« first day (1007 days earlier)      last day (3982 days later) » 

2:00 PM
HA Admission Control is supposed to be use to guarantee restarts fof a VM (Enough resources available to bring it up when it's restarted)
 
Doesn't it only matter if you have a lot of reservations?
 
@MDMarra correct.
 
Does anybody boot their vSphere ESX hosts from SAN? Or is that not a good idea?
 
@MikeyB yes and I prefer SAN booting
@MDMarra It checks sufficient unreserved resources are available and then allows to the VM to start if so.
@MikeyB yes, at NetApp we did SAN booting for the hosts.
 
@Cole D'oh, I misread your reply to mdmarra as to me :)
 
2:04 PM
Show of hands, how many people regularly type shitdown instead of shutdown?
2
 
@MDMarra shitsgoingdownyo
 
shitdown -s doesn't do a whole lot
 
@MDMarra Make an alias :D
Hm, I have a feeling this kernel compile is going to take a while...
 
I spend most of my day in Windows
 
@MikeyB I don't know anyone who does.
 
2:05 PM
We don't have cool things like aliases
I mean, we do in PowerShell
 
@MikeyB tbh depends on your environment, too.
 
but I don't open powershell to type shutdown
 
@Cole I guess I don't EXPECT my ESXi hosts to fail.
and I don't mind a bit of VM contention.
 
I've realized that compiling modules on the Pi is frustrating at besr
*best
 
@Cole Well in this case we forgot to quote the embedded hypervisor keys for the 2 ESXi servers ;) So boot-from-SAN it is.
 
2:07 PM
Because the kernel it uses doesn't have headers in the repository.
What it does have won't work for module compiling because it's a different version designation -_-
 
@MikeyB depends on your environment too. We had multiple 32 host clusters, fuck if I want to be rebuilding ESXi if things go sideways. (i.e. older IBM blades that would shit themselves occasionally) For us, it was just easier to manage a large environment.
 
My next question will be about VM reservations. Client is asking for all of their VM ram to be reserved.
 
@ewwhite So charge 'em double for the reservation :p
 
@MikeyB they're paying for dedicated gear... so it's their choice.
 
@MikeyB Easy enough to pop in a new server and point the new server to the boot location, and now you don't have a single point of failure. (Unless your SAN dies, I suppose- in that case - Shame on you for not doing backups!)
 
2:11 PM
@MDMarra - actually reminds me (funny now) of when I had a contract to migrate a company from Netware to Windows (with very little Netware experience). Was trying to figure out the broadcast command syntax. Apparently typing "SEND HELP" and "SEND ?" only ended up causing about 3,000 machines to show up with message boxes showing a question mark and then a HELP box. Had multiple calls immediately to my cell phone on that one.
 
@ewwhite Deja vu. Haven't you gone rounds with this before?
 
hahhaha
 
@Cole but the USB or SD key is pretty easy, too
 
yeah net send is disabled now on newer versions of Windows
 
@ewwhite for small clusters, yes that's what I would do. Large clusters, fuck no.
 
2:12 PM
yeah...this was the netware version...but same concept.
 
@Cole my biggest ones here are all on mirrored RAID pairs.
wasteful
 
Apr 5 at 21:36, by MikeyB
Just got back from a customer who called us up to diagnose some weird Xsan filesystem related issues. Found an (arguable) bug in the way that OS X resolves ACLs. That's not the story.
We sold them a new shelf for their storage subsystem a few weeks ago. They didn't take the installation services offered.
Used their usual contractor to do it. He came in, said "Oh, we should rebuild your xsan luns for (whatever reason)." That's not the story.
He backed up all the Xsan data (with rsync to an iSCSI LUN, how pro) and then nuked the Xsan luns.
 
I was told a similar story. At my last job, about 12 years ago when they were doing a server 2000 AD, he was trying to do net send to his wife as a joke and sent "Baby, I looooooove you" to the whole company.
6
 
22 and 26-host clusters
 
@ewwhite very wasteful.
 
