Wiki - User contributions [en]

IBM CloudPak for Data

2026-07-29T21:22:00Z

Ebasso:

== Installing the CLI ==

Before using CPD, set up the required CLI tools on a Linux VM, jump server, or bastion host. This approach is often more reliable than running the tools locally on a Mac with Docker or Podman.

Download the required binaries:

<source lang="bash">
wget https://github.com/IBM/cpd-cli/releases/download/v14.4.0.3/cpd-cli-linux-SE-14.4.0.tgz
wget https://mirror.openshift.com/pub/openshift-v4/clients/oc/4.18/linux/oc.tar.gz
</source>

== Getting an OpenShift Login Token ==

You can obtain your OpenShift API token from the OpenShift web console:

# Log in to the OpenShift console.
# Click your username in the upper-right corner.
# Select '''Copy login command'''.
# Authenticate again if prompted.
# Copy the token from the displayed '''oc login''' command.

Example:

<syntaxhighlight lang="bash">
oc login --token=sha256~xxxxxxxxxxxxxxxxxxxxxxxx --server=https://api.cluster.example.com:6443
</syntaxhighlight>

== Logging in to OpenShift with cpd-cli ==

After starting the container, log in to OpenShift using '''cpd-cli'''.

Provide the following command:

<syntaxhighlight lang="bash">
./cpd-cli manage login-to-ocp --token=sha256~xxxxxxxxxxxxxxxxxxxxxxxx --server=https://api.cluster.example.com:6443
</syntaxhighlight>

== Create the Global Pull Secret ==

The global pull secret is required to allow OpenShift to pull images from the IBM container registry using your entitlement key.

Run the following command:

<source lang="bash">
export IBM_ENTITLEMENT_KEY=.....

./cpd-cli manage add-icr-cred-to-global-pull-secret ${IBM_ENTITLEMENT_KEY}
</source>

On ROKS, worker nodes may need to be reloaded before the updated pull secret takes effect. To speed up the process, you can temporarily reduce the worker pool to a single node before applying the change.

== Configure a Tethered Namespace ==

Use the following command to configure a tethered namespace for a Cognos Analytics instance. This allows the CPD instance running in the primary namespace to work with services deployed in the tethered namespace.

<source lang="bash">
./cpd-cli manage setup-tethered-ns --cpd_instance_ns=ibm-cpd --tethered_instance_ns=cognos-hmg
</source>

In this example:

* '''ibm-cpd''' is the Cloud Pak for Data instance namespace.
* '''cognos-hmg''' is the tethered namespace where Cognos Analytics is deployed.

After the command completes successfully, the required permissions and configuration will be created so that CPD can communicate with the Cognos Analytics deployment.

= Veja também=

[[Category:IBM CP4D]]
[[Category:IBM Cognos]]
[[Category:Cognos]]

IBM CloudPak for Data

2026-07-29T21:17:41Z

Ebasso: /* Configure a Tethered Namespace */

== Installing the CLI ==

Before using CPD, set up the required CLI tools on a Linux VM, jump server, or bastion host. This approach is often more reliable than running the tools locally on a Mac with Docker or Podman.

Download the required binaries:

<source lang="bash">
wget https://github.com/IBM/cpd-cli/releases/download/v12.0.5/cpd-cli-linux-EE-12.0.5.tgz
wget https://mirror.openshift.com/pub/openshift-v4/clients/oc/4.6/linux/oc.tar.gz
</source>

== Getting an OpenShift Login Token ==

You can obtain your OpenShift API token from the OpenShift web console:

# Log in to the OpenShift console.
# Click your username in the upper-right corner.
# Select '''Copy login command'''.
# Authenticate again if prompted.
# Copy the token from the displayed '''oc login''' command.

Example:

<syntaxhighlight lang="bash">
oc login --token=sha256~xxxxxxxxxxxxxxxxxxxxxxxx --server=https://api.cluster.example.com:6443
</syntaxhighlight>

== Logging in to OpenShift with cpd-cli ==

After starting the container, log in to OpenShift using '''cpd-cli'''.

Provide the following command:

<syntaxhighlight lang="bash">
./cpd-cli manage login-to-ocp --token=sha256~xxxxxxxxxxxxxxxxxxxxxxxx --server=https://api.cluster.example.com:6443
</syntaxhighlight>

== Create the Global Pull Secret ==

The global pull secret is required to allow OpenShift to pull images from the IBM container registry using your entitlement key.

Run the following command:

<source lang="bash">
export IBM_ENTITLEMENT_KEY=.....

./cpd-cli manage add-icr-cred-to-global-pull-secret ${IBM_ENTITLEMENT_KEY}
</source>

On ROKS, worker nodes may need to be reloaded before the updated pull secret takes effect. To speed up the process, you can temporarily reduce the worker pool to a single node before applying the change.

== Configure a Tethered Namespace ==

Use the following command to configure a tethered namespace for a Cognos Analytics instance. This allows the CPD instance running in the primary namespace to work with services deployed in the tethered namespace.

<source lang="bash">
./cpd-cli manage setup-tethered-ns --cpd_instance_ns=ibm-cpd --tethered_instance_ns=cognos-hmg
</source>

In this example:

* '''ibm-cpd''' is the Cloud Pak for Data instance namespace.
* '''cognos-hmg''' is the tethered namespace where Cognos Analytics is deployed.

After the command completes successfully, the required permissions and configuration will be created so that CPD can communicate with the Cognos Analytics deployment.

= Veja também=

[[Category:IBM CP4D]]
[[Category:IBM Cognos]]
[[Category:Cognos]]

IBM CloudPak for Data

2026-07-29T21:17:17Z

Ebasso: /* Create the Global Pull Secret */

== Installing the CLI ==

Before using CPD, set up the required CLI tools on a Linux VM, jump server, or bastion host. This approach is often more reliable than running the tools locally on a Mac with Docker or Podman.

Download the required binaries:

<source lang="bash">
wget https://github.com/IBM/cpd-cli/releases/download/v12.0.5/cpd-cli-linux-EE-12.0.5.tgz
wget https://mirror.openshift.com/pub/openshift-v4/clients/oc/4.6/linux/oc.tar.gz
</source>

== Getting an OpenShift Login Token ==

You can obtain your OpenShift API token from the OpenShift web console:

# Log in to the OpenShift console.
# Click your username in the upper-right corner.
# Select '''Copy login command'''.
# Authenticate again if prompted.
# Copy the token from the displayed '''oc login''' command.

Example:

<syntaxhighlight lang="bash">
oc login --token=sha256~xxxxxxxxxxxxxxxxxxxxxxxx --server=https://api.cluster.example.com:6443
</syntaxhighlight>

== Logging in to OpenShift with cpd-cli ==

After starting the container, log in to OpenShift using '''cpd-cli'''.

Provide the following command:

<syntaxhighlight lang="bash">
./cpd-cli manage login-to-ocp --token=sha256~xxxxxxxxxxxxxxxxxxxxxxxx --server=https://api.cluster.example.com:6443
</syntaxhighlight>

== Create the Global Pull Secret ==

The global pull secret is required to allow OpenShift to pull images from the IBM container registry using your entitlement key.

Run the following command:

<source lang="bash">
export IBM_ENTITLEMENT_KEY=.....

./cpd-cli manage add-icr-cred-to-global-pull-secret ${IBM_ENTITLEMENT_KEY}
</source>

On ROKS, worker nodes may need to be reloaded before the updated pull secret takes effect. To speed up the process, you can temporarily reduce the worker pool to a single node before applying the change.

== Configure a Tethered Namespace ==

Use the following command to configure a tethered namespace for a Cognos Analytics instance. This allows the CPD instance running in the primary namespace to work with services deployed in the tethered namespace.

<source lang="bash">
./cpd-cli manage setup-tethered-ns --cpd_instance_ns=ibm-cpd --tethered_instance_ns=cognos-hmg
</source>

In this example:

* <code>ibm-cpd</code> is the Cloud Pak for Data instance namespace.
* <code>cognos-hmg</code> is the tethered namespace where Cognos Analytics is deployed.

After the command completes successfully, the required permissions and configuration will be created so that CPD can communicate with the Cognos Analytics deployment.

= Veja também=

[[Category:IBM CP4D]]
[[Category:IBM Cognos]]
[[Category:Cognos]]

IBM CloudPak for Data

2026-07-29T21:14:32Z

Ebasso:

== Installing the CLI ==

Before using CPD, set up the required CLI tools on a Linux VM, jump server, or bastion host. This approach is often more reliable than running the tools locally on a Mac with Docker or Podman.

Download the required binaries:

<source lang="bash">
wget https://github.com/IBM/cpd-cli/releases/download/v12.0.5/cpd-cli-linux-EE-12.0.5.tgz
wget https://mirror.openshift.com/pub/openshift-v4/clients/oc/4.6/linux/oc.tar.gz
</source>

== Getting an OpenShift Login Token ==

You can obtain your OpenShift API token from the OpenShift web console:

# Log in to the OpenShift console.
# Click your username in the upper-right corner.
# Select '''Copy login command'''.
# Authenticate again if prompted.
# Copy the token from the displayed '''oc login''' command.

Example:

<syntaxhighlight lang="bash">
oc login --token=sha256~xxxxxxxxxxxxxxxxxxxxxxxx --server=https://api.cluster.example.com:6443
</syntaxhighlight>

== Logging in to OpenShift with cpd-cli ==

After starting the container, log in to OpenShift using '''cpd-cli'''.

Provide the following command:

<syntaxhighlight lang="bash">
./cpd-cli manage login-to-ocp --token=sha256~xxxxxxxxxxxxxxxxxxxxxxxx --server=https://api.cluster.example.com:6443
</syntaxhighlight>

== Create the Global Pull Secret ==

The global pull secret is required to allow OpenShift to pull images from the IBM container registry using your entitlement key.

Run the following command:

<source lang="bash">
export IBM_ENTITLEMENT_KEY=.....

./cpd-cli manage add-icr-cred-to-global-pull-secret ${IBM_ENTITLEMENT_KEY}
</source>

On ROKS, worker nodes may need to be reloaded before the updated pull secret takes effect. To speed up the process, you can temporarily reduce the worker pool to a single node before applying the change.

= Veja também=

[[Category:IBM CP4D]]
[[Category:IBM Cognos]]
[[Category:Cognos]]

IBM CloudPak for Data

2026-07-29T21:10:31Z

Ebasso: /* Getting an OpenShift Login Token */

== Getting an OpenShift Login Token ==

You can obtain your OpenShift API token from the OpenShift web console:

# Log in to the OpenShift console.
# Click your username in the upper-right corner.
# Select '''Copy login command'''.
# Authenticate again if prompted.
# Copy the token from the displayed '''oc login''' command.

Example:

<syntaxhighlight lang="bash">
oc login --token=sha256~xxxxxxxxxxxxxxxxxxxxxxxx --server=https://api.cluster.example.com:6443
</syntaxhighlight>

== Logging in to OpenShift with cpd-cli ==

After starting the container, log in to OpenShift using '''cpd-cli'''.

Provide the following command:

<syntaxhighlight lang="bash">
./cpd-cli manage login-to-ocp --token=sha256~xxxxxxxxxxxxxxxxxxxxxxxx --server=https://api.cluster.example.com:6443
</syntaxhighlight>

= Veja também=

[[Category:IBM CP4D]]
[[Category:IBM Cognos]]
[[Category:Cognos]]

IBM CloudPak for Data

2026-07-29T21:10:05Z

Ebasso: /* Logging in to OpenShift with cpd-cli */

== Getting an OpenShift Login Token ==

You can obtain your OpenShift API token from the OpenShift web console:

# Log in to the OpenShift console.
# Click your username in the upper-right corner.
# Select '''Copy login command'''.
# Authenticate again if prompted.
# Copy the token from the displayed <code>oc login</code> command.

Example:

<syntaxhighlight lang="bash">
oc login --token=sha256~xxxxxxxxxxxxxxxxxxxxxxxx --server=https://api.cluster.example.com:6443
</syntaxhighlight>

== Logging in to OpenShift with cpd-cli ==

After starting the container, log in to OpenShift using '''cpd-cli'''.

Provide the following command:

<syntaxhighlight lang="bash">
./cpd-cli manage login-to-ocp --token=sha256~xxxxxxxxxxxxxxxxxxxxxxxx --server=https://api.cluster.example.com:6443
</syntaxhighlight>

= Veja também=

[[Category:IBM CP4D]]
[[Category:IBM Cognos]]
[[Category:Cognos]]

IBM CloudPak for Data

2026-07-29T21:09:24Z

Ebasso: /* Getting an OpenShift Login Token */

== Getting an OpenShift Login Token ==

You can obtain your OpenShift API token from the OpenShift web console:

# Log in to the OpenShift console.
# Click your username in the upper-right corner.
# Select '''Copy login command'''.
# Authenticate again if prompted.
# Copy the token from the displayed <code>oc login</code> command.

Example:

<syntaxhighlight lang="bash">
oc login --token=sha256~xxxxxxxxxxxxxxxxxxxxxxxx --server=https://api.cluster.example.com:6443
</syntaxhighlight>

== Logging in to OpenShift with cpd-cli ==

After starting the container, log in to OpenShift using '''cpd-cli'''.

The OpenShift token can be found in the <code>env.sh</code> file. You can either export it as <code>OCP_TOKEN</code> or copy and paste it directly into the command.

<syntaxhighlight lang="bash">
./cpd-cli manage login-to-ocp --token=sha256~xxxxxxxxxxxxxxxxxxxxxxxx --server=https://api.cluster.example.com:6443
</syntaxhighlight>

This login is stored by '''cpd-cli''' inside the running container and is separate from a standard <code>oc login</code> session.

= Veja também=

[[Category:IBM CP4D]]
[[Category:IBM Cognos]]
[[Category:Cognos]]

IBM CloudPak for Data

2026-07-29T21:09:04Z

Ebasso: Created page with "== Getting an OpenShift Login Token == You can obtain your OpenShift API token from the OpenShift web console: # Log in to the OpenShift console. # Click your username in the upper-right corner. # Select '''Copy login command'''. # Authenticate again if prompted. # Copy the token from the displayed <code>oc login</code> command. Example: <syntaxhighlight lang="bash"> oc login --token=sha256~xxxxxxxxxxxxxxxxxxxxxxxx --server=https://api.cluster.example.com:6443 </synt..."

== Getting an OpenShift Login Token ==

You can obtain your OpenShift API token from the OpenShift web console:

# Log in to the OpenShift console.
# Click your username in the upper-right corner.
# Select '''Copy login command'''.
# Authenticate again if prompted.
# Copy the token from the displayed <code>oc login</code> command.

Example:

<syntaxhighlight lang="bash">
oc login --token=sha256~xxxxxxxxxxxxxxxxxxxxxxxx --server=https://api.cluster.example.com:6443
</syntaxhighlight>

Use the value after <code>--token=</code> as the <code>OCP_TOKEN</code> variable.
``

== Logging in to OpenShift with cpd-cli ==

After starting the container, log in to OpenShift using '''cpd-cli'''.

The OpenShift token can be found in the <code>env.sh</code> file. You can either export it as <code>OCP_TOKEN</code> or copy and paste it directly into the command.

<syntaxhighlight lang="bash">
./cpd-cli manage login-to-ocp --token=sha256~xxxxxxxxxxxxxxxxxxxxxxxx --server=https://api.cluster.example.com:6443
</syntaxhighlight>

This login is stored by '''cpd-cli''' inside the running container and is separate from a standard <code>oc login</code> session.

