: conn=1003 op=1 ADD dn="cn=ldappeople1,ou=Group,dc=tomjerry,dc=and"
Feb 10 10:53:27 localhost.localdomain slapd[801]: conn=1003 op=1 RESULT tag=105 err=21 text=objectClass: value #0 invalid per syntax
Feb 10 10:53:27 localhost.localdomain slapd[801]: conn=1003 op=2 UNBIND
Feb 10 10:53:27 localhost.localdomain slapd[801]: conn=1003 fd=11 closed

#ldapadd -x -W -D "cn=Manager,dc=tomjerry,dc=and" -f /root/base.ldif

#ldapadd -x -W -D "cn=Manager,dc=tomjerry,dc=and" -f /root/users.ldif

#ldapadd -x -W -D "cn=Manager,dc=tomjerry,dc=and" -f /root/groups.ldif

#ldapsearch -x -b “dc=tomjerry,dc=and” |less

Network Ports
# lsof -i -n -P | grep -i slapd
slapd 496 ldap 8u IPv4 32324 0t0 TCP *:389 (LISTEN)
slapd 496 ldap 9u IPv6 32325 0t0 TCP *:389 (LISTEN)

On the Client system.

# ping tomjeery.and

#vi /etc/hosts

Add LDAP server ipaddress & fqdn and save

#getent passwd ldappeople1

# su – ldappeople1

su: user ldappeople1 does not exist

#authconfig-tui or authconfig-gtk (any of tool to config ldap Clint)

choose --LDAP

LDAP Server Base DN dc=tomjerry,dc=and

LDAP Server ldap://ldap.tomjerry.and

Use TLS to Encrypt connections

Download CA Certificate----http://ldap.tomjerry.and/pub/tomjerry.pem

getent passwd ldappeople1

Linux Kdump

noreply@blogger.com (Unknown) — Thu, 2 Jan 2014 00:25:00 -0800

Why Kdump
Kdump is utility which really helps in determine the cause of kernel crashes, system hangs, or system reboots.

About Kdump

Kdump is the Linux kernel crash-dump mechanism. Redhat recommends that to enable the Kdump feature. In the event of a system crash, Kdump creates a memory image (vmcore) that can help in determining the cause of the crash. Enabling Kdump requires to reserve a portion of system memory for exclusive use by Kdump. This memory is unavailable for other uses.

Kdump uses kexec to boot into a second kernel whenever the system crashes. kexec is a fast-boot mechanism which allows a Linux kernel to boot from inside the context of a kernel that is already running without passing through the bootloader stage. & the system kernel's memory image is preserved across the reboot and is accessible to the dump-capture kernel.

We can use common commands, such as cp and scp, to copy the memory image to a dump file on the local disk, or across the network to a remote system.

Architectures Support:

Kdump and kexec are currently supported on the x86, x86_64, ppc64, ia64,and s390x architectures.

How to configure Kdump ?

Prerequisites

For dumping cores to a network target, access to a server over NFS or ssh is required.

Whether dumping locally or to a network target, a device or directory with enough free disk space is needed to hold the core. See the "Sizing Local Dump Targets" section below for more information on how much space will be needed.

For configuring kdump on a system running a Xen kernel, it is required to have a regular kernel of the same version as the running Xen kernel installed on the system. (If the system is 32-bit with more then 4GB of RAM, kernel-pae should be installed alongside kernel-xeninstead of kernel.)

Configuring kdump on the Command Line:

To configure the amount of memory that is reserved for the kdump kernel on x86, AMD64, and Intel 64 architectures, open the /boot/grub/grub.conf file as root and add the crashkernel=<size>M@16M parameter to the list of kernel options

Different way to Configuring the Target Type

Edit the /etc/kdump.conf & make appropriate change as per the production environment.

