wiki - Příspěvky [cs]

Replication pgsql

2026-03-20T13:17:32Z

Chalro:

<pre>
master db ->

postgresql.conf
listen_addresses = '*'
wal_level = replica
max_wal_senders = 10

CREATE ROLE replica_user WITH REPLICATION LOGIN PASSWORD 'pwd';
SELECT pg_create_physical_replication_slot('slave_node_1');

pg_hba.conf
host replication all 0.0.0.0/0 scram-sha-256

slave ->
rm -rf /var/lib/postgresql/12/main/*
pg_basebackup -h 10.200.200.4 -p 9005 -D /var/lib/postgresql/12/main/ -U replica_user -P -R -X stream -c fast -S slave_node_1 #pwd

systemctl start postgresql

master ->
SELECT * FROM pg_stat_replication;
</pre>
[[Category:postgres]]

Replication pgsql

2026-03-18T13:50:36Z

Chalro: založena nová stránka s textem „ <pre> master db -> postgresql.conf listen_addresses = '*' wal_level = replica max_wal_senders = 10 CREATE ROLE replica_user WITH REPLICATION LOGIN PASSWORD 'pwd'; pg_hba.conf host replication all 0.0.0.0/0 scram-sha-256 slave -> rm -rf /var/lib/postgresql/12/main/* pg_basebackup -h 10.200.200.4 -p 9005 -D /var/lib/postgresql/12/main/ -U replica_user -P -R -X stream -c fast #pwd systemctl start postgresql…“

<pre>
master db ->

postgresql.conf
listen_addresses = '*'
wal_level = replica
max_wal_senders = 10

CREATE ROLE replica_user WITH REPLICATION LOGIN PASSWORD 'pwd';

pg_hba.conf
host replication all 0.0.0.0/0 scram-sha-256

slave ->
rm -rf /var/lib/postgresql/12/main/*
pg_basebackup -h 10.200.200.4 -p 9005 -D /var/lib/postgresql/12/main/ -U replica_user -P -R -X stream -c fast #pwd

systemctl start postgresql

master ->
SELECT * FROM pg_stat_replication;
</pre>
[[Category:postgres]]

Kategorie:Postgres

2026-03-18T13:44:12Z

Chalro: založena nová stránka s textem „Category:Manuals“

[[Category:Manuals]]

BPC checkmk

2026-03-06T07:50:48Z

Chalro:

<pre>
/usr/lib/check_mk_agent/local/backuppc_status
</pre>

<pre>
#!/bin/bash
# Velmi zjednodušený příklad pro Checkmk Local Check
ERROR_COUNT=$(sudo -u backuppc /usr/share/backuppc/bin/BackupPC_serverMesg status hosts | grep -c "error")

if [ "$ERROR_COUNT" -eq 0 ]; then
echo "0 BackupPC_Status - OK: Vsechny zalohy jsou v poradku"
else
echo "2 BackupPC_Status - CRITICAL: Nalezeno $ERROR_COUNT chyb v zalohach"
fi
</pre>

[[Category:backuppc]]

BPC checkmk

2026-03-06T07:50:36Z

Chalro: založena nová stránka s textem „ <pre> /usr/lib/check_mk_agent/local/backuppc_status </pre> </pre> #!/bin/bash # Velmi zjednodušený příklad pro Checkmk Local Check ERROR_COUNT=$(sudo -u backuppc /usr/share/backuppc/bin/BackupPC_serverMesg status hosts | grep -c "error") if [ "$ERROR_COUNT" -eq 0 ]; then echo "0 BackupPC_Status - OK: Vsechny zalohy jsou v poradku" else echo "2 BackupPC_Status - CRITICAL: Nalezeno $ERROR_COUNT chyb v zalohach" fi </pre> Category:backu…“

<pre>
/usr/lib/check_mk_agent/local/backuppc_status
</pre>

</pre>
#!/bin/bash
# Velmi zjednodušený příklad pro Checkmk Local Check
ERROR_COUNT=$(sudo -u backuppc /usr/share/backuppc/bin/BackupPC_serverMesg status hosts | grep -c "error")

if [ "$ERROR_COUNT" -eq 0 ]; then
echo "0 BackupPC_Status - OK: Vsechny zalohy jsou v poradku"
else
echo "2 BackupPC_Status - CRITICAL: Nalezeno $ERROR_COUNT chyb v zalohach"
fi
</pre>

[[Category:backuppc]]

Sending mails

2026-03-06T07:40:16Z

Chalro: založena nová stránka s textem „ <pre> sudo -u backuppc /usr/share/backuppc/bin/BackupPC_sendEmail -u monitoring@example.com </pre> Category:Backuppc“

<pre> sudo -u backuppc /usr/share/backuppc/bin/BackupPC_sendEmail -u monitoring@example.com </pre>

[[Category:Backuppc]]

Kategorie:Backuppc

2026-03-06T07:39:20Z

Chalro: založena nová stránka s textem „ Category:Manuals“

[[Category:Manuals]]

Serial output

2026-02-19T08:24:24Z

Chalro: založena nová stránka s textem „Serial port can be used like "vga output" instead of vga/monitor .. * edit grub <pre> vim /etc/default/grub </pre> * add/edit follow <pre> # set terminal for output/input GRUB_TERMINAL="serial console" # set params -> unit 0 = ttyS0 GRUB_SERIAL_COMMAND="serial --speed=115200 --unit=0 --word=8 --parity=no --stop=1" # add params for kernel to set ttyS0 output GRUB_CMDLINE_LINUX_DEFAULT="quiet splash console=tty0 console=ttyS0,115200n8" </pre> * upda…“

Serial port can be used like "vga output" instead of vga/monitor ..

* edit grub
<pre>
vim /etc/default/grub
</pre>

* add/edit follow
<pre>
# set terminal for output/input
GRUB_TERMINAL="serial console"

# set params -> unit 0 = ttyS0
GRUB_SERIAL_COMMAND="serial --speed=115200 --unit=0 --word=8 --parity=no --stop=1"

# add params for kernel to set ttyS0 output
GRUB_CMDLINE_LINUX_DEFAULT="quiet splash console=tty0 console=ttyS0,115200n8"
</pre>
* update-grub
* in case of trouble, perform force enable
<pre>
systemctl enable --now serial-getty@ttyS0.service
</pre>

* thats all

[[Category:Linux]]

Tail in windows

2026-02-18T14:18:33Z

Chalro: založena nová stránka s textem „ * powershell <pre> Get-Content filenamehere -Wait -Tail 30 Get-Content atlassian-jira.log -Wait -Tail 30 </pre> Category:Windows“

* powershell
<pre>
Get-Content filenamehere -Wait -Tail 30
Get-Content atlassian-jira.log -Wait -Tail 30
</pre>
[[Category:Windows]]

Kategorie:Windows

2026-02-18T14:17:39Z

Chalro: založena nová stránka s textem „Category:Manuals“

[[Category:Manuals]]

Flash bios via programmer

2026-02-18T14:15:57Z

Chalro:

