Saturday, May 23, 2009

Ubuntu Jaunty

I did a clean install this week of Jaunty and as always, it has not failed to impress.

I wanted to get openafs working again, and I dug up these old notes from college I wrote nearly 3 years ago. Surprisingly they still work!

Copy krb5.conf to /etc/krb5.conf

sudo apt-get install krb5-user openafs-krb5

  • change default realm to ACM.UIUC.EDU (case matters)
  • Kerberos servers are kerberos.acm.uiuc.edu and kerberos-1.acm.uiuc.edu
  • admin server is kerberos.acm.uiuc.edu

sudo apt-get install gcc-3.4 build-essential openafs-client

  • AFS Cell = acm.uiuc.edu (case matters)
  • default cache size is fine b/c you aren't going to use it.

sudo apt-get install module-assistant
sudo m-a prepare openafs-modules
sudo module-assistant auto-build openafs-modules
sudo dpkg -i /usr/src/openafs-modules-*.deb

cd /etc/openafs
sudo vim afs.conf

  • add: FNORD="-memcache -stat 10000 -blocks 65536 -chunksize 19"
    This sets a 64MB in-memory cache. If you want to use a disk cache you'll need to make sure that /var/cache/openafs is ext2 and its probably a good idea to dedicate a parition to it.
  • set: OPTIONS=$FNORD

sudo vim afs.conf.client

  • change AFS_DYNROOT=false to true

sudo shutdown -r now "installing openafs"

When the box comes back up, you'll want to kinit userid and then type aklog. All of your afs stuff should be under /afs/clustername.

Sunday, December 21, 2008

Intrepid Ibex

Since Ubuntu Intrepid Ibex has been out for a while now, I thought it would be safe to start evaluating it. I haven't heard any horrible things about it, so we'll see how that goes.

I spent this morning setting up a VM and started building my standard image. I really love dpkg --get-selections and dpkg --set-selections. It allows me to keep somewhat of a standard build when I upgrade to a new version of Ubuntu by doing a diff on my package list from previous versions.

Wednesday, December 17, 2008

Resizing / and qla2xxx cards

I wanted to expand the root partition on our Oracle RAC cluster which is all run from our XIOTech Magnitude (SAN). The servers all have a QLogic card to connect to the SAN. When I fired up the system rescue cd, which contains gparted, the qla2xxx module loads, but the filesystem on the SAN is not recognized. This is what I did to fix it:

uname -r - remember this
rmmod qla2xxx
insmod /lib/modules/kernelversion/kernel/drivers/scsi/qla2xxx/qla2xxx.ko

After that, type in dmesg. You should see some stuff related to [sda] and XIOTech at the very end.

At this point, launch gParted -- and it will automatically recognize your filesystem.

Monday, November 03, 2008

Extended Filesystem ACLs

Our ZCM10 servers have a directory which holds the desktop images. We want our desktop guys to be able to upload to this directory, but without knowing the root password. Extended filesystem ACLs came to mind, and this is how we set it up.

Linux_Admins is a LUM-enabled eDirectory group that the desktop guys are all in.

Also, make sure your partition is mounted with acl support, otherwise this won't work :)


setfacl -R -m g:Linux_Admins:rwx /var/opt/novell/zenworks/content-repo/images


user@host:/var/opt/novell/zenworks/content-repo> ls -l
total 20
drwxrwxr-x 235 zenworks zenworks 4096 2008-10-28 19:47 content
drwxrwxr-x+ 4 zenworks zenworks 4096 2008-10-30 14:09 images
drwxrwxr-x 5 zenworks zenworks 4096 2008-10-21 23:53 system-update
drwxrwxr-x 4 zenworks zenworks 4096 2008-10-29 08:48 tmp

Notice the little plus sign on the images directory permissions? That indicates extended attributes are in place.

user@host:/var/opt/novell/zenworks/content-repo> getfacl images/
# file: images
# owner: zenworks
# group: zenworks
user::rwx
group::r-x
group:Linux_Admins:rwx
mask::rwx
other::r-x

There ya go! In addition to the zenworks group having permissions, the Linux_Admins group now has rwx permission to the images directory.

Sunday, October 05, 2008

Rebuilding my laptop

I was running Linux on my laptop for a while and pretty much lived within virtual machines.
I think down the road it will be possible to run Linux on the desktop in my environment, but right now the older Novell stuff requires Windows to admin it. I put Vista back on my laptop and here is some software that I have installed:

Work:
Office 2007
Blackberry Desktop Manager
Lotus Notes
Aventail
iPass
Groupwise Messenger
VMWare Workstation 6.5
Novell Client for Vista w/ Patch 6
nLite
vLite
Windows AIK
Bart PE
Novell iFolder
iManager Workstation

Standard:
Firefox
Google Talk
Google Earth
Google Chrome
Flash
Java
Better Gmail
Better GReader
Better GCal
Launchy
DownThemAll
Google Toolbar
iMacros
Google Gears
Ultra VNC
Notepad++
Adobe Reader
Picasa
VLC
GIMP
Isorecorder
daemon tools
cdburnerxp
PuTTY
WinSCP
XMing
Filezilla (client and server)
nmap
wireshark
windirstat
TrueCrypt
virtuawin
cutepdf
SyncBack

* This is still a work in progress. I will be modifying this as time goes on.

Saturday, September 20, 2008

gTwitter

I decided to try and get back into Twitter again. This time instead of refreshing a website every 5 minutes or checking my blackberry, I installed gTwitter. I had previously been using Twitux, but I just didn't like it for some reason.

Thursday, September 18, 2008

Remember the Milk

I've been using Remember the Milk to help me keep track of my to-do's at work. I've even gotten another guy to use it as well and we can share lists and assign each other tasks. It is pretty nice for me to be able to see some of the stuff coming in the pipe and where he is at on certain things.

I'll be in Miami for the next 6 days for work, and then a town outside Des Moines, Iowa for 5 days.