To change the local directory in which the core dump is to be saved, remove the hash sign (“#”) from the beginning of the #path /var/crash line, and replace the value with a desired directory path. Optionally, if you wish to write the file to a different partition, follow the same procedure with the #ext3 /dev/sda4

To write the dump directly to a device, remove the hash sign (“#”) from the beginning of the #raw /dev/sda5 line, and replace the value with a desired device name. For example:

To store the dump to a remote machine using the NFS protocol, remove the hash sign (“#”) from the beginning of the #net my.server.com:/export/tmp line, and replace the value with a valid hostname and directory path. For example:

To store the dump to a remote machine using the SSH protocol, remove the hash sign (“#”) from the beginning of the #net user@my.server.com line, and replace the value with a valid username and hostname. For example:

Enabling the Service

To start the kdump daemon at boot time, type the following at a shell prompt as root:

This will enable the service for runlevels 2, 3, 4, and 5. Similarly, typing chkconfig kdump off will disable it for all runlevels. To start the service in the current session, use the following command as root:

Testing the Configuration

To test the configuration, reboot the system with kdump enabled, and as root, make sure that the service is running:

Then type the following commands at a shell prompt as root:

This will force the Linux kernel to crash, and the YYYY-MM-DD-HH:MM/vmcore file will be copied to the location you have selected in the configuration (that is, to /var/crash/ by default).

Analyzing the Core Dump

To analyze the vmcore dump file, you must have the crash and kernel-debuginfo packages installed. To do so, type the following at a shell prompt as root:

~]# yum install --enablerepo=rhel-debuginfo crash kernel-debuginfo

To start the utility, type the command in the following form at a shell prompt:

crash /var/crash/timestamp/vmcore /usr/lib/debug/lib/modules/kernel/vmlinux

Example: Running the crash utility

Example: Displaying the kernel stack trace

To display a status of processes in the system, type the ps command at the interactive prompt. You can use ps pid to display the status of the selected process.

Example : Displaying status of processes in the system

Example: Displaying information about open files of the current context

How do I upload a large dump file to Red Hat Support Services?

In some cases, it might be necessary to send a kernel crash dump file to Red Hat Global Support Services for analysis. However, the dump file can be very large, even after being filtered. Since files larger than 250 MB cannot be uploaded directly through the Red Hat Customer Portal when opening a new support case, an FT P server is provided by Red Hat for uploading large files.

The FTP server's address is dropbox.redhat.com and the files are to be uploaded in the /incom ing/ directory. Your FTP client needs to be set into passive mode; if your firewall does not allow this mode, you may use the origin- dropbox.redhat.com server using active mode.

Make sure that the uploaded files are compressed using a program such as gzip and properly and descriptively named. Using your support case number in the file name is recommended. After successfully uploading all necessary files, provide the engineer in charge of your support case with the exact file name and its SHA1 or MD5 checksum.

KVM Virsh Console Access to Linux VM – RHEL 6

noreply@blogger.com (Unknown) — Wed, 25 Dec 2013 22:44:00 -0800

The console command within virsh is an excellent feature to have working for your virtual environments. For example, it can be really handy to watch a machine boot without launching a GUI tool ie. virt-manager. I personally find virsh console access a quicker way to configure networking settings which may not be able to be achieved via SSH, other than using virt-manager.

Step 1: Configure Serial Terminal
On your new RHEL 6 virtual machine, you’ll need to configure ttyS0. This serial interface is how “virsh console” gains access to your virtual machine.

Log into your virtual machine…

Create new ttyS0 config file.

Step 2: Allow login into ttyS0
By default RHEL 6 will not allow a user to login via ttyS0 unless we modify security.

Step 3: Start ttyS0
Make ttyS0 available, from your terminal execute the following command.

Step 3: Test Virsh Console
From your KVM server, connect to the console of your virtual machine.

Fedora 20 Heisenbug Post Installation Guide

noreply@blogger.com (Unknown) — Wed, 18 Dec 2013 06:10:00 -0800

Fedora 20 Post Installation Guide

Fedora 20 also known as 20 Heisenbug is the latest version of Fedora distro. It comes with many new features and software updates. Note: Almost every command shown here requires root privileges. So make sure you are logged in as root. Run su command to login as root.

Rpmfusion Repo

RPM Fusion Repository includes variety of applications which are not included in the main distro. Like mp3 codec, multimedia player for playing DVDs and many more.
It is recommended that you install RPM Fusion repo because most of the following packages require you to install RPM Fusion otherwise it may not work

#yum localinstall --nogpgcheck http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-20.noarch.rpm
#yum localinstall --nogpgcheck http://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-20.noarch.rpm

Livna Repo

Some packages require you to install Livna Repo. Simply run he following commands to add and enable livna repo on your system.

