Unix Revolution

"Error getting authority: Error initializing authority: Could not connect: No such file or directory (g-io-error-quark, 1)"

2018-02-21T08:03:00.000-06:00

"Error getting authority: Error initializing authority: Could not connect: No such file or directory (g-io-error-quark, 1)"

One issue that may cause this to arise is if you managed to break your /etc/fstab

We had an engineer add a line with the intended options of "nfsvers=3" but instead added "-onfsvers=3" and it broke the system fairly catastrophically.

Flashing a Pixel C

2018-01-15T18:09:00.000-06:00

WARNING!!!!

When you lock the bootloader.. it erases the damn device!

Ugh...

Anyhow....

To enable USB stuff.. Go to System | Build... tap build 7 times, click back... Developer options.. and somewhere in there you can unlock the bootloader and enable USB

# adb reboot bootloader

-- The device will reboot... then...

# fastboot flashing lock

update snmp engineID to human readable value

2017-07-20T15:26:00.000-05:00

If.. for whatever reason... you need a human readable snmp engineID

[root@zion snmp]# grep -i engin /etc/snmp/snmpd.conf

exactEngineID "thisIsATest"

engineIDType 3

[root@zion snmp]# systemctl restart snmpd

[root@zion snmp]# grep -i engi /var/lib/net-snmp/snmpd.conf

engineBoots 1

oldEngineID "thisIsATest"

GDM Autologin (revisited)

2017-07-20T15:18:00.000-05:00

The following is the configuration for that.

1) install RHEL7.3 with minimum install
2) install gdm and dependencies
3) install motif, xterm, xorg-x11-fonts-*, xorg-x11-server-Xorg and xorg-x11-xinit-session
4) systemctl set-default graphical.target
5) create /root/.Xclients (This is called from /etc/X11/xinit/xinitrc)
-----------
#!/bin/sh
xclock -geometry +0+0 &
xterm -ls &

exec /usr/bin/mwm -multiscreen
------------

6) create /root/.xsession (This is called from /usr/libexec/xinit-compat)
------------
#!/bin/sh
exec /etc/X11/xinit/xinitrc
------------

7) set exec permission to /root/.Xclients and ~/.xsession

# chmod gu+x /root/.Xclients /root/.xsession

8) create /etc/sysconfig/desktop. This is to disable gnome and kde completely
------------
unset GSESSION
unset STARTKDE
------------

9) create /etc/gdm/custom.conf. This is to enable automatic login with root user.
--------------
[daemon]
AutomaticLogin=root
AutomaticLoginEnable=True
--------------

Reboot, and mwm should start on the screen without any login step.

Automatic login to desktop - RHEL

2017-06-07T09:06:00.001-05:00

Trying to build a machine as a Kiosk with no login needed.

update /etc/gdm/custom.conf.

This is to enable automatic login with root user.
-------------
[daemon]
AutomaticLogin=root
AutomaticLoginEnable=True

So, more specifically I need to have my system boot to a graphical target as a particular user...

#yum -y install gdm @gnome-desktop @^graphical-server-environment @internet-browser
subscription-manager register --auto-attach
yum -y install gdm
yum -y install motif xterm xorg-x11-fonts-* xorg-x11-server-Xorg xorg-x11-xinit xorg-x11-apps

subscription-manager repos --enable=rhel-7-server-optional-rpms
yum -y install xorg-x11-xinit-session
systemctl set-default graphical.target

cat << EOF > /etc/sysconfig/desktop
unset GSESSION
unset STARTKDE
EOF

# update the GDM file to have automatic login enabled (as root in this case)
sed -i -e 's/\[daemon\]/\[daemon\]\nAutomaticLogin=morpheus\nAutomaticLoginEnable=True/g' /etc/gdm/custom.conf

USERS="morpheus"
for USER in $USERS
do
cat << EOF > /home/${USER}/.Xclients
#!/bin/sh
xclock -geometry +0+0 &
xterm -ls &
exec /usr/bin/mwm -multiscreen
EOF
chmod 755 /home/${USER}/.Xclients
done

shutdown now -r

Install RHEL 7 on old HP DL380 g5

2017-05-02T15:20:00.000-05:00

Someone at work had been running RHEL on an HP DL380 G5 and blew it up. After several attempts at doing an installation that made me conclude the hardware was actually bad... I kept digging for the answer.

Attempt install and Anaconda could not find any disks
- try a Drivers Disk (dd.img) both cciss and hpsa.
-- once we did that, when the system would reboot it would say it could not find a disk. hmmm.

Boot from your installation media and interrupt the startup at grub.

Add
hpsa.hpsa_allow_any=1 hpsa.hpsa_simple_mode=1
to the line starting with linuxefi
press CTRL-X to boot.

Once the system restarts after the install, you need to once again interrupt the startup and add the line from above.

After the system starts, edit /etc/default/grub and add those 2 parameters to the end of the line starting with GRUB_CMDLINE_LINUX (which likely has quiet at the end of the line currently).

then run
# cp /boot/grub2/grub.cfg /boot/grub2/grub.cfg.orig
# grub2-mkconfig -o /boot/grub2/grub.cfg
# reboot

Other folks might suggest to boot to rescue, chroot /mnt/sysimage... edit the file... run grub2-mkconfig and relabel the filesystem... which will also work. I just think my way is
a.) easier
b.) quicker
3.) works

Plex and LetsEncrypt

2017-04-14T09:36:00.000-05:00

Work in Progress:

Plex and LetsEncrypt

So... I'm not entirely sure where to begin with all this. And this write-up is a mess (right now). I was not certain this was going to work and therefore I was not keeping absolute notes.

