« first day (564 days earlier)      last day (4432 days later) » 

12:02 AM
Rant Mode On I get the whole DevOps thing. It makes sense. But I have one little damn gripe. How about the Developers step down out of the Cloud and learn a little bit of nitty-gritty Ops level scripting so that I don't have to be a living-breathing language interpreter because the scripting language we use isn't one that's in their pre-existing repertoire.
 
@Adrian DevOps doesn't make sense to me
You don't let architects lay out cities, and city planners would make hideous awful buildings. They're two different skill sets, period.
 
But I can see using Development processes for managing your configuration automation tools like Puppet, Chef, etc.
And scripting may be something that's more useful as a *nix guy than someone who spends more time administering MS products.
 
@Adrian Good sysadmins write software, but they're not software developers
And apart from there simply not being enough hours in the day, it's a completely different kind of brain
I have very little patience for writing code
but devs have very little patience for setting up a system correctly (in my experience)
 
@Joel You're a Windows guy, right? Many of the services that you admin are integrated together for you, right out of the box. You don't have to build out your AAA infrastructure from packages.
 
If you have developers that can't figure out whatever script language is in place, then you either need to get better developers or stop writing your scripts in fortran.
 
12:16 AM
@Adrian I actually prefer Linux
so my environment is vmware/puppet
I run windows because I have to, but I also get pretty nitty-gritty AND script the shit out of it
 
@ShaneMadden We're not exactly Google, so we're not exactly getting to top 5%. The Devs were getting paid less than I do until this most recent hiring cycle.
 
12:34 AM
@Adrian Heh, fair enough. Devs that can't or won't pick up new languages are a pet peeve of mine.
 
1:20 AM
We've seemed to get quite a few people that wish to specialize in just one thing, and one thing alone. The last few Devs we've had moved on to other jobs doing on PHP for the Drupal framework.
 
Yeah - doing the same thing is easier than learning new things.
 
Not to say that some of them weren't quite talented. But some were definitely sub-par. Thankfully, we've got a good set this time around. People I can simply send a list of requirements and get a script back in a few hours (since I'm not allowed access to that DB).
 
Don't they get bored doing the same thing each day? I have a friend of mine who spends 8 hours a day, 5 days a week, for the past 5 years, designing and generating reports in Crystal Reports
I don't know how he does it. I would have offed myself years ago if that's all I did, all day
The fact that I'm not a specialist in any area is because I would hate working in the same corner of the world every day. I understand it's fine for some people (the world needs experts on every area, they're the ones that write the articles that I google for) but I just can't stand it
 
Yeah, got a buddy back east who does that for a big corporate monster. If I'm not learning new things, how they hell can I expect to find another job?
 
Which is probably what your employer wants
There's some companies, Lawyers especially, where if you don't get promoted within 3 years, you're out
So if you're not growing as a professional or learning new things, then you can go work for someone else
I forget what the name of it is, but it has a specific name
 
1:41 AM
No, I have the opposite situation. It's NOT a good place for professional development. Most of the thinking and technologies in use are a good 10 years behind. I'm just starting to get some responses that moving from NIS to LDAP is probably a good idea.
that's a non-profit for ya, though.
Total case of Guerilla System Administration. Slide stuff into the infrastructure while nobody's looking, and then afterwards suddenly appear with a full set of documentation to support it.
 
Non profits, yeah stuff is tough there. My Dad used to run one, and he had to buy new coffee mugs for the whole staff out of his own money
And, even though he was the General Secretary, he wasn't the highest paid person in the organisation. They needed to hire an in-house lawyer, and he was the highest paid person by about 30% (and his salary was about 1/5th of where he worked previously)
 
 
2 hours later…
3:30 AM
0
A: Setup VPN on Linux, connect through ssh

AdrianVPN stands for Virtual Private Network. SSH stands for Secure Shell. VPN simply provides a more secure (and perhaps more convenient) means of accessing your servers across insecure or public networks using other protocols. Think of it this way. The VPN is like a Turducken. The SSH protocol is...

Perhaps I should get my butt in gear and make some supper. I'm doing food analogies for answers.
2
 
@Adrian Food analogies are the best answers.
 
@MDMarra Wow, that desk is boring. Mine has so much character :)
 
Today's desire to throttle the questioner comes from this:
0
Q: setsockopt EOPNOTSUPP (Operation not supported)

brantWhen I strace my MySQL process, I keep finding the same error over and over: setsockopt(240, SOL_IP, IP_TOS, [8], 4) = -1 EOPNOTSUPP (Operation not supported) futex(0x87ab944, FUTEX_WAKE_OP_PRIVATE, 1, 1, 0x87ab940, {FUTEX_OP_SET, 0, FUTEX_OP_CMP_GT, 1}) = 1 futex(0x87ab260, FUTEX_WAKE_P...

