sys64738

aix

2013-06-07T11:45:55+00:00

chsec -f /etc/security/lastlog -s -a unsuccessful_login_count=0 mktcpip -i en2 -h power1 -g 192.168.2.2 -a 192.168.4.6 -m 255.255.255.0 | | | | Interface Gateway Address Netmaskchdev -l en0 -a alias=192.168.1.1,255.255.255.0chdev -l en0 -a delalias=192.168.1.1,255.255.255.0 perl -e 'use LWP::Simple; getprint($ARGV[0]);' > file.iso

building_and_signing_rpm_packages

2011-09-26T13:24:53+00:00

Create RPM build environment # yum install rpm-build Build the needed directories. # mkdir -p /usr/src/redhat/{BUILD,RPMS,SOURCES,SPECS,SRPMS} Create SPEC file Place spec file in /usr/src/redhat/SPECS Example: Summary: Check for simple HW errors Name: hw-check Version: 1.0 Release: 0 License: GPL Group: Applications/Internet Vendor: Buildroot: %{_tmppath}/hw-check-%{version} BuildArch: noarch

cluster_ssh

2011-06-01T12:58:35+00:00

Same SSH session to multiple servers cssh Global config file in /etc/clusters

copy_files_with_rsync

2012-02-17T19:21:45+00:00

rsync can be used for both local and remote file transfer. This example will copy the file testfile to the /tmp folder. If the transfer is interrupted transfer will be resumed if command is applied again. rsync -haP --append testfile /tmp/ -h output numbers in a human-readable format -a archive mode; equals -rlptgoD -P = --progres --partial Where --progress show progress during transfer --partial keep partially transferred files

create_new_mysql_user

2012-03-22T11:10:51+00:00

First create user: CREATE USER ''@'' IDENTIFIED BY 'clear text password>'; or CREATE USER ''@'' IDENTIFIED BY PASSWORD ''; Grant some rights to the user (here all as * is used):

deprecated_linux_networking_commands_and_their_replacements

2012-05-10T11:28:07+00:00

Doug Vitale has done a splendid article. Further comments not needed. I still strugle to get ifconfig and netstat out of my fingers..... alias ifconfig="echo No no. Use ip" alias netstat="echo No way. Use ss or ip"

determine_engine_type_for_all_tables

2011-06-01T12:58:35+00:00

mysql> SELECT TABLE_NAME, ENGINE FROM information_schema.TABLES;

determine_firmware_model_version

2011-09-19T12:20:47+00:00

Kernel driver version: modinfo Model and OBP version: prtdiag -v For detailed HBA info fcinfo hba-port To show Sun/Qlogic HBA's luxadm qlgc

determine_network_driver_in_use

2011-08-22T08:03:49+00:00

ethtool -i can be eth0 etc. Example output: driver: e1000\\ version: 7.3.21-k4.1-NAPI\\ firmware-version: N/A\\ bus-info: 0000:02:00.0 The bus-info can be coupled with lspci lspci -s -v "2:" Where 2: is taken from ethtool bus-info.

determine_public_ip

2013-04-08T15:50:10+00:00

If one is behind a NAT device determine your public IP: wget -qO - whatismyip.org alternative wget http://ipecho.net/plain -O - -q ; echo

disk_usage_by_size_order

2013-01-30T12:50:34+00:00

du -sk /var/crash/* | sort -n du | sort -nr | cut -f2- | xargs du -hs | head -10 find . -type f -name "*.dbf" -print0 | xargs -0 du -ch

encrypt_file_container_with_cryptsetup-luks

2011-06-01T12:58:35+00:00

Make sure you have the package cryptsetup-luks installed. As root. Prepare an empty file container. Here 10MB. # dd if=/dev/zero of=encrypted_file.bin bs=1024k count=10 Find the first available loop device: # losetup -f /dev/loop0 Map file container with loop device (in this case /dev/loop0):

generate_cpu_load

2012-03-23T13:56:57+00:00

A few ways to generate high CPU load from command line. Does not need any particular application installed. In case CPU got more cores, start one session pr. core md5sum < /dev/urandomwhile : ; do sh -c '`yes`' ; donecat /dev/urandom | gzip > /dev/nullwhile true ; do openssl speed ; done

