DYOR

ESXi Host Manually Update

2024-01-30T22:48:00.003+07:00

These are some notes while upgrading my ESXi homelab server.

Check current version/build number

[nstah@kumala:~] vmware -v

VMware ESXi 6.7.0 build-14320388

Download ESXi update file at VMweare Customer Connect, then upload it to VM host storage I'm trying to update using October 2022 Patch, ESXi670-202210001 - Build 20497097.

Check if a certain VIB or Image Profiles requires a reboot or maintenance mode:

[nstah@kumala:~] esxcli software sources vib get --depot=file:///vmfs/volumes/VM\ STORAGE/ISO/ESXi670-202210001.zip | more

VMW_bootbank_sata-sata-sil24_1.1-1vmw.670.0.0.8169922

Name: sata-sata-sil24

Version: 1.1-1vmw.670.0.0.8169922

Type: bootbank

Vendor: VMW

Acceptance Level: VMwareCertified

Summary: sata_sil24: sata driver for VMware ESX

Description: Silicon Image 3124/3132 SATA-2 controllers Driver

ReferenceURLs:

Creation Date: 2018-04-03

Depends: vmkapi_2_3_0_0, com.vmware.driverAPI-9.2.3.0, com.vmware.libata-9.2.3.0

Conflicts:

Replaces:

Provides:

Maintenance Mode Required: True

Hardware Platforms Required:

Live Install Allowed: False

Live Remove Allowed: False

Stateless Ready: True

Overlay: False

Tags: driver, module

Payloads: sata-sat

Determine the available Image Profiles in the depot file.

[nstah@kumala:~] esxcli software sources profile list --depot=file:///vmfs/volumes/VM\ STORAGE/ISO/ESXi670-202210001.zip

Name Vendor Acceptance Level Creation Time Modification Time

-------------------------------- ------------ ---------------- ------------------- -------------------

ESXi-6.7.0-20221004001-standard VMware, Inc. PartnerSupported 2022-09-21T13:36:44 2022-09-21T13:36:44

ESXi-6.7.0-20221001001s-no-tools VMware, Inc. PartnerSupported 2022-09-21T13:36:44 2022-09-21T13:36:44

ESXi-6.7.0-20221004001-no-tools VMware, Inc. PartnerSupported 2022-09-21T13:36:44 2022-09-21T13:36:44

ESXi-6.7.0-20221001001s-standard VMware, Inc. PartnerSupported 2022-09-21T13:36:44 2022-09-21T13:36:44

In this case, I'll use ESXi-6.7.0-20221004001-standard

Test Dry Run Update

[nstah@kumala:~] esxcli software profile update --dry-run --depot=file:///vmfs/volumes/VM\ STORAGE/ISO/ESXi670-202210001.zip --profile=ESXi-6.7.0-20221004001-standard

Update Result

Message: Dryrun only, host not changed. The following installers will be applied: [BootBankInstaller, LockerInstaller]

Reboot Required: true

VIBs Installed: VMW_bootbank_brcmfcoe_11.4.1078.26-14vmw.670.3.159.18828794, VMW_bootbank_ixgben_1.7.1.16-2vmw.670.3.104.16075168, VMW_bootbank_lpfc_11.4.33.26-14vmw.670.3.104.16075168, VMW_bootbank_net-e1000_8.0.3.1-5vmw.670.3.112.16701467, VMW_bootbank_net-vmxnet3_1.1.3.0-3vmw.670.3.104.16075168, VMW_bootbank_nfnic_4.0.0.44-0vmw.670.3.104.16075168, VMW_bootbank_ntg3_4.1.8.0-4vmw.670.3.189.20497097, VMW_bootbank_nvme_1.2.2.28-5vmw.670.3.159.18828794, VMW_bootbank_qfle3f_1.0.25.0.2-15vmw.670.3.104.16075168, VMW_bootbank_sfvmk_1.0.0.1003-7vmw.670.3.104.16075168, VMW_bootbank_vmkusb_0.1-4vmw.670.3.159.18828794, VMW_bootbank_vmw-ahci_2.0.7-2vmw.670.3.143.17700523, VMW_bootbank_xhci-xhci_1.0-3vmw.670.3.185.20491463, VMware_bootbank_cpu-microcode_6.7.0-3.170.19898894, VMware_bootbank_elx-esx-libelxima.so_11.4.1184.2-3.89.15160138, VMware_bootbank_esx-base_6.7.0-3.189.20497097, VMware_bootbank_esx-ui_1.43.10-20199807, VMware_bootbank_esx-update_6.7.0-3.189.20497097, VMware_bootbank_esx-xserver_6.7.0-3.189.20497097, VMware_bootbank_lsu-smartpqi-plugin_1.0.0-4vmw.670.3.159.18828794, VMware_bootbank_native-misc-drivers_6.7.0-3.89.15160138, VMware_bootbank_vmware-esx-esxcli-nvme-plugin_1.2.0.36-2vmw.670.3.116.16713306, VMware_bootbank_vsan_6.7.0-3.189.20235859, VMware_bootbank_vsanhealth_6.7.0-3.189.20235860, VMware_locker_tools-light_12.0.6.20104755-20491463

VIBs Removed: VMW_bootbank_brcmfcoe_11.4.1078.25-14vmw.670.3.73.14320388, VMW_bootbank_ixgben_1.7.1.16-1vmw.670.3.73.14320388, VMW_bootbank_lpfc_11.4.33.25-14vmw.670.3.73.14320388, VMW_bootbank_net-e1000_8.0.3.1-5vmw.670.0.0.8169922, VMW_bootbank_net-vmxnet3_1.1.3.0-3vmw.670.2.48.13006603, VMW_bootbank_nfnic_4.0.0.29-0vmw.670.3.73.14320388, VMW_bootbank_ntg3_4.1.3.2-1vmw.670.1.28.10302608, VMW_bootbank_nvme_1.2.2.28-1vmw.670.3.73.14320388, VMW_bootbank_qfle3f_1.0.25.0.2-14vmw.670.0.0.8169922, VMW_bootbank_sfvmk_1.0.0.1003-6vmw.670.3.73.14320388, VMW_bootbank_vmkusb_0.1-1vmw.670.2.48.13006603, VMW_bootbank_vmw-ahci_1.2.8-1vmw.670.3.73.14320388, VMW_bootbank_xhci-xhci_1.0-3vmw.670.0.0.8169922, VMware_bootbank_cpu-microcode_6.7.0-2.69.14141615, VMware_bootbank_elx-esx-libelxima.so_11.4.1184.1-2.48.13006603, VMware_bootbank_esx-base_6.7.0-3.73.14320388, VMware_bootbank_esx-ui_1.33.4-14093553, VMware_bootbank_esx-update_6.7.0-3.73.14320388, VMware_bootbank_esx-xserver_6.7.0-3.73.14320388, VMware_bootbank_lsu-smartpqi-plugin_1.0.0-3vmw.670.1.28.10302608, VMware_bootbank_native-misc-drivers_6.7.0-2.48.13006603, VMware_bootbank_vmware-esx-esxcli-nvme-plugin_1.2.0.36-2.48.13006603, VMware_bootbank_vsan_6.7.0-3.73.14263135, VMware_bootbank_vsanhealth_6.7.0-3.73.14263064, VMware_locker_tools-light_10.3.10.12406962-14141615