<pre>
1209 flashrom --programmer ch341a_spi -r thinkpad13_13.5.22.bin
1211 flashrom --programmer ch341a_spi -r thinkpad13_13.5.22.bin
1213 ghex thinkpad13_13.5.22.bin
1215 gzip thinkpad13_13.5.22.bin
1217 cp thinkpad13_13.5.22.bin.gz /home/rosta/Odpad/
1218 #flashrom --programmer ch341a_spi -r thinkpad13_13.5.22.bin
1219 flashrom --programmer ch341a_spi -w /home/rosta/Odpad/Lenovo\ ThinkPad\ 13\ 2nd\ Gen_unlocked\ file.bin
1221 gunzip thinkpad13_13.5.22.bin.gz
1223 flashrom --programmer ch341a_spi -w thinkpad13_13.5.22.bin
1269 flashrom --programmer ch341a_spi -w thinkpadL470_9.6.22.bin
1271 flashrom --programmer ch341a_spi -r thinkpadL470_9.6.22.bin
1273 ll /home/rosta/Odpad/Lenovo\ ThinkPad\ 13\ 2nd\ Gen_unlocked\ file.bin
1275 flashrom --programmer ch341a_spi -w /home/rosta/Odpad/Lenovo\ ThinkPad\ 13\ 2nd\ Gen_unlocked\ file.bin
1277 flashrom --programmer ch341a_spi -w thinkpadL470_9.6.22.bin
1278 flashrom --programmer ch341a_spi -w /home/rosta/Odpad/Lenovo\ L470_unlocked\ file.bin
1279 flashrom --programmer ch341a_spi -w thinkpadL470_9.6.22.bin
1394 flashrom --programmer ch341a_spi -r thinkpadL470_26.9.22.bin
1396 flashrom --programmer ch341a_spi -w /home/rosta/Odpad/Lenovo\ L470_unlocked\ file.bin
1397 flashrom --programmer ch341a_spi -w thinkpadL470_26.9.22.bin
1398 flashrom --programmer ch341a_spi -r thinkpadL470_26.9.22_2.bin
1399 flashrom --programmer ch341a_spi -w /home/rosta/Odpad/Lenovo\ L470_unlocked\ file.bin
</pre>

steps
<pre>
Hi,

How to use the unlocked file ??
Please obey the following steps.
===============
1.
Make sure CMOS is cleared by removing the 3V cell for about 20 seconds.
Also make sure laptop's main battery is out and disconnect the internal from the battery if
used (many new Lenovo may have an internal battery, the black box) by removing its connector from the motherboard.

It is important that the laptop will have NO battery attached but the CMOS cell.

If now your laptop can boot, but it ONLY has the computrace.
Please power on the laptop and set up a new supervisor password in the bios setting first.

(If your laptop has a bios password (supervisor password) when booting, please ignore this step.)

***Please back up your original bios file by the IC programmer three times. ( You had already done it.)
***Please reserve your original bios file.***
***And then program the bios chip with "our unlock file" by the IC programmer.***

2.
Plug in the AC adapter and wait for a few seconds, the laptop will start by itself.
(if not, press the Power button and start it).

The laptop may be on and off many times.
Please wait for the laptop reconfiguration.
***It will take a period of time.***
***Please be patient to wait for the booting procedure.***

You may hear some beeps then you will see the Lenovo splash image, press F1 to get the SVP password prompt
and enter "1234" for SVP and press Enter.

Next page will show you the Security DXE driver loading and showing "Press any key..".
Wait about 20-30 seconds before pressing a key.

Next it will display the warning message and the laptop Hardware ID. At this moment
Now Enter Key : 1234.

3.
And then it will show the next screen,
Obey the screen shows.
Press SPACE KEY twice.
And then turn off the laptop.

4.
Finally please program the bios chip with "your original bios file".***
And then turn on the laptop.
The bios password was removed.
The laptop has no bios password.
</pre>
[[Category:Hardware]]

Upgrade tomcat

2026-02-18T14:09:46Z

Chalro: založena nová stránka s textem „<pre> psáno bodov, abych nezapomnl postup nové edocaty $ systemctl stop edocat stáhnout novej tomcat wget https://dlcdn.apache.org/tomcat/tomcat-9/v9.0.62/bin/apache-tomcat-9.0.62.tar.gz pejmenovat tomcat v /opt/edocat/app/alfresco/tomcat na /opt/edocat/app/alfresco/tomcat_old rozbalit 9.0.62 do /opt/edocat/app/alfresco/tomcat zkopírovat do nového bin/setenv.sh 1:1 v novém tomcatu soubor conf/context.xml pidat <Resources cacheMaxSize="51200" cac…“

<pre>
psáno bodov, abych nezapomnl postup
nové edocaty
$ systemctl stop edocat
stáhnout novej tomcat
wget https://dlcdn.apache.org/tomcat/tomcat-9/v9.0.62/bin/apache-tomcat-9.0.62.tar.gz
pejmenovat tomcat v /opt/edocat/app/alfresco/tomcat na /opt/edocat/app/alfresco/tomcat_old
rozbalit 9.0.62 do /opt/edocat/app/alfresco/tomcat
zkopírovat do nového bin/setenv.sh 1:1
v novém tomcatu soubor conf/context.xml pidat <Resources cacheMaxSize="51200" cachingAllowed="true"/>
<Context>


<WatchedResource>WEB-INF/web.xml</WatchedResource>
<WatchedResource>WEB-INF/tomcat-web.xml</WatchedResource>
<WatchedResource>${catalina.base}/conf/web.xml<
/WatchedResource>


<Resources cacheMaxSize="51200" cachingAllowed="true"/>
</Context>
zkopírovat 1:1 shared/*
zkopírovat ze starého tomcatu webapps/alfresco.war a webapps/share.war
v souboru conf/server.xml povolit a upravit AJP protokol (v edc se používá)
<Connector protocol="AJP/1.3"
address="0.0.0.0"
port="8009"
redirectPort="8443" secretRequired="false" />
pi té píležitosti i 8080
10.
a.
b.
c.
11.
a.
b.
12.
13.
14.
<Connector port="8080" protocol="HTTP/1.1" address="
127.0.0.1"
connectionTimeout="20000"
redirectPort="8443" />
na závr nejdležitjší edit
mv /opt/edocat/app/alfresco/tomcat/conf/catalina.properties /opt/edocat/app/alfresco/tomcat/conf/catalina.properties_B
cp /opt/edocat/app/alfresco/tomcat_old/conf/catalina.properties /opt/edocat/app/alfresco/tomcat/conf/catalina.properties
do souboru tomcat/conf/catalina.properties upravit ádek shared.loader, již existuje ale je prázdný
shared.loader=${catalina.base}/shared/classes,${catalina.base}
/shared/lib/*.jar
nasmrovat složku logs
$ rm -r logs
$ ln -s ../../../logs/ logs
chown edocat:edocat -Rv tomcat
restorecon -Rv tomcat
$ systemctl restart edocat
možné problémy
Caused by: java.lang.IllegalArgumentException: The AJP Connector is
configured with secretRequired="true" but the secret attribute is
either null or "". This combination is not valid.
do server.xml k AJP conn pipsat secretRequired="false"
bash history:
systemctl stop edocat
mkdir /root/t9; cd /root/t9/; wget https://dlcdn.apache.org/tomcat
/tomcat-9/v9.0.62/bin/apache-tomcat-9.0.62.tar.gz; tar -xvf apachetomcat-9.0.62.tar.gz
mv /opt/edocat/app/alfresco/tomcat/ /opt/edocat/app/alfresco/tomcat_old/
ls -la /opt/edocat/app/alfresco/
cp -r /root/t9/apache-tomcat-9.0.62 /opt/edocat/app/alfresco/tomcat
cp /opt/edocat/app/alfresco/tomcat_old/bin/setenv.sh /opt/edocat/app
/alfresco/tomcat/bin/setenv.sh
cp -r /opt/edocat/app/alfresco/tomcat_old/shared /opt/edocat/app
/alfresco/tomcat/shared
ls -laR /opt/edocat/app/alfresco/tomcat/shared
cp /opt/edocat/app/alfresco/tomcat_old/webapps/alfresco.war /opt/edocat
/app/alfresco/tomcat/webapps/alfresco.war
cp /opt/edocat/app/alfresco/tomcat_old/webapps/share.war /opt/edocat/app
/alfresco/tomcat/webapps/share.war
vim /opt/edocat/app/alfresco/tomcat/conf/server.xml
vim /opt/edocat/app/alfresco/tomcat/conf/catalina.properties
cd /opt/edocat/app/alfresco/tomcat/conf/
rm -rf /opt/edocat/app/alfresco/tomcat/logs/
ln -s /opt/edocat/logs /opt/edocat/app/alfresco/tomcat/logs
ls -la /opt/edocat/app/alfresco/tomcat/logs
chown -R edocat:edocat -Rv /opt/edocat/app/alfresco/tomcat
restorecon -Rv /opt/edocat/app/alfresco/tomcat
systemctl start edocat
Bash history pro alternativní cestu k tomcat složce /opt/edocat/alfresco/alfresco-community/tomcat
1.
2.
3.
4.
5.
6.
a.
systemctl stop edocat
mkdir /root/t9
cd /root/t9/
wget --no-check-certificate https://dlcdn.apache.org/tomcat/tomcat-9
/v9.0.62/bin/apache-tomcat-9.0.62.tar.gz
tar -xvf apache-tomcat-9.0.62.tar.gz
mv /opt/edocat/alfresco/alfresco-community/tomcat/ /opt/edocat/alfresco
/alfresco-community/tomcat_old
cp -r /root/t9/apache-tomcat-9.0.62 /opt/edocat/alfresco/alfrescocommunity/tomcat
cp /opt/edocat/alfresco/alfresco-community/tomcat_old/bin/setenv.sh
/opt/edocat/alfresco/alfresco-community/tomcat/bin/setenv.sh
vim /opt/edocat/alfresco/alfresco-community/tomcat/conf/context.xml
cp -r /opt/edocat/alfresco/alfresco-community/tomcat_old/shared/ /opt
/edocat/alfresco/alfresco-community/tomcat/shared
cp /opt/edocat/alfresco/alfresco-community/tomcat_old/webapps/alfresco.
war /opt/edocat/alfresco/alfresco-community/tomcat/webapps/alfresco.war
cp /opt/edocat/alfresco//alfresco-community/tomcat_old/webapps/share.
war /opt/edocat/alfresco/alfresco-community/tomcat/webapps/share.war
vim /opt/edocat/alfresco/alfresco-community/tomcat/conf/server.xml
mv /opt/edocat/alfresco/alfresco-community/tomcat/conf/catalina.
properties /opt/edocat/alfresco/alfresco-community/tomcat/conf/catalina.
properties_B
cp /opt/edocat/alfresco/alfresco-community/tomcat_old/conf/catalina.
properties /opt/edocat/alfresco/alfresco-community/tomcat/conf/catalina.
properties
rm -rf /opt/edocat/alfresco/alfresco-community/tomcat/logs/
ln -s /opt/edocat/logs /opt/edocat/alfresco/alfresco-community/tomcat
/logs
cp /opt/edocat/alfresco/alfresco-community/tomcat_old/lib/postgresql.
jar /opt/edocat/alfresco/alfresco-community/tomcat/lib/
chown -R edocat:edocat -Rv /opt/edocat/alfresco/alfresco-community
/tomcat
restorecon -Rv /opt/edocat/alfresco/alfresco-community/tomcat
ls -la /opt/edocat/alfresco/alfresco-community/tomcat/logs
systemctl start edocat && tail -f /opt/edocat//logs/catalina.out
staré edocaty 3.x
systemctl stop edocat
stáhnout novej tomcat
wget --no-check-certificate https://dlcdn.apache.org/tomcat/tomcat-8/v8.5.81/bin/apache-tomcat-8.5.81.tar.gz
pejmenovat tomcat v /opt/edocat/alfresco-community/tomcat na /opt/edocat/alfresco-community/tomcat_old
rozbalit 8.5.81 do /opt/edocat/alfresco-community/tomcat
zkopírovat do nového bin/setenv.sh 1:1
v novém tomcatu soubor conf/context.xml upravit na
6.
a.
7.
8.
a.
b.
9.
a.
b.
c.
d.
10.
11.
12.
13.
14.
15.
16.
<Context>


