Re: Mr Nobody

0 views
Skip to first unread message
Message has been deleted

Magali Swinderman

unread,
Jul 8, 2024, 1:01:06 PM7/8/24
to scorbesnire

I have set OMV7 (7.0-29) with three users, six shared folders, but only three shared by samba plus home directories. I also have KVM with one VM.

One of the samba shares (Public) is set with guest only permission. The others are no Public.

It doesn't exist on the disk. It doesn't disappear if I disable the Public guest share. It doesn't disappear if I change minimum samba version from 3 to 2. It does disappear if I turn off home directory sharing. So I take it that it is the nobody user being picked up by samba. I suppose I could add,

mr nobody


تنزيل https://byltly.com/2yZmgh



tanah I don't know if you've seen this thread =154522. It seems to be an issue in samba 4.17. In OMV7 you can add extra options to the "Home Directories" share under "Services Smb Settings". Wouldn't adding "access based share enum = yes" prevent the appearance of this "nobody" folder for connections made by normal users?

I think for the moment I will just leave it. OMV7 is RC1 so things are going to change and I would rather not mess around with it to much in case it trips me up later (I have not been documenting my setup). That being said, the chance of a version change in debian is rather small.

I don't use "guest" shares, so hadn't come across this myself. Can you use a common access folder instead of a "guest only folder", i.e. a shared folder with "service perms" set with "user group" write/read?

Considering this affects the RC for OMV7, do you think I should report it as a bug? Otherwise, with little prospect of a change in version from Bookworm, this is going to pop up in every installation of OMV7 for years to come.

Hi,
I am having some problems with YARN and it is not the first clusters where this happens, so I don't get what I am doing wrong. Every night I shut down the clusters (installed on AWS and SoftLayer) to not spend money while not working. Also, sooner or later I need bigger machines, so I change the AWS instance type (similar name also for SoftLayer). What happens in a not very clear moment is that after a particular restart YARN generates problems in the NodeManager user cache directory (e.g. /bigdata1/yarn/nm/usercache/m.giusto), like in this case ( -Ingestion-Integration/Sqoop-Error-Sqoop-2-not-working-through... and I am forced to remove everything from all the user cache directories (acceptable) otherwise jobs are unable to start.
However the bigger problem is that YARN also starts applying a not desired rule for which each user that submit a job is considered not allowed and YARN starts the job as "nobody" (yarn.nodemanager.linux-container-executor.nonsecure-mode.local-user default value). This happens for a not super-user like "m.giusto" (UID over 1000) and also for "hdfs" (UID less than 500). I have tried to move "hdfs" from "banned.users" to "allowed.system.users" and to set "min.user.id" to 0 , no changes. Moreover "nobody" user is not able to write to the real-user user cache folder (permission denied) and so the job fails.

It sounds like YARN is running under the linux container executor which is used to provide secure containers or resource isolation (using cgroups). If you don't need these features or if this was enabled accidentally then you can probably fix the problem by unchecking "Always Use Linux Container Executor" in YARN configuration under Cloudera Manager.

However, the description on Cloudera Manager of the "Always Use Linux Container Executor" flag says "Cgroups enforcement only works when the Linux Container Executor is used", so if I want to use the desired "Static Resource Pool" where YARN gets only X% of the resources, I have to maintain the flag enabled (now I also understand when the flag gets checked, after making the first configuration of the resource pool...). So I have tried to install what needed for cgroups (libcgroup) and reenabled the flag.
Now if I execute YARN application (like Hive query) everything works. If instead I try to execute a Oozie job with a shell action inside, the shell action is executed by "nobody" user (real Oozie user "m.giusto"). Normally shell action are executed as "yarn", so I have added "yarn" in "allowed.system.users" and removed it from "banned.users". "nobody" user remains the MR user. Any idea?

thanks for the reply. I didn't know about the "yarn.nodemanager.linux-container-executor.nonsecure-mode.limit-users" property. I will explore the two opportunities in order to choose the better one for the current experiments.