 
@voretaq7 Awww.... I'm loved!
 
@PauskaSock Yeah, filled with love. The sticky white kind of love that most pornos end with
 
3:43 AM
WTF? I can't put lmgtfy.com in a comment?
@MarkHenderson Really? I have to bring this out? lmgtfy.com/?q=turducken
There, I'll put it in chat instead
 
@JeffFerland It's globally blocked, I think.
 
Back in a few gents. I need to go buy some groceries...
 
@ShaneMadden I can understand why in general... poor for answering new users... but totally acceptable for dumping on a mod :)
 
@JeffFerland Nope, you can't. I remember when I discovered that myself :)
 
5
Q: Weren't lmgtfy.com links blocked?

Shane MaddenHow to install a vnc server on ubuntu In case of modify or delete, the full text of the answer is as follows: http://lmgtfy.com/?q=vnc+ubuntu+installation How'd that happen? Aren't lmgtfy.com links blocked? (reference)

You can blame me ;)
 
3:46 AM
@JeffFerland If I havent heard of it before, Im sure others havent either :P Might not be the best analogy. Babushka doll might be better. Or perhaps a circle jerk, where each man is inside another man
 
@pauska By the way, your mom says hi.
4
 
@MarkHenderson Wow
 
Never mind, I'm so not leaving that there.
 
Haha
UNDELETE
 
@MarkHenderson UNDELETE ALL THE DELETED
 
3:50 AM
Too much information for the Googles?
 
@JeffFerland OH MY GOD SOMETHING RETURNED AN ERROR PANIC!!!! That's a special kind of fail.
 
@MikeyB Well, the thing is he's doing an strace, which implies something did fail...
... but there is no failure. He's trying to find a 10ms spike that occurred days ago and was apparently in PHP from his graph...
 
@JeffFerland Stupid thing that's not even a spike. It's returning from a dip if you look at the left edge of the graph. But yeah, useless.
 
yawn sigh
 
4:30 AM
Hey @MikeyB - where did you get your fancy badges from in your AboutMe profile? I like the m:p
 
@MarkHenderson Check the url of the images you lazy bastard :p (evilrouters.net/achievement-unlocked - I think it was posted here)
 
@MikeyB Yep way too lazy :)
 
@MarkHenderson Especially considering that I had to go check the URL to remember it :p
 
4:49 AM
Sad clown. =( No leftover corned beef on sale. All sold out in town.
 
 
1 hour later…
6:09 AM
morning
 
6:41 AM
G'day
 
6:59 AM
Morning
 
7:17 AM
Morning all
 
 
1 hour later…
8:24 AM
super busy day - having all of the 8GB dimms in my main esx farm swapped for 16GB ones - so lots of activity
 
@Chopper3 I'm trying to find someone who will lend me a drive-in theatre (Screen + Projector + FM Transmitter) :D
 
fm transmitter?
 
broadcast to car radios ?
 
remember those tiny fm transmitters you could get to plug ipods into when they first came out? you tuned your car radio into it - I used to tune it to radio one and play the venga boys on loop as I drove along the westway in london - really pissed a lot of people off :)
 
Bwahaha. Hilarity of the day. I've been reading a vendor's whitepaper, and found a [citation needed].
90% been lifted from somewhere else.. about 50% from wikipedia, 50% from searchstorage
 
8:40 AM
nice, who was it?
 
@Chopper3 I'm not at liberty to say.
 
understood
 
@Iain Yep :)
The screen and projecor I can find
but a transmitter is hard to find
 
8:58 AM
we have laws in the uk about that sort of thing, getting a licence is harder than the transmitter
 
@Chopper3 I've got the license. I can broadcast for One year (~30 EUR)
 
wow
 
now I only need to find one that is powerful enough to reach the whole parking lot
 
need a bright projector - what are you showing btw?
 
@Chopper3 I'll give you the full story
So, we are doing an outdoor film festival this summer
Every thursday evening a movie that fits a cool location
and we also have a temporary radio station
so, we are playing 'the boat that rocked'
in front of the studio
but we wanted to do a drive in
(to have the radio aspect)
We're also showing Checken run at a chicken farm
Inglourious basterds in an abandoned theather (with firework at the end)
Reservoir dogs at an old warehouse...
 