<WatchedResource>WEB-INF/web.xml</WatchedResource>
<WatchedResource>WEB-INF/tomcat-web.xml</WatchedResource>
<WatchedResource>${catalina.base}/conf/web.xml<
/WatchedResource>


<Resources cacheMaxSize="51200" cachingAllowed="true"/>
</Context>
ze starého tomcatu pekopírovat conf/Catalina
v souboru conf/server.xml povolit a upravit AJP protokol (v edc se používá)
<Connector protocol="AJP/1.3"
address="0.0.0.0"
port="8009"
redirectPort="8443" secretRequired="false" />
pi té píležitosti i 8080
<Connector port="8080" protocol="HTTP/1.1" address="
127.0.0.1"
connectionTimeout="20000"
redirectPort="8443" />
nejdležitjší edit, catalina.properties a catalina.policy
mv /opt/edocat/alfresco-community/tomcat/conf/catalina.properties /opt/edocat/alfresco-community/tomcat_old/conf/catalina.
properties_B
cp /opt/edocat/alfresco-community/tomcat_old/conf/catalina.properties /opt/edocat/alfresco-community/tomcat/conf/catalina.
properties
mv /opt/edocat/alfresco-community/tomcat/conf/catalina.policy /opt/edocat/alfresco-community/tomcat_old/conf/catalina.policy_B
cp /opt/edocat/alfresco-community/tomcat_old/conf/catalina.policy /opt/edocat/alfresco-community/tomcat/conf/catalina.policy
zkopírovat JDBC lib/postgresql-9.4.1212.jar do nového tomcatu
zkopírovat 1:1 shared/* endorsed/* a scripts/*
Tento krok musí mít dostatek místa(velká warka) zkopírovat ze starého tomcatu webapps/ složky _vtibin alfresco a share + jejich
WARka, _vtibin.war alfresco.war a share.war
nasmrovat složku logs na pvodní, každá instalace jinak
chown edocat:edocat -Rv tomcat
restorecon -Rv tomcat
$ systemctl restart edoca

</pre>
[[Category:Tomcat]]

Kategorie:Tomcat

2026-02-18T14:09:02Z

Chalro: založena nová stránka s textem „Category:Manuals“

[[Category:Manuals]]

Systemd

2026-02-18T14:07:05Z

Chalro:

remove service
<pre>
systemctl stop [servicename]
systemctl disable [servicename]
rm /etc/systemd/system/[servicename]
rm /etc/systemd/system/[servicename] # and symlinks that might be related
rm /usr/lib/systemd/system/[servicename]
rm /usr/lib/systemd/system/[servicename] # and symlinks that might be related
systemctl daemon-reload
systemctl reset-failed
</pre>

example service for confluence
<pre>
/etc/systemd/system/confluence.service

[Unit]
Description=Atlassian Confluence Service
After=syslog.target network.target

[Service]
Type=forking
User=confluence
Group=confluence
ExecStart=/opt/confluence/740-install/bin/start-confluence.sh
ExecStop=/opt/confluence/740-install/bin/stop-confluence.sh
Environment="JAVA_HOME=/lib/jvm/jre-11"
Environment="CATALINA_OPTS=-XX:MetaspaceSize=512m -XX:MaxMetaspaceSize=512m"
[Install]
WantedBy=multi-user.target
</pre>

[[Category:Linux]]

Cisco os

2026-02-18T14:06:06Z

Chalro:

<pre>
sw1# configure
Enter configuration commands, one per line. End with CNTL/Z.
sw1(config)# vlan 50
sw1(config-vlan)# name rezerva
sw1(config-vlan)# state active
sw1(config-vlan)# no shutdown //link up
sw1(config-vlan)# shutdown //link down
sw1(config-vlan)# exit
sw1(config)#

sw1# config
Enter configuration commands, one per line. End with CNTLsw1(config)# interface Eth1/40
sw1(config)# interface Ethernet1/19
sw1(config-if)# switchport mode access
sw1(config-if)# switchport access vlan 10
sw1(config-if)# exit
sw1(config)# exit

copy running-config startup-config

sw1# configure
Enter configuration commands, one per line. End with CNTL/Z.
sw1(config)# vlan 50
sw1(config-vlan)# name rezerva
sw1(config-vlan)# state active
sw1(config-vlan)# no shutdown
sw1(config-vlan)# exit
sw1(config)#
sw1# config
Enter configuration commands, one per line. End with CNTL/Z.
sw1(config)# interface Eth1/20
sw1(config-if)# switchport mode trunk
sw1(config-if)# switchport trunk native vlan 1
sw1(config-if)# switchport trunk allowed vlan add 10,20,30,40
sw1(config-if)# exit
sw1# config
Enter configuration commands, one per line. End with CNTL/Z.
sw1(config)# interface Eth1/40
sw1(config-if)# switchport mode access
sw1(config-if)# switchport access vlan 10
sw1(config-if)# exit
sw1(config)# exit

sw1# copy running-config startup-config
[########################################] 100%
Copy complete, now saving to disk (please wait)...
sw1#
Comment by Rostislav Chalupský [ 04.03.2019 ]
sw1# show running-config interface ethernet Eth1/40
!Command: show running-config interface Ethernet1/40
!Time: Mon Mar 4 12:11:00 2019
version 6.0(2)U6(5)
interface Ethernet1/40

sw1# show mac address-table interface Eth1/2 Legend: * - primary entry, G - Gateway MAC, (R) - Routed MAC, O - Overlay MAC age - seconds since first seen,+ - primary entry using vPC Peer-Link VLAN MAC Address Type age Secure NTFY Ports/SWID.SSID.LID ---------+-----------------+--------+---------+------+----+------------------ * 1 90e2.ba6b.bbdc dynamic 1090 F F Eth1/2

