To be honest, this is the steps that really made me understood the steps and procedure and the concept behind the 10_Recommended patch for solaris kernel.

So, here it is:

Check Boot Disk

This step is to check which disks are the member of the boot mirror. We can say that this is the check disk mirror / disk membership step


# df -h /
Filesystem size used avail capacity Mounted on
/dev/md/dsk/d0 33G 7.3G 25G 23% /
#
# metastat -c d0
d0 m 33GB d10 d20
d10 s 33GB c1t0d0s0
d20 s 33GB c1t1d0s0

As you can see, there are two disk that comprise the boot mirror (d0), 33GB c1t0d0s0 and c1t1d0s0, which is named d10 and d20 respectively

Check which disk is booting up

In this step, we will determine which of the disk are the one being use as the boot default boot disk.

Usually it’s the default ‘disk’ or ‘disk0′, but there are times, very rare, that ‘disk1′ is set as the default boot disk.

To know which disk is the one that boot up the system, you can use the eeprom command in the system shell:


# eeprom boot-device
boot-device=disk0


In this case, it’s the most common disk that is used as the boot disk – disk0. That means, when can detach the other disk as backup just in case the patching screw up.

Check The Bootability of the Backup Disk

Prior to patching, check if the other disk is booting. This is a precaution. Just in case the patching went sour, we know that we can always revert to a good disk, revert to the previous good booting condition of the server.

Since from the previous step, we know that the default boot disk is ‘disk0′, we will switch to ‘disk1′ and try to reboot the server and see if it will come up.

Now, there are two ways to set the value of the ‘boot-device’ paramter of the server. You can either set it at the system shell, or through the Boot PROM, depending on where you are at the moment.

Now, set the default boot disk to ‘disk1′

eeprom boot-device=disk1

or

set boot-device=disk1

After setting it up, reboot the server:

init 0 then boot

or

init 6

If you’re successfull, you just booted on the ‘other half’ of the bootdisk.

Now, don’t forget to switch back to disk0 !!!

Next, (optional… can differ from company to company)

# untar the patch file
cd /var/tmp
rm -rf PatchDir
mkdir PatchDir
mv S10KernelUpdate4.0.tar.gz PatchDir
cd PatchDir
gunzip -c S10KernelUpdate4.0.tar.gz|tar xf -

Splitting the Mirror

The next steps are the meat of the procedure. This is the patching of the kernel itself.. But of course, after checking the boot disk – whether the both disks are good- it’s time to break the mirror and patch one disk.

sync;metadeatch

detach the backup disk

metadetach d0 d20

# mount the detached root file system to root and modify these

mount /dev/dsk/c1t1d0s0 /mnt

vi /mnt/etc/vfstab
vi /mnt/etc/system

Modifying vsfstab and /etc/system of the detached disk will make sure that if the patching fail, we can alyas boot up to the backup disk.

Start Patching

# go to single user mode
sync;sync;init 0

init -s

Rebooting with command: boot -s
Boot device: /pci@8,600000/SUNW,qlc@4/fp@0,0/disk@0,0 File and args: -s
SunOS Release 5.10 Version Generic_141414-02 64-bit
Copyright 1983-2009 Sun Microsystems, Inc. All rights reserved.
Use is subject to license terms.

… You then follow the ReadMe document that comes with the Patch here.

Once the patching is done, you’ll see the difference of the patch level of the kernel.

Boot device: disk0 File and args:
SunOS Release 5.10 Version Generic_142900-02 64-bit
Copyright 1983-2009 Sun Microsystems, Inc. All rights reserved.
Use is subject to license terms.

Optional
=——————–
For more installation messages refer to the installation logfile:
/var/sadm/install_data/PMGT:_TLP-Set_Solaris_10_SOE_S10KernelUpdate4.1_A1_04_27_10

Use ‘/usr/bin/showrev -p’ or ‘/usr/sbin/patchadd -p’ to verify
installed patch-ids.
Refer to individual patch README files for more patch detail.
Rebooting the system is usually necessary after installation.
svc.startd: The system is coming down. Please wait.
svc.startd: 20 system services are now being stopped.

!!! Please read the logfile for any required action before rebooting !
————–

reboot:! for the bank, it’s automatic

If all is good, you can reattach the other disk

metattach d0 d20

And you’re done.

Special shell variables
There are some variables which are set internally by the shell and which are available to the user:

Name Description
——————————————————————————–
$1 – $9 these variables are the positional parameters.

$0 the name of the command currently being executed.

$# the number of positional arguments given to this
invocation of the shell.

