Re: wotaskd and ssh

On Feb 22, 2013, at 5:45 PM, Pascal Robert wrote:

> 
> Le 2013-02-22 à 19:37, Ramsey Gurley <[email protected]> a écrit :
> 
>> 
>> On Feb 22, 2013, at 5:34 PM, Pascal Robert wrote:
>> 
>>> 
>>> Le 2013-02-22 à 19:33, Ramsey Gurley <[email protected]> a écrit :
>>> 
>>>> Hey Guys,
>>>> 
>>>> I have a great idea. Let's put an ssh server into wotaskd. I'm sure no one has ever thought of this before and it is totally my original idea :P
>>>> 
>>>> But seriously, I remember reading some list chatter about Pascal rolling ssh into wotaskd for sftp. I don't see it in latest integration. Is that happening soon? Inquiring minds.
>>> 
>>> https://github.com/pascalrobert/wonder/commits/wotaskd_ftp
>> 
>> So only pascalrobert/wonder and not on projectwonder/wonder? Not ready yet?
> 
> Ready for me, but looks like it's ideologic. I added it to wotaskd to make it easier for people to deploy, and it's enabled by default. But looks being enabled by default is a "problem", and the "solution" was to have two different startup scripts, one that don't enable the SSH server, one that does. So it will confuse people, and I will again get people contact me directly for deployment help because permission issues (the main reason why I added the SSH server into wotaskd) is one of the two common mistakes for deployment.
> 
> See https://github.com/projectwonder/wonder/pull/269

I guess I should have been paying closer attention. I'm at a loss. How is enabled by default a security risk?

I'm thinking it would be nice if java monitor actually monitored something. Sorta like nagios but better. Maybe ssh over to the host and grab a snapshot of 'top' every 30 seconds or so. Archive that in a database. Then, when I have users complaining an app is slow, I can figure out why, instead of being in the dark.  "Oh look... "Backup 18 kajillion GBs of data" runs at peak hours. No wonder there are complaints. Let's update crontab!"

Feel free to point out if nagios can actually do this already :D

In fact, it would be really cool if we could go one step further. Instead of just memory and cpu from procs, it would be really nice if we could look at memory allocated vs memory in use on apps, # of threads, you know, the kind of stuff jvisualvm dumps out. So maybe we can haz not just ssh but also jstat or some nice jmx stuff?

Ramsey


------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_feb