Solaris, OpenSolaris and GNU/Solaris – What’s in the name

I always wanted to try my hands on to Open Solaris since the day Sun announced that it is making its Solaris operating system open source. I had worked with Soalris 2.6 (read Solaris 6) and Solaris 2.8 (read Solaris 8) as a server operating systems and have found them to be quite stable and rock solid.

Trying out Solaris 10

I downloaded Solaris 10 from Sun’s website to try installing it on my Dell OptiPlex PC (PIII, 256MB), but backed off after finding that it is too slow and took very-very long time to go from one step to another. While thinking about it I realized that Solaris kernel has been designed to work for a server (typically with multiple processors) like a server and hence there are lots of things which this kernel is doing which are not required in case of a PC Server. So I dropped the idea of trying out Solaris 10 for now. I have an old Compaq (now HP) ML370 lying in my server room and might give it a try on that box someday.

OpenSolaris

Next in my quest for learning Image I downloaded the four CDs Image of Soalris Express Community Edition 27 and as I was installing it I realised that this is exactly Soalris 10 (with minor differences, ofcourse) and at some point during the installation I found that this is actually internally being treated as Solaris 11 (SunOS 5.11) by Sun. Overall I found that although still under development OpenSolaris to be quite impressive and with a bright future.

GNU/Solaris

GNU fans (like me) will be glad to know that there is a product called Nexenta GNU/Solaris which is based on OpenSolaris. I downloaded the CD last night, burnt it and installed it. Debian users will feel like home. It is a Debian GNU system with a Solaris kernel. It is not an official Debian project yet.

Bottomline

Solaris is a very powerfull kernel and combinig GNU tools and Solaris will definitely give GNU/Linux a tough competition.

Posted in Views | Leave a comment

Another month passes by…

I am having a very busy life these days. Another month has passed at BDS and I didnt realised it till this time. There is a lot of work pressure here and so time flies…

I am not even finding time to check my personal emails before the weekend. My day starts at 05:00 when I get up and ends at around 23:00 when I sleep. I normally come back from work at around 20:00

Highlights of the last month

Since the parent company of BDS , BBC Broadcast is no longer a part of the BBC group it has to change its name to remove the words BBC from it. The new name was decided to be RedBee Media Ltd.

  • Changes in network and A bit of History

Looking at the ongoing problems with our network which is flat and depends on badly configured and dying HP Procurve switches, it was decided to move to a properly designed network around Foundry switches and Cisco Pix Firewall. All this happened and the design finalized before I joined BDS. The new network is supposed to have two fast Foundry  switches acting as a CORE which will house all the servers connected through CAT6 cables  and four Foundry Edgetron switches acting as EDGE switches connected through Gigabit links to core and meant to house the desktops. Almost all end user desktops except the IT team use Wyse Terminals (dumb terminals based on Linux and Windows) using Citrix metaframe and Windows Terminal Servers. So the emphasis is on fast network. All the cables are either CAT 5e or CAT6.

The stuff was delivered quite recently and a consultant was hired to configured the Cisco Pix firewalls. He configured the firealls but as per the plan the firewalls cannot be replaced till the entire network is moved to the new switches and cables. And guess what.. there was no one who has configured switches before. So I volunteered to do this massive task. Took four foundries (EdgeIron 4802CF), connected to them one by one and configured the switches with one VLAN for desktops as these were the lighter switches meant to be EDGE and connected to the two Foundry FastIron switches meant to be the CORE. Next step I took the two CORE switches and then configured various VLANs. All this I had done for the first time and it was so simple. Just by reading the documentations. I can configure the  Foundries now Image

What happened today?

Today we laid out cables and migrated the Cisco 2600 router (which will eventually be removed as the CORE foundries are layer 3 switches supporting VRRP), the old Pix Firewalls, the Edge switches and the Citrix servers. So most of the office is now running on new network. Only Linux servers and some windows servers are left out for tommorow.

Quite a lot in one day

Posted in Personal | Leave a comment

NIC Bonding

NIC Bonding is a technique in which multiple Network Interface Cards (NICs) are logically bonded together and presented as a single interface to the outside world.

