All posts by cdstealer

Getting The Basics Done

This is open to interpretation, but this is what worked for me on the Kobra S1.

Bed Levelling

This is critical. If your bed is not level, say goodbye to a good, consistent prints. This should be relatively straight forward to get done. I'll explain my method.

First thing is to make sure you build plate is clean and free of any adhesives or grease. Let it soak in the sink for a few minutes in some hot, soapy water, drying it thoroughly without leaving any fibres or other debris.

  • Make sure the print bed is also secured. On the S1 there are 4 hex screws that hold it down. I found that loosening these and then tightening them in an X order (not too tight, finger and thumb tight with a little pinch)
  • Next place the build plate on the bed.
  • Open your slicer and load this stl. 240mm x 240mm x 0.2mm

Set this to print. It should only take 30mins depending on your speed.

The next part of this equation is the Z-offset. This is the distance to the build plate from the nozzle tip. This will vary and will also change when/if you change the nozzle.
This is also important as getting the first layer down smoothly will ensure good adhesion to the plate and good layer bonding. I ended up printing 3 of these until I was happy. I started with an offset of -0.25mm which resulted in a rough texture and "wave" like patterns. I settled on -0.1mm which got me near perfect, the finish was uniform with most of it smooth like paper.

I used Elegoo PLA+ at 220C and bed temp. of 70C. I've had really good results with Elegoo PLA+, so I tend to stick with that.

There are many options in your slicer that will also need adjusting to get good results like, extrusion width, print speed, layer height etc etc. In my settings, I slow down the print a little as I don't need fast speed and would rather have quality. If you use TPU, you will need to go considerably slower.

MG4 Speaker Upgrade

The factory speakers in the MG4 Xpower do produce a descent-ish sound, but I find the sound muddy and the speakers inadequate, especially at higher volumes.
The stock speakers are 25W and become uncomfortable when doing 70mph. The speakers are moulded and glued into the mount, so it's all in one. I couldn't see any after market mounts that I was comfortable buying, so I found a model here and printed my own using ABS+ filament from Amazon. 1kg will manage it if nothing goes wrong. Obviously it did, so ended up having to buy a 2nd spool. I did have to drill my own holes and melt some brass screw cuffs into the adaptor as the 4 holes in the model didn't align with these speakers.
I did price them for a 3rd party to print them, but that was going to cost well over £720.
I bought 2 pair of JBL Stage2 65CF which are 90W RMS at a good price from Amazon.

The thick cuff is from AliExpress. It maybe too thick as the door cards were "interesting" to get seated at the bottom of the door.

This is what they look like when put together:

Took the door cards off and remove the old speakers. I didn't want to cut the original wires, so I purchased these connectors from AliExpress

Also got some sound deadening mats, so they went under the speaker mounts and wires to reduce any vibrations. I did do more, but unfortunately I didn't take any more pictures.

After putting everything back together, it was time to test. I have to say, the sound is instantly clearer with much better bass. So all in all, I'm very pleased with the result. I haven't replaced the tweeters yet, so an update maybe on the cards. Watch this space.

Anycubic Kobra S1

This is for anyone running Prusaslicer.

I decided to upgrade from my Creality Ender 3 pro and found this printer which seemed to do everything I needed for a good price.

After some trial and error and inspecting the gcode of some builtin test models in the printer firmware. I came up with this config for the printer and PLA/ABS/TPU filaments. Though I'm always tweaking it.

Last updated: 9th May 2026

It's not perfect, but depending on the print, it does a pretty good job.

There is an inbuilt camera, but unfortunately I haven't been able to stream the feed yet. Apparently if you install VLC and open the network stream to http://<IP ADDR>:18088/flv it should work. But I get nothing, not even an error.
Watch this space as I will fix this!

Linux Traffic Shaping

Sometimes you just gotta stop people taking all your bandwidth.

Below is the process I used to restrict the speed of data on port 22. Yes scp has a built in limiter, but when people don't respect your authority, you got to break out the big guns.