Apache webserver allowing 80/443 through my firewall.

- www.linuxrevolution.com

- plex.linuxrevolution.com

Plex Media Server currently running on OSX Mac Mini at port 32400 (standard port)

I own a domain "linuxrevolution.com" and I also have a Plex Media Server running on any particular system (Mac Mini/OSX, Nvidia Shield TV, Linux).

On my webserver, I am using CertBot

- create a webroot (vhost) on your Apache Server.

wget https://dl.eff.org/certbot-auto
chmod a+x certbot-auto
./certbot-auto 


./certbot-auto certonly -d plex.linuxrevolution.com --webroot

openssl pkcs12 -export -out ~/plex_linuxrevolution_com.pfx \
  -inkey /etc/letsencrypt/archive/plex.linuxrevolution.com/privkey1.pem \
  -in /etc/letsencrypt/archive/plex.linuxrevolution.com/cert1.pem \
  -certfile /etc/letsencrypt/archive/plex.linuxrevolution.com/chain1.pem

- Enter a passphrase

Getting the certs downloaded locally.

You then have to create the pkcs12 file and you will be asked for a passphrase which you will need to enter in your Plex configuration.

Custom certificate location /Users/jradtke/Music/plex_linuxrevolution_com.pfx

Custom certificate encryption key <this is the key you used when you created the pkcs12 file>

Custom certificate domain plex.linuxrevolution.com

Review Logs

cp /Users/jradtke/Library/Logs/Plex Media Server
grep CERT Plex\ Media\ Server.log

I'd like to thank:

https://gist.github.com/srilankanchurro/fa3fdeb5cf10ebb251aa88338b8b37db

Privacy?? Meh. Oh - and wtf paypal?

2017-04-14T09:20:00.004-05:00

So.. once upon a time (about 2 weeks ago) I was going to purchase an album from some Indie rock band (group?) and they accepted Paypal. Word? Word.
I don't have a hang-up with enabling the "one click" Paypal functionality in my browser... because if I can save 2 or 3 clicks here-and-there, that's money in the bank, and as such I opt to enable the "one click" feature. Annnd.. off I got to pay for my album. Shortly thereafter, I noticed that I have a "unread notification" in my facebook tab. Hmm.. I'm not very popular, I wonder what this is....

I don't know exactly *where* I had "agreed to have Paypal send you updates"... but I was/am pretty pissed off. Paypal's "support" was nice/pleasant, I must say, but.. either they ARE clueless, or have been trained to PRETEND to be clueless. They seem to think I was upset about the notifications. NOTE!!!! somehow Paypal was added as "payment method" in Facebook. I am capable of understanding that people would (for whatever reason) chose to send money to their friends via Facebook. Cool - I guess I feel slighted that I have been relegated to be in a group of people that are not savvy enough to figure out ANY OTHER FOWKING WAY to send money other than through the most privacy averse service on earth.

Anyhow... I recommend you remove the payment account from Facebook and disable notifications in your Paypal account.

Who knows if it actually does any good, or if they continue to send the information to Facebook.

I'm just glad that you can Send Money via Google (for FREE)

My (limited) experience with Filemaker Pro

2016-10-27T11:48:00.002-05:00

A friend has a retail location which uses Filemaker Pro on 2 computers - I'll refer to them as Main and Satellite. Filemaker will have a primary instance running on the Main computer and the Satellite will connect to it. It turns out that Filemaker has it's own network "stack" known as the Filemaker Network (aka fmn://)

Firewall:
You need to ensure that the Windows Firewall allows communication for Filemaker Pro.
Click Start and type "firewall" in the search box. Then click Allow A Program Through Windows Firewall. Find the Filemaker pro in the list and make sure the check box is selected for the type of network your interface was designated as. In his case: public.

Allow Sharing (Filemaker):

On the Main Computer, open Filemaker and click on :
File

Sharing

Filemaker Network (this page will show you the IP)

Network Sharing (click "On")

Connect to Remote Filemaker Share:

On the Satellite Computer, click on:

File

Open Favorite

Manage Favorites

Click +

Click Remote

Click Add

Insert the IP from the Main system (from the Allow Sharing section above)

Extending SNMP to run arbitrary shell script

2016-10-27T09:19:00.000-05:00

Why are we here...

This is not likely something I would have pursued under normal circumstances. I happen to be working for a customer/client who is not afforded a lot of flexibility to accomplish their goals. In this case, the rigor is justified. They have to sometimes be fairly creative with how they solve problems.

In this case they would like to utilize an existing snmp implementation to execute a command (or shell script) on a remote system. They came to me with the idea of using Net-SNMP extend.
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/sect-System_Monitoring_Tools-Net-SNMP-Extending.html

NOTE: This is NOT a good implementation strategy in the "real world" it will simply allow you to test the functionality. There are a TON of security implications which would need to be taken in to consideration.

