tag:blogger.com,1999:blog-37215789230896638052024-02-07T16:59:39.860+08:00Linux ToolkitsLinux Toolkits Blog is a scratch-pad of tips and findings on Linuxkittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.comBlogger1293125tag:blogger.com,1999:blog-3721578923089663805.post-66383854423726303912017-08-07T10:10:00.003+08:002017-08-07T10:10:58.685+08:00AMD Demos Petaflop-in-a-Rack Supercomputer<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi54LQHX86o34BahZ8yZz4xuVNGwVG1YED-Kogr3F0lKXoa7x4hSHoxQI4cWnqzU8dPbePXIW3QODj5cCZ9hRs5XE3gA-Y3IrW-oq1GCqbziqbuqzWO6j6lWSWwVKnOBgNLrIemU-ZLsoo/s1600/AMD_EPYC.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="194" data-original-width="259" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi54LQHX86o34BahZ8yZz4xuVNGwVG1YED-Kogr3F0lKXoa7x4hSHoxQI4cWnqzU8dPbePXIW3QODj5cCZ9hRs5XE3gA-Y3IrW-oq1GCqbziqbuqzWO6j6lWSWwVKnOBgNLrIemU-ZLsoo/s1600/AMD_EPYC.jpg" /></a></div>
AMD has demonstrated a supercomputer based on its latest AMD EPYC CPUs and Radeon Instinct GPUs that can deliver one petaflop of single precision floating point performance in a single rack<br />
<br />
For more information, see <a href="https://www.top500.org/news/amd-demos-petaflop-in-a-rack-supercomputer/">https://www.top500.org/news/amd-demos-petaflop-in-a-rack-supercomputer/</a> <br />
<h1>
<br /></h1>
kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-28495495585417818142017-07-17T09:07:00.000+08:002017-07-17T09:07:09.687+08:00GPUs in action<div>
AI Learns to Lip-Sync From Audio Clips<br />University of Washington researchers developed a deep learning-based system that converts audio files into realistic mouth shapes, which are then grafted onto and blended with the head of that person from another existing video.<br /><a href="https://news.developer.nvidia.com/ai-learns-to-lip-sync-from-audio-clips/">Read more ></a> </div>
<div>
<br /></div>
<div>
Turn Your Selfies Into Chat Stickers<br />The developers of Prisma, Apple’s 2016 iPhone App of the Year, launched their second AI-based app called Sticky AI that turns your selfies into stickers to use in messages and on social networks.<br /><a href="https://news.developer.nvidia.com/turn-your-selfies-into-chat-stickers/">Read more ></a> </div>
<div>
<br /></div>
<div>
Simulating Chemical Attacks to Save Lives<br />Researchers at University of Texas at San Antonio used a GPU-accelerated supercomputer to develop an early-warning intelligence system that could alert civilians to impending danger. <br /><a href="https://www.eurekalert.org/pub_releases/2017-07/uota-nus071017.php">Read more ></a> </div>
<div>
<br /></div>
<div>
Deep Learning Key Copying Service<br />New York-based startup KeyMe recently raised $20 million in a Series B funding allows you to scan a key, either via mobile app or at one of their thousands in-store kiosk, and then ships you a key when you want a copy, or you can have one printed instantly at a kiosk. <br /><a href="https://blog.key.me/how-our-key-copying-machines-learn/">Read more ></a> </div>
<div>
<br /></div>
<div>
NVIDIA Grant Alert: Up to $400K Available for Cancer Research<br />The NVIDIA Foundation is now accepting proposals for its annual Compute the Cure Cancer Research grant program, which supports researchers using innovative computing methods to advance the fight against cancer.<br /><a href="https://news.developer.nvidia.com/nvidia-grant-alert-up-to-400k-available-for-cancer-research/">Read more ></a></div>
<a href="https://news.developer.nvidia.com/nvidia-grant-alert-up-to-400k-available-for-cancer-research/">https://news.developer.nvidia.com/nvidia-grant-alert-up-to-400k-available-for-cancer-research/</a>kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-23104016701170401882017-07-14T10:06:00.004+08:002017-07-14T10:06:45.710+08:00Testing the AD User Authentication with Centrify<strong>Test 1: Test with SSH</strong><br />
The simplest way is to enable SSH and connect to it.<br />
<br />
<strong>Test 2: Test with adinfo</strong><br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># adinfo -A --user user1
Active Directory password:
Password for user "user1" is correct</pre>
<strong><br /></strong>
<strong>Test 3: Test using kinit</strong><br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># /usr/share/centrifydc/kerberos/bin/kinit user1</pre>
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># /usr/share/centrifydc/kerberos/bin/klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: user2@<span class="skimlinks-unlinked">test.com</span>
.....
