Tales from the shell.

[root@dhcppc0 ~]# cat CVE-2019-8912.patch --- src/crypto/af_alg.c 2018-12-19 10:14:13.000000000 -0500 +++ af_alg.c 2019-02-19 13:19:32.779007417 -0500 @@ -121,8 +121,10 @@ int af_alg_release(struct socket *sock) { - if (sock->sk) + if (sock->sk) { sock_put(sock->sk); + sock->sk = NULL; + } return 0; } EXPORT_SYMBOL_GPL(af_alg_release); [root@dhcppc0 ~]# ~/kpatch/kpatch-build/kpatch-build -t vmlinux CVE-2019-8912.patch Using cache at...

[Unit] Description="Start %i" After=syslog.target network.target [Service] Type=simple User=fakini ExecStart=/etc/init.d/vm_init.sh %i start ExecStop=/etc/init.d/vm_init.sh %i stop ExecReload=/etc/init.d/vm_init.sh %i restart RemainAfterExit=yes [Install] WantedBy=multi-user.target #!/bin/bash vm=$1 do=$2 function start_vm() { if vboxmanage list runningvms | grep $vm then echo "$vm already up!" else vboxmanage startvm ${vm} --type headless && sleep 5 fi } function...

solo_02:~ # btrfs fi df / Data, single: total=6.00GiB, used=5.97GiB System, DUP: total=32.00MiB, used=16.00KiB Metadata, DUP: total=512.00MiB, used=215.73MiB GlobalReserve, single: total=19.08MiB, used=0.00B solo_02:~ # df -h Filesystem Size Used Avail Use% Mounted on devtmpfs 988M 0 988M 0% /dev tmpfs 996M 55M 941M 6% /dev/shm tmpfs 996M 8,9M 987M 1%...

testbox1:~ # cat /etc/drbd.conf # You can find an example in /usr/share/doc/drbd.../drbd.conf.example include "drbd.d/global_common.conf"; include "drbd.d/*.res"; resource nfs_replica { meta-disk internal; device /dev/drbd1; syncer { verify-alg sha1; } on testbox1 { disk /dev/mapper/vg_nfs_exports-lv_nfs_exports; address 10.x.x.x:7788; } on testbox2 { disk /dev/mapper/vg_nfs_exports-lv_nfs_exports; address 10.x.x.x:7788; } } testbox1:~ # crm configure show...

#!/usr/bin/bash set -e if [ ! $1 ] then echo "USAGE: $0 <pool name>" exit 1 fi __POOL__=$1 __LUNS_NEW__=( c3t60000970000292603494533032323534d0 c3t60000970000292603494533032323438d0 ) __LUNS_OLD__=`zpool status ${__POOL__} | grep c3t | awk '{print $1}'` p=0 for i in ${__LUNS_OLD__} do zpool attach ${__POOL__} ${i} ${__LUNS_NEW__[$p]} p=$[p+1] done detach old storage array LUNs...

#!/bin/sh __GOOD__=`cat lun.good` __BAD__=`cat luns.bad` for LUN in ${__BAD__} do prtvtoc /dev/rdsk/${__GOOD__}s2 | fmthard -s - /dev/rdsk/${LUN}s2 done...

/etc/pf.conf: # macros ext_if="em0" tcp_services="{ 22, 2222 }" # options set skip on lo # scrub match in all scrub no-df # filter rules block in pass out keep state pass in on $ext_if inet proto tcp from any to ($ext_if) \ port $tcp_services flags S/SA keep state...

in /etc/sysctl.conf: net.inet.ip.forwarding=1 rules in /etc/pf.conf: lan_net = "10.2.3.0/24" int_if  = "rl0" ext_if1 = "fxp0" ext_if2 = "em0" ext_gw1 = "1.1.1.254" ext_gw2 = "2.2.2.25" nat on $ext_if1 from $lan_net to any -> ($ext_if1) nat on $ext_if2 from $lan_net to any -> ($ext_if2) block in from any to any block out...

# ls -i 55050310 # find . -inum 55050310 -exec rm {} \;...

SCSI2: # /usr/cluster/lib/sc/pgre -c pgre_inkeys -d <some did> # /usr/cluster/lib/sc/pgre -c pgre_inresv -d <some did> SCSI3: # /usr/cluster/lib/sc/scsi -c inkeys -d <some did> # /usr/cluster/lib/sc/scsi -c inresv -d <some did>...

# dladm create-aggr -l active -d <NIC1> -d <NIC2> 1 # echo "myhost netmask + broadcast + up" > /etc/hostname.aggr<VLANID>001...

buildit() { echo "Starting hardening stuff...Recompile kernel and stuff first..." \ && rm -rf /usr/obj/* \ && cd /usr/src && make buildworld && make buildkernel \ && make installkernel && zfs mount bootpool && mergemaster -p \ && make installworld && mergemaster -iF && make delete-old \ && echo "Build...

So...this is what we have to import onto this new platform, some posts will probably go to /dev/null: # perl posts_conv.pl | grep TITLE | wc -l 137 # perl posts_conv.pl | grep TITLE +TITLE:DATE [ Hello world! ] [ 2009-07-04 04:24:15 ] +TITLE:DATE [ About ] [ 2009-07-04 04:24:15...

Just one random post cause we need to import our old ones which where on WP into this new platform.We are now using some other database engine and a different structure, so it may take a while till we've got everything wroked out....