Skip to main content

Posts

"Error getting authority: Error initializing authority: Could not connect: No such file or directory (g-io-error-quark, 1)"

"Error getting authority: Error initializing authority: Could not connect: No such file or directory (g-io-error-quark, 1)" One issue that may cause this to arise is if you managed to break your /etc/fstab We had an engineer add a line with the intended options of "nfsvers=3" but instead added "-onfsvers=3" and it broke the system fairly catastrophically.

Flashing a Pixel C

WARNING!!!! When you lock the bootloader.. it erases the damn device! Ugh... Anyhow.... To enable USB stuff.. Go to System | Build... tap build 7 times, click back... Developer options.. and somewhere in there you can unlock the bootloader and enable USB  # adb reboot bootloader -- The device will reboot...  then... # fastboot flashing lock

update snmp engineID to human readable value

If.. for whatever reason... you need a human readable snmp engineID [root@zion snmp]# grep -i engin /etc/snmp/snmpd.conf exactEngineID "thisIsATest" engineIDType 3 [root@zion snmp]# systemctl restart snmpd [root@zion snmp]# grep -i engi /var/lib/net-snmp/snmpd.conf engineBoots 1 oldEngineID "thisIsATest"

GDM Autologin (revisited)

The following is the configuration for that. 1) install RHEL7.3 with minimum install 2) install gdm and dependencies 3) install motif, xterm, xorg-x11-fonts-*, xorg-x11-server-Xorg and xorg-x11-xinit-session 4) systemctl set-default graphical.target 5) create /root/.Xclients  (This is called from /etc/X11/xinit/xinitrc) ----------- #!/bin/sh xclock -geometry +0+0 & xterm -ls & exec /usr/bin/mwm -multiscreen ------------ 6) create /root/.xsession  (This is called from /usr/libexec/xinit-compat) ------------ #!/bin/sh exec /etc/X11/xinit/xinitrc ------------ 7) set exec permission to /root/.Xclients and ~/.xsession # chmod gu+x /root/.Xclients /root/.xsession 8) create /etc/sysconfig/desktop. This is to disable gnome and kde completely ------------ unset GSESSION unset STARTKDE ------------ 9) create /etc/gdm/custom.conf. This is to enable automatic login with root user. -------------- [daemon] AutomaticLogin=root AutomaticLoginEnable=...

Automatic login to desktop - RHEL

Trying to build a machine as a Kiosk with no login needed. update /etc/gdm/custom.conf. This is to enable automatic login with root user. ------------- [daemon] AutomaticLogin=root AutomaticLoginEnable=True So, more specifically I need to have my system boot to a graphical target as a particular user... #yum -y install gdm @gnome-desktop @^graphical-server-environment @internet-browser subscription-manager register --auto-attach yum -y install gdm yum -y install motif xterm xorg-x11-fonts-* xorg-x11-server-Xorg xorg-x11-xinit xorg-x11-apps subscription-manager repos --enable=rhel-7-server-optional-rpms yum -y install xorg-x11-xinit-session systemctl set-default graphical.target cat << EOF > /etc/sysconfig/desktop unset GSESSION unset STARTKDE EOF # update the GDM file to have automatic login enabled (as root in this case) sed -i -e 's/\[daemon\]/\[daemon\]\nAutomaticLogin=morpheus\nAutomaticLoginEnable=True/g' /etc/gdm/custom.conf USERS=...

Install RHEL 7 on old HP DL380 g5

Someone at work had been running RHEL on an HP DL380 G5 and blew it up.  After several attempts at doing an installation that made me conclude the hardware was actually bad... I kept digging for the answer. Attempt install and Anaconda could not find any disks - try a Drivers Disk (dd.img) both cciss and hpsa.   -- once we did that, when the system would reboot it would say it could not find a disk. hmmm. Boot from your installation media and interrupt the startup at grub. Add hpsa.hpsa_allow_any=1 hpsa.hpsa_simple_mode=1 to the line starting with linuxefi press CTRL-X to boot. Once the system restarts after the install, you need to once again interrupt the startup and add the line from above. After the system starts, edit /etc/default/grub and add those 2 parameters to the end of the line starting with GRUB_CMDLINE_LINUX (which likely has quiet at the end of the line currently). then run # cp /boot/grub2/grub.cfg /boot/grub2/grub.cfg.orig # grub2-mkco...