#rpm -ivh http://rpm.livna.org/livna-release.rpm
#rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-livna

MP3 playback Rythmbox

Rythmbox is likely that it will be installed by default. If not installed then you can install it very easily.

#yum install rhythmbox

The default installation of rhytmbox wont allow you to play mp3. To play mp3 you need to add the codes
#yum install gstreamer-plugins-good gstreamer-plugins-bad gstreamer-plugins-ugly

Amarok

Amarok is the default audio player for KDE. It can also be installed on Gnome.

#yum install amarok phonon-backend-gstreamer

Audacious

Audacious is a winamp like audio player

#yum install audacious audacious-plugins

XMMS

XMMS is another winamp like audio player. And its one of my favorite. Its better than audacious in my eyes

#yum install xmms xmms-mp3
Banshee
Banshee allows you to import CDs, sync your music collection to an iPod, play music directly from an iPod, create playlists with songs from your library, and create audio and MP3 CDs from your music library.

#yum install banshee banshee-community-extensions

Video and DVD Playback

VLC player
VLC player is the best video player for Linux. It is capable of playing almost every video format.

#yum install vlc

XINE

Xine is another video player for Linux. It is very much like vlc player

#yum install xine xine-lib xine-lib-extras-freeworld

Mplayer with SM Player GUI

Mplayer is a VLC player like player for Linux. It is capable of playing almost all video and audio formats.

#yum install mplayer smplayer

Totem
Totem is the default video player for Fedora.

#yum install totem-xine xine-lib xine-lib-extras-freeworld

K9Copy

K9Copy is a free, open source DVD backup and DVD authoring program for Linux

#yum install k9copy

libdvdcss

libdvdcss is a free and open source software library for accessing and unscrambling DVDs encrypted with the Content Scramble System (CSS). libdvdcss is part of the VideoLAN project and is used by VLC media player and other DVD player software such as Ogle, xine-based players, and MPlayer.

#yum install libdvdcss

Adobe Flash Player Add the Adobe repo

#rpm -ivh http://linuxdownload.adobe.com/adobe-release/adobe-release-i386-1.0-1.noarch.rpm
#rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-adobe-linux
#yum install flash-plugin

Install Flash Player
#yum install flash-plugin
Acrobat Reader
Add adobe YUM Repo

#rpm -ivh http://linuxdownload.adobe.com/adobe-release/adobe-release-i386-1.0-1.noarch.rpm
#rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-adobe-linux
Install Adobe reader
#yum install AdobeReader_enu
Google Chrome
Add Google YUM Repo
#vi /etc/yum.repos.d/google.repo
And paste the following
Fedora 32-bit

[google-chrome]
name=google-chrome - 32-bit
baseurl=http://dl.google.com/linux/chrome/rpm/stable/i386
enabled=1
gpgcheck=1
gpgkey=https://dl-ssl.google.com/linux/linux_signing_key.pub
Fedora 64-bit

[google-chrome]
name=google-chrome - 64-bit
baseurl=http://dl.google.com/linux/chrome/rpm/stable/x86_64
enabled=1
gpgcheck=1
gpgkey=https://dl-ssl.google.com/linux/linux_signing_key.pub
Save the file using “:wq“.
Install Google Chrome

#yum install google-chrome-stable

Other Applications Filezilla

Filezilla is a FTP client and its one of the best

#yum install filezilla
7z or p7zip

#yum install p7zip

Unrar

Unrar utility for extracting, testing and viewing the contents of archives created with the RAR archiver version 1.50 and above.
#yum install unrar

Transmission bittorrent client

Transmission is a lightweight bittorrent client for Linux platform.
#yum install transmission

Wine

Wine is a is a compatibility layer capable of running Windows applications on Linux. It can run many windows applications even some games in Linux.
#yum install wine

Gparted

GParted is a free partition editor for graphically managing your disk partitions.
#yum install gparted

Gimp
Gimp is the most advanced Image Editor for Linux. This gimp has lot of useful features useful.
#yum install gimp yum install gimp-data-extras gimpfx-foundry gimp-lqr-plugin gimp-resynthesizer gnome-xcf-thumbnailer

Eclipse IDE

Eclipse is a multi-language Integrated development environment (IDE)
#yum install eclipse

Yum Extender : yumex
Yum Extender (yumex) is a GUI for the yum package manager. If you do not like installing everything from the terminal you can add a GUI installer.
Follow This Article to install Yum Extender (yumex) on Fedora 20

