Angel's Blog 2026-05-13T17:56:15Z Angel Copyright 2026, Angel SPHPBLOG Iperf - 1000BASE-LX SMF LC/LC Fiber Link Speed Test 

angelcool@2603-8000-6a00-5748-xxxx-xxxx-xxxx-xxxx:~$ date
Sun Mar  3 02:04:35 PM PST 2024

#IPv4
angelcool@2603-8000-6a00-5748-xxxx-xxxx-xxxx-xxxx:~$ iperf -s
------------------------------------------------------------
Server listening on TCP port 5001
TCP window size:  128 KByte (default)
------------------------------------------------------------
[  1] local 192.168.1.184 port 5001 connected with 192.168.1.192 port 57642 (icwnd/mss/irtt=14/1448/515)
[ ID] Interval       Transfer     Bandwidth
[  1] 0.00-10.01 sec  1.10 GBytes   941 Mbits/sec
angelcool@2603-8000-6a00-5748-xxxx-xxxx-xxxx-xxxx:~$
angelcool@2603-8000-6a00-5748-xxxx-xxxx-xxxx-xxxx:~$

# IPv6
angelcool@2603-8000-6a00-5748-xxxx-xxxx-xxxx-xxxx:~$ iperf -s -V
------------------------------------------------------------
Server listening on TCP port 5001
TCP window size:  128 KByte (default)
------------------------------------------------------------
[  1] local 2603:8000:6a00:5748:xxxx:xxxx:xxxx:xxxx port 5001 connected with 2603:8000:6a00:5748:xxxx:xxxx:xxxx:xxxx port 56868 (icwnd/mss/irtt=13/1428/460)
[ ID] Interval       Transfer     Bandwidth
[  1] 0.00-10.02 sec  1.08 GBytes   928 Mbits/sec
angelcool@2603-8000-6a00-5748-xxxx-xxxx-xxxx-xxxx:~$


HOST B - CLIENT

acool@localhost ~]$
# IPv4
[acool@localhost ~]$ iperf -c 192.168.1.184
------------------------------------------------------------
Client connecting to 192.168.1.184, TCP port 5001
TCP window size: 16.0 KByte (default)
------------------------------------------------------------
[  1] local 192.168.1.192 port 57642 connected with 192.168.1.184 port 5001 (icwnd/mss/irtt=14/1448/731)
[ ID] Interval       Transfer     Bandwidth
[  1] 0.00-10.02 sec  1.10 GBytes   940 Mbits/sec

# IPv6
[acool@localhost ~]$ iperf -c 2603:8000:6a00:xxxx:xxxx:xxxx:xxxx
------------------------------------------------------------
Client connecting to 2603:8000:6a00:xxxx:xxxx:xxxx:xxxx, TCP port 5001
TCP window size: 16.0 KByte (default)
------------------------------------------------------------
[  1] local 2603:8000:6a00:5748:: port 56868 connected with 2603:8000:6a00:5748:xxxx:xxxx:xxxx:xxxx port 5001 (icwnd/mss/irtt=13/1428/783)
[ ID] Interval       Transfer     Bandwidth
[  1] 0.00-10.02 sec  1.08 GBytes   928 Mbits/sec
[acool@localhost ~]$
]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry240303-221911 2024-03-03T00:00:00Z 2024-03-03T00:00:00Z Terraform: AWS VPC with IPV6 support [acool@localhost EC2-VPC]$
[acool@localhost EC2-VPC]$ date
Sun Jul 4 06:19:34 PM PDT 2021
[acool@localhost EC2-VPC]$ cat /etc/redhat-release
Fedora release 33 (Thirty Three)
[acool@localhost EC2-VPC]$ aws --version
aws-cli/1.18.223 Python/3.9.5 Linux/5.12.13-200.fc33.x86_64 botocore/1.19.63
[acool@localhost EC2-VPC]$ terraform -v
Terraform v1.0.1
on linux_amd64
+ provider registry.terraform.io/hashicorp/aws v3.48.0
[acool@localhost EC2-VPC]$

The gist of this post:
 
[acool@localhost EC2-VPC]$ 
[acool@localhost EC2-VPC]$ cat main.tf 
# extract public ssh key from private ssh key
# [acool@localhost EC2-VPC]$ ssh-keygen -y -f ./COOL_SSH_PRIVATEKEY.pem > COOL_SSH_PUBLICKEY.pub 

// a.- set region to use
provider "aws" {
    region = "us-east-2"
}

// b.- create ssh key pair
resource "aws_key_pair" "COOL_KEY_PAIR" {
  key_name   = "COOL_SSH_KEYPAIR"
  public_key = "${file("./COOL_SSH_PUBLICKEY.pub")}"
}

// c.- create vpc resource
resource "aws_vpc" "COOL_VPC" {
    enable_dns_support = true
    enable_dns_hostnames = true
    assign_generated_ipv6_cidr_block = true
    cidr_block = "10.0.0.0/16"
}

// d.- create subnet
resource "aws_subnet" "COOL_VPC_SUBNET" {
    vpc_id = "${aws_vpc.COOL_VPC.id}"
    cidr_block = "${cidrsubnet(aws_vpc.COOL_VPC.cidr_block, 4, 1)}"
    map_public_ip_on_launch = true

    ipv6_cidr_block = "${cidrsubnet(aws_vpc.COOL_VPC.ipv6_cidr_block, 8, 1)}"
    assign_ipv6_address_on_creation = true
}

// e.- create internet gateway
resource "aws_internet_gateway" "COOL_GATEWAY" {
    vpc_id = "${aws_vpc.COOL_VPC.id}"
}

// f.- create routing table
resource "aws_default_route_table" "COOL_VPC_ROUTING_TABLE" {
    default_route_table_id = "${aws_vpc.COOL_VPC.default_route_table_id}"

    route {
        cidr_block = "0.0.0.0/0"
        gateway_id = "${aws_internet_gateway.COOL_GATEWAY.id}"
    }

    route {
        ipv6_cidr_block = "::/0"
        gateway_id = "${aws_internet_gateway.COOL_GATEWAY.id}"
    }
}

// g.- create some sort of association needed
resource "aws_route_table_association" "COOL_SUBNET_ROUTE_TABLE_ASSOCIATION" {
    subnet_id      = "${aws_subnet.COOL_VPC_SUBNET.id}"
    route_table_id = "${aws_default_route_table.COOL_VPC_ROUTING_TABLE.id}"
}

// h.- create security group
resource "aws_security_group" "COOL_SECURITY_GROUP" {
    name = "COOL_SECURITY_GROUP"
    vpc_id = "${aws_vpc.COOL_VPC.id}"
    
    ingress {
        from_port = 22
        to_port = 22
        protocol = "tcp"
        cidr_blocks = ["0.0.0.0/0"]
    }

    ingress {
        from_port = 22
        to_port = 22
        protocol = "tcp"
        ipv6_cidr_blocks = ["::/0"]
    }

    // allow ping
    ingress{
        from_port = -1
        to_port = -1
        protocol = "icmp"
        cidr_blocks = ["0.0.0.0/0"]
    }

    // allow ping
    ingress{
        from_port = -1
        to_port = -1
        protocol = "icmpv6"
        ipv6_cidr_blocks = ["::/0"]
    }

    egress {
      from_port = 0
      to_port = 0
      protocol = "-1"
      cidr_blocks = ["0.0.0.0/0"]
    }

    egress {
      from_port = 0
      to_port = 0
      protocol = "-1"
      ipv6_cidr_blocks = ["::/0"]
    }
}

// i.- create EC2 instance
resource "aws_instance" "COOL_INSTANCE_APP01" {
    ami = "ami-01d5ac8f5f8804300"
    key_name = "COOL_SSH_KEYPAIR"
    instance_type = "t2.micro"
    subnet_id = "${aws_subnet.COOL_VPC_SUBNET.id}"
    ipv6_address_count = 1
    vpc_security_group_ids = ["${aws_security_group.COOL_SECURITY_GROUP.id}"]

    tags = {
        Name = "COOL_INSTANCE_APP01"
    }

    depends_on = [aws_internet_gateway.COOL_GATEWAY]
}

//j.- print instance IPs
output "COOL_INSTANCE_APP01_IPv4" {
  value = "${aws_instance.COOL_INSTANCE_APP01.public_ip}"
}

output "COOL_INSTANCE_APP01_IPv6" {
  value = ["${aws_instance.COOL_INSTANCE_APP01.ipv6_addresses}"]
}
[acool@localhost EC2-VPC]$
[acool@localhost EC2-VPC]$ terraform init
...
[acool@localhost EC2-VPC]$ 
[acool@localhost EC2-VPC]$ terraform apply
...
[acool@localhost EC2-VPC]$


Happy 4th of July, 2021! and cheers!


UPDATE - November 9, 2021
Added 'app_servers' variable to create multiple aws_instances.
Commit message: 'Added EIP and specified private ip addresses.'

main.tf :

# extract public ssh key from private ssh key
# [acool@localhost EC2-VPC]$ ssh-keygen -y -f ./COOL_SSH_PRIVATEKEY.pem > COOL_SSH_PUBLICKEY.pub 

// set region to use
provider "aws" {
    region = "us-east-2"
}

// create ssh key pair
resource "aws_key_pair" "COOL_KEY_PAIR" {
  key_name   = "COOL_SSH_KEYPAIR"
  public_key = "${file("./COOL_SSH_PUBLICKEY.pub")}"
}

// create vpc resource
resource "aws_vpc" "COOL_VPC" {
    enable_dns_support = true
    enable_dns_hostnames = true
    assign_generated_ipv6_cidr_block = true
    cidr_block = "10.0.0.0/16"
}

// create subnet
resource "aws_subnet" "COOL_PVC_SUBNET" {
    vpc_id = "${aws_vpc.COOL_VPC.id}"
    cidr_block = "${cidrsubnet(aws_vpc.COOL_VPC.cidr_block, 4, 1)}"
    map_public_ip_on_launch = true

    ipv6_cidr_block = "${cidrsubnet(aws_vpc.COOL_VPC.ipv6_cidr_block, 8, 1)}"
    assign_ipv6_address_on_creation = true
}

// create internet gateway
resource "aws_internet_gateway" "COOL_GATEWAY" {
    vpc_id = "${aws_vpc.COOL_VPC.id}"
}

// create routing table
resource "aws_default_route_table" "COOL_VPC_ROUTING_TABLE" {
    default_route_table_id = "${aws_vpc.COOL_VPC.default_route_table_id}"

    route {
        cidr_block = "0.0.0.0/0"
        gateway_id = "${aws_internet_gateway.COOL_GATEWAY.id}"
    }

    route {
        ipv6_cidr_block = "::/0"
        gateway_id = "${aws_internet_gateway.COOL_GATEWAY.id}"
    }
}

// create some sort of association needed
resource "aws_route_table_association" "COOL_SUBNET_ROUTE_TABLE_ASSOCIATION" {
    subnet_id      = "${aws_subnet.COOL_PVC_SUBNET.id}"
    route_table_id = "${aws_default_route_table.COOL_VPC_ROUTING_TABLE.id}"
}

// create security group
resource "aws_security_group" "COOL_SECURITY_GROUP" {
    name = "COOL_SECURITY_GROUP"
    vpc_id = "${aws_vpc.COOL_VPC.id}"
    
    ingress {
        from_port = 22
        to_port = 22
        protocol = "tcp"
        cidr_blocks = ["0.0.0.0/0"]
    }

    ingress {
        from_port = 22
        to_port = 22
        protocol = "tcp"
        ipv6_cidr_blocks = ["::/0"]
    }

    // allow ping
    ingress{
        from_port = -1
        to_port = -1
        protocol = "icmp"
        cidr_blocks = ["0.0.0.0/0"]
    }

    // allow ping
    ingress{
        from_port = -1
        to_port = -1
        protocol = "icmpv6"
        ipv6_cidr_blocks = ["::/0"]
    }

    egress {
      from_port = 0
      to_port = 0
      protocol = "-1"
      cidr_blocks = ["0.0.0.0/0"]
    }

    egress {
      from_port = 0
      to_port = 0
      protocol = "-1"
      ipv6_cidr_blocks = ["::/0"]
    }
}

// server names
variable app_servers {
    description = "name of app servers"
    type = list(map(any))
    default = [
        {name:"COOL_LB01", ip:"10.0.16.4"},
        {name:"COOL_LB02", ip:"10.0.16.5"},
        {name:"COOL_APP01", ip:"10.0.16.6"},
        {name:"COOL_APP02", ip:"10.0.16.7"},
    ]
}

// create EC2 instance
resource "aws_instance" "COOL_SERVERS" {
    ami = "ami-01d5ac8f5f8804300"
    key_name = "COOL_SSH_KEYPAIR"
    instance_type = "t2.micro"
    subnet_id = "${aws_subnet.COOL_PVC_SUBNET.id}"
    ipv6_address_count = 1
    vpc_security_group_ids = ["${aws_security_group.COOL_SECURITY_GROUP.id}"]
    for_each = {for server in var.app_servers:  server.name => server}
    private_ip = each.value["ip"]

    tags = {
        Name = each.value["name"]
    }

    depends_on = [aws_internet_gateway.COOL_GATEWAY]
}

// elastic IP
resource "aws_eip" "COOL_EIP" {
  instance = aws_instance.COOL_SERVERS["COOL_LB01"].id
  vpc      = true
}

// print instance IPs
output "COOL_INSTANCE_APP01_IPv4" {
    value = {for k, v in aws_instance.COOL_SERVERS: k => v.public_ip}
}

output "COOL_INSTANCE_APP01_IPv6" {
  value = {for k, v in aws_instance.COOL_SERVERS: k => v.ipv6_addresses}
}

output "COOL_VPC_IPV6_BLOCK" {
  value = aws_subnet.COOL_PVC_SUBNET.ipv6_cidr_block
}

// SSH to instance:
// [acool@localhost EC2-VPC]$ ssh -i ./COOL_SSH_PRIVATEKEY.pem centos@ip_address

// remove eip from COOL_LB01
// [acool@localhost EC2-VPC]$ aws ec2 disassociate-address --region us-east-2 --public-ip 3.131.249.150

// assign eip to COOL_LB02, adjust instance id to match LB02. The same commands work to return eip to LB01
// [acool@localhost EC2-VPC]$ aws ec2 associate-address --region us-east-2 --public-ip 3.131.249.150 --instance-id i-05a634252654b7b34

]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry210705-012044 2021-07-05T00:00:00Z 2021-07-05T00:00:00Z Terraform: AWS EC2 single instance example. [acool@localhost terraform-tests]$ terraform --version
Terraform v1.0.1
...
[acool@localhost terraform-tests]$ aws --version
aws-cli/1.18.223 Python/3.9.5 Linux/5.12.12-200.fc33.x86_64 botocore/1.19.63
...

The gist of this post:
[acool@localhost EC2-SINGLE-INSTANCE]$ cat main.tf 
provider "aws" {
    region = "us-east-2"
}

// create ssh key
resource "tls_private_key" "COOL_SSH_PK" {
  algorithm = "RSA"
  rsa_bits  = 4096
}

// create ssh key pair
resource "aws_key_pair" "COOL_KEY_PAIR" {
  key_name   = "COOL_SSH_KEYNAME"
  public_key = tls_private_key.COOL_SSH_PK.public_key_openssh

  provisioner "local-exec" { # Create "myKey.pem" to your computer!!
    command = "echo '${tls_private_key.COOL_SSH_PK.private_key_pem}' > ./COOL_SSH_PK.pem"
  }
}

// create aws ec2 instance
resource "aws_instance" "COOLAPP01" {
    ami = "ami-01d5ac8f5f8804300"
    instance_type = "t2.micro"
    key_name = aws_key_pair.COOL_KEY_PAIR.key_name
    vpc_security_group_ids = [aws_security_group.COOLAPP01_security_group.id]

  tags = {
    Name = "COOLAPP01_tag_name"
  }
}

// create security group
resource "aws_security_group" "COOLAPP01_security_group" {

    name="terraform_COOLAPP01_security_group"

    // allow port 80 tcp
    ingress{
        from_port = 80
        to_port = 80
        protocol = "tcp"
        cidr_blocks = ["0.0.0.0/0"]
    }

    // allow port 22 tcp
    ingress{
        from_port = 22
        to_port = 22
        protocol = "tcp"
        cidr_blocks = ["0.0.0.0/0"]
    }

    // allow ping
    ingress{
        from_port = -1
        to_port = -1
        protocol = "icmp"
        cidr_blocks = ["0.0.0.0/0"]
    }

    // allow all outbound traffic
    egress {
        from_port   = 0
        to_port     = 0
        protocol    = "-1"
        cidr_blocks = ["0.0.0.0/0"]
    }
}

// TODO: enable IPV6

output "public_ip" {
    value = aws_instance.COOLAPP01.public_ip
    description = "public ip for COOLAPP01"
}
[acool@localhost EC2-SINGLE-INSTANCE]$ 
[acool@localhost EC2-SINGLE-INSTANCE]$terraform apply
...


