Network World review of Carbon Black and Cylance

metadata=00.90 UUID=5af33dbb:4984653a:73c58c98:29ed513f” sudo mdadm --assemble /dev/md0 sudo vgchange -ay vg1 sudo vgchange -a n vg1 reboot Devices of Vg1 should now automatically show up after reboot mkdir /store and /media/Mediathek and change permissions add to /etc/fstab: “/dev/mapper/vg1-store    /store    ext4    nofail,relatime,user,acl    0    0” -> nofail option causes boot not to hang in case raid has problems /store/Mediathek    /media/Mediathek    none    bind,nofail    0 0 (for future reference: ext4 on raid5 was made using: mkfs.ext4 -b 4096 -E stride=16,stripe-width=64 -L label /dev/vg1/blalba) 1.2.2 create a partion for /media/mythstore (primary MythTV storage for raw data & live tv), xfs recommended by mythtv, not available per default in RHEL6, using ext4 instead 1.2.3 ZFS Storage see topic 6 for ZFS Installation 1.3 add repositories Remember to use sudo yum update after adding a repository use yum-priorites to prevent package conflicts Install packageyum-plugin-kmdl, it will take care of updating your kmdls automatically. 1.3.1 EPEL For information see: sudo rpm -Uvh 1.3.2 ELREPO sudo rpm --import sudo rpm -Uvh 1.3.3 ATRPMS und ATRPMS TESTING go atrpms website:  and download repositrory-rpm. install. enable testing repo in yumex. yumex can be installed from epel and works better over nx than the default package manager Alternative terminal based way: # Import the GPG key for ATrpms sudo rpm --import # Open an editor and paste the following into the atrpms-stable.repo file sudo nano /etc/yum.repos.d/atrpms-stable.repo [atrpms-stable] name=RHEL 6 - atrpms-stable - $releasever - $basearch baseurl= gpgcheck=1 enabled=1 priority=20 exclude=*release 1.3.4 Linuxtech.net The Linuxtechnet-repo contains various mutimedia related progs. Like fglrx (ATI driver), handbrake, CrystalHD driver, etc See: wget wget sudo cp RPM-GPG-KEY-LinuxTECH.NET /etc/pki/rpm-gpg/ sudo cp linuxtech.repo /etc/yum.repos.d/ repository will now show upe.g. in YumEx better disable repo after installing to prevent  package conflicts 1.3.5 RPMforge CARE: might conflict with atrpms, not tested sudo rpm -ivh   1.4 add sth like dyndns to be able to reach your Mythweb installation while on the road. You get a domain name that maps to the ever changing IP adress of your home internet connection. I use both DynDNS and No-IP to have a backup, as these solutions are only 95% reliable. [ UPDATE: DynDNS canceled their service. ] 1.4.1. DynDNS via 1.4.2. No-IP: Backup Get Account at: / Install package noip form ATRPMS and run sudo /usr/bin/noip2 -C for configuring your account. 1.5 Configure cron / anacron 1.5.1  /etc/crontab RHEL6 does not use /etc/crontab but anacron. to get cron jobs at specified time edit /etc/cron.d/sysstat (same syntax as /etc/crontab) 1.5.2 RHEL behaviour to get cron jobs at specified time edit /etc/cron.d/sysstat (same syntax as /etc/crontab) create (if not already present) the file /etc/environment and add the followingline: LANG=de_DE.UTF-8 for german locale settings in cron jobs 1.6 Automatic Updates If you’re using Sientific Linux, you already have the package yum-autoupdate installed. For Centos users, you can download the package from the SL-repos and install manually. In my experience it does a good job and with the right exclude items doesn’t srew up. Configuration via /etc/sysconfig/yum-autoupdate: sudo nano /etc/sysconfig/yum-autoupdate ... MAILLIST="root," EXCLUDE="kernel* openafs* *-kmdl-* kmod-* *firmware* icewm* VirtualBox* *myth*" ... 