pazzernick

Running docker-compose as a systemd service

Files

File	Purpose
`/etc/compose/docker-compose.yml`	Compose file describing what to deploy
`/etc/systemd/system/docker-compose-reload.service`	Executing unit to trigger reload on `docker-compose.service`
`/etc/systemd/system/docker-compose-reload.timer`	Timer unit to plan the reloads
`/etc/systemd/system/docker-compose.service`	Service unit to start and manage docker compose

Enable LDAP over SSL (LDAPS) for Microsoft Active Directory servers

Tip

Microsoft active directory servers by default provide LDAP connections over unencrypted connections (boo!).

The steps below will create a new self signed certificate appropriate for use with and thus enabling LDAPS for an AD server. Of course the "self-signed" portion of this guide can be swapped out with a real vendor purchased certificate if required.

Steps have been tested successfully with Windows Server 2012R2, but should work with Windows Server 2008 without modification. Requires a working OpenSSL install (ideally Linux/OSX) and (obviously) a Windows Active Directory server.

Create root certificate

Awesome Sysadmin
Cloud Storage

MaxScale & Pacemaker on CentOS 7

Install packages on both nodes

sudo yum install corosync pcs pacemaker maxscale

Set the password for the hacluster user [both nodes]

Typing vagrant from the command line will display a list of all available commands.

Be sure that you are in the same directory as the Vagrantfile when running these commands!

Creating a VM

vagrant init -- Initialize Vagrant with a Vagrantfile and ./.vagrant directory, using no specified base image. Before you can do vagrant up, you'll need to specify a base image in the Vagrantfile.
vagrant init <boxpath> -- Initialize Vagrant with a specific box. To find a box, go to the public Vagrant box catalog. When you find one you like, just replace it's name with boxpath. For example, vagrant init ubuntu/trusty64.

Starting a VM

vagrant up -- starts vagrant environment (also provisions only on the FIRST vagrant up)

	#!/bin/bash

	ifconfig
	read -p "Enter your external interface: " EXT_INTER

	# do not edit after this line
	set -x # enable echo

	sudo yum install -y epel-release
	sudo yum install -y vim git tmux bash-completion net-tools htop psmisc

	import json
	import sys
	import traceback

	from java.nio.charset import StandardCharsets
	from org.apache.commons.io import IOUtils
	from org.apache.nifi.processor.io import StreamCallback
	from org.apache.nifi.processor import Processor, Relationship

	import json
	import java.io
	from datetime import datetime
	from org.apache.commons.io import IOUtils
	from java.nio.charset import StandardCharsets
	from org.apache.nifi.processor.io import StreamCallback

	class ParseJSON(StreamCallback):
	def __init__(self):
	self.obj = None

	--[[
	Provides custom authorization for nginx.
	See the `nginx_authorize_by_lua.conf` for the Nginx config. This lua file is referenced in the config
	See testWebserverAccess.sh for unit tests.

	To Run nginx (make sure you have the lua, config and htpasswd file):
	$ /usr/local/openresty/nginx/sbin/nginx -c /etc/nginx/conf/nginx_authorize_by_lua.conf

	Logs are available at: /usr/local/openresty/nginx/logs/lua.log
	To write to the log:

	#
	# Enable CEPH repos as described at http://ceph.com/docs/master/install/get-packages/#rpm
	# Install ceph-deploy package
	#

	export DATA_DEV=sdb
	export JRNL_DEV=sdc
	export FS_TYPE=xfs
	export CEPH_S_NODE=ceph-s
	export CEPH_RELEASE=giant