Hi,
Due to a problem with one of our payments providers our billing
processes were stuck for a couple of days. As a result we haven't
been sending invoices out as much ahead of time as usual.
Things are caught up again now but as a side effect some invoices
have just been created that are due today or in a day or two,
instead of giving you the usual week of notice.
We still allow 30 days for payment, but it does mean that some
reminders will go out from tomorrow. Those paying by automated means
are not going to be affected. In the unlikely event that anyone
reaches the 30 days of non-payment we will of course give a couple
more days of leniency in light of this hiccup.
Cheers,
Andy
--
https://bitfolk.com/ -- No-nonsense VPS hosting
_______________________________________________
announce mailing list
announce(a)lists.bitfolk.com
https://lists.bitfolk.com/mailman/listinfo/announce
Hello all,
Long shot probably, but have any of you had any success migrating away from
wordpress to a static site generator? I really want to ditch wordpress.
The guides on the hugo website are useful, but Ideally I'd like something
that can slurp in the whole site images and well as text and dump out a
directory structure with images and the posts they belong to together. If
it can be made to preserve relative URLs too that would be great.
Failing there being some tool I've overlooked, does anyone have suggestions
for a paid solution?
cheers,
David
If man has no tea in him, he is incapable of understanding truth and
beauty. ~Japanese Proverb
Find yourself a cup of tea; the teapot is behind you. Now tell me about
hundreds of things. ~Saki
Hi
This is puzzling me. I have been on a server attempting to set up radicale but nothing to interfere with the networking function of the server - as far as I knew.
On purging the installation and attempting to download the apt version I found that it couldn't connect to apt-catcher.
DNS was obviously foobarred, as was the internet with no pings or traceroute.
Logged in via the console and got internet back up and running by re-adding the gateway to ip route.
I'm then attempted to get DNS working. The configuration at /etc/network/interfaces looked ok.
auto eth0
iface eth0 inet static
address 85.119.83.xx
netmask 255.255.248.0
gateway 85.119.80.1
# dns-* options are implemented by the resolvconf package, if installed
dns-nameservers 85.119.80.232 85.119.80.233
Nothing in /etc/resolv.conf.
I've tried reloading interfaces by installing resolvconf and -d and -a with no joy.
I could dig using the Bitfolk DNS on the command line, i.e. dig @85.119.80.232 www.google.com, but standard DNS queries timed out.
I then added the Bitfolk DNS manually to resolv.conf, rebooted and I was still without name resolution as resolvconf is now controlling the file and had deleted my entries!
# Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)
# DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
I fixed this by adding nameserver entries to the resolv.conf.d/head, rebooted and DNS working but no internet.
Added the gateway again and everything is finally working - fingers crossed.
Thank goodness for console access!
Any ideas as to the best approach to fix this properly please and any idea what I could have done to wreak such havoc?
TIA
Steve
--
Sent from my Android device with K-9 Mail. Please excuse my brevity.
Hello,
[ Quoted in full since was intended for the list. By the way if you
don't like the list's posts not having a reply-to header set, there
is a version of it that does have it set:
https://lists.bitfolk.com/mailman/listinfo/users-replyto ]
On Wed, Jun 03, 2020 at 06:30:07PM +0100, Steve Harriss wrote:
> On 03/06/2020 17:38, Andy Smith wrote:
> >Hi Steve,
> >
> >On Wed, Jun 03, 2020 at 05:30:55PM +0100, Steve Harriss wrote:
> >>Any ideas as to the best approach to fix this properly please and
> >>any idea what I could have done to wreak such havoc?
> >I'm finding it hard to identify what is your actual concrete problem
> >at present. Would I be right in saying that it's:
> >
> >1) resolvconf doesn't put the nameserver IPs that you listed in
> > /etc/network/interfaces into the /etc/resolv.conf file, so you
> > have to put them in some other file that resolvconf reads
> Precisely
> >and
> >
> >2) Your VM boots with no default route set?
> Strangely, yes
> >
> >resolvconf seems not useful on a server so the first thing I would
> >do is remove it and put the nameserver IPs statically in
> >/etc/resolv.conf.
>
> That's the sort of advice I was after. I'll remove resolvconf and see how
> that goes.
>
> I was more concerned with how the installation, configuration and removal of
> one program could cause such alterations to a working server setup and was
> looking for any ideas and to avoid it again.
Well installing resolvconf messes about with your /etc/resolv.conf
and any syntax error in /etc/network/interfaces can prevent
interfaces and routes being brought up correctly. But they're just
guesses and I could easily be wrong.
Cheers,
Andy
--
https://bitfolk.com/ -- No-nonsense VPS hosting
HI All,
I was attempting to free up some space, (/boot is over full) and I fear
I have damaged my Ubuntu 18/04 installation.
When I run
sudo apt-get update && sudo apt-get upgrade
the following errors are flagged up in the middle on the
results.
WARNING: missing /lib/modules/4.15.0-101-generic
Ensure all necessary drivers are built into the linux image!
depmod: ERROR: could not open directory /lib/modules/4.15.0-101-generic:
No such file or directory
depmod: FATAL: could not search modules: No such file or directory
depmod: WARNING: could not open
/var/tmp/mkinitramfs_vr26f3/lib/modules/4.15.0-101-generic/modules.order:
No such file or directory
depmod: WARNING: could not open
/var/tmp/mkinitramfs_vr26f3/lib/modules/4.15.0-101-generic/modules.builtin:
No such file or directory
The system does boot, and appears to serve its web sites properly.
