티스토리

주니

검색하기

블로그 홈

주니

juni-94.tistory.com/m

주니- 님의 블로그입니다.

구독자: 0

방명록 방문하기

주요 글 목록

argocd rbac 목적 argocd 접속 시 github와 연동하여 인증된 사용자만 접속하게 하기 위함 1. 설치 #https://argo-cd.readthedocs.io/en/stable/ #https://kubernetes.io/docs/tasks/manage-kubernetes-objects/kustomization/ #install $ kubectl create namespace argocd $ kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml #kubectl info $ kubectl get all -n argocd #argo cd cli install #https://a.. 공감수 0 댓글수 0 2024. 2. 5.
kubernetes 모니터링(grafana, prometheus, alertmanager) 목적 시스템 모니터링 + 장애 발생 + 문제 발생 전 알림을 받기 위함 구성도 도구 kubespray, kubernetes(이하 k8s), grafna, prometheus, alertmanager, python3, uvicorn, FastAPI, UMS 환경 master1, 2, 3 worker1, 2, 3 k8s version - 1.28.5 진행(개발환경에서 진행하기에 각자 환경에 따라 차이가 발생할 수 있습니다.) k8s cluster가 배포되어 있고 metallb, ingress controller가 있다는 가정하에 진행하겠습니다. 1. SSL 인증서 등록 #dev $ ls -alR /home/master01/ssl/: total 80 drwxrwxr-x 5 master01 master01 40.. 공감수 0 댓글수 0 2024. 2. 5.
[linux] firewalld /etc/firewalld/zones/ firewalld-cmd --get-default-zone firewalld-cmd --list-all #포트 추가 firewalld-cmd --zone=public --add-port=8080/tcp #포트 제거 firewalld-cmd --zone=public --remove-port=8080/tcp #port 범위 허용 firewall-cmd --add-port=8000-9000/tcp firewall-cmd --remove-port=8000-9000/tcp #ip 대역 허용 firewall-cmd --add-source=192.168.0.0/24 firewall-cmd --remove-source=192.168.0.0/24 #승인 firewalld-cmd -.. 공감수 0 댓글수 0 2023. 10. 11.
[linux] single mode booting CentOS 7 부팅 시 커널 선택에서 'e' -> rhgb quiet -> init=/bin/bash 수정 후 ctrl + x # mount -o remount,rw / # passwd ${id} ## selinux enforcing # touch /.autorelabel ## selinux disable # exec /sbin/init CentOS 8 부팅 시 커널 선택에서 'e' -> rhgb quiet 뒤에 'rd.break' 추가 후 ctrl + x # mount -o remount,rw /sysroot # chroot /sysroot # paswwd ${id} ## selinux enforcing # touch /.autorelabel ## selinux disable # exec /sbin/.. 공감수 0 댓글수 0 2023. 10. 11.
[linux] error: disk ‘lvmid/’ not found error: disk 'lvmid/Z88N2t-AUog-uRIG-wzbb-9rKD-F3Bi-iswZdD/n6QwzH-lWyG-6fMZ-ITxi-aPoq-FQTc-HrncWi' not found.' Entering rescue mode... 1. ubuntu cd 부팅 2. try ubuntu (클릭) 3. terminal # sudo lvscan ACTIVE '/dev/vgubuntu/root' [977.58 GiB] inherit ACTIVE '/dev/vgubuntu/swap_1' [1.91 Gib] ingerit # sudo mount /dev/vgubuntu/root /mnt # cd /mnt # sudo mount --bind /dev dev # sudo mount --bind /sys sys .. 공감수 0 댓글수 1 2023. 10. 11.
[linux] contains a file system with errors, check forced. #error [/sbin/fsck.ext4 (1) — /dev/sda1] fsck.ext4 -a -C0 /dev/sda1 /dev/sda1 contains a file system with errors, check forced. /dev/sda1: Inodes that were part of a corrupted orphan linked list found. /dev/sda1: UNEXPECTED INCONSISTENCY; RUN fsck MANUALLY. (i.e., without -a or -p options) fsk exited with status codr 4 done. Failuer: File system check of the root filesystem failed The root files.. 공감수 0 댓글수 1 2023. 10. 11.
[ci/cd] github를 이용한 ci/cd 구축 - 1 1. github 접속 2. repo 메뉴 중 Actions 3. New workflow 생성 Docker image를 빌드 하기 위해 Docker image 선택 build code는 본인의 설정에 따라 맞추면 된다. # https://docs.docker.com/build/ci/github-actions/#step-three-define-the-workflow-steps # workflow 이름 name: Docker hub image build # workflow에서 작업이 실행되는 조건 (push, pull, ...) on: push: branches: - 'main' tags: - 'v*' #작업에 대한 정의 jobs: build: runs-on: ubuntu-latest steps: ### r.. 공감수 0 댓글수 0 2023. 8. 18.
