<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Sankasaurus &#187; tech</title>
	<atom:link href="http://blog.pas.net.au/tag/tech/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.pas.net.au</link>
	<description>Just another tech blog - ranting since 2006</description>
	<lastBuildDate>Wed, 25 Aug 2010 21:40:45 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.1</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Android Market links</title>
		<link>http://blog.pas.net.au/2010/08/android-market-links/</link>
		<comments>http://blog.pas.net.au/2010/08/android-market-links/#comments</comments>
		<pubDate>Wed, 25 Aug 2010 21:39:59 +0000</pubDate>
		<dc:creator>Peter Sankauskas</dc:creator>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[advice]]></category>
		<category><![CDATA[android]]></category>
		<category><![CDATA[market]]></category>
		<category><![CDATA[mobile]]></category>
		<category><![CDATA[tech]]></category>

		<guid isPermaLink="false">http://blog.pas.net.au/?p=78</guid>
		<description><![CDATA[For those of you like me that have totally missed the Publishing page, here is how to create a link to your Android application in the Android Market:
market://﻿details?id=&#60;packagename&#62;
OR
http://market.android.com/details?id=&#60;packagename&#62;
So for Remembory, I have this:
market://﻿details?id=com.gbott.remembory
The &#8220;old&#8221; way was to link to the search page by using this:
market://search?q=pname:&#60;package&#62;
&#8230; but the details page method saves the user a click, [...]]]></description>
			<content:encoded><![CDATA[<p>For those of you like me that have totally missed the <a href="http://developer.android.com/guide/publishing/publishing.html">Publishing</a> page, here is how to create a link to your Android application in the Android Market:</p>
<p style="padding-left: 30px;"><span style="font-family: 'courier new', courier;">market://﻿details?id=&lt;packagename&gt;</span></p>
<p>OR</p>
<p style="padding-left: 30px;"><span style="font-family: 'courier new', courier;">http://market.android.com/details?id=&lt;packagename&gt;</span></p>
<p>So for <a href="http://www.gbott.com/apps/remembory">Remembory</a>, I have this:</p>
<p style="padding-left: 30px;"><span style="font-family: 'courier new', courier;">market://﻿details?id=com.gbott.remembory</span></p>
<p>The &#8220;old&#8221; way was to link to the search page by using this:</p>
<p style="padding-left: 30px;"><span style="font-family: 'courier new', courier;">market://search?q=pname:&lt;package&gt;</span></p>
<p>&#8230; but the details page method saves the user a click, or a tough decision when there are two applications both called Remembory.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.pas.net.au/2010/08/android-market-links/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Rackspace Cloud images to Cloud Files</title>
		<link>http://blog.pas.net.au/2010/07/rackspace-cloud-images-to-cloud-files/</link>
		<comments>http://blog.pas.net.au/2010/07/rackspace-cloud-images-to-cloud-files/#comments</comments>
		<pubDate>Tue, 27 Jul 2010 04:11:53 +0000</pubDate>
		<dc:creator>Peter Sankauskas</dc:creator>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[backup]]></category>
		<category><![CDATA[rackspace cloud]]></category>
		<category><![CDATA[tech]]></category>

		<guid isPermaLink="false">http://blog.pas.net.au/?p=76</guid>
		<description><![CDATA[For doing anything serious on Rackspace Cloud, you need to be able to use machines larger than 2Gb of RAM. Problem is, machines larger than 2Gb of RAM cannot be imaged (or backed up) &#8211; until now. About a month ago, they announced the ability to snapshot a machine into Cloud Files. Today I decided [...]]]></description>
			<content:encoded><![CDATA[<p>For doing anything serious on Rackspace Cloud, you need to be able to use machines larger than 2Gb of RAM. Problem is, machines larger than 2Gb of RAM cannot be imaged (or backed up) &#8211; until now. About a month ago, they announced the ability to <a href="http://www.rackspacecloud.com/blog/2010/06/16/introducing-cloud-servers-snapshots-to-cloud-files/">snapshot a machine into Cloud Files</a>. Today I decided to take it for a spin and hit Snag number one: there was no way to do an image on my new 16Gb machine. After talking talking to one person at Rackspace Cloud, I was none the wiser &#8211; Snag two was the lack of training for their support staff. After asking for the supervisor, he created a ticket for the approval for the terms (letting me know I would be charged for the storage in Cloud Files) and off I went. Until I hit Snag 3 &#8211; the &#8220;Images&#8221; tab for the server details still showed no way of performing an image. I was told to use the &#8220;My Server Images&#8221; and HORAY I could make an image of my 16Gb machine.</p>
<p>Finally the feature that prevented my company from using Rackspace Cloud, and instead using AWS, was fixed! Congratulations to the Rackspace Cloud team.</p>
<p>Another thing I learnt today is that there are two data centers for Rackspace Cloud machines &#8211; DFW and ORD. The first server you provision gets assigned to one of the two data centers, and which ever one it gets put into is the data center that all of your other servers will be put into as well. So if the first server gets put into DFW, then all of the other ones you create will be. That is until you delete all of your servers. Then once again, the first server can get put into any data center.</p>
<p>I am hoping that in the future, we will have a choice about which data center a server is provisioned in, particularly since it will help for geographical distribution.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.pas.net.au/2010/07/rackspace-cloud-images-to-cloud-files/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>JSON SerDe for Hive</title>
		<link>http://blog.pas.net.au/2010/02/json-serde-for-hive/</link>
		<comments>http://blog.pas.net.au/2010/02/json-serde-for-hive/#comments</comments>
		<pubDate>Tue, 16 Feb 2010 23:55:43 +0000</pubDate>
		<dc:creator>Peter Sankauskas</dc:creator>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[hadoop]]></category>
		<category><![CDATA[hive]]></category>
		<category><![CDATA[json]]></category>
		<category><![CDATA[open source]]></category>
		<category><![CDATA[serde]]></category>
		<category><![CDATA[tech]]></category>

