Technologie

How to delete all resources in azure to avoid charges after trial on your forced credit card registration

Warning, this article aims to show you how to delete everything, so make sure you have backups of your data and anything before deleting resources !!! In my case, this was after course, and I did not want anything to remain.
I assume that if you manage azure resources, you know what you want to delete. Be careful.

So you went for an azure training, and you have been asked to either have an active account or a trial account.
You created your account and were forced to provide your credit card despite the fact that you absolutely don’t plan to give a single buck to the cloud.

But the cloud nature is to take money, a lot of money, so the very first step, before you can do anything, it to take your credit card.

I recommend you use a temporary credit card like privacy.com or lastcard.com based, or even your if your bank provide temporary credit cards.

Anyways, here we are, for some reason you had to setup stuff in azure and you don’t want to take any chance, make sure you cleanup as much as can do. It took me a while to get this, and this was not 100% clear for the trainer as well (full cleanup process, platform change often).

So here is how you can cleanup everything.

For each tenant you want to get rid of (most likely all) you’ll have to do this (in Azure portal, you can switch tenant by going to the « Azure Active Directory » tab, and use the menu « switch tenant ».

While in the tenant you want to clean up, we’ll use the « Azure Resource Explorer » as key tool in this.

This takes you to the Azure Resource Explorer blade (yes, panels or tabs are called « blades »), in which all resources are listed under « Subscriptions ».
So you’ll expand the Subscriptions tree, for each and every subscription in which you want to delete assets.

You expand all the « ResourcesGroups », and you’ll go delete assets 1 by one under « Resources » for each « ResourcesGroup »

Select a resource, and above the JSON detailed configuration, you click on « Open blade »

It will take you to the resource blade, from where you can delete the resource

It will ask for confirmation, confirm :

And then from the navigation tree, go back to Resource Explorer.

Do this for each and every items up to the Resources Group itself :

Which you confirm by typing the name.

As the cloud is slow and inefficient, you’ll face a lot of refresh issues, and you’ll have to reload the web page many times to hope to have a clear picture on what is still there and what is not.

The notifications area will pop some partial notifications, but to actually have a detailed view of what is really happening, and what is the status (deleting resources in the cloud is painfully slow and inefficient), so under the « Notifications » button (little bell, top right of the screen), click on « More events in the activity log »

From there, you’ll have a better view of what happens, but by default, it doesn’t show much, you will have to expand each and every task to actually have an idea. As the top level task may show « Succeeded », but some sub task are not done at all.

When nothing is left in the « Resource Explorer », under every Subscriptions, you know you are done, and hopefully, the cloud won’t charge you.

Oups, don’t forget to cancel the subscription ! If it’s a trial, you can’t, you’ll have to wait for expiration, but if you don’t have any resources under it, you should be fine.

Another thing to check, is under « Licenses », search in the top search bar for « Licenses », make sure that NO LICENSE are still assigned. If they are, you’ll be charged !

EDIT : Another point to check are the services you might have subscribed that may not appear under resources, such as « Azure Security center », « Azure Sentinel », and « Azure DDoS protection ». Make sure you disable all of these too ! <— Don’t forget additional services ! They are costly !

Not easy at all to escape from the cloud, or at least, hoping that they won’t take money on your credit card. Because they will, if you forget anything, they won’t forget you !

lundi, octobre 19th, 2020 azure, cloud, clowd, Technologie Pas de commentaire

Proxmox – ZFS – Dead drive on active VM, recover from replicated disk

So you run a proxmox cluster, and you have 3 nodes.

Your VMs are all replicated, using ZFS replication, and in HA mode.

Each ZFS volume runs on a single drive, because we don’t have too much money, and it’s an home setup, OR, your RAID back end went nuts and you lost a full physical volume.

Issue is, your VM did not migrate through HA to another node, because obviously, the PVE node was not down, as only 1 of the ZFS drives died.

Then, I had major power outage, and a second one, ending after auto reboot, with some VMs on one node, some on another, and, this specific VM (my nextcloud), with a 1TB virtual disk, that was on the dead physical disk.

At this stage, I have a failed VM, on an active node, without valid disk for the VM, BUT, thanks to the cluster, I still see with « zfs list » on the other nodes, that the replicated copies are still here !

So here are the steps, finally easier and faster than expected :

Move the manually in another node of the cluster, and this is very simple, as SSH with a shell on any PVE nodes :

mv /etc/pve/nodes/pve1/qemu-server/106.conf /etc/pve/nodes/pve6/qemu-server/

Now, you did it, refresh the web interface, and the VM is now back on the node that has a valid disk for your VM ! …but it won’t start because it was in failed state at HA level. Not an issue, on the VM, menu « more », manage HA, and set it to « disabled », validate. Then again, in the menu, set it to « started ».

VM should start again, using the replica of the disk !

Now, on the node that had the failed disk, I have SATA drives, I just hot unplugged the dead unit, and put a new disk.

Initiate the new disk as GPT, and we’ll need to add it to ZFS. Issue is, volume already exists. So we need to go to « datacenter » then « storage », double click on the needed ZFS Pool, and uncheck the node that had the failed drive.

Validate, and go add the disk on the node, in ZFS, with the same ZFS Pool name.
Now you have valid new ZFS volume.

Make sure your run the replication from the currently running node, to this empty volume !!! So has you have the data replicated again.

I was a bit stressed, even if I have backup on another machine at filesystem level with backuppc of my VM content, it’s always much much much more easy and quick to get the existing VM back on track.

I hope it will help you. I realized at least how easy and simple it is to move a VM that is not running from one host to another.

