@JaredBusch said in Scott Alan Miller: Storage 101: @scottalanmiller said in Scott Alan Miller: Storage 101: @s.hackleman said in Scott Alan Miller: Storage 101: I didn't get to make it up, but I have been watching the sessions and burning up my data plan. Thanks for posting these. I also wanted to take a minute to call out the guy sitting front and center to just surf the internet the entire time SAM is talking. I didn't even notice that, I'm going to look for it now. In the red? That is @DustinB3403 Ha no it is not!

I'm building out a Starwind SAN for this. It's partially done. But I've been traveling.

Great job @scottalanmiller and welcome aboard! Hope you enjoyed the experience! Now if you want to play with it, I recommend you to use our CLI (http://docs.openio.io/cli-reference) or you can deploy our S3/Swift implementation (https://github.com/open-io/oio-sds/wiki/Install-Guide---OpenIO-Swift-S3-gateway). Feel free to send me some feedbacks, I'm here to help! Guillaume. Product Manager & Co-Founder @ OpenIO

Tagging @IRJ @WrCombs @Romo

@WrCombs said in Getting Started for NTG Interns: Thank you for the advice! I look forward to learning more from you As you learn - don't forget that sometimes you have to question. There have been countless times that I have 'taught' something only to learn of a different and sometimes better way of doing the same task.

@travisdh1 said in Having Trouble Connecting to NTG Lab with X2GO: @scottalanmiller said in Having Trouble Connecting to NTG Lab with X2GO: I used to use XFCE a lot, but the interface is just too lean for me. LXDE for me now when I need something lean and Cinnamon when I want a full desktop replacement. I find KDE just enough confusing and too "heavy" to learn to bother. Yeah, KDE isn't my favorite, but everyone here was able to use it without having to retrain them, so it's what we went with. I was very glad I stuck to the "universal" desktop environments when making recommendations tho, makes life so much easier. I hate that the Super (Windows) key is only a modifier. It's much easier and more familiar to hit that key and have the activities overview come up than alt+space or alt+f2 (whatever it actually is) for krunner.

Been working all day today. I am tired and my in box will never recover, neither will my butt.

@Minion-Queen The food from all of those places is worth every calorie, I promise

This battlestation is fully operational!! We have the first seven nodes of lab power online now from California! Very excited for all of the cool, new projects that we will be doing shortly.

@BBigford said in Installing FreeNAS 9.3 on Scale HC3: When you say "in a business capacity"... Do you mean any business or just certain sizes? What is the reasoning? I know you think the FreeNAS community can be very brash/vile at times based on some of your earlier posts to people asking about FN. http://www.smbitjournal.com/2015/07/the-jurassic-park-effect/ Basically you are getting a highly stateful system where support is critical but in a crippled manner compared to just using FreeBSD. You are getting something easy to set up but difficult to support. If anything goes wrong you are in very tough shape. And updates come a bit behind. So you have a number of small issues that all add up to a not very business friendly product.

zroot is #1 reason to love ZFS !!

We are very happy to see these. Nearly 11K Read IOPS, that's awesome.

Youtube Video

I'll definitely share! ))

The cluster is back online and we are spinning up workloads now. Very excited.

For those who were still having problems getting Mattermost running on CentOS 7, I was also having the same problems and couldn't get beyond the postgres install. I found another guide and with a few tweaks, I was able to get this running. https://www.howtoforge.com/tutorial/install-mattermost-with-postgresql-and-nginx-on-centos7/ The change that was required from this guide was in the "Download and Extract Mattermost" Instead of... [[email protected] ~]# wget -q "https://github.com/mattermost/platform/releases/download/v2.0.0/mattermost.tar.gz" -O mattermost.tar.gz Use this... wget https://releases.mattermost.com/3.3.0/mattermost-team-3.3.0-linux-amd64.tar.gz Then in the next block, instead of... tar -xvzf mattermost.tar.gz Use this... tar -xvzf mattermost-team-3.3.0-linux-amd64.tar.gz After that, follow the guide to the letter and it will get you to this... @aaronxiang @wirestyle22 @scottalanmiller

@BBigford said: Looks like there is quite a bit included in the free version for up to 10 premium users, and 10 basic users. Interesting. Yes, it is quite extensive.

@scottalanmiller said: @travisdh1 said: Thought I'd take a quick look at this. I like how the output looks, but agree that I wouldn't want to leave it running. The loadavg jumped just from starting to look at the output. it would have to, that is a LOT of output! Wow, you're not kidding about that. Even gives you the current available entropy from /proc/sys/kernel/random/entropy_avail. I've never seen something give you this much information and be so easy to get running.

@dafyre said: @JaredBusch said: @dafyre said: As a matter of correctness... Do you have EPEL /REMI or any other repos installed in your CentOS 7 image? The script is connecting the Gitlab RPM, that is all. The base image he uses for all of these is CentOS 7 minimal, release 1511 unless he has changed the base template on his scale cluster. Right. I'm just curious if he has added the epel-release or any other repos to it. Definitely no EPEL. I often use it, but avoid it in the base image.

