@ewwhite I haven't got the slightest idea.

@MichaelHampton well, here's the situation...

[root@ads-ppro ~]# lxc-ls
pprotest

admin    84756  0.0  0.0  88860  6592 ?        SN   17:56   0:00 DBC JSINIT 1
root     84811  0.0  0.0  55100  1528 ?        Ss   17:56   0:00 /usr/sbin/atd
admin    84812  0.0  0.0  11336  1264 ?        SN   17:56   0:00 sh
admin    84813  0.0  0.0   9232  1100 ?        SN   17:56   0:00 /bin/bash
admin    84979  0.0  0.0  88860  6592 ?        SN   17:56   0:00 DBC JSINIT 2
root     85035  0.0  0.0  55100  1528 ?        Ss   17:56   0:00 /usr/sbin/atd
admin    85036  0.0  0.0  11336  1260 ?        SN   17:56   0:00 sh

@MichaelHampton A host system... and an LXC container..

produce software does a "ps -ef | grep JSINIT"

or probably just a killall JSINIT

this happens in the host system... but is killing the JSINIT processes that show up in the process table of the container.

@ewwhite lists.linuxcontainers.org/pipermail/lxc-users/2011-May/…

comments.gmane.org/gmane.linux.kernel.containers.lxc.general/…

> A meta answer to your example is that the best practice for a realworld LXC production setup will include not to run any service on the host.

@MichaelHampton these are auxiliary systems... test servers. Seems that a killall BLAH is the more egregious offense.

@ewwhite Well, yes, I wouldn't do that in a script. I'd go get the right PID from a pid file.

Of course...that software is so enterprisey that it doesn't have a pid file, right?

you KNOW there's no PID file

Well, then, I guess you're left with shoving it into another container

Can't. Need some special hardware access

killall:ps -ef | grep $1 | grep -iv killall | grep -iv grep | awk '{{system("sudo killpid "$2)}}'

You ought to be able to grant that to a container.

I'm just remarking on how ugly that is

#!/bin/sh
ps -ef | grep $1 | grep -iv killall | grep -iv grep | awk '{{system("sudo killpid "$2)}}'

Yeah, that's pretty ugly.

killpid is setuid, and END USERS trigger this from a menu inside of the produce software

can't fix everything

every time I read Testa, I think of Chuck Testa

that's wife's company

sometimes they enter the wrong PID... and kill SSHD

it's happened thrice in 13 years.

Now, if you had EL7 then sshd would just restart :)

But I don't have EL7 :)

maybe I'll play with some test builds of it

I think you will really like systemd...it solves a LOT of problems you didn't even know you had

I really can't use it until HP supports EL7

What's taking them so long?

I'm also on hour #5 of a database server maintenance for JoelESalas' company

but their VPN conflicts with my VPN... so i've had to halt normal client work for the duration

@MichaelHampton I think they'll wait until EL7.3

heh, RH7.3 versus RHEL7.3

it's come full-circle

@ewwhite And if HP doesn't support EL7, then what's this?

@ewwhite Fucking hate that

I also hate clients who have SSL VPNs that completely disconnect you from your local network when you log onto them

@MichaelHampton it's getting closer... they added new packages in october - h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/psi/…

@MarkHenderson just to make life terrible

@ewwhite Yeah, I saw that not all drivers were available yet. But there's always a VM :)

@ewwhite hp-snmp stuff in rpms is good enough rhel7 support for me for now...

@freiheit it's better than it was a couple of weeks ago

@ewwhite Rather helps that the only HP server I want to run RHEL7 on right now is a new monitoring server, not (say) a critical Oracle DB server or something like that.

of course

I'll get there... but based on history, .0 releases of RHEL are no good

On other note: goddamnit, I can't kill SSLv3 on my openldap servers yet!

@ewwhite I had a serious problem with 6.5

And... 6.6 will be out shortly, with bug fixes for last year's bugs.

perfect, right?

LXC is flexible enough for that, Docker - being a layer on top of LXC - isn't quite

@MichaelHampton RHEL6.6 is out... Like a week or so now... Includes changes to allow enabling TLSv1.1 and TLSv1.2 in apache configs... Probably breaks something...

