You have to register... which is a fragile process and broke on me three times, after providing enough web form details to make an IRS Auditor happy. After finally confirming the registration, it told me I had to have a support contract to download. Awesome.
I used a colleague's account to connect via web to the HTTPS gateway, where I figured I could download a new copy. Spin, spin, spin, Java NullPointerException. Managed somehow to extract a "vpnsetup.sh" which contained some juicy binary blobs inside, and failed the first couple times I tried it. Eventually tried it with sudo (what's the worst it could do, really??)-: and got it to install. And seemed to work. For now.
But what a pain. Wasn't there an alternative?
I could no longer connect with Apple's built-in VPN client to the datacenter's VPN concentrator -- progress, right? I guess IPsec is only IPsec if it's not Cisco IPsec. In the past I had used "vpnc" on my FreeBSD and Linux boxes to connect but that wasn't working either.
I found "openconnect" and did an install (with a flag):
./configure --disable-nls make sudo make install
When I ran it, it complained about missing "tun" device so install the TunTap package.
Then fire it up and ... It's Work!!!
sudo /usr/local/sbin/openconnect -v --script /etc/vpnc/vpnc-script https://vpn.gateway.ip
I used my old vpnc script which set the DNS and routes, otherwise I couldn't get packets to flow over the VPN.
Oddly, it didn't require the VPN Group name that AnyConnect seemed to want.
]]>
RewriteRule ^/(.*) \
http://localhost:8888/VirtualHostBase/http/%{SERVER_NAME}:80/cjp/VirtualHostRoot/$1 [L,P]
We later needed to move it down a level of the URL hierarchy as we had a Django app residing on the same server. In this example, we want it accessed under the "/plone" hierarchy. Christian 'Tiran' Heims document on the VHM gave me the magic I needed. While it's easy to have Apache match on the "/plone" URL and get to plone, we needed a _vh_* portion in the path to make rewriting the references work in the Plone-served pages.
The first works for "/plone/..." URLs and the second allows folks to come in with a simple "/plone" path.
RewriteRule ^/plone/(.*) \
http://localhost:8888/VirtualHostBase/http/%{SERVER_NAME}:80/cjp/VirtualHostRoot/_vh_plone/$1 [L,P]
RewriteRule ^/plone$ \
http://localhost:8888/VirtualHostBase/http/%{SERVER_NAME}:80/cjp/VirtualHostRoot/_vh_plone/ [L,P]
]]>
Trying to install from CD Ubuntu-11.04 Server, Desktop, i386 or amd64 all result in an apparent hang using English or Spanish, just at the point when it is going to run through the installer. In another attempt we were able to install 10.04 from CD then went through a 2-step upgrade. Something's changed in the installer between 10.04 and 11.04.
After pounding on keys at the blank 11.04 screen it seemed the installer was running but video was blank.
Reboot from CD and before it starts the boot loader, hold the SHIFT key. At the prompt turn off visual problems:
boot: install vga=normal
Then follow the text install menus.
Follow the nontrivial instructions for a RAID1 with a 20GB swap on the first partition and / on the second partition taking up the rest of the drive.
https://help.ubuntu.com/11.04/serverguide/C/advanced-installation.html
Install the OS as usual.
When it came time to install grub, it failed: the command it ran:
grub-install /dev/sda
complained it could not but then spewed something about being required for RAID.
After it blindly went to reboot from disk, it hung with a cursor prompt because there was no Grub.
Reboot from Installation CD and enter rescue mode, and tell it to give you a shell on the /dev/md1 partition. If you try and do a "grub-install" it will complain at you, saying it's a bad idea.
Tweak the disks so you can then install grub on them:
# parted sda toggle 1 boot_grub q # parted sdb toggle 1 boot_grub # grub-install sda # grub-install sdb
Now you should have grub on the raw disks.
Now when I reboot I get a "grub>" prompt that goes nowwhere. This doc helped:
https://help.ubuntu.com/community/Grub2
Manually boot:
set root=(md/1) linux /vmlinuz root=/dev/md1 ro initrd /initrd.img boot
When booted and logged in:
sudo updage-grub sudo grub-install /dev/sda sudo grub-install /dev/sdb
This creates a /boot/grub/grub.cfg file that allows the OS to boot directly next time.
Finally I get a login prompt I can use.
We've been starting to put CrashPlan on our servers, but they're headless -- so how do we configure them through the GUI client?