</pre>
[[Category:Hardware]]

Cisco os

2026-02-18T14:04:28Z

Chalro: založena nová stránka s textem „<pre> sw1.dc3.onlio.com# configure Enter configuration commands, one per line. End with CNTL/Z. sw1.dc3.onlio.com(config)# vlan 50 sw1.dc3.onlio.com(config-vlan)# name rezerva sw1.dc3.onlio.com(config-vlan)# state active sw1.dc3.onlio.com(config-vlan)# no shutdown //link up sw1.dc3.onlio.com(config-vlan)# shutdown //link down sw1.dc3.onlio.com(config-vlan)# exit sw1.dc3.onlio.com(config)# sw1.dc3.onlio.com# config Enter configuration commands, one…“

<pre>
sw1.dc3.onlio.com# configure
Enter configuration commands, one per line. End with CNTL/Z.
sw1.dc3.onlio.com(config)# vlan 50
sw1.dc3.onlio.com(config-vlan)# name rezerva
sw1.dc3.onlio.com(config-vlan)# state active
sw1.dc3.onlio.com(config-vlan)# no shutdown //link up
sw1.dc3.onlio.com(config-vlan)# shutdown //link down
sw1.dc3.onlio.com(config-vlan)# exit
sw1.dc3.onlio.com(config)#

sw1.dc3.onlio.com# config
Enter configuration commands, one per line. End with CNTLsw1.dc3.onlio.com(config)# interface Eth1/40
sw1.dc3.onlio.com(config)# interface Ethernet1/19
sw1.dc3.onlio.com(config-if)# switchport mode access
sw1.dc3.onlio.com(config-if)# switchport access vlan 10
sw1.dc3.onlio.com(config-if)# exit
sw1.dc3.onlio.com(config)# exit

copy running-config startup-config

sw1.dc3.onlio.com# configure
Enter configuration commands, one per line. End with CNTL/Z.
sw1.dc3.onlio.com(config)# vlan 50
sw1.dc3.onlio.com(config-vlan)# name rezerva
sw1.dc3.onlio.com(config-vlan)# state active
sw1.dc3.onlio.com(config-vlan)# no shutdown
sw1.dc3.onlio.com(config-vlan)# exit
sw1.dc3.onlio.com(config)#
sw1.dc3.onlio.com# config
Enter configuration commands, one per line. End with CNTL/Z.
sw1.dc3.onlio.com(config)# interface Eth1/20
sw1.dc3.onlio.com(config-if)# switchport mode trunk
sw1.dc3.onlio.com(config-if)# switchport trunk native vlan 1
sw1.dc3.onlio.com(config-if)# switchport trunk allowed vlan add 10,20,30,40
sw1.dc3.onlio.com(config-if)# exit
sw1.dc3.onlio.com# config
Enter configuration commands, one per line. End with CNTL/Z.
sw1.dc3.onlio.com(config)# interface Eth1/40
sw1.dc3.onlio.com(config-if)# switchport mode access
sw1.dc3.onlio.com(config-if)# switchport access vlan 10
sw1.dc3.onlio.com(config-if)# exit
sw1.dc3.onlio.com(config)# exit

sw1.dc3.onlio.com# copy running-config startup-config
[########################################] 100%
Copy complete, now saving to disk (please wait)...
sw1.dc3.onlio.com#
Comment by Rostislav Chalupský [ 04.03.2019 ]
sw1.dc3.onlio.com# show running-config interface ethernet Eth1/40
!Command: show running-config interface Ethernet1/40
!Time: Mon Mar 4 12:11:00 2019
version 6.0(2)U6(5)
interface Ethernet1/40

sw1.dc3.onlio.com# show mac address-table interface Eth1/2 Legend: * - primary entry, G - Gateway MAC, (R) - Routed MAC, O - Overlay MAC age - seconds since first seen,+ - primary entry using vPC Peer-Link VLAN MAC Address Type age Secure NTFY Ports/SWID.SSID.LID ---------+-----------------+--------+---------+------+----+------------------ * 1 90e2.ba6b.bbdc dynamic 1090 F F Eth1/2
</pre>
[[Category:Hardware]]

Grep

2026-02-18T14:03:11Z

Chalro: založena nová stránka s textem „* grep za nalezem <pre> cat output-24_10_2.txt | grep -o -P '.{0,1}name.{0,17}' </pre> Category:Linux“

* grep za nalezem
<pre>
cat output-24_10_2.txt | grep -o -P '.{0,1}name.{0,17}'
</pre>
[[Category:Linux]]

Replikace AD

2026-02-18T14:02:12Z

Chalro: založena nová stránka s textem „<pre> repadmin /syncall repadmin /syncall /AdeP C:\Users\Administrator.ONLIO>nltest /dclist:onlio.local Get list of DCs in domain 'onlio.local' from '\\onlprodad2.onlio.local'. onlprodad2.onlio.local [DS] Site: Default-First-Site-Name onlprodad1.onlio.local [PDC] [DS] Site: Default-First-Site-Name The command completed successfully nslookup set type=all _ldap._tcp.dc._msdcs.onlio.local </pre> Category:ActiveDirectory“

<pre>
repadmin /syncall

repadmin /syncall /AdeP

C:\Users\Administrator.ONLIO>nltest /dclist:onlio.local
Get list of DCs in domain 'onlio.local' from '\\onlprodad2.onlio.local'.
onlprodad2.onlio.local [DS] Site: Default-First-Site-Name
onlprodad1.onlio.local [PDC] [DS] Site: Default-First-Site-Name
The command completed successfully

nslookup
set type=all
_ldap._tcp.dc._msdcs.onlio.local

</pre>
[[Category:ActiveDirectory]]

Kategorie:ActiveDirectory

2026-02-18T14:01:23Z

Chalro: založena nová stránka s textem „Category:Manuals“

[[Category:Manuals]]

Ldap debug alf

2026-02-18T14:00:20Z

Chalro: založena nová stránka s textem „<pre> úprava logování ldap a auth u alfresca na debug v souboru /opt/alfresco/alfresco/alfresco-community/tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties /opt/alfresco/app/alfresco/tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties přidat # ldap auth sync log4j.logger.org.alfresco.repo.importer.ImporterJob=debug log4j.logger.org.alfresco.repo.importer.ExportSourceImporter=debug log4j.logger.org.alfresco.repo.security.authentication.…“

<pre>
úprava logování ldap a auth u alfresca na debug
v souboru
/opt/alfresco/alfresco/alfresco-community/tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties
/opt/alfresco/app/alfresco/tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties
přidat
# ldap auth sync
log4j.logger.org.alfresco.repo.importer.ImporterJob=debug
log4j.logger.org.alfresco.repo.importer.ExportSourceImporter=debug
log4j.logger.org.alfresco.repo.security.authentication.ldap=debug
log4j.logger.org.alfresco.repo.security.authentication=debug
log4j.logger.org.alfresco.repo.security.authentication.AbstractChainingAuthenticationService=debug
log4j.logger.org.alfresco.repo.security.sync.ldap.LDAPUserRegistry=debug
log4j.logger.org.springframework.extensions.webscripts.DeclarativeWebScript=debug # toto je možná zbytečné...
</pre>
[[Category:Alfresco]]

Kategorie:Alfresco

2026-02-18T13:59:53Z

Chalro: obsah stránky nahrazen textem „ Category:Manuals“

[[Category:Manuals]]