If it helps uname -r gives
4.15.0-88-generic
There are no ubuntu updates to apply.
How can I recover? I feel right out of my depth!
Thanks
Ian
--
Ian Hobson
Tel (+351) 910 418 473
--
This email has been checked for viruses by AVG.
https://www.avg.com
A hosting customer on my VM on talisker was having speed problems with
his new WordPress web site about a month ago. Now he says it's going
faster, and a cacheing plugin that he installed to mitigate the delays
no longer makes much difference (but in a good way!)
As far as I could tell, the site's slow response time was likely due to
an extension that loaded megabytes of font data and icons.
I haven't changed anything that is likely to account for this speed-up.
I seem to remember that a new version of the Xen hypervisor has been
installed recently on Bitfolk hosts. Could this (or any other system
changes made in the last month) result in faster response?
(Posted to the users list in case anyone else has noticed a bump in speed
and would care to comment.)
--
Anahata
anahata(a)treewind.co.uk -+- http://www.treewind.co.uk
Home: 01535 501017 Mob: 07976 263827
Hi Everyone,
I'm stuck in a never-ending conference call at work because of
significant enterprise-wide outages. These outages have been caused by
apparently valid certificates failing to verify.
Our investigation has revealed that the AddTrust Root CA certificate
expired today but our certificate issuer sold us 2 year certs without
checking every cert in the chain of trust was valid until the expiry
date of the certs we bought (There was only 1 year remaining on the Root
CA cert on the day they sold us a 2 year cert signed with it.)
You may wish to check the chains of trust on your certificates...
All the best,
Paul.
Bitfolk's monitoring service is great:
https://tools.bitfolk.com/wiki/Monitoring
but it just occurred to me that (IIUC) it only monitors for *reachable*
services, not for unreachable ones - i.e. whether the firewall is
correctly shielding a particular port or protocol.
Now, I know that best practice is to ensure that all running services are
correctly configured to only listen to traffic from the networks from which
they can safely receive it, and that a good sysadmin should be able to
sleep comfortably at night even when his firewall is off (wide open).
However, that does not invalidate defence in depth; I don't think anyone
who advocates the above best practice would seriously recommend ditching
firewall rules. Therefore it makes sense (to me, at least) to try to
implement at least some basic tests to monitor the correct behaviour of the
firewall.
The kind of test I imagine is an attempted connection to a TCP or UDP port
which passes when the response is ICMP port unreachable (in the case of a
REJECT rule), or when a timeout expires without any response (in the case
of a DROP rule). The test could fail if a RST was received in the TCP
case, or in any case if any other response was received.
Of course there are way too many ports for such a monitor to check them
all, but even checking a single port for which no services are expected to
be running would be a lot better than nothing, since this could catch a
large number of cases where basic firewall configuration errors have been
made, or where the firewall was accidentally turned off or simply failed to
start.
Does this make sense or has the sun gone to my head?
Cheers,
Adam
Hi,
Ubuntu 20.04 is scheduled to be released at some point today. As
things stand its kernel won't boot at BitFolk.
I think it's due to some bugs in Xen's LZ4 decompression. These
problems have since been fixed but it would mean a forced reboot to
deploy them and I'm not going to do that, for this.
I will let you know when there is a host available that will boot
these LZ4-compressed kernels, so if you are desperate to upgrade to
20.04 you can be moved there.
If you already did try to upgrade to 20.04 and now it doesn't boot,
your previous (18.04) kernel will boot, which clearly isn't ideal
but does at least regain access.
Possibly you could build a custom kernel that doesn't use LZ4 or
find a way to unpack (and optionally repack) the existing vmlinuz.
I'll follow up with more info as I experiment with that.
Cheers,
Andy
--
https://bitfolk.com/ -- No-nonsense VPS hosting
_______________________________________________
announce mailing list
announce(a)lists.bitfolk.com
https://lists.bitfolk.com/mailman/listinfo/announce
Afternoon
I'm hoping someone can point me in the direction of a fix for my current
nftables config.
From the command line I can run the following:
sudo nft add table nat
sudo nft add chain nat post { type nat hook postrouting priority 0 \; \}
sudo nft add chain nat pre { type nat hook prerouting priority 0 \; \}
sudo nft add rule nat post ip saddr 10.10.10.0/24 oifname "eth0" masquerade
Listing my running nft rules shows this appended to the end:
table ip nat {
chain post {
type nat hook postrouting priority 0; policy accept;
ip saddr 10.10.10.0/24 oifname "eth0" masquerade
}
chain pre {
type nat hook prerouting priority 0; policy accept;
}
I then try to transfer that config to my nftables.conf but on reading in
the .conf file I get the errors:
sudo nft -f /etc/nftables.conf
/etc/nftables.conf:67:1-5: Error: syntax error, unexpected table
table ip nat {
^^^^^
/etc/nftables.conf:70:55-64: Error: NAT is only supported for IPv4/IPv6
ip saddr 10.10.10.0/24 oifname "eth0" masquerade
I'm obviously missing some piece of information here that will allow me
to fix it.
If you'd like to help me add the masquerade for IPv6 as well that would
be brilliant.
Hopefully someone has the answer as I currently stumped
Cheers
Steve
