tag:blogger.com,1999:blog-49255916967122848572024-03-28T23:51:08.815-06:00Learning in ITarielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.comBlogger52125tag:blogger.com,1999:blog-4925591696712284857.post-62902624925596448992017-11-25T21:50:00.000-07:002017-11-25T22:48:21.185-07:00Installing Fedora 27 on a UEFI-enabled Windows 10 machine with Secure Boot enabled<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">I recently installed Fedora 27 on my personal laptop alongside Windows. </span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">So far Fedora 27 feels very polished and it recognized almost everything out of the box, including sleeping when I close the lid. </span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">There were, however, a few things I did that went beyond the usual click-click install experience, so I thought I would share:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">1) The new Fedora install still boots into Windows</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">There's a new Fedora media installer executable that downloads the ISO and prepares a USB drive for you, and upon booting from said USB, installation is relatively straight-forward. The installation took care of creating free space from my existing NTFS partition, and automatic partitioning created a /boot, / and swap partition.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">However, after rebooting my laptop ran Windows again, instead of Grub - this is typical of UEFI installations. The Fedora installation did create a new entry for itself, but it was missing one for Grub. I am not sure if this is by design, or a product of having a password on my BIOS, etc.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">To fix this, we must add Grub to the authorized UEFI files. Find where your BIOS allows you to add UEFI files as "trusted for executing" and point it to </span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "courier new" , "courier" , monospace;">HD / EFI / Fedora / grubx64.efi </span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> (you must provide a name, I chose Fedora Grub)</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Save the settings. You may only have an option to save and exit, like me.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Then, you must make sure that the Grub option that now appears in your boot priority list is listed before "</span><span style="font-family: "courier new" , "courier" , monospace;">Windows Boot Manager</span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">". Voila, it works, and this includes after updating Fedora.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">2) Gnome (by default) doesn't show files in the Desktop</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">You can either install the </span><span style="font-family: "courier new" , "courier" , monospace;">gnome-tweak-tool</span>,<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> or just run the following in an unprivileged terminal (I think this is a per-user setting)</span><br />
<br />
<span style="font-family: "courier new" , "courier" , monospace;">gsettings set org.gnome.desktop.background show-desktop-icons true</span><br />
<br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">3) Touchpad does not support tap-to-click (ie, like a Mac).</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">In the Settings app, choose Devices, Mouse & Touchpad, and in the Touchpad section, turn on "Tap to click".</span><br />
<br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-56080944504316118572017-10-19T21:44:00.001-06:002017-10-19T21:51:36.564-06:00My simple cheat-sheet of Git bash commands<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">This post has several assumptions!</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">1) You are working on a Windows machine with <a href="https://git-for-windows.github.io/">https://git-for-windows.github.io/</a> already installed.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">2) You already have a Github user and have created a repository with content</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">3) Assumes you already have created a github ssh key and its already working - I will make a blog post about doing this easily soon!</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">4) This also only works when you are only working on the ONE default branch!!</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><u>Essential Github bash commands:</u></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><b>To clone something you have in the Github site to your PC</b></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><i>On the webpage:</i></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">- Go to your profile and click on the repo</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">- Find the "clone or download" button</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">- Click Get SSH if you need, and copy something like </span><span style="font-family: "courier new" , "courier" , monospace;">git@github.com:arielsanchezmora/arielsanchezmora.github.io.git</span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> to your clipboard.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><i>Open Git Bash:</i></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">- Find the directory where you want to copy the repository to</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">- In the Git Bash Window type "</span><span style="font-family: Courier New, Courier, monospace;">cd /c/</span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">....(the path, but in linux format. use "pwd" if you get lost on how to format it)</span><br />
<b><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">- </span><span style="font-family: "courier new" , "courier" , monospace;">Git clone</span></b><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> [what you had copied from the webpage: </span><span style="font-family: "courier new" , "courier" , monospace;"><b>git@github.com...</b></span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">.]</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">(type ssh key password if needed)</span><br />
<br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><b>To return changes to Github</b></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Change to the cloned folder (it will have a hidden .git folder) before executing the below. The other files should have changed before you run these commands.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "courier new" , "courier" , monospace;"><b>git status</b></span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> to see the changes (red is unstaged changes)</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"><b>git add .</b></span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> (the dot means all files/subfolders)<span style="white-space: pre;"> </span></span><br />
<span style="font-family: "courier new" , "courier" , monospace;"><b>git status</b></span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> (green shows changes have been staged)</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"><b>git commit -m "add a comment to your code change"</b></span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> (otherwise, hi vi!)</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"><b>git status</b></span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> will show your local branch is ahead of the Github site</span><br />
<b><span style="font-family: "courier new" , "courier" , monospace;">git push origin master</span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> </span></b><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">will sync your changes back to Github :)</span>arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-55586143750168557612017-03-29T00:21:00.001-06:002017-03-29T00:26:47.675-06:00Disable TLS v1.0 and v1.1 in vSphere 6.0<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><i>This is a very rough post with the base information - I will make this part of a series soon. </i></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">This quick post only focuses on the use of the TLS tool in vSphere 6.0 in a very simple environment (VCSA with embedded PSC, hosts in the 3 situations used in the tool) for demonstration purposes. </span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqc3mm_c3fOENhyphenhyphenmhsSGSsJ33EY7PK_d5eFiOBupnaTqZW5uLCs7uz4xNH6XRQMbRZHM3BiGQ529v5j0XBc_7LfgYoMV5OOOV_R9EKQFsCNYsrltuJSkQbwFX2fQMu5ICERjUmqlvSsJxZ/s1600/Test+environment+setup+-+nested+-+one+vcenter%252C+3+hosts.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="161" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqc3mm_c3fOENhyphenhyphenmhsSGSsJ33EY7PK_d5eFiOBupnaTqZW5uLCs7uz4xNH6XRQMbRZHM3BiGQ529v5j0XBc_7LfgYoMV5OOOV_R9EKQFsCNYsrltuJSkQbwFX2fQMu5ICERjUmqlvSsJxZ/s400/Test+environment+setup+-+nested+-+one+vcenter%252C+3+hosts.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Also, note that only port 443 is tested, but both vSphere and ESXi have many other ports, some even outside of the TLS tool configuration.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">This post focuses on only leaving TLS 1.2 enabled. Other posts which helped me and constitute good reading are:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><a href="https://techbrainblog.com/2015/03/30/how-to-scp-files-to-vmware-vcenter-appliance-6-0-vcsa/" target="_blank">https://techbrainblog.com/2015/03/30/how-to-scp-files-to-vmware-vcenter-appliance-6-0-vcsa/</a> by <a href="https://twitter.com/GaneshSekarbabu" target="_blank">GaneshSekarbabu</a></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><a href="https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2054085" target="_blank">https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2054085</a></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><a href="http://www.justmy02centsworth.com/2016/11/pci-dss-tls-10-disablement-and-vmware.html" target="_blank">http://www.justmy02centsworth.com/2016/11/pci-dss-tls-10-disablement-and-vmware.html</a> by <a href="https://twitter.com/DanRaymond65" target="_blank">DanRaymond65</a></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">We will basically put in practice KB 2148819:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><a href="https://kb.vmware.com/selfservice/search.do?cmd=displayKC&docType=kc&docTypeID=DT_KB_1_1&externalId=2148819" target="_blank">https://kb.vmware.com/selfservice/search.do?cmd=displayKC&docType=kc&docTypeID=DT_KB_1_1&externalId=2148819</a></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Before we start, <b>make super sure you are running at least 6.0 Update 3 and your vCenter and hosts are on the same release! Also download the rpm version of the TLS tool from the same location where the VCSA is downloaded from.</b></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">If you are going to do the whole environment, the basic o</span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">rder is:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">1) vCenters</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">2) hosts</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">3) PSCs</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Steps needed to be able to run the tool:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Open SSH (or use the VCSA console). You may need to follow <a href="https://www.vladan.fr/vmware-vcsa-3-ways-to-activate-ssh/" target="_blank">this</a> if it's not enabled already</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6aL9zmrtc94O2hFAI4jA91Xzuvgob86Sw8gHWePnYppvRU-B2sTtEDVafAwFDdGLZAgLfQD3wFuBWF_3hBe1IGh65ssDtLNSrSuUdZulcNND5zXuDlPpBCcx5686BUj3fVr5rR_muw1p2/s1600/open_ssh_to_vcsa.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="146" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6aL9zmrtc94O2hFAI4jA91Xzuvgob86Sw8gHWePnYppvRU-B2sTtEDVafAwFDdGLZAgLfQD3wFuBWF_3hBe1IGh65ssDtLNSrSuUdZulcNND5zXuDlPpBCcx5686BUj3fVr5rR_muw1p2/s400/open_ssh_to_vcsa.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#It's always a good idea to verify the SSH keys match</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgMmBkr393PQoER5zTpoMok91vAr4CAV07ufr9HtffftNN-1ABOV-IMUcuTK6bU2otWcS87ZGrToD-nMY_kZT20HhIkOKVHFpT5uHtri7oy96Os4YwNwET1Eop3ED06apClIpoSVNaCDQLo/s1600/verify_ssh_key.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgMmBkr393PQoER5zTpoMok91vAr4CAV07ufr9HtffftNN-1ABOV-IMUcuTK6bU2otWcS87ZGrToD-nMY_kZT20HhIkOKVHFpT5uHtri7oy96Os4YwNwET1Eop3ED06apClIpoSVNaCDQLo/s400/verify_ssh_key.png" width="257" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Now execute these commands. Enable Bash shell:</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">shell.set --enable True</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Launch the "Bash" shell which is really a "pi shell":</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">shell</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Change shell to Bash so SCP works (doesn't otherwise, not explained in the KB)</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">chsh -s "/bin/bash" root</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMkOzknHzucV8Ka1J9MRYJpydECZklTzOqhPKU3ch6NABS_t7e2kPCNHYdEoYkQtbccanjmzfo7wnyQmYu13Y_TRoR_bgkAnmfy0ab5hfFVdwPsfUJ60mA6OvIIIzm-neHtZ9ldnx_NnxM/s1600/commands+before+transferring+the+tool.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMkOzknHzucV8Ka1J9MRYJpydECZklTzOqhPKU3ch6NABS_t7e2kPCNHYdEoYkQtbccanjmzfo7wnyQmYu13Y_TRoR_bgkAnmfy0ab5hfFVdwPsfUJ60mA6OvIIIzm-neHtZ9ldnx_NnxM/s400/commands+before+transferring+the+tool.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">*Go copy the TLS RPM file to the VCSA now*</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9O-3UK0DlEfz04EInBqKPVxs2pT5mJ8PG4MHj6rp6_ImXJjy2spSQfCrtE7kQOm3awMBez0vcfVYhJN5oFtrhVxavxshdnUX3YiMEq6PZvyBL7oGeHLjpRzRXDVlHX5gKE2ZtHEaRH2e6/s1600/scp+using+winscp.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="375" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9O-3UK0DlEfz04EInBqKPVxs2pT5mJ8PG4MHj6rp6_ImXJjy2spSQfCrtE7kQOm3awMBez0vcfVYhJN5oFtrhVxavxshdnUX3YiMEq6PZvyBL7oGeHLjpRzRXDVlHX5gKE2ZtHEaRH2e6/s400/scp+using+winscp.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLbL3SRPQ_srBSNXdp7iNQ-_q_Blc8bxNNf1-rrFAhGspMXeN-6FaO1qXrHoPIxG5mztS7u1BnducAMNqcYxyXPZBPBm0afn42GUOafs7z9sLLZOu22arB6jZ-7ypNf_6WijmXCkexkjhW/s1600/copy+the+tool+rpm.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLbL3SRPQ_srBSNXdp7iNQ-_q_Blc8bxNNf1-rrFAhGspMXeN-6FaO1qXrHoPIxG5mztS7u1BnducAMNqcYxyXPZBPBm0afn42GUOafs7z9sLLZOu22arB6jZ-7ypNf_6WijmXCkexkjhW/s400/copy+the+tool+rpm.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#I copied the file to /tmp (or wherever, but notice you have to change the directory to what you used)</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">cd /tmp</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#U is upgrade (assumes install if no older version found), v is verbose, h is hash (progress display)</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">rpm -Uvh VMware-vSphereTlsReconfigurator-6.0.0-5051284.x86_64.rpm</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Change directory to where TLS Reconfigurator was installed to</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">cd /usr/lib/vmware-vSphereTlsReconfigurator/</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-size: large;">vCenter and PSC steps</span></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Switch to vCenter tool directory </span><br />
<span style="font-family: "courier new" , "courier" , monospace;">cd VcTlsReconfigurator</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Take a backup as per the KB</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">./reconfigureVc backup</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_dh2HOL1FvFFw-0OE9ans01oW7S2xH9g6K_LqChyphenhyphenm-3jXP9zInj9FQbEadkobGGbZ7-jOYmDu4iHtnVe5SB4tQ2POtL1w4XUp-3mDElCScZt1nmiqEmDCqQoip3Thd1QD4-EUYuAU_WHm/s1600/vcenter+backup.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="235" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_dh2HOL1FvFFw-0OE9ans01oW7S2xH9g6K_LqChyphenhyphenm-3jXP9zInj9FQbEadkobGGbZ7-jOYmDu4iHtnVe5SB4tQ2POtL1w4XUp-3mDElCScZt1nmiqEmDCqQoip3Thd1QD4-EUYuAU_WHm/s400/vcenter+backup.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">*Go copy the backup directory to a safe place. Why? WHY NOT?*</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOI7kl2KZZbSLHj77Di0QrCEVv3hiL1Cnby_5pM63_FWrLmI-AlqtqTj6X_rMR5nXFanpuSeCpO4cCtCJjllbV6DufptxpAfOUqsDtuFm9JfpQJzxJebWClCKHevMoUJpDPtZIJdimT9R7/s1600/save+vCenter+backup+why+not.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="140" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOI7kl2KZZbSLHj77Di0QrCEVv3hiL1Cnby_5pM63_FWrLmI-AlqtqTj6X_rMR5nXFanpuSeCpO4cCtCJjllbV6DufptxpAfOUqsDtuFm9JfpQJzxJebWClCKHevMoUJpDPtZIJdimT9R7/s400/save+vCenter+backup+why+not.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Note a scan of port 443 before running the tool using <a href="https://github.com/rbsec/sslscan" target="_blank">sslscan </a>(from a <a href="https://github.com/rbsec/sslscan/releases" target="_blank">windows executable</a>) shows TLS 1.0 and 1.1 are active:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgF1ml5akjg6WlfUb8OtIaweU0vTFc0exLUkJSRlHAi0pXbvvteIJKlESOiAAOdIzRBrjQWKZRnEiFurxL2TE7nOd5eCmx_o8N-OWnU6jB2zZhu_iFHIVsy8tC506gVibV80RFV9HrhsgGn/s1600/vcenter+before+disabling+tls1.0+and+tls1.1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="382" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgF1ml5akjg6WlfUb8OtIaweU0vTFc0exLUkJSRlHAi0pXbvvteIJKlESOiAAOdIzRBrjQWKZRnEiFurxL2TE7nOd5eCmx_o8N-OWnU6jB2zZhu_iFHIVsy8tC506gVibV80RFV9HrhsgGn/s400/vcenter+before+disabling+tls1.0+and+tls1.1.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Do some damage! I mean, set TLS v1.2 as the only accepted protocol</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">./reconfigureVc update -p TLSv1.2</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Type a "y" to proceed. It doesn't <i>really </i>re-start the <i>whole </i>appliance, just the services</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyPoNni8sDM4aouqG_1Pe3dRVCKEuN7RJk_3aSlXljSk1BOg5kTsOGp_M9e9CLqt4F_xacp5jiTlolu1UiOYUbrkC3seEjgQA9-BHq5Ueg4P8zhpbp6pjDNsSvh9NO_oERh3FcMquFIglQ/s1600/restart+vcenter+famous+last+Y.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="88" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyPoNni8sDM4aouqG_1Pe3dRVCKEuN7RJk_3aSlXljSk1BOg5kTsOGp_M9e9CLqt4F_xacp5jiTlolu1UiOYUbrkC3seEjgQA9-BHq5Ueg4P8zhpbp6pjDNsSvh9NO_oERh3FcMquFIglQ/s400/restart+vcenter+famous+last+Y.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Note it actually takes another backup. Gotta protect GSS :)</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqK_yuBNdE5mRg5gRe1A1eJp1lcBqNOwMleHvVGUNEhg01testKnGknCzxGNmHmuF4waspw-8srAZtq7Hb4RTfFRqTN6aJNiCx-Ai8BhBIqH0Rlh0gTDJxEPnzNtgGnV2nE7CcNdNEOC2Z/s1600/it+takes+another+backup.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="333" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqK_yuBNdE5mRg5gRe1A1eJp1lcBqNOwMleHvVGUNEhg01testKnGknCzxGNmHmuF4waspw-8srAZtq7Hb4RTfFRqTN6aJNiCx-Ai8BhBIqH0Rlh0gTDJxEPnzNtgGnV2nE7CcNdNEOC2Z/s400/it+takes+another+backup.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Finally you will get a status report which confirms that only TLS v1.2 is configured</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjatNJXXljxzFCxaJxQLJHRSlu1GHr4BmIjLxlUVBDvR6Rd5F4ONyyAdccRP0qTlhLXg2hfU_6iyULXCUybdKMu29mMUXuOPkFZbm16m5jT_J311fkjQeAWpM22iKA6seaGYA03zox8Y_vN/s1600/finally+get+something+like+this.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjatNJXXljxzFCxaJxQLJHRSlu1GHr4BmIjLxlUVBDvR6Rd5F4ONyyAdccRP0qTlhLXg2hfU_6iyULXCUybdKMu29mMUXuOPkFZbm16m5jT_J311fkjQeAWpM22iKA6seaGYA03zox8Y_vN/s400/finally+get+something+like+this.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#The vSphere Client service takes a little longer to start than the rest. You can monitor it via the shell with</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">service vsphere-client status</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAFQ11YNwQ0LuccQbclWDdouVHx1qdN89-LxFRLlkfvl4hiSi_x4XJa7YnpU4NIOgwLn2tPCgyGUkDuy-YHIkarfOwzi-5hyphenhyphenwvFfgvuXFiEbB1wFj0u6h0unODppYiRuN84adAzPJZ8xN_/s1600/give+the+vsphere+client+a+little+while+to+come+up.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="185" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAFQ11YNwQ0LuccQbclWDdouVHx1qdN89-LxFRLlkfvl4hiSi_x4XJa7YnpU4NIOgwLn2tPCgyGUkDuy-YHIkarfOwzi-5hyphenhyphenwvFfgvuXFiEbB1wFj0u6h0unODppYiRuN84adAzPJZ8xN_/s400/give+the+vsphere+client+a+little+while+to+come+up.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Note a scan of port 443 after running the tool shows only TLS 1.2 is now enabled:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqVpiD23LY2KE2uwUvaWAVmQfrJ9enrcE1w8i47M0yBGifHqLg908kSnbWnn8_pgtaZbT_JttiIXt_PyOiNiB3u0vCceWTBzsiMB1PNQukBcXdxTx94Qz5iHUp8Qip4pmMMYw6afAp0_lq/s1600/vcenter+after+disabling+tls1.0+and+tls1.1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="315" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqVpiD23LY2KE2uwUvaWAVmQfrJ9enrcE1w8i47M0yBGifHqLg908kSnbWnn8_pgtaZbT_JttiIXt_PyOiNiB3u0vCceWTBzsiMB1PNQukBcXdxTx94Qz5iHUp8Qip4pmMMYw6afAp0_lq/s400/vcenter+after+disabling+tls1.0+and+tls1.1.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-size: large;">ESXi steps</span></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <b><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Hosts MUST be rebooted <u>after</u> these commands for all changes to take effect!!</span></b><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Switch to ESX tool directory </span><br />
