My website has been using HTTPS for over 18 months now. A couple of months ago I came across Let’s Encrypt and thought, “Free Certificates? That’s interesting!”, so I gave it a shot for some other stuff I look after, just to see how I got on with it.
The certificates only last 3 months, but you can automate their renewal using CertBot. You set it up to check every day, and the certificates get renewed if they are within 30 days of expiring. Since I set it up a little over 2 months ago, the first round of renewals happened a couple of days ago. No dramas.
Having seen the first automated refresh happen successfully, I decided to switch the main website to use the Let’s Encrypt certificate today. That means no more buying certificates for me! 🙂
I put together this article when I did the initial setup, just to document it for myself.
I didn’t mention it at the time as I wasn’t really sure about how it would work out, but now I’m using it I thought it might be interesting to any other cheapskates out there. 🙂
I wrote a post a couple of months ago called
Which version of Oracle Linux should I pick for Oracle server product installations? One of the points I raised was the use of UEK allows you to have all the latest kernel goodies, regardless of being on an older release, like OL6.
I saw a post today about the release of UEK4, so now you have access to all the improvements in the 4.1 mainline Linux kernel, whether you are on are running OL6 or OL7. That just goes to prove the point really.
If you are running RHEL, you might be feeling pressure to move from RHEL6 to RHEL7 to get a bunch of the kernel enhancements that came with it. If you are running OL6, just switch to UEK4 and your kernel is ahead of the RHEL7 kernel. No stress and no having to deal with systemd and firewalld. 🙂
Following on from the last post, I’ve brought my NFS RAC stuff up to date also.
I noticed I had not done a RAC install using NFS on Oracle Linux 6, so I threw that in for good measure too. 🙂
Just as a little history to this… I was doing the desktop Oracle RAC thing (using VMware then VirtualBox) for a while, when I started reading some blog posts by Kevin Closson about NFS. At the time, NFS filers were considered the poor relation to SANs, which was obvious or they wouldn’t be so cheap in comparison right? In those articles Kevin pointed out that most people’s systems at the time probably weren’t capable of maxing out a decent filer if it were set up correctly. Since NFS is a cluster file system, that got me thinking I should try RAC on it to see how easy it was. That was in the Oracle 10g days. How time flies when you are having fun… 🙂
I did a quick update of my Oracle installation articles on Oracle Linux 7. The last time I ran through them was with the beta version OL7 and before the release of 184.108.40.206.
The installation process of 220.127.116.11 on the production release of Oracle Linux 7 hasn’t changed since the beta. The installation of 18.104.22.168 on Oracle Linux 7 is a lot neater than the 22.214.171.124 installation. It’s totally problem free for a basic installation.
You can see the articles here.
There is a bold warning on the top of both articles reminding you that the database is not supported on Oracle Linux 7 yet! Please don’t do anything “real” with it until the support is official.
Note. I left the fix-it notes for the 126.96.36.199 installation at the bottom of the 12c article, but now 188.8.131.52 is available from OTN there is really no need for someone to be installing 184.108.40.206 other than for reference I guess.
I’ve been having a play with Oracle Linux 7 beta over the weekend. Not surprisingly my first thoughts were to install the Oracle database on it.
As expected, the installations were almost identical or Fedora 19.
I’ve put a warning on the front of the OL7 articles, but I’m sure it won’t stop some Muppets using it in production then trying to blame me. 🙂
I don’t know how long it will be until OL7 goes to production and I’m sure it will be a long time before anything is certified against it, but it’s always nice to see what’s coming… 🙂 I’ll update the articles when anything significant happens…
Nearly two weeks ago, Oracle announced the Oracle Linux 7 Beta 1. Being the Linux fanboy I am, I downloaded it straight away from here.
Oracle Linux is a clone of the Red Hat Enterprise Linux (RHEL) distribution. The RHEL7 beta, and therefore OL7 beta, distro is based on a cut of Fedora 19, although depending on who you ask, it’s possibly more a mix of Fedora 18, 19 and 20… Suffice to say, there are a lot of changes compared to the RHEL6/OL6 distribution.
As I’ve mentioned several times before, my desktop at home is running Fedora 20, so I’m pretty used to most of the changes, but I’ve not written much about them, apart from the odd blog post. It’s not a high priority for me, since I’m not a sysadmin, but I’ll be updating/rewriting a few of the Linux articles on the site to include the new stuff.
When Surachart Opun mentioned having to look at systemd and firewalld, it seemed like the perfect opportunity to update my firewall and services articles. You can see the new versions here.
RHEL7/OL7 is only in beta, and even after the production release I’m sure it will be a long time before Oracle actually certify any products against it, but if you are not a Fedora user, it’s probably worth you having a play around with this stuff.