hcoyote's blog

Auditors

Submitted by hcoyote on Wed, 2008-07-09 10:08.

Someone on #lopsa recently asked what he should tell an auditor who wants the root account completely disabled on a Unix system. The analogy I could come up with is:

Disabling root would be akin to cutting the master key to a building in half and making parts of the building unusable at certain times. You wouldn't be able to access things in emergencies to fix them, for example.

What other ways would you use to describe this?

Out of Band Management slides

Submitted by hcoyote on Sat, 2008-07-05 12:39.

In June, I gave a presentation to LOPSA Austin of various out of band management technologies that I've experienced and used in my day to day work. As promised, here are the slides if anyone else is interested. This a high-level overview of IPMI, ILO, ILOM, and some third party addons and management tools.

-edit-

The presentation

ZFS configurations on Sun x4500

Submitted by hcoyote on Mon, 2008-06-30 09:14.

Example ZFS configurations for a Sun x4500 with 24TB of raw disk. Two disks are held for OS, leaving 46 available disks for ZFS.

One 45 disk raidz2 zvol across 6 controllers.

Most disk, but very slow performance. ~21TB space.


zpool create -f thumper raidz2 c0t1d0 c1t1d0 c4t1d0 c5t1d0 c6t1d0 c7t1d0 \
c0t2d0 c1t2d0 c4t2d0 c5t2d0 c6t2d0 c7t2d0 c0t3d0 c1t3d0 c4t3d0 c5t3d0 \
c6t3d0 c7t3d0 c0t4d0 c1t4d0 c4t4d0 c5t4d0 c6t4d0 c7t4d0 c0t5d0 c1t5d0 \
c4t5d0 c5t5d0 c6t5d0 c7t5d0 c0t6d0 c1t6d0 c4t6d0 c5t6d0 c6t6d0 c7t6d0 \
c0t7d0 c1t7d0 c4t7d0 c5t7d0 c6t7d0 c7t7d0 c0t0d0 c1t0d0 c4t0d0

Notes from the Austin Sun User Group June meeting: Virtualization and Solaris

Submitted by hcoyote on Thu, 2007-06-21 23:13.

Register for the website! http://www.austinsug.org/Members.html

If you want to be part of the leadership board, contact Jeff. Jeff.blanchard at sun.com.

Thanks to Sigma Solutions for providing the food and drink.

Next meeting: August 15, 2007. Solaris 10 Dtrace by Jarod Jenson, chief architect at Aeysis. Jarod is the resource Sun brings into companies who need dtrace help. Very likely a hands on meeting.

This meeting is about the different Virtualization technologies in Solaris and developed on Sun Sparc hardware. The presentation was given by Scott Gaspard at sun.com.

Years ago, in the land of dinosaurs, everyone stuck everything on a few large systems. Later, people used cheap hardware based on x86 systems and replaced the big iron. The problem is, people couldn’t scale the apps beyond the confines of the box, so it ended up with server sprawl where you had dozens of vendors, no real remote management, operating systems all over the place and lots of hardware that was provisioned to run for a certain type of load that may have not fully utilized the resources on that system. Somewhere along the way, someone decided that you could stick multiple operating systems and applications on a single piece of physical hardware and you ended up increasing the utilization of the underlying hardware. This translated to lower cost because you needed fewer resources to run the system (cooling, power, people).

Testing notifications

Submitted by hcoyote on Sun, 2007-03-04 08:16.

I've been receiving double notifications for things posted to the website. Trying to see where it's occuring.

Austin Solaris User Group -- first meetup report

Submitted by hcoyote on Wed, 2007-02-28 22:57.

Last night Sun held it's first Austin Solaris User Group meeting at Painter
Hall on the UT campus. The event was reasonably well attended with ~15-20
people from various companies and academia around Austin.

The meeting was broken up into two parts: a presentation about new features
in Solaris 10 release 11/06 and a discussion about how, when, and what the
user group will be.

The presentation was a whirlwind tour of things like zones and their
improvements (such as cloning zones, effectively creating a flashstart-like
system for zone building), ZFS (such as RAIDZ2 which is a RAID-6-like RAID

Datacenters in a Box

Submitted by hcoyote on Fri, 2007-02-09 18:35.

Recently, Sun announced an initiative called Project Blackbox. If you haven't heard of it, it's something they call a "virtual data center". But, it's real and physical. You can touch it, hear it, move it, and ... as the Sun guy said, taste it if you like. (Personally, I wouldn't, I don't know where that datacenter has been).

Blackbox is a shippable mini data center. They take a 20 foot steel shipping container, stuff eight racks into it with hookups for 3-phase power, networking, and water pipes. You can use up to seven of those racks for computing equipment for a total of 250 standard rack U of space (just think, that's up to 1000 Opteron cores in that footprint). The eighth rack is retained for networking and miscellaneous environmental equipment (monitoring and dehumidification it seems).

LOPSA at LISA2006

Submitted by hcoyote on Tue, 2007-01-16 14:08.

Some photos I took of LOPSA at LISA2006.

LISA 2006 trip report

Submitted by hcoyote on Mon, 2007-01-15 21:15.

Whee.

I'm finally done with my trip report for work. It probably still needs polishing. I'm done though. I can't bring myself to write anything else about it.

It's viewable at Travis Campbell's LISA 2006 Trip Report.

All my notes are also published on Google Docs. If anyone's interested, I'll post direct links to them, or just provide pdfs somewhere. Google doesn't make it easy to gather all the urls of published docs right now. :-/

Lights Out Management

Submitted by hcoyote on Thu, 2006-11-09 09:35.

Or how I conquered out-of-band management with a box of serial and a power button.

In the beginning

When dinosaurs ruled the earth and small, mammalian critters scurried through the data center, the classic method of doing out-of-band management was via a crash cart and the laying of holy hands upon the ailing system. You'd wheel that old, cranky monitor around while the wheels going thumpa-thumpa-thumpa across the raised floor. You'd crawl back behind your computer shelves with a 25 foot vga and ps/2 cable, plug in, tune out, and administer. Maybe you were lucky and had in-rack KVM access. Whatever it was, it still required a physical presence in the room, often at 2AM when you were 30 miles away at a rocking party.

XML feed