generate_hashed_password_string

2013-11-14T09:27:38+00:00

If you manually want to change the password field in the shadow file, the md5 hashed string can be generated like this: # openssl passwd -1 Where the parameter is the password in clear text. Output will be a md5 hashed string like this: $1$t/Y0/ENi$PccO/XwuuZb4q/uhfh4Yf0 For RHEL6 following python code can be used:

hot_add_memory_cpu_for_vmware_linux_guests

2011-12-07T09:49:16+00:00

Hot add Memory Add memory via the vSphere Client / Virtual Machine properties. For RHEL 5 add the memory and make the new memory online (available for the kernel). echo "online" > /sys/device/system/memory/memoryX/state Alternatively use the script found in the link.

hp_rpm_repository

2011-06-01T12:58:35+00:00

As I sometime install RedHat to some HP servers it's nice to know how to add the HP SW repository. Download and install HP GPG key: cd /tmp wget http://downloads.linux.hp.com/SDR/downloads/ProLiantSupportPack/GPG-KEY-ProLiantSupportPack rpm --import GPG-KEY-ProLiantSupportPack Add the repository so yum can find it. Create a repository file and add RPM location.

installing_doku_wiki

2011-06-17T06:52:17+00:00

Not the easiest task in the world. By default dokuwiki webpages in Fedora 15 is only accessible for localhost. In order to make dokuwiki webpages global readable and to make it a named virtual host add/change following in /etc/httpd/conf.d/dokuwiki.conf. Change the ServerName and ServerAlias to suit your needs.

installing_fedora_16

2013-11-08T09:06:37+00:00

Please note: No guarantees it will work for you. Activate RPMfusion repositories: su -c 'yum localinstall --nogpgcheck http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-stable.noarch.rpm http://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-stable.noarch.rpm'yum install bluefish yum install smplayer yum install clusterssh yum install k3b-extras-freeworld yum install gstreamer-plugins-bad gstreamer-ffmpeg gstreamer-plugins-ugly yum install kate yum install keepa…

installing_red_hat_from_nfs_server

2012-03-26T14:33:36+00:00

Place your kickstart file on the NFS server. NFS share must - of course - be readable by the server you want to install. Boot on Red Hat ISO image. Press esc key to return to boot: prompt enter the NFS server IP and path to kickstart file boot: linux ks=nfs::// hostname= Press enter and enjoy installation of Red Hat server

interface_bonding

2012-05-30T10:21:32+00:00

Bonding two network interfaces in active/passive configuration Directory /etc/sysconfig/network-scripts ifcfg-bond0: DEVICE=bond0 IPADDR= NETMASK= GATEWAY= ONBOOT=yes BOOTPROTO=none USERCTL=no BONDING_OPTS="mode=1 miimon=100" TYPE=Ethernet ifcfg-eth0: DEVICE=eth0 BOOTPROTO=none …

iso_handling

2011-06-01T12:58:35+00:00

A lot of dvd/cd burning programs exists for Linux. Here is the ones I use for Fedora. Burn a ISO image to DVD-RW Find the scanbus device cdrecord -scanbus If a RW media is used it needs to be erased: cdrecord blank=fast dev=5,0,0 Use the device found with scanbus

itm_agent

2011-11-01T08:43:58+00:00

For some strange reason IBM does not supply the 6.2.2 ITM Linux agent as RPM package(s). Instead a tremendous number of files with a size of 2.7G is supplied! If SE-Linux in enabled IBM suggests to disable SE-Linux! But hang on there is help in the darkness :-)

kernel_module_information

2011-06-01T12:58:35+00:00

List loaded modules # lsmod Detailed module information # modinfo

linux_goodies

2019-06-27T11:15:19+00:00

A collection of nice Linux commands/tips & Tricks. Mostly for Red Hat and Red Hat based distributions. * Building and signing RPM packages * Cluster SSH * Deprecated Linux networking commands and their replacements * Determine network driver in use

list_harddrive_information

2011-06-18T10:27:32+00:00

List harddrive serial number This command is only applicable for ccis Hardware Raid Controller (Smart Array controller from HP) List information for disk “0”: # smartctl -d cciss,0 -a /dev/cciss/c0d0 To list information for disk “1”: # smartctl -d cciss,1 -a /dev/cciss/c0d0 You might have to adjust device number and disk reference (c0d0) to suit your needs.