.....
Valid starting Expires Service principal
.....
.....</pre>
<strong><br /></strong>
<strong>References:</strong><br />
<ol>
<li><a href="http://community.centrify.com/t5/Centrify-Express/Centrify-is-in-connected-mode-but-users-are-unable-to-login/td-p/22046/page/2">Centrify is in connected mode but users are unable to login.</a><b></b><i></i><u></u><sub></sub><sup></sup><strike></strike></li>
</ol>
kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-25407832652353578162017-07-14T09:27:00.000+08:002017-07-14T09:27:00.713+08:00IBM ChatBot via Watson<span style="font-family: "Arial",sans-serif; font-size: 10pt; margin: 0px;"><b>Why You Should Try
IBM Watson Conversation Service </b></span><span style="font-family: "Times New Roman",serif; font-size: 12pt; margin: 0px;"><br />
<span style="color: blue;"><a href="https://www.youtube.com/watch?v=_8ZjhqsJreE"><span style="font-family: "Arial",sans-serif; font-size: 10pt; margin: 0px;">https://www.youtube.com/watch?v=_8ZjhqsJreE</span></a></span>
<br />
</span><b><span style="font-family: "Arial",sans-serif; font-size: 10pt; margin: 0px;">Introducing Watson
Virtual Agent </span></b><span style="font-family: "Times New Roman",serif; font-size: 12pt; margin: 0px;"><br />
<span style="color: blue;"><a href="https://www.youtube.com/watch?v=g2f-RT0EjPg"><span style="font-family: "Arial",sans-serif; font-size: 10pt; margin: 0px;">https://www.youtube.com/watch?v=g2f-RT0EjPg</span></a></span>
<br />
</span><b><span style="font-family: "Arial",sans-serif; font-size: 10pt; margin: 0px;">Watson Virtual Agent
Demo </span></b><span style="font-family: "Times New Roman",serif; font-size: 12pt; margin: 0px;"><br />
<a href="https://www.youtube.com/watch?v=lwg5yAuanPg"><span style="font-family: "Arial",sans-serif; font-size: 10pt; margin: 0px;"><span style="color: blue;">https://www.youtube.com/watch?v=lwg5yAuanPg</span></span></a></span><b></b><i></i><u></u><sub></sub><sup></sup><strike></strike>kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-90021466716149387832017-06-29T12:48:00.003+08:002017-06-29T12:48:43.485+08:00Testing the AD User Authentication with Centrify<strong>Test 1: Test with SSH</strong><br />
The simplest way is to enable SSH and connect to it.<br />
<br />
<strong>Test 2: Test with adinfo</strong><br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># adinfo -A --user user1
Active Directory password:
Password for user "user1" is correct</pre>
<br />
<strong>Test 3: Test using kinit</strong><br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># /usr/share/centrifydc/kerberos/bin/kinit user1</pre>
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># /usr/share/centrifydc/kerberos/bin/klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: user2@<span class="skimlinks-unlinked">test.com</span>
.....
.....
Valid starting Expires Service principal
.....
