lilongen

- gateway side
# echo 1 > /proc/sys/net/ipv4/ip_forward
# iptables -t nat -A POSTROUTING -s 172.17.128.0/24 -d 10.10.0.0/16 -o tun0 -j MASQUERADE
# iptables -A FORWARD -i eth0 -o tun0 -j ACCEPT
# iptables -A FORWARD -j ACCEPT

- client side
# ip route add 10.10.0.0/16 via 172.17.128.240

lilongen

Install tsung centos 7

yum -y install erlang perl perl-RRD-Simple.noarch perl-Log-Log4perl-RRDs.noarch gnuplot perl-Template-Toolkit
wget http://tsung.erlang-projects.org/dist/tsung-1.6.0.tar.gz
tar xfz tsung-1.6.0.tar.gz
cd tsung-1.6.0
./configure && make && make install

mkdir /root/.tsung

lilongen

* install ntp
yum install ntp

* edit /etc/ntp.conf
server 0.pool.ntp.org
server 1.pool.ntp.org
server 2.pool.ntp.org

* enable ntp service
centos 7

lilongen

# ls /sys/class/scsi_host/ | while read host ; do echo "- - -" > /sys/class/scsi_host/$host/scan ; done


from
http://wingloon.com/2013/05/07/how-to-detect-a-new-hard-disk-without-rebooting-vmware-linux-guest/

lilongen

Question:
. How to run Ansible without specifying the inventory but the host directly?
. Run a playbook or command with arbitrary host not in the inventory hosts list?
. run ansible with arbitrary host/ip without inventory?

Answer:
Surprisingly, the trick is to append a ,
The host parameter preceding the , can be either a hostname or an IPv4/v6 address.

ansible all -i example.com,

lilongen

- prepare work
a. make cm node can ssh to all nodes without password
   ssh-genkey, ssh-copy-id
b. hostname mapping
c. mysql server
d. postgresql
e. ntp
   systemctl disable chrony
   centos7 default enable chrony server, even enable ntpd, cuase chrony started, ntpd will not started
   this will cause CDH ntp error, so need to disable chrony.

lilongen

* install
# yum install postgresql-server postgresql-contrib
# postgresql-setup initdb

* allow passowrd authentication & remote access
# vi /var/lib/pgsql/data/pg_hba.conf
host    all             all             127.0.0.1/32            ident
host    all             all             ::1/128                 ident
->
host    all             all             127.0.0.1/32            md5

lilongen

####################################################
# Generic makefile - 万能Makefile
# for compiling and linking C++ projects on Linux 
# Author: George Foot  Modified:Jackie Lee
####################################################
### Customising
#
# Adjust the following if necessary; EXECUTABLE is the target
# executable's filename, and LIBS is a list of libraries to link in
# (e.g. alleg, stdcx, iostr, etc). You can override these on make's

lilongen

######################################
#
# Generic makefile
#
# by George Foot
# email: [email protected]
#
# Copyright (c) 1997 George Foot
# All rights reserved.
#

lilongen

#dump http response
tcpdump -s 0 -A 'src port 80 and tcp[((tcp[12:1]&0xf0)>>2):4]=0x48545450'
tcpdump -s 0 -A 'src port 80 and tcp[((tcp[12:1]&0xf0)>>2):4]='$(python -c "print '0x' + ''.join(hex(ord(i))[2:] for i in 'HTTP')")

#dump http post request, following two are equal, 0x504f5354 <-> POST
tcpdump -s 0 -A 'dst port 80 and tcp[((tcp[12:1]&0xf0)>>2):4]=0x504f5354'
tcpdump -s 0 -A 'dst port 80 and tcp[((tcp[12:1]&0xf0)>>2):4]='$(python -c "print '0x' + ''.join(hex(ord(i))[2:] for i in 'POST')")

#dump http get request
tcpdump -s 0 -A 'dst port 80 and tcp[((tcp[12:1]&0xf0)>>2):4]='$(python -c "print '0x' + ''.join(hex(ord(i))[2:] for i in 'GET ')")