list_webserver_information

2013-11-20T15:36:24+00:00

In case you want to determine webserver and OS information for a given site use curl or wget. Some sites will reveal a lot of information some is not so informative. # curl -I http://# wget --server-response --spider http:// https can be used as well

local_red_hat_repository

2011-11-18T13:50:04+00:00

Download and Install mrepo RPM from yum localinstall --nogpgcheck mrepo-0.8.8-0.pre1.el6.rft.noarch.rpm Edit /etc/mrepo.conf to suit your needs: ### Configuration file for mrepo ### The [main] section allows to override mrepo's default settings\\ ### The mrepo-example.conf gives an overview of all the possible settings\\ [main] srcdir = /var/www/html/yum/mrepo wwwdir = /var/www/html/yum/repo confdir = /etc/mrepo.conf.d arch = x86_64 # Default is sha256. RHEL5 …

lvm_handling

2017-04-16T23:50:41+00:00

Prepare new disk/VolumeGroup/Logical Volume Add disk/LUN to server. Have a look at Rescan SCSI bus for scanning the SCSI bus online. Alternative reboot the server. Prepare PV's with pvcreate /dev/ For FC LUN's use /dev/mapper/mpath according to Red Hat DM Multipath Configuration & Administration

make_snmp_quiet_in_messages_log

2011-08-31T12:53:10+00:00

SNMP daemon will by default generate a lot of noise in /var/log/messages: Aug 28 04:08:50 snmpd[3664]: Connection from UDP: []:1921 Aug 28 04:10:22 last message repeated 3 times Aug 28 04:11:25 last message repeated 50 times Aug 28 04:11:41 last message repeated 33 times

misc_nix_goodies

2011-10-15T08:07:43+00:00

* Disk usage by size order * Simple vi/vim handling * X over SSH with sudo/su * Remove files/directories with strange names

multipath_handling

2012-10-11T08:56:57+00:00

* Check the fstab for the devices that has to be removed. * Be sure to unmount them! * Check that you have uncommented or removed all ref. in /etc/fstab to the SAN LUN (Volume Group / Logical Volume) * If LVM is used: a. Remove the logical volumes

mysql

2011-06-01T12:58:36+00:00

* Determine Engine type for all tables * Create new MySQL user

nfs_server_and_client_configuration

2012-01-10T15:10:45+00:00

NFS server Install following packages: yum install nfs-utils rpcbind Make sure services start at boot: chkconfig nfs on chkconfig nfslock on chkconfig rpcbind on Start services: service nfs start service nfslock start service rpcbind start Create proper /etc/exports

oracle

2012-08-29T06:48:16+00:00

Log into Oracle sqlplus '/ as sysdba' Show control files select name from v$controlfile; Show log files select member from v$logfile; Show data files select file_name from dba_data_files order by file_name asc; Show Oracle status select status from v$instance; select * from v$instance; Show Oracle version select * from v$version;

outgoing_mails_from_postfix_to_relayhost

2011-06-24T13:15:37+00:00

In order to let another mail server handle your outgoing mail traffic you need basically two things: Relayhost should allow your server to relay mails to it (not in this description) Postfix should forward all mails to relayhost. Edit /etc/postfix/main.cf add following line

port_scanning

2019-06-27T12:41:14+00:00

timeout 1 bash -c "/" && echo Port open. || echo Port closed

prevent_ssh_brute_force_attacks

2011-11-25T13:24:04+00:00

If you see a lot of these messages in /var/log/secure you might consider blocking SSH based on time and source IP. sshd[30138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.188.7.185 user=root sshd[30138]: Failed password for root from 119.188.7.185 port 9482 ssh2 Received disconnect from 119.188.7.185: 11: Bye Bye Invalid user oracle from 119.188.7.185 input_userauth_request: invalid user oracle pam_unix(sshd:auth): check pass; user unknown…

