Say you secured so much your AWS server you can only login with SSH keys there. And you have only one SSH key that can access that server. And you lost your SSH key or forgot the passphrase for it.
Are you damned to lose all that work you have poured into that machine? Probably not, if you have the luxury of some downtime.
AWS does not have any (easy) way to just change the SSH key that can access to a system.
So after 30 minutes of attempts this is how I managed to get access back to my machine.
Create another machine (a copy or just a new one it doesn't matter) and start it up. Pay attention to authorize a new SSH key that works to access this machine.
Shut down the original machine
Detach the (root) disk volume
Attach that volume to the running instance
mount the root partition (running dmesg or fdisk -l will tell you what to mount)
go to <mtpoint>/root/.ssh/
vi authorized_keys and add there the public key of your new key
shutdown this new machine
detach the volume
reattach it to the old instance
restart the instance and ssh into it with the new key
Be happy.
Ps. I found here another method involving snapshots but I just couldn't make it work. For some reason the cloned machine was always empty.
A loooong time ago I bought this SIP router, the DLink DVG-2001S. After years of using it and being bothered by the infamous call waiting alert I got fed up and tried to get rid of it.
Obviously no freaking way you can do that through the web interface... luckily that didn't stop me from doing telnet to the device and hacking a bit into it.
telnet < ip_device_of_your_device > 23
sip show
This should show more or less what is your configured line. Usually this will be #1.
After I read the post of Urho about Wiimote+DrNokSnes+TVout I couldn't help trying it out right away (except the Wiimote thing that I don't have). That was a funny jump back in time to when I was young and passed the evenings at a friend's apartment trying to finish the (amazing at that time) Super Mario bros on the NES (I didn't have a NES myself).
Besides that I tried out for the first time in these months the TV-out. I never realized it was so amazing... after having that strange cable packed on my desk for a whole 2 months I got to really use it. And, even if at first it was just to play Mario, I realized that the N900 it's a full blown audio/video player that supports a lot of formats. So I just started to watch a TV show on the bus, arrived home and plugged it into the TV and finished watching the show there.
I mean it's amazing! 180 grams plus a cable and you have a multimedia station with 32G storage on board. I've been thinking to get some kind of media box lately... well I think I found it... it was in my pocket the whole time.
Oggi mi sveglio, una giornata come tante altre e scopro che il nostro mitico Silvio presidentone nazionale (il migliore degli ultimi 150 anni) si candida (o si vorrebbe candidare, o lo vorrebbero candidare, ancora non ho capito) al premio Nobel per la pace.
Si avete capito bene premio Nobel per la pace.
Come se io mi candidassi al premio Nobel per la letteratura.
Non contento della messa in scena pare che abbia assoldato Biancaneve e i sette nani (al coro), un sosia di Bocelli e lo zio di Mogol per interpretare e scrivere il testo di questa canzone
O forse il testo l'ha scritto lui in un momento in cui si sentiva ispirato al cesso ("Silvio Silvio grande e'" chiara eco ai cori da stadio).
Sempre in vena di scherzoni ha fatto mettere su un sito che raccoglie una tale valanga di minchiate che manco Alvaro Vitali e Thomas Millian ubriachi e dopo essersi magnati 10 chili di coda alla vaccinara nel famoso ristorante La Parolaccia di Roma sarebbero stati in grado di mettere una dietro l'altra.
Ma andiamo con ordine:
in home page non si poteva fare a meno dell'inno italiano (che fa sempre scena, malgrado al governo con Silvio ci sia chi con l'inno ci si pulisce il deretano). Sempre in home page una accozzaglia di frasi che dovrebbero spingerti a credere veramente in quello che il sito sponsorizza:
Il Premio Nobel per la Pace non è mai stato assegnato ad un italiano dal 1907 ad oggi. E' finalmente venuta l'ora di sfatare un tabù che dura da più di cento anni, ovvero da quanto nel 1907, ad aggiudicarselo fu Ernesto Teodoro Moneta. Alla corsa per l'ambito riconoscimento si sono succeduti, in questi anni numerosi politici e capi di Stato, tra i quali potremmo citare, Yasser Arafat, il presidente della Corea del Sud, Kim Dae-Jung, l'ex presidente americano, Jimmy Carter, ed Al Gore. Oggi crediamo che, anche, l'Italia meriti di ricevere tale riconoscimento, e di essere degnamente rappresentata da Silvio Berlusconi, per il suo indiscusso impegno umanitario in campo nazionale ed internazionale.
