« first day (586 days earlier)      last day (4681 days later) » 

17:02
@Adrian I was making fun of Worgens
@voretaq7 Do share. I love back from the grave stories.
@voretaq7 Hey, I had a male worgen rogue
@BartSilverstrim Adjusting sync on an old CRT monitor. Electricity arose, ensued, and arced through places you don't want it.
@voretaq7 Oh. I don't WoW or whatever it is that's from.
@voretaq7 screw driver. You use the screw driver for that.
17:06
I still have a worgen warlock. I called him Werelock. (I thought this was funny)
This question got me thinking... how DO you guys handle VMWare shutdowns?
3
Q: How to properly shutdown ESXi cluster after power outage?

JohnI am integrating UPS EATON with our ESXi 4.1 cluster. Eaton provides shutdown script for one particular ESXi host (shutdownESXi.pl) The problem was, after manual execution of shutdownESXi.pl script on vMA with shutdownESXi.pl --server ServerName --username .. --password .. the host was shut...

Actually, I'm rather happy with my puttering about with the Lego games on the Xbox.
I'm going to dig my xbox out again for Fez. First time in nearly a year.
@ewwhite Maintenance mode -> Shutdown -> Do whatever I planned on doing -> power on -> light some Jesus candles because I'm mexican and pray it works.
Let's say we're talking about the power outage scenario.
and you have 3 ESXi hosts and a SAN...
17:16
@ewwhite I think it's entirely dependent on what the hosts are hosting
If it's a DB, all bets are off and the disaster recovery plan needs to be planned in detail
If it's something like an app or a web server, no big deal. Maybe 4-5 people will lose what's in their shopping cart. Data inconsistency is almost a non-issue for our applications
@ewwhite Pray that my generator doesn't blow up?
We bought property that used to be a hospital. It's our main datacenter site now
80% of my ESX installs are in facilities where power is pretty solid. The other solutions are so small that it's just a single host. VMWare is pretty resilient there. But I'm just curious what smaller shops do.
They have a generator hooked straight up to a natural gas line :p
@MDMarra That is fucking awesome. Take pictures when it explodes?
I don't know too much about it except that if it ever goes down, it's probably because we're totally fucked anyway
17:19
@ewwhite I'm in the unfortunate scenario of 8 ESXi hosts and no true SAN
@Joel I was there until about a month or two ago
Now 4 hosts, 4 storage nodes
For a while, SAN was a four letter word. FSAN, as in "Fucking SANs, again with this?"
Been there.
@ewwhite We pray a lot. It makes us feel better. Sometimes our data centers are entirely powered by the warm fuzzy feeling we get inside after severe bouts of hope.
@BartSilverstrim Try the jesus candles sometime. We proposed lighting them in the server room as an alternative to doing backups
17:24
@Joel And risk setting off the smoke alarm!?...oh, I don't know if we have a smoke alarm in that room...
@BartSilverstrim The idea was vetoed when we realized that they might set off the fire sprinklers in there.
For someone who has no idea what the point of virtualization or ESX(i) is, can someone give a quick summary?
I'm going to beat every single one of my padawans. They all decided to go do off-site stuff today during my WebEx, leaving me here to field all the requests.
@David You can run multiple (and different) operating systems on the same hardware
That's the basic
For what purpose?
17:30
It's cheaper to buy 1 high end server than 15 low end ones
saves on power, rackspace, etc
If it fails though...you take out 15 "servers" as opposed to 1 server?
Also, since the OS is abstracted from the hardware under it, you get all kinds of cool stuff like the ability to migrate it from physical machine to physical machine
@David thats why you usually want to back it with shared storage like a SAN or NFS share
Most hypervisors worth their salt keep track of where a VM lives on shared storage and can auto-restart it in the event of a hardware failure
Gotcha
@David I say something like: "Due to advances in computer performance and processing power, it's rare that a single operating system can leverage the full resources offered by a modern server. Virtualization allows us to make more efficient use of those resources by carving the physical system into multiple virtual systems"