<span style="font-family: "courier new" , "courier" , monospace;">cd /usr/lib/vmware-vSphereTlsReconfigurator/EsxTlsReconfigurator</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggF87Ykf28gLjAlOZGSOJTxFbBihLzNjIv_bqb1i0RJW9Se2PgB8-X2zYtDjc3XZKqYT71TSK4-sZBlEBklk2iUV4iq13cQjVUon_sSHCGwF5NtnhYl1afa2XYwRMGjRxSJ3SG5ZkdNF3a/s1600/switch+to+ESX+tool+directory.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="33" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggF87Ykf28gLjAlOZGSOJTxFbBihLzNjIv_bqb1i0RJW9Se2PgB8-X2zYtDjc3XZKqYT71TSK4-sZBlEBklk2iUV4iq13cQjVUon_sSHCGwF5NtnhYl1afa2XYwRMGjRxSJ3SG5ZkdNF3a/s400/switch+to+ESX+tool+directory.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">You have 3 options for host changes - by cluster, by host joined to this vCenter, or standalone hosts.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><i>#If you are doing hosts joined to a vCenter inside a Cluster (this does the whole cluster)</i></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><i><br /></i></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#./reconfigureEsx vCenterCluster -c <Cluster_Name> -u <Administrative_User> -p TLSv1.2</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">./reconfigureEsx vCenterCluster -c MyCluster -u administrator@vsphere.local -p TLSv1.2</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#It asks for the user's passwords and executes</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJIZuxj54THpfdkTW-wwM8U1kw3q-F84ostElJ7rERHrMAc_LSZA_gC5nIgg4aSOkLb1SBWFnog2NB_RvEXjjWY47sUrDBja8Tbe_Y8-MG_nlymathyqJzi26GQruDyQsQyBibjDAl-vPu/s1600/All+ESX+hosts+in+a+cluster.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="217" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJIZuxj54THpfdkTW-wwM8U1kw3q-F84ostElJ7rERHrMAc_LSZA_gC5nIgg4aSOkLb1SBWFnog2NB_RvEXjjWY47sUrDBja8Tbe_Y8-MG_nlymathyqJzi26GQruDyQsQyBibjDAl-vPu/s400/All+ESX+hosts+in+a+cluster.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><b>#Don't forget to reboot the host!</b><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Scan before change</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHf5RKeJlvUSjjHHclnKUmI9E-z1-Nr6oEG_VGzQJXvOb_PoDHaUqRsg_94LctoosrQ0RQ5_R1bkdqqJYGoN8yjp_klElWptskQuFyUjYdd50uJP0KSAvRUwUy4qdpZXOxXn27Y76hd-D6/s1600/host+before+disabling+TLS+1.0+and+TLS+1.1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="351" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHf5RKeJlvUSjjHHclnKUmI9E-z1-Nr6oEG_VGzQJXvOb_PoDHaUqRsg_94LctoosrQ0RQ5_R1bkdqqJYGoN8yjp_klElWptskQuFyUjYdd50uJP0KSAvRUwUy4qdpZXOxXn27Y76hd-D6/s400/host+before+disabling+TLS+1.0+and+TLS+1.1.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Scan after change and reboot</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUXXzhxcNNf1WpRKyjrjawel0amhm_iic2D_UPc6EY9ygTWwlAJ93aA2stQxZoAJ_b_1CciRlDY8s6DiT8QHfxPGqzV6-Z_XhCTUnFblz2mb3tU8JvXyj4gnT6puz7LQnFl6gF3A51WcjC/s1600/host+after+disabling+TLS+1.0+and+TLS+1.1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="292" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUXXzhxcNNf1WpRKyjrjawel0amhm_iic2D_UPc6EY9ygTWwlAJ93aA2stQxZoAJ_b_1CciRlDY8s6DiT8QHfxPGqzV6-Z_XhCTUnFblz2mb3tU8JvXyj4gnT6puz7LQnFl6gF3A51WcjC/s400/host+after+disabling+TLS+1.0+and+TLS+1.1.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><i>#If you are doing one host joined to a vCenter</i></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#./reconfigureEsx vCenterHost -h <ESXi_Host_Name> -u <Administrative_User> -p TLSv1.2</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">./reconfigureEsx vCenterHost -h 192.168.1.102 -u administrator@vsphere.local -p TLSv1.2</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#It asks for the user's passwords and executes</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtvLk_h3M2N5WtFTV7bdozdSQn6xdqzeJ1NX5q67j7glMI3aGyCPm9egn-EjQBQOvDp4h_C3VKL0_zSl72mx9vnCDiomLAISvQq_bxyszndNdjQc2PptRVS89ZZbqgAFbow47-ScCZlFR8/s1600/Individual+ESX+host+in+a+vCenter.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="175" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtvLk_h3M2N5WtFTV7bdozdSQn6xdqzeJ1NX5q67j7glMI3aGyCPm9egn-EjQBQOvDp4h_C3VKL0_zSl72mx9vnCDiomLAISvQq_bxyszndNdjQc2PptRVS89ZZbqgAFbow47-ScCZlFR8/s400/Individual+ESX+host+in+a+vCenter.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><b>#Don't forget to reboot the host!</b></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Scan before change</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmu-S9qV5e994PNew7gYRmurWyC15gkDuEDuQwWDzaj0N93QfbwWtqoeZTzxom5ae_my1H2RJdkY5_SE7QqudSXr4FiSW5FbbhYdMYOjmMHTrK9DtO2BMNcCfJBQw7s2W9B2Jqfehi4Vzf/s1600/individual+host+before+disabling+TLS+1.0+and+TLS+1.1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="346" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmu-S9qV5e994PNew7gYRmurWyC15gkDuEDuQwWDzaj0N93QfbwWtqoeZTzxom5ae_my1H2RJdkY5_SE7QqudSXr4FiSW5FbbhYdMYOjmMHTrK9DtO2BMNcCfJBQw7s2W9B2Jqfehi4Vzf/s400/individual+host+before+disabling+TLS+1.0+and+TLS+1.1.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Scan after change and reboot</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh01Zr1H339jVe4jBFUvscIcccqDPqPM6GpkOK9lEMisAJXNXOHE2tescuJi0xbGJcOuBUWgivwZ8pcjtLx3rkFJ7JJhcEysqX6FAcWVhwqJSIXh5SWrFjeoddYOOfUFu3C4V-tFFqWpBeB/s1600/individual+host+after+disabling+TLS+1.0+and+TLS+1.1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="292" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh01Zr1H339jVe4jBFUvscIcccqDPqPM6GpkOK9lEMisAJXNXOHE2tescuJi0xbGJcOuBUWgivwZ8pcjtLx3rkFJ7JJhcEysqX6FAcWVhwqJSIXh5SWrFjeoddYOOfUFu3C4V-tFFqWpBeB/s400/individual+host+after+disabling+TLS+1.0+and+TLS+1.1.png" width="400" /></a></div>
<br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><i>#If you are doing a host that is not joined to a vCenter</i></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#./reconfigureEsx ESXiHost -h <ESXi_Host_Name> -u <User> -p TLSv1.2</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">./reconfigureEsx ESXiHost -h 192.168.1.103 -u root -p TLSv1.2</span><br />
<br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Note this uses a local ESXi account since this host is not in this vCenter</span><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuoLjptiwUpptB0Ne-tTNRUeH6MLqWUWnfOYUPrvdTrN2sguqOAY-W6mq4-rBaerac6yC6Lp3fkQKpXj8PtpfGG05zqYI9n39iTocYEyoCne46R3bd2peL_d5P1_rutGYTuz8FELajBSjd/s1600/Standalone+ESX+host+disable+TLS+1.0+and+1.1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuoLjptiwUpptB0Ne-tTNRUeH6MLqWUWnfOYUPrvdTrN2sguqOAY-W6mq4-rBaerac6yC6Lp3fkQKpXj8PtpfGG05zqYI9n39iTocYEyoCne46R3bd2peL_d5P1_rutGYTuz8FELajBSjd/s400/Standalone+ESX+host+disable+TLS+1.0+and+1.1.png" width="400" /></a></div>
<br />
<b style="font-family: "helvetica neue", arial, helvetica, sans-serif;">#Don't forget to reboot the host!</b><br />
<b style="font-family: "helvetica neue", arial, helvetica, sans-serif;"><br /></b>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Scan before change</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisLzbn5mjx-wDA9eZHZtXehyphenhyphenBVmx8mkKl8o1es-2EuqN7Jb60FpZHjK4lsvHwUEZYBMZwhF8UePev3RfXiE6EOvHMkZB7BE7BzqiyKjX-4LHvNLYZL6UkwC0DEoeCczgoHOk5JRu1We7d-/s1600/standalone+host+before+disabling+TLS+1.0+and+TLS+1.1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="346" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisLzbn5mjx-wDA9eZHZtXehyphenhyphenBVmx8mkKl8o1es-2EuqN7Jb60FpZHjK4lsvHwUEZYBMZwhF8UePev3RfXiE6EOvHMkZB7BE7BzqiyKjX-4LHvNLYZL6UkwC0DEoeCczgoHOk5JRu1We7d-/s400/standalone+host+before+disabling+TLS+1.0+and+TLS+1.1.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">#Scan after change and reboot</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh99q-UGHkuUr_4dohjXo9dE_XhoTOj4_wWHKsIWO3V3JEMKXfxdnXpAySGl4FLjgiaNewBp6ZQMOv2wNy3OasFNGpu7K7W3xo3lZcIFBBKDlD5piVKLNg0f8ZmmgBOL-6epSIlrfLjSPIF/s1600/standalone+host+after+disabling+TLS+1.0+and+TLS+1.1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="310" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh99q-UGHkuUr_4dohjXo9dE_XhoTOj4_wWHKsIWO3V3JEMKXfxdnXpAySGl4FLjgiaNewBp6ZQMOv2wNy3OasFNGpu7K7W3xo3lZcIFBBKDlD5piVKLNg0f8ZmmgBOL-6epSIlrfLjSPIF/s400/standalone+host+after+disabling+TLS+1.0+and+TLS+1.1.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span> <span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Hope this helps. I'll go into a bit more detail as soon as I have some time! <a href="https://twitter.com/arielsanchezmor" target="_blank">Ping me on twitter</a> if you have any comments please.</span>arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com2tag:blogger.com,1999:blog-4925591696712284857.post-32072592322436185492017-02-28T16:42:00.002-07:002017-02-28T16:42:35.437-07:00PowerShell and PowerCLI - scripted addition to "getting started"<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">In my <a href="http://learning-in-it.blogspot.com/2016/02/powershell-and-powercli-getting-started.html" target="_blank">first post on Powershell/PowerCLI</a> I had ventured the guess that many of the tasks to setup PowerShell/PowerCLI could be scripted. Today I present the script:</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<br /><br /><span style="font-family: Courier New, Courier, monospace;">Set-ExecutionPolicy Bypass -force<br /><br />mkdir $env:userprofile\Documents\WindowsPowerShell<br /><br />mkdir "C:\PowerCLI codes"<br /><br />$fixPS = @"<br /><br />Set-Location "C:\PowerCLI codes"<br /><br />if (`$psISE)<br /><br />{<br /><br />Clear-Host<br /><br />Write-Host 'You can do this!'<br /><br />}<br /><br />"@<br /><br />$fixPS | Out-File -FilePath $env:userprofile\Documents\WindowsPowerShell\profile.ps1 -Encoding ASCII</span><br /><br /><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">You can change the directory for your codes and the startup message, and add or remove things, but this will at least create the proper file to set your working directory, and write all lines to the profile.ps1 file.</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">So to use this:</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">1) Find powershell on your computer</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">2) right click, run as administrator</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">3) paste and execute. This should not prompt you for any questions</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">4) close that window</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">5) Use ISE or powershell like your normally would from now on</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Let me know if you found this useful. I needed it since I have several jumpboxes and create new VMs, and figuring out where stuff needs to be changed takes much more time than copy pasting my setup in a script :)</span>arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-73348645634748633912017-01-24T14:59:00.002-07:002017-01-24T14:59:50.875-07:00Learning about vSphere Flash Read Cache<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">I'm looking at vSphere Flash Read Cache in case that Pernix FVP does not release an update for vSphere 6.5 (after being bought by Nutanix). Using vFRC is a bit different right off the bat, since it doesn't do write acceleration, but since I already have the required vSphere licensing and hardware, there is no cost to enable.</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">The biggest problems I see so far are:</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">1) not a lot of reported users, <a href="https://twitter.com/arielsanchezmor/status/823955488106745858" target="_blank">at least that I could find</a>, although it's been kept as a feature by VMware since it was announced so there has to be quite a few. However, I didn't find lots of operational blogs, just feature announcement types.</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">2) more rigid implementation steps compared to Pernix FVP, which takes some reading to figure out</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Biggest differences with Pernix FVP apart from the obvious:</span><br />
<br />
<ul>
<li><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Instead of enabling per cluster, you have to enable it per disk on the VMs, and have to choose the block size. This means you have to use something like vSCSIstats to determine your workload, and then you will only be able to accelerate the block sizes that match, which is never 100% of storage i/o. You can change the block size of a running VM; this can be enabled/disabled while the VM is running as well.</span></li>
<li><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Implementing this requires VMs to be running HW v10 – I know lots of admins that don't religiously update their VM hardware after an upgrade, so this should be called out. </span></li>
<li><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">There have been no updates in functionality since the v1.0 release in vSphere 5.5. Good news is VMware continues supporting it, and the SSD model I'm interested in is listed in the HCL for 6.5 <a href="http://www.vmware.com/resources/compatibility/detail.php?deviceCategory=vfrc&productid=36248&deviceCategory=vfrc&details=1&releases=273&deviceTypes=18&partner=454&page=1&display_interval=10&sortColumn=Partner&sortOrder=Asc">http://www.vmware.com/resources/compatibility/detail.php?deviceCategory=vfrc&productid=36248&deviceCategory=vfrc&details=1&releases=273&deviceTypes=18&partner=454&page=1&display_interval=10&sortColumn=Partner&sortOrder=Asc</a> </span></li>
</ul>
<br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<b><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Known KB’s</span></b><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">There are two known issues, and they are easily avoidable as patches were released already, so just make sure you are running latest before enabling</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<a href="https://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=2114498&sliceId=1&docTypeID=DT_KB_1_1&dialogID=381661788&stateId=0%200%20381669816"><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">https://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=2114498&sliceId=1&docTypeID=DT_KB_1_1&dialogID=381661788&stateId=0%200%20381669816</span></a><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><a href="https://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=2072392&sliceId=1&docTypeID=DT_KB_1_1&dialogID=381647699&stateId=0%200%20381651933">https://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=2072392&sliceId=1&docTypeID=DT_KB_1_1&dialogID=381647699&stateId=0%200%20381651933</a> </span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<b><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Documentation</span></b><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><a href="http://pubs.vmware.com/vsphere-65/index.jsp#com.vmware.vsphere.storage.doc/GUID-07ADB946-2337-4642-B660-34212F237E71.html">http://pubs.vmware.com/vsphere-65/index.jsp#com.vmware.vsphere.storage.doc/GUID-07ADB946-2337-4642-B660-34212F237E71.html</a> </span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><a href="http://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/techpaper/vmware-vsphere-flash-read-cache-faq.pdf">http://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/techpaper/vmware-vsphere-flash-read-cache-faq.pdf</a> << particularly useful</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><a href="http://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/techpaper/vmware-vfrc-performance-vsphere55-white-paper.pdf">http://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/techpaper/vmware-vfrc-performance-vsphere55-white-paper.pdf</a> << cool read</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<b><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Blog posts</span></b><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><a href="http://cormachogan.com/2014/02/14/a-closer-look-at-vsphere-flash-read-cache-vfrc/">http://cormachogan.com/2014/02/14/a-closer-look-at-vsphere-flash-read-cache-vfrc/</a> </span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><a href="http://nolabnoparty.com/en/vmware-vflash-read-cache-setup/">http://nolabnoparty.com/en/vmware-vflash-read-cache-setup/</a> </span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><a href="http://everything-virtual.com/vmware-study-guides/vcap-dca-study-guide/configure-and-manage-vsphere-flash-read-cache/">http://everything-virtual.com/vmware-study-guides/vcap-dca-study-guide/configure-and-manage-vsphere-flash-read-cache/</a> </span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><a href="http://www.settlersoman.com/what-is-and-how-to-configure-vmware-vsphere-flash-read-cache-vfrc/">http://www.settlersoman.com/what-is-and-how-to-configure-vmware-vsphere-flash-read-cache-vfrc/</a> </span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><a href="http://www.vladan.fr/vmware-vflash-read-cache-vfrc/">http://www.vladan.fr/vmware-vflash-read-cache-vfrc/</a> </span><br />
<div>
<br /></div>
arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-18913154639375058872016-11-06T22:59:00.003-07:002016-11-07T14:58:21.960-07:00Creating SSH private keys (advice as of 11/2016)<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">You have probably heard that using SSH keys for authentication is more secure than using usernames and passwords. I'm a total n00b at this, so take all of this advice with a grain of salt. If you find i'm giving bad advice, please let me know in the comments.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">SSH keys are made in pairs - the public (which whatever wants to authenticate you must have) and the private (which only you should have). To create the SSH keys, you use a command called <b><a href="http://man.openbsd.org/OpenBSD-current/man1/ssh-keygen.1" target="_blank">ssh-keygen</a></b> . This is part of the <a href="http://www.openssh.com/" target="_blank">OpenSSH</a> software released by the <a href="http://www.openbsd.org/" target="_blank">OpenBSD Project</a>, supported by the <a href="http://www.openbsdfoundation.org/" target="_blank">OpenBSD Foundation</a>. Most nix style operating systems use this software, which is amazing considering how small the OpenBSD community is - small, yet technically deep and experienced :)</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Anyways, I was trying to find some guidelines on creating secure SSH keys. Most Google documents that turned up are outdated. From what little I've learned reading I came away with:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">1) RSA: at least 2048, but this is the least secure of the modern options</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">2) Use <a href="https://codahale.com/how-to-safely-store-a-password/" target="_blank">bcrypt</a></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">3) Use the <a href="http://www.tedunangst.com/flak/post/new-openssh-key-format-and-bcrypt-pbkdf" target="_blank">new key format</a> in OpenSSH with option -o</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">From the documentation:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<b class="flag" style="font-size: 13.3333px;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">-o</span></b><br />
<br />
<br />
<dd class="list-tag" style="font-size: 13.3333px; margin-left: 6ex;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Causes <b class="name">ssh-keygen</b> to save private keys using the new OpenSSH format rather than the more compatible PEM format. The new format has increased resistance to brute-force password cracking but is not supported by versions of OpenSSH prior to 6.5. Ed25519 keys always use the new private key format.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></dd><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">So, let's see what happens on my freshly installed and patched Ubuntu 16.04 LTS laptop:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Let's make sure we are on a modern version</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">~$ ssh -V</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">OpenSSH_7.2p2 Ubuntu-4ubuntu2.1, OpenSSL 1.0.2g 1 Mar 2016</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">So, what are the current default options? I ran the ssh-keygen command without parameters and accepted all defaults, including leaving the passphrase blank:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~$ <b>ssh-keygen</b></span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">Generating public/private rsa key pair.</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">Enter file in which to save the key (/home/<i>user</i>/.ssh/id_rsa):</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">Created directory '/home/<i>user</i>/.ssh'.</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">Enter passphrase (empty for no passphrase):</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">Enter same passphrase again:</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">Your identification has been saved in /home/<i>user</i>/.ssh/id_rsa.</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">Your public key has been saved in /home/<i>user</i>/.ssh/id_rsa.pub.</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">The key fingerprint is:</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">SHA256:<i>[lots of characters here]</i> <i>user</i>@<i>laptophostname</i></span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">The key's randomart image is:</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">+---[RSA 2048]----+</span><br />
<i><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">[lots of ASCII characters here]</span></i><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">+----[SHA256]-----+</span><br />
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Seems if we just execute ssh-keygen with no options and press enter, we get a 2048 RSA key with a SHA256 cipher.</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">We can now run "ls -a" and see that a new .ssh directory was created. Inside it are two keys, our private (which only we should see from now on) and a .pub , the public matching pair that we would install where we want to have remote access:</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br /></span></div>
<div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~/.ssh$ ls</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">id_rsa id_rsa.pub</span></div>
</div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br /></span></div>
<div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~/.ssh$ cat id_rsa</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">-----BEGIN RSA PRIVATE KEY-----</span></div>
</div>
<div>
<i><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">[lots of characters here]</span></i></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br /></span></div>
<div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~/.ssh$ cat id_rsa.pub </span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">ssh-rsa <i>[lots of characters here] </i><b><i>user</i>@<i>laptophostname</i></b></span></div>
</div>
<div>
<b><i><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></i></b></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">So we see that in the public key, we are sharing some information about us, that we probably want to avoid - even if this is meant to be a public key, we don't want to give more detail than needed to a potential attacker.</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">We can check the details of an existing key with</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~/.ssh$ ssh-keygen -l -f <i>keyfile_name</i></span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">2048 SHA256:<i>[lots of characters here]</i> <i>user</i>@<i>laptophostname </i>(RSA)</span></div>
</div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">One thing to note is that the output of this previous command is the same for the public <b>or</b> private key - this means that it's useful to make sure they are indeed a pair!</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Ok, fun enough, but let's delete this folder and try to create a more secure key.</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~$ rm -r ./.ssh/</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">The current recommendation is to use ed25519 type keys instead of RSA. This is done with the -t option:</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">ssh-keygen -t ed25519</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Note that when we explore the resulting files, the names and contents are a bit different</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~/.ssh$ cat id_ed25519.pub </span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">ssh-ed25519 <i>[lots of characters here]</i> <i>user</i>@<i>laptophostname</i></span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br /></span>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~/.ssh$ cat id_ed25519</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">-----BEGIN OPENSSH PRIVATE KEY-----</span><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"></span></div>