Step 1.  Load required kernel modules and set device.

modprobe sch_netem act_police cls_flow cls_route cls_matchall cls_basic cls_flower cls_u32 cls_bpf cls_fw sch_htb sch_fq_codel sch_sfq

DEV=$(ip a | grep "2:" | cut -d':' -f2 | sed 's/\s//g')

Step 2.  Add a qdisc (Queue Discipline)

tc qdisc add \
dev "${DEV}" \
root \
handle 1: \
htb \
default 30

Step 3.  Create a single top level class which limits total bandwidth

tc class add \
dev "${DEV}" \
parent 1: \
classid 1:1 \
htb \
rate 1gbit

Step 4.  Create a child class

tc class add \
dev "${DEV}" \
parent 1:1 \
classid 1:10 \
htb \
rate 20mbit \
ceil 30mbit \
prio 1

Step 5.  Attach a leaf qdisc to the class

tc qdisc add \
dev "${DEV}" \
parent 1:10 \
sfq

Step 6.  Add filter for priority traffic

tc filter add \
dev "${DEV}" \
parent 1: \
protocol ip \
prio 1 \
u32 \
match ip dport 22 0xffff \
flowid 1:10

To remove the config from the interface, execute the following:

tc qdisc del \
dev "${DEV}" \
root \
htb

C64 Gnome Terminal

Create the file .bash_c64 in your home directory and populate with the following:

#!/usr/bin/env bash
export PS1=$
row=0
mem=$(grep MemTotal /proc/meminfo | awk '{print $2}')
mem=$((${mem}/1024))
free=$(( $(vmstat | sed '1,2d' | awk '{print $4}') * 4096 * 2))
text=("" "**** BASH $BASH_VERSION ****" "" "${mem}K RAM SYSTEM ${free} BASIC BYTES FREE" "")
clear
for f in "${text[@]}"; do
  columns=$(( ($(tput cols) - ${#f}) / 2))
  tput cup $(( row++ )) ${columns}
  echo "${f}"
done
echo "READY."

Now we'll source the file whenever a new terminal is opened. Open .bashrc and at the bottom enter the following:

source ~/.bash_c64

Next we'll install the c64 font. Download the file below and unpack to /home/<user>/.local/share/fonts

Now open the terminal preferences and create a new profile and configure the basic settings. I've chosen 49 chars wide purely for aesthetics but this will differ depending on your resources. The text will be centred regardless.

Now to define the colours. I set the defaults to the following values:

Text: #7c71da
Background: #3e32a2

Set the profile to be the default (optional) and close.
You'll need to close and reopen terminal and you should be presented with a c64esk termnial.

2 UPS 1 Server

So I found myself in a situation where I had to run 2 UPS's due to larger plugs not being able to fit if the adjacent socket was occupied. Obviously having 2 UPS's with the ability to control the server is a bad idea and typically the driver only accounts for one UPS at any one time.

This takes about 5-10 mins to setup and seems to work as expected.
Both UPS's are APC, a 1050VA and a 700ES. Both are connected to the server via USB. The driver is apcupsd.

Make sure both UPS's are powered on and connected via USB.
Make a note of the Bus / Device.

# lsusb
...
Bus 001 Device 004: ID 051d:0002 American Power Conversion Uninterruptible Power Supply
Bus 001 Device 005: ID 051d:0002 American Power Conversion Uninterruptible Power Supply
...

Let's make sure udev sees them.

# udevadm info --attribute-walk --name=/dev/bus/usb/001/004 | egrep 'manufacturer|product|serial'
ATTR{manufacturer}=="APC"
ATTR{product}=="Back-UPS ES 700G FW:871.O3 .I USB FW:O3 "
ATTR{serial}=="#########1 "
ATTRS{manufacturer}=="Linux 6.12.17-gentoo xhci-hcd"
ATTRS{product}=="xHCI Host Controller"
ATTRS{serial}=="0000:00:14.0"
# udevadm info --attribute-walk --name=/dev/bus/usb/001/005 | egrep 'manufacturer|product|serial'
ATTR{manufacturer}=="American Power Conversion"
ATTR{product}=="Back-UPS BE1050G2 FW:497200G -497300G "
ATTR{serial}=="##########2"
ATTRS{manufacturer}=="Linux 6.12.17-gentoo xhci-hcd"
ATTRS{product}=="xHCI Host Controller"
ATTRS{serial}=="0000:00:14.0"

Let's create a rule.

