DEV Community: josnin

Jenkins in Podman

josnin — Fri, 17 Mar 2023 14:37:34 +0000

podman volume create jenkins_home

podman run -u root -p 8080:8080 -p 50000:50000 -d  -v jenkins_home:/var/jenkins_home jenkins/jenkins:lts-jdk11

podman ps
CONTAINER ID  IMAGE                                COMMAND     CREATED        STATUS            PORTS                                             NAMES
14e76c1d7f1b  docker.io/jenkins/jenkins:lts-jdk11              2 minutes ago  Up 2 minutes ago  0.0.0.0:8080->8080/tcp, 0.0.0.0:50000->50000/tcp  intelligent_gates

podman logs 14e76c1d7f1b

Reference: https://www.youtube.com/watch?v=qGLEuXK46gQ
Blue Ocean: https://www.youtube.com/watch?v=ekiL2AUToks

Use Gmail for SMTP

josnin — Fri, 17 Mar 2023 14:26:00 +0000

Login to your gmail account and Goto Account > Security

Enable 2 Step verification

Look for the App Password

Select App > Other > Click Generate

LVM+VirtualBox (Extend Disk Size)

josnin — Sat, 15 May 2021 05:42:05 +0000

Increase your VirtualBox HD first

We need to convert the available space (/dev/sda) into a new partitions , fdisk is the utility to do so

We cannot just add to the Volume Group, there is something that we need to change before doing so (Partition Type). now we have a new partition /dev/sda4

In order to create a Physical volume, we are going to use pvcreate

Use pvs command, If you wanna know how many Physical Volume the machine is setup, it can show the Volume Group assign to the new partition.

for now,/dev/sda4 is not yet assign to any VG

We need to extend the Volume Group (VG) and assign the new partition /dev/sda4

We need to extend the Logical Volume (LV)

Now it will have new 8G available space

Does Django need a database?

josnin — Sat, 24 Oct 2020 03:42:01 +0000

Depends on what you are trying to build though in most cases it will require to set up a database if you want to store the data permanently

Django supports a lighter version of database like SQLlite (out of the box) so it's easy to enable the database functionality

To be honest, one of Django strength is handling database, they have an efficient way of handling it using their own ORM, so if your project does not require any database activity there is no point in using Django it may be overkill for your project

Is Django still good?

josnin — Sat, 24 Oct 2020 03:39:01 +0000

Yes Django still exciting to use especially now they are moving towards full async (though their own ORM and others are not yet in async)

Django template system may not be that exciting after React, Angular, & Vue front end framework came but still, Django is a loosely coupled architecture that you can easily support any type of front end framework.

Django has a huge community and the ecosystem keeps on growing that keep it at least with the current technology

389ds in Fedora 31

josnin — Mon, 21 Sep 2020 15:02:18 +0000

Installation

[johnny2020@localhost Documents]$ sudo dnf install 389-ds-base

389ds docs

Local DNS

vim /etc/hosts

127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.1.74 myhost myhost.tech.com

Setup

[root@myhost Documents]# dscreate interactive
Install Directory Server (interactive mode)
===========================================

Enter system's hostname [myhost.tech.com]:

Enter the instance name [myhost]:

Enter port number [389]:

Create self-signed certificate database [yes]:

Enter secure port number [636]:

Enter Directory Manager DN [cn=Directory Manager]:

Enter the Directory Manager password:
Confirm the Directory Manager Password:

Enter the database suffix (or enter "none" to skip) [dc=myhost,dc=tech,dc=com]:

Create sample entries in the suffix [no]: yes

Do you want to start the instance after the installation? [yes]: 

Are you ready to install? [no]: yes
Starting installation...
Starting installation...
Completed installation for myhost

Create Group (sn)

Cant provide gidNumber

[root@papaitan Documents]# dsidm ldap://myhost.tech.com:389 -b "dc=myhost,dc=tech,dc=com" group create
Enter Bind DN: cn=Directory Manager
Enter password for cn=Directory Manager on ldap://myhost.tech.com:389:
Enter value for cn : Family
Successfully created Family