wish i could work around that kind of stuff
17:32
Those are the basic benefits, there are tons of other cool things that you can do nowadays
being @ a 20-person non-profit w/ 15 macs and 5 PCs
no fair!
"So there's a power, redundancy and cost benefit to doing so."
@David Hyper-V server is free
sam
sam
@MDMarra Snapshots, snapshots make my life so much easier
Yeah, snaps are nice
It makes backups suck less
17:33
@sam THIS
they still suck, just less
Although, you do get junior admins that take like 15 snaps and never merge them and then wonder why everything is mega slow
@David You have any servers at all there?
2, one os x, one 08
Server 2008 R2 shipped with the Hyper-V role available
Not sure about 2008
(I never use VMWare snaphots. Maybe I'm weird.)
17:34
yeah its R2, but what would I use it for lol
@ewwhite all storage snaps?
sam
sam
Has anyone virtualised a single guest over multiple hosts yet? I think RHEL6 supports 512 CPU cores and there aren't that many single servers that can provide that. Is there a way to get a few hosts and "cluster" them to provide a single guest VM? Not sure what performance would be like but it would be fun to play with
@David I'd keep it in mind for next time you need a server. It would allow you to get more usage out of the existing hardware by having more than 1 server on that machine.
@MDMarra Pretty much. ZFS.
Do those quiesce the guest filesystem?
17:36
Nope.
Isn't that bad?
depends on why I am taking the snapshot
I thought for storage snaps of VMWare to be consistent, the storage had to tell vCenter that it was about to snapshot and vCenter would pause storage operations to VMs on that volume
I have rolling ZFS snapshots of my datastores... so, hourly for a day, daily for a week, weekly for a month... Just point-in-time crash-consistent snapshots.
But I mean, say you have a big SQL update going on
The state of the server at the start of the snap is going to be different than when it finishes
17:39
Instant snapshots. Takes a second or so.
Wouldn't you have a corrupted db if you tried to pull it out of that snap?
but even so, plenty can change in a second
I don't really know how it works under the hood, this is just stuff I've read
Yes, ideally, if you're taking snaps for the purpose of recovery, you'd stop guest activity or run it from within VMWare.
these are just restore points for me, due to the frequency.
jumping back up to the iPad thing, I've been informed one of the departments is awaiting a delivery of thirty-two iPads, for use by students, in addition to the ten we already have for staff.
facepalm the padawans imaged a bunch of loaner laptops for the Executives and didn't put in the activation keys for Office.
@tombull89 I hope you have Casper or Absolute
17:41
Now, the cost of 32 iPads would pay my wages for a year and a bit on top.
Don't a lot of kids have their OWN ipads?
As for what they want them for...I still don't know yet.
@Joel It was just an example though
@MDMarra I think we're gonna upgrade the xServe to...Snow Leopard? and use the managlement of that.
The premise is the same for a large file copy, etc
@tombull89 It kinds sucks
No app deployment and stuff, afaik
17:42
I'll give a 50-rep bounty to whoever guesses how long it will be until an iPad is a) damaged and b) written off.
@MDMarra You could use VMware tools to quiesce the filesystem
@MDMarra We'll struggle with it for a few months, then someone will get fed up and chuck money at it likethemacscough
@Joel Right, but not from a storage snap unless the storage array integrates with vcenter
If you're doing a ZFS/LVM/whatever snapshot, you're not going to be able to do that
@tombull89 If you get Casper you can manage the Macs and iPads from one app
@MDMarra I'd treat them as two different layers of data consistency
Yo dawg, I heard you like snapshots
:)
17:44
@MDMarra SO I SNAPSHOTTED YOUR SNAPSHOT?
SO THAT YOU COULD HAVE A SNAPSHOT IN YOUR SNAPSHOT
@tombull89 Do you work in a public school?
@tombull89 What grade level are you talking about for the iPads?
And the padawan also copied the old server's entire /etc on top of the new server's /etc. Joy.
@Adrian That's not normal? :p
17:51
