Work – BAFM

Windows *: mscorsvw.exe high CPU usage

September 1, 2015September 1, 2015 Christian Leave a comment

Another .NET update later, an hour spent looking this up. Why is mscorsvw.exe using 25% CPU for >30 minutes?

Here’s a short outliner on how to speed it up:

The scripts we’ve provided are a convenience for people who don’t want to deal with a command prompt. If you prefer to use the command prompt, you can use the commands below instead. These commands depend on the version of the .NET Framework you have installed and the version of Windows that you have and whether it’s 32-bit or 64-bit.

.NET 4, 4.5, or 4.5.1 Preview on Windows 7 or earlier:c:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe executeQueuedItems
On a 64-bit operating system, add:

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe executeQueuedItems

.NET 4, 4.5, or 4.5.1 Preview on Windows 8 or 8.1 Preview:c:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe executeQueuedItems
schTasks /run /Tn “\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319”

On a 64-bit operating system, add:

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe executeQueuedItems
schTasks /run /Tn “\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64”

If you don’t have .NET 4 or later installed, but you do have .NET 2.0 or 3.5, use this command instead:c:\Windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe executeQueuedItems
On a 64-bit operating system, add:

c:\Windows\Microsoft.NET\Framework64\v2.0.50727\ngen.exe executeQueuedItems

These commands assume that Windows is installed on the C drive. If that’s not the case, you can change the drive letter, or use the %windir% environment variable (ex: %windir%\Microsoft.NET\Framework\v4.0.30319\ngen.exe executeQueuedItems)

PowerShell – and how to add new DNS servers to remote systems

October 1, 2014October 1, 2014 Christian Leave a comment

Well, I’ve been playing around with PowerShell today. I had the task to move (as in change the IP address) two domain controllers into another VLAN. I could have done it the easy way and added the DNS servers by hand (by RDP’ing to each system having these particular DNS servers configured) – which wouldn’t have been very hard considering the domain only has 7 members at this point …

I wanted to do it the proper way, so I ended up asking old uncle Google, and it supplied me with the answers I was looking for.

PS > Get-ADComputer -SearchBase `
'OU=Server,OU=Devicesdc=ka,dc=home,dc=heimdaheim,dc=de' `
-Filter '*' | Select dnshostname | foreach {
>> Invoke-Command -ScriptBlock {Get-NetAdapter -Name Ethernet | `
Set-DnsClientServerAddress -ServerAddresses ("10.76.15.20", "10.76.15.20", "10.75.20.20", "10.75.20.21")} `
-ComputerName $_.dnshostname
>> }

PS > Get-ADComputer -SearchBase `

'OU=Server,OU=Devicesdc=ka,dc=home,dc=heimdaheim,dc=de' `

-Filter '*' | Select dnshostname | foreach {

>> Invoke-Command -ScriptBlock {Get-NetAdapter -Name Ethernet | `

Set-DnsClientServerAddress -ServerAddresses ("10.76.15.20", "10.76.15.20", "10.75.20.20", "10.75.20.21")} `

-ComputerName $_.dnshostname

>> }

Now, I executed those few PowerShell lines before changing the IP address of both domain controllers (10.76.15.20 being the old IP and 10.76.20.20 being the new one). After that I changed the IP address on the second (and after a short downtime) on the first domain controller. After both were restored and available again (and I checked with repadmin /showrepl), I ran the script again, this time only setting the new DCs:

PS > Get-ADComputer -SearchBase `
'OU=Server,OU=Devicesdc=ka,dc=home,dc=heimdaheim,dc=de' `
-Filter '*' | Select dnshostname | foreach {
>> Invoke-Command -ScriptBlock {Get-NetAdapter -Name Ethernet | `
Set-DnsClientServerAddress -ServerAddresses ("10.75.20.20", "10.75.20.21")} `
-ComputerName $_.dnshostname
>> }

PS > Get-ADComputer -SearchBase `

'OU=Server,OU=Devicesdc=ka,dc=home,dc=heimdaheim,dc=de' `

-Filter '*' | Select dnshostname | foreach {

>> Invoke-Command -ScriptBlock {Get-NetAdapter -Name Ethernet | `

Set-DnsClientServerAddress -ServerAddresses ("10.75.20.20", "10.75.20.21")} `

-ComputerName $_.dnshostname

>> }

Well, considering the time I spent on looking for this and the time I would have needed to change even the seven members – even this is a time saver.

Nexus 5000: Configure CEST

June 24, 2014June 24, 2014 Christian Leave a comment

Since I’m living and working in Germany, most of my hardware is using timezone configuration for CEST (or Europe/Berlin).