Implementation Steps:

[root@rh7tst01 ~]# yum -y install net-snmp net-snmp-utils
[root@rh7tst01 ~]# cd /etc/snmp
[root@rh7tst01 snmp]# grep -v \# snmpd.conf | grep -v ^$
com2sec notConfigUser default public
group notConfigGroup v1 notConfigUser
group notConfigGroup v2c notConfigUser
view systemview included .1.3.6.1.2.1.1
view systemview included .1.3.6.1.2.1.25.1.1
view systemview included .1
access notConfigGroup "" any noauth exact systemview none none
syslocation Unknown (edit /etc/snmp/snmpd.conf)
syscontact Root <root@localhost> (configure /etc/snmp/snmp.local.conf)
dontLogTCPWrappersConnects yes

-- Update/create snmpd.local.conf
[root@rh7tst01 snmp]# grep -v \# snmpd.local.conf
syscontact James Radtke <root@localhost>
syslocation Laptop, Virtual Machine

extend sshd_pids /usr/local/bin/check_proc.sh sshd

-- Restart and enable snmpd
[root@rh7tst01 snmp]# systemctl restart snmpd
[root@rh7tst01 snmp]# systemctl enable $_

-- Update the firewall
[root@rh7tst01 snmp]# firewall-cmd --permanent --add-port=161/udp
[root@rh7tst01 snmp]# firewall-cmd --reload
[root@rh7tst01 snmp]# cat /usr/local/bin/check_procs.sh
#!/bin/sh

PATTERN=$1
NUMPIDS=`pgrep $PATTERN | wc -l`

echo "There are $NUMPIDS $PATTERN processes."
exit $NUMPIDS

Test your config

[root@rh7tst01 snmp]# snmpwalk -v 2c -c public localhost NET-SNMP-EXTEND-MIB::nsExtendObjects

NET-SNMP-EXTEND-MIB::nsExtendNumEntries.0 = INTEGER: 1

NET-SNMP-EXTEND-MIB::nsExtendCommand."sshd_pids" = STRING: /usr/local/bin/check_proc.sh

NET-SNMP-EXTEND-MIB::nsExtendArgs."sshd_pids" = STRING: sshd

NET-SNMP-EXTEND-MIB::nsExtendInput."sshd_pids" = STRING:

NET-SNMP-EXTEND-MIB::nsExtendCacheTime."sshd_pids" = INTEGER: 5

NET-SNMP-EXTEND-MIB::nsExtendExecType."sshd_pids" = INTEGER: exec(1)

NET-SNMP-EXTEND-MIB::nsExtendRunType."sshd_pids" = INTEGER: run-on-read(1)

NET-SNMP-EXTEND-MIB::nsExtendStorage."sshd_pids" = INTEGER: permanent(4)

NET-SNMP-EXTEND-MIB::nsExtendStatus."sshd_pids" = INTEGER: active(1)

NET-SNMP-EXTEND-MIB::nsExtendOutput1Line."sshd_pids" = STRING: There are 2 sshd processes.

NET-SNMP-EXTEND-MIB::nsExtendOutputFull."sshd_pids" = STRING: There are 2 sshd processes.

NET-SNMP-EXTEND-MIB::nsExtendOutNumLines."sshd_pids" = INTEGER: 1

NET-SNMP-EXTEND-MIB::nsExtendResult."sshd_pids" = INTEGER: 2

NET-SNMP-EXTEND-MIB::nsExtendOutLine."sshd_pids".1 = STRING: There are 2 sshd processes.

-- Now, figure out the OID location

[root@rh7tst01 ~]# snmptranslate -On NET-SNMP-EXTEND-MIB::nsExtendOutLine

.1.3.6.1.4.1.8072.1.3.2.4.1.2

-- Poll the OID
[root@rh7tst01 ~]# snmpwalk -v 2c -c public localhost .1.3.6.1.4.1.8072.1.3.2.4.1.2
NET-SNMP-EXTEND-MIB::nsExtendOutLine."sshd_pids".1 = STRING: There are 4 sshd processes.

SNMP Foo

Review the man pages for the following helpful commands:

snmpd -H

snmpd -V -c /etc/snmp/snmpd.conf
snmpconf -g basic_setup

References:

https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/sect-System_Monitoring_Tools-Net-SNMP-Extending.html
http://www.net-snmp.org/docs/mibs/NET-SNMP-EXTEND-MIB.txt

Convert iTunes to Rhythmbox 2016

2016-08-18T14:23:00.001-05:00

A recent comment on a rather old post made me realize that I had not updated this thread.

The biggest news - iTunes seriously screws up the way they store attributes about songs now. From what I can gather, if you chose to give Adele - Rolling in the Deep 4-stars... it, for whatever stupid reason, will then give the entire album an "album rating" of 4 stars. Which means that the perl script and python script I had found to convert my playlist would have ALL the Adele songs in that album in my favorites in Rhythmbox.

There is, however, a work-around Doug Scripts
http://dougscripts.com/itunes/scripts/scripts06.php?page=1
I cannot seem to find the exact AppleScript of his that I used to remove the Album Rating from all my albums.

First thing though... open iTunes and run DougScripts Album Rating script.

