Site-to-Site VPN Setup

Finally got around to re-installing routers at home and in the office.

I had a really nice setup running Open-WRT on a pair of Linksys WRT54G's for a few years.

But when One of the routers died, I thought it would be a good time to upgrade to newer 802.11n wireless, and maybe get some attached storage as well.

I ended up get a Netgear WNR3500L, the (Ahem) open-source router.
I also had an extra WRTSL54GS lying around which could go to the office since wireless is infrequently used there and speed is not an issue.

As long as I was re-installing everything, I thought that surveying the latest developments.
Thnigs haven't dramatically changed, although everything seems to have gotten incrementally better and easier.

I ended up choosing the Tomato v-1.28 distro, actualy, a rebuilt version of it which has both openvpn and usb-storge support all ready to go.

I managed to bring up a site to site vpn setup using only the GUI. Although key generation was done on an ubuntu machine (and the certificated pasted in the GUI).

Note goedel:/etc/openvpn/easy-rsa/keys,goedel:/etc/openvpn/vars

The VPN came up right away, but to see the network on the client side, I had to follow these instructions.

VPN-Server-Config / Server1 / Advanced :
check: Manage Client-Specific Options
and enable push to rd-client|192.168.3.0/24.
Done.

Note gotta archive
goedel:/etc/openvpn/easy-rsa/keys,goedel:/etc/openvpn/vars
darwin:/home/daniel/Downloads/Tomato*

export EDITOR=mvim

VimCasts.org

MacVim

$> vimtutor

or copy the file:/usr/share/vim/vim72/tutor/tutor
 and mvim it.

Cloud and DevOps

Strategic objectves
Building deployment capacity
Deployment speed and flexibility
Ensured Quality of deployment

Requirements
repeatable infrastructure configuration
testable infrasture configuration

Tools and Tactics

Moved Back to Blogspot

Here we go.

Missed a few images: fixed by hand.
had to restore goedel:/home/daniel/sulbalcon.net-daniel.tgz
into newton:/Library/WebServer/Documents/daniel[/blog]

newton:blog daniel$ for i in uploaded_images/*; do echo ====================;echo $i; echo -------; grep -rl $i .; done|grep -v archive.html|grep -v atom.xml|grep -v rss.xml|sed -e s/.\\/20/http:\\/\\/localhost\\/daniel\\/blog\\/20/g|grep http|uniq -c
   2 http://localhost/daniel/blog/2005/11/moire-3d-dome-pov-ray.html
   6 http://localhost/daniel/blog/2006/08/galo-on-drupal-and-gallery2.html
   4 http://localhost/daniel/blog/2007/10/bucky-moire-revisited-wide-169.html

So these are fixed:
http://onehundredhellos.blogspot.com/2005/11/moire-3d-dome-pov-ray.html
http://onehundredhellos.blogspot.com/2006/08/galo-on-drupal-and-gallery2.html
http://onehundredhellos.blogspot.com/2007/10/bucky-moire-revisited-wide-169.html

27% Power Savings

How I saved 27% on my Power Consumtion over the last 11 months!

Scribefire Blog Tool

Great Add on for Blogging
ScribeFire - Fire Up Your Blogging!

Let's give it a whirl.

Ubuntu - Debian Package Management

rpm - dpkg equivalents

rpm -qa becomes dpkg -l
rpm -qf becomes dpkg -S
rpm -qal becomes for i in `dpkg-query -W|awk '{print $1}'`; do dpkg -L $i; done

SSH delays

Sometimes when I login I get very long delay,
cause is the destination server's config, two possible configs:
/etc/ssh/sshd_config in Centos, /etc/sshd_config under OSX:

UseDNS no
- and/or -
GSSAPIAuthentication no

LCD Monitor DPI at Native Resolution

Relative pixel density for a given resolution
calculated this way:
DPI = sqrt( Wpx^2+Hpx^2 )

1680x1050@20" --> 99dpi
1600x1200@21" --> 95dpi
1680x1050@22" --> 90dpi
1920x1200@24" --> 94dpi

using google as my calculator (e.x. for 1920x1200#24")

Grand Central Widget

Voila:

Use the widget to have grand central call me, and the entered number.
Then #4 recording is available.

e.g.