Plex and LetsEncrypt

Work in Progress: Plex and LetsEncrypt So... I'm not entirely sure where to begin with all this. And this write-up is a mess (right now). I was not certain this was going to work and therefore I was not keeping absolute notes. Apache webserver allowing 80/443 through my firewall. - www.linuxrevolution.com - plex.linuxrevolution.com Plex Media Server currently running on OSX Mac Mini at port 32400 (standard port) I own a domain "linuxrevolution.com" and I also have a Plex Media Server running on any particular system (Mac Mini/OSX, Nvidia Shield TV, Linux). On my webserver, I am using CertBot - create a webroot (vhost) on your Apache Server. wget https://dl.eff.org/certbot-auto chmod a+x certbot-auto ./certbot-auto ./certbot-auto certonly -d plex.linuxrevolution.com --webroot openssl pkcs12 -export -out ~/plex_linuxrevolution_com.pfx \ -inkey /etc/letsencrypt/archive/plex.linuxrevolution.com/privkey1.pem \ -in /etc/letsencrypt/archive/plex...

Privacy?? Meh. Oh - and wtf paypal?

So.. once upon a time (about 2 weeks ago) I was going to purchase an album from some Indie rock band (group?) and they accepted Paypal.  Word?  Word. I don't have a hang-up with enabling the "one click" Paypal functionality in my browser... because if I can save 2 or 3 clicks here-and-there, that's money in the bank, and as such I opt to enable the "one click" feature.  Annnd.. off I got to pay for my album.  Shortly thereafter, I noticed that I have a "unread notification" in my facebook tab.  Hmm..  I'm not very popular, I wonder what this is.... I don't know exactly *where* I had "agreed to have Paypal send you updates"... but I was/am pretty pissed off.  Paypal's "support" was nice/pleasant, I must say, but.. either they ARE clueless, or have been trained to PRETEND to be clueless.  They seem to think I was upset about the notifications.  NOTE!!!!  somehow Paypal was added as "payment method" in...

My (limited) experience with Filemaker Pro

A friend has a retail location which uses Filemaker Pro on 2 computers - I'll refer to them as Main and Satellite.  Filemaker will have a primary instance running on the Main computer and the Satellite will connect to it.  It turns out that Filemaker has it's own network "stack" known as the Filemaker Network (aka fmn://) Firewall: You need to ensure that the Windows Firewall allows communication for Filemaker Pro. Click Start and type "firewall" in the search box.  Then click Allow A Program Through Windows Firewall.  Find the Filemaker pro in the list and make sure the check box is selected for the type of network your interface was designated as.  In his case: public. Allow Sharing (Filemaker): On the Main Computer, open Filemaker and click on : File   Sharing     Filemaker Network (this page will show you the IP)       Network Sharing (click "On") Connect to Remote Filemaker Share: On the Satellite Computer, c...

Extending SNMP to run arbitrary shell script

Why are we here... This is not likely something I would have pursued under normal circumstances.  I happen to be working for a customer/client who is not afforded a lot of flexibility to accomplish their goals.  In this case, the rigor is justified.  They have to sometimes be fairly creative with how they solve problems. In this case they would like to utilize an existing snmp implementation to execute a command (or shell script) on a remote system.  They came to me with the idea of using Net-SNMP extend. https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/sect-System_Monitoring_Tools-Net-SNMP-Extending.html NOTE:  This is NOT a good implementation strategy in the "real world"  it will simply allow you to test the functionality.  There are a TON of security implications which would need to be taken in to consideration. Implementation Steps: [root@rh7tst01 ~]# yum -y install net-snmp net-snmp-utils ...

