This rarely happens, as it seems. I hope, at least.
However, once someone figures out that common PHP applications, which are currently mostly exploited for sending spam and distributing malware, can be abused in this crypto-ransom fashion, some "interesting" times will follow. Specially vulnerable deployments are those where the very same user that owns executable files is used for running that application too (I am looking at your defaults, cPanel), or, to a lesser extent, applications that permit executable code in some writeable directories.
I guess encrypting application code will not be THAT problematic, but encrypting database content is another matter altogether.
Hosting companies raising backup restore prices in 3, 2, 1...
Precisely the opposite of my experience (albeit on MB Air).
To summarize what is explained below with more details, when I bought MB Air and installed Ubuntu, I consented to: * some configuration tweaking in the beginning (wifi, brightness bug, etc) * occasional packet loss on Wifi (reboot resolves the issue) * some SATA controller errors in syslog * occasional problems with hibernation (if that happens, it succeeds if I reopen and close the lid again) * having to hold down alt key on every reboot to boot Ubuntu (I consider this a feature as it hides my OS)
Benefits: * quality hardware, * longer battery life (even surpassing OS X), * way more usable OS (personal opinion),
Longer explanation:
I was a Linux (Ubuntu mostly) user before and I did not own any MB before Air. General experience with laptops+linux was: it generally works well, except for exotic components and 3/4 of battery life compared to Windows.
I must note here that Ubuntu satisfies my computing requirements very well (sysadm work, Linux systems mostly) and having multiple workspaces and being able to quickly switch from one to another really aids mental context switch when I get the call about something unrelated to my current task.
So, when I got MBAir, I really tried (honestly, I really did) to use OS X as my primary OS. However after a couple of days of frustration (with the final nail in the OSX coffin being requirement to pay around 20$ to get workspaces in two rows!) I gave in and installed 14.04. I try to think of myself as NOT retarded for computing-related stuff, but if after a couple of days OS still feels weird (or better, if going from Ubuntu to MacOSX feels like step back), I do not believe "the most intuitive OS" any more.
Hardware wise, what surprised me was that battery life was even better than if I run OS X (15h vs 12h). Note that nothing cpu-intensive is done on this machine - it is generally a lightweight terminal to servers that do the heavy lifting.
I learned to live with glitches that come with running Ubuntu on this HW. If I had to do it all over again, I would do it all over again (except for those days of OS X frustration).
According to my server metric graphs the additional threads are only useful for WIO CPU states.
For example, on Intel 4core i7 920 processor, enabling hyperthreading impersonates additional four cores. But CPU utilization reported by metrics software shows that USR and SYS cpu times will only go up to 50% and WIO will add another 12%. This corresponds to having a virtual core used for waiting to IO stuff. Additional 3 virtual cores do not serve anything at all.
Why did I reply to the last one with "love" insead of "insect"? Well, after nine "insect" answers I thought I was going to be tagged as "not normal" if I only saw insects there, so I had to outweight the first nine answers:) I didn't take the test voluntarily, obviously.
I find LDAP more useful for storing data about "end-user" of our systems, like usernames, email accouts, quota data and such, and not that much useful for storing the actual server configurations. But there could be something to it...
Nope, a Slackware user, and on those servers I manage every software that interacts with external world (clients) is compiled from source as well as all the required libraries. But hey, I might be getting lazy just by not posting this from some Slackware shell telnet client, but from - you have guessed it - Ubuntu:)
Can't boot to same image, servers are collocated at different providers. For configuration management I find puppet working quite reliably and it does notify me about failed scripts/installations. And I prefer restarting only services, not whole servers, unless really necessary.
When I get to deploy a new server, the workflow I would like to achieve goes like this:
1. I input all the relevant data (MAC/IP/mounts/purpose/misc) into some sort of application, via browser (or API for larger installs)
2. This application then creates necessary config files for:
- PXE boot server (which does initial install of the bare OS with functional puppet),
- puppetmaster (which completes the installation and creates a fully functional server by compiling packages) or whatever configuration management SW,
- Nagios (or whatever monitoring software)
- Ganglia (or whatever performance metrics software)
3. I just power up the machine and all the work gets done automatically,
The sysadmin's job should not primarily consist of repeating items from step #2 mentioned above, and those unnecessary steps are what I am trying to avoid. I still have to create templates for all the above stuff, but that is the fun part anyway.
I am a sysadmin and all I would like is to spare some time by eliminating unnecessary typing/programming/scripting and rather spend it on evaluating, testing, heck, even thinking.
Eh, has Linux server administration really come into this?
Nope, it hasn't.
But I did ask the question in the first place to check if I was missing something. Scripting is fun, love it, but doing everything from scratch (althought I am fan of it, as it gives me the knowledge and total control) is a bit time-consuming.
So, if there is a simple software with nice web and API interface for this, and with the ability to create custom scripts which do the actual work, I would like to know about it.
Slashdot Mirror
"Once launched with administrator privileges..."
Well, there's your problem.
This rarely happens, as it seems. I hope, at least.
However, once someone figures out that common PHP applications, which are currently mostly exploited for sending spam and distributing malware, can be abused in this crypto-ransom fashion, some "interesting" times will follow. Specially vulnerable deployments are those where the very same user that owns executable files is used for running that application too (I am looking at your defaults, cPanel), or, to a lesser extent, applications that permit executable code in some writeable directories.