# vim /etc/udev/rules.d/ups.rules

# Main UPS
SUBSYSTEM=="usb", ATTR{manufacturer}=="American Power Conversion", ATTR{serial}=="########1 ", OWNER="root", SYMLINK+="ups-server"
# Secondary UPS
SUBSYSTEM=="usb", ATTR{manufacturer}=="APC", ATTR{serial}=="#######2", OWNER="root", SYMLINK+="ups-devices"

Note: The older of the 2 had spaces at the end of the serial number, so I kept them'

Reload Udev

# udevadm control --reload

Now let's check them udev rules.

# udevadm trigger -v -attr-match=serial="########1  "
# udevadm trigger -v -attr-match=serial="########2"
# ls -l /dev

You should see:

/dev/ups-devices -> bus/usb/001/004
/dev/ups-server -> bus/usb/001/005

Install the driver.

# emerge -av apcupsd
# systemctl stop apcupsd
# systemctl disable apcupsd
# cd /etc/apcupsd/
# mkdir apcupsd-devices
# mkdir apcupsd-server
# cp apcupsd.conf apcupsd-devices.conf apcupsd-server.conf

Modify as required:

apcupsd-server.conf

UPSNAME 1050VA
UPSCABLE usb
UPSTYPE usb /dev/ups-server
DEVICE
POLLTIME 60
LOCKFILE /run/apcupsd/
SCRIPTDIR /etc/apcupsd/apcupsd-server
PWRFAILDIR /etc/apcupsd/apcupsd-server
NOLOGINDIR /etc
ONBATTERYDELAY 6
BATTERYLEVEL 5
MINUTES 3
TIMEOUT 0
ANNOY 300
ANNOYDELAY 60
NOLOGON disable
KILLDELAY 0
NETSERVER on
NISIP 127.0.0.1
NISPORT 3551
EVENTSFILE /var/log/apcupsd-server.events
EVENTSFILEMAX 10
UPSCLASS standalone
UPSMODE disable
STATTIME 0
STATFILE /var/log/apcupsd-server.status
LOGSTATS off
DATATIME 0
apcupsd-devices.conf

UPSNAME 700ES
UPSCABLE usb
UPSTYPE usb /dev/ups-devices
POLLTIME 60
SCRIPTDIR /etc/apcupsd/apcupsd-devices
PWRFAILDIR /etc/apcupsd/apcupsd-devices
ONBATTERYDELAY 6
BATTERYLEVEL -1
MINUTES -1
TIMEOUT 0
ANNOY 0
ANNOYDELAY 0
NOLOGON disable
KILLDELAY 0
NETSERVER on
NISIP 127.0.0.1
NISPORT 3552
EVENTSFILE /var/log/apcupsd-devices.events
EVENTSFILEMAX 10
UPSCLASS standalone
UPSMODE disable
STATTIME 0
STATFILE /var/log/apcupsd-devices.status
LOGSTATS off
DATATIME 0

There needs to be 2 versions of the daemon running on different ports. The devices config does not allow for server control.

Copy the following scripts into the script directory specified in the configs.

apccontrol
changeme
commfailure
commok
offbattery
onbattery
safe.apccontrol

Startup Daemon (systemd)

Copy the systemd unit file for each daemon.

# cp /usr/lib/systemd/system/apcupsd.service /usr/lib/systemd/system/apcupsd-server.service

# cp /usr/lib/systemd/system/apcupsd.service /usr/lib/systemd/system/apcupsd-devices.service

Adjust each unit file accordingly:

[Service]
ExecStart=/sbin/apcupsd -b -f /etc/apcupsd/apcupsd-server.conf -P /run/apcupsd/apcupsd-server.pid
[Service]
ExecStart=/sbin/apcupsd -b -f /etc/apcupsd/apcupsd-devices.conf -P /run/apcupsd/apcupsd-devices.pid

Enable and start the services.

# systemctl --now enable apcupsd-server
# systemctl --now enable apcupsd-devices

If all went to plan, you should now see both daemons running.