= Veja também=

[[Category:IBM CP4D]]
[[Category:IBM Cognos]]
[[Category:Cognos]]

Mailpit: Servidor SMTP Fake para testes no OpenShift

2026-07-15T14:52:14Z

Ebasso: /* 4. Obter a URL da interface web */

O '''Mailpit''' é uma solução leve que simula um servidor SMTP: aceita qualquer e-mail enviado pela aplicação e os exibe em uma interface web, sem encaminhar mensagens reais.

Esta página descreve como implantar o Mailpit no OpenShift e integrar sua aplicação a ele.

Escolhi o Mailpit por ser o sucessor do MailHog, ter compatibilidade nativa com as restrições de contexto de segurança (SCC) do OpenShift e manutenção ativa pela comunidade.

== Implantação ==

=== 1. Criar o projeto ===

oc new-project mailpit

=== 2. Criar o manifesto ===

Crie o arquivo <code>mailpit.yaml</code> com os recursos abaixo:

<syntaxhighlight lang="yaml">
# Deployment
apiVersion: apps/v1
kind: Deployment
metadata:
name: mailpit
spec:
replicas: 1
selector:
matchLabels:
app: mailpit
template:
metadata:
labels:
app: mailpit
spec:
containers:
- name: mailpit
image: axllent/mailpit:latest
ports:
- containerPort: 1025 # SMTP
- containerPort: 8025 # Interface Web
---
# Service
apiVersion: v1
kind: Service
metadata:
name: mailpit
spec:
selector:
app: mailpit
ports:
- name: smtp
port: 1025
targetPort: 1025
- name: web
port: 8025
targetPort: 8025
---
# Route (acesso à interface web)
apiVersion: route.openshift.io/v1
kind: Route
metadata:
name: mailpit-ui
spec:
to:
kind: Service
name: mailpit
port:
targetPort: web
</syntaxhighlight>

=== 3. Aplicar no cluster ===

<syntaxhighlight lang="bash">
oc apply -f mailpit.yaml
</syntaxhighlight>

=== 4. Obter a URL da interface web ===

<syntaxhighlight lang="bash">
oc get route mailpit-ui
</syntaxhighlight>

Acesse a URL retornada no navegador para visualizar os e-mails capturados.

<nowiki>http://mailpit-ui-mailpit.apps.<domain></nowiki>

== Configuração da Aplicação ==

Configure sua aplicação para usar o Mailpit como SMTP, através do endereço de Service:

mailpit.mailpit.svc.cluster.local:1025

= Ver também =

*[[ASSP:Automatizando o Rebuild.pl]]
*[[Postfix: Configurando o Postfix com SmartHost do ASSP]]
*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]
*[[Linux e Unix: Ferramentas de Monitoracao e Performance]]

*[[Linux| Mais Artigos sobre Linux / UNIX / AIX]]
*[[Tecnologias| Mais Artigos sobre Tecnologias]]

[[Category:Linux]]
[[Category:Tecnologias]]
[[Category:SMTP]]
[[Category:Kubernetes]]
[[Category:OpenShift]]

Mailpit: Servidor SMTP Fake para testes no OpenShift

2026-07-15T14:50:26Z

Ebasso: Created page with "O '''Mailpit''' é uma solução leve que simula um servidor SMTP: aceita qualquer e-mail enviado pela aplicação e os exibe em uma interface web, sem encaminhar mensagens reais. Esta página descreve como implantar o Mailpit no OpenShift e integrar sua aplicação a ele. Escolhi o Mailpit por ser o sucessor do MailHog, ter compatibilidade nativa com as restrições de contexto de segurança (SCC) do OpenShift e manutenção ativa pela comunidade. == Implantação ==..."

O '''Mailpit''' é uma solução leve que simula um servidor SMTP: aceita qualquer e-mail enviado pela aplicação e os exibe em uma interface web, sem encaminhar mensagens reais.

Esta página descreve como implantar o Mailpit no OpenShift e integrar sua aplicação a ele.

Escolhi o Mailpit por ser o sucessor do MailHog, ter compatibilidade nativa com as restrições de contexto de segurança (SCC) do OpenShift e manutenção ativa pela comunidade.

== Implantação ==

=== 1. Criar o projeto ===

oc new-project mailpit

=== 2. Criar o manifesto ===

Crie o arquivo <code>mailpit.yaml</code> com os recursos abaixo:

<syntaxhighlight lang="yaml">
# Deployment
apiVersion: apps/v1
kind: Deployment
metadata:
name: mailpit
spec:
replicas: 1
selector:
matchLabels:
app: mailpit
template:
metadata:
labels:
app: mailpit
spec:
containers:
- name: mailpit
image: axllent/mailpit:latest
ports:
- containerPort: 1025 # SMTP
- containerPort: 8025 # Interface Web
---
# Service
apiVersion: v1
kind: Service
metadata:
name: mailpit
spec:
selector:
app: mailpit
ports:
- name: smtp
port: 1025
targetPort: 1025
- name: web
port: 8025
targetPort: 8025
---
# Route (acesso à interface web)
apiVersion: route.openshift.io/v1
kind: Route
metadata:
name: mailpit-ui
spec:
to:
kind: Service
name: mailpit
port:
targetPort: web
</syntaxhighlight>

=== 3. Aplicar no cluster ===

<syntaxhighlight lang="bash">
oc apply -f mailpit.yaml
</syntaxhighlight>

=== 4. Obter a URL da interface web ===

<syntaxhighlight lang="bash">
oc get route mailpit-ui
</syntaxhighlight>

Acesse a URL retornada no navegador para visualizar os e-mails capturados.

== Configuração da Aplicação ==

Configure sua aplicação para usar o Mailpit como SMTP, através do endereço de Service:

mailpit.mailpit.svc.cluster.local:1025

= Ver também =

*[[ASSP:Automatizando o Rebuild.pl]]
*[[Postfix: Configurando o Postfix com SmartHost do ASSP]]
*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]
*[[Linux e Unix: Ferramentas de Monitoracao e Performance]]

*[[Linux| Mais Artigos sobre Linux / UNIX / AIX]]
*[[Tecnologias| Mais Artigos sobre Tecnologias]]

[[Category:Linux]]
[[Category:Tecnologias]]
[[Category:SMTP]]
[[Category:Kubernetes]]
[[Category:OpenShift]]

Clamav: Installing and Configuring ICAP on ClamAV

2026-07-15T14:41:41Z

Ebasso: /* Ver também */

The integration of c-icap with ClamAV is commonly used to provide antivirus scanning for web traffic, email, or other content passing through proxy servers (like Squid) or gateway services. This setup helps intercept and scan potentially harmful content before it reaches end users or systems.

Overview of c-icap and ClamAV Integration

* '''c-icap'''
: It's a high-performance, open-source server that implements the ICAP (Internet Content Adaptation Protocol). ICAP is commonly used by proxy servers (such as Squid) to offload tasks like content modification or virus scanning to specialized servers.

* '''ClamAV'''
: ClamAV is an open-source antivirus engine designed to detect malware and viruses. It's widely used for scanning files on mail gateways, web proxies, and other points where potentially harmful files might pass.

You can checkout files from this GitHub https://github.com/ebasso/ibm-secure-proxy-icap-clamav-demo

= Procedure =

== Install Packages on RHEL 9 ==

1) Install EPEL Repository in RHEL 9

subscription-manager repos --enable codeready-builder-for-rhel-9-$(arch)-rpms

2) run dnf

<nowiki>dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm</nowiki>

3) Install Clamav packages

dnf -y install clamav clamav-data clamav-devel clamav-freshclam clamav-filesystem clamav-lib clamd

4) Install C-ICAP packages

dnf -y install c-icap c-icap-libs c-icap-modules

== Clamav Server ==

=== Update Virus definition ===

Check install with update virus definition

freshclam

Enable as service

systemctl enable clamav-freshclam.service

systemctl start clamav-freshclam.service

Check status

systemctl status clamav-freshclam.service

=== Configure clamav ===

1) Backup default ICAP server configuration file:

cd /etc/clamd.d

mv scan.conf scan.conf_original

2) Create a scan.conf and add the following content:

<nowiki>
LogFile /var/log/clamd.scan.log
LogFileMaxSize 10M
LogTime yes
LogClean yes
LogVerbose yes
LogRotate yes
TCPSocket 3310
PidFile /run/clamd.scan/clamd.pid
LocalSocket /run/clamd.scan/clamd.sock
User clamscan
</nowiki>

Save and exit the file

=== Start the Clamav Server ===

systemctl enable clamd@scan.service'

systemctl start clamd@scan.service

== Configure ICAP Server ==

1) Backup default ICAP server configuration file:

cd /etc/c-icap

mv c-icap.conf c-icap.conf_original
mv virus_scan.conf virus_scan.conf_original
mv clamd_mod.conf clamd_mod.conf_original

=== c-icap.conf ===

Create a c-icap.conf and add the following content:

<nowiki>
Include virus_scan.conf
Include srv_content_filtering.conf
PidFile /run/c-icap/c-icap.pid
CommandsSocket /run/c-icap/c-icap.ctl
Timeout 300
MaxKeepAliveRequests 100
KeepAliveTimeout 600
StartServers 3
MaxServers 10
MinSpareThreads 10
MaxSpareThreads 20
ThreadsPerChild 10
MaxRequestsPerChild 0
Port 1344
ServerAdmin you@your.address
ServerName YourServerName
TmpDir /var/tmp
MaxMemObject 131072
DebugLevel 1
Pipelining on
SupportBuggyClients off
ModulesDir /usr/lib64/c_icap
ServicesDir /usr/lib64/c_icap
TemplateDir /usr/share/c_icap/templates/
TemplateDefaultLanguage en
LoadMagicFile /etc/c-icap/c-icap.magic
RemoteProxyUsers off
RemoteProxyUserHeader X-Authenticated-User
RemoteProxyUserHeaderEncoded on
acl all src 0.0.0.0/0.0.0.0
acl PERMIT_REQUESTS type REQMOD RESPMOD OPTIONS
icap_access allow all PERMIT_REQUESTS
ServerLog /var/log/c-icap/server.log
AccessLog /var/log/c-icap/access.log
Service echo srv_echo.so
</nowiki>

Save and exit the file

=== virus_scan.conf ===

Create a virus_scan.conf and add the following content:

<nowiki>
Service antivirus_module virus_scan.so
ServiceAlias srv_clamav virus_scan
ServiceAlias avscan virus_scan?allow204=on&sizelimit=off&mode=simple
virus_scan.ScanFileTypes TEXT DATA EXECUTABLE ARCHIVE GIF JPEG MSOFFICE
virus_scan.SendPercentData 5
virus_scan.StartSendPercentDataAfter 2M
virus_scan.MaxObjectSize 5M
virus_scan.DefaultEngine clamd
Include clamd_mod.conf
</nowiki>

=== clamd_mod.conf ===

Create a clamd_mod.conf and add the following content:

<nowiki>
Module common clamd_mod.so
clamd_mod.ClamdSocket /run/clamd.scan/clamd.sock
</nowiki>

Save and exit the file

=== srv_content_filtering.conf ===

Create a new file srv_content_filtering.conf and add the following content:

<nowiki>
Service srv_cfg_filter srv_content_filtering.so
srv_content_filtering.RequireContentLength off
srv_content_filtering.MaxBodyData 5M
srv_content_filtering.Match demoScore body /(icap_test|icap-block|test-icap)/i score=200
srv_content_filtering.Match badHeader Header{ICAP-TEST} /BLOCK/
srv_content_filtering.Action block score{demoScore>5}
srv_content_filtering.Action block score{badHeader}
</nowiki>

Save and exit the file

=== Start the ICAP Server ===

systemctl enable c-icap.service

systemctl start c-icap.service

== Verify Configuration ==

1) Testing your instalation

To test your c-icap server you can use the c-icap-client utility which included in c-icap package.

c-icap-client

Sample result:

<nowiki>c-icap-client
ICAP server:localhost, ip:127.0.0.1, port:1344

OPTIONS:
Allow 204: Yes
Allow 206: No
Preview: 1024
Keep alive: Yes

ICAP HEADERS:
ICAP/1.0 200 OK
Methods: RESPMOD, REQMOD
Service: C-ICAP/0.6.2 server - Echo demo service
ISTag: "CI0001-XXXXXXXXX"
Transfer-Preview: *
Options-TTL: 3600
Date: Mon, 30 Sep 2024 19:49:43 GMT
Preview: 1024
Allow: 204
X-Include: X-Authenticated-User, X-Authenticated-Groups
Encapsulated: null-body=0
</nowiki>

2) Ensure there are no errors in the log file

tail -f /var/log/c-icap/server.log

tail -f /var/log/c-icap/access.log

== Know Problems ==

=== C-ICAP: Cannot connect to clamd server ===

In /var/log/c-icap/server.log, I had the following error:

<nowiki>Tue Oct 1 08:10:44 2024, main proc, clamd_connect: Can not connect to clamd server on /run/clamd.scan/clamd.sock!
Tue Oct 1 08:10:44 2024, main proc, clamd_init: Error while sending command to clamd server
Tue Oct 1 08:10:44 2024, main proc, Registry 'virus_scan::engines' does not exist!</nowiki>

To fix, change permissions of clamd.scan directory:

chmod g+rx,o+rx /run/clamd.scan

= Ver também =

*[[ASSP:Automatizando o Rebuild.pl]]
*[[Postfix: Configurando o Postfix com SmartHost do ASSP]]
*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]
*[[Linux e Unix: Ferramentas de Monitoracao e Performance]]

*[[Linux| Mais Artigos sobre Linux / UNIX / AIX]]
*[[Tecnologias| Mais Artigos sobre Tecnologias]]

[[Category:Linux]]
[[Category:Tecnologias]]
[[Category:Clamav]]
[[Category:Postfix]]
[[Category:SMTP]]

Installing and Configuring ICAP on ClamAV

2026-07-15T14:41:09Z

Ebasso: Ebasso moved page Installing and Configuring ICAP on ClamAV to Clamav: Installing and Configuring ICAP on ClamAV

#REDIRECT [[Clamav: Installing and Configuring ICAP on ClamAV]]

Clamav: Installing and Configuring ICAP on ClamAV

2026-07-15T14:41:09Z

Ebasso: Ebasso moved page Installing and Configuring ICAP on ClamAV to Clamav: Installing and Configuring ICAP on ClamAV

The integration of c-icap with ClamAV is commonly used to provide antivirus scanning for web traffic, email, or other content passing through proxy servers (like Squid) or gateway services. This setup helps intercept and scan potentially harmful content before it reaches end users or systems.

Overview of c-icap and ClamAV Integration

* '''c-icap'''
: It's a high-performance, open-source server that implements the ICAP (Internet Content Adaptation Protocol). ICAP is commonly used by proxy servers (such as Squid) to offload tasks like content modification or virus scanning to specialized servers.

* '''ClamAV'''
: ClamAV is an open-source antivirus engine designed to detect malware and viruses. It's widely used for scanning files on mail gateways, web proxies, and other points where potentially harmful files might pass.