</div>
<div>
<i><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br /></span></i></div>
<div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~/.ssh$ ssh-keygen -l -f id_ed25519.pub </span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">256 SHA256:<i>[lots of characters here]</i> <i>user</i>@<i>laptophostname</i> (ED25519)</span></div>
</div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">We're supposedly being a bit more secure now. Note that per the documentation, ed25519 is always bit size 256 so there's no point in specifying an option with -b. Also, the new format is used by default with this key type, so the -o parameter isn't needed either.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">We can still secure this further. First, let's remove our username and laptop name with -C and a comment inside quotes.</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~$ ssh-keygen -t ed25519 -C "<b>cat</b>"</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">Generating public/private ed25519 key pair.</span></div>
</div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br /></span></div>
<div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~/.ssh$ ssh-keygen -l -f id_ed25519.pub </span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">256 SHA256:CKhXQLlEa68uLCP9KRAhI9Bmg+0tRdEb47YuO2thuWU <b>cat</b> (ED25519)</span></div>
</div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Good - we can see that the string I gave as a comment is now shown in place of my username@hostname. Ideally you would put something in here that will help you use this key in the future. Most people create different keys for different services.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Now, let's make it so a brute force attack is tougher on our private key by adding computational rounds with the -a option. Apparently this is a protection we can specify that will future-proof our private keys a bit in case they fall into the wrong hands.</span><br />
<br />
<br />
<br />
<dt class="list-tag" style="font-size: 13.3333px; margin-top: 1em;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><b class="flag">-a</b> <i class="arg">rounds</i></span></dt>
<dd class="list-tag" style="font-size: 13.3333px; margin-left: 6ex;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">When saving a new-format private key (i.e. an ed25519 key or any SSH protocol 2 key when the <b class="flag">-o</b> flag is set), this option specifies the number of KDF (key derivation function) rounds used. Higher numbers result in slower passphrase verification and increased resistance to brute-force password cracking (should the keys be stolen).</span></dd><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">I've seen several people online recommend at least 1000 rounds, so this would be the final command:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~$ ssh-keygen -t ed25519 -C "cat" -a 1000</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Note that I'm allowing the program to prompt for a pass phrase instead of specifying one - this makes it so my pass phrase is not stored in the shell log. A note on the passphrase - you basically want a long, character based pass phrase, not a real English phrase.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">At this moment we have generated a "pretty secure" SSH key. The next post will be on actually using them on a local server or in GitHub.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Some links apart from what I already put in the beginning that I found were among the better ones:</span><br />
<ul>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><a href="https://twitter.com/gertvdijk" style="font-family: "Helvetica Neue", Arial, Helvetica, sans-serif;" target="_blank">gertvdijk</a><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">'s September 2016 article was the best </span><a href="https://blog.g3rt.nl/upgrade-your-ssh-keys.html" style="font-family: "Helvetica Neue", Arial, Helvetica, sans-serif;" target="_blank">"overall and up to date" one I found</a></span></li>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">The Mozilla foundation has <a href="https://wiki.mozilla.org/Security/Guidelines/OpenSSH" style="font-family: "Helvetica Neue", Arial, Helvetica, sans-serif;" target="_blank">public documentation on SSH best practices</a><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> which I liked</span></span></li>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">A bit older but quite in depth about <a href="https://stribika.github.io/2015/01/04/secure-secure-shell.html" style="font-family: "Helvetica Neue", Arial, Helvetica, sans-serif;" target="_blank">securing SSH</a><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> by </span><a href="https://twitter.com/stribika" style="font-family: "Helvetica Neue", Arial, Helvetica, sans-serif;" target="_blank">stribika</a></span></li>
</ul>
</div>
arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-36443274326335979902016-11-05T03:45:00.001-06:002016-11-05T14:10:59.282-06:00Running Ubuntu 16.04 LTS on Acer Aspire ES1-111M<div dir="ltr">
Lovely laptop, but there are things that don't work out of the box. Linux is fun!</div>
<div dir="ltr">
<br /></div>
<div dir="ltr">
I tried several installation methods and the one that worked the best was UEFI install, connected to the wifi, accepting 3rd party (which does something with Secure Boot) and using LVM. To access all UEFI options you must set an administrator password, which is good policy anyways.</div>
<div dir="ltr">
<br /></div>
<div dir="ltr">
Important notes</div>
<div dir="ltr">
<br /></div>
<div dir="ltr">
</div>
<ul>
<li>F2 gets you into BIOS mode - press it repeatedly after you see the Acer sign. Since I had the Ubuntu image in a usb drive (made in Windows with Rufus) I needed to set it to boot before my hard drive, or enable the F12 option to get a boot menu</li>
<li>If you install in UEFI mode, all power options and acer hotkeys work out of the box - did not happen for me when disabling secure boot for a Legacy install. This is why I preferred it</li>
<li>If after installing in UEFI mode you do not have a boot device, you probably didn't check the "Disable Secure Boot" option in the Ubuntu installer. This is fine - you can leave Secure Boot Enabled, but in the BIOS trusted UEFI boot, you have to add the shimx64.efi. This <a href="https://itsfoss.com/no-bootable-device-found-ubuntu/" target="_blank">link </a>is a good walkthrough. If you made a mistake, choose the option to delete all, reboot and then add it</li>
<li>Trackpad works ok in both Advanced and Basic modes, but you had to choose 3rd party installers in the setup while connected to the internet, <i>and</i> once you log in, press Fn+F7 to <b>enable</b> the mouse (why it's disabled by default is beyond me)</li>
<li>Two finger scrolling works, but so far, two finger right click doesn't - I really have to right click. It's weird and I'll have to check out why.</li>
<li>Wireless, bluetooth, volume, screen brightness, sleep - all work</li>
</ul>
<br />
<div dir="ltr">
<br /></div>
<div dir="ltr">
I've seen google results for the Synaptics trackpad state that the I2C tools have to be installed, or blacklisted, or add this to grub... I didn't have to do any of that (and don't see any of those entries in the corresponding files in this working setup) and both setting it to Basic and Advanced work the same on Ubuntu 16.04 LTS. I even like how the mouse responds better in Ubuntu than it did in Windows!</div>
arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-65518433146238122922016-10-08T00:49:00.001-06:002016-10-12T10:54:27.227-06:00Setup Raspberry Pi 3 with Raspbian with PIXEL, VNC<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">I'm a total noob on Raspberry Pi's. I was given one as a <a href="http://go.datrium.com/2016_vExpert_VMworld.html" target="_blank">vExpert gift in VMworld 2016 by Datrium</a>. This was the coolest and nicest gift in my opinion.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Rapsberry Pi 3 Model B is a <a href="https://www.raspberrypi.org/magpi/issues/43/" target="_blank">very capable device</a> - much more than I anticipated. I'm having a lot of fun with it!</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Some tips (amazon links are my affiliate links):</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">You need a good power supply that can give 2.5A at 5V - otherwise you will start seeing problems. I chose <a href="http://amzn.to/2dRya5h" target="_blank">this one by Canakit</a> from amazon because it was cheap, on Prime shipping, and well rated, and reviews of a cheaper one said the power block was too big, and this one is a good size.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">I installed it on a SD card that I had around, only to find what anyone that manages servers knows - storage speed maters. I just bought a new <a href="http://amzn.to/2dZ3Ohq" target="_blank">Samsung EVO+</a> that had good reviews and a good price. This one had better random write than the Pro series, which is what really should matter for most things. Note that the Raspberry Pi 3 can't take full advantage of UHS so no point in getting a UHS-3 card. <a href="http://www.pidramble.com/wiki/benchmarks/microsd-cards" target="_blank">This</a> was a great table showing different cards.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">I used <a href="https://rufus.akeo.ie/" target="_blank">Rufus </a>with the <a href="https://www.raspberrypi.org/downloads/raspbian/" target="_blank">Raspbian Jessie with PIXEL</a>. PIXEL is a <a href="https://www.raspberrypi.org/blog/introducing-pixel/" target="_blank">new window manager</a> ( and real nice to be honest). I checked the downloaded file with the SHA-1 signature, unzipped with 7zip and then opened Rufus, browsed to the img file and let it do it's thing, no need to select anything special, it selected DD mode on it's own, etc.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Connected a HDMI monitor, mouse, keyboard, popped SD card in and connected power - it came up quickly and without issues, and immediately you were logged in to a nice GUI.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">From the graphical interface I was able to join my WPA wifi network without problems. Of note, SSH is enabled by default. The user is <b>pi</b> with password <b>raspberry</b>. </span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Once you have internet you should update your linux server. This is debian, so you must use <b>sudo apt-get update && sudo apt-get dist-upgrade</b> to maintain the software with the latest release.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">I was able to connect an apple ethernet dongle and it recognized it immediately, and now I can use this device as a small networking router/firewall on two separate subnets (and use wireless as management). Sent the pictures out in a tweet:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><a href="https://twitter.com/arielsanchezmor/status/784246876736368640">https://twitter.com/arielsanchezmor/status/784246876736368640</a></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">I wanted to get console access to the Pi - not a separate session through X (MobaTerm did this easily) but the actual console that I would see if I connected the monitor again. There are lots of tutorials out there that recommend installing TightVNC, but RealVNC is now included with Raspbian. <a href="https://www.raspberrypi.org/documentation/remote-access/vnc/README.md" target="_blank">It just has to be enabled.</a> I find the <b>raspi-config</b> command and its matching options in the GUI to be a pleasure to usei.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">One thing I found where I don't agree with the official instructions is how to prevent the minimal resolution if no HDMI cable is attached. Instead of forcing the HDMI connection (which if at some point later, if you connect a monitor, will conflict) you can change the default console resolution and achieve a similar thing - you just need to un-comment the two lines in <b>/boot/config.txt </b>. In my case, since my smallest laptop is 1366x768, the defaults of 1280x720 work great in full screen mode, and is decent enough from other screens.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFJETK-O1B3kXJhyphenhyphenrIOhT_R0fHysnphERniBC2vFY1EOuzC5TPqqeFVgyXOMEUwk05yh-udf7S7Kw0R1u_OFRAyAhZc2Gm1DEi68JErj8SroCxBlL_-7ZFwQQTQh8ItY39gDp0OMi5eDpb/s1600/pi3consoleres.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="226" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFJETK-O1B3kXJhyphenhyphenrIOhT_R0fHysnphERniBC2vFY1EOuzC5TPqqeFVgyXOMEUwk05yh-udf7S7Kw0R1u_OFRAyAhZc2Gm1DEi68JErj8SroCxBlL_-7ZFwQQTQh8ItY39gDp0OMi5eDpb/s400/pi3consoleres.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGMRmIfGmAjrK1FD4SUmeixZ07BtLVO1VV381-mrQiTRTLPiPrYekhvPCoMYKBnzukc_4b7zidxz7AtBdGK7JQSjp-GWwYOGI6db_2to8YuW1X5RiHG4mi-bD_8ajY4l3k5OfYOQZi71CS/s1600/VNCtoConsole.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGMRmIfGmAjrK1FD4SUmeixZ07BtLVO1VV381-mrQiTRTLPiPrYekhvPCoMYKBnzukc_4b7zidxz7AtBdGK7JQSjp-GWwYOGI6db_2to8YuW1X5RiHG4mi-bD_8ajY4l3k5OfYOQZi71CS/s400/VNCtoConsole.png" width="400" /></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">You can also install Xming and redirect X from PuTTY, and it may be I use that in the future to disable VNC and save on resources - but since it was included already in Raspbian, I decided to give it a go and it works very well.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">As I play more with it, I'll put more articles, but for now, I can open Chromium and practice against an always on Debian like system - great for studying for <a href="https://training.linuxfoundation.org/certification/lfcs" target="_blank">LFCS </a>(choosing the Ubuntu track).</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">The only other thing I want to do is install OpenBSD, but from what i've read, some of the Pi3 components are closed source and thus will never make it into the OS. Shame as I was looking to use pf instead of iptables!</span>arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-2641920922179694912016-10-01T20:57:00.002-06:002016-10-01T21:12:01.417-06:00Nested Nutanix CE on ESXi - create your own vmdk descriptor<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Why they don't provide a bootable ISO that can install to a bare VM disk, like everyone else does, is beyond me.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Instead, you get a bootable disk image, which you are supposed to rename, upload and use as the boot disk. All the tutorials I found on the net provided a text file to use as the vmdk descriptor. The ones I found were the best were by <a href="https://www.virtuallifestyle.nl/2015/06/nextconf-running-nutanix-community-edition-nested-on-fusion/" target="_blank">Joep Piscaer</a> and <a href="http://longwhiteclouds.com/2015/07/11/nutanix-community-edition-4-node-cluster-nested-on-esxi-6-0/" target="_blank">Michael Webster</a>.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">None of the few posts I read ( and I only read 3 or 4) explained how the descriptor file was created. </span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">In my case, because the Nutanix CE file has changed from when the blog posts where published, I couldn't use the text file (not sure if just the cylinders value had to be adjusted, or what). So I created my own. I thought I would share how I did it.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">1) Create a VM (following the other post's instructions) but instead of following the text file advice, add a new disk that is the exact size as the img file (that you extracted from the .gz download). For "ce-2016.08.27-stable.img" it was exactly 7100 MB.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">2) Upload the img file to the datastore in the same folder as where you created the disk, with any name. In the following SSH session output, <span style="background-color: orange;">orange is the new empty disk created</span>, <span style="background-color: lime;">green is the uploaded extracted file</span>. Notice they are the same size.</span><br />
<br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">[root@arielitox:/vmfs/volumes/5557fee9-bd5cfd2a-29f6-5404a61bb2db/Nutanix CE v1] ls -al</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">total 14550032</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">drwxr-xr-x 1 root root 2380 Oct 2 02:01 .</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">drwxr-xr-t 1 root root 4200 Sep 30 19:07 ..</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw------- 1 root root 8684 Oct 1 21:33 Nutanix CE v1.nvram</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw-r--r-- 1 root root 0 Sep 30 19:07 Nutanix CE v1.vmsd</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rwxr-xr-x 1 root root 3111 Oct 2 02:01 Nutanix CE v1.vmx</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw------- 1 root root 536870912000 Oct 1 21:39 Nutanix CE v1_2-flat.vmdk</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw------- 1 root root 506 Oct 1 21:39 Nutanix CE v1_2.vmdk</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw------- 1 root root <span style="background-color: orange;">7444889600 Oct 2 01:59 Nutanix CE v1_3-flat.vmdk</span></span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw------- 1 root root 472 Oct 2 02:01 Nutanix CE v1_3.vmdk</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw------- 1 root root <span style="background-color: lime;">7444889600 Sep 30 19:24 ce.vmdk</span></span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw-r--r-- 1 root root 55642 Oct 1 21:36 vmware-3.log</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw-r--r-- 1 root root 57243 Oct 1 21:36 vmware-4.log</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw-r--r-- 1 root root 58555 Oct 1 21:37 vmware-5.log</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw-r--r-- 1 root root 58340 Oct 1 21:39 vmware-6.log</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw-r--r-- 1 root root 57322 Oct 1 21:39 vmware-7.log</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw-r--r-- 1 root root 58631 Oct 1 21:44 vmware-8.log</span><br />
<br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">3) Use the <b>move</b> command to overwrite the empty file with the same name as the file you created (your name will vary). I do this so we don't need to change the <span style="background-color: cyan;">small vmdk descriptor </span>file using vi. After running the command, notice the uploaded image file name no longer exists; move overwrites without confirmation, and now the image file contents are in the vmdk that we had created.</span><br />
<br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">[root@arielitox:/vmfs/volumes/5557fee9-bd5cfd2a-29f6-5404a61bb2db/Nutanix CE v1] <b>mv ce.vmdk "Nutanix CE v1_3-flat.vmdk"</b></span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">[root@arielitox:/vmfs/volumes/5557fee9-bd5cfd2a-29f6-5404a61bb2db/Nutanix CE v1] ls -al</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">total 7279632</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">drwxr-xr-x 1 root root 2240 Oct 2 02:02 .</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">drwxr-xr-t 1 root root 4200 Sep 30 19:07 ..</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw------- 1 root root 8684 Oct 1 21:33 Nutanix CE v1.nvram</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw-r--r-- 1 root root 0 Sep 30 19:07 Nutanix CE v1.vmsd</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rwxr-xr-x 1 root root 3111 Oct 2 02:01 Nutanix CE v1.vmx</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw------- 1 root root 536870912000 Oct 1 21:39 Nutanix CE v1_2-flat.vmdk</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw------- 1 root root 506 Oct 1 21:39 Nutanix CE v1_2.vmdk</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw------- 1 root root <span style="background-color: lime;">7444889600 Sep 30 19:24 Nutanix CE v1_3-flat.vmdk</span></span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw------- 1 root root <span style="background-color: cyan;">472 Oct 2 02:01 Nutanix CE v1_3.vmdk</span></span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw-r--r-- 1 root root 55642 Oct 1 21:36 vmware-3.log</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw-r--r-- 1 root root 57243 Oct 1 21:36 vmware-4.log</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw-r--r-- 1 root root 58555 Oct 1 21:37 vmware-5.log</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw-r--r-- 1 root root 58340 Oct 1 21:39 vmware-6.log</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw-r--r-- 1 root root 57322 Oct 1 21:39 vmware-7.log</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">-rw-r--r-- 1 root root 58631 Oct 1 21:44 vmware-8.log</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Your VM should be able to boot. In my case, I did assign this disk a SATA controller, so I went in BIOS and set that one to be the first boot disk, and now I could see the Nutanix splash screen, and get the installer prompt a bit later.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">This procedure should work for any other release of Nutanix CE (as long as this awkward img method is used). Feel free to use this text file for release <i>2016.08.27-stable</i>, but at least you know how it was created in case it doesn't work for you:</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br /></span>
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">[root@arielitox:/vmfs/volumes/5557fee9-bd5cfd2a-29f6-5404a61bb2db/Nutanix CE v1] vi "Nutanix CE v1_3.vmdk"</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;"><br /></span>
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;"># Disk DescriptorFile</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">version=1</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">encoding="UTF-8"</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">CID=5c98c0d4</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">parentCID=ffffffff</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">isNativeSnapshot="no"</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">createType="vmfs"</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;"><br /></span>
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;"># Extent description</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">RW 14540800 VMFS "Nutanix CE v1_3-flat.vmdk"</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;"><br /></span>
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;"># The Disk Data Base</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">#DDB</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;"><br /></span>
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">ddb.adapterType = "ide"</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">ddb.geometry.cylinders = "14425"</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">ddb.geometry.heads = "16"</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">ddb.geometry.sectors = "63"</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">ddb.longContentID = "f93da8daf3cd8a949323e2d55c98c0d4"</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">ddb.uuid = "60 00 C2 90 85 79 c8 33-48 87 1c 59 12 32 c3 6a"</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">ddb.virtualHWVersion = "11"</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"></span><br />