I have OpenLDAP sync users and groups in all the nodes across the cluster. My only problem is the yarn containers are launched either by yarn in a non-secure cluster with default values, or nobody when you change "Limit Nonsecure Container Executor Users" to false, and "yarn.nodemanager.container-executor.class" to true.

I have even remove the "nobody" user from allowed and left the "nonsecure-mode.lcaol-user" empty, but still says "nobody". If I revert all the changes, it says "yarn". So these configs impact something somewhere.

You mentioning the Safe Valve gave me an idea! I thought maybe the UI in CM is not setting one or both of those key/values. So I did this manually and it worked! Now every container asked by Spark Pipe() has the same owner as the Spark application itself (no more nobody or yarn! - there must be something with the UI that won't map one of those two configs back to yarn-site.xml):

I mean, I have a great portfolio, my profile is it's almost 100%. I make offers (normal or low price) on demo work sometimes but nobody answers. Even just to no word like - "thanks" or "I don't like it". I really don't understand.

Max
Michael and Sergio already addressed the issue of rate. Their advices are extremely valuable and try to fully follow them. Also, be alert to the number of proposals you're sending out. You could check these threads for more information: 1) -accounts-that-don-t-show-work-activity/td-p... 2) -suspension-for-too-many-proposals-How/m-p/308812 . Personally, I keep no more than 6 active proposals and usually cancel them after 3-5 (could be 7 as well) days of inactivity. I can't say for sure that this is the best approach, I've still got a lot of research to do about that. Finally, be patient. It's extremely difficult but you're going to make it considering the quality of the services you're offering. Keep it up and be consistent.

That's just the way it is, really. Just like going out and applying for a job or sending in a resume/application, unless they want to talk to you, clients and employers won't say anything. They generally don't have time to give a personal reply to everyone they're passing over, especially if they get a large number of applicants.

Don't ever try to compete on price, especially in your field. A race to the bottom is a race nobody wins. You want to charge what you feel your work is worth, and never lower that just to get a job or interview. Not only does this cheapen your work in a potential client's eyes, it devalues the work of others in the same field. This leads to clients expecting Academy Award level work for peanuts.

If I were you I'd get rid of that first paragraph in your overview that starts with "Hey guys, I'm new here..." It doesn't add anything useful and they actually already know you are new. In the list of proposals they see your name and first one or two lines of your overview, so you are basically wasting those two lines with irrelevant information. Besides, double check what you wrote. There are a few typos here and there. If you show a sloppy overview they don't take you seriously.

Don't ever underbid. If you do you are putting yourself down. You will be saying "Hey, I am cheap, I don't deserve more." I guess you appreciate what you do. Right? Adjust your price accordingly. I watched some of your videos... if you worked for TV and stuff like that your price should not be the same as someone who only used Premiere and After Effects in his/her spare time. Many prospective clients will say they can get it cheaper or that they can do the job themselves. Let them go, that's the kind of client you must avoid. There are others who will be willing to pay for excellence and even will pay you bonus when they are happy with the results.

I'd like to really thank you for your contribution and its quality as it came at a very good time for me. I joine Upwork 1 month ago and I have submitted nine proposals since then, 5 of which I can confidently say are of great quality because I improved after going through Upwork's "How to get started" tutorial however I had not gotten a single invite for interview. I'm ashamed to say I felt I was the only one, lol even at a point thought it was cos I'm from Nigeria. I was about to email Upwork when I saw this forum and your contribution. Thanks Max also. I'd input your tips into my procedure and process. Please I would like to ask for two favours if you can. First, If you could spare a minute to look through my profile and tell me what I can improve and what you might do differently If you had my profile. Second, I'm great at video editing, production and some motion graphics for above intermediate level. My one weakness remains typography, design and how to blend colours. As sometimes, when making a video, I would need to put in text in a creative and attractive way or make a nice looking intro for visual. I loved your profile and portfolio works and can see you're a master of creative art. How may I learn to a very good degree about this? Any websites or elearning sources you may recommend?

03c5feb9e7
Reply all
Reply to author
Forward
0 new messages