VIBs Skipped: VMW_bootbank_ata-libata-92_3.00.9.2-16vmw.670.0.0.8169922, VMW_bootbank_ata-pata-amd_0.3.10-3vmw.670.0.0.8169922, VMW_bootbank_ata-pata-atiixp_0.4.6-4vmw.670.0.0.8169922, VMW_bootbank_ata-pata-cmd64x_0.2.5-3vmw.670.0.0.8169922, VMW_bootbank_ata-pata-hpt3x2n_0.3.4-3vmw.670.0.0.8169922, VMW_bootbank_ata-pata-pdc2027x_1.0-3vmw.670.0.0.8169922, VMW_bootbank_ata-pata-serverworks_0.4.3-3vmw.670.0.0.8169922, VMW_bootbank_ata-pata-sil680_0.4.8-3vmw.670.0.0.8169922, VMW_bootbank_ata-pata-via_0.3.3-2vmw.670.0.0.8169922, VMW_bootbank_block-cciss_3.6.14-10vmw.670.0.0.8169922, VMW_bootbank_bnxtnet_20.6.101.7-24vmw.670.3.73.14320388, VMW_bootbank_bnxtroce_20.6.101.0-20vmw.670.1.28.10302608, VMW_bootbank_char-random_1.0-3vmw.670.0.0.8169922, VMW_bootbank_ehci-ehci-hcd_1.0-4vmw.670.0.0.8169922, VMW_bootbank_elxiscsi_11.4.1174.0-2vmw.670.0.0.8169922, VMW_bootbank_elxnet_11.4.1097.0-5vmw.670.3.73.14320388, VMW_bootbank_hid-hid_1.0-3vmw.670.0.0.8169922, VMW_bootbank_i40en_1.8.1.9-2vmw.670.3.73.14320388, VMW_bootbank_iavmd_1.2.0.1011-2vmw.670.0.0.8169922, VMW_bootbank_igbn_0.1.1.0-5vmw.670.3.73.14320388, VMW_bootbank_ima-qla4xxx_2.02.18-1vmw.670.0.0.8169922, VMW_bootbank_ipmi-ipmi-devintf_39.1-5vmw.670.1.28.10302608, VMW_bootbank_ipmi-ipmi-msghandler_39.1-5vmw.670.1.28.10302608, VMW_bootbank_ipmi-ipmi-si-drv_39.1-5vmw.670.1.28.10302608, VMW_bootbank_iser_1.0.0.0-1vmw.670.1.28.10302608, VMW_bootbank_lpnic_11.4.59.0-1vmw.670.0.0.8169922, VMW_bootbank_lsi-mr3_7.708.07.00-3vmw.670.3.73.14320388, VMW_bootbank_lsi-msgpt2_20.00.06.00-2vmw.670.3.73.14320388, VMW_bootbank_lsi-msgpt35_09.00.00.00-5vmw.670.3.73.14320388, VMW_bootbank_lsi-msgpt3_17.00.02.00-1vmw.670.3.73.14320388, VMW_bootbank_misc-cnic-register_1.78.75.v60.7-1vmw.670.0.0.8169922, VMW_bootbank_misc-drivers_6.7.0-2.48.13006603, VMW_bootbank_mtip32xx-native_3.9.8-1vmw.670.1.28.10302608, VMW_bootbank_ne1000_0.8.4-2vmw.670.2.48.13006603, VMW_bootbank_nenic_1.0.29.0-1vmw.670.3.73.14320388, VMW_bootbank_net-bnx2_2.2.4f.v60.10-2vmw.670.0.0.8169922, VMW_bootbank_net-bnx2x_1.78.80.v60.12-2vmw.670.0.0.8169922, VMW_bootbank_net-cdc-ether_1.0-3vmw.670.0.0.8169922, VMW_bootbank_net-cnic_1.78.76.v60.13-2vmw.670.0.0.8169922, VMW_bootbank_net-e1000e_3.2.2.1-2vmw.670.0.0.8169922, VMW_bootbank_net-enic_2.1.2.38-2vmw.670.0.0.8169922, VMW_bootbank_net-fcoe_1.0.29.9.3-7vmw.670.0.0.8169922, VMW_bootbank_net-forcedeth_0.61-2vmw.670.0.0.8169922, VMW_bootbank_net-igb_5.0.5.1.1-5vmw.670.0.0.8169922, VMW_bootbank_net-ixgbe_3.7.13.7.14iov-20vmw.670.0.0.8169922, VMW_bootbank_net-libfcoe-92_1.0.24.9.4-8vmw.670.0.0.8169922, VMW_bootbank_net-mlx4-core_1.9.7.0-1vmw.670.0.0.8169922, VMW_bootbank_net-mlx4-en_1.9.7.0-1vmw.670.0.0.8169922, VMW_bootbank_net-nx-nic_5.0.621-5vmw.670.0.0.8169922, VMW_bootbank_net-tg3_3.131d.v60.4-2vmw.670.0.0.8169922, VMW_bootbank_net-usbnet_1.0-3vmw.670.0.0.8169922, VMW_bootbank_nhpsa_2.0.22-3vmw.670.1.28.10302608, VMW_bootbank_nmlx4-core_3.17.13.1-1vmw.670.2.48.13006603, VMW_bootbank_nmlx4-en_3.17.13.1-1vmw.670.2.48.13006603, VMW_bootbank_nmlx4-rdma_3.17.13.1-1vmw.670.2.48.13006603, VMW_bootbank_nmlx5-core_4.17.13.1-1vmw.670.3.73.14320388, VMW_bootbank_nmlx5-rdma_4.17.13.1-1vmw.670.2.48.13006603, VMW_bootbank_nvmxnet3-ens_2.0.0.21-1vmw.670.0.0.8169922, VMW_bootbank_nvmxnet3_2.0.0.29-1vmw.670.1.28.10302608, VMW_bootbank_ohci-usb-ohci_1.0-3vmw.670.0.0.8169922, VMW_bootbank_pvscsi_0.1-2vmw.670.0.0.8169922, VMW_bootbank_qcnic_1.0.2.0.4-1vmw.670.0.0.8169922, VMW_bootbank_qedentv_2.0.6.4-10vmw.670.1.28.10302608, VMW_bootbank_qfle3_1.0.50.11-9vmw.670.0.0.8169922, VMW_bootbank_qfle3i_1.0.2.3.9-3vmw.670.0.0.8169922, VMW_bootbank_qflge_1.1.0.11-1vmw.670.0.0.8169922, VMW_bootbank_sata-ahci_3.0-26vmw.670.0.0.8169922, VMW_bootbank_sata-ata-piix_2.12-10vmw.670.0.0.8169922, VMW_bootbank_sata-sata-nv_3.5-4vmw.670.0.0.8169922, VMW_bootbank_sata-sata-promise_2.12-3vmw.670.0.0.8169922, VMW_bootbank_sata-sata-sil24_1.1-1vmw.670.0.0.8169922, VMW_bootbank_sata-sata-sil_2.3-4vmw.670.0.0.8169922, VMW_bootbank_sata-sata-svw_2.3-3vmw.670.0.0.8169922, VMW_bootbank_scsi-aacraid_1.1.5.1-9vmw.670.0.0.8169922, VMW_bootbank_scsi-adp94xx_1.0.8.12-6vmw.670.0.0.8169922, VMW_bootbank_scsi-aic79xx_3.1-6vmw.670.0.0.8169922, VMW_bootbank_scsi-bnx2fc_1.78.78.v60.8-1vmw.670.0.0.8169922, VMW_bootbank_scsi-bnx2i_2.78.76.v60.8-1vmw.670.0.0.8169922, VMW_bootbank_scsi-fnic_1.5.0.45-3vmw.670.0.0.8169922, VMW_bootbank_scsi-hpsa_6.0.0.84-3vmw.670.0.0.8169922, VMW_bootbank_scsi-ips_7.12.05-4vmw.670.0.0.8169922, VMW_bootbank_scsi-iscsi-linux-92_1.0.0.2-3vmw.670.0.0.8169922, VMW_bootbank_scsi-libfc-92_1.0.40.9.3-5vmw.670.0.0.8169922, VMW_bootbank_scsi-megaraid-mbox_2.20.5.1-6vmw.670.0.0.8169922, VMW_bootbank_scsi-megaraid-sas_6.603.55.00-2vmw.670.0.0.8169922, VMW_bootbank_scsi-megaraid2_2.00.4-9vmw.670.0.0.8169922, VMW_bootbank_scsi-mpt2sas_19.00.00.00-2vmw.670.0.0.8169922, VMW_bootbank_scsi-mptsas_4.23.01.00-10vmw.670.0.0.8169922, VMW_bootbank_scsi-mptspi_4.23.01.00-10vmw.670.0.0.8169922, VMW_bootbank_scsi-qla4xxx_5.01.03.2-7vmw.670.0.0.8169922, VMW_bootbank_shim-iscsi-linux-9-2-1-0_6.7.0-0.0.8169922, VMW_bootbank_shim-iscsi-linux-9-2-2-0_6.7.0-0.0.8169922, VMW_bootbank_shim-libata-9-2-1-0_6.7.0-0.0.8169922, VMW_bootbank_shim-libata-9-2-2-0_6.7.0-0.0.8169922, VMW_bootbank_shim-libfc-9-2-1-0_6.7.0-0.0.8169922, VMW_bootbank_shim-libfc-9-2-2-0_6.7.0-0.0.8169922, VMW_bootbank_shim-libfcoe-9-2-1-0_6.7.0-0.0.8169922, VMW_bootbank_shim-libfcoe-9-2-2-0_6.7.0-0.0.8169922, VMW_bootbank_shim-vmklinux-9-2-1-0_6.7.0-0.0.8169922, VMW_bootbank_shim-vmklinux-9-2-2-0_6.7.0-0.0.8169922, VMW_bootbank_shim-vmklinux-9-2-3-0_6.7.0-0.0.8169922, VMW_bootbank_smartpqi_1.0.1.553-28vmw.670.3.73.14320388, VMW_bootbank_uhci-usb-uhci_1.0-3vmw.670.0.0.8169922, VMW_bootbank_usb-storage-usb-storage_1.0-3vmw.670.0.0.8169922, VMW_bootbank_usbcore-usb_1.0-3vmw.670.0.0.8169922, VMW_bootbank_vmkata_0.1-1vmw.670.0.0.8169922, VMW_bootbank_vmkfcoe_1.0.0.1-1vmw.670.1.28.10302608, VMW_bootbank_vmkplexer-vmkplexer_6.7.0-0.0.8169922, VMware_bootbank_esx-dvfilter-generic-fastpath_6.7.0-0.0.8169922, VMware_bootbank_lsu-hp-hpsa-plugin_2.0.0-16vmw.670.1.28.10302608, VMware_bootbank_lsu-intel-vmd-plugin_1.0.0-2vmw.670.1.28.10302608, VMware_bootbank_lsu-lsi-drivers-plugin_1.0.0-1vmw.670.2.48.13006603, VMware_bootbank_lsu-lsi-lsi-mr3-plugin_1.0.0-13vmw.670.1.28.10302608, VMware_bootbank_lsu-lsi-lsi-msgpt3-plugin_1.0.0-9vmw.670.2.48.13006603, VMware_bootbank_lsu-lsi-megaraid-sas-plugin_1.0.0-9vmw.670.0.0.8169922, VMware_bootbank_lsu-lsi-mpt2sas-plugin_2.0.0-7vmw.670.0.0.8169922, VMware_bootbank_qlnativefc_3.1.8.0-5vmw.670.3.73.14320388, VMware_bootbank_rste_2.0.2.0088-7vmw.670.0.0.8169922