@wirestyle22 said: @coliver said: @wirestyle22 said: I have to look up SSL certification on CentOS 7 now. I've only ever done it on our Barracuda SSL VPN which was just an upload. Here we go I think you need to look up SSL for Apache if you are trying to encrypt ownCloud. I think someone has a guide on here somewhere about it. I think @JaredBusch has it in his 8.2 guide. I think he did self signed though. I'm unsure of how to do this on linux with digicert or something similar It was a self signed for the example. but I use letsencrypt myself. Some clients using ownCloud have StartSSL certs.

@travisdh1 said in Installing Zimbra Email 8.6 on CentOS 7: @scottalanmiller said in Installing Zimbra Email 8.6 on CentOS 7: 8.8.9 is out now... https://files.zimbra.com/downloads/8.8.9_GA/zcs-NETWORK-8.8.9_GA_2055.RHEL7_64.20180703080917.tgz 8.8.10 is now out https://files.zimbra.com/downloads/8.8.10_GA/zcs-8.8.10_GA_3039.RHEL6_64.20180928094617.tgz There is also a patch for 8.8.10 as well https://blog.zimbra.com/2018/10/new-zimbra-patches-8-8-10-patch-1-and-8-8-9-patch-6/

For anyone looking to do this here is my filebeat.yml file. # Name of the registry file. Per default it is put in the current working # directory. In case the working directory is changed after when running # filebeat again, indexing starts from the beginning again. registry_file: /var/lib/filebeat/registry # Full Path to directory with additional prospector configuration files. Each file must end with .yml # These config files must have the full filebeat config part inside, but only # the prospector part is processed. All global options like spool_size are ignored. # The config_dir MUST point to a different directory then where the main filebeat config file is in. #config_dir: ############################################################################### ############################# Libbeat Config ################################## # Base config file used by all other beats for using libbeat features ############################# Output ########################################## # Configure what outputs to use when sending the data collected by the beat. # Multiple outputs may be used. output: ### Elasticsearch as output elasticsearch: # Array of hosts to connect to. # Scheme and port can be left out and will be set to the default (http and 9200) # In case you specify and additional path, the scheme is required: http://localhost:9200/path # IPv6 addresses should always be defined as: https://[2001:db8::1]:9200 hosts: ["localhost:9200"] # Optional protocol and basic auth credentials. #protocol: "https" #username: "admin" #password: "s3cr3t" # Number of workers per Elasticsearch host. #worker: 1 # Optional index name. The default is "filebeat" and generates # [filebeat-]YYYY.MM.DD keys. #index: "filebeat" # A template is used to set the mapping in Elasticsearch # By default template loading is disabled and no template is loaded. # These settings can be adjusted to load your own template or overwrite existing ones #template: # Template name. By default the template name is filebeat. #name: "filebeat" # Path to template file #path: "filebeat.template.json" # Overwrite existing template #overwrite: false # Optional HTTP Path #path: "/elasticsearch" # Proxy server url #proxy_url: http://proxy:3128 # The number of times a particular Elasticsearch index operation is attempted. If # the indexing operation doesn't succeed after this many retries, the events are # dropped. The default is 3. #max_retries: 3 # The maximum number of events to bulk in a single Elasticsearch bulk API index request. # The default is 50. #bulk_max_size: 50 # Configure http request timeout before failing an request to Elasticsearch. #timeout: 90 # The number of seconds to wait for new events between two bulk API index requests. # If `bulk_max_size` is reached before this interval expires, addition bulk index # requests are made. #flush_interval: 1 # Boolean that sets if the topology is kept in Elasticsearch. The default is # false. This option makes sense only for Packetbeat. #save_topology: false # The time to live in seconds for the topology information that is stored in # Elasticsearch. The default is 15 seconds. #topology_expire: 15 # tls configuration. By default is off. #tls: # List of root certificates for HTTPS server verifications certificate_authorities: ["/etc/pki/tls/certs/logstash-forwarder.crt"] # Certificate for TLS client authentication #certificate: "/etc/pki/client/cert.pem" # Client Certificate Key #certificate_key: "/etc/pki/client/cert.key" # Controls whether the client verifies server certificates and host name. # If insecure is set to true, all server host names and certificates will be # accepted. In this mode TLS based connections are susceptible to # man-in-the-middle attacks. Use only for testing. #insecure: true # Configure cipher suites to be used for TLS connections #cipher_suites: [] # Configure curve types for ECDHE based cipher suites #curve_types: [] # Configure minimum TLS version allowed for connection to logstash #min_version: 1.0 # Configure maximum TLS version allowed for connection to logstash #max_version: 1.2 ### Logstash as output #logstash: # The Logstash hosts hosts: ["localhost:5044"] # Number of workers per Logstash host. #worker: 1 # Set gzip compression level. #compression_level: 3 # Optional load balance the events between the Logstash hosts #loadbalance: true # Optional index name. The default index name depends on the each beat. # For Packetbeat, the default is set to packetbeat, for Topbeat # top topbeat and for Filebeat to filebeat. #index: filebeat # Optional TLS. By default is off. #tls: # List of root certificates for HTTPS server verifications #certificate_authorities: ["/etc/pki/root/ca.pem"] # Certificate for TLS client authentication #certificate: "/etc/pki/client/cert.pem" # Client Certificate Key #certificate_key: "/etc/pki/client/cert.key" # Controls whether the client verifies server certificates and host name. # If insecure is set to true, all server host names and certificates will be # accepted. In this mode TLS based connections are susceptible to # man-in-the-middle attacks. Use only for testing. #insecure: true # Configure cipher suites to be used for TLS connections #cipher_suites: [] # Configure curve types for ECDHE based cipher suites #curve_types: [] ### File as output #file: # Path to the directory where to save the generated files. The option is mandatory. #path: "/tmp/filebeat" # Name of the generated files. The default is `filebeat` and it generates files: `filebeat`, `filebeat.1`, `filebeat.2`, etc. #filename: filebeat # Maximum size in kilobytes of each file. When this size is reached, the files are # rotated. The default value is 10 MB. #rotate_every_kb: 10000 # Maximum number of files under path. When this number of files is reached, the # oldest file is deleted and the rest are shifted from last to first. The default # is 7 files. #number_of_files: 7 ### Console output # console: # Pretty print json event #pretty: false ############################# Shipper ######################################### shipper: # The name of the shipper that publishes the network data. It can be used to group # all the transactions sent by a single shipper in the web interface. # If this options is not defined, the hostname is used. #name: # The tags of the shipper are included in their own field with each # transaction published. Tags make it easy to group servers by different # logical properties. #tags: ["service-X", "web-tier"] # Uncomment the following if you want to ignore transactions created # by the server on which the shipper is installed. This option is useful # to remove duplicates if shippers are installed on multiple servers. #ignore_outgoing: true # How often (in seconds) shippers are publishing their IPs to the topology map. # The default is 10 seconds. #refresh_topology_freq: 10 # Expiration time (in seconds) of the IPs published by a shipper to the topology map. # All the IPs will be deleted afterwards. Note, that the value must be higher than # refresh_topology_freq. The default is 15 seconds. #topology_expire: 15 # Internal queue size for single events in processing pipeline #queue_size: 1000 # Configure local GeoIP database support. # If no paths are not configured geoip is disabled. #geoip: #paths: # - "/usr/share/GeoIP/GeoLiteCity.dat" # - "/usr/local/var/GeoIP/GeoLiteCity.dat" ############################# Logging ######################################### # There are three options for the log ouput: syslog, file, stderr. # Under Windos systems, the log files are per default sent to the file output, # under all other system per default to syslog. logging: # Send all logging output to syslog. On Windows default is false, otherwise # default is true. #to_syslog: true # Write all logging output to files. Beats automatically rotate files if rotateeverybytes # limit is reached. #to_files: false # To enable logging to files, to_files option has to be set to true files: # The directory where the log files will written to. #path: /var/log/mybeat # The name of the files where the logs are written to. #name: mybeat # Configure log file size limit. If limit is reached, log file will be # automatically rotated rotateeverybytes: 10485760 # = 10MB # Number of rotated log files to keep. Oldest files will be deleted first. #keepfiles: 7 # Enable debug output for selected components. To enable all selectors use ["*"] # Other available selectors are beat, publish, service # Multiple selectors can be chained. #selectors: [ ] # Sets log level. The default log level is error. # Available log levels are: critical, error, warning, info, debug #level: error

