LINUX.ORG.RU

Сообщения petav

 

apache2 proxy recursion

После установки веб-приложение создало конфиг apache и стало доступно по http://0.0.0.0/egroupware

# cat /etc/apache2/sites-enabled/egroupware.conf
# Apache and PHP configuration for EGroupware
#
# Many settings are required to have a # certain value for eGroupWare
# to function reasonably, so only change something if you are sure.

# this makes EGroupware available for all vhosts
Alias /egroupware /usr/share/egroupware

# Enable ActiveSync protocol support via eSync app
Alias /Microsoft-Server-ActiveSync /usr/share/egroupware/activesync/index.php

RedirectMatch ^/.well-known/(caldav|carddav)$ /egroupware/groupdav.php/
# iOS 4.3+ calendar requires that to autodetect accounts
RedirectMatch ^(/principals/users/.*)$ /egroupware/groupdav.php$1

<Directory /usr/share/egroupware/>
  Options FollowSymLinks ExecCGI
  AllowOverride None
  <IfModule !mod_authz_core.c>
    # Apache 2.4
    Order allow,deny
    Allow from all
  </IfModule>
  <IfModule mod_authz_core.c>
    # Apache 2.4
    Require all granted
  </IfModule>
  DirectoryIndex index.html index.php
  AddHandler cgi-script .cgi
  AddDefaultCharset Off
  php_flag file_uploads on
  php_flag log_errors on
  php_flag magic_quotes_gpc off
  php_flag magic_quotes_runtime off
  php_flag register_globals off
  php_flag short_open_tag on
  php_flag track_vars on
  php_flag display_errors off
  # E_ALL & ~E_NOTICE & ~E_STRICT = 8191 - 8 - 2048 = 6135
  php_value error_reporting 6135
  php_value max_execution_time 90
  php_admin_value mbstring.func_overload 0
  php_value memory_limit 128M
  php_value include_path .
  php_admin_value open_basedir /usr/share/egroupware:/var/lib/egroupware:/tmp:/usr/bin
  php_value upload_max_filesize 64M
  php_admin_value upload_tmp_dir /tmp
  php_value post_max_size 65M
  php_value max_input_vars 3000
  php_admin_value session.gc_maxlifetime 14400
  <Files ~ "\.inc\.php$">
    <IfModule !mod_authz_core.c>
      # Apache 2.4
      Order allow,deny
      Deny from all
    </IfModule>
    <IfModule mod_authz_core.c>
     # Apache 2.4
     Require all denied
    </IfModule>
  </Files>
  # Enable the following block in order to redirect logins to HTTPS:
  #RewriteEngine On
  #RewriteCond %{HTTPS} !^on$
  #RewriteCond %{SCRIPT_FILENAME} login\.php [OR]
  #RewriteCond %{AUTH_TYPE} Basic [NC]
  #RewriteRule .* https://%{HTTP_HOST}/%{REQUEST_URI} [L,R]
</Directory>

# Enable the following block in order to redirect setup activities to HTTPS:
#<Directory /usr/share/egroupware/setup/>
#  RewriteEngine On
#  RewriteCond %{HTTPS} !^on$
#  RewriteRule .* https://%{HTTP_HOST}/%{REQUEST_URI} [L,R]
#</Directory>

Требуется сделать приложение доступным по DNS, причем приведенный конфиг нельзя править.

Создал VirtualHost

<VirtualHost *:80>
        ServerAdmin admin@example.com
        ServerName egw.example.local
        ServerAlias egw.example.com

        ProxyRequests Off
        ProxyPreserveHost On
        ProxyVia full

        <proxy *>
            Order deny,allow
            Allow from all
        </proxy>

        ProxyPass / http://localhost:80/egroupware/
        ProxyPassReverse / http://localhost:80/egroupware/

</VirtualHost>

На такое в логеapache2/errror.log возмущение:

Sat Sep 30 23:44:55.597849 2017] [proxy_http:error] [pid 21618] (20014)Internal error (specific information not available): [client ::1:53400] AH01102: error reading status line from remote server localhost:80
[Sat Sep 30 23:44:55.597922 2017] [proxy:error] [pid 21618] [client ::1:53400] AH00898: Error reading from remote server returned by /egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/egroupware/

 ,

petav
()

Web клиент XMPP выбор

Используем psi+: комнаты для общения по темам. Нужен аналог, но что бы через http://psi.example.ru работало на своем сервере.

 ,

petav
()

namespace dovecot

Когда-да давно было сделано так /etc/dovecot/dovecot.conf

namespace {
  inbox = yes
  location =
  prefix = INBOX.
  separator = .
}
Структура хранения организовалась так /home/vmail/example.ru/user
# ls -a1
.
..
cur
dovecot.index
dovecot.index.cache
dovecot.index.log
dovecot.index.thread
dovecot-keywords
dovecot.mailbox.log
dovecot-uidlist
dovecot-uidvalidity
dovecot-uidvalidity.554a6335
.Drafts
.Junk
new
.Outbox
.Sent
subscriptions
.Templates
tmp
.Trash
Некоторые клиенты ждут что папка «Outbox» будет на верхнем уровне и не дают это переопределить на «INBOX.Outbox».

  • Что поправить в /etc/dovecot/dovecot.conf?
  • Понимаю, что после перезапуска dovecot ораганизует(создаст) папки по новому и достаточно будет скопировать?

 ,

petav
()

Egroupware filemanager external smb

Поделитесь личным how-to как подмонтировать в «Домашний каталог» filemanager EGW внешний smb каталог. Чтение VFS System и эксперименты не приводит к результату.

 egroupware, filemanager,

petav
()

Synergy между Debian 9 и Windows 7

Имеется:

  • слева Debian 9 (два экрана)
  • справа Windows 7 (два экрана)

Задача объеденить их для управления с одной клавиатура+мышь! alozovskoy прошу подсказку. В репозитории wheezy пакет имеется synergy (1.3.8-2). Что использовать для Windows 7? Отсюда можно брать?