[linux] nfs 설치, 설정 환경 : Ubuntu 20.04 # Server (10.109.0.2) apt install nfs-utils apt install nfs-kernel-server # create share directory mkdir /share chmod 777 /share # firewalld or ufw ufw allow 2049/tcp,udp firewall-cmd --permanent --add-service=nfs firewall-cmd --permanent --add-port=2049/tcp firewall-cmd --permanent --add-port=2049/udp firewall-cmd --reload # chage conf vi /etc/exports ##### # (mount point) (ho.. 공감수 0 댓글수 0 2023. 3. 30.
[nginx] conf PATH /etc/nginx/nginx.conf # listen http { server { listen 80; # ipv4 listen [::]:80; # ipv6 listen 443; listen [::]:443; } } # return 301 (80 -> 443) # https://nginx.org/en/docs/stream/ngx_stream_return_module.html http { server { listen 80; # ipv4 listen [::]:80; # ipv6 # http -> https redirection return 301 $server_name$request_uri; } } # ssl http { server { listen 443 ssl; listen [::]:443 ss.. 공감수 0 댓글수 0 2023. 3. 29.
[nginx] error # error Mar 17 01:35:50 gsitm-bastion setroubleshoot[82865]: SELinux is preventing /usr/sbin/nginx from read access on the file ... For complete SELinux messages run: sealert -l fe2a> Mar 17 01:35:50 gsitm-bastion setroubleshoot[82865]: SELinux is preventing /usr/sbin/nginx from read access on the file ... ***** Plugin catchall (100. confidence) suggests ************************** If you believe.. 공감수 0 댓글수 0 2023. 3. 29.
[linux] kernel: NMI watchdog: BUG: soft lockup - CPU#3 stuck for 82s! [pickup:18943] URL : https://access.redhat.com/documentation/ko-kr/red_hat_enterprise_linux/8/html/managing_monitoring_and_updating_the_kernel/parameters-controlling-kernel-panic_keeping-kernel-panic-parameters-disabled-in-virtualized-environments OS : CentOS 7.9 kernel: NMI watchdog: BUG: soft lockup - CPU#15 stuck for 72s! [chronyd:99] kernel: NMI watchdog: BUG: soft lockup - CPU#9 stuck for 71s! [systemd-jo.. 공감수 0 댓글수 0 2023. 3. 29.
[linux] pam_tally2(login:account): unknown option: no_magic_root, reset OS : CentOS 7.9 CentOS 5까지는 pam_tally.so 사용. CentOS 6부턴 pam_tally2.so no_magic_root, reset은 man page에 존재하지 않는다. 따라서, 옵션 삭제 # /var/log/secure mar 28 03:03:53 localhost login: pam_tally2(login:account): unknown option: no_magic_root mar 28 03:03:53 localhost login: pam_tally2(login:account): unknown option: reset ### 수정 전 # PATH /etc/pam.d/system-auth auth required /lib64/security/pam_tally2.so de.. 공감수 0 댓글수 0 2023. 3. 29.
[linux] ping: socket: Operation not permitted # error message ping: socket: Operation not permitted sysctl -w net.ipv4.ping_group_range="0 1000" 공감수 0 댓글수 0 2023. 3. 29.
[linux] ubuntu Error: Waiting for cache lock 환경 OS : Ubuntu 20.04 LTS error 'Waiting for cache lock: Could not get lock /var/lib/dpkg/lock-frontend’ solution sudo rm /var/lib/apt/lists/lock sudo rm /var/cache/apt/archives/lock sudo rm /var/lib/dpkg/lock* # 이후 패키지 업데이트 sudo dpkg --configure -a sudo apt update 공감수 0 댓글수 0 2022. 9. 30.
[linux] Google Authenticator 환경 OS : Ubuntu 20.04 LTS apt install libpam-google-authenticator # 2차 인증 적용할 계정으로 전환 su - ${id} google-authenticator vi /etc/pam.d/sshd # 추가 # google otp auth required pam_google_authenticator.so nullok vi /etc/ssh/sshd_config # 변경 UsePAM yes ChallengeResponseAuthentication Yes systemctl restart sshd # key 조회 가능 cat /home/${user}/.google_authenticator 공감수 0 댓글수 0 2022. 9. 30.