<br />
<div>
<br /></div>
arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com2tag:blogger.com,1999:blog-4925591696712284857.post-91606139601575486742016-09-14T11:42:00.002-06:002016-09-14T11:44:31.449-06:00vCenter 5.0 decommission checklist (windows)<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Here's a small checklist I do when decommissioning Windows based vCenters where we have already moved all hosts out. 5.0 is super easy in this sense since the roles aren't distributed. This assumes the server will be decommissioned and was dedicated to just vCenter.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<ol>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Remove all licenses that were already migrated (you can't remove the last vCenter license)</span></li>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Rename the vDC explaining where the hosts are now and let it sit there for a while so admins that may log in get it (there should have been proper emails and stuff through other channels about the change)</span></li>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Confirm where VUM (upgrade manager) is installed in the VUM config</span></li>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Check the Add/Remove programs for installed programs</span></li>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Run odbcad32.exe to check the DB server for vCenter (in the System DSN)</span></li>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Where VUM is installed in the same server, which you may have confirmed from the installed programs list, use <b>c:\Windows\SysWOW64\odbcad32.exe </b>to check the 32-bit System DSN and DB server details</span></li>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Uninstall VMware add-on programs that will need vCenter access to remove their plugins</span></li>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Uninstall additional software like PowerCLI, Converter, etc</span></li>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Uninstall vCenter (which uninstalls orchestrator).</span></li>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Uninstall the vSphere client</span></li>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Uninstall the embedded or standard SQL server (you really want to make sure the database server wasn't used for anything else!). If the DB is in a remote location, work with your DBAs to archive/decommission the database</span></li>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Update your documentation, CMDB details, etc</span></li>
</ol>
<br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Now take care of OS decommissioning tasks</span>arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-41741064797051516922016-07-20T20:20:00.002-06:002016-07-20T20:20:45.511-06:00VMware VSAN basics (nested lab)<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">With everything VSAN it's important to remember to work through the web client, and at this moment, only the flex version supports all commands (h5 doesn't have them yet).</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<br />
<ol>
<li><span style="font-family: "Helvetica Neue", Arial, Helvetica, sans-serif;">Create 3 or more nested hosts with at least 6GB RAM (add more for your VMs). </span></li>
<li><span style="font-family: "Helvetica Neue", Arial, Helvetica, sans-serif;">Setup a separate VMK that you will tag for VSAN traffic. I set these on a separate NIC and subnet, in a vSS with no uplink, using VMXNET3 interfaces (10GB) to separate from the 1GB where i'm running management and VM traffic. Don't forget to set promiscuous mode on the switch so everyone can ping each other.</span></li>
<li><span style="font-family: "Helvetica Neue", Arial, Helvetica, sans-serif;">Add an SSD disk, and a capacity disk (in the case of hybrid). I found that my nested host picked up the type automatically, but I'm pretty sure you can "tag" the device as SSD or HD from the interface as needed, in case you want to test all flash.</span></li>
<li><span style="font-family: "Helvetica Neue", Arial, Helvetica, sans-serif;">Create a cluster, move 3 or more hosts in</span></li>
<li><span style="font-family: "Helvetica Neue", Arial, Helvetica, sans-serif;">Enable VSAN, which will take you through the wizard that enables VSAN.</span></li>
</ol>
<br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">That's really it. You will see a new vsanDatastore datastore that is shared among all hosts. You can rename this datastore. There's a performance service and a health service you can check. If you did everything well, you will pass all tests except the <a href="http://www.vmgotchas.com/2016/05/differences-between-normal-hcl-and-vsan.html" target="_blank">HCL</a>, for obvious reasons.</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Very important - when putting a host in maintenance mode, <i>always </i>do it from the webclient. There are new options that VSAN exposes in a drop down!</span>arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-24482001599557977332016-06-29T07:23:00.003-06:002016-06-29T08:00:07.627-06:00Symantec Endpoint Protection 12.1.6 MP5 addresses important vulnerabilitiesSeems even the client needs to be updated (not just the managers) which means you need to have the whole environment upgraded. This requires downtime on each server (normally a reboot if things go well).<br />
<br />
<a href="https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_00">https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_00</a><br />
<br />
<a href="https://support.symantec.com/en_US/article.INFO3801.html">https://support.symantec.com/en_US/article.INFO3801.html</a><br />
<br />
<a href="https://support.symantec.com/en_US/article.DOC9352.html">https://support.symantec.com/en_US/article.DOC9352.html</a><br />
<br />
There was another set of vulnerabilities fixed (SYM16-011), for the manager side particularly, in this same release<br />
<br />
<a href="https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01">https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01</a><br />
<br />
Otherwise it does include some fun new capabilities, like certified compatibility with vsphere 6, sql server 2016, and the latest Ubuntu LTS release<br />
<div>
<br />
Seems Google were the ones to find the vulnerabilities, among others<br />
<br />
<a href="https://www.engadget.com/2016/06/29/google-symantec-antivirus-flaws-are-as-bad-as-it-gets/">https://www.engadget.com/2016/06/29/google-symantec-antivirus-flaws-are-as-bad-as-it-gets/</a><br />
<br />
<a href="https://googleprojectzero.blogspot.com/2016/06/how-to-compromise-enterprise-endpoint.html">https://googleprojectzero.blogspot.com/2016/06/how-to-compromise-enterprise-endpoint.html</a> </div>
<div>
<br /></div>
arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-27574498321852016032016-06-03T14:21:00.000-06:002016-06-03T14:52:17.302-06:00What disk was ESXi installed to?<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">I was talking with a colleague on how to find out which device ESXi was installed to. This is important especially when </span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">1) you don't have documentation and are adding a new host and you want to be consistent</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">2) are doing a hardware change and are not sure if replacing a SD card or disks could also remove ESXi</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Understanding this means you need to understand how ESXi partitions whatever disk device you gave it for installation. ESXi creates several partitions, and if there's free space, will create a VMFS partition on the remaining disk space and call it <i>datastoreX</i>. From the vCenter/ESXi console, the administrator is mostly looking at datastores, not realizing they are partitions.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Datastores are type <b>VMFS</b> partitions, and the ESXi installation files are stored on partitions of type <b>vfat</b>. When we ask ESXi where it's installed, the answer is a <i>partition</i>; however, we are probably more interested in getting the <b>disk</b> information. Typically, this means we need to translate the partition to the naa ID of the disk. </span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><u><b>Fastest way i've found:</b></u></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">You need three (for just device info) or four commands if you want to know what datastore was also created on that same disk device. Follow the colors to know what to use for command inputs:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"><b>1 ~ # esxcfg-info -b</b></span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"><br /></span>
<span style="color: blue; font-family: helvetica neue, arial, helvetica, sans-serif;">dea75b72-115e5271-3e7b-9b3ef7301455</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"><br /></span>
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"><b>2 ~ # esxcfg-scsidevs -f | grep <span style="color: blue;">dea75b72-115e5271-3e7b-9b3ef7301455</span></b></span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"><br /></span>
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"><span style="color: #38761d;">naa.6b8ca3a0e704b3001bb807e52a66aad5</span>:5 /vmfs/devices/disks/naa.6b8ca3a0e704b3001bb807e52a66aad5:5 <span style="color: blue;">dea75b72-115e5271-3e7b-9b3ef7301455</span></span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"><br /></span>
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"><b>3 ~ # esxcli storage core device list -d <span style="color: #38761d;">naa.6b8ca3a0e704b3001bb807e52a66aad5</span></b></span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"><br /></span>
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;">naa.6b8ca3a0e704b3001bb807e52a66aad5</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> <b>Display Name</b>: Local DELL Disk (naa.6b8ca3a0e704b3001bb807e52a66aad5)</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Has Settable Display Name: true</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> <b>Size</b>: 6673408</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Device Type: Direct-Access</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Multipath Plugin: NMP</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Devfs Path: /vmfs/devices/disks/naa.6b8ca3a0e704b3001bb807e52a66aad5</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> <b>Vendor</b>: DELL</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> <b>Model</b>: PERC H710</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Revision: 3.13</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> SCSI Level: 5</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Is Pseudo: false</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Status: on</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Is RDM Capable: false</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Is Local: true</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Is Removable: false</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Is SSD: false</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Is Offline: false</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Is Perennially Reserved: false</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Queue Full Sample Size: 0</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Queue Full Threshold: 0</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Thin Provisioning Status: unknown</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Attached Filters:</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> VAAI Status: unsupported</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Other UIDs: vml.02000000006b8ca3a0e704b3001bb807e52a66aad5504552432048</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Is Local SAS Device: false</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Is USB: false</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> Is Boot USB Device: false</span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"></span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"> No of outstanding IOs with competing worlds: 32</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: 'helvetica neue', arial, helvetica, sans-serif;">Now you know the </span><b style="font-family: 'helvetica neue', arial, helvetica, sans-serif;">Display Name</b><span style="font-family: 'helvetica neue', arial, helvetica, sans-serif;">, </span><b style="font-family: 'helvetica neue', arial, helvetica, sans-serif;">Size</b><span style="font-family: 'helvetica neue', arial, helvetica, sans-serif;"> (MB, meaning the above is 6.36TB), </span><b style="font-family: 'helvetica neue', arial, helvetica, sans-serif;">Vendor</b><span style="font-family: 'helvetica neue', arial, helvetica, sans-serif;"> and </span><b style="font-family: 'helvetica neue', arial, helvetica, sans-serif;">Model</b><span style="font-family: 'helvetica neue', arial, helvetica, sans-serif;"> of the device where ESXi was installed (in the case of a RAID disk, you get the controller details).</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">However, you may still not be sure of what that device is. Since we tend to think of datastores, we can issue one more command to find out which VMFS datastore is on that same disk:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"><b>4 ~ # esxcli storage vmfs extent list | grep <span style="color: #38761d;">naa.6b8ca3a0e704b3001bb807e52a66aad5</span></b></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"></span><br />
<span style="font-family: helvetica neue, arial, helvetica, sans-serif;"><span style="color: #b45f06;"><b>RAID6-9x1TB-SAS</b></span> 54255423-f706a47a-6e39-90b11c4fcfc5 0 naa.6b8ca3a0e704b3001bb807e52a66aad5 3</span><br />
<br />
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">And there you have it. You probably remember which virtual disk ties to a datastore name.</span></div>
<div>
<br /></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Sadly, I haven't yet found a way to <i>assure </i>you that you have picked the right device, if, for example, you have two <i>identical </i>virtual drives. </span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">I wish there was a command in racadm that showed the naa (SasAddress) of a virtual disk, but I have not found it. The closest I found was </span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace;">racadm raid get vdisks -o</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">and it doesn't show the SasAddress, although it's clearly shown in the ESXi installation steps (this is from another server so the naa IDs don't match, but you see my point):</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJ1iqGskw-4tgBFI9Bi1lHe1iQFqzVnB7tDg0QXQECTEKmQUNWaXuZsHnl7wx2-Gd10TdSa0FN-7yBhCl6gFQBxOZPCKDebYBjRCeSBqwaPWDalPYMMoKQj4rJIFydTngzqfcRIO9lV3JR/s1600/select+naa+of+disk+to+install+ESXi.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="228" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJ1iqGskw-4tgBFI9Bi1lHe1iQFqzVnB7tDg0QXQECTEKmQUNWaXuZsHnl7wx2-Gd10TdSa0FN-7yBhCl6gFQBxOZPCKDebYBjRCeSBqwaPWDalPYMMoKQj4rJIFydTngzqfcRIO9lV3JR/s640/select+naa+of+disk+to+install+ESXi.png" width="640" /></a></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">By the way, getting the naa identifier of a physical disk from racadm is easy </span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace;">racadm raid get pdisks -o -p name,SasAddress,MediaType</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">and <i>very </i>useful for VSAN - <a href="http://vsebastian.net/vmware/check-physical-disk-bay-using-naa-identifier-in-esxi/" target="_blank">this post</a> by <a href="https://twitter.com/sebastiangrugel" target="_blank">@sebastiangrugel</a> </span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">shows it well.</span></div>
<div>
<br /></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Thanks to <a href="https://twitter.com/sjin2008" target="_blank">@sjin2008</a> who made <a href="http://www.doublecloud.org/2015/05/vmware-esxi-esxcli-command-a-quick-tutorial/" target="_blank">an excellent post</a> on esxcli commands and showed up in google when I needed to get a table relating mount points / UUIDs to Volume Name</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><b><u>Other ways</u></b></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Googling around I found two related KBs:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><a href="https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2014558" target="_blank">KB2014558</a> tells us the type of installation, but not where it was installed. However, it's a good idea to check the installation type, just in case this host was booted off PXE.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><a href="https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2030957" target="_blank">KB2030957</a> is useful. It will tell you the device, but if you were trying to figure out what datastore it relates to, it doesn't do that and you do the 4th command above.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Here are a few commands related to this.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Good command to show the bootbank , altbootbank and scratch partitions</span><br />
<br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~ # ls -l /</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">total 525</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 49 Sep 30 2014 altbootbank -> /vmfs/volumes/6308247d-8d9ec099-ae26-5ec2d9ba9e00</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">drwxr-xr-x 1 root root 512 Sep 30 2014 bin</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 49 Sep 30 2014 bootbank -> /vmfs/volumes/dea75b72-115e5271-3e7b-9b3ef7301455</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">-r--r--r-- 1 root root 300059 Aug 23 2014 bootpart.gz</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">drwxr-xr-x 1 root root 512 Jun 3 09:29 dev</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">drwxr-xr-x 1 root root 512 Jun 3 08:35 etc</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">drwxr-xr-x 1 root root 512 Sep 30 2014 lib</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">drwxr-xr-x 1 root root 512 Sep 30 2014 lib64</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">-r-x------ 1 root root 14040 Sep 29 2014 local.tgz</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 6 Sep 30 2014 locker -> /store</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">drwxr-xr-x 1 root root 512 Sep 30 2014 mbr</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">drwxr-xr-x 1 root root 512 Sep 30 2014 opt</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">drwxr-xr-x 1 root root 131072 Jun 3 09:29 proc</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 22 Sep 30 2014 productLocker -> /locker/packages/5.5.0</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 4 Aug 23 2014 sbin -> /bin</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 49 Sep 30 2014 scratch -> /vmfs/volumes/54255423-287d3e20-5dd5-90b11c4fcfc5</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 49 Sep 30 2014 store -> /vmfs/volumes/5425541a-bbf00056-e4c2-90b11c4fcfc5</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">drwxr-xr-x 1 root root 512 Sep 30 2014 tardisks</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">drwxr-xr-x 1 root root 512 Sep 30 2014 tardisks.noauto</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">drwxrwxrwt 1 root root 512 Jun 3 09:01 tmp</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">drwxr-xr-x 1 root root 512 Sep 30 2014 usr</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">drwxr-xr-x 1 root root 512 Sep 30 2014 var</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">drwxr-xr-x 1 root root 512 Sep 30 2014 vmfs</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">drwxr-xr-x 1 root root 512 Sep 30 2014 vmimages</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 17 Aug 23 2014 vmupgrade -> /locker/vmupgrade</span><br />
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">All these are a good way of seeing the partitions and their different formats, and the disk devices.</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br /></span></div>
<div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~ # df -h</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">Filesystem Size Used Available Use% Mounted on</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">VMFS-5 557.5G 212.5G 345.0G 38% /vmfs/volumes/RAID10-4x300GB-SSD</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">VMFS-5 6.4T 1.2T 5.2T 18% /vmfs/volumes/RAID6-9x1TB-SAS</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">VMFS-5 1.1T 392.5G 722.7G 35% /vmfs/volumes/RAID10-8x300GB-SSD</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">vfat 4.0G 28.7M 4.0G 1% /vmfs/volumes/54255423-287d3e20-5dd5-90b11c4fcfc5</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">vfat 249.7M 157.3M 92.4M 63% /vmfs/volumes/dea75b72-115e5271-3e7b-9b3ef7301455</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">vfat 249.7M 8.0K 249.7M 0% /vmfs/volumes/6308247d-8d9ec099-ae26-5ec2d9ba9e00</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">vfat 285.8M 193.4M 92.4M 68% /vmfs/volumes/5425541a-bbf00056-e4c2-90b11c4fcfc5</span></div>
</div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br /></span></div>
