Archive for December, 2021

Feast of Saint Naum of Ohrid, One of the Holy Seven Apostoles and Enlighteners of Bulgaria and Slavonic Eastern Orthodox Churches venerated 23 December

Tuesday, December 28th, 2021

In Bulgarian Orthodox Church the feast of Saint Naum of Ohrid is marked right at the end of the Christmas Fasting Period only days before Nativity (nasci, which means "to be born.",  source, Latin nātīvitās (“birth”). See also naïveté, γέννηση (Greek)as known in the East or Christmas (Christ-Mass) or XMas, the "X" comes from the Greek letter Chi,as known in the West. 
The reason to celebrate saint Naum are twofold second, first is the fact he passed away on 23 of December year 910, and second with the aim is to underline the importance of his many translation works for the Cyrillic Medieval Enlightenment Renessance for Europe and Asian Lands thorough the many Bulgarian saints stemming from Saint Cyril and Methodius.

Saint-Seven-Apostles-of-the-Bulgarian-and-Slavonic-Churches-SvetiSedmochislenitsi-3

Saint Seven Apostles contemporary Mosaic Saint Sofia Church, Sofia Capital of Bulgaria

The enlightement spreading the new translated understandable texts for the Slavonic "Sea" of people and even in far asia for Slavs and respectively the Slavonic Churches, the biggest member of which is now the Russian Orthodox Church and through later through Orthodox Russia enlightened with Holy Orthodoxy Asia (China, Japan) and Africa. Back then among 1/3 of all the civillized world has been in contact or can speak some form of slavonic and the fact that the Holy Bible, and the Church books were translated for the Slavs has been unthinkably great.Today among 1/10 of the world still speaks and writes some form of Cyrillic thanks to the great works of Saint Naum and the rest six of the Holy Apostles, that are nowadays little known in Russia and the rest of Slavonic world.

Saint-Seven-Slavonic-Apostles-of-Bulgarian-and-SLavonic-Churches-Sv_Sedmocislenici_with_Jovan_Kukuzel_in_Ardenica

St. Seven Numbers and St. John Kukuzel. A fresco from 1744 from the main church of the monastery in Ardenitsa (present-day Albania), built on the foundations of the Holy Trinity Church, built with the patronage of St. Tsar Boris the Baptist. Written by the brothers Constantine and Anastas Zograf from Korca.

The names of the Seven Holy-equal apostles are  Saint Cyril and Methodius who created the Glagolitic script, and their five students Kliment, Naum, Gorazd, Sava and Angelariy.[ 3 ]. Another person we know of the of constellation of God enlightened apostle equal is Constantine of Preslav also considered a direct disciple of Methodius, the Church traditionally does not include him because he is not canonized (even though there is high probability he has been no less saint than the 7th). Saint Constantine of Preslav he is an author of the Alphabet prayer and multiple other Church books and works that are now completely destroyed and lost.

Saint Naum of Ohrid or Preslav himself was a medieval Bulgarian scientist (if we talk in terms of todays science), writer and saint. The Orthodox Church also venerates him as one of the Holy Septuagint translators as he used the famous Septuagint translation of the Bible as a specimen for his Cyrillic script translation.

 

Church sung chants on St Naum Feast

Troparion, voice 4

He left the world, became attached to Christ, crucified his flesh and lived spiritually, blessed Nahum.
You have endeavored to ascend in the way of the apostles, you have converted many, countless Moesians to the faith,
therefore, with your prayers, deliver us from temptations.

Kontakion sung, voice 3, similar to Virgo today

The honorable memory of your bright deeds, shining like a great sun for all,
enlightens those who sing to you, and casts out demons and all infirmities,
therefore, gathered with love, we truly praise her. 

St_Naum_of_Ohrid_Last_Quarter_of_XIV_Century_St_Mary_Perivleptos_Church,_Ohrid_Icon_Gallery


Short Biography of Saint Naum


Biography Information about his life before arriving in Bulgaria is scarce.
According to one of his biographies, he was born in Moesia, "of noble parents", but despising wealth and nobility, he joined Cyril and Methodius [1] 

 According to the life of Cyril and Methodius by Clement of Ohrid, Nahum participated in their mission in Great Moravia, and in 868 was ordained in Rome. In 886, Nahum was expelled from Great Moravia after spending some time in prison for his resistance to the influence of the German clergy. He arrives in Bulgaria together with Kliment Ohridski, Sava, Angelariy and Gorazd. Monastery "St. Naum ”on Lake Ohrid Naum is one of the founders of the Preslav Literary School (originally in Pliska, that was a major Capital of Bulgaria at that time and first Capital of Bulgaria [2] ). In Pliska St. Nauh worked between 886 and 893 on copying important books of the bible and multiplying the still scarce Church books in Bulgarian. After Clement of Ohrid was appointed bishop of Drembica in 893, Nahum continued his work at the Ohrid Literary School. During this period he founded a monastery on Lake Ohrid in honour of Saint Archangel Michael (a very likely reference to Baptizmal name of Saint King Boris the Baptizer of Bulgaria who accepted the name Michael in his Baptism. The monastery in Ohrid, where his holy relics lays till this day in a small grave  is now named in honour.

Monastry-of-St-Naum-Ohrid-Lake

Monastery of Saint Naum of Ohrid started by saint Naum

Even though the scarce information we have for the saint, the honour to Saint Naum over the centuries from the Slavonic Christiandome has been enormous and he has been especially invoked by people who suffer attacks by unclean spirits or are suffering long years sickness in heavy condition. In modern Theology he is also known under the name Saint Naum of Preslav-Ohrid a reference to the two major Bulgarian cities where he has done his spiritual labour in translating texts from Greek and perhaps Latin to the freshly invented Bulgarian alphabet recently reformed by his teacher Saint Kliment Ohridski who by himself has been a pupil of the Inventors of the Glagolic at that time Old-Bulgarian alphabet Saint Cyril and Saint Methodius.

Monastery-of-Saint-Naum-Lake-of-Ohrid

Up view to Monastery of Saint Naum of Ohrid (the Church size was common in the time the aim of Building small Churches was to show the humbleness of Faith)

Venerable Nahum of Ohrid was the youngest of the disciples of the holy brothers Cyril and Methodius, in the town of Devol, Macedonia, instructed in the faith of Christ, fought there and died in 910.


Dormition-of-Saint-Naum-of-Ohrid-presentation-to-Christ
Dormition of Saint Naum of Ohrid

His relics are a source of healing. Venerable Naum Ohridski died on December 23, 910, when his memory is celebrated even till today especially in Bulgaria and today's Macedonia which back in the day has been part of the Bulgaria (the far border of Bulgaria, historical Albania was just 300 meters from Ohrid's Saint Naum self-built Monastery).

Sea-view-to-monastery-of-Saint-Naum

Sea view to Monastery of Saint Naum Ohrid

Ohrid-Saint-naum-holy-Archangels-Church

Peacocks in the back yard of Saint Naum Church (peafowl has been common Christian symbol in the early centuries)

Since ancient times the Ohrid Archbishopric (which over the centuries has been usually identified with Bulgaria), closed as an independent in 1767 as desired by Turkish Sultan with the help of Ecumenical Patriarchate. In Bulgaria there is established June 20 as a day for a more solemn celebration of his memory.  [ 4 ]

Saint-John-of-Shanghai-and-San-Franciso-the-Wonderworker
Saint John Maksimovich (Bishop of Shanghai and San Francisco)

A curious and little known fact from the Life of almost contemporary 20 century saint John Maksimovitch (Saint John of Shanghai and San Francisco) is Saint John of Maksimovich discovered about Saint Naum's existence "by accidence" during his studies. Finding a relief and spiritual enlightment and support from the Saint he used to go to hospitals to pray for the sick holding an icon of saint Naum of Ohrid invoking his holy prayers, throughout his life he held a severe reverance for the saint, thanks to whose prayers Saint John Maksimovitch presented himself to Christ, passed to eternal life on his feast day 23st of December.