Happy 4th of July, 2021 ya'll!!]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry210704-200235 2021-07-04T00:00:00Z 2021-07-04T00:00:00Z Highly Available HAproxy Balancer with Keepalived
Floating ip address will be 192.168.121.179

Vagrantfile needed parameters:

config.vm.box = "centos/8"
config.vm.network "private_network", ip: "192.168.121.180"
config.vm.hostname = "lb01.localhost"

config.vm.box = "centos/8"
config.vm.network "private_network", ip: "192.168.121.181"
config.vm.hostname = "lb02.localhost"

config.vm.box = "centos/8"
config.vm.network "private_network", ip: "192.168.121.191"
config.vm.hostname = "app01.localhost"

config.vm.box = "centos/8"
config.vm.network "private_network", ip: "192.168.121.192"
config.vm.hostname = "app02.localhost"

------------------------------------------------------------------------
app01 and app02 will have nginx installed running its default welcome page.

angel@acool:~/Documents/haproxy-cluster$ date
Fri 21 May 2021 07:11:52 PM PDT
angel@acool:~/Documents/haproxy-cluster$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=20.04
DISTRIB_CODENAME=focal
DISTRIB_DESCRIPTION="Ubuntu 20.04.2 LTS"
angel@acool:~/Documents/haproxy-cluster$ 
angel@acool:~/Documents/haproxy-cluster$ tree
.
├── app01
│   └── Vagrantfile
├── app02
│   └── Vagrantfile
├── lb01
│   └── Vagrantfile
├── lb02
│   └── Vagrantfile
└── NOTES.txt

4 directories, 5 files
angel@acool:~/Documents/haproxy-cluster$
angel@acool:~/Documents/haproxy-cluster$ sudo vagrant global-status
id       name    provider state   directory                                   
------------------------------------------------------------------------------
1553a24  default libvirt shutoff /home/angel/Documents/haproxy-cluster/lb01  
3c33424  default libvirt shutoff /home/angel/Documents/haproxy-cluster/lb02  
1d9af06  default libvirt shutoff /home/angel/Documents/haproxy-cluster/app01 
5bc8220  default libvirt shutoff /home/angel/Documents/haproxy-cluster/app02 
...
angel@acool:~/Documents/haproxy-cluster$
angel@acool:~/Documents/haproxy-cluster$
angel@acool:~/Documents/haproxy-cluster/lb01$ vagrant --version
Vagrant 2.2.6
angel@acool:~/Documents/haproxy-cluster$
angel@acool:~/Documents/haproxy-cluster$ cd lb01/
angel@acool:~/Documents/haproxy-cluster/lb01$ sudo vagrant up
...
angel@acool:~/Documents/haproxy-cluster/lb01$ sudo vagrant ssh
Last login: Sat May 22 02:08:45 2021 from 192.168.121.1
[vagrant@lb01 ~]$ 
[vagrant@lb01 ~]$ cat /etc/redhat-release 
CentOS Linux release 8.3.2011
[vagrant@lb01 ~]$ sudo dnf install haproxy keepalived

[vagrant@lb01 ~]$ haproxy -v
HA-Proxy version 1.8.23 2019/11/25
Copyright 2000-2019 Willy Tarreau <willy@haproxy.org>

[vagrant@lb01 ~]$ keepalived --version
Keepalived v2.0.10 (11/12,2018)
...
[vagrant@lb01 ~]$
[vagrant@lb01 ~]$ # HAProxy need this to bind to floating ip when ip is missing locally 
[vagrant@lb01 ~]$ cat /etc/sysctl.conf 
...
net.ipv4.ip_nonlocal_bind=1
[vagrant@lb01 ~]$ 
[vagrant@lb01 ~]$ sudo sysctl -p
net.ipv4.ip_nonlocal_bind = 1
[vagrant@lb01 ~]$
[vagrant@lb01 ~]$ 
[vagrant@lb01 ~]$ cat /etc/haproxy/haproxy.cfg 
...
## enable stats
listen stats
    bind :9000
    stats enable
    stats uri /stats
    stats refresh 10s
    stats admin if LOCALHOST

## enable www frontend, bind floating ip address
frontend www
    bind 192.168.121.179:80
    mode http
    default_backend www_servers

## enable www backend
backend www_servers
    balance roundrobin
    option forwardfor
    http-request set-header X-Forwarded-Port %[dst_port]
    http-request add-header X-Forwarded-Proto https if { ssl_fc }
    option httpchk HEAD / HTTP/1.1\r\nHost:localhost
    server app01 192.168.121.191:80 check
    server app02 192.168.121.192:80 check

[vagrant@lb01 ~]$ 
[vagrant@lb01 ~]$ cat /etc/keepalived/keepalived.conf
     vrrp_script chk_haproxy {      # Requires keepalived-1.1.13
       #script "killall -0 haproxy"  # cheaper than pidof
       script "pidof haproxy"  # this one worked better for me.
       interval 2 # check every 2 seconds
       weight 2 # add 2 points of priority if OK
     }
     vrrp_instance VI_1 {
       interface eth0
       state MASTER
       virtual_router_id 51
       priority 101 # 101 on lb01, 100 on lb02
       virtual_ipaddress {
         192.168.121.179
       }
       track_script {
         chk_haproxy
       }
     }
[vagrant@lb01 ~]$ 
[vagrant@lb01 ~]$ # this should be the end result, the floating ip should be listed.
[vagrant@lb01 ~]$ ip a |grep 179
    inet 192.168.121.179/32 scope global eth0
[vagrant@lb01 ~]$ 
[vagrant@lb01 ~]$ # if you stop haproxy (or shutdown lb01), lb02 should take over the floating ip!
[vagrant@lb01 ~]$ # when haproxy is back, lb01 will reclaim the floating ip, the end result is
[vagrant@lb01 ~]$ # the floating ip will be available even if lb01 goes down.


Cheers!

UPDATE: November 11, 2021 - Adding lb02 details in order to remove ambiguities when I see this post in the future.

[vagrant@lb02 ~]$ cat /etc/sysctl.conf 
...
net.ipv4.ip_nonlocal_bind=1
[vagrant@lb02 ~]$


[vagrant@lb02 ~]$ 
[vagrant@lb02 ~]$ 
[vagrant@lb02 ~]$ cat /etc/keepalived/keepalived.conf
     vrrp_script chk_haproxy {      # Requires keepalived-1.1.13
       #script "killall -0 haproxy"  # cheaper than pidof
       script "pidof haproxy"
       interval 2 # check every 2 seconds
       weight 2 # add 2 points of priority if OK
     }
     vrrp_instance VI_1 {
       interface eth0
       state MASTER
       virtual_router_id 51
       priority 100 # 101 on primary, 100 on secondary
       virtual_ipaddress {
         192.168.121.179
       }
       track_script {
         chk_haproxy
       }
     }

[vagrant@lb02 ~]$


[vagrant@lb02 ~]$ 
[vagrant@lb02 ~]$ 
[vagrant@lb02 ~]$ cat /etc/haproxy/haproxy.cfg
#---------------------------------------------------------------------
# Example configuration for a possible web application.  See the
# full configuration options online.
#
#   https://www.haproxy.org/download/1.8/doc/configuration.txt
#
#---------------------------------------------------------------------

#---------------------------------------------------------------------
# Global settings
#---------------------------------------------------------------------
global
    # to have these messages end up in /var/log/haproxy.log you will
    # need to:
    #
    # 1) configure syslog to accept network log events.  This is done
    #    by adding the '-r' option to the SYSLOGD_OPTIONS in
    #    /etc/sysconfig/syslog
    #
    # 2) configure local2 events to go to the /var/log/haproxy.log
    #   file. A line like the following can be added to
    #   /etc/sysconfig/syslog
    #
    #    local2.*                       /var/log/haproxy.log
    #
    log         127.0.0.1 local2

    chroot      /var/lib/haproxy
    pidfile     /var/run/haproxy.pid
    maxconn     4000
    user        haproxy
    group       haproxy
    daemon

    # turn on stats unix socket
    stats socket /var/lib/haproxy/stats

    # utilize system-wide crypto-policies
    ssl-default-bind-ciphers PROFILE=SYSTEM
    ssl-default-server-ciphers PROFILE=SYSTEM

#---------------------------------------------------------------------
# common defaults that all the 'listen' and 'backend' sections will
# use if not designated in their block
#---------------------------------------------------------------------
defaults
    mode                    http
    log                     global
    option                  httplog
    option                  dontlognull
    option http-server-close
    option forwardfor       except 127.0.0.0/8
    option                  redispatch
    retries                 3
    timeout http-request    10s
    timeout queue           1m
    timeout connect         10s
    timeout client          1m
    timeout server          1m
    timeout http-keep-alive 10s
    timeout check           10s
    maxconn                 3000

# ME: enable stats
listen stats
    bind :9000
    stats enable
    stats uri /stats
    stats refresh 10s
    stats admin if LOCALHOST

# ME: 
frontend www
    bind 192.168.121.179:80
    mode http
    default_backend www_servers

# ME:
backend www_servers
    balance roundrobin
    option forwardfor
    http-request set-header X-Forwarded-Port %[dst_port]
    http-request add-header X-Forwarded-Proto https if { ssl_fc }
    option httpchk HEAD / HTTP/1.1\r\nHost:localhost
    server app01 192.168.121.191:80 check
    server app02 192.168.121.192:80 check

#---------------------------------------------------------------------
# main frontend which proxys to the backends
#---------------------------------------------------------------------
frontend main
    bind *:5000
    acl url_static       path_beg       -i /static /images /javascript /stylesheets
    acl url_static       path_end       -i .jpg .gif .png .css .js

    use_backend static          if url_static
    default_backend             app

#---------------------------------------------------------------------
# static backend for serving up images, stylesheets and such
#---------------------------------------------------------------------
backend static
    balance     roundrobin
    server      static 127.0.0.1:4331 check

#---------------------------------------------------------------------
# round robin balancing between the various backends
#---------------------------------------------------------------------
backend app
    balance     roundrobin
    server  app1 127.0.0.1:5001 check
    server  app2 127.0.0.1:5002 check
    server  app3 127.0.0.1:5003 check
    server  app4 127.0.0.1:5004 check
[vagrant@lb02 ~]$ 
[vagrant@lb02 ~]$



]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry210522-030737 2021-05-22T00:00:00Z 2021-05-22T00:00:00Z Docker: reference information for SWARMS, NODES, SERVICES, STACKS and NETWORKS [vagrant@box1 ~]$ date
Fri Dec 11 18:34:51 UTC 2020
[vagrant@box1 ~]$
[vagrant@box1 ~]$ docker --version
Docker version 20.10.0, build 7287ab3
[vagrant@box1 ~]$
[vagrant@box1 ~]$
[vagrant@box1 ~]$ ########## Docker SWARM info ##########
[vagrant@box1 ~]$ docker swarm

Usage: docker swarm COMMAND

Manage Swarm

Commands:
ca Display and rotate the root CA
init Initialize a swarm
join Join a swarm as a node and/or manager
join-token Manage join tokens
leave Leave the swarm
unlock Unlock swarm
unlock-key Manage the unlock key
update Update the swarm

Run 'docker swarm COMMAND --help' for more information on a command.
[vagrant@box1 ~]$
[vagrant@box1 ~]$
[vagrant@box1 ~]$ ########## Docker NODE info ##########
[vagrant@box1 ~]$ docker node

Usage: docker node COMMAND

Manage Swarm nodes

Commands:
demote Demote one or more nodes from manager in the swarm
inspect Display detailed information on one or more nodes
ls List nodes in the swarm
promote Promote one or more nodes to manager in the swarm
ps List tasks running on one or more nodes, defaults to current node
rm Remove one or more nodes from the swarm
update Update a node

Run 'docker node COMMAND --help' for more information on a command.
[vagrant@box1 ~]$
[vagrant@box1 ~]$
[vagrant@box1 ~]$ ########## Docker SERVICE info ##########
[vagrant@box1 ~]$ docker service

Usage: docker service COMMAND

Manage services

Commands:
create Create a new service
inspect Display detailed information on one or more services
logs Fetch the logs of a service or task
ls List services
ps List the tasks of one or more services
rm Remove one or more services
rollback Revert changes to a service's configuration
scale Scale one or multiple replicated services
update Update a service

Run 'docker service COMMAND --help' for more information on a command.
[vagrant@box1 ~]$
[vagrant@box1 ~]$
[vagrant@box1 ~]$ ########## Docker STACK info ##########
[vagrant@box1 ~]$ docker stack

Usage: docker stack [OPTIONS] COMMAND

Manage Docker stacks

Options:
--orchestrator string Orchestrator to use (swarm|kubernetes|all)

Commands:
deploy Deploy a new stack or update an existing stack
ls List stacks
ps List the tasks in the stack
rm Remove one or more stacks
services List the services in the stack

Run 'docker stack COMMAND --help' for more information on a command.
[vagrant@box1 ~]$
[vagrant@box1 ~]$
[vagrant@box1 ~]$ ########## Docker NETWORK info ##########
vagrant@box1 ~]$ docker network

Usage: docker network COMMAND

Manage networks

Commands:
connect Connect a container to a network
create Create a network
disconnect Disconnect a container from a network
inspect Display detailed information on one or more networks
ls List networks
prune Remove all unused networks
rm Remove one or more networks

Run 'docker network COMMAND --help' for more information on a command.
[vagrant@box1 ~]$
[vagrant@box1 ~]$
[vagrant@box1 ~]$ ########## All the crap available under Docker binary ##########
[vagrant@box1 ~]$
[vagrant@box1 ~]$ docker

Usage: docker [OPTIONS] COMMAND

A self-sufficient runtime for containers

Options:
--config string Location of client config files (default "/home/vagrant/.docker")
-c, --context string Name of the context to use to connect to the daemon (overrides DOCKER_HOST env var and default context set with "docker
context use")
-D, --debug Enable debug mode
-H, --host list Daemon socket(s) to connect to
-l, --log-level string Set the logging level ("debug"|"info"|"warn"|"error"|"fatal") (default "info")
--tls Use TLS; implied by --tlsverify
--tlscacert string Trust certs signed only by this CA (default "/home/vagrant/.docker/ca.pem")
--tlscert string Path to TLS certificate file (default "/home/vagrant/.docker/cert.pem")
--tlskey string Path to TLS key file (default "/home/vagrant/.docker/key.pem")
--tlsverify Use TLS and verify the remote
-v, --version Print version information and quit

Management Commands:
app* Docker App (Docker Inc., v0.9.1-beta3)
builder Manage builds
buildx* Build with BuildKit (Docker Inc., v0.4.2-docker)
config Manage Docker configs
container Manage containers
context Manage contexts
image Manage images
manifest Manage Docker image manifests and manifest lists
network Manage networks
node Manage Swarm nodes
plugin Manage plugins
secret Manage Docker secrets
service Manage services
stack Manage Docker stacks
swarm Manage Swarm
system Manage Docker
trust Manage trust on Docker images
volume Manage volumes

Commands:
attach Attach local standard input, output, and error streams to a running container
build Build an image from a Dockerfile
commit Create a new image from a container's changes
cp Copy files/folders between a container and the local filesystem
create Create a new container
diff Inspect changes to files or directories on a container's filesystem
events Get real time events from the server
exec Run a command in a running container
export Export a container's filesystem as a tar archive
history Show the history of an image
images List images
import Import the contents from a tarball to create a filesystem image
info Display system-wide information
inspect Return low-level information on Docker objects
kill Kill one or more running containers
load Load an image from a tar archive or STDIN
login Log in to a Docker registry
logout Log out from a Docker registry
logs Fetch the logs of a container
pause Pause all processes within one or more containers
port List port mappings or a specific mapping for the container
ps List containers
pull Pull an image or a repository from a registry
push Push an image or a repository to a registry
rename Rename a container
restart Restart one or more containers
rm Remove one or more containers
rmi Remove one or more images
run Run a command in a new container
save Save one or more images to a tar archive (streamed to STDOUT by default)
search Search the Docker Hub for images
start Start one or more stopped containers
stats Display a live stream of container(s) resource usage statistics
stop Stop one or more running containers
tag Create a tag TARGET_IMAGE that refers to SOURCE_IMAGE
top Display the running processes of a container
unpause Unpause all processes within one or more containers
update Update configuration of one or more containers
version Show the Docker version information
wait Block until one or more containers stop, then print their exit codes

Run 'docker COMMAND --help' for more information on a command.
To get more help with docker, check out guides at https://docs.docker.com/go/guides/
[vagrant@box1 ~]$
[vagrant@box1 ~]$
[vagrant@box1 ~]$ ]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry201211-183259 2020-12-11T00:00:00Z 2020-12-11T00:00:00Z Nagios: Miscellaneous notes on installing and configuring Nagios. [acool@localhost ~]$
[acool@localhost ~]$ date
Mon 07 Dec 2020 05:45:53 PM PST
[acool@localhost ~]$
[acool@localhost ~]$ cat /etc/redhat-release
Fedora release 31 (Thirty One)
[acool@localhost ~]$
[acool@localhost ~]$ sudo dnf install httpd nagios nagios-common nagios-plugins-all
Last metadata expiration check: 0:36:12 ago on Mon 07 Dec 2020 05:09:52 PM PST.
Package httpd-2.4.46-1.fc31.x86_64 is already installed.
Package nagios-4.4.5-7.fc31.x86_64 is already installed.
Package nagios-common-4.4.5-7.fc31.x86_64 is already installed.
Package nagios-plugins-all-2.3.3-2.fc31.x86_64 is already installed.
Dependencies resolved.
Nothing to do.
Complete!
[acool@localhost ~]$
[acool@localhost ~]$ cat /etc/httpd/conf.d/nagios.conf
...
[acool@localhost ~]$
[acool@localhost ~]$ # default password for web ui nagiosadmin:nagiosadmin? I think yes.
[acool@localhost ~]$ ll /etc/nagios/
total 92
-rw-rw-r--. 1 root root 13699 Apr 7 2020 cgi.cfg
-rw-rw-r--. 1 root root 45886 Nov 4 23:23 nagios.cfg
-rw-r--r--. 1 root root 12839 Apr 29 2020 nrpe.cfg
drwxr-x---. 2 root nagios 4096 Nov 5 11:05 objects
-rw-r-----. 1 root apache 27 Apr 7 2020 passwd
drwxr-x---. 2 root nagios 4096 Nov 3 12:22 private
[acool@localhost ~]$
[acool@localhost ~]$ # http://localhost:8080/nagios/ should now load (adjust port as needed)


TODO: nagiosgraph. NEEDS TESTING!!