process_start_date_and_time

2012-09-07T08:43:38+00:00

# ps -eo pid,lstart,cmd Example Output: PID STARTED CMD 1 Wed Dec 28 16:30:48 2011 init [3] # (cat /proc//environ; echo) | tr "\000" "\n" Example output: (cat /proc/27704/environ; echo) | tr "\000" "\n" TERM=xterm PATH=/sbin:/usr/sbin:/bin:/usr/bin PWD=/ LANG=en_US.UTF-8 SHLVL=2 _=/usr/sbin/yum-updatesd # (cat /proc//cmdline Example output: # cat /proc/27704/cmdline;echo /usr/bin/python-tt/usr/sbin/yum-updatesd

prtdiag_hanging_solaris_10

2011-06-01T12:58:36+00:00

Kill all hanging prtdiag sessions pkill prtdiag Restart The Platform Information and Control Library (PICL) daemon svcadm restart picl Re-Run prtdiag -v

raid_controller_utils

2014-10-22T10:05:05+00:00

HP has replaced command tool hpacucli with hpssacli for later versions of HP Raid Controllers. This is really stupid done by HP. The genius changing a command name should be punished by whip. In order to get my existing scripts to work, I have created a soft link from hpacucli -> hpssacli in /usr/sbin.

re-read_partition_table

2011-06-01T12:58:36+00:00

Re-read the partition table without rebooting Linux system partprobe Alternatively : hdparm -z /dev/sda sfdisk -R /dev/sda

read_comma_separated_file_csv_within_bash_script

2012-10-25T08:51:11+00:00

#!/bin/bash IFS=, while read field1 field2 do echo "field1 : $field1" echo "field2 : $field2" done < filename.csv References

remove_files_directories_with_strange_names

2011-06-01T12:58:36+00:00

You sometime encounter files/directories with none printable characters in the name. In order to remove such files/directories use the inode reference. First find the inode of the file/directory ls -il Output (example): 73302 drwx------. 2 root root 4096 May 14 14:10 05??

rescan_scsi_bus

2011-10-03T11:50:08+00:00

There is no need to reboot in order to rescan SCSI/FC bus Rescan SCSI bus echo "- - -" > /sys/class/scsi_host/host<#>/scan If many hosts exists take them in one go: for hosts in /sys/class/scsi_host/*; do echo "- - -" > $hosts/scan ; done echo "1" > /sys/class/fc_host/host#/issue_lip If several hosts exists take them in one go:

san_fc

2013-12-18T12:40:27+00:00

Determine FC ID (WWN) RHEL 4.x or earlier To find the WWN run the cat /proc/scsi/adapter_type/n command, where adapter_type is the host adapter type, and n is the host adapter number for your card. In most cases, the adapter type is qla2xxx. cat /proc/scsi/adapter_type/ RHEL 5.x or later The adapter WWN information can be found:

san_lun_id_s_-_ibm_sdd

2011-06-01T12:58:36+00:00

# /opt/IBMsdd/bin/datapath query device | grep Serial | sort -u Serial: 600507680181826FB800000000000079 Serial: 600507680181826FB80000000000007A Serial: 600507680181826FB80000000000007B Serial: 600507680181826FB80000000000007C

san_san_lun_information

2012-11-08T10:04:02+00:00

List the multipathing support mpathadm list mpath-support mpath-support: libmpscsi_vhci.so Choose the mpath support name from the output list List the multipathing support properties mpathadm show mpath-support libmpscsi_vhci.so mpath-support: libmpscsi_vhci.so Vendor: Sun Microsystems Driver Name: scsi_vhci Default Load Balance: round-robin Supported Load Balance Types: round-robin logical-block Allows To Activate Target Port Gr…