Create Posix Group

Can provide gidNumber

[root@papaitan Documents]# dsidm ldap://myhost.tech.com:389 -b "dc=myhost,dc=tech,dc=com" posixgroup create
Enter Bind DN: cn=Directory Manager
Enter password for cn=Directory Manager on ldap://myhost.tech.com:389:
Enter value for cn : Family2
Enter value for gidNumber : 1010
Successfully created Family2

Modify PosixGroup gidNumber

[root@papaitan Documents]# dsidm ldap://myhost.tech.com:389 -b "dc=myhost,dc=tech,dc=com" posixgroup modify Family2 replace:gidNumber:1011
Enter Bind DN: cn=Directory Manager
Enter password for cn=Directory Manager on ldap://myhost.tech.com:389:
Successfully modified cn=Family2,ou=groups,dc=myhost,dc=tech,dc=com

Create User

[root@myhost Documents]# dsidm ldap://myhost.tech.com:389 -b "dc=myhost,dc=tech,dc=com" user create
Enter Bind DN: cn=Directory Manager
Enter password for cn=Directory Manager on ldap://myhost.tech.com:389:
Enter value for uid : jonnny2020
Enter value for cn : jonnny2020
Enter value for displayName : Johnny
Enter value for uidNumber : 1010
Enter value for gidNumber : 1010
Enter value for homeDirectory : /home/johnny2020
Successfully created johnny2020

Get User

[root@myhost Documents]# dsidm ldap://myhost.tech.com:389 -b "dc=myhost,dc=tech,dc=com" user get johnny2020
Enter Bind DN: cn=Directory Manager
Enter password for cn=Directory Manager on ldap://myhost.tech.com:389:
dn: uid=johnny2020,ou=people,dc=myhost,dc=tech,dc=com
cn: johnny2020
displayName: Johnny
gidNumber: 1010
homeDirectory: /home/johnny2020
objectClass: top
objectClass: nsPerson
objectClass: nsAccount
objectClass: nsOrgPerson
objectClass: posixAccount
uid: johnny2020
uidNumber: 1010

Adding Group to User

[root@myhost Documents]# dsidm ldap://myhost.tech.com:389 -b "dc=myhost,dc=tech,dc=com" group add_member Family uid=johnny2020,ou=people,dc=myhost,dc=tech,dc=com
Enter Bind DN: cn=Directory Manager
Enter password for cn=Directory Manager on ldap://myhost.tech.com:389:
added member: uid=johnny2020,ou=people,dc=myhost,dc=tech,dc=com

Adding PosixGroup to User

[root@myhost Documents]# dsidm ldap://myhost.tech.com:389 -b "dc=myhost,dc=tech,dc=com" group add_member Family2 uid=johnny2020,ou=people,dc=myhost,dc=tech,dc=com
Enter Bind DN: cn=Directory Manager
Enter password for cn=Directory Manager on ldap://myhost.tech.com:389:
added member: uid=johnny2020,ou=people,dc=myhost,dc=tech,dc=com

Removing Group to User

[root@myhost Documents]# dsidm ldap://myhost.tech.com:389 -b "dc=myhost,dc=tech,dc=com" group remove_member Family uid=johnny2020,ou=people,dc=myhost,dc=tech,dc=com
Enter Bind DN: cn=Directory Manager
Enter password for cn=Directory Manager on ldap://myhost.tech.com:389:
removed member: uid=johnny2020,ou=people,dc=myhost,dc=tech,dc=com

Reset Password

[root@myhost Documents]# dsidm ldap://myhost.tech.com:389 -b "dc=myhost,dc=tech,dc=com" account reset_password uid=johnny2020,ou=people,dc=myhost,dc=tech,dc=com
Enter Bind DN: cn=Directory Manager
Enter password for cn=Directory Manager on ldap://myhost.tech.com:389:
Enter new password for uid=johnny2020,ou=people,dc=myhost,dc=tech,dc=com :
CONFIRM - Enter new password for uid=johnny2020,ou=people,dc=myhost,dc=tech,dc=com :
reset password for uid=johnny2020,ou=people,dc=myhost,dc=tech,dc=com