A.- Looks like we need this in commands.cfg :

define command {
command_name process-service-perfdata-for-nagiosgraph
command_line /usr/local/nagiosgraph/bin/insert.pl
}

B.- And this in templates.cfg :

define service {
name graphed-service
action_url /nagiosgraph/cgi-bin/show.cgi?host=$HOSTNAME$&service=$SERVICEDESC$' onMouseOver='showGraphPopup(this)' onMouseOut='hideGraphPopup()' rel='/nagiosgraph/cgi-bin/showgraph.cgi?host=$HOSTNAME$&service=$SERVICEDESC$&period=week&rrdopts=-w+450+-j
register 0
}

C.- Then we need to add 'graphed-service' to services in localhost.cfg for example:

# Define a service to "ping" the local machine
define service {

use local-service,graphed-service; Name of service template to use
host_name localhost
service_description PING
check_command check_ping!100.0,20%!500.0,60%
}

D.- In these in /etc/nagios/nagios.cfg : - NEEDS TO BE VERIFIED

process_performance_data=1
service_perfdata_file=/tmp/perfdata.log
service_perfdata_file_template=$LASTSERVICECHECK$||$HOSTNAME$||$SERVICEDESC$||$SERVICEOUTPUT$||$SERVICEPERFDATA$
service_perfdata_file_mode=a
service_perfdata_file_processing_interval=30
service_perfdata_file_processing_command=process-service-perfdata-for-nagiosgraph

More hints :
[root@localhost nagiosgraph]# 
[root@localhost nagiosgraph]# grep -nri nagiosgraph /etc/httpd/
/etc/httpd/conf/httpd.conf:354:#### NAGIOSGRAPH #####
/etc/httpd/conf/httpd.conf:355:include /usr/local/nagiosgraph/etc/nagiosgraph-apache.conf
[root@localhost nagiosgraph]#


See nagiosgraph settings:

http://localhost:8080/nagiosgraph/cgi-b ... config.cgi
]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry201208-014642 2020-12-08T00:00:00Z 2020-12-08T00:00:00Z Solr: Starting Solr 4.7 for development purposes. [acool@localhost solr-4.7.0]$ date
Fri 25 Sep 2020 09:33:39 AM PDT
[acool@localhost solr-4.7.0]$
[acool@localhost solr-4.7.0]$
[acool@localhost solr-4.7.0]$ sudo yum install java-1.8.0-openjdk
...
[acool@localhost solr-4.7.0]$ java -version
openjdk version "1.8.0_265"
OpenJDK Runtime Environment (build 1.8.0_265-b01)
OpenJDK 64-Bit Server VM (build 25.265-b01, mixed mode)
[acool@localhost solr-4.7.0]$
[acool@localhost solr-4.7.0]$
[acool@localhost solr-4.7.0]$ ll
total 460
-rw-r--r--. 1 acool acool 362968 Feb 21 2014 CHANGES.txt
drwxr-xr-x. 12 acool acool 4096 Feb 21 2014 contrib
drwxrwxr-x. 4 acool acool 4096 Feb 1 2020 dist
drwxrwxr-x. 17 acool acool 4096 Feb 1 2020 docs
drwxr-xr-x. 15 acool acool 4096 Feb 2 2020 example
drwxr-xr-x. 2 acool acool 32768 Feb 1 2020 licenses
-rw-r--r--. 1 acool acool 12646 Feb 18 2014 LICENSE.txt
-rw-r--r--. 1 acool acool 26762 Feb 18 2014 NOTICE.txt
-rw-r--r--. 1 acool acool 5344 Feb 18 2014 README.txt
-rw-r--r--. 1 acool acool 686 Feb 18 2014 SYSTEM_REQUIREMENTS.txt
[acool@localhost solr-4.7.0]$
[acool@localhost solr-4.7.0]$
[acool@localhost solr-4.7.0]$ # Starting server
[acool@localhost solr-4.7.0]$ cd example/
[acool@localhost example]$
[acool@localhost example]$ java -jar start.jar
...
[acool@localhost example]$
[acool@localhost example]$ # http://localhost:8983/solr should now render the dashboard
[acool@localhost example]$

12/7/2020 Sample query:
http://app01.example.com:8098/search/query/article_index?sort=score DESC
&q={!edismax}how to become a millionaire
&qf=authorName^6 objectId^4 headline^2 deck
&fq={!lucene}
    edition:us
    AND statusId:4
    AND objectTypeId:(1 2 4 12 15)
    AND publicationDateISO8601:[NOW-10YEAR TO NOW]
&qs=5
&bq=publicationDateISO8601:[NOW-2YEAR TO NOW]
&fl=*,score
&hl=true
&mm=3<80%
&wt=json
&rows=20
&start=0
&df=entspellcheck
&spellcheck=true
&spellcheck.q="how to become a millionaire"~10
&spellcheck.collate=true
&spellcheck.maxCollations=30
&spellcheck.maxCollationTries=30
&spellcheck.maxCollationEvaluations=30
&spellcheck.collateExtendedResults=true
&spellcheck.collateMaxCollectDocs=30
&spellcheck.count=10
&spellcheck.extendedResults=true
&spellcheck.maxResultsForSuggest=5
&spellcheck.alternativeTermCount=10
&spellcheck.accuracy=0.5
]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry200925-183146 2020-09-25T00:00:00Z 2020-09-25T00:00:00Z Docker: Swarm Demo
a) create 3 CentOS 7 vagrant VMs
b) install docker in each VM
c) create a Docker Swarm (Swarm mode) with one manager and 2 workers
d) create a service with nginx image, update the service to use httpd image and update replicas memory limit

[acool@localhost docker-swarm-demo]$ date
Sat 22 Feb 2020 04:35:36 PM PST
[acool@localhost docker-swarm-demo]$ cat /etc/redhat-release 
Fedora release 31 (Thirty One)
[acool@localhost docker-swarm-demo]$ vagrant --version
Vagrant 2.2.6
[acool@localhost docker-swarm-demo]$ tree
.
├── vagrant-box-1
│   └── Vagrantfile
├── vagrant-box-2
│   └── Vagrantfile
└── vagrant-box-3
    └── Vagrantfile

3 directories, 3 files
[acool@localhost docker-swarm-demo]$ 
[acool@localhost docker-swarm-demo]$ cd vagrant-box-1
[acool@localhost vagrant-box-1]$ vagrant up
...
[acool@localhost vagrant-box-1]$ vagrant ssh
[vagrant@box1 ~]$
[vagrant@box1 ~]$ cat /etc/redhat-release 
CentOS Linux release 7.6.1810 (Core)
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ ip address show eth0
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 52:54:00:de:6e:43 brd ff:ff:ff:ff:ff:ff
    inet 192.168.122.102/24 brd 192.168.122.255 scope global noprefixroute dynamic eth0
       valid_lft 3307sec preferred_lft 3307sec
    inet6 fe80::5054:ff:fede:6e43/64 scope link 
       valid_lft forever preferred_lft forever
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$
[vagrant@box1 ~]$ sudo yum install docker
...
[vagrant@box1 ~]$ sudo systemctl start docker
[vagrant@box1 ~]$ sudo docker version
Client:
 Version:         1.13.1
 API version:     1.26
 Package version: docker-1.13.1-108.git4ef4b30.el7.centos.x86_64
 Go version:      go1.10.3
 Git commit:      4ef4b30/1.13.1
 Built:           Tue Jan 21 17:16:25 2020
 OS/Arch:         linux/amd64

Server:
 Version:         1.13.1
 API version:     1.26 (minimum version 1.12)
 Package version: docker-1.13.1-108.git4ef4b30.el7.centos.x86_64
 Go version:      go1.10.3
 Git commit:      4ef4b30/1.13.1
 Built:           Tue Jan 21 17:16:25 2020
 OS/Arch:         linux/amd64
 Experimental:    false
[vagrant@box1 ~]$
[vagrant@box1 ~]$
[vagrant@box1 ~]$ # disable firewall for the sake of keeping this demo simple
[vagrant@box1 ~]$ sudo systemctl disable firewalld.service
[vagrant@box1 ~]$

[acool@localhost docker-swarm-demo]$ # create box2 and box3 via vagrant

[vagrant@box2 ~]$ 
[vagrant@box2 ~]$ # install and start docker as previously shown in box1 
[vagrant@box2 ~]$ # disable firewall as previously shown in box1
[vagrant@box2 ~]$
[vagrant@box2 ~]$ ip address show eth0
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 52:54:00:e1:c4:f9 brd ff:ff:ff:ff:ff:ff
    inet 192.168.122.27/24 brd 192.168.122.255 scope global noprefixroute dynamic eth0
       valid_lft 3436sec preferred_lft 3436sec
    inet6 fe80::5054:ff:fee1:c4f9/64 scope link 
       valid_lft forever preferred_lft forever
[vagrant@box2 ~]$

[vagrant@box3 ~]$ 
[vagrant@box3 ~]$ # install and start docker as previously shown in box1 
[vagrant@box3 ~]$ # disable firewall as previously shown in box1
[vagrant@box3 ~]$
[vagrant@box3 ~]$ ip address show eth0
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 52:54:00:18:5a:8c brd ff:ff:ff:ff:ff:ff
    inet 192.168.122.88/24 brd 192.168.122.255 scope global noprefixroute dynamic eth0
       valid_lft 3323sec preferred_lft 3323sec
    inet6 fe80::5054:ff:fe18:5a8c/64 scope link 
       valid_lft forever preferred_lft forever
[vagrant@box3 ~]$ 
[vagrant@box3 ~]$ 
[vagrant@box3 ~]$ # make sure all boxes can ping each other
[vagrant@box3 ~]$ ping -c2 192.168.122.102
PING 192.168.122.102 (192.168.122.102) 56(84) bytes of data.
64 bytes from 192.168.122.102: icmp_seq=1 ttl=64 time=0.562 ms
64 bytes from 192.168.122.102: icmp_seq=2 ttl=64 time=0.619 ms

--- 192.168.122.102 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1000ms
rtt min/avg/max/mdev = 0.562/0.590/0.619/0.037 ms
[vagrant@box3 ~]$ 
[vagrant@box3 ~]$ 
[vagrant@box3 ~]$ ping -c2 192.168.122.27
PING 192.168.122.27 (192.168.122.27) 56(84) bytes of data.
64 bytes from 192.168.122.27: icmp_seq=1 ttl=64 time=0.457 ms
64 bytes from 192.168.122.27: icmp_seq=2 ttl=64 time=0.312 ms

--- 192.168.122.27 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1000ms
rtt min/avg/max/mdev = 0.312/0.384/0.457/0.075 ms
[vagrant@box3 ~]$



The gist of this demo:

[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ sudo docker swarm init --advertise-addr 192.168.122.102
Swarm initialized: current node (325hn4zrumoinjslhiw3p9c1j) is now a manager.

To add a worker to this swarm, run the following command:

    docker swarm join \
    --token SWMTKN-1-1qm592qpo4j2ka5nxqx98vizi6z9dtag4rou49zxvrr7rww72g-agsgzbalcyw0c7saupqvk90sl \
    192.168.122.102:2377

To add a manager to this swarm, run 'docker swarm join-token manager' and follow the instructions.

[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ 


[vagrant@box2 ~]$ 
[vagrant@box2 ~]$ 
[vagrant@box2 ~]$ sudo docker swarm join \
>     --token SWMTKN-1-1qm592qpo4j2ka5nxqx98vizi6z9dtag4rou49zxvrr7rww72g-agsgzbalcyw0c7saupqvk90sl \
>     192.168.122.102:2377
This node joined a swarm as a worker.
[vagrant@box2 ~]$ 
[vagrant@box2 ~]$


[vagrant@box3 ~]
[vagrant@box3 ~]
[vagrant@box3 ~]$ sudo docker swarm join \
>     --token SWMTKN-1-1qm592qpo4j2ka5nxqx98vizi6z9dtag4rou49zxvrr7rww72g-agsgzbalcyw0c7saupqvk90sl \
>     192.168.122.102:2377
This node joined a swarm as a worker.
[vagrant@box3 ~]
[vagrant@box3 ~]


[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ sudo docker node ls
ID                           HOSTNAME  STATUS  AVAILABILITY  MANAGER STATUS
325hn4zrumoinjslhiw3p9c1j *  box1      Ready   Active        Leader
78uis92n6z7lg2glmsbkzuag0    box3      Ready   Active        
ehjej7f2ol2svf4nci0k9x4if    box2      Ready   Active        
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$
[vagrant@box1 ~]$ # lets create a service
[vagrant@box1 ~]$ sudo docker service create --replicas 5 -p 80:80 --name web nginx
ytr9c94iieku7akjlp1gsq8mt
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ sudo docker service ls
ID            NAME  MODE        REPLICAS  IMAGE
ytr9c94iieku  web   replicated  0/5       nginx:latest
[vagrant@box1 ~]$
[vagrant@box1 ~]$ sudo docker service ps web
ID            NAME   IMAGE         NODE  DESIRED STATE  CURRENT STATE                   ERROR  PORTS
n4n6xun4dlmn  web.1  nginx:latest  box2  Running        Preparing 20 seconds ago               
ks1cnh8oko1r  web.2  nginx:latest  box3  Running        Running less than a second ago         
lhqha4nd2sj2  web.3  nginx:latest  box1  Running        Preparing 20 seconds ago               
dy48ok6b1clb  web.4  nginx:latest  box2  Running        Preparing 20 seconds ago               
81dkfenyjrbz  web.5  nginx:latest  box3  Running        Running less than a second ago         
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ # nginx should be available via any box ip in your browser: http://192.168.122.88/, http://192.168.122.27/ or http://192.168.122.102/
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ # we can try curl too
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ curl 192.168.122.102
...
[vagrant@box1 ~]$ curl 192.168.122.88
...
[vagrant@box1 ~]$ curl 192.168.122.27
...

