M9K blog: заметки с тегом администрирование

Bombardier

Fri, 24 Jan 2025 15:03:29 +0000

Максимальная простая и удобная тулза для тестирования нагрузки веб-приложений.
GitHub
Пример:

bombardier -c 125 -n 10000000 http://localhost:8080

Oracle: Cloning scheme in entire DB

Tue, 06 Aug 2024 07:27:14 +0000

>CREATE USER <SCHEME_DEST> IDENTIFIED BY "<SCHEME_DEST_PASSWORD>";
>GRANT CONNECT TO <SCHEME_DEST>;
>GRANT CREATE SESSION TO <SCHEME_DEST>;
>ALTER USER <SCHEME_DEST> quota unlimited on <DEFAULT_USER_TABLESPACE>;
>expdp system/<SYSTEM PASSWORD>@<DB_SID> schemas=<SCHEME_SRC> directory=<DIRECTORY NAME> dumpfile=<DUMP NAME>.dmp logfile=explog.txt
>impdp system/<SYSTEM PASSWORD>@<DB_SID> directory=<DIRECTORY NAME> dumpfile=<DUMP NAME>.dmp logfile=implog.txt remap_schema=<SCHEME_SRC>:<SCHEME_DEST> transform=OID:N

OpenSSL view cert info

Mon, 15 Jul 2024 03:31:18 +0000

openssl x509 -noout -text -in 'cerfile.cer';

Add NonPassword Sudo to sudoers

Mon, 15 Jul 2024 03:14:19 +0000

echo "$USER ALL=(ALL:ALL) NOPASSWD: ALL" | sudo tee /etc/sudoers.d/$USER

Проверка работы FTPs с использованием сертификатов

Fri, 12 Jul 2024 05:47:00 +0000

curl -3 -k -v --ftp-ssl --tlsv1.2 --ftp-ssl-reqd --ftp-pasv --key client.key --cacert ca.crt --cert client.crt --user $USERNAME ftp://$IP:$PORT

Kerberos kinit: invalid UID in persistent keyring name while getting default ccache

Mon, 15 Apr 2024 05:37:14 +0000

Быстрофикс:

export KRB5CCNAME=`mktemp`

или отредактировать /etc/krb5.conf

[libdefaults]
# ...
# default_ccache_name = KEYRING:persistent:%{uid}
  default_ccache_name = /tmp/krb5cc_%{uid}

Bash Mkdir from list

Mon, 15 Apr 2024 04:56:44 +0000

#!/bin/bash
LIST=(elem1 elem2 elem3)
mkdir "${LIST[@]}"

Old Apache Kafka + ZooKeeper + Clickhouse in Docker

Thu, 02 Nov 2023 07:52:07 +0000

docker-compose.yml

version: '3.5'
services:
  kafka:
    image: bitnami/kafka:2.6.0
    ports:
      - "9092:9092"
    environment:
      - KAFKA_BROKER_ID=1
      - KAFKA_LISTENERS=PLAINTEXT://:9092
      - KAFKA_ADVERTISED_LISTENERS=PLAINTEXT://172.23.0.13:9092
      - KAFKA_ZOOKEEPER_CONNECT=zookeeper:2181
      - ALLOW_PLAINTEXT_LISTENER=yes
    depends_on:
      - zookeeper
    networks:
      clickhouse-network:
        ipv4_address: 172.23.0.13
  zookeeper:
    image: zookeeper:3.5.8
    container_name: zookeeper
    hostname: zookeeper
    ports:
      - "2181:2181"
    environment:
      - ALLOW_ANONYMOUS_LOGIN=yes
    networks:
      clickhouse-network:
        ipv4_address: 172.23.0.10
  clickhouse01:
    image: yandex/clickhouse-server:20.8.12.2
    container_name: clickhouse01
    hostname: clickhouse01
    networks:
      clickhouse-network:
        ipv4_address: 172.23.0.11
    ports:
      - "127.0.0.1:8123:8123"
      - "127.0.0.1:9000:9000"
    volumes:
      - ${PWD}/clickhouse01:/etc/clickhouse-server
      - /mnt/volume/clickhouse01/data:/var/lib/clickhouse/
      - /mnt/volume/clickhouse01/logs:/var/log/clickhouse-server/
    depends_on:
      - zookeeper
  clickhouse02:
    image: yandex/clickhouse-server:20.8.12.2
    container_name: clickhouse02
    hostname: clickhouse02
    networks:
      clickhouse-network:
        ipv4_address: 172.23.0.12
    volumes:
      - ${PWD}/clickhouse02:/etc/clickhouse-server
      - /mnt/volume/clickhouse02/data:/var/lib/clickhouse/
      - /mnt/volume/clickhouse02/logs:/var/log/clickhouse-server/
    depends_on:
      - zookeeper

networks:
  clickhouse-network:
    name: clickhouse-network
    ipam:
      config:
        - subnet: 172.23.0.0/24

Windows Calculate md5sum

Mon, 23 Oct 2023 09:44:15 +0000

certutil -hashfile <file> MD5

GitLab Runner with Ansible & Kerberos

Fri, 20 Oct 2023 10:08:08 +0000

FROM alpine:3.16

RUN apk update && \
apk add --no-cache git gitlab-runner ansible gawk krb5 dumb-init && \
apk add --upgrade openssh-client-krb5 && \
rm -rf /tmp/* && \
rm -rf /var/cache/apk/*