2:13 PM
@MDMarra lolz
 
@ewwhite that's why I prefer SAN booting for that. 1GB LUNs.
 
@Cole I use a lot of NFS, so that's why it's not really feasible.
 
^ there's more to that story if you click through
 
@Cole can't you also do autodeploy and pxe so that ESXi is just resident in memory and gets autoconfigged on each boot?
Or is that not a thing?
 
@MDMarra yes you can.
 
2:15 PM
@MDMarra yes
 
It all depends on what you feel comfortable with managing/makes the most sense for your environment.
 
@MDMarra Nice...yeah definitely smart on MS' part to disable that service by default.
 
to me, it seems more complex in our multi-tenant environment
and race conditions... I could only imagine
 
@ewwhite why don't you have a nexentastor vm in esxi exporting iSCSI back to the host that it uses to boot itself?
 
@MDMarra I did that. I figured it was too simplistic. I needed moar complexity.
 
2:17 PM
hahaha
 
Moar! Moar complexity!
 
Oh right! As a followup to that story, I checked back in later with them. Turns out, yes it was their corporate accounting info, test systems, non-Xsan file shares, etc. Kerboom.
 
....ouch.
They...they did have backups, right?
 
Hey @ewwhite - just had my "cloud provider" crash 2 of my ERP system VMs 20 minutes ago. Apparently they were upgrading the host's A/V and somehow didn't vmotion off 2 of my servers. They aren't sure what happened but their excuse for doing this during peak hours was "I thought we sent out an email about this?" ...nope didn't get your email, not too thrilled.
 
@allquixotic Are you having problems @BBGN?
 
2:19 PM
@NathanC Follow the link above.
 
@TheCleaner "the host's A/V"????
 
Hm, yeah...this compile is easily going to take hours to complete. Time to spin up virtualbox...
 
@TheCleaner anti virus on a host?
 
@ChrisS Seems odd, must be using Xen/OVZ?
 
@ewwhite vShield?
 
2:19 PM
Hyper-V?
I don't bother with anything host-level... minimal attack vector.
 
Shouldn't be running AV on Hyper-V either.
 
@MikeyB Oh yeah, I remember that story. Along with the barrel of lube that was randomly posted.
 
TM Deep Security I believe is what they are using.
 
@TheCleaner EWWWWWW
 
@NathanC there is nothing random about a barrel of lube
2
 
2:21 PM
 
@TheCleaner You mean "DeeP SeCuRITY" as capitalized by TM.
 
@Jacob or maybe vShield. Don't know...they just said "Trend"...so I'm guessing as to the flavor.
 
Oooh, kickstarter delivery survey
 
They are replacing all the Vipre installs on individual VMs with host based A/V they said...
 
2:23 PM
@TheCleaner wat
Um...
 
I've seen McAfee doing that, host-based AV. Also they have an off-load AV system. I haven't heard much about them other than the sales pitch.
 
Excuse me if I'm not sure how that works, but aren't VMs contained in a single file container that can't exactly be easily scanned?
 
Only a handful of my servers have AV in the first place - I wouldn't really want AV running on all of them via the host.
 
@Jacob Nope
 
@allquixotic ok
 
2:25 PM
Hiring managers/people who do interviews: What are the best questions you get asked? Or wish people would ask?
 
@NathanC - my guess is that it uses API hooks to do a sort of remote scan from the host into the VM. As far as real-time scanning goes, not sure. It's voodoo.
 
Ah. Magic. I see now.
 
Course, as bad as it was to here them say "we're using Trend" it could have been worse, they could have been using this place: hypertection.com lol...that screams "dude...I've got an idea!"
"Hypertection solution uses MS Essentials for Hyper-V hosts and free ClamAV engine for VMware ESX(i) hosts. Manage only hypervisor-based antivirus, do not think about client mashine software - and do not pay for it."
 
also, they don't think about spellcheck?
 
@JourneymanGeek Try buying it... hypertection.com/buy.html
 
2:30 PM
@NathanC it's exposed through the vShield API
 
@MDMarra Ah, I see.
 