This here is the simple configuration for our Nexus 5000’s:

conf t
clock timezone CET 1 0
clock summer-time CEST 5 Sun Mar 02:00 5 Sun Oct 03:00 60
exit
copy running-config startup-config

conf t

clock timezone CET 1 0

clock summer-time CEST 5 Sun Mar 02:00 5 Sun Oct 03:00 60

exit

copy running-config startup-config

Migrating from XenServer to ESXi

February 13, 2014February 14, 2014 Christian 3 Comments

For the past two months we’ve been trying to migrate a bunch (90 or so) VMs from XenServer to ESXi … However for some reason on some of them, the Converter Service would crash.

VMware Converter crashing due to rsintcor32.dll

Up till Monday, I had no idea why. I decided to look into the error once again, and this time decided just to Google the failing module… And guess what ? Out came this Citrix forum post regarding the failing module. So, after knowing that rsintcor32.dll belongs to the Citrix System Monitoring Agent service (well, I could have guessed that from the DLLs path :P) I decided to simply stop the service.

And now, we can migrate the remaining VMs to ESXi and get rid of XenServer!

NetScaler: Generate a simple usage statistic per Vserver

November 21, 2013November 21, 2013 Christian Leave a comment

One of my co-workers recently approached me, that he needed a simple shell script which would generate a simple report about a Vserver’s current connections. After ironing out a few things with him (he had the intention of it being on a CIFS share on our file-server – which I changed to a simple HTML page) I went to work.

Out came two scripts. One is the collection instance, and the other is the processing instance. First the collection script runs, finds the current HA master node and then collects the Vserver’s current connections. After that script has dumped the information (date, time, current connections) into a file, the processing script will go and create a simple HTML page that’ll show exactly those informations.

You’ll also need to have configured the public key authentification on both HA nodes, since entering a password in combination with scripting is a bit lame.

#!/bin/bash

IDENTITY_FILE="/root/.ssh/netscaler"
NS_USER="nsroot"
NS_HOST="$1"
NS_VSERVER="$2"

if [ -z "$2" ] ; then
	echo "Usage: ns-gather-connections.sh <IP/HOSTNAME> <VSERVER_NAME>"
	echo ""
	echo "    o IP/HOSTNAME     -  IP or Hostname of the NetScaler"
	echo "    o VSERVER_NAME    -  Name of the NetScaler vServer"
	echo ""
	exit 1
fi

ns_ssh() {
	COMMANDS="$@"
	ssh -i $IDENTITY_FILE $NS_USER@$NS_HOST $COMMANDS
}

# Get HA information from the NetScaler and check if the current IP is the Master
NS_NODE_STATUS="$( ns_ssh sh ha node | egrep -A2 "IP:.*$NS_HOST" | grep Master | \
	awk '{ print $3 }' )"

if [ "$NS_NODE_STATUS" != "Primary" ] ; then
	# Search for the Primary node
	NS_MASTER_NODE="$( ns_ssh sh ha node | egrep -B2 "Master State: Primary" | \
		grep "IP: " | awk '{ print $2 }' )"
	NS_HOST=$NS_MASTER_NODE

elif [ "$NS_NODE_STATUS" == "Primary" ] ; then
	NS_MASTER_NODE="$NS_HOST"
	NS_HOST=$NS_MASTER_NODE
fi

# Check the connection table
NS_CONNTABLE="$( ns_ssh "sh ns connectiontable \"VSVRNAME = ${NS_VSERVER}\" -detail LINK" | grep 'ESTABLISHED' | wc -l )"

echo "`date '+%F_%R'`;$NS_CONNTABLE" >> /srv/www/${NS_VSERVER}_conntable.log

#!/bin/bash

IDENTITY_FILE="/root/.ssh/netscaler"

NS_USER="nsroot"

NS_HOST="$1"

NS_VSERVER="$2"

if [ -z "$2" ] ; then

echo "Usage: ns-gather-connections.sh <IP/HOSTNAME> <VSERVER_NAME>"

echo ""

echo " o IP/HOSTNAME - IP or Hostname of the NetScaler"

echo " o VSERVER_NAME - Name of the NetScaler vServer"

echo ""

exit 1

ns_ssh() {

COMMANDS="$@"

ssh -i $IDENTITY_FILE $NS_USER@$NS_HOST $COMMANDS

}

# Get HA information from the NetScaler and check if the current IP is the Master

NS_NODE_STATUS="$( ns_ssh sh ha node | egrep -A2 "IP:.*$NS_HOST" | grep Master | \

awk '{ print $3 }' )"

if [ "$NS_NODE_STATUS" != "Primary" ] ; then

# Search for the Primary node

NS_MASTER_NODE="$( ns_ssh sh ha node | egrep -B2 "Master State: Primary" | \

grep "IP: " | awk '{ print $2 }' )"

NS_HOST=$NS_MASTER_NODE

elif [ "$NS_NODE_STATUS" == "Primary" ] ; then

NS_MASTER_NODE="$NS_HOST"