[linux] sftp log 목적 : sftp 프로토콜 사용시 사용자의 접속 시간, ip, 경로를 확인하기 위함 환경 : Ubuntu 20.04 man sftp-server -f type = DAEMON, USER, AUTH, LOCAL0, LOCAL1, LOCAL2, LOCAL3, LOCAL4, LOCAL5, LOCAL6, LOCAL7. -l type = QUIET, FATAL, ERROR, INFO, VERBOSE, DEBUG, DEBUG1, DEBUG2, DEBUG3 vi /etc/ssh/sshd_config # Logging SyslogFacility local4 #LogLevel DEBUG1 # override default of no subsystems # log_facility, log_level 설정 # add Sub.. 공감수 0 댓글수 0 2022. 8. 26.
[openstack] overcommit vi /etc/nova/nova.conf root@test:/etc/nova# cat nova.conf | egrep allocation # The image preallocation mode to use. For more information, refer to the # Virtual CPU to physical CPU allocation ratio. For more information, refer to #cpu_allocation_ratio = # Virtual RAM to physical RAM allocation ratio. For more information, refer to #ram_allocation_ratio = # Virtual disk to physical disk allocatio.. 공감수 0 댓글수 0 2022. 8. 26.
[linux] ntp 설정 환경 : Ubuntu 20.04 # ntp install apt-get install ntp # vi /etc/ntp.conf # /etc/ntp.conf, configuration for ntpd; see ntp.conf(5) for help driftfile /var/lib/ntp/ntp.drift # Leap seconds definition provided by tzdata leapfile /usr/share/zoneinfo/leap-seconds.list # Enable this if you want statistics to be logged. #statsdir /var/log/ntpstats/ statistics loopstats peerstats clockstats filegen loopst.. 공감수 0 댓글수 0 2022. 8. 25.
[linux] postfix error error 1. postdrop: warning: unable to look up public/pickup: No such file or directory mkfifo /var/spool/postfix/public/pickup systemctl restart postfix 2. postmap: fatal: bad string length 0 공감수 0 댓글수 0 2022. 8. 25.
[linux] postfix command # postfix 재시작 postfix reload # hash 파일 등록 postmap /etc/postfix/${filename} # postfix 설정 확인 postconf -n # 메일 큐 전체 비우기 postfix flush or postfix -f # 메일 큐 확인 mailq # 메일큐 전체 삭제 postsuper -d ALL # 메일큐 중 deferred 상태만 삭제 postsuper -d ALL deferred 공감수 0 댓글수 0 2022. 8. 25.
[linux] postfix 구축 환경 : Ubuntu 20.04 패키지 : postfix, sasl # postfix install apt-get install postfix /etc/postfix/main.cf # See /usr/share/postfix/main.cf.dist for a commented, more complete version # Debian specific: Specifying a file name will cause the first # line of that file to be used as the name. The Debian default # is /etc/mailname. #myorigin = /etc/mailname smtpd_banner = $myhostname ESMTP $mail_name (Ubu.. 공감수 0 댓글수 0 2022. 8. 25.
[linux] E: could not get lock /var/lib/dpkg/lock-frontend. It is held by process 문제 E: could not get lock /var/lib/dpkg/lock-frontend. It is held by process (unattended-upgr) N: Be aware that removing the lock file is not a solution and may break your system. E: Unable to acquire the dpkg frontend lock (/var/lib/dpgk/lock-frontend), is a nother process using it? 해결방법 killall apt apt-get rm /var/lib/apt/lists/lock rm /var/cache/apt/archives/lock rm /var/lib/dpkg/lock* dpkg --.. 공감수 0 댓글수 0 2022. 8. 25.
[linux] unable to resolve host : Name or service not known # error unable to resolve host ${hostname}: Name or service not known solution vi /etc/hosts 127.0.0.1 ${hostname} #hostname add 공감수 0 댓글수 0 2022. 8. 25.
