Speed up ubuntu

Add to /etc/sysctl.conf

vm.swappiness=0
vm.vfs_cache_pressure=50


Add noatime flag to lines in /etc/fstab

Squid load balancing with proxy.pac

function FindProxyForURL(url, host) {

 

// If the hostname matches, send direct.

    if (dnsDomainIs(host, "intranet.domain.com") ||

        shExpMatch(host, "(*.abcdomain.com|abcdomain.com)"))

        return "DIRECT";

 

// If the protocol or URL matches, send direct.

    if (url.substring(0, 4)=="ftp:" ||

        shExpMatch(url, "http://abcdomain.com/folder/*"))

        return "DIRECT";

 

// If the requested website is hosted within the internal network, send direct.

    if (isPlainHostName(host) ||

        shExpMatch(host, "*.local") ||

        isInNet(dnsResolve(host), "10.0.0.0", "255.0.0.0") ||

        isInNet(dnsResolve(host), "172.16.0.0",  "255.240.0.0") ||

        isInNet(dnsResolve(host), "192.168.0.0",  "255.255.0.0") ||

        isInNet(dnsResolve(host), "127.0.0.0", "255.255.255.0"))

        return "DIRECT";

 

// Round robin based on source ip address, with failover

// Find the 4th octet

var myip=myIpAddress()

var ipbits=myip.split(".")

var myseg=parseInt(ipbits[3])

// Check to see if the 4th octect is even or odd

if (myseg & 1) {

     // Odd

     return "PROXY 172.18.0.160:9090; PROXY 172.18.0.159:9090; DIRECT";

}

else {

     // Even

     return  "PROXY 172.18.0.159:9090; PROXY 172.18.0.160:9090; DIRECT";

}

}

Configure squid for multiple outgoing addresses

https://www.tastyplacement.com/squid-proxy-multiple-outgoing-ip-addresses

Then configure the client to round robin with proxy.pac on the different ports

Convert all your jsp files to UTF-8 encoding

#Add this header to jsp

<%@ page contentType="text/html; charset=UTF-8" %>

#Command to convert all jsp files to UTF-8
find ./ -iname '*.jsp' -exec iconv -f ISO-8859-1 -t UTF-8

Installing Android Studio on Ubuntu 14.04 Trusty via Ubuntu Make

# First add the Ubuntu Make ppa:

sudo add-apt-repository ppa:ubuntu-desktop/ubuntu-make

#Install umake

sudo apt-get update

sudo apt-get install ubuntu-make

#Install android studio

 umake android

Fast DNS caching in Debian Jessie with dnsmasq-nocachelimit

Dnsmasq is a popular software to setup a caching nameserver.

The current packages on Debian have a hardcoded limit of 10K names. The software is meant for routers with low memory but servers nowdays have GBs of memory.

I created a personal fork for dnsmasq that removes the cache limit of 10000 names. Meant for modern servers with lots of RAM.

A cache size of 1M names uses about 100MB or RAM.


You can install my binary packages for Debian Jessie from

https://drive.google.com/folderview?id=0B38VG7HG0bZ2Z2d6YVl0MUNvVEk&usp=sharing

After installing, hold the package with

sudo apt-mark hold dnsmasq dnsmasq-base


To setup dnsmasq follow the Debian wiki

https://wiki.debian.org/HowTo/dnsmasq


Later increase the cache-size value to 1000000 in the file /etc/dnsmasq.conf

# Set the cachesize here.
cache-size=1000000

Automated script to transform Ubuntu Trusty into MacBuntu

Run the script here

https://drive.google.com/file/d/0B_TW7XwVogRYZkVldUJxMEFGejQ/view?usp=sharing

The only extra step is to go to 'Startup Applications' and add an item with the command 'docky' (for some reason the config script does not auto run docky).


This is the end result

https://lh5.googleusercontent.com/-RwMQYtS_p_M/VGdMSzOe8EI/AAAAAAAAKi0/dZeBHnFzzU0/s1600/mac-3.jpg

Reset cluster configuration in Proxmox 2.0

https://elkano.org/blog/how-to-reset-cluster-configuration-in-proxmox-2/

Joining Debian 8 Jessie to Active Directory, and sharing files with Samba + realmd

There are three different ways to join a Samba domain in Linux.

1. Using pbis-open and samba interop 
1. Pbis open latest (8.3) works on Jessie (download here) to make your Linux box into a Kerberos client to your AD domain
2. Sadly Pbis Samba interop does not work with latest Samba 4.1 in Debian 8
2. Using the classical way of Samba + Winbind pam (although this does not include Kerberos)
1. https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server
3. Using realmd as below (this is the most modern way I suppose)
1. https://fedorahosted.org/sssd/wiki/Configuring_sssd_with_ad_server
2. http://www.hexblot.com/blog/centos-7-active-directory-and-samba

Migrate Samba 4 Active Directory server to new hardware

I migrated my old Proxmox 3.0 KVM based Samba 4 server into a new Proxmox 4.0 LXC container. Luckily migrating Samba 4 is pretty straighforward.