You can checkout files from this GitHub https://github.com/ebasso/ibm-secure-proxy-icap-clamav-demo

= Procedure =

== Install Packages on RHEL 9 ==

1) Install EPEL Repository in RHEL 9

subscription-manager repos --enable codeready-builder-for-rhel-9-$(arch)-rpms

2) run dnf

<nowiki>dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm</nowiki>

3) Install Clamav packages

dnf -y install clamav clamav-data clamav-devel clamav-freshclam clamav-filesystem clamav-lib clamd

4) Install C-ICAP packages

dnf -y install c-icap c-icap-libs c-icap-modules

== Clamav Server ==

=== Update Virus definition ===

Check install with update virus definition

freshclam

Enable as service

systemctl enable clamav-freshclam.service

systemctl start clamav-freshclam.service

Check status

systemctl status clamav-freshclam.service

=== Configure clamav ===

1) Backup default ICAP server configuration file:

cd /etc/clamd.d

mv scan.conf scan.conf_original

2) Create a scan.conf and add the following content:

<nowiki>
LogFile /var/log/clamd.scan.log
LogFileMaxSize 10M
LogTime yes
LogClean yes
LogVerbose yes
LogRotate yes
TCPSocket 3310
PidFile /run/clamd.scan/clamd.pid
LocalSocket /run/clamd.scan/clamd.sock
User clamscan
</nowiki>

Save and exit the file

=== Start the Clamav Server ===

systemctl enable clamd@scan.service'

systemctl start clamd@scan.service

== Configure ICAP Server ==

1) Backup default ICAP server configuration file:

cd /etc/c-icap

mv c-icap.conf c-icap.conf_original
mv virus_scan.conf virus_scan.conf_original
mv clamd_mod.conf clamd_mod.conf_original

=== c-icap.conf ===

Create a c-icap.conf and add the following content:

<nowiki>
Include virus_scan.conf
Include srv_content_filtering.conf
PidFile /run/c-icap/c-icap.pid
CommandsSocket /run/c-icap/c-icap.ctl
Timeout 300
MaxKeepAliveRequests 100
KeepAliveTimeout 600
StartServers 3
MaxServers 10
MinSpareThreads 10
MaxSpareThreads 20
ThreadsPerChild 10
MaxRequestsPerChild 0
Port 1344
ServerAdmin you@your.address
ServerName YourServerName
TmpDir /var/tmp
MaxMemObject 131072
DebugLevel 1
Pipelining on
SupportBuggyClients off
ModulesDir /usr/lib64/c_icap
ServicesDir /usr/lib64/c_icap
TemplateDir /usr/share/c_icap/templates/
TemplateDefaultLanguage en
LoadMagicFile /etc/c-icap/c-icap.magic
RemoteProxyUsers off
RemoteProxyUserHeader X-Authenticated-User
RemoteProxyUserHeaderEncoded on
acl all src 0.0.0.0/0.0.0.0
acl PERMIT_REQUESTS type REQMOD RESPMOD OPTIONS
icap_access allow all PERMIT_REQUESTS
ServerLog /var/log/c-icap/server.log
AccessLog /var/log/c-icap/access.log
Service echo srv_echo.so
</nowiki>

Save and exit the file

=== virus_scan.conf ===

Create a virus_scan.conf and add the following content:

<nowiki>
Service antivirus_module virus_scan.so
ServiceAlias srv_clamav virus_scan
ServiceAlias avscan virus_scan?allow204=on&sizelimit=off&mode=simple
virus_scan.ScanFileTypes TEXT DATA EXECUTABLE ARCHIVE GIF JPEG MSOFFICE
virus_scan.SendPercentData 5
virus_scan.StartSendPercentDataAfter 2M
virus_scan.MaxObjectSize 5M
virus_scan.DefaultEngine clamd
Include clamd_mod.conf
</nowiki>

=== clamd_mod.conf ===

Create a clamd_mod.conf and add the following content:

<nowiki>
Module common clamd_mod.so
clamd_mod.ClamdSocket /run/clamd.scan/clamd.sock
</nowiki>

Save and exit the file

=== srv_content_filtering.conf ===

Create a new file srv_content_filtering.conf and add the following content:

<nowiki>
Service srv_cfg_filter srv_content_filtering.so
srv_content_filtering.RequireContentLength off
srv_content_filtering.MaxBodyData 5M
srv_content_filtering.Match demoScore body /(icap_test|icap-block|test-icap)/i score=200
srv_content_filtering.Match badHeader Header{ICAP-TEST} /BLOCK/
srv_content_filtering.Action block score{demoScore>5}
srv_content_filtering.Action block score{badHeader}
</nowiki>

Save and exit the file

=== Start the ICAP Server ===

systemctl enable c-icap.service

systemctl start c-icap.service

== Verify Configuration ==

1) Testing your instalation

To test your c-icap server you can use the c-icap-client utility which included in c-icap package.

c-icap-client

Sample result:

<nowiki>c-icap-client
ICAP server:localhost, ip:127.0.0.1, port:1344

OPTIONS:
Allow 204: Yes
Allow 206: No
Preview: 1024
Keep alive: Yes

ICAP HEADERS:
ICAP/1.0 200 OK
Methods: RESPMOD, REQMOD
Service: C-ICAP/0.6.2 server - Echo demo service
ISTag: "CI0001-XXXXXXXXX"
Transfer-Preview: *
Options-TTL: 3600
Date: Mon, 30 Sep 2024 19:49:43 GMT
Preview: 1024
Allow: 204
X-Include: X-Authenticated-User, X-Authenticated-Groups
Encapsulated: null-body=0
</nowiki>

2) Ensure there are no errors in the log file

tail -f /var/log/c-icap/server.log

tail -f /var/log/c-icap/access.log

== Know Problems ==

=== C-ICAP: Cannot connect to clamd server ===

In /var/log/c-icap/server.log, I had the following error:

<nowiki>Tue Oct 1 08:10:44 2024, main proc, clamd_connect: Can not connect to clamd server on /run/clamd.scan/clamd.sock!
Tue Oct 1 08:10:44 2024, main proc, clamd_init: Error while sending command to clamd server
Tue Oct 1 08:10:44 2024, main proc, Registry 'virus_scan::engines' does not exist!</nowiki>

To fix, change permissions of clamd.scan directory:

chmod g+rx,o+rx /run/clamd.scan

== Ver também ==

*[[ASSP:Automatizando o Rebuild.pl]]
*[[Configurando o Postfix com SmartHost do ASSP]]
*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]
*[[Linux e Unix: Ferramentas de Monitoracao e Performance]]

*[[Linux| Mais Artigos sobre Linux / UNIX / AIX]]
*[[Tecnologias| Mais Artigos sobre Tecnologias]]

[[Category:Linux]]
[[Category:Tecnologias]]
[[Category:Clamav]]
[[Category:Postfix]]
[[Category:SMTP]]

Tecnologias

2026-07-15T14:38:56Z

Ebasso:

[[Mailpit: Servidor SMTP Fake para testes no OpenShift]]

= OpenSSL =

* [[OpenSSL: Criando uma Autoridade Certificadora (CA)]]

* [[OpenSSL: Assinando um CSR com a nossa CA]]

= LDAP =

*[[Java: Pega Grupos do Usuario no LDAP| Pega os Grupos de um Usuário no LDAP]]

*[[Pesquisa LDAP com o ldapsearch]]

*[[LDAP: Listando Atributos com o ldapsearch]]

*[[Filtros de Busca por Diretório]]

OpenLDAP é um servidor LDAP
*[[OpenLDAP:Configurando um LDAP Proxy]]

= Antispam e Email =

ASSP is a Anti-Spam SMTP Proxy Server implements multiple spam filters

*[[ASSP:Inicializacao Automatica do ASSP]]
*[[ASSP:Automatizando o Rebuild.pl]]

Clamav is an open-source antivirus
*[[Clamav: Automatizando a atualizacao do Clamav]]

Postfix is SMTP Server
*[[Postfix: Configurando o Postfix com SmartHost do ASSP]]
*[[Postfix: Gerenciamento do Postfix]]

= Serviços de Rede =

*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]

*[[Linux: Configurando um servidor DHCP]]

*[[Linux: Configurando um servidor DNS]]

= Web/HTTP Servers/Proxy Servers =

== Apache HTTP Server ==

*[[Apache HTTP Server| Artigos sobre o Apache HTTP Server]]

==== AWSTATS ====

*[[AWSTATS: Configurando o AWSTATS]]

*[[AWSTATS: Agrupando os arquivos access.log]]

*[[AWSTATS: Gerando um html estático]]

*[[AWSTATS: Schedulando a atualização automatica no MS Windows]]

== Apache Tomcat Server ==

*[[Tomcat:Script que checa se o Tomcat está no Ar|Script que checa se o Tomcat está no Ar]]

== Squid Proxy Server ==

*[[Squid:Squid autenticando com o Samba|Squid autenticando na Rede Windows ou Samba]]

*[[Squid:Limpando o Cache do Squid|Limpando o Cache do Squid]]

= Banco de Dados =

*[[MySQL:Configurando o MySQL]]

= Diversos =

Elgg é uma rede social
* [[Elgg:The requested URL elgg html action systemsettings install was not found on this server]]

Watchit é uma ferramenta para monitoração, debugar e coletar dados de performance em ambiente Sametime, Domino, Traveler, Connections, LDAP, database e network.

*[[Watchit: Install Watchit on SLES 11 SP2 x86_64]]

SAP é um ERP
*[[SAP: Transacoes Uteis]]

Tecnologias

2026-07-15T14:37:51Z

Ebasso: /* Web/HTTP Servers/Proxy Servers */

= OpenSSL =

* [[OpenSSL: Criando uma Autoridade Certificadora (CA)]]

* [[OpenSSL: Assinando um CSR com a nossa CA]]

= LDAP =

*[[Java: Pega Grupos do Usuario no LDAP| Pega os Grupos de um Usuário no LDAP]]

*[[Pesquisa LDAP com o ldapsearch]]

*[[LDAP: Listando Atributos com o ldapsearch]]

*[[Filtros de Busca por Diretório]]

OpenLDAP é um servidor LDAP
*[[OpenLDAP:Configurando um LDAP Proxy]]

= Antispam e Email =

ASSP is a Anti-Spam SMTP Proxy Server implements multiple spam filters

*[[ASSP:Inicializacao Automatica do ASSP]]
*[[ASSP:Automatizando o Rebuild.pl]]

Clamav is an open-source antivirus
*[[Clamav: Automatizando a atualizacao do Clamav]]

Postfix is SMTP Server
*[[Postfix: Configurando o Postfix com SmartHost do ASSP]]
*[[Postfix: Gerenciamento do Postfix]]

= Serviços de Rede =

*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]

*[[Linux: Configurando um servidor DHCP]]

*[[Linux: Configurando um servidor DNS]]

= Web/HTTP Servers/Proxy Servers =

== Apache HTTP Server ==

*[[Apache HTTP Server| Artigos sobre o Apache HTTP Server]]

==== AWSTATS ====

*[[AWSTATS: Configurando o AWSTATS]]

*[[AWSTATS: Agrupando os arquivos access.log]]

*[[AWSTATS: Gerando um html estático]]

*[[AWSTATS: Schedulando a atualização automatica no MS Windows]]

== Apache Tomcat Server ==

*[[Tomcat:Script que checa se o Tomcat está no Ar|Script que checa se o Tomcat está no Ar]]

== Squid Proxy Server ==

*[[Squid:Squid autenticando com o Samba|Squid autenticando na Rede Windows ou Samba]]

*[[Squid:Limpando o Cache do Squid|Limpando o Cache do Squid]]

= Banco de Dados =

*[[MySQL:Configurando o MySQL]]

= Diversos =

Elgg é uma rede social
* [[Elgg:The requested URL elgg html action systemsettings install was not found on this server]]

Watchit é uma ferramenta para monitoração, debugar e coletar dados de performance em ambiente Sametime, Domino, Traveler, Connections, LDAP, database e network.

*[[Watchit: Install Watchit on SLES 11 SP2 x86_64]]

SAP é um ERP
*[[SAP: Transacoes Uteis]]

Tecnologias

2026-07-15T14:33:46Z

Ebasso: /* Banco de Dados */

= OpenSSL =

* [[OpenSSL: Criando uma Autoridade Certificadora (CA)]]

* [[OpenSSL: Assinando um CSR com a nossa CA]]

= LDAP =

*[[Java: Pega Grupos do Usuario no LDAP| Pega os Grupos de um Usuário no LDAP]]

*[[Pesquisa LDAP com o ldapsearch]]

*[[LDAP: Listando Atributos com o ldapsearch]]

*[[Filtros de Busca por Diretório]]

OpenLDAP é um servidor LDAP
*[[OpenLDAP:Configurando um LDAP Proxy]]

= Antispam e Email =

ASSP is a Anti-Spam SMTP Proxy Server implements multiple spam filters

*[[ASSP:Inicializacao Automatica do ASSP]]
*[[ASSP:Automatizando o Rebuild.pl]]

Clamav is an open-source antivirus
*[[Clamav: Automatizando a atualizacao do Clamav]]

Postfix is SMTP Server
*[[Postfix: Configurando o Postfix com SmartHost do ASSP]]
*[[Postfix: Gerenciamento do Postfix]]

= Serviços de Rede =

*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]

*[[Linux: Configurando um servidor DHCP]]

*[[Linux: Configurando um servidor DNS]]

= Web/HTTP Servers/Proxy Servers =

== AWSTATS ==

*[[AWSTATS: Configurando o AWSTATS]]

*[[AWSTATS: Agrupando os arquivos access.log]]

*[[AWSTATS: Gerando um html estático]]

*[[AWSTATS: Schedulando a atualização automatica no MS Windows]]

== Apache HTTP Server ==

*[[Apache HTTP Server| Artigos sobre o Apache HTTP Server]]

== Apache Tomcat Server ==

*[[Tomcat:Script que checa se o Tomcat está no Ar|Script que checa se o Tomcat está no Ar]]

== Squid Proxy Server ==

*[[Squid:Squid autenticando com o Samba|Squid autenticando na Rede Windows ou Samba]]

*[[Squid:Limpando o Cache do Squid|Limpando o Cache do Squid]]

= Banco de Dados =

*[[MySQL:Configurando o MySQL]]

= Diversos =

Elgg é uma rede social
* [[Elgg:The requested URL elgg html action systemsettings install was not found on this server]]

Watchit é uma ferramenta para monitoração, debugar e coletar dados de performance em ambiente Sametime, Domino, Traveler, Connections, LDAP, database e network.