2. MythTV Media Center, Watch / Record TV, Movies, Listen to Music, etc 2.1 Preparation You need to have the EPEL and ATRPMs (inkl. ATRPMs testing) Repositories enabled, see above 1.3 2.2 install mythtv and dependencies install qt47 and qt47-x11. installing qt47-x11 requires removing qt-x11. Attention: this causes a little trouble with hp printer drivers,  but nothing  major: unfortunately qt47-x11 is incompatible with PyQt4 (python bindings for qt4,which needs plain qt-x11). pyqt is in turn requiered for hplib’s graphical setup interfaces. you can still configure hp printers from the command line via “sudo hp-setup -i” or via in firefox If you happen to know any better solution feel free to comment. update perl-manib-sth and install qt47-webkit as well as qt47-mysql. install mythtv-backend and mythtv-docs. install mythweb, httpd. if you are running KDE also update phonon-backend-gstreamer to 4.7 (available in atrpms-testing), otherwise you will get the error “shared library not available” a litte of topic: for kde4 integration of gtk (gnome) apps install kcm-gtk and oxygen-gtk. then go system-settings ->  look and feel -> theme ? (german: erscheinungsbild) -> gtk settings. there set theme as oxygen-gtk. 2.3 disable selinux (dunno if necessary for mythtv, at least permissive seems necessary, but no need for selinux) sudo gedit /etc/selinux/config change SELINUX=enforcing to =disabled reboot 2.4 open firewall ports sudosystem-config-firewall for LAN only: 3306 for tcp/udp for mysql network access 6543, 6544 tcp/udp for mythtv frontend net access global: 80 tcp for Webfrontend 22tcp or whatever you use for ssh 2.5 install mysqld (via yumex or whatever) sudo /sbin/chkconfig mysqld on sudo /sbin/service mysqld start mysql_secure_installation (mysql_secure_installation sets default parameter to secure settings) mysql -u root -p < /usr/share/doc/mythtv-docs-0.24/database/mc.sql (this imports the basic database structure) These adjustments to /etc/my.cnf under the [mysqld] section improve performance with both MythTV (especially in the GUI) and MythWeb: key_buffer = 16M table_cache = 128 sort_buffer_size = 2M myisam_sort_buffer_size = 8M query_cache_size = 16M bind-address = “Server IP Address” (needed for net access to mysql, change IP Adress to match yours) secure mysql with user and password: $ mysql -u root mythconverg -p mysql> grant all on mythconverg.* to .%" identified by(ST STV0299 DVB-S)... 2.7 change mythtv uid / gid to 1500 for consistency accross home network id mythtv uid=495(mythtv) gid=487(mythtv) groups=487(mythtv) sudo usermod -u 1500 mythtv sudo groupmod -g 1500 mythtv sudo find / -user 495  -exec chown -h 1500:1500 {} \; 2.8 basic mythtv config run su -c mythtv-setup and set basics on tab general, set ip accordingly to my.conf and storage groups / directories Then restart mythbackend: sudo /etc/init.d/mythtv-backend start sudo /etc/init.d/mythtv-backend status should keep running, else debug via var/log/mythtv… sudo chkconfig mythtvbackend on 2.9 basic configuration for mythweb add user apache to group mythtv so that you can access music, videos, recordings via mythweb (can be done with default user setting application or via usermod) sudo gedit /etc/httpd/conf.d/mythweb.conf and change mysql password accordingly and ip according to my.conf sudo chkconfig httpd on sudo /etc/init.d/httpd reload mythweb should come up in a webbrowser at2.10 getting channel data Install package linux-dvb-apps (now renamed dvb-utils) from atrpms-repositroy: sudo yum install linux-dvb-apps Do an initial scan for channels: scan -v /usr/share/dvb/dvb-s/Astra-19.2E > /home/username/channel.conf and run su -c mythtv-setup where you set up TV Tuner Cards, Video Source to „EIT Only“ and add channels by importing your channel-conf. You might need to rescan afterwards. Also mythtv is buggy and sometimes does not properly set channel to dvb. It can be fixed from command line with: mysql --user root --password mythconverg mysql> select mplexid,transportid,sistandard,networkid from dtv_multiplex; ---------+-------------+------------+-----------+  | mplexid | transportid | sistandard | networkid |  +---------+-------------+------------+-----------+  |       1 |        1011 | dvb        |      NULL |  |       2 |        1107 | dvb        |      NULL |  |       3 |        1201 | dvb        |      NULL |  |       4 |        1101 | dvb       | 1101 | dvb | 1 | | 72 | 1201 | dvb | 1 | | 73 | 1105 | dvb | 1 | | 74 | 1111 | dvb | 1 | | 75 | 1026 | dvb | 1 | ------------- --------- ------------ -----------  75 rows in set (0.00 sec)  mysql> quit  Bye Channel Sorting, etc can be done within Mythweb. 