script_to_determine_red_hat_fedora_version

2011-08-15T11:40:21+00:00

Note only for Red Hat or Fedora Ditribution DIST=$(sed s/\ release.*// /etc/redhat-release) Version including minor version VER=$(sed s/.*release\ // /etc/redhat-release | sed s/\ .*//) Major version only MAJOR=$(sed s/.*release\ // /etc/redhat-release | awk -F. '{print $1}')

security_enhanced_linux

2011-11-24T13:38:48+00:00

Never turn off Security Enhanced Linux without a hard fight!! Peter Boysen From the maintainer of the targeted policy: SELinux is all about labeling - Dan Walsh Determine changed booleans # cat /etc/selinux/targeted/modules/active/booleans.local Determine changed file contexts # cat /etc/selinux/targeted/modules/active/file_contexts.local # cat /etc/selinux/targeted/contexts/files/file_contexts.local

serial_communication

2011-06-01T12:58:36+00:00

Following small apps can be handy: minicom miniterm.py cu -l /dev/ttyS0 -s 9600 (com1 - 9600 Baud) cu command is a component of the uucp rpm.

simple_user_handling

2011-06-01T12:58:36+00:00

Create user, user directory and add comment: useradd -c "Comment" -m Force change of password at next login: chage -d 0 Force locking of user account: passwd -l

simple_vi_vim_handling

2012-01-12T12:39:10+00:00

Line numbers Show line numbers: :set nu “Unshow” line numbers: :set nonu Vim show line numbers with F12 shortcut Add show/unshow line numbering in vim (F12 key) Add following to /etc/vimrc nmap :set number! Search and replace Current line = .

solaris_goodies

2011-06-21T08:04:59+00:00

* SVM needs maintenance * SAN LUN ID's - IBM SDD * SAN / SAN LUN information * Determine Firmware/Model version * prtdiag hanging / Solaris 10 * Solaris user handling

solaris_user_handling

2011-06-01T12:58:36+00:00

Force change of password at first login passwd -f

sorting

2014-10-09T09:50:33+00:00

sort -t . -k 1,1n -k 2,2n -k 3,3n -k 4,4n

ssl_handling_with_openssl

2013-12-05T11:44:12+00:00

Generate private key Generate private key with a bit lenght of 2048. 2048 bits is minimum for this time of writing. openssl genrsa -out 2048 Generate CSR Generate CSR (Customer Signing request) using private key. openssl req -new -key -out Fill out questions when asked. CN is very important. Provide CSR to CA for signing.

start

2015-04-12T17:24:53+00:00

This wiki is most about Linux/Unix stuff but all respect to the good old C64.. Linux Goodies Solaris Goodies Misc *NIX Goodies MySQL Oracle AIX Greetings from Peter Boysen alias pebo.

static_route

2012-03-08T13:20:47+00:00

Add pesistence static route In this case the interface is called eth0. Same procedure with bonded interfaces. Eg. bond0 /etc/sysconfig/network-scripts/route-eth0: GATEWAY0=192.168.1.254 NETMASK0=255.255.255.0 ADDRESS0=192.168.55.0 GATEWAY1=10.164.234.112 NETMASK1= 255.255.255.240 ADDRESS1=10.164.234.132 Alternative use this notation in route-eth0:

svm_needs_maintenance

2011-06-01T12:58:37+00:00

# metastat d200 d200: Mirror Submirror 0: d201 State: Needs maintenance Pass: 1 Read option: roundrobin (default) Write option: parallel (default) Size: 209682432 blocks d201: Submirror of d200 State: Okay Size: 209682432 blocks Stripe 0: Device Sta…

tcpdump

2011-10-14T13:48:19+00:00

DHCP Filter on DHCP messages: tcpdump -i eth0 -n port 67 and port 68

time_calculations

2013-09-19T08:17:21+00:00

Epoch time calculations Days since Epoch echo $(date +%s)/86400 | bc echo $(($(date +%s)/86400)) let days=$(date +%s)/86400 ; echo $days Days since Epoch without GNU date If perl is installed: perl -e ' $days=int(time()/86400);print "$days\n"; ' Current Epoch time on system without GNU date perl -e 'print time(), "\n" ' Convert from Epoch to date with GNU date date -d @ Example: date -d @1368023418 Wed May 8 16:30:18 CEST 2013 Convert from Epoch to date with perl perl -e "print …