Kategorie:Alfresco

2026-02-18T13:59:36Z

Chalro: založena nová stránka s textem „ <pre> úprava logování ldap a auth u alfresca na debug v souboru /opt/alfresco/alfresco/alfresco-community/tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties /opt/alfresco/app/alfresco/tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties přidat # ldap auth sync log4j.logger.org.alfresco.repo.importer.ImporterJob=debug log4j.logger.org.alfresco.repo.importer.ExportSourceImporter=debug log4j.logger.org.alfresco.repo.security.authentication…“

Jira Windows

2026-02-18T13:57:54Z

Chalro:

jira sql win login

nainstalovat firefox notepad++ a keystore explorer
Prekopirovat jira data do novýho ~7h!
jdbc driver do tomcat lib
dbconfig.xml ...
dll jdbc do system32/driver
ca cert LDAPS
upravit server.xml - pozor tomcat podava primo 443

edit JVM a pustit recovery_admin lze pouze editaci sluzby tomcat8w //ES/xyz, ignoruje to setenv.sh

to do:
ca cert pro ldaps

1. Instalace Jira 8.20.5 na nový aplikační server (1h)
2. Zkopírování dumpu ze stare DB do nové (v režii CPI)
3. Odstavení staré Jiry (volitelně - nebudeme nyní provádět)
4. Překopírování data složky a porovnání a následná konfigurace rozdílů (difference check) (3 - 6h)
5. Konfigurace nové instance 8.20.5 a DB (zahrnuje konfiguraci tomcat,DB,jdbc, drivers) (5 - 8h)
6. Konfigurace Add-ons (2 - 8h)
7. Kontrola a compilace custom add-ons (1-2h)
8. Troubleshooting (0 - 8h)

nový jdbc driver do tomcat lib

Microsoft JDBC Driver for SQL Server - JDBC Driver for SQL Server → https://go.microsoft.com/fwlink/?linkid=2186163

zazálohovat a upravit dbconfig.xml překopírovaný ze staré do nové jiry ... hlavně mssql ntlm auth ! manuálně !

dll jdbc do system32/driver

upravit server.xml - pozor tomcat podava primo 443

ca cert LDAPS, import do keystore jre

edit JVM a pustit recovery_admin lze pouze editaci sluzby tomcat8w //ES/xyz, ignoruje to setenv.bat

//poznamka, nahrazeni linuxoveho tailu powershellem → Get-Content jira.log -Wait -Tail 30

>tomcat9w //ES/JiraServiceDesk190223235704

Jira Windows

2026-02-18T13:56:02Z

Chalro: založena nová stránka s textem „ jira sql win login nainstalovat firefox notepad++ a keystore explorer Prekopirovat jira data do novýho ~7h! jdbc driver do tomcat lib dbconfig.xml ... dll jdbc do system32/driver ca cert LDAPS upravit server.xml - pozor tomcat podava primo 443 edit JVM a pustit recovery_admin lze pouze editaci sluzby tomcat8w //ES/xyz, ignoruje to setenv.sh to do: ca cert pro ldaps 1. Instalace Jira 8.20.5 na nový aplikační server (1h) 2. Zkopír…“

jira sql win login

nainstalovat firefox notepad++ a keystore explorer
Prekopirovat jira data do novýho ~7h!
jdbc driver do tomcat lib
dbconfig.xml ...
dll jdbc do system32/driver
ca cert LDAPS
upravit server.xml - pozor tomcat podava primo 443

edit JVM a pustit recovery_admin lze pouze editaci sluzby tomcat8w //ES/xyz, ignoruje to setenv.sh

to do:
ca cert pro ldaps

1. Instalace Jira 8.20.5 na nový aplikační server (1h)
2. Zkopírování dumpu ze stare DB do nové (v režii CPI)
3. Odstavení staré Jiry (volitelně - nebudeme nyní provádět)
4. Překopírování data složky a porovnání a následná konfigurace rozdílů (difference check) (3 - 6h)
5. Konfigurace nové instance 8.20.5 a DB (zahrnuje konfiguraci tomcat,DB,jdbc, drivers) (5 - 8h)
6. Konfigurace Add-ons (2 - 8h)
7. Kontrola a compilace custom add-ons (1-2h)
8. Troubleshooting (0 - 8h)

stávající postup spočíval v

nainstalovat firefox notepad++ a keystore explorer

Prekopirovat jira data do novýho ~7h! (stará prod na nový test čas)

vydumpování starých DB a import do nového DB stroje + jeho nastavení → v režii CPI ale byly konzultace

instalace nové jiry přes .exe z atlassian, přičemž Jira data adresář nahražen po překopírování z předešlého kroku

nový jdbc driver do tomcat lib

Microsoft JDBC Driver for SQL Server - JDBC Driver for SQL Server → https://go.microsoft.com/fwlink/?linkid=2186163

zazálohovat a upravit dbconfig.xml překopírovaný ze staré do nové jiry ... hlavně mssql ntlm auth ! manuálně !

dll jdbc do system32/driver

upravit server.xml - pozor tomcat podava primo 443

ca cert LDAPS, import do keystore jre

edit JVM a pustit recovery_admin lze pouze editaci sluzby tomcat8w //ES/xyz, ignoruje to setenv.bat

//poznamka, nahrazeni linuxoveho tailu powershellem → Get-Content jira.log -Wait -Tail 30

>tomcat9w //ES/JiraServiceDesk190223235704

OpenSSL

2026-02-18T13:54:25Z

Chalro: založena nová stránka s textem „* generate ssl cert via csr <pre> 1) vytvořit csr a key vytvořit soubor např csr.cnf [req] default_bits = 2048 distinguished_name = req_distinguished_name req_extensions = v3_req prompt = no [req_distinguished_name] C = CZ ST = . L = . O = esonic OU = . CN = confluence.esonic.cz [v3_req] keyUsage = keyEncipherment, dataEncipherment subjectAltName = @alt_names [alt_names] DNS.1 = confluence.esonic.cz zavolat openssl s parametry: $ openssl req -out…“

* generate ssl cert via csr
<pre>

1) vytvořit csr a key
vytvořit soubor např csr.cnf
[req]
default_bits = 2048
distinguished_name = req_distinguished_name
req_extensions = v3_req
prompt = no
[req_distinguished_name]
C = CZ
ST = .
L = .
O = esonic
OU = .
CN = confluence.esonic.cz
[v3_req]
keyUsage = keyEncipherment, dataEncipherment
subjectAltName = @alt_names
[alt_names]
DNS.1 = confluence.esonic.cz

zavolat openssl s parametry:
$ openssl req -out confluence.esonic.cz.csr -newkey rsa:2048 -nodes -keyout confluence.esonic.cz.key -config csr.conf

2) nechat vytvořit crt a CA crt

3) z key a crt udělat pfx(p12) , heslo při vytváření souboru poznamenat
$ openssl pkcs12 -inkey confluence.esonic.cz.key -in star_esonic_cz.crt -export -out confluence.esonic.cz.pfx

4) soubor confluence.esonic.cz.pfx přesunout na server

5) otevřít C:\Atlassian\confluence-710-install\conf\keystore.jks , například v "Keystore Explorer", který je již nahrán na serveru

6) importovat nový pfx soubor, drag and drop např z plochy do okna Keystore exploreru, pro import bude potřeba heslo z kroku 3

7) Keystore explorer vytvoří novou záložku kde je importovaný nový pfx, stačí zkopírovat (ctrl c) ze záložky a vložit (ctrl v) do záložky, kde je otevřený keystore.jks

8) odmazat starý/prošlý crt

9) uložit keystore.jks (ctrl s)

10) restartovat confluence via službu ve windows
</pre>

[[Category:Linux]]

Megacli

2026-02-18T13:52:43Z

Chalro: založena nová stránka s textem „ výpis disků MegaCli64 -pdlist -aALL locate disk MegaCli64 -pdlocate -start -physdrv[252:3] -a0 MegaCli64: error while loading shared libraries: libncurses.so.5: cannot open shared object file: No such file or directory apt install libncurses5 Category:Hardware“

výpis disků

MegaCli64 -pdlist -aALL

locate disk

MegaCli64 -pdlocate -start -physdrv[252:3] -a0

MegaCli64: error while loading shared libraries: libncurses.so.5: cannot open shared object file: No such file or directory
apt install libncurses5

