Ever wanted to authenticate ssh using keys, but allowing only a specific command to be run? It’s actually very easy:

Forced command

If the options phrase at the beginning of a line (in authorized_keys) contains the keyword command=”string”, then any ssh connection that authenticates using that particular key will only run the command specified, even if the command line it was given specified another command.

Nice

..and it works

My wife and I drove 2 hours (from The Hague) to Carparc (Haaksbergen) and had a look at a Kia Sorento.

..and then my story ends because..

Reviewing Carparc got us a fax from their lawyer, threatening to take us to court!! I still believe that it should be allowed to give your opinion about dealers and their behavior, but I simply do not want to have to get a lawyer to prove my case.

So, my new review is: I do not like Carparc due to their attitude and they will send a lawyer if you try to write a negative review.. Saying this can’t be illegal?

Cheers
/Thomas Mathiesen

January 5th 2012 (UPDATE)

Good news: The company Carparc went bankrupt in September 2010!! Here is some info in Dutch.

[root@server ~]# xm console myserver
xenconsole: Could not open tty `/dev/pts/4′: No such file or directory

The problem is fixed by running xenconsoled command

/Thomas

KVM with virtual manager is a breeze on Ubuntu 9.04, but if you want bridging it’s a whole different story.

So, here’s a note-to-self;

1. Setup br0 on Ubuntu (https://help.ubuntu.com/community/KVM)
2. Add your user to group libvirt and tun (create if needed)
3. run virsh
4. dump xml file of virtual guest
5. change from ‘user’ to ‘bridge’:

6. import xml (define /path/to/xml/file)
7. start virtual machine

ta-ta

My canon has an option called “calibration-cache”, which Brother doesn’t understand. If you run Ubuntu and gscan2pdf, just do this to get rid of the problem:

1. Open gscan2pdf
2. Click “scan”
3. If the new window starts by showing the canon scanner, change that to Brother.
4. Try to scan.. you will probably see the error “unknown option…”.
5. Close gscan2pdf and start it again..

After restarting gscan2pdf, it’ll default to the Brother scanner if that was the last one that you had chosen.. and only the Brother options are loaded.

Happy Linux’ing

/Thomas

1. Stop the virtual server that is using the loop filesystem
2. Add some extra space to your loop filesystem file
# dd if=/dev/zero bs=1024k count=1024 >> loop_image_file

This adds 1GB to the end of a file called loop_image_file (make sure to use the append output redirector >> not a single >, otherwise you’ll have an empty 1GB file!)

3. Force a check on the resized/increased filesystem
# e2fsck -f loop_image_file

4. Resize the filesystem within the loop filesystem file
# resize2fs loop_image_file

5. Start the virtual server again

myuser@mydesktop:/tmp$ sudo /sbin/poweroff
password:

So, I added myself to the /etc/sudoers file:
myuser ALL = NOPASSWD: /sbin/poweroff

and it simply DID NOT work!

I came across a post telling me why…
The reason is that /etc/sudoers is being read from the bottom and up. So, I was in a group that was mentioned on the bottom, which required passwords for everything. Now I move the line (myuser ALL = NOPASSWD: /sbin/poweroff) to the bottom of the file, and my gnome launcher works fine!

xm create -c whateverdomain
Some pygrub output…
and then.. Error: (4, ‘Out of memory’, “xc_dom_boot_mem_init: can’t allocate low memory for domain\n”).

Googling this for a few hours and actually trying different distros (even trying out Lenny!) gave me nothing. One post (that I finally found) says this issue maybe caused by trying to start an image (created on a 64 bit Xen) on a 32bit Xen.

So now I am installing CentOS 5.3 64bit on my Vaio laptop. It comes with a Centrino (Core 2 Duo I believe).

and runs like a charm