itsecureadmin.com

Category: Open Source Software

  • Retrieving puppet facts from AWS System Manager

    AWS System Manager makes it easy to store and retrieve parameters for use across servers, services, and applications in AWS. One great benefit is storing secrets for use, as needed. I recently needed to retrieve some parameters to place in a configuration file via puppet and wrote a short script to retrieve these values as…

  • Puppet Pipelines

    I just watched the presentation that Brian McGehee gave at the Puppet Conf 2017 on Puppet Pipelines and it was interesting. The idea behind it is that you can use this SaaS to build your entire CI/CD pipeline with a great looking UI and lots of visual feedback along the way. Enter your source repository,…

  • Jenkins: Migrating credentials…

    Thanks to CloudBees for providing a great guide on how to migrate Jenkins credentials – makes it dead simple. 1. Stop Jenkins on new server. new-server # /etc/init.d/jenkins stop 2. Remove the identity.key.enc file on new server: new-server # rm identity.key.enc 3. Copy secret* and credentials.xml to new server. current-server # cd /var/lib/jenkins current-server #…

  • SQL Injection Attempt

    I just noticed an interesting SQL injection attempt on a site I maintain: ==> /var/log/httpd/access_log

  • Tableau Server Administration – turn it off and back on again.

    I’ve been working with Tableau Server quite a bit lately (on Windows) and the one universal truth is this: if something is broken, verify that you have a good backup, uninstall, re-install, and restore the backup. It’s solved many problems and is the recommended (by Tableau support) action.

  • MySQL – Restore a single table from a mysqldump file.

    A frequent task when working with MySQL is to restore a single table from a backup. This is typically an exercise where the admin must restore a full database to another MySQL instance and then export only the table in question. This is a great way to do it most of the time. Another option…

  • Running Apache 2 under Ubuntu 16.04 on Docker

    I recently wanted to setup a new Ubuntu 16.04 host running Apache under Docker for some AWS ECS/Fargate testing I was doing and encountered the following error: docker run -p 8085:80 aws-ecr-hello-world:v0.5 [Thu Mar 15 00:11:31.074011 2018] [core:warn] [pid 1] AH00111: Config variable ${APACHE_LOCK_DIR} is not defined [Thu Mar 15 00:11:31.074576 2018] [core:warn] [pid 1]…

  • AWS RDS – Aurora Grant Corruption

    When making changes to users or grants and the changes don’t appear to take effect, be sure to check any warnings that result from these changes. mysql> flush privileges; Query OK, 0 rows affected, 4 warnings (0.24 sec) mysql> show warnings; +———+——+————————————-+ | Level | Code | Message | +———+——+————————————-+ | Warning | 1292 |…

  • The Phoenix Project

    I recently stumbled upon a novel that talks about managing IT Operations. “The Phoenix Project”, by Gene Kim, Kevin Behr, and George Spafford. Wow, what a great read. This book accurately describes many of my experiences in IT with many different companies. This book has some exceptional concepts around optimizing interaction between Development, IT Operations,…

  • Logging haproxy via rsyslog…

    Simple haproxy logging setup: # /etc/rsyslog.d/haproxy.conf $ModLoad imudp $UDPServerRun 514 $template Haproxy,”%msg%\n” local2.=info -/var/log/haproxy.log;Haproxy local2.notice -/var/log/haproxy-status.log;Haproxy ### keep logs in localhost ## local2.* ~ Don’t forget to rotate the logs: # /etc/logrotate.d/haproxy /var/log/haproxy.log /var/log/haproxy-status.log { daily rotate 10 missingok notifempty compress sharedscripts postrotate /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true /bin/kill -HUP…