.....</pre>
<strong>References:</strong><br />
<ol>
<li><a href="http://community.centrify.com/t5/Centrify-Express/Centrify-is-in-connected-mode-but-users-are-unable-to-login/td-p/22046/page/2">Centrify is in connected mode but users are unable to login.</a></li>
</ol>
kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-27366421846826661822017-05-18T15:23:00.001+08:002017-05-18T15:23:35.055+08:00Installing Octave with HDF5 on CentOS 6.8 with yumIf you are installing octave on CentOS6 and you wish to install HDF5, you may want to pull HDF5 from EPEL instead of RPMFORGE. You may have both repositories so you have to disable RPMFORGE first<br />
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># yum-config-manager --disable rpmforge</pre>
<br />
Install Octave with HDF5<br />
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># yum install octave hdf5 hdf5-devel</pre>
kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-52566347581519909082017-04-28T09:29:00.002+08:002017-05-08T10:34:47.725+08:00Useful Information on Intel Software Suite<ol>
<li>Intel Parallel Studio XE home page<br /><a href="https://software.intel.com/en-us/intel-parallel-studio-xe">https://software.intel.com/en-us/intel-parallel-studio-xe</a> - </li>
<li>Intel SW Tools Training Videos<br /><a href="https://software.intel.com/en-us/intel-parallel-studio-xe-support/training#gsvideos">https://software.intel.com/en-us/intel-parallel-studio-xe-support/training#gsvideos</a></li>
<li>Case Studies<br /><a href="https://software.intel.com/en-us/articles/sdp-case-studies">https://software.intel.com/en-us/articles/sdp-case-studies</a></li>
<li>Intel Software Academic Program <br /><a href="https://software.intel.com/en-us/academic">https://software.intel.com/en-us/academic</a> </li>
<li>Courseware; everything you need to know about parallel computing – from the basics to hybrid and power optimization<br /><a href="https://software.intel.com/en-us/courseware/hpc">https://software.intel.com/en-us/courseware/hpc</a></li>
<li>Free Software <br /><a href="https://software.intel.com/en-us/qualify-for-free-software">https://software.intel.com/en-us/qualify-for-free-software</a></li>
<li>Free licenses for the classroom <br /><a href="https://software.intel.com/en-us/qualify-for-free-software/educator">https://software.intel.com/en-us/qualify-for-free-software/educator</a> </li>
<li>Free licenses for Students<br /><a href="https://software.intel.com/en-us/qualify-for-free-software/student">https://software.intel.com/en-us/qualify-for-free-software/student</a></li>
</ol>
kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-44399360707903140182017-04-17T13:23:00.001+08:002017-04-17T13:25:44.079+08:00Generating public keys from a SSH private keyIf you just need to generate a Public Key from SSH Private Key, you will need to<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># ssh-keygen -y -f ~/.ssh/id_rsa > ~/.ssh/id_rsa.pub</pre>
where -y output the public key<br />
<br />
References:<br />
<ol>
<li><a href="https://askubuntu.com/questions/53553/how-do-i-retrieve-the-public-key-from-a-ssh-private-key">How do I retrieve the public key from a SSH private key?</a></li>
</ol>
kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-58437570961489418292017-04-12T13:26:00.001+08:002017-04-12T13:26:18.937+08:00Installing OpenCV on CentOS 6 on yumInstalling OpenCV using CentOS 6 using yum is very straightforward. For CentOS 6,
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># yum install python-devel python-nose python-setuptools gcc gcc-gfortran gcc-c++ blas-devel lapack-devel atlas-devel</pre>
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># yum install opencv</pre>
kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-4986708402381808112017-04-10T17:03:00.001+08:002017-04-10T17:03:17.213+08:00Managing MATLAB Users using MLM options for FlexLMStep 1: Create a file to mlm.opt
<br />
<br />
Step 2: Edit your license.dat file
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;">SERVER myMATLABLicense 00000000000000009
DAEMON MLM "/usr/local/MATLAB/R2016b/etc/MLM" port=1708 options="/usr/local/MATLAB/R2016b/etc/mlm.opt"
.....
