Posts on

CloudFront Anycast IP

Thu, 09 Oct 2025 00:00:00 +0000

What is CloudFront Anycast IP really?

Australian SMS OTP Burner

Fri, 04 Jul 2025 00:00:00 +0000

Free Australian mobile numbers for receiving SMS OTPs.

WireGuard Setup

Fri, 14 Mar 2025 00:00:00 +0000

WireGuard Setup Instructions

Australian Tax Invoice Generator

Mon, 24 Feb 2025 00:00:00 +0000

A free Australian Tax Invoice Generator that creates PDF tax invoices.

CloudFront Functions with Dynamic Origin Pointing to Another CloudFront

Wed, 05 Feb 2025 00:00:00 +0000

Using CloudFront Functions to dynamically change the origin to another CloudFront distribution via updateRequestOrigin.

Home Assistant with DSM7

Thu, 04 Jan 2024 00:00:00 +0000

Install Home Assistant Supervisord with DSM7

Run a debug prob in a kubernetes cluster with gatekeeper

Fri, 27 Oct 2023 00:00:00 +0000

Workaround when kubectl debug command is blocked

Capture bash command error in file

Wed, 12 Oct 2022 00:00:00 +0000

Run a bash command and capture the error in a text file as well as store the exit code

Lookup CMK for a test in CDK

Tue, 06 Sep 2022 00:00:00 +0000

How to lookup dynamic CMK resource name in TS CDK

Extract TLD from string by bash

Fri, 25 Jun 2021 00:00:00 +0000

extract TLD when .com & .co.uk are mixed

Old Twitter Deleter

Thu, 24 Jun 2021 00:00:00 +0000

App delete old tweets

Add HTTP auth username into envoy proxy logging

Tue, 01 Jun 2021 00:00:00 +0000

Dodgy way to extract username from Authorization http header

Sony WH-1000XM4 noise issue

Thu, 08 Apr 2021 00:00:00 +0000

Strange wind noise coming from nearly new Sony WH-1000XM4

fargate container healthcheck

Mon, 18 Jan 2021 00:00:00 +0000

configuring healthcheck in a fargate task definition

Exclude a Kotlin subproject from Gradle Jacoco

Mon, 21 Dec 2020 00:00:00 +0000

When a sub-project doesn't support Jacoco

TrueImage DS918+

Mon, 29 Jun 2020 00:00:00 +0000

Install TrueImage on unsupported Synology NAS model

[BASH] Repeat Build Step

Mon, 22 Jun 2020 00:00:00 +0000

When you need to print out YAML build step for multiple environments.

CloudFlare Log Search

Fri, 19 Jun 2020 00:00:00 +0000

Cloudflare log search via log API

AWS TGW VPN using Unify UDM

Sat, 13 Jun 2020 00:00:00 +0000

Connect AWS TGW with Unify UDM

Amazon SES with Postfix in Ubuntu

Fri, 15 May 2020 00:00:00 +0000

HOWTO Setup AWS SES in Ubuntu

Selenoid Parallel CI testing

Tue, 12 May 2020 00:00:00 +0000

Selenium testing with built-in video recorder

Salesforce CLI with Docker in AWS

Fri, 28 Jun 2019 00:00:00 +0000

Auth was the tricky part as the normal auth requires a browser session rather than taking it from the CLI prompt.

Pooq Proxy

Sun, 14 Jan 2018 00:00:00 +0000

This is my current setup for watching Pooq in Australia for anyone interested. With local proxy, below 4k streaming (UHD) seems alright with NBN via AussieBB. TPG might have better throughput as they have PPC-1 submarine cable.

Generate custom x509 certificate in Okta

Sun, 19 Nov 2017 00:00:00 +0000

* Requires API key with admin access, least for the target app

Selenium test with docker-compose

Tue, 23 May 2017 00:00:00 +0000

Sample config file when using selenium standalone during test.

docker-compose YAML

AWS KMS - two liners

Thu, 18 May 2017 00:00:00 +0000

For binary encrypted output:

1
2


aws kms encrypt --region ap-southeast-2 --key-id alias/blah --plaintext fileb://blah --output text --query CiphertextBlob | base64 --decode > blah.enc
aws kms decrypt --ciphertext-blob fileb://blah.enc --output text --query Plaintext | base64 --decode

For base64 encrypted output:

User Profile Service failed the logon. User profile cannot be loaded.

