Installation using FreeBSD ports Login as root, then to make sure our server’s hostname can be identified locally we need to edit /etc/hosts.
# ee /etc/hosts ::1 localhost localhost.example.com 127.0.0.1 localhost localhost.example.com 192.168.1.11 host.example.com Install MySQL Server with following command.
# cd /usr/ports/databases/mysql56-server # make -D BUILD_OPTIMIZED install clean # rehash After installation finished, run script for installing main database and tables used by MySQL.
# mysql_install_db --user=mysql –basedir=/usr/local/ Run following command to start MySQL daemon and create password for MySQL’s root. # mysqld_safe & # mysqladmin -u root password ’localpassword’ # mysqladmin -u root -h host.example.com password ‘remotepassword’
...
Instalation using FreeBSD ports Login as root then enter ports directory of Cyrus SASL and run following command.
# cd /usr/ports/security/cyrus-sasl2-saslauthd # make config ; make install clean # rehash Create file smtpd.conf in directory /usr/local/lib/sasl2/. # ee /usr/local/lib/sasl2/smtpd.conf
Then add following lines.
pwcheck_method: saslauthd mech_list: plain login Edit file rc.conf so that SASL Authentification server can start at boot time.
# ee /etc/rc.conf saslauthd_enable="YES" saslauthd_flags="-a pam" if you want to use other authentication mechanism such as LDAP, use following flags.
...
Installation Installation using FreeBSD ports Login as root, then to make sure our server’s hostname can be identified locally we need to edit /etc/hosts.
# ee /etc/hosts ::1 localhost localhost.example.com 127.0.0.1 localhost localhost.example.com 192.168.1.11 host.example.com Install Apache HTTP Server using following command, choose default for options, select OK.
# cd /usr/ports/www/apache22 # make config; make install clean # rehash After installation proses finished, change Apache configuration file.
# ee /usr/local/etc/apache22/httpd.conf ServerAdmin [email protected] ServerName host.example.com:80 To enable SSL support, uncomment following line.
...
Heartbeat is a daemon that provides cluster infrastructure (communication and membership) services to its clients. This allow clients to know appearance or disappearance of peer processes on other machines and to easily exchange message with them.(Heartbeat - Linux-HA)
Heartbeat clusters work only one on same network so if we setup different cluster (different authkeys) on same network it will show up as an error in log file. We can still setup more than one cluster in same network by setting different communication port for heartbeat.
...
Git is a distributed version control system version control system track history of a collection of files and includes the functionality to revert to another version.
Distributed version control system does not necessarily have a central server which stores data.
User can copy existing repository (cloning).
Every clone contains full history of the collection of files and a clone repository has the same functionality as the original repository.
Users with sufficient authorization can push changes from their local repositories to remote repositories, they can also fetch or pull changes from other repositories to their local Git repository.
...
When using DRBD, we can grow DRBD disk online so we do not need to disturb the production process we have in the server. The requirement to this feature is the backing block device can be resized online so it is possible to resize the DRBD disk. There are two criterias that must be filled.
The backing device must be managed by a logical volume manager such as LVM The resource must currently be in the Connected connection state. First, we need to grow the backing device on both nodes and make sure only one node in Primary node.
...
SMTP use TLS/SSL to secure connection to server and AUTH so only authenticated user can use the SMTP service. This tutorial will show steps to debug SMTP TLS/SSL and AUTH from Linux/Unix terminal.
encode your login information in base64, the following perl command which requires MIME::Base64 will do encoding
perl -MMIME::Base64 -e 'print encode_base64("\000your_username\000your_password")' # example output # AHlvdXJfdXNlcm5hbWUAeW91cl9wYXNzd29yZA== connect to smtp server
# normal non-secured SMTP $ telnet smtp.yourdomain.com 25 # TLS connection, check STARTTLS support with EHLO command $ telnet smtp.yourdomain.com 25 220 SMTP banner EHLO smtp.yourdomain.com 250 SMTP banner 250-smtp.yourdomain.com 250-PIPELINING 250-SIZE 36360000 250-VRFY 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN quit $ openssl s_client -starttls smtp -crlf -connect smtp.yourdomain.com:25 # SSL connection $ openssl s_client -crlf -connect smtp.yourdomain.com:465 check AUTH support with EHLO command
...
Linux LVM is a logical volume manager for Linux kernel. Logical volume manager provides method of allocation space in mass storage device that more flexible than traditional partitioning scheme. Logical volume manager can create, resize, and combine partitions, potentially without interrupting system. (Wikipedia)
schema: new device /dev/sda create needed partitions, label them with 8e (Linux LVM)
# fdisk /dev/sda format partitons
# mkfs.ext4 /dev/sda1 create physical volume
# pvcreate /dev/sda1 extend existing volume group
...
When using iSCSI and LVM, sometimes we have to manually enable iSCSI disk that used as a physical volume in LVM. This is because LVM service is started earlier than iSCSI service so the iSCSI disk containing the physical volume is not present yet. Solution to this problem is to enable lvmetad in /etc/lvm/lvm.conf. The lvmetad is “LVM metadata daemon” that acts as in-memory cache of LVM metadata gathered from devices as they appear in the system. Whenever a block device appears and has PV label on it, it is automatically scanned via an udev rule. This update the lvmetad daemon with the LVM metadata found. Once the VG is complete (all the PVs making up the VG are present), the VG is activated. The lvmetad daemon is required for this LVM event-based autoactivation to work and the iSCSI disk must be present in the system after boot time.
...