 

petav
()

Решить задачу «XRDP Русская раскладка»

Нужно дожать задачу XRDP Русская раскладка. Предложения стоимости решения на kitslt@kitslt.ru. Вопросы в тему.

 , , ,

petav
()

Аlready in active block job

Сделан был снапшот

virsh snapshot-create-as --domain s2.example.com "s2.example.com-state-20170828" --no-metadata \
        --atomic --disk-only vda

Диск заменился

# virsh domblklist s2.example.com
Target     Source
------------------------------------------------
vda        /volume0/86984-s2.example.com/s2.example.com-state-vda-2017-08-28.155639.gcow2

Тут по оригиналу vda (lvm-том) работал dd но ему kill -9 сделали. После этого попытка commit заканчивается так:

#  virsh blockcommit s2.example.com vda  --active --pivot
error: block copy still active: disk 'vda' already in active block job

Заданий активных нет.

# virsh blockjob s2.mico-tech.com vda  --info
No current block job for vda
# virsh blockjob s2.example.com /volume0/86984-s2.example.com/s2.example.com-state-vda-2017-08-28.155639.gcow2  --info
No current block job for /volume0/86984-s2.example.com/s2.example.com-state-vda-2017-08-28.155639.gcow2
Как полечить?

 ,

petav
()

ftp в одну строку

Есть

ii  ftp                                    0.17-27                            i386         classical file transfer client

Полжить файл «/home/123» на ftp-сервер:

admin:pass@ftp.example.com:21
в папку «/remote/123» одной строкой. Не соображу!

 

petav
()

Libvirt подключить клавиатуру pc105

Подскажите как разметить домен VM для подключения клавиатуры pc105. Сейчас:

...
<input type='tablet' bus='usb'/>
<input type='mouse' bus='ps2'/>
<input type='keyboard' bus='ps2'/>
...
В результате
28: PS/2 00.0: 10800 Keyboard
  [Created at input.226]
  Unique ID: nLyy.+49ps10DtUF
  Hardware Class: keyboard
  Model: "AT Translated Set 2 keyboard"
  Vendor: 0x0001 
  Device: 0x0001 "AT Translated Set 2 keyboard"
  Compatible to: int 0x0211 0x0001
  Device File: /dev/input/event0
  Device Number: char 13:64
  Driver Info #0:
    XkbRules: xfree86
    XkbModel: pc104
  Config Status: cfg=new, avail=yes, need=no, active=unknown

 ,

petav
()

XRDP Русская раскладка

Здравствуйте!

Прошу совета в ремонте русской раскладки в XRDP

# dpkg -l |grep xrdp
ii  xorgxrdp                              0.9.1-9                                     amd64        Remote Desktop Protocol (RDP) modules for X.org
ii  xrdp                                  0.9.1-9                                     amd64        Remote Desktop Protocol (RDP) server
Key-maps перегенирировал (в запущененной XRDP сессии)
xrdp-genkeymap /tmp/km-00000419.ini
и заменил в папке /etc/xrdp
# ls -l /etc/xrdp |grep 419
-rw-r--r-- 1 root root 14778 авг 22 05:44 km-00000419.ini
-rw-r--r-- 1 root root 11320 май  4 19:59 km-00000419.ini_
Перезапустил xrdp
service xrdp restart

подключился к сесиии XRDP и выполнил

setxkbmap -layout "us,ru(winkeys)" -model "pc105" -option "grp:ctrl_shift_toggle,grp_led:scroll"
Результатат 0. Правда если содержимым km-00000419.ini заполнить файл km-00000409.ini то тогда руский ввод при любой расскаладке, всегда.!Использую
[Xvnc]
name=Xvnc
lib=libvnc.so
username=ask
password=ask
ip=127.0.0.1
port=-1

 ,

petav
()

XRDP подключение к существуеющей сессии

Пользователи подключаются к RDP через

[Xvnc]
name=Xvnc
lib=libvnc.so
username=ask
password=ask
ip=127.0.0.1
port=-1
 lsof  -b -w -n -c /^Xvnc$/b -a -iTCP:5900-5999
COMMAND   PID          USER   FD   TYPE  DEVICE SIZE/OFF NODE NAME
Xvnc     1527          user    6u  IPv6 1175406      0t0  TCP [::1]:5935->[::1]:54862 (ESTABLISHED)
Xvnc     1527          user    7u  IPv4 1175403      0t0  TCP 127.0.0.1:5935 (LISTEN)
Xvnc     1527          user    9u  IPv6 1175404      0t0  TCP [::1]:5935 (LISTEN)
Xvnc     8494         user2    7u  IPv4 1086524      0t0  TCP 127.0.0.1:5931 (LISTEN)
Xvnc     8494         user2    9u  IPv6 1086525      0t0  TCP [::1]:5931 (LISTEN)
Xvnc     9156         user3    7u  IPv4 1085333      0t0  TCP 127.0.0.1:5932 (LISTEN)
Xvnc     9156         user3    9u  IPv6 1085334      0t0  TCP [::1]:5932 (LISTEN)
Xvnc    25267         user4    7u  IPv4 1021079      0t0  TCP 127.0.0.1:5925 (LISTEN)
Xvnc    25267         user4    9u  IPv6 1021080      0t0  TCP [::1]:5925 (LISTEN)
Xvnc    31582          user    7u  IPv4 1164173      0t0  TCP 127.0.0.1:5933 (LISTEN)
Xvnc    31582          user    9u  IPv6 1164174      0t0  TCP [::1]:5933 (LISTEN)
Xvnc    32075         user5    7u  IPv4 1158119      0t0  TCP 127.0.0.1:5934 (LISTEN)
Xvnc    32075         user5    9u  IPv6 1158120      0t0  TCP [::1]:5934 (LISTEN)
Для подключения берется следующий порт. Все это привязывается к оборудованию пользователя. И если мы на одной и той же машине будем отключаться/подключатся 110500 раз то все ок, видим свои открытые программы. Но если мы перебежали в соседную комнату то xrdp для нашего нового рабочего места создает новую сессию.