1. Backup the following directories
1. sudo tar cvzf back.tgz /etc/samba /var/lib/samba
2. Turn off the old VM (or computer)
3. Create a new VM with the same IP and hostname in the new hardware host
4. Move the backup.tgz to the new VM
5. Extract on the root
1. cd /
2. sudo tar xvzf /home/user/backup.tgz
6. Now install samba on top of it
1. sudo apt-get install samba
7. When prompted to keep your old smb.conf file choose 'keep'
8. Restart 

Join Debian Samba 4 Server as secondary (backup) PDC

In Debian 8.2 Jessie, install samba packages and Kerberos client packages

apt-get install samba krb5-user


Follow this guide

https://wiki.samba.org/index.php/Join_an_additional_Samba_DC_to_an_existing_Active_Directory


Lastly, setup dns forwarding for the internal Samba DNS

Add the following line in [global] section of /etc/samba/smb.conf

        dns forwarder = <your dns server ip eg. your router  192.168.100.1>

Joning Active Directory in Ubuntu 14.04 or 15.04 Vivid Velvet with realmd

http://www.mylesgray.com/infrastructure/utilising-kerberosad-auth-ubuntu-14-04-realmd/

Install Squid 3.4 with ssl bump on Debian 8 (Jessie)

sudo apt-get install dpkg-dev
sudo apt-get build-dep squid3
sudo apt-get build-dep openssh
sudo apt-get install libssl-dev libcrypto++-dev
sudo apt-get build-dep openssl
sudo apt-get source squid3
sudo apt-get install devscripts build-essential fakeroot

sudo apt-get install squid-langpack apache2

cd squid3-3.4.8

vi debian/rules

# add the lines
#                --enable-ssl \
#                --enable-ssl-crtd \

./configure

fakeroot debian/rules binary


# install
cd ..
dpkg -i *.deb


/usr/lib/squid3/ssl_crtd -c -s /var/lib/ssl_db/
chown -R proxy /var/lib/ssl_db

#create ca certificate
openssl req -new -newkey rsa:2048 -sha256 -days 365 -nodes -x509 -keyout myCA.pem  -out myCA.pem

#copy the public part of pem file and create a der file
cp myCA.pem myCApublic.pem
# remove the private part of myCApublic.pem
openssl x509 -in myCApublic.pem -outform DER -out myCApublic.der


# make sure these lines are present in squid.conf
http_port 3128 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/home/proxy/ssl_cert/myCA.pem
http_port 3129  transparent
http_port 3130 transparent ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/home/proxy/ssl_cert/myCA.pem

acl bump_sites dstdomain .youtube.com .youtube.com.mx
ssl_bump none localhost
ssl_bump server-first bump_sites
ssl_bump none all
sslproxy_cert_error allow all
sslproxy_flags DONT_VERIFY_PEER
always_direct allow all

#change firewall to redirect port 80 to 3129, port 443 to 3130

Keep http_proxy environment variable when using sudo

Add this in visudo

Defaults env_keep +="http_proxy"
Defaults env_keep +="https_proxy"

Defaults env_keep +="ftp_proxy"

Adding a proxy to maven3

Create the file ~/.m2/settings.xml with the contents


<settings>
  <proxies>
   <proxy>
      <active>true</active>
      <protocol>http</protocol>
      <host>fw1</host>
      <port>3128</port>
    </proxy>
  </proxies>
</settings>

Use synapse to search in Lubuntu

First install Synapse


sudo add-apt-repository ppa:synapse-core/ppa
sudo apt-get update
sudo apt-get install synapse


Now bind Synapse to the Super_L key alone

First remove any super key bindings e.g. <super>+p is a common one for screen settings

Then close Synapse

In ~/.config/hotkeys/synapse.hotkeys

change

Signature=<Control>space

to

Signature=Super_L

Relaunch Synapse

Fix the tilde not working on MacBookAir 6,2 model on Ubuntu 14.04

Just add the following to /etc/rc.local and reboot

echo 0 > /sys/module/hid_apple/parameters/iso_layout

likewise-open (pbis open, power broker) install samba interop

Using the

net -U <username> ads join

will break PowerBrokers connection to AD. For example, you may find that your AD accounts may longer be able to SUDO.

The proper way to link SAMBA to AD via PowerBroker is this:

samba-interop-install --install

Follow the official documentation from

http://download1.beyondtrust.com/Technical-Support/Downloads/files/pbise/Manuals/PBIS_Samba_Integration_Guide_V8.0.pdf

Install Apache Maven 3.2 on Ubuntu

sudo add-apt-repository ppa:natecarlson/maven3
sudo apt-get update
sudo apt-get install -y maven3

echo "export PATH='/usr/share/maven3/bin':$PATH " >> ~/.bashrc
echo "export JAVA_HOME=/usr/lib/jvm/java-7-oracle " >> ~/.bashrc

Install Eclipse Luna on Ubuntu 12.04

Download latest Eclipse from

https://www.eclipse.org/downloads/

tar xvzf eclipse-java-luna-SR1-linux-gtk-x86_64.tar.gz

sudo mv eclipse /opt

sudo vi  /usr/share/applications/eclipse.desktop

[Desktop Entry]
Name=Eclipse 
Type=Application
Exec=/opt/eclipse/eclipse
Terminal=false
Icon=/opt/eclipse/icon.xpm
Comment=Integrated Development Environment
NoDisplay=false
Categories=Development;IDE;
Name[en]=Eclipse Luna