I've come to the conclusion that unless the technology is leased or given to the students, it's a failed prospect most of the time.
Good luck with your wireless holding up to the influx of iPads and other devices, @tombull89 :-)
Should be interesting in a few weeks. The new L1 tech we're hiring has better credentials than the L2 padawan that just blew up that terminal server.
@MDMarra you can do that and have it be mostly successful, assuming the partitioning and such is the same.
hire me!
@Adrian now they should mount the same LVM/RAID
@Zoredache I wasn't sure what @Adrian is doing. I assumed (probably wrongly) an OS upgrade like CetnOS 5 to 6 or something
17:53
which gives you old server back
Though it would be better for you to use etckeeper, and then transfer the /etc/.git/ folder from the old server to new server, and then checkout the important bits from the old repo.
@MDMarra New Hardware install. Pulling an old SuperMicro and replacing with a x3550.
Custom kernel packages and whatnot too, so it's not likely to survive being rebooted either.
@Adrian blew up your terminal server?
@Adrian if you pay more than $12, i'm available lol
Ok, product recommendation time. 50 windows servers. 5 CentOS servers. ~100 Extreme networks switches. I need a centralized logging solution. Should I just use syslog and install the community logrotate thingy on the Windows boxes? Logs are probably going to be at the high end of the free splunk license and we've got no money to throw at this specific problem
17:55
@Adrian Custom kernel packages? ALLOFMYWHY.jpg
@BartSilverstrim One of the remote site's units. But the old one is still there and he is (or had better be) putting it back in now.
@Joel Ubuntu 9.10 and brand spanking new LSI Raid card in the IBM unit.
@MDMarra Splunk Universal Event Forwarder -> Splunk Free
@BartSilverstrim yes
@Zoredache It's UK secondary, years 7-13, so age 12-18
@David If you are willing to relocate, then you almost certainly can find a job somewhere.
This one is about as bad as the 3 or 4 screwups that had gotten his predecessor shoved out the door.
17:56
@Joel Ahh, my edit about splunk slightly beat your splunk suggestion :p
nah lol, im still in college @Zoredache
@BartSilverstrim Saying that, our wireless infrastructure is probably up to the job. 72-access-point Meru jobby - holds up well with the 600-ish laptops we have.
@MDMarra HAhaha, yes. In that case I'd do graylog2.org/ohai/0.9.6 as the log aggregator
Getting them on the wireless with 801.2x authentication though...that's another ball game
@tombull89 I'd hope so with < 10 per client. You've got plenty of room to grow there
17:57
@MDMarra if choosing between syslog implementations, take a look at rsyslog.
@Joel Does it have a nice shiny interface?
@MDMarra It's pretty shiny. I haven't put it into duty but it's on the to-do list
@Zoredache although we've got some evil little bastards that will wreck anything given to them and have to be kept an eye on 24/7. We've got a lot of glorified babysitt-sorry, teaching assistants.
I want in security anyways, eventually. Rather than sysadmin/grunt
I'm on an Opsview/Cacti kick at the moment, so I don't want to deal with an additional clunky interface :)
@David You're in the wrong chat, boy :)
17:59
@MDMarra logstash.net worth noting if only for the graphic
@tombull89 lucky you!
@ScottPack, come get this young fellow, would you?
@MDMarra the security chat is a deadzone
:(
@Joel A LOG WITH A MUSTACHE. I'm cancelling all upcoming meetings and installing this asap without even knowing anything else.
2
@David They're actually chatting about you behind your back, and their comms are so secure you can't even read them
18:00
@Joel whoa, mind blown
for the most part, I've got no qualms about my job. However, it's when we get things like "IPADS they are computers so you automatically know everything about everything ever" and when it's just two staff we just.can't.cope.
SECURITY IS ANOTHER WAY TO HASSLE OUR USERS... FOR REVENGE
@tombull89 "You know about computers, right? Can you fix this microwave?"
@Joel to which I reply, "Not enough keys. Don't know how to use it."
@Joel I fixed a lamp yesterday
18:02
@David How's that infosec career coming along
@Joel lamp is secure
posted on April 19, 2012 by Matt Simmons

