notulensiku.com - Catatan Kecil Anak Kuliahan

AttributeError: ‘module’ object has no attribute ‘unique’

September 5, 2018Akhmad Fakhoni Listiyan DedeLinuxLeave a comment

Complete error message:

docker-compose --version
Traceback (most recent call last):
  File "/bin/docker-compose", line 7, in <module>
    from compose.cli.main import main
  File "/usr/lib/python2.7/site-packages/compose/cli/main.py", line 22, in <module>
    from ..bundle import get_image_digests
  File "/usr/lib/python2.7/site-packages/compose/bundle.py", line 14, in <module>
    from .service import format_environment
  File "/usr/lib/python2.7/site-packages/compose/service.py", line 131, in <module>
    @enum.unique
AttributeError: 'module' object has no attribute 'unique'

docker-compose --version

Traceback (most recent call last):

File "/bin/docker-compose", line 7, in <module>

from compose.cli.main import main

File "/usr/lib/python2.7/site-packages/compose/cli/main.py", line 22, in <module>

from ..bundle import get_image_digests

File "/usr/lib/python2.7/site-packages/compose/bundle.py", line 14, in <module>

from .service import format_environment

File "/usr/lib/python2.7/site-packages/compose/service.py", line 131, in <module>

@enum.unique

AttributeError: 'module' object has no attribute 'unique'

Solution:

pip uninstall enum enum34
pip install enum34
docker-compose --version
docker-compose version 1.22.0, build f46880f

pip uninstall enum enum34

pip install enum34

docker-compose --version

docker-compose version 1.22.0, build f46880f

Deploy High Availability Vault pada Kubernetes dengan Consul Backend

August 20, 2018August 20, 2018Akhmad Fakhoni Listiyan DedeKubernetesLeave a comment

Prerequisite: Kubernetes cluster yang sudah terinstall helm Deploy consul dan vault Deploy consul menggunakan helm

helm install --name consul stable/consul --set Replicas=1

1	helm install --name consul stable/consul --set Replicas=1

Install vault menggunakan helm

helm repo add incubator http://storage.googleapis.com/kubernetes-charts-incubator
helm install --name vault incubator/vault --set vault.dev=false --set vault.config.storage.consul.address="consul-consul:8500",vault.config.storage.consul.path="vault"

1 2	helm repo add incubator http://storage.googleapis.com/kubernetes-charts-incubator helm install --name vault incubator/vault --set vault.dev=false --set vault.config.storage.consul.address="consul-consul:8500",vault.config.storage.consul.path="vault"

Penjelasan:

vault.dev=false : Untuk menjalankan vault dalam mode non developer
vault.config.storage.consul.address="consul-consul:8500" : Untuk mengatur storage agar menggunakan consul, diisi juga url dari vault
vault.config.storage.consul.path="vault" : Storage path yang akan digunakan vault

vault.dev=false : Untuk menjalankan vault dalam mode non developer

vault.config.storage.consul.address="consul-consul:8500" : Untuk mengatur storage agar menggunakan consul, diisi juga url dari vault

vault.config.storage.consul.path="vault" : Storage path yang akan digunakan vault

Cek pod vault

[root@k8s-controller-95 ~]# kubectl get pods
NAME                                             READY     STATUS    RESTARTS   AGE
consul-consul-0                                  1/1       Running   0          3m
vault-vault-7bc8455989-nrbzx                     1/1       Running   0          1m
vault-vault-7bc8455989-rpfbs                     1/1       Running   0          1m
vault-vault-7bc8455989-wkz2f                     1/1       Running   0          1m

[root@k8s-controller-95 ~]# kubectl get pods

NAME READY STATUS RESTARTS AGE

consul-consul-0 1/1 Running 0 3m

vault-vault-7bc8455989-nrbzx 1/1 Running 0 1m

vault-vault-7bc8455989-rpfbs 1/1 Running 0 1m

vault-vault-7bc8455989-wkz2f 1/1 Running 0 1m

Sampai pada langkah ini, kita sudah berhasil melakukan deployment vault dengan backend storage consul Initialize vault Masuk ke salah satu vault pod

kubectl exec -it vault-vault-7bc8455989-nrbzx sh
/ # export VAULT_ADDR=http://127.0.0.1:8200
/ # vault operator init
Unseal Key 1: ODPdWU8EM2z4NA1M4TYF0dUnQQEic8UFs0lnu0ikU98p
Unseal Key 2: gtoFhiDcvkiG8f/DNc3oEF2FrUKW6gSlg3BuwbvKTYHm
Unseal Key 3: 3Ft5GEHl8W0CivnEzKgiGetkLbSCPld3qJT1lfxlGVKO
Unseal Key 4: /b0vZsrOpNSxR/8FEML220gsvX4ZAfj2kRYZxChqqVeF
Unseal Key 5: +8/QbWUZBuuVrFzVtXWD4RZj1E0O7VicAqXqTL7AYJ2j

Initial Root Token: eb946945-768f-2e08-2f92-c6ed4045767a

Vault initialized with 5 key shares and a key threshold of 3. Please securely
distribute the key shares printed above. When the Vault is re-sealed,
restarted, or stopped, you must supply at least 3 of these keys to unseal it
before it can start servicing requests.

