serverfault.com

VN:F [1.9.22_1171]
Rating: 6.0/10 (1 vote cast)

Common Server issues – FAQs and answers from those in the know

wget and curl download a specific file only partially [migrated]

18 February 2026 @ 7:10 pm

Update: I just tried wget2 with --force-sitemap option. At least the length is shown now, but the file is still not fully loaded. wget2 -v --force-sitemap -S -o log/wget.log -U "${UA}" "$URL" -O ${TEMP_DIR}/sitemap_${i}.xml The Log Output [0] Downloading 'https://example.org/wp-sitemap-posts-post-3.xml' ... Saving '/tmp/example.org-GKJ8j1AWO4/sitemap_3.xml' # got header 396 bytes: :status: 200 content-type: application/xml; charset=UTF-8 content-length: 25219 date: Wed, 11 Feb 2026 10:06:41 GMT content-encoding: gzip server: Apache/2.4.66 (Debian) vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 a76as87df6a8s7d6fs7dad76f.cloudfront.net (CloudFront) x-amz-cf-pop: MAD56-P4 x-amz-cf-id: ad76fas7d6f8as7d6f8asdas6df7s8d== age: 649218 HTTP response 200 [https://example.org/wp-sitemap-posts-post-3.xml] CloudFront Since there is some message about Hit from cloudfront in the log, does that have

Weird behaviour of network with namespaces

18 February 2026 @ 5:49 pm

I have a Linux system with three network interfaces. Two interfaces are native (eth0, eth1) on the board and one interface is connected via a USB adapter (enu1). Because of the application, I needed to separate them into three namespaces. The configuration was done the same way for all three interfaces (see the code below). The result is that when I ping the USB interface (enu1) from any eth interfaces, the ping works fine. But if I try to ping eth interfaces between each other the ping fails. The routing tables are the same for all three namespaces. Can anybody clarify why there is such a difference? The setup code: ip netns add myns0 ip netns add myns1 ip netns add myns2 ip link set eth0 netns myns0 ip link set eth1 netns myns1 ip link set enu1 netns myns2 ip netns exec myns0 ip addr add 192.168.1.10/24 dev eth0 ip netns exec myns1 ip addr add 192.168.1.11/24 dev eth1 ip netns exec myns2 ip addr add 192.168.1.12/24 dev enu1 ip netns exec m

Postfix configuration with krb5

18 February 2026 @ 4:55 pm

I have Postfix on OpenOnDemand in Amazon Linux 2 AMI, working with username and password credentials in the configuration file. Email is received properly. Now I want to implement Kerberos 5. I have Krb5 set up on the machine, using it for SSSD, and it's working. I need to implement a Kerberos authentication in Postfix. /etc/postfix/main.cf: relayhost = <SES URL> smtp_sasl_auth_enable = yes smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd smtp_sasl_security_options = noanonymous smtp_use_tls = yes smtp_tls_security_level = encrypt smtp_tls_note_starttls_offer = yes smtp_tls_CAfile = /etc/ssl/certs/ca-bundle.crt sender_canonical_maps = hash:/etc/postfix/sender_canonical smtp_generic_maps = hash:/etc/postfix/generic virtual_alias_maps = ldap:/etc/postfix/ldap-aliases.cf Also /etc/postfix/ldap-aliases.cf: server_host = ldap://<IP>:389 search_base = DC=<domain>,DC=local version = 3 bind

selective/partial access to sites according to IP address [closed]

18 February 2026 @ 6:12 am

DNS servers can return multiple IP addresses for a domain name. What we're observing is that some addresses yield Connection refused with a wget https://name but others accept the request. For example, this Bash script while true ; do wget https://www.google.com 2>&1 ; done | sed -n -e 's=.*|\(.*\)|:443... connected.=\1 +=p' -e 's=.*|\(.*\)|:443... failed: Connection refused.=\1 -=p' | head -111 | sort | uniq outputs IP addresses that refuse with a - after and those that accept the request, with a +. In our case the output is 142.251.150.119 - 142.251.151.119 - 142.251.152.119 + 142.251.153.119 - 142.251.154.119 - 142.251.155.119 + 142.251.156.119 - 142.251.157.119 - which shows that some IP addresses always accept the request and others always refuse it. Why would this be? Geoblocking?