Essentially, you install a lightweight agent on each VM that gives visibility into the guest, then you have either a single AV client w/ defs and all that per host, or one in a VM per cluster that's responsible for the whole cluster
It's been around for a while, but it's not very popular
 
@MDMarra why?
 
Ugh. This virtualbox VM i have won't allow ssh as root
even though i have it enabled in the config o.o
 
@Jacob No clue. Probably because it's still relatively new (2-3 years?) and people are scared of change?
 
2:32 PM
Just says "access denied" but doesn't write anything to the auth log...
 
@NathanC Vbox BAD
 
@Jacob I know, it's only used for dev work. Or in this case, so I can compile a Pi kernel module
 
@NathanC how is your NIC(s) set up?
 
since it's going to take hours...
 
posted on June 14, 2013 by SysAdmin1138

Perhaps you've seen this error: Version mismatch with VMCI driver: expecting 11, got 10. I get this every time I upgrade a kernel, and this is how I fix it....

 
2:32 PM
@Cole Bridged adapter
It's worked before, just not now for some strange reason
 
@Jacob VBOX GOOD. VBOX in production… not so much.
 
@NathanC selinux?
 
@MikeyB I run all of my VMs in production on VirtualBox. You mean that's a bad thing?
4
 
D:
 
@Jacob D:
 
2:33 PM
@Jacob lrn2libvirt
 
@Cole Nope. I logged in as a non-root and it worked instantly
When I typed "root" at the prompt it actually sat and thought about it for a good 5 seconds. Like it was contemplating my demise for attempting to log in as root.
2
 
@NathanC betcha you didn't restart sshd after making a change to the config file last time
 
@MDMarra @ewwhite - is VMware Protect a recent product? I don't remember seeing it before now, but maybe it's been out for a while. Seems worthy enough if you really did want to go agentless.
 
@MikeyB I did. Twice. :P
 
@TheCleaner I think it launched with 5.0
 
2:34 PM
@TheCleaner it may be a renamed vShield
 
Oh well
 
@NathanC what OS?
 
@NathanC Must have been contemplating your demise for attempting to log in as root.
 
Debian 6
 
@NathanC Usually when I can't ssh into a box the shell I have specified in my path isn't installed on the host.
 
2:36 PM
OOHHH HEYYY anyone know offhand how to tell Oracle to compact the size of its datafiles on disk? #lazyweb
 
@MikeyB yum remove oracle*
 
Odd. It was just the normal putty configuration. But, since I got in as non-root I can just "su" my way to root if I need to.
Not like I need to be root to compile a kernel anyway
 
@MDMarra hilarious like a puppy with no legs.
2
 
Alright so I have a poker gathering tonight...and while I've played around on Pokerstars back in the day and know the basics...strategy for me is "ALL IN" most of the time. Anybody got a site that will get me semi-prepped for tonight's games?
 
@NathanC I don't always log in as root, but when I do it's using passwordless keys.
 
2:37 PM
-_- until it randomly drops my connection "connection reset by peer"
and i'm local to the damn thing lol
 
@NathanC something have the same IP?
That's my guess.
 
@TheCleaner don't call a raise unless you have a good pocket hand. Raise pre-flop if you're one of the last betters and you've got suited connectors or a couple of face cards. Always raise at least 3x the big blind pre-flop. Always raise enough to scare people away. If you raise 5 and the big blind is 5, everyone's going to play because its cheap and you can't guage who's got what. If you raise 20, you know anyone in has playable hands
done
 
@Cole Shouldn't. It's all DHCP.
 
@NathanC but could
 
I like the dedication to detail @MikeyB ...could have stuck with animal, or even dog...but no, the man hones in on the specifics...puppy.
 
2:40 PM
@NathanC apt-get install arpwatch. Or maybe you have an overzealous firewall dropping states.
 
