RHQ JDR protoytpe demo
by Heiko W.Rupp
Neue Sitzungsanfrage:
Betreff: RHQ JDR protoytpe demo
Organisator: "Heiko Rupp" <hrupp(a)redhat.com>
Ort: Hangout on Air
Uhrzeit: Mittwoch, 2. April 2014, 11:30:00 - 12:00:00 GMT +01:00 Amsterdam, Berlin, Bern, Rom, Stockholm, Wien
Eingeladene Teilnehmer: rhq-devel(a)lists.fedorahosted.org
*~*~*~*~*~*~*~*~*~*
Quick demo of a *prototype* to add JDR (JBoss Diagnostic Reporter) data from RHQ to the JDR-reports.
Will be on G+ and recorded on http://www.youtube.com/watch?v=Qy6VnKfNtvw
Questions can be asked in #rhq on irc.freenode.net
10 years
Chat log for "demo of Remote-Agent-install over ssh" demo
by Heiko W.Rupp
This the chat log for Mazz' demo of the remote agent install - Video is at https://www.youtube.com/watch?v=O0oSYXYe4Ro
[15:29:35] <pilhuhn> Yeah, mazz on TV https://www.youtube.com/watch?v=O0oSYXYe4Ro
[15:29:47] <pilhuhn> Everyone bring popcorn and the cheer leaders :-)
[15:31:14] <opuk> oh, interesting
[15:31:20] <pilhuhn> Mazz, awesome!
[15:31:25] <pilhuhn> I see you(r screen)
[15:31:32] <mazz> cross your fingers it doesn't crah
[15:31:34] <mazz> crash
[15:33:45] <pilhuhn> Go Go Go ! :-)
[15:34:40] <pilhuhn> opuk you can directly ask questions here and mazz will answer them live
[15:35:49] <opuk> mazz: can one use ssh keys?
[15:37:05] <lkrejci> or not :)
[15:37:09] <opuk> awh
[15:37:12] <pilhuhn> opuk +1
[15:37:32] <pilhuhn> and / or just defer to an ssh-agent on local box
[15:39:25] <pilhuhn> mazz can we make this red bar yellow or green, as this is not a fault condition if the test for no agent succeeds in the way that there is no agent yet
[15:42:22] <lkrejci> mazz: so "Remote Agent Install" is not the only thing you can do on that page... what about renaming it?
[15:42:53] <stefan_n> mazz, what happens if you never ever connected to a machine before? there is that initial ssh handshake where you need to confirm the identity of the other server for typical SSH client....
[15:43:09] <lzoubek> mazz, what if you try to install agent to location where an existing agent is running?
[15:43:09] <mfoley> question from filip: can I pass e.g. RHQ_AGENT_ADDITIONAL_JAVA_OPTS somehow?
[15:44:36] <lzoubek> nice :)
[15:45:20] <pilhuhn> I think we should add a popup to confirm the fingerprint -- if the user has to use the command line ssh client to add the agent host to .ssh/known_hosts, then he can also just copy the agent over
[15:45:57] <pilhuhn> Does that work with Unix only or is that available for Win too?
[15:46:30] <lzoubek> I think it deserves better "install status" presentation. when it's installing it's still showing old results from previous install (if any)
[15:47:25] <tsegismont> no bult-in ssh server
[15:47:29] <tsegismont> cygwin
[15:47:32] <pilhuhn> no, when you connect to a new box for the 1st time, ssh shows "this is the remote fingerprint ... do you want to continue"
[15:47:52] <stefan_n> mazz, how about running JON Server on Windows ... so Windows is the SSH client not the destination for the agent
[15:47:54] <tsegismont> or http://www.freesshd.com/
[15:48:14] <pilhuhn> $ ssh user@host
[15:48:37] <pilhuhn> The authenticity of host 'host' (1.2.3.4) can't be established.
[15:48:37] <pilhuhn> RSA key fingerprint is 17:c1:67:06:b8:04:d8:90:e9....
[15:48:43] <pilhuhn> Are you sure you want to continue connecting (yes/no)?
[15:48:52] <pilhuhn> And this is what I think we need to show in the UI
[15:49:50] <lkrejci> pilhuhn: mazz: we do need the fingerprint confirmation... because it's not the *user's machine* that connects to the target machine, it's the JON server's machine..