tmux

2011-10-05T12:44:32+00:00

This is my ~.tmux.conf in order to use konsole scroll bar set -g terminal-overrides 'xterm*:smcup@:rmcup@' In order to use Control+Arrow for forward/previous word in tmux, you need to add following to your /etc/inputrc: # for tmux "\C-[OD" backward-word "\C-[OC" forward-word

tsm_handling

2013-06-25T10:40:24+00:00

Restore Restore include inactive files. Pick from list. dsmc restore -inactive -pick Query List available management classes. dsmc query mgmtclass List default management class Name and detailed information about all management classes.

udev_handling

2013-05-16T08:58:02+00:00

Reload udev rules without rebooting udevadm control --reload-rules If udev has been stopped: start_udev Retrigger udev: udevadm trigger

update_tsm_and_cfg2html

2011-06-01T12:58:37+00:00

Record TSM-server & Node name: # cat /opt/tivoli/tsm/client/ba/bin/dsm.sys Remove old TSM client: # yum remove TIVsm-BA-* TIVsm-API-* TIVsm-API64-* Remove old TSM config files # rm /opt/tivoli/tsm/client/ba/bin/* Disable old backup jobs in cron crontab -e (delete all lines related to backup)

update_vmware-tools

2013-01-18T15:55:41+00:00

Uninstall old vmware tools # locate vmware-uninstall-tools.pl # ./Uninstalling the tar installation of VMware Tools. Stopping VMware Tools services in the virtual machine: Guest operating system daemon: [ OK ] Unmounting HGFS shares: [ OK ] Guest filesystem driver: [ OK ] Guest memory manager: [ OK ] File /etc/X11/xorg.conf is backed…

user_login_information

2012-04-30T12:49:16+00:00

Last show listing of last logged in users last username pts/0 192.168.1.1 Fri Apr 27 13:30 - 13:30 (00:00) username pts/0 192.168.1.1 Fri Apr 27 13:29 - 13:29 (00:00) username pts/0 192.168.1.1 Fri Apr 27 13:28 - 13:28 (00:00) reboot system boot 2.6.32-220.13.1. Fri Apr 27 13:27 - 13:31 (3+00:03) username pts/0 192.168.1.1 Fri Apr 27 13:02 - down (00:21) root tty1 Fri Apr 27 11:07 - 11:07 (0…

vpn_using_vpnc

2011-06-01T12:58:37+00:00

The company I'm working for is using a Cisco VPN concentrator for ingoing VPN connections to the company. Using VPNC it's possible to connect from your Linux Fedora client. With fedora 14 VPNC is supplied as a NetworkManager plugin in package NetworkManager-vpnc. I have although not been able to get a working VPN connection using the VPNC NetworkManager plugin. But VPNC is working from the command line......

x_over_ssh

2012-04-17T13:47:33+00:00

Following packages must be installed: xorg-x11-utils xorg-x11-xauth xorg-x11-apps (will provide xclock) Log into server: ssh -X @ Test X xclock A small X-window with analog clock should be displayed. If sudo or su needs to be executed consult this page X over SSH with sudo/su

x_over_ssh_with_sudo_su

2011-06-01T12:58:37+00:00

X over SSH is a nice feature which allow the X traffic to be encrypted in the SSH tunnel. Executing su / sudo will although break the X traffic and result in a error X11 connection rejected because of wrong authentication. X connection to localhost:10.0 broken (explicit kill or server shutdown).

yum_rpm_handling

2013-09-27T10:55:12+00:00

List query tags rpm --querytags List package that provide file rpm -q --whatprovides Example: rpm -q --whatprovides /usr/bin/lsscsi lsscsi-0.23-2.el6.x86_64 List files provided by installed rpm package rpm -ql *package* List files provided by rpm package placed in current folder rpm -qlp *package* List scripts provided by installed rpm package rpm -q --scripts *package* List scripts provided by rpm package placed in current folder rpm -qp --scripts *package* List package vendors …