So last night, Amazon issued a press release announcing the availability of the Amazon Marketplace: …an online store where customers can find, buy, and quickly deploy software that runs on AWS. You can select software from well-known vendors including CA, Canonical, Couchbase, Check Point, IBM, Microsoft, SUSE, RedHat, SAP, and Zend as well as many [...]

@David brb haxin ur lamp
@joel oh noooooooooo
im behind 7 firewalls cant touch dis
2
18:04
@BartSilverstrim Screwdrivers are typically made of something conductive :)
@Joel u fail noob, lights still on
@voretaq7 They have heavy plastic handles to offset that :-)
@BartSilverstrim flyback transformer says FOO to your puny plastic handle.
@voretaq7 LEATHER GLOVES
18:16
@MDMarra que?
@BartSilverstrim hard to turn the itty bitty sync screw (with the equally itty bitty screwdriver) wearing HV electrician's gloves.
This was also an old Sun trinitron CRT -- fucking 50lb deathtrap.
Just read a blog post. OP has a Raid 5 array of 22 146GB SAS drives for his VMWare store. Am I right in thinking this might be a really bad idea?
@Adrian !!!
@Adrian If he has a hot-spare that might not be entirely bad.
they are small enough that they probably aren't going to have the really high unrecoverable error rates.
@Zoredache yeah, it has exactly one.
18:20
0
Q: Backup for SQL & Server 2008 R2?

DavidWhat's the best/easiest backup solution for my use case? Windows Server 2008 R2 Has a finance program called The Financial Edge (Blackbaud) that uses SQL Server 2008 R2 to keep its database Stores user's files for them (i.e. it's also a file server) We want to be able to rotate 2 external disks...

Still, each write is going to involve at least 20 other reads though
@Zoredache thats not the issue with a 22 raid5 set.. disks tend to die together
@growse I was wondering about that, considering that I never really understood RAID5 when extended past the # of drives for one for each bit and the parity.
@pauska Yeah, but disks would equally die together with any RAID topology. lose the wrong two RAID10 drives and you are just as failed as if you lose a couple of your RAID5 drives.
@voretaq7 TOUGH NOOGIES. You don't hear astronauts complaining, do you? Well, it's hard when you turn off their radios as you push them out the airlock, but still...puffy gloves.
18:23
@Adrian RAID5 seems to be useful for long-term archive, where you need the space and you've got the data offline as well
everywhere else, there usually seems to be a better alternative
imo
RAID 5 IS EVIL.
STAY AWAY FROM IT.
@growse Yeah, which is part of why I'm trying to get us off Raid5 here. 7 250GB SATA drives in an industrial enclosure.
Astronauts got Boyd Bolts and specialized tools.

I get 3mm flathead screw potentiometers, buried up next to bare-wire transformer taps, an inch from ground.

How is this fair?!? :-(
@ScottPack @David wants to get into security
I told him you'd take him away to whatever cave you freaks hole yourselves up in these days
wait wut
18:25
Haha, just kidding
But seriously. Security guys are the worst, right @ScottPack?
Well, at least the paduan recognized that plugging the old server back in and making sure it all still works was the correct rollback response.
Wish I could get a padawan that can follow a basic script and test it out on the workbench before hauling it out to remote sites and calling me in a panic.
@BartSilverstrim why?
@voretaq7 simple. You need to become an ASTRONAUT!
@jollyroger URE's.
@growse This is what I was looking at: veerapen.blogspot.com/2011/09/…
stupid cut buffer & clipboard
I'm happy if I get one good question a day.
8
Q: Shell command slow when using pipe, fast with intermediate file

plangDoes anyone understand this huge difference in processing time, when using an intermediate file, or when using a pipe? I'm converting tiff to pdf using standard tools on a fresh debian squeeze server. A standard way of doing this is to convert to ps first. Without pipe: root@web5:~# time tiff2p...