Saint-Naum-and-Saint-Clement-of-Ohrid-Bulgarian-Enligtheners-and-one-of-seven-apostle-equal-man-enlighteners-of-the-Slavs

Saint Naum (right side) and Saint Clement of Ohrid
 

St. Naum Preslav-Ohrid remarkable Enlightener [ 5 ]

Author: Ivan Grudev

 

Brethren, let it not be without remembrance
Elder Nahum, this brother, comrade and
compassionate of Blessed Clement …
From the oldest biography of St. Naum, first quarter of the X century.

St. Naum Ohridski. Stamp of H. Zhefarovich, 1743. 1150 years have passed since the birth of Presbyter Nahum, the student, collaborator and successor of the great work of the equal apostles Cyril and Methodius, one of the most prominent figures of medieval Bulgaria.

The son of "his noble parents", Nahum grew up in Moesia (the biographer used the unofficial name of Bulgaria throughout the Middle Ages, and more likely – the medieval regional name of present-day Macedonia – Lower Moesia). There he joined Cyril and Methodius, "Who then walked all over the Bulgarian land, striving to convert the seduced to the Orthodox faith … To bring many to the Christian faith and enlighten them with the light of truth … translated the divine scripture, the old and the new, from the Hellenic (Greek) language to the simple Bulgarian language and invented letters for the Slavic language themselves "; or to Methodius during his reign as a Slavic principality in present-day Eastern Macedonia from approximately 837 to 847, or to Constantine-Cyril during his fateful mission among the Bulgarian Slavs of the Bregalnica valley (present-day northeastern Macedonia) from 855 to 859

The biographer's announcement that Nahum was the brother of Kliment Ohridski was accepted by most researchers in a spiritual sense – that the two were close associates in the great and long struggle for the establishment of the Slavic-Bulgarian education and literature. It seems the truth is different. A careful analysis of the facts that have come down to us cannot but lead to the conviction that perhaps Nahum and Clement were in fact brothers. The role of Nahum, the older brother, in relation to the ten-year-old and more talented Clement (born in the second half of the thirties of the ninth century), is strikingly reminiscent of the tender care and unwavering support of Methodius to Constantine. Cyril.

Both Nahum and Clement faithfully followed the Thessalonian brothers, providing them with the closest help and cooperation in their missions among their compatriots – the Bulgarian Slavs, the Khazars, Moravians and Pannonians, "Walking with them everywhere, even to ancient Rome."

After the death of Methodius on April 6, 885, Nahum was probably one of his closest students, who helped Clement to quickly write the Extensive Life of the immortal Slavic-Bulgarian first teacher, to raise him along with the previously written Extensive Life of Constantine-Cyril as a shield for the preservation of the works and covenants of the Holy Brothers among the Western Slavs. But their efforts are in vain. The united union of German feudal lords, the Catholic clergy and the traitors of the Moravian princely court subjected the work of Cyril and Methodius in Moravia and Pannonia to pogrom and destruction.

Clement's biographer reports that the persecuted students of Cyril and Methodius "longed for Bulgaria, thought about Bulgaria and hoped that Bulgaria was ready to give them peace." Such feelings and such aspirations could be felt only by people in trouble abroad, to their Fatherland, from which they once left with their favorite teachers around the world.

Unlike the Moravian and Pannonian students, who were thrown into prisons or sold into slavery, and some, such as Methodius' successor Gorazd and killed, Nahum, Clement and Angelarius, as Bulgarian subjects, were forcibly expelled from Moravia.

Reaching Belgrade with all their might, the three martyrs were received with great reverence by the Boritarkan (according to a later report, Prince Radislav), the Bulgarian military and civilian governor of the northwestern lands, as long-awaited guests. 
Saint-King-Boris-Baptizer-Sveti_car_Boris_pokrystitel

Saint King Equal-to-the-Apostles Boris-Mikhail from (852–889, Church feast 2 of May)


For a short time still holding a title Prince Boris-Mikhail enjoyed the dear guests in the capital Pliska, who brought there the light of the work of Cyril and Methodius, the most priceless treasure of the people and the state. The weary Angelarius died quickly, and after a short rest Clement took the road to the extreme southwest of the Bulgarian land, the territories most recently liberated from Byzantine rule, where the Greek cultural and religious influence of the great centers of Thessaloniki and Drach was almost irresistible. The highest state interests urgently demanded the creation of a hearth of Slavic-Bulgarian education and literature in order to save the Bulgarian language from the Greco-Byzantine aspirations. By order and with the generous help of Prince Boris-Mikhail, Clement established an educational and literary center in Devol (now a non-existent city in southern Albania).

Only Nahum remained in the northeastern Bulgarian lands. He was given a similar task. In order to avoid an undesirable complication of relations with the Greek clergy in Bulgaria and Byzantium behind them, again with the help of the wise ruler Nahum organized a Slavic-Bulgarian educational and literary center for the northeastern lands, but not in the capital Pliska, where the Greek Archbishop of Bulgaria, and in the nearby Slavic settlement of Preslav (and Clement chose for his activity not Lichnida, today Ohrid, the metropolitan center of the southwestern lands, but Devol, a city of the same diocese). The younger student of Metodiev, Konstantin Preslavski, reports that he was inspired by Nahum to write his Teaching Gospel. This announcement proves that the leader and organizer of the Preslav educational and literary center was Presbyter Naum.

After the brilliant research of our late scientist Prof. Ivan Galabov at the University of Salzburg, the use of non-scientific terms "Preslav Literary School" and "Ohrid Literary School" is no longer justified, as "school" primarily means individuality, originality, internal autonomous development. Prof. Iv. Galabov proved the very close cooperation between the artists from Devol-Ohrid and Preslav, in the undisputed championship and influence of Veliki Preslav, in which such giants worked as Presbyter Naum, Bishop Konstantin Preslavski, Presbyter John Exarch, blacksmith Dox (see Chernorizets Hnorizets Presbyter John, Presbyter Gregory the Monk, Blacksmith Tudor Doksov, Prince Simeon, etc., while the achievements of the Devolsko-Ohrid center are the work of only one Clement, although a giant of spirit and word. As far as Devol-Ohrid and Preslav flourished not only education and literature, but also fine and applied arts, architecture, crafts, etc., for which Prof. N. Mavrodinov proved their stylistic unity throughout the era of the First Bulgarian Kingdom, despite the insignificant local differences, the scientific concepts are "Devolsko-Ohrid Cultural Center" and "Preslav Cultural Center". 

The-Grave-of-Saint-Naum-of-Ohrid-one-of-the-Seven-Apostles-of-Bulgaria-and-Slavonic-lands

The Grave of Saint Naum Ohrid (situated near the Northern Wall of the Church)

In his monastery on December 23, 910, the famous educator and benefactor of the Bulgarian people died, buried by his "brother, comrade and compassionate" Bishop Kliment Ohridski. His tomb is preserved to this day in a special chapel to the right of the altar of the monastery church.

Although the church has been rebuilt twice, the temple built by Nahum has remained the central building of the present one. This surviving church, with the tomb of Naum Preslav-Ohrid and its highly artistic frescoes from 1806, the work of painter Tarpo Konstantinov from Korca (probably Debar master, settled there, or a descendant of Debar settler), in which central place is occupied by the images of Prince Boris-Michael, the Holy Septuagint – Cyril, Methodius, Clement, Nahum, Gorazd, Sava and Angelarius, separately of Nahum, Clement and Prince John-Vladimir, is the most exciting pantheon of the First Bulgarian Kingdom and his Golden Age.

No, the presbyter Naum Preslavsko-Ohridski was not left without remembrance and praise. No Bulgarian has forgotten that he is one of the first masters who laid in Preslav and Ohrid the foundations on which Bulgarian culture is built from then until today. And forever.

