Postagens

Mostrando postagens de maio, 2018

Converter PFX para o apache.

openssl pkcs12 -in domain.pfx -clcerts -nokeys -out domain.cer openssl pkcs12 -in domain.pfx -nocerts -nodes -out domain.key I also generated Certificate Authority (CA) certificate: openssl pkcs12 -in domain.pfx -out domain-ca.crt -nodes -nokeys -cacerts And included it in Apache config file: <VirtualHost 192.168.0.1:443> ... SSLEngine on SSLCertificateFile /path/to/domain.cer SSLCertificateKeyFile /path/to/domain.key SSLCACertificateFile /path/to/domain-ca.crt ... </VirtualHost> Ou pode converter em .crt e .key, abrir o .crt e deixar apenas o primeiro certificado, recorte os demais certificados do .crt e cole em um novo arquivo chamado .chain, as configurações devem ficar parecidas como as de baixo: <VirtualHost *:443> ServerAdmin admin@winspire.com.br ServerName winspire.com.br SSLEngine on SSLCertificateKeyFile /etc/httpd/ssl/winspire.com.br.key SSLCertificateFile /etc/httpd/ssl/winspire.com.br.crt SSLCertificateChainFile

Criar site com certificado e reescrita https no apache

<VirtualHost *:80>         ServerName winspire.com.br         DocumentRoot /var/www/html/         RewriteEngine On         RewriteCond %{HTTPS} off         RewriteRule (.*) https://%{SERVER_NAME}/$1 [R,L]         <Directory "/var/www/html/">             Options FollowSymLinks                 AllowOverride All         </Directory> </VirtualHost> <VirtualHost *:80>         ServerName www.winspire.com.br         Redirect Permanent      /          http://winspire.com.br </VirtualHost> <VirtualHost *:443>     ServerAdmin admin@winspire.com.br     ServerName winspire.com.br     SSLEngine on     SSLCertificateKeyFile /etc/httpd/ssl/winspire.com.br.key     SSLCertificateFile /etc/httpd/ssl/winspire.com.br.crt     SSLCertificateChainFile /etc/httpd/ssl/winspire.com.br.chain     SSLProtocol all -SSLv2 -SSLv3     #ErrorLog ${APACHE_LOG_DIR}/error.log     #CustomLog ${APACHE_LOG_DIR}/access.log combined     # Possible v

Criar redirect de URL para outro servidor com a mesma URL

</VirtualHost> <VirtualHost *:443>     ServerAdmin admin@winspire.com.br     ProxyRequests off     DocumentRoot /var/www     SSLProxyEngine on     ProxyPreserveHost On     ServerName noc.winspire.com.br     SSLEngine on     SSLCertificateKeyFile /etc/httpd/ssl/winspire.com.br.key     SSLCertificateFile /etc/httpd/ssl/winspire.com.br.crt     SSLCertificateChainFile /etc/httpd/ssl/winspire.com.br.chain     #ErrorLog ${APACHE_LOG_DIR}/error.log     #CustomLog ${APACHE_LOG_DIR}/access.log combined     # Possible values include: debug, info, notice, warn, error, crit,     # alert, emerg.     LogLevel error     <Location "/zabbix" >         ProxyPass  "http://10.150.234.145/zabbix"         ProxyPassReverse "http://noc.winspire.com.br/zabbix"         Order allow,deny         Allow from all     </Location>

Fazer redirect de uma url para outra url no apache

criar um virtual host example: suporte.conf <VirtualHost *:80>         ServerName suporte.winspire.com.br         Redirect Permanent      /               http://crm.winspire.com.br/customerportal/login.php </VirtualHost>

Converter ISO para se tornar bootável na IBM CLOUD / Bluemix

Link: https://console.bluemix.net/docs/infrastructure/objectstorage-swift/vhd-content-checking-and-conversion.html#vhd-content-checking-and-conversion curl -i -H "X-Auth-Key: <OBJECT STORAGE API KEY>" -H "X-Auth-User: <OBJECT STORAGE USERNAME>" https://dal05.objectstorage.service.networklayer.com/auth/v1.0/ Saida: HTTP/1.1 200 OK Content-Length: 1365 X-Auth-Token-Expires: 22043 X-Auth-Token: AUTH_tkcxxxxxxxxxxxxxxxxxxxxxxxx1d2a2a2 X-Storage-Token: AUTH_tkcxxxxxxxxxxxxxxxxxxxxxxxx1d2a2a2 X-Storage-Url: https://dal05.objectstorage.service.networklayer.com/v1/AUTH_xxxxxxxx-d4a2-xxxx-xxxx-xxxxxxxxxx Content-Type: text/html; charset=UTF-8 X-Trans-Id: txd681f1026a6040e9b8d19-00564f370f Date: Fri, 20 Nov 2015 15:06:55 GMT Listar containers: curl -i -H "X-Auth-Token: AUTH_tkcxxxxxxxxxxxxxxxxxxxxxxxx1d2a2a2" "https://dal05.objectstorage.service.networklayer.com/v1/AUTH_xxxxxxxx-d4a2-xxxx-xxxx-xxxxxxxxxx" HTTP/1.1 200 O

Limpar agente do Xen citrix do Linux

yum remove xe -guest-utilities*  

Atualizar Kernel de forma segura no centos

rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org   rpm - Uvh http://www.elrepo.org/elrepo-release-7.0-2.el7.elrepo.noarch.rpm   yum install yum-plugin- fastestmirror –y   yum -- enablerepo = elrepo -kernel install kernel-ml –y   reboot   Uname –r   Depois remover os kernels antigos   rpm – qa kernel   Yum install yum- utils   package-cleanup – oldkernel –count=2   Depois vá no arquivo /boot/grub2/ grub.cfg e comente as linhas dos kernels antigos e só deixe o kernel novo e de restore.  