18:30
/me has RAID5 on home server.
That one did it for me. I was working on a ghostscript issue at the time the guy posted.
@jollyroger just be careful with it.
@ewwhite i already +1'd you. Great research and thanks for pv!
Oh, pipeview. handy utility.
@jollyroger Not so sanguine about trying to stuff all the storage I/O for 110 users on one though. =/
Has anyone implemented some form of MapReduce ie Hadoop, et al?
18:33
Anyone gone and deployed Graphite in a mixed *nix / Windows environment?
@Joel sort of
There's another good utility i've found here is reptyr. Very usefull if you've forgotten to run something in screen session.
I work with someone that is using HBase.
@BartSilverstrim Please do go on
I just set up the server, he's the programmer playing with it.
18:35
@Zoredache raid6? :) atleast with that amount of disks
It's like what happens when Java become sentient.
@BartSilverstrim So can I ask you about job scheduling, prioritization schemes, etc?
@Joel Not what I was handling, but I could pass on questions.
See if the programmer doing it will have time to answer them.
@BartSilverstrim I think I've invented a new job prioritization scheme: Grocery Store Scheduling
Why do people do this? I have a widescreen monitor. Your webserver knows I'm not on a mobile device. Don't give me a pencil-wide column of text.
@Joel ctrl + mousewheel up widescreen.
18:43
@Joel because it says "hey, we're trendy and value what our content looks like over the actual quality of content"
Oh wait...
@jscott This is about 95% of my mousewheeling use during a given day
Same where.
@Joel Not sure I'd put much credence in a blog that only published 6 posts in 2 months over 3 years ago.
@Joel It is all those damned web designers that think things need to look pretty, and refuse to one of the key HTML design points that layouts should be fluid.
18:49
@Joel CSS is hard.
That one is oddly thin
I still rarely find blogs that are print-friendly.
But I do subscribe to the 960.gs layout... I don't use their pre-created materials, but my sites are 960px wide (60em actually), and the borders and columns are quite similar.
@BartSilverstrim CSS isn't hard. Creating a design that looks good at a wide variety of widths this nigh impossible.
@ChrisS But I'm pretty sure they don't make monitors with the aspect ratio of receipt tape either though.
4 mins ago, by Chris S
That one is oddly thin
18:53
fluid design is hard
ive attempted it in the past, but now I just use 960 as well
@ChrisS As obnoxious as my Ex-wife is about web design, I think she'd even agree that one sucks.
Extremely... I've done some minor work with it. It's just a time sink though, and most people will never notice the difference.
My current issue with CSS is mobile screens
@MDMarra Hey, my office may not have windows, but it's 10'x13' with light yellow walls.
Got a design of mine looking perfect on desktop, then I open it on iPhone and everything is all out of alignment!
18:57
It looks fairly good at 960 too. It's very short of course, but the layout looks fine.
@David So, yeah, security's a good gig. I have an on-call rotation, but the calls are rare and important enough that if I get a work call at 3am it's not because a backup failed, it's because something really spectacular happened.
@ScottPack how'd you get in the door?
It's a weird layout... They specific widths and absolute coordinates of a dozen different elements. Looks like something generated from a layout program.
@David Saw you in DMZ. What's on your mind?
@David Luck mostly. Whilst in grad school I TAed a class that a security analyst was taking. When they had a student position open he brought me in. Worked my way into full time employment.
18:59
@JeffFerland oh nothing, just bored @ work
New websites should have "mobile" layouts... I need to write one for my site still... On the TODO list.
@David A little bored today or office-spacing?
@JeffFerland Damn, it does feel good to be a gangsta.
@ScottPack I mean one like you don't even know.
@JeffFerland always bored!
19:00
@David Resume time!
Don't be like me... send out a ton at once instead of one at a time
@David You in the US and/or interested in working at higher ed?
I've been seeing a handful of postings come across a couple of lists that I'm on.
@JeffFerland i just started here in late Februry
@ScottPack Yes, no clue. still in school
Ordinarily I try to pimp our postings here, but we've not hired any staff in the Security Office for a couple of years.
@JeffFerland it's a good gig for me though. 15/hr a week, 3 days a week, while taking full-load at school
@ScottPack O_0 why would you encourage someone to work in IT for higher ed? Do you just hate people?