#!/bin/bash

# You have to use sudo on the AFS drive
MYDATE=`date +%F-%H-%M-%S`
rsync -urpolvv --delete --size-only --delete --exclude="Mobile Applications" --exclude="Amazon MP3" --exclude="Album Artwork" --exclude="Amazon Music" --exclude="Home Videos" --exclude="iPod Games" --exclude=".localized" zion:/data/Music/iTunes/iTunes\\\ Media/Music/ /home/jradtke/Music/
sudo chown -R jradtke:jradtke /home/jradtke/Music/

# Using transferratings.pl
RBDB=~/.local/share/rhythmbox/rhythmdb.xml
cp $RBDB $RBDB.$MYDATE

scp zion:/data/Music/iTunes/iTunes*.xml ~/Music/
# Using iTunesToRhythm.py
if [ ! -d ~/Projects/iTunesToRhythm ]
then
cd ~/Projects
git clone git@github.com:/jradtke-rh/iTunesToRhythm
fi
cd ~/Projects/iTunesToRhythm

python iTunesToRhythm.py -w ~/Music/iTunes\ Music\ Library.xml $RBDB 2>&1 > /tmp/iTunesToRhythm.log
tail -15 /tmp/iTunesToRhythm.log
exit 0

Deny inbound UDP from x.x.x.x/highport to x.x.x.x/53 due to DNS Query

2016-07-15T16:21:00.001-05:00

Where to begin with this travesty... had to switch from AT&T to Verizon so that I could use tethering at the office I work at.. and "so it begins..."

I have a Samsung SCS-SU01 which Verizon provided because I have essentially no service in my home. When I attempted to configure/enable the device it was responding rather strange. Specifically the GPS indicator would not change to "blue" - indicating it could not get GPS? Anyhow, that was NOT the case, the transponder was outside via the extender cable with a clear line of sight to the sky.

I loaded my ASDM to see if I could tell what was going on and noticed

# Deny inbound UDP from x.x.x.x/highport to x.x.x.x/53 due to DNS Query

which seemed very odd since my DNS server is on the same subnet as my VZW device.

Applied the following rule and the DNS issue went away.

same-security-traffic permit intra-interface

Now... I need to allow IPsec-passthru (I think?)

Cisco ASA 5505
Samsung SCS-SU01 - Verizon network extender

Bricked (and unbricked) my Moto X 2nd Gen XT1095

2016-06-26T12:33:00.000-05:00

I have recently been having issues with my Moto X receiving incoming calls. Even though the same person that would call me could text me at the same time frame. Fortunately I have a Nexus 6... unfortunately I travel weekly for work and can't deal my phone's bullshit right now. So, I wipe my Nexus, re-image it with shamu, install all my apps, Google Authenticator, etc.. configure all logins and authentication. Then I realize why I had been using my Moto X instead of my Nexus 6. Advantages that the Moto X have: size, nuance functionality (karate chop flashlight, auto-silence off-hours, etc...). Motorola does some cool stuff.

Anyhow.. .one not cool thing about Motorola is the guarded approach to distributing their Images. (which, there may be a legitimate reason for that.... so, I will remain somewhat neutral about the subject).

I managed to find an image to use and made a few huge assumptions:

that an invalid image will not load
that a non-stock image will NOT allow Android Pay and/or Google Wallet to work

One big mistake I made (lesson I learned) the system image file does NOT (or should not) be a single file. I first attempted to concatenate all the sparsechunk.x files to system.img and flashed that way. No bueno!

mkdir -p ~/AndroidImages/MOTOX
cd $_
wget http://path.to.rom/
unzip VICTARA_TMO_XT1095_6.0_MPE24.49-18_cid9_CFC.xml.zip

fastboot oem fb_mode_set
fastboot flash partition gpt.bin
fastboot flash motoboot motoboot.img
fastboot flash logo logo.bin
fastboot flash boot boot.img
fastboot flash recovery recovery.img
fastboot flash system system.img_sparsechunk.0
fastboot flash system system.img_sparsechunk.1
fastboot flash system system.img_sparsechunk.2
fastboot flash system system.img_sparsechunk.3
fastboot flash system system.img_sparsechunk.4
fastboot flash system system.img_sparsechunk.5
fastboot flash system system.img_sparsechunk.6
fastboot flash system system.img_sparsechunk.7
fastboot flash system system.img_sparsechunk.8
fastboot flash system system.img_sparsechunk.9
fastboot flash modem NON-HLOS.bin
fastboot erase modemst1
fastboot erase modemst2
fastboot flash fsg fsg.mbn
fastboot erase cache
fastboot erase userdata
fastboot erase customize
fastboot erase clogo
fastboot oem config carrier att
fastboot oem fb_mode_clear

NOTE: I am not 100% positive that "att" is the correct carrier string.

Meeting invite dial-in with pause

2016-01-05T09:21:00.000-06:00

the dial-in number without any spaces or dashes
a comma (pause)
the conference code without any spaces or dashes
the # sign (which usually says you’re done entering the code)

Customer logins

8661234567,112233#

Meeting Organizer

8661234567,112233#,998877*

I just parted...

2015-12-15T17:54:00.001-06:00

The recent disk management utility in the Fedora/RHEL installers are a bit challenging. Since I don't know why things had changed, I won't bother commenting. But, I don't find them nearly as easy/convenient as before.... Anyhow...