LDAP search

[root@myhost Documents]# ldapsearch -x -b "dc=myhost,dc=tech,dc=com"

Enable memberof plugin

Required for sssd enablement

[root@myhost Documents]# dsconf ldap://myhost.tech.com:389 -b "dc=myhost,dc=tech,dc=com" plugin memberof status
Enter Bind DN: cn=Directory Manager
Enter password for cn=Directory Manager on ldap://myhost.tech.com:389:
Plugin 'MemberOf Plugin' is disabled
[root@myhost Documents]# dsconf ldap://myhost.tech.com:389 -b "dc=myhost,dc=tech,dc=com" plugin memberof enable
Enter Bind DN: cn=Directory Manager
Enter password for cn=Directory Manager on ldap://myhost.tech.com:389:
Enabled plugin 'MemberOf Plugin'

[root@myhost Documents]# dsctl myhost restart
Instance "myhost" has been restarted

[root@myhost Documents]# dsconf ldap://myhost.tech.com:389 -b "dc=myhost,dc=tech,dc=com" plugin memberof set --scope "dc=myhost,dc=tech,dc=com"
Enter Bind DN: cn=Directory Manager
Enter password for cn=Directory Manager on ldap://myhost.tech.com:389:
Successfully changed the cn=MemberOf Plugin,cn=plugins,cn=config

[root@myhost Documents]# dsidm ldap://myhost.tech.com:389 -b "dc=myhost,dc=tech,dc=com" user modify kirsten add:objectclass:nsmemberof
Enter Bind DN: cn=Directory Manager
Enter password for cn=Directory Manager on ldap://myhost.tech.com:389:
Successfully modified uid=kirsten,ou=people,dc=myhost,dc=tech,dc=com


[root@myhost Documents]# dsconf ldap://myhost.tech.com:389 -b "dc=myhost,dc=tech,dc=com" plugin memberof fixup "dc=myhost,dc=tech,dc=com"
Enter Bind DN: cn=Directory Manager
Enter password for cn=Directory Manager on ldap://myhost.tech.com:389:
Attempting to add task entry...
Successfully added task entry

Login Using 389-ds LDAP

[root@myhost Documents]# dnf install sssd
Last metadata expiration check: 1:40:56 ago on Sat 28 Mar 2020 09:31:30 PM +08.
Package sssd-2.2.3-13.fc31.x86_64 is already installed.
Dependencies resolved.
Nothing to do.
Complete!
[root@myhost Documents]# dsidm ldap://myhost.tech.com:389 -b "dc=myhost,dc=tech,dc=com" client_config sssd.conf
389-admin-1.1.46-3.fc30.2.x86_64.rpm     -h                                       sfayn/
389-ds-console-1.2.16-8.fc30.noarch.rpm  --help                                   sfayn_gqlserver/
code/                                    ldap.ldif                                stunnel/
cookbook/                                .ldap.ldif.swp                           subscription.js
djcms_blogs/                             my-app/                                  test1/
docker-files/                            mysite/                                  test_api.py
env/                                     mysqld_kill_or_term.stp                  testdocker/
env3/                                    new_group.ldif                           test_r/
filereader/                              ng5/                                     test_sse/
flask_sse/                               ng-carpark/                              testvim
graphene-django/                         ng-reactive-forms/                       tmuxp_test.yaml
graphql/                                 out.csv

Add loginShell /bin/bash to user

[root@myhost jay2020]# dsidm ldap://myhost.tech.com:389 -b "dc=myhost,dc=tech,dc=com" user modify johnny2020 add:loginShell:/bin/bash
Enter Bind DN: cn=Directory Manager
Enter password for cn=Directory Manager on ldap://myhost.tech.com:389:
Successfully modified uid=johnny2020,ou=people,dc=myhost,dc=tech,dc=com

Authselect if you want to auto-create home

998  authselect select sssd with-mkhomedir --force
  999  systemctl enable oddjobd.service
 1000  systemctl start oddjobd.service



[root@myhost jay2020]# authselect apply-changes
Changes were successfully applied.