Set host into Maintenance Mode, then perform update

[nstah@kumala:~] esxcli software profile update --depot=file:///vmfs/volumes/VM\ STORAGE/ISO/ESXi670-202210001.zip --profile=ESXi-6.7.0-20221004001-standard

Update Result

Message: The update completed successfully, but the system needs to be rebooted for the changes to be effective.

Reboot Required: true

Reboot to complete update

[nstah@kumala:~] reboot

Check version/build number after upgrade

[nstah@kumala:~] vmware -v

VMware ESXi 6.7.0 build-20497097

How to Setup MariaDB(MySQL) Master-Master Replication

2021-12-26T21:15:00.010+07:00

Specification

Linux1: Ubuntu 18.04 LTS
IP: 10.1.1.10

Linux2: Ubuntu 18.04 LTS
IP: 10.1.1.20

MariaDB: 10.1.48-MariaDB

Install MariaDB

sudo apt update

sudo apt-get install software-properties-common

sudo apt-get install mariadb-server

Stop MariaDB

sudo systemctl stop mariadb.service

Edit /etc/mysql/my.cnf parameter file.

sudo vim.tiny /etc/mysql/my.cnf

linux1 (10.1.1.10)

[mysqld]

bind-address = 10.1.1.10

server_id = 10

report_host = linux1

log_bin = /var/log/mysql/mariadb-bin

log_bin_index = /var/log/mysql/mariadb-bin.index

relay_log = /var/log/mysql/relay-bin

relay_log_index = /var/log/mysql/relay-bin.index

replicate-do-db = testdb

auto_increment_increment = 5

auto_increment_offset = 1

linux2 (10.1.1.20)