 

Used Sources

1. ref (Duychev, Ivan. Extensive Greek biography in the service of Naum Ohridski, in: Duychev, Ivan. Studies on Medieval Bulgarian History and Culture, Sofia, 1981, p. 178. )

2. https://en.wikipedia.org/wiki/Pliska

3. https://en.wikipedia.org/wiki/Seven_Apostles_of_Bulgarian_Orthodox_Church

4. Extensive Orthodox Monthly lives, ed. Tavor and Lives of the Saints, Synodal Publishing House 1991

5. First publication on the Internet liternet.bg. 

6. http://www.pravoslavieto.com/life/12.23_sv_Naum_Ohridski.htm

7. https://en.wikipedia.org/wiki/Boris_I_of_Bulgaria

8. https://en.wikipedia.org/wiki/Clement_of_Ohrid

Log rsyslog script incoming tagged string message to separate external file to prevent /var/log/message from string flood

Wednesday, December 22nd, 2021

rsyslog_logo-log-external-tag-scripped-messages-to-external-file-linux-howto

If you're using some external bash script to log messages via rsyslogd to some of the multiple rsyslog understood data tubes (called in rsyslog language facility levels) and you want Rsyslog to move message string to external log file, then you had the same task as me few days ago.

For example you have a bash shell script that is writting a message to rsyslog daemon to some of the predefined facility levels be it:
 

kern,user,cron, auth etc. or some local

and your logged script data ends under the wrong file location /var/log/messages , /var/log/secure , var/log/cron etc. However  you need to log everything coming from that service to a separate file based on the localX (fac. level) the usual way to do it is via some config like, as you would usually do it with rsyslog variables as:
 

local1.info                                            /var/log/custom-log.log

# Don't log private authentication messages!
*.info;mail.none;authpriv.none;cron.none;local0.none;local1.none        /var/log/messages


Note the local1.none is instructing the rsyslog not to log anything from local1 facility towards /var/log/message. 
But what if this due to some weirdness in configuration of rsyslog on the server or even due to some weird misconfiguration in

/etc/systemd/journald.conf such as:

[Journal]
Storage=persistent
RateLimitInterval=0s
RateLimitBurst=0
SystemMaxUse=128M
SystemMaxFileSize=32M
MaxRetentionSec=1month
MaxFileSec=1week
ForwardToSyslog=yes
SplitFiles=none

Due to that config and especially the FowardToSyslog=yes, the messages sent via the logger tool to local1 still end up inside /var/log/messages, not nice huh ..

The result out of that is anything being sent with a predefined TAGGED string via the whatever.sh script which uses the logger command  (if you never use it check man logger) to enter message into rsyslog with cmd like:
 

# logger -p local1.info -t TAG_STRING

# logger -p local2.warn test
# tail -2 /var/log/messages
Dec 22 18:58:23 pcfreak rsyslogd: — MARK —
Dec 22 19:07:12 pcfreak hipo: test


was nevertheless logged to /var/log/message.
Of course /var/log/message becomes so overfilled with "junk" shell script data not related to real basic Operating system adminsitration, so this prevented any critical or important messages that usually should come under /var/log/message / /var/log/syslog to be lost among the big quantities of other tagged tata reaching the log.

After many attempts to resolve the issue by modifying /etc/rsyslog.conf as well as the messed /etc/systemd/journald.conf (which by the way was generated with this strange values with an OS install time automation ansible stuff). It took me a while until I found the solution on how to tell rsyslog to log the tagged message strings into an external separate file. From my 20 minutes of research online I have seen multitudes of people in different Linux OS versions to experience the same or similar issues due to whatever, thus this triggered me to write this small article on the solution to rsyslog.

The solution turned to be pretty easy but requires some further digging into rsyslog, Redhat's basic configuration on rsyslog documentation is a very nice reading for starters, in my case I've used one of the Propery-based compare-operations variable contains used to select my tagged message string.
 

1. Add msg contains compare-operations to output log file and discard the messages

[root@centos bin]# vi /etc/rsyslog.conf

# config to log everything logged to rsyslog to a separate file
:msg, contains, "tag_string:/"         /var/log/custom-script-log.log
:msg, contains, "tag_string:/"    ~

Substitute quoted tag_string:/ to whatever your tag is and mind that it is better this config is better to be placed somewhere near the beginning of /etc/rsyslog.conf and touch the file /var/log/custom-script-log.log and give it some decent permissions such as 755, i.e.
 

1.1 Discarding a message


The tilda sign –  

as placed to the end of the msg, contains is the actual one to tell the string to be discarded so it did not end in /var/log/messages.

Alternative rsyslog config to do discard the unwanted message once you have it logged is with the
rawmsg variable, like so:

 

# config to log everything logged to rsyslog to a separate file
:msg, contains, "tag_string:/"         /var/log/custom-script-log.log
:rawmsg, isequal, "tag_string:/" stop

Other way to stop logging immediately after log is written to custom file across some older versions of rsyslog is via the &stop

:msg, contains, "tag_string:/"         /var/log/custom-script-log.log
& stop

I don't know about other versions but Unfortunately the &stop does not work on RHEL 7.9 with installed rpm package rsyslog-8.24.0-57.el7_9.1.x86_64.

1.2 More with property based filters basic exclusion of string 

Property based filters can do much more, you can for example, do regular expression based matches of strings coming to rsyslog and forward to somewhere.

To select syslog messages which do not contain any mention of the words fatal and error with any or no text between them (for example, fatal lib error), type:

:msg, !regex, "fatal .* error"

 

2. Create file where tagged data should be logged and set proper permissions
 

[root@centos bin]# touch /var/log/custom-script-log.log
[root@centos bin]# chmod 755 /var/log/custom-script-log.log


3. Test rsyslogd configuration for errors and reload rsyslog

[root@centos ]# rsyslogd -N1
rsyslogd: version 8.24.0-57.el7_9.1, config validation run (level 1), master config /etc/rsyslog.conf
rsyslogd: End of config validation run. Bye.

[root@centos ]# systemctl restart rsyslog
[root@centos ]#  systemctl status rsyslog 
● rsyslog.service – System Logging Service
   Loaded: loaded (/usr/lib/systemd/system/rsyslog.service; enabled; vendor preset: enabled)
   Active: active (running) since Wed 2021-12-22 13:40:11 CET; 3h 5min ago
     Docs: man:rsyslogd(8)
           http://www.rsyslog.com/doc/
 Main PID: 108600 (rsyslogd)
   CGroup: /system.slice/rsyslog.service
           └─108600 /usr/sbin/rsyslogd -n

 

4. Property-based compare-operations supported by rsyslog table
 

Compare-operation Description
contains Checks whether the provided string matches any part of the text provided by the property. To perform case-insensitive comparisons, use  contains_i .
isequal Compares the provided string against all of the text provided by the property. These two values must be exactly equal to match.
startswith Checks whether the provided string is found exactly at the beginning of the text provided by the property. To perform case-insensitive comparisons, use  startswith_i .
regex Compares the provided POSIX BRE (Basic Regular Expression) against the text provided by the property.
ereregex Compares the provided POSIX ERE (Extended Regular Expression) regular expression against the text provided by the property.
isempty Checks if the property is empty. The value is discarded. This is especially useful when working with normalized data, where some fields may be populated based on normalization result.

 


5. Rsyslog understanding Facility levels

Here is a list of facility levels that can be used.

Note: The mapping between Facility Number and Keyword is not uniform over different operating systems and different syslog implementations, so among separate Linuxes there might be diference in the naming and numbering.