$? the exit status of the last command executed is
given as a decimal string. When a command
completes successfully, it returns the exit status
of 0 (zero), otherwise it returns a non-zero exit
status.

$$ the process number of this shell – useful for
including in filenames, to make them unique.

$! the process id of the last command run in
the background.

$- the current options supplied to this invocation
of the shell.

$* a string containing all the arguments to the
shell, starting at $1.

$@ same as above, except when quoted.

Branching
if then fi
if [[ $value -eq 7 ]];then
print "$value is 7"
fi
or:

if [[ $value -eq 7 ]]
then
print "$value is 7"
fior:

if [[ $value -eq 7 ]];then print "$value is 7";fi

if then else fi
if [[ $name = "John" ]];then
print "Your welcome, ${name}."
else
print "Good bye, ${name}!"
fi

if then elif then else fi
if [[ $name = "John" ]];then
print "Your welcome, ${name}."
elif [[ $name = "Hanna" ]];then
print "Hello, ${name}, who are you?"
else
print "Good bye, ${name}!"
fi

case esac
case $var in
john|fred) print $invitation;;
martin) print $declination;;
*) print "Wrong name...";;
esac

——————————————————————————–

Looping Command Syntax for Scripts

while do done
while [[ $count -gt 0 ]];do
print "\$count is $count"
(( count -= 1 ))
done
until do done
until [[ $answer = "yes" ]];do
print -n "Please enter \"yes\": "
read answer
print ""
done
for var in list do done
for foo in $(ls);do
if [[ -d $foo ]];then
print "$foo is a directory"
else
print "$foo is not a directory"
fi
done
continue…break
One can skip the rest of a loop and directly go to the next iteration with: “continue”.

while read line
do
if [[ $line = *.gz ]];then
continue
else
print $line
fi
done
One can also prematurely leave a loop with: “break”.

while read line;do
if [[ $line = *!(.c) ]];then
break
else
print $line
fi
done

http://www.well.ox.ac.uk/~johnb/comp/unix/ksh.html

Removing accounts from predefine list:

#!/bin/ksh

done

Or course, the sleep there is just for aesthetic.. I want to see the screen

getfacl is a file utility for viewing the access control list information associated with a file or directory.

For a memory aid, you can think of ‘getfacl’ as “Get File ACL“.. ACL being Access Control List.

Access control lists are extended attributes added to most major file systems in the 2.6 kernel to improve ability to control the access of files. They allow permissions to be set for individual groups and users and not just the owning user, owning group, and all other users.

setfacl is a command that allows you to set the Access Control List information for a file or directory.

Access control lists are extended attributes added to most major file systems in the 2.6 kernel to improve ability to control the access of files. They allow permissions to be set for individual groups and users and not just the owning user, owning group, and all other users.

You can read man pages for both getfacl and setfacl for more information.

getfacl and setfacl example….

Here’s an example of using the basic funtion of getfacl and setfacl

# getfacl

#setfacl

setfacl -m default:user::rwx,default:group::r-x,default:other:r-x,default:mask:rwx /u06/OneSource/datapump_dbdump

setfacl -m default:user:rcodapp1:r-x,default:group:r-x,default:other:—,default:mas:rwx /u06/OneSouce/datapump_dbdump

I check grep’d my account the walah! It was there! I reset the password, open an ssh terminal and tried to login. unsuccessful, that’s why i knew then that it is locked.

Here’s how to unlock a locked user account in HP UX in command line.

In HP-UX 11.xx if user account is locked, you can unlock the account by running SAM. But running SAM takes some time usually 2-3 minutes on heavily loaded HP-UX servers. You can unlock the locked user account from command line by running following command:

1. Login as root or use sudo from your account, if there is no sudo installed just use su – root :

$sudo su – *******

2. Run this command to unlock the locked HP-UX user account:

#/usr/lbin/modprpw –l –k johnm

Running modprpw will unlock the locked user account in HP-UX from command line.without running SAM

NOTE: modprpw is HP-UX command only and wouldn’t work in Solaris,AIX and any Linux servers

That info was ‘borrowed’ from here…. thanks!

“->” = ILOM
“sc>” = ALOM

.. and since this particular server has the “->” prompt we’re using the ILOM.

From ILOM to Solaris:
-> start /SP/console

From ALOM to Solaris:
sc> console

And of course.. Enter “#.” to return to ALOM / ILOM !!

Send Break on ILOM

set /HOST send_break_action=break
and then
start /SP/console

c)ontinue, s)ync, r)eset? s

bada bing! bada boom!