.....</pre>
<br />
Step 3: Prepare mlm.opt
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># Make user names and host names case insensitive when
# listed in a GROUP or HOST_GROUP. This is not
# required but it is here to prevent some common errors.
GROUPCASEINSENSITIVE ON
# Define GROUP Users
GROUP MATLAB_BLOCK_USERS user1 user2 user3
GROUP MATLAB_INC_USERS user4 user5 user6
# EXCLUDE Users from MATLAB and selected Toolboxes
EXCLUDE "MATLAB asset_info=111111" GROUP MATLAB_BLOCK_USERS
EXCLUDE "Image_Toolbox asset_info=111111" GROUP MATLAB_BLOCK_USERS
EXCLUDE "Signal_Toolbox asset_info=111111" GROUP MATLAB_BLOCK_USERS
# RESERVE for selected for user1
RESERVE 1 "SIMULINK asset_info=111111" USER user1
# Restrict the number of licenses that can be used on machine "server1"
MAX 4 "MATLAB asset_info=111111" HOST server1
# To exclude ALL features
EXCLUDEALL GROUP MATLAB_BLOCK_USERS
#Includes a user or pre-defined group of users, etc.
#Anyone not in an INCLUDEALL statement is not allowed to use these features.
INCLUDEALL GROUP MATLAB_INC_USERS
</pre>
References<a href="https://www.mathworks.com/matlabcentral/answers/uploaded_files/2331/sampleMLM.opt">:</a>
<br />
<ol>
<li><a href="https://www.mathworks.com/matlabcentral/answers/uploaded_files/2331/sampleMLM.opt">https://www.mathworks.com/matlabcentral/answers/uploaded_files/2331/sampleMLM.opt</a></li>
<li><a href="http://media.3ds.com/support/simulia/public/flexlm108/EndUser/chap5.htm#wp909534">The Options File</a></li>
<li><a href="https://www.mathworks.com/matlabcentral/answers/100865-is-there-a-way-to-administer-flexnet-based-licenses-how-do-i-create-an-options-file">Is there a way to administer FLEXnet based licenses? How do I create an Options file?</a></li>
</ol>
kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-63274949535571338052017-03-02T10:46:00.000+08:002017-03-02T10:46:26.691+08:00Using Intel IMB-MPI1 to check Fabrics and expected performancesIn your .bashrc, do source the
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;">source /usr/local/intel_2015/parallel_studio_xe_2015/bin/psxevars.sh intel64
source /usr/local/intel_2015/impi/5.0.3.049/bin64/mpivars.sh intel64
source /usr/local/intel_2015/composerxe/bin/compilervars.sh intel64
source /usr/local/intel_2015/mkl/bin/mklvars.sh intel64
MKLROOT=/usr/local/intel_2015/mkl</pre>
<br />
To simulate 3 workloads pingpong, sendrecv, and exchange with IMB-MPT1
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;">$ mpirun -r ssh -RDMA -n 512 -env I_MPI_DEBUG 5 IMB-MPT1</pre>
kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-91485163489174628532017-02-24T12:51:00.001+08:002017-02-24T12:51:33.021+08:00Compiling Intel FFTW3 and FFTW2 Interface Wrapper LibraryFFTW3 wrappers to Intel MKL are delivered both in Intel MKL and as source code which can be compiled to build to build standalone wrapper library with exactly the same functionality.
