Uncategorized – Milan's blog

Azure API Management: Chicken or the egg dilemma.

Sometimes in your IaC, you may need to get the API definitions from the backend AppService. At the same time, you may need to restrict access to the AppService based on the source IP address:

Create two modules:[code_snippet_source id=1 line_numbers=true]

module “apimanagementapi-0000” {
….

data “http” “swagger” {
url = “${var.service_url}/swagger/v1/swagger.json”
request_headers = {
Accept = “application/json”
}
}
…

resource “azurerm_api_management_api” “api” {

import{

content_format = “openapi+json”

content_value = data.http.swagger.body

}
…

How to log sudoers

vi /root/.bashrc

myname=`who am i | awk '{print $1}'`
PROMPT_COMMAND='history -a >(logger -p local2.info -t "$myname $USER[$PWD] $SSH_CONNECTION")'

1 2	myname=`who am i \| awk '{print $1}'` PROMPT_COMMAND='history -a >(logger -p local2.info -t "$myname $USER[$PWD] $SSH_CONNECTION")'

vi /etc/rsyslog.conf

$umask 0000 <br />$FileCreateMode 0666 <br />local2.info /var/log/usercommands<br />$umask 0077

1	$umask 0000 <br />$FileCreateMode 0666 <br />local2.info /var/log/usercommands<br />$umask 0077

CI/CD Symfony 4 with GitLab

In my latest project (API endpoint based on Symfony and api-platform), I have the task to optimize and automate CI/CD processes. As a result: here is super-simplified version of the resulting GitLab pipiline:
Continue reading “CI/CD Symfony 4 with GitLab”

Running screen with su

/etc/rc.local

screen -d -m /home/mdt/project1/scripts/run_workers.sh

1	screen -d -m /home/mdt/project1/scripts/run_workers.sh

/home/mdt/project1/scripts/run_workers.sh

su mdt -c '/home/mdt/project1/app/console supertag:gearman:run-worker --env=prod 2>&1 | while read line; do echo `/bin/date` "$line" >> /home/mdt/project1/app/logs/worker.log; done'

1	su mdt -c '/home/mdt/project1/app/console supertag:gearman:run-worker --env=prod 2>&1 \| while read line; do echo `/bin/date` "$line" >> /home/mdt/project1/app/logs/worker.log; done'

Hyper-V Replicate all VMs

$allVMs = get-vm
foreach ($VM in $allVMs) {
Enable-VMReplication $VM -ReplicaServerName lasthope.contoso.com -ReplicaServerPort 443 -AuthenticationType Certificate -CertificateThumbprint 87c4337a097b33afb013a9c9001e4eb23fdde321 -ReplicationFrequencySec 900
Start-VMInitialReplication $VM.name
}

$allVMs = get-vm

foreach ($VM in $allVMs) {

Enable-VMReplication $VM -ReplicaServerName lasthope.contoso.com -ReplicaServerPort 443 -AuthenticationType Certificate -CertificateThumbprint 87c4337a097b33afb013a9c9001e4eb23fdde321 -ReplicationFrequencySec 900

Start-VMInitialReplication $VM.name

}

Windows 8.1 VPN to Checkpoint. ASN1 bad tag value met.

Just delete everything under:

%SYSDRIVE%\Users\%USERNAME%\AppData\Local\Packages\f5.vpn.client_cw5n1h2txyewy\LocalState\

1	%SYSDRIVE%\Users\%USERNAME%\AppData\Local\Packages\f5.vpn.client_cw5n1h2txyewy\LocalState\

Installing Apache Ambri on Ubuntu 14.04

If you have error like this:

ERROR 2015-08-25 13:33:54,601 Controller.py:143 - Cannot register host with not supported os type, hostname=h2.hadoopxyz.abc, serverOsType=ubuntu14, agentOsType=ubuntu14

1	ERROR 2015-08-25 13:33:54,601 Controller.py:143 - Cannot register host with not supported os type, hostname=h2.hadoopxyz.abc, serverOsType=ubuntu14, agentOsType=ubuntu14

You have to edit :

mc -e  /usr/lib/ambari-server/lib/ambari_commons/resources/os_family.json
mc -e /usr/lib/ambari-agent/lib/ambari_commons/resources/os_family.json

1 2	mc -e /usr/lib/ambari-server/lib/ambari_commons/resources/os_family.json mc -e /usr/lib/ambari-agent/lib/ambari_commons/resources/os_family.json

And change version number:

  "ubuntu": {
    "distro": [
      "ubuntu",
      "debian"
    ],
    "versions": [
      14
    ]
  },

"ubuntu": {

"distro": [

"ubuntu",

"debian"

"versions": [

]

EMC Recover Point – how to recreate repository volume

We have to recreate repository volume of our RP but I could not find any guidance from EMC site. So I’m documenting my steps here for further usage:

Procedure overview:
On EMC storage:

Create about 6-8 GB LUN.
Present that LUN to storage group of RP nodes.

On RP appliances:
On last cluster member:

Detach RPA from cluster
Format repository volume
Reboot
Attach RPA to cluster

On each subsequent appliance:

Detach RPA from cluster
Select repository volume
Reboot
Attach RPA to cluster

This is a transcript of console sessions:
Continue reading “EMC Recover Point – how to recreate repository volume”

VLAN trunking in Hyper-V. Virtual switch to VM

1. get interface

PS C:\Windows\system32> Get-VMNetworkAdapter -VMName pfs3|fl adapterid,ipaddresses


AdapterId   : 258ffea6-f8ea-46af-a376-7c2b912fe68e
IPAddresses : {200.40.8.103, 200.40.8.100, fe80::215:5dff:fe05:a869}

AdapterId   : 39aeda55-19b3-403c-9c89-d0bf937a4930
IPAddresses : {200.40.19.243, 200.40.19.252, 200.40.19.17, fe80::215:5dff:fe05:a86a...}

AdapterId   : e579b3aa-8bc6-4ca0-9c39-3fbb568dd205
IPAddresses : {200.40.19.131, fe80::215:5dff:fe05:a86d}

PS C:\Windows\system32> Get-VMNetworkAdapter -VMName pfs3|fl adapterid,ipaddresses

AdapterId : 258ffea6-f8ea-46af-a376-7c2b912fe68e

IPAddresses : {200.40.8.103, 200.40.8.100, fe80::215:5dff:fe05:a869}

AdapterId : 39aeda55-19b3-403c-9c89-d0bf937a4930

IPAddresses : {200.40.19.243, 200.40.19.252, 200.40.19.17, fe80::215:5dff:fe05:a86a...}

AdapterId : e579b3aa-8bc6-4ca0-9c39-3fbb568dd205

IPAddresses : {200.40.19.131, fe80::215:5dff:fe05:a86d}

2. set VLANs

PS C:\Windows\system32> Get-VMNetworkAdapter -VMName pfs4 |Where-Object {$_.adapterid -eq '5d488e8c-b066-4350-acfb-b4ccc
57a9ee7'}|Set-VMNetworkAdapterVlan -trunk -AllowedVlanIdList 1901-1924 -NativeVlanId 1924

1 2	PS C:\Windows\system32> Get-VMNetworkAdapter -VMName pfs4 \|Where-Object {$_.adapterid -eq '5d488e8c-b066-4350-acfb-b4ccc 57a9ee7'}\|Set-VMNetworkAdapterVlan -trunk -AllowedVlanIdList 1901-1924 -NativeVlanId 1924

Category: Uncategorized