Это особенность или можно бороться!

 

petav
()

Чем надо шифровать Бэкап?

Необходимо зашифровать образы VM (файл dd и xml в архиве) перед отправкой в архив. И надо что бы в системе (гипервизоре) ключей не оставалось. Ключи(пароли) пишутся на флешку и прячуться в сейф. На какую технологию смотреть?

 

petav
()

Adduser без интерактивности

Puppet «Resource Type: user» создает пользователя, но в оболочке GNOME его не видать. Понял, что правильно его создавать через adduser. Но этот adduser очень интерактивный.

Не могу понять, как избавиться от интеркивности в части пароль, фамилия и прочие.

 ,

petav
()

Keymap Closed socket

Лог подключения клиента

Aug 14 15:19:08 guacamole guacd[25718]: Protocol "rdp" selected
Aug 14 15:19:08 guacamole guacd[25718]: Connection ID is "$365647c7-03ad-4017-85b9-f5b42e97f911"
Aug 14 15:19:08 guacamole guacd[25718]: No security mode specified. Defaulting to RDP.
Aug 14 15:19:08 guacamole guacd[25718]: Loading keymap "base"
Aug 14 15:19:08 guacamole guacd[25718]: Loading keymap "en-us-qwerty"
Aug 14 15:19:08 guacamole guacd[25718]: Starting client
Aug 14 15:19:08 guacamole kernel: [623643.090478] guacd[25722]: segfault at 7f2594d924f0 ip 00007f2594d924f0 sp 00007f2588effc98 error 15
Лог со строны сервера
Aug 14 15:26:14 s1 xrdp[8949]: (8949)(140432932494144)[INFO ] A connection received from: ::ffff:192.168.206.26 port 44797
Aug 14 15:26:14 s1 xrdp[8949]: (8949)(140432932494144)[DEBUG] Closed socket 12 (AF_INET6 ::ffff:192.168.236.85 port 3389)
Aug 14 15:26:14 s1 xrdp[13914]: (13914)(140432932494144)[DEBUG] Closed socket 11 (AF_INET6 :: port 3389)
Aug 14 15:26:14 s1 xrdp[13914]: (13914)(140432932494144)[INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
Aug 14 15:26:14 s1 xrdp[13914]: (13914)(140432932494144)[INFO ] Using default X.509 key file: /etc/xrdp/key.pem
Aug 14 15:26:14 s1 xrdp[13914]: (13914)(140432932494144)[DEBUG] Security layer: requested 0, selected 0
Aug 14 15:26:14 s1 xrdp[13914]: (13914)(140432932494144)[DEBUG] xrdp_0000365a_wm_login_mode_event_00000001
Aug 14 15:26:14 s1 xrdp[13914]: (13914)(140432932494144)[INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
Aug 14 15:26:14 s1 xrdp[13914]: (13914)(140432932494144)[WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file
Aug 14 15:26:14 s1 xrdp[13914]: (13914)(140432932494144)[DEBUG] Closed socket 12 (AF_INET6 ::ffff:192.168.236.85 port 3389)
Aug 14 15:26:14 s1 xrdp[13914]: (13914)(140432932494144)[DEBUG] xrdp_mm_module_cleanup
Aug 14 15:26:14 s1 xrdp[13914]: (13914)(140432932494144)[ERROR] Listening socket is in wrong state, terminating listener
т.е. сервер прекращает общения после того как понмиает что ему не нравится keymap клиента, клиент реагирует на это segfault. Что не так с keymap, как глубже подебажить?

 

petav
()

Кастомизация Gnome на основе роли пользователя

Используется GNOME и xrdp для подключения к нему. У обычных пользователей есть много чего не нужного: Информация о системе, Cписок пользователей, Список приложений и т.п.

Как все централизованно организовать, что убрать и оставить для «Обычный пользователь» только ярлык на 1С, принтеры, и кнопку «Выйти»?

 , ,

petav
()

SSLv3 read client certificate A

На запрос агента

puppet agent --verbose --test
puppet сервер выдает
[2017-08-10 14:44:05] ERROR OpenSSL::SSL::SSLError: SSL_accept SYSCALL returned=5 errno=0 state=SSLv3 read client certificate A
        /usr/lib/ruby/vendor_ruby/puppet/network/http/webrick.rb:32:in `accept'
        /usr/lib/ruby/vendor_ruby/puppet/network/http/webrick.rb:32:in `block (2 levels) in listen'
        /usr/lib/ruby/1.9.1/webrick/server.rb:191:in `call'
        /usr/lib/ruby/1.9.1/webrick/server.rb:191:in `block in start_thread'

Только на часть агентов такая реакция. Связи между версиями агентов, ОС не проследил. Помогите интерпретировать ошибку!

 

petav
()

Выбор UPS

Задача: Корректно выключать ПК при отключении электроэнергии.

Подскажите бюджетный UPS от 450VA с интерфейсом USB/COM, да что бы Nut его понимал.

 ,

petav
()

ipsec racoon no suitable proposal found

Удаленная железка usg60 186.37.112.232 (за ней сеть 192.168.237.0/24)
не подключается к racoon 19.124.100.5 (за ним сеть 192.168.206.0/24)

/etc/racoon/racoon.conf

log debug;
path pre_shared_key "/etc/racoon/psk.txt";
path certificate "/etc/racoon/certs";
remote 186.37.112.232 {
        exchange_mode main,aggressive;
        proposal {
                encryption_algorithm 3des;
                hash_algorithm sha1;
                authentication_method pre_shared_key;
                dh_group modp1024;
        }
        generate_policy off;
}

sainfo address 192.168.206.0/24[any] any address 192.168.237.0/24[any] any {
        pfs_group modp768;
        encryption_algorithm 3des;
        authentication_algorithm hmac_md5;
        compression_algorithm deflate;
/etc/ipsec-tools.conf
flush;
spdflush
/etc/racoon/psk.txt
186.37.112.232 345346535467546