Convert iTunes to Rhythmbox 2016

A recent comment on a rather old post made me realize that I had not updated this thread. The biggest news - iTunes seriously screws up the way they store attributes about songs now.  From what I can gather, if you chose to give Adele - Rolling in the Deep 4-stars... it, for whatever stupid reason, will then give the entire album an "album rating" of 4 stars.  Which means that the perl script and python script I had found to convert my playlist would have ALL the Adele songs in that album in my favorites in Rhythmbox. There is, however, a work-around Doug Scripts http://dougscripts.com/itunes/scripts/scripts06.php?page=1 I cannot seem to find the exact AppleScript of his that I used to remove the Album Rating from all my albums. First thing though... open iTunes and run DougScripts Album Rating script. #!/bin/bash # You have to use sudo on the AFS drive MYDATE=`date +%F-%H-%M-%S` rsync -urpolvv --delete --size-only --delete --exclude="Mobile Applications...

Deny inbound UDP from x.x.x.x/highport to x.x.x.x/53 due to DNS Query

Where to begin with this travesty... had to switch from AT&T to Verizon so that I could use tethering at the office I work at.. and "so it begins..." I have a Samsung SCS-SU01 which Verizon provided because I have essentially no service in my home.  When I attempted to configure/enable the device it was responding rather strange.  Specifically the GPS indicator would not change to "blue" - indicating it could not get GPS?  Anyhow, that was NOT the case, the transponder was outside via the extender cable with a clear line of sight to the sky. I loaded my ASDM to see if I could tell what was going on and noticed # Deny inbound UDP from x.x.x.x/highport to x.x.x.x/53 due to DNS Query which seemed very odd since my DNS server is on the same subnet as my VZW device. Applied the following rule and the DNS issue went away. same-security-traffic permit  intra-interface Now... I need to allow IPsec-passthru (I think?) Cisco ASA ...

Bricked (and unbricked) my Moto X 2nd Gen XT1095

I have recently been having issues with my Moto X receiving incoming calls.  Even though the same person that would call me could text me at the same time frame.  Fortunately I have a Nexus 6... unfortunately I travel weekly for work and can't deal my phone's bullshit right now.  So, I wipe my Nexus, re-image it with shamu, install all my apps, Google Authenticator, etc.. configure all logins and authentication.  Then I realize why I had been using my Moto X instead of my Nexus 6.  Advantages that the Moto X have: size, nuance functionality (karate chop flashlight, auto-silence off-hours, etc...).  Motorola does some cool stuff. Anyhow.. .one not cool thing about Motorola is the guarded approach to distributing their Images.  (which, there may be a legitimate reason for that.... so, I will remain somewhat neutral about the subject). I managed to find an image to use and made a few huge assumptions: that an invalid image will not load that a non...

I just parted...

The recent disk management utility in the Fedora/RHEL installers are a bit challenging.   Since I don't know why things had changed, I won't bother commenting.  But, I don't find them nearly as easy/convenient as before.... Anyhow... I installed a 500GB SSD in my Intel NUC to build up as a "NAS" host (NFS and iSCSI).  The OS will take around 20GB, then SWAP, /boot.. whatever.  So, I wanted the remainder of the disk to be in it's own VG [root@rhel7-nas registry]# parted -l | grep Disk Disk /dev/sda: 480GB Disk Flags: Disk /dev/mapper/vg_exports-lv_registry: 21.5GB Disk Flags: Disk /dev/mapper/rhel7--nas-home: 1074MB Disk Flags: Disk /dev/mapper/rhel7--nas-swap: 8389MB Disk Flags: Disk /dev/mapper/rhel7--nas-root: 32.2GB Disk Flags: [root@rhel7-nas ~]# parted -s /dev/sda print free Model: ATA INTEL SSDSC2BP48 (scsi) Disk /dev/sda: 480GB Sector size (logical/physical): 512B/512B Partition Table: gpt Disk Flags: Number  Start   End  ...

Plex Media Server, a Cisco ASA 5505, and you...

