another thing to adjust after upgrade to Buster. on openvpn endpoint that in it’s config – /etc/openvpn/whatever.conf – had: dh dh1024.pem the vpn service did not start. tail -f /var/log/syslog showed: apparently the new version of openssl no longer accepts 1024 Diffie Hellman group. solution: and change in /etc/openvpn/whatever.conf – from dh dh1024.pem to dh …
i’ve done a routine upgrade to Buster on some server and all went fine… except bind9 no longer started. every attempt to restart it ended up with long waiting and an error message: logs did not contain anything interesting – actually they showed that bind would start and then after ~ a minute was shut …
Continue reading ‘bind9 fails to start after an upgrade to Debian Buster’ »
WordPress restricts types of files you can upload. it not only checks the extension of what you’re adding to the media library but also its mime type. so you cannot fool it by uploading .exe renamed to .jpeg – if you try it, you’ll get an error saying: “Sorry, this file type is not permitted …
Continue reading ‘allowing custom file extensions to be uploaded to wordpress’ »
debian buster brings apparmor. apparmor brings problems – eg it’s too restrictive for libvirt KVM guests and does not allow KVM to create snapshot-related files in VM’s folders. so far i did not find a clean and generic way to address it so i had to disable apparmor for libvirt by adding security_driver = “none” …
i prefer to have strict DROP policy for the outgoing traffic from production servers. let’s encrypt API endpoint is behind Akamai’s CDN and IP address to which acme-v02.api.letsencrypt.org resolves changes frequently. i don’t like playing whack-a-mole every 3 months so i’ve: set up a squid-based proxy server that allows for filtering based on domain names: …
Continue reading ‘let’s encrypt via proxy server under debian’ »
i’ve bricked a cheap home router. i’ve installed a beta of dd-wrt firmware which did not work. raspberry pi gave me serial connection to it.
i got stuck on that one while trying to migrate action pack account to the new MS Partner Center. without the migration it would not let me renew. after 3 attempts i ended up talking with someone competent who found that this error might occur for users who have o365-hosted mails for domain used in …
does your kvm VM feel sluggish? mine did feel pretty slow.. as it turned out virt-install quietly overrode ‘hvm’ preferences and created a fully emulated qemu vm when it failed to make use of hardware-assisted virtualization.
prepare the floppy image file that later can be mounted via AMT, include in it just the bios update file – in my case it was PET20A18.exe from here. once the file is ready use the Manageability Commander Tool > Remote Control > Take control mount such img file as a virtual, oversize floppy. Using …
Continue reading ‘bios upgrade on Dell PowerEdge T20 via AMT’ »
we’ve run out of the office space in one of the locations. in short term it was not possible to find a suitable and large enough place to rent so we had to split and relocate some of the staff to another building few kilometers away. it’s possible that we’ll shuffle people and servers between …
Continue reading ‘bridging lan segments across untrusted links’ »
at work i’m using mysql replication quite extensively. first it was a straightforward one-way replication that has been rock-solid for us since 2009. in 2012, for another type of data, we’ve started using master-master setup. initially the servers were in different European countries, eventually the secondary site was moved to North America while primary one …
Continue reading ‘multi-master mysql replication with servers on 3 different continents’ »
idrac gives you “RED006: Unable to download Update Package” and plenty of headaches during updates? it happened to me while jumping over few updates and going straight from 2.41.40.40 to 2.52.52.52. no amount of racadm racreset would help. upgrading first to 2.50.50.50 and only then to 2.52.52.52 did the trick for me.
i’ve run into an issue where windows 10 desktop could not anymore access a simple samba share on a linux server; that linux server did not have any type of authorization put in place. Windows would randomly give errors ” might not have permission to use this network resource” or “Windows cannot access \\Server\ShareYou do …
i’ve been running a set of production MySQL databases on BTRFS since April 2016. BTRFS is not exactly known for its stellar performance when hosting databases or images of virtual machines due to its COW nature. why would i do it then? to have data snapshots and be able to ‘go back in time’ quickly …
few weeks ago i’ve done a general firmware upgrade of 2 identical Dell Poweredge r620 servers. a while later i’ve noticed that one of them had really sluggish performances. i’ve noticed that /proc/cpuinfo has shown CPU frequencies of hundreds of MHz rather than thousands. cat /proc/cpuinfo |grep MHz gave me 16 rows of values between …
Continue reading ‘E5-2643 in r620 stuck at a very low cpu frequency’ »
lxc containers no longer start after i’ve upgraded debian stretch server from 4.12 kernel from stretch-backports repository to 4.13 also from backports. symptoms in /var/log/syslog: that was resolved by creating /etc/systemd/network/99-default.link with: via this comment. then there was nothing interesting in syslog but the lxc guest still would not start – lxc-start -F -n serverName …
i use ghettoVCB to take backups of vmware esxi 6.5 vms. data is copied to a nfs share hosted on Debian Linux. for over a year i used btrfs partition as an underlying datastore for the nfs share. and i just could not get it to work for backups which size larger than available RAM …
Continue reading ‘btrfs and nfs dont play nicely together’ »
i’ve moved a linux router from 9yo physical box to a vm running under esxi 6.5. it’s a designated master in pair of master / slave managed by ucarp. it took me a while to figure out why it was not working – why didn’t the slave ‘see’ the master machine? as it turned out …
after upgrade to debian stretch i had to add the following firewall entries: for the FTP servers: for the nat-routers between FTP servers and FTP clients: for the FTP clients: related articles: https://home.regit.org/netfilter-en/secure-use-of-helpers/
on 2017-10-12 i’ve done a routine apt-get update; apt-get upgrade on a debian stretch vm that, among other services, runs opendkim service that adds a digital signature in the headers of the outgoing mails. during the update i was asked weather to keep or replace the /etc/opendkim.conf; as usual in such cases i’ve answered no …
Continue reading ‘opendkim failing to start after recent routine debian update’ »