Aug  3 13:53:17 debro racoon: DEBUG: ===
Aug  3 13:53:17 debro racoon: DEBUG: 398 bytes message received from 186.37.112.232[500] to 19.124.100.5[500]
Aug  3 13:53:17 debro racoon: DEBUG: #012b4218a9b ed305e7a 00000000 00000000 01100200 00000000 0000018e 0d000038#01200000001 00000001 0000002c 00010001 00000024 00010000 80010001 80020001#01280030001 80040001 800b0001 000c0004 00015180 0d000014 f758f226 8b2b3520#012240880e4 3354895b b963c13a 4b95f58c 461f68a6 2e5ec2a5 46abd94c 95499191#012bb841687 86734168 9ef2c95e fea36d69 85365dd5 3d387684 11efb795 1ab2eb01#01236ea47ee c4975e5a f16a2c26 766eea7a 6693e2eb 27373395 1c5ea48e ad60e5be#012fc4b90bb d00a9c44 3f872706 ae40
Aug  3 13:53:17 debro racoon: DEBUG: ===
Aug  3 13:53:17 debro racoon: INFO: respond new phase 1 negotiation: 19.124.100.5[500]<=>186.37.112.232[500]
Aug  3 13:53:17 debro racoon: INFO: begin Identity Protection mode.
Aug  3 13:53:17 debro racoon: DEBUG: begin.
Aug  3 13:53:17 debro racoon: DEBUG: seen nptype=1(sa)
Aug  3 13:53:17 debro racoon: DEBUG: seen nptype=13(vid)
Aug  3 13:53:17 debro racoon: DEBUG: seen nptype=13(vid)
Aug  3 13:53:17 debro racoon: DEBUG: seen nptype=13(vid)
Aug  3 13:53:17 debro racoon: DEBUG: seen nptype=13(vid)
Aug  3 13:53:17 debro racoon: DEBUG: seen nptype=13(vid)
Aug  3 13:53:17 debro racoon: DEBUG: seen nptype=13(vid)
Aug  3 13:53:17 debro racoon: DEBUG: seen nptype=13(vid)
Aug  3 13:53:17 debro racoon: DEBUG: seen nptype=13(vid)
Aug  3 13:53:17 debro racoon: DEBUG: seen nptype=13(vid)
Aug  3 13:53:17 debro racoon: DEBUG: seen nptype=13(vid)
Aug  3 13:53:17 debro racoon: DEBUG: succeed.
Aug  3 13:53:17 debro racoon: DEBUG: received unknown Vendor ID
Aug  3 13:53:17 debro racoon: DEBUG: #012f758f226 68750f03 b08df6eb e1d00403
Aug  3 13:53:17 debro racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-02
Aug  3 13:53:17 debro racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-02#012
Aug  3 13:53:17 debro racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-03
Aug  3 13:53:17 debro racoon: INFO: received Vendor ID: RFC 3947
Aug  3 13:53:17 debro racoon: INFO: received Vendor ID: DPD
Aug  3 13:53:17 debro racoon: DEBUG: remote supports DPD
Aug  3 13:53:17 debro racoon: DEBUG: received unknown Vendor ID
Aug  3 13:53:17 debro racoon: DEBUG: #012afcad713 68a1f1c9 6b8696fc 7757
Aug  3 13:53:17 debro racoon: DEBUG: received unknown Vendor ID
Aug  3 13:53:17 debro racoon: DEBUG: #012c44fedc7 49f9e6ae 5b04ec96 9cb25d69
Aug  3 13:53:17 debro racoon: DEBUG: received unknown Vendor ID
Aug  3 13:53:17 debro racoon: DEBUG: #012f9196df8 6b812fb0 f68026d8 876dcb7b 00042500
Aug  3 13:53:17 debro racoon: DEBUG: received unknown Vendor ID
Aug  3 13:53:17 debro racoon: DEBUG: #012ac40f8c4 389927c6 e8ac2453 1bb78b2b 35202408 2c26766e#012ea7a6693 e2eb2737 33951c5e a48ead60 e5befc4b 90bbd00a 9c443f87 2706ae40
Aug  3 13:53:17 debro racoon: DEBUG: total SA len=52
Aug  3 13:53:17 debro racoon: DEBUG: #01200000001 00000001 0000002c 00010001 00000024 00010000 80010001 80020001#01280030001 80040001 800b0001 000c0004 00015180
Aug  3 13:53:17 debro racoon: DEBUG: begin.
Aug  3 13:53:17 debro racoon: DEBUG: seen nptype=2(prop)
Aug  3 13:53:17 debro racoon: DEBUG: succeed.
Aug  3 13:53:17 debro racoon: DEBUG: proposal #0 len=44
Aug  3 13:53:17 debro racoon: DEBUG: begin.
Aug  3 13:53:17 debro racoon: DEBUG: seen nptype=3(trns)
Aug  3 13:53:17 debro racoon: DEBUG: succeed.
Aug  3 13:53:17 debro racoon: DEBUG: transform #0 len=36
Aug  3 13:53:17 debro racoon: DEBUG: type=Encryption Algorithm, flag=0x8000, lorv=DES-CBC
Aug  3 13:53:17 debro racoon: DEBUG: encryption(des)
Aug  3 13:53:17 debro racoon: DEBUG: type=Hash Algorithm, flag=0x8000, lorv=MD5
Aug  3 13:53:17 debro racoon: DEBUG: hash(md5)
Aug  3 13:53:17 debro racoon: DEBUG: type=Authentication Method, flag=0x8000, lorv=pre-shared key
Aug  3 13:53:17 debro racoon: DEBUG: type=Group Description, flag=0x8000, lorv=768-bit MODP group
Aug  3 13:53:17 debro racoon: DEBUG: hmac(modp768)
Aug  3 13:53:17 debro racoon: DEBUG: type=Life Type, flag=0x8000, lorv=seconds
Aug  3 13:53:17 debro racoon: DEBUG: type=Life Duration, flag=0x0000, lorv=4
Aug  3 13:53:17 debro racoon: DEBUG: pair 0:
Aug  3 13:53:17 debro racoon: DEBUG:  0x7f149e7919e0: next=(nil) tnext=(nil)
Aug  3 13:53:17 debro racoon: DEBUG: proposal #0: 1 transform
Aug  3 13:53:17 debro racoon: DEBUG: type=Encryption Algorithm, flag=0x8000, lorv=DES-CBC
Aug  3 13:53:17 debro racoon: DEBUG: type=Hash Algorithm, flag=0x8000, lorv=MD5
Aug  3 13:53:17 debro racoon: DEBUG: type=Authentication Method, flag=0x8000, lorv=pre-shared key
Aug  3 13:53:17 debro racoon: DEBUG: type=Group Description, flag=0x8000, lorv=768-bit MODP group
Aug  3 13:53:17 debro racoon: DEBUG: type=Life Type, flag=0x8000, lorv=seconds
Aug  3 13:53:17 debro racoon: DEBUG: type=Life Duration, flag=0x0000, lorv=4
Aug  3 13:53:17 debro racoon: DEBUG: prop#=0, prot-id=ISAKMP, spi-size=0, #trns=1
Aug  3 13:53:17 debro racoon: DEBUG: trns#=0, trns-id=IKE
Aug  3 13:53:17 debro racoon: DEBUG:   lifetime = 86400
Aug  3 13:53:17 debro racoon: DEBUG:   lifebyte = 0
Aug  3 13:53:17 debro racoon: DEBUG:   enctype = DES-CBC
Aug  3 13:53:17 debro racoon: DEBUG:   encklen = 0
Aug  3 13:53:17 debro racoon: DEBUG:   hashtype = MD5
Aug  3 13:53:17 debro racoon: DEBUG:   authmethod = pre-shared key
Aug  3 13:53:17 debro racoon: DEBUG:   dh_group = 768-bit MODP group
Aug  3 13:53:17 debro racoon: ERROR: no suitable proposal found.
Aug  3 13:53:17 debro racoon: [186.37.112.232] ERROR: failed to get valid proposal.
Aug  3 13:53:17 debro racoon: [186.37.112.232] ERROR: failed to pre-process ph1 packet (side: 1, status 1).
Aug  3 13:53:17 debro racoon: [186.37.112.232] ERROR: phase1 negotiation failed