[vagrant@box2 ~]$ # lets see how much memory each replica is assigned
[vagrant@box2 ~]$ 
[vagrant@box2 ~]$ sudo docker stats --no-stream
CONTAINER           CPU %               MEM USAGE / LIMIT       MEM %               NET I/O             BLOCK I/O           PIDS
19467a26755f        0.00%               1.402 MiB / 487.1 MiB   0.29%               8.65 kB / 9.52 kB   0 B / 0 B           2
427cf3658a03        0.00%               1.383 MiB / 487.1 MiB   0.28%               4.65 kB / 2.86 kB   1.83 MB / 0 B       2
[vagrant@box2 ~]$ 
[vagrant@box2 ~]$

[vagrant@box1 ~]$ # lets update each replica memory limit to 250M
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ sudo docker service update --limit-memory 250M web
web
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$


[vagrant@box3 ~]$  # verify memory adjustment
[vagrant@box3 ~]$ 
[vagrant@box3 ~]$ sudo docker stats --no-stream
CONTAINER           CPU %               MEM USAGE / LIMIT     MEM %               NET I/O             BLOCK I/O           PIDS
8990a7fa2489        0.00%               1.375 MiB / 250 MiB   0.55%               2.19 kB / 1.31 kB   0 B / 0 B           2
e6d71ec0caf8        0.00%               1.375 MiB / 250 MiB   0.55%               2.62 kB / 1.31 kB   0 B / 0 B           2
[vagrant@box3 ~]$

[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ # lets update our service with a different image, we'll try httpd instead of nginx :)
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ sudo docker service update --image httpd web
web
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ sudo docker service ps web
ID            NAME       IMAGE         NODE  DESIRED STATE  CURRENT STATE                    ERROR  PORTS
opf7ks9q5rj4  web.1      httpd:latest  box2  Running        Starting less than a second ago         
sbbs4g9shkzm   \_ web.1  nginx:latest  box2  Shutdown       Shutdown 5 seconds ago                  
n4n6xun4dlmn   \_ web.1  nginx:latest  box2  Shutdown       Shutdown 3 minutes ago                  
vvv6018iym4j  web.2      nginx:latest  box3  Running        Running 3 minutes ago                   
ks1cnh8oko1r   \_ web.2  nginx:latest  box3  Shutdown       Shutdown 3 minutes ago                  
nl0oddf682d3  web.3      nginx:latest  box1  Running        Running 3 minutes ago                   
lhqha4nd2sj2   \_ web.3  nginx:latest  box1  Shutdown       Shutdown 3 minutes ago                  
xgcgisnlz5kd  web.4      nginx:latest  box1  Running        Running 3 minutes ago                   
dy48ok6b1clb   \_ web.4  nginx:latest  box2  Shutdown       Shutdown 3 minutes ago                  
jw9btp4h734o  web.5      nginx:latest  box3  Running        Running 3 minutes ago                   
81dkfenyjrbz   \_ web.5  nginx:latest  box3  Shutdown       Shutdown 3 minutes ago                  
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ sudo docker service ls
ID            NAME  MODE        REPLICAS  IMAGE
ytr9c94iieku  web   replicated  5/5       httpd:latest
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ # all nodes should render apache httpd welcome message now! 
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ # lets increase the number of replicas
[vagrant@box1 ~]$ sudo docker service scale web=8
web scaled to 8
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ sudo docker service ls
ID            NAME  MODE        REPLICAS  IMAGE
ytr9c94iieku  web   replicated  8/8       httpd:latest
[vagrant@box1 ~]$ 
[vagrant@box1 ~]$ exit
logout
Connection to 192.168.122.102 closed.
[acool@localhost vagrant-box-1]$ 
[acool@localhost vagrant-box-1]$ 
[acool@localhost vagrant-box-1]$


Enjoy!]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry200223-012017 2020-02-23T00:00:00Z 2020-02-23T00:00:00Z Vagrant: Creating two CentOS VMs and ping each other. [acool@localhost ~]$ date
Fri 21 Feb 2020 02:53:59 PM PST
[acool@localhost ~]$
[acool@localhost ~]$ cat /etc/redhat-release
Fedora release 31 (Thirty One)
[acool@localhost ~]$
[acool@localhost ~]$ sudo dnf install vagrant-libvirt
...
[acool@localhost ~]$ vagrant --version
Vagrant 2.2.6
[acool@localhost ~]$
[acool@localhost ~]$ mkdir vagrant-box-1
[acool@localhost ~]$ cd vagrant-box-1/
[acool@localhost vagrant-box-1]$
[acool@localhost vagrant-box-1]$ vagrant init centos/7
A `Vagrantfile` has been placed in this directory. You are now
ready to `vagrant up` your first virtual environment! Please read
the comments in the Vagrantfile as well as documentation on
`vagrantup.com` for more information on using Vagrant.
[acool@localhost vagrant-box-1]
[acool@localhost vagrant-box-1]$ vagrant up
...
[acool@localhost vagrant-box-1]$
[acool@localhost vagrant-box-1]$ vagrant status
Current machine states:

default running (libvirt)

The Libvirt domain is running. To stop this machine, you can run
`vagrant halt`. To destroy the machine, you can run `vagrant destroy`.
[acool@localhost vagrant-box-1]$
[acool@localhost vagrant-box-1]$ # you can now visually access this VM via "Boxes" which is like virt-manager
[acool@localhost vagrant-box-1]$
[acool@localhost vagrant-box-1]$
[acool@localhost vagrant-box-1]$ # or you can ssh into this box via vagrant
[acool@localhost vagrant-box-1]$ vagrant ssh
Last login: Fri Feb 21 23:05:54 2020 from 192.168.122.1
[vagrant@localhost ~]$
[vagrant@localhost ~]$ cat /etc/redhat-release
CentOS Linux release 7.6.1810 (Core)
[vagrant@localhost ~]$
[vagrant@localhost ~]$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 52:54:00:7f:e1:0c brd ff:ff:ff:ff:ff:ff
inet 192.168.122.194/24 brd 192.168.122.255 scope global noprefixroute dynamic eth0
valid_lft 3068sec preferred_lft 3068sec
inet6 fe80::5054:ff:fe7f:e10c/64 scope link
valid_lft forever preferred_lft forever
[vagrant@localhost ~]$
[vagrant@localhost ~]$
[vagrant@localhost ~]$ exit
logout
Connection to 192.168.122.194 closed.
[acool@localhost vagrant-box-1]$
[acool@localhost vagrant-box-1]$
[acool@localhost vagrant-box-1]$ # lets create another box
[acool@localhost vagrant-box-1]$ cd ../ && mkdir vagrant-box-2
[acool@localhost ~]$
[acool@localhost ~]$ cd vagrant-box-2
[acool@localhost vagrant-box-2]$
[acool@localhost vagrant-box-2]$ vagrant init centos/7
A `Vagrantfile` has been placed in this directory. You are now
ready to `vagrant up` your first virtual environment! Please read
the comments in the Vagrantfile as well as documentation on
`vagrantup.com` for more information on using Vagrant.
[acool@localhost vagrant-box-2]$
[acool@localhost vagrant-box-2]$ vagrant up
...
[acool@localhost vagrant-box-2]$
[acool@localhost vagrant-box-2]$ vagrant ssh
Last login: Fri Feb 21 23:17:20 2020 from 192.168.122.1
[vagrant@localhost ~]$
[vagrant@localhost ~]$ ip a show eth0
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 52:54:00:69:74:25 brd ff:ff:ff:ff:ff:ff
inet 192.168.122.27/24 brd 192.168.122.255 scope global noprefixroute dynamic eth0
valid_lft 2908sec preferred_lft 2908sec
inet6 fe80::5054:ff:fe69:7425/64 scope link
valid_lft forever preferred_lft forever
[vagrant@localhost ~]$
[vagrant@localhost ~]$ # let's ping box-1 from box-2
[vagrant@localhost ~]$ ping -c 2 192.168.122.194
PING 192.168.122.194 (192.168.122.194) 56(84) bytes of data.
64 bytes from 192.168.122.194: icmp_seq=1 ttl=64 time=0.589 ms
64 bytes from 192.168.122.194: icmp_seq=2 ttl=64 time=0.548 ms

--- 192.168.122.194 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 999ms
rtt min/avg/max/mdev = 0.548/0.568/0.589/0.031 ms
[vagrant@localhost ~]$
[vagrant@localhost ~]$ cat /etc/redhat-release
CentOS Linux release 7.6.1810 (Core)
[vagrant@localhost ~]$ exit
logout
Connection to 192.168.122.27 closed.
[acool@localhost vagrant-box-2]$
[acool@localhost vagrant-box-2]$
[acool@localhost vagrant-box-2]$
[acool@localhost vagrant-box-2]$# le's cleanup our tests
[acool@localhost vagrant-box-2]$ vagrant destroy
...
[acool@localhost vagrant-box-1]$ vagrant destroy
]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry200221-232810 2020-02-21T00:00:00Z 2020-02-21T00:00:00Z Docker: CentOS 7 Fun. [aesteban@localhost ~]$
[aesteban@localhost ~]$
[aesteban@localhost ~]$ cat /etc/redhat-release
Fedora release 24 (Twenty Four)
[aesteban@localhost ~]$
[aesteban@localhost ~]$ sudo docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
[aesteban@localhost ~]$ sudo docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
[aesteban@localhost ~]$
[aesteban@localhost ~]$ sudo docker pull centos:7
Trying to pull repository docker.io/library/centos ...
7: Pulling from docker.io/library/centos

a02a4930cb5d: Pull complete
Digest: sha256:184e5f35598e333bfa7de10d8fb1cebb5ee4df5bc0f970bf2b1e7c7345136426
Status: Downloaded newer image for docker.io/centos:7
[aesteban@localhost ~]$
[aesteban@localhost ~]$ sudo docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
docker.io/centos 7 1e1148e4cc2c 6 days ago 201.8 MB
[aesteban@localhost ~]$ sudo docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
[aesteban@localhost ~]$ sudo docker run -d --privileged -p 80:80 docker.io/centos:7 /sbin/init
f0faf6197fbc696796333bfc81f25d537a1aba170b81f2076010222e84284b36
[aesteban@localhost ~]$
[aesteban@localhost ~]$ sudo docker exec -it f0faf6197fbc696796333bfc81f25d537a1aba170b81f2076010222e84284b36 bash
[root@f0faf6197fbc /]#
[root@f0faf6197fbc /]#
[root@f0faf6197fbc /]# yum install epel-release
...
[root@f0faf6197fbc /]#
[root@f0faf6197fbc /]#
[root@f0faf6197fbc /]# yum install nginx
...
[root@f0faf6197fbc /]#
[root@f0faf6197fbc /]#
[root@f0faf6197fbc /]# systemctl enable nginx
Created symlink from /etc/systemd/system/multi-user.target.wants/nginx.service to /usr/lib/systemd/system/nginx.service.
[root@f0faf6197fbc /]#
[root@f0faf6197fbc /]# systemctl start nginx
[root@f0faf6197fbc /]#
[root@f0faf6197fbc /]# systemctl status nginx
● nginx.service - The nginx HTTP and reverse proxy server
Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; vendor preset: disabled)
Active: active (running) since Wed 2018-12-12 02:55:32 UTC; 4s ago
Process: 2643 ExecStart=/usr/sbin/nginx (code=exited, status=0/SUCCESS)
Process: 2642 ExecStartPre=/usr/sbin/nginx -t (code=exited, status=0/SUCCESS)
Process: 2641 ExecStartPre=/usr/bin/rm -f /run/nginx.pid (code=exited, status=0/SUCCESS)
Main PID: 2644 (nginx)
CGroup: /system.slice/docker-f0faf6197fbc696796333bfc81f25d537a1aba170b81f2076010222e84284b36.scope/system.slice/nginx.service
├─2644 nginx: master process /usr/sbin/nginx
├─2645 nginx: worker process
├─2646 nginx: worker process
├─2647 nginx: worker process
└─2648 nginx: worker process

Dec 12 02:55:31 f0faf6197fbc systemd[1]: Starting The nginx HTTP and reverse proxy server...
Dec 12 02:55:31 f0faf6197fbc nginx[2642]: nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
Dec 12 02:55:31 f0faf6197fbc nginx[2642]: nginx: configuration file /etc/nginx/nginx.conf test is successful
Dec 12 02:55:32 f0faf6197fbc systemd[1]: Started The nginx HTTP and reverse proxy server.
[root@f0faf6197fbc /]#
[root@f0faf6197fbc /]#
[root@f0faf6197fbc /]#
[root@f0faf6197fbc /]# exit
exit
[aesteban@localhost ~]$
[aesteban@localhost ~]$ # localhost should now be accessible in browser
[aesteban@localhost ~]$
[aesteban@localhost ~]$
[aesteban@localhost ~]$
[aesteban@localhost ~]$ sudo docker exec -it f0faf6197fbc systemctl status nginx
● nginx.service - The nginx HTTP and reverse proxy server
Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; vendor preset: disabled)
Active: active (running) since Wed 2018-12-12 02:55:32 UTC; 1min 57s ago
Process: 2643 ExecStart=/usr/sbin/nginx (code=exited, status=0/SUCCESS)
Process: 2642 ExecStartPre=/usr/sbin/nginx -t (code=exited, status=0/SUCCESS)
Process: 2641 ExecStartPre=/usr/bin/rm -f /run/nginx.pid (code=exited, status=0/SUCCESS)
Main PID: 2644 (nginx)
CGroup: /system.slice/docker-f0faf6197fbc696796333bfc81f25d537a1aba170b81f2076010222e84284b36.scope/system.slice/nginx.service
├─2644 nginx: master process /usr/sbin/nginx
├─2645 nginx: worker process
├─2646 nginx: worker process
├─2647 nginx: worker process
└─2648 nginx: worker process

Dec 12 02:55:31 f0faf6197fbc systemd[1]: Starting The nginx HTTP and reverse proxy server...
Dec 12 02:55:31 f0faf6197fbc nginx[2642]: nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
Dec 12 02:55:31 f0faf6197fbc nginx[2642]: nginx: configuration file /etc/nginx/nginx.conf test is successful
Dec 12 02:55:32 f0faf6197fbc systemd[1]: Started The nginx HTTP and reverse proxy server.
[aesteban@localhost ~]$
[aesteban@localhost ~]$
[aesteban@localhost ~]$
[aesteban@localhost ~]$
[aesteban@localhost ~]$
[aesteban@localhost ~]$ sudo docker exec -it f0faf6197fbc bash
[root@f0faf6197fbc /]#
[root@f0faf6197fbc /]#
[root@f0faf6197fbc /]#
[root@f0faf6197fbc /]# systemctl status postfix
Unit postfix.service could not be found.
[root@f0faf6197fbc /]#
[root@f0faf6197fbc /]# systemctl status memcached
Unit memcached.service could not be found.
[root@f0faf6197fbc /]#
[root@f0faf6197fbc /]#
[root@f0faf6197fbc /]# # We can install postfix and memcached with yum using the same procedure!
[root@f0faf6197fbc /]#
[root@f0faf6197fbc /]# # Exercise Done :) !! ]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry181212-030136 2018-12-12T00:00:00Z 2018-12-12T00:00:00Z PostgreSQL Fun
#Fedora 23
[acool@localhost ~]$ sudo dnf install postgresql-server.x86_64
[acool@localhost ~]$ sudo postgresql-setup --initdb
[acool@localhost ~]$ sudo systemctl start postgresql
[acool@localhost ~]$ sudo su - postgres
-bash-4.3$
-bash-4.3$
-bash-4.3$ createuser --pwprompt acool
Enter password for new role:
Enter it again:
-bash-4.3$
-bash-4.3$
-bash-4.3$ psql
psql (9.4.9)
Type "help" for help.
postgres=#
postgres=#
postgres=#
postgres-# # list databases
postgres-# \l
List of databases
Name | Owner | Encoding | Collate | Ctype | Access privileges
-----------+----------+----------+-------------+-------------+-----------------------
postgres | postgres | UTF8 | en_US.UTF-8 | en_US.UTF-8 |
template0 | postgres | UTF8 | en_US.UTF-8 | en_US.UTF-8 | =c/postgres +
| | | | | postgres=CTc/postgres
template1 | postgres | UTF8 | en_US.UTF-8 | en_US.UTF-8 | =c/postgres +
| | | | | postgres=CTc/postgres
(3 rows)

postgres-#
postgres-# #list users (roles)
postgres-# \du
List of roles
Role name | Attributes | Member of
-----------+------------------------------------------------+-----------
acool | | {}
postgres | Superuser, Create role, Create DB, Replication | {}

postgres-#
postgres=#
postgres=# ALTER USER acool SUPERUSER;
ALTER ROLE
postgres=# ALTER USER acool CREATEROLE;
ALTER ROLE
postgres=# ALTER USER acool CREATEDB;
ALTER ROLE
postgres=# ALTER USER acool REPLICATION;
ALTER ROLE
postgres=# \du
List of roles
Role name | Attributes | Member of
-----------+------------------------------------------------+-----------
acool | Superuser, Create role, Create DB, Replication | {}
postgres | Superuser, Create role, Create DB, Replication | {}

postgres=#


[acool@localhost ~]$
[acool@localhost ~]$
[acool@localhost ~]$ cat postgresql-test.sql
CREATE TABLE soccer_teams
(
name varchar(250),
city varchar(250)
);
[acool@localhost ~]$
[acool@localhost ~]$ createdb my-db-test
[acool@localhost ~]$
[acool@localhost ~]$ psql -d my-db-test
psql (9.4.9)
Type "help" for help.

my-db-test=#
my-db-test=#
my-db-test=# \i postgresql-test.sql
CREATE TABLE
my-db-test=#
my-db-test=# \dt
List of relations
Schema | Name | Type | Owner
--------+--------------+-------+-------
public | soccer_teams | table | acool
(1 row)

my-db-test=#
my-db-test-#
my-db-test-# \d+ soccer_teams
Table "public.soccer_teams"
Column | Type | Modifiers | Storage | Stats target | Description
--------+------------------------+-----------+----------+--------------+-------------
name | character varying(250) | | extended | |
city | character varying(250) | | extended | |

my-db-test=#
my-db-test=# INSERT INTO soccer_teams(name,city) VALUES('LA Galaxy','Los Angeles');
INSERT 0 1
my-db-test=#
my-db-test=# SELECT * FROM soccer_teams;
name | city
-----------+-------------
LA Galaxy | Los Angeles
(1 row)

my-db-test-#
my-db-test-# \q
[acool@localhost ~]$
[acool@localhost ~]$
[acool@localhost ~]$ psql -V
psql (PostgreSQL) 9.4.9
[acool@localhost ~]$
[acool@localhost ~]$
[acool@localhost ~]$

// other crap
postgres=# #delete user (without roles?, DROP ROLE acool works too?, objects depend on it?)
postgres=# DROP USER acool;
DROP ROLE
]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry180506-013458 2018-05-06T00:00:00Z 2018-05-06T00:00:00Z AWS Notes 

#list s3 buckets
[acool@acool2 www]$ aws s3 ls

#list files in bucket
[acool@acool2 www]$ aws s3 ls s3://logs-fastly/www/
...
[aesteban@localhost ~]$ aws s3 ls s3://my-db-backup/all_dbs-2019-10-08/ --human-readable --summarize
...