*[[Watchit: Install Watchit on SLES 11 SP2 x86_64]]

SAP é um ERP
*[[SAP: Transacoes Uteis]]

Tecnologias

2026-07-15T14:33:24Z

Ebasso: /* Diversos */

= OpenSSL =

* [[OpenSSL: Criando uma Autoridade Certificadora (CA)]]

* [[OpenSSL: Assinando um CSR com a nossa CA]]

= LDAP =

*[[Java: Pega Grupos do Usuario no LDAP| Pega os Grupos de um Usuário no LDAP]]

*[[Pesquisa LDAP com o ldapsearch]]

*[[LDAP: Listando Atributos com o ldapsearch]]

*[[Filtros de Busca por Diretório]]

OpenLDAP é um servidor LDAP
*[[OpenLDAP:Configurando um LDAP Proxy]]

= Antispam e Email =

ASSP is a Anti-Spam SMTP Proxy Server implements multiple spam filters

*[[ASSP:Inicializacao Automatica do ASSP]]
*[[ASSP:Automatizando o Rebuild.pl]]

Clamav is an open-source antivirus
*[[Clamav: Automatizando a atualizacao do Clamav]]

Postfix is SMTP Server
*[[Postfix: Configurando o Postfix com SmartHost do ASSP]]
*[[Postfix: Gerenciamento do Postfix]]

= Serviços de Rede =

*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]

*[[Linux: Configurando um servidor DHCP]]

*[[Linux: Configurando um servidor DNS]]

= Web/HTTP Servers/Proxy Servers =

== AWSTATS ==

*[[AWSTATS: Configurando o AWSTATS]]

*[[AWSTATS: Agrupando os arquivos access.log]]

*[[AWSTATS: Gerando um html estático]]

*[[AWSTATS: Schedulando a atualização automatica no MS Windows]]

== Apache HTTP Server ==

*[[Apache HTTP Server| Artigos sobre o Apache HTTP Server]]

== Apache Tomcat Server ==

*[[Tomcat:Script que checa se o Tomcat está no Ar|Script que checa se o Tomcat está no Ar]]

== Squid Proxy Server ==

*[[Squid:Squid autenticando com o Samba|Squid autenticando na Rede Windows ou Samba]]

*[[Squid:Limpando o Cache do Squid|Limpando o Cache do Squid]]

= Banco de Dados =

== MySQL Server ==

*[[MySQL:Configurando o MySQL|Configurando o MySQL]]

= Diversos =

Elgg é uma rede social
* [[Elgg:The requested URL elgg html action systemsettings install was not found on this server]]

Watchit é uma ferramenta para monitoração, debugar e coletar dados de performance em ambiente Sametime, Domino, Traveler, Connections, LDAP, database e network.

*[[Watchit: Install Watchit on SLES 11 SP2 x86_64]]

SAP é um ERP
*[[SAP: Transacoes Uteis]]

Tecnologias

2026-07-15T14:33:13Z

Ebasso:

= OpenSSL =

* [[OpenSSL: Criando uma Autoridade Certificadora (CA)]]

* [[OpenSSL: Assinando um CSR com a nossa CA]]

= LDAP =

*[[Java: Pega Grupos do Usuario no LDAP| Pega os Grupos de um Usuário no LDAP]]

*[[Pesquisa LDAP com o ldapsearch]]

*[[LDAP: Listando Atributos com o ldapsearch]]

*[[Filtros de Busca por Diretório]]

OpenLDAP é um servidor LDAP
*[[OpenLDAP:Configurando um LDAP Proxy]]

= Antispam e Email =

ASSP is a Anti-Spam SMTP Proxy Server implements multiple spam filters

*[[ASSP:Inicializacao Automatica do ASSP]]
*[[ASSP:Automatizando o Rebuild.pl]]

Clamav is an open-source antivirus
*[[Clamav: Automatizando a atualizacao do Clamav]]

Postfix is SMTP Server
*[[Postfix: Configurando o Postfix com SmartHost do ASSP]]
*[[Postfix: Gerenciamento do Postfix]]

= Serviços de Rede =

*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]

*[[Linux: Configurando um servidor DHCP]]

*[[Linux: Configurando um servidor DNS]]

= Web/HTTP Servers/Proxy Servers =

== AWSTATS ==

*[[AWSTATS: Configurando o AWSTATS]]

*[[AWSTATS: Agrupando os arquivos access.log]]

*[[AWSTATS: Gerando um html estático]]

*[[AWSTATS: Schedulando a atualização automatica no MS Windows]]

== Apache HTTP Server ==

*[[Apache HTTP Server| Artigos sobre o Apache HTTP Server]]

== Apache Tomcat Server ==

*[[Tomcat:Script que checa se o Tomcat está no Ar|Script que checa se o Tomcat está no Ar]]

== Squid Proxy Server ==

*[[Squid:Squid autenticando com o Samba|Squid autenticando na Rede Windows ou Samba]]

*[[Squid:Limpando o Cache do Squid|Limpando o Cache do Squid]]

= Banco de Dados =

== MySQL Server ==

*[[MySQL:Configurando o MySQL|Configurando o MySQL]]

= Diversos =

Elgg é uma rede social
* [[Elgg:The requested URL elgg html action systemsettings install was not found on this server]]

Watchit é uma ferramenta para monitoração, debugar e coletar dados de performance em ambiente Sametime, Domino, Traveler, Connections, LDAP, database e network.

*[[Watchit: Install Watchit on SLES 11 SP2 x86_64]]

SAP é um ERP
*[[SAP: Transacoes Uteis]]

Tecnologias

2026-07-15T14:31:38Z

Ebasso: /* LDAP */

= OpenSSL =

* [[OpenSSL: Criando uma Autoridade Certificadora (CA)]]

* [[OpenSSL: Assinando um CSR com a nossa CA]]

= LDAP =

*[[Java: Pega Grupos do Usuario no LDAP| Pega os Grupos de um Usuário no LDAP]]

*[[Pesquisa LDAP com o ldapsearch]]

*[[LDAP: Listando Atributos com o ldapsearch]]

*[[Filtros de Busca por Diretório]]

OpenLDAP é um servidor LDAP
*[[OpenLDAP:Configurando um LDAP Proxy]]

= Antispam e Email =

ASSP is a Anti-Spam SMTP Proxy Server implements multiple spam filters

*[[ASSP:Inicializacao Automatica do ASSP]]
*[[ASSP:Automatizando o Rebuild.pl]]

Clamav is an open-source antivirus
*[[Clamav: Automatizando a atualizacao do Clamav]]

Postfix is SMTP Server
*[[Postfix: Configurando o Postfix com SmartHost do ASSP]]
*[[Postfix: Gerenciamento do Postfix]]

= Serviços de Rede =

*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]

*[[Linux: Configurando um servidor DHCP]]

*[[Linux: Configurando um servidor DNS]]

= Web/HTTP Servers/Proxy Servers =

== AWSTATS ==

*[[AWSTATS: Configurando o AWSTATS]]

*[[AWSTATS: Agrupando os arquivos access.log]]

*[[AWSTATS: Gerando um html estático]]

*[[AWSTATS: Schedulando a atualização automatica no MS Windows]]

== Apache HTTP Server ==

*[[Apache HTTP Server| Artigos sobre o Apache HTTP Server]]

== Apache Tomcat Server ==

*[[Tomcat:Script que checa se o Tomcat está no Ar|Script que checa se o Tomcat está no Ar]]

== Squid Proxy Server ==

*[[Squid:Squid autenticando com o Samba|Squid autenticando na Rede Windows ou Samba]]

*[[Squid:Limpando o Cache do Squid|Limpando o Cache do Squid]]

= Banco de Dados =

== MySQL Server ==

*[[MySQL:Configurando o MySQL|Configurando o MySQL]]

= Diversos =
== Elgg ==

* [[Elgg:The requested URL elgg html action systemsettings install was not found on this server]]

=Watchit=

Watchit é uma ferramenta para monitoração, debugar e coletar dados de performance em ambiente Sametime, Domino, Traveler, Connections, LDAP, database e network.

*[[Watchit: Install Watchit on SLES 11 SP2 x86_64]]

== SAP ==

*[[SAP: Transacoes Uteis]]

Tecnologias

2026-07-15T14:31:12Z

Ebasso: /* Antispam e Email */

= OpenSSL =

* [[OpenSSL: Criando uma Autoridade Certificadora (CA)]]

* [[OpenSSL: Assinando um CSR com a nossa CA]]

= LDAP =

*[[Java: Pega Grupos do Usuario no LDAP| Pega os Grupos de um Usuário no LDAP]]

*[[Pesquisa LDAP com o ldapsearch]]

*[[LDAP: Listando Atributos com o ldapsearch]]

*[[Filtros de Busca por Diretório]]

*[[OpenLDAP:Configurando um LDAP Proxy]]

= Antispam e Email =

ASSP is a Anti-Spam SMTP Proxy Server implements multiple spam filters

*[[ASSP:Inicializacao Automatica do ASSP]]
*[[ASSP:Automatizando o Rebuild.pl]]

Clamav is an open-source antivirus
*[[Clamav: Automatizando a atualizacao do Clamav]]

Postfix is SMTP Server
*[[Postfix: Configurando o Postfix com SmartHost do ASSP]]
*[[Postfix: Gerenciamento do Postfix]]

= Serviços de Rede =

*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]

*[[Linux: Configurando um servidor DHCP]]

*[[Linux: Configurando um servidor DNS]]

= Web/HTTP Servers/Proxy Servers =

== AWSTATS ==

*[[AWSTATS: Configurando o AWSTATS]]

*[[AWSTATS: Agrupando os arquivos access.log]]

*[[AWSTATS: Gerando um html estático]]

*[[AWSTATS: Schedulando a atualização automatica no MS Windows]]

== Apache HTTP Server ==

*[[Apache HTTP Server| Artigos sobre o Apache HTTP Server]]

== Apache Tomcat Server ==

*[[Tomcat:Script que checa se o Tomcat está no Ar|Script que checa se o Tomcat está no Ar]]

== Squid Proxy Server ==

*[[Squid:Squid autenticando com o Samba|Squid autenticando na Rede Windows ou Samba]]

*[[Squid:Limpando o Cache do Squid|Limpando o Cache do Squid]]

= Banco de Dados =

== MySQL Server ==

*[[MySQL:Configurando o MySQL|Configurando o MySQL]]

= Diversos =
== Elgg ==

* [[Elgg:The requested URL elgg html action systemsettings install was not found on this server]]

=Watchit=

Watchit é uma ferramenta para monitoração, debugar e coletar dados de performance em ambiente Sametime, Domino, Traveler, Connections, LDAP, database e network.

*[[Watchit: Install Watchit on SLES 11 SP2 x86_64]]

== SAP ==

*[[SAP: Transacoes Uteis]]

Tecnologias

2026-07-15T14:30:38Z

Ebasso: /* Antispam e Email */

= OpenSSL =

* [[OpenSSL: Criando uma Autoridade Certificadora (CA)]]

* [[OpenSSL: Assinando um CSR com a nossa CA]]

= LDAP =

*[[Java: Pega Grupos do Usuario no LDAP| Pega os Grupos de um Usuário no LDAP]]

*[[Pesquisa LDAP com o ldapsearch]]

*[[LDAP: Listando Atributos com o ldapsearch]]

*[[Filtros de Busca por Diretório]]

*[[OpenLDAP:Configurando um LDAP Proxy]]

= Antispam e Email =

ASSP is a Anti-Spam SMTP Proxy Server implements multiple spam filters

*[[ASSP:Inicializacao Automatica do ASSP]]
*[[ASSP:Automatizando o Rebuild.pl]]

*[[Clamav: Automatizando a atualizacao do Clamav]]

*[[Postfix: Configurando o Postfix com SmartHost do ASSP]]
*[[Postfix: Gerenciamento do Postfix]]

= Serviços de Rede =

*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]

*[[Linux: Configurando um servidor DHCP]]

*[[Linux: Configurando um servidor DNS]]

= Web/HTTP Servers/Proxy Servers =

== AWSTATS ==

*[[AWSTATS: Configurando o AWSTATS]]

*[[AWSTATS: Agrupando os arquivos access.log]]

*[[AWSTATS: Gerando um html estático]]

*[[AWSTATS: Schedulando a atualização automatica no MS Windows]]

== Apache HTTP Server ==

*[[Apache HTTP Server| Artigos sobre o Apache HTTP Server]]

== Apache Tomcat Server ==

*[[Tomcat:Script que checa se o Tomcat está no Ar|Script que checa se o Tomcat está no Ar]]

== Squid Proxy Server ==

*[[Squid:Squid autenticando com o Samba|Squid autenticando na Rede Windows ou Samba]]

*[[Squid:Limpando o Cache do Squid|Limpando o Cache do Squid]]

= Banco de Dados =

== MySQL Server ==

*[[MySQL:Configurando o MySQL|Configurando o MySQL]]

= Diversos =
== Elgg ==

* [[Elgg:The requested URL elgg html action systemsettings install was not found on this server]]

=Watchit=

Watchit é uma ferramenta para monitoração, debugar e coletar dados de performance em ambiente Sametime, Domino, Traveler, Connections, LDAP, database e network.

*[[Watchit: Install Watchit on SLES 11 SP2 x86_64]]

== SAP ==

*[[SAP: Transacoes Uteis]]

Gerenciamento do Postfix

2026-07-15T14:30:28Z

Ebasso: Ebasso moved page Gerenciamento do Postfix to Postfix: Gerenciamento do Postfix

#REDIRECT [[Postfix: Gerenciamento do Postfix]]

Postfix: Gerenciamento do Postfix

2026-07-15T14:30:28Z

Ebasso: Ebasso moved page Gerenciamento do Postfix to Postfix: Gerenciamento do Postfix

Abaixo segue algumas dicas para gerenciamento do Postfix

== Verificando o tempo que uma mensagem está na fila ==

você pode verificar o número de mensagem em cada fila e o tempo que ela
se encontra lá com o comando qshape nomedafila, exemplo:

'''$ qshape deferred'''

'''$ qshape active'''

'''Resultado:'''
T 5 10 20 40 80 160 320 640 1280 1280+
TOTAL 30 2 1 4 1 0 0 0 1 0 21
dominioa.com.br 4 2 0 2 0 0 0 0 0 0 0
yahoo.com 14 0 0 1 0 0 0 0 1 0 12
gmail.com 4 0 0 0 0 0 0 0 0 0 4
aol.com 1 0 1 0 0 0 0 0 0 0 0
golde.com 1 0 0 0 0 0 0 0 0 0 1
hotmaial.com 1 0 0 0 0 0 0 0 0 0 1
hotmail.com 1 0 0 0 0 0 0 0 0 0 1
dominio.it 1 0 0 0 1 0 0 0 0 0 0
ig.com.br 1 0 0 0 0 0 0 0 0 0 1
walla.com 1 0 0 0 0 0 0 0 0 0 1

Onde

* A coluna "T" representa o total (neste caso para envio) para cada domínio.
* As colunas com os números ao lado dela representam o minutos que as mensagens estão na fila
* Em "TOTAL" mostra a soma por domínio

Neste exemplo, existem 14 mensagens aguardando para serem entregues para o domínio yahoo.com, sendo que 1 entre 10 à 20 minutos aguardando, 1 entre 320 e 640 minutos e 12 mais de 1280 minutos.(1 dia = 1440 minutos)

== Utilizando o mailq ==

Você pode verificar as mensagem na fila e o status de envio através do comando:

'''# mailq'''

'''Resultado:'''
-Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
4AD7427CAC* 6435 Mon Feb 25 11:20:20 gerente@meudominio.com.br
fulano@gmail.com
ciclano@gmail.com
beltrano@gmail.com
mane@gmail.com
joaoquim@gmail.com
maria@gmail.com
jose@gmail.com

CAD8A28C04 124443 Fri Feb 22 23:37:19 noticias@meudominio.com.br
(lost connection with yahoo.com.br[200.XXX.XX.X] while receiving the initial server greeting)
recrutamento@yahoo.com.br

CF3AF28B35 3328 Thu Feb 21 09:28:42 juridico.representacoes@meudominio.com.br
(connect to hotmaial.com[209.XX.XX.XXX]: Connection refused)
advogados@hotmaial.com

2F38628B01 2907 Wed Feb 20 15:07:16 compras@meudominio.com.br
(connect to uol.com.br[164.XXX.XX.XXX]: Connection timed out)
brasil@uol.com.br

ABCB828A82 133240 Wed Feb 20 15:26:17 noticias@meudominio.com.br
(lost connection with yahoo.com.br[200.XXX.XX.X] while receiving the initial server greeting)
ciclano@yahoo.com.br

A4E6F28ADA 133391 Thu Feb 21 15:19:33 noticias@meudominio.com.br
(lost connection with yahoo.com.br[200.XXX.XX.X] while receiving the initial server greeting)
fulano@yahoo.com.br

== Utilizando o pfqueue ==

O pfqueue é um programa que permite a visualização das filas. Você pode baixar ele através do site [http://pfqueue.sourceforge.net/ pfqueue na Source Forge].