NS_HOST=$NS_MASTER_NODE

# Check the connection table

NS_CONNTABLE="$( ns_ssh "sh ns connectiontable \"VSVRNAME = ${NS_VSERVER}\" -detail LINK" | grep 'ESTABLISHED' | wc -l )"

echo "`date '+%F_%R'`;$NS_CONNTABLE" >> /srv/www/${NS_VSERVER}_conntable.log

#!/bin/bash

NS_VSERVER="$1"
HTML_FILE="/srv/www/htdocs/${NS_VSERVER}.html"

cat > $HTML_FILE << EOF
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
	"http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
	<title>$NS_VSERVER - Anzahl Clients nach Datum</title>
	<style>
	.ns {
		margin:0px;padding:0px;
		width:100%;
		border:1px solid #000000;
		-moz-border-radius-bottomleft:0px;
		-webkit-border-bottom-left-radius:0px;
		border-bottom-left-radius:0px;
		-moz-border-radius-bottomright:0px;
		-webkit-border-bottom-right-radius:0px;
		border-bottom-right-radius:0px;
		-moz-border-radius-topright:0px;
		-webkit-border-top-right-radius:0px;
		border-top-right-radius:0px;
		-moz-border-radius-topleft:0px;
		-webkit-border-top-left-radius:0px;
		border-top-left-radius:0px;
	}.ns table{
		border-collapse: collapse;
		border-spacing: 0;
		width:100%;
		height:100%;
		margin:0px;padding:0px;
	}.ns th{
		font-size:14px;
		font-family:Verdana;
		font-weight:bold;
		border:1px solid #000000;
		border-width:0px 1px 1px 0px;
		text-align:left;
		padding:7px;
	}.ns tr:last-child td:last-child {
		-moz-border-radius-bottomright:0px;
		-webkit-border-bottom-right-radius:0px;
		border-bottom-right-radius:0px;
	}
	.ns table tr:first-child td:first-child {
		-moz-border-radius-topleft:0px;
		-webkit-border-top-left-radius:0px;
		border-top-left-radius:0px;
	}
	.ns table tr:first-child td:last-child {
		-moz-border-radius-topright:0px;
		-webkit-border-top-right-radius:0px;
		border-top-right-radius:0px;
	}.ns tr:last-child td:first-child{
		-moz-border-radius-bottomleft:0px;
		-webkit-border-bottom-left-radius:0px;
		border-bottom-left-radius:0px;
	}.ns tr:hover td{

	}
	.ns tr:nth-child(odd){ background-color:#aad4ff; }
	.ns tr:nth-child(even)    { background-color:#ffffff; }.ns td{
		vertical-align:middle;
		border:1px solid #000000;
		border-width:0px 1px 1px 0px;
		text-align:left;
		padding:7px;
		font-size:14px;
		font-family:Verdana;
		font-weight:normal;
		color:#000000;
	}.ns tr:last-child td{
		border-width:0px 1px 0px 0px;
	}.ns tr td:last-child{
		border-width:0px 0px 1px 0px;
	}.ns tr:last-child td:last-child{
		border-width:0px 0px 0px 0px;
	}
	.ns tr:first-child td{
			background:-o-linear-gradient(bottom, #005fbf 5%, #003f7f 100%);	background:-webkit-gradient( linear, left top, left bottom, color-stop(0.05, #005fbf), color-stop(1, #003f7f) );
		background:-moz-linear-gradient( center top, #005fbf 5%, #003f7f 100% );
		filter:progid:DXImageTransform.Microsoft.gradient(startColorstr="#005fbf", endColorstr="#003f7f");	background: -o-linear-gradient(top,#005fbf,003f7f);
		background-color:#005fbf;
		border:0px solid #000000;
		text-align:center;
		border-width:0px 0px 1px 1px;
		font-size:14px;
		font-family:Verdana;
		font-weight:bold;
		color:#ffffff;
	}
	.ns tr:first-child:hover td{
		background:-o-linear-gradient(bottom, #005fbf 5%, #003f7f 100%);	background:-webkit-gradient( linear, left top, left bottom, color-stop(0.05, #005fbf), color-stop(1, #003f7f) );
		background:-moz-linear-gradient( center top, #005fbf 5%, #003f7f 100% );
		filter:progid:DXImageTransform.Microsoft.gradient(startColorstr="#005fbf", endColorstr="#003f7f");	background: -o-linear-gradient(top,#005fbf,003f7f);
		background-color:#005fbf;
	}
	.ns tr:first-child td:first-child{
		border-width:0px 0px 1px 0px;
	}
	.ns tr:first-child td:last-child{
		border-width:0px 0px 1px 1px;
	}
	</style>
</head>
<body>