@scottalanmiller said in Building ELK on CentOS 7: @dafyre said in Building ELK on CentOS 7: So... I went through and ran the script and it seems to have worked fine... What next? Edit: To collect logs from the local server, I also had to install filebeat on this server. So I reckon I can now go and install it on all my other systems as well. Yes, install Filebeat and point it to ELK. Check my Filebeat article for more info. Didn't realize you had one. But I'm good now. Logs are collecting as we speak. Bonus: Fail2Ban and Apache logs also work great in ELK.

@ou_snaaksie said in Installing Rocket.Chat on CentOS 7: The installation worked perfetly, but after restarting the server I am unable to access Rocketchat. I've run the line: /opt/Rocket.Chat/node_modules/forever/bin/forever start /opt/Rocket.Chat/main.js but it is still not working. Use this command to see what is listening... netstat -tulpn

@scottalanmiller said in Installing MongoDB 3.2 on CentOS 7: Just tested and deployed to CentOS 7.2 on Linode. This failed me, so I went to the mongo docs and the baseurl contains the variable $releasever. using that results in redhat//mongodb in the file, which is why I assume you hard coded that bit. Escaping the $ fixes it. cat > /etc/yum.repos.d/mongodb-org-3.2.repo <<EOF [mongodb-org-3.2] name=MongoDB Repository baseurl=https://repo.mongodb.org/yum/redhat/\$releasever/mongodb-org/3.2/x86_64/ gpgcheck=1 enabled=1 gpgkey=https://www.mongodb.org/static/pgp/server-3.2.asc EOF

This will be good for things like the Rocket.Chat system too. Was thinking that we would get that up and running in the lab for communication between people working in the lab so that they could coordinate easily. Although perhaps just an IRC channel would make more sense for that. But delivering those kinds of things over ZeroTier is easy.

@antonit said: What is the default db admin? root