Para utilizá-lo é necessário ter a biblioteca ncurses

Mas se preferir pode instalar via yum

$ yum -y install pfqueue

Para usar digite

$ pfqueue

Comandos de utilização:

*'''Setas''' - Caminha sobre as mensagens

*'''<Enter>''' - Abre a mensagem corrente

*'''q''' - (Quit) Sair

*'''d''' - (Delete) Deletar e-mail

*'''b''' - (Body) Mostra o corpo da mensagem

*'''h''' - (Hold) Põe a mensagem em hold

*'''l''' - (reLease) Libera uma mensagem

*'''r''' - (Requeue) Recoloca na fila a mensagem

*'''/''' - Find first message matching a POSIX regexp; the regexp you use can be prefixed by one of f:, t:, e:, s: which will limit the search in, respectively, the From, To, From-or-To, Subject fields. The default is to search everywhere.

*'''n''' - Find next message matching last used regexp.

*'''p''' - Find previous message matching last used regexp.

== Ver também ==
*[[Configurando o Postfix com SmartHost do ASSP]]
*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]
*[[Linux: Configurando um servidor DHCP]]
*[[Linux: Configurando um servidor DNS]]
*[[Linux e Unix: Ferramentas de Monitoracao e Performance]]

*[[Linux| Mais Artigos sobre Linux / UNIX / AIX]]
*[[Tecnologias| Mais Artigos sobre Tecnologias]]

[[Category:Linux]]
[[Category:Tecnologias]]
[[Category:ASSP]]
[[Category:Postfix]]
[[Category:SMTP]]

Configurando o Postfix como SmartHost do ASSP

2026-07-15T14:29:55Z

Ebasso: Ebasso moved page Configurando o Postfix como SmartHost do ASSP to Postfix: Configurando o Postfix com SmartHost do ASSP

#REDIRECT [[Postfix: Configurando o Postfix com SmartHost do ASSP]]

Postfix: Configurando o Postfix com SmartHost do ASSP

2026-07-15T14:29:55Z

Ebasso: Ebasso moved page Configurando o Postfix como SmartHost do ASSP to Postfix: Configurando o Postfix com SmartHost do ASSP

== Editando o Arquivo master.cf ==

1) Vá no diretório /etc/postfix

2) Edite o arquivo '''master.cf''',

3) comente a seguinte entrada

#smtp inet n - n - - smtpd

4) Logo abaixo dela adicione a seguinte entrada

325 inet n - n - - smtpd

5) Vá para a última linha e adicione a seguinte entrada

null unix - n n - - pipe
user=nobody argv=/usr/local/bin/null.sh ${user}

6) Salve e Feche o Arquivo

----

== Criando o arquivo null.sh ==

1) Vá no diretório '''/usr/local/bin'''

2) Edite o arquivo '''null.sh'''

3) Adicione o seguinte conteúdo:

#!/bin/sh
echo 0;

4) Salve e Feche o Arquivo

5) Não se esqueça de alterar a permissão de execução

chmod a+x null.sh

----

== Editando o Arquivo main.cf ==

1) Vá no diretório /etc/postfix

2) Edite o arquivo '''main.cf''',

3) Altere as seguintes entrada

myhostname = mail.minhaempresa.com.br

mydomain = minhaempresa.com.br

inet_interfaces = localhost

delay_warning_time = 4h

4) Salve e Feche o Arquivo

Reinicie o postfix

== Ver também ==

*[[Gerenciamento do Postfix]]
*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]
*[[Linux: Configurando um servidor DHCP]]
*[[Linux: Configurando um servidor DNS]]
*[[Linux e Unix: Ferramentas de Monitoracao e Performance]]

*[[Linux| Mais Artigos sobre Linux / UNIX / AIX]]
*[[Tecnologias| Mais Artigos sobre Tecnologias]]

[[Category:Linux]]
[[Category:Tecnologias]]
[[Category:ASSP]]
[[Category:Postfix]]
[[Category:SMTP]]

Tecnologias

2026-07-15T14:29:08Z

Ebasso: /* Antispam e Email */

= OpenSSL =

* [[OpenSSL: Criando uma Autoridade Certificadora (CA)]]

* [[OpenSSL: Assinando um CSR com a nossa CA]]

= LDAP =

*[[Java: Pega Grupos do Usuario no LDAP| Pega os Grupos de um Usuário no LDAP]]

*[[Pesquisa LDAP com o ldapsearch]]

*[[LDAP: Listando Atributos com o ldapsearch]]

*[[Filtros de Busca por Diretório]]

*[[OpenLDAP:Configurando um LDAP Proxy]]

= Antispam e Email =

ASSP is a Anti-Spam SMTP Proxy Server implements multiple spam filters

*[[ASSP:Inicializacao Automatica do ASSP]]
*[[ASSP:Automatizando o Rebuild.pl]]

*[[Clamav: Automatizando a atualizacao do Clamav]]

== Postfix Server ==

*[[Configurando o Postfix com SmartHost do ASSP]]
*[[Gerenciamento do Postfix]]

= Serviços de Rede =

*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]

*[[Linux: Configurando um servidor DHCP]]

*[[Linux: Configurando um servidor DNS]]

= Web/HTTP Servers/Proxy Servers =

== AWSTATS ==

*[[AWSTATS: Configurando o AWSTATS]]

*[[AWSTATS: Agrupando os arquivos access.log]]

*[[AWSTATS: Gerando um html estático]]

*[[AWSTATS: Schedulando a atualização automatica no MS Windows]]

== Apache HTTP Server ==

*[[Apache HTTP Server| Artigos sobre o Apache HTTP Server]]

== Apache Tomcat Server ==

*[[Tomcat:Script que checa se o Tomcat está no Ar|Script que checa se o Tomcat está no Ar]]

== Squid Proxy Server ==

*[[Squid:Squid autenticando com o Samba|Squid autenticando na Rede Windows ou Samba]]

*[[Squid:Limpando o Cache do Squid|Limpando o Cache do Squid]]

= Banco de Dados =

== MySQL Server ==

*[[MySQL:Configurando o MySQL|Configurando o MySQL]]

= Diversos =
== Elgg ==

* [[Elgg:The requested URL elgg html action systemsettings install was not found on this server]]

=Watchit=

Watchit é uma ferramenta para monitoração, debugar e coletar dados de performance em ambiente Sametime, Domino, Traveler, Connections, LDAP, database e network.

*[[Watchit: Install Watchit on SLES 11 SP2 x86_64]]

== SAP ==

*[[SAP: Transacoes Uteis]]

Automatizando a atualizacao do Clamav

2026-07-15T14:28:55Z

Ebasso: Ebasso moved page Automatizando a atualizacao do Clamav to Clamav: Automatizando a atualizacao do Clamav

#REDIRECT [[Clamav: Automatizando a atualizacao do Clamav]]

Clamav: Automatizando a atualizacao do Clamav

2026-07-15T14:28:55Z

Ebasso: Ebasso moved page Automatizando a atualizacao do Clamav to Clamav: Automatizando a atualizacao do Clamav

No Clamav, a lista de vírus normalmente é atualizada todos os dias automaticamente. Mas o programa não.

A seguir temos um procedimentos de como automatizar a Atualização do Clamav

Procedimento:

1) vá no diretório '''/etc/cron.daily'''

2) Crie o arquivo '''clamav-update'''

3) Adicione o seguinte conteúdo

#!/bin/sh

### A simple update script for the clamav virus database.
### This could as well be replaced by a SysV script.

/usr/bin/yum -y update clamav

4) Salve e Feche o arquivo

5) Mude a permissão

chmod a+x clamav-update

== Ver também ==

*[[ASSP:Automatizando o Rebuild.pl]]
*[[Configurando o Postfix com SmartHost do ASSP]]
*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]
*[[Linux e Unix: Ferramentas de Monitoracao e Performance]]

*[[Linux| Mais Artigos sobre Linux / UNIX / AIX]]
*[[Tecnologias| Mais Artigos sobre Tecnologias]]

[[Category:Linux]]
[[Category:Tecnologias]]
[[Category:Clamav]]
[[Category:Postfix]]
[[Category:SMTP]]

Tecnologias

2026-07-15T14:28:23Z

Ebasso: /* Antispam e Email */

= OpenSSL =

* [[OpenSSL: Criando uma Autoridade Certificadora (CA)]]

* [[OpenSSL: Assinando um CSR com a nossa CA]]

= LDAP =

*[[Java: Pega Grupos do Usuario no LDAP| Pega os Grupos de um Usuário no LDAP]]

*[[Pesquisa LDAP com o ldapsearch]]

*[[LDAP: Listando Atributos com o ldapsearch]]

*[[Filtros de Busca por Diretório]]

*[[OpenLDAP:Configurando um LDAP Proxy]]

= Antispam e Email =

ASSP is a Anti-Spam SMTP Proxy Server implements multiple spam filters

*[[ASSP:Inicializacao Automatica do ASSP]]
*[[ASSP:Automatizando o Rebuild.pl]]

*[[Automatizando a atualizacao do Clamav]]

== Postfix Server ==

*[[Configurando o Postfix com SmartHost do ASSP]]
*[[Gerenciamento do Postfix]]

= Serviços de Rede =

*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]

*[[Linux: Configurando um servidor DHCP]]

*[[Linux: Configurando um servidor DNS]]

= Web/HTTP Servers/Proxy Servers =

== AWSTATS ==

*[[AWSTATS: Configurando o AWSTATS]]

*[[AWSTATS: Agrupando os arquivos access.log]]

*[[AWSTATS: Gerando um html estático]]

*[[AWSTATS: Schedulando a atualização automatica no MS Windows]]

== Apache HTTP Server ==

*[[Apache HTTP Server| Artigos sobre o Apache HTTP Server]]

== Apache Tomcat Server ==

*[[Tomcat:Script que checa se o Tomcat está no Ar|Script que checa se o Tomcat está no Ar]]

== Squid Proxy Server ==

*[[Squid:Squid autenticando com o Samba|Squid autenticando na Rede Windows ou Samba]]

*[[Squid:Limpando o Cache do Squid|Limpando o Cache do Squid]]

= Banco de Dados =

== MySQL Server ==

*[[MySQL:Configurando o MySQL|Configurando o MySQL]]

= Diversos =
== Elgg ==

* [[Elgg:The requested URL elgg html action systemsettings install was not found on this server]]

=Watchit=

Watchit é uma ferramenta para monitoração, debugar e coletar dados de performance em ambiente Sametime, Domino, Traveler, Connections, LDAP, database e network.

*[[Watchit: Install Watchit on SLES 11 SP2 x86_64]]

== SAP ==

*[[SAP: Transacoes Uteis]]

Tecnologias

2026-07-15T14:26:47Z

Ebasso: /* LDAP */

= OpenSSL =

* [[OpenSSL: Criando uma Autoridade Certificadora (CA)]]

* [[OpenSSL: Assinando um CSR com a nossa CA]]

= LDAP =

*[[Java: Pega Grupos do Usuario no LDAP| Pega os Grupos de um Usuário no LDAP]]

*[[Pesquisa LDAP com o ldapsearch]]

*[[LDAP: Listando Atributos com o ldapsearch]]

*[[Filtros de Busca por Diretório]]

*[[OpenLDAP:Configurando um LDAP Proxy]]

= Antispam e Email =

== ASSP ==

*[[ASSP:Inicializacao Automatica do ASSP]]
*[[ASSP:Automatizando o Rebuild.pl]]

== Clamav ==

*[[Automatizando a atualizacao do Clamav]]

== Postfix Server ==

*[[Configurando o Postfix com SmartHost do ASSP]]
*[[Gerenciamento do Postfix]]

= Serviços de Rede =

*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]

*[[Linux: Configurando um servidor DHCP]]

*[[Linux: Configurando um servidor DNS]]

= Web/HTTP Servers/Proxy Servers =

== AWSTATS ==

*[[AWSTATS: Configurando o AWSTATS]]

*[[AWSTATS: Agrupando os arquivos access.log]]

*[[AWSTATS: Gerando um html estático]]

*[[AWSTATS: Schedulando a atualização automatica no MS Windows]]

== Apache HTTP Server ==

*[[Apache HTTP Server| Artigos sobre o Apache HTTP Server]]

== Apache Tomcat Server ==

*[[Tomcat:Script que checa se o Tomcat está no Ar|Script que checa se o Tomcat está no Ar]]

== Squid Proxy Server ==

*[[Squid:Squid autenticando com o Samba|Squid autenticando na Rede Windows ou Samba]]

*[[Squid:Limpando o Cache do Squid|Limpando o Cache do Squid]]

= Banco de Dados =

== MySQL Server ==

*[[MySQL:Configurando o MySQL|Configurando o MySQL]]

= Diversos =
== Elgg ==

* [[Elgg:The requested URL elgg html action systemsettings install was not found on this server]]

=Watchit=

Watchit é uma ferramenta para monitoração, debugar e coletar dados de performance em ambiente Sametime, Domino, Traveler, Connections, LDAP, database e network.

*[[Watchit: Install Watchit on SLES 11 SP2 x86_64]]

== SAP ==

*[[SAP: Transacoes Uteis]]

Tecnologias

2026-07-15T14:26:17Z

Ebasso: /* LDAP */

= OpenSSL =

* [[OpenSSL: Criando uma Autoridade Certificadora (CA)]]

* [[OpenSSL: Assinando um CSR com a nossa CA]]

= LDAP =

*[[Java: Pega Grupos do Usuario no LDAP| Pega os Grupos de um Usuário no LDAP]]

*[[Pesquisa LDAP com o ldapsearch]]

*[[LDAP: Listando Atributos com o ldapsearch]]

*[[Filtros de Busca por Diretório]]

== OpenLDAP Server ==

*[[OpenLDAP:Configurando um LDAP Proxy|Configurando um LDAP Proxy]]

= Antispam e Email =

== ASSP ==

*[[ASSP:Inicializacao Automatica do ASSP]]
*[[ASSP:Automatizando o Rebuild.pl]]

== Clamav ==

*[[Automatizando a atualizacao do Clamav]]

== Postfix Server ==

*[[Configurando o Postfix com SmartHost do ASSP]]
*[[Gerenciamento do Postfix]]

= Serviços de Rede =

*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]

*[[Linux: Configurando um servidor DHCP]]

*[[Linux: Configurando um servidor DNS]]

= Web/HTTP Servers/Proxy Servers =

== AWSTATS ==

*[[AWSTATS: Configurando o AWSTATS]]

*[[AWSTATS: Agrupando os arquivos access.log]]

*[[AWSTATS: Gerando um html estático]]

*[[AWSTATS: Schedulando a atualização automatica no MS Windows]]

== Apache HTTP Server ==

*[[Apache HTTP Server| Artigos sobre o Apache HTTP Server]]

== Apache Tomcat Server ==

*[[Tomcat:Script que checa se o Tomcat está no Ar|Script que checa se o Tomcat está no Ar]]

== Squid Proxy Server ==

*[[Squid:Squid autenticando com o Samba|Squid autenticando na Rede Windows ou Samba]]

*[[Squid:Limpando o Cache do Squid|Limpando o Cache do Squid]]

= Banco de Dados =

== MySQL Server ==

*[[MySQL:Configurando o MySQL|Configurando o MySQL]]

= Diversos =
== Elgg ==

* [[Elgg:The requested URL elgg html action systemsettings install was not found on this server]]

=Watchit=

Watchit é uma ferramenta para monitoração, debugar e coletar dados de performance em ambiente Sametime, Domino, Traveler, Connections, LDAP, database e network.

