Jekyll2026-08-08T10:02:14+00:00/feed.xmlyellowfruitTomasz BanaszewskiHow to back up esxi virtual machine using vertical backup2017-09-24T12:33:00+00:002017-09-24T12:33:00+00:00/ldap/2017/09/24/how-to-back-up-esxi-virtual-machine-using-vertical-backupInstall vertical backup on esxi host: 
# mkdir /vmfs/volumes/datastore1/verticalbackup
# cd /vmfs/volumes/datastore1/verticalbackup 
# wget http://verticalbackup.com/esxi/vertical
# chmod u+x vertical
# sha256sum vertical # 7eef0446e503cd011d50d12d49378db692b1b3dc13ba5da83c5a31602a8654e3

Initialize vertical backup:

# vertical init esxi-id /vmfs/volumes/backup

Backup vm:

# vertical backup vm-ubuntu
# vertical backup vm-ubuntu --exclude-disk *storage_1*
]]>Tomasz BanaszewskiHow to set up ldap authorization on centos2017-09-23T18:56:00+00:002017-09-23T18:56:00+00:00/ldap/2017/09/23/how-to-set-up-ldap-authorization-on-centostodo: https://www.lisenet.com/2016/setup-ldap-authentication-on-centos-7/

]]>Tomasz BanaszewskiHow to set up ldap authorization on ubuntu2017-09-23T14:48:00+00:002017-09-23T14:48:00+00:00/ldap/2017/09/23/how-to-set-up-ldap-authorization-on-ubuntuInstall OpenLDAP client: 
# apt-get install ldap-auth-client nscd

Configuration:

LDAP server Uniform Resource Identifier: ldap://ldap.yellowfruit.lan
Distinguished name of the search base: dc=yellowfruit,dc=lan
LDAP version: 3
Make local root Database admin: <No>
Does the LDAP database require login? <No>

Force start_tls:

Uncomment line in /etc/ldap.conf file:

# OpenLDAP SSL mechanism
# start_tls mechanism uses the normal LDAP port, LDAPS typically 636
ssl start_tls
#ssl on

Setup nss using auth-client-config with ldap:

# auth-client-config -t nss -p lac_ldap

Enable automatic home directory creation on login:

# pam-auth-update

(ubuntu 14 and older) Create config file to create home directory on login:

Create directory:

# nano /usr/share/pam-configs/mkhomedir

Name: Create home directory on login
Default: yes
Priority: 0
Session-Type: Additional
Session-Interactive-Only: yes
Session:
required                        pam_mkhomedir.so umask=0022 skel=/etc/skel

Enable Create home directory on login...:

# pam-auth-update

Restart nscd:

# service nscd restart

Verify:

# getent passwd

Source: linoxide

]]>Tomasz BanaszewskiHow to create self signed root CA certificate2017-09-16T21:26:00+00:002017-09-16T21:26:00+00:00/ssl/certificate/2017/09/16/how-to-create-self-signed-root-ca-certificateGenerate private key: 
$ openssl genrsa -out rootCA.key 2048

Generate root CA certificate:

$ openssl req -x509 -new -nodes -key rootCA.key -sha256 -days 1024 -out rootCA.pem

Create extension configuration file

Certificate must have subjectAltNames field.

$ nano v3.ext

authorityKeyIdentifier=keyid,issuer
basicConstraints=CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
subjectAltName = @alt_names

[alt_names]
DNS.1 = yellowfruit.lan

Generate private key:

$ openssl genrsa -out device.key.pem 2048

Create CSR:

$ openssl req -new -key device.key.pem -out device.csr

Generate certificate signed with root CA:

$ openssl x509 -req -in device.csr -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -out device.crt.pem -days 3650 -sha256 -extfile v3.ext
]]>Tomasz BanaszewskiIssue with permissions while installing gems on Ubuntu 16.042017-09-16T17:48:00+00:002017-09-16T17:48:00+00:00/jekyll/issue/2017/09/16/issue-with-permissions-while-installing-gems-on-ubuntu-16Issue:

I followed jakyll installation tutorial starting from ruby installation on Ubuntu 16.04:

# apt install ruby

But after that it’s not possible to istall gems without root permissions:

$ gem install jekyll
ERROR:  While executing gem ... (Gem::FilePermissionError)
    You don't have write permissions for the /var/lib/gems/2.3.0 directory.

Solution:

Remove ruby with the package manager:

# apt-get remove ruby

Install required dependencies:

# apt-get update
# apt-get install git-core curl zlib1g-dev build-essential libssl-dev libreadline-dev libyaml-dev libsqlite3-dev sqlite3 libxml2-dev libxslt1-dev libcurl4-openssl-dev python-software-properties libffi-dev

Install rbenv:

$ git clone https://github.com/rbenv/rbenv.git ~/.rbenv
$ echo 'export PATH="$HOME/.rbenv/bin:$PATH"' >> ~/.bashrc
$ echo 'eval "$(rbenv init -)"' >> ~/.bashrc
$ exec $SHELL

Install ruby-build plugin for rbenv:

$ git clone https://github.com/rbenv/ruby-build.git ~/.rbenv/plugins/ruby-build
$ echo 'export PATH="$HOME/.rbenv/plugins/ruby-build/bin:$PATH"' >> ~/.bashrc
$ exec $SHELL

Install latest ruby and set it as default:

$ rbenv install 2.4.2
$ rbenv global 2.4.2

Verify installation:

$ ruby -v
ruby 2.4.2p198 (2017-09-14 revision 59899) [x86_64-linux]

Install jakyll with non-root permissions:

$ gem install jekyll
]]>Tomasz Banaszewski