When you upgrade from Solaris 11.3 to Solaris 11.4 there are a lot of changes where SSH is one of them. Where Solaris 11.3 defaults to use SunSSH, Solaris 11.4 changed this to OpenSSH. In the environment I work with, some hardening was configured to disallow certain unsafe Ciphers and MACs. Therefor the directives were … [Read more…]
First of all, I would like to thank the Oracle Solaris team engineers for their tremendous effort they put in one of the best operating systems currently available in the world. On August 28, 2018 Oracle launched the new Solaris 11.4 release. The new software can be downloaded from https://www.oracle.com/technetwork/server-storage/solaris11/downloads/index.html Start getting by checking out the … [Read more…]
To install Solaris automatically there is a less documented way besides an AI (Automated Installer) environment and/or the Distribution Constructor. You can install Solaris on bare metal just by specifying an installation manifest and system configuration profile. For SPARC this is even possible without a DHCP server but x86 does require one. The steps for … [Read more…]
It is possible to host multiple repositories from a single host, or present them using a frontend proxy to your network infrastructure. In my case I have two repositories which I want to host for our Solaris infrastructure: the solaris repository and a custom repository containing our own packages. For this to work you will … [Read more…]
To audit all commands from a specific user you can issue:
|
1 |
usermod -K audit_flags=ex,lo,ps testuser |
To audit all commandline arguments you need to configure the audit service with an additional audit policy:
|
1 |
auditconfig -setpolicy +argv |
Now you can see every used command using:
|
1 |
praudit -l /var/audit/<audit-log>|grep testuser |
It is also possible to set the audit_flags in a profile and assign the profile to … [Read more…]
There are two ways to remove a custom service. One way just masks the service, the other permanently removes the service. The first way is to use svccfg delete myservice. While this works to remove the service from appearing it does not remove the service. It just masks the service. This can be seen using: … [Read more…]
It is possible to have custom scripts managed by SMF in Solaris. To do so you need two components, namely a script and a service manifest. When you create the script include the /lib/svc/share/smf_include.sh script. The following is a sample script primer:
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 |
#!/bin/bash . /lib/svc/share/smf_include.sh function _run() { while : do your magic done } _run & exit $SMF_EXIT_OK |
Next step is to create the service manifest. The following can be … [Read more…]
Oracle recommends the use of a local repository for deployment and patching of your systems. In all cases you will need the General Available (GA) release, together with the SRUs. First, create a ZFS filesystem to hold the repository:
|
1 |
zfs create data/solaris-repository |
Then extract the GA repository which you downloaded from Oracle.com using:
|
1 2 3 4 5 6 7 8 9 |
unzip -q V78247-01.zip ksh ./install-repo.ksh -d /data/solaris-repository Using V78246-01 files for sol-11_3-repo download. Uncompressing V78246-01_1of5.zip...done. Uncompressing V78246-01_2of5.zip...done. Uncompressing V78246-01_3of5.zip...done. Uncompressing V78246-01_4of5.zip...done. Uncompressing V78246-01_5of5.zip...done. Repository can be found in /data/solaris-repository. |
Followed by:
|
1 2 |
pkgrepo create -s /data/solaris-repository pkgrecv -s https://pkg.oracle.com/solaris/support -d /data/solaris-repository --key /path/to/key-file --cert /path/to/certificate -m latest '*' |
Today I started a demo with redmine. I had some difficulties with running it from a subdirectory within a nginx instance. For the installation I followed the steps provided in http://www.redmine.org/projects/redmine/wiki/RedmineInstall. Below are the additional steps to run redmine from a subdirectory using nginx:
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 |
vi redmine-2.6.1/config.ru #replace line: run RedmineApp::Application #with block: map "/redmine" do run RedmineApp::Application end vi redmine-2.6.1/config/environment.rb #add following two lines at the bottom of the file: Redmine::Utils::relative_url_root = "/redmine" ActionController::Base.relative_url_root = "/redmine" vi /etc/nginx/nginx.conf #add following location block: location /redmine/ { proxy_pass http://192.168.0.6:3000/redmine/; proxy_redirect default; } |
That’s it, now start redmine using: ruby script/rails s -e … [Read more…]
Today I found a nice command, namely zoneadm apply. With this command you can alter the configuration from a running zone. Some Oracle guides instruct to use: zonecfg -z “zone” -r but as alternative you can also use zonecfg -z “zone”, change desired items and afterwards apply them with zoneadm -z “zone” apply Reference: http://docs.oracle.com/cd/E36784_01/html/E37628/gogja.html#scrolltoc