@Cole I have a DHCP reservation for the box's IP. I'm using my "dev" box that hasn't come up in a while. :P
 
@TheCleaner oh, and "call" is the weakest play you can make pre-flop. If your hand isn't good enough to raise it, it's not good enough to play.
 
@MikeyB Could be. I tried to log in and it resets again.
 
@MDMarra now to look up the lingo..."suited connectors"
 
@TheCleaner two consecutive cards of the same suit
so like, 8 and 9 of diamonds
it lets you draw at a straight and at a flush
 
2:41 PM
@NathanC reservation for the VM or the actually box it's sitting on?
 
@Cole for the VM
It's actually failing to reach the network...so I'm thinking something stole the IP anyway.
 
I used to play an unhealthy amount of poker
 
@NathanC that's my guess.
 
apt-get was being hesitant on connecting (timed out a couple times before going
 
@NathanC and ssh took a long time to connect? Yeah, usually wrong IP.
Try 2-3 times and you'll be able to connect - then get booted.
man, I just want to go home and lay in bed with my cat.
 
2:44 PM
@MDMarra - so...based on your comments, if I'm the last better and nobody has bet pre-flop...and big blind is 10. If I have QD,KH, I should raise 30 and see who calls or raises again? What if they raise? Do I call them or bail? --- or worse scenario (for me at least), say I have QD,KD, and I raise 100 pre-flop and someone else goes all in...do I call or bail?
 
@MikeyB So i installed arpwatch...I just got 83 emails in my inbox from it
 
nom?
 
But it did show another machine with the ip address
that thief :P
 
@tombull89 wtf
@NathanC well, problem solved.
 
@TheCleaner if you're the last to bet, it means you're big blind. Depending on how many people are in you could either check (and see the flop for free) or raise and try and force weak hands out and not let them see a free flop.
 
2:46 PM
DHCP assigned it the same IP address though...
kicks
 
@NathanC lulz
 
It depends on how you want to play. Generally if you raise and the flop comes down 2 5 9 or something like that, it's a safe bet anyone that called a raise didn't hit any of that, but if you checked and a biunch of people got in for cheap, someone may have paired 9s or something and then you're in a pickle. But you also didn't put any extra money out
 
@tombull89 If I ate that, I'm pretty sure I'd spend the next week in the bathroom.
 
I have an annoying habit of typing dmesg on every Linux server I work on...
it's like I'm looking for trouble.
 
heh, i booted its reservation @Cole and it grabbed a new one. Probably someone set up a system and gave it a static IP without checking with IT first
"ethernet vendor: CADMUS COMPUTER SYSTEMS"
Hmmm...
Oh, that's virtualbox's mac
 
2:48 PM
@NathanC pretty sure VBox uses the same MACs as CADMUS COMPUTER SYSTEMS
Speaking of going to the bathroom, brb.
 
My problem on pokerstars was I could never figure out who might have what. I couldn't look at a flop and people's bets and go "yeah, he's got a pair now", etc.
 
Turd burger.
 
@TheCleaner and if you're playing tournament style (like 20 bucks buys 1000 chips, play till you're knocked out) then as soon as you have less than 10 big blinds worth of chips left, you should go all-in as soon as you have anything that looks remotely nice
10 big blinds is where you start shoving all in with decent cards
@TheCleaner Yeah, raising effectively pre-flop helps. Sure sometimes people will call a big pre-flop raise with 88 or AJ or something like that. But generally it cuts down on people with like 45 suited and shit
So if an ugly flop comes down, like 367, you know no one hit a straight on it (most likely)
Of course, sometimes, in home games anything goes. Some people will call any raise just because they like action. So it's part personality, part forcing out junk hands before they can bite you
 
@TheCleaner When I play, I try to be as mechanical in my betting as possible, specifically to throw people off.
 
I'm working on my poker face...gotta find some dark glasses
 
3:00 PM
0
Q: Replacing Hard drives/RAID array Dell Poweredge 2900

Justin CI have a Dell Poweredge 2900 that I'm upgrading from 4x SATA 250GB Drives in a RAID 5 situation to 2x SATA 1TB Drives in a RAID 1 situation. The box is running Windows Server 2003, with a PERC5/i controller card. As far as I can tell without too much prodding, the server is running RAID 5 with th...