[mysqld]

bind-address = 10.1.1.20

server_id = 20

report_host = linux2

log_bin = /var/log/mysql/mariadb-bin

log_bin_index = /var/log/mysql/mariadb-bin.index

relay_log = /var/log/mysql/relay-bin

relay_log_index = /var/log/mysql/relay-bin.index

replicate-do-db = testdb

auto_increment_increment = 5

auto_increment_offset = 1

Note: replicate-do-db to specify which databases to replicate (optional)

Start MariaDB

sudo systemctl start mariadb.service

Create user in both server that will be used for replicating data between servers and grant privileges.

sudo mysql -u root -p

MariaDB [(none)]> create user 'replusr'@'%' identified by 'replusr';

MariaDB [(none)]> grant replication slave on *.* to 'replusr'@'%';

Verify listener bind-address and port

e.g.: in linux1

sudo netstat -ntpl | grep mysql

tcp 0 0 10.1.1.10:3306 0.0.0.0:* LISTEN 1895/mysqld

Start replication in linux1

sudo mysql -u root -p

For MASTER_LOG_FILE and MASTER_LOG_POS use "show master status" information from in linux2.

Show master status linux2

MariaDB [(none)]> SHOW MASTER STATUS;

+--------------------+----------+--------------+------------------+

+--------------------+----------+--------------+------------------+

| mariadb-bin.000004 | 329 | | |

+--------------------+----------+--------------+------------------+

MariaDB [(none)]> STOP SLAVE;

MariaDB [(none)]> CHANGE MASTER TO MASTER_HOST='10.1.1.20', MASTER_USER='replusr', MASTER_PASSWORD='replusr', MASTER_LOG_FILE='mariadb-bin.000004', MASTER_LOG_POS=329;

MariaDB [(none)]> START SLAVE;

Check slave status in linux1

MariaDB [(none)]> SHOW SLAVE STATUS\G;

====================

Start replication in linux2

For MASTER_LOG_FILE and MASTER_LOG_POS use "show master status" information from in linux1.

Show master status linux1

MariaDB [(none)]> show master status;

+--------------------+----------+--------------+------------------+

+--------------------+----------+--------------+------------------+

| mariadb-bin.000007 | 329 | | |

+--------------------+----------+--------------+------------------+

MariaDB [(none)]> STOP SLAVE;

MariaDB [(none)]> CHANGE MASTER TO MASTER_HOST='10.1.1.10', MASTER_USER='replusr', MASTER_PASSWORD='replusr', MASTER_LOG_FILE='mariadb-bin.000007', MASTER_LOG_POS=329;

MariaDB [(none)]> START SLAVE;

Check slave status in linux2

MariaDB [(none)]> SHOW SLAVE STATUS\G;

If everything is OK, it should shown as below

MariaDB [(none)]> SHOW SLAVE STATUS\G;

*************************** 1. row ***************************

Slave_IO_State: Waiting for master to send event

Master_Host: 10.1.1.20

Master_User: replusr

Master_Port: 3306

Connect_Retry: 60

Master_Log_File: mariadb-bin.000004

Read_Master_Log_Pos: 329

Relay_Log_File: relay-bin.000002

Relay_Log_Pos: 539

Relay_Master_Log_File: mariadb-bin.000004

Slave_IO_Running: Yes

Slave_SQL_Running: Yes

Replicate_Do_DB:

Replicate_Ignore_DB:

Replicate_Do_Table:

Replicate_Ignore_Table:

Replicate_Wild_Do_Table:

Replicate_Wild_Ignore_Table:

Last_Errno: 0

Last_Error:

Skip_Counter: 0

Exec_Master_Log_Pos: 329

Relay_Log_Space: 831

Until_Condition: None

Until_Log_File:

Until_Log_Pos: 0

Master_SSL_Allowed: No

Master_SSL_CA_File:

Master_SSL_CA_Path:

Master_SSL_Cert:

Master_SSL_Cipher:

Master_SSL_Key:

Seconds_Behind_Master: 0

Master_SSL_Verify_Server_Cert: No

Last_IO_Errno: 0

Last_IO_Error:

Last_SQL_Errno: 0

Last_SQL_Error:

Replicate_Ignore_Server_Ids:

Master_Server_Id: 20

Master_SSL_Crl:

Master_SSL_Crlpath:

Using_Gtid: No

Gtid_IO_Pos:

Replicate_Do_Domain_Ids:

Replicate_Ignore_Domain_Ids:

Parallel_Mode: conservative

Test Replication

linux1

CREATE DATABASE testdb;

MariaDB [(none)]> create database testdb;

MariaDB [(none)]> show databases;

+--------------------+

| Database |

+--------------------+

| information_schema |

| mysql |

| performance_schema |

| testdb |

+--------------------+

Create table in testdb

CREATE TABLE users (id INT AUTO_INCREMENT, name VARCHAR(30), datum TIMESTAMP DEFAULT CURRENT_TIMESTAMP, PRIMARY KEY(id));

INSERT INTO users(name) VALUES ('Admin');

MariaDB [testdb]> CREATE TABLE users (id INT AUTO_INCREMENT, name VARCHAR(30), datum TIMESTAMP DEFAULT CURRENT_TIMESTAMP, PRIMARY KEY(id));

Query OK, 0 rows affected (0.07 sec)

MariaDB [testdb]> INSERT INTO users(name) VALUES ('Admin');

Query OK, 1 row affected (0.01 sec)

MariaDB [testdb]> select * from users;

+----+-------+---------------------+

| id | name | datum |

+----+-------+---------------------+

| 1 | Admin | 2021-12-26 06:01:31 |

+----+-------+---------------------+

1 row in set (0.00 sec)

If we check on linux2 it should shown the same result and we can also test the same thing on linux2 by add another user on table users

linux2

MariaDB [(none)]> show databases;

+--------------------+

| Database |

+--------------------+

| information_schema |

| mysql |

| performance_schema |

| testdb |

+--------------------+

4 rows in set (0.01 sec)

MariaDB [(none)]> use testdb;

Reading table information for completion of table and column names

You can turn off this feature to get a quicker startup with -A

Database changed

MariaDB [testdb]> INSERT INTO users(name) VALUES ('Guest');

Query OK, 1 row affected (0.01 sec)

linux1

New user Guest that we have added in linux2 replicated in linux1.