		<guid isPermaLink="false">http://blog.pas.net.au/?p=74</guid>
		<description><![CDATA[I have added another open source project to my list &#8211; a JSON SerDe for Hive. You can check it out here:
http://code.google.com/p/hive-json-serde/
This SerDe (serializer/deserializer) will let you read JSON files as input for Hive tables. In the future, it will also support writing JSON data, but that is for another day.
Please let me know if [...]]]></description>
			<content:encoded><![CDATA[<p>I have added another open source project to my list &#8211; a JSON SerDe for Hive. You can check it out here:</p>
<p style="padding-left: 30px;"><a href="http://code.google.com/p/hive-json-serde/">http://code.google.com/p/hive-json-serde/</a></p>
<p>This SerDe (serializer/deserializer) will let you read JSON files as input for Hive tables. In the future, it will also support writing JSON data, but that is for another day.</p>
<p>Please let me know if you have any comments or questions about it.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.pas.net.au/2010/02/json-serde-for-hive/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Backups by design on AWS EC2</title>
		<link>http://blog.pas.net.au/2009/12/backups-by-design-on-aws-ec2/</link>
		<comments>http://blog.pas.net.au/2009/12/backups-by-design-on-aws-ec2/#comments</comments>
		<pubDate>Fri, 18 Dec 2009 19:06:06 +0000</pubDate>
		<dc:creator>Peter Sankauskas</dc:creator>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[aws]]></category>
		<category><![CDATA[backup]]></category>
		<category><![CDATA[cloud]]></category>
		<category><![CDATA[howto]]></category>
		<category><![CDATA[scaling]]></category>
		<category><![CDATA[tech]]></category>

		<guid isPermaLink="false">http://blog.pas.net.au/?p=63</guid>
		<description><![CDATA[My good mate* Joel Spolsky wrote a nice piece about backups (or rather, restoration), and I wanted to echo his remarks and how they relate to using AWS EC2.
If you are using EC2, you will quickly find that if an instance is terminated, any data on that instance is gone &#8211; lost forever. At first, [...]]]></description>
			<content:encoded><![CDATA[<p>My good mate* Joel Spolsky wrote a <a href="http://www.joelonsoftware.com/items/2009/12/14.html">nice piece about backups (or rather, restoration)</a>, and I wanted to echo his remarks and how they relate to using AWS EC2.</p>
<p>If you are using EC2, you will quickly find that if an instance is terminated, any data on that instance is gone &#8211; lost forever. At first, this seems like a terrible idea, but in fact, it encourages you to get into best practices, and discover the awesome benefits of EBS.</p>
<p>We have many instances running of different types. We have built a &#8220;custom&#8221; Debian AMI for each of the instance types we use (web, database, management, etc). If you were to launch an instance with one of these AMIs, you would not have a fully working system. That is because these AMIs have sym-links for important and/or dynamic data. For example, on the web AMI we have created, /etc/apache2, /etc/php5/ and /var/www are all sym-links. To where? A directory that an EBS volume is mounted to. That&#8217;s right, all of the web configuration and website code only lives in an EBS volume. It is simple enough to write a little script that creates a nightly Snapshots of each EBS volume.</p>
<p>Now for the power of this setup. Every time you want to bring up another instance of the same type (say, for horizontally scaling), you are in fact doing a restoration from backup. Take a Snapshot (your backup), create an EBS volume, attach it to the new instance, and make it live! This doesn&#8217;t just work for scaling, it works for bringing up staging servers that are mirrors of production or running experiments without affecting production.</p>
<p>We can even take it a step further! Those AMIs and Snapshots are all stored in S3 &#8211; data available to the whole Region. An instance and EBS volume exist in only 1 of the Availability Zones within that Region. You can use your backups to restore into a new Availability Zone which you can use to create a high-availability solution.</p>
<p>Happy scaling!</p>
<p>* I don&#8217;t know Joel personally &#8211; we have never met &#8211; but I do follow his work, like his company and LOVE <a href="http://www.fogcreek.com/FogBugz/">Fogbugz</a>!</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.pas.net.au/2009/12/backups-by-design-on-aws-ec2/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Dependency Nightmare for Tomcat on Debian</title>
		<link>http://blog.pas.net.au/2009/08/dependency-nightmare-for-tomcat-on-debian/</link>
		<comments>http://blog.pas.net.au/2009/08/dependency-nightmare-for-tomcat-on-debian/#comments</comments>
		<pubDate>Tue, 18 Aug 2009 17:34:01 +0000</pubDate>
		<dc:creator>Peter Sankauskas</dc:creator>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[debian]]></category>
		<category><![CDATA[dependencies]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[rant]]></category>
		<category><![CDATA[tech]]></category>
		<category><![CDATA[tomcat]]></category>
		<category><![CDATA[ubuntu]]></category>