Vault does not store the generated master key. Without at least 3 key to
reconstruct the master key, Vault will remain permanently sealed!

It is possible to generate new unseal keys, provided you have a quorum of
existing unseal keys shares. See "vault rekey" for more information.

kubectl exec -it vault-vault-7bc8455989-nrbzx sh

/ # export VAULT_ADDR=http://127.0.0.1:8200

/ # vault operator init

Unseal Key 1: ODPdWU8EM2z4NA1M4TYF0dUnQQEic8UFs0lnu0ikU98p

Unseal Key 2: gtoFhiDcvkiG8f/DNc3oEF2FrUKW6gSlg3BuwbvKTYHm

Unseal Key 3: 3Ft5GEHl8W0CivnEzKgiGetkLbSCPld3qJT1lfxlGVKO

Unseal Key 4: /b0vZsrOpNSxR/8FEML220gsvX4ZAfj2kRYZxChqqVeF

Unseal Key 5: +8/QbWUZBuuVrFzVtXWD4RZj1E0O7VicAqXqTL7AYJ2j

Initial Root Token: eb946945-768f-2e08-2f92-c6ed4045767a

Vault initialized with 5 key shares and a key threshold of 3. Please securely

distribute the key shares printed above. When the Vault is re-sealed,

restarted, or stopped, you must supply at least 3 of these keys to unseal it

before it can start servicing requests.

Vault does not store the generated master key. Without at least 3 key to

reconstruct the master key, Vault will remain permanently sealed!

It is possible to generate new unseal keys, provided you have a quorum of

existing unseal keys shares. See "vault rekey" for more information.

Dari langkah ini, kita mendapatkan…

Reset password user pada Jenkins

August 7, 2018Akhmad Fakhoni Listiyan DedeLinuxLeave a comment

Ketika kita menggunakan Jenkins, ada saat ketika kita ingin melakukan reset password terhadap user jenkins. Hal yang perlu kita tahu adalah jenkins menggunakan password hash bcrypt untuk menyimpan password. Langkah-langkah yang perlu dilakukan: Cari suatu tools untuk melakukan hash bcrypt. Ada beberapa layanan online yang menyediakan hash untuk bcrypt seperti https://bcrypt-generator.com/ , https://www.dailycred.com/article/bcrypt-calculator, https://www.browserling.com/tools/bcrypt, dan masih banyak layanan yang…

Unable to configure the Docker daemon with file /etc/docker/daemon.json

August 1, 2018August 7, 2018Akhmad Fakhoni Listiyan DedeLinuxLeave a comment

Pesan eror yang ada pada judul terjadi ketika kita mencoba untuk melakukan konfigurasi docker menggunakan file yang berada di /etc/docker/daemon.json. Ketika kita melakukan debugging menggunakan journalctl -xe -u docker , maka pesan berikut akan tampil

Aug 01 06:55:35 myhost systemd[1]: Starting Docker Application Container Engine...
-- Subject: Unit docker.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit docker.service has begun starting up.
Aug 01 06:55:35 myhost dockerd-current[10880]: unable to configure the Docker daemon with file /etc/docker/daemon.json: the following directives are specified both as a flag and in the configuration file: storage-driver: (from flag: overlay, from file: overlay)
Aug 01 06:55:35 myhost systemd[1]: docker.service: main process exited, code=exited, status=1/FAILURE
Aug 01 06:55:35 myhost systemd[1]: Failed to start Docker Application Container Engine.
-- Subject: Unit docker.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit docker.service has failed.
-- 
-- The result is failed.
Aug 01 06:55:35 myhost systemd[1]: Unit docker.service entered failed state.
Aug 01 06:55:35 myhost systemd[1]: docker.service failed.

Aug 01 06:55:35 myhost systemd[1]: Starting Docker Application Container Engine...

-- Subject: Unit docker.service has begun start-up

-- Defined-By: systemd

-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel

-- Unit docker.service has begun starting up.

Aug 01 06:55:35 myhost dockerd-current[10880]: unable to configure the Docker daemon with file /etc/docker/daemon.json: the following directives are specified both as a flag and in the configuration file: storage-driver: (from flag: overlay, from file: overlay)

Aug 01 06:55:35 myhost systemd[1]: docker.service: main process exited, code=exited, status=1/FAILURE

Aug 01 06:55:35 myhost systemd[1]: Failed to start Docker Application Container Engine.

-- Subject: Unit docker.service has failed

-- Defined-By: systemd

-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel

-- Unit docker.service has failed.

-- The result is failed.