Crashplan has a page that describes this unsupported feature, but path for the client settings on a Mac are different. On the OS X box, open
/Applications/CrashPlan.app/Contents/Resources/Java/conf/ui.properties
Change the line to read:
servicePort=4200
Setup an SSH tunnel to the headless server:
ssh -L 4200:localhost:4243 yourusername@headlessbox
On the Mac, fire up the CrashPlan GUI client; it will use the new setting to connect to port 4200, which is forwarded to the headlessbox on port 4243 where the CrashPlan service listens. You should be able to configure your headlessbox, providing account information, backup file selection, network throttling, etc.
The only negative is that you'll have to edit that file back to control your local desktop CrashPlan service, and change it again to connect to the headless server.
]]>We only need the binaries under bin/, e.g.:
$ tar ztf mongodb-freebsd7-x86_64-1.8.1.tgz mongodb-freebsd7-x86_64-1.8.1/ mongodb-freebsd7-x86_64-1.8.1/bin/ mongodb-freebsd7-x86_64-1.8.1/bin/mongofiles mongodb-freebsd7-x86_64-1.8.1/bin/mongod mongodb-freebsd7-x86_64-1.8.1/bin/mongodump mongodb-freebsd7-x86_64-1.8.1/bin/mongorestore mongodb-freebsd7-x86_64-1.8.1/bin/mongos mongodb-freebsd7-x86_64-1.8.1/bin/mongo mongodb-freebsd7-x86_64-1.8.1/bin/mongostat mongodb-freebsd7-x86_64-1.8.1/bin/mongosniff mongodb-freebsd7-x86_64-1.8.1/bin/mongoexport mongodb-freebsd7-x86_64-1.8.1/bin/bsondump mongodb-freebsd7-x86_64-1.8.1/bin/mongoimport
FreeBSD ports maintainers keep pretty current so we build from there:
cd /usr/ports/databases/mongodb sudo make sudo make installmkdir -p /tmp/mongodb-freebsd8_64_1.8.2/bin cp /usr/local/bin/mongo* /usr/local/bin/bsondump /tmp/mongodb-freebsd8_64_1.8.2/bin/tar cf /usr/local/www/apache22/data/koansys.com/static/mongodb-freebsd8-x86_64-1.8.2.tgz mongodb-freebsd8_64_1.8.2
Now you should be able to use it in your own buildouts.
Here's the MongoDB-1.8.2 I just built for FreeBSD-8 64bit.
]]>I copied the data from the SD card under /rerware/MyBackup/AllAppsBackups/AppsMedia_2011_06_04/Apps/de.abs_net.TimeTracker_79.zip to my desktop, unzipped, and dig into it with sqlite3. It was fairly straight forward to find what I needed, but the 'start' and 'stop' times in the 'period' table were in a format that looked like UNIX seconds since the epoch, but the numbers were too long.
ABS's Volker Lehnen answered my request for pointers promptly, with exactly what I needed:
the value in start, stop represent the number of miliseconds since Jan. 1. 1970, midnight GMT (Date.getTime() in Java)
I tweaked my SQL query to generate a report with the Client, Project, Task, Start, Stopped, fractional hours, and comments on each work item. Here it is in case it helps anyone else:
SELECT datetime(start/1000,'unixepoch','localtime'), datetime(stop/1000,'unixepoch','localtime'), round((stop - start) / 1000.0 / 60.0 / 60.0, 1), client.name, project.name, task.name, period.comment FROM period, task, project, client WHERE period.task_id = task.task_id AND task.project_id = project.project_id AND project.client_id = client.client_id ORDER BY client.name;
Which resulted in something like this:
2011-04-25 22:13:16|2011-04-25 22:57:14|0.7|FooClient|HITSS2|proposal|review appdev doc. 2010-09-14 08:09:53|2010-09-14 19:35:03|11.4|BarClient|SID|work|dig into schema, map fields, find missing 2010-09-15 19:31:00|2010-09-15 20:01:54|0.5|BarClient|SID|work|start parsing changes ...
Easy enough.
Jenkins makes it easy to watch code commits, then check it out, build, run tests, and notify developers quickly of any problems while its still fresh in their minds. The ability to graph things like code test coverage builds a friendly competitiveness that's healthy for development efforts. Getting Jenkins running is much easier then some other systems, so there's really no excuse not to set it up. The Chuck Norris plugin is the real reason so many developers use it. :-)
Here's a link to the presentation though I spent a large part of the time on a live demo.
]]>We use CrashPlan on our developer laptops but this one didn't have it. We quickly downloaded it, and set it to backup with the 30-day trial into CrashPlan Central's hosted backup; I could have backed up to a local Mac which already used CrashPlan but this was even faster and the disk was almost completely dead. It took a while, largely because the source disk was so broken and slow, but overnight, CPC had a copy.
