Posts

Showing posts from June, 2021

How only 2 parameters of PostgreSQL reduced anomaly of Jira Data Center nodes

Image
  Hello community, Gonchik Tsymzhitov is in touch. Today, I would like to share with you a short story about postgresqltuner.pl in usage.  So from previous articles I hope you configured the PostgreSQL server and postgresqltuner.pl.  After executing command, ./postgresqltuner.pl --ssd for ssd disks server. You can see like this output: postgresqltuner.pl version 1.0.1 [OK]      I can invoke executables Connecting to /var/run/postgresql:5432 database template1 as user 'postgres'... [OK]      The user account used by me for reporting has superuser rights on this PostgreSQL instance =====  OS information  ===== [INFO]    OS: linux Version: 5.4.17-2036.102.0.2.el8uek.x86_64 Arch: x86_64-linux-thread-multi [INFO]    OS total memory: 41.03 GB [OK]      vm.overcommit_memory is adequate: no memory overcommitment [INFO]    Running under a vmware hypervisor [INFO]    Currently used I/O sc...

История о том, что старые и надежные утилиты порой нуждаются troubleshooting на новых OS (CentOS 8)

Image
  Привет сообщество,  на связи Гончик Цымжитов. Сегодня, хочу поделиться с короткой историей, о том, как верный инструменты неожиданно ломают на новых ОС, и как легко чинятся. Итак, все мы знаем, что centos.rip , через очень промежуток времени, поэтому я перехожу везде на Oracle Linux 8.  Мой любимый инструмент по настройке серверов PostgreSQL, это postgresqltuner.pl, где я уже рассказывал в этой статье .  Настройка как обычно идет очень просто: # dnf install -y perl-DBD-Pg # wget -O postgresqltuner.pl https://postgresqltuner.pl # chmod +x postgresqltuner.pl Но в этом, раз когда запускал скрипт встретился с такой проблемой, # ./postgresqltuner.pl --ssd Can't locate Memoize.pm in @INC (you may need to install the Memoize module) (@INC contains: /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5) at ./postgresqltuner.pl line 262. BEGIN failed--compilation aborted at ./postgresqltuner...

The story that old and reliable utilities sometimes need troubleshooting on new OS (CentOS 8)

Image
  Hello community, Gonchik Tsymzhitov is in touch. Today, I want to share with you a short story about how trustworthy tools unexpectedly break on new operating systems, and how easy they are to be repaired. So, we all know that  centos.rip , after a very period of time, so I am migrating everywhere to Oracle Linux 8. My favorite tool for setting up PostgreSQL servers is postgresqltuner.pl, which I have already covered  in this article . Setting up as usual is very simple: # dnf install -y perl-DBD-Pg # wget -O postgresqltuner.pl https://postgresqltuner.pl # chmod +x postgresqltuner.pl But this time, when I ran the script, I encountered such a problem after command, # ./postgresqltuner.pl --ssd Can't locate Memoize.pm in @INC (you may need to install the Memoize module) (@INC contains: /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5) at ./postgresqltuner.pl line 262. BEGIN failed--co...

How to set strict protocol or skip weak algorithms in your integrations?

  Hi!  Today I would like to share a curious story related to the integration of Jira (adoptJDK 11) and the ERP system which works on old Java 6. You would say to me, welcome to the "blood enterprise systems". So during our security audit, IDS detected the non-secure protocol TLSv1.1 in that inter-connected communication Jira DC and that ERP system, correctly one of the cipher suites  TLS_RSA_WITH_AES_128_CBC_SHA . Yes, it's an old cipher suite, and that tutorial can be used for any other cipher suite as well.  How we can fix it?  Set string TLS protocol for all Jira (don’t forget for all nodes), TLS1.3 , TLS1.2. And please, keep in your mind the  bug  (JDK-8211806 : TLS 1.3 handshake server name indication is missing on a session resume) Adjust java.security configurations   Below table describe the small background and default protocols in your jdk/jre:    JDK 8 (March 2014 to present) JDK 7 (July 2011 to present) JDK 6 (2006 to  ...