9:32 AM
sounds great
 
@BartDeVos This sounds EPIC.
 
Last year, we did The Ring in a forest with a cliff. We had the viewers death-ride to the movie-location. Then, after the showing they had to get back to their cars via the dark forest
Was funny
 
@BartDeVos Love it.
@BartDeVos when do you need the Transmitter by?
and what's the budget?
 
We are looking to rent it, about 100 EUR
and need it by august
14 or 21
oh well :)
lunch :)
 
talking of ebay, my grappling hook came on Monday - gave it to my son, not sure it'd hold me, strong rope on it though
 
@Chopper3 Why'd you buy a grappling hook?
 
morning
 
two bottles of Pauillac ;)
 
10:20 AM
@Chopper3 Ah.
 
ROFL
they approved my tag wiki for users
 
haha
 
haha
 
you're welcome ;-)
 
@RobMoir <3
 
10:28 AM
:-)
 
10:42 AM
If I buy a wildcard certificate from Anywhere (Who'd you recommend, btw).. Is there any way I can use it to countersign x509 certificates?
 
@TomOConnor I don't have experience with purchasing ssl certs, but I have been looking at them and saw rapidssl seems pretty cheap
 
Yeah. I'm wondering which CAs got hacked last time around.
 
@MarkHenderson your answer with the unicorns xD
@TomOConnor it was a dutch company mmm the name was diginotar I think
 
@LucasKauffman Wasn't it more than that?
 
I thought it was only diginotar, but they had certs for google
 
10:50 AM
Morning all. Got a first look at my new comms room today. Bit bigger than my last one. :)
 
@LucasKauffman They issued them, Google didn't actually got their certs from them :)
There were a few more I think
 
ow I didn't know, Verisign was hacked as well, but they claim non of the boxes that had certs on them
 
@SmallClanger Pics!
 
and startssl
these guys give free 30 day ssl certs
 
The wiring cabs are going, I think. Might see if I can keep one, though.
It's L-Shaped, which is going to make positioning awkward, but otherwise it's a good-sized room.
 
11:03 AM
@SmallClanger do you have a window?
 
No, it's all breeze-blocked off.
 
@SmallClanger Do you have a big hammer?
 
I do, but I think it's service risers behind that wall on the left. Not sure they'd be keen on me knocking through. :)
 
11:30 AM
mmm where is the page again where you can suggest synonym tags?
found it
-1
A: Disable Shift+Delete

iso9660Today I missed very important files in Windows 7, when I selected one folder and deleted it, Windows 7 decided to erase 6 sibling folders!!!! Damit!!!! Luckly I've made my homework by making some backups. One thing is the usual bugs that made the Windows mess not to work propertly, but another o...

 
@LucasKauffman See my comment.
 
Dan
Morning
I'm literally only popping to congratulate @TomOConnor on his excellent example of what swearing is :D
 
@Dan I read pooping there :/
 
Dan
@LucasKauffman :S
Whoops - left Procmon running while I got waylaid and it took up nearly 10GB of RAM
@Chopper3 Did you ever get anywhere with your software running in VM issue?
 
11:50 AM
Iain deleted it :(
Damn is not swearing. "I deleted my own fucking work, I'm a twat for not having a backup" That's swearing. – Tom O'Connor just now edit
I thought dropping the c-bomb might've been going too far.. Even for me.
 
@TomOConnor c-bomb? Female bodypart?
 
@LucasKauffman cunt
 
@TomOConnor I'm surprised @LucasKauffman didn't flag it as not an answer.
 
@Iain It was a comment.
 
@Iain it was a valid comment!
 
11:54 AM
The 'answer' wasn't though
 
@Iain true
 
@Iain I did flag that one didn't I ?
I edited it, but I wasn't satisfied at the end
 
@LucasKauffman someone else flagged it
 
@LucasKauffman you did too - I only saw the other person's name though
 
12:03 PM
0
Q: "Countersigning" a CA with openssl

Tom O'ConnorI'm pretty used to creating the PKI used for x509 authentication for whatever reason, SSL Client Verification being the main reason for doing it. I've just started to dabble with OpenVPN (Which I suppose is doing the same things as Apache would do with the Certificate Authority (CA) certificate)...

 
12:22 PM
I think the questions I've been asking lately are too hard.
 