[15:50:15] <tsegismont> it's the client which should put the fingerprint in the known hosts file
[15:50:17] <tsegismont> not the server
[15:50:24] <lkrejci> so the user cannot just ssh user@host from his local box... it'd had to be done from the JON server's box
[15:51:06] <pilhuhn> ( you can just remove that line from known_hosts to get this fingerprint dialog again)
[15:51:41] <pilhuhn> Ok, we will figure that out
[15:51:41] <lkrejci> mazz: the target machine does not do the authorization.. it's the connecting machine (i.e. JON server) asks if it is safe to the target machine
[15:51:53] <tsegismont> lkrejci, right
[15:52:29] <pilhuhn> no, this fingerprint is about the rhq-server-user on the server allowing to connect to the not-yet-known host
[15:52:32] <lkrejci> no
[15:52:43] <lkrejci> no :)
[15:53:03] <lkrejci> if it is safe to connect to the target machine...
[15:53:04] <pilhuhn> this is not about authorized hosts, but about known_hosts
[15:53:22] <lkrejci> yep
[15:54:23] <lzoubek> could we add deploying agent to multiple hosts when using same user/pass or key?
[15:54:37] <pilhuhn> so the server "just" needs to show the dialog I've pasted above, and if the user clicks "ok", we add the agent-box to known_hosts and next time the rhq-server will not ask this again
[15:54:57] <tsegismont> pilhuhn, +1
[15:54:58] <pilhuhn> lzoubek good question. Like giving host names in ; separated manner for all to install
[15:56:16] <tsegismont> jsch supports key based authentication, it would be a nice add
[15:56:23] <pilhuhn> tsegismont +1
[15:56:33] <pilhuhn> and / or just deferring to a local ssh-agent
[15:57:07] <lkrejci> pilhuhn: local == JON server, so it's not that easy for a UI user to talk to it
[15:57:58] <tsegismont> thanks mazz
[15:58:20] <mfoley> that was great!
[15:58:20] <lkrejci> thanks mazz, good to see this advertised
[15:58:24] <mfoley> lots of ideas for testcases!
[15:58:34] <pilhuhn> Thank you mazz !!!
[15:58:38] <ahovsepy> thank you mazz
--
Reg. Adresse: Red Hat GmbH, Technopark II, Haus C,
Werner-von-Siemens-Ring 14, D-85630 Grasbrunn
Handelsregister: Amtsgericht München HRB 153243
Geschäftsführer: Charles Cachera, Michael Cunningham, Paul Hickey, Charlie Peters
10 years, 1 month
Agent-tunneling via ssh?
by Heiko W.Rupp
Hey,
has anyone tried to tunnel agent communication via ssh+port forwarding?
If I recall and understand ssh right, then is is possible to "dial" into the
server and enable port forwarding, so that port 16163 of the agent can be
reached from the server.
This could also allow to mitigate changing ip addresses of the agent machine,
as the agent machine initiates the ssh connection and the server does not need
to care about the agents ip.
On the server host, there would probably be some special process that
replaces the normal "interactive" shell of the user.
One can then have one unix user per agent or also a joined user for
all agents depending on "taste".
Does that make sense?
I think this could be an awesome student project.
Heiko
10 years, 1 month
Disabled metrics are still collected
by Larry O'Leary
While looking into another issue dealing with metric collection
failures, I have stumbled across something strange. I can see metrics
being collected by the agent for metrics which are not enabled. Is this
expected?
In my case I am working with a non-Tx datasource resource from the AS7
plug-in. Even though many of the metrics are disabled by default, I am
seeing some disabled metrics included in the measurement collection
request:
PreparedStatementCacheCurrentSize
PreparedStatementCacheMissCount
PreparedStatementCacheMissCount
PreparedStatementCacheAddCount
PreparedStatementCacheAccessCount
PreparedStatementCacheAccessCount
PreparedStatementCacheDeleteCount
PreparedStatementCacheDeleteCount
PreparedStatementCacheHitCount
PreparedStatementCacheHitCount
AverageBlockingTime
AverageCreationTime
MaxCreationTime
TimedOut
TotalCreationTime
TotalCreationTime
TotalBlockingTime
TotalBlockingTime
If this is happening with other resources and resource types, I can
imagine that the load generated on and by the agent is much higher then
what would be expected.
http://ur1.ca/gt6mv contains the log message showing these disabled
metrics being included in the getValues call. Something to note is that
even though the above metrics are disabled, the PC reports them as
enabled as seen in the log message.
Is this expected? A bug? Something we are already aware of?
--
Larry O'Leary
https://plus.google.com/+LarryOLeary
10 years, 1 month
Re: Cassandra + ElasticSearch
by James Strachan
Hi Elias
co-locating ElasticSearch on the same boxes as Cassandra sounds awesome!
Any chance you could post the Cassandra piece? I'd love to try it; as it'd
make provisioning RHQ much simpler with just Cassandra and ES talking to
it; then if feels like there's just a single database to manage.
--
James
-------
Red Hat
Email: jstracha(a)redhat.com
Web: http://fusesource.com
Twitter: jstrachan, fusenews
Blog: http://macstrac.blogspot.com/
Open Source Integration
10 years, 1 month