Facility Number Keyword Facility Description
0 kern kernel messages
1 user user-level messages
2 mail mail system
3 daemon system daemons
4 auth security/authorization messages
5 syslog messages generated internally by syslogd
6 lpr line printer subsystem
7 news network news subsystem
8 uucp UUCP subsystem
9   clock daemon
10 authpriv security/authorization messages
11 ftp FTP daemon
12 NTP subsystem
13 log audit
14 log alert
15 cron clock daemon
16 local0 local use 0 (local0)
17 local1 local use 1 (local1)
18 local2 local use 2 (local2)
19 local3 local use 3 (local3)
20 local4 local use 4 (local4)
21 local5 local use 5 (local5)
22 local6 local use 6 (local6)
23 local7 local use 7 (local7)


6. rsyslog Severity levels (sublevels) accepted by facility level

As defined in RFC 5424, there are eight severity levels as of year 2021:

Code Severity Keyword Description General Description
0 Emergency emerg (panic) System is unusable. A "panic" condition usually affecting multiple apps/servers/sites. At this level it would usually notify all tech staff on call.
1 Alert alert Action must be taken immediately. Should be corrected immediately, therefore notify staff who can fix the problem. An example would be the loss of a primary ISP connection.
2 Critical crit Critical conditions. Should be corrected immediately, but indicates failure in a primary system, an example is a loss of a backup ISP connection.
3 Error err (error) Error conditions. Non-urgent failures, these should be relayed to developers or admins; each item must be resolved within a given time.
4 Warning warning (warn) Warning conditions. Warning messages, not an error, but indication that an error will occur if action is not taken, e.g. file system 85% full – each item must be resolved within a given time.
5 Notice notice Normal but significant condition. Events that are unusual but not error conditions – might be summarized in an email to developers or admins to spot potential problems – no immediate action required.
6 Informational info Informational messages. Normal operational messages – may be harvested for reporting, measuring throughput, etc. – no action required.
7 Debug debug Debug-level messages. Info useful to developers for debugging the application, not useful during operations.


7. Sample well tuned configuration using severity and facility levels and immark, imuxsock, impstats
 

Below is sample config using severity and facility levels
 

# Don't log private authentication messages!
*.info;mail.none;authpriv.none;cron.none;local0.none;local1.none        /var/log/messages


Note the local0.none; local1.none tells rsyslog to not log from that facility level to /var/log/messages.

If you need a complete set of rsyslog configuration fine tuned to have a proper logging with increased queues and included configuration for loggint to remote log aggegator service as well as other measures to prevent the system disk from being filled in case if something goes wild with a logging service leading to a repeatedly messages you might always contact me and I can help 🙂
 Other from that sysadmins might benefit from a sample set of configuration prepared with the Automated rsyslog config builder  or use some fine tuned config  for rsyslog-8.24.0-57.el7_9.1.x86_64 on Redhat 7.9 (Maipo)   rsyslog_config_redhat-2021.tar.gz.

To sum it up rsyslog though looks simple and not an important thing to pre

Set proxy only for apt, apt-get, aptitude package manager on Debian / Ubuntu Linux

Wednesday, December 22nd, 2021

debian-package-manager-run-via-a-proxy

 

Intro

Main console package install apt-get / apt and / aptitude did not use the HTTP Proxy environment variables by default as there is no default proxy set on Debian / Ubuntu / Mint and other deb based distros after OS Install. Under some circunstances for DMZ placed or firewall secured servers, direct access to internet address or even Package repository is only allowed via a proxy and hence the package manager needs to have a proxy host set.
 Setting a global wide proxy on Linux is easily possible by setting http_proxy="http://yourhost.com:8080" and https_proxy or if FTP connection via ftp_proxy somewhere in /etc/profile , /etc/bashrc or via /etc/environment but as using this Shell variables set it global wide for all applications lynx / links / wget / curl, sometimes it is useful to set the Proxy host only for deb package management tools.

Note that if you want to set a proxy host for deb operations this can be done during initial OS install installation, the Apt configuration file would have been automatically updated then. 

Creating  an Apt Proxy Conf File

Apt loads all configuration files under /etc/apt/apt.conf.d. We can create a configuration specifically for our proxy there, keeping it separate from all other configurations.

  1. Create a new configuration file named proxy.conf.

     

     

    # touch /etc/apt/apt.conf.d/proxy.conf
    
  2. Open the proxy.conf file in a text editor.

     

     

    # vi /etc/apt/apt.conf.d/proxy.conf
    
  3. Add the following line to set your HTTP proxy for apt.

     

     

    Acquire::http::Proxy "http://username:password@proxy.server:port/";
    
  4. Add the following line to set your HTTPS proxy.

     

     

    Acquire::https::Proxy "http://username:passw0rd@proxy.server:port/";
    
  5. Save your changes and exit the text editor.
     

Your proxy settings will be applied the next time you run Apt.

Simplifying the Configuration

As mentioned by a user in the comments below, there is an alternative way for defining the proxy settings. While similar, it removes some redundancy.

Just like in the first example, create a new file under the /etc/apt/apt.conf.d directory for example /etc/apt/apt.conf.d/proxies, and then add the lines as.

Acquire {
HTTP::proxy "http://127.0.0.1:8080";
HTTPS::proxy "http://127.0.0.1:8080";
}

 

Few words on Saint Prophet Daniel feast day in Orthodox Church December 17

Friday, December 17th, 2021

Saint-Prophet-Daniel-orthodox-icon 

 

Few words on Saint Daniel the Prophet Feast

 

Many of us today in the world who are baptized and members of the Church or do at least accept the Christian principles deeply routed in most of the Civillized developed workd tend to excuse themselves for not being good and doing the righteous things, thinking it is hard to stand for the christian principles and norms in a general antichristian atmosphere pointing it as a reason to not follow the guidance recommendations of the Church.

However we should not excuse ourselvse with the circumstances or the Church clergy who seems to us to not follow properly the spiritual vows. We should not excuse with time we're living in as it is reflected in perfect examples in the spiritual life of the saints and the practice of monks, who always have the golden rule to not excuse themselves for anything in the world for not following Gods perfect will and predestination in the good.

Lets look at the first Christians who lived, did their life was easier or more favourable than today for confessing the faith ? Even materially if we think at the times back then most people were poor, they have attained everything they had with a hard labour and was busy 24/4 / 7 days a week, there was no medicine for almost nothing except few herbal treatments, there was no dentist, no electricity and no transport. The doctors who can help at times of sickness were few, in the beginning of Christianity, it was prohibited to be Christian and being a Christian was a sure sentence for death sooner or later, not to mention that emperors and the powerful of the day were requesting from people obedience in anything they say and slavery was popular and even many much more than today lived all their live in slavery both physical and spiritual (as most people did not have the chance to hear the Graceful words of the Holy Gospel). Priests were scarce, there was practiculally no education and there was no easy way to produce and keep information, paper was not there. Having a book was only possible for few of the richest people who were the top layer of society. The few knowledgable who can read or knew solution to the innumerable problems of man were considered nobles (Elders / wise men)  had been often wanted and scarce as well as kept near the "top management" people who governed society society – kings, emperors, governors or amy man. This is rawly how the world looked back then. Even though that people both Christians and non Christians had been more stronger in spirit and had been unshakable in their decisions for confession their life credo. 

Saint-Prophet-Daniel-icon-slavonic

  • Those old nobles have been divided  generally speaking into two categories the fraudants:
    Wizards (whose wisdom was received by the demons)
  • Second truthful ones
    Servants of God the prophets the righteous, the Jewish priests who confessed truely the One True God, the saints and other gifted people by God.

Tomb-with-relics-of-Saint-Daniel_at_Assa
The most likely location of holy relics of Prophet Daniel Tomb of Daniel at Susa, Iran

Among the truthful ones perhaps most significant for elevating the humanity from the worst to perfect are the prophets, who has the revelation from God directly from God, to be leaders and examples for perfection of the religion, moral and political life for the Old Testamental choosen people the Jews and respectively after Christ's crucifix the Christians who has held their place as the true choosen children of God and through them for the gentile.

Today we celebrate the memory of one of the supreme prophets who has lived in world for all ages – Saint Prophet Daniel his name is delivered from Jewish and means "God (El) is my judge"

saint-Prophet-Daniel-with-a-scroll-orthodox-icon-cyrillic

Daniel and the Stone Slavonic Icon (Bulgarian ?)

Prophet Daniel is the biblical hero of the Book of Daniel who interprets dreams and receives apocalyptic visions. His book is one of the most notable prophetic book in which in a hidden way it is said what is expecting the world until the end of the times.
 

The Prophet Daniel appears in the Old Testament in the Book of Daniel as a captive carried away to Babylon by order of Nebuchadnezzar after the fall of the kingdom of Judah during the sixth century before Christ. His ministry as a prophet came late in his life. He is commemorated by the Church on the December 17.