Teste de IOPS

time dd if=/dev/zero oflag =direct bs =1M count=100 of=testFile01.SL.bin   fio -- randrepeat =1 -- ioengine = libaio --direct=1 -- gtod_reduce =1 --name=test --filename=test -- bs =16k -- iodepth =64 --size=1G -- readwrite = randrw -- rwmixread =50  

Desabilitar IPV6 Ubuntu

https://askubuntu.com/questions/440649/how-to-disable-ipv6-in-ubuntu-14-04  

Clonar máquina com RSYNC

https://linuxadmin.io/hot-clone-linux-server/   yum install -y rsync   Create and edit /root/exclude-files.txt and add the following:   /boot     /dev     / tmp     /sys     /proc     /backup     / etc / fstab     / etc / mtab     / etc / mdadm.conf     / etc / sysconfig /network*   rsync - vPa -e ' ssh -o StrictHostKeyChecking =no' --exclude-from=/root/exclude-files.txt / DESTINATIONIP:/  

Instalar agente Hyper-v no Linux

https://www.ntweekly.com/2012/04/02/question-how-to-install-hyper-v-integration-services-on-ubuntu-linux/   Depois executar :   apt-get install linux-tools-4.4.0-87-generic linux-cloud-tools-4.4.0-87-generic linux -tools-generic linux -cloud-tools-generic         systemctl restart hv - kvp -daemon       systemctl restart hv-vss-daemon.service       systemctl status hv - kvp -daemon       systemctl status hv-vss-daemon.service  

Formatar discos em XFS LVM CENTOS e Ubuntu

mkfs.xfs -f  /dev/mapper/VG_BACKUP-LV_BACKUP -d agcount =64 -l size=128m,version=2  

Ver Usuários conectados no Postgres

select usename from pg_stat_activity ;  

Criar regra de firewall no Vyatta

set security firewall name Wins default-action accept   set security firewall name Wins rule 21 action 'drop'   set security firewall name Wins rule 21 description 'ACEITA SO SANTANDER HTTPS'   set security firewall name Wins rule 21 destination address 'IP'   set security firewall name Wins rule 21 destination port '443'   set security firewall name Wins rule 21 protocol ' tcp '   set security firewall name Wins rule 21 source address !IP             set security firewall name Wins default-action accept   set security firewall name Wins rule 22 action 'drop'   set security firewall name Wins rule 22 description 'ACEITA SO SANTANDER HTTP'   set security firewall name Wins rule 22 destination address 'IP'   set security firewall name Wins rule 22 destination port '80'   set security firewall name Wins rule 22 protocol ' tcp '   set security

Winbind Centos

Via Link: https://theserverplaypen.wordpress.com/2015/05/25/integrating-centos-7-with-active-directory-using-winbind/  

SSSD no Ubuntu

Via Link: https://help.ubuntu.com/lts/serverguide/sssd-ad.html

Criar serviço no UBUNTU exemplo

sudo nano / etc / systemd /system/ mongodb.service     Cole nele o seguinte conteúdo , depois salve e feche o arquivo .   / etc / systemd /system/ mongodb.service   [Unit]   Description=High-performance, schema-free document-oriented database   After= network.target       [Service]   User= mongodb   ExecStart =/ usr /bin/ mongod --quiet --config / etc / mongod.conf       [Install]   WantedBy =multi- user.target

Como instalar e configurar PROFTPD

Via Link: https://sempreupdate.com.br/como-criar-um-servidor-ftp-no-linux/  
Movendo LVM para outro sistema Linux. 1 – Desmontar o file system Inicialmente devemos desmontar os sistemas de arquivos que estão sob o VG que será migrado. Assim, você garante que nada tentará escrever na área que será movimentada. # unmount /data/www 2 – Mark the volume group inactive Vamos marcar o VG como inativo removendo ele do kernel, isso é para prevenirmos que quaisquer atividades tentem ativá-lo novamente. # vgchange -an webdata vgchange — volume group “webdata” successfully deactivated 3 – Exportar o VG It is now necessary to export the volume group. This prevents it from being accessed on the “old” host system and prepares it to be removed. Nesta etapa é necessário exportar o VG para ser levado ao novo servidor. O servidor antigo também “fica preparado” para sua remoção. # vgexport webdata vgexport — volume group “webdata” successfully exported Na próxima vez que o sistema operacional for reiniciado, os discos poderão dês desconectados e