*[[Watchit: Install Watchit on SLES 11 SP2 x86_64]]

== SAP ==

*[[SAP: Transacoes Uteis]]

Tecnologias

2026-07-15T14:24:55Z

Ebasso:

= OpenSSL =

* [[OpenSSL: Criando uma Autoridade Certificadora (CA)]]

* [[OpenSSL: Assinando um CSR com a nossa CA]]

= LDAP =

== Artigos sobre LDAP ==

*[[Java: Pega Grupos do Usuario no LDAP| Pega os Grupos de um Usuário no LDAP]]

*[[Pesquisa LDAP com o ldapsearch]]

*[[LDAP: Listando Atributos com o ldapsearch]]

*[[Filtros de Busca por Diretório]]

== OpenLDAP Server ==

*[[OpenLDAP:Configurando um LDAP Proxy|Configurando um LDAP Proxy]]

= Antispam e Email =

== ASSP ==

*[[ASSP:Inicializacao Automatica do ASSP]]
*[[ASSP:Automatizando o Rebuild.pl]]

== Clamav ==

*[[Automatizando a atualizacao do Clamav]]

== Postfix Server ==

*[[Configurando o Postfix com SmartHost do ASSP]]
*[[Gerenciamento do Postfix]]

= Serviços de Rede =

*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]

*[[Linux: Configurando um servidor DHCP]]

*[[Linux: Configurando um servidor DNS]]

= Web/HTTP Servers/Proxy Servers =

== AWSTATS ==

*[[AWSTATS: Configurando o AWSTATS]]

*[[AWSTATS: Agrupando os arquivos access.log]]

*[[AWSTATS: Gerando um html estático]]

*[[AWSTATS: Schedulando a atualização automatica no MS Windows]]

== Apache HTTP Server ==

*[[Apache HTTP Server| Artigos sobre o Apache HTTP Server]]

== Apache Tomcat Server ==

*[[Tomcat:Script que checa se o Tomcat está no Ar|Script que checa se o Tomcat está no Ar]]

== Squid Proxy Server ==

*[[Squid:Squid autenticando com o Samba|Squid autenticando na Rede Windows ou Samba]]

*[[Squid:Limpando o Cache do Squid|Limpando o Cache do Squid]]

= Banco de Dados =

== MySQL Server ==

*[[MySQL:Configurando o MySQL|Configurando o MySQL]]

= Diversos =
== Elgg ==

* [[Elgg:The requested URL elgg html action systemsettings install was not found on this server]]

=Watchit=

Watchit é uma ferramenta para monitoração, debugar e coletar dados de performance em ambiente Sametime, Domino, Traveler, Connections, LDAP, database e network.

*[[Watchit: Install Watchit on SLES 11 SP2 x86_64]]

== SAP ==

*[[SAP: Transacoes Uteis]]

Tecnologias

2026-07-15T14:24:33Z

Ebasso:

*[[Watchit: Install Watchit on SLES 11 SP2 x86_64]]

= OpenSSL =

* [[OpenSSL: Criando uma Autoridade Certificadora (CA)]]

* [[OpenSSL: Assinando um CSR com a nossa CA]]

= LDAP =

== Artigos sobre LDAP ==

*[[Java: Pega Grupos do Usuario no LDAP| Pega os Grupos de um Usuário no LDAP]]

*[[Pesquisa LDAP com o ldapsearch]]

*[[LDAP: Listando Atributos com o ldapsearch]]

*[[Filtros de Busca por Diretório]]

== OpenLDAP Server ==

*[[OpenLDAP:Configurando um LDAP Proxy|Configurando um LDAP Proxy]]

= Antispam e Email =

== ASSP ==

*[[ASSP:Inicializacao Automatica do ASSP]]
*[[ASSP:Automatizando o Rebuild.pl]]

== Clamav ==

*[[Automatizando a atualizacao do Clamav]]

== Postfix Server ==

*[[Configurando o Postfix com SmartHost do ASSP]]
*[[Gerenciamento do Postfix]]

= Serviços de Rede =

*[[Linux: Configurando DHCP e BIND com DNS Dinamico]]

*[[Linux: Configurando um servidor DHCP]]

*[[Linux: Configurando um servidor DNS]]

= Web/HTTP Servers/Proxy Servers =

== AWSTATS ==

*[[AWSTATS: Configurando o AWSTATS]]

*[[AWSTATS: Agrupando os arquivos access.log]]

*[[AWSTATS: Gerando um html estático]]

*[[AWSTATS: Schedulando a atualização automatica no MS Windows]]

== Apache HTTP Server ==

*[[Apache HTTP Server| Artigos sobre o Apache HTTP Server]]

== Apache Tomcat Server ==

*[[Tomcat:Script que checa se o Tomcat está no Ar|Script que checa se o Tomcat está no Ar]]

== Squid Proxy Server ==

*[[Squid:Squid autenticando com o Samba|Squid autenticando na Rede Windows ou Samba]]

*[[Squid:Limpando o Cache do Squid|Limpando o Cache do Squid]]

= Banco de Dados =

== MySQL Server ==

*[[MySQL:Configurando o MySQL|Configurando o MySQL]]

= Diversos =
== Elgg ==

* [[Elgg:The requested URL elgg html action systemsettings install was not found on this server]]

=Watchit=

Watchit é uma ferramenta para monitoração, debugar e coletar dados de performance em ambiente Sametime, Domino, Traveler, Connections, LDAP, database e network.

== SAP ==

*[[SAP: Transacoes Uteis]]

IBM Maximo: Containerized NGINX server with authentication to securely host and distribute customization files.zip

2026-07-06T17:50:50Z

Ebasso: /* 6) Download a File with curl */

Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads.

= Architecture =

<pre>
[ curl / another container ]
│
PUT /files/<filename> ← protected by X-Upload-Token
GET /files/<filename> ← public (download)
│
┌──────▼───────────────────────┐
│ nginx-fileserver Pod │
│ image: nginx-unprivileged │
│ port: 8080 │
└──────────────────────────────┘
│
PersistentVolumeClaim: /data/files
</pre>

= Procedure =

== 1) Clone repository ==

Edit '''secret-upload-token.yaml''' and replace the value of '''UPLOAD_TOKEN''':

<syntaxhighlight lang="bash">
git clone https://github.com/ebasso/mas-nginx-customization-file-server.git

cd mas-nginx-customization-file-server/yamls
</syntaxhighlight>

== 2) Configure the Secret Token ==

Generate a strong token using

openssl rand -hex 32

Edit '''secret-upload-token.yaml''' and replace the value of '''UPLOAD_TOKEN''':

<syntaxhighlight lang="yaml">
stringData:
UPLOAD_TOKEN: "replace-with-a-secure-token"
</syntaxhighlight>

== 3) Full Deployment ==

<syntaxhighlight lang="bash">
oc new-project mas-nginx

# Apply all resources in the correct order
oc apply -f secret-upload-token.yaml
oc apply -f configmap-nginx.yaml
oc apply -f pvc-nginx-files.yaml
oc apply -f deployment-nginx.yaml
oc apply -f service-nginx.yaml
oc apply -f route-nginx.yaml
</syntaxhighlight>

== 4) Verify the Route URL ==

<syntaxhighlight lang="bash">
oc get route nginx-fileserver -o jsonpath='{.spec.host}'
</syntaxhighlight>

Example: <nowiki>nginx-fileserver-mas-nginx.apps.cluster.example.com</nowiki>

== 5) Upload a File with curl ==

Via Route (External Access)

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access)

<syntaxhighlight lang="bash">
NGINX_HOST=http://nginx-fileserver.mas-nginx.svc:8080
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

== 6) Download a File with curl ==

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')

curl -O "https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access):

<syntaxhighlight lang="bash">
NGINX_HOST=http://nginx-fileserver.mas-nginx.svc:8080

curl -O "https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

=== 6.1) List Available Files ===

<nowiki>curl "https://${NGINX_HOST}/files/"</nowiki>

or internally:

<nowiki>curl "http://nginx-fileserver.mas-nginx.svc:8080/files/"</nowiki>

= See also =

* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias| Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category:IBM Maximo]]

IBM Maximo: Containerized NGINX server with authentication to securely host and distribute customization files.zip

2026-07-06T17:49:58Z

Ebasso: /* 6.1) List Available Files */

Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads.

= Architecture =

<pre>
[ curl / another container ]
│
PUT /files/<filename> ← protected by X-Upload-Token
GET /files/<filename> ← public (download)
│
┌──────▼───────────────────────┐
│ nginx-fileserver Pod │
│ image: nginx-unprivileged │
│ port: 8080 │
└──────────────────────────────┘
│
PersistentVolumeClaim: /data/files
</pre>

= Procedure =

== 1) Clone repository ==

Edit '''secret-upload-token.yaml''' and replace the value of '''UPLOAD_TOKEN''':

<syntaxhighlight lang="bash">
git clone https://github.com/ebasso/mas-nginx-customization-file-server.git

cd mas-nginx-customization-file-server/yamls
</syntaxhighlight>

== 2) Configure the Secret Token ==

Generate a strong token using

openssl rand -hex 32

Edit '''secret-upload-token.yaml''' and replace the value of '''UPLOAD_TOKEN''':

<syntaxhighlight lang="yaml">
stringData:
UPLOAD_TOKEN: "replace-with-a-secure-token"
</syntaxhighlight>

== 3) Full Deployment ==

<syntaxhighlight lang="bash">
oc new-project mas-nginx

# Apply all resources in the correct order
oc apply -f secret-upload-token.yaml
oc apply -f configmap-nginx.yaml
oc apply -f pvc-nginx-files.yaml
oc apply -f deployment-nginx.yaml
oc apply -f service-nginx.yaml
oc apply -f route-nginx.yaml
</syntaxhighlight>

== 4) Verify the Route URL ==

<syntaxhighlight lang="bash">
oc get route nginx-fileserver -o jsonpath='{.spec.host}'
</syntaxhighlight>

Example: <nowiki>nginx-fileserver-mas-nginx.apps.cluster.example.com</nowiki>

== 5) Upload a File with curl ==

Via Route (External Access)

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access)

<syntaxhighlight lang="bash">
NGINX_HOST=http://nginx-fileserver.mas-nginx.svc:8080
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

== 6) Download a File with curl ==

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access):

<syntaxhighlight lang="bash">
NGINX_HOST=http://nginx-fileserver.mas-nginx.svc:8080

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

=== 6.1) List Available Files ===

<nowiki>curl "https://${NGINX_HOST}/files/"</nowiki>

or internally:

<nowiki>curl "http://nginx-fileserver.mas-nginx.svc:8080/files/"</nowiki>

= See also =

* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias| Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category:IBM Maximo]]

IBM Maximo: Containerized NGINX server with authentication to securely host and distribute customization files.zip

2026-07-06T17:49:35Z

Ebasso: /* 6.1) List Available Files */

Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads.

= Architecture =

<pre>
[ curl / another container ]
│
PUT /files/<filename> ← protected by X-Upload-Token
GET /files/<filename> ← public (download)
│
┌──────▼───────────────────────┐
│ nginx-fileserver Pod │
│ image: nginx-unprivileged │
│ port: 8080 │
└──────────────────────────────┘
│
PersistentVolumeClaim: /data/files
</pre>

= Procedure =

== 1) Clone repository ==

Edit '''secret-upload-token.yaml''' and replace the value of '''UPLOAD_TOKEN''':

<syntaxhighlight lang="bash">
git clone https://github.com/ebasso/mas-nginx-customization-file-server.git

cd mas-nginx-customization-file-server/yamls
</syntaxhighlight>

== 2) Configure the Secret Token ==

Generate a strong token using

openssl rand -hex 32

Edit '''secret-upload-token.yaml''' and replace the value of '''UPLOAD_TOKEN''':

<syntaxhighlight lang="yaml">
stringData:
UPLOAD_TOKEN: "replace-with-a-secure-token"
</syntaxhighlight>

== 3) Full Deployment ==

<syntaxhighlight lang="bash">
oc new-project mas-nginx

# Apply all resources in the correct order
oc apply -f secret-upload-token.yaml
oc apply -f configmap-nginx.yaml
oc apply -f pvc-nginx-files.yaml
oc apply -f deployment-nginx.yaml
oc apply -f service-nginx.yaml
oc apply -f route-nginx.yaml
</syntaxhighlight>

== 4) Verify the Route URL ==

<syntaxhighlight lang="bash">
oc get route nginx-fileserver -o jsonpath='{.spec.host}'
</syntaxhighlight>

Example: <nowiki>nginx-fileserver-mas-nginx.apps.cluster.example.com</nowiki>

== 5) Upload a File with curl ==

Via Route (External Access)

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access)

<syntaxhighlight lang="bash">
NGINX_HOST=http://nginx-fileserver.mas-nginx.svc:8080
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

== 6) Download a File with curl ==

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access):

<syntaxhighlight lang="bash">
NGINX_HOST=http://nginx-fileserver.mas-nginx.svc:8080

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

=== 6.1) List Available Files ===

<nowiki>curl "https://${NGINX_HOST}/files/"</nowiki>

or internally:

<nowiki>curl "http://nginx-fileserver:8080/files/"</nowiki>

= See also =

* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias| Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category:IBM Maximo]]

IBM Maximo: Containerized NGINX server with authentication to securely host and distribute customization files.zip

2026-07-06T17:48:49Z

Ebasso: /* 6) Download a File with curl */

Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads.

= Architecture =

<pre>
[ curl / another container ]
│
PUT /files/<filename> ← protected by X-Upload-Token
GET /files/<filename> ← public (download)
│
┌──────▼───────────────────────┐
│ nginx-fileserver Pod │
│ image: nginx-unprivileged │
│ port: 8080 │
└──────────────────────────────┘
│
PersistentVolumeClaim: /data/files
</pre>

= Procedure =

== 1) Clone repository ==

Edit '''secret-upload-token.yaml''' and replace the value of '''UPLOAD_TOKEN''':

<syntaxhighlight lang="bash">
git clone https://github.com/ebasso/mas-nginx-customization-file-server.git

cd mas-nginx-customization-file-server/yamls
</syntaxhighlight>

== 2) Configure the Secret Token ==

Generate a strong token using

openssl rand -hex 32

Edit '''secret-upload-token.yaml''' and replace the value of '''UPLOAD_TOKEN''':

<syntaxhighlight lang="yaml">
stringData:
UPLOAD_TOKEN: "replace-with-a-secure-token"
</syntaxhighlight>

== 3) Full Deployment ==

<syntaxhighlight lang="bash">
oc new-project mas-nginx

# Apply all resources in the correct order
oc apply -f secret-upload-token.yaml
oc apply -f configmap-nginx.yaml
oc apply -f pvc-nginx-files.yaml
oc apply -f deployment-nginx.yaml
oc apply -f service-nginx.yaml
oc apply -f route-nginx.yaml
</syntaxhighlight>

== 4) Verify the Route URL ==

<syntaxhighlight lang="bash">
oc get route nginx-fileserver -o jsonpath='{.spec.host}'
</syntaxhighlight>

Example: <nowiki>nginx-fileserver-mas-nginx.apps.cluster.example.com</nowiki>

== 5) Upload a File with curl ==

Via Route (External Access)

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access)

<syntaxhighlight lang="bash">
NGINX_HOST=http://nginx-fileserver.mas-nginx.svc:8080
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

== 6) Download a File with curl ==

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access):

<syntaxhighlight lang="bash">
NGINX_HOST=http://nginx-fileserver.mas-nginx.svc:8080

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

=== 6.1) List Available Files ===

<syntaxhighlight lang="bash">
curl "https://${NGINX_HOST}/files/"
# or internally:
curl "http://nginx-fileserver:8080/files/"
</syntaxhighlight>

= See also =

* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias| Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category:IBM Maximo]]

IBM Maximo: Containerized NGINX server with authentication to securely host and distribute customization files.zip

2026-07-06T17:48:31Z

Ebasso: /* 5) Upload a File with curl */

Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads.