2.11 Postprocessing of Recordings At first I was considering: (Update: Site seems down, and the modified version is available here:) Unfortunaley nuvexport seems broken, it errors with problems not finding the files mentioned in mythtv mysql database. With mythnuv2mkv I have several problems: It forces to resize the video because it can not cope with anamorphic source files As a result it is dog slow Without modifications to the script as mentioned in the commentaries on the url above, it produces filenames with invalid encoding with movies with german umlauts in the title. It can not preservemultichannel (dolby surround / dolby digital) audio in recordings but produces video files with only stereo sound As a result, I know maintain my own scipt: 3 BackupPC Carefull: Ubuntu und Centos 5 say backuppc, RHEL6 says BackupPC and Linux is case-sensitive 3.1 Install BackupPC from EPEL Repo nothing to explain 3.2 Configuration of BackupPC by editing /etc/BackupPC/config.pl, change at least: ## Path to where actual backup data is stored. $Conf{TopDir} = '/var/lib/backuppc'; ## Allowed user that you created using htpasswd. $Conf{CgiAdminUsers} = 'your_user'; 3.3 Configuration for BackupPC Web Interface by editing /etc/httpd/conf.d/BackupPC.conf: <Directory /usr/share/BackupPC/sbin/> order deny,allow #deny from all #allow from 127.0.0.1 #allow from ::1 allow from all #might also consider allow from for home network access Options ExecCGI FollowSymlinks AddHandler cgi-script .cgi AuthType Basic AuthName "BackupPC admin" AuthUserFile /etc/BackupPC/htpasswd #RHEL6 default is /etc/BackupPC/apache.users # ”htpasswd  /etc/BackupPC/htpasswd yourusername” sets password require valid-user </Directory> Alias               /BackupPC/images            /usr/share/BackupPC/html/ ScriptAlias         /BackupPC                   /usr/share/BackupPC/sbin/BackupPC_Admin ScriptAlias         /backuppc                   /usr/share/BackupPC/sbin/BackupPC_Admin 3.4 Setup Users sudo htpasswd  /etc/BackupPC/htpasswd yourusername # RHEL6 default is /etc/BackupPC/apache.users 3.5 Edit /etc/hosts BackupPC doesn’t accept IP addresses but only hostnames cat /etc/hosts/ #IP Address                        Hostname xxx.xxx.xxx.xxx                Edenscar xxx.xxx.xxx.yyy                Christiane 3.6 Edit /etc/BackupPC/hosts Add your hosts and users set up under 3.4, can also be done in webinterface 3.7 Edit /etc/BackupPC/ “hostname”.pl can also be done in webinterface #HOSTNAME.pl $Conf{RsyncShareName} = [ '/home' ]; $Conf{BackupFilesExclude}= { '/home' => [ '/”username”/.gvfs', ] }; 3.8 Setup BackupPC SSH Keys Reminder: I have backed up my ssh keys and can just restore them to /var/lib/BackupPC/.ssh Since concentrating on rsync backups, you’ll want to create passwordless keys used for the backuppc process to connect remotely to your hosts being backed up. 3.8.1 Generate Key on Host As root create the hidden SSH directory under /var/lib/BackupPC and change the permissions accordingly.  cd /var/lib/BackupPC  mkdir .ssh chown backuppc.backuppc .ssh chmod 700 .ssh Next, drop in as the backuppc user. You’ll have to specify a shell because by default the backuppc user has no shell assigned to it. Then create the passwordless SSH keys using ssh-keygen. su -s /bin/bash backuppc bash-3.2$ ssh-keygen -t dsa Generating public/private dsa key pair. Enter file in which to save the key (/var/lib/backuppc/.ssh/id_dsa): Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has