Skype Installation Dependencies:-
#yum install alsa-lib.i686 libXv.i686 libXScrnSaver.i686 qt.i686 qt-x11.i686 pulseaudio-libs.i686 pulseaudio-libs-glib2.i686 alsa-plugins-pulseaudio.i686 qtwebkit.i686 -y

#wget http://download.skype.com/linux/skype-4.2.0.11-fedora.i586.rpm

#yum localinstall skype-4.2.0.11-fedora.i586.rpm

Gnome Extension Installation
https://extensions.gnome.org/local/

Using "Gnome Link" create a account. List of extension.

Use google-authenticator for Fedora Login

noreply@blogger.com (Unknown) — Tue, 3 Dec 2013 01:54:00 -0800

Install Google Authenticator for Fedora

If you set up 2-step verification using SMS text message or Voice call and also want to be able to generate codes using the Android, iPhone or a Blackberry, you can use the Google Authenticator app to receive codes even if you don’t have an Internet connection or mobile service.

Prerequisite :-

Android Phone.

Barcode scanner.

Google Authenticator App on Phone.

On Laptop as Follow.

[root@localhost rajat]# yum install google-authenticator -y
Loaded plugins: langpacks, presto, refresh-packagekit
Resolving Dependencies
--> Running transaction check
---> Package google-authenticator-1.0-0.gita096a62.fc19.1.x86_64 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================================================
Package Arch Version Repository Size
================================================================================================================
Installing:
google-authenticator x86_64 1.0-0.gita096a62.fc19.1 fedora 33 k

Transaction Summary
================================================================================================================
Install 1 Package

Total download size: 28 k
Installed size: 56 k
Downloading Packages:
google-authenticator-1.0-0.gita096a62.fc19.1.x86_64.rpm | 33 kB 00:00:07
Running Transaction Check
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Installing : google-authenticator-1.0-0.gita096a62.fc19.1.x86_64 1/1
Verifying : google-authenticator-1.0-0.gita096a62.fc19.1.x86_64 1/1

Installed:
google-authenticator-1.0-0.gita096a62.fc19.1.x86_64

Complete!

Add line to following file:-

#vi /etc/pam.d/gdm-password

auth required pam_google_authenticator.so

:wq

Save and close CTRL+D (Become as normal user.)

once you type your password next screen you get which is google-authenticator

Using GNOME BOXES Management Virtual Machine. Fedora 19

noreply@blogger.com (Unknown) — Wed, 30 Oct 2013 23:06:00 -0700

Using GNOME BOXES Management Virtual Machine.

Features

    View, access, and use:
        remote machines
        remote virtual machines
        local virtual machines
        When technology permits, set up access for applications on local virtual machines
    View, access, and use virtual machines on removable media
    View, access, and use shared connection / machines
    Share connections?
    Upload / publish virtual machines
    Select favorites
    Search for connections

Use cases

    Connect to a local virtual machine for testing.
    Connecting to a work machine from home.
    Connect to a work machine over a low quality cellular network.

Various operating systems installation ISOs, CD/DVDs and USB sticks:

    Fedora 16 and 17
    Windows XP and 7
    Debian, Ubuntu etc.

Before launching Boxes need check following.

[root@rajat rajat]# setenforce 0

"You need to switch SELinux on host to Permissive mode using command setenforce 0 after each boot."

[root@rajat rajat]# rpm -qa libvirt\* spice\* kvm\*
libvirt-daemon-driver-nwfilter-1.0.5.1-1.fc19.x86_64
libvirt-daemon-driver-qemu-1.0.5.1-1.fc19.x86_64
spice-server-0.12.3-1.fc19.x86_64
libvirt-gconfig-0.1.6-1.fc19.x86_64
libvirt-glib-0.1.6-1.fc19.x86_64
libvirt-daemon-driver-secret-1.0.5.1-1.fc19.x86_64
libvirt-daemon-driver-storage-1.0.5.1-1.fc19.x86_64
libvirt-daemon-kvm-1.0.5.1-1.fc19.x86_64
spice-glib-0.19-1.fc19.x86_64
libvirt-client-1.0.5.1-1.fc19.x86_64
spice-gtk3-0.19-1.fc19.x86_64
libvirt-gobject-0.1.6-1.fc19.x86_64
libvirt-daemon-1.0.5.1-1.fc19.x86_64
libvirt-daemon-driver-nodedev-1.0.5.1-1.fc19.x86_64
spice-vdagent-0.14.0-2.fc19.x86_64
libvirt-daemon-driver-network-1.0.5.1-1.fc19.x86_64
libvirt-daemon-driver-interface-1.0.5.1-1.fc19.x86_64

