SecOPS / SysOp blog - Latest Comments

Re: Gmail like “+” adresses aliases in Postfix

Vishnu N — Sat, 05 Jan 2019 10:54:57 -0000

Hi, can "recipient_delimiter = +" be restricted to some domains only on the server?

Re: KVM – libvirt-guests – autostart / shutdown / pause

Ralph Horque — Mon, 18 Apr 2016 20:01:27 -0000

An easy way to make systems start up in order, sort of, is, set the GRUB_TIMEOUT to each machine differently. First server, 1 second. Second server, perhaps 30 seconds, etc. It's crude, but works great for me.

Re: How to change OVH kernel to normal Centos kernel

Ruben Ortiz — Tue, 20 Oct 2015 06:35:33 -0000

Hi!

I found this tutorial because I have similar needs. But after all steps, centos complaint about network card

eth2 is not present...

Did you have any net issues?

Thanks!

Re: SELinux && Ganglia / Multicast && Apache && RRDs

Milos Malik — Tue, 12 May 2015 03:20:55 -0000

BZ filed against RHEL-7 https://bugzilla.redhat.com...

Re: SELinux && Ganglia / Multicast && Apache && RRDs

Milos Malik — Tue, 12 May 2015 03:07:09 -0000

The same problem appears on RHEL-7 too, when ganglia-3.7.1-2.el7 is used.

Re: SELinux && Ganglia / Multicast && Apache && RRDs

Maciej Lasyk — Sun, 10 May 2015 04:12:54 -0000

Hah, nice Dan - thx; above method is rather nasty workaround - I didn't even check if there is any Ganglia policy back then :/

Btw - there's still no official Ganglia packages for RHEL7, so not sure if this problem will be replicated or not. Interesting

Re: SELinux && Ganglia / Multicast && Apache && RRDs

Dan Yocum — Fri, 08 May 2015 11:59:25 -0000

Good article. BZ filed for this bug, here: https://bugzilla.redhat.com...

Re: Docker vs LXC/Ansible?

Frederic Mohr — Tue, 25 Nov 2014 16:31:50 -0000

Thanks for the help, sounds like LXC is more fit for me. But I'll look into Docker as well, I'm curious how it works for my lab.

Re: Docker vs LXC/Ansible?

Maciej Lasyk — Tue, 25 Nov 2014 15:41:13 -0000

First of all Ansible is an automation tool, so you can use it for LXC and for Docker orchestration.

So let's keep to this "Docker vs LXC" subject. After couple of months I can write couple of things:

1. LXC is awesome, but so is Docker. It depends on use - cases and your situation
2. If you're building continuous integration (/deployment) env then Docker is a way to go (see my last presentation: www.slideshare.net/d0cent/o... )

3. If this is only about lightweight virtualization (containerization) of your already existing envs then you could probably go with LXC. This is because you can use your already created workflows / tools with LXC as those containers simulate VMs in many ways Docker is a completely different approach (Single Application Containers - this means that only one process should be created in Docker container and those should be treated as ephemeral).

I think that I should work on an update for this post as this is really interesting subject. If you have any more questions - plz ask :)

Re: Docker vs LXC/Ansible?

Frederic Mohr — Tue, 25 Nov 2014 05:13:57 -0000

So, what's your answer a few months later? I currently have my
private lab running on LXC and I want to automate things with ansible.
But docker keeps popping up everywhere so I'm not sure if I should use
it instead.

The thing is, that this is a dev-env for me so I'm spinning up pre-setup operating systems more than pre-setup applications.

Is Docker a good choice or should I stick to plain LXC and introduce ansible to it?

Re: Gmail like “+” adresses aliases in Postfix

eric — Wed, 03 Sep 2014 05:56:34 -0000

you can use "recipient_delimiter = +" in postfix's config instead

Re: Private: Atmosphere Conference 2014 recap

Maciej Lasyk — Mon, 21 Jul 2014 11:30:08 -0000

Unfortunately those are not posted yet; try following this conference's youtube channel http://www.youtube.com/user... - probably they'll upload videos soon

Re: Private: Atmosphere Conference 2014 recap

Woody — Fri, 04 Jul 2014 09:42:28 -0000

Is there an accompanying video?