#downloading a list of files from bucket
[acool@acool2 www]$ for i in  x.log y.log z.log; do aws s3 cp "s3://logs-fastly/www/$i" .; done
]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry180504-224203 2018-05-04T00:00:00Z 2018-05-04T00:00:00Z Docker: Tasks 101 

# installing docker (1.10.3)
[aesteban@localhost ~]$ sudo dnf install docker

# start and enable it
[aesteban@localhost ~]$ sudo systemctl start docker
[aesteban@localhost ~]$ sudo systemctl enable docker

# download and run hello-world image
[aesteban@localhost ~]$ sudo docker run hello-world 

# download ubuntu image and run it
[aesteban@localhost ~]$ sudo docker run -it ubuntu bash

# listing images
[aesteban@localhost ~]$
[aesteban@localhost ~]$ sudo docker images
REPOSITORY              TAG                 IMAGE ID            CREATED             SIZE
docker.io/hello-world   latest              e38bc07ac18e        3 hours ago         1.848 kB
docker.io/ubuntu        latest              f975c5035748        5 weeks ago         112.4 MB
[aesteban@localhost ~]$ 

# listing all containers
[aesteban@localhost ~]$ 
[aesteban@localhost ~]$ sudo docker ps -a
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS                     PORTS               NAMES
61d35d591f53        ubuntu              "bash"              3 minutes ago       Exited (0) 3 minutes ago                       clever_brahmagupta
1c61c7a6f4d7        hello-world         "/hello"            4 minutes ago       Exited (0) 4 minutes ago                       tiny_boyd
[aesteban@localhost ~]$ 

# removing a container (container id)
[aesteban@localhost ~]$ 
[aesteban@localhost ~]$ sudo docker rm 61d35d591f53
61d35d591f53
[aesteban@localhost ~]$ 

# removing an image (image id)
[aesteban@localhost ~]$ sudo docker rmi f975c5035748
Untagged: docker.io/ubuntu:latest
Untagged: docker.io/ubuntu@sha256:e348fbbea0e0a0e73ab0370de151e7800684445c509d46195aef73e090a49bd6
Deleted: sha256:f975c50357489439eb9145dbfa16bb7cd06c02c31aa4df45c77de4d2baa4e232
Deleted: sha256:0bd983fc698ee9453dd7d21f8572ea1016ec9255346ceabb0f9e173b4348644f
Deleted: sha256:08fe90e1a1644431accc00cc80f519f4628dbf06a653c76800b116d3333d2b6d
Deleted: sha256:5dc5eef2b94edd185b4d39586e7beb385a54b6bac05d165c9d47494492448235
Deleted: sha256:14a40a140881d18382e13b37588b3aa70097bb4f3fb44085bc95663bdc68fe20
Deleted: sha256:a94e0d5a7c404d0e6fa15d8cd4010e69663bd8813b5117fbad71365a73656df9
[aesteban@localhost ~]$ 

# deleting all containers
[aesteban@localhost ~]$ sudo docker rm $(sudo docker ps -a -q)
1c61c7a6f4d7
[aesteban@localhost ~]$ 

# deleting all images
[aesteban@localhost ~]$ 
[aesteban@localhost ~]$ sudo docker rmi $(sudo docker images -q)
Untagged: docker.io/hello-world:latest
Untagged: docker.io/hello-world@sha256:6c88d0eedd6a5e71f0affaf150f8b7b286c7bdc679f23d726d12781803e727d3
Deleted: sha256:e38bc07ac18ee64e6d59cf2eafcdddf9cec2364dfe129fe0af75f1b0194e0c96
Deleted: sha256:2b8cbd0846c5aeaa7265323e7cf085779eaf244ccbdd982c4931aef9be0d2faf
[aesteban@localhost ~]$ 

# installing docker-compose
[aesteban@localhost ~]$ sudo dnf install docker-compose

# saving a modified container (eg. after installing RPMs)
[aesteban@localhost ~]$ sudo docker commit "container-id" "image_name" # repo name

#
[aesteban@localhost ~]$ sudo docker start "container-id"

#
[aesteban@localhost ~]$ sudo docker attach "container-id"

# exporting an image to a file
[aesteban@localhost ~]$ sudo docker save "image-id" | gzip -c image_name.tgz

# importing an image from a file
[aesteban@localhost ~]$ sudo docker load < image_name.tgz

# sample docker-compose.yml
[aesteban@localhost docker-practice]$ cat docker-compose.yml 
web:
 image: nginx:latest
 ports:
  - "8888:80"
 volumes:
  - ./code:/code
  - ./site.conf:/etc/nginx/conf.d/site.conf
 links:
  - php
php:
    image: cytopia/php-fpm-7.1 # could also be and id (imageid? or containerid? I think the first.) 
    volumes:
      - ./code/:/code/
[aesteban@localhost docker-practice]$

# executing docker-compose.yml
[aesteban@localhost docker-practice]$ sudo docker-compose up
...

# sample docker file
[aesteban@localhost docker-practice]$ cat Dockerfile 
FROM miveo/centos-php-fpm:7.1
RUN yum -y install php71u-pecl-memcached.x86_64
[aesteban@localhost docker-practice]$
[aesteban@localhost docker-practice]$

# building a docker file
[aesteban@localhost docker-practice]$ sudo docker build  -t ent:ent .
...

# verifying build
[aesteban@localhost docker-practice]$ 
[aesteban@localhost docker-practice]$ sudo docker images
REPOSITORY                       TAG                 IMAGE ID            CREATED              SIZE
ent                              ent                 3d83d51abac9        About a minute ago   429.3 MB
docker.io/nginx                  latest              b175e7467d66        27 hours ago         108.9 MB
docker.io/cytopia/php-fpm-7.1    latest              927ad858fb6a        7 months ago         1.098 GB
docker.io/miveo/centos-php-fpm   7.1                 95cae7821f24        15 months ago        287.6 MB
[aesteban@localhost docker-practice]$ 
[aesteban@localhost docker-practice]$ sudo docker run -it 3d83d51abac9  bash
[root@43bb9a049b54 /]# 
[root@43bb9a049b54 /]# rpm -qa | grep php | grep memcached
php71u-pecl-memcached-3.0.4-2.ius.centos7.x86_64
[root@43bb9a049b54 /]# 
[root@43bb9a049b54 /]#


12/11/2018

#stop container id
[aesteban@localhost docker-practice-2]$ sudo docker stop 2d900ed18675
2d900ed18675
[aesteban@localhost docker-practice-2]$
]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry180411-220752 2018-04-11T00:00:00Z 2018-04-11T00:00:00Z Virsh: Moving a VM image to a new machine. 2.- Output the xml definition file in the source machine:
[acool@oldmachine ~]$sudo virsh dumpxml VMNAME > VMNAME.xml

3.- Adjust path of .img file image in xml file as needed.
4.- On the destination machine define the new VM:
[acool@newmachine ~]$sudo virsh define VMNAME.xml

5.- Start VM.

Big shout-out to dyasny.]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry171020-180737 2017-10-20T00:00:00Z 2017-10-20T00:00:00Z Ansible: Tasks 101
-Angel

[acool@hydra2 ansible]$ # running a playbook
[acool@hydra2 ansible]$ ansible-playbook dev-hosts-playbook.yml -i dev-hosts.txt 
[acool@hydra2 ansible]$
[acool@hydra2 ansible]$# content of dev-hosts.txt
[acool@hydra2 ansible]$ cat dev-hosts.txt 
acool2.10-network.net ansible_user=root
userA_2.10-network.net ansible_user=root
userB_2.10-network.net ansible_user=root
userC_2.10-network.net ansible_user=root


[acool@hydra2 ansible]$ 
[acool@hydra2 ansible]$ # playbook content
[acool@hydra2 ansible]$ cat dev-hosts-playbook.yml 
---
- hosts: all
  tasks:
  - name: Installing EPEL repo.
    yum: pkg=epel-release.noarch state=installed
  - name : Installing RPMs
    yum: pkg={{item}} state=installed
    with_items:
        - centos-release-scl
        - centos-release-scl-rh
        - rh-php70
        - rh-php70-php-mysqlnd
        - rh-php70-php-bcmath
        - rh-php70-php-gd
        - rh-php70-php-soap
        - rh-php70-php-mbstring
        - rh-php70-php-fpm
        - sclo-php70-php-pecl-memcached
        - git
        #- rabbitmq-server
        - openvpn
        - nginx
        - composer
        - memcached
        - npm
        - http-parser
  - name: Open firewall ports
    firewalld:
        port: "{{item.port}}/tcp"
        zone: public
        permanent: true
        state: enabled
        immediate: yes
    with_items:
        - { port: '80' }
        - { port: '443' }        
  - name: Starting services.
    action: service name={{item}} state=started enabled=yes
    with_items:
        - nginx
        - memcached
        - rh-php70-php-fpm
  - name: Enabling php 7
    copy:
        src: /home/acool/ansible/files/dev-vms/rh-php70.sh
        dest: /etc/profile.d/rh-php70.sh
  - name: Setting SELINUX to permissive.
    selinux:
        policy: targeted
        state: permissive
  - name: Copying nginx config files
    template:
        src: /home/acool/ansible/templates/dev-vms/10-network-net.conf
        dest: /etc/nginx/conf.d/10-network-net.conf
  - name: Installing gulp globally.
    command: npm install gulp -g
[acool@hydra2 ansible]$ 
[acool@hydra2 ansible]$
[acool@hydra2 ansible]$
[acool@hydra2 ansible]$
[acool@hydra2 ansible]$ 
[acool@hydra2 ansible]$ 
[acool@hydra2 ansible]$ # Ad-Hoc commands, -i stands for inventory and -l for limit
[acool@hydra2 ansible]$  ansible all -i dev-hosts.txt -a 'free -h' -l acool2.10-network.net
acool2.10-network.net | SUCCESS | rc=0 >>
              total        used        free      shared  buff/cache   available
Mem:           1.8G        142M        1.5G        8.6M        165M        1.5G
Swap:          2.0G          0B        2.0G

[acool@hydra2 ansible]$ 
[acool@hydra2 ansible]$



9/1/2018 - more stuff :)
[aesteban@localhost ansible]$ ## adding a new role
[aesteban@localhost ansible]$ ansible-galaxy init roles/dev --offline
[aesteban@localhost ansible]$
[aesteban@localhost ansible]$ ll roles/
total 16
drwxrwxr-x 8 aesteban aesteban 4096 Sep  1 13:04 app
drwxrwxr-x 8 aesteban aesteban 4096 Sep  1 11:17 cms
drwxrwxr-x 8 aesteban aesteban 4096 Sep  1 11:10 common
drwxrwxr-x 8 aesteban aesteban 4096 Sep  1 13:04 dev
[aesteban@localhost ansible]$ 
[aesteban@localhost ansible]$ 
[aesteban@localhost ansible]$ ls -l
total 32
-rw-rw-r-- 1 aesteban aesteban   62 Sep  1 12:43 app-machines.yml
-rw-rw-r-- 1 aesteban aesteban   62 Sep  1 12:43 cms-machines.yml
-rw-rw-r-- 1 aesteban aesteban   70 Sep  1 16:24 dev-machines.yml
drwxrwxr-x 2 aesteban aesteban 4096 Sep  1 12:48 files
-rw-rw-r-- 1 aesteban aesteban   65 Sep  1 16:19 hosts.txt
drwxrwxr-x 6 aesteban aesteban 4096 Sep  1 13:04 roles
drwxrwxr-x 2 aesteban aesteban 4096 Sep  1 11:10 templates
[aesteban@localhost ansible]$
[aesteban@localhost ansible]$
[aesteban@localhost ansible]$ ansible-playbook -i hosts.txt dev-machines.yml --check --limit "dev3.example.com"
...
[aesteban@localhost ansible]$
[aesteban@localhost ansible]$ cat hosts.txt 
[devmachines]
dev3.example.com

[cmsmachines]

[appmachies]
[aesteban@localhost ansible]$ 
[aesteban@localhost ansible]$ ansible --version
ansible 2.3.1.0
  config file = /etc/ansible/ansible.cfg
  configured module search path = Default w/o overrides
  python version = 2.7.13 (default, May 10 2017, 20:04:36) [GCC 6.3.1 20161221 (Red Hat 6.3.1-1)]
[aesteban@localhost ansible]$ 
[aesteban@localhost ansible]$ 
[aesteban@localhost ansible]$ ansible-playbook -i hosts.txt dev-machines.yml  --syntax-check

playbook: dev-machines.yml
[aesteban@localhost ansible]$
]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry170716-003842 2017-07-16T00:00:00Z 2017-07-16T00:00:00Z LVM - Logical Volume Manager Commands 101 [aesteban@localhost ~]$ # PVS, VGS and LVS commands
[aesteban@localhost ~]$
[aesteban@localhost ~]$ sudo pvs
PV VG Fmt Attr PSize PFree
/dev/sda2 fedora lvm2 a-- 237.98g 4.00m
[aesteban@localhost ~]$
[aesteban@localhost ~]$ sudo vgs
VG #PV #LV #SN Attr VSize VFree
fedora 1 3 0 wz--n- 237.98g 4.00m
[aesteban@localhost ~]$
[aesteban@localhost ~]$ sudo lvs
LV VG Attr LSize Pool Origin Data% Meta% Move Log Cpy%Sync Convert
home fedora -wi-ao---- 180.17g
root fedora -wi-ao---- 50.00g
swap fedora -wi-ao---- 7.81g
[aesteban@localhost ~]$
[aesteban@localhost ~]$ 
[aesteban@localhost ~]$ # LVSCAN and LVDISPLAY commands
[aesteban@localhost ~]$ 
[aesteban@localhost ~]$ sudo lvscan 
  ACTIVE            '/dev/fedora/swap' [7.81 GiB] inherit
  ACTIVE            '/dev/fedora/home' [180.17 GiB] inherit
  ACTIVE            '/dev/fedora/root' [50.00 GiB] inherit
[aesteban@localhost ~]$ 
[aesteban@localhost ~]$ sudo lvdisplay /dev/fedora/home
  --- Logical volume ---
  LV Path                /dev/fedora/home
  LV Name                home
  VG Name                fedora
  LV UUID                V6WFgj-PA3l-TYA7-fZ2J-IC0z-3yL4-4Rttov
  LV Write Access        read/write
  LV Creation host, time localhost.localdomain, 2016-10-19 10:59:08 -0700
  LV Status              available
  # open                 1
  LV Size                180.17 GiB
  Current LE             46123
  Segments               1
  Allocation             inherit
  Read ahead sectors     auto
  - currently set to     256
  Block device           253:2
   
[aesteban@localhost ~]$ 
[aesteban@localhost ~]$ 

[aesteban@localhost ~]$ 
[aesteban@localhost ~]$ sudo lvm
lvm> 
lvm> 
lvm> 
lvm> lvscan
  ACTIVE            '/dev/fedora/swap' [7.81 GiB] inherit
  ACTIVE            '/dev/fedora/home' [180.17 GiB] inherit
  ACTIVE            '/dev/fedora/root' [50.00 GiB] inherit
lvm> 
lvm>


Physical volumes commands:
pvcreate
pvmove
pvresize
...etc.

Volume groups commands:
vgcreate
vgextend
vgconvert
vgreduce
...etc.

Logical volumes commands:
lvmcache
lvmthin
lvconvert
lvchange
lvextend
lvreduce
lvremove
lvrename
...etc.

