MalloZup

dmaiocchi@linux-buft:~/bin/hawk>  docker run --ipc=host -v /tmp/.X11-unix:/tmp/.X11-unix -e DISPLAY=$DISPLAY hawk_test -H 10.162.30.219 -S 10.162.32.9 -s linux --xvfb -t 15-SP2
TEST: test_set_stonith_maintenance: Placing stonith-sbd in maintenance
INFO: stonith-sbd successfully placed in maintenance mode
INFO: Main page. Click on Logout
TEST: verify_stonith_in_maintenance
INFO: ssh command [crm status | grep stonith-sbd] got output [  * stonith-sbd	(stonith:external/sbd):	 Started hana01 (unmanaged)] and error []
INFO: stonith-sbd is unmanaged
TEST: test_disable_stonith_maintenance: Re-activating stonith-sbd
INFO: stonith-sbd successfully reactivated
INFO: Main page. Click on Logout

MalloZup

Comparative study between different golang framework

2021 March

This document take insiration by folowing sources:

• https://developer.squareup.com/blog/a-comparison-of-go-web-frameworks/
• https://www.reddit.com/r/golang/comments/dojyv2/gorillamux_or_gingonicgin/
• https://www.ribice.ba/golang-web-frameworks/
• https://www.reddit.com/r/golang/comments/8uljbf/chi_or_echo_which_framework_would_you_recommend/

MalloZup

Some bookmarks of talk I find interesting

Go

• security: https://fosdem.org/2021/schedule/event/goingdsecure/

• state of go1.15 https://fosdem.org/2021/schedule/event/stateofgo/

MalloZup

1) https://relay.sh/blog/command-line-ux-in-2020/

MalloZup

Disable TLS 1.0 and 1.1

ONLY SLE12 or LEAP12 systems

1. Edit file: vim /srv/www/hawk/config/puma.rb

  ssl_bind @listen, @port, cert: @cert, key: @key, verify_mode: 'none', no_tlsv1: true,  no_tlsv1_1: true

2. restart hawk with systemctl restart hawk

MalloZup

# Some material reference lecture around envoy:


- java technical: https://piotrminkowski.wordpress.com/2017/10/25/envoy-proxy-with-microservices/


- https://www.thoughtworks.com/insights/blog/building-service-mesh-envoy-0

- A bit dated: 
https://jvns.ca/blog/2018/10/27/envoy-basics/

MalloZup

Create A read-only user with ACL

1) the user is already created via AD and belong to haclient group

hana02:~ # crm configure
crm(live/hana02)configure# role monitor read xpath:"/cib"
crm(live/hana02)configure# acl_target hawk-aduser monitor # this will add user read-only
crm(live/hana02)configure# show
crm(live/hana02)configure# commit

MalloZup

topics we can offer:


# observability:

- monitoring: improve, refactoring and learn how to write code for Prometheus exporter from our existing SAP/HA exporters.
              * add with our partners useful alerts and visualisation on dashboards

- logging: with loki solution, integrate SAP/HA logs pipeline and create alerts, visualisation in grafana

MalloZup

zypper in texlive-urwchancal
Refreshing service 'Basesystem_Module_15_x86_64'.
Refreshing service 'Desktop_Applications_Module_15_x86_64'.
Refreshing service 'SAP_Applications_Module_15_x86_64'.
Refreshing service 'SUSE_Linux_Enterprise_High_Availability_Extension_15_x86_64'.
Refreshing service 'SUSE_Linux_Enterprise_Server_for_SAP_Applications_15_x86_64'.
Refreshing service 'Server_Applications_Module_15_x86_64'.
Loading repository data...
Reading installed packages...
Resolving package dependencies...

MalloZup

# Sample config for Prometheus.
global:
  scrape_interval: 5s
  scrape_timeout: 5s
  evaluation_interval: 5s

scrape_configs:

  - job_name: hana-cluster
    # The HANA scrapping follows a different scrapping time to reduce the execution load into the database