<h3>NetScaler Vserver $NS_VSERVER - sortiert nach Datum</h1>

<div class="ns">
	<table border="1">
		<tr>
			<th>Datum</th>
			<th>Zeit</th>
			<th>Anzahl Clients</th>
		</tr>
EOF

for line in $( tac /srv/www/${NS_VSERVER}_conntable.log ); do
	DATE="$( echo $line | cut -d\; -f1 | cut -d_ -f1 )"
	TIME="$( echo $line | cut -d\; -f1 | cut -d_ -f2 )"
	CONNECTIONS="$( echo $line | cut -d\; -f2 )"

	cat >> $HTML_FILE << EOF
		<tr>
			<td>$DATE</td>
			<td>$TIME</td>
			<td>$CONNECTIONS</td>
		</tr>
EOF
done

cat >> $HTML_FILE << EOF
</div>
</body>
</html>
EOF

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

#!/bin/bash

NS_VSERVER="$1"

HTML_FILE="/srv/www/htdocs/${NS_VSERVER}.html"

cat > $HTML_FILE << EOF

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"

"http://www.w3.org/TR/html4/loose.dtd">

<html>

<head>

<title>$NS_VSERVER - Anzahl Clients nach Datum</title>

<style>

.ns {

margin:0px;padding:0px;

width:100%;

border:1px solid #000000;

-moz-border-radius-bottomleft:0px;

-webkit-border-bottom-left-radius:0px;

border-bottom-left-radius:0px;

-moz-border-radius-bottomright:0px;

-webkit-border-bottom-right-radius:0px;

border-bottom-right-radius:0px;

-moz-border-radius-topright:0px;

-webkit-border-top-right-radius:0px;

border-top-right-radius:0px;

-moz-border-radius-topleft:0px;

-webkit-border-top-left-radius:0px;

border-top-left-radius:0px;

}.ns table{

border-collapse: collapse;

border-spacing: 0;

width:100%;

height:100%;

margin:0px;padding:0px;

}.ns th{

font-size:14px;

font-family:Verdana;

font-weight:bold;

border:1px solid #000000;

border-width:0px 1px 1px 0px;

text-align:left;

padding:7px;

}.ns tr:last-child td:last-child {

-moz-border-radius-bottomright:0px;

-webkit-border-bottom-right-radius:0px;

border-bottom-right-radius:0px;

}

.ns table tr:first-child td:first-child {

-moz-border-radius-topleft:0px;

-webkit-border-top-left-radius:0px;

border-top-left-radius:0px;

}

.ns table tr:first-child td:last-child {

-moz-border-radius-topright:0px;

-webkit-border-top-right-radius:0px;

border-top-right-radius:0px;

}.ns tr:last-child td:first-child{

-moz-border-radius-bottomleft:0px;

-webkit-border-bottom-left-radius:0px;

border-bottom-left-radius:0px;

}.ns tr:hover td{

}

.ns tr:nth-child(odd){ background-color:#aad4ff; }

.ns tr:nth-child(even) { background-color:#ffffff; }.ns td{

vertical-align:middle;

border:1px solid #000000;

border-width:0px 1px 1px 0px;

text-align:left;

padding:7px;

font-size:14px;

font-family:Verdana;

font-weight:normal;

color:#000000;

}.ns tr:last-child td{

border-width:0px 1px 0px 0px;

}.ns tr td:last-child{

border-width:0px 0px 1px 0px;

}.ns tr:last-child td:last-child{

border-width:0px 0px 0px 0px;

}

.ns tr:first-child td{

background:-o-linear-gradient(bottom, #005fbf 5%, #003f7f 100%); background:-webkit-gradient( linear, left top, left bottom, color-stop(0.05, #005fbf), color-stop(1, #003f7f) );

background:-moz-linear-gradient( center top, #005fbf 5%, #003f7f 100% );

filter:progid:DXImageTransform.Microsoft.gradient(startColorstr="#005fbf", endColorstr="#003f7f"); background: -o-linear-gradient(top,#005fbf,003f7f);

background-color:#005fbf;

border:0px solid #000000;

text-align:center;

border-width:0px 0px 1px 1px;

font-size:14px;

font-family:Verdana;

font-weight:bold;

color:#ffffff;

}

.ns tr:first-child:hover td{

background:-o-linear-gradient(bottom, #005fbf 5%, #003f7f 100%); background:-webkit-gradient( linear, left top, left bottom, color-stop(0.05, #005fbf), color-stop(1, #003f7f) );

background:-moz-linear-gradient( center top, #005fbf 5%, #003f7f 100% );

filter:progid:DXImageTransform.Microsoft.gradient(startColorstr="#005fbf", endColorstr="#003f7f"); background: -o-linear-gradient(top,#005fbf,003f7f);

background-color:#005fbf;

}

.ns tr:first-child td:first-child{

border-width:0px 0px 1px 0px;

}

.ns tr:first-child td:last-child{

border-width:0px 0px 1px 1px;

