Dec 29 14:35:37 tesnia.company.local systemd[1]: Stopping puppetserver Service… Dec 29 14:35:37 tesnia.company.local systemd[1]: Starting puppetserver Service… Dec 29 14:35:58 tesnia.company.local java[3704]: io/console on JRuby shells out to stty for most operations Dec 29 14:36:02 tesnia.company.local java[3704]: Failed to load feature test for posix: can’t find user for 0 Dec 29 14:36:02 tesnia.company.local java[3704]: Cannot run…

gsettings set org.nemo.desktop show-desktop-icons false

Server was giving that error, and the ones below Check ipa servers, server was not there add server in ipa ipa-client-install –uninstall ipa-client-install ??? All works again! Dec 20 13:39:40 cosla.karlo.local [sssd[ldap_child[65497]]][65497]: Failed to initialize credentials using keytab [MEMORY:/etc/krb5.keytab]: Client ‘host/karlo.karlo.local@karlo.LOCAL’ not found in Kerberos database. Unable to create GSSAPI-encrypted LDAP connection. Dec 20 13:39:40…

prefix $

Have an admin enable IRC Go to https://my.slack.com/account/gateways Open the webadmin, go to your settings, add a network I chose my team name as the network name Nickname is my slack username Alt is garbage ident my slack user name server: TEAMNAME.irc.slack.com +6667 TEAMNAME.PASSWORD

While doing the let’s encrypt thing for one of my boxes, I got an annoying error. Fix by: sudo yum remove python-requests python-urllib3 sudo pip install requests==2.11.1 urllib3 sudo yum install python-certbot-apache Yes it is ugly.

Free SSL certs for your znc instance? Follow the steps: 30 */12 * * * /usr/bin/letsencrypt renew >> /var/log/le-renew.log; cat /etc/letsencrypt/live/srv08.karloluiten.nl/privkey.pem /etc/letsencrypt/live/srv08.karloluiten.nl/cert.pem /etc/letsencrypt/live/srv08.karloluiten.nl/chain.pem /etc/letsencrypt/dhparam.pem > /home/user/.znc/znc.pem

If you want certs only, do this: sudo yum install epel-release sudo yum install certbot sudo letsencrypt certonly -a standalone -d srv08.karloluiten.nl crontab -e add: 30 */12 * * * /usr/bin/letsencrypt renew >> /var/log/le-renew.log (add the previous logfile in /etc/logrotate.d/syslog for example, or make your own) certs are now in /etc/letsencrypt/live/srv08.karloluiten.nl/cert.pem

No, it is NOT the allowed_hosts. You already checked it 5 times. It is NOT the acl. Some of the log: [root@hackbox plugins]# time ./check_nrpe -H 127.0.0.1 12:00:01.138458 IP 127.0.0.1.42830 > 127.0.0.1.5666: Flags [S], seq 288814041, win 43690, options [mss 65495,sackOK,TS val 864077668 ecr 0,nop,wscale 10], length 0 13:48:47.032618 IP 127.0.0.1.5666 > 127.0.0.1.42830: Flags [S.],…

There might be files which you deleted but but are still on disk. This happens if a process still has the file open. You can check for open files by doing: sudo lsof +L1 firefox 15940 klu txt REG 0,39 130896 0 4064267 /usr/lib64/firefox/firefox (deleted) firefox 15940 klu 12r REG 0,39 9698845 0 4064383 /usr/lib64/firefox/omni.ja…

vgdisplay (are they there?) vgscan –mknodes -v vgchange -a y

Use reboot -f [root@lintest ~]# reboot Failed to start reboot.target: Activation of org.freedesktop.systemd1 timed out Failed to open /dev/initctl: No such device or address Failed to talk to init daemon. [root@lintest ~]# [root@lintest ~]# [root@lintest ~]# [root@lintest ~]# [root@lintest ~]# reboot -f packet_write_wait: Connection to 10.0.100.31 port 22: Broken pipe

vgrename VG_ESM6c VG Volume group “VG_ESM6c” successfully renamed to “VG” lvrename /dev/VG/root lv_root Renamed “root” to “lv_root” in volume group “VG” then edit /etc/fstab then edit /boot/grub/grub*cfg then make a new kernel: mkinitrd –force /boot/initramfs-$(uname -r).img $(uname -r)

mount with a rescue image, chroot /mnt/sysimage, mount -a see what fails fix your /etc/fstab

[klu@scanner ~]$ nmap -p 636 –script ssl-enum-ciphers servername Starting Nmap 6.40 ( http://nmap.org ) at 2016-10-11 08:33 CEST Stats: 0:00:00 elapsed; 0 hosts completed (0 up), 1 undergoing Ping Scan Ping Scan Timing: About 100.00% done; ETC: 08:33 (0:00:00 remaining) Nmap scan report for servername (10.0.01) Host is up (0.00033s latency). rDNS record for 10.0.64.5:…

Offending DSA key /var/lib/sss/pubconf/known_hosts if you use rhel idm/ipa, remove ssh keys from that server

Sometimes you want to list the jobs you scheduled (reboots) for a Red Hat Enterprise Linux 7 server. This is how you can list the shutdowns: root@tasus:~# shutdown -r 19:02 “This system will reboot at 19:02 for updates” Shutdown scheduled for Tue 2016-09-20 19:02:00 CEST, use ‘shutdown -c’ to cancel. root@tasus:~# systemctl status systemd-shutdownd.service ●…

Use /sbin/start_udev . This will restart. Useful in a situation where you updated some libs and need to restart udev, since udev has no init/systemctl restart script.

curl ipinfo.io or curl karloluiten.nl/ip/

Open jcontrol, general, network settings, choose ‘Direct connection’. jcontrol is /usr/bin/jcontrol jcontrol is /bin/jcontrol

Via a colleague! # Use Alt-arrow keys without prefix key to switch panes bind -n M-Left select-pane -L bind -n M-Right select-pane -R bind -n M-Up select-pane -U bind -n M-Down select-pane -D # Shift arrow to switch windows bind -n S-Left previous-window bind -n S-Right next-window # No delay for escape key press set…

Quick tip sudo !! will repeat the previous command with sudo in front of it.

gg dG

find /home/*/temp/ -type f -mtime +5 -delete