		<guid isPermaLink="false">http://blog.pas.net.au/?p=45</guid>
		<description><![CDATA[I would love to not have to install the real Java and Tomcat manually on Debian, but I have little choice in the matter. Take a look at this:

$ apt-get install tomcat5.5
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
ant ant-gcj ant-optional ant-optional-gcj antlr build-essential debhelper
default-jdk default-jre default-jre-headless defoma [...]]]></description>
			<content:encoded><![CDATA[<p>I would love to not have to install the real Java and Tomcat manually on Debian, but I have little choice in the matter. Take a look at this:</p>
<blockquote><p><code><br />
$ apt-get install <strong>tomcat5.5</strong><br />
Reading package lists... Done<br />
Building dependency tree<br />
Reading state information... Done<br />
<strong>The following extra packages will be installed:</strong><br />
ant ant-gcj ant-optional ant-optional-gcj antlr build-essential debhelper<br />
default-jdk default-jre default-jre-headless defoma dpkg-dev ecj ecj-gcj fastjar<br />
file fontconfig fontconfig-config g++ g++-4.3 gappletviewer-4.3 gcj-4.3<br />
gcj-4.3-base gettext gettext-base gij-4.3 gjdoc hicolor-icon-theme html2text<br />
intltool-debian java-common java-gcj-compat java-gcj-compat-dev<br />
java-gcj-compat-headless jsvc libantlr-java libantlr-java-gcj libasound2<br />
libatk1.0-0 libatk1.0-data libbcel-java libcairo2 libcommons-beanutils-java<br />
libcommons-collections-java libcommons-collections3-java libcommons-daemon-java<br />
libcommons-dbcp-java libcommons-digester-java libcommons-el-java<br />
libcommons-launcher-java libcommons-logging-java libcommons-modeler-java<br />
libcommons-pool-java libcompress-raw-zlib-perl libcompress-zlib-perl libcups2<br />
libdatrie0 libdb4.5 libdigest-hmac-perl libdigest-sha1-perl libdirectfb-1.0-0<br />
libecj-java libecj-java-gcj libexpat1 libfile-remove-perl libfontconfig1<br />
libfontenc1 libfreetype6 libgcj-bc libgcj-common libgcj9-0 libgcj9-0-awt<br />
libgcj9-dev libgcj9-jar libgcj9-src libglib2.0-0 libglib2.0-data libgtk2.0-0<br />
libgtk2.0-bin libgtk2.0-common libice6 libio-compress-base-perl<br />
libio-compress-zlib-perl libio-stringy-perl libjaxp1.3-java libjaxp1.3-java-gcj<br />
libjpeg62 liblog4j1.2-java liblog4j1.2-java-gcj libmagic1 libmail-box-perl<br />
libmail-sendmail-perl libmailtools-perl libmime-types-perl libmx4j-java<br />
libobject-realize-later-perl libpango1.0-0 libpango1.0-common libpixman-1-0<br />
libpng12-0 libregexp-java libservlet2.3-java libservlet2.4-java libsm6 libsqlite3-0<br />
libstdc++6-4.3-dev libsys-hostname-long-perl libthai-data libthai0 libtiff4<br />
libtimedate-perl libtomcat5.5-java libts-0.0-0 liburi-perl libuser-identity-perl<br />
libxcb-render-util0 libxcb-render0 libxcomposite1 libxcursor1 libxdamage1<br />
libxerces2-java libxerces2-java-gcj libxfixes3 libxfont1 libxft2 libxi6<br />
libxinerama1 libxrandr2 libxrender1 libxtst6 make mime-support patch po-debconf<br />
python python-central python-minimal python2.5 python2.5-minimal ttf-dejavu<br />
ttf-dejavu-core ttf-dejavu-extra x-ttcidfont-conf xfonts-encodings xfonts-utils<br />
...<br />
0 upgraded, 146 newly installed, 0 to remove and 0 not upgraded.<br />
Need to get 101MB of archives.<br />
After this operation, 288MB of additional disk space will be used.<br />
Do you want to continue [Y/n]?<br />
</code></p></blockquote>
<p>WTF? I understand that Tomcat needs some kind of Java, but this is ridiculous. It is installing ant, fonts, compilers and worst of all, the most evil Java ever.</p>
<p>Ubuntu has the sense to make Sun Java available, but even if you do have Sun Java installed, the above is true on Ubuntu.</p>
<p>For shame!</p>
<p>I&#8217;ll stick to downloading from <a href="http://java.sun.com/">java.sun.com</a> and <a href="http://tomcat.apache.org/">tomcat.apache.org</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.pas.net.au/2009/08/dependency-nightmare-for-tomcat-on-debian/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Download Chrome OS now &#8211; it&#039;s called cl33n</title>
		<link>http://blog.pas.net.au/2009/07/download-chrome-os-now-its-called-cl33n/</link>
		<comments>http://blog.pas.net.au/2009/07/download-chrome-os-now-its-called-cl33n/#comments</comments>
		<pubDate>Wed, 08 Jul 2009 23:06:19 +0000</pubDate>
		<dc:creator>Peter Sankauskas</dc:creator>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[os]]></category>
		<category><![CDATA[rant]]></category>
		<category><![CDATA[tech]]></category>

