— IT happens.
find /var/log/ -name '*.gz' -exec rm {} +
Note: Concluding with ‘+’ rather than ‘\;’ should be faster by not running rm on every instance from find.
find /var/log/ -name '*.gz' -exec rm -i {} +
find /var/log/ -name '*.gz' -exec rm -r {} +
find /var/log/ -name '*log' -type f -exec truncate -s 0 {} +
find /path/to/dir -empty -type d -delete
After running updates, carbon-cache throws the folling error on a service restart.
systemctl status carbon-cache ● carbon-cache.service - Graphite Carbon Cache Loaded: loaded (/usr/lib/systemd/system/carbon-cache.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Mon 2017-03-06 11:04:37 PST; 6s ago Process: 31672 ExecStart=/usr/bin/carbon-cache --config=/etc/carbon/carbon.conf --pidfile=/var/run/carbon-cache.pid --logdir=/var/log/carbon/ start (code=exited, status=1/FAILURE) Main PID: 16619 (code=exited, status=0/SUCCESS) Mar 06 11:04:37 acme.com carbon-cache[31672]: from twisted.protocols.tls import TLSMemoryBIOFactory, TLSMemoryBIOProtocol Mar 06 11:04:37 acme.com carbon-cache[31672]: File "/usr/lib64/python2.7/site-packages/twisted/protocols/tls.py", line 63, in <module> Mar 06 11:04:37 acme.com carbon-cache[31672]: from twisted.internet._sslverify import _setAcceptableProtocols Mar 06 11:04:37 acme.com carbon-cache[31672]: File "/usr/lib64/python2.7/site-packages/twisted/internet/_sslverify.py", line 38, in <module> Mar 06 11:04:37 adme.com carbon-cache[31672]: TLSVersion.TLSv1_1: SSL.OP_NO_TLSv1_1, Mar 06 11:04:37 acme.com carbon-cache[31672]: AttributeError: 'module' object has no attribute 'OP_NO_TLSv1_1' Mar 06 11:04:37 acme.com systemd[1]: carbon-cache.service: control process exited, code=exited status=1 Mar 06 11:04:37 acme.com systemd[1]: Failed to start Graphite Carbon Cache. Mar 06 11:04:37 acme.com systemd[1]: Unit carbon-cache.service entered failed state. Mar 06 11:04:37 acme.com systemd[1]: carbon-cache.service failed.
This seems to relate to changes to TLS version support in pyOpenSSL/OpenSSL. I’m not using TLS for carbon-cache, I don’t think, so disabling the reference in Twisted framework’s respective file should be fine. Comment out the lines referenced in the above error, like so:
sed -i 's/TLSVersion.TLSv1_1: SSL.OP_NO_TLSv1_1,/#TLSVersion.TLSv1_1: SSL.OP_NO_TLSv1_1,/g' /usr/lib64/python2.7/site-packages/twisted/internet/_sslverify.py sed -i 's/TLSVersion.TLSv1_2: SSL.OP_NO_TLSv1_2,/#TLSVersion.TLSv1_2: SSL.OP_NO_TLSv1_2,/g' /usr/lib64/python2.7/site-packages/twisted/internet/_sslverify.py
yum install firewalld systemctl start firewalld.service systemctl enable firewalld.service
firewall-cmd --permanent --new-zone=pci-web firewall-cmd --reload firewall-cmd --permanent --zone=pci-web --add-service=https firewall-cmd --permanent --zone=pci-web --add-service=ntp firewall-cmd --zone=pci-web --permanent --change-interface=eno1 firewall-cmd --permanent --new-zone=lcl-mgt firewall-cmd --reload firewall-cmd --permanent --zone=lcl-mgt --add-rich-rule 'rule family="ipv4" source address="172.16.0.0/12" service name="ssh" log prefix="ssh" level="info" limit value="1/m" accept' firewall-cmd --permanent --zone=lcl-mgt --change-interface=eno2
firewall-cmd --state firewall-cmd --zone=pci-web --list-all firewall-cmd --zone=lcl-mgt --list-all firewall-cmd --get-active-zones
<Location "/ipa"> . . . # Header always append X-Frame-Options DENY # Header always append Content-Security-Policy "frame-ancestors 'none'" Header append X-Frame-Options ALLOWALL Header always set Content-Security-Policy: "frame-src 'self' *.SantaBarbaraDataSystems.com;" Header always set Content-Security-Policy: "frame-ancestores 'all';" </Location>
curl -s checkip.dyndns.org | sed -e 's/.*Current IP Address: //' -e 's/<.*$//'
yum install redis systemctl start redis systemctl enable redis
yum install rabbitmq-server systemctl start rabbitmq-server systemctl enable rabbitmq-server
rabbitmqctl add_vhost /sensu rabbitmqctl add_user sensu wh@t3v3r rabbitmqctl set_permissions -p /sensu sensu ".*" ".*" ".*"
rabbitmqctl list_exchanges -p /sensu
vim /etc/yum.repos.d/sensu.repo [+] [sensu]<br >name=sensu [+] baseurl=http://sensu.global.ssl.fastly.net/yum/$basearch/ [+] gpgcheck=0<br >enabled=1
yum install sensu systemctl start sensu-server systemctl start sensu-api systemctl start sensu-client systemctl enable sensu-server systemctl enable sensu-api systemctl enable sensu-client
yum install python-carbon pip install txAMQP
pip install graphite-api
wget https://www.python.org/ftp/python/3.6.0/Python-3.6.0.tgz tar xzvf Python-3.6.0.tgz cd Python-3.6.0 ./configure --prefix=/usr/local --enable-shared make make altinstall
In case of an error like this: “/usr/local/bin/python3.6: error while loading shared libraries: libpython3.6m.so.1.0: cannot open shared object file: No such file or directory“, do this:
vim /etc/ld.so.conf [+] /usr/local/lib ldconfig
/usr/local/bin/python3.6 -m venv /stuff/grafster/env36 source /stuff/grafster/env36/bin/activate pip install --upgrade pip
cd /stuff/downloads/mod_wsgi git pull ./configure --with-python=/stuff/wholebadgermilk/env36/bin/python make clean make make install
kill the host’s oldest session:
pkill -o -u YOURUSERNAME sshd
Limit the view, tag the result, delete ’em:
l: ~f nagios ~d >1y T ;: d d $
ps -ef | grep defunct | grep -v grep | cut -b8-20 | xargs kill -9