Open Source

Bacula – AfterJob: Host key verification failed

Leave a Comment / Backups, Bacula, Open Source / By /

I’ve been moving services from one server to another. Manually. My Bacula server is now running in a FreeBSD jail. I just got ready to copy backups from disk to tape. But one aspect was failing: updating my statistics. After each tape job, I collect statistics on that tape, with respect to tape errors. That is done via SSH. The job error was: 05-Jun 13:52 bacula-dir JobId 132208: shell command: run AfterJob “/home/dan/bin/dlt-stats-kraken” […]

Bacula – AfterJob: Host key verification failed Read More »

nagios – check_ping CRITICAL – You need more args!!! Could not open pipe:

2 Comments / Jails, Nagios / By /

I’ve been moving some services around lately. A server is dying and I need to move stuff off it. Today I managed to move Bacula and Nagios onto a new server. After a short bit of struggle, I had just one service check that was failing: check_ping. Here’s the example: $ /usr/local/libexec/nagios/check_ping -H bast.example.org -w 3000.0,80% -c 5000.0,100% -p 1 CRITICAL – You need more args!!! Could not open pipe: Google searches did

nagios – check_ping CRITICAL – You need more args!!! Could not open pipe: Read More »

ezjail – renaming, moving, and renumbering

1 Comment / Jails, Open Source / By /

ezjail is my tool of choice for managing jails. I’ve been using it since 2008. Today, I want to do something which ezjail won’t do for me, but will allow me to do. I created a bunch of jails for a Bacula tutorial at BSDCan. Now that I have that server safely home again, I need to add more services to this jail server. My main development machine is acting up. It is

ezjail – renaming, moving, and renumbering Read More »

Restricting IP addresses to specific databases

1 Comment / Open Source, PostgreSQL / By / /

Sometimes, you don’t want just anyone talking to your database. In fact, sometimes, you don’t want anyone accessing your database except very specific applications. In this case, I am setting up about 20 databases, each one dedicated to a specific use, and to be accessed only from one IP address each. In this post, I’ll talk about how I first set this up with pg_hba.conf, and then how I altered it to be

Restricting IP addresses to specific databases Read More »

The Bacula Tutorial jail server

Leave a Comment / Backups, Bacula, BSDCan, Conventions, DHCP, Disks, File Systems, FreeBSD, Jails, NAT, Operating Systems, pf, PostgreSQL, ssh, ZFS / By /

One of the challenges of providing hands-on demonstrations is giving everyone their own sandbox to play in. I don’t want people to spend time on installing software. I want people to learn about the software in question, specifically Bacula. With this in mind, I’ve been building up a solution based on FreeBSD 9.1, ZFS, and jails. My solution is pretty nifty, but I don’t think it’s anything special. The key is simplicity. The

The Bacula Tutorial jail server Read More »

Creating a ZFS-only box – the first look

3 Comments / File Systems, FreeBSD, ZFS / By /

I’m about to start setting up a ZFS-only box using FreeBSD 8.2. There will be no UFS volumes in this system. Every previous server I have set up has always booted from a gmirror’d UFS system first, then mounted a ZFS array. This time, everything will be on ZFS. I’ve described this server previously when I first chose the parts back in January. Now, the push is on to get this system installed

Creating a ZFS-only box – the first look Read More »

Even bonnie++ shows the 50% performance hit

9 Comments / ZFS / By /

I’m still seeing a 50% performance hit when I try bonnie++. It’s pretty clear. One system is getting 456MB/s sequential read. While the other is doing 265MB/s. Both machines are using the same type of HDD: The 3TB Toshiba DT01ACA300. The faster server This is on bulldog, the faster machine but destined to have fewer HDD. All HDD are directly connected to the motherboard. $ bonnie++ Writing a byte at a time…done Writing

Even bonnie++ shows the 50% performance hit Read More »

Deleting old Bacula Volumes

6 Comments / Backups, Bacula, FreeBSD, Open Source, PostgreSQL, ZFS / By /

From time to time, my Bacula – space and time website shows some old jobs that need to be copied to tape. Stuff from 100 days or more. There’s no reason to copy stuff that old to tape. It’s already been copied to tape. So why does it appear? Last night I swapped some tapes in the tape library. This morning they would have been used and recycled. I’ll bet that those tapes

Deleting old Bacula Volumes Read More »

ssl-admin: revoking a certificate

Leave a Comment / Open Source, OpenVPN / By /

A server was decommissioned lately. It was running on a VM. Given that I do not have physical control over the HDD, I will be revoking the certificate for that server. This certificate was used for VPN access. That’s something I don’t want to be used by anyone else. Here is how I revoked it. I do not know why I had to enter 5 twice.

ssl-admin: revoking a certificate Read More »

Scroll to Top