Прошу подсказку.

 

petav
()

Снять образ VM

Было:

  • Гипервизор KVM
  • Диски VM на LVM размещенные

Делал бэкапы так:

  • Парсим выхлом virsh dumpxm VMname на извлечение пути к диску, к примеру «/dev/vg0/VMname»
  • Делаем LVM-снапшот на диск
  • Снимаем образ LVM-снапшота
  • ...

Профит!

Потом пришли они и диски VM разъехались по ISCSI target-ам (LIO) и подключается к KVM уже так «/dev/disk/by-path/ip-10.10.10.2:3260-iscsi-iqn.2003-01.org.linux-iscsi.disk.x8664:sn.cebd77d086eb-lun-3»

Снапшот уже не сделать на инициаторе! Как модифицировать скрипт бэкапа?

Мои варианты:

  • Смотреть на путь и если он /dev/disk/by-path то выделять IP, идти по ssh на target, там как-то понимать что за том соответствует этому пути, убеждаться что оно LVM и делать LVMsnapshot в систему архивного хранения.

Может в корне что-то поменять, что бы упростить? Спасибо за Ваше время!

 , , lio, ,

petav
()

SATA hard resetting link

Диск sda подключен к контроллеру «Silicon Image, Inc. SiI 3132 Serial ATA Raid II Controller» в момент записи на диск он отваливается.

Диагностика:
Информация lspci по RAID bus controller

02:00.0 RAID bus controller: Silicon Image, Inc. SiI 3132 Serial ATA Raid II Controller (rev 01)
	Subsystem: Silicon Image, Inc. Device 7132
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 64 bytes
	Interrupt: pin A routed to IRQ 16
	Region 0: Memory at f7d84000 (64-bit, non-prefetchable) [size=128]
	Region 2: Memory at f7d80000 (64-bit, non-prefetchable) [size=16K]
	Region 4: I/O ports at e000 [size=128]
	Expansion ROM at f7d00000 [disabled] [size=512K]
	Capabilities: [54] Power Management version 2
		Flags: PMEClk- DSI+ D1+ D2+ AuxCurrent=0mA PME(D0-,D1-,D2-,D3hot-,D3cold-)
		Status: D0 NoSoftRst- PME-Enable- DSel=0 DScale=1 PME-
	Capabilities: [5c] MSI: Enable- Count=1/1 Maskable- 64bit+
		Address: 0000000000000000  Data: 0000
	Capabilities: [70] Express (v1) Legacy Endpoint, MSI 00
		DevCap:	MaxPayload 1024 bytes, PhantFunc 0, Latency L0s <64ns, L1 <1us
			ExtTag- AttnBtn- AttnInd- PwrInd- RBE- FLReset-
		DevCtl:	Report errors: Correctable- Non-Fatal- Fatal- Unsupported-
			RlxdOrd- ExtTag- PhantFunc- AuxPwr- NoSnoop-
			MaxPayload 128 bytes, MaxReadReq 4096 bytes
		DevSta:	CorrErr- UncorrErr+ FatalErr- UnsuppReq+ AuxPwr- TransPend-
		LnkCap:	Port #0, Speed 2.5GT/s, Width x1, ASPM L0s, Latency L0 unlimited, L1 unlimited
			ClockPM- Surprise- LLActRep- BwNot-
		LnkCtl:	ASPM Disabled; RCB 64 bytes Disabled- Retrain- CommClk+
			ExtSynch- ClockPM- AutWidDis- BWInt- AutBWInt-
		LnkSta:	Speed 2.5GT/s, Width x1, TrErr- Train- SlotClk+ DLActive- BWMgmt- ABWMgmt-
	Capabilities: [100 v1] Advanced Error Reporting
		UESta:	DLP- SDES- TLP- FCP- CmpltTO- CmpltAbrt- UnxCmplt- RxOF- MalfTLP- ECRC- UnsupReq+ ACSViol-
		UEMsk:	DLP- SDES- TLP- FCP- CmpltTO- CmpltAbrt- UnxCmplt- RxOF- MalfTLP- ECRC- UnsupReq- ACSViol-
		UESvrt:	DLP+ SDES- TLP- FCP+ CmpltTO- CmpltAbrt- UnxCmplt- RxOF+ MalfTLP+ ECRC- UnsupReq- ACSViol-
		CESta:	RxErr- BadTLP- BadDLLP- Rollover- Timeout- NonFatalErr-
		CEMsk:	RxErr- BadTLP- BadDLLP- Rollover- Timeout- NonFatalErr-
		AERCap:	First Error Pointer: 14, GenCap+ CGenEn- ChkCap+ ChkEn-
	Kernel driver in use: sata_sil24