= Architecture =

<pre>
[ curl / another container ]
│
PUT /files/<filename> ← protected by X-Upload-Token
GET /files/<filename> ← public (download)
│
┌──────▼───────────────────────┐
│ nginx-fileserver Pod │
│ image: nginx-unprivileged │
│ port: 8080 │
└──────────────────────────────┘
│
PersistentVolumeClaim: /data/files
</pre>

= Procedure =

== 1) Clone repository ==

Edit '''secret-upload-token.yaml''' and replace the value of '''UPLOAD_TOKEN''':

<syntaxhighlight lang="bash">
git clone https://github.com/ebasso/mas-nginx-customization-file-server.git

cd mas-nginx-customization-file-server/yamls
</syntaxhighlight>

== 2) Configure the Secret Token ==

Generate a strong token using

openssl rand -hex 32

Edit '''secret-upload-token.yaml''' and replace the value of '''UPLOAD_TOKEN''':

<syntaxhighlight lang="yaml">
stringData:
UPLOAD_TOKEN: "replace-with-a-secure-token"
</syntaxhighlight>

== 3) Full Deployment ==

<syntaxhighlight lang="bash">
oc new-project mas-nginx

# Apply all resources in the correct order
oc apply -f secret-upload-token.yaml
oc apply -f configmap-nginx.yaml
oc apply -f pvc-nginx-files.yaml
oc apply -f deployment-nginx.yaml
oc apply -f service-nginx.yaml
oc apply -f route-nginx.yaml
</syntaxhighlight>

== 4) Verify the Route URL ==

<syntaxhighlight lang="bash">
oc get route nginx-fileserver -o jsonpath='{.spec.host}'
</syntaxhighlight>

Example: <nowiki>nginx-fileserver-mas-nginx.apps.cluster.example.com</nowiki>

== 5) Upload a File with curl ==

Via Route (External Access)

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access)

<syntaxhighlight lang="bash">
NGINX_HOST=http://nginx-fileserver.mas-nginx.svc:8080
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

== 6) Download a File with curl ==

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access):

<syntaxhighlight lang="bash">
NGINX_HOST=http://nginx-fileserver:8080

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

=== 6.1) List Available Files ===

<syntaxhighlight lang="bash">
curl "https://${NGINX_HOST}/files/"
# or internally:
curl "http://nginx-fileserver:8080/files/"
</syntaxhighlight>

= See also =

* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias| Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category:IBM Maximo]]

IBM Maximo: Containerized NGINX server with authentication to securely host and distribute customization files.zip

2026-07-06T17:47:24Z

Ebasso: /* 2) Configure the Secret Token */

Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads.

= Architecture =

<pre>
[ curl / another container ]
│
PUT /files/<filename> ← protected by X-Upload-Token
GET /files/<filename> ← public (download)
│
┌──────▼───────────────────────┐
│ nginx-fileserver Pod │
│ image: nginx-unprivileged │
│ port: 8080 │
└──────────────────────────────┘
│
PersistentVolumeClaim: /data/files
</pre>

= Procedure =

== 1) Clone repository ==

Edit '''secret-upload-token.yaml''' and replace the value of '''UPLOAD_TOKEN''':

<syntaxhighlight lang="bash">
git clone https://github.com/ebasso/mas-nginx-customization-file-server.git

cd mas-nginx-customization-file-server/yamls
</syntaxhighlight>

== 2) Configure the Secret Token ==

Generate a strong token using

openssl rand -hex 32

Edit '''secret-upload-token.yaml''' and replace the value of '''UPLOAD_TOKEN''':

<syntaxhighlight lang="yaml">
stringData:
UPLOAD_TOKEN: "replace-with-a-secure-token"
</syntaxhighlight>

== 3) Full Deployment ==

<syntaxhighlight lang="bash">
oc new-project mas-nginx

# Apply all resources in the correct order
oc apply -f secret-upload-token.yaml
oc apply -f configmap-nginx.yaml
oc apply -f pvc-nginx-files.yaml
oc apply -f deployment-nginx.yaml
oc apply -f service-nginx.yaml
oc apply -f route-nginx.yaml
</syntaxhighlight>

== 4) Verify the Route URL ==

<syntaxhighlight lang="bash">
oc get route nginx-fileserver -o jsonpath='{.spec.host}'
</syntaxhighlight>

Example: <nowiki>nginx-fileserver-mas-nginx.apps.cluster.example.com</nowiki>

== 5) Upload a File with curl ==

Via Route (External Access)

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access)

<nowiki>NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip</nowiki>

== 6) Download a File with curl ==

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access):

<syntaxhighlight lang="bash">
NGINX_HOST=http://nginx-fileserver:8080

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

=== 6.1) List Available Files ===

<syntaxhighlight lang="bash">
curl "https://${NGINX_HOST}/files/"
# or internally:
curl "http://nginx-fileserver:8080/files/"
</syntaxhighlight>

= See also =

* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias| Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category:IBM Maximo]]

IBM Maximo: Containerized NGINX server with authentication to securely host and distribute customization files.zip

2026-07-06T17:47:18Z

Ebasso: /* 1) Clone repository */

Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads.

= Architecture =

<pre>
[ curl / another container ]
│
PUT /files/<filename> ← protected by X-Upload-Token
GET /files/<filename> ← public (download)
│
┌──────▼───────────────────────┐
│ nginx-fileserver Pod │
│ image: nginx-unprivileged │
│ port: 8080 │
└──────────────────────────────┘
│
PersistentVolumeClaim: /data/files
</pre>

= Procedure =

== 1) Clone repository ==

Edit '''secret-upload-token.yaml''' and replace the value of '''UPLOAD_TOKEN''':

<syntaxhighlight lang="bash">
git clone https://github.com/ebasso/mas-nginx-customization-file-server.git

cd mas-nginx-customization-file-server/yamls
</syntaxhighlight>

== 2) Configure the Secret Token ==

Generate a strong token using

openssl rand -hex 32

Edit '''secret-upload-token.yaml''' and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="yaml">
stringData:
UPLOAD_TOKEN: "replace-with-a-secure-token"
</syntaxhighlight>

== 3) Full Deployment ==

<syntaxhighlight lang="bash">
oc new-project mas-nginx

# Apply all resources in the correct order
oc apply -f secret-upload-token.yaml
oc apply -f configmap-nginx.yaml
oc apply -f pvc-nginx-files.yaml
oc apply -f deployment-nginx.yaml
oc apply -f service-nginx.yaml
oc apply -f route-nginx.yaml
</syntaxhighlight>

== 4) Verify the Route URL ==

<syntaxhighlight lang="bash">
oc get route nginx-fileserver -o jsonpath='{.spec.host}'
</syntaxhighlight>

Example: <nowiki>nginx-fileserver-mas-nginx.apps.cluster.example.com</nowiki>

== 5) Upload a File with curl ==

Via Route (External Access)

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access)

<nowiki>NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip</nowiki>

== 6) Download a File with curl ==

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access):

<syntaxhighlight lang="bash">
NGINX_HOST=http://nginx-fileserver:8080

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

=== 6.1) List Available Files ===

<syntaxhighlight lang="bash">
curl "https://${NGINX_HOST}/files/"
# or internally:
curl "http://nginx-fileserver:8080/files/"
</syntaxhighlight>

= See also =

* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias| Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category:IBM Maximo]]

IBM Maximo: Containerized NGINX server with authentication to securely host and distribute customization files.zip

2026-07-06T17:46:49Z

Ebasso: /* 1) Clone repository */

Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads.

= Architecture =

<pre>
[ curl / another container ]
│
PUT /files/<filename> ← protected by X-Upload-Token
GET /files/<filename> ← public (download)
│
┌──────▼───────────────────────┐
│ nginx-fileserver Pod │
│ image: nginx-unprivileged │
│ port: 8080 │
└──────────────────────────────┘
│
PersistentVolumeClaim: /data/files
</pre>

= Procedure =

== 1) Clone repository ==

Edit '''secret-upload-token.yaml''' and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="bash">
git clone https://github.com/ebasso/mas-nginx-customization-file-server.git

cd mas-nginx-customization-file-server/yamls
</syntaxhighlight>

== 2) Configure the Secret Token ==

Generate a strong token using

openssl rand -hex 32

Edit '''secret-upload-token.yaml''' and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="yaml">
stringData:
UPLOAD_TOKEN: "replace-with-a-secure-token"
</syntaxhighlight>

== 3) Full Deployment ==

<syntaxhighlight lang="bash">
oc new-project mas-nginx

# Apply all resources in the correct order
oc apply -f secret-upload-token.yaml
oc apply -f configmap-nginx.yaml
oc apply -f pvc-nginx-files.yaml
oc apply -f deployment-nginx.yaml
oc apply -f service-nginx.yaml
oc apply -f route-nginx.yaml
</syntaxhighlight>

== 4) Verify the Route URL ==

<syntaxhighlight lang="bash">
oc get route nginx-fileserver -o jsonpath='{.spec.host}'
</syntaxhighlight>

Example: <nowiki>nginx-fileserver-mas-nginx.apps.cluster.example.com</nowiki>

== 5) Upload a File with curl ==

Via Route (External Access)

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access)

<nowiki>NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip</nowiki>

== 6) Download a File with curl ==

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access):

<syntaxhighlight lang="bash">
NGINX_HOST=http://nginx-fileserver:8080

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

=== 6.1) List Available Files ===

<syntaxhighlight lang="bash">
curl "https://${NGINX_HOST}/files/"
# or internally:
curl "http://nginx-fileserver:8080/files/"
</syntaxhighlight>

= See also =

* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias| Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category:IBM Maximo]]

IBM Maximo: Containerized NGINX server with authentication to securely host and distribute customization files.zip

2026-07-06T17:45:31Z

Ebasso: /* 6) Download a File with curl */

Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads.

= Architecture =

<pre>
[ curl / another container ]
│
PUT /files/<filename> ← protected by X-Upload-Token
GET /files/<filename> ← public (download)
│
┌──────▼───────────────────────┐
│ nginx-fileserver Pod │
│ image: nginx-unprivileged │
│ port: 8080 │
└──────────────────────────────┘
│
PersistentVolumeClaim: /data/files
</pre>

= Procedure =

== 1) Clone repository ==

Edit [[secret-upload-token.yaml]] and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="bash">
git clone https://github.com/ebasso/mas-nginx-customization-file-server.git

cd mas-nginx-customization-file-server/yamls
</syntaxhighlight>

== 2) Configure the Secret Token ==

Generate a strong token using

openssl rand -hex 32

Edit '''secret-upload-token.yaml''' and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="yaml">
stringData:
UPLOAD_TOKEN: "replace-with-a-secure-token"
</syntaxhighlight>

== 3) Full Deployment ==

<syntaxhighlight lang="bash">
oc new-project mas-nginx

# Apply all resources in the correct order
oc apply -f secret-upload-token.yaml
oc apply -f configmap-nginx.yaml
oc apply -f pvc-nginx-files.yaml
oc apply -f deployment-nginx.yaml
oc apply -f service-nginx.yaml
oc apply -f route-nginx.yaml
</syntaxhighlight>

== 4) Verify the Route URL ==

<syntaxhighlight lang="bash">
oc get route nginx-fileserver -o jsonpath='{.spec.host}'
</syntaxhighlight>

Example: <nowiki>nginx-fileserver-mas-nginx.apps.cluster.example.com</nowiki>

== 5) Upload a File with curl ==

Via Route (External Access)

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access)

<nowiki>NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip</nowiki>

== 6) Download a File with curl ==

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access):

<syntaxhighlight lang="bash">
NGINX_HOST=http://nginx-fileserver:8080

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

=== 6.1) List Available Files ===

<syntaxhighlight lang="bash">
curl "https://${NGINX_HOST}/files/"
# or internally:
curl "http://nginx-fileserver:8080/files/"
</syntaxhighlight>

= See also =

* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias| Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category:IBM Maximo]]

IBM Maximo: Containerized NGINX server with authentication to securely host and distribute customization files.zip

2026-07-06T17:44:43Z

Ebasso: /* 5) Upload a File with curl */

Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads.

= Architecture =

<pre>
[ curl / another container ]
│
PUT /files/<filename> ← protected by X-Upload-Token
GET /files/<filename> ← public (download)
│
┌──────▼───────────────────────┐
│ nginx-fileserver Pod │
│ image: nginx-unprivileged │
│ port: 8080 │
└──────────────────────────────┘
│
PersistentVolumeClaim: /data/files
</pre>

= Procedure =

== 1) Clone repository ==

Edit [[secret-upload-token.yaml]] and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="bash">
git clone https://github.com/ebasso/mas-nginx-customization-file-server.git

cd mas-nginx-customization-file-server/yamls
</syntaxhighlight>

== 2) Configure the Secret Token ==

Generate a strong token using

openssl rand -hex 32

Edit '''secret-upload-token.yaml''' and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="yaml">
stringData:
UPLOAD_TOKEN: "replace-with-a-secure-token"
</syntaxhighlight>

== 3) Full Deployment ==

<syntaxhighlight lang="bash">
oc new-project mas-nginx

# Apply all resources in the correct order
oc apply -f secret-upload-token.yaml
oc apply -f configmap-nginx.yaml
oc apply -f pvc-nginx-files.yaml
oc apply -f deployment-nginx.yaml
oc apply -f service-nginx.yaml
oc apply -f route-nginx.yaml
</syntaxhighlight>

== 4) Verify the Route URL ==

<syntaxhighlight lang="bash">
oc get route nginx-fileserver -o jsonpath='{.spec.host}'
</syntaxhighlight>

Example: <nowiki>nginx-fileserver-mas-nginx.apps.cluster.example.com</nowiki>

== 5) Upload a File with curl ==

Via Route (External Access)

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access)

<nowiki>NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip</nowiki>

== 6) Download a File with curl ==

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access):

<nowiki>NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip</nowiki>

=== 6.1) List Available Files ===

<syntaxhighlight lang="bash">
curl "https://${NGINX_HOST}/files/"
# or internally:
curl "http://nginx-fileserver:8080/files/"
</syntaxhighlight>

= See also =

* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias| Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category:IBM Maximo]]

IBM Maximo: Containerized NGINX server with authentication to securely host and distribute customization files.zip

2026-07-06T17:44:26Z

Ebasso: /* 6) Download a File with curl */

Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads.