# systemctl status apcupsd-server
● apcupsd-server.service - APC UPS Monitor
Loaded: loaded (/usr/lib/systemd/system/apcupsd-server.service; enabled; preset: disabled)
Active: active (running) since Sun 2025-03-09 20:58:55 GMT; 23h ago
Invocation: bea2f2a029de4384ba3b9fdb62dccc27
Main PID: 18929 (apcupsd)
Tasks: 3 (limit: 38270)
Memory: 2M (peak: 6.6M)
CPU: 2.669s
CGroup: /system.slice/apcupsd-server.service
└─18929 /sbin/apcupsd -b -f /etc/apcupsd/apcupsd-server.conf -P /run/apcupsd/apcupsd-server.pid
Mar 09 20:58:55 hostname systemd[1]: Started APC UPS Monitor.
Mar 09 20:58:55 hostname apcupsd[18929]: apcupsd 3.14.14 (31 May 2016) gentoo startup succeeded
Mar 09 20:58:55 hostname apcupsd[18929]: NIS server startup succeeded
Mar 09 21:02:13 hostname apcupsd[18929]: Communications with UPS restored.
# systemctl status apcupsd-devices
● apcupsd-devices.service - APC UPS Monitor
Loaded: loaded (/usr/lib/systemd/system/apcupsd-devices.service; enabled; preset: disabled)
Active: active (running) since Sun 2025-03-09 20:58:48 GMT; 23h ago
Invocation: 6079648a84d74eda9d48aa43e31aaf14
Main PID: 18820 (apcupsd)
Tasks: 3 (limit: 38270)
Memory: 408K (peak: 4.8M)
CPU: 2.662s
CGroup: /system.slice/apcupsd-devices.service
└─18820 /sbin/apcupsd -b -f /etc/apcupsd/apcupsd-devices.conf -P /run/apcupsd/apcupsd-devices.pid
Mar 09 20:58:48 hostname systemd[1]: Started APC UPS Monitor.
Mar 09 20:58:48 hostname apcupsd[18820]: apcupsd 3.14.14 (31 May 2016) gentoo startup succeeded
Mar 09 20:58:48 hostname apcupsd[18820]: NIS server startup succeeded
Mar 09 21:02:13 hostname apcupsd[18820]: Communications with UPS restored.

With this setup, I get an email should there be any interruption on either UPS or when the battery requires replacing.

Go on, give them a test and cut the power ;)

GitWeb

Emerge git with the required USE flags:

emerge -aq dev-vcs/git curl gpg iconv nls pcre perl safe-directory webdav cgi cvs highlight keyring tk

Configure Apache vhosts (NO AUTH):

<VirtualHost *:443>
	  SSLEngine on
        <FilesMatch "\.(cgi|shtml|phtml|php)$">
          SSLOptions +StdEnvVars
        </FilesMatch>
        <Directory "/var/www/localhost/cgi-bin">
          SSLOptions +StdEnvVars
        </Directory>
          SSLCertificateFile /path/to/cert.crt
          SSLCertificateKeyFile /path/to/key.key
          ServerName git.example.com
          DocumentRoot /usr/share/gitweb
	  Options ExecCGI FollowSymLinks SymLinksIfOwnerMatch
	<Location />
	  SSLRequireSSL
	  Require all allowed
          RewriteOptions inherit
          AllowOverride All
	</Location>
        <Directory /usr/share/gitweb>
          Require all granted
          RewriteOptions inherit
          AllowOverride All
          Options ExecCGI FollowSymLinks SymLinksIfOwnerMatch
          <Files gitweb.cgi>
            SetHandler cgi-script
          </Files>
        </Directory>
	  DirectoryIndex gitweb.cgi
          SetEnv  GITWEB_CONFIG  /etc/gitweb.conf
        <IfModule headers_module>
          RequestHeader set X-HTTPS 1
        </IfModule>
</VirtualHost>

Basic /etc/gitweb.conf
$projectroot = '/path/to/gitroot';
@git_base_url_list = ( 'git@example.com', );
$site_name = "Smack my git up!";
$default_projects_order = "age";
$projects_list_group_categories = 1;
$feature{'blame'}{'default'} = [1];
$feature{'highlight'}{'default'} = [1];

Adjust git-daemon
Gitweb allows browsing repositories via HTTP, but if you will be pulling from your repositories using the git:// protocol, you'll also want to run git-daemon. On Gentoo, this is really easy, just edit /etc/conf.d/git-daemon as you see fit. eg:

GITDAEMON_OPTS="--syslog --enable=receive-pack --export-all"

This exports all repositories within the git root. It also allows pushing file to the server.