While remaining loyal to his faith in the one God, Daniel attained a high position of the court of Nebuchadnezzar and was known for his skill in the interpretation of dreams (Daniel 1:17 and 2:14) and of mysterious handwritings on the wall. He is included in the Septuagint among the prophets and was referred to by Christ as a prophet in Mark 13:14 and in Matthew 24:15. The precise time and circumstances of Daniel's death are not recorded. By tradition his age at death was near 100 years. A number of places have claimed to be his place of burial, including Susa in present day Iran, Daniel's Tomb in Kirkuk in Iraq, as well as Babylon, Egypt, and Tarsus.

He is a descendant of Jude's knee, he was descending of noble rich family, presumably he might have descendent even from king's line an evidence for that is the Chaldean king Nebuchadnezzar II, after the conquest of Jerusalem in (year 607 B.C.) give an order to select the best and most educated and intelligent from the captured jews with the goal to learn the Chaldean language and receive education, and prepare for a government service.

These young man has been put into many temptations as the custom of the chaldean civillizations was pagan and contradicted the jewish.
Four of the chosen ones were Daniel, Hananiah, Mishael, and Azariah (who as an attempt to change the mindset and are identity of the ones and distant them from their original jewish mindset, were renamed with the Babylonian names of Shadrach, Meshach, and Abednego.

Daniel, Hananiah, Mishael, and Azariah even though the babylonization attempts of their identity, have shown severe firmness and continued to follow the Jewish Law of Moses.

As they were part of the kings palace courtiers, they lived surrounded by luxurity, they did not forget God's law diligently they prayed and eat as food only bread and fruits, refusing any food given by the Kings table as this food has been consecrated to the pagan idols the babylonians were worshipping.

The good God seeing the perseverance in goodness of the youngsters and their fortitude in confession of truth and strict follow the Mishrah (the law of the jews) gifted them with amazing abilities to understand visions and dreams.

Catacomb-of-Priscilla-Fiery_furnace_01

Catacomb of Priscilla, Rome, late 3rd century/early 4th century.

At the beginning the four were not among the famous ones in the babylonian kingsdom, however they became famous as the king has called them to interpret a troubling dream he had – a dream the king immediately forgot. Noone among the wise mand and wizards couldn't neither tell the kings dream nor tell what it meant thus, by God's providence the 4 ones whose fame continuously grow in kingdom were summoned and Daniel could interpret the kings dream and the meaning of it. The king out of amazement decided for future to always council the the 4 God people, as he saw their wisdom exceeded the wisdom of the other liege in the kingdom. Daniel and his 3 friends were tested by the fire, as they have been thrown in fiery furnace fire, as a punishment for their rejection to obey a Golden pagan idol statue as god, breaking the king's decree.

Sveti-Otroci-v-Peshti-ikona

Icon Source: Pinterest

In the burning enormous fire the king was amazed to see not 3 but 4 people (the fourth one was an Angel of God who was protecting them). The fire not only did not damaged them even though it was all throughout their body but did not even burn the clothes or the hairs on them. 

Prayer of the Three Holy Youths known in Church as "The Song of Daniel" 

The Prayer of the Three Holy Youths is a component of the biblical Book of Daniel. It is a segment of a larger component called The Prayer of Azariah and the Prayer of the Three Holy Youths which. although part of the Septuagint text, is considered by Protestants as part of the Apocrypha rather than a fully canonical part of Scripture, and so appears in most English-language bibles as a seperate section. If included within the larger text of Daniel, it would appear in the third chapter of between verses 23 and 24.

In Orthodox Christian worship, the prayer is the basis of the seventh and eighth biblical canticles sung at Orthros. Although the text of the canticles are generally not read in contemporary practice, the hymns sung as part of the canon reference the theme of the Three HolyYouths. At Vespers of Holy Saturday, the text of the prayer is heard as part of one of the fifteen Old Testament readings prescribed for that day. In Byzantine practice, the closing refrains to each verse "bless ye the Lord: praise and exalt him above all for ever" are chanted elaborately.

The song constitutes a hymn of thanksgiving to God for deliverence from the fiery furnace into which the three young men, Ananias, Azarias and Misael (also known as Shadrach, Meshach and Abednego) had been cast by the Persian king Nebuchadnezzar. They were cast into the furnace for refusing to worship a golden idol that Nebuchadnezzar had created. However, an Angel of the Lord entered the furnace and protected the three young men. In liturgical practice, the event is seen to presage the Resurrection of Christ, thus its inclusion in the canon.

The Abingdon Bible Handbook (ISBN 0687001692) suggests that the Prayer was based on an earlier composition and was added to the existing text of Daniel sometime in the second or first century B.C.

The Song of the Three Holy Youths​

Text

Blessed art thou, O Lord God of our fathers: thy name is worthy to be praised and glorified for evermore:
For thou art righteous in all the things that thou hast done to us: yea, true are all thy works, thy ways are right, and all thy judgments truth.
In all the things that thou hast brought upon us, and upon the holy city of our fathers, even Jerusalem, thou hast executed true judgment: for according to truth and judgment didst thou bring all these things upon us because of our sins.
For we have sinned and committed iniquity, departing from thee. In all things have we trespassed, and not obeyed thy commandments, nor kept them, neither done as thou hast commanded us, that it might go well with us.
Wherefore all that thou hast brought upon us, and every thing that thou hast done to us, thou hast done in true judgment.
And thou didst deliver us into the hands of lawless enemies, most hateful forsakers of God, and to an unjust king, and the most wicked in all the world.
And now we cannot open our mouths, we are become a shame and reproach to thy servants; and to them that worship thee.
Yet deliver us not up wholly, for thy name's sake, neither disannul thou thy covenant:
And cause not thy mercy to depart from us, for thy beloved Abraham's sake, for thy servant Issac's sake, and for thy holy Israel's sake;
To whom thou hast spoken and promised, that thou wouldest multiply their seed as the stars of heaven, and as the sand that lieth upon the seashore.
For we, O Lord, are become less than any nation, and be kept under this day in all the world because of our sins.
Neither is there at this time prince, or prophet, or leader, or burnt offering, or sacrifice, or oblation, or incense, or place to sacrifice before thee, and to find mercy.
Nevertheless in a contrite heart and an humble spirit let us be accepted.
Like as in the burnt offerings of rams and bullocks, and like as in ten thousands of fat lambs: so let our sacrifice be in thy sight this day, and grant that we may wholly go after thee: for they shall not be confounded that put their trust in thee.
And now we follow thee with all our heart, we fear thee, and seek thy face.
Put us not to shame: but deal with us after thy lovingkindness, and according to the multitude of thy mercies.
Deliver us also according to thy marvellous works, and give glory to thy name, O Lord: and let all them that do thy servants hurt be ashamed;
And let them be confounded in all their power and might, and let their strength be broken;
And let them know that thou art God, the only God, and glorious over the whole world.
And the king's servants, that put them in, ceased not to make the oven hot with rosin, pitch, tow, and small wood;
So that the flame streamed forth above the furnace forty and nine cubits.
And it passed through, and burned those Chaldeans it found about the furnace.
But the angel of the Lord came down into the oven together with Azarias and his fellows, and smote the flame of the fire out of the oven;
And made the midst of the furnace as it had been a moist whistling wind, so that the fire touched them not at all, neither hurt nor troubled them.
Then the three, as out of one mouth, praised, glorified, and blessed, God in the furnace, saying,
Blessed art thou, O Lord God of our fathers: and to be praised and exalted above all for ever.
And blessed is thy glorious and holy name: and to be praised and exalted above all for ever.
Blessed art thou in the temple of thine holy glory: and to be praised and glorified above all for ever.
Blessed art thou that beholdest the depths, and sittest upon the cherubims: and to be praised and exalted above all for ever.
Blessed art thou on the glorious throne of thy kingdom: and to be praised and glorified above all for ever.
Blessed art thou in the firmament of heaven: and above ail to be praised and glorified for ever.
O all ye works of the Lord, bless ye the Lord: praise and exalt him above all for ever,
O ye heavens, bless ye the Lord: praise and exalt him above all for ever.
O ye angels of the Lord, bless ye the Lord: praise and exalt him above all for ever.
O all ye waters that be above the heaven, bless ye the Lord: praise and exalt him above all for ever.
O all ye powers of the Lord, bless ye the Lord: praise and exalt him above all for ever.
O ye sun and moon, bless ye the Lord: praise and exalt him above all for ever.
O ye stars of heaven, bless ye the Lord: praise and exalt him above all for ever.
O every shower and dew, bless ye the Lord: praise and exalt him above all for ever.
O all ye winds, bless ye the Lord: praise and exalt him above all for ever,
O ye fire and heat, bless ye the Lord: praise and exalt him above all for ever.
O ye winter and summer, bless ye the Lord: praise and exalt him above all for ever.
O ye dews and storms of snow, bless ye the Lord: praise and exalt him above all for ever.
O ye nights and days, bless ye the Lord: bless and exalt him above all for ever.
O ye light and darkness, bless ye the Lord: praise and exalt him above all for ever.
O ye ice and cold, bless ye the Lord: praise and exalt him above all for ever.
O ye frost and snow, bless ye the Lord: praise and exalt him above all for ever.
O ye lightnings and clouds, bless ye the Lord: praise and exalt him above all for ever.
O let the earth bless the Lord: praise and exalt him above all for ever.
O ye mountains and little hills, bless ye the Lord: praise and exalt him above all for ever.
O all ye things that grow in the earth, bless ye the Lord: praise and exalt him above all for ever.
O ye mountains, bless ye the Lord: Praise and exalt him above all for ever.
O ye seas and rivers, bless ye the Lord: praise and exalt him above all for ever.
O ye whales, and all that move in the waters, bless ye the Lord: praise and exalt him above all for ever.
O all ye fowls of the air, bless ye the Lord: praise and exalt him above all for ever.
O all ye beasts and cattle, bless ye the Lord: praise and exalt him above all for ever.
O ye children of men, bless ye the Lord: praise and exalt him above all for ever.
O Israel, bless ye the Lord: praise and exalt him above all for ever.
O ye priests of the Lord, bless ye the Lord: praise and exalt him above all for ever.
O ye servants of the Lord, bless ye the Lord: praise and exalt him above all for ever.
O ye spirits and souls of the righteous, bless ye the Lord: praise and exalt him above all for ever.
O ye holy and humble men of heart, bless ye the Lord: praise and exalt him above all for ever.
O Ananias, Azarias, and Misael, bless ye the Lord: praise and exalt him above all for ever: far he hath delivered us from hell, and saved us from the hand of death, and delivered us out of the midst of the furnace and burning flame: even out of the midst of the fire hath he delivered us.
O give thanks unto the Lord, because he is gracious: for his mercy endureth for ever.
O all ye that worship the Lord, bless the God of gods, praise him, and give him thanks: for his mercy endureth for ever.