		<guid isPermaLink="false">http://blog.pas.net.au/?p=36</guid>
		<description><![CDATA[For some strange reason, Chrome OS is getting a lot of press. Is it a slow news day?
They say that it is direct competition to Microsoft, that it makes Linux less relevant&#8230; are they serious? Chrome OS is a non-announcement. There is a project that has existed for over 2 years called &#8220;cl33n&#8220;. From the [...]]]></description>
			<content:encoded><![CDATA[<p>For some strange reason, <a href="http://googleblog.blogspot.com/2009/07/introducing-google-chrome-os.html">Chrome OS</a> is getting a lot of press. Is it a slow news day?</p>
<p><a href="http://opengardensblog.futuretext.com/archives/2009/07/google_chrome_o.html">They</a> say that it is direct competition to Microsoft, that it makes Linux less relevant&#8230; are they serious? Chrome OS is a non-announcement. There is a project that has existed for over 2 years called &#8220;<a href="http://cl33n.com/">cl33n</a>&#8220;. From the creator:</p>
<div style="margin-left:40px;">Chrome OS is &#8220;Google Chrome running within a new windowing system on top of a Linux kernel.&#8221;<br />
cl33n is &#8220;Mozilla Firefox running in a little-used windowing system on top of a Linux kernel.&#8221;</div>
<p>This &#8220;OS&#8221; is due to the released mid 2010. Is that how slowly things move inside Google? Why would it take them 12 months to create nothing more than cl33n?</p>
<p>What I am trying to say, is that Chrome OS is nothing new. Cl33n is not alone in this space either &#8211; other project like <a href="http://webconverger.com/">Webconverger</a> share my view.</p>
<p>While on the subject of Google&#8217;s non-annoucements, did you hear that Gmail, Doc, etc are out of beta. Big news huh? So what is their excuse now for daily &#8220;Server error&#8221; dialogs?</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.pas.net.au/2009/07/download-chrome-os-now-its-called-cl33n/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Fighting with SELinux and Nagios</title>
		<link>http://blog.pas.net.au/2009/05/fighting-with-selinux-and-nagios/</link>
		<comments>http://blog.pas.net.au/2009/05/fighting-with-selinux-and-nagios/#comments</comments>
		<pubDate>Sat, 02 May 2009 17:25:55 +0000</pubDate>
		<dc:creator>Peter Sankauskas</dc:creator>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[howto]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[nagios]]></category>
		<category><![CDATA[sys-admin]]></category>
		<category><![CDATA[tech]]></category>
		<category><![CDATA[tutorial]]></category>