Информация о том как система «сбрасывает» диск
hard resetting link

Jul 29 01:04:48 bacula kernel: [28716.231729] ata2: exception Emask 0x10 SAct 0x0 SErr 0x10000 action 0xe frozen
Jul 29 01:04:48 bacula kernel: [28716.233751] ata2: SError: { PHYRdyChg }
Jul 29 01:04:48 bacula kernel: [28716.235755] ata2: hard resetting link
Jul 29 01:04:51 bacula kernel: [28718.917945] ata2: SATA link up 1.5 Gbps (SStatus 113 SControl 310)
Jul 29 01:04:51 bacula kernel: [28719.046239] ata2.00: configured for UDMA/33
Jul 29 01:04:51 bacula kernel: [28719.046248] ata2: EH complete
Jul 29 01:05:20 bacula kernel: [28748.279258] ata2: exception Emask 0x10 SAct 0x0 SErr 0x10000 action 0xe frozen
Jul 29 01:05:20 bacula kernel: [28748.281283] ata2: SError: { PHYRdyChg }
Jul 29 01:05:20 bacula kernel: [28748.283288] ata2: hard resetting link
Jul 29 01:05:22 bacula kernel: [28750.580883] ata2: COMRESET failed (errno=-19)
Jul 29 01:05:22 bacula kernel: [28750.582860] ata2: reset failed (errno=-19), retrying in 8 secs
Jul 29 01:05:30 bacula kernel: [28758.278685] ata2: hard resetting link
Jul 29 01:05:32 bacula kernel: [28760.458082] ata2: SATA link up 1.5 Gbps (SStatus 113 SControl 310)
Jul 29 01:05:32 bacula kernel: [28760.570380] ata2.00: configured for UDMA/33
Jul 29 01:05:32 bacula kernel: [28760.570389] ata2: EH complete
Jul 29 01:05:38 bacula kernel: [28766.813705] ata2: exception Emask 0x10 SAct 0x0 SErr 0x10000 action 0xe frozen
Jul 29 01:05:38 bacula kernel: [28766.815706] ata2: SError: { PHYRdyChg }
Jul 29 01:05:38 bacula kernel: [28766.817689] ata2: hard resetting link
Jul 29 01:05:40 bacula kernel: [28768.011906] ata2: COMRESET failed (errno=-19)
Jul 29 01:05:40 bacula kernel: [28768.013861] ata2: reset failed (errno=-19), retrying in 9 secs
Jul 29 01:05:48 bacula kernel: [28776.813394] ata2: hard resetting link
Jul 29 01:05:50 bacula kernel: [28777.977059] ata2: COMRESET failed (errno=-19)
Jul 29 01:05:50 bacula kernel: [28777.978978] ata2: reset failed (errno=-19), retrying in 9 secs
Jul 29 01:05:58 bacula kernel: [28786.810510] ata2: hard resetting link
Jul 29 01:06:00 bacula kernel: [28788.438070] ata2: COMRESET failed (errno=-19)
Jul 29 01:06:00 bacula kernel: [28788.439950] ata2: reset failed (errno=-19), retrying in 34 secs
Jul 29 01:06:33 bacula kernel: [28821.800519] ata2: hard resetting link
Jul 29 01:06:35 bacula kernel: [28823.332106] ata2: COMRESET failed (errno=-19)
Jul 29 01:06:35 bacula kernel: [28823.333955] ata2: reset failed, giving up
Jul 29 01:06:35 bacula kernel: [28823.335766] ata2.00: disabled
Jul 29 01:06:35 bacula kernel: [28823.335775] ata2: exception Emask 0x10 SAct 0x0 SErr 0x50000 action 0xe frozen t4
Jul 29 01:06:35 bacula kernel: [28823.337625] ata2: SError: { PHYRdyChg CommWake }
Jul 29 01:06:35 bacula kernel: [28823.339448] ata2: hard resetting link
Jul 29 01:06:37 bacula kernel: [28825.651448] ata2: COMRESET failed (errno=-19)
Jul 29 01:06:37 bacula kernel: [28825.653254] ata2: reset failed (errno=-19), retrying in 8 secs
Jul 29 01:06:45 bacula kernel: [28833.333251] ata2: hard resetting link
Jul 29 01:06:47 bacula kernel: [28834.960789] ata2: COMRESET failed (errno=-19)
Jul 29 01:06:47 bacula kernel: [28834.962553] ata2: reset failed (errno=-19), retrying in 9 secs
Jul 29 01:06:55 bacula kernel: [28843.330397] ata2: hard resetting link
Jul 29 01:06:56 bacula kernel: [28844.334107] ata2: COMRESET failed (errno=-19)
Jul 29 01:06:56 bacula kernel: [28844.335834] ata2: reset failed (errno=-19), retrying in 34 secs
Jul 29 01:07:30 bacula kernel: [28878.320406] ata2: hard resetting link
Jul 29 01:07:31 bacula kernel: [28879.819973] ata2: COMRESET failed (errno=-19)
Jul 29 01:07:31 bacula kernel: [28879.821664] ata2: reset failed, giving up
Jul 29 01:07:31 bacula kernel: [28879.823334] ata2: exception Emask 0x10 SAct 0x0 SErr 0x50000 action 0xe frozen t3
Jul 29 01:07:31 bacula kernel: [28879.825029] ata2: SError: { PHYRdyChg CommWake }
Jul 29 01:07:31 bacula kernel: [28879.826737] ata2: hard resetting link