See new kid on the block (as of 2017) : SSM, system storage manager.
]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry170426-014224 2017-04-26T00:00:00Z 2017-04-26T00:00:00Z CentOS 7: Recovering data from RAID 1 member. 

[acool@localhost sdX]$ #connect surviving hd in any available sata port,
[acool@localhost sdX]$ #copy partition from surviving HD (sdd)
[acool@localhost sdX]$ sudo dd if=/dev/sdd1 of=./sdX1.img status=progress
[acool@localhost sdX]$
[acool@localhost sdX]$
[acool@localhost sdX]$ #set image as loop device
[acool@localhost sdX]$ sudo losetup /dev/loop200 sdX1.img 
[acool@localhost sdX]$
[acool@localhost sdX]$
[acool@localhost sdX]$ 
[acool@localhost sdX]$ #examine raid1 member 
[acool@localhost sdX]$ sudo mdadm --examine /dev/loop200 
/dev/loop200:
          Magic : a92b4efc
        Version : 1.2
    Feature Map : 0x1
     Array UUID : 626c8ef2:f11c73eb:d3fb3366:bbf7a200
           Name : localhost.localdomain:root  (local to host localhost.localdomain)
  Creation Time : Thu Jan 19 10:05:17 2017
     Raid Level : raid1
   Raid Devices : 3

 Avail Dev Size : 25165824 (12.00 GiB 12.88 GB)
     Array Size : 12582912 (12.00 GiB 12.88 GB)
    Data Offset : 16384 sectors
   Super Offset : 8 sectors
   Unused Space : before=16296 sectors, after=0 sectors
          State : clean
    Device UUID : 626c8ef2:f11c73eb:d3fb3366:bbf7ae4b

Internal Bitmap : 8 sectors from superblock
    Update Time : Sat Jan 28 23:33:56 2017
  Bad Block Log : 512 entries available at offset 72 sectors
       Checksum : b33f59c9 - correct
         Events : 1540


   Device Role : Active device 0
   Array State : AAA ('A' == active, '.' == missing, 'R' == replacing)
[acool@localhost sdX]$ 
[acool@localhost sdX]$
[acool@localhost sdX]$ # reassemble array (I had to change UUID)
[acool@localhost sdX]$ sudo mdadm --assemble --run --force /dev/md200 --update=uuid --uuid=626c8ef2:f11c73eb:d3fb3366:bbf7a200 /dev/loop200
mdadm: /dev/md200 has been started with 1 drive (out of 3).
[acool@localhost sdX]$
[acool@localhost sdX]$
[acool@localhost sdX]$
[acool@localhost sdX]$ sudo mdadm --detail /dev/md200
/dev/md200:
        Version : 1.2
  Creation Time : Thu Jan 19 10:05:17 2017
     Raid Level : raid1
     Array Size : 12582912 (12.00 GiB 12.88 GB)
  Used Dev Size : 12582912 (12.00 GiB 12.88 GB)
   Raid Devices : 3
  Total Devices : 1
    Persistence : Superblock is persistent

  Intent Bitmap : Internal

    Update Time : Sat Jan 28 23:33:56 2017
          State : clean, degraded 
 Active Devices : 1
Working Devices : 1
 Failed Devices : 0
  Spare Devices : 0

           Name : localhost.localdomain:root  (local to host localhost.localdomain)
           UUID : 626c8ef2:f11c73eb:d3fb3366:bbf7a200
         Events : 1540

    Number   Major   Minor   RaidDevice State
       0       7      200        0      active sync   /dev/loop200
       -       0        0        1      removed
       -       0        0        2      removed
[acool@localhost sdX]$ 
[acool@localhost sdX]$ 
[acool@localhost sdX]$ # mount md device in order to access content
[acool@localhost sdX]$ sudo mount /dev/md200 sdX1_mount/
[acool@localhost sdX]$
[acool@localhost sdX]$
[acool@localhost sdX]$ # you can now ls sdX1_mount directory to see contents
[acool@localhost sdX]$
[acool@localhost sdX]$ #also, see partscan option in losetup
]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry170211-195449 2017-02-11T00:00:00Z 2017-02-11T00:00:00Z FDISK - GDISK: List of known partition types 
[aesteban@localhost ~]$ 
[aesteban@localhost ~]$ sudo fdisk /dev/sda

Welcome to fdisk (util-linux 2.28.2).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.


Command (m for help): l

 0  Empty           24  NEC DOS         81  Minix / old Lin bf  Solaris        
 1  FAT12           27  Hidden NTFS Win 82  Linux swap / So c1  DRDOS/sec (FAT-
 2  XENIX root      39  Plan 9          83  Linux           c4  DRDOS/sec (FAT-
 3  XENIX usr       3c  PartitionMagic  84  OS/2 hidden or  c6  DRDOS/sec (FAT-
 4  FAT16 <32M      40  Venix 80286     85  Linux extended  c7  Syrinx         
 5  Extended        41  PPC PReP Boot   86  NTFS volume set da  Non-FS data    
 6  FAT16           42  SFS             87  NTFS volume set db  CP/M / CTOS / .
 7  HPFS/NTFS/exFAT 4d  QNX4.x          88  Linux plaintext de  Dell Utility   
 8  AIX             4e  QNX4.x 2nd part 8e  Linux LVM       df  BootIt         
 9  AIX bootable    4f  QNX4.x 3rd part 93  Amoeba          e1  DOS access     
 a  OS/2 Boot Manag 50  OnTrack DM      94  Amoeba BBT      e3  DOS R/O        
 b  W95 FAT32       51  OnTrack DM6 Aux 9f  BSD/OS          e4  SpeedStor      
 c  W95 FAT32 (LBA) 52  CP/M            a0  IBM Thinkpad hi ea  Rufus alignment
 e  W95 FAT16 (LBA) 53  OnTrack DM6 Aux a5  FreeBSD         eb  BeOS fs        
 f  W95 Ext'd (LBA) 54  OnTrackDM6      a6  OpenBSD         ee  GPT            
10  OPUS            55  EZ-Drive        a7  NeXTSTEP        ef  EFI (FAT-12/16/
11  Hidden FAT12    56  Golden Bow      a8  Darwin UFS      f0  Linux/PA-RISC b
12  Compaq diagnost 5c  Priam Edisk     a9  NetBSD          f1  SpeedStor      
14  Hidden FAT16 <3 61  SpeedStor       ab  Darwin boot     f4  SpeedStor      
16  Hidden FAT16    63  GNU HURD or Sys af  HFS / HFS+      f2  DOS secondary  
17  Hidden HPFS/NTF 64  Novell Netware  b7  BSDI fs         fb  VMware VMFS    
18  AST SmartSleep  65  Novell Netware  b8  BSDI swap       fc  VMware VMKCORE 
1b  Hidden W95 FAT3 70  DiskSecure Mult bb  Boot Wizard hid fd  Linux raid auto
1c  Hidden W95 FAT3 75  PC/IX           bc  Acronis FAT32 L fe  LANstep        
1e  Hidden W95 FAT1 80  Old Minix       be  Solaris boot    ff  BBT            

Command (m for help): quit

[aesteban@localhost ~]$ 
[aesteban@localhost ~]$


GDISK
[aesteban@localhost ~]$ 
[aesteban@localhost ~]$ sudo gdisk /dev/sda
GPT fdisk (gdisk) version 1.0.1

Partition table scan:
  MBR: MBR only
  BSD: not present
  APM: not present
  GPT: not present


***************************************************************
Found invalid GPT and valid MBR; converting MBR to GPT format
in memory. THIS OPERATION IS POTENTIALLY DESTRUCTIVE! Exit by
typing 'q' if you don't want to convert your MBR partitions
to GPT format!
***************************************************************


Command (? for help): l
0700 Microsoft basic data  0c01 Microsoft reserved    2700 Windows RE          
3000 ONIE boot             3001 ONIE config           3900 Plan 9              
4100 PowerPC PReP boot     4200 Windows LDM data      4201 Windows LDM metadata
4202 Windows Storage Spac  7501 IBM GPFS              7f00 ChromeOS kernel     
7f01 ChromeOS root         7f02 ChromeOS reserved     8200 Linux swap          
8300 Linux filesystem      8301 Linux reserved        8302 Linux /home         
8303 Linux x86 root (/)    8304 Linux x86-64 root (/  8305 Linux ARM64 root (/)
8306 Linux /srv            8307 Linux ARM32 root (/)  8400 Intel Rapid Start   
8e00 Linux LVM             a500 FreeBSD disklabel     a501 FreeBSD boot        
a502 FreeBSD swap          a503 FreeBSD UFS           a504 FreeBSD ZFS         
a505 FreeBSD Vinum/RAID    a580 Midnight BSD data     a581 Midnight BSD boot   
a582 Midnight BSD swap     a583 Midnight BSD UFS      a584 Midnight BSD ZFS    
a585 Midnight BSD Vinum    a600 OpenBSD disklabel     a800 Apple UFS           
a901 NetBSD swap           a902 NetBSD FFS            a903 NetBSD LFS          
a904 NetBSD concatenated   a905 NetBSD encrypted      a906 NetBSD RAID         
ab00 Recovery HD           af00 Apple HFS/HFS+        af01 Apple RAID          
af02 Apple RAID offline    af03 Apple label           af04 AppleTV recovery    
af05 Apple Core Storage    bc00 Acronis Secure Zone   be00 Solaris boot        
bf00 Solaris root          bf01 Solaris /usr & Mac Z  bf02 Solaris swap        
bf03 Solaris backup        bf04 Solaris /var          bf05 Solaris /home       
bf06 Solaris alternate se  bf07 Solaris Reserved 1    bf08 Solaris Reserved 2  
Press the <Enter> key to see more codes: 
bf09 Solaris Reserved 3    bf0a Solaris Reserved 4    bf0b Solaris Reserved 5  
c001 HP-UX data            c002 HP-UX service         ea00 Freedesktop $BOOT   
eb00 Haiku BFS             ed00 Sony system partitio  ed01 Lenovo system partit
ef00 EFI System            ef01 MBR partition scheme  ef02 BIOS boot partition 
f800 Ceph OSD              f801 Ceph dm-crypt OSD     f802 Ceph journal        
f803 Ceph dm-crypt journa  f804 Ceph disk in creatio  f805 Ceph dm-crypt disk i
fb00 VMWare VMFS           fb01 VMWare reserved       fc00 VMWare kcore crash p
fd00 Linux RAID            

Command (? for help): quit
[aesteban@localhost ~]$ 
[aesteban@localhost ~]$
]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry170210-204159 2017-02-10T00:00:00Z 2017-02-10T00:00:00Z Centos 7: Replace not-yet-failed RAID1 memeber with a new hd. (DRAFT)
Replace not-yet-failed RAID1 memeber with a new hd (sdd).
(http://unix.stackexchange.com/questions/74924/how-to-safely-replace-a-not-yet-failed-disk-in-a-linux-raid5-array)



// versions
[acool@localhost ~]$ 
[acool@localhost ~]$ cat /etc/redhat-release 
CentOS Linux release 7.3.1611 (Core) 
[acool@localhost ~]$ 
[acool@localhost ~]$ mdadm --version
mdadm - v3.4 - 28th January 2016
[acool@localhost ~]$ 
[acool@localhost ~]$



//check devices
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo lsblk 
[sudo] password for acool: 
NAME      MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINT
sda         8:0    0 465.8G  0 disk  
├─sda1      8:1    0    12G  0 part  
│ └─md127   9:127  0    12G  0 raid1 /
├─sda2      8:2    0   6.9G  0 part  
│ └─md126   9:126  0   6.9G  0 raid1 [SWAP]
├─sda3      8:3    0     1G  0 part  
│ └─md125   9:125  0     1G  0 raid1 /boot
├─sda4      8:4    0   201M  0 part  
│ └─md123   9:123  0   201M  0 raid1 /boot/efi
└─sda5      8:5    0    12G  0 part  
  └─md124   9:124  0    12G  0 raid1 /home
sdb         8:16   0  55.9G  0 disk  
├─sdb1      8:17   0    12G  0 part  
│ └─md127   9:127  0    12G  0 raid1 /
├─sdb2      8:18   0   6.9G  0 part  
│ └─md126   9:126  0   6.9G  0 raid1 [SWAP]
├─sdb3      8:19   0     1G  0 part  
│ └─md125   9:125  0     1G  0 raid1 /boot
├─sdb4      8:20   0   201M  0 part  
│ └─md123   9:123  0   201M  0 raid1 /boot/efi
└─sdb5      8:21   0    12G  0 part  
  └─md124   9:124  0    12G  0 raid1 /home
sdc         8:32   0 232.9G  0 disk  
├─sdc1      8:33   0    12G  0 part  
│ └─md127   9:127  0    12G  0 raid1 /
├─sdc2      8:34   0   6.9G  0 part  
│ └─md126   9:126  0   6.9G  0 raid1 [SWAP]
├─sdc3      8:35   0     1G  0 part  
│ └─md125   9:125  0     1G  0 raid1 /boot
├─sdc4      8:36   0   201M  0 part  
│ └─md123   9:123  0   201M  0 raid1 /boot/efi
└─sdc5      8:37   0    12G  0 part  
  └─md124   9:124  0    12G  0 raid1 /home
sdd         8:48   0 111.8G  0 disk  
├─sdd1      8:49   0 111.8G  0 part  
└─sdd5      8:53   0     4G  0 part  
sr0        11:0    1  1024M  0 rom   
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 

//check partitions

[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo fdisk -l /dev/sd?
WARNING: fdisk GPT support is currently new, and therefore in an experimental phase. Use at your own discretion.

Disk /dev/sda: 500.1 GB, 500107862016 bytes, 976773168 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disk label type: gpt


#         Start          End    Size  Type            Name
 1         2048     25184255     12G  Linux RAID      
 2     25184256     39610367    6.9G  Linux RAID      
 3     39610368     41709567      1G  Linux RAID      
 4     41709568     42121215    201M  Linux RAID      
 5     42121216     67303423     12G  Linux RAID      
WARNING: fdisk GPT support is currently new, and therefore in an experimental phase. Use at your own discretion.

Disk /dev/sdb: 60.0 GB, 60022480896 bytes, 117231408 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk label type: gpt


#         Start          End    Size  Type            Name
 1         2048     25184255     12G  Linux RAID      
 2     25184256     39610367    6.9G  Linux RAID      
 3     39610368     41709567      1G  Linux RAID      
 4     41709568     42121215    201M  Linux RAID      
 5     42121216     67303423     12G  Linux RAID      
WARNING: fdisk GPT support is currently new, and therefore in an experimental phase. Use at your own discretion.

Disk /dev/sdc: 250.1 GB, 250059350016 bytes, 488397168 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk label type: gpt


#         Start          End    Size  Type            Name
 1         2048     25184255     12G  Linux RAID      
 2     25184256     39610367    6.9G  Linux RAID      
 3     39610368     41709567      1G  Linux RAID      
 4     41709568     42121215    201M  Linux RAID      
 5     42121216     67303423     12G  Linux RAID      

Disk /dev/sdd: 120.0 GB, 120034123776 bytes, 234441648 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk label type: dos
Disk identifier: 0x90909090

   Device Boot      Start         End      Blocks   Id  System
/dev/sdd1   *          63   234441647   117220792+  a5  FreeBSD
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 


//copy GPT table to sdd drive and generate random guids
//(idk why I got caution messages)
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo sgdisk /dev/sda -R /dev/sdd
Caution! Secondary header was placed beyond the disk's limits! Moving the
header, but other problems may occur!
The operation has completed successfully.
[acool@localhost ~]$ sudo sgdisk -G /dev/sdd
The operation has completed successfully.
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$

//verify partitons
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo fdisk -l /dev/sd?
WARNING: fdisk GPT support is currently new, and therefore in an experimental phase. Use at your own discretion.

Disk /dev/sda: 500.1 GB, 500107862016 bytes, 976773168 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disk label type: gpt


#         Start          End    Size  Type            Name
 1         2048     25184255     12G  Linux RAID      
 2     25184256     39610367    6.9G  Linux RAID      
 3     39610368     41709567      1G  Linux RAID      
 4     41709568     42121215    201M  Linux RAID      
 5     42121216     67303423     12G  Linux RAID      
WARNING: fdisk GPT support is currently new, and therefore in an experimental phase. Use at your own discretion.

Disk /dev/sdb: 60.0 GB, 60022480896 bytes, 117231408 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk label type: gpt


#         Start          End    Size  Type            Name
 1         2048     25184255     12G  Linux RAID      
 2     25184256     39610367    6.9G  Linux RAID      
 3     39610368     41709567      1G  Linux RAID      
 4     41709568     42121215    201M  Linux RAID      
 5     42121216     67303423     12G  Linux RAID      
WARNING: fdisk GPT support is currently new, and therefore in an experimental phase. Use at your own discretion.