<div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~ # esxcli storage filesystem list</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">Mount Point Volume Name UUID Mounted Type Size Free</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">------------------------------------------------- ------------------ ----------------------------------- ------- ------ ------------- -------------</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">/vmfs/volumes/54290d18-1f6d577a-44e2-90b11c4fcfc5 RAID10-4x300GB-SSD 54290d18-1f6d577a-44e2-90b11c4fcfc5 true VMFS-5 598611066880 370453512192</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">/vmfs/volumes/54255423-f706a47a-6e39-90b11c4fcfc5 RAID6-9x1TB-SAS 54255423-f706a47a-6e39-90b11c4fcfc5 true VMFS-5 6989522403328 5715596935168</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">/vmfs/volumes/54290d55-396ddecc-89f2-90b11c4fcfc5 RAID10-8x300GB-SSD 54290d55-396ddecc-89f2-90b11c4fcfc5 true VMFS-5 1197490569216 776033271808</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">/vmfs/volumes/54255423-287d3e20-5dd5-90b11c4fcfc5 54255423-287d3e20-5dd5-90b11c4fcfc5 true vfat 4293591040 4258988032</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">/vmfs/volumes/dea75b72-115e5271-3e7b-9b3ef7301455 dea75b72-115e5271-3e7b-9b3ef7301455 true vfat 261853184 96870400</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">/vmfs/volumes/6308247d-8d9ec099-ae26-5ec2d9ba9e00 6308247d-8d9ec099-ae26-5ec2d9ba9e00 true vfat 261853184 261844992</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">/vmfs/volumes/5425541a-bbf00056-e4c2-90b11c4fcfc5 5425541a-bbf00056-e4c2-90b11c4fcfc5 true vfat 299712512 96935936</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br /></span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~ # esxcli storage core device partition list</span><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">Device Partition Start Sector End Sector Type Size</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">------------------------------------ --------- ------------ ----------- ---- -------------</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807e52a66aad5 0 0 13667139584 0 6997575467008</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807e52a66aad5 1 64 8192 0 4161536</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807e52a66aad5 2 7086080 15472640 6 4293918720</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807e52a66aad5 3 15472640 13667139551 fb 6989653458432</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807e52a66aad5 5 8224 520192 6 262127616</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807e52a66aad5 6 520224 1032192 6 262127616</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807e52a66aad5 7 1032224 1257472 fc 115326976</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807e52a66aad5 8 1257504 1843200 6 299876352</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807e52a66aad5 9 1843200 7086080 fc 2684354560</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807902555b244 0 0 2339373056 0 1197759004672</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807902555b244 1 2048 2339373023 fb 1197757939200</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb806fa1c66c62d 0 0 1169686528 0 598879502336</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb806fa1c66c62d 1 2048 1169686495 fb 598878436864</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br /></span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~ # esxcli storage core device partition showguid</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">Device Partition Layout GUID</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">------------------------------------ --------- ------ --------------------------------</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807e52a66aad5 0 GPT 00000000000000000000000000000000</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807e52a66aad5 1 GPT c12a7328f81f11d2ba4b00a0c93ec93b</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807e52a66aad5 2 GPT ebd0a0a2b9e5443387c068b6b72699c7</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807e52a66aad5 3 GPT aa31e02a400f11db9590000c2911d1b8</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807e52a66aad5 5 GPT ebd0a0a2b9e5443387c068b6b72699c7</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807e52a66aad5 6 GPT ebd0a0a2b9e5443387c068b6b72699c7</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807e52a66aad5 7 GPT 9d27538040ad11dbbf97000c2911d1b8</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807e52a66aad5 8 GPT ebd0a0a2b9e5443387c068b6b72699c7</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807e52a66aad5 9 GPT 9d27538040ad11dbbf97000c2911d1b8</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807902555b244 0 GPT 00000000000000000000000000000000</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb807902555b244 1 GPT aa31e02a400f11db9590000c2911d1b8</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb806fa1c66c62d 0 GPT 00000000000000000000000000000000</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">naa.6b8ca3a0e704b3001bb806fa1c66c62d 1 GPT aa31e02a400f11db9590000c2911d1b8</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br /></span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~ # esxcli system visorfs ramdisk list</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">Ramdisk Name System Include in Coredumps Reserved Maximum Used Peak Used Free Reserved Free Maximum Inodes Allocated Inodes Used Inodes Mount Point</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">------------ ------ -------------------- --------- ----------- --------- --------- ----- ------------- -------------- ---------------- ----------- ---------------------------</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">root true true 32768 KiB 32768 KiB 532 KiB 544 KiB 98 % 98 % 8192 4096 3654 /</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">etc true true 28672 KiB 28672 KiB 184 KiB 216 KiB 99 % 99 % 4096 1024 463 /etc</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">tmp false false 2048 KiB 196608 KiB 4 KiB 228 KiB 99 % 99 % 8192 256 3 /tmp</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">hostdstats false false 0 KiB 1078272 KiB 12704 KiB 12892 KiB 98 % 0 % 8192 32 5 /var/lib/vmware/hostd/stats</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">snmptraps false false 0 KiB 1024 KiB 0 KiB 0 KiB 100 % 0 % 8192 32 1 /var/spool/snmp</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br /></span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">~ # ls -alh /vmfs/devices/disks </span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">total 17176196976</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">drwxr-xr-x 1 root root 512 Jun 3 09:25 .</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">drwxr-xr-x 1 root root 512 Jun 3 09:25 ..</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">-rw------- 1 root root 0 Jun 3 09:25 mpx.vmhba32:C0:T0:L1</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">-rw------- 1 root root 557.8G Jun 3 09:25 naa.6b8ca3a0e704b3001bb806fa1c66c62d</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">-rw------- 1 root root 557.7G Jun 3 09:25 naa.6b8ca3a0e704b3001bb806fa1c66c62d:1</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">-rw------- 1 root root 1.1T Jun 3 09:25 naa.6b8ca3a0e704b3001bb807902555b244</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">-rw------- 1 root root 1.1T Jun 3 09:25 naa.6b8ca3a0e704b3001bb807902555b244:1</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">-rw------- 1 root root 6.4T Jun 3 09:25 naa.6b8ca3a0e704b3001bb807e52a66aad5</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">-rw------- 1 root root 4.0M Jun 3 09:25 naa.6b8ca3a0e704b3001bb807e52a66aad5:1</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">-rw------- 1 root root 4.0G Jun 3 09:25 naa.6b8ca3a0e704b3001bb807e52a66aad5:2</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">-rw------- 1 root root 6.4T Jun 3 09:25 naa.6b8ca3a0e704b3001bb807e52a66aad5:3</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">-rw------- 1 root root 250.0M Jun 3 09:25 naa.6b8ca3a0e704b3001bb807e52a66aad5:5</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">-rw------- 1 root root 250.0M Jun 3 09:25 naa.6b8ca3a0e704b3001bb807e52a66aad5:6</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">-rw------- 1 root root 110.0M Jun 3 09:25 naa.6b8ca3a0e704b3001bb807e52a66aad5:7</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">-rw------- 1 root root 286.0M Jun 3 09:25 naa.6b8ca3a0e704b3001bb807e52a66aad5:8</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">-rw------- 1 root root 2.5G Jun 3 09:25 naa.6b8ca3a0e704b3001bb807e52a66aad5:9</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 20 Jun 3 09:25 vml.0000010000766d68626133323a303a31 -> mpx.vmhba32:C0:T0:L1</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 36 Jun 3 09:25 vml.02000000006b8ca3a0e704b3001bb806fa1c66c62d504552432048 -> naa.6b8ca3a0e704b3001bb806fa1c66c62d</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 38 Jun 3 09:25 vml.02000000006b8ca3a0e704b3001bb806fa1c66c62d504552432048:1 -> naa.6b8ca3a0e704b3001bb806fa1c66c62d:1</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 36 Jun 3 09:25 vml.02000000006b8ca3a0e704b3001bb807902555b244504552432048 -> naa.6b8ca3a0e704b3001bb807902555b244</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 38 Jun 3 09:25 vml.02000000006b8ca3a0e704b3001bb807902555b244504552432048:1 -> naa.6b8ca3a0e704b3001bb807902555b244:1</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 36 Jun 3 09:25 vml.02000000006b8ca3a0e704b3001bb807e52a66aad5504552432048 -> naa.6b8ca3a0e704b3001bb807e52a66aad5</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 38 Jun 3 09:25 vml.02000000006b8ca3a0e704b3001bb807e52a66aad5504552432048:1 -> naa.6b8ca3a0e704b3001bb807e52a66aad5:1</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 38 Jun 3 09:25 vml.02000000006b8ca3a0e704b3001bb807e52a66aad5504552432048:2 -> naa.6b8ca3a0e704b3001bb807e52a66aad5:2</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 38 Jun 3 09:25 vml.02000000006b8ca3a0e704b3001bb807e52a66aad5504552432048:3 -> naa.6b8ca3a0e704b3001bb807e52a66aad5:3</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 38 Jun 3 09:25 vml.02000000006b8ca3a0e704b3001bb807e52a66aad5504552432048:5 -> naa.6b8ca3a0e704b3001bb807e52a66aad5:5</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 38 Jun 3 09:25 vml.02000000006b8ca3a0e704b3001bb807e52a66aad5504552432048:6 -> naa.6b8ca3a0e704b3001bb807e52a66aad5:6</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 38 Jun 3 09:25 vml.02000000006b8ca3a0e704b3001bb807e52a66aad5504552432048:7 -> naa.6b8ca3a0e704b3001bb807e52a66aad5:7</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 38 Jun 3 09:25 vml.02000000006b8ca3a0e704b3001bb807e52a66aad5504552432048:8 -> naa.6b8ca3a0e704b3001bb807e52a66aad5:8</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">lrwxrwxrwx 1 root root 38 Jun 3 09:25 vml.02000000006b8ca3a0e704b3001bb807e52a66aad5504552432048:9 -> naa.6b8ca3a0e704b3001bb807e52a66aad5:9</span></div>
</div>
<div>
<br /></div>
arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com2tag:blogger.com,1999:blog-4925591696712284857.post-66010940669200353612016-04-28T16:09:00.002-06:002017-02-19T18:08:26.116-07:00Commands to keep handy when checking storage (and to show datastore with naa IDs)<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">I needed a command to show me the naa IDs with the datastore names. This is the best I've found so far:</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">esxcfg-scsidevs -m</span></span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif; font-size: xx-small;">~ # esxcfg-scsidevs -m</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif; font-size: xx-small;"><span style="font-family: "courier new" , "courier" , monospace;">naa.<b>JACKPOT1</b>:1 /vmfs/devices/disks/naa.</span><span style="font-family: "courier new" , "courier" , monospace;">something1</span><span style="font-family: "courier new" , "courier" , monospace;">:1 ESXi_GUID 0 <b>Datastore1</b></span></span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><span style="font-family: "courier new" , "courier" , monospace; font-size: xx-small;">naa.</span><b style="font-family: 'courier new', courier, monospace;">JACKPOT2</b><span style="font-size: xx-small;"><span style="font-family: "courier new" , "courier" , monospace;">:1 /vmfs/devices/disks/naa.</span><span style="font-family: "courier new" , "courier" , monospace;">something2</span><span style="font-family: "courier new" , "courier" , monospace;">:1 ESXi_GUID 0 <b>Datastore2</b></span></span></span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">I found this particular command to have other very good options as well. </span><span style="font-family: 'helvetica neue', arial, helvetica, sans-serif;">These are other three options or commands that show a lot of info on your storage devices:</span></span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<b><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">esxcfg-scsidevs -l</span></b><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<div>
<div>
<b><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">esxcfg-mpath --list</span></b></div>
<div>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span></div>
</div>
<div>
<div>
<b><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">esxcli storage core device list</span></b><br />
<b><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span></b>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">This last one is particularly useful if you need to determine which naa ID corresponds to an iSCSI target name!</span></div>
</div>
arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-53137942262955506782016-04-25T14:25:00.000-06:002016-05-12T08:25:45.692-06:00Working with the Dell sold Samsung NVMe XS1715 SSD 800GB<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">TL:DR - you will probably need to do a firmware downgrade and driver update to comply with the HCL. Don't trust the Dell installer or OME Linux updater!</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">We bought some Dell servers that have this NVMe drive. As far as I know, this is the only <i>hot-plug</i> NVMe drive they sell for the R730XD series, but I suspect this will change sometime in the future.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">The installer originally used on this server didn't have the NVMe driver, so I wasn't being able to see the drive in my storage interface. To make sure the drive is working properly before installing the driver, you can check it shows up in the storage section of the iDRAC interface and you can use this command to see if this PCIe device shows up in ESXi.</span><br />
<br />
<span style="font-family: "courier new" , "courier" , monospace;">~ # lspci -v |grep NVMe</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">0000:87:00.0 Non-Volatile memory controller Mass storage controller: Samsung, Inc. Express Flash NVMe XS1715 SSD 800GB</span><br />
<div>
<br /></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">With this information, even without having it mapped to an vmhba yet, I can get the 4 hardware IDs and be able to check this device in the HCL</span></div>
<div>
<br /></div>
<div>
<div>
<span style="font-family: "courier new" , "courier" , monospace;">~ # vmkchdev -l |grep 0000:87:00.0</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace;">0000:87:00.0 144d:a820 1028:1f96 vmkernel</span></div>
</div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg936YKMoNe62q9X-0iTiiyCXWEZ5F_1N9mfe4CBm8TPVv1aLEPkgKSVOghDjSE9Ogugjp1bAuRR3I8wQJUHBFIFLJhqdgz2CDdM6QjC4uojSBuNDQB1IeKNRlvBeBO8VMnIy7wRsvZG-Nl/s1600/Dell-Samsung+XS1715+in+VMware+HCL.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="310" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg936YKMoNe62q9X-0iTiiyCXWEZ5F_1N9mfe4CBm8TPVv1aLEPkgKSVOghDjSE9Ogugjp1bAuRR3I8wQJUHBFIFLJhqdgz2CDdM6QjC4uojSBuNDQB1IeKNRlvBeBO8VMnIy7wRsvZG-Nl/s400/Dell-Samsung+XS1715+in+VMware+HCL.png" width="400" /></a></div>
<br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">In my case, this is being installed with 5.5u3.</span><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhKIuyFxG5SAlltj9L8cvkEsImFQlItnCSVasVBYjIIa5thGznujzld9frRvbrW0JwC724F5pvbBMUd262waL6dq6e1iX7qgyo7Q4JzQGv7R3j9IbDUIg2eXLFu1Jv7s1dmhefXkDAMrdcC/s1600/Dell-Samsung+XS1715+VMware+HCL+55u3+details.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="196" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhKIuyFxG5SAlltj9L8cvkEsImFQlItnCSVasVBYjIIa5thGznujzld9frRvbrW0JwC724F5pvbBMUd262waL6dq6e1iX7qgyo7Q4JzQGv7R3j9IbDUIg2eXLFu1Jv7s1dmhefXkDAMrdcC/s400/Dell-Samsung+XS1715+VMware+HCL+55u3+details.png" width="400" /></a></div>
<br />
<u><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Firmware:</span></u><br />
<br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">The firmware version for all ESXi releases is the same (IMP0DD3Q), and a quick google shows this is the initial release of the firmware from 2014. This server has already had an OME boot CD run, and I didn't see any updates to this device; but checking in iDRAC, it shows I am running a different release, IPM0ID3Q:</span><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhRCvgwZvt3WQLpEv2lOhEXelr_3HW0OJ_EbZ-fGcmuJeWVRzz8OLEodoXY6loP9ofuuV00oiAmdaQkeWkyTQaN-wEy9cVMoVrQGfnhN1JF46wp8Y7TuO6GPpJvLpwuw2IOf61QLKNgv09/s1600/Dell-Samsung+XS1715+firmware+on+drac.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="73" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhRCvgwZvt3WQLpEv2lOhEXelr_3HW0OJ_EbZ-fGcmuJeWVRzz8OLEodoXY6loP9ofuuV00oiAmdaQkeWkyTQaN-wEy9cVMoVrQGfnhN1JF46wp8Y7TuO6GPpJvLpwuw2IOf61QLKNgv09/s400/Dell-Samsung+XS1715+firmware+on+drac.png" width="400" /></a></div>
<br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Checking the <a href="http://www.dell.com/support/home/us/en/19/Drivers/DriversDetails?driverId=R1C60" target="_blank">Dell page for that firmware release</a>, it seems this is the 3rd release, and the VMware HCL has not caught up to these releases. The release I'm currently running is from June 2015 and improves the wear levelling algorithm, while the 2nd release improves management functions. Tsk tsk, VMware/Dell...</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">For now it seems I will have to figure out how to downgrade the firmware to comply with HCL. I checked the VSAN HCL as well, and there are currently no Samsung NVMe drives certified, but I was told by other vExperts they are in progress and will update once I have news on that front. Once I figure it out, I will update this section.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><u>Driver:</u></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Installing using the Dell image to this date (VMware-VMvisor-Installer-5.5.0.update03-3568722.x86_64-Dell_Customized-A05.iso) I was able to see the driver used with a "</span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">esxcli storage core adapter list"</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">vmhba7 <b>nvme</b> link-n/a pscsi.vmhba7 (0:135:0.0) Samsung Electronics Co Ltd Dell Express Flash NVMe XS1715 800GB PCIe SSD Controller</span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">And we can check this driver's information with "vmkload_mod -s nvme"</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "courier new" , "courier" , monospace;">~ # vmkload_mod -s nvme</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">vmkload_mod module information</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> input file: /usr/lib/vmware/vmkmod/nvme</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"><b> Version: 1.2.0.27-4vmw.550.0.0.1331820</b></span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> License: BSD</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> Required name-spaces:</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> com.vmware.vmkapi#v2_2_0_0</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> Parameters:</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> nvme_compl_worlds_num: int</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> Total number of NVMe completion worlds/queues.</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> nvme_dbg: int</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> Driver NVME_DEBUG print level</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> io_timeout: int</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> IO timeout second for internal checker</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> max_scsi_unmap_requests: int</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> Maximum number of scsi unmap requests supported</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> max_namespaces: int</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> Maximum number of namespaces supported</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> io_cpl_queue_size: int</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> NVMe number of IO completion queue entries</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> io_sub_queue_size: int</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> NVMe number of IO submission queue entries</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> admin_cpl_queue_size: int</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> NVMe number of Admin completion queue entries</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> admin_sub_queue_size: int</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> NVMe number of Admin submission queue entries.</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> nvme_log_level: int</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> Log level.</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> 1 - error</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> 2 - warning</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> 3 - info (default)</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> 4 - verbose</span><br />
<span style="font-family: "courier new" , "courier" , monospace;"></span><br />
<span style="font-family: "courier new" , "courier" , monospace;"> 5 - debug</span><br />
<div>
<br /></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">As <a href="https://www.vmware.com/resources/compatibility/detail.php?deviceCategory=io&productid=37691&releaseid=272&deviceCategory=io&details=1&VID=144d&DID=a820&SVID=1028&SSID=1f96&page=1&display_interval=10&sortColumn=Partner&sortOrder=Asc" target="_blank">seen in the HCL</a> in the beginning of this post, the only driver version on the HCL is <b>1.0e.0.30-1vmw </b>so I will also need to download and install a custom driver for this card. At least in vSphere versions 6.0+ it lists the VMware inbox driver instead.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">The driver from the VMware site should be downloaded, saved to a datastore or /tmp, and then the commands to uninstall and install should be run. I'll paste the commands here soon.</span></div>
arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-27305540714927104182016-04-14T12:39:00.003-06:002016-04-14T12:39:33.549-06:00ESXi command to see others connected to an SSH session<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Short but sweet - the command is <b>who</b></span><br />
<br />
<span style="font-family: Courier New, Courier, monospace;">login as: root</span><br />
<span style="font-family: Courier New, Courier, monospace;">Using keyboard-interactive authentication.</span><br />
<span style="font-family: Courier New, Courier, monospace;">Password:</span><br />
<span style="font-family: Courier New, Courier, monospace;">The time and date of this login have been sent to the system logs.</span><br />
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">VMware offers supported, powerful system administration tools. Please</span><br />
<span style="font-family: Courier New, Courier, monospace;">see www.vmware.com/go/sysadmintools for details.</span><br />
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">The ESXi Shell can be disabled by an administrative user. See the</span><br />
<span style="font-family: Courier New, Courier, monospace;">vSphere Security documentation for more information.</span><br />
<span style="font-family: Courier New, Courier, monospace;">[root@arielitox:~] <b>who</b></span><br />
<span style="font-family: Courier New, Courier, monospace;">root char/pty/t0 00:00 Apr 14 18:36:28 rmtpasanchezw8.home</span><br />
<span style="font-family: Courier New, Courier, monospace;">root char/pty/t1 00:00 Apr 14 18:36:48 rmtpasanchezw8.home</span><br />
<div>
<br /></div>
<div>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Apparently it doesn't really detect the hostname (my second session is from a VM in workstation, but it picked the physical machine name). Hope it helps :)</span></div>
arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-35397822784144171062016-02-23T14:48:00.000-07:002016-02-23T14:48:06.162-07:00VMware ESXi host build notes: install image, HCL, drivers, firmware - choosing an ESXi installation image<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">VMware provides an ESXi ISO that has all VMware Inbox drivers. However, if you want to get the most added value from your servers. you will normally use the Vendor provided ESXi installation image. These images have the latest drivers plus vendor-specific VIBs.</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Of particular importance in the following lists is the <b>Vendor</b> and the <b>Acceptance Level</b>. The VMware image lists <i>VMware</i> as the vendor for all the VIBs, and always shows Acceptance Level to be <i>VMwareCertified</i>. The Dell image shows <i>the actual company</i> (even though Dell must validate the driver with VMware), and may show <i>PartnerSupported</i> as the Acceptance Level.</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Here's the installed vib output from two otherwise identical Dell R730 servers. One was installed with the VMware ISO and the other with the Dell ISO. </span><span style="font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif;">I apologize in advance for including the full text here, and especially in such a small font, but this will allow you to copy the files and do your own analysis.</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">VMware:</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">Name Version Vendor Acceptance Level Install Date</span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">----------------------------- ------------------------------------- ------ ---------------- ------------</span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ata-pata-amd 0.3.10-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ata-pata-atiixp 0.4.6-4vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ata-pata-cmd64x 0.2.5-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ata-pata-hpt3x2n 0.3.4-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ata-pata-pdc2027x 1.0-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ata-pata-serverworks 0.4.3-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ata-pata-sil680 0.4.8-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ata-pata-via 0.3.3-2vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">block-cciss 3.6.14-10vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ehci-ehci-hcd 1.0-3vmw.550.3.78.3248547 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">elxnet 10.2.309.6v-1vmw.550.3.68.3029944 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">esx-base 5.5.0-3.78.3248547 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">esx-dvfilter-generic-fastpath 5.5.0-0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">esx-tboot 5.5.0-2.33.2068190 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">esx-xlibs 5.5.0-0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">esx-xserver 5.5.0-0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ima-qla4xxx 2.01.31-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ipmi-ipmi-devintf 39.1-4vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ipmi-ipmi-msghandler 39.1-4vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ipmi-ipmi-si-drv 39.1-4vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">lpfc 10.0.100.1-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">lsi-mr3 0.255.03.01-2vmw.550.3.68.3029944 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">lsi-msgpt3 00.255.03.03-2vmw.550.3.78.3248547 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">misc-cnic-register 1.72.1.v50.1i-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">misc-drivers 5.5.0-3.78.3248547 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">mtip32xx-native 3.3.4-1vmw.550.1.15.1623387 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-be2net 4.6.100.0v-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-bnx2 2.2.3d.v55.2-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-bnx2x 1.72.56.v55.2-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-cnic 1.72.52.v55.1-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-e1000 8.0.3.1-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-e1000e 3.2.2.1-2vmw.550.3.78.3248547 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-enic 1.4.2.15a-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-forcedeth 0.61-2vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-igb 5.0.5.1.1-1vmw.550.2.54.2403361 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-ixgbe 3.7.13.7.14iov-12vmw.550.2.62.2718055 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-mlx4-core 1.9.7.0-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-mlx4-en 1.9.7.0-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-nx-nic 5.0.621-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-tg3 3.123c.v55.5-1vmw.550.2.33.2068190 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-vmxnet3 1.1.3.0-3vmw.550.2.39.2143827 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ohci-usb-ohci 1.0-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">qlnativefc 1.0.12.0-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">rste 2.0.2.0088-4vmw.550.1.15.1623387 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">sata-ahci 3.0-22vmw.550.3.68.3029944 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">sata-ata-piix 2.12-10vmw.550.2.33.2068190 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">sata-sata-nv 3.5-4vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">sata-sata-promise 2.12-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">sata-sata-sil24 1.1-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">sata-sata-sil 2.3-4vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">sata-sata-svw 2.3-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-aacraid 1.1.5.1-9vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-adp94xx 1.0.8.12-6vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-aic79xx 3.1-5vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-bnx2fc 1.72.53.v55.1-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-bnx2i 2.72.11.v55.4-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-fnic 1.5.0.4-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-hpsa 5.5.0-44vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-ips 7.12.05-4vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-lpfc820 8.2.3.1-129vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-megaraid-mbox 2.20.5.1-6vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-megaraid-sas 5.34-9vmw.550.3.68.3029944 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-megaraid2 2.00.4-9vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-mpt2sas 14.00.00.00-3vmw.550.3.68.3029944 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-mptsas 4.23.01.00-9vmw.550.3.68.3029944 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-mptspi 4.23.01.00-9vmw.550.3.68.3029944 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-qla2xxx 902.k1.1-12vmw.550.3.68.3029944 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-qla4xxx 5.01.03.2-6vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">uhci-usb-uhci 1.0-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-15 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">vr2c-firewall 6.1.0.10819-3051487 VMware VMwareCertified 2016-01-22 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">xhci-xhci 1.0-3vmw.550.3.78.3248547 VMware VMwareCertified 2016-01-15 </span><br />
<br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">tools-light 5.5.0-3.78.3248547 VMware VMwareCertified 2016-01-15 </span><br />
<div>
<br /></div>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Dell:</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">Name Version Vendor Acceptance Level Install Date</span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">----------------------------- ------------------------------------- -------- ---------------- ------------</span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-mpt2sas 20.00.00.00.1vmw-1OEM.550.0.0.1331820 Avago VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-mpt3sas 10.00.02.00-1OEM.550.0.0.1331820 Avago VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-tg3 3.137l.v55.1-1OEM.550.0.0.1331820 Broadcom VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">dell-configuration-vib 5.5-3A04 Dell PartnerSupported 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">elxnet 10.6.126.0-1OEM.550.0.0.1331820 Emulex VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ima-be2iscsi 10.6.150.3-1OEM.550.0.0.1331820 Emulex VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">lpfc 10.6.126.0-1OEM.550.0.0.1331820 Emulex VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-be2iscsi 10.6.150.3-1OEM.550.0.0.1331820 Emulex VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-i40e 1.3.38-1OEM.550.0.0.1331820 Intel VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-igb 5.3.1-1OEM.550.0.0.1331820 Intel VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-ixgbe 4.1.1.1-1OEM.550.0.0.1331820 Intel VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-megaraid-perc9 6.902.73.00-1OEM.550.0.0.1331820 LSI VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-megaraid-sas 06.805.56.00-1OEM.550.0.0.1331820 LSI VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">mtip32xx-native 3.9.4-1OEM.550.0.0.1331820 MICRON VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-mlx4-core 1.9.9.4-1OEM.550.0.0.1331820 Mellanox VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-mlx4-en 1.9.9.4-1OEM.550.0.0.1331820 Mellanox VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ima-qla4xxx 500.2.01.31-1vmw.0.3.100400 QLogic VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">misc-cnic-register 1.712.10.v55.2-1OEM.550.0.0.1331820 QLogic VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-bnx2 2.2.5g.v55.2-1OEM.550.0.0.1331820 QLogic VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-bnx2x 2.712.10.v55.4-1OEM.550.0.0.1331820 QLogic VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-cnic 2.712.10.v55.4-1OEM.550.0.0.1331820 QLogic VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-qlcnic 5.5.190-1OEM.550.0.0.1331820 QLogic VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-qlge 3.0.0.59-1OEM.550.0.0.1331820 QLogic VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">qlnativefc 1.1.52.0-1OEM.550.0.0.1331820 QLogic VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-bnx2fc 1.712.10.v55.2-1OEM.550.0.0.1331820 QLogic VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-bnx2i 2.712.10.v55.4-1OEM.550.0.0.1331820 QLogic VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-qla4xxx 644.55.36.0-1OEM.550.0.0.1331820 QLogic VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ata-pata-amd 0.3.10-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ata-pata-atiixp 0.4.6-4vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ata-pata-cmd64x 0.2.5-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ata-pata-hpt3x2n 0.3.4-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ata-pata-pdc2027x 1.0-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ata-pata-serverworks 0.4.3-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ata-pata-sil680 0.4.8-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ata-pata-via 0.3.3-2vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">block-cciss 3.6.14-10vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ehci-ehci-hcd 1.0-3vmw.550.3.78.3248547 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">esx-base 5.5.0-3.78.3248547 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">esx-dvfilter-generic-fastpath 5.5.0-0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">esx-tboot 5.5.0-2.33.2068190 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">esx-xlibs 5.5.0-0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">esx-xserver 5.5.0-0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ipmi-ipmi-devintf 39.1-4vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ipmi-ipmi-msghandler 39.1-4vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ipmi-ipmi-si-drv 39.1-4vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">misc-drivers 5.5.0-3.78.3248547 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-be2net 4.6.100.0v-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-e1000 8.0.3.1-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-e1000e 3.2.2.1-2vmw.550.3.78.3248547 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-enic 1.4.2.15a-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-forcedeth 0.61-2vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-nx-nic 5.0.621-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">net-vmxnet3 1.1.3.0-3vmw.550.2.39.2143827 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">nvme 1.2.0.27-4vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">ohci-usb-ohci 1.0-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">rste 2.0.2.0088-4vmw.550.1.15.1623387 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">sata-ahci 3.0-22vmw.550.3.68.3029944 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">sata-ata-piix 2.12-10vmw.550.2.33.2068190 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">sata-sata-nv 3.5-4vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">sata-sata-promise 2.12-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">sata-sata-sil24 1.1-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">sata-sata-sil 2.3-4vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">sata-sata-svw 2.3-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-aacraid 1.1.5.1-9vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-adp94xx 1.0.8.12-6vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-aic79xx 3.1-5vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-fnic 1.5.0.4-1vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-hpsa 5.5.0-44vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-ips 7.12.05-4vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-lpfc820 8.2.3.1-129vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-megaraid-mbox 2.20.5.1-6vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-megaraid2 2.00.4-9vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-mptsas 4.23.01.00-9vmw.550.3.68.3029944 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-mptspi 4.23.01.00-9vmw.550.3.68.3029944 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">scsi-qla2xxx 902.k1.1-12vmw.550.3.68.3029944 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">uhci-usb-uhci 1.0-3vmw.550.0.0.1331820 VMware VMwareCertified 2016-01-14 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">vr2c-firewall 6.1.0.10819-3051487 VMware VMwareCertified 2016-01-26 </span><br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">xhci-xhci 1.0-3vmw.550.3.78.3248547 VMware VMwareCertified 2016-01-14 </span><br />
<br />
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;">tools-light 5.5.0-3.78.3248547 VMware VMwareCertified 2016-01-14 </span><br />
<div>
<br /></div>
<div>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">In my case, I save these in text files and finally use Notepad++ to compare them. Note that the Dell output is not as sorted as the VMware one, so you want to do that first to get better results; also, be mindful that the install date may throw a lot of "different lines". I actually remove this column before comparing.</span></div>
<div>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span></div>
<div>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">The result of the Compare (hiding the lines that are the same) shows us how different the images are:</span></div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDNgDe8jzm-cx9rkkU3-E8oHUFBcrdEyVCKiCLmtr5BRdh5Q6-d6GQPX73c7lo-wIjds8XqyMfkouTFXMc1Dk9HtGW7MSlyCrezMr5PZCjZ0KmZyFExd8GL-8I8zU1qG7FrfH0TSuSOn0w/s1600/npp_compare_std_dell.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="258" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDNgDe8jzm-cx9rkkU3-E8oHUFBcrdEyVCKiCLmtr5BRdh5Q6-d6GQPX73c7lo-wIjds8XqyMfkouTFXMc1Dk9HtGW7MSlyCrezMr5PZCjZ0KmZyFExd8GL-8I8zU1qG7FrfH0TSuSOn0w/s640/npp_compare_std_dell.png" width="640" /></a></div>
<div>
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div>
<br /></div>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">We can see different driver versions, some packages which were dropped (in red) and others that were added (in green).</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">From our previous post, these are our main differences between similar packages (normally driver version differences)</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><b>lpfc</b></span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"> VMware has 10.0.100.1-1vmw.550.0.0.1331820</span><br />
<span style="font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif;"> Dell has 10.6.126.0-1OEM.550.0.0.1331820</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><b>igb</b></span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"> VMware has 5.0.5.1.1-1vmw.550.2.54.2403361</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"> Dell has 5.3.1-1OEM.550.0.0.1331820</span><br />
<br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">So be mindful of the image you choose and how it affects your HCL driver/firmware combinations, and your acceptance level.</span><br />
<br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">If you want to find out the image that was used to install a host you can check through GUI </span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6HPUBhoGAdk0pzX5YUyy36FqZrlsKhBuY7ceeLmvdy86A00Ki2Md2K6SMJ2UN6d9roqrJH5k2Rg6TajQj0wJ0ToEXScBieL6_JPb2GttX6zSR_yb8MBvQxJnx4Aof8MIuPPjbiaWXziwx/s1600/check_image_profile_GUI.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6HPUBhoGAdk0pzX5YUyy36FqZrlsKhBuY7ceeLmvdy86A00Ki2Md2K6SMJ2UN6d9roqrJH5k2Rg6TajQj0wJ0ToEXScBieL6_JPb2GttX6zSR_yb8MBvQxJnx4Aof8MIuPPjbiaWXziwx/s1600/check_image_profile_GUI.png" /></span></a></div>
<br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">or with this command:</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"># <b>esxcli software profile get</b></span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">(Updated) Dell-ESXi-5.5U3-3248547-A04</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"># <b>esxcli software profile get</b></span><br />
<br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">(Updated) ESXi-5.5.0-20151204001-standard</span><br />
<div>
<br /></div>
<div>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">I find using the Vendor installation image a better option, as long as you are careful of the HCL / firmware implications. Note, however, that sometimes useful software such as Dell OpenManage software isn't included. The vendors normally provide a separate vib you can install to add that functionality.</span></div>
<div>
<br /></div>
<div>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">This concludes this three part series on keeping host build notes, and guaranteeing you are using a supported configuration.</span></div>
arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-5104719833938018342016-02-19T13:59:00.000-07:002016-03-04T18:31:28.865-07:00VMware ESXi host build notes: install image, HCL, drivers, firmware - confirming HCL recommendations once you have the hardware<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">For your purposes the important KBs now are 1031534 and 1034674</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<a href="https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1031534" target="_blank"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1031534</span></a><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<a href="https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1027206" target="_blank"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1027206</span></a><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">With hardware turned on and ESXi setup (we will talk about the install image later on) we access shell and can now check the IO devices. In my case we are running this with esxi v5.5</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">The two commands that I like to check HBAs and NICs are slight variations to the ones in the KB:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<b><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">vmkchdev -l | grep vmnic</span></b><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">example output:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "courier new" , "courier" , monospace;">~ # vmkchdev -l | grep vmnic</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">0000:01:00.0 8086:1521 1028:1f60 vmkernel vmnic0</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">0000:01:00.1 8086:1521 1028:1f60 vmkernel vmnic1</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">0000:01:00.2 8086:1521 1028:1f60 vmkernel vmnic2</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">0000:01:00.3 8086:1521 1028:1f60 vmkernel vmnic3</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">0000:82:00.0 8086:1521 8086:5001 vmkernel vmnic4</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">0000:82:00.1 8086:1521 8086:5001 vmkernel vmnic5</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">0000:82:00.2 8086:1521 8086:5001 vmkernel vmnic6</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">0000:82:00.3 8086:1521 8086:5001 vmkernel vmnic7</span><br />
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<b><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">vmkchdev -l | grep vmhba</span></b><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">example output:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "courier new" , "courier" , monospace;">~ # vmkchdev -l | grep vmhba</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">0000:00:11.4 8086:8d62 1028:0600 vmkernel vmhba1</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">0000:00:1f.2 8086:8d02 1028:0600 vmkernel vmhba2</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">0000:02:00.0 1000:005f 1028:1f4b vmkernel vmhba0</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">0000:04:00.0 10df:f100 10df:f100 vmkernel vmhba5</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">0000:04:00.1 10df:f100 10df:f100 vmkernel vmhba6</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">0000:05:00.0 10df:f100 10df:f100 vmkernel vmhba3</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">0000:05:00.1 10df:f100 10df:f100 vmkernel vmhba4</span><br />
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">The first column is a PCI bus identifier, the 2nd and 3rd are hardware identifierss, and the last column is how ESXi calls the device.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">From the KB:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">For example, to check the compatibility of vmnic0 and vmhba0, note the hardware IDs:</span><br />
<br />
<span style="font-family: "courier new" , "courier" , monospace;">000:003:00.0 <b>14e4:1639 103c:7055</b> vmkernel vmnic0<br />000:069:00.0 <b>103c:323a 103c:3243</b> vmkernel vmhba0</span><br />
<br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">The section in bold indicates the device properties in the format VID:DID SVID:SSID, where:</span><br />