Vista Take Ownership Shell Extension

Saved my Life.

Recursively take ownership of a directory

http://chris.caliberweb.com/2007/07/02/vista-take-ownership-shell-extension/

sulbalcon.net DNS override @rd

To override dns for sulbalcon.net, which does not do port forwarding when coming from the inside, simply added a line to /etc/hosts on openwrt@rd

The point was to browse to sulbalcon.net from inside rd.sologlobe.com network
Of course the browsing host has to use openwrt as its dns...

/etc/hosts.old -> /rom/etc/hosts
/etc/hosts
127.0.0.1 localhost OpenWrt
192.168.3.200 sulbalcon.net www.sulbalcon.net sulbalcon

dig before
sulbalcon.net. 244 IN CNAME rd-sologlobe.dnsalias.net.
rd-sologlobe.dnsalias.net. 60 IN A 74.56.226.92
dig after
sulbalcon.net. 0 IN A 192.168.3.200

Blog moved to sulbalcon

Done

PhotoMosaics

- metapixel setup
- linksInOneDir
- export from picasa
- size sort
- aspect ratio gymnastics
- slicing up for cheap printing

Bucky-Moire Posted

Well here it is, the 4:3 version re-rendered and posted to YouTube!

Bucky Moire Revisited Wide (16:9)

Tried to re-render my Bucky Moire project, and found that the MPEG files were making Powerdirector crash. Investigating, I decided to re-render in 16:9, with better aspect-ratio management.

- so rendering in 720x480, with an explicit aspect ratio in pov files:
camera{ .. right x*1.778 ..} does the trick (implicitly 4:3 is the default.)
-That makes the png picture distorted (when viewing with sqaure pixels.)
- I also removed the -f dvd flag from the ffmpeg line
- old vs new ffmpeg, is the one that I built in the dome directory vs the one from rpmforge under centos5
- so the MPEG file needs to be told about the aspect ratio: e.g.
/home/daniel/dome/ffmpeg/ffmpeg/ffmpeg -r 30 -i work/buckyMoireF2427-%03d.png -aspect 1.778 -b 9000 -y oldffmpeg-nodvd-aspect169-nonsquare.mpg

This is what it looks like on the DVD after rescaling to 16:9.

I must also redo the intro storyboard with the same mods.

Moved all scripts into svn:

svn checkout https://snookr.googlecode.com/svn/trunk/buckyMoire buckyMoire --username daniel.lauzon

-Parts, there are now three top level scripts.
all scripts run for both 1.778 (16:9), and 1.333 (4:3) aspect ratios)
doStory.sh   : story board animation
doMesh.sh    : creates 24...48x24..48 sequences
doAnnotate.sh: creates longer seamless animations
-combine the 9 styoryBoard parts (with repeats into one sequence)
as in 1,1,1,2,3,3,3,4,5,5,5,6,7,7,7,8,9,9,9
-combines all mesh animations for one constant outter frequency
and adds freq pair anotation to bottom of image.

Gmail transfer

Setup pop server on boole.

netstat -anop --tcp :to find open ports. 993/995 are listening
tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 3260/xinetd off (0.00/0/0)
tcp 0 0 0.0.0.0:995 0.0.0.0:* LISTEN 3260/xinetd off (0.00/0/0)

map hole in firewall to 995 (pop3s), say rd:8995 -> 201:995
load up the mailboxes one by one, in /var/mail/spool/catherine, and let it rip
Sometimes have problems with mbox locks...
kill the ipop process and restarting xinet seem to help.