 

Daniel and the Lions Den

Daniel was also thrown at another time in a Den hole with Hungry Lions (a typical fun for Romans usually the victim was a very dangerous criminal), however in adverse to the well known natural laws instead of cutting him into pieces eating him the Lions started licking the legs of Saint Prophet Daniel.

Daniel-and-lions

The Grace of God in Holy Prophet Daniel restoring the original Lions nature of grass-feeding animals as they were.
The abundance of Grace of the Holy spirit of the Lions turned them to treat the prophet as Cats would their beloved master.

Prophet-Daniel-and-in-the-Lions-Den-Daniil_DanielsDen_MarcellinusAndPeter

Daniel and the Lions (Book of Daniel 6:16-24)fresco of catacomb of Saint Marcellinus and Peter in Rome

Daniel and his friends, even though the paganism has followe their faith and establishment of the fathers, even though the hardship. How sad it is that today many of us are excusing with the time and the situation or encirclement as a reason to not follow the prescription spiritual cures of the Church (The holy mysteries, Confession, Repentance, Fasting and Holy Communion).

No ! We should not excuse ourselves with the situation and time of living. Are the first Christians lived in more benevolent world and did this stopped them from following Christ's teachings strictly and go for a martyrdom to them following the bright examples of the prophets ?
 

Church Troparion sung on Church service (Tone 2)

Great are the accomplishments of faith,
for the Three Holy Youths rejoiced in the fountain of flames as though in the waters of rest;
and the prophet Daniel appeared,
a shepherd to the lions as though they were sheep.
So by their prayers, O Christ God, save our souls!

 

Kontakion sung on Church service (Tone 6)

You did not worship the graven image,
O thrice-blessed ones,
but armed with the immaterial Essence of God, you were glorified in a trial by fire.
From the midst of unbearable flames you called on God, crying:
Hasten, O compassionate One!
Speedily come to our aid,
for You are merciful and able to do as You will.

Troparion-of-saint-Daniel-17-December-Church-Slavonic

Troparion of Saint Daniel and the three Jewish Youths Feast sung in Church (Church Slavonic)

Today 17 of December, we celebrate prophet Daniel and the the three Jewish youths Hananiah, Mishael, and Azariah, were chosen to serve the worldly emperor, but they preferred ofthe One God and be God's choosen people than to choose the temporary world glory.

Let us also follow the example of saint Daniel and the three Youths, and follow the Gods revelations, the divine revelation moral law nevertheless of the environment and the circumstances, because God shows mercy to those who love him and his laws. 

Let by the Holy Prophets Daniel, Hananiah, Mishael and Azariah God have mercy on us all the sinners ! Amen!

Text Translated from Bulgarian from Father's Karamihailev Preach (A Priest in Bankia's Church Saint Cyric and Julita) with inclusions

Historical and other references used:

 

1. The Holy Bible also briefly mentions three other individuals of this name: The Book of Ezekiel (14:14, 14:20 and 28:3) refers to a legendary Daniel famed for wisdom and righteousness. In verse 14:14, Ezekiel says of the sinful land of Israel that "even if these three, Noah, Daniel and Job, were in it, they would deliver but their own lives by their righteousness."

2. In chapter 28, Ezekiel taunts the king of Tyre, asking rhetorically, "art thou wiser than Daniel?" The author of the Book of Daniel appears to have taken this legendary figure, renowned for his wisdom, to serve as his central human character.
3. The Book of Ezra (8:2) mentions a priest named Daniel who went from Babylon to Jerusalem with Ezra.
4. The First Book of Chronicles (3:1) mentions a son of David called Daniel.

5. https://orthodoxwiki.org/Prophet_Daniel
6. https://orthodoxwiki.org/Prayer_of_the_Three_Holy_Children
7. Orthodox Church Service Liturgical Books (Chasoslov)
8. https://en.wikipedia.org/wiki/Daniel
9. https://en.wikipedia.org/wiki/Daniel_(biblical_figure)

Saint Filothea Temnishka of Tarnovo feast day 7 of December. A XII century miracle working Saint little known in the West

Tuesday, December 14th, 2021

Icon-of-Saint-Feothea-Feotheus-of-Tarnovo-Bulgaria-icon-in-her-Church-saint-Feothea-of-Trnovo


Living of Saint Filothea of Tarnovo 

The Venerable Filothea (Filotea) is born in the Byzantine city of Polivot in (Southern Thrace). She was a fruit of a continous prayers of her parents. 
Received a good education for the time and reached adulthood, her parents give her for a bride (in arranged marriage against her will) which was a standard practice of its time.
Even merrying using  her enormous wisdom she was able to persuade her husband to live vestal life (the marriage was not consumed). 
In relatively short years her husband passed away. She has moved to a Insland nearby the close lake, built a small hermit cell hut and prayed and fasted incessantly living a a holy hermit life in solitude, night vigils, tears and repentance and stillness.
Because of her zealoutry God has given her the Grace of Miracle working prayers and the wisdom to teach. A well known spiritual persons, cleargyman, priests, deacons and people come to her to hear her graceful words and councils as well as to receive a healing through her holy prayers.

Saint-Filothea-of-Tarnovo-Romanian-icon2.