MariaDB [testdb]> select * from users;

+----+-------+---------------------+

| id | name | datum |

+----+-------+---------------------+

| 1 | Admin | 2021-12-26 06:01:31 |

| 6 | Guest | 2021-12-26 06:03:23 |

+----+-------+---------------------+

Ref:

http://msutic.blogspot.com/2015/02/mariadbmysql-master-master-replication.html

https://linoxide.com/5-steps-setup-mysql-master-master-replication-ubuntu-16-04/

Centos Yum Install Download Only for Offline Install

2019-12-17T18:28:00.002+07:00

yum install yum-plugin-downloadonly yum-utils createrepo

mkdir /var/tmp/httpd
mkdir /var/tmp/httpd-installroot

yum install --downloadonly --installroot=/var/tmp/httpd-installroot --releasever=7 --downloaddir=/var/tmp/httpd httpd

createrepo --database /var/tmp/httpd

vi /etc/yum.repos.d/offline-httpd.repo

[offline-httpd]
name=CentOS-$releasever - httpd
baseurl=file:///var/tmp/httpd
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7

repoclosure --repoid=offline-httpd

Edit Ubuntu Hosts File to Watch Netflix on IndiHome Network

2019-12-08T19:22:00.004+07:00

Well, Netflix is blocked on my home ISP.
I've try to Setup VPN, but it still not working.
Somehow Netflix blocking some VPN/Data Center IP addresses.

Below work around is working for me, by editing my Ubuntu /etc/hosts file.

$ sudo gedit /etc/hosts

Then add below IPs;

35.166.68.183 netflix.com www.netflix.com
54.208.233.73 netflix.com www.netflix.com
52.204.167.205 netflix.com www.netflix.com
35.169.83.64 netflix.com www.netflix.com
52.71.147.164 netflix.com www.netflix.com
34.234.59.120 netflix.com www.netflix.com
54.165.246.104 netflix.com www.netflix.com
34.229.8.114 netflix.com www.netflix.com
54.87.188.169 netflix.com www.netflix.com

Or we can just use Mozilla Firefox DNS over HTTPS (DoH)

Preference --> Networking Settings (at very bottom of page),
tick "Enable DNS over HTTPS" --> and select Provider, Cloudflare (default).

How To Set Up Your Own IPsec VPN server on Google Cloud Platform

2019-12-07T17:00:00.001+07:00

Setup IPsec VPN Server on Google Cloud Platform.

#1 Setup your free Google Cloud Platform account at cloud.google.com or login if you already have one.

#2 Create New Project.

#3 Create new Linux instance with IP Forwarding enabled

Machine type: f1-micro with (for testing purpose only, choose your own preference)
OS: Ubuntu 18.04 LTS Minimal
Firewall: Allow HTTPS traffic

On network interfaces, click the pencil icon to enable IP Forwarding

#3 Setup VPN Server

For more details you can follow the guide at:
https://github.com/hwdsl2/setup-ipsec-vpn

SSH to your instance and install the L2TP Server,

wget https://git.io/vpnsetup -O vpnsetup.sh && sudo sh vpnsetup.sh

In the end of the installation write down your details below that will be use to setup for VPN client.

VPN_IPSEC_PSK='your_ipsec_pre_shared_key'
VPN_USER='your_vpn_username'
VPN_PASSWORD='your_vpn_password'

#4 Open UDP Port 500 & 4500

#5 Setup your IPsec/L2TP VPN Clients

Detail guide for many kind of devices as below link:
https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients.md

Install L2TP dependencies for Ubuntu 18.04;

sudo apt-get update
sudo apt-get install network-manager-l2tp
sudo apt-get install network-manager-l2tp-gnome

Install WordPress with NGINX and SSL on Google Cloud Platform

2019-12-07T16:03:00.002+07:00

Google Cloud + WordPress with NGINX and SSL.

#1 Setup Google Cloud Platform at cloud.google.com using a free google account.

#2 Deploy "WordPress with NGINX and SSL Certified by Bitnami" from Marketplace.

#3 Create a Static IP Address & Setup Domain Name to point to the website.

#4 Create SSL Certificate & Setup SSL Certificate AutoRenew.

#5 Increase Performance using a CDN (Content Delivery Network). (optional)

#6 Remove Bitnami Banner Ad. (optional)

sudo /opt/bitnami/apps/wordpress/bnconfig --disable_banner 1
sudo /opt/bitnami/ctlscript.sh restart apache

Google Cloud Platform Install Ubuntu Minimal 1804 LTS and GNS3 Server

2019-11-23T14:06:00.000+07:00

How to install Ubuntu Minimal 180.4 LTS and GNS3 Server on Google Cloud Platform (GCP).

I assume you already have a GCP account and create a project.

Now, open your cloud shell.

- To show list image available
gcloud compute images list

gcloud compute images list | grep minimal
ubuntu-minimal-1604-xenial-v20191113 ubuntu-os-cloud ubuntu-minimal-1604-lts READY
ubuntu-minimal-1804-bionic-v20191113 ubuntu-os-cloud ubuntu-minimal-1804-lts READY
ubuntu-minimal-1904-disco-v20191113 ubuntu-os-cloud ubuntu-minimal-1904 READY
ubuntu-minimal-1910-eoan-v20191113 ubuntu-os-cloud ubuntu-minimal-1910 READY

- To show list zones (I'm at Asia)
gcloud compute zones list

gcloud compute zones list | grep asia
asia-east1-b asia-east1 UP
asia-east1-a asia-east1 UP
asia-east1-c asia-east1 UP
asia-southeast1-b asia-southeast1 UP
asia-southeast1-a asia-southeast1 UP
asia-southeast1-a asia-southeast1 UP
asia-northeast1-b asia-northeast1 UP
asia-northeast1-c asia-northeast1 UP
asia-northeast1-a asia-northeast1 UP
asia-south1-c asia-south1 UP
asia-south1-b asia-south1 UP
asia-south1-a asia-south1 UP
asia-east2-a asia-east2 UP
asia-east2-b asia-east2 UP
asia-east2-c asia-east2 UP
asia-northeast2-a asia-northeast2 UP
asia-northeast2-b asia-northeast2 UP
asia-northeast2-c asia-northeast2 UP

Check the best latency for you at http://www.gcping.com/

- Create image that support "Nested Virtualization"
gcloud compute images create nested-virt-minimal \
--source-image-project=ubuntu-os-cloud \
--source-image-family=ubuntu-minimal-1804-lts \
--licenses="https://www.googleapis.com/compute/v1/projects/vm-options/global/licenses/enable-vmx"

- Install new instance using image that we have just created
gcloud compute instances create gns3-server \
--zone asia-southeast1-a \
--image nested-virt-minimal \
--machine-type n1-standard-4

- Show running instance
gcloud compute instances list

- Get static IP, change below IP_ADDRESS to your running instance Ephemeral IP
gcloud compute instances create gns3-server --address IP_ADDRESS

- Update firewall
gcloud compute --project=gns3-tngops firewall-rules create allow-gns3server
--description="Let it all through"
--direction=INGRESS
--priority=100
--network=default
--action=ALLOW
--rules=all
--source-ranges=0.0.0.0/0

Next, SSH to new instance gns3-server.

- To confirm virtualization is working.
lscpu
...
Virtualization : VT-x
Hypervisor vendor : KVM
Virtualization type : full
...

- Install GNS3Server
cd /tmp
curl https://raw.githubusercontent.com/GNS3/gns3-server/master/scripts/remote-install.sh > gns3-remote-install.sh
sudo bash gns3-remote-install.sh --with-iou --with-i386-repository

- Check GNS3 server version
gns3server -v

Done.