[[Category:Hardware]]

Iptables

2026-02-18T13:52:00Z

Chalro:

example
<pre>
# Generated by iptables-save v1.8.10 (nf_tables) on Mon Sep 16 12:03:49 2024
*filter
:INPUT DROP [3:140]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:SSHATTACK - [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m multiport --dports 25,143,587,465,993,995,80,443,1022 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A INPUT -s 84.246.166.0/24,77.48.10.155,188.245.103.82,46.234.105.145/32,46.234.105.154/32 -p tcp -m tcp --dport 22201 -j ACCEPT
#-A INPUT -i eth0 -p tcp -m state --dport 22201 --state NEW -m recent --set
#-A INPUT -i eth0 -p tcp -m state --dport 22201 --state NEW -m recent --update --seconds 1200 --hitcount 2 -j SSHATTACK
-A INPUT -s 84.246.166.0/24 -p tcp -m tcp --dport 6556 -j ACCEPT
-A INPUT -s 77.48.10.155/32 -p tcp -m tcp --dport 6556 -j ACCEPT
-A INPUT -s 84.246.166.0/24 -p tcp -m multiport --dports 443,80 -j ACCEPT
-A INPUT -s 77.48.10.155/32 -p tcp -m multiport --dports 443,80 -j ACCEPT
-A INPUT -s 46.234.105.145/32 -p tcp -m multiport --dports 443,80 -j ACCEPT
-A INPUT -s 84.246.166.0/24 -p tcp -m tcp --dport 9000 -j ACCEPT
-A INPUT -s 77.48.10.155/32 -p tcp -m tcp --dport 9000 -j ACCEPT
-A INPUT -s 46.234.105.145/32 -p tcp -m tcp --dport 9000 -j ACCEPT
-A INPUT -j LOG
-A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -p tcp -m state --state NEW -j ACCEPT
-A OUTPUT -p udp -m state --state NEW -j ACCEPT
-A OUTPUT -p icmp -m state --state NEW -j ACCEPT
-A SSHATTACK -j LOG --log-prefix "Possible SSH attack! " --log-level 7
-A SSHATTACK -j DROP
COMMIT
# Completed on Mon Sep 16 12:03:49 2024
</pre>

[[Category:Linux]]

Iptables

2026-02-18T13:50:41Z

Chalro: založena nová stránka s textem „example <pre> # Generated by iptables-save v1.8.10 (nf_tables) on Mon Sep 16 12:03:49 2024 *filter :INPUT DROP [3:140] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :SSHATTACK - [0:0] -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -p tcp -m multiport --dports 25,143,587,465,993,995,80,443,1022 -j ACCEPT -A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT -A INPUT -s 84.246.166.0/24,77.48.10.155,188.245.103.82,46.23…“

example
<pre>
# Generated by iptables-save v1.8.10 (nf_tables) on Mon Sep 16 12:03:49 2024
*filter
:INPUT DROP [3:140]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:SSHATTACK - [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m multiport --dports 25,143,587,465,993,995,80,443,1022 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A INPUT -s 84.246.166.0/24,77.48.10.155,188.245.103.82,46.234.105.145/32,46.234.105.154/32 -p tcp -m tcp --dport 22201 -j ACCEPT
-A INPUT -s 84.246.166.0/24 -p tcp -m tcp --dport 6556 -j ACCEPT
-A INPUT -s 77.48.10.155/32 -p tcp -m tcp --dport 6556 -j ACCEPT
-A INPUT -s 84.246.166.0/24 -p tcp -m multiport --dports 443,80 -j ACCEPT
-A INPUT -s 77.48.10.155/32 -p tcp -m multiport --dports 443,80 -j ACCEPT
-A INPUT -s 46.234.105.145/32 -p tcp -m multiport --dports 443,80 -j ACCEPT
-A INPUT -s 84.246.166.0/24 -p tcp -m tcp --dport 9000 -j ACCEPT
-A INPUT -s 77.48.10.155/32 -p tcp -m tcp --dport 9000 -j ACCEPT
-A INPUT -s 46.234.105.145/32 -p tcp -m tcp --dport 9000 -j ACCEPT
-A INPUT -j LOG
-A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -p tcp -m state --state NEW -j ACCEPT
-A OUTPUT -p udp -m state --state NEW -j ACCEPT
-A OUTPUT -p icmp -m state --state NEW -j ACCEPT
-A SSHATTACK -j LOG --log-prefix "Possible SSH attack! " --log-level 7
-A SSHATTACK -j DROP
COMMIT
# Completed on Mon Sep 16 12:03:49 2024
</pre>

[[Category:Linux]]

Systemd

2026-02-18T13:49:13Z

Chalro: založena nová stránka s textem „remove service <pre> systemctl stop [servicename] systemctl disable [servicename] rm /etc/systemd/system/[servicename] rm /etc/systemd/system/[servicename] # and symlinks that might be related rm /usr/lib/systemd/system/[servicename] rm /usr/lib/systemd/system/[servicename] # and symlinks that might be related systemctl daemon-reload systemctl reset-failed </pre> Category:Linux“

Flash bios via programmer

2026-02-18T13:44:37Z

Chalro: založena nová stránka s textem „<pre> 1209 flashrom --programmer ch341a_spi -r thinkpad13_13.5.22.bin 1211 flashrom --programmer ch341a_spi -r thinkpad13_13.5.22.bin 1213 ghex thinkpad13_13.5.22.bin 1215 gzip thinkpad13_13.5.22.bin 1217 cp thinkpad13_13.5.22.bin.gz /home/rosta/Odpad/ 1218 #flashrom --programmer ch341a_spi -r thinkpad13_13.5.22.bin 1219 flashrom --programmer ch341a_spi -w /home/rosta/Odpad/Lenovo\ ThinkPad\ 13\ 2nd\ Gen_unlocked\ file.bin 1221 gunzip…“

Kubernetes

2026-02-18T13:38:37Z

Chalro:

test -> lorem ipsum

878 vim /var/snap/microk8s/current/args/kube-apiserver

879 vim /var/snap/microk8s/current/args/kubelet

880 vim /var/snap/microk8s/current/args/kube-proxy

882 vim /var/snap/microk8s/current/args/kube-controller-manager

root@k8s:~# microk8s kubectl get pods -n openvpn

NAME READY STATUS RESTARTS AGE

openvpn-server-56f8b8fcc4-z5cbt 0/1 CrashLoopBackOff 104 (3m23s ago) 8h

root@k8s:~# microk8s kubectl logs -n openvpn openvpn-server-56f8b8fcc4-z5cbt

(viz jeho dokumentace <nowiki>https://hub.docker.com/r/gerasiov/openvpn</nowiki>)

docker run --rm -it -v /root/openvpn-config:/data gerasiov/openvpn init --server vpn6.chalupsky.org --port 1194 --no-ca-pass --protocol tcp6 --ipv6 --device tap

a namapování jako configmap

microk8s kubectl create configmap openvpn-config --from-file=/root/openvpn-config/control.conf -n openvpn

a restartu podu

microk8s kubectl rollout restart deployment openvpn-server -n openvpn

microk8s kubectl get svc -A
microk8s kubectl get pods -A

355 microk8s kubectl get svc -n ingress
356 microk8s kubectl get pods -n ingress
357 microk8s kubectl edit deployment -n ingress nginx-ingress-microk8s-controller