Fedora 19 Schrodinger’s Cat Post Installation Guide

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 07:39:00 -0700

Fedora 19 also known as 19 Schrodinger’s Cat is the latest version of Fedora distro. It comes with many new features and software updates.

Note: Almost every command shown here requires root privileges. So make sure you are logged in as root. Run su command to login as root.

Rpmfusion Repo

RPM Fusion Repository includes variety of applications which are not included in the main distro. Like mp3 codec, multimedia player for playing DVDs and many more.

It is recommended that you install RPM Fusion repo because most of the following packages require you to install RPM Fusion otherwise it may not work

#yum localinstall --nogpgcheck http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-19.noarch.rpm 

#yum localinstall --nogpgcheck http://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-19.noarch.rpm

Livna Repo

Some packages require you to install Livna Repo. Simply run he following commands to add and enable livna repo on your system.

#rpm -ivh http://rpm.livna.org/livna-release.rpm

#rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-livna

MP3 playback

Rythmbox

Rythmbox is likely that it will be installed by default. If not installed then you can install it very easily.

#yum install rhythmbox

The default installation of rhytmbox wont allow you to play mp3. To play mp3 you need to add the codes

yum install gstreamer-plugins-good gstreamer-plugins-bad gstreamer-plugins-ugly

Amarok

Amarok is the default audio player for KDE. It can also be installed on Gnome.

#yum install amarok phonon-backend-gstreamer

Audacious

Audacious is a winamp like audio player

#yum install audacious audacious-plugins

XMMS

XMMS is another winamp like audio player. And its one of my favorite. Its better than audacious in my eyes

#yum install xmms xmms-mp3

Banshee

Banshee allows you to import CDs, sync your music collection to an iPod, play music directly from an iPod, create playlists with songs from your library, and create audio and MP3 CDs from your music library.

#yum install banshee banshee-community-extensions

Video and DVD Playback

VLC player

VLC player is the best video player for Linux. It is capable of playing almost every video format.

#yum install vlc

XINE

Xine is another video player for Linux. It is very much like vlc player

#yum install xine xine-lib xine-lib-extras-freeworld

Mplayer with SM Player GUI

Mplayer is a VLC player like player for Linux. It is capable of playing almost all video and audio formats.

#yum install mplayer smplayer

Totem

Totem is the default video player for Fedora.

#yum install totem-xine xine-lib xine-lib-extras-freeworld

K9Copy

K9Copy is a free, open source DVD backup and DVD authoring program for Linux

#yum install k9copy

libdvdcss

libdvdcss is a free and open source software library for accessing and unscrambling DVDs encrypted with the Content Scramble System (CSS). libdvdcss is part of the VideoLAN project and is used by VLC media player and other DVD player software such as Ogle, xine-based players, and MPlayer.

#yum install libdvdcss

Adobe Flash Player

Add the Adobe repo

#rpm -ivh http://linuxdownload.adobe.com/adobe-release/adobe-release-i386-1.0-1.noarch.rpm

#rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-adobe-linux

#yum install flash-plugin

Install Flash Player

#yum install flash-plugin

Acrobat Reader

Add adobe YUM Repo

#rpm -ivh http://linuxdownload.adobe.com/adobe-release/adobe-release-i386-1.0-1.noarch.rpm

#rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-adobe-linux

Install Adobe reader

#yum install AdobeReader_enu

Google Chrome

Add Google YUM Repo

#vi /etc/yum.repos.d/google.repo

And paste the following

Fedora 32-bit

[google-chrome]

name=google-chrome - 32-bit

baseurl=http://dl.google.com/linux/chrome/rpm/stable/i386

enabled=1

gpgcheck=1

gpgkey=https://dl-ssl.google.com/linux/linux_signing_key.pub

Fedora 64-bit

[google-chrome]

name=google-chrome - 64-bit

baseurl=http://dl.google.com/linux/chrome/rpm/stable/x86_64

enabled=1

gpgcheck=1

gpgkey=https://dl-ssl.google.com/linux/linux_signing_key.pub

Save the file using “:wq“.