Later, we'll continue to how to connect GNS3 GUI to our GCP GNS server.

HTTPS Setup for Bitnami NGINX Web Servers

2019-11-23T11:58:00.000+07:00

How to Setup HTTPS for Bitnami NGINX Web Servers.

Step 1: Install The Lego Client

cd /tmp
curl -Ls https://api.github.com/repos/xenolf/lego/releases/latest | grep browser_download_url | grep linux_amd64 | cut -d '"' -f 4 | wget -i -
tar xf lego*.tar.gz
sudo mkdir -p /opt/bitnami/letsencrypt
sudo mv lego /opt/bitnami/letsencrypt/lego

Step 2: Generate A Let’s Encrypt Certificate For Your Domain

sudo /opt/bitnami/ctlscript.sh stop
sudo /opt/bitnami/letsencrypt/lego --tls --email="EMAIL-ADDRESS" --domains="DOMAIN" --domains="www.DOMAIN" --path="/opt/bitnami/letsencrypt" run

Step 3: Configure The Web Server To Use The Let’s Encrypt Certificate

sudo mv /opt/bitnami/nginx/conf/server.crt /opt/bitnami/nginx/conf/server.crt.old
sudo mv /opt/bitnami/nginx/conf/server.key /opt/bitnami/nginx/conf/server.key.old
sudo mv /opt/bitnami/nginx/conf/server.csr /opt/bitnami/nginx/conf/server.csr.old
sudo ln -sf /opt/bitnami/letsencrypt/certificates/DOMAIN.key /opt/bitnami/nginx/conf/server.key
sudo ln -sf /opt/bitnami/letsencrypt/certificates/DOMAIN.crt /opt/bitnami/nginx/conf/server.crt
sudo chown root:root /opt/bitnami/nginx/conf/server*
sudo chmod 600 /opt/bitnami/nginx/conf/server*

sudo /opt/bitnami/ctlscript.sh start

Step 4: Test The Configuration

try your https://www.DOMAIN

Step 5: Renew The Let’s Encrypt Certificate

To renew
sudo /opt/bitnami/ctlscript.sh stop
sudo /opt/bitnami/letsencrypt/lego --tls --email="EMAIL-ADDRESS" --domains="DOMAIN" --path="/opt/bitnami/letsencrypt" renew --days 90
sudo /opt/bitnami/ctlscript.sh start

Auto-renew
sudo nano /opt/bitnami/letsencrypt/scripts/renew-certificate.sh

#!/bin/bash

sudo /opt/bitnami/ctlscript.sh stop nginx
sudo /opt/bitnami/letsencrypt/lego --tls --email="EMAIL-ADDRESS" --domains="DOMAIN" --path="/opt/bitnami/letsencrypt" renew --days 90
sudo /opt/bitnami/ctlscript.sh start nginx

chmod +x /opt/bitnami/letsencrypt/scripts/renew-certificate.sh

sudo crontab -e

# every month
# 0 0 1 * * /opt/bitnami/letsencrypt/scripts/renew-certificate.sh 2> /dev/null
every two month
0 0 1 JAN,MAR,MAY,JUL,SEP,NOV * /opt/bitnami/letsencrypt/scripts/renew-certificate.sh 2> /dev/null

NOTE: Change DOMAIN and EMAIL-ADDRESS to yours.

Step 6: Force HTTPS

Modify the /opt/bitnami/nginx/conf/bitnami/bitnami.conf

server {
listen 80;
server_name localhost;
return 301 https://$host$request_uri;
include "/opt/bitnami/nginx/conf/bitnami/bitnami-apps-prefix.conf";
}

After modifying the NGINX configuration file:
Open port 443 in the server firewall.
Restart NGINX to apply the changes.

sudo /opt/bitnami/ctlscript.sh restart nginx

Ref:
https://docs.bitnami.com/virtual-machine/how-to/generate-install-lets-encrypt-ssl/
https://docs.bitnami.com/virtual-machine/apps/wordpress-pro/administration/force-https-nginx/

Sharepoint Promoted Link Tiles 3x3

2019-10-31T08:05:00.000+07:00

How display Promoted Link Tiles 3x3 in Sharepoint?

- Add the Promoted links web part to the page.

- Add the Script Editor web part under the Media and Content category.

- Edit Snippet and add the code below

<style>

.ms-promlink-header{

display:none;

}

.ms-promlink-body {

width: 100%;

}

</style>

dmidecode - Checking a Host is VM or Physical One?

2019-07-03T15:17:00.002+07:00

When you are accessing a server via ssh (in this case linux), sometimes you would like to know if the host is a 'vm' or a 'physical' server.

# dmidecode -s system-manufacturer

[VMware Workstation]
dmidecode -s system-manufacturer
VMware, Inc.

[Physical Server]
# dmidecode -s system-manufacturer
HP

Other useful dmidecode commands.

# dmidecode -type {Number}

0 BIOS
1 System
2 Base Board
3 Chassis
4 Processor
5 Memory Controller
6 Memory Module
7 Cache
8 Port Connector
9 System Slots
10 On Board Devices
11 OEM Strings
12 System Configuration Options
13 BIOS Language
14 Group Associations
15 System Event Log
16 Physical Memory Array
17 Memory Device
18 32-bit Memory Error
19 Memory Array Mapped Address
20 Memory Device Mapped Address
21 Built-in Pointing Device
22 Portable Battery
23 System Reset
24 Hardware Security
25 System Power Controls
26 Voltage Probe
27 Cooling Device
28 Temperature Probe
29 Electrical Current Probe
30 Out-of-band Remote Access
31 Boot Integrity Services
32 System Boot
33 64-bit Memory Error
34 Management Device
35 Management Device Component
36 Management Device Threshold Data
37 Memory Channel
38 IPMI Device
39 Power Supply

hpacucli - Checking Serial Number for Failed HDD

2019-06-29T09:55:00.001+07:00

If you do not have access to an iLO to check your failed HDD serial number, you can get it from your host, in this case linux, using hpacucli.