}

</style>

</head>

<body>

<h3>NetScaler Vserver $NS_VSERVER - sortiert nach Datum</h1>

<tr>

<th>Datum</th>

<th>Anzahl Clients</th>

</tr>

EOF

for line in $( tac /srv/www/${NS_VSERVER}_conntable.log ); do

DATE="$( echo $line | cut -d\; -f1 | cut -d_ -f1 )"

TIME="$( echo $line | cut -d\; -f1 | cut -d_ -f2 )"

CONNECTIONS="$( echo $line | cut -d\; -f2 )"

cat >> $HTML_FILE << EOF

<tr>

<td>$CONNECTIONS</td>

</tr>

EOF

done

cat >> $HTML_FILE << EOF

</div>

</body>

</html>

EOF

VMware templates: post-processing for SUSE Linux Enterprise Server and openSUSE

November 21, 2013November 21, 2013 Christian Leave a comment

Well, I’ve been fiddling around with SLES and openSUSE VMware templates. I know it’s a stupid idea when you have a PXE server from which you could install this in a matter of minutes (seriously the SLES PXE installation takes about 5 minutes).

However, when dealing with DMZ’s (yeah, they exist!) you usually don’t have any PXE servers there. So I decided to go with simple VMware templates (like we do with Windows already), but had to iron out a few kinks.

There’s no way to run a set of scripts after the deployment scripts from VMware have been run
The hostname isn’t changed everywhere (/etc/postfix/main.cf for example)

So of I went and wrote a short (70 line ..) init script, which will do exactly that.

#!/bin/sh
#
# /etc/init.d/template-deploy
#
### BEGIN INIT INFO
# Provides:             template-deploy
# Required-Start:       $sshd
# Should-Start:
# Required-Stop:        $sshd
# Should-Stop:
# Default-Start:        2 3 5
# Default-Stop:
# Short-Description:    Makes the final adjustments when deployed a template
# Description:          VMware has a few kinks when deploying a linux template.
#                       This init script will handle those kinks and
#                       incorporate the necessary changes to the final system
#                       after the VMware customizations are done.
### END INIT INFO

# Source LSB init functions
. /etc/rc.status

rc_reset

LOGFILES="/var/log/messages* /var/log/mail* /var/log/zypper.log /var/log/localmessages /var/log/warn /var/log/NetworkManager /var/log/zypp/history /var/log/clamd.log /var/log/cksquid.log /var/log/ftp-proxy.log* /var/log/apache2/*_log /var/log/squid/*.log /var/log/pbl.log"

case "$1" in
	start)
		# Read /etc/HOSTNAME and check it against /etc/template
		if [ -f /etc/HOSTNAME -a -f /etc/template ] ; then
			SYS_HOSTNAME="`cat /etc/HOSTNAME`"
			TPL_HOSTNAME="`cat /etc/template`"

			# Only if the hostname isn't like the template name
			# the script will actually run.
			if [ "$SYS_HOSTNAME" != "$TPL_HOSTNAME" ] ; then
				sed -i "s/$TPL_HOSTNAME/$SYS_HOSTNAME/g" \
					/etc/postfix/main.cf /etc/hosts \
					/etc/HOSTNAME

					bash /var/adm/autoinstall/scripts/configure_users.sh

					# Stop services for logfile deletion.
					systemctl stop postfix
					systemctl stop syslog

					# Remove log files
					for file in $LOGFILES; do
						rm -f $file
					done

					rm -f /var/log/YaST2/*
					rm -rf /var/log/vmware-imc

					# Remove the init script
					chkconfig -d template-deploy
					rm -f /etc/template
					rm -f /etc/init.d/template-deploy
				fi
			fi
			rc_status -v
			;;
        *)
			;;
esac
rc_exit

#!/bin/sh

# /etc/init.d/template-deploy

### BEGIN INIT INFO

# Provides: template-deploy

# Required-Start: $sshd

# Should-Start:

# Required-Stop: $sshd

# Should-Stop:

# Default-Start: 2 3 5

# Default-Stop:

# Short-Description: Makes the final adjustments when deployed a template

# Description: VMware has a few kinks when deploying a linux template.

# This init script will handle those kinks and

# incorporate the necessary changes to the final system

# after the VMware customizations are done.

### END INIT INFO

# Source LSB init functions

. /etc/rc.status

rc_reset

LOGFILES="/var/log/messages* /var/log/mail* /var/log/zypper.log /var/log/localmessages /var/log/warn /var/log/NetworkManager /var/log/zypp/history /var/log/clamd.log /var/log/cksquid.log /var/log/ftp-proxy.log* /var/log/apache2/*_log /var/log/squid/*.log /var/log/pbl.log"

case "$1" in

start)

# Read /etc/HOSTNAME and check it against /etc/template

if [ -f /etc/HOSTNAME -a -f /etc/template ] ; then

SYS_HOSTNAME="`cat /etc/HOSTNAME`"

TPL_HOSTNAME="`cat /etc/template`"