Jul 29 01:07:33 bacula kernel: [28880.987639] ata2: COMRESET failed (errno=-19)
Jul 29 01:07:33 bacula kernel: [28880.989314] ata2: reset failed (errno=-19), retrying in 9 secs
Jul 29 01:07:41 bacula kernel: [28889.821095] ata2: hard resetting link
Jul 29 01:07:44 bacula kernel: [28892.496350] ata2: COMRESET failed (errno=-32)
Jul 29 01:07:44 bacula kernel: [28892.497991] ata2: reset failed (errno=-32), retrying in 8 secs
Jul 29 01:07:51 bacula kernel: [28899.818266] ata2: hard resetting link
Jul 29 01:07:52 bacula kernel: [28900.726007] ata2: COMRESET failed (errno=-19)
Jul 29 01:07:52 bacula kernel: [28900.727618] ata2: reset failed (errno=-19), retrying in 35 secs
Jul 29 01:08:26 bacula kernel: [28934.808272] ata2: hard resetting link
Jul 29 01:08:28 bacula kernel: [28936.211843] ata2: COMRESET failed (errno=-19)
Jul 29 01:08:28 bacula kernel: [28936.213422] ata2: reset failed, giving up
Jul 29 01:08:28 bacula kernel: [28936.214974] ata2: exception Emask 0x10 SAct 0x0 SErr 0x50000 action 0xe frozen t2
Jul 29 01:08:28 bacula kernel: [28936.216591] ata2: SError: { PHYRdyChg CommWake }
Jul 29 01:08:28 bacula kernel: [28936.218185] ata2: hard resetting link
Jul 29 01:08:29 bacula kernel: [28937.411524] ata2: COMRESET failed (errno=-19)
Jul 29 01:08:29 bacula kernel: [28937.413099] ata2: reset failed (errno=-19), retrying in 9 secs
Jul 29 01:08:38 bacula kernel: [28946.213007] ata2: hard resetting link
Jul 29 01:08:41 bacula kernel: [28949.120180] ata2: COMRESET failed (errno=-19)
Jul 29 01:08:41 bacula kernel: [28949.121724] ata2: reset failed (errno=-19), retrying in 8 secs
Jul 29 01:08:48 bacula kernel: [28956.210158] ata2: hard resetting link
Jul 29 01:08:49 bacula kernel: [28957.773711] ata2: COMRESET failed (errno=-19)
Jul 29 01:08:49 bacula kernel: [28957.775253] ata2: reset failed (errno=-19), retrying in 34 secs
Jul 29 01:09:23 bacula kernel: [28991.200166] ata2: hard resetting link
Jul 29 01:09:24 bacula kernel: [28992.043922] ata2: COMRESET failed (errno=-19)
Jul 29 01:09:24 bacula kernel: [28992.045424] ata2: reset failed, giving up
Jul 29 01:09:24 bacula kernel: [28992.046910] ata2: exception Emask 0x10 SAct 0x0 SErr 0x50000 action 0xe frozen t1
Jul 29 01:09:24 bacula kernel: [28992.048425] ata2: SError: { PHYRdyChg CommWake }
Jul 29 01:09:24 bacula kernel: [28992.049952] ata2: hard resetting link
Jul 29 01:09:25 bacula kernel: [28993.211561] ata2: COMRESET failed (errno=-19)
Jul 29 01:09:25 bacula kernel: [28993.213058] ata2: reset failed (errno=-19), retrying in 9 secs
Jul 29 01:09:34 bacula kernel: [29002.045068] ata2: hard resetting link
Jul 29 01:09:35 bacula kernel: [29003.672602] ata2: COMRESET failed (errno=-19)
Jul 29 01:09:35 bacula kernel: [29003.674065] ata2: reset failed (errno=-19), retrying in 9 secs
Jul 29 01:09:44 bacula kernel: [29012.042220] ata2: hard resetting link
Jul 29 01:09:45 bacula kernel: [29013.045931] ata2: COMRESET failed (errno=-19)
Jul 29 01:09:45 bacula kernel: [29013.047352] ata2: reset failed (errno=-19), retrying in 34 secs
Jul 29 01:10:19 bacula kernel: [29047.032223] ata2: hard resetting link
Jul 29 01:10:20 bacula kernel: [29047.939961] ata2: COMRESET failed (errno=-19)
Jul 29 01:10:20 bacula kernel: [29047.941350] ata2: reset failed, giving up
Jul 29 01:10:20 bacula kernel: [29047.942706] ata2: EH pending after 5 tries, giving up
Jul 29 01:10:20 bacula kernel: [29047.944099] ata2: EH complete
Jul 29 01:10:20 bacula kernel: [29047.944113] ata2.00: detaching (SCSI 2:0:0:0)
Jul 29 01:10:20 bacula kernel: [29047.945018] sd 2:0:0:0: [sda] Synchronizing SCSI cache
Jul 29 01:10:20 bacula kernel: [29047.945060] sd 2:0:0:0: [sda]  Result: hostbyte=DID_BAD_TARGET driverbyte=DRIVER_OK
Jul 29 01:10:20 bacula kernel: [29047.945065] sd 2:0:0:0: [sda] Stopping disk
Jul 29 01:10:20 bacula kernel: [29047.945073] sd 2:0:0:0: [sda] START_STOP FAILED
Jul 29 01:10:20 bacula kernel: [29047.945076] sd 2:0:0:0: [sda]  Result: hostbyte=DID_BAD_TARGET driverbyte=DRIVER_OK