		<guid isPermaLink="false">http://blog.pas.net.au/?p=25</guid>
		<description><![CDATA[I can&#8217;t believe it, but I won! I have been trying to set up Nagios on a RHEL5 machine running SELinux and have been loosing the fight for the last 3 days. But today, I win! This is such a win, it is worth sharing.
Now that I have won though, I believe this is not [...]]]></description>
			<content:encoded><![CDATA[<p>I can&#8217;t believe it, but I won! I have been trying to set up Nagios on a RHEL5 machine running SELinux and have been loosing the fight for the last 3 days. But today, I win! This is such a win, it is worth sharing.</p>
<p>Now that I have won though, I believe this is not Nagios specific at all, and if I had bothered to learn about SELinux, this may have been obvious. Anyway, the error Nagios was giving me was:</p>
<div style="text-align:center;"><strong><span style="color:#ff0000;">Error: Could not stat() command file &#8216;/usr/local/nagios/var/rw/nagios.cmd&#8217;! </span><br />
The external command file may be missing, Nagios may not be running, and/or Nagios may not be checking external commands.<br />
<span style="color:#ff0000;">An error occurred while attempting to commit your command for processing.</span><br />
<span style="text-decoration:underline;"><span style="color:#0000ff;">Return from whence you came </span></span></strong></div>
<p>As you may have already guess, the solution has nothing to do with the location or permissions of the file, the file was not missing, Nagios was running, and Nagios was checking external commands. The final line of the message is great though, and I can only hope we start to see more old English in error messages.</p>
<p>The problem of course, was that SELinux was enabled and stopping this blatant security violation. You can check to see if SELinux is on by running:</p>
<div style="margin-left:40px;font-family:courier new,monospace;">$ /usr/sbin/getenforce<br />
Enforcing</div>
<p>If you got &#8220;Permissive&#8221; or &#8220;Disabled&#8221;, then this post is not for you. To see SELinux&#8217;s side of things, check out <strong><span style="font-family:courier new,monospace;">/var/log/messages</span></strong>:</p>
<div style="margin-left:40px;"><span style="font-family:courier new,monospace;">setroubleshoot: SELinux is preventing ping (ping_t) &#8220;read write&#8221; to /usr/local/nagios/var/spool/checkresults/checkrXH96b (usr_t). For complete SELinux messages. run sealert -l 1ffc2533-42b5-4e04-b7ab-a81bb7d02040</span><br style="font-family:courier new,monospace;" /><br />
<span style="font-family:courier new,monospace;"> setroubleshoot: SELinux is preventing ping (ping_t) &#8220;read write&#8221; to /usr/local/nagios/var/spool/checkresults/checkrZxsA1 (usr_t). For complete SELinux messages. run sealert -l 178ba2d4-0822-47eb-9e32-bfaa19ee3c4b</span><br style="font-family:courier new,monospace;" /><br />
<span style="font-family:courier new,monospace;"> setroubleshoot: SELinux is preventing cmd.cgi (httpd_sys_script_t) &#8220;getattr&#8221; to /usr/local/nagios/var/rw/nagios.cmd (httpd_sys_content_t). For complete SELinux messages. run sealert -l 4df0946e-8816-4b90-a7d1-37e743697b9c </span></div>
<p>As you can see, SELinux is trying to give you a hint with that <strong>sealert</strong> bit, so you should take it.</p>
<div style="margin-left:40px;font-family:courier new,monospace;">$ sealert -l 1ffc2533-42b5-4e04-b7ab-a81bb7d02040<br />
Summary:</p>
<p>SELinux is preventing ping (ping_t) &#8220;read write&#8221; to<br />
/usr/local/nagios/var/spool/checkresults/checkrXH96b (usr_t).</p>
<p>Detailed Description:</p>
<p><em>&#8230; (removed from post)</em></p>
<p>Raw Audit Messages</p>
<p>host=myhost.myisp.host type=AVC msg=audit(1241217029.141:125305): avc:  denied  { read write } for  pid=32379 comm=&#8221;ping&#8221; path=&#8221;/usr/local/nagios/var/spool/checkresults/checkrXH96b&#8221; dev=sda3 ino=52894945 scontext=user_u:system_r:ping_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file</p>
<p>host=myhost.myisp.host type=SYSCALL msg=audit(1241217029.141:125305): arch=c000003e syscall=59 success=yes exit=0 a0=153952a0 a1=15395330 a2=7fff75c5eb40 a3=0 items=0 ppid=32378 pid=32379 auid=503 uid=508 gid=508 euid=0 suid=0 fsuid=0 egid=508 sgid=508 fsgid=508 tty=(none) ses=1392 comm=&#8221;ping&#8221; exe=&#8221;/bin/ping&#8221; subj=user_u:system_r:ping_t:s0 key=(null)</p></div>
<p>That raw audit message is <strong>GOLD</strong>! There is some other information in there, but nothing about what the next step should be to create a policy and make it permanent. Using <strong><span style="font-family:courier new,monospace;">chron</span></strong> I have heard is a temporary fix. The solution is copying that raw audit message into an empty file and running <strong>audit2allow</strong> to create a policy:</p>
<div style="margin-left:40px;font-family:courier new,monospace;">$ cat &gt; /tmp/tmp-nagiosping<br />
host=myhost.myisp.host type=AVC msg=audit(1241217029.141:125305): avc:  denied  { read write } for  pid=32379 comm=&#8221;ping&#8221; path=&#8221;/usr/local/nagios/var/spool/checkresults/checkrXH96b&#8221; dev=sda3 ino=52894945 scontext=user_u:system_r:ping_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file</p>
<p>host=myhost.myisp.host type=SYSCALL msg=audit(1241217029.141:125305): arch=c000003e syscall=59 success=yes exit=0 a0=153952a0 a1=15395330 a2=7fff75c5eb40 a3=0 items=0 ppid=32378 pid=32379 auid=503 uid=508 gid=508 euid=0 suid=0 fsuid=0 egid=508 sgid=508 fsgid=508 tty=(none) ses=1392 comm=&#8221;ping&#8221; exe=&#8221;/bin/ping&#8221; subj=user_u:system_r:ping_t:s0 key=(null)<br />
<em>* Ctrl-D *</em></p>
<p>$ audit2allow -M NagiosPing &lt; /tmp/tmp-nagiosping</p>
<p>******************** IMPORTANT ***********************<br />
To make this policy package active, execute:</p>
<p>semodule -i NagiosPing.pp</p></div>
<p>This creates a file call NagiosPing.pp which contains the SELinux policy needed to make these errors go away. The only thing left to do is to install this policy:</p>
<div style="margin-left:40px;"><span style="font-family:courier new,monospace;">$ semodule -i NagiosPing.pp</span></div>
<p>If your setup was like mine, SELinux was actually preventing 3 different actions, needing 3 different policies. HA! That is easy now &#8211; just repeat the steps until Nagios is doing your bidding.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.pas.net.au/2009/05/fighting-with-selinux-and-nagios/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Skills-based Resumes</title>
		<link>http://blog.pas.net.au/2009/03/skills-based-resumes/</link>
		<comments>http://blog.pas.net.au/2009/03/skills-based-resumes/#comments</comments>
		<pubDate>Thu, 12 Mar 2009 04:00:06 +0000</pubDate>
		<dc:creator>Peter Sankauskas</dc:creator>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[advice]]></category>
		<category><![CDATA[job]]></category>
		<category><![CDATA[resume]]></category>
		<category><![CDATA[tech]]></category>
		<category><![CDATA[work]]></category>