You will also need to ensure that any clients to connect to port tcp/9418 (default)

Setup the git user

useradd -m git -d /path/to/githome -s /usr/bin/git-shell
mkdir /path/to/githome/.ssh
cat /home/A_USER/.ssh/id_rsa.pub > /path/to/githome/.ssh/authorized_keys
chmod 700 /path/to/githome/.ssh
chmod 600 /path/to/githome/.ssh/authorized_keys
setfacl -PRdm u:apache:rwx /path/to/githome

Create an Empty Repository

su -s /bin/bash git
cd
mkdir name.git
cd name.git
git init --bare
echo "This is a test" > description
git remote add origin git@example.com:name.git

Set Configuration Options

Execute the following on a client (optional)
To see available options execute: git help --config

git config --global init.defaultBranch master
git config --global core.editor vim
git config --global alias.st status
git config --global alias.co checkout
git config --global alias.br branch
git config --global alias.up rebase
git config --global alias.ci commit
git config --global user.name "A_USER"
git config --global user.email A_USER@example.com
git config --global color.ui true
git config --global --add --bool push.autoSetupRemote true

Clone Repo

cd to local git
git clone git@example.com:name.git
cd name
touch README.md
git add README.md
git ci -m "Initial Setup"
git push
git br branch_name
git co branch_name
mkdir testdir
touch testdir/testfile
git add .
git ci -m "init"
git push # Pushes to your upstream branch
git push origin branch_name:master # Pushes to the master branch

Web Authentication

Note: I did not have any success using dbmmanage. Use htdbm instead.

Create the database file and add a user:
Do not store this in the root of web eg: /var/www/locahost/htdocs, but make sure apache can get to the file.

htdbm -cm -TGDBM <path/to/dbm_file> <user>

-c - create db
-m - use MD5 hashing
-T - set the format of the db file

Set the permission for apache:

chown apache: <path/to/dbm_file>
chmod 640 <path/to/dbm_file>

Add code to vhosts:
You can apply this to files, directories etc. Here I've done it for the whole subdomain. Replace the 3 highlighted italic lines above with the code below, excluding the start/end tags.

    <Location />
      AuthName "Private"
      AuthType Basic
      AuthBasicProvider dbm
      AuthDBMType GDBM
      AuthDBMUserFile "/path/to/dbm_file"
      Require valid-user 
      Require all denied
      RewriteOptions inherit
      AllowOverride All
    </Location>

Reload apache and browse to protected area and you should be prompted to authenticate.

A good explanation can be found here for the web config.

Security Oneliners

Check encryption of network protocols

SSH

nmap --script ssh2-enum-algos -p 22 example.com

Which will output something like:

PORT   STATE SERVICE
22/tcp open ssh
| ssh2-enum-algos:
| kex_algorithms: (7)
| curve25519-sha256
| curve25519-sha256@libssh.org
| diffie-hellman-group18-sha512
| diffie-hellman-group16-sha512
| diffie-hellman-group-exchange-sha256
| ext-info-s
| kex-strict-s-v00@openssh.com
| server_host_key_algorithms: (4)
| rsa-sha2-512
| rsa-sha2-256
| ecdsa-sha2-nistp256
| ssh-ed25519
| encryption_algorithms: (6)
| chacha20-poly1305@openssh.com
| aes256-gcm@openssh.com
| aes128-gcm@openssh.com
| aes256-ctr
| aes192-ctr
| aes128-ctr
| mac_algorithms: (3)
| hmac-sha2-256-etm@openssh.com
| hmac-sha2-512-etm@openssh.com
| umac-128-etm@openssh.com
| compression_algorithms: (2)
| none
|_ zlib@openssh.com