...or would it all just catch fire in my face to spite me?
 
@TheCleaner don't worry about a poker face
since its a home game, everyone will be laughing and joking
if you tense up and keep a straight face it'll be a dead giveaway
 
@TheCleaner Don't try the "poker face" thing - you either have it or you don't.
 
just be consistently drunk throughout and it'll have the same effect
 
At best try to screw around, the more weird faces you make the more confused everyone else will be by them.
Drunk doesn't work on me. I can be three sheets to the wind, if I was trying to look serious (like Poker Stars) everyone would know what I was holding.
 
@MDMarra @ChrisS - joking about the poker face
client PC centralized/managed backups...yes or no? why yes or no?
 
3:12 PM
Who knows anything about Palo Alto Networks?
 
I know some...haven't used them myself, but been to lunch and learns and demos
 
@TheCleaner Yes. So I don't have to worry about it... Only backing up key Laptops. Using SCDPM.
 
@TheCleaner So if a managed services firm came in to take over your infra and recommended Palo Alto Networks gear, would that be suspect?
 
brb phone screen -wee
 
(one of my clients is asking... because I said I've never seen Palo Alto Networks gear in use anywhere... but they now have a bunch of it)
@Cole Details!
 
3:22 PM
@ewwhite they make good gear...if that's the question. But my guess would be the VAR/techs know their gear and/or have a partnership with them so they are recommending it.
 
@TheCleaner but it's not common mindshare.
 
@ewwhite No one but cisco does, and not everyone can afford cisco
Some people are fine with Arista, Extreme, ProCurve, etc when they evaluate the cost per port
 
@ewwhite true...it's similar to Extreme, Big Iron, Alcatel, etc.
 
I used the hell out of Arista for trading system networking.
We have Extreme at work...
 
3:27 PM
How long until you get the CEO to mandate cisco?
 
And Procurve and Cisco.
and Netgear
 
I love Extreme's switches...very easy to manage...but nobody ever got fired for buying Cisco
 
> I'm not familiar with servers, and I'm not sure what rebooting the whole server means, or how I can do it.
-1
Q: Rebooting whole server for Rails

PJ MillerI'm migrating a Rails project onto an Apache server. I've followed the steps similarly to this link (installed passenger as ruby gem, added some lines to /etc/apache2/apache2.conf, set Vitual Host to rails app ~/public directory.) When I visit the site, I only see content of dispatch.fcgi. That ...

 
@TheCleaner Our Extreme storage core barfed and core-dumped.
20 minutes to reboot
 
yeah, we had around 8 x450e switches with bad capacitors...all crapped at random times...sucked. But I still like their OS.
 
3:31 PM
Machine check events logged
Machine check events logged
Machine check events logged
 
0
Q: Re-set the default homepage in all major browsers programmatically

Damien.BellDoes anyone know of a way that this is possible? I have a project that requires me doing this to about ~70 computers for a planned product revision to our testing group. Doing this manually will suck horribly. In the past I've used registry keys to do a lot of my more menial tasks, but it seems ...

^ Thoughts?
 
@MDMarra don't hate
Give teh codez
 
no codez!
 
@MDMarra Cross post
 
3-way
 
3:37 PM
None of the other sites closed/migrated it
 
@TheCleaner I was just curious why someone would go to O365 instead of local installs since software license is cheaper than 365/year/user
@TheCleaner Do you use Lync web app much?
 
I think he's spent more time posting that question on three different sites than it would take to just write the stupid thing.
 
burn!
 