19:02
@BartSilverstrim Hey man, I really enjoy working in higher ed.
@ScottPack So...you hate yourself?
@David Ah. What year are you? Where are you studying?
@BartSilverstrim Meh, I find it to be a more relaxed lower stress environment.
Granted, lower pay too.
@JeffFerland I'm applying to transfer to CSU Sacramento from community college this fall
@ScottPack we should compare notes sometime.
19:06
@BartSilverstrim Hey, I said, "higher ed" not "k-12" You did that to youself!
@ScottPack LIS - compare notes!
I know some others in college-level...didn't seem all that different.
Except your students are self-selected and your faculty get pushier.
Like I Said.
:-)
Time to run away screaming. Will have a computer under my arm, so I can't wave the hands while screaming, though.
Ok, wait, apt.nexenta.org's gone
When did that happen?
:(
@BartSilverstrim Have fun with that. I'm going back to fiddling with nessus scanners and SIEM integration :)
19:24
I'm back :)
Anyone here using git/hg/cvs/whatever with their PowerShell stuff?
Just wondering if it makes sense to check in the .ps1 files before or after signing them.
Can we please kill this with fires of indignation? serverfault.com/questions/381281/…
@WesleyDavid I'm a state employee. I don't do indignation.
i voted with typical british disdain. Will that help?
@DJPon3 That sounds pretty reasonable
19:31
@DJPon3 Did you use the word poppycock or cheeky?
Or muppet. Muppet is good too.
I used all the above. I say! What Poppycock, you cheeky muppet.
@DJPon3 Pip pip and bother.
absolutely old chap
wotwot?
what have we started
19:35
Berky wazzok.
I'm trying to watch tv too at the moment... seriously, I wish they'd fuck off with the constant blathering on about the fucking olympics
@DJPon3 Every 2 years now too! I'm convinced the media did that just so they'd have something to talk about.
@jscott Why do you have a picture of a mannequin?
@DJPon3 Bunch of numptie plonkers.
19:36
indeed
@ScottPack Stop being such a pillock.
you need to work on your being properly british. One ought to be able to say more with the precise tone of your "Indeed" than with 100 "numptie plonker muppet" comments
Does anyone else know what this fucking cat is talking about?
@MDMarra He's allegedly speaking English.
@DJPon3 there is a good Horizon on atm
19:37
Never heard of it
Hey @Iain. What's it about
Materials
Who in their right mind would use so much D-Link in a business: http://serverfault.com/questions/381279/interconnected-switches-slow-throughput
Oh wait, I said "right" mind.
Carry on.
@WesleyDavid Quick question: Do you do any sort of logging on who (IP-based) accesses what (DNS name)?
@Joel Wanker!
Oh sorry... I mean, no I don't.
19:40
Let's say I want an email notification when someone access *.4chan.org
I just block 4chan at the firewall and get on with my day
2
Would that just be the DNS server giving me a heads-up via the DNS log + some event detector?
@DJPon3 I can't do that, how will I go on /g/?
@Joel But then you'd just be spamming yourself with "JOELSCOMPUTER - accessed: 4chan.org/b/"
@Joel Nope, I don't. If I wanted that much granularity, I'd probably call up Senior Baddass @ewwhite and have him price out a Barracuda for me.
@WesleyDavid You rang?
@WesleyDavid I can't spend money ;_;. I know ClearOS does something similar, but under the hood ClearOS is a burlap sack full of soggy dicks
way too slow to use as a true transparent proxy
@Joel ...you say this after I just designed a new network with ClearOS. :'(
@WesleyDavid HA HA HA HA. You will know my pain soon enough
@Joel If I call you 'fucker' you'll take that in a brotherly way, right?
@WesleyDavid But of course. "fucker" away
19:43
@Joel Fucker.
@WesleyDavid That sounds incestuous.
@84104 You know what else sounds incestuous?
@ScottPack's face!
@Joel Seriously, ClearOS looked nice. How do you use it?
I bet you keep it in a cage and don't feed it enough.
@WesleyDavid I put the son of a bitch on a RAID10 with 4 GB RAM and 2 vCPUs. Still slow as dog shit
@WesleyDavid If my parentage weren't so suspect I would totally attempt to dispute you.
2
@Joel How many people is it supporting?
19:48
@Joel are you sure multiple vCPUs was the correct choice? Adding multiple CPUs can make things worse.
@Zoredache I tried with one first, then with two. No real difference, no real resource utilization, for some reason the pre-baked apache and mysql is just slow to respond
@Joel Did you try adding pie flavor?
I want pie :(
pie within a pie within a pie
PIECEPTION
pie are squared
sam
sam
19:59
pie is wrong
15 more mins to go!
mmm pie

« first day (586 days earlier)      last day (4681 days later) »