Have a great day, and go to hell power outage and dead drives ! (Yes I have UPS, surge protection… still).

lundi, juin 15th, 2020 proxmox, Technologie Pas de commentaire

Restrict access to proxmox web admin interface

proxmox admin interface access control

When you install proxmox, you have by default access to your admin interface, usually using the following URL :

https://IP-OF-YOUR-INSTANCE:8006

This is totally fine when using an internal instance, but quite another story if you rent an online server with proxmox on it. We don’t want to let this access wide open.

While proxmox comes with a nice firewall, it doesn’t allow you to restrict access to port 8006 and 22 (obviously not to lock you out), because it won’t do this on your « local » network, but when you are on a publicly connected machine, the « local » network is internet.

Therefore, a way to restrict this access is by creating the following file /etc/default/pveproxy with the following content :

ALLOW_FROM="127.0.0.1,172.20.0.1"
DENY_FROM="all"
POLICY="allow"

Be sure to use lower case. Then restart the pveproxy service :

service pveproxy restart

And from now on, only the listed IPs have access to the admin interface.

Reference : https://vdillenschneider.fr/architecture-de-services-avec-proxmox-sur-un-serveur-kimsufi

mercredi, avril 29th, 2020 proxmox, Technologie Pas de commentaire
Not f'd — you won't find me on Facebook
octobre 2020
L M M J V S D
« Juin    
 1234
567891011
12131415161718
19202122232425
262728293031  
 

 
Suivez moi sur twitter - follow me on twitter
[FSF Associate Member]
 
Free Software, Free Society
VIRTUALISATION :
Compacter une image virtualbox VDI
Bon petit tutoriel esxi
Marche d'appliances vmware
Installer ESXi sur un disque IDE
Installer ESXi 3.5 sur un disque USB
Installer proxmox avec DRBD et migration / réplication à chaud
Installer OSSEC avec VMware
Information sur le VDI
SECURITE - FIREWALL :
Ouvrir des ports dynamiquement iptables - knockd
Autre tres bon tuto knockd
Docs Arp poisoning - Anglais
Metasploit test de pénétration
Zone H - sites piratés en temps réel
Blog invisible things
Tips protection sécurité wordpress
Pfsense - distribution firewall opensource - adsl internet failover
Iproute 2 mini how to - linux advanced routing
ClearOS - la passerelle sécuritaire lan - wan
HAUTE DISPONIBILITE :
CDN - Accélération de la distribution de données
drbd iscsi ocfs2 dm multipath tutoriel
Load balancing LVS
Load balancing opensource list
HA-Proxy :
HAproxy - http load balancer
Simple tutoriel HAproxy
HAproxy - debian tutoriel
Centos - Ip failover
Configuratoin DM-Multipath Redhat
VMware Doubletake - continuité
Quelques liens sur la réplication MySQL : Manuel MySQL, chapitre sur la réplication
Manuel MySQL, Tutoriel clair sur la mise en place
Autre tuto sur la mise en place de la réplication MySQL
Références pour optimisation du serveur MySQL
Utilisation de EXPLAIN mysql pour optimiser vos bases
optimiser vos bases - requetes et index
STOCKAGE RESEAU :
Un outil de clonage disque en reseau
Internet NAS 250Go 250 accès VPN
Server ISCSI avec Ubuntu tuto
ISCSI centos redhat tutoriel
Gérer et étendre un LVM
Créer sa piratebox ! trop cool
Deaddrops, les clés USB dans les murs, aussi cool !
OPTIMISATION WORDPRESS :
Télécharger Xenu
Comment utiliser Xenu
optimisation hébergement wordpress
Super howto wordpress (En)
Test de charge serveur web - Load impact
VPN - ROUTEUR - LAN:
Zeroshell - le mini-routeur wifi tout en un
Retroshare, votre réseau d'échange crypté!
Openvpn sur centos redhat
Intégrer Linux dans active directory
Routage inter-vlan avec Linux
Routage avec OSPF
Network Weathermap
TENDANCES - WEB:
Boutons twitter
Analyser les tendances des recherches Google
Protocole sitemap - robots.txt
Creer des animations CSS3
Code php pour interagir avec twitter
E reputation
Jquery
TRUCS ET ASTUCES GNU/LINUX :
Tuxmachines.org - Actus et tips linux
Configurer GRUB2 et grub2 ici
Panoet - en anglais - tips & tricks
Readylines tips and trick pertinents
Squid Clamav - proxy antivirus
Apprendre Unix en 10 minutes
13 tips sur les expressions régulières
IE Sous linux IES
LDAP 2.4 Quickstart guide
Tutoriel LDAP
Installation annuaire LDAP
Serveur Mail Postfix - Dovecot - LDAP - MDS
Créer un linux personnalisé en ligne - custom linux
Super site sur linux - en
Capistrano - déploiement automatisé
MONITORING :
Nagios tutoriel et doc
Nagios plugin NRPE tuto
Nagios plugin NRPE autre tuto
Nagios plugin NRPE officiel
Zabbix - fonctionnalités
Zabbix - installation
Guide MRTGsys - grapher la charge locale
MRTGsys - ajouter des graphs
MRTGsys - interpréter les données
Shinken - Monitoring
Thruk Monitoring webinterface
Shinken - Tutoriel
Shinken - Référence chez Nicolargo
AUTRES LIENS :
RemixJobs IT jobs
USB Multiboot
Reset mot de passe windows
Java python et autres tips, intéressant !
Forum inforeseau
Open Clipart
Excellent comic en ligne
Inforeseau.fr