I was going to have a crack at that, but I realised I only think I know some of it :)
For what it's worth, I think you need to buy a signing cert, rather than a wildcard one to be able to then sign your own intermediary. And wildcards cost as much as they do because the cabal of CAs that get their trust chains into browsers want to keep making money from issuing certs. :)
 
I've been waiting for almost 3 hours now until another developer finishes his code so I can implement it in mine >.<
 
Dan
12:39 PM
(As seen in a Tesco shop window according to the guy who took it)
 
? more humorous if you're not American or I'm just missing it?
 
lol @dan
 
@BartSilverstrim it's a bit dry humour
 
Dan
@BartSilverstrim The 'joke' is that they didn't even mention the model, and it looks like the make was an afterthought at best
 
12:48 PM
anyone else feel sorry for this person? serverfault.com/questions/374352/…
 
I thought Windows CE had gone extinct
 
@ScottPack USA still uses a variant in predator drones I think
 
@LucasKauffman Based on my CE experience that...is terrifying.
 
@Dan Maybe the seller just lives in Vauxhall? :)
 
@ScottPack There was an article somewhere I read that they got infected by trojan horses because they had no AV :p
 
12:55 PM
@LucasKauffman That's because AV hadn't been invented the last time somebody supported CE!
 
yes i think everyone would have thought CE has long become extinct but clearly not!
 
@Holocryptic @BartSilverstrim to answer your question about sysprep so that you stop making my phone vibrate with twitter notifications: vCenter Converter syspreps the system post conversion automatically
 
and everyone was surprised that the iranians were able to steel a drone :p
 
@LucasKauffman That's hilarious...
 
12:58 PM
That's why it doesn't explode on new (virtual) hardware
 
@MDMarra Now that I know it makes your phone go nuts...
 
haha. I'll just take Twitter out of notification center
 
@LucasKauffman They were?
 
I have almost nothing send me alerts
 
I've only used the standalone converter and that was awhile ago; I thought that one just injected particular settings for drivers in VMWare versus physical.
 
12:59 PM
Nah, it actually syspreps. It doesn't /reseal or anything, just generalizes the hardware
 
@ScottPack yea, a STEALTH drone to be precise silobreaker.com/…
 
infect with malware, get it caught by enemy, deploy malware as they dissect it, infect them.
 
@LucasKauffman I think you missed my point. People were actually surprised?
 
@ScottPack haha :p
 
they wouldn't have dared to do a complete wipe on that drone XP machine, too many legacy apps that they wouldn't have a clue how to install again!
 
1:03 PM
@ColdT BSOD
 
@LucasKauffman the older machines people avoid to update, as you are aware ends up breaking legacy apps include BSODs
anyone got some redbull, desperately need some :(
this is got to be interesting - Unreal games engine licensed to FBI and other US agencies - bbc.co.uk/news/technology-17535906
 
1:33 PM
Do you guys respond to coworker's text messages afterhours?
"hey, do you know which fileshare the XYZ document is located on?"
 
Hey guys
 
@basil - You're supposed to chime in on my question from a few days ago.
12
Q: Linux - real-world hardware RAID controller tuning (scsi and cciss)

ewwhiteMost of the Linux systems I manage feature hardware RAID controllers (mostly HP Smart Array). They're all running RHEL or CentOS. I'm looking for real-world tunables to help optimize performance for setups that incorporate hardware RAID controllers with SAS disks (Smart Array, Perc, LSI, etc.) a...

 
@ewwhite As for storage, short-stroking locally attached hard drives is considered part of servers, more than storage.
 
haha
 
Yeah, I read the question and you got a very good answer from someone who has done it
better than I could have done
 
1:36 PM
Well, alrighty!
The benchmarking phase sucks... I've done about 30 runs, slightly tweaking parameters.
 
The storage world technically includes locally attached drives, especially with linux and zfs, but focuses in on centralized storage
at least, mine does.
@ewwhite What is the reason you're trying to get so much performance from these drives?
 
And the entire world of SAN tuning... But every once in awhile, there are standalone systems that need optimization.
Because they are standalone systems.
 
@ewwhite No doubt.
 
i've spent most of the day looking at a faulty CCTV camera and trying to debug a proxy settings javascript. is it time to go home yet?
 
and I know that the Linux defaults are a bit poor
 
1:39 PM
@ewwhite Ah, that is why. Well I was going to say that depending on how much you're billing per hour, you might be ahead by simply buying a small SSD
 
we spend a lot of time tuning networking settings from the default... I was surprised to see how little is spent on storage.
 
@ewwhite If it's a simple question I will.
 
@ewwhite I spend my whole day tuning storage, but there's only so much good you can do on a single system.
 