I installed a 500GB SSD in my Intel NUC to build up as a "NAS" host (NFS and iSCSI). The OS will take around 20GB, then SWAP, /boot.. whatever. So, I wanted the remainder of the disk to be in it's own VG

[root@rhel7-nas registry]# parted -l | grep Disk
Disk /dev/sda: 480GB
Disk Flags:
Disk /dev/mapper/vg_exports-lv_registry: 21.5GB
Disk Flags:
Disk /dev/mapper/rhel7--nas-home: 1074MB
Disk Flags:
Disk /dev/mapper/rhel7--nas-swap: 8389MB
Disk Flags:
Disk /dev/mapper/rhel7--nas-root: 32.2GB
Disk Flags:
[root@rhel7-nas ~]# parted -s /dev/sda print free
Model: ATA INTEL SSDSC2BP48 (scsi)
Disk /dev/sda: 480GB
Sector size (logical/physical): 512B/512B
Partition Table: gpt
Disk Flags:

Number Start End Size File system Name Flags
17.4kB 1049kB 1031kB Free Space
1 1049kB 211MB 210MB fat16 EFI System Partition boot
2 211MB 735MB 524MB xfs
3 735MB 42.4GB 41.7GB lvm
42.4GB 480GB 438GB Free Space

[root@rhel7-nas ~]# parted -s /dev/sda mkpart pri ext3 42.4GB 100% set 4 lvm on
[root@rhel7-nas registry]# parted /dev/sda print free
Model: ATA INTEL SSDSC2BP48 (scsi)
Disk /dev/sda: 480GB
Sector size (logical/physical): 512B/512B
Partition Table: gpt
Disk Flags:

Number Start End Size File system Name Flags
17.4kB 1049kB 1031kB Free Space
1 1049kB 211MB 210MB fat16 EFI System Partition boot
2 211MB 735MB 524MB xfs
3 735MB 42.4GB 41.7GB lvm
4 42.4GB 480GB 438GB pri lvm
480GB 480GB 860kB Free Space
[root@rhel7-nas ~]# partprobe /dev/sda
[root@rhel7-nas ~]# ls -l /dev/sda*
brw-rw----. 1 root disk 8, 0 Dec 15 18:53 /dev/sda
brw-rw----. 1 root disk 8, 1 Dec 15 18:53 /dev/sda1
brw-rw----. 1 root disk 8, 2 Dec 15 18:53 /dev/sda2
brw-rw----. 1 root disk 8, 3 Dec 15 18:53 /dev/sda3
brw-rw----. 1 root disk 8, 4 Dec 15 18:53 /dev/sda4

[root@rhel7-nas ~]# pvcreate /dev/sda4

Physical volume "/dev/sda4" successfully created

[root@rhel7-nas ~]# vgcreate vg_exports /dev/sda4

Volume group "vg_exports" successfully created

Plex Media Server, a Cisco ASA 5505, and you...

2015-12-15T07:36:00.000-06:00

The only hang-up I have with this setup is the fact that I now have an inside system exposed to the external interface (instead of a DMZ box :-(

object network inside-network
subnet 192.168.0.0 255.255.255.0
object network PLEX-TCP32400
host 192.168.0.11
access-list acl_outside extended permit tcp any object PLEX-TCP32400 eq 32400
object network PLEX-TCP32400
nat (inside,outside) static interface service tcp 32400 32400

Replace Horrible ClickPad on Lenovo

2015-11-05T20:56:00.001-06:00

I have a 2014/2015 Lenovo T540P which is an awesome machine in EVERY way but one.. the horrible ClickPad thing they implemented. Seemingly to compete with the Apple Trackpad, I suppose. The significant difference, however, is the top of an Apple Trackpad is not a clickable area. And worse... Lenovo tried to emulate a 3-button trackpad. Ugg.

First - I ordered a 3-button Trackpad replacement. Replacing the trackpad was not exactly straight-forward, but it was pretty simple once you know what you are doing.

Remove keyboard bevel:
https://support.lenovo.com/us/en/documents/pd029714

Replace trackpad:
https://support.lenovo.com/us/en/videos/vid100173

After I replace the trackpad, I had a bizzare situation where if I was to click the "left-mouse-button" and drag my app around the screen, the cursor would jump around chaotically.

I messed around with the 50-synaptics.conf file, which did not help. I believe the final fix was
[root@seraph ~] # xinput set-prop "AlpsPS/2 ALPS DualPoint TouchPad" "Device Accel Constant Deceleration" 1

Some other tweaks I had tried with the old ClickPad to make it behave better...

synclient AreaTopEdge=500

synclient HorizHysteresis=50

synclient VertHysteresis=50

synclient TapButton1=1

synclient TapButton2=2

synclient TapButton3=3

synclient PalmDetect=1

synclient PalmMinWidth=10

synclient PalmMinZ=100

synclient EmulateMidButtonTime=75

Satellite 6 installation issue(s)

2015-09-02T07:18:00.001-05:00

My job (self-appointed, of course) is to learn the ins-and-outs of Satellite 6, but from an infrastructure perspective. This involves installing it over... and over.. and over... until I encounter issues. And then I pull my hair out trying to troubleshoot the issue.