Nmap done: 1 IP address (1 host up) scanned in 0.09 seconds

WEB/FTP/MTA

nmap --script ssl-enum-ciphers -p 443 example.com
PORT    STATE SERVICE
443/tcp open https
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
| TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 2048) - A
| TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (dh 2048) - A
| TLS_DHE_RSA_WITH_AES_128_CCM (dh 2048) - A
| TLS_DHE_RSA_WITH_AES_128_CCM_8 (dh 2048) - A
| TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A
| TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 2048) - A
| TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (dh 2048) - A
| TLS_DHE_RSA_WITH_AES_256_CCM (dh 2048) - A
| TLS_DHE_RSA_WITH_AES_256_CCM_8 (dh 2048) - A
| TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A
| TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256 (dh 2048) - A
| TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384 (dh 2048) - A
| TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA (dh 2048) - A
| TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 (dh 2048) - A
| TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA (dh 2048) - A
| TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 (dh 2048) - A
| TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (dh 2048) - A
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
| TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A
| TLS_RSA_WITH_AES_128_CCM (rsa 2048) - A
| TLS_RSA_WITH_AES_128_CCM_8 (rsa 2048) - A
| TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A
| TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A
| TLS_RSA_WITH_AES_256_CCM (rsa 2048) - A
| TLS_RSA_WITH_AES_256_CCM_8 (rsa 2048) - A
| TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A
| TLS_RSA_WITH_ARIA_128_GCM_SHA256 (rsa 2048) - A
| TLS_RSA_WITH_ARIA_256_GCM_SHA384 (rsa 2048) - A
| TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (rsa 2048) - A
| TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 (rsa 2048) - A
| TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (rsa 2048) - A
| TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 (rsa 2048) - A
| compressors:
| NULL
| cipher preference: client
| TLSv1.3:
| ciphers:
| TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
| TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
| cipher preference: client
|_ least strength: A

Nmap done: 1 IP address (1 host up) scanned in 0.26 seconds

Awk One Liners

Consider the output of "uptime"

$ uptime
11:19:07 up 7 days, 23:46, 1 user, load average: 0.12, 0.41, 0.34

You could use, cut, grep etc etc to pull out the 5 minute average value.

$ uptime | awk -F' ' '{print substr($10, 1, length($10)-1)}'
0.12

This takes the value of the 10th field starting at the 1st character, then take the length of field 10 and removes the last character.

Apache Custom LogFormats

Take the leg work out of reading your apache logs by converting them to a structured format that's easy to read. Enter JSON :)

Create the file /etc/apache2/vhosts.d/00_default_logging.conf
You will also need to ensure the "logio_module" is enabled.

For the access log, I use the format: Apache doc.

LogFormat "{\"time\":\"%{msec}t\", \"bytes_in\":\"%I\", \"bytes_out\":\"%O\", \"cookie\":\"%{Cookie}i\", \"server\":\"%v\", \"dest_port\":\"%p\", \"http_content_type\":\"%{Content-type}i\", \"http_method\":\"%m\", \"http_referrer\":\"%{Referer}i\", \"http_user_agent\":\"%{User-agent}i\", \"ident\":\"%l\", \"response_time_microseconds\":\"%D\", \"client\":\"%h\", \"remoteAddr\":\"%a\", \"status\":\"%>s\", \"uri_path\":\"%U\", \"uri_query\":\"%q\", \"user\":\"%u\"}" apache_json

And for the error log, I use: Apache doc.

ErrorLogFormat "{\"time\":\"%{msec}t\", \"client\":\"%a\", \"log_level\":\"%l\", \"pid\":\"%P\", \"srcln\":\"%F\", \"error_code\":\"%E\", \"message\":\"%M\"}"

In the vhost.conf I have the following at the bottom of my VirtualHost block:

<VirtualHost>
    ...
    CustomLog "/var/log/apache2/ssl_access.log" apache_json
    ErrorLog /var/log/apache2/ssl_error.log
</VirtualHost>

Give the command to test the config is sane:

apachectl configtest

If nothing is returned, go ahead and restart apache.
This also makes importing the logs much easier into tools like ELK or Splunk.