<br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">VID = Vendor Id</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">DID = Device Id</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">SVID = Sub-Vendor Id</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">SSID = Sub-Device Id</span><br />
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">These numbers are very important, because they allow us to check the VMware compatibility list we had talked about before, but in a very specific manner. Let's check the IDs we got from the example.</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">This is the I/O devices view of the Compatibility Guide. We don't need to select vendors or model anymore - we only need to input the 4 numbers</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGK-VjItqfTNFeGlHDn-q5qWtniKit7daagZeV04WfLYYSBN9LL3oVBHw4PUZFLkWexWdZqxPkmH3aGiIsVud5fvcSR2FW9VmvM8teahYri3g6VmHNmzkqh2ab6KbV1JIfVboZUw8xaoFH/s1600/nic_with4IDs.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><img border="0" height="286" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGK-VjItqfTNFeGlHDn-q5qWtniKit7daagZeV04WfLYYSBN9LL3oVBHw4PUZFLkWexWdZqxPkmH3aGiIsVud5fvcSR2FW9VmvM8teahYri3g6VmHNmzkqh2ab6KbV1JIfVboZUw8xaoFH/s400/nic_with4IDs.png" width="400" /></span></a></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">With those 4 numbers we now know our vmin0-vmnic3 are the Intel I350-t NDC (network daughter card) which are the LAN on motherboard ports. It's good that they are listed, but if we click on the ESXi version from the results, we now can see the list of driver and firmware combinations that VMware supports:</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijwIkWneLjbzMZ7-jrNk5BUjPCEP5NbwtZR6ff05BhyZQjZUud3bGu4bwuP2OHVl0cSlfZKj74uzs4Hst1fSifDXNYFokhkTUF_9D4fFQBr1HaEg1yfmU-dLWEg_c2BryJZ-J1mbKFkn0f/s1600/I350-t_driver_and_firmware.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><img border="0" height="321" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijwIkWneLjbzMZ7-jrNk5BUjPCEP5NbwtZR6ff05BhyZQjZUud3bGu4bwuP2OHVl0cSlfZKj74uzs4Hst1fSifDXNYFokhkTUF_9D4fFQBr1HaEg1yfmU-dLWEg_c2BryJZ-J1mbKFkn0f/s400/I350-t_driver_and_firmware.png" width="400" /></span></a></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">So we have information, how do we find what drive and firmware is running on ESXi?</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<u><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif; font-size: large;">For network cards</span></u></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Use this command:</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<b><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">ethtool -i vmnicX</span></b></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Example:</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">~ # ethtool -i vmnic0</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">driver: igb</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">version: 5.3.1</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">firmware-version: 1.67, 0x80000d93, 16.5.20</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">bus-info: 0000:01:00.0</span></div>
</div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">So we have found out that the driver is called igb, it's version 5.3.1 and firmware is v1.67. Checking the website, we see that this driver is compatible with any firmware version (if there was a specific firmware it would be listed, instead of N/A, like in the case of igb 5.2.7). This means for this device we are running on VMware approved drivers and firmware.</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<u><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif; font-size: large;">For storage HBAs</span></u></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">The commands for HBAs are not as clean and may vary by your vendor. </span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><u>You first find the driver being used.</u> This command lists HBA devices:</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<b><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">esxcfg-scsidevs -a</span></b></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<div>
<span style="font-family: "courier new" , "courier" , monospace;">~ # esxcfg-scsidevs -a</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace;">vmhba38 ahci link-n/a sata.vmhba38 (0:0:31.2) Intel Corporation Wellsburg AHCI Controller</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace;">vmhba39 ahci link-n/a sata.vmhba39 (0:0:31.2) Intel Corporation Wellsburg AHCI Controller</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace;">vmhba0 <b>megaraid_perc9</b> link-n/a unknown.vmhba0 (0:2:0.0) LSI / Symbios Logic Dell PERC H330 Mini Adapter</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace;">vmhba1 ahci link-n/a sata.vmhba1 (0:0:17.4) Intel Corporation Wellsburg AHCI Controller</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace;">vmhba2 ahci link-n/a sata.vmhba2 (0:0:31.2) Intel Corporation Wellsburg AHCI Controller</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace;">vmhba3 <b>lpfc</b> link-up fc.20000090XXXXXXXX:10000090XXXXXXXX (0:5:0.0) Emulex Corporation LPe12000 8Gb Fibre Channel Host Adapter</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Or you can also use</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "courier new" , "courier" , monospace;"><b>esxcli storage core adapter list</b></span><br />
<br /></div>
</div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">In this case i'm interested in double checking the Emulex 8GB FC adapters. Now I know my driver is called <b>lpfc</b>. With this information I now run this command</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace;">vmkload_mod -s lpfc | grep Version</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Example output:</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<div>
<span style="font-family: "courier new" , "courier" , monospace;">~ # vmkload_mod -s lpfc |grep Version</span></div>
<div>
<span style="font-family: "courier new" , "courier" , monospace;"> Version: 10.6.126.0-1OEM.550.0.0.1331820</span></div>
</div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><u>To determine firmware on a FibreChannel HBA</u> we need yet another KB, 1002413</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<a href="https://kb.vmware.com/selfservice/search.do?cmd=displayKC&docType=kc&docTypeID=DT_KB_1_1&externalId=1002413" target="_blank"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">https://kb.vmware.com/selfservice/search.do?cmd=displayKC&docType=kc&docTypeID=DT_KB_1_1&externalId=1002413</span></a></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">The command for ESXi v5.5 is</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<span style="font-family: "courier new" , "courier" , monospace;">/usr/lib/vmware/vmkmgmt_keyval/vmkmgmt_keyval -a</span><br />
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">but I find that output too unwieldy. <a href="https://twitter.com/arielsanchezmor/status/700378924224770048" target="_blank">In theory we can limit the information displayed to a single HBA using the -d and -i switches, but I still have not been to get this to work (i'm caught on syntax and haven't found the problem, please comment :D )</a></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">In the meantime, I find this grep sufficient to reduce the output to what we are interested in so I can paste an excerpt:</span></div>
<div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<div>
<span style="font-family: "courier new" , "courier" , monospace;"># /usr/lib/vmware/vmkmgmt_keyval/vmkmgmt_keyval -a | grep 'FW Version'</span></div>
<div>
<b><span style="font-family: "courier new" , "courier" , monospace;">FW Version: 2.01A12</span></b></div>
</div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">...</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Notice that all HBAs show the same firmware version (they are all the same model). Always be mindful that if you have different hardware, you have to check each!</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Checking this HBA's 4 ID numbers and comparing the driver and firmware versions we see:</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEix7XV-P6FGY7gGZpF08_a9hqsW-aSyqMZGsieqjP4ShcLkEW1YgdTpUNl7Zw52vHVhwCUVxP8bIZeTS_i7mE-bkZHH2s3_fMFolshvSYRVd9jJoNB2swixsrtVwnOD27QjAC9NszkxklGO/s1600/hba_with4IDs.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><img border="0" height="307" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEix7XV-P6FGY7gGZpF08_a9hqsW-aSyqMZGsieqjP4ShcLkEW1YgdTpUNl7Zw52vHVhwCUVxP8bIZeTS_i7mE-bkZHH2s3_fMFolshvSYRVd9jJoNB2swixsrtVwnOD27QjAC9NszkxklGO/s400/hba_with4IDs.png" width="400" /></span></a></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-Au-qY8E-4KjX5UjWJ93q54XsLO8cT4lxhIU2HE8X3oqVc8d6QtnG26Y_C2mYbK4lAkOkq80e5Iw6kAw_tM4YrjI8cORv23MQGlYyPSdqkT16nRuLwSWdXSJsmuC2OKUj7IxHqnMplDVP/s1600/Lp312002-M8_2P_driver_and_firmware.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><img border="0" height="210" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-Au-qY8E-4KjX5UjWJ93q54XsLO8cT4lxhIU2HE8X3oqVc8d6QtnG26Y_C2mYbK4lAkOkq80e5Iw6kAw_tM4YrjI8cORv23MQGlYyPSdqkT16nRuLwSWdXSJsmuC2OKUj7IxHqnMplDVP/s400/Lp312002-M8_2P_driver_and_firmware.png" width="400" /></span></a></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Here we can see an interesting situation - we have a new driver but old firmware, and they are <span style="color: red;">incompatible</span> (VMware would tell you, if you have a problem, you aren't running an HCL-approved configuration). In this case, you will need to update the firmware on the HBA card. </span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">In my experience, I find that the vendor tools (through HP SPP or Dell OME ISO) do a good job of upgrading all server BIOS/firmware on all vendor-provided cards to their latest Linux versions. After updating firmware through these tools, you still have to check that you are in an approved configuration. There are also many posts on the internet on how to execute a standalone firmware upgrade but most depend on a device specific tool. If you can't get the firmware to the correct version to use that latest driver, you might need to downgrade the driver to match your existing firmware. Remember, as long as you are on the HCL, VMware will support you if you run into problems (small caveat below).</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<u><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif; font-size: large;">A note on "inbox" drivers versus Partner Async</span></u></div>
<div>
<ul>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Inbox drivers are what VMware provides in their base installer. They are the driver/firmware combination that they certified works when doing a release. They own support on this driver/firmware combination.</span></li>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Partner Async drivers are updates to drivers provided by vendors that pass a certification process. However, if a problem is determined on this new version, the support lies on the Partner, not on VMware. VMware can recommend you to fall back to the inbox drivers.</span></li>
</ul>
</div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">You have the eternal dilemma of stability versus bug fixes and performance improvements. I always go for Partner Async unless I find trouble. Note that vendors provide VMware ISO installers that include these new drivers by default. The topic of the differences between the VMware provided installation ISO (that only includes the inbox drivers) and the vendor provided ISOs is the next and last post in this series.</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">In Summary</span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></div>
<div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Now you know how to check the hardware you own against HCL for firmware and drivers. You would run the numbers for each one of the devices you want to check on your hardware. Documenting the configuration that will ultimately go to production will help as you add more hardware into the clusters and help you keep a homogeneous environment. </span></div>
<div>
<br /></div>
</div>
arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-83564243006501639382016-02-17T15:16:00.003-07:002016-02-23T14:48:42.706-07:00VMware ESXi host build notes: install image, HCL, drivers, firmware - verifying hardware before you buy it<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">This is a long topic, which most administrators don't spend too much time on - until it suddenly is very important because of a problem :)</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">To make sure your hardware works well with VMware, you need (and need to learn to navigate) the VMware Compatibility Guide</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<a href="https://www.vmware.com/resources/compatibility/search.php"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">https://www.vmware.com/resources/compatibility/search.php</span></a><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">This is a front end for a <i><b>huge</b></i> list of hardware devices, and there are many ways to navigate it. I will show some things with examples.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">This post will focus on making sure you are buying a server that is on the Hardware Compatibility List. While most popular platforms from the main vendors get certified quickly (and bugs are found very quickly too), you might find this exercise very important if you are considering doing things which aren't as popular or cookie-cutter.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">First you want to make sure the server model is listed as compatible in this page. This normally guarantees that the other hardware options that the vendor offers for that server will also be supported, but we will talk about that in a bit.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Let's say I'm considering a Dell R730 server, and I know that I will use an Intel E5-2600-v3 series CPU. With that information I can do a query and find that both the R730 and R730XD are compatible with ESXi 5.5u3 (note that it's also supported for v6.0 and v6.0u1, which will be likely upgrades during the lifecycle of this server).</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><i>(Note, if you click on the image you get full resolution)</i></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihA4SW2m0hJOTq3JOguUDxx-jw_RUgx0bpY_YMnQHjP2EamtmUwaFVZBN8aXDNqLh_NVkXXHLX3kRKlu5MJ3xmSp2QDXtt2pMUeYV2JlF4W5iHwGW2Ag0Qvfwqd9Tj6e84GF6JASBVzZs2/s1600/compat_r730.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><img border="0" height="360" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihA4SW2m0hJOTq3JOguUDxx-jw_RUgx0bpY_YMnQHjP2EamtmUwaFVZBN8aXDNqLh_NVkXXHLX3kRKlu5MJ3xmSp2QDXtt2pMUeYV2JlF4W5iHwGW2Ag0Qvfwqd9Tj6e84GF6JASBVzZs2/s400/compat_r730.png" width="400" /></span></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">That's good - this server will do. There are still a lot of options to check though. </span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Let's say we are picking the Intel I-350-t NIC for our data traffic and some Emulex LPe120002 8GB FC HBAs. We have to switch to the I/O devices view. However, <b>note that I am keeping Dell as the vendor</b>. Dell has their own version of these hardware devices, which is different from the original vendor's (they run their own QA process and adjust firmware for their needs). </span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">If you were buying hardware as retail for this server, and not through Dell, you would choose the original vendor. Please note - Dell might complain about that and not offer support if you do that, so always check with them. Generally speaking, you are safer if you buy all your hardware in one neat little certified package, but that may not be how you roll.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Checking the Emulex HBA:</span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKAOW0Mj0OpzKCRYsS3wGljGFEIcMBHeRZEqjq5LZof8GpthUHCs9PwlC5FTXWI5R7X0VbKYCzGHx4BkWlmJzJrhuR10W4nIRUjTHoiAfXOdri24PzweqXvNrR4Duzg9eEY3b5eeDl_Ce6/s1600/compat_LPe12002.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><img border="0" height="275" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKAOW0Mj0OpzKCRYsS3wGljGFEIcMBHeRZEqjq5LZof8GpthUHCs9PwlC5FTXWI5R7X0VbKYCzGHx4BkWlmJzJrhuR10W4nIRUjTHoiAfXOdri24PzweqXvNrR4Duzg9eEY3b5eeDl_Ce6/s400/compat_LPe12002.png" width="400" /></span></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">And checking the Intel I350-t cards (note that it's supported in several formats, including network daughter card and as add-on devices)</span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3TEeV5pbCgZLCMce614MPTT7wM6GZkSEexwY42U9AR35xvNMaDf6ML-gkvzDUimz7QM19K8Pr3-GNmx_c_SkudwImMumpmvgCC49ErQkiUxBzp4yzWm1cTiui3biNIAQD7e2TLJOPjo8q/s1600/compat_I350-t.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><img border="0" height="315" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3TEeV5pbCgZLCMce614MPTT7wM6GZkSEexwY42U9AR35xvNMaDf6ML-gkvzDUimz7QM19K8Pr3-GNmx_c_SkudwImMumpmvgCC49ErQkiUxBzp4yzWm1cTiui3biNIAQD7e2TLJOPjo8q/s400/compat_I350-t.png" width="400" /></span></a></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">All right, all seems good. You would continue checking all important parts - if you will use VSAN, you want to make sure any SSDs you buy are in the corresponding compatibility list. </span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Next post talks about how to check the firmware and driver levels for a server you already have in your hands. We will talk about the ESXi installation image as well.</span>arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-87053783021535129232016-02-15T21:40:00.000-07:002016-02-15T21:43:16.890-07:00Powershell and PowerCLI - getting started<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Here's a small collection of links and tips for getting started with PowerShell/PowerCLI</span></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">PowerCLI m</span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">ain link</span></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><a href="https://www.vmware.com/support/developer/PowerCLI/">https://www.vmware.com/support/developer/PowerCLI/</a></span></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">PowerCLI Change Log (great place to see the latest PowerCLI version and release notes)</span></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><a href="https://www.vmware.com/support/developer/PowerCLI/changelog.html">https://www.vmware.com/support/developer/PowerCLI/changelog.html</a></span> </span></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br />Note each release note includes a link to the software needed to run PowerCLI. It's called the compatibility matrix. </span></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><a href="https://www.vmware.com/support/developer/PowerCLI/doc/powercli60r3-compat-matrix.html" style="font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif;">https://www.vmware.com/support/developer/PowerCLI/doc/powercli60r3-compat-matrix.html</a></span></span></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">In my case for 6.0r3 you want to </span></span><br />
<ul>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">run on 2008R2 sp1, 2012R2, 7 sp1, 8.1</span></li>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">have PowerShell 3 or 4</span></li>
<li><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Have .Net framework 4.5 or newer</span></li>
</ul>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">The mentioned windows OSs bring a version of Powershell by default. Find out the version of powershell running on your system with this command:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "courier new" , "courier" , monospace;">$psversiontable [enter]</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">For example, on my Windows 7 SP1 VM, Powershell is at version 2, so it would need to be upgraded first (with a corresponding .net upgrade). Windows 8.1 has version 3 and you would be good to go.</span></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">(Server 2016 and Windows 10 have PowerShell <a href="https://blogs.technet.microsoft.com/heyscriptingguy/2015/08/03/cool-stuff-about-powershell-5-0-in-windows-10/">version 5</a>. Yes, releases have gone in <a href="https://en.wikipedia.org/wiki/Windows_PowerShell#PowerShell_4.0">quick succession</a>, mostly because of DSC. You can read about changes <a href="https://technet.microsoft.com/en-us/library/hh857339.aspx?tduid=(b206760614c25a7ba5f396adb61e1652)(256380)(2459594)(TnL5HPStwNw-RY5WMZ2rRuJsw_xn4GMKEQ)()#BKMK_new50">here</a>. Keep in mind it's not officially supported in PowerCLI yet, but it will be, inevitably.)</span></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Chris Wahl has an excellent series of posts on PowerShell <a href="http://wahlnetwork.com/category/deep-dives/automation-for-operations-series/">here</a>. I especially found this post useful to start setting up your environment:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><a href="http://wahlnetwork.com/2015/08/03/powershell-integrated-scripting-environment-ise/">http://wahlnetwork.com/2015/08/03/powershell-integrated-scripting-environment-ise/</a></span></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">This 15 minute vBrownBag tech talk is about that post and also about version control with Git.</span></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<a href="https://www.youtube.com/watch?v=Pgt54U21LPo"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">https://www.youtube.com/watch?v=Pgt54U21LPo</span></a></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">I found this post helpful as well, even if from 2012</span></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><a href="http://www.virten.net/2012/09/getting-started-with-powercli-5-1-and-powershell-3-0/">http://www.virten.net/2012/09/getting-started-with-powercli-5-1-and-powershell-3-0/</a></span></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">This is my version of the startup script Chris guides you through setting up. I place it in different locations whether it's work (so it only affects my user) or home machine. </span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><b>profile.ps1</b> contents:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "courier new" , "courier" , monospace;">Set-ExecutionPolicy Bypass</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">Set-Location "E:\PowerCLI codes"</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">if ($psISE)</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">{</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">Clear-Host</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">Write-Host 'Oh it is YOU again'</span><br />