# Only if the hostname isn't like the template name

# the script will actually run.

if [ "$SYS_HOSTNAME" != "$TPL_HOSTNAME" ] ; then

sed -i "s/$TPL_HOSTNAME/$SYS_HOSTNAME/g" \

/etc/postfix/main.cf /etc/hosts \

/etc/HOSTNAME

bash /var/adm/autoinstall/scripts/configure_users.sh

# Stop services for logfile deletion.

systemctl stop postfix

systemctl stop syslog

# Remove log files

for file in $LOGFILES; do

rm -f $file

done

rm -f /var/log/YaST2/*

rm -rf /var/log/vmware-imc

# Remove the init script

chkconfig -d template-deploy

rm -f /etc/template

rm -f /etc/init.d/template-deploy

rc_status -v

;;

esac

rc_exit

You’ll also need to create a file (/etc/template), which’ll hold the template’s hostname and will be used for the comparison if VMware’s post-processing is already finished.

MDS9100 firmware updates – generating copy commands

October 20, 2013October 20, 2013 Christian Leave a comment

Well, I went to work today … yeah, I know it’s Sunday right ? I ended up updating two MDS9148 switches and I didn’t want to figure out everything all over again. So I put the system image and kickstart onto one of our FTP servers and ran a short bash loop on it:

root:(ftp.daheim.heimdaheim.de) PWD:~
Sun Oct 20, 08:57:24 [0] > for file in `ls /srv/ftp/firmware/mds9148/*6.2.3*`; do
echo "copy ftp://10.0.0.55/`echo $file | sed 's,/srv/ftp/,,'` bootflash:/`echo $file | sed 's,/srv/ftp/firmware/mds9148/,,'`"
done

root:(ftp.daheim.heimdaheim.de) PWD:~

Sun Oct 20, 08:57:24 [0] > for file in `ls /srv/ftp/firmware/mds9148/*6.2.3*`; do

echo "copy ftp://10.0.0.55/`echo $file | sed 's,/srv/ftp/,,'` bootflash:/`echo $file | sed 's,/srv/ftp/firmware/mds9148/,,'`"

done

Now that’ll generate me two lines, which in turn I can use on the MDS’n:

copy ftp://10.0.0.55/firmware/mds9148/m9100-s3ek9-kickstart-mz.6.2.3.bin bootflash:/m9100-s3ek9-kickstart-mz.6.2.3.bin
copy ftp://10.0.0.55/firmware/mds9148/m9100-s3ek9-mz.6.2.3.bin bootflash:/m9100-s3ek9-mz.6.2.3.bin

1 2	copy ftp://10.0.0.55/firmware/mds9148/m9100-s3ek9-kickstart-mz.6.2.3.bin bootflash:/m9100-s3ek9-kickstart-mz.6.2.3.bin copy ftp://10.0.0.55/firmware/mds9148/m9100-s3ek9-mz.6.2.3.bin bootflash:/m9100-s3ek9-mz.6.2.3.bin

XenServer 6.x: Update all hosts in pool

September 15, 2013September 15, 2013 Christian Leave a comment

Well, what annoyed me in the past was that I had to patch each XenServer patch by patch (no bulk applying) and when used in combination with UCS blades (especially if those have >250GB RAM), it takes ages to keep a pool up-to-date. So I ended up writing yet another script (I know why I hate Citrix XenServer … the XenCenter GUI is lacking sooooo much) which will download new patches from a directory on a HTTP server and then print the lines necessary to apply the patches to all hosts in a pool.

#!/bin/bash

#
# Updates a XenServer to the most current release
#

TMPDIR=$( mktemp -d )

# Figure out the XS release
XS_REL="$( grep PRODUCT_VERSION /etc/xensource-inventory | cut -d\' -f2 )"

#set -x

# Gather the Patchlist/UUID list
UUID="$( xe patch-list | grep ^uuid | awk '{ print $5 }' )"
XSNAME="$( xe patch-list | grep name-label | awk '{ print $4 }' )"

declare -a pUUID=($UUID)
declare -a pXS=($XSNAME)

count=${#pUUID[@]}
count=$((count-1))
for i in $( seq 0 $count ); do
        echo "${pXS[$i]}: ${pUUID[$i]}"
done | sort

# Now get the current patchlist
PATCH_LIST="$( wget -q -O $TMPDIR/digest http://xen.heimdaheim.de/patches/$XS_REL/digest )"

for xs in "${pXS[@]}"; do
        sed -i "/$xs/d" $TMPDIR/digest
done

if [ "$( cat $TMPDIR/digest )" != "" ]; then
	for file in $( cat $TMPDIR/digest ); do
		wget -q -O $TMPDIR/$file http://xen.heimdaheim.de/patches/$XS_REL/$file
	done