The source code for the wrappers, makefiles are found .....\interfaces\fftw3xc subdirectory in the Intel MKL Directory
<br />
<br />
Intel FFTW3 Interface Wrapper Library. Do the same for fftw3xc and fftw3xf
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># cd $MKLROOT
# cd interfaces/fftw3xc
# make libintel INSTALL_DIR=$MKLROOT/lib/intel64
</pre>
Once Compiled, the libraries are kept $MKLROOT/lib/intel64
<br />
<br />
<br />
Intel FFTW2 Interface Wrapper Library. Do the same for fftw2xc and fftw2xf
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># cd $MKLROOT
# cd interfaces/fftw2xc
# make libintel PRECISION=MKL_DOUBLE
# make libintel PRECISION=MKL_SINGLE</pre>
Once Compiled, the libraries are kept $MKLROOT/lib/intel64
kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-31677439502168930862017-02-20T14:55:00.002+08:002017-02-20T14:55:51.854+08:00Configuring MATLAB FlexNet License Manager to reserve licenses<b>Step 1</b>: To setup an option file in the Flexlm <br />
<br />
<a href="https://www.mathworks.com/matlabcentral/answers/100865-is-there-a-way-to-administer-flexnet-based-licenses-how-do-i-create-an-options-file">https://www.mathworks.com/matlabcentral/answers/100865-is-there-a-way-to-administer-flexnet-based-licenses-how-do-i-create-an-options-file</a><br />
<br />
<br />
<b>Step 2</b>: Create an mlm.opt file<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;">RESERVE 1 MATLAB:asset_info=111111 USER user1</pre>
where user1 is the username<br />
<br />
<b>Step 3</b>: Restart the license server to take effectkittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-73077901356260540332017-02-08T13:56:00.002+08:002017-02-08T13:56:56.097+08:00Configuring 2 Gateways on the same Linux Box permanentlySuppose you have 2 network on a PC says<br />
192.168.1.5/24 (eth0 - Private Network)<br />
172.16.10.4/24 (eth1 - Public Network)<br />
<br />
Let's assume the 172.16.10.254 is the Default Gateway for 172.16.10.0 network. If there is a router at 192.168.1.254 for the internal network and you wish to connect to other networks says 192.168.5.0 192.168.6.0 and 192.168.7.0 networks. You will need to add "static routes" to these networks<br />
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;">route add -net 192.168.5.0 netmask 255.255.255.0 gw 192.168.1.254
route add -net 192.168.6.0 netmask 255.255.255.0 gw 192.168.1.254
route add -net 192.168.7.0 netmask 255.255.255.0 gw 192.168.1.254</pre>
<br />
<br />
To make the setting permanent, edit /etc/sysconfig/network-scripts/route-eth0<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;">192.168.5.0/24 via 192.168.1.154 dev eth0
192.168.6.0/24 via 192.168.1.154 dev eth0
192.168.7.0/24 via 192.168.1.154 dev eth0 </pre>
<br />
To check the setting is ok<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># ip route show</pre>
kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-78051754847599084232017-02-02T09:24:00.000+08:002017-02-02T09:24:24.586+08:00Virtualization Solutions for High-Performance ComputingThere is an interesting talk held in Stockholm, Sweden which taken from <a href="http://hibd.cse.ohio-state.edu/">High-Performance Big Data (HiBD)</a><br />
<ol>
<li><a href="http://mvapich.cse.ohio-state.edu/static/media/talks/slide/dk_keynote_visorhpc17.pdf">Opportunities and Challenges in Designing High-Performance MPI and Big Data Libraries on Virtualized InfiniBand Clusters</a></li>
</ol>
<br />kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-56602185955903845512017-02-01T13:42:00.000+08:002017-02-01T13:42:17.245+08:00Information on Intel Omni-Path Fabric and Xeon Phi<ol>
<li><a href="http://www.intel.in/content/www/in/en/high-performance-computing-fabrics/omni-path-architecture-fabric-overview.html">Intel® Omni-Path Architecture</a></li>
<li><a href="http://www.intel.in/content/www/in/en/processors/xeon/xeon-phi-detail.html">Intel® Xeon Phi™ Product Family</a></li>
</ol>
kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-54698661075845565042017-01-18T13:25:00.000+08:002017-01-18T13:25:06.907+08:00SMB Security Best Practices by US-CertTaken from <a href="https://www.us-cert.gov/ncas/current-activity/2017/01/16/SMB-Security-Best-Practices">SMB Security Best Practices</a><br />
<br />
<div style="text-align: justify;">
US-CERT recommends that users and administrators consider: </div>
<ul style="text-align: justify;">
<li>disabling SMB v1 and</li>
<li>blocking all versions of SMB at the network boundary by blocking TCP port 445 with related protocols on UDP ports 137-138 and TCP port 139, for all boundary devices.</li>
</ul>
<div style="text-align: justify;">
US-CERT cautions users and administrators that disabling or blocking SMB may create problems by obstructing access to shared files, data, or devices. The benefits of mitigation should be weighed against potential disruptions to users. For more information on SMB, please review Microsoft Security Advisories 2696547 (link is external) and 204279 (link is external)</div>
kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-6989383696666277922017-01-16T12:48:00.000+08:002017-01-16T12:48:26.582+08:00Unable to spin down CD-ROM I have an interesting issues today. My CD-ROM fail to spin down and there is a faulty disk inside the CD-ROM.<br />
<br />
Inside the /var/log/messages<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;">Buffer I/O error on device sr0, logical block 0 Error</pre>
<br />
There is no way you can un-mount the CDROM by the tradtional umount /dev/sr0. If you do a<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># ps -afe|grep sr0
user1 11061 9280 0 12:43 pts/0 /sbin/blkid -o udev -p -u noraid /dev/sr0</pre>
<br />
To do a quick resolve, you can kill the process ID associated with /sbin/blkid -o udev -u noraid /dev/sr0<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># kill -9 11061</pre>
<br />
The CD-ROM should stop spinningkittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-76049645143598126402017-01-03T16:34:00.002+08:002017-01-03T16:34:19.939+08:00Creating a Local Directory Repository to act like a local media for CentOS 6Just say you wants a local Directory Repository to act like a local media. This happens when you wish to do yum local install from a directory of RPMs only instead of pulling directly from Internet repository.<br />
<br />
1. At /etc/yum.repos.d/, create a local repo, something like<br />
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># vim /etc/yum.repos.d/local.repo</pre>
<br />
2. Inside the /etc/yum.repos.d/local.repo, <br />
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;">[myrepo]
name=My Local Repo
baseurl=file:///home/user1/RPM
enabled=1
gpgcheck=0</pre>
<br />
One more thing you may want to know is that the RPMs from the CentOS Disks including repomd.xml be copied into /home/user1/RPM<br />
<br />
3. Disabled the rest of the Repo. For example, <br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># yum-config-manager --disable rpmforge</pre>
<br />
4. The Yum will pull from the enabled Repository only. <br />
<br />kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-30403636383737655792016-12-31T14:57:00.001+08:002016-12-31T15:07:42.589+08:00Security Alert - Switcher Android Trojan Targets Wireless RoutersThe Switcher Android Trojan uses infected Android devices to attack wireless routers by performing brute force attacks on the routers’ admin web interfaces. If the attacks succeed, Switcher hijacks the Domain Name Server (DNS) by changing the IP addresses of the DNS servers in the router settings and then reroutes all DNS queries to the attackers’ servers. As a result, Switcher is able to redirect all connected users to malicious IP addresses when they enter legitimate domain addresses, thereby exposing them to a broad range of attacks including phishing and malware infection. <br />
<br />
There is currently no indication of Switcher infection in Singapore. However, Singapore users should nevertheless adopt the necessary preventive measures to avoid potential infection.<br />