Sun, 15 Jan 2017 00:00:00 +0000

https://support.microsoft.com/en-us/contact/menu/software/windows/ts/

https://support.microsoft.com/en-au/help/947215/you-receive-a-the-user-profile-service-failed-the-logon-error-message

Had to contact Microsoft support to receive default file. Download

Curl net performance test

Thu, 15 Dec 2016 00:00:00 +0000

Print out CloudFront X-Amz-Cf-Id when response time is slower than set threshold.

Replace Mercedes-Benz B250 cabin(pollen) filter replacement DIY

Mon, 21 Nov 2016 00:00:00 +0000

Quoted $300+ from dealer shop which I know a serious rip-off price for mere carbon filter.

MongoDB to DynamoDB

Wed, 08 Jun 2016 00:00:00 +0000

Attempted to convert rather large mongo dump to dynamo.

Seems like AWS data pipeline is most elegant way to do this if one can workaround with dynamo non-standard json format issue.

Europe Travel 2016

Thu, 28 Apr 2016 00:00:00 +0000

Turkey - Istanbul Good: Nice people and food Bad: Syrian refugees(=security risks), bit too excessive street sales

Lets Encrypt nginx SSL certificate renewal via cron

Wed, 18 Nov 2015 00:00:00 +0000

Add below as a cron entry.

1
2
3


#!/bin/bash
/path/letsencrypt/letsencrypt-auto --server https://acme-v01.api.letsencrypt.org/directory --renew-by-default -a webroot --webroot-path /webroot/ --email youremail --text --agree-tos --agree-dev-preview -d 7979.us -d www.7979.us auth
/etc/init.d/nginx reload

Then configure nginx SSL like below.

F5 AAM Cache for app generated pages

Mon, 16 Nov 2015 00:00:00 +0000

Dynamic content requires cache-control(max-age) and/or expires header to be cached.

Run HTTP POST request from chrome developer tools

Wed, 11 Nov 2015 00:00:00 +0000

Do this from developer mode console.

May need to load a page from the same domain to avoid cross domain validation failure.

Had a car accident in Victoria? Well, too bad.

Wed, 02 Sep 2015 00:00:00 +0000

I assume everyone reading this well aware about how the car insurance works and maybe made a few claims in past for minor scratches and parking mistakes. That covers the vehicle damages then any injuries and losses caused to human will be taken care by TAC. Until I recently had my first major car crush in my life, that was all I know about TAC and no question asked for past decade for paying extra dollars for it.

Contract position

Wed, 13 May 2015 00:00:00 +0000

pros: Market standard is 30% extra compare to similar perm position, pro-rata basis. Can claim expense for pretty much all the things, if there’s any.

Unlock Optus ZTE F286

Sat, 09 May 2015 00:00:00 +0000

Looks like this phone is getting remarkably popular with Optus Netflix deal.

rpmlib(FileDigests) / rpmlib(PayloadIsXz) is needed

Wed, 06 May 2015 00:00:00 +0000

This means you are attemping to install a RPM created in CentOS6+ from CentOS5.

gnu parallel

Wed, 29 Apr 2015 00:00:00 +0000

So I was testing this today and this is the message I saw when I ran it:

Ports for WDS

Tue, 31 Mar 2015 00:00:00 +0000

Ports for WDS

Google search said ‘The following TCP ports need to be open for WDS to work across a firewall: 135 and 5040 for RPC and 137 thru 139 for SMB.’

Query of the century

Thu, 05 Feb 2015 00:00:00 +0000

My co-worker showed me this today and it’s just gorgeous.

Hue with LDAP doesn't start up after Cloudera Manager upgrade

Tue, 03 Feb 2015 00:00:00 +0000

Latest Cloudera Manager omit ldap_username_pattern entry from hue.ini build process.

