Category Archives: Uncategorized

This pdf introduces ansible. Installing Ad-Hoc commands Playbooks ansible_guide_v1

ansible_guide

loops_branches

#create and allow readonly to the role via the cluster management lif security login role create -role peterr -cmddirname DEFAULT -access readonly #allow access to svm_blue (all access) security login role create -role peterr -cmddirname “volume qtree” -query “-vserver svm_blue” … Continue reading →

exam_tips

intro

apt-get install software-properties-common apt-get update apt-get install ansible now change the hosts file in /etc/ansible make sure you have publickey login on the hosts e.g. run: ssh-copy-id root@host1 then check with ansible: ansible -m ping all some adhoc examples: list … Continue reading →

– hosts: linvms user: root vars: #password is ‘yourpass’ password: $1$xyz$X5pC0RUqKE5mOgXcDDgFk0 tasks: – user: name=peter password={{password}}

$ ansible atlanta -m copy -a “src=/etc/hosts dest=/tmp/hosts” $ ansible webservers -m file -a “dest=/srv/foo/a.txt mode=600” $ ansible webservers -m file -a “dest=/srv/foo/b.txt mode=600 owner=linuser group=linuser” $ ansible webservers -m file -a “dest=/path/to/c mode=755 owner=linuser group=linuser state=directory” $ ansible webservers … Continue reading →

$ cat p1.yml — – hosts: linvms vars: http_port: 80 max_clients: 200 remote_user: root tasks: – name: ensure apache is at the latest version yum: name: httpd state: latest – name: write the apache config file template: src: /etc/httpd/conf/httpd.conf dest: … Continue reading →

# cat ifcfg-ens224 TYPE=Ethernet BOOTPROTO=none NAME=ens224 UUID=60edd252-25eb-4396-baca-f7b09a3bec5e DEVICE=ens224 ONBOOT=yes # cat ifcfg-ens224.2 TYPE=Vlan BOOTPROTO=none NAME=ens224.2 UUID=60edd252-25eb-4396-baca-f7b09a3bec5e DEVICE=ens224.2 IPADDR=192.168.2.11 PREFIX=24 ONBOOT=yes VLAN=yes

rsa quick overview and example

Alice_Bob_Eve

diffie_hellman

CLUSTERED SIMULATE ONTAP LICENSES +++++++++++++++++++++++++++++++++ These are the licenses that you use with the clustered Data ONTAP version of Simulate ONTAP to enable Data ONTAP features. There are four groups of licenses in this file: – cluster base license – … Continue reading →

vsim_makedisks

Module4

This page contains some PDFs with linux network exercises. 1. ssh autologin 2. ip binding Centos 7 3. linux nfs 4. cron 5. systemctl

#!/bin/bash if [ $# -ne 5 ] then echo “usage: $0 <start_count> <end_count> <device_to_read_from><output_filename>” echo “example: $0 1 500 /dev/sda 4096 run1” exit fi skip=0 for i in `seq $1 $2` do dd if=$3 of=${5}.$i count=1 bs=$4 skip=$skip ((skip+=1)) done

splitfile

TIME_ex

firewalld_ex

def_exam_prep

del script #!/usr/bin/bash TRASH=/trash DB=/trash/db touch /trash/db mkdir ${TRASH} 2> /dev/null if (($# == 0)) then echo “usage: del ” fi FILE=`basename $1` DIR=`dirname $1` DIR=`echo $DIR|sed ‘s/\//_/g’` SUFFIX=`date +%Y_%m_%d_%H_%M_%S` FILE=${FILE}_${SUFFIX}_$DIR ID=`wc -l ${DB}|awk ‘{print $1}’` echo $ID ((ID+=1)) echo … Continue reading →

NFS_autofs

LVM_ex

NFS client and server

NFS client and server LVM ip binding systemd SElinux nfs autofs working in the shell firewalld date and ntp scripts splitfile Cron

CERT_GUIDE_EX2_PDF

exmil

CERT_GUIDE_EX_PDF

create a service file. cp /lib/systemd/system/crond.service \ /lib/systemd/system/sleep.service edit the service file. vi /lib/systemd/system/sleep.service [Unit] Description=sleep service [Service] ExecStart=/usr/sbin/sleep.sh KillMode=process [Install] WantedBy=multi-user.target create a script to be executed. vi /usr/sbin/sleep.sh #!/usr/bin/bash sleep 1000 make the script executable chmod +x /usr/sbin/sleep.sh … Continue reading →