<br />
References<br />
<ol>
<li><a href="http://www.securityweek.com/switcher-android-trojan-hacks-routers-hijacks-traffic">"Switcher" Android Trojan Hacks Routers, Hijacks Traffic</a></li>
</ol>
kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-89095943057767115282016-12-20T12:28:00.002+08:002016-12-20T12:28:48.004+08:00Compiling glibc-2.14 on CentOS 6Step 1: Download glibc-2.14 from GNU Site
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># wget http://ftp.gnu.org/gnu/glibc/glibc-2.14.tar.gz</pre>
<br />
Step 2: Untar and Preparation
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># tar zxvf glibc-2.14.tar.gz
# cd glibc-2.14
# mkdir build
# cd build</pre>
<br />
Step 3: Compile and install
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># ../configure --prefix=/usr/local/glibc-2.14
# make -j8
# make install</pre>
kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-77365634851887424842016-12-02T14:10:00.000+08:002016-12-02T16:47:02.365+08:00Error polling HP CQ with status WORK REQUEST FLUSHED ERROR status on LSF PlatformI was encountering "Error polling HP CQ with status WORK REQUEST FLUSHED ERROR status" during OpenMPI run and it was occuring randomly.<br />
<br />
I suspect it is due to nodes issue. I checked the LSF /opt/lsf/log/sbatchd.log.comp001. It is definitely an authentication issue with AD. I'm using centrify.<br />
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;">acctMapTo: No valid user name found for job 149044, userName(mr_x) failed:Success
runEexec: getOSUid_() failed. Bad user ID</pre>
<br />
<br />
I did a<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;">$ badmin hclose comp001</pre>
<br />
and then restart centrify services. Alternatively, you can reboot if you want a clean start.<br />
<br />
The OpenMPI could run again.kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-67357592502798749832016-11-03T17:05:00.004+08:002016-11-03T17:33:38.698+08:00IBM Platform Cluster Manager Community EditionIBM Platform Cluster Manager Community Edition has been released with no charge.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiw57kkOheXYw9KmDve20aSHmQwf-kGG_XjZnJJfwHngb21-urjgHU_mFWh5YMrmiJllgpFB1Tt9x80_1X9VXEJEXTi6Lss_9ULpcZJg281C3kUlEkO9lhb56dmJPHb5cxLszWRAd7B01k/s1600/HPCM-Dashboard.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="104" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiw57kkOheXYw9KmDve20aSHmQwf-kGG_XjZnJJfwHngb21-urjgHU_mFWh5YMrmiJllgpFB1Tt9x80_1X9VXEJEXTi6Lss_9ULpcZJg281C3kUlEkO9lhb56dmJPHb5cxLszWRAd7B01k/s640/HPCM-Dashboard.jpg" width="640" /></a></div>
<br />
<div style="text-align: justify;">
Platform Cluster Manager Community Edition is easy-to-use, powerful cluster management software for technical computing users. It delivers a comprehensive set of functions to help manage hardware and software from the infrastructure level. It automates the deployment of the operating system and software components, and complex activities, such as application cluster creation and maintenance of a system.<br />
<br />
The community edition offering of Platform Cluster Manager Community Edition, uses a centralized user interface from where system administrators can manage a complex cluster as a single system. It offers the flexibility for users to add customized features that are based on specific requirements of their environment. It also provides a kit framework for easy software deployment. It also has the ability to set up enable a mutlitenant, multi-cluster environment. </div>
<div style="text-align: justify;">
<br /></div>
To Download, do <a href="https://www-01.ibm.com/marketing/iwm/iwm/web/preLogin.do?source=swerpzsw-pcmce-3">here</a><br />
<br />
Supported Platform<br />
<br />
<table border="1" style="width: 600px;">
<tbody>
<tr>
<td width="300">Management Node</td>
<td width="300"> Compute Node</td>
</tr>
<tr>
<td width="300"> CentOS 6.6</td>
<td width="300">CentOS 6.6, CentOS 6.5</td>
</tr>
<tr>
