Users and Roles in PostgreSQL are very similar. When I set up the FreshPorts database back in mid-2000, I was using PostgreSQL 7.0.3 (that’s my best guess based on my blog entry). I suspect roles were not available then and were introduced with PostgreSQL 8. I am positive someone will correct me if that’s wrong. I now have a need to convert a user into a role, then add users to that role. […]
PostgreSQL – convert a user to a role Read More »
For future reference, this is the knew server … oh wait, I think it’s this server which is mounted in the 4U chassis mentioned in this post. It runs a few jails, including Bacula regression testing services. This recent post outlines the modifications so it boots off a mirror of SSDs. File systems Paritions zpools /var/run/dmesg.boot
This is a work in progress. As I make more decisions and receive additional suggestions/advice, I will update this page. I live in an apartment. The Verizon FiOS ONT is outside on the ground floor. I live two floors up. I am considering moving the rack from the bedroom to 7x12ft locked room in the basement. It would share space with my washer and dryer (which is vented to the outside). Why? noise
Ideas about moving the rack two floors down to the basement Read More »
This post is all about creating technical debt. If you accept that, go for it. I’m avoiding porting my FreshPorts scripts into SITEPERL. Why? I’ll migrate them to SITEPERL after BSDCan & PGCon. Right now, I need to get the servers upgraded from Perl 5.24 to Perl 5.26, because 5.24 is deprecated. FreshPorts uses Perl for processing incoming commits and for various administrative backend tasks. Everything on the front end (website) is PHP
Perl @INC – customizing it for FreeBSD Read More »
As you read this post, keep in mind that my particular use case of notification on ssh login is not for everyone. It may not appeal to you. In fact, you might find this to be an absolutely ridiculous thing to do. I respect that. I suggest that somewhere within your network there is at least one type of error condition, one urgent situation, one thing that you would like pushed to your
Using mtqq to create a notification network: mosquitto, mqttwarn, hare, and hared Read More »
I don’t normally offer guest posts here, but on this rare occasion I couldn’t say no. Here’s a guest post from Michael W Lucas. What one of us finds delightful, another person might find loathsome. That’s human nature. I keep reminding myself of this every time people start babbling about the virtues of something I find completely idiotic. Keeping my mouth shut gets me out of many arguments before they start. People learn
Book Review: Ed Mastery Read More »
See also mysqldump: Error: ‘Access denied; you need (at least one of) the PROCESS privilege(s) for this operation’ when trying to dump tablespaces. I’m linking this because I use both articles on a regular basis. Sometimes you want a user which can only dump the database, but nothing else. Fortunately, I searched, and found a solution. I’m writing it down so I only have to search this blog. I want the user rsyncer
Creating read-only PostgreSQL database users for pg_dump and pg_dumpall Read More »
I am adding IPv6 addresses to each of my servers. This post assumes the server is up and running FreeBSD 11.1 and you already have an IPv6 address block. This does not cover the creation of an IPv6 tunnel, such as that provided by HE.net. This assumes native IPv6. In this post, I am using the IPv6 addresses from the IPv6 Address Prefix Reserved for Documentation (i.e. 2001:DB8::/32). You should use your own
Adding IPv6 to an existing server Read More »
You have an old DNS server: tallboy.example.org You have a new DNS server: ns1.example.org You have a domain, example.com, for which you want to swap the old DNS server with the new DNS using nsupdate. NOTE: the domain is example.com The NS servers are in example.org (different domains). These are the commands you issue: update delete example.com. IN NS tallboy.example.org. update add example.com. 3600 IN NS ns1.example.org. send Of note, you mention the
Using nsupdate to change NS servers Read More »
Today I gave up on my attempt to allow relay via SSL certificate fingerprints. Instead, I will use sasl auth. Yesterday I wrote about my SMTP deliver test which broke when an SSL certificate was updated. Later that day, I finished writing scripts which delivered that fingerprint file to all hosts which needed it. Today, I abandoned that approach in favor of sasl. From the time I decided to use sasl to my
No more certificate fingerprints – only sasl auth instead Read More »