Before activating bonding it is recommended that the NICs are working alright. mii-tool can be used for this:

$ sudo /sbin/mii-tool
eth0: negotiated 100baseTx-FD, link ok
eth1: negotiated 100baseTx-FD, link ok

Bonding Driver in the Kernel

The first thing is to check whether the bonding driver module is already loaded or not.

$ sudo lsmod|grep bonding

If you do not see anything in the output then the bonding driver is not loaded. Most distribution’s default kernel compiles and installs the bonding driver module. To find out whether your distribution has the bonding driver module available. Use the following command:

$ sudo /sbin/modprobe --list | grep -i bonding
/lib/modules/2.6.8-2-386/kernel/drivers/net/bonding/bonding.ko

The output of the command shows that the bonding driver is available as a module. To load the bonding driver you can do the following:

$ sudo modprobe bonding
$ sudo lsmod|grep bonding
bonding                59112  0

If your distribution does not have the bonding driver module available then you need to recompile your kernel with the support. Select the “Bonding Driver Support” in the “Network Device Support” section. Remember to configure the driver as a module as currently it is the only way to pass parameters to it.
Configuring the bonding driver to load automatically at boot time.

To load the bonding driver automatically at boot time:

  • On RHEL 3 modify the /etc/modules.conf file to contain the following:
    $ cat /etc/modules.conf
    alias bond0 bonding
    options bond0 miimon=100 mode=1 downdelay=2000 updelay=5000
  • On RHEL 4 modify the /etc/modprobe.conf file to contain the following:
    $ cat /etc/modprobe.conf
    alias bond0 bonding
    options bond0 miimon=100 mode=1 downdelay=2000 updelay=5000
  • On the Debian Sarge system with the 2.6.8 kernel, I had to create the /etc/modprobe.conf file and add the following lines to it.
    $ cat /etc/modprobe.conf
    alias bond0 bonding
    options bond0 miimon=100 mode=1 downdelay=2000 updelay=5000

    In debian if you install a package called modconf then there is another way to do this.

    $ sudo apt-get install modconf
    $ sudo /usr/sbin/modconf

modconf is ncurses based. Select the bonding driver modules from it and install it. Enter the parameters for the driver when prompted and exit from the utility. Your bonding driver is loaded with the parameters and also set to be loaded automatically next time the server reboots.

This method of using modconf basically modifies the /etc/modules file(which basically lists the modules to be loaded at boot time) to include the bonding driver name and creates a file by the driver name in /etc/modprobe.d/ to contain the parameters for the drivers. Here are the two files on my system:

$ cat /etc/modules
bonding
$ cat /etc/modprobe.d/bonding
options bonding mode=1 miimon=100 updelay=2000 downdelay=3000

Userspace Tools

You need the ifenslave utility also in addition to the bonding driver in the kernel. For Debian Sarge you can install the metapackage ifenslave. This currently points to the ifenslave-2.4 package. Since the Sarge has 2.4 kernel as the default if you just install ifenslave metapackage then ifenslave-2.4 will be installed. If you have installed the 2.6 kernel instead of the default 2.4 kernel then you should install ifenslave-2.6 package.

$ uname -a
Linux noddy 2.6.8-2-386 #1 Thu May 19 17:40:50 JST 2005 i686 GNU/Linux
$ sudo apt-get install ifenslave-2.6

Configuring the system

Once the bonding driver has been loaded with the required parameter, the system needs to be configured to use the bonding driver.

  • Red Hat Enterprise Linux (all versions) and FedoraCreate a file /etc/sysconfig/network-scripts/ifcfg-bond0 with the following contents:
    DEVICE=bond0
    IPADDR=172.16.100.3
    NETMASK=255.255.0.0
    NETWORK=172.16.0.0
    BROADCAST=172.16.255.255
    ONBOOT=yes
    BOOTPROTO=none
    USERCTL=no
    PEERDNS=no
    TYPE=Ethernet
    GATEWAY=172.16.200.254

    Modify the file /etc/sysconfig/network-scripts/ifcfg-eth0 to contain the following:

    DEVICE=eth0
    USERCTL=no
    ONBOOT=yes
    MASTER=bond0
    SLAVE=yes
    BOOTPROTO=none
    TYPE=Ethernet

    For other NICs in the system which you want to bond together with eth0 do the same and replace eth0 with the respective NIC like eth1, eth2 and so on.