@freiheit Ha. I hadn't looked for ten days or so

@MichaelHampton My puppet recipe for apache configs now includes if $lsbdistrelease >= 6.6 { and <% if @lsbdistrelease.to_f >= 6.6 -%> because of that openssl stuff...

Hm, CentOS hasn't pushed 6.6 yet

And anyway I'm using nginx and have had TLS 1.2 going for quite a while.

@MichaelHampton 6.6 openssl also includes support for protocol downgrade prevention.

@freiheit That came in a security update already

And I've had SSLv3 turned off for six months

Wish I could easily turn SSLv3 off for our ldap stuff...

heh 3par went TU in June, stuck at GRUB prompt. San Diego just called to have me unplug the serial console - bug appears to be if there is anything at all plugged into the console, it stops the boot process.

That's...enterprisey.

@MichaelHampton the other end of the console cable wasn't plugged in to anything, but I suspect the DB9->CAT5 adapter ties something to ground to signal it exists

modtaps4lyfe

@RyJones If tx=0 and the connector seems connected, that's a 'break', which is kinda special on serial consoles...

@freiheit in the email, they said this is a bug, not a feature, so I'm reporting it as unexpected. My last use of a serial console was JTAGging a bunch of MCUs, not plugging in to something with a bash prompt.

@RyJones We used to have a fair amount of Sun equipment hooked up to serial console (via a terminal server)... I think our older NetApps and some of the cabinet PDUs still are, even if nobody's used that access method in over a year (probably)...

Now you're just stabbing me in the heart.

@RyJones And not even with a Begg!

@freiheit Today is the first time in a long time I haven't carried my Begg.

And, seriously, my pants are less dangerous than they used to be. The replacement knife is probably 1/5 or 1/6 the mass

@RyJones Most of those Begg knives look huge...

7.8 ounces versus 2.88 ounces so not quite 1/3

@freiheit Todd is huge. I think he makes knives for himself.

@RyJones 2.9 ounces is the pocket knife I'm carrying right now, and that's the heaviest I go with...

@freiheit The Begg replaced an M16-14LE which was 6.4 ounces

@RyJones I guess my other one is 2.5 ounces...

ah, the box is 6.4, the knife is 4.9. That's a little better

I've got a leatherman multitool, too, but that's usually in my bag or something, not really in a pocket unless I specifically know I'm gonna need something on it...

@freiheit I like the look of that

I carried a Spyderco Delica for years, which I see is 2.5 oz

@RyJones I used to carry a 1 oz knife all the time... I wish Benchmade still made something like that...

@freiheit I have some knives that are lighter, but not EDC worthy

please note the kydex weighs more than the knife

@RyJones Are these part of a collection to look at/impress, or do you collect them for functional reasons as well?

I love a good knife but I have zero real life use for one

@MarkHenderson those don't show up on xrays. I wish I'd had them when I worked at the federal building

@RyJones Because you take a knife into a federal building because...

@RyJones The edge is carbon fibre (plastic)?

@freiheit Indeed it is

@MarkHenderson You have to be ready at a moment's notice if a ... box needing opening suddenly appears...

I also carry a pen all the time. :)

We had to check out silverware to cut birthday cakes, or have the kitchen cut it and bring it up.

it was, in every way, like being in prison. We weren't allowed plastic utensils until someone prevailed on security to allow us to stir our coffee and tea.

@freiheit I open a lot of boxes

I go through a few stanley knife blades

I wonder how long that carbon fibre one would stay sharp for...

@RyJones holy crap

@MarkHenderson through tape? forever. through anything tougher? not long

@RyJones Tape and the packing slip that is invariably stuck right over the tape line

@MarkHenderson yes

And then usually a bajillion cardboard boxes inside there

Plastic wrap

Bubble wrap

used some amazon air pillows this weekend

@RyJones Seems like the carbon fiber one wouldn't be any sharper than a hardwood knife... lighter, of course...

the carbon fiber aspect is really weird there...

@freiheit you can sharpen the carbon fiber knife with a nail file

I mean, carbon fiber is really a plastic with carbon fibers in it for strength in specific dimensions. It's hard to imagine that the carbon fibers help the edge much...

I think he did it because he could. I like Fred and have a couple of his knives.