Disk /dev/sdc: 250.1 GB, 250059350016 bytes, 488397168 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk label type: gpt


#         Start          End    Size  Type            Name
 1         2048     25184255     12G  Linux RAID      
 2     25184256     39610367    6.9G  Linux RAID      
 3     39610368     41709567      1G  Linux RAID      
 4     41709568     42121215    201M  Linux RAID      
 5     42121216     67303423     12G  Linux RAID      
WARNING: fdisk GPT support is currently new, and therefore in an experimental phase. Use at your own discretion.

Disk /dev/sdd: 120.0 GB, 120034123776 bytes, 234441648 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk label type: gpt


#         Start          End    Size  Type            Name
 1         2048     25184255     12G  Linux RAID      
 2     25184256     39610367    6.9G  Linux RAID      
 3     39610368     41709567      1G  Linux RAID      
 4     41709568     42121215    201M  Linux RAID      
 5     42121216     67303423     12G  Linux RAID      
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo lsblk 
NAME      MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINT
sda         8:0    0 465.8G  0 disk  
├─sda1      8:1    0    12G  0 part  
│ └─md127   9:127  0    12G  0 raid1 /
├─sda2      8:2    0   6.9G  0 part  
│ └─md126   9:126  0   6.9G  0 raid1 [SWAP]
├─sda3      8:3    0     1G  0 part  
│ └─md125   9:125  0     1G  0 raid1 /boot
├─sda4      8:4    0   201M  0 part  
│ └─md123   9:123  0   201M  0 raid1 /boot/efi
└─sda5      8:5    0    12G  0 part  
  └─md124   9:124  0    12G  0 raid1 /home
sdb         8:16   0  55.9G  0 disk  
├─sdb1      8:17   0    12G  0 part  
│ └─md127   9:127  0    12G  0 raid1 /
├─sdb2      8:18   0   6.9G  0 part  
│ └─md126   9:126  0   6.9G  0 raid1 [SWAP]
├─sdb3      8:19   0     1G  0 part  
│ └─md125   9:125  0     1G  0 raid1 /boot
├─sdb4      8:20   0   201M  0 part  
│ └─md123   9:123  0   201M  0 raid1 /boot/efi
└─sdb5      8:21   0    12G  0 part  
  └─md124   9:124  0    12G  0 raid1 /home
sdc         8:32   0 232.9G  0 disk  
├─sdc1      8:33   0    12G  0 part  
│ └─md127   9:127  0    12G  0 raid1 /
├─sdc2      8:34   0   6.9G  0 part  
│ └─md126   9:126  0   6.9G  0 raid1 [SWAP]
├─sdc3      8:35   0     1G  0 part  
│ └─md125   9:125  0     1G  0 raid1 /boot
├─sdc4      8:36   0   201M  0 part  
│ └─md123   9:123  0   201M  0 raid1 /boot/efi
└─sdc5      8:37   0    12G  0 part  
  └─md124   9:124  0    12G  0 raid1 /home
sdd         8:48   0 111.8G  0 disk  
├─sdd1      8:49   0    12G  0 part  
├─sdd2      8:50   0   6.9G  0 part  
├─sdd3      8:51   0     1G  0 part  
├─sdd4      8:52   0   201M  0 part  
└─sdd5      8:53   0    12G  0 part  
sr0        11:0    1  1024M  0 rom   
[acool@localhost ~]$ 


// replace sda with sdd
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo mdadm --manage /dev/md123 --add /dev/sdd4
[sudo] password for acool: 
mdadm: added /dev/sdd4
[acool@localhost ~]$ sudo mdadm --manage /dev/md124 --add /dev/sdd5
mdadm: added /dev/sdd5
[acool@localhost ~]$ sudo mdadm --manage /dev/md125 --add /dev/sdd3
mdadm: added /dev/sdd3
[acool@localhost ~]$ sudo mdadm --manage /dev/md126 --add /dev/sdd2
mdadm: added /dev/sdd2
[acool@localhost ~]$ sudo mdadm --manage /dev/md127 --add /dev/sdd1
mdadm: added /dev/sdd1
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo mdadm --manage /dev/md123 --replace /dev/sda4 --with /dev/sdd4
mdadm: Marked /dev/sda4 (device 2 in /dev/md123) for replacement
mdadm: Marked /dev/sdd4 in /dev/md123 as replacement for device 2
[acool@localhost ~]$ sudo mdadm --manage /dev/md124 --replace /dev/sda5 --with /dev/sdd5
mdadm: Marked /dev/sda5 (device 2 in /dev/md124) for replacement
mdadm: Marked /dev/sdd5 in /dev/md124 as replacement for device 2
[acool@localhost ~]$ sudo mdadm --manage /dev/md125 --replace /dev/sda3 --with /dev/sdd3
mdadm: Marked /dev/sda3 (device 2 in /dev/md125) for replacement
mdadm: Marked /dev/sdd3 in /dev/md125 as replacement for device 2
[acool@localhost ~]$ sudo mdadm --manage /dev/md126 --replace /dev/sda2 --with /dev/sdd2
mdadm: Marked /dev/sda2 (device 2 in /dev/md126) for replacement
mdadm: Marked /dev/sdd2 in /dev/md126 as replacement for device 2
[acool@localhost ~]$ sudo mdadm --manage /dev/md127 --replace /dev/sda1 --with /dev/sdd1
mdadm: Marked /dev/sda1 (device 2 in /dev/md127) for replacement
mdadm: Marked /dev/sdd1 in /dev/md127 as replacement for device 2
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 


// monitor progress
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ cat /proc/mdstat 
Personalities : [raid1] 
md123 : active raid1 sdd4[4] sda4[3](F) sdc4[1] sdb4[0]
      205760 blocks super 1.0 [3/3] [UUU]
      bitmap: 0/1 pages [0KB], 65536KB chunk

md124 : active raid1 sdd5[4] sda5[3](F) sdc5[1] sdb5[0]
      12582912 blocks super 1.2 [3/3] [UUU]
      bitmap: 1/1 pages [4KB], 65536KB chunk

md125 : active raid1 sdd3[4](R) sda3[3] sdb3[0] sdc3[1]
      1049536 blocks super 1.0 [3/3] [UUU]
      	resync=DELAYED
      bitmap: 0/1 pages [0KB], 65536KB chunk

md126 : active raid1 sdd2[4](R) sda2[3] sdb2[0] sdc2[1]
      7208960 blocks super 1.2 [3/3] [UUU]
      [=>...................]  recovery =  5.1% (370560/7208960) finish=3.6min speed=30880K/sec
      
md127 : active raid1 sdd1[4](R) sda1[3] sdb1[0] sdc1[1]
      12582912 blocks super 1.2 [3/3] [UUU]
      	resync=DELAYED
      bitmap: 1/1 pages [4KB], 65536KB chunk

unused devices: <none>
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo mdadm --detail /dev/md123
/dev/md123:
        Version : 1.0
  Creation Time : Thu Jan 19 07:04:56 2017
     Raid Level : raid1
     Array Size : 205760 (200.94 MiB 210.70 MB)
  Used Dev Size : 205760 (200.94 MiB 210.70 MB)
   Raid Devices : 3
  Total Devices : 4
    Persistence : Superblock is persistent

  Intent Bitmap : Internal

    Update Time : Sun Jan 22 15:58:24 2017
          State : clean 
 Active Devices : 3
Working Devices : 3
 Failed Devices : 1
  Spare Devices : 0

           Name : localhost.localdomain:boot_efi  (local to host localhost.localdomain)
           UUID : 89085253:47b4f9e9:dd804932:ef766c2a
         Events : 70

    Number   Major   Minor   RaidDevice State
       0       8       20        0      active sync   /dev/sdb4
       1       8       36        1      active sync   /dev/sdc4
       4       8       52        2      active sync   /dev/sdd4

       3       8        4        -      faulty   /dev/sda4
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo mdadm --detail /dev/md126
/dev/md126:
        Version : 1.2
  Creation Time : Thu Jan 19 07:04:48 2017
     Raid Level : raid1
     Array Size : 7208960 (6.88 GiB 7.38 GB)
  Used Dev Size : 7208960 (6.88 GiB 7.38 GB)
   Raid Devices : 3
  Total Devices : 4
    Persistence : Superblock is persistent

    Update Time : Sun Jan 22 16:06:59 2017
          State : clean, recovering 
 Active Devices : 3
Working Devices : 4
 Failed Devices : 0
  Spare Devices : 1

 Rebuild Status : 13% complete

           Name : localhost.localdomain:swap  (local to host localhost.localdomain)
           UUID : 0701fcab:0d6eadef:98a73bd8:45b1bd0b
         Events : 64

    Number   Major   Minor   RaidDevice State
       0       8       18        0      active sync   /dev/sdb2
       1       8       34        1      active sync   /dev/sdc2
       3       8        2        2      active sync   /dev/sda2
       4       8       50        2      spare rebuilding   /dev/sdd2
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo mdadm --detail /dev/md124
/dev/md124:
        Version : 1.2
  Creation Time : Thu Jan 19 07:05:04 2017
     Raid Level : raid1
     Array Size : 12582912 (12.00 GiB 12.88 GB)
  Used Dev Size : 12582912 (12.00 GiB 12.88 GB)
   Raid Devices : 3
  Total Devices : 4
    Persistence : Superblock is persistent

  Intent Bitmap : Internal

    Update Time : Sun Jan 22 16:11:37 2017
          State : clean 
 Active Devices : 3
Working Devices : 3
 Failed Devices : 1
  Spare Devices : 0

           Name : localhost.localdomain:home  (local to host localhost.localdomain)
           UUID : 24ec8d5c:94b7c61c:3eed2130:fbec1566
         Events : 2393

    Number   Major   Minor   RaidDevice State
       0       8       21        0      active sync   /dev/sdb5
       1       8       37        1      active sync   /dev/sdc5
       4       8       53        2      active sync   /dev/sdd5

       3       8        5        -      faulty   /dev/sda5
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$



//remove sda partitions from md devices
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ cat /proc/mdstat 
Personalities : [raid1] 
md123 : active raid1 sdd4[4] sda4[3](F) sdc4[1] sdb4[0]
      205760 blocks super 1.0 [3/3] [UUU]
      bitmap: 0/1 pages [0KB], 65536KB chunk

md124 : active raid1 sdd5[4] sda5[3](F) sdc5[1] sdb5[0]
      12582912 blocks super 1.2 [3/3] [UUU]
      bitmap: 1/1 pages [4KB], 65536KB chunk

md125 : active raid1 sdd3[4] sda3[3](F) sdb3[0] sdc3[1]
      1049536 blocks super 1.0 [3/3] [UUU]
      bitmap: 0/1 pages [0KB], 65536KB chunk

md126 : active raid1 sdd2[4] sda2[3](F) sdb2[0] sdc2[1]
      7208960 blocks super 1.2 [3/3] [UUU]
      
md127 : active raid1 sdd1[4] sda1[3](F) sdb1[0] sdc1[1]
      12582912 blocks super 1.2 [3/3] [UUU]
      bitmap: 0/1 pages [0KB], 65536KB chunk

unused devices: <none>
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo mdadm --manage /dev/md123 --remove /dev/sda4
mdadm: hot removed /dev/sda4 from /dev/md123
[acool@localhost ~]$ sudo mdadm --manage /dev/md124 --remove /dev/sda5
mdadm: hot removed /dev/sda5 from /dev/md124
[acool@localhost ~]$ sudo mdadm --manage /dev/md125 --remove /dev/sda3
mdadm: hot removed /dev/sda3 from /dev/md125
[acool@localhost ~]$ sudo mdadm --manage /dev/md126 --remove /dev/sda2
mdadm: hot removed /dev/sda2 from /dev/md126
[acool@localhost ~]$ sudo mdadm --manage /dev/md127 --remove /dev/sda1
mdadm: hot removed /dev/sda1 from /dev/md127
[acool@localhost ~]$ 
[acool@localhost ~]$ 



//verify
[acool@localhost ~]$ 
[acool@localhost ~]$  
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo mdadm --detail /dev/md124
/dev/md124:
        Version : 1.2
  Creation Time : Thu Jan 19 07:05:04 2017
     Raid Level : raid1
     Array Size : 12582912 (12.00 GiB 12.88 GB)
  Used Dev Size : 12582912 (12.00 GiB 12.88 GB)
   Raid Devices : 3
  Total Devices : 3
    Persistence : Superblock is persistent

  Intent Bitmap : Internal

    Update Time : Sun Jan 22 16:22:22 2017
          State : clean 
 Active Devices : 3
Working Devices : 3
 Failed Devices : 0
  Spare Devices : 0

           Name : localhost.localdomain:home  (local to host localhost.localdomain)
           UUID : 24ec8d5c:94b7c61c:3eed2130:fbec1566
         Events : 2394

    Number   Major   Minor   RaidDevice State
       0       8       21        0      active sync   /dev/sdb5
       1       8       37        1      active sync   /dev/sdc5
       4       8       53        2      active sync   /dev/sdd5
[acool@localhost ~]$ cat /proc/mdstat 
Personalities : [raid1] 
md123 : active raid1 sdd4[4] sdc4[1] sdb4[0]
      205760 blocks super 1.0 [3/3] [UUU]
      bitmap: 0/1 pages [0KB], 65536KB chunk

md124 : active raid1 sdd5[4] sdc5[1] sdb5[0]
      12582912 blocks super 1.2 [3/3] [UUU]
      bitmap: 1/1 pages [4KB], 65536KB chunk

md125 : active raid1 sdd3[4] sdb3[0] sdc3[1]
      1049536 blocks super 1.0 [3/3] [UUU]
      bitmap: 0/1 pages [0KB], 65536KB chunk

md126 : active raid1 sdd2[4] sdb2[0] sdc2[1]
      7208960 blocks super 1.2 [3/3] [UUU]
      
md127 : active raid1 sdd1[4] sdb1[0] sdc1[1]
      12582912 blocks super 1.2 [3/3] [UUU]
      bitmap: 1/1 pages [4KB], 65536KB chunk

unused devices: <none>
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo lsblk 
NAME      MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINT
sda         8:0    0 465.8G  0 disk  
├─sda1      8:1    0    12G  0 part  
├─sda2      8:2    0   6.9G  0 part  
├─sda3      8:3    0     1G  0 part  
├─sda4      8:4    0   201M  0 part  
└─sda5      8:5    0    12G  0 part  
sdb         8:16   0  55.9G  0 disk  
├─sdb1      8:17   0    12G  0 part  
│ └─md127   9:127  0    12G  0 raid1 /
├─sdb2      8:18   0   6.9G  0 part  
│ └─md126   9:126  0   6.9G  0 raid1 [SWAP]
├─sdb3      8:19   0     1G  0 part  
│ └─md125   9:125  0     1G  0 raid1 /boot
├─sdb4      8:20   0   201M  0 part  
│ └─md123   9:123  0   201M  0 raid1 /boot/efi
└─sdb5      8:21   0    12G  0 part  
  └─md124   9:124  0    12G  0 raid1 /home
sdc         8:32   0 232.9G  0 disk  
├─sdc1      8:33   0    12G  0 part  
│ └─md127   9:127  0    12G  0 raid1 /
├─sdc2      8:34   0   6.9G  0 part  
│ └─md126   9:126  0   6.9G  0 raid1 [SWAP]
├─sdc3      8:35   0     1G  0 part  
│ └─md125   9:125  0     1G  0 raid1 /boot
├─sdc4      8:36   0   201M  0 part  
│ └─md123   9:123  0   201M  0 raid1 /boot/efi
└─sdc5      8:37   0    12G  0 part  
  └─md124   9:124  0    12G  0 raid1 /home
sdd         8:48   0 111.8G  0 disk  
├─sdd1      8:49   0    12G  0 part  
│ └─md127   9:127  0    12G  0 raid1 /
├─sdd2      8:50   0   6.9G  0 part  
│ └─md126   9:126  0   6.9G  0 raid1 [SWAP]
├─sdd3      8:51   0     1G  0 part  
│ └─md125   9:125  0     1G  0 raid1 /boot
├─sdd4      8:52   0   201M  0 part  
│ └─md123   9:123  0   201M  0 raid1 /boot/efi
└─sdd5      8:53   0    12G  0 part  
  └─md124   9:124  0    12G  0 raid1 /home
sr0        11:0    1  1024M  0 rom   
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 


// insteresting fact: after shutting down, physically removed sda and restart
/ sdd became sda