How to get free credit reports in Australia

Thu, 11 Dec 2014 00:00:00 +0000

Generally takes 10 business days.

1. Experian Drop an email to creditreport@au.experian.com Attach scanned copy of your driver’s license and medicare

Merging multiple avro files into single file using python

Tue, 02 Dec 2014 00:00:00 +0000

Couldn’t find any good example from Web so made one by myself.

Catches novated lease company never tell you

Fri, 07 Nov 2014 00:00:00 +0000

Some knowledges I have accuqired from using novated lease for last 2+ years.

CDH 5.2.0 spark history server issue

Fri, 17 Oct 2014 00:00:00 +0000

5.2.0-1.cdh5.2.0.p0.36 has been released couple of days ago.

It has a small bug with its spark bit, which make unable to start spark history server.

Simple pull to refresh

Tue, 30 Sep 2014 00:00:00 +0000

1. Get stuffs from https://github.com/zippy1978/jquery.scrollz

2. Add below in head section.

Foreman + Puppet autosign.conf doesn't work

Mon, 08 Sep 2014 00:00:00 +0000

Issue: 1. Foreman generates auto sign entry when /provision called first time. (boot loader hit) 2. Once OS is done and call puppet agent run, CSR doesn’t get auto-signed. - stays in ‘pending’ status forever

Log compression for Cloudera Manager Hadoop

Fri, 04 Jul 2014 00:00:00 +0000

Cloudera manager uses standard log4j which doesn’t support compression by itself.

Puppet Dell iDRAC control

Fri, 04 Jul 2014 00:00:00 +0000

1
2
3
4
5
6
7


if $::manufacturer == 'Dell Inc.' {
 exec { 'Disable DRAC SNMP':
 command =>; 'racadm config -g cfgOobSnmp -o cfgOobSnmpAgentEnable 0',
 path =>; '/opt/dell/srvadmin/sbin:/bin',
 onlyif =>; '/usr/bin/test `/opt/dell/srvadmin/sbin/racadm getconfig -g cfgOobSnmp -o cfgOobSnmpAgentEnable` -eq 1',
 }
}

Yea, I think onlyif bit is not nice.

Generate Bacula client cert/key pair via Puppet

Wed, 28 May 2014 00:00:00 +0000

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18


exec {'generate client key file':
command => '/usr/bin/openssl genrsa -out /bacula/bacula-client.key 2048;chmod 600 /bacula/bacula-client.key',
creates => '/bacula/bacula-client.key',
require => Package['bacula-fd'],
}

exec {'generate client cert file':
command => '/usr/bin/openssl req -new -key /bacula/bacula-client.key -x509 -subj "/C=AU/ST=somewhere/L=somewhere/O=something/CN=something" -out /bacula/bacula-client.cert',
creates => '/bacula/bacula-client.cert',
require => [ Package['bacula-fd'], Exec['generate client key file'], ],
}

exec {'combine client key and cert files':
notify => Service["bacula-fd"],
command => '/bin/cat /bacula/bacula-client.key /bacula/bacula-client.cert > /bacula/bacula-client.pem;chmod 600 /bacula/bacula-client.pem',
creates => '/bacula/bacula-client.pem',
require => [ Package['bacula-fd'], Exec['generate client key file'], Exec['generate client cert file'], ],
}

Would be nicer if I can send them to backup location but doesn’t really matter as there’s master key.

Convert .xva to .qcow2 (or raw)

Thu, 23 Jan 2014 00:00:00 +0000

Figured out while running below work.

Got the hint from: http://jolokianetworks.com/70Knowledge/Virtualization/Converting_from_Citrix_XenServer_to_Xen_open_source/Xenmigrate.py And got modded .py from: http://pastebin.com/MK5Da8CB

Run Citrix NetScaler VPX from KVM

Thu, 23 Jan 2014 00:00:00 +0000

1. Download Hyper-V image and extract .vhd

2. Covert it via running: qemu-img convert -O qcow2 NSVPX-ESX-10.1-119.7_nc-disk1.vhd NSVPX-XEN-10.1-119.7_nc.qcow2

Bacula daily (or weekly) email report for postgres DB

Tue, 21 Jan 2014 00:00:00 +0000

This now moved to: https://github.com/logan-han/sysadmin_stuffs/blob/master/bacula_report.sh

Dell Chat Support

Mon, 06 Jan 2014 00:00:00 +0000

Sick of telling phonetic code over the phone?