Using Virtual Ethernet Adapters in Promiscuous Mode on a Linux Host

Reference from vmware:
http://www.vmware.com/support/ws5/doc/ws_net_advanced_linux_vadapter_promiscuous.html

change permissions on /dev/vmnet[018] to specific group or all
before:
[root@euler ~]# ls -ltr /dev/vm*
crw------- 1 root root 10, 165 Jul 20 13:38 /dev/vmmon
crw------- 1 root root 119, 0 Jul 20 13:38 /dev/vmnet0
crw------- 1 root root 119, 1 Jul 20 13:38 /dev/vmnet1
crw------- 1 root root 119, 8 Jul 20 13:38 /dev/vmnet8
after:
[root@euler ~]# chmod go+rw /dev/vmnet[018]
[root@euler ~]# ls -ltr /dev/vm*
crw------- 1 root root 10, 165 Jul 20 13:38 /dev/vmmon
crw-rw-rw- 1 root root 119, 0 Jul 20 13:38 /dev/vmnet0
crw-rw-rw- 1 root root 119, 1 Jul 20 13:38 /dev/vmnet1
crw-rw-rw- 1 root root 119, 8 Jul 20 13:38 /dev/vmnet8

and back:
[root@euler ~]# chmod go-rw /dev/vmnet[018]
[root@euler ~]# ls -ltr /dev/vm*
crw------- 1 root root 10, 165 Jul 20 13:38 /dev/vmmon
crw------- 1 root root 119, 0 Jul 20 13:38 /dev/vmnet0
crw------- 1 root root 119, 1 Jul 20 13:38 /dev/vmnet1
crw------- 1 root root 119, 8 Jul 20 13:38 /dev/vmnet8

Restoring Cantor after disk failure

Well, after much effort, (spinrite 6.0) could not repair the failed system disk for cantor; Conclusion use raid1 for /boot and put / on raid5 volume!
The plan is to do that when cantor is moved the the new Core2 box.

-Gbe went smoothly under CentOS-5.0 for the DLink DGE-530T
-restoring the VG1 LVM volume (raid5) went smoothly after I vgscann'ed, pvscann'ed my way home, to enable the volumes however I had to lvchange -ay /dev/VG1/LVx for x in 0,1,2,3.

now for basic software installs; rpmforge:

google'd for rpmforge-release dag
wget http://dag.wieers.com/rpm/packages/rpmforge-release/rpmforge-release-0.3.6-1.el5.rf.i386.rpm
rpm -Uvh rpmforge-release-0.3.6-1.el5.rf.i386.rpm

VMWare: got version 5.5.4: 6.0 soon...
Java:
installed from rhes5 supplementary, by loop mounting iso:
mount -o loop /archive/iso/rhes5/rhel-5-server-supplementary-i386-disc1.iso /mnt/coco
adding keys, then yum localinstall jaba*ibm*rpm
This setsup plugina appropriately: config with alternatives --config libjavaplugin.so
also installed jdk 1.5, and 1.6 from sun.
for java6: turned off magical execution with:
chkconfig --level 0123456 jexec off
Acrobat: installed from rhel5 suppl.: yum localinstall acroread-*.rpm
Flash: installed from rhel5 suppl.: rpm -Uvh flash-plugin-*.rpm
Groovy: already had groovy .tar.gz in downloads.
Grails: groovy home 0.4 already in /home/daniel/grails-0.4

iSCSI on axial blades/filers

Just added these for autostart..
on filer1: 192.168.3.62:

chkconfig --add iscsi-target
chkconfig --level 345 iscsi-target on
chkconfig --list iscsi-target

and on blade02:192.168.3.114 service was aloready set to run..

chkconfig --list iscsi

Just grep'ed history on blade02: 192.168.3.114

iscsiadm -m discovery
iscsiadm -m discovery -p 192.168.3.62
iscsiadm -m discovery -t st -p 192.168.3.62
/etc/init.d/iscsi restart
fdisk -l /dev/sdb
mke2fs /dev/sdb1
/etc/init.d/vmware stop
mv vmware vmware.local.old
time scp -rp ../../vmware.local.old/Virtual\ Machines/c44-64 .
time scp -rp ../../vmware.local.old/Virtual\ Machines/w2k3-ent-x64 .
mount /dev/sdb1 /var/lib/vmware
/etc/init.d/vmware start

and on filer1: 192.168.3.62

/etc/init.d/iscsi-target restart
config in /etc/ietd.conf