	POOL_MASTER="$( xe host-list uuid=$( xe pool-list | grep master | \
			awk '{ print $4 }' ) | grep name-label | awk '{ print $4 }' )"

	while true; do
		read -p "New XenServer updates found. Should we continue ? (y/n) " yn
		case $yn in
			[Yy]* ) break;;
			[Nn]* ) rm -rf $TMPDIR; exit;;
			* ) echo "Please answer yes or no.";;
		esac
	done

	# Upload the patchfiles to the pool master
	for xs in $( grep -v iso $TMPDIR/digest ); do
		echo -n "Uploading XS patch $xs"
		xe patch-upload file-name=$TMPDIR/$xs 1>/dev/null
		echo "..."
	done

	UUID="$( xe patch-list | grep ^uuid | awk '{ print $5 }' )"
	XSNAME="$( xe patch-list | grep name-label | awk '{ print $4 }' )"

	declare -a PUID=($UUID)
	declare -a XS=($XSNAME)

	count=${#PUID[@]}
	count=$((count-1))

	# Write the stuff to a csv, so we can sort it
	for i in $( seq 0 $count ); do
		echo "${XS[$i]};${PUID[$i]}"
	done | sort > $TMPDIR/patchlist.csv

	echo "The following commands need to be issued on the pool master $POOL_MASTER:"
	echo

	for patch in $( cat $TMPDIR/patchlist.csv ); do
		XS="$( echo $patch | cut -d\; -f1 )"
		UUID="$( echo $patch | cut -d\; -f2 )"

		for host in $( xe host-list | grep ^uuid | awk '{ print $5 }' ); do
			echo "xe patch-apply host-uuid=$host uuid=${UUID}"
		done
		echo
	done

	if [ "$( grep iso $TMPDIR/digest )" != "" ] ; then
		echo
		echo "The following commands need to be issued on each host individually:"

		for xs in $( grep iso $TMPDIR/digest ); do
			cp -f $TMPDIR/$xs /root
			echo "$xs needs to be installed manually."
			echo "This can be achieved with the following commands:"
			echo "   mount -o loop /root/$xs /mnt"
			echo "   cd /mnt"
			echo "   ./install.sh"
			echo "   cd"
			echo "   umount /mnt"
		done
	fi
else
	echo "No updates found!"
fi

rm -rf $TMPDIR

100

101

102

103

104

#!/bin/bash

# Updates a XenServer to the most current release

TMPDIR=$( mktemp -d )

# Figure out the XS release

XS_REL="$( grep PRODUCT_VERSION /etc/xensource-inventory | cut -d\' -f2 )"

#set -x

# Gather the Patchlist/UUID list

UUID="$( xe patch-list | grep ^uuid | awk '{ print $5 }' )"

XSNAME="$( xe patch-list | grep name-label | awk '{ print $4 }' )"

declare -a pUUID=($UUID)

declare -a pXS=($XSNAME)

count=${#pUUID[@]}

count=$((count-1))

for i in $( seq 0 $count ); do

echo "${pXS[$i]}: ${pUUID[$i]}"

done | sort

# Now get the current patchlist

PATCH_LIST="$( wget -q -O $TMPDIR/digest http://xen.heimdaheim.de/patches/$XS_REL/digest )"

for xs in "${pXS[@]}"; do

sed -i "/$xs/d" $TMPDIR/digest

done

if [ "$( cat $TMPDIR/digest )" != "" ]; then

for file in $( cat $TMPDIR/digest ); do

wget -q -O $TMPDIR/$file http://xen.heimdaheim.de/patches/$XS_REL/$file

done

POOL_MASTER="$( xe host-list uuid=$( xe pool-list | grep master | \

awk '{ print $4 }' ) | grep name-label | awk '{ print $4 }' )"

while true; do

read -p "New XenServer updates found. Should we continue ? (y/n) " yn

case $yn in

[Yy]* ) break;;

[Nn]* ) rm -rf $TMPDIR; exit;;

* ) echo "Please answer yes or no.";;

esac

done

# Upload the patchfiles to the pool master

for xs in $( grep -v iso $TMPDIR/digest ); do

echo -n "Uploading XS patch $xs"

xe patch-upload file-name=$TMPDIR/$xs 1>/dev/null

echo "..."

done

UUID="$( xe patch-list | grep ^uuid | awk '{ print $5 }' )"

XSNAME="$( xe patch-list | grep name-label | awk '{ print $4 }' )"

declare -a PUID=($UUID)

declare -a XS=($XSNAME)

count=${#PUID[@]}

count=$((count-1))

# Write the stuff to a csv, so we can sort it

for i in $( seq 0 $count ); do

echo "${XS[$i]};${PUID[$i]}"

done | sort > $TMPDIR/patchlist.csv

echo "The following commands need to be issued on the pool master $POOL_MASTER:"

echo

for patch in $( cat $TMPDIR/patchlist.csv ); do

XS="$( echo $patch | cut -d\; -f1 )"