[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo lsblk 
[sudo] password for acool: 
NAME      MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINT
sda         8:0    0 111.8G  0 disk  
├─sda1      8:1    0    12G  0 part  
│ └─md127   9:127  0    12G  0 raid1 /
├─sda2      8:2    0   6.9G  0 part  
│ └─md126   9:126  0   6.9G  0 raid1 [SWAP]
├─sda3      8:3    0     1G  0 part  
│ └─md125   9:125  0     1G  0 raid1 /boot
├─sda4      8:4    0   201M  0 part  
│ └─md123   9:123  0   201M  0 raid1 /boot/efi
└─sda5      8:5    0    12G  0 part  
  └─md124   9:124  0    12G  0 raid1 /home
sdb         8:16   0  55.9G  0 disk  
├─sdb1      8:17   0    12G  0 part  
│ └─md127   9:127  0    12G  0 raid1 /
├─sdb2      8:18   0   6.9G  0 part  
│ └─md126   9:126  0   6.9G  0 raid1 [SWAP]
├─sdb3      8:19   0     1G  0 part  
│ └─md125   9:125  0     1G  0 raid1 /boot
├─sdb4      8:20   0   201M  0 part  
│ └─md123   9:123  0   201M  0 raid1 /boot/efi
└─sdb5      8:21   0    12G  0 part  
  └─md124   9:124  0    12G  0 raid1 /home
sdc         8:32   0 232.9G  0 disk  
├─sdc1      8:33   0    12G  0 part  
│ └─md127   9:127  0    12G  0 raid1 /
├─sdc2      8:34   0   6.9G  0 part  
│ └─md126   9:126  0   6.9G  0 raid1 [SWAP]
├─sdc3      8:35   0     1G  0 part  
│ └─md125   9:125  0     1G  0 raid1 /boot
├─sdc4      8:36   0   201M  0 part  
│ └─md123   9:123  0   201M  0 raid1 /boot/efi
└─sdc5      8:37   0    12G  0 part  
  └─md124   9:124  0    12G  0 raid1 /home
sr0        11:0    1  1024M  0 rom   
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$
]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry170129-034959 2017-01-29T00:00:00Z 2017-01-29T00:00:00Z Centos7: Replaced failed drive in a 3-disk RAID 1 array. (DRAFT) 

[acool@localhost ~]$ 
[acool@localhost ~]$ cat /etc/redhat-release 
CentOS Linux release 7.3.1611 (Core) 
[acool@localhost ~]$ 
[acool@localhost ~]$ mdadm --version
mdadm - v3.4 - 28th January 2016
[acool@localhost ~]$ 
[acool@localhost ~]$

//Inspect (I manually disconnected power and SATA cables on sda to simulate a hw failure)
[acool@localhost ~]$ 
[acool@localhost ~]$ cat /proc/mdstat 
Personalities : [raid1] 
md123 : active raid1 sdc4[1] sdb4[0]
      205760 blocks super 1.0 [3/2] [UU_]
      bitmap: 0/1 pages [0KB], 65536KB chunk

md124 : active raid1 sdc5[1] sdb5[0]
      12582912 blocks super 1.2 [3/2] [UU_]
      bitmap: 1/1 pages [4KB], 65536KB chunk

md125 : active raid1 sdb3[0] sdc3[1]
      1049536 blocks super 1.0 [3/2] [UU_]
      bitmap: 1/1 pages [4KB], 65536KB chunk

md126 : active raid1 sdb2[0] sdc2[1]
      7208960 blocks super 1.2 [3/2] [UU_]
      
md127 : active raid1 sdb1[0] sdc1[1]
      12582912 blocks super 1.2 [3/2] [UU_]
      bitmap: 1/1 pages [4KB], 65536KB chunk

unused devices: <none>
[acool@localhost ~]$ 
[acool@localhost ~]$
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo mdadm --detail /dev/md123
[sudo] password for acool: 
/dev/md123:
        Version : 1.0
  Creation Time : Thu Jan 19 10:04:56 2017
     Raid Level : raid1
     Array Size : 205760 (200.94 MiB 210.70 MB)
  Used Dev Size : 205760 (200.94 MiB 210.70 MB)
   Raid Devices : 3
  Total Devices : 2
    Persistence : Superblock is persistent

  Intent Bitmap : Internal

    Update Time : Sun Jan 22 14:06:44 2017
          State : clean, degraded 
 Active Devices : 2
Working Devices : 2
 Failed Devices : 0
  Spare Devices : 0

           Name : localhost.localdomain:boot_efi  (local to host localhost.localdomain)
           UUID : 89085253:47b4f9e9:dd804932:ef766c2a
         Events : 46

    Number   Major   Minor   RaidDevice State
       0       8       20        0      active sync   /dev/sdb4
       1       8       36        1      active sync   /dev/sdc4
       -       0        0        2      removed
[acool@localhost ~]$ 
[acool@localhost ~]$
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo lsblk 
NAME      MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINT
sdb         8:16   0  55.9G  0 disk  
├─sdb1      8:17   0    12G  0 part  
│ └─md127   9:127  0    12G  0 raid1 /
├─sdb2      8:18   0   6.9G  0 part  
│ └─md126   9:126  0   6.9G  0 raid1 [SWAP]
├─sdb3      8:19   0     1G  0 part  
│ └─md125   9:125  0     1G  0 raid1 /boot
├─sdb4      8:20   0   201M  0 part  
│ └─md123   9:123  0   201M  0 raid1 /boot/efi
└─sdb5      8:21   0    12G  0 part  
  └─md124   9:124  0    12G  0 raid1 /home
sdc         8:32   0 232.9G  0 disk  
├─sdc1      8:33   0    12G  0 part  
│ └─md127   9:127  0    12G  0 raid1 /
├─sdc2      8:34   0   6.9G  0 part  
│ └─md126   9:126  0   6.9G  0 raid1 [SWAP]
├─sdc3      8:35   0     1G  0 part  
│ └─md125   9:125  0     1G  0 raid1 /boot
├─sdc4      8:36   0   201M  0 part  
│ └─md123   9:123  0   201M  0 raid1 /boot/efi
└─sdc5      8:37   0    12G  0 part  
  └─md124   9:124  0    12G  0 raid1 /home
sr0        11:0    1  1024M  0 rom   
[acool@localhost ~]$

// the following messages appear because
// this drive is no longer available imo...
[acool@localhost ~]$ sudo mdadm --manage /dev/md123 --fail sda4
mdadm: sda4 does not appear to be a component of /dev/md123
[acool@localhost ~]$ sudo mdadm --manage /dev/md123 --remove sda4
mdadm: sda4 does not appear to be a component of /dev/md123
[acool@localhost ~]$

//.. so we'll just plug in a new hd (in same SATA port)
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo lsblk 
NAME      MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINT
sda         8:0    0 465.8G  0 disk  
├─sda1      8:1    0 465.8G  0 part  
└─sda5      8:5    0     4G  0 part  
sdb         8:16   0  55.9G  0 disk  
├─sdb1      8:17   0    12G  0 part  
│ └─md127   9:127  0    12G  0 raid1 /
├─sdb2      8:18   0   6.9G  0 part  
│ └─md126   9:126  0   6.9G  0 raid1 [SWAP]
├─sdb3      8:19   0     1G  0 part  
│ └─md125   9:125  0     1G  0 raid1 /boot
├─sdb4      8:20   0   201M  0 part  
│ └─md123   9:123  0   201M  0 raid1 /boot/efi
└─sdb5      8:21   0    12G  0 part  
  └─md124   9:124  0    12G  0 raid1 /home
sdc         8:32   0 232.9G  0 disk  
├─sdc1      8:33   0    12G  0 part  
│ └─md127   9:127  0    12G  0 raid1 /
├─sdc2      8:34   0   6.9G  0 part  
│ └─md126   9:126  0   6.9G  0 raid1 [SWAP]
├─sdc3      8:35   0     1G  0 part  
│ └─md125   9:125  0     1G  0 raid1 /boot
├─sdc4      8:36   0   201M  0 part  
│ └─md123   9:123  0   201M  0 raid1 /boot/efi
└─sdc5      8:37   0    12G  0 part  
  └─md124   9:124  0    12G  0 raid1 /home
sr0        11:0    1  1024M  0 rom   
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 

//inspect partition tables
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo fdisk -l /dev/sd?

Disk /dev/sda: 500.1 GB, 500107862016 bytes, 976773168 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disk label type: dos
Disk identifier: 0x90909090

   Device Boot      Start         End      Blocks   Id  System
/dev/sda1   *          63   976772789   488386363+  a5  FreeBSD
Partition 1 does not start on physical sector boundary.
WARNING: fdisk GPT support is currently new, and therefore in an experimental phase. Use at your own discretion.

Disk /dev/sdb: 60.0 GB, 60022480896 bytes, 117231408 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk label type: gpt


#         Start          End    Size  Type            Name
 1         2048     25184255     12G  Linux RAID      
 2     25184256     39610367    6.9G  Linux RAID      
 3     39610368     41709567      1G  Linux RAID      
 4     41709568     42121215    201M  Linux RAID      
 5     42121216     67303423     12G  Linux RAID      
WARNING: fdisk GPT support is currently new, and therefore in an experimental phase. Use at your own discretion.

Disk /dev/sdc: 250.1 GB, 250059350016 bytes, 488397168 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk label type: gpt


#         Start          End    Size  Type            Name
 1         2048     25184255     12G  Linux RAID      
 2     25184256     39610367    6.9G  Linux RAID      
 3     39610368     41709567      1G  Linux RAID      
 4     41709568     42121215    201M  Linux RAID      
 5     42121216     67303423     12G  Linux RAID      
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 

//copy gpt table to new disk (sda) and randomize guids
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo sgdisk /dev/sdc -R /dev/sda
[sudo] password for acool: 
The operation has completed successfully.
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo sgdisk -G /dev/sda
The operation has completed successfully.
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 


//check again partition tables
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo fdisk -l /dev/sd?
WARNING: fdisk GPT support is currently new, and therefore in an experimental phase. Use at your own discretion.

Disk /dev/sda: 500.1 GB, 500107862016 bytes, 976773168 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disk label type: gpt


#         Start          End    Size  Type            Name
 1         2048     25184255     12G  Linux RAID      
 2     25184256     39610367    6.9G  Linux RAID      
 3     39610368     41709567      1G  Linux RAID      
 4     41709568     42121215    201M  Linux RAID      
 5     42121216     67303423     12G  Linux RAID      
WARNING: fdisk GPT support is currently new, and therefore in an experimental phase. Use at your own discretion.

Disk /dev/sdb: 60.0 GB, 60022480896 bytes, 117231408 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk label type: gpt


#         Start          End    Size  Type            Name
 1         2048     25184255     12G  Linux RAID      
 2     25184256     39610367    6.9G  Linux RAID      
 3     39610368     41709567      1G  Linux RAID      
 4     41709568     42121215    201M  Linux RAID      
 5     42121216     67303423     12G  Linux RAID      
WARNING: fdisk GPT support is currently new, and therefore in an experimental phase. Use at your own discretion.

Disk /dev/sdc: 250.1 GB, 250059350016 bytes, 488397168 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk label type: gpt


#         Start          End    Size  Type            Name
 1         2048     25184255     12G  Linux RAID      
 2     25184256     39610367    6.9G  Linux RAID      
 3     39610368     41709567      1G  Linux RAID      
 4     41709568     42121215    201M  Linux RAID      
 5     42121216     67303423     12G  Linux RAID      
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo lsblk 
NAME      MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINT
sda         8:0    0 465.8G  0 disk  
├─sda1      8:1    0    12G  0 part  
├─sda2      8:2    0   6.9G  0 part  
├─sda3      8:3    0     1G  0 part  
├─sda4      8:4    0   201M  0 part  
└─sda5      8:5    0    12G  0 part  
sdb         8:16   0  55.9G  0 disk  
├─sdb1      8:17   0    12G  0 part  
│ └─md127   9:127  0    12G  0 raid1 /
├─sdb2      8:18   0   6.9G  0 part  
│ └─md126   9:126  0   6.9G  0 raid1 [SWAP]
├─sdb3      8:19   0     1G  0 part  
│ └─md125   9:125  0     1G  0 raid1 /boot
├─sdb4      8:20   0   201M  0 part  
│ └─md123   9:123  0   201M  0 raid1 /boot/efi
└─sdb5      8:21   0    12G  0 part  
  └─md124   9:124  0    12G  0 raid1 /home
sdc         8:32   0 232.9G  0 disk  
├─sdc1      8:33   0    12G  0 part  
│ └─md127   9:127  0    12G  0 raid1 /
├─sdc2      8:34   0   6.9G  0 part  
│ └─md126   9:126  0   6.9G  0 raid1 [SWAP]
├─sdc3      8:35   0     1G  0 part  
│ └─md125   9:125  0     1G  0 raid1 /boot
├─sdc4      8:36   0   201M  0 part  
│ └─md123   9:123  0   201M  0 raid1 /boot/efi
└─sdc5      8:37   0    12G  0 part  
  └─md124   9:124  0    12G  0 raid1 /home
sr0        11:0    1  1024M  0 rom   
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$

// now we're ready to add the new partitions in sda to the md devices
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo mdadm --manage /dev/md123 --add /dev/sda4
[sudo] password for acool: 
mdadm: added /dev/sda4
[acool@localhost ~]$ sudo mdadm --manage /dev/md124 --add /dev/sda5
mdadm: added /dev/sda5
[acool@localhost ~]$ sudo mdadm --manage /dev/md125 --add /dev/sda3
mdadm: added /dev/sda3
[acool@localhost ~]$ sudo mdadm --manage /dev/md126 --add /dev/sda2
mdadm: added /dev/sda2
[acool@localhost ~]$ sudo mdadm --manage /dev/md127 --add /dev/sda1
mdadm: added /dev/sda1
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 


// monitor progress
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ cat /proc/mdstat 
Personalities : [raid1] 
md123 : active raid1 sda4[3] sdc4[1] sdb4[0]
      205760 blocks super 1.0 [3/3] [UUU]
      bitmap: 0/1 pages [0KB], 65536KB chunk

md124 : active raid1 sda5[3] sdc5[1] sdb5[0]
      12582912 blocks super 1.2 [3/2] [UU_]
      [==>..................]  recovery = 13.7% (1730176/12582912) finish=6.2min speed=28829K/sec
      bitmap: 1/1 pages [4KB], 65536KB chunk

md125 : active raid1 sda3[3] sdb3[0] sdc3[1]
      1049536 blocks super 1.0 [3/2] [UU_]
      	resync=DELAYED
      bitmap: 1/1 pages [4KB], 65536KB chunk

md126 : active raid1 sda2[3] sdb2[0] sdc2[1]
      7208960 blocks super 1.2 [3/2] [UU_]
      	resync=DELAYED
      
md127 : active raid1 sda1[3] sdb1[0] sdc1[1]
      12582912 blocks super 1.2 [3/2] [UU_]
      	resync=DELAYED
      bitmap: 1/1 pages [4KB], 65536KB chunk

unused devices: <none>
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo mdadm --detail /dev/md124
/dev/md124:
        Version : 1.2
  Creation Time : Thu Jan 19 10:05:04 2017
     Raid Level : raid1
     Array Size : 12582912 (12.00 GiB 12.88 GB)
  Used Dev Size : 12582912 (12.00 GiB 12.88 GB)
   Raid Devices : 3
  Total Devices : 3
    Persistence : Superblock is persistent

  Intent Bitmap : Internal

    Update Time : Sun Jan 22 15:18:53 2017
          State : clean, degraded, recovering 
 Active Devices : 2
Working Devices : 3
 Failed Devices : 0
  Spare Devices : 1

 Rebuild Status : 51% complete

           Name : localhost.localdomain:home  (local to host localhost.localdomain)
           UUID : 24ec8d5c:94b7c61c:3eed2130:fbec1566
         Events : 2220

    Number   Major   Minor   RaidDevice State
       0       8       21        0      active sync   /dev/sdb5
       1       8       37        1      active sync   /dev/sdc5
       3       8        5        2      spare rebuilding   /dev/sda5
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ sudo mdadm --detail /dev/md123
/dev/md123:
        Version : 1.0
  Creation Time : Thu Jan 19 10:04:56 2017
     Raid Level : raid1
     Array Size : 205760 (200.94 MiB 210.70 MB)
  Used Dev Size : 205760 (200.94 MiB 210.70 MB)
   Raid Devices : 3
  Total Devices : 3
    Persistence : Superblock is persistent

  Intent Bitmap : Internal

    Update Time : Sun Jan 22 15:14:54 2017
          State : clean 
 Active Devices : 3
Working Devices : 3
 Failed Devices : 0
  Spare Devices : 0

           Name : localhost.localdomain:boot_efi  (local to host localhost.localdomain)
           UUID : 89085253:47b4f9e9:dd804932:ef766c2a
         Events : 66

    Number   Major   Minor   RaidDevice State
       0       8       20        0      active sync   /dev/sdb4
       1       8       36        1      active sync   /dev/sdc4
       3       8        4        2      active sync   /dev/sda4
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$ 
[acool@localhost ~]$
]]> https://angelcool.net/sphpblog/blog_index.php?entry=entry170129-034126 2017-01-29T00:00:00Z 2017-01-29T00:00:00Z