    Restart the networking:

    $ sudo /sbin/service network restart
  • Debian and DerivativesOn Debian systems edit the /etc/network/interfaces file and remove the reference of all the NICs and just leave the loopback adapter details. Then add the following interface details:
    # The bonding interface
    auto bond0
    iface bond0
    inet static
    address 172.16.202.2
    netmask 255.255.0.0
    gateway 172.16.200.254
    
    up ifenslave bond0 eth0 eth1
    down ifenslave -d bond0 eth0 eth1

    After that a simple restart of networking services will bring the bonding interface up.

    $ sudo invoke-rc.d networking restart
  • ifconfig will list all the interfaces along with the bond0 interface. All will have the same MAC address and same ip address.

Posted in FLOSS | Tagged , , | Leave a comment

First Month At New Job

The first month at new job was hectic and I was so busy during the weekdays that could find time for my family, let alone creating a blog entry. Annanya, my 4 year old daughter missed me a lot as by the time I used to come back home, she was already asleep and next day morning again the same routine. Situation has eased down a bit as I have started understanding my servers and the organisational systems a bit.

On the first day itself on 26th Sep 2005 I was asked to move an LVM filesystem to a seperate physical disk. Not a difficult task, but since it was to be done in production servers, out of core business hours after 18:00 BST. I reached home at around 22:00 BST. And since then  I never reached home before 19:30 BST. Some people might think that this is normal in a SysAdmin’s life, but I got used to the luxorious life at British Airways where I used to leave dot at 17:00 BST.

Quite surprising that no proper monitoring system was in place except the HP Insight Manager and RRD-TOOL. The first few tasks which I initiated was to establish a HA monitoring station in place using Linux-HA project , Nagios, RRDTOOL , Cacti , Cheops. To start with I have been configuring and building Nagios in my development box which runs Slackware 10.1.

I also found that the only method of remote access to office network from home is using Cisco VPN client as we have Cisco Pix firewalls. I was finding it difficult to compile the Cisco VPN client for my  linux box at home due to I using the latest kernel and the client demanding 2.4. To provide myself a remote access I had to make use of OpenVPN without opening up any additional port on the Pix firewall. You can read more about that in my techlog here. Since my role was Linux Systems Administrator I decided to use Linux desktop for my self. I quickly installed Fedora Core 4 on one of the desktops and Slackware 10.1 on another. I decided to use the slack box as a test/dev machine to try out various new things.

Overall things have eased down a bit and I am really enjoying my new job and see a lots of opportunity.

Posted in Personal | Leave a comment

End of Journey – 4th Jan 1999 to 23rd Sept 2005

Dear Friends,

I wanted to take a moment to let you know that today is my last day at NIIT / British Airways. I will be joining a new position at Broadcasting Data Systems (a BBC Broadcast company) on Monday, 26th Sept 2005.

I have enjoyed my 81 months tenure with NIIT with the last 22 months at British Airways and appreciate having the opportunity to work with all of you. Thank you for the support, guidance and encouragement you have provided me during my time at NIIT / British Airways. Even though I will miss my colleagues and the company, I am looking forward to this new challenge and to starting a new phase of my career.

Please keep in touch, I can be reached at my personal email address
ajitabhpandey (at ) ajitabhpandey.info.

You can always read about me and my whereabouts at my website http://www.ajitabhpandey.info/
Thanks again for everything.

I seal it with a kiss,
because you I will miss.
I’ll sign it with a sigh,
because we went so high.
I wish I could tell you with a touch,
Why I care to write this..,
and why so much.

Yours truly,
Ajitabh Pandey

Posted in Personal | Leave a comment