Even with SSDs (enterprise SAS STEC/Pliant/Seagate), I still need to tweak.
 
Hey guys! @ewwhite's a tweaker!
 
1:40 PM
@ewwhite Especially with SSD, however the performance ceiling is so much higher that it might be worth the extra time.
 
Pliants, for example need work in order to fill their deep queues... so out of the box, they don't perform that well.
But yeah, you're right... I was just looking for the magic bullet.
@BartSilverstrim I asked a couple of coworkers for a password
and it's been like 12 hours... I'm blocked on a project because of it
 
@Dan no, that's still ongoing, may be for some while longer in fact
 
what would happen if you had a really high performance nas, and put a common /usr on it for a bunch of linux boxes that mount /usr over nfs from that nas?
 
I've done it. My old trading firm's infra was based around NFS-mounted application and home directories.
/usr/local and /home
Running off of a beefy Linux server, then moving to EMC, then to Nexenta/ZFS
 
@ewwhite You mean you texted them for info and they're not replying...
 
1:44 PM
yes.
 
Cronjob a script sending the same question every 15 minutes.
 
@BartSilverstrim It's a pet-peeve. I think responsiveness is a big part of the job. If you know something and can answer quickly, it goes a long way
 
@ewwhite There's a possibility they didn't get it...
 
@Basil Is there a better way to benchmark IOPS and Throughput on ISCSI storage than just SQLIO on a VM?
 
From Windows or Linux?
@BartSilverstrim possible...
 
1:46 PM
Doesn't matter. I have Windows VMs now, but I wouldn't be opposed to a Linux solution if it's much better
 
@ewwhite Well, one can be angry assuming they're ignoring you, or it can be backburnered as a possible miscommunication issue and they didn't get the message. Then get angry when you find out they're ignoring you.
Cronjob a text-sending request periodically to email and SMS until you get a response.
 
heh... perfect.
 
We've become accustomed to thinking SMS and email are reliable message delivery systems when they're not. Plus many people don't actually organize their inboxes and take care of things, treating it like some kind of data septic tank.
The lack of organization on other people's filesystems are simply appalling, bordering on filesystem abuse.
 
I'd say email is that way. I usually expect people to notice text... but can't be confident that they get email
 
@BartSilverstrim I don't organize my inbox. I get too many emails daily. That's why I flag things for followup and sort by Unread
 
1:51 PM
I filter things that are regular reports.
Keeping the inbox cleared...
 
Yeah. I have any emails from our helpdesk go to a subfolder that I never look at
 
If I never look at it, it filters to trash.
They get deleted by age. If I need it by a certain time I'd read it.
 
server-side filtering... I don't even look at denyhosts messages anymore
or backups unless it's a failure
 
Really the only automated messages that make my actual inbox (which sets off my phone) are Opsview alerts
 
I don't try to do server-side, but I need to train gmail to stop classifying a particular mail as spam sometime.
 
1:54 PM
@BartSilverstrim Whitelist the sender?
 
@MDMarra I'll have to. But I have to tell gmail.
I'm retrieving mail through mail.app.
I have several accounts that show up as a merged inbox under Mail.
 
I thought that if you added someone to your contacts in gmail, everything from them was whitelisted
I could be wrong about that though
 
Apparently I'll need to poke around in Gmail's actual interface. Gmail wouldn't know what I set up or do under Mail.
 
right
 
I just hate gmail's web interface :-/
 
1:55 PM
unless you have your google contacts synced
 
Yeah...not gonna do that.
not that I guess it matters, as Google already has data mined me most likely, and the NSA will be soon if not already.
Home of the free! And we make sure of it through periodic review of your personal data!
 
@BartSilverstrim I don't like the idea of Google reading my mail... And it's not very hard to run your own server if you know what you're doing. =]
 
@ChrisS They're gonna read it anyway. Everyone else has gmail :p
 
@MDMarra Assuming a VMWare VM, VMark or iometer from inside the VM
 
1:58 PM
@ChrisS I used to.
 
I used to run sendmail+pine... then sendmail+dovecot... then Zimbra... and now a 1-user Exchange install :)
 
@MDMarra It's somewhat rare that I e-mail someone with a gmail account actually... Most of my e-mails are to private company addresses or similar.
 
@TomOConnor It would go fast. :P
 
I have moved around a bit. I hardly used my domain name so I let it go.
Eventually I settled into Gmail. Another company I'm dealing with hosted with gmail with their own domain name, and I have an address with them to work with their stuff.
 

« first day (564 days earlier)      last day (4432 days later) »