		<guid isPermaLink="false">http://blog.pas.net.au/?p=22</guid>
		<description><![CDATA[I have recently been updating and freshening up my resume, and thought I would do something different&#8230; something to stand out. Having interviewed many people, from software engineers to product managers and CTOs, I have had the opportunity to see many resumes. Most of the resumes I see are quite bland and boring &#8211; as [...]]]></description>
			<content:encoded><![CDATA[<p>I have recently been updating and freshening up my resume, and thought I would do something different&#8230; something to stand out. Having interviewed many people, from software engineers to product managers and CTOs, I have had the opportunity to see many resumes. Most of the resumes I see are quite bland and boring &#8211; as if written for a machine. They have no personality, no passion and no creativity. I wanted my resume to have personality, passion and creativity.</p>
<p>Since I am a well rounded engineer, I thought I would be able to cover more of my skills in a skills-based resume, instead of a chronological list of my work experience. I went through and split my skills into areas (Coding, Data, Operations, Communication, etc) and listed a few points under each. At the end, I added my work experience, but only with a short paragraph of what I did there.</p>
<p>While I thought this style made a good resume, recruiters hate it, and so do people trying to hire.</p>
<p>After getting some advice, I wanted to share it with the rest of the world. Here are the things people want to see in software engineering/technical resume:</p>
<ul>
<li><strong>Technical Skills</strong>: After your object at the top (if you want to display passion), make a clear section describing your technical skills &#8211; languages, databases, environments.</li>
<li><strong>Summary</strong>: Recruiters give your resumes only seconds when determining its fit for a role, so help them out by having a small summary easily telling the reader how many years of experience you have, your last role, and perhaps your education. From this, they can deduce.</li>
<li><strong>Accomplishments</strong>: When you do list the companies you have worked for, make sure to include some of your notable accomplishments and things you are proud of. If possible, try and quantify them (revenue generated, queries per second, amount of data).</li>
<li><strong>Your Role</strong>: Let the reader know what your role and responsibilities were at each position you have held</li>
</ul>
<p>Resume writing is a complex task, and something a lot of people dread. I have definitely not covered everything, but I did want to make clear a skills resume is not a good idea. Also be aware that many recruiting companies load resumes through a computer before even looking at them. Try to have keywords a search engine could pick up on (like SEO for resumes).</p>
<p>Perhaps resumes written for machines is a good thing after all?</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.pas.net.au/2009/03/skills-based-resumes/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Unlock your T-Mobile G1</title>
		<link>http://blog.pas.net.au/2009/02/unlock-your-t-mobile-g1/</link>
		<comments>http://blog.pas.net.au/2009/02/unlock-your-t-mobile-g1/#comments</comments>
		<pubDate>Mon, 23 Feb 2009 21:14:37 +0000</pubDate>
		<dc:creator>Peter Sankauskas</dc:creator>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[android]]></category>
		<category><![CDATA[G1]]></category>
		<category><![CDATA[tech]]></category>

		<guid isPermaLink="false">http://blog.pas.net.au/?p=17</guid>
		<description><![CDATA[I have successfully unlocked my T-Mobile G1 for free? How you ask? After 90-days, T-Mobile allows you to unlock almost any phone you have purchased from them with the T-Mobile branding, and all for FREE. The process can take about 2 weeks (as it did for me), but it worked. Here is how:

Call T-Mobile on [...]]]></description>
			<content:encoded><![CDATA[<p>I have successfully unlocked my T-Mobile G1 for free? How you ask? After 90-days, T-Mobile allows you to unlock almost any phone you have purchased from them with the T-Mobile branding, and all for FREE. The process can take about 2 weeks (as it did for me), but it worked. Here is how:</p>
<ol>
<li>Call T-Mobile on 1-877-453-1304 from another phone (not your G1). I got that number from their <a href="http://www.t-mobile.com/Contact.aspx">Contact</a> page</li>
<li>Its the standard voice prompt thing, so say English, enter your G1&#8217;s phone number, then when they ask what you want help with, say the magic word &#8220;Agent&#8221;</li>
<li>Then they ask what you would like to talk about, and say &#8220;SIM Unlock Request&#8221;</li>
<li>My experience with T-Mobile has been pretty good, within a minute I was talking to the real person. At this point, you verify your identity, and explain to them you want to unlock you phone because you are going overseas and want to use another SIM card.</li>
<li>They will ask you for you phone&#8217;s IMEI number. This is a sacred number, so be careful who you give it to, as you can report the phone stolen, give them the IMEI number, and have the phone permanently disabled. You will find the number:
<ol>
<li>on the side of the box your phone came in,</li>
<li>on the G1 itself under Settings -&gt; About phone -&gt; Status, or</li>
<li>by dialing *#06#</li>
</ol>
</li>
<li>Give them your email address, and within 14-days, you will get an email from T-Mobile with your unlock code.</li>
<li>To unlock the phone, power it off, insert a non-t-mobile SIM card, and power it back on</li>
<li>At the prompt, enter the unlock code from the email and you&#8217;re done!</li>
</ol>
<p>The reason for writing this post is I had no idea this could be done for free with any T-Mobile phone after 90-days has past. There is no need to pay $25 to any scam site, just do it legit, for free, and without issue.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.pas.net.au/2009/02/unlock-your-t-mobile-g1/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Django and Google App Engine Tutorial</title>
		<link>http://blog.pas.net.au/2009/02/django-and-google-app-engine-tutorial/</link>
		<comments>http://blog.pas.net.au/2009/02/django-and-google-app-engine-tutorial/#comments</comments>
		<pubDate>Tue, 17 Feb 2009 19:45:00 +0000</pubDate>
		<dc:creator>Peter Sankauskas</dc:creator>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[coding]]></category>
		<category><![CDATA[django]]></category>
		<category><![CDATA[google app engine]]></category>
		<category><![CDATA[howto]]></category>
		<category><![CDATA[python]]></category>
		<category><![CDATA[tech]]></category>
		<category><![CDATA[tutorial]]></category>

		<guid isPermaLink="false">http://pas256.wordpress.com/2009/02/17/django-and-google-app-engine-tutorial/</guid>
		<description><![CDATA[Hi have been playing around with Google App Engine for a while now, and wanted to learn Django on a new application I am building. The two articles I started with are:

Using the Google App Engine Helper for Django
Using Django 1.0 on App Engine with Zipimport

Both Django and GAE are being developed as I write [...]]]></description>
			<content:encoded><![CDATA[<p>Hi have been playing around with Google App Engine for a while now, and wanted to learn Django on a new application I am building. The two articles I started with are:</p>
<ul>
<li><a href="http://code.google.com/appengine/articles/appengine_helper_for_django.html">Using the Google App Engine Helper for Django</a></li>
<li><a href="http://code.google.com/appengine/articles/django10_zipimport.html">Using Django 1.0 on App Engine with Zipimport</a></li>
</ul>
<p>Both Django and GAE are being developed as I write this, so although these instructions are kind of recent, they are already out of date, or rely on you having knowledge of Django. Since there are a lot of others with no Python or Django experince wanting to learn, I thought I would make a tutorial that works as of today, but who knows a month from now or even tomorrow.</p>
<p>Note: This tutorial is written for Linux. Mac/Windows users will have to translate <img src='http://blog.pas.net.au/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </p>
<h3><span style="font-weight:bold;">Create django.zip</span></h3>
<p>Django comes as a .tar.gz file, but we want a zip file to take advantage of the Zipimport library, so some conversion is needed.</p>
<ol>
<li><a href="http://www.djangoproject.com/download/">Download the latest Django</a> and untar the file (in this case, it is 1.0.2)</li>
<li>cd Django-1.0.2-final</li>
<li>Create the zip file, but without the admin section since App Enging supplies it&#8217;s own<br />
zip -r ~/django.zip django -x &#8216;django/contrib/admin*&#8217;</li>
</ol>
<p><span style="font-weight:bold;">Get the Helper</span></p>
<p>The App Engine Helper or Django is an open source bootstrapper for getting Django started on App Engine. Downloading it from the website will currently give you quite an old version (r52) which will not work in this tutorial. Instead, use subversion to get the latest (r74).</p>
<ol>
<li>cd ~</li>
<li>svn export http://google-app-engine-django.googlecode.com/svn/trunk/ gae-django-tutorial</li>
<li>cd gae-django-tutorial</li>
<li>mv ~/django.zip .</li>
</ol>
<p><span style="font-weight:bold;">Setup App Engine</span></p>
<p>As you would with any GAE application, edit the app.yaml file to refer to your application ID. The Helper also needs to know where your Google App Engine SDK is, since it is going to change how you start the development server, so create a link to it:</p>
<ol>
<li>cd gae-django-tutorial</li>
<li>ln -s /path/to/google_appengine .google_appengine</li>
</ol>
<p><span style="font-weight:bold;">Start the development server</span></p>
<p>Django has a different way of running the development server. Instead of using dev_appserver.py to start the dev server, do the following:</p>
<ol>
<li>python manage.py runserver</li>
</ol>
<p>If everything is running correctly, you should see something like:</p>
<pre>INFO:root:Server: appengine.google.com
INFO:root:Checking for updates to the SDK.
INFO:root:The SDK is up to date.
INFO:root:Running application google-app-engine-django on port 8000: http://localhost:8000</pre>
<p>However, if you are like me and saw an error like the following:</p>
<pre>ImportError: No module named antlr3</pre>
<p>Then you will need to install the antlr3 python module. Luckily this is easy.</p>
<ol>
<li>Go to <a href="http://www.antlr.org/download/Python">http://www.antlr.org/download/Python</a> and download the latest zip</li>
<li>unzip antlr_python_runtime-3.1.zip</li>
<li>cd antlr_python_runtime-3.1</li>
<li>sudo python setup.py install</li>
</ol>
<p>Lets see the site! When you go to <a href="http://localhost:8000/">http://localhost:8000/</a> you should see a page saying &#8220;It worked!   Congratulations on your first Django-powered page.&#8221;<br />
Pretty (un)impressive huh?</p>
<p>Ok, now lets start doing something. Kill the server by pressing Ctrl-C. The <a href="http://docs.djangoproject.com/en/dev/intro/tutorial01/#intro-tutorial01">Django tutorial</a> is the next stop, which involves creating the Polls Django app. You can read through there to get a full understanding. For simplicity, I am only what I did to get it working.</p>
<ol>
<li>python manage.py startapp polls</li>
<li>cd polls</li>
<li>Edit models.py
<pre>from appengine_django.models import BaseModel
from google.appengine.ext import db