Cause of her absitence of food and sleep and praers all over the clock she lost body weight, forseeing her death she has presented herself to the Lord on 7th of December (the exact year of her death and the age are unknown, presumably she lived somewhere in the XII century). Her holy relics turned to be incorruptable (a sign for immerse holiness, among with wonder working healing miracles were considered some of the conditions for considering a deceased person a saint – for more on inccorruptability of saint relics check out my previous article here).

Sveta-Filotea-Tyrnovska-jitie-zabravenata-pokrovitelka-na-Vidin

In the beginning of XIII century her holy relics were solemnly carried with honor from Polivot to the Capital of Second Bulgarian Empire Tarnovo by King Kaloyan. There her holy relics stayed by God's great providence for 200 years, being visited by the whole Christiandome for veneration.

The-Transfer-of-Saint-Filotea-Holy-Miracle-Working-relics-to-Tarnovo-Bulgaria-thirteen-century

After the fall of Bulgaria under the Ottoman yoke (year 1393). Probably to save the holy relics from destruction, they were taken to the far North Bulgarian borders in the Fortress of Bdin (today city of Vidin) and after staying for a while once the fortress was taken over by Mohameddans, taken a by the Serbs, and later Wallachs (todays Romanians) has taken the relics from Serbs, once the Serbian lands were invaded.

Currently her holy relics are present the old Wallachian Capital Curtea de Argeș (near river of Argeș).

Holy-relics-of-Saint-Filotea-of-Tarnovo.
Holy Relics of Saint Filothea, one of the most famous places for Christian veneration in Romania
(Saint Demetrius of Besarabia – another Bulgarian saint, Saint Filotea, and Saint Petka of Bulgaria are among the most venerated saints in Romania today)

The main source we have for the living of Saint Filothea (Filotheus) is written by Saint Patriarch Euthymius of Tarnovo Bulgaria (born circa 1325, died c.1402 / 1404). It is a very long document describing a lot of interesting details about Saint Filothea's healing miracles after she prayed with crying to the Lord even before she died. The miracle healings, chasing out of demons and restoration of eye sight and other glorious things continued even after she passed out to Christ to multitudes of people who prayed in front of her relics with faith.

Saint-Patriach-Euthymius-of-Tarnovo-last-Bulgarian-Patriarch-before-Turkish-Slavery-author-of-saint-Feotheas-Living
Saint Patriarch Euthymiuus of Tarnovo, the main source author for today's Filoteas Living 

During her life she spoke to the people coming to her a lot of his sacred methodical words.
She told them before her death:

"The time has come for me to leave here, so I thought it right to remind you of the traditions and decisions of the Orthodox faith by the Holy Apostles and the Divine Fathers. You know that the Orthodox faith is the head of our lives. In your efforts to give it to us pure and immaculate, the Holy Apostles suffered various kinds of death. , and to keep the church traditions unshakable, and not to waver here and there from different winds.

However, the Lord Jesus Christ shed His blood for her and did not allow his Church to be completely destroyed. But he gave her help, and fate led her to victory. I, the poor, have been brought up in piety since my childhood, and I received it from my parents as a precious treasure. Therefore, as a holy peak in the Church, I ask you not to forget the tradition of the Holy Prophets and Apostles, as the great apostle Paul wrote to Timothy: and others to learn! " (Tim. 2: 2)

Saint-Venerable-Filotea-of-Tarnovo-Romanian-icon

You deserve to hold the true faith and not listen to pagan fables at all. They can rebuke us a thousand times, they can insult us a thousand times, but a lie will never defeat the truth, nor will malice prevail over wisdom. For, they reduced the name of the Deity in the creation, in men – oh wickedness! – in trees, in stones, cats, dogs, and are not ashamed to think that creation came into being by itself, and do not understand, the unthinking, in their evil wickedness and wisdom, that everything was brought from non-being into existence by one true God, Who created heaven and earth and everything visible and invisible. And the gods, who did not create the heavens and the earth, may perish! (Jeremiah 10:11). Let those who make them and who hope in them be like them! (Ps. 113:16; 134:18). Therefore the Gentiles were deceived, and their foolish hearts were darkened. Considering themselves to be wise, they proved foolish, and changed the glory of one God in the likeness of quadrupeds, reptiles, and birds (Rom. 1: 21-23). Let the wretched see where the celestial bodies and earthly beings in the air and water came from, and most of all where the even more primitive came from – heaven and earth, air and aquatic nature! Who mixed and divided them? What is their communication with each other – separation and consent? Who moves and leads them? How does one element, which is contrary in nature, run away with another harmlessly in the fullness of one world? How do they exist in agreement without consulting and talking? All this is the work of divine providence, and they left the Creator and honored and served creation instead of the Creator (Rom. 1:25) and wander in vain and rage against our pious faith and against pious Christians, to whom they impose ruthless torture and force them to renounce the sweet name of Christ.

You do not pay attention to their threats, even if they lead you to the torturous wheels, to the boiling cauldrons, to the sword or fire, do not be afraid of their horrors! (Isa. 8:12, 70s). Another life and another age that awaits us awaits us, where the prophets rejoice, the apostles rejoice together with the figures of the Venerable Lent, with the angels and archangels, with the martyrs and all the saints. Always think this, write this in your hearts! Take care of yourself and the whole flock, among which God has appointed you shepherds and teachers (Acts 20:28), in order to keep yourself and them pure and undefiled!

Everything in this world will be beautifully and habitually scattered like dust and forgotten, only virtue lasts forever and ever. Therefore, try to keep yourself clean and to lead the entrusted flock to lively pastures, so that the Lord of all, seeing this diligence of yours, may reward you with a reward worthy of your labors and make you worthy of His kingdom! " 
 

Saint_Filothea_Tarnovska_Romanian-icon
Romanian Contemporary Icon of Saint Filothea

A high-ranking and famous man named Navkratius, from the city of Amoria, was appointed by the then king to be the governor of Greece. It happened to him to fight the godless Agarians (The Turks), and after the two sides fought, by the unknown destinies of God, his whole army was defeated: some were killed, and others were captured and taken to Sicily. Along with the others, a stratilat (army commanded) was captured, but his name was Artavan, from the town of Philomelia. Taken away by the ungodly, they were imprisoned in a gloomy dungeon and guarded with great care. Thus detained there, they were perplexed as to what to invent and what to do. And overwhelmed with grief, they called for the help of Almighty God and His loved ones.

Then Artavan remembered St. Philothea and began to tell them about her glorious miracles and that she had received the gift of healing various ailments and diseases. As he listened to Stratilat Navkratius, his heart burned and he began to call for her help. And because he was filled with divine desire and was inflamed with fervent faith, he could not wait to hide it for a long time, but he quickly got up and raised everyone to earnest prayer, shedding tears. And all of them unanimously rushed to earnest prayer and called for the help of the God-loving Philotheus, saying:

"Christ-related slave, undefiled bride, pure dove, abode of the Holy Spirit, if you look mercifully on us humble and desperate, and free us from this terrible dungeon, we will be trumpets of your countless miracles, with a loud voice we will we preach, and we will spend the rest of our lives chaste and pure. O Venerable Mother, do not despise us, for we are bitterly distressed in this terrible and miserable dungeon! "

Saint-Philotea-saint-Alexander-Nevski-Cathedral-Sofia-Bulgaria-wall-painting

With such prayers they spent the whole night, with hot tears and heartache. When they had finished this all-night vigil and finished their prayer, they lay down to rest and give a little sleepy consolation to the body. Everyone fell asleep in their place, the reverend appeared to them and rejoiced their hearts with words of consolation, saying:

"Your prayer has been heard and God has not despised your sighs. So go in peace and return to your homes, thanking God for your gratitude, who frees prisoners from bondage!" (Ps. 67: 7).

They awoke with joy, the iron chains lay fallen from them, the dungeon was wide open. They believed the vision to be true, and immediately left the open dungeon, the guard lying as if dead, and fleeing freely. But before they went home, they first went to the island to pay their respects to the reverend. After fulfilling this obligation, each of them returned home and told all the glorious miracles of the Venerable Philoteia.