Issue:
Could not set 'present' on ensure: 422 Unprocessable Entity at 12:/usr/share/katello-installer/modules/foreman_proxy/manifests/register.pp
Could not set 'present' on ensure: 422 Unprocessable Entity at 12:/usr/share/katello-installer/modules/foreman_proxy/manifests/register.pp
/Stage[main]/Foreman_proxy::Register/Foreman_smartproxy[rh7sat6.aperture.lab]/ensure: change from absent to present failed: Could not set 'present' on ensure: 422 Unprocessable Entity at 12:/usr/share/katello-installer/modules/foreman_proxy/manifests/register.pp

Resolution:

foreman-rake config -- -k idle_timeout -v 60

foreman-rake config -- -k proxy_request_timeout -v 99

NOTES: Interestingly, this installation procedure works on my KVM guest which is NOT NATd which is hosted by a mini-ATX desktop. It fails though, when I try my build on a KVM guest which IS NATd on my laptop. So, I don't know whether the NAT network space is causing some sort of issue (like multicast never replying?)

I believe you have to attempt katello-installer and let it fail, before you can apply the settings. Or, you might be able to wait until the installer is at 99%?

Nagios SELinux and you.

2015-06-28T17:29:00.000-05:00

If you are running RHEL/CentOS and using SELinux, and you should... be using SELinux... you may have notced the following error when you attempt to submit an immediate check of a host:
Error: Could not stat() command file '/usr/local/nagios/var/rw/nagios.cmd'!

There are a number of ways to see if SELinux is preventing this from working, but the quickest is to
# setenforce 0
-- retry submitting
# setenforce 1

If the above allowed the command to run, then just run this
[root@apoc rw]# chcon -R --reference=/var/www/html /usr/local/nagios/share
[root@apoc rw]# chcon -R --reference=/var/www/html /usr/local/nagios/var
[root@apoc rw]# chcon -R --reference=/var/www/cgi-bin /usr/local/nagios/sbin
[root@apoc rw]# chcon -R -t httpd_sys_rw_content_t /usr/local/nagios/var/rw

P2V using dd for KVM-QEMU guest

2015-06-15T08:12:00.000-05:00

Preface: I have certainly not exhaustively tested this process. I had a specific need and found a specific solution that worked.

Situation: I was issued a shiny new laptop running Red Hat Enterprise Linux 7 (with Corp VPN, certs, Authentication configuration, etc...) The image was great, but I needed more flexibility on my bare metal. So, my goal was to P2V the corporate image so I could just run it as a VM.

* Remove corporate drive and install new SSD
* install corp drive in external USB-3 case
* Install RHEL 7 on new SSD
* dd old drive to a disk-image file in a temp location which will be an image which is the same size as your actual drive (unless you have enough space in your destination to contain a temp and converted image)
* convert the raw disk-image to a qcow file while pushing it to the final location - this step should reduce the disk size - however, I believe it will only reduce/collapse zero-byte blocks (not just free space - i.e. if you delete a file, it may, or may not change the blocks back to zero)

dd if=/dev/sdb of=/mnt/RHEL7-CSB.raw
qemu-img convert -f raw -O qcow2 /mnt/RHEL7-CSB.raw /var/lib/libvirt/images/RHEL7-CSB.qcow2
chown qemu:qemu /var/lib/libvirt/images/RHEL7-CSB.qcow2 && chmod 0664 /var/lib/libvirt/images/RHEL7-CSB.qcow2    
restorecon -RFvv /var/lib/libvirt/images/RHEL7-CSB.qcow2

Create a new VM using virt-manager and point it at your new qcow2 file. (It will fail to boot at this point). Click the light-bulb and change the Disk from Virtio to IDE. (try booting at this point). If it still does not boot... edit the boot string and remove the hint for UEFI or the hint for baremetal (I don't actually know which one fixed the issue) "--hint-efi=hd0,gpt2 --hint-baremetal=ahci0,gpt2"

http://docs.openstack.org/image-guide/content/ch_converting.html

qemu-img convert -f raw -O qcow2 centos7.img centos7.qcow2

If not obvious, my original image was RHEL7 and the Hypervisor was also RHEL 7 using KVM. From my experience, other hypervisors seem more accepting of different disk image types, etc...

Adding EPEL 7 repo to Satellite 5

2015-05-22T18:10:00.001-05:00

Repository URL: http://mirrors.kernel.org/fedora-epel/7/x86_64/

You will likely get the following error (/var/log/rhn/reposync/epel_rhel7_x86_64.log

[root@rh6sat5 reposync]# tail -f epel_rhel7_x86_64.log
Sync started: Fri May 22 18:58:00 2015
['/usr/bin/spacewalk-repo-sync', '--channel', 'epel_rhel7_x86_64', '--type', 'yum', '']
Repo URL: http://mirrors.kernel.org/fedora-epel/7/x86_64/
ERROR: xz compression not available
Sync completed.
Total time: 0:00:03

So - to fix this, do the following...

yum -y install http://mirrors.kernel.org/fedora-epel/epel-release-latest-6.noarch.rpm
cd /etc/yum.repos.d/
sed -i -e 's/enabled=1/enabled=0/g' epel.repo
yum --enablerepo epel list pyliblzma

To resolve the mess from above...

yum remove pyliblzma && yum --enablerepo epel -y install pyliblzma

MTP - Oh how I love to hate you....

2015-02-03T09:26:00.000-06:00

TL; DR: I can't sync my android tablet (Nvidia Shield) with Fedora via MTP if I am using a USB Hub?

So, in fairness... I don't actually *hate* MTP. I'm sure it is probably fairly awesome at doing whatever it is that MTP should do. I'm just miffed at the moment because Android switched (a long time ago, I might add) to MTP for USB connections.