This post will be the first of series of post in configuring ZFS on a test machine, a Sun-Fire-V240 running Solaris 10.

# uname -a
SunOS sedm3205 5.10 Generic_137111-04 sun4u sparc SUNW,Sun-Fire-V240

Anyhow, first topic will be how to create/build, test, destroy and recreate a mirrored ZFS disk (or file based). Most of the ZFS commands we’ll be using are:

• zpool
• zcreate

That’s it!

Creating the ZFS Mirror

We’ll create two kinds of mirrored partition, one is file based and the other was is physical 175GB disk.

Here’s for the file based… first create two 150M files:

# mkfile 150m /home/elizar/disk1 ; mkfile 150m /home/elizar/disk2

Once that’s done, go ahead and create the Mirrored volume:

# zpool create file-mirror mirror /home/elizar/disk1 /home/elizar/disk2

After that command you’ll now have a new mirrored disk/partition mounted on the root called file-mirror

# zpool status file-mirror
pool: file-mirror
state: ONLINE
scrub: resilver completed with 0 errors on Tue Sep 16 17:04:13 2008
config:

NAME                                    STATE     READ WRITE CKSUM
file-mirror                             ONLINE       0     0     0
mirror                                ONLINE       0     0     0
/export/home/x120008/zfs-lab/disk2  ONLINE       0     0     0
/export/home/x120008/zfs-lab/disk1  ONLINE       0     0     0

errors: No known data errors
We’ll try and break the mirror the next time!

http://flux.org.uk/howto/solaris/zfs_tutorial_01

This week’s topic… building the server through Jumpstarting (yeah, solaris sparc servers).

Watch-Net and Watch-Net-All Diagnostics

The watch-net and watch-net-all diagnostics monitor Ethernet packets on the Ethernet interfaces connected to the system. Good packets received by the system are indicated by a period (.). Errors such as the framing error and the cyclic redundancy check (CRC) error are indicated with an “X” and an associated error description. The watch-net diagnostic is initialized by typing the watch-net command at the ok prompt and the watch-net-all diagnostic is initialized by typing the watch-net-all command at the ok prompt. The following code example identifies the watch-net diagnostic output message. Example 4-3 identifies the watch-net-all diagnostic output message.

ok watch-net
Hme register test --- succeeded.
Internal loopback test -- succeeded.
Transceiver check  -- Using Onboard Transceiver - Link Up.
passed
Using Onboard Transceiver - Link Up.
Looking for Ethernet Packets.
'.' is a Good Packet.  'X' is
a Bad Packet.
Type any key to stop.
..................................................
................................................................
................................................................
........................................................

ok watch-net-all
/pci@1f,0/pci@1,1/network@1,1
Hme register test --- succeeded.
Internal loopback test -- succeeded.
Transceiver check  -- Using Onboard Transceiver - Link Up.
passed
Using Onboard Transceiver - Link Up.
Looking for Ethernet Packets.
'.' is a Good Packet.  'X' is
a Bad Packet.
Type any key to stop.
........
................................................................
................................................................
................................................................
....................................
ok
ok

Apache is the most well known open source web server there is! Open source?? Make that the most wildly used webserver on the internet, period!

It is believed (and i know they made a survey or study about it) that Apache takes 90% of all web servers in the internet. Most web hosting company, and I’ve once worked in one, use Apache.

This post will talk about how to setup Apache for Virtual Hosting

Setting Up A Virtual Host in Apache

create a completely seperate document root, cgi-bin directory, and logfile directory for each host. You can place these beneath the standard Debian prefix of /var/www or you may use a completely different root

root@irony:~# mkdir /home/www

root@irony:~# mkdir /home/www/www.example.com
root@irony:~# mkdir /home/www/www.example.com/htdocs
root@irony:~# mkdir /home/www/www.example.com/cgi-bin
root@irony:~# mkdir /home/www/www.example.com/logs

root@irony:~# mkdir /home/www/www.example.net
root@irony:~# mkdir /home/www/www.example.net/htdocs
root@irony:~# mkdir /home/www/www.example.net/logs
root@irony:~# mkdir /home/www/www.example.net/cgi-bin

root@irony:~# mkdir /home/www/www.example.org
root@irony:~# mkdir /home/www/www.example.org/htdocs
root@irony:~# mkdir /home/www/www.example.org/logs

root@irony:~# mkdir /home/www/www.example.org/cgi-bin

NEt
Here we’ve setup three different directory trees, one for each site. If you wanted to have identical content it might make sense to only create one, and then use symbolic links instead.

