Unix Revolution

# $Id: Oracle-DBA-rhel6,v 1.10 2014/06/25 01:16:32 root Exp $ # ************************************************************************** # Author:    james.radtke # Date:      20140527 # Location:  prhnsat01:/var/www/html/pub/snippets/spacewalk/1/ # # Goal:      Have a single script that can: #             - configure a new system for Oracle #             - validate an existing installation #             - be run on an existing system to update/repair Oracle install # ************************************************************************** # ************************************************************************** #  CLEANUP / TODOD #  Should clean up the THP section to check the current value from /proc or /sy...

Ran in to a very bothersome issue over the weekend. Pushed a package installation automatically via Satellite to ALL of my Linux hosts at 11pm on Sunday evening.  Around 9am on Monday I was invited to a bridge to discuss some Oracle issue where no new connections were allowed to the database on the Listener.  The fun begins... So - we discuss what changes had been applied recently and my software push is mentioned.  I had tested this software push on all our non-prod hosts 8 weeks prior - and everything has been fine.  So.. what the hell happened. As it turns out the number of hosts affected were less than 1% - However, the way the problem was communicated made the problem sound much worse.  So - at this point I assume that the approved deployment to ALL our hosts broke EVERY.SINGLE.BOX in our environment. I start to review the actual output of the software push and I notice a package that had been updated which was not included in my testing 8 weeks ago....

I've always wondered how installation scripts created spinners, and counters, etc..  So, I played around and come up with this #!/bin/bash TIMER=60 DIVISOR=1 COUNTER=${TIMER} C=0 while [ $COUNTER -gt 0 ] do     case "$(($C % 4))" in         0) char="/"         ;;         1) char="-"         ;;         2) char="\\"         ;;         3) char="|"         ;;     esac   echo -ne "${char}  -- ${COUNTER} \r"   COUNTER=$[$COUNTER-$DIVISOR]   C=$[$C+1]   sleep $DIVISOR done echo -ne '\n'

I created this post for someone that is new to Red Hat that asked about installing the Flash plugin.  The Flash plugin is actually a really good example to learn with (in my opinion).  It is available from Red Hat as well as Adobe.  And may cause a problem for you when you attempt to do updates. Which is the first lesson: you have to be selective what non-Red Hat REPOs you add to your system.  I have not encountered an issue with package incompatibilities in quite some time using on Red Hat REPOs.  I cannot say the same about some of the 3rd-party REPOs out there. NOTE: I am going to intentionally break my system, then correct it. Add Adobe's REPO [jradtke@apoc ~]$ wget http://linuxdownload.adobe.com/adobe-release/adobe-release-x86_64-1.0-1.noarch.rpm --2014-02-09 10:29:46--  http://linuxdownload.adobe.com/adobe-release/adobe-release-x86_64-1.0-1.noarch.rpm Resolving linuxdownload.adobe.com... 192.150.16.37 Connecting to linuxdownload.adobe.com|...

I have encountered a rather specific situation, but the resolution may help others. We have Dell servers and use multipath as part of the standard build.  Strangely once multipath is enabled, the PERC controller would show up in the config. So - I updated my blacklist in /etc/multipath.conf  blacklist {         devnode "^(ram|raw|loop|fd|md|dm-|sr|scd|st)[0-9]*"         devnode "^(hd|xvd|vd)[a-z]*"         devnode "^asm/*"         devnode "ofsctl"            device {         vendor "DELL"         product "PERC*"     } } followed by # multipath -F however, I would still get an error when I would attempt to create a pv on the new slice. # pvcreate /dev/sdb1 Can't open /dev/sdb1 exclusively.  Mou...

This summary is not available. Please click here to view the post.

A topic, or topics, that I have paid not-enough attention to through my career. openSCAP In Fedora, everything is quite simple: [root@cypher ~]# yum -y install openscap openscap-content openscap-perl openscap-python openscp-selinux openscap-utils [root@cypher ~]# oscap xccdf eval --profile common --report /tmp/`hostname -s`-ssg-fedora-xccdf-report.html --results /tmp/`hostname -s`-ssg-fedora-xccdf-results.html --cpe  /usr/share/xml/scap/ssg/fedora/ssg-fedora-cpe-dictionary.xml /usr/share/xml/scap/ssg/fedora/ssg-fedora-xccdf.xml git clone git://git.fedorahosted.org/git/scap-security-guide.git cd scap-security-guide/RHEL/6 make cd output mkdir -p /usr/share/xml/scap/ssg/RHEL6 cp *rhel6* /usr/share/xml/scap/ssg/RHEL6 nmap? Nessus Snort