@Travis - for us O365 is cheaper than our other hosted solution. On-premise licensing is cheaper true, but we didn't want to mess with a datacenter, redundant Exchange server VMs, vmware, SANs...etc.
 
mmm I/O porn
@ewwhite apt-get install mcelog
avg-cpu:  %user   %nice %system %iowait  %steal   %idle
           6.90    0.00    2.31    0.00    0.00   90.80

Device:         rrqm/s   wrqm/s     r/s     w/s    rkB/s    wkB/s avgrq-sz avgqu-sz   await  svctm  %util
sdc               0.00     0.00  234.33  469.00 117118.67 199228.33   899.56     4.66    6.63   0.92  65.03
sde               0.00     0.00  241.00  492.33 118490.67 209876.50   895.55     4.79    6.61   0.92  67.37
sdb               0.00     0.00  236.00  390.67 116777.33 195326.17   996.08     4.43    7.07   1.00  62.50
 
3:49 PM
Don't use the Lync web app much...use the Lync 2013 client
 
@MikeyB o rly?
HARDWARE ERROR. This is *NOT* a software problem!
Please contact your hardware vendor
CPU 15 BANK 8 TSC 4a1cdab2e95a40 [at 2667 Mhz 90 days 12:51:56 uptime (unreliable)]
MISC cd3a400800046141 ADDR 72b4ddbc0
MCG status:
MCi status:
MCi_MISC register valid
MCi_ADDR register valid
MCA: MEMORY CONTROLLER RD_CHANNELunspecified_ERR
Transaction: Memory read error
STATUS 8c0000400001009f MCGSTATUS 0
MCE 10
HARDWARE ERROR. This is *NOT* a software problem!
Please contact your hardware vendor
CPU 16 BANK 8 TSC 4a1cdab2e96098 [at 2667 Mhz 90 days 12:51:56 uptime (unreliable)]
 
@TheCleaner Oh. I guess that makes sense then since you don't want the infrastructure. I got a demo of Lync web app and tried to use the Lync attendee to join it and can't get it to work.
 
@MikeyB soso
 
@ewwhite ick, uncorrected errors? yeah that's bad memroy
 
Supermicro!!!
 
3:52 PM
What I'm getting on my VM host now:
CPU 10 BANK 9
TIME 1371055960 Wed Jun 12 12:52:40 2013
MCG status:
MCi status:
Corrected error
Error enabled
MCA: MEMORY CONTROLLER GEN_CHANNELunspecified_ERR
Transaction: Generic undefined request
STATUS 900000400012008f MCGSTATUS 0
MCGCAP 1000c18 APICID 40 SOCKETID 1
CPUID Vendor Intel Family 6 Model 47
Hardware event. This is not a software error.
@ewwhite Supermicro… good for tier 2.
 
HP Insight Management Agents Trap Alarm
Trap-ID=6052

Advanced ECC Memory Engaged
 
@Travis when did you try? The lync online was experiencing issues today and yesterday I believe...at least for new connections.
 
That's how we do.
 
@TheCleaner Today
@TheCleaner About an hour and some change ago
 
"Microsoft has identified an issue with the Lync Online audio call feature. While calls performed from Lync to Lync are not impacted, and users are dialing calls without issue, some users served from the North American region may experience intermittent call failures when receiving calls. The available workaround is to try the call again, as subsequent attempts can be successful. The next update will be provided by June 14th at 6:00 PM UTC."
 
3:54 PM
@TheCleaner I could join the meeting through the online page but the attendee client I thought was supposed to pick the client install and use it for the video/audio
 
yeah, it should work like webex...install a small client and allow you video/audio
 
Yep
 
I don't know if it uses silverlight/java/what though
 
Siliverlight
I know the Polycom we're using isn't supported by the web app so you have to use the client instead of the plugin
 
Did you trial Lync online subscription itself or something else?
 
3:56 PM
I believe it's the full O365 trial
I had the ability to download the apps, skydrive, OWA
 
Like an E3 trial or just Lync only?
Sounds like a full O365...should allow you to download Office 2013 pro plus too, right? Does the full client work?
 
Yep. I didn't try the full client. I was thinking I had to have Lync server for that
 
Which trial did you do...certain ones include Lync online.
 

« first day (1007 days earlier)      last day (3982 days later) »