Try dell chat support here: http://www.dell.com/support/incidents/us/en/555/chat/tagchange

Disable msi with minimal interruption

Mon, 14 Oct 2013 00:00:00 +0000

1
2
3
4
5


ifconfig eth0 down
rmmod bnx2
modprobe bnx2 disable_msi=1
ifconfig eth0 up
route add -net default netmask 0.0.0.0 gw [default gw here] eth0

For bonding interface:

3TB partition support in Linux

Tue, 31 Jul 2012 00:00:00 +0000

Make a GPT partition:

1
2
3
4
5


parted /dev/sda
mklabel gpt
unit TB
mkpart primary 0 -0
quit

Format with 1% root reservation:

How to increase VM disk size without re-deploy the machine

Fri, 13 Jul 2012 00:00:00 +0000

Ref: http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&docTypeID=DT_KB_1_1&externalId=1006371

[root@demo ~]# fdisk /dev/sda

-Create a primary partition-

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17


[root@demo ~]# fdisk -l

Device Boot Start End Blocks Id System
/dev/sda1 * 1 64 512000 83 Linux
Partition 1 does not end on cylinder boundary.
/dev/sda2 64 1306 9972736 8e Linux LVM
/dev/sda3 1306 6527 41942367+ 83 Linux

[root@demo ~]# pvcreate /dev/sda3
[root@demo ~]# vgextend vg_demo /dev/sda3

[root@demo ~]# vgdisplay vg_demo | grep Free
Free PE / Size 10239 / 40.00 GiB

[root@demo ~]# lvextend -L+40.00G /dev/vg_demo/lv_root

[root@demo ~]# resize2fs /dev/vg_demo/lv_root

Note: I wouldn’t do this for any production system as it looks pretty inefficient way to extend volume size.

L2L VPN with ASA - Connection established but no packet coming from one side

Thu, 05 Jul 2012 00:00:00 +0000

Symtom:

1. Connection established.

2. 0 en/decapsulated packet from one side.

Fix Hadoop leap second bug without rebooting

Tue, 03 Jul 2012 00:00:00 +0000

Source: http://blog.wpkg.org/2012/07/01/java-leap-second-bug-30-june-1-july-2012-fix/

Applied our hadoop node having CPU usage issue. (CentOS)

Change iMessage & Facetime phone number in case of verification failure

Sun, 24 Jun 2012 00:00:00 +0000

Happened me after carrier change. Keep picking up SIM build-in number rather than my old number ported in later.

Device credential for Cisco license lookup and transfer

Wed, 16 May 2012 00:00:00 +0000

https://tools.cisco.com/SWIFT/LicensingUI/LicenseAdminServlet/licenseLookup

in CLI:

1
2


license save credential flash0:/credentials.lic
more flash0:/credentials.lic

Try SSH if you can’t get full strings from serial connection.

ZeroMQ - PHP client & Python server with multi part message example

Wed, 02 May 2012 00:00:00 +0000

Using pyobj or php data serialisation is not an option in this case..

hubot pandora bot adapter

Mon, 30 Apr 2012 00:00:00 +0000

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24


# Chat with pandora bot
#
# ai <anything> – PANDORA AI
#

QS = require “querystring”
xml2js = require ‘xml2js’

module.exports = (robot) ->
 robot.respond /(ai|AI)( me)? (.*)/i, (msg) ->
 user = msg.message.user.name
 query = msg.match[3]
 botid = “meh”
 parser = new xml2js.Parser({explicitArray: true})
 msg.http(“http://www.pandorabots.com/pandora/talk-xml”)
 .query({
 botid: botid
 custid: user
 input: query
 })
 .post() (err, resp, body) ->
 parser.parseString body, (err, result) ->
 #console.log(result.that)
 msg.send result.that

cloudmailin hipchat hubot script

Fri, 20 Apr 2012 00:00:00 +0000

Took really long time to deduce workaround… :S
Set cloudmailin as
http://blah.herokuapp.com/hubot/cloudmailin/room_id