UUID="$( echo $patch | cut -d\; -f2 )"

for host in $( xe host-list | grep ^uuid | awk '{ print $5 }' ); do

echo "xe patch-apply host-uuid=$host uuid=${UUID}"

done

echo

done

if [ "$( grep iso $TMPDIR/digest )" != "" ] ; then

echo

echo "The following commands need to be issued on each host individually:"

for xs in $( grep iso $TMPDIR/digest ); do

cp -f $TMPDIR/$xs /root

echo "$xs needs to be installed manually."

echo "This can be achieved with the following commands:"

echo " mount -o loop /root/$xs /mnt"

echo " cd /mnt"

echo " ./install.sh"

echo " cd"

echo " umount /mnt"

done

else

echo "No updates found!"

rm -rf $TMPDIR

There’s just a little caveat (not because of the script – but of XenServer’s design): if you switch the pool master before the updates are applied to all host, you’ll need to manually delete the patches from the pool (xe patch-delete) and rerun the script on the new pool master …

XenServer 6.x: Quick VM Protection Policy to VM name-label script

September 15, 2013September 15, 2013 Christian Leave a comment

Well, today I ended up writing a short script that’ll give me a list of VMPPs with the VMs that are associated to it.

#!/bin/bash

# Get a list of VMPPs
for vmpp in `xe vmpp-list params=uuid --minimal | sed "s/,/ /g"`; do
        VMPP_NAME=`xe vmpp-list params=name-label uuid=$vmpp --minimal`

        for vm in `xe vmpp-list params=VMs --minimal uuid=$vmpp | sed -e "s/;//g" -e "s/,//g"`; do
                VM=`xe vm-list params=name-label uuid=$vm --minimal`

                echo "$VMPP_NAME: $VM"
        done
done

#!/bin/bash

# Get a list of VMPPs

for vmpp in `xe vmpp-list params=uuid --minimal | sed "s/,/ /g"`; do

VMPP_NAME=`xe vmpp-list params=name-label uuid=$vmpp --minimal`

for vm in `xe vmpp-list params=VMs --minimal uuid=$vmpp | sed -e "s/;//g" -e "s/,//g"`; do

VM=`xe vm-list params=name-label uuid=$vm --minimal`

echo "$VMPP_NAME: $VM"

done

vmware-config-tools.pl finished with “Could not find Parent Node”

September 9, 2013September 9, 2013 Christian Leave a comment

Well, today I encountered a old problem (or so I thought). Basically a specific udevadm version causes the vmware-config-tools.pl script to error out like this:

The vmblock enables dragging or copying files between host and guest in a
Fusion or Workstation virtual environment.  Do you wish to enable this feature?
[no]

!!! [EXPERIMENTAL] !!!
VMware automatic kernel modules enables automatic building and installation of
VMware kernel modules at boot that are not already present.  By selecting yes,
you will be enabling this experimental feature.  You can always disable this
feature by re-running vmware-config-tools.pl.

Would you like to enable VMware automatic kernel modules?
[no]

No X install found.

Could not find Parent Node...

The vmblock enables dragging or copying files between host and guest in a

Fusion or Workstation virtual environment. Do you wish to enable this feature?

[no]

!!! [EXPERIMENTAL] !!!

VMware automatic kernel modules enables automatic building and installation of

VMware kernel modules at boot that are not already present. By selecting yes,

you will be enabling this experimental feature. You can always disable this

feature by re-running vmware-config-tools.pl.

Would you like to enable VMware automatic kernel modules?

[no]

No X install found.

Could not find Parent Node...

I’ve had encountered this before in the past, and before there was some explanation on the VMware forums, which I couldn’t locate. Lucky me, the VMware Tools updater keeps modified versions of vmware-tools-config.pl around. So I ended up creating this short diff, so that I may find it in the future – if I still need it:

--- /usr/bin/vmware-config-tools.pl     2013-09-09 09:43:13.000000000 +0200
+++ vmware-config-tools.pl      2013-09-09 09:43:04.000000000 +0200
@@ -6880,7 +6880,7 @@
       my $txt = $1;
       if ($txt =~ m/{vendor}=="VMware/is) {
          # Get the udev device path from this node
-         if ($txt =~ m/'(.*?)':/s) {
+         if ($txt =~ m/^'(.*?)':/s) {
             unshift(@scsiNodes, $1);
             unshift(@nodeText, $txt);
          } else {

--- /usr/bin/vmware-config-tools.pl 2013-09-09 09:43:13.000000000 +0200

+++ vmware-config-tools.pl 2013-09-09 09:43:04.000000000 +0200

@@ -6880,7 +6880,7 @@

my $txt = $1;

if ($txt =~ m/{vendor}=="VMware/is) {

# Get the udev device path from this node

- if ($txt =~ m/'(.*?)':/s) {

+ if ($txt =~ m/^'(.*?)':/s) {

unshift(@scsiNodes, $1);

unshift(@nodeText, $txt);

} else {