Issue if you can't ssh

Bec. it can't find the TLS certificate, meantime disable the TLS require cert by assign never

[root@myhost jay2020]# systemctl restart sssd

Reference

389ds-how-to-users-and-groups

Podman $XDG_RUNTIME_DIR not set

josnin — Mon, 21 Sep 2020 13:51:30 +0000

OS

Fedora 31

Work around

To add the command
su root
vim /etc/bashrc
export XDG_RUNTIME_DIR=/run/user/$UID

su root
mkdir /run/user/1002
chown johnny2020:johnny2020 1002
chmod 700 1002

Create storage.conf

su johnny2020
vim ~/.config/containers/storage.conf

[storage]
  driver = "overlay"
  runroot = "/run/user/1002/containers"
  graphroot = "/home/johnny2020/.local/share/containers/storage"
  [storage.options]
    size = ""
    remap-uids = ""
    remap-gids = ""
    ignore_chown_errors = ""
    remap-user = ""
    remap-group = ""
    skip_mount_home = ""
    mount_program = "/usr/bin/fuse-overlayfs"
    mountopt = ""
    [storage.options.aufs]
      mountopt = ""
    [storage.options.btrfs]
      min_space = ""
      size = ""
    [storage.options.thinpool]
      autoextend_percent = ""
      autoextend_threshold = ""
      basesize = ""
      blocksize = ""
      directlvm_device = ""
      directlvm_device_force = ""
      fs = ""
      log_level = ""
      min_free_space = ""
      mkfsarg = ""
      mountopt = ""
      size = ""
      use_deferred_deletion = ""
      use_deferred_removal = ""
      xfs_nospace_max_retries = ""
    [storage.options.overlay]
      ignore_chown_errors = ""
      mountopt = ""
      mount_program = ""
      size = ""
      skip_mount_home = ""
    [storage.options.vfs]
      ignore_chown_errors = ""
    [storage.options.zfs]
      mountopt = ""
      fsname = ""
      size = ""

It will only create the directory /run/user/$UID if you login via ssh

Networking

container-networking-podman

podman cp

[johnny2020@localhost ~]$ podman cp --pause /home/jos/myfile testpo:/tmp/
Error: invalid arguments /home/johnny2020/myfile, testpo:/tmp/ you must use just one container
[johnny2020@localhost ~]$ podman cp --pause /home/johnny2020/emyfile testpo:/tmp/
Error: invalid arguments /home/johnny2020/emyfile, testpo:/tmp/ you must use just one container
[johnny2020@localhost ~]$ podman cp --pause /home/johnny2020/myfile testpo:/tmp/
Error: invalid arguments /home/johnny2020/myfile, testpo:/tmp/ you must use just one container
[johnny2020@localhost ~]$ podman cp --pause /home/johnny2020/myfile /tmp
Error: invalid arguments /home/johnny2020/myfile, /tmp you must use just one container
[johnny2020@localhost ~]$ podman ps
CONTAINER ID  IMAGE                           COMMAND               CREATED         STATUS             PORTS                  NAMES
b73dc0a99f2f  docker.io/library/nginx:latest  nginx -g daemon o...  17 minutes ago  Up 13 minutes ago  0.0.0.0:37895->80/tcp  testpos
[johnny2020@localhost ~]$ podman cp --pause /home/johnny2020/myfile b73dc0a99f2f:/tmp/
Error: can not pause containers on rootless containers with cgroup V1: this container does not have a cgroup
[johnny2020@localhost ~]$ podman cp /home/johnny2020/myfile b73dc0a99f2f:/tmp/
[johnny2020@localhost ~]$