The normal Debian mirrors do not carry the nginx package with the Google Pagespeed Module. These instructions will allow you to create your own package that includes Pagespeed. The nginx package is from wheezy-backports which has a newer copy of nginx than the normal wheezy repo, remove -backports from any commands you run if you […]
In the past two weeks or so I have seen a large amount of basic PHP uploaders that are being found on WordPress sites. The common theme in each of the hacks I have seen is that the admin password has either been reset or stolen. The admin password is used to access the theme […]
Over the last two days I have seen an increasing number of fake Wordress plugins which are actually not plugins but PHP scripts that attempt to join a botnet that is currently being used for DDoS attacks. So far the only common link I can see on all sites is that they are old vulnerable […]
I upgraded a Debian Squeeze server to Wheezy recently which was running iSCSI with a Windows 7 initiator. When I started writing to the iSCSI device it would drop out and the server would show an oops message on screen like this:
iscsi_trgt: BUG at /var/lib/dkms/iscsitarget/188.8.131.52/build/kernel/iscsi.c:392 assert(req->tio)
I hate getting this prompt:
root@home:~# ssh server.somehost.com
The authenticity of host 'server.somehost.com (184.108.40.206)' can't be established.
RSA key fingerprint is e6:fa:89:4d:c4:03:8e:09:1b:e5:b1:3c:ec:5f:8e:a3.
Are you sure you want to continue connecting (yes/no)?
If you see it often enough you probably ignore it – it then loses its purpose if you find yourself blindly typing yes. SSHFP records stop that happening. As I secure my DNS zone with DNSSEC already I think this is an acceptable way of verifying the host at […]
If you are running VMware ESX/vSphere with a Linux VM that is running out of disk space it is usually a trivial task. Assuming you have a simple partition layout like this:
/dev/sda1 - 128M - /boot
/dev/sda2 - 2G - swap
/dev/sda3 - 25G - /
If you want to grow the root partition follow these instructions. If you are growing a block device that has no partitions […]
I have been using StartSSL for free SSL certificates for a while. They are great for personal projects – they are trusted by every device I have tried so far and they are issued almost immediately. You can test if the certificate is trusted by accessing this post as https – click here. Note that […]
I have added an article to my wiki covering setup of Unbound as a cache name server. This includes DNSSEC support as well as IPv6 support. If it is a busy name server it may need to be tweaked for performance, see the performance section of my wiki above and the Unbound website.
I have been trying to figure out how to set up multiple IPv6 interfaces properly the “Debian” way but it seems like something is a bit broken now. Lets say I have two interfaces: eth0 and eth1. eth0 is on vlan 100 and eth1 on vlan 200. I would expect this to work in /etc/network/interfaces:
After upgrading some load balancers to Debian Wheezy I noticed this error (happens when dpkg-reconfigure ipvsadm) is ran:
lb1:~# dpkg-reconfigure ipvsadm
debconf: Unknown template field '__choices', in stanza #1 of /var/lib/dpkg/info/ipvsadm.templates
debconf: Unknown template field '_description', in stanza #1 of /var/lib/dpkg/info/ipvsadm.templates
debconf: Unknown template field '_description', in stanza #2 of /var/lib/dpkg/info/ipvsadm.templates
debconf: Unknown template field '_description', in stanza #3 of /var/lib/dpkg/info/ipvsadm.templates
debconf: Unknown template field '_description', in stanza #4 of /var/lib/dpkg/info/ipvsadm.templates
If you encounter this error you can run this sed command to fix up the template: sed -i -r ‘s/^_+//’ /var/lib/dpkg/info/ipvsadm.templates