The only hang-up I have with this setup is the fact that I now have an inside system exposed to the external interface (instead of a DMZ box :-( object network inside-network   subnet 192.168.0.0 255.255.255.0 object network PLEX-TCP32400   host 192.168.0.11 access-list acl_outside extended permit tcp any object PLEX-TCP32400 eq 32400 object network PLEX-TCP32400  nat (inside,outside) static interface service tcp 32400 32400 

Replace Horrible ClickPad on Lenovo

I have a 2014/2015 Lenovo T540P which is an awesome machine in EVERY way but one.. the horrible ClickPad thing they implemented.  Seemingly to compete with the Apple Trackpad, I suppose.  The significant difference, however, is the top of an Apple Trackpad is not a clickable area.  And worse... Lenovo tried to emulate a 3-button trackpad.  Ugg. First - I ordered a 3-button Trackpad replacement.  Replacing the trackpad was not exactly straight-forward, but it was pretty simple once you know what you are doing. Remove keyboard bevel: https://support.lenovo.com/us/en/documents/pd029714 Replace trackpad: https://support.lenovo.com/us/en/videos/vid100173 After I replace the trackpad, I had a bizzare situation where if I was to click the "left-mouse-button" and drag my app around the screen, the cursor would jump around chaotically. I messed around with the 50-synaptics.conf file, which did not help.  I believe the final fix was [root@seraph ~] # xi...

Satellite 6 installation issue(s)

My job (self-appointed, of course) is to learn the ins-and-outs of Satellite 6, but from an infrastructure perspective.  This involves installing it over... and over.. and over... until I encounter issues.  And then I pull my hair out trying to troubleshoot the issue. Issue:  Could not set 'present' on ensure: 422 Unprocessable Entity at 12:/usr/share/katello-installer/modules/foreman_proxy/manifests/register.pp  Could not set 'present' on ensure: 422 Unprocessable Entity at 12:/usr/share/katello-installer/modules/foreman_proxy/manifests/register.pp  /Stage[main]/Foreman_proxy::Register/Foreman_smartproxy[rh7sat6.aperture.lab]/ensure: change from absent to present failed: Could not set 'present' on ensure: 422 Unprocessable Entity at 12:/usr/share/katello-installer/modules/foreman_proxy/manifests/register.pp Resolution:  foreman-rake config -- -k idle_timeout -v 60 foreman-rake config -- -k proxy_request_timeout -v 99 NOTES:  In...

Nagios SELinux and you.

If you are running RHEL/CentOS and using SELinux, and you should... be using SELinux... you may have notced the following error when you attempt to submit an immediate check of a host: Error: Could not stat() command file '/usr/local/nagios/var/rw/nagios.cmd'! There are a number of ways to see if SELinux is preventing this from working, but the quickest is to # setenforce 0 -- retry submitting # setenforce 1 If the above allowed the command to run, then just run this [root@apoc rw]# chcon -R --reference=/var/www/html /usr/local/nagios/share [root@apoc rw]# chcon -R --reference=/var/www/html /usr/local/nagios/var [root@apoc rw]# chcon -R --reference=/var/www/cgi-bin /usr/local/nagios/sbin [root@apoc rw]# chcon -R -t httpd_sys_rw_content_t /usr/local/nagios/var/rw

P2V using dd for KVM-QEMU guest

Preface: I have certainly not exhaustively tested this process.  I had a specific need and found a specific solution that worked. Situation:  I was issued a shiny new laptop running Red Hat Enterprise Linux 7 (with Corp VPN, certs, Authentication configuration, etc...)  The image was great, but I needed more flexibility on my bare metal.  So, my goal was to P2V the corporate image so I could just run it as a VM. * Remove corporate drive and install new SSD * install corp drive in external USB-3 case * Install RHEL 7 on new SSD * dd old drive to a disk-image file in a temp location which will be an image which is the same size as your actual drive (unless you have enough space in your destination to contain a temp and converted image) * convert the raw disk-image to a qcow file while pushing it to the final location - this step should reduce the disk size - however, I believe it will only reduce/collapse zero-byte blocks (not just free space - i.e. if you de...