The next thing to do is to enable virtual hosts in your Apache configuration. The simplest way to do this is to create a file called /etc/apache2/conf.d/virtual.conf and include the following content in it:

#
#  We're running multiple virtual hosts.
#
Nameserver *

NameVirtualHost *

(When Apache starts up it reads the contents of all files included in /etc/apache2/conf.d, and files you create here won’t get trashed on package upgrades.)

Once we’ve done this we can create the individual host configuration files. The Apache2 setup you’ll find on Debian GNU/Linux includes two directories for locating your site configuration files:

/etc/apache2/sites-available

This contains configuration files for sites which are available but not necessarily enabled.
/etc/apache2/sites-enabled

This directory contains site files which are enabled.

As with the conf.d directory each configuration file in the sites-enabled directory is loaded when the server starts – whilst the files in sites-available are completely ignored.

You are expected to create your host configuration files in /etc/apache2/sites-available, then create a symbolic link to those files in the sites-enabled directory – this will cause them to be actually loaded/read.

Rather than actually messing around with symbolic links the Debian package includes two utility commands a2ensite and a2dissite which will do the necessary work for you as we will demonstrate shortly.

Lets start with a real example. Create /etc/apache2/sites-available/www.example.com with the following contents:

#
#  Example.com (/etc/apache2/sites-available/www.example.com)
#
<VirtualHost *>
ServerAdmin webmaster@example.com
ServerName  www.example.com
ServerAlias example.com

# Indexes + Directory Root.
DirectoryIndex index.html
DocumentRoot /home/www/www.example.com/htdocs/

# CGI Directory
ScriptAlias /cgi-bin/ /home/www/www.example.com/cgi-bin/
<Location /cgi-bin>
Options +ExecCGI
</Location>

# Logfiles
ErrorLog  /home/www/www.example.com/logs/error.log
CustomLog /home/www/www.example.com/logs/access.log combined

</VirtualHost>

ow we’ve got:

• Three directories which can be used to contain our content.
• Three directories which can be used to contain our logfiles.
• Three directories which can be used to contain our dynamic CGI scripts.
• Three configuration files which are being ignored by Apache.

To enable the sites simply run:

root@irony:~# a2ensite www.example.com
Site www.example.com installed; run /etc/init.d/apache2 reload to enable.

root@irony:~# a2ensite www.example.net
Site www.example.net installed; run /etc/init.d/apache2 reload to enable.

root@irony:~# a2ensite www.example.org
Site www.example.org installed; run /etc/init.d/apache2 reload to enable.

This will now create the symbolic links so that /etc/apache2/sites-enabled/www.example.org, etc, now exist and will be read.

Once we’ve finished our setup we can restart, or reload, the webserver as the output above instructed us to do with:

root@irony:~# /etc/init.d/apache2 reload
Reloading web server config...done.
root@irony:~#

Anyway, you’re probably Googling about Arlo Gilbert as you read this post. Well, let me save you a few minutes and introduce you to Mr. Gilbert in one fast minute.

He is the following:

• The Man is from Austin, Texas
• Arlo Gilbert is a high school drop out… and a proud one (don’t do that boys and girls)
• A family man! So there’s a Mrs. Gilbert and two little Arlo Gilberts (daughters)

The reason why we feature this brilliant man is that he has successfully launched online startups and been doing it for 10 years now. Remember, high school dropout and no training in marketing or any business related studies… Brilliant indeed.

What caught my attention while reading his ‘About’ page was his current project – the iCall. It’s a VOIP startup company. I was wondering if iCall was developed by Arlo Gilbert or if it uses Asterisk?

.

.

.

Tekken Philippines

vi is the one, if not the most popular text editor available for a System Administrator on a UNIX and UNIX-like machines.

It has two modes, command and editor mode.

Here are some syntax in using the Search and Replace in ‘vi’.

Search:

The most basic and most easily remembered command for searching is vi is slash or ‘/’ followed by the character being searched. That’s for forward searching. For backward, vi use ‘?’ followed by the string being searched.

To go to the next occurrance of the string being searched, vi use ‘n’ command. Doesn’t matter if your searching forward (from up, down) or backward, from down to top.

Example:

(you have to be in command mode… press ESC first)

/search_string

?search_string

Search and Replace

For search and replace, use the syntax

:%s/original/replaced/g

Make sense?
Any command that begins with a “:” is called a line mode command and performs its duty on the line the cursor is currently on.

The above syntax serves my purpose now… If I want to replace text in certain ranges.. syntax can be found here