Logical volume on external USB Disk not mounted during boot with error Can't lookup blockdev

17 February 2026 @ 8:51 pm

I use lvm on my raspberry pi 5 running Alpine 3.23 with internal nvme, I also have two external USB disks (WD 1Tb and 6TB). All three disks are in the same volume group vg0 with nvme: lv_root for / lvol0 for /home, and lvol1 for /var/lib 6TB HDD: one lv named lvol2, size 930GB 1TB HDD: empty Problem lvol2 on the external hdd is not mounted during boot despite being listed correctly in fstab. The other lvs mount (all three are on the nvme disk). Workaround: manually mount lvol2 after boot and restart affected services. Context fstab (relevant lines only); lvol2 has UUID c06ad240-9171-403b-8b76-71ec7d25cb46: /dev/vg0/lv_root / ext4 rw,relatime 0 1 UUID=E8F3-9212 /boot vfat rw,re

Regular delays in sent (not received) pings

17 February 2026 @ 5:42 pm

I'm debugging a very strange issue on a Proxmox server (running on Debian 12). It is connected via a 10G link (SFP+ DAC) to a switch. Another 10G link goes to another very similar server: SrvA -- 10G DAC --> Switch -- 10G DAC --> SrvB 10.5.1.2 10.5.0.102 10.5.8.2 When I ping SrvA from SrvB, all looks normal, with RTTs well below 1ms and a normal 1s interval. But if I flip the ping direction and ping SrvB from SrvA (as indicated by the arrows above), strange things happen. Most pings work just fine, also with RTT<1ms. But every about 20s, ping will just stall. However, it is not the normal the-response-is-delayed thing, but instead apparently a delay on the sending side, either before the request is even sent, or after the response is received and before the data is printed. After a few seconds, the line is printed with a normal RTT, with no gap in the sequences, no offending TTL, all normal. The only indication

Desktop icon, graphics not showing/white only, all new graphics only, if i reuse old graphics will work

17 February 2026 @ 5:14 pm

We are fond of desktop shortcuts. We create colorful ico to distinguish each of the shortcuts. But lately, all new desktop shortcuts we created are showing as only white panel, the ico graphics are missing. Yes we already tried, enabled GPO "Allow the use of remote paths in file shortcut icons" in "Computer Configuration → Administrative Templates → Windows Components → File Explorer" rebuilt icon cache screenshot showing old desktop showing ico graphics but not newly created

External connection with iSCSI + Netapp (Setting)

17 February 2026 @ 3:41 pm

I am currently trying to configure Cinder + iSCSI + NetApp in VHI (OpenStack) using the NetApp Generic Driver, with the goal of providing external storage to instances for their volumes. I have reviewed the following documentation: NetApp – OpenStack Deploy & Operations Guide OpenStack – Cinder NetApp Volume Driver Documentation Virtuozzo Hybrid Infrastructure – Admin Guide (Attaching External iSCSI Storage) When configuring Cinder, the following parameters must be defined: -volume_driver = cinder.volume.drivers.netapp.common.NetAppDriver -netapp_storage_family = ontap_cluster -netapp_storage_protocol = iscsi -netapp_vserver = openstack-vserver -netapp_server_hostname = myhostname -netapp_server_port = port -netapp_login = username -netapp_password = password However, I have several questions regarding the required configuration on the NetApp side. From what I understand, the Driver actually connects

Docker pull/push unauthenticated after successful login on fresh install > 28.1.1

17 February 2026 @ 10:21 am

When I install Docker on a new machine, I get a version that is newer than 28.1.1. E.g. recently, the ubuntu-latest vmImage in Azure Pipelines updated Docker to 29.1.5. Then, when I login to our private registry (running the registry:2 image): echo '$(DOCKER_PASSWORD)' | docker login -u=$(DOCKER_USER) --password-stdin $(DOCKER_REGISTRY), I get (as expected): "Login Succeeded". But now, when I try to pull an image: docker image pull $(DOCKER_REGISTRY)/$(DOCKER_USER)/package, I get: Error response from daemon: unknown: failed to resolve reference "//package:latest": unexpected status from HEAD request to https:///v2//package/manifests/latest: 401 Unauthorized Apparently, the Docker client "forgets" to include the Authorization header. By experiment, I found that this changed afte

Google Cloud - Change Project Name for Email Confirmations?

17 February 2026 @ 2:31 am

In the from section, on the bottom of the email confirmation, it says "Your Project-342579022 Team". Is there an easy way to change the name from Project-9859283 to name like "Support" or "Customer Support", from within my console? This way, it would read "Your Support Team". Thanks!