Install Google Chrome

#yum install google-chrome-stable

Other Applications

Filezilla

Filezilla is a FTP client and its one of the best

#yum install filezilla

7z or p7zip

#yum install p7zip

Unrar

Unrar utility for extracting, testing and viewing the contents of archives created with the RAR archiver version 1.50 and above.

#yum install unrar

Transmission bittorrent client

Transmission is a lightweight bittorrent client for Linux platform.

#yum install transmission

Wine

Wine is a is a compatibility layer capable of running Windows applications on Linux. It can run many windows applications even some games in Linux.

#yum install wine

Gparted

GParted is a free partition editor for graphically managing your disk partitions.

#yum install gparted

Gimp

Gimp is the most advanced Image Editor for Linux. This gimp has lot of useful features useful.

#yum install gimp yum install gimp-data-extras gimpfx-foundry gimp-lqr-plugin gimp-resynthesizer gnome-xcf-thumbnailer

Eclipse IDE

Eclipse is a multi-language Integrated development environment (IDE)

#yum install eclipse

Yum Extender : yumex

Yum Extender (yumex) is a GUI for the yum package manager. If you do not like installing everything from the terminal you can add a GUI installer.

Follow This Article to install Yum Extender (yumex) on Fedora 19

Skype Installation

Dependencies:-

#yum install alsa-lib.i686 libXv.i686 libXScrnSaver.i686 qt.i686 qt-x11.i686 pulseaudio-libs.i686 pulseaudio-libs-glib2.i686 alsa-plugins-pulseaudio.i686 qtwebkit.i686 -y

#wget http://download.skype.com/linux/skype-4.2.0.11-fedora.i586.rpm

#yum localinstall skype-4.2.0.11-fedora.i586.rpm

Gnome Extension Installation

https://extensions.gnome.org/local/

Using "Gnome Link" create a account. List of extension.

Get Rid of Deleted Open Files

noreply@blogger.com (Unknown) — Mon, 26 Aug 2013 01:32:00 -0700

Get Rid of Deleted Open Files

Sharing a nice articles which I found on web. Hope it will be useful to you as well..

You might have this scenario; Logfiles deleted while the process is still running. That's annoying: On your Linux-Server the /var filesystem is nearly full. You remove a very large logfile that you don't need with the rm command:

rajat@root-centos## df -Ph /var

Filesystem Size Used Avail Use% Mounted on

/dev/mapper/root-var 7.1G 7.0G 100M 99% /var

rajat@root-centos## ls -l /var/log/myapp/userlog

rajat@root-centos## rm /var/log/myapp/userlog

rajat@root-centos## df -Ph /var

Filesystem Size Used Avail Use% Mounted on

/dev/mapper/root-var 7.1G 7.0G 100M 99% /var

But what's that? The filesystem is still full. With lsof you can see, that the logfile is still opened in write mode:

rajat@root-centos## lsof | grep var/log/myapp/userlog

myapp 25139 root 4w REG 3,12 0 2101404 /var/log/myapp/userlog (deleted)

To actually free up the space you would have to stop the logging process. But since this might be a mission critical application this is not always an option. Is there any way to get rid of the file without stopping the logging process?

Find the deleted file's representation under /proc

Actually we cannot remove the file as long as the file is still in use by a process. But what we can do is: Getting the size down to 0. Thanks to Linux' enhanced /proc filesystem.

And that's how you do it:

First find the process that still uses the file (we already did that - see above):

rajat@root-centos## lsof | grep var/log/myapp/userlog

myapp 25139 root 4w REG 3,12 0 2101404 /var/log/myapp/userlog (deleted)

lsof tells us that a process with PID=25139 has opened the file (with number 4) in write mode. See the bolded part of the lsof output.

Knowing the PID of the process and the file number we can visit its representation under /proc:

rajat@root-centos## cd /proc/25139/fd

rajat@root-centos#:/proc/25139/fd# ls -l 4

lr-x------ 1 root root 64 2010-01-07 17:10 4 -> /var/log/myapp/userlog (deleted)

We can do almost everything with this file (called 4 here) what we can do with a real file: we can less it, copy it, and we can change its contents!