(vi consiglio di visitare questo link per un'adeguata parafrasi di quello che e' scritto qui sopra)
E andiamo subito alle chicche: testimonial d'ecce_zz_ione (nel senso di eccezziunaleveramente) e' Loriana Lana ... vi chiederete "ecchiccazze'?". Ecco se lo stanno chiedendo un po' tutti.
I GadgetS: Una maglietta con su scritto (davanti) "Silvio per il nobel", probabilmente dietro ci sara' scritto Kaka'.
Dulcis in fundo: chi ha aderito all'appello: un gruppo di sodali, portaborse e amichetti del premier (tutta gente molto importante e in vista per carita').
Ecco ora potete scoprire chi ha creato quest'iniziativa (cosi' potete mandarli a quel paese di persona) e qui ci metto il link ma cmq la faccia di questo vi dice gia' tutto:
Well this is a really nice way to waste your time: Translation Party. You write a phrase in english and it will translate it back and forth from english to Japanese until the phrases will match in 2 consecutive translations. I entered this:
Whatever you say it's wrong and I will disagree with that until you prove it right
and the equilibrium was at this point:
And, right or wrong, I have evidence to the contrary
Let's face it, System Administrators get no respect 364 days a year. This is the day that all fellow System Administrators across the globe, will be showered with expensive sports cars and large piles of cash in appreciation of their diligent work. But seriously, we are asking for a nice token gift and some public acknowledgement. It's the least you could do.
Having to convert some SVN repositories to GIT, Misha pointed me to this recipe that was quite what I needed to convert svn tags to real tags.
There was some more typing involved and I hate typing, plus I had to deal with a non standard SVN layout that by experience I think it's like a second standard. So I included all the hints found there and somewhere else in a "one click" script that tries to do everything automatically. Since it's automatic you might end up with something close but not exactly as you need, so feel free to tweak as much as you want (as I did with Frank's recipe ;) ).
Bored of searching for a subtitle over the internet? I came across this very interesting project: Subdownloader. It's a python + QT program that allows you to scan your movies and search automatically for the right subtitle in any language you want from opensubtitles.org.
It's fast, it's available for linux and windows, it's open source and it works really well, and most important it finds always the right subtitle.
Image by teoruiz via FlickrI will try to tell the story as my friend mooch told me quite some time ago.
It was the beginning of the internet tablets, it was so beginning that the tablets were just called "devices" and that the 770 was only a prototype. I wasn't there yet but mooch told me he was and he just received his brand new shiny desktop to start doing something.
In the search for a new name for his machine he fired up the good old 'pwgen' utility. Strange and incomprehensible names started to come up on the screen. One of those wasn't really maemo but it was really close to be (pwgen default is to give you 8 chars strings). He extrapolated somehow maemo from the 8 chars displaying on the screen and he dig up in the internet finding out that maemo didn't really mean that much besides something in a dialect on the other part of the world and he decided to choose that as the name of his desktop.
At that time he was the IT guy in the organization and he started to use his desktop to collect packages that developers were sending him over e-mail, ftp... (yeah it was really the beginning).
In few months his desktop was clogged with packages and he couldn't use it anymore as his desktop but it became quite useful as central repository for the developers.
He had to grow it with more disk space and move to another 2x CPU box. When services and needs grew way too much for the little power provided by 2GB and 2x PIII 700MHz, he ordered a new machine that became THE Server.
Someday after some other months somebody came into the room and asked him if Nokia could use that name to register a domain to publish some sdk. Without second thoughts he told "Of course".
So finally I get few minutes to write about Maemo Summit 08. Hopefully (if the crawler hits my blog) this should be my first post aggregated with planet.maemo.org. So hello maemons.
At the beginning I wasn't so sure that I would have benefited by going to the summit and I was a bit sceptical about it. Well after that (and after one week passed to recover from it) I have to say: it was great! First time I met a lot of people and had a chance to really talk to them (email, though useful, doesn't give you everything of a person). First time I had a chance to speak for more than the time allocated for the meeting with some nokians. Overall there was this sensation of community that as an insider you don't feel everyday. Actually you never feel so much you're busy with your job.