Create the directory structure mkdir -p /var/www/html/www.vhost1.com mkdir -p /var/www/html/www.vhost2.com Create test web pages for each virtual host echo “vhost1” > /var/www/html/www.vhost1.com/index.html echo “vhost1” > /var/www/html/www.vhost1.com/index.html echo “vhost2” > /var/www/html/www.vhost2.com/index.html Set up ownership and permissions chown -R apache:apache /var/www/html/www.vhost1.com chown … Continue reading →

firewalld tutorial – is firewalld running? firewall-cmd –state – start firewalld systemctl start firewalld.service firewall-cmd –state – what is the default zone? firewall-cmd –get-default-zone – what zones are active on which interfaces? firewall-cmd –get-active-zones – what are the service settings … Continue reading →

To view compaction, dedupe and compression results. cl1::*> aggr show-efficiency -aggregate n2_aggr1 Name of the Aggregate: n2_aggr1 Node where Aggregate Resides: cl1-02 Logical Size Used by Volumes, Clones, Snapshot Copies in the Aggregate: 118.8MB Total Physical Used: 126.5MB Total Storage … Continue reading →

cl1::> snapmirror create -source-path svm1:vol1 -destination-path 192.168.4.244:/share/rfs/nfs -type xdp Operation succeeded: snapmirror create for the relationship with destination “192.168.4.244:/share/rfs/nfs”.

Download Ontap 9 Command-line by Example (amazon.com) Step 1 Step 2 Step 3

Download Ontap 9 Command-line by Example (amazon.com) 1. deploy altavault ova. 2. add vmdk for local storage 3. power on 4. login with ssh admin/password – set new password and configure networking 5. browser login – storage optimization service is critical … Continue reading →

edit: /lib/udev/rules/73-usb-net-by-mac.rules change: ACTION==”add”, SUBSYSTEM==”net”, SUBSYSTEMS==”usb”, NAME==””, \ ATTR{address}==”?[014589cd]:*”, \ TEST!=”/etc/udev/rules.d/80-net-setup-link.rules”, \ IMPORT{builtin}=”net_id”, NAME=”$env{ID_NET_NAME_MAC}” Change the NAME at the end as follows: into: ACTION==”add”, SUBSYSTEM==”net”, SUBSYSTEMS==”usb”, NAME==””, \ ATTR{address}==”?[014589cd]:*”, \ TEST!=”/etc/udev/rules.d/80-net-setup-link.rules”, \ IMPORT{builtin}=”net_id”, NAME=”eth0″

CVCSA

netapp snapmirror vault and svmdr in 10 steps

In this example you will setup SVMDR, with identity-preserve. Clusters cl1 and cl2 have already been peered. You will exclude a volume from replication and perform a DR action with resync in both directions. 1. Create the two SVMs drsource … Continue reading →

In this example you will setup an NFS SVM and snapvault the nfs export volume to a second SVM destination volume. You will setup an XDP snapmirror relationship. Then you will create file in the source volume and restore them … Continue reading →

Snapmirror DR in a SAN environment. In this example you will create two SVMs. The src_svm has a src_volume, the dest_svm will have a dest_volume of the type DP. The two SVMs will be peered. The cluster cl1 and cl2 … Continue reading →

  In this example we will create two SVMs. The source_svm has a source_volume, the dest_svm will have a dest_volume of the type DP. The two SVMs will be peered. The cluster cl1 and cl2 are already peered. We will … Continue reading →

Cluster names: cl1 and cl2 Vserver names:source and dest Volume names: lvol1 and dest Ip-addresses 192.168.4.222 and 192.168.4.223 cl1::> vserver create -vserver source -subtype default -rootvolume rv -aggregate n1_aggr1 -rootvolume-security-style unix cl1::> vol create -vserver source -volume lvol -aggregate n1_aggr2 … Continue reading →

Some performance commands: top client/file , network test-path , max-xfer , qos-policy cl1::> statistics top client show        cl1 : 5/15/2017 19:43:56 *Estimated Total IOPS Protocol   Node Vserver Client ———- ——– —— ——- ————- 34      … Continue reading →

This is an example LUN failover. Two peered clusters (not discussed) Two peered svms. Two volumes in a snapmirror relationship. This is about changing the LUN serial number so that the initiator does not have to do a rescan of … Continue reading →

Most (if not all) management on ONTAP can be done from the CLI or SystemManager. If you want to run some scripts of your own, there is a way to do that. If you are not familiar with UNIX/Linux, don’t … Continue reading →

On the VSC server edit the file \Program Files\Netapp\Virtual Storage Console\etc\scbr\scbr.properties Remove everything in the file save it and then restart the Netapp SnapManager for Virtual Infrastucture service.