Free up the Space

As already said, we cannot remove the file, but what we can do is getting the size down to zero. And that's done as with every other file, e.g. if you use bash (or ksh) - what is most likely under Linux:

rajat@root-centos## > /proc/25139/fd/4

rajat@root-centos## df -Ph /var

Filesystem Size Used Avail Use% Mounted on

/dev/mapper/root-var 7.1G 4.9G 1.2G 69% /var

As we see there is again free space under /var, and the process is still running:

rajat@root-centos## lsof | grep var/log/myapp/userlog

myapp 25139 root 4w REG 3,12 0 0 /var/log/myapp/userlog (deleted)

What more could be done...?

As said before you can work on this file as you work on real files. That means, you could even save this file and compress it before getting its size down to 0:

rajat@root-centos## cp /proc/25139/fd/4 /tmp/userlog

rajat@root-centos## gzip -9 /tmp/userlog

rajat@root-centos## mv /tmp/userlog.gz /var/log/myapp/userlog.1.gz

rajat@root-centos## > /proc/25139/fd/4

Final Remarks

This procedure helps you if you are in a pinch - but basically you should never remove such an open file, because you still have an issue here: The process still writes to this file - and the only way to see what it logs is to use the procedure to save the file as shown above.

So remember to bring the size down to 0 in the first place instead:

rajat@root-centos## > /var/log/myapp/userlog

This way the space in the filesystem is freed immediately - and you still see what your application is writing to this file.

Cent OS 6.4 as PuppetMaster 3.2.1 installation and configuration

noreply@blogger.com (Unknown) — Mon, 10 Jun 2013 08:36:00 -0700

What is Puppet?

Puppet is IT automation software that helps system administrators manage infrastructure throughout its

lifecycle, from provisioning and configuration to patch management and compliance. Using Puppet, you

can easily automate repetitive tasks, quickly deploy critical applications, and proactively manage

change, scaling from 10s of servers to 1000s, on-premise or in the cloud.

How Puppet Works

Puppet uses a declarative, model-based approach to IT automation.

Define the desired state of the infrastructure’s configuration using Puppet’s declarative

configuration language.
Simulate configuration changes before enforcing them.
Enforce the deployed desired state automatically, correcting any configuration drift.
Report on the differences between actual and desired states and any changes made enforcing the desired

state.

Puppet Master Server Install & Configuration

#vi /etc/hosts
192.168.100.1 master.puppet.bom master
192.168.100.2 client.puppet.bom client

#yum install puppet-server -y

#vi /etc/puppet/puppet.conf
dns_alt_name = master.puppet.bom

#vi /etc/sysconfig/puppet
PUPPET_SERVER=master.puppet.bom

#service puppetmaster restart && chkconfig puppetmaster on

#puppet cert list
#puppet cert sign client.puppet.bom

Now we need create "Puppet Policy" @/etc/puppet/manifest/site.pp

[root@master ~]# cat /etc/puppet/manifests/site.pp
# Create "/tmp/testfile" if it doesn't exist.
class test_class {
file { "/tmp/testfile":
ensure => present,
mode => 600,
owner => root,
group => root
}
}

# tell puppet on which client to run the class
node default {
include test_class
}

file {'/etc/puppet/files/MobileWorld.jar':
ensure => present,
mode => '0777',
owner => 'root',
group => 'root',
source => 'puppet:///files/MobileWorld.jar',
}
file {'/etc/motd':
source => 'puppet:///files/motd',
}

file {'/etc/puppet/files/mMobile.jar':
ensure => present,
mode => '0777',
owner => 'root',
group => 'root',
source => 'puppet:///files/mMobile.jar',
}

[root@master ~]#

Puppet Slave Install & Configuration

#vi /etc/hosts
#vi /etc/hosts
192.168.100.2 client.puppet.bom client
192.168.100.1 master.puppet.bom master

#yum install puppet -y

#vi /etc/puppet/puppet.conf
[agent]
server = master.puppet.bom

#vi /etc/default/puppet
START=yes

#service puppet restart && chkconfig puppet on

#puppet agent --test

At the client end need write a one crontab.

* * * 1 * puppet --onetime --no-daemonize --logdest syslog > /dev/null 2>&1