[linux] passwd: Authentication token manipulation error root@test1:~# passwd root New password: Retype new password: Sorry, passwords do not match. passwd: Authentication token manipulation error passwd: password unchanged root@test:~# passwd root New password: Retype new password: Sorry, passwords do not match. passwd: Module is unknown passwd: password unchanged solution chmod 0640 /etc/shadow mount -o remount,rw / 공감수 0 댓글수 0 2022. 8. 25.
[linux] Raid 변경 후 mount [junhee.lee:root@root ~]# cat /etc/fstab # # /etc/fstab # Created by anaconda on Mon Apr 16 08:39:40 2018 # # Accessible filesystems, by reference, are maintained under '/dev/disk' # See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info # LABEL=ROOT / ext4 noatime,nodiratime 1 1 LABEL=CDNET /usr/local/cdnet ext4 noatime,nodiratime 1 2 LABEL=SWAP swap swap defaults 0 0 tmpfs /.. 공감수 2 댓글수 0 2021. 5. 27.
[firewalld] Failed to start firewalld.service: Unit is masked. [root@centos7 ~]# systemctl start firewalld Failed to start firewalld.service: Unit is masked. Failed to start firewalld.service: Unit is masked. 출력시 systemctl unmask firewalld [root@centos7 ~]# systemctl unmask firewalld Removed symlink /etc/systemd/system/firewalld.service. [root@centos7 html]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded .. 공감수 1 댓글수 0 2021. 2. 19.
[linux] [Hardware Error]: Machine check events logged [junhee.lee:root@host ~]# cat /var/log/messages | egrep -i '(error|fail)' Jan 6 04:55:49 host kernel: [Hardware Error]: Machine check events logged Jan 6 05:31:21 host kernel: [Hardware Error]: Machine check events logged Jan 6 06:03:25 host kernel: [Hardware Error]: Machine check events logged Jan 6 06:36:04 host kernel: [Hardware Error]: Machine check events logged Jan 6 07:09:19 host kernel: .. 공감수 1 댓글수 0 2021. 1. 28.
[linux] vimrc " Syntax Highlighting if has("syntax") syntax on endif set nu "line set fileencodings=utf8,euc-kr "encodeing set hlsearch "hilight search "set autoindent 들여쓰기 "set cindent set ts=4 set sts=4 set shiftwidth=4 set laststatus=2 set showmatch set smartcase set smarttab "set smartindent set ruler 공감수 0 댓글수 0 2020. 10. 28.
[linux] cannot open directory .: Input/output error [junhee.lee:root@* /]# ls -al ls: cannot access test [junhee.lee:root@* /test]# ls ls: cannot open directory .: Input/output error 1. / 디렉토리에서 ls 명령어를 입력하게되면 cannot access test 문구가 출력된다. 2. /test 디렉토리에서 ls 명령어를 입력하게되면 ls: cannot open directory .: Input/output error 문구가 출력된다. - 단순 디스크 문제인줄 알았지만 마운트 설정이 잘못되어있어서 발생하는 오류였다. 3. 디스크 장애가 발생했을때 생기는 오류 - 디스크 교체 필요하다. 자료 손실될 가능성도 생각해야한다. 4. 디스크 용량이 가득 찼을때.. 공감수 7 댓글수 0 2020. 9. 29.
[CentOS7] Python3.x 설치 업데이트 및 패키지 설치 yum -y update sudo -y yum install yum-utils sudo -y yum groupinstall development IUM 저장소 설치 # CentOS 6 yum install \ https://repo.ius.io/ius-release-el6.rpm \ https://dl.fedoraproject.org/pub/epel/epel-release-latest-6.noarch.rpm # CentOS 7 yum install \ https://repo.ius.io/ius-release-el7.rpm \ https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm Python 설치 # 라이브러.. 공감수 0 댓글수 0 2020. 8. 5.

문의안내

티스토리
로그인
고객센터

티스토리는 카카오에서 사랑을 담아 만듭니다.