klaruz

Why do I rarely see Gitblit talked about as an open source alternative to GitHub? It does a lot: http://gitblit.com/features.html, including a well thought out ticket workflow: http://gitblit.com/tickets_overview.html It's also very easy to install, since it only needs a JVM.

I started using it after getting frustrated with Gitlab's install process on RHEL (a year ago), and I used Gitolite before that. Gitblit has been refreshingly simple to deal with. Am I missing something other than the standard JVM hate?

Cloudwatch does what you're referring to as well. It's more of a basic server monitoring system that happens to integrate with the load balancer.

You get a set of basic VM level metrics, and you can feed it custom metrics from your app, or log files. All of which can be configured to alarm. I don't think it's possible to run advanced statistics on the metrics for alarming (eg, standard deviation from 30 minute exceeds N), but it may be. Usually it's just an event count, like more than N 500 errors over X time.

I do agree you need to think deeper than basic health checks though, 'broken server' is always a hard boolean to nail down.

I think the problem is clustering is still very much a duct-tape situation in postgresql with no real clear consensus on how to build out a cluster.

Postgres-XL looks great for scale out, but you need 4 independent types of servers. Even with all those moving parts, it doesn't provide availability. If you want fail-over, you need pacemaker for the data nodes with traditional sync replication, and something like VRRP for your balancer, and something else to failover the coordinator. Several of these pieces can be tricky to set up in a cloud provider.

BDR looks nice, but it looks like there could be lots of gotchas for consistency in there. Maybe it is a magic bullet though... I don't know much about it yet.

Contrast with something like rethinkdb, mysql-galera, cassandra, etc, you start up enough nodes for quorum, tell them about each other, and you're pretty much done. The clients can handle the balancing, or you can use a pooler/balancer.

In my perfect world, I'd install postgresql-awesome-cluster-edition on 3 nodes, add the 3 IPs (or turn on multicast discovery, if my env can support it), and away we go for read scalability and availability. I do this today for mysql-galera, and other than the fact it's mysql, it's awesome. For writes, if you add 4 or more nodes, there should be some sort of shard system like XL has.

That said, postgresql is still clearly the best SQL and even noSQL single node server out there, it's a really great piece of software.

So you think recompiling OpenSSL from scratch, in doing so, deviating from the upstream vendor's supported binaries, and the dependency problems with updates it will cause, just to support a mostly smoke and mirrors standard is a good idea? I'd don't really think that's a best practice in commercial or government IT.

I am in 100% agreement with you, FIPS is bonkers.

https://access.redhat.com/solutions/95213

Dated May 28, 2014

If you don't have an account:

"So at this moment we cannot say whether mod_ssl is going to be a valid crypto module in FIPS mode under RHEL-6 although this is the intent."

That may have changed, and contradict other sources on redhat.com. There are a lot more KB articles on FIPS since the last time I really dug into it over a year ago.

Edit, yes, it looks like it was mod_nss only until the release of RHEL 5.9 last Jan. RHEL-6 was ongoing, but it looks like they claim mod_ssl will work now in other places in the knowledge-base.

You can't even use FIPS in Ubuntu/Debian at all: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/95001

FIPS is just one area where it seems like there's a lot of contradictory information for federal IT. After doing the FedRAMP dance, and reading things to the letter, we stopped working towards it and partnered with one of the vendors that got it first. Their remote access was plain text VNC, 8 character password max. I would say I was surprised the paperwork matters more than real security, but I wasn't.

I'm your counterpart at another agency. I'm glad to see other agencies are not doing FIPS on their websites (Which would be RHEL with mod_nss only). I'm a bit confused though, last I looked FedRAMP still required it. Have the mandates been changed?

I think it comes from their AppFog acquisition.

So in other words, become a FB/Twitter/Play/App store and put yourself at the top of the pyramid. Now you get to be the company changing the API and banning users, but we still haven't actually solved the problem for the users of web services.

They say they have a patent pending, that should have more details. I would like to read it, can anybody find the filing?

http://www.gbatteries.com/technology/

I just posted a similar comment above. It seems like the time is right for an open source advanced chat server. Maybe there already is one, I just don't know of it yet.

Are any of these available for companies that can't ship all their internal conversations and files to the cloud? Are XMPP/IRC and overpriced 'enterprise' suites still the go to for private chat?

Yes, and google will throttle you if you make too many requests.

Redhat builds the binary from scratch as well:

http://pkgs.fedoraproject.org/cgit/docker-io.git/tree/docker...

It was just released to epel stable, the docs are here:

https://github.com/dotcloud/docker/blob/master/docs/sources/...

Very nice, I can stop updating my fork of the other rpm spec that's on github.

Any info on how it sets up networking? I see -b none in the startup... Is there some other tool that does it on EL6?

Do you know where devel talks for this rpm are happening? I did not see any mention of it in the EPEL list archives.

I must be missing something, but it seems like CoreOS is just etcd and vanilla docker. I do like the idea of etcd, but is there some sort of API to control docker with it?

That's NDB cluster, not Galera. They are apples and oranges.

Entire groups of people at MS have clearances. Their software runs large chunks of the DOD, they can and do put consultants on site in secured locations when needed. Who else is going to fix an exchange cluster that has been mis-configured by a lowest bidder tech?

It's not knowing about them, it's being able to defend them. A gray area loophole is much safer to exploit if you have a large legal team to back up your interpretation.

I'm not going to comment on the security of giving somebody an ssh key to your root account... But it's a good idea to look at something like puppet to do this.

Example: https://github.com/credativ/puppet-ssh-hiera

Why? His data set is larger than ram, and couchdb is a really great disk based key/value store.

CouchDB gives you /real/ transactions, they just don't span multiple documents.

Look at torquebox.org and immutant.org. You can run ruby and clojure on the same JVM and they can interop in a few ways.

I recommended the same thing to my clients for a while last year, CentOS 6 was not getting updates at all for a time. They seem to have fixed that now though, it looks to be safe to use CentOS 6 again. Of course, if you want fast updates, pay RedHat.

Do you have a link to where Amazon says EC2 uses ECC RAM? I can't seem to find one.

Ctrl-[ is escape, so if your caps lock is a control key you only need to move your pinkies a tiny amount to hit escape.

It is more likely that it was a trojan/virus. There are several out there that monitor for just banking/paypal/payroll details, once it has something good the operator can easily bounce through the machine it's controlling to move the money.

Don't forget, he is a co-sponsor of the Protect IP act. Do you support that one?

This is not a server side DOM. It's an rpc system that acts like a jquery remote control.

I agree, something seems wrong with that test. Varnish performance should not top out with the exact same performance no matter the concurrency. Here's an older article that shows with some very basic changes you can get 27k/s on an old single core machine: http://kristianlyng.wordpress.com/2009/10/19/high-end-varnis...