class Poll(BaseModel):
  question = db.StringProperty()
  pub_date = db.DateTimeProperty('date published')

class Choice(BaseModel):
  poll = db.ReferenceProperty(Poll)
  choice = db.StringProperty()
  votes = db.IntegerProperty()</pre>
</li>
<li>Edit views.py (notice that order_by() from the Django tutorial is just order() here)
<pre>from django.template import Context, loader
from polls.models import Poll
from django.http import HttpResponse

def index(request):
  latest_poll_list = Poll.objects.all().order('-pub_date')[:5]
  t = loader.get_template('polls/index.html')
  c = Context({
    'latest_poll_list': latest_poll_list,
  })
  return HttpResponse(t.render(c))</pre>
</li>
<li>cd ..</li>
<li>Edit urls.py and add to urlpatterns<br />
(r&#8217;^polls/&#8217;, &#8216;polls.views.index&#8217;),</li>
<li>mkdir -p templates/polls</li>
<li>cd templates/polls</li>
<li>Create index.html
<pre>{% if latest_poll_list %}
&lt;ul&gt;
{% for poll in latest_poll_list %}
  &lt;li&gt;{{ poll.question }}&lt;/li&gt;
{% endfor %}
&lt;/ul&gt;
{% else %}
  &lt;p&gt;No polls are available.&lt;/p&gt;
{% endif %}</pre>
</li>
<li>cd ../..</li>
<li>Edit settings.py and add to INSTALLED_APPS<br />
&#8216;polls&#8217;,</li>
<li>Now you can run the dev server again:<br />
python manage.py runserver</li>
<li>And go to:
<p>http://localhost:8000/polls/</li>
<li>You should see the message &#8220;No polls are available.&#8221;</li>
</ol>
<p><span style="font-weight:bold;">Adding some data</span></p>
<p>You can go through the rest of the Django Tutorial to fill out the rest of the views. One last thing to know is the admin site. To view it, go to:</p>
<ol>
<li><a href="http://localhost:8000/_ah/admin">http://localhost:8000/_ah/admin</a></li>
</ol>
<p>Notice that the Datastore Viewer is empty &#8211; it doesn&#8217;t even know about our Poll or Choice Models. Don&#8217;t panic. Go back to your terminal, and terminate the dev server. Now run:</p>
<ol>
<li>python manage.py shell</li>
</ol>
<p>This brings up a special python shell with the Django environment set up for you. Now you can run:<br />
&gt;&gt;&gt; from polls.models import Poll, Choice<br />
&gt;&gt;&gt; import datetime<br />
&gt;&gt;&gt; p = Poll(question=&#8221;What&#8217;s up?&#8221;, pub_date=datetime.datetime.now())<br />
&gt;&gt;&gt; p.save()</p>
<p>You have just created a new Poll. To end the shell, press Ctrl-D.</p>
<p>If you start the dev server again (or if you never stopped it in the first place), you should be able to go to:<br />
<a href="http://localhost:8000/polls/">http://localhost:8000/polls/</a><br />
to see you new Poll, and go to the admin site:<br />
<a href="http://localhost:8000/_ah/admin/datastore">http://localhost:8000/_ah/admin/datastore</a><br />
to see and create new Polls</p>
<p>Easy huh? <img src='http://blog.pas.net.au/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </p>
]]></content:encoded>
			<wfw:commentRss>http://blog.pas.net.au/2009/02/django-and-google-app-engine-tutorial/feed/</wfw:commentRss>
		<slash:comments>7</slash:comments>
		</item>
	</channel>
</rss>