Allow RDP sessions on AD for users. – Computer (right click -> properties) – Remote Settings – Allow connections from computers running any version of RDP -> Select Users -> Add User Start: secpol.msc -> Local Policies -> User Right … Continue reading →

– List share properties vserver cifs share properties add -vserver cifs -share-name data1 -share-properties showsnapshot attributecache continuously-available branchcache access-based-enumeration namespace-caching encrypt-data – Enable referrals vserver cifs options modify -vserver cifs -is-referral-enabled true – Limit maximum connections vserver cifs share modify … Continue reading →

In the following example we set up: 1. a flexgroup on cluster cl1 svm flex1 2. a destination volume on cluster cl2single svm flex-2 3. a snapmirror relation between source and destination volume 4. a reversed relationship Prereq: Clusters and … Continue reading →

To list the api calls you can use to manage/monitor ontap 9, you can either use a clustershell command (1) or you can run a query using Netapp SDK. (2) In the second case you will have to enable http … Continue reading →

In this post: We create a source svm and a destination svm of the type dp-destination (svmdr) The source svm maps a lun to a linux (centos) machine. The source svm is snapmirror to the destination svm. The relationship is … Continue reading →

statistics show-periodic -object disk:raid_group -instance /n1_aggr1/plex0/rg0 -counter disk_busy|user_read_latency -interval 1 -iterations 60 system node run -node cl911_1 wafl awa start n1_aggr1 system node run -node cl911_1 wafl awa print system node run -node cl911_1 wafl awa stop with flashpools system … Continue reading →

Docker service swarm web 4 nodes 6 containers PDF Docker service swarm web 4 nodes 6 containers PDF

In this example a vmware vmdk is used by a CentOS 7 VM. The original size of the vmdk is 1G, and is resized to 3G. After this resizing in ESXi, run the following in the CentOS VM. The name … Continue reading →

Naturally, Macs have quite some weight. When out of production, they can be re-used to hold down your raspberry pi.

raspberry_nfs_server_start Problem with raspberry pi (debian) and nfs-kernel-server. Systemd apparently starts the nfs-kernel-server before rpcbind has completed starting. Solution that works for me: The relevant nfs services are enable and started. 1. Make sure that nfs-kernel-server gets started at boottime. … Continue reading →

If a clusternode reports that the ROOT NOT WORKING PROPERLY: RECOVERY REQUIRED unsetenv bootarg.init.boot_recovery

Linux Performance Intro

docker.swarm_example

linux network namespaces

linux_cpu_shares

docker.network 1. List the docker network. # docker network ls NETWORK ID NAME DRIVER SCOPE 82f0e82e8a52 bridge bridge local 2f29f6c3dc07 host host local 0ee77fd0eaf6 none null local 2. List the bridge’s address. # ifconfig docker0 | grep “inet ” inet … Continue reading →

docker rm -f $(docker ps -a -q) docker rmi $(docker images -q)

selinux_examples

In the following example we create a volume in a container and share the volume with other containers. 1. Share a docker volume – create the volume in a container that you do not run docker create -v /webdata –name … Continue reading →

Create a file in the groups format used by yum Tell createrepo to include that group file in your repository. Step 1 You can either open a text editor and create the groups xml file manually or you can run … Continue reading →

strace is a systemcall tracer. It tells you what kernel functions are called as a result of your program. It monitors systemcalls and signals. strace -p strace (trace a systemcall) strace -e open (trace multiple systemcalls) strace -e trace=open,read ls … Continue reading →

#!/bin/bash # Delete all containers docker rm $(docker ps -a -q) # Delete all images docker rmi $(docker images -q)

Grow xfs rootfs The root volumegroup in this example is centos, the disk in the volumegroup is sda. We add a new disk, extend the group, extend the logical volume and grow the filesystem. add new disk. (in vmware: edit … Continue reading →

Information you can display with PS1 link: cyberciti \a : an ASCII bell character (07) \d : the date in “Weekday Month Date” format (e.g., “Tue May 26”) \D{format} : the format is passed to strftime(3) and the result is … Continue reading →

from: wiki Simple usage $PARAMETER ${PARAMETER} Indirection ${!PARAMETER} Case modification ${PARAMETER^} ${PARAMETER^^} ${PARAMETER,} ${PARAMETER,,} ${PARAMETER~} ${PARAMETER~~} Variable name expansion ${!PREFIX*} ${!PREFIX@} Substring removal (also for filename manipulation!) ${PARAMETER#PATTERN} ${PARAMETER##PATTERN} ${PARAMETER%PATTERN} ${PARAMETER%%PATTERN} Search and replace ${PARAMETER/PATTERN/STRING} ${PARAMETER//PATTERN/STRING} ${PARAMETER/PATTERN} ${PARAMETER//PATTERN} String length … Continue reading →