I really have to thank (again) Quim and Peter that organized the summit. And I also have to thank the whole community. If you didn't get it we, as nokians, need you as much as you need us. Coming back to Finland after the summit I was refreshed and energized (even though I was damn tired) and I felt I was sharing this state of mind with a lot of others in the plane (at least the tiredness :D ).
Greetings to Niels, murrayc, kersten and the other of the openismus crew (great party!). To the Collabora guys and to the rest that I didn't mention here. See you at the next summit.
BIG thanks to the community to support us and to give us more energy to continue on this path.
I started to work on MiMMS, an MMS stream downloader written in python.
When I first looked at the application it looked pretty much what I needed to download Italian TV shows to my N810 and watch them while I was on the bus (trying to take advantage of dead periods). The little problem was that (as for many other mms servers) the bandwidth was limited and it was taking me an hour to download just one show. So I registered a new branch of MiMMS that allows you to split the stream in many parts and use all your bandwidth to be quicker. It still has a lot of work to do, but it works pretty well and I hope it'll soon be packaged for Debian.
Well designed web applications know always how much time has passed since your last visit. But are we sure that 38 yrs ago this site was already available? :D
Or is it just a nice way to put that I've never been there?
In Apache2.2 (default in Debian Etch) all the LDAPauthentication/authorization was rewritten. (Thank you guys for a great piece of FREE software.)
The module that performs both authentication (Authn) and authorization (Authz) for Apache sometimes is not very intuitive as Brad Nicholes says in this comment.
The problem is this: I have a nice way to provide an authentication Alias through mod_authn_alias to keep my Apache config clean and understandable BUT I cannot use that Alias to perform Authorization in many cases...
For example if I want to use
Require ldap-group
directive I have two ways of doing it.
either you DON'T use AuthnProviderAlias (BTW I just understood that Authn stands for authentication while Authz stands for Authorization... VERY intuitive) like this:
<Directory /mydir> AuthType Basic AuthUserFile /dev/null AuthName "Access" AuthBasicProvider ldap AuthLDAPUrl ldap://myldap.server.com/o=myorg?uid?sub AuthLDAPBindDN cn=account,ou=accounts,o=myorg AuthLDAPBindPassword **** require ldap-group cn=AGroup, ou=Groups, o=myorg Options Indexes FollowSymLinks Order deny,allow Allow from all </Directory>
Or you DO specify both the Authn alias AND the AuthLDAPUrl in the Directory, so like this:
In a few words it doesn't make sense to use AuthnProviderAlias in this case... Just use the first approach, even though it looks very bad... it looks better than the other :D
Very nice extension for your web browser(*). Piclens redesigns your screen to view the images on a 3D rolling wall. You can select them, view as slideshow. The nicest thing is that it integrates with flickr, google images, smugmug, deviantart and others.
Very bad though that doesn't work under linux... :(
(*) If your webbrowser is either IE, Safari or Firefox.
Say that you visit often a site, say that you would like to subscribe to the site via RSS and say that this site doesn't have RSS feed. Too bad you'd say...
Well here's where it comes feedfire. Free registration allows you to just give any html page and feedfire will think about creating a feed out of that. Downside is that the feed is updated (only) every 24 hrs... but hey you can't have everything for free :)
For who's interested I'm using it to monitor items in huuto.net website (the finnish ebay) you just search an item in huuto.net, copy and paste the address to feedfire and subscribe to the RSS feed.
Weird thing happened today. Suddenly Gmail webpage wasn't showing up anymore, it was reloading and reloading and reloading... Greader was saying that there were unread items while not showing any of them. I tried with Firefox, nothing. With IE nothing as well.
Reinstalled in order: * Java * IE * Firefox
Nothing... same as before. In the end I checked the date and it was one month later than today... well, believe it or not, that was the problem... After fixing the date everything bakc to normal.
So if Gmail or Greader don't work, take a look at the your date settings ;)
Finally I got why I didn't have the "embed slideshow" button in my picasaweb... I had English (UK) language instead of English (US)...
So if you're missing it too, just go to your settings and change your language from whatever you have to English (US).
Here a simple example:
Finalmente ho capito perchè non avevo il link "Embed Slideshow" in Picasa... avevo la lingua sbagliata. La funzione è disponibile (per ora) solo se si ha come lingua English (US).
Quindi se anche a voi manca la funzione "embed slideshow" andate sui vostri settings e cambiate la lingua. Apparirà magicamente. ;)