Before, I could (essentially) directly mount the SD card in my tablet/phone/toaster and manage it using my archaic methods. Now.. I have to conform to using the mtp methodology... which is fine.

However - now I am stuck..

Feb 3 10:15:18 neo mtp-probe: bus: 1, device: 28 was not an MTP device

Fun...
Syslog tells me the device is:
/sys/devices/pci0000:00/0000:00:1a.0/usb1/1-1/1-1.2/1-1.2.3/1-1.2.3.3

At some point I will need to dig in to the output from...
# udevadm test /sys/devices/pci0000:00/0000:00:1a.0/usb1/1-1/1-1.2/1-1.2.3/1-1.2.3.

Specifially...
/usr/lib/udev/rules.d/50-udev-default.rules
/usr/lib/udev/rules.d/69-libmtp.rules

Now... fortunately before I got too out of control trying to "fix" this... I tried plugging my tablet directly in to the machine... and everything was fine?
/sys/devices/pci0000:00/0000:00:1a.0/usb1/1-1/1-1.2

You can mount ext2 as ext4 filesytem (just read...)

2014-12-11T17:27:00.002-06:00

So - this is tough to even explain.

Imagine all of your build scripts and SOP simply read
# mkfs /dev/VolumeGroup/Volume

and then you add the following entry to /etc/fstab
/dev/VolumeGroup/Volume /directory ext4 defaults 1 2

then when you run
# mount -a

Everything is cool. Except .. it's not.

That mkfs command created an ext2 filesystem - the crappy part is when mount command is run, even though fstab is expecting ext4, it doesn't care and mounts it anyhow. So, now we have a filesystem with no Journal and added ext4 features.

Worse yet - there is no "supported" upgrade path to ext4. However, you can add a Journal to make it ext3.
# tune2fs -j /dev/VolumeGroup/Volume

fedora 20 finish script (mp3 playback, Google Chrome, ClamAV Anti-Virus)

2014-12-05T16:48:00.000-06:00

Once again - revisiting my "finish script" for my workstation...

#!/bin/bash

PWD=`pwd`
DATE=`date +%Y%m%d`
ARCH=`uname -p`

yum -y install redhat-lsb-core
RELEASE=`lsb_release -r | awk '{ print $2 }'`

# Setup wheel group for NOPASSWD:
sed --in-place 's/^#\s*$%wheel\s\+ALL=(ALL)\s\+NOPASSWD:\s\+ALL$/\1/' /etc/sudoers

# Configure for fastest repos
yum -y install yum-plugin-fastestmirror

# REPO MGMT
# RPMfusion - Release independent
yum -y localinstall --nogpgcheck http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-stable.noarch.rpm http://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-stable.noarch.rpm
# RPMfusion - Release dependent
yum -y localinstall --nogpgcheck http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-${RELEASE}.noarch.rpm http://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-${RELEASE}.noarch.rpm

# Adobe
yum -y install http://linuxdownload.adobe.com/adobe-release/adobe-release-x86_64-1.0-1.noarch.rpm

# Google (double-check this one)
cat << EOF > /etc/yum.repos.d/google-x86_64.repo
[google64]
name=Google - x86_64
baseurl=http://dl.google.com/linux/rpm/stable/x86_64
enabled=1
gpgcheck=1
gpgkey=https://dl-ssl.google.com/linux/linux_signing_key.pub
EOF

# PACKAGE MANAGEMENT
SYS_PKGS="audit autofs dstat expect gcc git glibc hddtemp intltool iotop kernel-headers kernel-devel lm_sensors nmap ntp openssh-askpass openssl-static policycoreutils-gui sysfsutils sysstat xorg-x11-xauth"
DESKTOP_PKGS="conky docky gnome-rdp google-chrome-stable java-*-openjdk icedtea-web libreoffice pidgin rdesktop spice-gtk-python spice-client spice-xpi tomboy wireshark wireshark-gnome xscreensaver xscreensaver-extras-gss xscreensaver-gl-*"
DEV_PKGS="eclipse eclipse-pydev python-lxml"
DVD_PKGS="libdvdread libdvdnav gstreamer-plugins-ugly gstreamer-plugins-bad lsdvd gstreamer-ffmpeg xine-lib xine-lib-extras-freeworld mplayer smplayer vlc"
AUDIO_PKGS="gnome-do-plugins-rhythmbox pidgin-rhythmbox rhythmbox-equalizer gstreamer gstreamer-plugins-good gstreamer-plugins-bad gstreamer-plugins-ugly phonon-backend-gstreamer gstreamer1-libav gstreamer1-plugins-ugly gstreamer1-plugins-bad-freeworld"
GNOME_PKGS="ccsm gnome-tweak-tool gnome-shell-extension-* gnome-shell-theme-* gnome-common gnome-theme-curvylooks gnome-themes-legacy gnome-shell-theme-atolm gnome-shell-theme-elementary gnome-shell-theme-gaia gnome-shell-theme-orta gnome-shell-theme-smooth-inset verne-backgrounds-extras-gnome verne-backgrounds-gnome system-switch-displaymanager-gnome gnome-video-arcade gnome-applet-sensors gnome-applets gnome-screensaver"
# INSTALL PACKAGES
yum -y install $SYS_PKGS $DESKTOP_PKGS $DEV_PKGS $DVD_PKGS $AUDIO_PKGS $GNOME_PKGS