360 microk8s kubectl edit daemonset -n ingress nginx-ingress-microk8s-controller
361 microk8s kubectl delete pod -n ingress -l name=nginx-ingress-microk8s

microk8s kubectl get svc -n default grafana
microk8s kubectl edit ingress grafana-ingress -n default
microk8s kubectl apply -f grafana-ingress.yaml
microk8s kubectl get ingress -n default
microk8s kubectl describe ingress grafana-ingress -n default

microk8s kubectl edit deployment -n ingress nginx-ingress-microk8s-controller
microk8s kubectl edit daemonset -n ingress nginx-ingress-microk8s-controller

microk8s kubectl edit svc ingress-nginx -n ingress

420 microk8s kubectl get svc -n default
421 microk8s kubectl get svc -n default grafana
422 microk8s kubectl describe ingress grafana-ingress -n default
423 microk8s kubectl edit daemonset -n ingress nginx-ingress-microk8s-controller
424 microk8s kubectl edit ingress grafana-ingress -n default
425 microk8s kubectl edit svc ingress-nginx -n ingress

microk8s kubectl edit svc grafana -n default
microk8s kubectl delete pod -l app.kubernetes.io/name=grafana -n default

microk8s kubectl delete pod -n ingress --all

# zvednutí test podu
647 microk8s kubectl get nodes
648 microk8s kubectl run test-pod --image=busybox --restart=Never --command -- sleep 9999
649 microk8s kubectl get pod test-pod -o wide

# spusteni prikazu v podu
microk8s kubectl exec -it test-pod -- ping6 google.com

639 microk8s refresh-certs --cert server.crt
microk8s stop
microk8s start

microk8s refresh-certs --cert ca.crt
microk8s stop
microk8s start

microk8s kubectl get nodes

microk8s kubectl get ippools -o yaml

microk8s kubectl apply -f - <<EOF
apiVersion: crd.projectcalico.org/v1
kind: IPPool
metadata:
name: ipv6-pool
spec:
cidr: fd00:10:152:183::/108
ipipMode: Never
natOutgoing: true
disabled: false
EOF
microk8s kubectl delete pod -n kube-system -l k8s-app=calico-node

microk8s kubectl delete pod test-pod

# debug problemu
microk8s inspect

journalctl -n 500 -u snap.microk8s.daemon-kubelite

#MicroK8s: tři roky zkušeností s Kubernetes v Ubuntu [[https://www.root.cz/clanky/microk8s-tri-roky-zkusenosti-s-kubernetes-v-ubuntu/]]
[[Category:Kubernetes]]

Kubernetes

2026-02-18T13:36:58Z

Chalro:

Ssh

2026-02-18T13:34:22Z

Chalro: založena nová stránka s textem „ ssh tunnel <pre>ssh -L 127.0.0.1:8000:172.16.2.252:80 finalhost</pre> ssh config <pre> Host name hostname ip port 22 user root ProxyJump hostnameofjump ForwardX11 yes </pre> Category:Linux“

ssh tunnel
<pre>ssh -L 127.0.0.1:8000:172.16.2.252:80 finalhost</pre>

ssh config
<pre>
Host name
hostname ip
port 22
user root
ProxyJump hostnameofjump
ForwardX11 yes
</pre>

[[Category:Linux]]

Rsync vm migration

2026-02-18T13:23:28Z

Chalro: Chalro přesunul stránku Rsync migrace vm na Rsync vm migration bez založení přesměrování

steps for migration of vm from linux

<pre>Migrovaný stroj: karel
Cílový stroj: sysresccd</pre>

<pre>založit nový virtuál s požadovaným diskem a ideálně stejnou MAC eth jako
předešlý stroj</pre>

<pre>root@sysresccd /root % fdisk -l
Disk /dev/vda: ......</pre>

<pre>root@sysresccd /root % parted /dev/vda
GNU Parted 3.2
Using /dev/vda
Welcome to GNU Parted! Type 'help' to view a list of commands.
(parted) mklabel msdos
(parted) mkpart primary
File system type? [ext2]?
Start? 1
End? 500M
(parted) mkpart primary
File system type? [ext2]?
Start? 500M
End? xyzG
(parted) quit</pre>

<pre>[root@karel ~]# ls -l /dev/disk/by-uuid/
[root@karel ~]# blkid
zde zjistime uuid oddilu bude třeba v budoucnu
vytvareni bootu</pre>

<pre>root@sysresccd /root % mkfs.ext4 /dev/vda1 -U 723faaa8-1ad7-46a3-9b7cc98c2323e8ba
root@sysresccd /root % pvcreate /dev/vda2
root@sysresccd /root % pvscan
root@sysresccd /root % pvdisplay
root@sysresccd /root % vgcreate vg_roklenip /dev/vda2
root@sysresccd /root % vgdisplay
root@sysresccd /root % lvcreate -L 44.1G -n system vg_roklenip
root@sysresccd /root % lvcreate -L 1.99G -n swap vg_roklenip
</pre>

<pre>
centos 7 a xfs
root@sysresccd /root % mkfs.xfs -m crc=0 -f /dev/mapper/vg_roklenip-system
root@sysresccd /root % xfs_admin -U 46721014-9724-4aee-9ace-a67b931f6276
/dev/mapper/vg_roklenip-system
Last update: 2016/05/10 08:49 migrace http://192.168.112.9/monitor/wiki/doku.php?id=migrace
http://192.168.112.9/monitor/wiki/ Printed on 2017/02/27 13:21</pre>

<pre>
centos 6 a ext4
root@sysresccd /root % mkfs.ext4 /dev/mapper/vg_roklenip-system -U 723faaa8-
1ad7-46a3-9b7c-c98c2323e8ba
root@sysresccd /root % mkswap /dev/mapper/vg_roklenip-swap -U cb25c6aa-42ae4d2c-b64b-12b596e9492c
root@sysresccd /root % mkdir /dest
root@sysresccd /root % mount /dev/mapper/vg_roklenip-system /dest
root@sysresccd /root % mkdir /dest/boot
root@sysresccd /root % mount /dev/vda1 /dest/boot
</pre>

<pre>
[root@karel ~]# screen -dmS migrace
[root@karel ~]# screen -x migrace
[root@karel ~]# time rsync -av --progress --numeric-ids --exclude='/proc/**' --exclude='/sys/**' --exclude='/tmp/**' --exclude='/var/tmp/**' --
exclude='/dev/**' --exclude='/run/**' --exclude='/var/lib/php5/**' --exclude='/mnt/**' --delete / -e ssh root@x.x.x.x:/dest/
</pre>
<pre>
po rsyncu povypínat služby, udělat finální rsync a poté stroj vypnout
nastartovat nový opět se sysrescd s volbou "použít instalaci na pc
(automatický chroot)"
[root@karel ~]# grub-install /dev/vda
[root@karel ~]# grub-install --recheck /dev/vda
</pre>

<pre>
reboot a stroj by měl naběhnout
</pre>

[[Category:Linux]]

Rsync vm migration

2026-02-18T13:22:47Z

Chalro: založena nová stránka s textem „steps for migration of vm from linux <pre>Migrovaný stroj: karel Cílový stroj: sysresccd</pre> <pre>založit nový virtuál s požadovaným diskem a ideálně stejnou MAC eth jako předešlý stroj</pre> <pre>root@sysresccd /root % fdisk -l Disk /dev/vda: ......</pre> <pre>root@sysresccd /root % parted /dev/vda GNU Parted 3.2 Using /dev/vda Welcome to GNU Parted! Type 'help' to view a list of commands. (parted) mklabel msdos (parted) mkpart pri…“

Git pass mgr

2026-02-18T11:50:39Z

Chalro: založena nová stránka s textem „Git pwd Mgr Špatně git config --global credential.helper store Dobře git config --global --unset credential.helper git config --global credential.helper manager Category:git“

Git pwd Mgr

Špatně
git config --global credential.helper store

Dobře
git config --global --unset credential.helper
git config --global credential.helper manager

[[Category:git]]

Kategorie:Git

2026-02-18T11:49:35Z

Chalro: založena nová stránka s textem „ Category:manuals“

[[Category:manuals]]

Hikvision

2026-02-18T10:32:39Z

Chalro:

rtsp://10.0.1.13:554/Streaming/Channels/102
rtsp://10.0.1.4:554/Streaming/Channels/102
rtsp://10.0.1.11:554/Streaming/Channels/102
rtsp://10.0.1.5:554/Streaming/Channels/102

<div class="gitea-load" data-url="https://git.chalupsky.org/chalro/ffmpeg_divide/raw/branch/main/cameras.sh">
Loading script from Gitea...
</div>