A trip to the Apple genius bar with the secret password "Apple Support Contract" and we had a new disk installed in an hour.
Now for the acid test: how to restore? Never had to do this before. Create the initial user account for the primary user. Then...
We installed the CrashPlan client again, configured the account, and CP showed the backed-up data. Great. Just restore.
First try with defaults restored to the desktop of the restored user, not what I wanted.
Second attempt I specified to restore into the actual original directory. Seemed to work. But none of the user settings were remembered -- email accounts, app license keys.
Finally restored an individual ~/Library/Preferences/appname.plist file onto the Desktop to look for license keys, and found I was not allowed to open it. Ah ha! Ownership/permissions problems. The restored file was uid=502, but my newly created user was uid=501. So I re-created the user, with the same home dir as it originally had; OS X allocated uid=502 to it, and it found the entire directory tree that had been previously restored for that user's home dir, under the original username.
Sweet. All the Mail and app settings and license keys were back.
I need to come up with a better way to re-create users on a new disk with the right UID so this is trivial. In the past I think I've found this a bit difficult on a Mac.
]]>chris@Boqueria:coverage-3.4$ /usr/local/python/2.7/bin/python setup.py build_ext
running build_ext
building 'coverage.tracer' extension
gcc -pthread -fno-strict-aliasing -g -O2 -DNDEBUG -g -fwrapv -O3 -Wall -Wstrict-prototypes -fPIC -I/usr/local/python/2.7/include/python2.7 -\
c coverage/tracer.c -o build/temp.freebsd-7.2-STABLE-amd64-2.7/coverage/tracer.o
gcc -pthread -shared ${LDFLAGS} build/temp.freebsd-7.2-STABLE-amd64-2.7/coverage/tracer.o -lpython2.7 -o build/lib.freebsd-7.2-STABLE-amd64-\
2.7/coverage/tracer.so
gcc: ${LDFLAGS}: No such file or directory
error: command 'gcc' failed with exit status 1
This manifests itself in higher-level 'easy_install' and 'pip' usage but with less helpful diagnostic messages and it took me a while to isolate.
Reed found this patch which was created shortly after python-2.7.1 was released:
http://bugs.python.org/file19836/freebsd_ldshared.patch
It must be applied before compiling Python.
I found that if I used the --enable-shared flag, that when I invoked python, it couldn't find its libraries, so I don't use this. My incantation is:
./configure --prefix=/usr/local/python/2.7.1 --enable-ipv6
]]>
The panelists, left to right in the video, were:
Take a look at the Pycon schedule page and watch the video on blip.tv (the mp4 format worked best for me)
]]>Flymake: Configuration error has occurred while running (pyflakes yourfile.py). Flymake will be switched OFF
with 'Cancel' and 'OK' buttons.
Sometimes, however, Emacs just hangs. The OS X red/yellow/blue close/minimize/zoom buttons turn grey as if Emacs has lost focus, but it is in fact the active application. Switching tasks around and back to Emacs doesn't recover it. You can't Command-Q quit it.
When you do finally give up and kill it and restart, you've lost your work, your shells, and it doesn't save the list of recent-files.
You can disable the use of a popup for flymake with:
(setq flymake-gui-warnings-enabled nil)
This prevents flymake from alerting you that it's switching itself off, but it's better than the alternative.
The flymake-display-warning calls Emac's 'message-box' function so there may be other tools which cause the same problem.
There's also a generic variable use-dialog-box but setting it from default t to nil didn't help with flymake. There's also a suggestion on the interwebs to use defadvice to tell y-or-no-p and yes-or-no-p set use-dialog-box to nil, but again, this won't help flymake since it doesn't use those functions.
]]>tal: attributes should be listed in order of execution, per the TAL specification. I assume chameleon uses the same order.