Python - write compressed log file into HDFS for hadoop hive mapreduce

Thu, 01 Mar 2012 00:00:00 +0000

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33


import pyhdfs
from cStringIO import StringIO
import binascii

-snip-

#Set hdfs connection info
hdfsaddress = “namenode”
hdfsport = 12345
hdfsfn = “filename”

#gzip compression level
clevel = 1

-snip-

 logger.info(“Writing compressed data into ” + hdfsfn + “.gz”)
 #open hdfs file
 fout = pyhdfs.open(hdfs, hdfsfn + “.gz”, “w”)
 #compress the data and store it in compressed_data
 buf = StringIO()
 f = gzip.GzipFile(mode=’wb’, compresslevel=clevel,fileobj=buf)
 try:
 f.write(concatlog)
 finally:
 f.close()
 compressed_data = buf.getvalue()
 #write compressed data into hdfs
 pyhdfs.write(hdfs,fout,compressed_data)
 #close hdfs file
 logger.info(“Writing task finished”)
 pyhdfs.close(hdfs,fout)
-snip-

Facebook scribe with hdfs

Fri, 17 Feb 2012 00:00:00 +0000

packages:
libevent
hadoop-0.20-libhdfs
JDK for hdfs support

Boost
http://sourceforge.net/projects/boost/
./bootstrap.sh
./bjam
./bjam install

Flume DFO local storage usage check

Mon, 30 Jan 2012 00:00:00 +0000

It might be useful when flume driver failed.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46


!/usr/bin/perl
#Check flume DFO directory size

sub trim($);
use strict;
use warnings;

my $exit=0;
my $backlog_size = `du -s flume | awk {‘print \$1’}`;
$backlog_size = trim($backlog_size);

if ( !$ARGV[0] || !$ARGV[1])
{
########################### Usage of the plugin
print “check_flume_backlog critical_size warning_size \n”;
exit 0;
}

######################### Case 1 if State is Critical
if ($backlog_size > $ARGV[0])
{
print “Critical: “.$backlog_size.”b\n”;
exit 2;
}

######################## Case 2 if State is Warning
if($backlog_size > $ARGV[1] || $backlog_size == 0)
{
print “Warning: “.$backlog_size.”b\n”;
exit 1;
}

######################## Case 3 if State is OK
if($backlog_size < $ARGV[0] && $backlog_size < $ARGV[1])
{
print “OK: “.$backlog_size.”b\n”;
exit 0;
}

sub trim($)
{
 my $string = shift;
 $string =~ s/^\s+//;
 $string =~ s/\s+$//;
 return $string;
}

And for centralised monitoring..

Default fixed version value when creating an issue in JIRA

Tue, 24 Jan 2012 00:00:00 +0000

You can try to add some JavaScript code to the field that will perform required operation for you, in this case it should be ‘Fix Version’ field. You can refer to this documentation as a guideline:
http://confluence.atlassian.com/display/JIRACOM/Using+JavaScript+to+Set+Custom+Field+Values

delete mplayerx history

Fri, 30 Dec 2011 00:00:00 +0000

http://code.google.com/p/mplayerx/issues/detail?id=517

launch Terminal, and use the command to clear the history - tested.

Atlassian crowd authentication directory address force update

Wed, 28 Dec 2011 00:00:00 +0000

When you migrate atlassian product (confluence, jira etc etc) to somewhere else, your backup file includes fixed crowd address which is not gonna work for some cases.

Cisco Router config for ACME PACKET

Wed, 21 Dec 2011 00:00:00 +0000

sip-ua

authentication username -snip- password 7 -snip-

registrar dns:realm.domain expires 3600

Using additional public ip address over pppoe nat with cisco router

Fri, 30 Sep 2011 00:00:00 +0000

To allocate router a non-NAT IP (for AWS VPC etc etc)