Aug 01 06:55:35 myhost systemd[1]: Unit docker.service entered failed state.

Aug 01 06:55:35 myhost systemd[1]: docker.service failed.

Akar permasalahan munculnya eror ini adalah karena konfigurasi /etc/docker/daemon.json konflik dengan konfigurasi storage default dari docker yang berada di /etc/sysconfig/docker-storage dan /etc/sysconfig/docker-storage-setup . Untuk mengatasi masalah ini,…

Cara Import dan Export Docker Image

July 31, 2018August 7, 2018Akhmad Fakhoni Listiyan DedeLinuxLeave a comment

Ada kalanya kita mengalami kondisi untuk melakukan suatu instalasi image docker ke suatu server yang tidak diperbolehkan untuk terkoneksi ke internet. Salah satu cara agar server tujuan bisa mendapatkan image yang akan dijadikan container adalah mengexport dan import docker image Untuk export:

docker save image-name:tag > filename.tar

1	docker save image-name:tag > filename.tar

Untuk mengimport kembali, jalankan perintah berikut

docker load < filename.tar

1	docker load < filename.tar

Jika dilakukan dengan benar, maka…

Konfigurasi nginx untuk reverse proxy self signed certificate

September 23, 2017Akhmad Fakhoni Listiyan DedeLinuxLeave a comment

upstream any-name {
    server 1.2.3.4:443;
}
server {
    server_name your-domain.com;
    listen 443 ssl http2;
    ssl_certificate /etc/nginx/certs/your-domain.com.crt;
    ssl_certificate_key /etc/nginx/certs/your-domain.com.key;
    ssl_dhparam /etc/nginx/certs/your-domain.com.dhparam.pem;
    location / {
        proxy_pass https://any-name;
        proxy_ssl_verify off;
    }
}

upstream any-name {

server 1.2.3.4:443;

}

server {

server_name your-domain.com;

listen 443 ssl http2;

ssl_certificate /etc/nginx/certs/your-domain.com.crt;

ssl_certificate_key /etc/nginx/certs/your-domain.com.key;

ssl_dhparam /etc/nginx/certs/your-domain.com.dhparam.pem;

location / {

proxy_pass https://any-name;

proxy_ssl_verify off;

}

Mengatur mail relay menggunakan gmail pada centos 7

August 5, 2017Akhmad Fakhoni Listiyan DedeLinuxLeave a comment

Command line pada linux sangatlah powerful. Salah satu fiturnya adalah mengirimkan email dari command line. Namun sayang, settingan default untuk mengirimkan email dari command line kemungkinan besar akan menyebabkan email masuk ke spam. Agar dapat masuk ke inbox, kita dapat menggunakan gmail server sebagai smtp relay. Install packages Install postfix

yum -y install postfix cyrus-sasl-plain mailx

1	yum -y install postfix cyrus-sasl-plain mailx

Restart dan enable postfix…

Mengubah Boot Order Grub pada Centos 7

July 6, 2017Akhmad Fakhoni Listiyan DedeLinuxLeave a comment

Ketika kita sudah memiliki versi kernel lebih dari 1, ada kemungkinan boot order yang terset secara default tidak sesuai dengan keinginan kita. Berikut langkah-langkah untuk mengubah urutan boot order pada grub – Buka /etc/default/grub

vi /etc/default/grub

1	vi /etc/default/grub

– Cari / tambahkan baris yang berisi GRUB_DEFAULT=x dimana x adalah nilai dari grub yang kita inginkan agar terpilih secara…

Mount Softraid pada Linux

February 10, 2017Akhmad Fakhoni Listiyan DedeLinuxLeave a comment

Ketika kita memiliki 2 disk, kita dapat mengatur 2 disk tersebut menjadi RAID 1 dengan perangkat lunak mdadm. Masalah muncul ketika tiba-tiba kita mengubah pengaturan pada suatu file di directory /, sehingga server kita tidak dapat reboot. Hal pertama yang terbersit tentu saja adalah mengembalikan kembali file yang telah kita edit menjadi seperti semula. Hal ini…

Mount Webdav Sebagai Filesystem Menggunakan davfs

January 29, 2017Akhmad Fakhoni Listiyan DedeLinuxLeave a comment

Ketika kita menyewa storage, biasanya disediakan berbagai macam cara untuk berkomunikasi dengan storage tersebut. Salah satu protokol yang biasanya digunakan adalah WEBDAV. Kita dapat melakukan mount webdav sebagai filesystem menggunakan davfs. Kondisi saat ini Penyimpanan (storage) berada di alamat https://mystorage.net:54607 username: iniUsername password: iniPassword Tempat mount: /mnt/storage Cara mount webdav sebagai filesystem menggunakan davfs Install…

October 2018
M	T	W	T	F	S	S
« Sep
1	2	3	4	5	6	7
8	9	10	11	12	13	14
15	16	17	18	19	20	21
22	23	24	25	26	27	28
29	30	31