RUN sed -i -e "s#\(^gitlab-runner:x\):[^:]\+:\(.*\)#\1:1010:\2#" /etc/group
RUN sed -i -e "s#\(^gitlab-runner:x\):[^:]\+:[^:]\+:\(.*\)#\1:1010:1010:\2#" /etc/passwd
RUN chown -R 1010:1010 /var/lib/gitlab-runner

COPY krb5.conf /etc/krb5.conf
COPY .gitconfig /var/lib/gitlab-runner/
COPY entrypoint /

STOPSIGNAL SIGQUIT
ENTRYPOINT ["/usr/bin/dumb-init", "/entrypoint"]
CMD ["run", "--user=gitlab-runner", "--working-directory=/var/lib/gitlab-runner"]

OracleSQL История неудачных входов пользователя

Fri, 20 Oct 2023 09:51:19 +0000

Возникла задача посмотреть историю неудачных входов пользователя за период:

SELECT username, terminal, timestamp,returncode  FROM dba_audit_session WHERE username = 'USERNAME' AND RETURNCODE !=0 AND TIMESTAMP between
    to_date('2023-10-20 00:00:00', 'yyyy-mm-dd HH24:MI:SS') and
    to_date('2023-10-20 16:43:00', 'yyyy-mm-dd HH24:MI:SS')

OracleSQL profile password lifetime

Fri, 20 Oct 2023 08:19:53 +0000

select * from dba_profiles s where s.profile='PROFILE_NAME' 
and resource_name='PASSWORD_LIFE_TIME';

j2 Whitespace Control

Thu, 19 Oct 2023 10:48:54 +0000

Столкнулся с проблемой, что if-else condition отлично отрабатывает в рамках Ansible-скрипта, но при этом в выходном файле генерится после условия пустая строка. Поковырял ман, называется это trim_blocks и lstrip_blocks соответственно.
Выглядит следующим образом:

<div>
    {% if True %}
        yay
    {% endif %}
</div>

<div>

        yay

</div>

Лечится магическим символом:

В случае с генерируемым из темплейта Ansible-файла:

{% if variable== 'value' %}
    "bla"
{% else %}
    "bla-bla"
{% endif -%}

Start Java App over proxy

Tue, 17 Oct 2023 08:24:43 +0000

JAVA_OPTS="-Xms64m -Xmx512m -Djava.io.tmpdir=$TMP P -Dhttps.proxyHost=%PROXY_IP% -Dhttps.proxyPort=%PROXY_PORT% -Dhttp.proxyHost=%PROXY_IP% -Dhttp.proxyPort=%PROXY_PORT% -Dhttp.nonProxyHosts='localhost|127.0.0.1'  "
java $JAVA_OPTS -jar application.jar

Apache — Forward Proxy 2 Squid

Fri, 21 Apr 2023 09:11:25 +0000

Listen 0.0.0.0:9999

<VirtualHost 0.0.0.0:9999>
 ServerAdmin admin@admin.admin
 DocumentRoot /site/share/htdoc/empty
 ServerName admin.admin
 ErrorLog "|rotatelogs /logs/log.9999.error_logtt.%Y%m%d 86400"
 TransferLog "|/rotatelogs  /logs/log.9999.access_logtt.%Y%m%d 86400"

<IfModule mod_security2.c>
  SecRuleEngine Off
</IfModule>

<IfModule mod_security.c>
  SecFilterEngine Off
  SecFilterScanPOST Off
</IfModule>

#htttps support
SSLProxyEngine On
ProxyRequests On

ProxyRemote * http://squid.address:3128
ProxyPass /something https://%proxied url%

 RemoveHandler .html .htm

</VirtualHost>

Окончание периода действия лицензий RDP

Wed, 05 Apr 2023 04:04:25 +0000

wmic /namespace:\\root\CIMV2\TerminalServices PATH Win32_TerminalServiceSetting WHERE (__CLASS !="") CALL GetGracePeriodDays

Dive

Mon, 30 Jan 2023 10:11:22 +0000

Наткнулся на толковую утилиту для просмотр файловой системы контейнера без запуска — и вложенных слоёв.
Ссылка на гитхаб

Docker Proxy

Tue, 24 Jan 2023 07:26:41 +0000

cd /etc/systemd/system/docker.service.d
touch http-proxy.conf

[Service]
Environment="HTTP_PROXY=http://proxy:3128"
Environment="HTTPS_PROXY=http://proxy:3128"
Environment="NO_PROXY=localhost,127.0.0.1,::1,proxy"

systemctl daemon-reload
service docker restart
systemctl show --property=Environment docker

Telnet нескольких портов

Mon, 14 Nov 2022 07:10:37 +0000

#!/bin/bash
BDPORT=(1 2 3 4 5)
for SERVER in ${BDPORT[@]}; do
echo "testing port $SERVER";
sleep 1 | 192.168.100.150 $SERVER > log;
done

Git SH executable

Thu, 27 Jan 2022 04:12:50 +0000

git update-index --chmod=+x path/to/file
git update-index --chmod=-x path/to/file