HPACUCLI --> HP Array Configuration Utility CLI

Display Controller and Disk Status
=> ctrl all show config

Smart Array P410i in Slot 0 (Embedded) (sn: 50123456789ABCDE)

array A (SAS, Unused Space: 0 MB)

logicaldrive 1 (273.4 GB, RAID 1+0, Interim Recovery Mode)

physicaldrive 1I:1:1 (port 1I:box 1:bay 1, SAS, 146 GB, OK)
physicaldrive 1I:1:2 (port 1I:box 1:bay 2, SAS, 146 GB, Failed)
physicaldrive 1I:1:3 (port 1I:box 1:bay 3, SAS, 146 GB, OK)
physicaldrive 1I:1:4 (port 1I:box 1:bay 4, SAS, 146 GB, OK)

array B (SAS, Unused Space: 0 MB)

logicaldrive 2 (136.7 GB, RAID 1, OK)

physicaldrive 2I:1:5 (port 2I:box 1:bay 5, SAS, 146 GB, OK)
physicaldrive 2I:1:6 (port 2I:box 1:bay 6, SAS, 146 GB, OK)

SEP (Vendor ID PMCSIERA, Model SRC 8x6G) 250 (WWID: 50123456789ABCED)

Display Serial number for failed HDD
=> ctrl slot=0 pd 1I:1:2 show detail

Smart Array P410i in Slot 0 (Embedded)

array A

physicaldrive 1I:1:2
Port: 1I
Box: 1
Bay: 2
Status: Failed
Last Failure Reason: Hardware error
Drive Type: Data Drive
Interface Type: SAS
Size: 146 GB
Rotational Speed: 10000
Firmware Revision: HPD5
Serial Number: 3NM0FD9900009723E8CM
Model: HP DG146ABAB4
Current Temperature (C): 47
Maximum Temperature (C): 54
PHY Count: 1
PHY Transfer Rate: 3.0Gbps

Other useful hpacucli commands.

hponcfg - Configure iLO IP and Password from Linux

2019-06-22T12:49:00.003+07:00

Make sure hponcfg already installed.

To configure iLO need to prepare a XML script (i.e: ilo-ip-setting.xml) as below,

<RIB_INFO MODE="WRITE" >

<MOD_NETWORK_SETTINGS>

<IP_ADDRESS VALUE = "10.10.10.10"/>

<SUBNET_MASK VALUE = "255.255.255.0"/>

<GATEWAY_IP_ADDRESS VALUE = "10.10.10.1"/>

<PRIM_DNS_SERVER value = "0.0.0.0"/>

<DHCP_ENABLE VALUE = "N"/>

</MOD_NETWORK_SETTINGS>

</RIB_INFO>

</LOGIN>

</RIBCL>

Set IP via hponcfg.
[root@mylnx]# /sbin/hponcfg -f ilo-ip-setting.xml
HP Lights-Out Online Configuration utility
Version 4.6.0 Date 09/28/2015 (c) Hewlett-Packard Company, 2015
Firmware Revision = 1.78 Device type = iLO 2 Driver name = hpilo
<INFORM>Integrated Lights-Out will reset at the end of the script.</INFORM>

Please wait while the firmware is reset. This might take a minute
Script succeeded

To set a password, prepare a XML file something like below,

<RIBCL VERSION="2.0">
<LOGIN USER_LOGIN="xxx" PASSWORD="xxx">
<USER_INFO MODE="write">
<MOD_USER USER_LOGIN="Administrator">
<PASSWORD value="pa$$word"/>
</MOD_USER>
</USER_INFO>
</LOGIN>

</RIBCL>
Note: the <LOGIN> element must be there, but could be anything such above example.

To get current configuration,
[root@mylnx]# /sbin/hponcfg -w myilo.xml
HP Lights-Out Online Configuration utility
Version 4.6.0 Date 09/28/2015 (c) Hewlett-Packard Company, 2015
Firmware Revision = 1.78 Device type = iLO 2 Driver name = hpilo
Management Processor configuration is successfully written to file "myilo.xml"

And we can read our current configuration in the myilo.xml file.
[root@mylnx]# cat myilo.xml

Ref:
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00007610en_us

CVE-2019-11477 SACK Panic (Linux >= 2.6.29)

2019-06-21T18:08:00.001+07:00

Summary:
An integer overflow flaw was found in the way the Linux kernel's networking subsystem processed TCP Selective Acknowledgment (SACK) segments. While processing SACK segments, the Linux kernel's socket buffer (SKB) data structure becomes fragmented. Each fragment is about TCP maximum segment size (MSS) bytes. To efficiently process SACK blocks, the Linux kernel merges multiple fragmented SKBs into one, potentially overflowing the variable holding the number of segments. A remote attacker could use this flaw to crash the Linux kernel by sending a crafted sequence of SACK segments on a TCP connection with small value of TCP MSS, resulting in a denial of service (DoS).

Action:
Option #1
Disable selective acknowledgments system wide for all newly established TCP connections.
# echo 0 > /proc/sys/net/ipv4/tcp_sack

Option #2
To prevent new connections with low MSS sizes using firewalld or iptables.

Red Hat Enterprise Linux 7 and 8 (firewalld).
# firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0 -p tcp --tcp-flags SYN SYN -m tcpmss --mss 1:500 -j DROP
# firewall-cmd --reload
# firewall-cmd --permanent --direct --get-all-rules

Others (iptables)
# iptables -I INPUT -p tcp --tcp-flags SYN SYN -m tcpmss --mss 1:500 -j DROP
# service iptables save

Recommendation
Update kernel versions to the Linux stable releases as recommended by Linux kernel developers (https://www.openwall.com/lists/oss-security/2019/06/17/6)

Acknowledgements
Jonathan Looney (Netflix Information Security)

Ref:
https://access.redhat.com/security/vulnerabilities/tcpsack
https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md

RHEL/CentOS Network Error - Device eth0 does not seem to be present, delaying initialization

2019-02-24T20:28:00.003+07:00

I got below errors while trying to reboot network service,

[root@server ~]# /etc/init.d/network restart
Shutting down interface eth5.715: Removed VLAN -:eth5.715:-
[ OK ]
Shutting down interface eth5: [ OK ]
Shutting down loopback interface: [ OK ]
Bringing up loopback interface: [ OK ]
Bringing up interface eth0: bnx2 device eth0 does not seem to be present, delay
ing initialization.
[FAILED]
Bringing up interface eth2: bnx2 device eth2 does not seem to be present, delay
ing initialization.
[FAILED]
Bringing up interface eth5: [ OK ]
Bringing up interface eth5.715: Added VLAN with VID == 715 to IF -:eth5:-
[ OK ]

To fix this add your HWADDR or MAC address details to your /etc/sysconfig/network-scripts/ifcfg-eth0

[root@server~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0
# Broadcom Corporation NetXtreme II BCM5709 Gigabit Ethernet
DEVICE=eth0
BOOTPROTO=none
ONBOOT=yes
USERCTL=no
HWADDR=XX:XX:XX:XX:XX:XX
IPADDR=x.x.x.x
NETMASK=y.y.y.y
GATEWAY=z.z.z.z

How to access HP’s ILO remote console via SSH TEXTCONS VSP

2019-02-24T20:11:00.000+07:00

Sometimes you need to direct remote the real-box (in this case HP server/iLO) due to remote access issue.
Beside remote console from the web based iLO, you could also access remote console via SSH

Step1 - ssh to the iLO's ip address

[root@server ~]# ssh user@ilo-ip-address
user@ilo-ip-address's password:
User:user logged-in to ILOXXXXXXX.(ilo-ip-address)
iLO 2 Advanced 2.33 at 14:56:47 Mar 20 2018
Server Name: host is unnamed
Server Power: On

</>hpiLO->

Step2 - there were 2 option of iLO ssh remote console, using TEXTCONS or VSP.
Type help for more details,

</>hpiLO-> help
status=0
status_tag=COMMAND COMPLETED

...
...
...