[[Category:hardware]]

MediaWiki:Common.js

2026-02-18T10:30:50Z

Chalro:

/* Zde uvedený JavaScript bude použit pro všechny uživatele při načtení každé stránky */
/* mw.loader.using( ['ext.categoryTree'] ); */

/* $( document ).ready(function() {
$('.CategoryTreeToggle').click();
});*/
/* $( document ).ready(function() { $('.CategoryTreeToggle[data-ct-state="collapsed"]').click(); });*/
/*
$( document ).ready(function() {
$('.CategoryTreeToggle[data-ct-state="collapsed"]').click();
});*/

/*$(function() {
// 1. Najdeme kontejner pro navigaci (v novém Vectoru je to id 'mw-panel-navigation')
var $target = $('#mw-panel-navigation, #mw-panel');

if ($target.length) {
// Vytvoříme hezčí kontejner, který zapadne do designu
var $customNav = $('<nav class="vector-menu vector-menu-portal portal" id="p-manuals-tree">' +
'<label class="vector-menu-heading"><span>Manuals</span></label>' +
'<div class="vector-menu-content"><ul class="vector-menu-content-list" id="manuals-target"></ul></div>' +
'</nav>');

$target.append($customNav);

// Načteme strom
$.get(mw.util.wikiScript('api'), {
action: 'parse',
text: '<categorytree mode="all" depth="20" hideroot="on">Manuals</categorytree>',
format: 'json'
}).done(function(data) {
if (data.parse && data.parse.text) {
$('#manuals-target').html(data.parse.text['*']);
}
});
}
});
*/
/* Kód pro načítání textu z Gitea */
$(function() {
$('.gitea-load').each(function() {
var $container = $(this);
var url = $container.data('url');

fetch(url)
.then(response => {
if (!response.ok) throw new Error('Network response was not ok');
return response.text();
})
.then(data => {
// Vložíme text do pre tagu pro zachování formátování
//$container.html('<pre style="background:#f9f9f9; border:1px solid #ddd; padding:10px;">' +
// $('<div/>').text(data).html() + '</pre>');
$container.html('<pre style="background:#282a36; color:#f8f8f2; border-radius:5px; padding:15px; overflow-x:auto; font-family:Monaco,Consolas,monospace; line-height:1.5; box-shadow: inset 0 0 10px rgba(0,0,0,0.5);">' +
$('<div/>').text(data).html() + '</pre>');
})
.catch(error => {
$container.html('<span style="color:red;">Chyba načítání: ' + error.message + '</span>');
});
});
});

Hikvision

2026-02-18T08:14:00Z

Chalro:

Hikvision

2026-02-18T08:12:10Z

Chalro:

Hikvision

2026-02-18T08:11:53Z

Chalro:

rtsp://10.0.1.13:554/Streaming/Channels/102
rtsp://10.0.1.4:554/Streaming/Channels/102
rtsp://10.0.1.11:554/Streaming/Channels/102
rtsp://10.0.1.5:554/Streaming/Channels/102

{{#embed:https://git.chalupsky.org/chalro/ffmpeg_divide/raw/branch/main/cameras.sh }}
<div class="gitea-load" data-url="https://git.chalupsky.org/chalro/ffmpeg_divide/raw/branch/main/cameras.sh">
Loading script from Gitea...
</div>

[[Category:hardware]]

MediaWiki:Common.js

2026-02-18T08:09:43Z

Chalro:

/* Zde uvedený JavaScript bude použit pro všechny uživatele při načtení každé stránky */
/* mw.loader.using( ['ext.categoryTree'] ); */

/* $( document ).ready(function() {
$('.CategoryTreeToggle').click();
});*/
/* $( document ).ready(function() { $('.CategoryTreeToggle[data-ct-state="collapsed"]').click(); });*/
/*
$( document ).ready(function() {
$('.CategoryTreeToggle[data-ct-state="collapsed"]').click();
});*/

/*$(function() {
// 1. Najdeme kontejner pro navigaci (v novém Vectoru je to id 'mw-panel-navigation')
var $target = $('#mw-panel-navigation, #mw-panel');

if ($target.length) {
// Vytvoříme hezčí kontejner, který zapadne do designu
var $customNav = $('<nav class="vector-menu vector-menu-portal portal" id="p-manuals-tree">' +
'<label class="vector-menu-heading"><span>Manuals</span></label>' +
'<div class="vector-menu-content"><ul class="vector-menu-content-list" id="manuals-target"></ul></div>' +
'</nav>');

$target.append($customNav);

// Načteme strom
$.get(mw.util.wikiScript('api'), {
action: 'parse',
text: '<categorytree mode="all" depth="20" hideroot="on">Manuals</categorytree>',
format: 'json'
}).done(function(data) {
if (data.parse && data.parse.text) {
$('#manuals-target').html(data.parse.text['*']);
}
});
}
});
*/
/* Kód pro načítání textu z Gitea */
$(function() {
$('.gitea-load').each(function() {
var $container = $(this);
var url = $container.data('url');

fetch(url)
.then(response => {
if (!response.ok) throw new Error('Network response was not ok');
return response.text();
})
.then(data => {
// Vložíme text do pre tagu pro zachování formátování
$container.html('<pre style="background:#f9f9f9; border:1px solid #ddd; padding:10px;">' +
$('<div/>').text(data).html() + '</pre>');
})
.catch(error => {
$container.html('<span style="color:red;">Chyba načítání: ' + error.message + '</span>');
});
});
});

Hikvision

2026-02-18T08:03:59Z

Chalro:

rtsp://10.0.1.13:554/Streaming/Channels/102
rtsp://10.0.1.4:554/Streaming/Channels/102
rtsp://10.0.1.11:554/Streaming/Channels/102
rtsp://10.0.1.5:554/Streaming/Channels/102

{{#embed:https://git.chalupsky.org/chalro/ffmpeg_divide/raw/branch/main/cameras.sh }}

{{#widget:GetCode|id=1|url=https://git.chalupsky.org/chalro/ffmpeg_divide/raw/branch/main/cameras.sh}}

[[Category:hardware]]

Widget:GetCode

2026-02-18T08:03:21Z

Chalro: založena nová stránka s textem „<noinclude>This widget pull text from URL.</noinclude> <includeonly> <div id="git-content-{{id}}">Loading...</div> <script> fetch("{{{url}}}") .then(r => r.text()) .then(t => document.getElementById("git-content-{{id}}").innerText = t); </script> </includeonly>“

<noinclude>This widget pull text from URL.</noinclude>
<includeonly>
<div id="git-content-{{id}}">Loading...</div>
<script>
fetch("{{{url}}}")
.then(r => r.text())
.then(t => document.getElementById("git-content-{{id}}").innerText = t);
</script>
</includeonly>

Hikvision

2026-02-17T18:23:35Z

Chalro:

Hikvision

2026-02-17T18:23:17Z

Chalro:

rtsp://10.0.1.13:554/Streaming/Channels/102
rtsp://10.0.1.4:554/Streaming/Channels/102
rtsp://10.0.1.11:554/Streaming/Channels/102
rtsp://10.0.1.5:554/Streaming/Channels/102

{{#embed:https://git.chalupsky.org/chalro/ffmpeg_divide/raw/branch/main/cameras.sh }}
<syntaxhighlight lang="bash">
{{#embed: https://git.chalupsky.org/chalro/ffmpeg_divide/raw/branch/main/cameras.sh }}
</syntaxhighlight>
[[Category:hardware]]

Hikvision

2026-02-17T18:22:39Z

Chalro:

Hikvision

2026-02-17T18:01:29Z

Chalro:

Hikvision

2026-02-17T17:57:05Z

Chalro:

rtsp://10.0.1.13:554/Streaming/Channels/102
rtsp://10.0.1.4:554/Streaming/Channels/102
rtsp://10.0.1.11:554/Streaming/Channels/102
rtsp://10.0.1.5:554/Streaming/Channels/102

{{#embed: https://git.chalupsky.org/chalro/ffmpeg_divide/raw/branch/main/cameras.sh | lang=bash | lineNumbers=true }}
[[Category:hardware]]