# CLEANUP THE BOOT PROCESS
# Update Grub
cat << EOF >> /etc/default/grub
# Custom stuff
GRUB_DISABLE_RECOVERY="true"
GRUB_SAVEDEFAULT="true"
GRUB_GFXMODE=1600x900x16
GRUB_GFXPAYLOAD_LINUX=keep
GRUB_BACKGROUND=/boot/efi/EFI/fedora/matrix_desktop_1920x1080.jpg
EOF

sed -i -e 's/GRUB_TERMINAL_OUTPUT/#GRUB_TERMINAL_OUTPUT/g' /etc/default/grub
sed -i -e '1i# grub2-mkconfig -o /boot/efi/EFI/fedora/grub.cfg' /etc/default/grub
sed -i -e '2i# grub2-mkfont --output=/boot/efi/EFI/fedora/unicode.pf2 /usr/share/fonts/dejavu/DejaVuSansMono.ttf' /etc/default/grub

yum -y install plymouth-*
plymouth-set-default-theme solar
#plymouth-set-default-theme spinfinity
dracut --force /boot/initramfs-`uname -r`.img

# Install rEFInd to manage the multi-OS boot environment
wget http://apoc/SFW/rEFInd/refind-0.8.3-1.x86_64.rpm
yum -y localinstall refind-0.8.3-1.x86_64.rpm
sed -i -e '137iresolution 1920 1080' /boot/efi/EFI/refind/refind.conf
sed -i -e 's/#dont_scan_volumes/dont_scan_volumes/g' /boot/efi/EFI/refind/refind.conf
sed -i -e 's/#dont_scan_dirs/dont_scan_dirs/g' /boot/efi/EFI/refind/refind.conf
sed -i -e 's/#dont_scan_files/dont_scan_files/g' /boot/efi/EFI/refind/refind.conf

sed -i -e '90iselection_big matrix_desktop_1920x1080.jpg' /boot/efi/EFI/refind/refind.conf

# AntiVirus
yum -y install clamav clamav-data clamav-filesystem clamav-lib clamav-lib clamav-scanner-systemd clamav-server-sysvinit clamav-update clamav-unofficial-sigs
sed -i -e 's/^Example/#Example/' /etc/freshclam.conf
sed -i -e 's/db.XY/db.US/' /etc/freshclam.conf
mkdir /var/log/clamav
chown clamupdate:clamupdate /var/log/clamav

cat <(crontab -l) <(echo "30 0 * * 0 /bin/freshclam --quiet -l /var/log/clamav/freshclam.log") | crontab -

echo "clamscan --quiet --recursive=yes / --log=/var/log/clamav/clamscan-`date +%F`.out

# In another terminal run...
tail -f /var/log/clamav/clamscan-`date +%F`.out | egrep -v 'Symbolic|OK|Empty'"

# ONLY FOR Asus Game Machine (I'll put a dmidecode test here at some point
#yum install xorg-x11-drv-nvidia-304xx-libs

# Some messing about with the Audio stack
cat << EOF >> /etc/asound.conf
# NOTE: ALL of the customization in this file is non-standard
#defaults.pcm.dmix.rate 44100 # Force 44.1 KHz
defaults.pcm.dmix.rate 48000 # Force 48 KHz
#defaults.pcm.dmix.format S16_LE # Force 16 bits
defaults.pcm.dmix.format S24_3LE # Force 24 bits
EOF
cat /proc/asound/card1/pcm0p/sub0/hw_params
cat /usr/share/alsa/alsa.conf

cat ~/.asoundrc

yum -y update

exit 0

Copy Sparse files over network

2014-10-28T10:06:00.000-05:00

I have a few physical nodes which I ran KVM guests on. Occasionally I need to rebuild the host, so I want to copy the VM from one physical node to another. I use RAW (sparse) disk images and standard scp would copy the image in it's entirety. Until... I found rsync -S ;-)

rsync -Surpolvv * usgtst92:/var/lib/libvirt/images/

*** SOURCE ***
usgtst91 images]# for IMG in `find . -name "*.img"`; do qemu-img info $IMG; done
image: ./DVGLLVUSGTST82/DVGLLVUSGTST82.img
file format: raw
virtual size: 44G (47244640256 bytes)
disk size: 12G
image: ./DVGLLVUSGTST81/DVGLLVUSGTST81.img
file format: raw
virtual size: 44G (47244640256 bytes)
disk size: 4.0G
image: ./DVGLLVUSGTST83/DVGLLVUSGTST83.img
file format: raw
virtual size: 44G (47244640256 bytes)
disk size: 3.8G

*** DESTINATION ***
usgtst92 images]# for IMG in `find . -name "*.img"`; do qemu-img info $IMG; done
image: ./DVGLLVUSGTST83/DVGLLVUSGTST83.img
file format: raw
virtual size: 44G (47244640256 bytes)
disk size: 3.2G
image: ./DVGLLVUSGTST81/DVGLLVUSGTST81.img
file format: raw
virtual size: 44G (47244640256 bytes)
disk size: 3.4G
image: ./DVGLLVUSGTST82/DVGLLVUSGTST82.img
file format: raw
virtual size: 44G (47244640256 bytes)
disk size: 11G