<span style="font-family: "courier new" , "courier" , monospace;">}</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><i>I totally took the advice from Chris. This cracks me up since I don't use PowerCLI that often! Mad shout out to <a href="https://twitter.com/ChrisWahl">him</a> since he was very helpful to me throughout the creation of this post :D</i></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">All nice and good in PowerShell, but by default, running the PowerCLI icon on the desktop <b>will not obey </b>the Set-Location, and <b>it will</b> <b>complain</b> because Set-ExecutionPolicy requires running as Administrator.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">To fix this:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">1) Right click the PowerCLI icon, Click Advanced, set to Run as Administrator.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">2) Look at the target on the shortcut. PowerCLI runs its own initialization script, in my case:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">C:\Program Files (x86)\VMware\Infrastructure\vSphere PowerCLI\Scripts\Initialize-PowerCLIEnvironment.ps1</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">This file is set to read-only. Make a backup, fix the permissions until you can save. In my case, for it to respect the path I want, I went to line 269 of the 6.0r3 script which has a "</span><span style="font-family: "courier new" , "courier" , monospace;">cd \</span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">" command. I commented it out and now my desired location in profile.ps1 works. </span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">If you are going to use the 32-bit version of PowerCLI, you would also have to check that shortcut and do the respectful edits. I have not yet found the need to use that link though.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">I'm thinking there's probably a way to have all these little customization tasks scripted so in theory you could just open a command line with administrator privileges, paste your instructions (which would include things such as create file, insert file contents, save, change permissions and file attributes, modify shortcuts, replace string) and not have to make the process of setting up the environment so manual. The ideal scenario is after pasting the instructions, you would close that cmd, double click the PowerCLI icon and you are ready to go.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">I'm only thinking this is possible because PowerShell is meant to be able to do anything you can normally do on Windows GUI. I'm sure as releases of PowerCLI change things you would need to adjust the script a bit, but if you use several jumpboxes this could save you a lot of time.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">PowerShell / PowerCLI feels very powerful. Also have to say having the ISE installed by default is pretty cool. Get in on this, it's looking like it will be quite fun!</span>arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-50443346421866592122016-02-06T15:32:00.000-07:002016-02-06T15:32:03.203-07:00Why learn Powershell?<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><a href="https://en.wikipedia.org/wiki/Windows_PowerShell">PowerShell</a> is a Microsoft technology that runs on Windows and is both a command prompt and a scripting language. As I write this, it's almost 10 years old - it formally first appeared integrated as part of the operating system in Windows Server 2008. It replaces the Windows NT cmd.exe and can be installed as far as Windows XP.</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Why learn Powershell?</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<br />
<ul>
<li><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">If you run Windows systems, this is now your shell and gateway into automation</span></li>
<li><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">If you run VMware, PowerCLI is based on Powershell and is the current best way to script and automate</span></li>
<li><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Microsoft has opened their eyes that the world runs a lot of Linux. Powershell DSC <a href="https://blogs.msdn.microsoft.com/powershell/2015/05/05/powershell-dsc-for-linux-is-now-available/">supports administering Linux</a> and has <a href="https://blogs.msdn.microsoft.com/powershell/2015/10/19/openssh-for-windows-update/">announced it will natively support SSH</a> , and <a href="http://undeadly.org/cgi?action=article&sid=20150708134520">put its money where its mouth is</a> by donating to the OpenBSD project, by itself and also as part of the Core Infrastructure Initiative.</span></li>
</ul>
<br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">So, while there are many ways of doing things, this does not seem to be a fad that will go away soon. In the worst case, your Windows admin skills get a boost, and in the best case, you can manage several technologies with the same base behavior. Thus, I will now make more of an effort to learn PowerShell properly, primarily for VMware scripting, but paying attention to MS and *nix applications as well.</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">I leave you with some good links:</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Main site</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><a href="https://msdn.microsoft.com/powershell">https://msdn.microsoft.com/powershell</a></span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Learning Powershell</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><a href="https://technet.microsoft.com/en-us/scriptcenter/dd742419.aspx">https://technet.microsoft.com/en-us/scriptcenter/dd742419.aspx</a></span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Official PowerShell blog</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><a href="https://blogs.msdn.microsoft.com/powershell/">https://blogs.msdn.microsoft.com/powershell/</a></span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Hey Scripting Guy! Blog (long running Microsoft scripting blog)</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><a href="https://blogs.technet.microsoft.com/heyscriptingguy/">https://blogs.technet.microsoft.com/heyscriptingguy/</a></span>arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-76927642012409112062016-02-05T17:20:00.002-07:002016-10-06T10:05:10.726-06:00ESXi commands for network troubleshooting<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">I thought about making a post for <i>all </i>the commands I tend to use when checking network on an ESXi host.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><a href="http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1003728">KB1003728</a> is an excellent resource on ping and vmkping in ESXi</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><u>List all vmk interfaces and their ip/mask</u></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<b><span style="font-family: "courier new" , "courier" , monospace;">esxcli network ip interface ipv4 get</span></b><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><u><br /></u></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><u>Confirm which mac addresses and MTU settings (and more) each vmk has</u></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<b><span style="font-family: "courier new" , "courier" , monospace;">esxcli network ip interface list</span></b><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">yes, the output is kind of unwieldy...</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<u><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Normal ping</span></u><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<b><span style="font-family: "courier new" , "courier" , monospace;">ping X.X.X.X</span></b><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">gives 3 pings, auto-chooses a vmk depending on local route table</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><u>Continuous ping</u></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<b><span style="font-family: "courier new" , "courier" , monospace;">ping X.X.X.X -c 1000</span></b><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Haven't found the unlimited option, but 1000 pings does the job normally. Notice you don't get "request timed out" messages when pings fail, it just stalls and once they come back the icmp_seq counter jumped over some requests.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<u style="font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif;">Ping testing jumbo frames</u><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<b><span style="font-family: "courier new" , "courier" , monospace;">ping -d -s 8000</span></b><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">-d means don't fragment the packet (keep the jumbo size)</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">-s size. Jumbo is anything over 1500 but over 8000 normally tests what you want storage wise. Rarely does a packet of 9000 survive a highly available switch setup since vendors include some bits for their stuff.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<u style="font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif;"><br /></u>
<u style="font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif;">Ping from a particular VMKernel IP</u><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> </span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<b><span style="font-family: "courier new" , "courier" , monospace;">vmkping -I vmk# X.X.X.X</span></b><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">great for testing a particular interface, just isolate the vmk there. Also great to check on a storage network such as iSCSI that each VMK can reach all IPs.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><i><br /></i></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><i>Note - you can combine size and interface, like</i></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<b><span style="font-family: "courier new" , "courier" , monospace;">vmkping -d -s 8000 -I vmk# X.X.X.X</span></b><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><u><br /></u></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><u>See routing table (ipv4)</u></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<b><span style="font-family: "courier new" , "courier" , monospace;">esxcli network ip route ipv4 list</span></b><br />
<div>
<br /></div>
<div>
<br /></div>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><u>Traceroute</u></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<b><span style="font-family: "courier new" , "courier" , monospace;">traceroute X.X.X.X</span></b><br />
<br />
<br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><u>Traceroute using a particular interface</u></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<b><span style="font-family: "courier new" , "courier" , monospace;">traceroute X.X.X.X -i vmk#</span></b><br />
<br />
<br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><u>Set a nic to auto speed</u></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span><b><span style="font-family: "courier new" , "courier" , monospace;">esxcfg-nics -a vmk#</span></b><br />
<b><span style="font-family: "courier new" , "courier" , monospace;"><br /></span></b>
<br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Leave me a comment with any others you frequently use!</span>arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com1tag:blogger.com,1999:blog-4925591696712284857.post-53802911624532811542016-02-05T12:31:00.002-07:002016-02-05T17:46:09.114-07:00Good steps to do when upgrading VCSA 5.5<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">First of all, I recommend setting the VMX advanced setting on the VCSA device explained here</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<a href="http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=196"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=196</span></a><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">This will make repeated characters go away. The VM has to be off to either edit the VMX file or add </span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">My steps to have a great chance of success:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><b>0 Have a backup plan</b></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Take a snapshot of your Vcenter for painless reversal in case of trouble, and make sure your latest VM backup is a good one.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<b><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">1 Confirm your root account works</span></b><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">easy enough through VAMI or on the VM console. If it's not working this is the KB you want.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<a href="http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2069041"><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2069041</span></a><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Since you do this with vCenter unavailable, make sure you know on what ESXi host your vcenter is, and connect to it directly.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">If you really can't even login to Grub try the SUSE rescue CD like explained <a href="https://communities.vmware.com/message/2552169">here</a> - I haven't had to do it yet so I can't certify it.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<b><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">2 Confirm current build and update availability</span></b><br />
<b><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></b>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Also easy to do through VAMI. Write it down just in case you need to call support.</span><br />
<b><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span></b>
<b><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">3 Confirm space, in VAMI and SSH shell</span></b><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">To enable shell, you have to enable it in the VAMI - check <a href="https://pubs.vmware.com/vsphere-55/index.jsp#com.vmware.vsphere.vcenterhost.doc/GUID-8DC793FF-1E00-43A1-B85C-070414B9F9B0.html">https://pubs.vmware.com/vsphere-55/index.jsp#com.vmware.vsphere.vcenterhost.doc/GUID-8DC793FF-1E00-43A1-B85C-070414B9F9B0.html</a></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">I like checking through the shell because it shows more than the VAMI interface, which only shows System, Database, Logs and Coredumps. This is just making sure some other disk isn't full.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><i>What you want to see if enough space in System and Database and Logs - running out of space on any of these could case the update to fail!</i></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">If you ran out of disk space and you can't move/delete something (like old syslogs you no longer need) I like <a href="http://vcdx56.com/2014/11/13/increase-vcenter-server-appliance-database-disk/">this gParted method</a> better than VMware's <a href="http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2056764">make another disk and copy everything over</a> method.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<b><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">4 Update and reboot</span></b><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span><span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Check for updates (you have to have internet connection)</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Install updates (normally you get logged out when it completes)</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Log back in, browse the Update tab and it should have a note saying a reboot is needed to complete<br />Reboot from the system tab and monitor the VM console for any scary messages, and confirm the VCSA boots properly again.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><b><br /></b></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><b>5 Test and cleanup</b></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Login to VAMI again and check the services are up and the new version is displayed</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Login through web client and C# client, make sure AD authentication is working if you have it setup</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Browse through the web client to the vCenter, Monitor tab, and "Service Health" sub-tab. You should have green checks all the way.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Disable any SSH processes you had to enable.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Delete the snapshot and celebrate :D</span>arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-50608519700859028972016-01-18T19:37:00.002-07:002016-01-18T19:38:36.780-07:00Quick notes with OpenBSD<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Current learning goal is making OpenBSD run Doom on a laptop i love - <a href="http://arielsanchezmora.blogspot.com/2016/01/cheap-expandable-laptop-i-really-like.html">AcerES1-111M-P2YU</a>.</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Bold is the command, italics a variable</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Seeing your mail:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> <b>mail </b>[enter]</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> read mail with pager:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> <b>more</b> <i>1</i> [enter] #if you don't specify an item number it will read the first one</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> Exit without saving</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> <b>x</b> [enter]</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Set an interface to start with ipv4 DHCP:</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> check your network interface name with <b>ifconfig</b></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> create a file called \etc\hostname.<i>interfacename </i>#for example em0 would be \etc\hostname.em0</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> in the file put a single line that says</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> <b>dhcp</b></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"> save. takes effect on next reboot</span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;"><br /></span>
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Reboot: <b>reboot</b></span><br />
<span style="font-family: "helvetica neue" , "arial" , "helvetica" , sans-serif;">Shutdown immediately: <b>shutdown -p now</b></span>arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com0tag:blogger.com,1999:blog-4925591696712284857.post-84921128636177195412015-12-10T21:48:00.002-07:002015-12-28T17:23:09.844-07:00Migrating local users from one windows computer to another (2003 to 2008 32 bit)<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">This is for local users. I think you can do some domain things as well with these tools, but it's not my particular case today. Also, there are newer ways of doing this with PowerShell, but I've used this method to move from Windows 2000 to 2003 before, and today from 2003 to 2008 32 bit. We can't use a newer version because of incompatibility of CopyPWD with 64 bit.</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Also, the <a href="http://www.systemtools.com/free.htm">official</a> version of CopyPWD works for 2003 and older, but for 2008 32 bit, use the v1.1 named <b>copypwd2</b> that is available in the links on this forum <a href="http://www.systemtools.com/toolboard/showthread.php?810-Copypwd-with-windows-storage-server-2003-R2-64/page2">post</a> . Again, I have not been able to get this to work on 64 bit, not even with the service method, which to me seems flawed, but I tried to fix and also couldn't get it to work. Please tell me in comments if you do.</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<u><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Get information from original server:</span></u><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><b>Addusers</b> copies the user information, but does not copy passwords. Check options <a href="http://ss64.com/nt/addusers.html">here</a> . Run from an elevated prompt.</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">/d is dump</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">Addusers.exe /d users.txt</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Open the file and you will users under [User], [Global] which I believe is not used, and Local Groups in [Local]</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">I delete everything except [User] for my purposes. Also, I open this in excel, and fill in a temporary password, otherwise I will get errors when creating the users, and save as a <i>csv</i>. Copy to the new server with the same executable.</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><b>CopyPWD</b> copies the password hash - note you <i>have to run this from a console session, not regular RDP</i><b>.</b> Either use a real console or establish a console RDP session, and an elevated prompt (note, if using TS with /admin , only the old version worked for me).</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">CopyPwd DUMP > copypwd.txt</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">This creates a file with all local users and a hash - sensitive information, by the way. Copy to the new server with the same executable and dll. Please note this has to be the file name, as the SET command doesn't take arguments as far as I saw from the instructions.</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<u><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Apply information on new server:</span></u><br />
<u><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span></u>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Copy the output files and from an elevated prompt, first create the users:</span><br />
<u><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span></u>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">/c is create</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">/p:e is passwords never expire, and implies l which is users do not have to change passwords. This is my particular case, you will have to figure out what switch to use in yours.</span><br />
<u><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span></u>
<span style="font-family: Courier New, Courier, monospace;">Addusers.exe /c Users.csv /p:e</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">You should see a lot of messages creating users, and your users, with their comments should be on the server now. Alas, they all have the temp passwords you set in the CSV. To set the password use the CopyPWD command again:</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">For CopyPWD the command is </span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">CopyPWD SET</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Please note the copypwd.txt with the password hashes has to be in the same directory. If the user existed on the server, this process set the old password. You can now try the local accounts. Also - I had to use the new version of CopyPWD at <a href="http://www.systemtools.com/download/copypwd2.zip">http://www.systemtools.com/download/copypwd2.zip</a> </span><span style="font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif;">for this to work on Windows 2008 32 bit.</span><br />
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Hit me up on twitter if you have other problems <a href="https://twitter.com/arielsanchezmor">@arielsanchezmor</a></span>arielsanchezmorahttp://www.blogger.com/profile/07147909608724257379noreply@blogger.com1