HP CLI Commands:

POWER : Control server power.
UID : Control Unit-ID light.
NMI : Generate an NMI.
VM : Virtual media commands.
VSP : Invoke virtual serial port.
VSP LOG : Invoke virtual serial port data logging.
TEXTCONS : Invoke Remote Text Console on supported platforms.

Trying ssh remote console with TEXTCONS

hpiLO-> TEXTCONS

Starting text console.
Press 'ESC (' to return to the CLI Session.

hpiLO->

Monitor is in graphics mode or an unsupported text mode.

You should get asked for login

Step3 - exit

To exit press [Esc] + [ ( ]

Which is 'Esc' and '(' (open parenthesis)

Subnetting Chart Cheat Sheet

2018-12-02T12:50:00.001+07:00

Subnetting how to;

First of all, get to know the block size!

Look for the network IP

Look for first IP

Look for last IP

Look for the broadcast IP

Number of network/subnet = 2^N

Number of total host = 2^H

Number of total valid host = (2^H) - 2

Note:

N: network bit used

H: host bit used

Linux Performance Analysis - USE Method

2018-05-01T18:52:00.002+07:00

USE Method (by Brendan Gregg)

For every resource, check utilization, saturation, and errors.

Resource: all physical server functional components (CPUs, disks, busses, ...)
Utilization: the average time that the resource was busy servicing work
Saturation: the degree to which the resource has extra work which it can't service, often queued
Errors: the count of error events

--Quick Check

Check system resource usage and running processes by running the ten commands
# uptime
# dmesg | tail
# vmstat 1
# mpstat -P ALL 1
# pidstat 1
# iostat -xz 1
# free -m
# sar -n DEV 1
# sar -n TCP,ETCP 1
# top

--Logs Check

Common logs location
/var/log/auth.log : Authentication logs
/var/log/secure or /var/log/auth.log : Authentication log
/var/log/messages : General message and system related stuff
/var/log/kern.log : Kernel logs
/var/log/cron.log : Crond logs (cron job)
/var/log/maillog : Mail server logs
/var/log/qmail/ : Qmail log directory (more files inside this directory)
/var/log/httpd/ : Apache access and error logs directory
/var/log/lighttpd/ : Lighttpd access and error logs directory
/var/log/boot.log : System boot log
/var/log/mysqld.log : MySQL database server log file
/var/log/utmp or /var/log/wtmp : Login records file
/var/log/yum.log : Yum command log file.

# less /var/log/messages
# more /var/log/messages

Continuous log fail observation
#tail -f /var/log/messages

Search for a term in a file
#grep -i error /var/log/messages

--Services check

Show all installed services
#systemctl list-unit-files

#service --status-all
#service --status-all | more
#service --status-all | less
#service --status-all | grep ntpd

--System info check

Show version
#lsb_release -a

# lshw
# lscpu
# lsblk
# lspci
# fdisk -l

Show kernel modules
#lsmod

List containing your BIOS version and supported modes, your motherboard manufacturer and model number, your CPU technical details and your RAM characteristics
#sudo dmidecode -q

Microsoft Automatic Private IP Addressing (APIPA) - 169.254.0.1-169.254.255.254

2016-09-05T15:02:00.002+07:00

Have you ever get PC automatically change to 169.x.x.x?

If yes, maybe it's because of the APIPA (Microsoft Automatic Private IP Addressing).
When the DHCP server was crash and when the client don't get any IP address from the server, APIPA assign a random IP address from the range 169.254.0.1 through 169.254.255.254 to the host.

Disable APIPA

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces subkey.

Select the string that identifies your adapter, and create a new DWORD Value.
Name the entry IPAutoconfigurationEnabled, and set the value to 0.
If you have multiple adapters, repeat the process for each adapter under the Interfaces subkey

CCTV - Maximum Cable Length for Analog CCTV

2016-06-08T14:35:00.001+07:00

Based on my experience, we can use;

- Cat5e can be used for Video and Power on same time (in one cable) with maximum range 250 ft.

- If more than 250 ft, Cat5e that we use must seperate the video and power cable

- Volt and Amp can't be to low or to high, it'll impact the video quality

...

(250 ft = 75 m)

Copy Search Result on Windows Explorer to Notepad

2016-05-21T09:15:00.000+07:00

Sometimes you do search on windows explorer, and you need to save the search result on notepad.

How to do it?

1. CTRL+A (to select all the result)

2. Hold SHIFT, and do right click then COPY AS PATH

3. And do PASTE on notepad.

How to Access Windows Credential Manager - ShortCut via RUN

2016-03-01T11:21:00.002+07:00

rundll32.exe keymgr.dll, KRShowKeyMgr

Windows Remote End Process - TASKKILL

2016-01-22T10:07:00.001+07:00

TASKKILL /S hostname /U domain\user /P /IM notepad.exe

help;

C:\>TASKKILL /?

Checking Spesific User Access on File Server

2016-01-16T10:24:00.000+07:00

Check access folder for spesific user;
accesschk.exe "it.support1" e:\Shares

Check write access folder only;
Program Files (x86)\accesschk>accesschk.exe -w "it.support1" e:\Shares

The following command reports the accesses that the Power Users account has to files and directories in \Windows\System32:
accesschk "power users" c:\windows\system32

This command shows which Windows services members of the Users group have write access to:
accesschk users -cw *

To see what Registry keys under HKLM\CurrentUser a specific account has no access to:
accesschk -kns austin\mruss hklm\software

To see the security on the HKLM\Software key:
accesschk -k hklm\software

To see all files under \Users\Mark on Vista that have an explicit integrity level:
accesschk -e -s c:\users\mark

To see all global objects that Everyone can modify:
accesschk -wuo everyone \basednamedobjects

help
accesschk /?

https://technet.microsoft.com/en-us/sysinternals/accesschk.aspx

How to Test Magic Jack Working or Not?

2015-12-02T08:02:00.003+07:00

To test your Magic Jack working or not you can test it by calling the special echo-test number:

909-390-0003

If you can cleary hear your voice echo-ing by call it, then your MJ suppose to be working!.

Cracking a Windows 7 Password

2015-11-17T14:25:00.001+07:00

How to crack Win 7 password?

The tricks here is to using sethc, the Sticky Keys Program.

On Windows 7, while we do login there is a way to launch Sticky Keys by repeating press SHIFT 5x or more.

Why don't we replace this Sticky Keys/sethc with other program such as, cmd. :)

So, at start up login we can open command prompt, do password reset for spesific account.. haha :D

Things you need to do:
- Replace the sethc with cmd at windows system32 folder
- After you success open command prompt at start up change spesific user pass;

net user [user_name] *

Done.

ref: http://www.wikihow.com/Crack-a-Windows-7-Password