Archive for January, 2008

Fail2Ban script to verify configuration

January 11th, 2008

From the comments in the script:

“Created this script after I had several misconfigurations across many servers – this will
use values from the config files for testing – a wrapper for fail2ban-regex and eliminating
late-night, low-on-caffeine human errors in testing your config. Could also be used: after an
update to verify the configuration, run weekly cron, create a fail2ban report..”

Script is here: http://mochabomb.com/software/fail2ban-check.txt

How to mess up your Xen guest (make it nearly useless)

January 8th, 2008

I made some changes to a VBD based Xen server – here’s what not to do:

  1. Use a password in the httpd cert – if I ran xm console server I did not see that prompt – needed to use the vnc/gui to see this – entered it and got closer
  2. Spaces in device names using system-config-network – eg; eth0 was actually saved as "eth0 " – that extra space messed up starting of "eth0" and other network devices. I will bugzilla this one.
  3. Pretty GUI’s are not a sign of weakness – this time it showed me what 6 hours of console hacking did not. Score +1 for the GUI!!!

Network trouble: www.linuxfromscratch.org/pipermail/lfs-support/2003-December/021076.html
solution: cd /etc; find . -print | grep ifcfg – delete any that are easily replaced – I removed all but the primary IP interface.

Mounting xen vbd img files:
http://www.brandonhutchinson.com/Mounting_a_Linux_LVM_volume.html
http://www.novell.com/coolsolutions/tip/19568.html

Now if anyone share how to effectively mount Linux LVM from a server.img file that looks like – I can mount the ext3 boot partition, but not the Linux LVM using lomount or other techniques:

[root@server vm]# fdisk -l /dev/loop0

Disk /dev/loop0: 16.7 GB, 16777216000 bytes
255 heads, 63 sectors/track, 2039 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes

      Device Boot      Start         End      Blocks   Id  System
/dev/loop0p1   *           1          13      104391   83  Linux
/dev/loop0p2              14        2039    16273845   8e  Linux LVM

as Lundberg would say “That would be great”


Mochabomb is Digg proof thanks to caching by WP Super Cache