I guess encrypting application code will not be THAT problematic, but encrypting database content is another matter altogether.
Hosting companies raising backup restore prices in 3, 2, 1...
Precisely the opposite of my experience (albeit on MB Air).
To summarize what is explained below with more details, when I bought MB Air and installed Ubuntu, I consented to:
* some configuration tweaking in the beginning (wifi, brightness bug, etc)
* occasional packet loss on Wifi (reboot resolves the issue)
* some SATA controller errors in syslog
* occasional problems with hibernation (if that happens, it succeeds if I reopen and close the lid again)
* having to hold down alt key on every reboot to boot Ubuntu (I consider this a feature as it hides my OS)
Benefits:
* quality hardware,
* longer battery life (even surpassing OS X),
* way more usable OS (personal opinion),
Longer explanation:
I was a Linux (Ubuntu mostly) user before and I did not own any MB before Air. General experience with laptops+linux was: it generally works well, except for exotic components and 3/4 of battery life compared to Windows.
I must note here that Ubuntu satisfies my computing requirements very well (sysadm work, Linux systems mostly) and having multiple workspaces and being able to quickly switch from one to another really aids mental context switch when I get the call about something unrelated to my current task.
So, when I got MBAir, I really tried (honestly, I really did) to use OS X as my primary OS. However after a couple of days of frustration (with the final nail in the OSX coffin being requirement to pay around 20$ to get workspaces in two rows!) I gave in and installed 14.04. I try to think of myself as NOT retarded for computing-related stuff, but if after a couple of days OS still feels weird (or better, if going from Ubuntu to MacOSX feels like step back), I do not believe "the most intuitive OS" any more.
Hardware wise, what surprised me was that battery life was even better than if I run OS X (15h vs 12h). Note that nothing cpu-intensive is done on this machine - it is generally a lightweight terminal to servers that do the heavy lifting.
I learned to live with glitches that come with running Ubuntu on this HW. If I had to do it all over again, I would do it all over again (except for those days of OS X frustration).
My €2c.
b.
Route Nagios notifications to your phone and you will never describe your text message notification sound with an adjective "pleasant" :)
To self: RTFS!
I remember seeing this vid a while ago: http://www.youtube.com/watch?v=8UYa6gQC14o
According to my server metric graphs the additional threads are only useful for WIO CPU states.
For example, on Intel 4core i7 920 processor, enabling hyperthreading impersonates additional four cores. But CPU utilization reported by metrics software shows that USR and SYS cpu times will only go up to 50% and WIO will add another 12%. This corresponds to having a virtual core used for waiting to IO stuff. Additional 3 virtual cores do not serve anything at all.
Mine were:
"Insect, insect, insect, insect, insect, insect, insect, insect, insect, love."
Why did I reply to the last one with "love" insead of "insect"? Well, after nine "insect" answers I thought I was going to be tagged as "not normal" if I only saw insects there, so I had to outweight the first nine answers :)
I didn't take the test voluntarily, obviously.
Thanks for the info.
Looks promising! Tnx!
How can you steal a free software?
Anyway, what are the pros of Cfengine compared to Puppet, in your opinion?
I = if
Do you know I one can add a new host for monitoring to openNMS via some sort of API?
I find LDAP more useful for storing data about "end-user" of our systems, like usernames, email accouts, quota data and such, and not that much useful for storing the actual server configurations. But there could be something to it...
Do you log into the machine to emerge? Look at puppet for that...
Nope, a Slackware user, and on those servers I manage every software that interacts with external world (clients) is compiled from source as well as all the required libraries. But hey, I might be getting lazy just by not posting this from some Slackware shell telnet client, but from - you have guessed it - Ubuntu :)
"Brings them in configuration..."
For monitoring? Or for other things also, like configuration management?
And if the servers are of more heterogenic nature and/or distributed across multiple datacenters?
Can't boot to same image, servers are collocated at different providers. For configuration management I find puppet working quite reliably and it does notify me about failed scripts/installations. And I prefer restarting only services, not whole servers, unless really necessary. When I get to deploy a new server, the workflow I would like to achieve goes like this: 1. I input all the relevant data (MAC/IP/mounts/purpose/misc) into some sort of application, via browser (or API for larger installs) 2. This application then creates necessary config files for: - PXE boot server (which does initial install of the bare OS with functional puppet), - puppetmaster (which completes the installation and creates a fully functional server by compiling packages) or whatever configuration management SW, - Nagios (or whatever monitoring software) - Ganglia (or whatever performance metrics software) 3. I just power up the machine and all the work gets done automatically, The sysadmin's job should not primarily consist of repeating items from step #2 mentioned above, and those unnecessary steps are what I am trying to avoid. I still have to create templates for all the above stuff, but that is the fun part anyway.
Do you use server-push or client-pull method?
I am a sysadmin and all I would like is to spare some time by eliminating unnecessary typing/programming/scripting and rather spend it on evaluating, testing, heck, even thinking.
Eh, has Linux server administration really come into this?
Nope, it hasn't. But I did ask the question in the first place to check if I was missing something. Scripting is fun, love it, but doing everything from scratch (althought I am fan of it, as it gives me the knowledge and total control) is a bit time-consuming. So, if there is a simple software with nice web and API interface for this, and with the ability to create custom scripts which do the actual work, I would like to know about it.