Re: Docker vs LXC/Ansible?

victorcoder — Wed, 26 Mar 2014 19:28:17 -0000

If you mean for the testing platform I plan to use plain Dockerfiles. Ansible for the rest.

Re: Docker vs LXC/Ansible?

Maciej Lasyk — Sun, 23 Mar 2014 16:33:20 -0000

What tools will u use for automation?

Re: Docker vs LXC/Ansible?

victorcoder — Thu, 20 Mar 2014 05:41:42 -0000

I'm in the exact same state as you but instead of duplicating efforts I'm planning to use Docker to build an automated teting env (I use vagrant/ansible for the dev platform and I'm quite happy) time will say.

Re: Google Reader is dead. What now?

Maciej Lasyk — Mon, 01 Jul 2013 16:21:29 -0000

Nice one - I could go this way if I knew it earlier ;)

Re: Google Reader is dead. What now?

Grzegorz Szczepanik — Mon, 01 Jul 2013 07:11:53 -0000

I went for http://www.newsblur.com/ and for now quite happy with that.

Re: (Polish) Opowieść o chorym administratorze, czyli OpenSource w walce ze zbyt wysokim ciśnieniem wody

Maciej Lasyk — Sun, 20 Jan 2013 16:49:58 -0000

Mam w domu PandaBoarda (http://pandaboard.org/) - i powoli zaczynam realizować monitoring CO, temperatury, ruchu itd. Bardzo powoli - to taki projekt, który wyląduje na koniec na githubie :)

Odnośni elektrozaworu i tego co podesłałeś - super pomysł :) Piec będę wymieniał w okolicach wakacji jak się cieplej zrobi, to akurat w sam raz :) Dzięki

Re: (Polish) Opowieść o chorym administratorze, czyli OpenSource w walce ze zbyt wysokim ciśnieniem wody

pitorek — Sun, 20 Jan 2013 16:12:39 -0000

A co myślisz o zakupie coś ala aldruino za 100zł, na pewno byś sobie poradził z skonfigurowaniem modułu internetowego. Do tego mikrokontrolera podpiąłbyś czujnik ciśnienia. Dla pełnego zautomatyzowania wpiąłbyś przy odpowietrzeniu kaloryfera elektrozawór sterowany tak samo. if ciśnienie > 3 {zawór=open} else zawór =closed. Zaraz zaraz... Można przecież kupić http://www.skleparmatura.pl... za 40 zł.

Re: Postfix: Backup MX

Maciej Lasyk — Tue, 17 Apr 2012 15:07:08 -0000

No it's not necessary, but due to some security reasons it's good to use it (but remember to do it together with permit_mx_backup_networks). There were problems with backups MX over IPv6 DNS records - under some circumstances it was possible to inject some messages to the backup MX server from a spam-server in order to deliver it to the main mail server. I believe, that this is already patched, but I see no reasons not to use this particular configuration option.

Re: Postfix: Backup MX

Xcom — Tue, 17 Apr 2012 14:42:44 -0000

Is it really necessary to add the permit_mx_backup ? In my first setup, I found that it worked as expected without permit_mx_backup.

Re: Wacom Bamboo Fun in Fedora 15

Maciej Lasyk — Sat, 14 Apr 2012 09:48:53 -0000

Thanks for this tip - will use for sure ;)

Re: Wacom Bamboo Fun in Fedora 15

Nick — Sat, 14 Apr 2012 09:24:48 -0000

Thank you for the post!
Just a small comment: to set working space of the tablet to a specific display, you can also use the "MapToOutput" option of xsetwacom.

Re: Hello there!

Maciej Lasyk — Wed, 07 Dec 2011 18:09:17 -0000

Just testing disquis integration :)