Example of RPM and YUM on CentOS 6. 1. Install the RPM build environment: lin60 # yum install -y rpm-build rpmdevtools 2. Create the directory for the RPM environment and the directory in which your program will be installed. lin60 … Continue reading →

Restoring the root volume of an SVM If the root volume of a Storage Virtual Machine (SVM) becomes unavailable, clients cannot mount the root of the namespace. In such cases, you must restore the root volume by promoting another volume … Continue reading →

substitute one column in a file: sed ‘s/[A-Z|0-9]*/REPLACED/1’ filename

In this example – the server 192.168.0.1 contains all packages in /export/rhel72/Packages – the /export directory is exported log in to vm_client 1. create a mountpoint: # mkdir /software create a repodir # mkdir /localrepo 2. mount the /export/ directory … Continue reading →

Ports and SELINUX example. We want our webserver to listen to a non default port. 1. Configure httpd to listen to a non default port – say 8999. After a default install of httpd port 80 is the port that … Continue reading →

cat stopaudit grep $1 /var/log/audit/audit.log | audit2allow -M $1 sed -i -e s/allow/dontaudit/ ${1}.te checkmodule -M -m -o $1.mod $1.te semodule_package -o $1.pp -m $1.mod semodule -i $1.pp ./stopaudit httpd

cat allow.sh grep $1 /var/log/audit/audit.log | audit2allow -M $1 checkmodule -M -m -o $1.mod $1.te semodule_package -o $1.pp -m $1.mod semodule -i $1.pp ./allow.sh httpd

systemctl # systemctl Start/stop or enable/disable services Activates a service immediately: # systemctl start foo.service Deactivates a service immediately: # systemctl stop foo.service Restarts a service: # systemctl restart foo.service Shows status of a service including whether it is running … Continue reading →

Subject (processes) and Objects (files) have a security context. (Process contexts are called domains, file contexts are called labels) Context type Apache uses a DocumentRoot that has “httpd_sys_content_t” as type. ls -Zd /var/www/html drwxr-xr-x. root root system_u:object_r:httpd_sys_content_t:s0 /var/www/html Apache’s httpd … Continue reading →

https://kb.netapp.com/support/s/article/faq-cpu-utilization-in-data-ontap-scheduling-and-monitoring?language=en_US

(Thanks to Sander, Kees, Maarten and other students in some class in the Netherlands) We want a user to be able to perform a particular task in an SVM. We can use RBAC to configure this. Example: We want to … Continue reading →

Set up , manage and delete an svmdr pair. Present: Two clusters – cluster1 and cluster2 snapmirror license on both clusters peering of the two clusters cluster1 will be the source cluster2 will be the destination. vserver src (source) and … Continue reading →

1. Create a new SVM (SVMcl1) on cluster1 and add a LIF to the SVM: 192.168.0.200 vserver create -vserver SVMcl1 -rootvolume root -aggregate aggr1_n1 -rootvolume-security-style unix net int create -vserver SVMcl1 -lif lif1 -address 192.168.0.200 -netmask 255.255.255.0 -role data \ … Continue reading →

1. Create a new SVM (SVMcl1) on cluster1 and add a LIF to the SVM: 192.168.0.200 2. Add a 500MB volume (cl1data) to the SVM with junction-path: /data 3. Add an export-policy with a rule for the CentOS VM: (192.168.0.10) … Continue reading →

Redhat Clustering

When setting up a cifs SVM. Prerequisite: the time difference between DNS/AD and the cluster is no more than 5 minutes. cl1::*> cifs create -vserver cifs_sales -cifs-server CIFS_SALES -domain netapp.local -ou CN=Computers -default-site “” -status-admin up In order to create … Continue reading →

(Elkin) ## clustermode domain-tunnel ## # To have the administrator of the AD domain login to the administration vserver and manage the cluster, create a domain-tunnel. # The name of the admin-vserver: security login create -user-or-group-name netapp\administrator -application ssh -authmethod … Continue reading →

Situation Simulator. Cluster: cl1 Node1 : cl1-01 Node2 : cl1-02 cl1::*> set d cl1::*> cluster show Node Health Eligibility Epsilon ——————– ——- ———— ———— cl1-01 true true true cl1-02 true true false 2 entries were displayed. Node1 (cl1-01) is ok … Continue reading →

Howo upload a CDOT config backup from filer to ftpserver. Requirements. Running FTP server in network. IP of ftpserver. Username of ftpuser. Password of ftpuser. Login to Clustermanagement lif. 1. ssh admin@192.168.4.100 Go to priv or diag mode. 2. set … Continue reading →

Single Node Cluster (sort of)

cdot networking 8.3

metrocluster heal -phase aggregates metrocluster heal -phase root-aggregates metrocluster switchback