= Architecture =

<pre>
[ curl / another container ]
│
PUT /files/<filename> ← protected by X-Upload-Token
GET /files/<filename> ← public (download)
│
┌──────▼───────────────────────┐
│ nginx-fileserver Pod │
│ image: nginx-unprivileged │
│ port: 8080 │
└──────────────────────────────┘
│
PersistentVolumeClaim: /data/files
</pre>

= Procedure =

== 1) Clone repository ==

Edit [[secret-upload-token.yaml]] and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="bash">
git clone https://github.com/ebasso/mas-nginx-customization-file-server.git

cd mas-nginx-customization-file-server/yamls
</syntaxhighlight>

== 2) Configure the Secret Token ==

Generate a strong token using

openssl rand -hex 32

Edit '''secret-upload-token.yaml''' and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="yaml">
stringData:
UPLOAD_TOKEN: "replace-with-a-secure-token"
</syntaxhighlight>

== 3) Full Deployment ==

<syntaxhighlight lang="bash">
oc new-project mas-nginx

# Apply all resources in the correct order
oc apply -f secret-upload-token.yaml
oc apply -f configmap-nginx.yaml
oc apply -f pvc-nginx-files.yaml
oc apply -f deployment-nginx.yaml
oc apply -f service-nginx.yaml
oc apply -f route-nginx.yaml
</syntaxhighlight>

== 4) Verify the Route URL ==

<syntaxhighlight lang="bash">
oc get route nginx-fileserver -o jsonpath='{.spec.host}'
</syntaxhighlight>

Example: <nowiki>nginx-fileserver-mas-nginx.apps.cluster.example.com</nowiki>

== 5) Upload a File with curl ==

Via Route (External Access)

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access)

: NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip

== 6) Download a File with curl ==

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access):

<nowiki>NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip</nowiki>

=== 6.1) List Available Files ===

<syntaxhighlight lang="bash">
curl "https://${NGINX_HOST}/files/"
# or internally:
curl "http://nginx-fileserver:8080/files/"
</syntaxhighlight>

= See also =

* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias| Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category:IBM Maximo]]

IBM Maximo: Containerized NGINX server with authentication to securely host and distribute customization files.zip

2026-07-06T17:44:03Z

Ebasso: /* 5)Upload a File with curl */

Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads.

= Architecture =

<pre>
[ curl / another container ]
│
PUT /files/<filename> ← protected by X-Upload-Token
GET /files/<filename> ← public (download)
│
┌──────▼───────────────────────┐
│ nginx-fileserver Pod │
│ image: nginx-unprivileged │
│ port: 8080 │
└──────────────────────────────┘
│
PersistentVolumeClaim: /data/files
</pre>

= Procedure =

== 1) Clone repository ==

Edit [[secret-upload-token.yaml]] and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="bash">
git clone https://github.com/ebasso/mas-nginx-customization-file-server.git

cd mas-nginx-customization-file-server/yamls
</syntaxhighlight>

== 2) Configure the Secret Token ==

Generate a strong token using

openssl rand -hex 32

Edit '''secret-upload-token.yaml''' and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="yaml">
stringData:
UPLOAD_TOKEN: "replace-with-a-secure-token"
</syntaxhighlight>

== 3) Full Deployment ==

<syntaxhighlight lang="bash">
oc new-project mas-nginx

# Apply all resources in the correct order
oc apply -f secret-upload-token.yaml
oc apply -f configmap-nginx.yaml
oc apply -f pvc-nginx-files.yaml
oc apply -f deployment-nginx.yaml
oc apply -f service-nginx.yaml
oc apply -f route-nginx.yaml
</syntaxhighlight>

== 4) Verify the Route URL ==

<syntaxhighlight lang="bash">
oc get route nginx-fileserver -o jsonpath='{.spec.host}'
</syntaxhighlight>

Example: <nowiki>nginx-fileserver-mas-nginx.apps.cluster.example.com</nowiki>

== 5) Upload a File with curl ==

Via Route (External Access)

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access)

: NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip

== 6) Download a File with curl ==

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access):
: NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip

=== 6.1) List Available Files ===

<syntaxhighlight lang="bash">
curl "https://${NGINX_HOST}/files/"
# or internally:
curl "http://nginx-fileserver:8080/files/"
</syntaxhighlight>

= See also =

* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias| Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category:IBM Maximo]]

IBM Maximo: Containerized NGINX server with authentication to securely host and distribute customization files.zip

2026-07-06T17:43:38Z

Ebasso: /* 4 Verify the Route URL */

Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads.

= Architecture =

<pre>
[ curl / another container ]
│
PUT /files/<filename> ← protected by X-Upload-Token
GET /files/<filename> ← public (download)
│
┌──────▼───────────────────────┐
│ nginx-fileserver Pod │
│ image: nginx-unprivileged │
│ port: 8080 │
└──────────────────────────────┘
│
PersistentVolumeClaim: /data/files
</pre>

= Procedure =

== 1) Clone repository ==

Edit [[secret-upload-token.yaml]] and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="bash">
git clone https://github.com/ebasso/mas-nginx-customization-file-server.git

cd mas-nginx-customization-file-server/yamls
</syntaxhighlight>

== 2) Configure the Secret Token ==

Generate a strong token using

openssl rand -hex 32

Edit '''secret-upload-token.yaml''' and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="yaml">
stringData:
UPLOAD_TOKEN: "replace-with-a-secure-token"
</syntaxhighlight>

== 3) Full Deployment ==

<syntaxhighlight lang="bash">
oc new-project mas-nginx

# Apply all resources in the correct order
oc apply -f secret-upload-token.yaml
oc apply -f configmap-nginx.yaml
oc apply -f pvc-nginx-files.yaml
oc apply -f deployment-nginx.yaml
oc apply -f service-nginx.yaml
oc apply -f route-nginx.yaml
</syntaxhighlight>

== 4) Verify the Route URL ==

<syntaxhighlight lang="bash">
oc get route nginx-fileserver -o jsonpath='{.spec.host}'
</syntaxhighlight>

Example: <nowiki>nginx-fileserver-mas-nginx.apps.cluster.example.com</nowiki>

== 5)Upload a File with curl ==

Via Route (External Access)

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access)

: NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip

== 6) Download a File with curl ==

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access):
: NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip

=== 6.1) List Available Files ===

<syntaxhighlight lang="bash">
curl "https://${NGINX_HOST}/files/"
# or internally:
curl "http://nginx-fileserver:8080/files/"
</syntaxhighlight>

= See also =

* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias| Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category:IBM Maximo]]

IBM Maximo: Containerized NGINX server with authentication to securely host and distribute customization files.zip

2026-07-06T17:43:22Z

Ebasso: /* 4 Verify the Route URL */

Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads.

= Architecture =

<pre>
[ curl / another container ]
│
PUT /files/<filename> ← protected by X-Upload-Token
GET /files/<filename> ← public (download)
│
┌──────▼───────────────────────┐
│ nginx-fileserver Pod │
│ image: nginx-unprivileged │
│ port: 8080 │
└──────────────────────────────┘
│
PersistentVolumeClaim: /data/files
</pre>

= Procedure =

== 1) Clone repository ==

Edit [[secret-upload-token.yaml]] and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="bash">
git clone https://github.com/ebasso/mas-nginx-customization-file-server.git

cd mas-nginx-customization-file-server/yamls
</syntaxhighlight>

== 2) Configure the Secret Token ==

Generate a strong token using

openssl rand -hex 32

Edit '''secret-upload-token.yaml''' and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="yaml">
stringData:
UPLOAD_TOKEN: "replace-with-a-secure-token"
</syntaxhighlight>

== 3) Full Deployment ==

<syntaxhighlight lang="bash">
oc new-project mas-nginx

# Apply all resources in the correct order
oc apply -f secret-upload-token.yaml
oc apply -f configmap-nginx.yaml
oc apply -f pvc-nginx-files.yaml
oc apply -f deployment-nginx.yaml
oc apply -f service-nginx.yaml
oc apply -f route-nginx.yaml
</syntaxhighlight>

== 4 Verify the Route URL ==

<syntaxhighlight lang="bash">
oc get route nginx-fileserver -o jsonpath='{.spec.host}'
</syntaxhighlight>

Example: <nowiki>nginx-fileserver-mas-nginx.apps.cluster.example.com</nowiki>

== 5)Upload a File with curl ==

Via Route (External Access)

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access)

: NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip

== 6) Download a File with curl ==

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access):
: NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip

=== 6.1) List Available Files ===

<syntaxhighlight lang="bash">
curl "https://${NGINX_HOST}/files/"
# or internally:
curl "http://nginx-fileserver:8080/files/"
</syntaxhighlight>

= See also =

* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias| Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category:IBM Maximo]]

IBM Maximo: Containerized NGINX server with authentication to securely host and distribute customization files.zip

2026-07-06T17:42:38Z

Ebasso: /* 2) Configure the Secret Token */

Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads.

= Architecture =

<pre>
[ curl / another container ]
│
PUT /files/<filename> ← protected by X-Upload-Token
GET /files/<filename> ← public (download)
│
┌──────▼───────────────────────┐
│ nginx-fileserver Pod │
│ image: nginx-unprivileged │
│ port: 8080 │
└──────────────────────────────┘
│
PersistentVolumeClaim: /data/files
</pre>

= Procedure =

== 1) Clone repository ==

Edit [[secret-upload-token.yaml]] and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="bash">
git clone https://github.com/ebasso/mas-nginx-customization-file-server.git

cd mas-nginx-customization-file-server/yamls
</syntaxhighlight>

== 2) Configure the Secret Token ==

Generate a strong token using

openssl rand -hex 32

Edit '''secret-upload-token.yaml''' and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="yaml">
stringData:
UPLOAD_TOKEN: "replace-with-a-secure-token"
</syntaxhighlight>

== 3) Full Deployment ==

<syntaxhighlight lang="bash">
oc new-project mas-nginx

# Apply all resources in the correct order
oc apply -f secret-upload-token.yaml
oc apply -f configmap-nginx.yaml
oc apply -f pvc-nginx-files.yaml
oc apply -f deployment-nginx.yaml
oc apply -f service-nginx.yaml
oc apply -f route-nginx.yaml
</syntaxhighlight>

== 4 Verify the Route URL ==

<syntaxhighlight lang="bash">
oc get route nginx-fileserver -o jsonpath='{.spec.host}'
# Example:
# nginx-fileserver-mas-nginx.apps.cluster.example.com
</syntaxhighlight>

== 5)Upload a File with curl ==

Via Route (External Access)

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access)

: NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip

== 6) Download a File with curl ==

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access):
: NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip

=== 6.1) List Available Files ===

<syntaxhighlight lang="bash">
curl "https://${NGINX_HOST}/files/"
# or internally:
curl "http://nginx-fileserver:8080/files/"
</syntaxhighlight>

= See also =

* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias| Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category:IBM Maximo]]

IBM Maximo: Containerized NGINX server with authentication to securely host and distribute customization files.zip

2026-07-06T17:42:05Z

Ebasso:

Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads.

= Architecture =

<pre>
[ curl / another container ]
│
PUT /files/<filename> ← protected by X-Upload-Token
GET /files/<filename> ← public (download)
│
┌──────▼───────────────────────┐
│ nginx-fileserver Pod │
│ image: nginx-unprivileged │
│ port: 8080 │
└──────────────────────────────┘
│
PersistentVolumeClaim: /data/files
</pre>

= Procedure =

== 1) Clone repository ==

Edit [[secret-upload-token.yaml]] and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="bash">
git clone https://github.com/ebasso/mas-nginx-customization-file-server.git

cd mas-nginx-customization-file-server/yamls
</syntaxhighlight>

== 2) Configure the Secret Token ==

Edit '''secret-upload-token.yaml''' and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="yaml">
stringData:
UPLOAD_TOKEN: "replace-with-a-secure-token"
</syntaxhighlight>

: Note: Generate a strong token using <code>openssl rand -hex 32</code>.

== 3) Full Deployment ==

<syntaxhighlight lang="bash">
oc new-project mas-nginx

# Apply all resources in the correct order
oc apply -f secret-upload-token.yaml
oc apply -f configmap-nginx.yaml
oc apply -f pvc-nginx-files.yaml
oc apply -f deployment-nginx.yaml
oc apply -f service-nginx.yaml
oc apply -f route-nginx.yaml
</syntaxhighlight>

== 4 Verify the Route URL ==

<syntaxhighlight lang="bash">
oc get route nginx-fileserver -o jsonpath='{.spec.host}'
# Example:
# nginx-fileserver-mas-nginx.apps.cluster.example.com
</syntaxhighlight>

== 5)Upload a File with curl ==

Via Route (External Access)

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access)

: NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip

== 6) Download a File with curl ==

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access):
: NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip

=== 6.1) List Available Files ===

<syntaxhighlight lang="bash">
curl "https://${NGINX_HOST}/files/"
# or internally:
curl "http://nginx-fileserver:8080/files/"
</syntaxhighlight>

= See also =

* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias| Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category:IBM Maximo]]

IBM Maximo: Containerized NGINX server with authentication to securely host and distribute customization files.zip

2026-07-06T17:40:46Z

Ebasso: Created page with "Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads. = Architecture = <pre> [ curl / another container ] │ PUT /files/<filename> ← protected by X-Upload-Token GET /files/<filename> ← public (download) │ ┌──────▼───────────────────────┐ │ nginx-fileserver Pod..."

Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads.

= Architecture =

<pre>
[ curl / another container ]
│
PUT /files/<filename> ← protected by X-Upload-Token
GET /files/<filename> ← public (download)
│
┌──────▼───────────────────────┐
│ nginx-fileserver Pod │
│ image: nginx-unprivileged │
│ port: 8080 │
└──────────────────────────────┘
│
PersistentVolumeClaim: /data/files
</pre>

= Procedure =

== 1) Clone repository ==

Edit [[secret-upload-token.yaml]] and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="bash">
git clone https://github.com/ebasso/mas-nginx-customization-file-server.git

cd mas-nginx-customization-file-server/yamls
</syntaxhighlight>

== 2) Configure the Secret Token ==

Edit '''secret-upload-token.yaml''' and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="yaml">
stringData:
UPLOAD_TOKEN: "replace-with-a-secure-token"
</syntaxhighlight>

: Note: Generate a strong token using <code>openssl rand -hex 32</code>.

== 3) Full Deployment ==

<syntaxhighlight lang="bash">
oc new-project mas-nginx

# Apply all resources in the correct order
oc apply -f secret-upload-token.yaml
oc apply -f configmap-nginx.yaml
oc apply -f pvc-nginx-files.yaml
oc apply -f deployment-nginx.yaml
oc apply -f service-nginx.yaml
oc apply -f route-nginx.yaml

</syntaxhighlight>

----

== 3 — Verify the Route URL ==

<syntaxhighlight lang="bash">
oc get route nginx-fileserver -o jsonpath='{.spec.host}'
# Example:
# nginx-fileserver-mas-nginx.apps.cluster.example.com
</syntaxhighlight>

----

== 4)Upload a File with curl ==

Via Route (External Access)

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')
TOKEN="replace-with-a-secure-token"

curl -v \
-X PUT \
-H "X-Upload-Token: ${TOKEN}" \
-H "Content-Type: application/octet-stream" \
--upload-file ./customization-files.zip \
"https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access)

: NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip

== 5 — Download a File with curl ==

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access):
: NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip

=== 5.1 — List Available Files ===

<syntaxhighlight lang="bash">
curl "https://${NGINX_HOST}/files/"
# or internally:
curl "http://nginx-fileserver:8080/files/"
</syntaxhighlight>

= See Alson também =

* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias| Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category:IBM Maximo]]