Система считает что на файловая структура содержит ошибки
Remounting filesystem read-only

Jul 29 04:00:00 bacula kernel: [39225.515551] EXT4-fs error (device sda1): ext4_find_entry:932: inode #2: comm bacula-fd: reading directory lblock 0
Jul 29 04:00:00 bacula kernel: [39225.528285] quiet_error: 35 callbacks suppressed
Jul 29 04:00:00 bacula kernel: [39225.528291] Buffer I/O error on device sda1, logical block 30441472
Jul 29 04:00:00 bacula kernel: [39225.529738] lost page write due to I/O error on sda1
Jul 29 04:00:00 bacula kernel: [39225.529742] JBD2: I/O error detected when updating journal superblock for sda1-8.
Jul 29 04:00:00 bacula kernel: [39225.531217] Aborting journal on device sda1-8.
Jul 29 04:00:00 bacula kernel: [39225.532677] Buffer I/O error on device sda1, logical block 30441472
Jul 29 04:00:00 bacula kernel: [39225.534109] lost page write due to I/O error on sda1
Jul 29 04:00:00 bacula kernel: [39225.535014] JBD2: I/O error detected when updating journal superblock for sda1-8.
Jul 29 04:00:00 bacula kernel: [39225.536531] journal commit I/O error
Jul 29 04:00:00 bacula kernel: [39225.537952] EXT4-fs error (device sda1): ext4_journal_start_sb:327: Detected aborted journal
Jul 29 04:00:00 bacula kernel: [39225.539426] EXT4-fs (sda1): Remounting filesystem read-only

По факту диска уже нет /dev/sda уже нет.

# smartctl -a /dev/sda
smartctl 5.41 2011-06-09 r3365 [x86_64-linux-3.2.0-4-amd64] (local build)
Copyright (C) 2002-11 by Bruce Allen, http://smartmontools.sourceforge.net

Smartctl open device: /dev/sda failed: No such device

Но его можно найти

echo "- - -" >/sys/class/scsi_host/host2/scan
Jul 29 10:03:34 bacula kernel: [61033.006707] sd 2:0:0:0: [sda] 488397168 512-byte logical blocks: (250 GB/232 GiB)
Jul 29 10:03:34 bacula kernel: [61033.006760] sd 2:0:0:0: [sda] Write Protect is off
Jul 29 10:03:34 bacula kernel: [61033.006763] sd 2:0:0:0: [sda] Mode Sense: 00 3a 00 00
Jul 29 10:03:34 bacula kernel: [61033.006785] sd 2:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
Jul 29 10:03:34 bacula kernel: [61033.007290] sd 2:0:0:0: Attached scsi generic sg0 type 0
Jul 29 10:03:34 bacula kernel: [61033.027146]  sda: sda1
Jul 29 10:03:34 bacula kernel: [61033.027376] sd 2:0:0:0: [sda] Attached SCSI disk
Jul 29 10:03:35 bacula kernel: [61034.578778] EXT4-fs (sda1): warning: mounting fs with errors, running e2fsck is recommended
Jul 29 10:03:35 bacula kernel: [61034.579301] EXT4-fs (sda1): recovery complete
Jul 29 10:03:35 bacula kernel: [61034.579304] EXT4-fs (sda1): mounted filesystem with ordered data mode. Opts: (null)

И посмотреть SMART

=== START OF INFORMATION SECTION ===
Model Family:     Seagate Barracuda 7200.10
Device Model:     ST3250310AS
Serial Number:    9RY17X2G
Firmware Version: 3.AAC
User Capacity:    250,059,350,016 bytes [250 GB]
Sector Size:      512 bytes logical/physical
Device is:        In smartctl database [for details use: -P show]
ATA Version is:   7
ATA Standard is:  Exact ATA specification draft version not indicated
Local Time is:    Sat Jul 29 10:07:17 2017 MSK
SMART support is: Available - device has SMART capability.
SMART support is: Enabled


SMART Attributes Data Structure revision number: 10
Vendor Specific SMART Attributes with Thresholds:
ID# ATTRIBUTE_NAME          FLAG     VALUE WORST THRESH TYPE      UPDATED  WHEN_FAILED RAW_VALUE
  1 Raw_Read_Error_Rate     0x000f   110   082   006    Pre-fail  Always       -       208897990
  3 Spin_Up_Time            0x0003   099   097   000    Pre-fail  Always       -       0
  4 Start_Stop_Count        0x0032   099   099   020    Old_age   Always       -       2032
  5 Reallocated_Sector_Ct   0x0033   100   100   036    Pre-fail  Always       -       0
  7 Seek_Error_Rate         0x000f   090   060   030    Pre-fail  Always       -       145392
  9 Power_On_Hours          0x0032   046   046   000    Old_age   Always       -       47552
 10 Spin_Retry_Count        0x0013   100   100   097    Pre-fail  Always       -       0
 12 Power_Cycle_Count       0x0032   099   099   020    Old_age   Always       -       2036
187 Reported_Uncorrect      0x0032   100   100   000    Old_age   Always       -       0
189 High_Fly_Writes         0x003a   078   078   000    Old_age   Always       -       22
190 Airflow_Temperature_Cel 0x0022   057   047   045    Old_age   Always       -       43 (Min/Max 42/44)
194 Temperature_Celsius     0x0022   043   053   000    Old_age   Always       -       43 (0 14 0 0)
195 Hardware_ECC_Recovered  0x001a   056   049   000    Old_age   Always       -       139832161
197 Current_Pending_Sector  0x0012   100   100   000    Old_age   Always       -       0
198 Offline_Uncorrectable   0x0010   100   100   000    Old_age   Offline      -       0
199 UDMA_CRC_Error_Count    0x003e   200   161   000    Old_age   Always       -       159614
200 Multi_Zone_Error_Rate   0x0000   100   253   000    Old_age   Offline      -       0
202 Data_Address_Mark_Errs  0x0032   100   253   000    Old_age   Always       -       0

 phyrdychg,

petav
()

RSS подписка на новые темы