$ sudo adduser: myuser $ edit /etc/group to add myuser to sudo $ edit /etc/ssh/sshd_config and disable !PermitRootLogon $ sudo /etc/init.d/ssh restart $ sudo apt-get update $ sudo apt-get upgrade $ sudo apt-get install emacs-nox $ sudo apt-get install gcc $ sudo apt-get install libbz2-dev zlib1g-dev libreadline-dev libsqlite3-dev libssl-dev \ libjpeb62-dev libpng12-dev libxml2-dev libxslt-dev libgdbm-dev $ sudo apt-get install git $ sudo apt-get install apache2-mpm-worker $ sudo apt-get install git-core $ sudo apt-get install postfix set as satellite server, name: example.com, blank relay host $ edit /etc/hosts and /etc/hostname then reboot $ edit /etc/postfix/main.cf and remove the hostname setting so it gets it from /etc/mailname
$ cd /usr/local $ sudo mkdir python $ sudo mkdir src $ sudo chown -R myuser src $ cd src $ curl http://www.python.org/ftp/python/2.7.1/Python-2.7.1.tar.bz2|tar jxf - $ cd Python-2.7.1 $ ./configure --prefix=/usr/local/python/2.7.1 $ make $ make test $ sudo make install $ cd .. $ curl -O http://python-distribute.org/distribute_setup.py $ sudo /usr/local/python/2.7.1/bin/python distribute_setup.py $ sudo /usr/local/python/2.7.1/bin/easy_install virtualenv
$ cd ~ $ ssh-keygen -t rsa -C "myuser@myhost" (I give mine password on client servers)
paste key into github account page so you can access
$ cd /usr/local/ $ sudo mkdir myplone_buildout $ cd myplone_buildout $ sudo git clone git@github.com:myuser/mylone_buildout.git . $ sudo /usr/local/python/2.7.1/bin/virtualenv --no-site-packages --distribute $ sudo ./bin/python bootstrap.py $ sudo ./bin/buildout -v $ sudo ln -s /usr/local/mylone_buildout/etc/init.d/supervisor.sh /etc/init.d $ sudo chmod a+x /usr/local/mylone_buildout/etc/init.d/supervisor.sh $ sudo update-rc.d supervisor.sh defaults
$ sudo apt-get install ufw $ sudo ufw allow 80 $ sudo ufw allow 8080 $ sudo ufw allow 443 $ sudo ufw default deny $ sudo ufw allow from myip1 to any port 22 $ sudo ufw allow from myip2 to any port 22 $ sudo ufw allow from myip3 to any port 22 $ sudo ufw allow from myip4 to any port 22 $ sudo ufw enable $ sudo ufw status
Status: active To Action From -- ------ ---- 80 ALLOW Anywhere 8080 ALLOW Anywhere 443 ALLOW Anywhere 22 ALLOW 71.246.241.109 22 ALLOW 71.246.241.106 22 ALLOW 173.13.219.89 22 ALLOW 70.90.70.89
$ a2enmod ssl proxy proxy_connect proxy_http file_cache mem_cache $ a2ensite default-ssl $ edit proxy.conf, default, and default-ssl
#proxy.conf
<IfModule mod_proxy.c>
ProxyRequests Off
<Proxy *>
AddDefaultCharset off
Order deny,allow
Deny from all
Allow from all ##<<<==== add this line to prevent 403 no access to / when rewriting
#Allow from .example.com
</Proxy>
ProxyVia On
</IfModule>
#default
<VirtualHost *:80>
ServerAdmin you @example.com
RewriteEngine On
RewriteRule ^(.*) https://%{SERVER_NAME}$1 [NE,L]
DocumentRoot /var/www
...
# default-ssl
<IfModule mod_ssl.c>
<VirtualHost _default_:443>
ServerAdmin info@example.com
ServerName example.com
RewriteEngine On
RewriteRule ^/(.*) http://localhost:8080/VirtualHostBase/https/%{SERVER_NAME}:443/mysite/VirtualHostRoot/$1 [L,P]
DocumentRoot /var/www
...
...
# SSL Engine Switch:
# Enable/Disable SSL for this virtual host.
SSLEngine on
SSLCertificateFile /usr/local/ssl/cert-mysite.crt
SSLCertificateKeyFile /usr/local/ssl/mysite.key
SSLCACertificateFile /usr/local/ssl/GandiStandardSSLCA.pem
SSLVerifyClient None
...
clever, very clever.
]]>
/usr/libexec/elf/ld: cannot find -lpython2.5
Index: build_ext.py
===================================================================
--- build_ext.py (revision 77388)
+++ build_ext.py (working copy)
@@ -280,7 +280,7 @@
# Python's library directory must be appended to library_dirs
sysconfig.get_config_var('Py_ENABLE_SHARED')
if ((sys.platform.startswith('linux') or sys.platform.startswith('gnu')
- or sys.platform.startswith('sunos'))
+ or sys.platform.startswith('sunos') or sys.platform.startswith('freebsd'))
and sysconfig.get_config_var('Py_ENABLE_SHARED')):
if sys.executable.startswith(os.path.join(sys.exec_prefix, "bin")):
# building third party extensions