<td width="300">RHEL 6.7</td>
<td width="300">RHEL 6.7, <br />
RHEL 6.6, <br />
RHEL 6.5, <br />
RHEL 5.11
<br />
CentOS 6.6, <br />
CentOS 6.5, <br />
CentOS 5.11
<br />
RHELSC 6.6, <br />
RHELSC 6.5, <br />
RHELSC 5.11</td>
</tr>
<tr>
<td width="300">RHEL 7.1</td>
<td width="300">RHEL 7.1, <br />
RHEL 7.0, <br />
RHEL 6.6, <br />
RHEL 6.5, <br />
RHEL 5.11
<br />
CentOS 7.0, <br />
CentOS 6.6, <br />
CentOS 6.5, <br />
CentOS 5.11
<br />
RHELSC 7.0, <br />
RHELSC 6.6, <br />
RHELSC 6.5</td>
</tr>
</tbody></table>
<br />
For more information, see <a href="https://www.ibm.com/support/knowledgecenter/SSENRW_4.2.1/release_notes/supported_software.html">IBM Platform Cluster Manager Community Edition</a>
kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-53832413093729627462016-10-25T00:54:00.002+08:002016-10-25T00:54:51.337+08:00Kernel Local Privilege Escalation - CVE-2016-5195Taken from RedHat (https://access.redhat.com/security/vulnerabilities/2706661) <br />
<br />
<b>Background Information </b><br />
A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write (COW) breakage of private read-only memory mappings. An unprivileged local user could use this flaw to gain write access to otherwise read-only memory mappings and thus increase their privileges on the system.<br />
<br />
<br />This could be abused by an attacker to modify existing setuid files with instructions to elevate privileges. An exploit using this technique has been found in the wild. This flaw affects most modern Linux distributions.<br />
<br />
Red Hat Product Security has rated this update as having a security impact of Important.<br />
<br />
<b>Impacted Products:</b><br />The following Red Hat Product versions are impacted:<br />• Red Hat Enterprise Linux 5<br />• Red Hat Enterprise Linux 6<br />• Red Hat Enterprise Linux 7<br />• Red Hat Enterprise MRG 2<br />• Red Hat Openshift Online v2<br /><br />
<b>Attack Description and Impact:</b>This flaw allows an attacker with a local system account to modify on-disk binaries, bypassing the standard permission mechanisms that would prevent modification without an appropriate permission set. This is achieved by racing the madvise(MADV_DONTNEED) system call while having the page of the executable mmapped in memory.<br /><br /><b>Take Action:</b>All Red Hat customers running the affected versions of the kernel are strongly recommended to update the kernel as soon as patches are available. Details about impacted packages as well as recommended mitigation are noted below. A system reboot is required in order for the kernel update to be applied.<br />
<br />
<b>Mitigation:</b>Please reference bug 1384344 - https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13 for detailed mitigation steps.<br /><br /><b>Updates for Affected Products:</b><br />A kpatch for customers running Red Hat Enterprise Linux 7.2 or greater will be available. Please open a support case to gain access to the kpatch.<br /><br />For more details about what a kpatch is: Is live kernel patching (kpatch) supported in RHEL 7? - please refer to https://access.redhat.com/solutions/2206511<br /><br /><br /><br />kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0tag:blogger.com,1999:blog-3721578923089663805.post-10258662142959596792016-10-17T17:25:00.001+08:002016-10-17T17:25:23.634+08:00Offline Nodes in MOAB<b>Change State of MOAB Clients Nodes </b><br />
<br />
To offline the nodes<br />
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># mnodectl -m state=drained node1</pre>
<br />
To flush the nodes<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># mnodectl -m state=flush node1</pre>
<br />
To reserve the nodes
<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># mnodectl -m state=reserved node1</pre>
<br />
To delete nodes<br />
<pre style="background: #eeeeee 0 0; border: #aaaaaa 1px solid; line-height: 1.5; padding: 15px;"># mnodectl -d node1</pre>
<br />kittycoolhttp://www.blogger.com/profile/03130071829662322607noreply@blogger.com0