After this spread everywhere, and managed to enter every ear, a leper, full of faith and fervent zeal, quickly came to the church of the Venerable Mother, called for mercy and with diligent requests and frequent bows, long sleepless nights, fasting and torture tormented himself and he relentlessly spent in her divine temple. The Blessed One, seeing his long diligence and his bodily leprosy, which had almost ended, immediately bowed to mercy, appeared in the dream of the church cleric and ordered him to anoint him with oil from the holy chandel of the Immaculate Conception all over his body. When he awoke, the cleric quickly obeyed the order. and not many days later he sent him safe to his home to glorify and thank God, as well as to His close friend.

A lot of time passed and many miracles happened. The Greek kingdom was exhausted and its scepter holders found themselves in difficult circumstances. Finding the right time, the Romans stormed the Greek state and inflicted unbearable misery.

At the same time, the Bulgarian kingdom became very strong and powerful, and it encompassed and conquered all the surrounding areas. At that time in Bulgaria the tsarist scepter was ruled well and even magnificently by the pious and glorious tsar Kaloyan (1197-1207). Seeing the Greek kingdom completely exhausted, he attacked it manfully, and many cities and villages were captured and ruined. And having gathered all the good, he brought it to his glorious city of Tarnovo – the whole nation with all the animals moved to their country. As he did all this, he heard the miracles of the Venerable Philotheus, and his heart was greatly inflamed. Because it is usually a matter of the souls of the pious to show zeal for virtue and to show zeal in every way.

After conquering the whole region and subduing it to his authority, he came to the place where the venerable body of the reverend lay, filled himself with unspeakable joy, praising God and diligently thanking Him. He fell before the reverend relics of the reverend, flooded them with his tears, and reverently kissed them. He then ordered an all-night vigil and gave many alms to the poor. In the morning a divine liturgy was celebrated, which was attended by the king in great joy and merriment with all his army. And he made the good decision to bring the reverend's body to his country. 

Holy Venerable Mother Filothea pray the Lord to have mercy on every suffering and needy, poor, sick, weak and low and all the people who remember your holy memory and summon your prayers !

Amen !

Article Sources:
1. The Living of Saints by dr. Atanasii Bonchev and bishop Partenij 
2. The Living of Saint Filothea written by Saint Patriarch Euthymius of Tarnovo

 

Saint Holy Rightous Joachim and Anne the partents of The Virgin Mary Mother of God feast in the Eastern Orthodox Church

Thursday, December 9th, 2021

Saint-Joachim-and-Anna-and-Jesus-Virgin-Mary-the-Mother-of-God

Feast day is cebelrated today in our Mother Church the Holy Eastern Bulgarian Orthodox Church 9th on December 9th December.
The name Joachim as derived from (/ˈdʒoʊəkɪm/; Hebrew: יְהוֹיָקִיםYəhōyāqīm, means "he whom Yahweh has set up"; Greek Ἰωακείμ Iōākeím)..
Anne, alternatively spelled Ann, is a form of the Latin female given name Anna. This in turn is a representation of the Hebrew Hannah, which means 'favour' or 'grace'. Saint Joachim has been a descendent of the bloodline of Saint King David (the one to whom the Psalms section of the Bible are ascribed) and Anna descends out of the Aaron the brother of Moses (who is the father of priests family line in Judaism).

Saint Joachim and Saint Anne are two less known saints in nowatimes even though in the Middle Ages this feast has been enormously popuplar in Both the Orthodox Christian East and the Roman Catholic West.  

St. Joachim and St. Anne (Anna) has been called Holy Righteous by the Church for a good reason. For they have possessed immerce sanctity that only of the born on earth ever have. They were called Saint Holy and Righteous, for a reason, and perhaps little might know but their is a sanctity hierarchy in the Church and the reason this accent of 3 words of the Church fathers is to emphasize the couple of St. Joachim and St. Anne had exceeding grace.
Saint Joachim and Saint Anne just like the Holy Family of Holy Virgin Mary and Saint Joseph are the Christian model for perfect famly in virtues, which all Christian families should try to follow to their maximum. The celebration of St. Joachim and St. Anne feasts seems to have been on purpose put to be done during the Christmas Fasting period for a reason, as for another preparation for the Great feast of Christ-mass known in the Church as Nativity (which improperly is unknowingly profanized by many with the abbreviation XMAS).

Lets shortly see few details of the Earthly Living of the two saints and why the Holy Fathers who prepared their Living we read today, call them with this grandiose epithets – Saint, Holy and Righteous.


Holy

  • They have lived all their live in servitude for the sick poor the hungry and the weak and dedicated all their God given lifetime in service for all whose begged in need.
  • They have been praying regularly and longly for the goodness of Mankind and families all around
  • They have been strictly following God's Old Testamental Jewish laws


Righteous


The english word Righteous stems from the Word 'Right' for a good reason as in the light of the Holy scriptures the Right side has been always associated with Good and the Salvation for the reason we know from Revelations that when time comes for God to judge the nations and everyone's individual deeds and rights as Christ has told in the Gospel those who have been done right (e.g. they have done good) and persevered to do good things throughout their short lifetime, will be put on the Right side of God – those are the so called Sheeps of Christ, the Unrighteous one will be put at the Left hand on the Judgement and will be cast out of the face of God because of their own undesire to receive and reflect the light of Christ (just like the Moon reflects the Light of the Sun) and transfers it to the earth and gives Light at night, each mans eternal God's predestination is to be like this receivers and reflectors of the Grace of The Holy Spirit.
Saint Joachim and Saint Anne has been such reflectors in such a enormous size that most of the Light they have emitted from God was transferred to rest of their relatives and people to whom they were continuously at help and as we believe in the Orthodox Church this process of re-emission of light is continuing even today. As we believe those who have departed from this life and have been favorable for God are staying in front of the face of God and praying fervently incessantly to God for the good of mankind. 

Saint-Anne-detail-national-from_Faras_National-Museum-Warsaw

Saint Anne fresco from Faras Gallery in Warsaw


True Saints

The saintship is a quality one receives as a Gift from God as we read in the patristic literature and cannot be attended by deeds, however the greatest gifts of God due to the practice were given to those who have persevered to suffer, greatest trials, persecution, shaming, hatred and lack of reception in society for their confession of the faith – this as we know in the New Testamental Church of Christ is mostly seen in the Holy Martyrs who confessed Christ to the degree they preferred to give out their life and bodies to martyrdom than to reject Christ.
Saint Joachim and Saint Anne even not a physical martyrs has the same perseverance even before the age of the Martyrs (that had been at highest degree in the first  centuries 1-st, 2nd, and Third century until Christianity has been legalized in the Roman Empire by Saint Constantine).

They longed for a child but remained childless into their old age (which can be equalled to martyrdom – many couples even today know how uneasy it is to live together for a very long time and not to be able to have inheritance).

Because of their continuous fasting periods they have followed, St. Joachim and St. Anne did not have much of physical intimacy (or sexual life) as we use to call it today, we know today that the lack of intimacy doesn't bring babies, plus the fact that it was obviously Gods desire for them be childless  until their very old age.
However  not realizing this once they have bring their Thanks Giving offerings according to Jewish law they have been ashamed by the Jewish Priest in the Solomon Temple in Jerusalen, even in their old age – (the jewish priests, just like our Christian priests are absolutely forbidden to insult anyone, and insulting an old person was a taboo back then just like it is considered bad today) being blamed for not being able to carry out a Child. 
Being shamed by a Priest at the community of jews was a terrible thing and some would even commit suicide.

Saint_Joakim_Joachim-Orthodox-icon

Others who had children jostled Joachim, thrusting him back as unworthy. In despair, he consulted the geneological records of the tribes of Israel and discovered every righteous man in the nation had been blessed with children, except him. 
This caused the aged saints great grief, and he and his wife left with heavy hearts.

However as the couple was saintly their reaction was to seclude from people and pray secretly to God. 
Saint Joachim went to the desert and fasted and prayed grieving with inhumally for 40 days, and saint Anne stayed and grieved in her garden thrice as first she has never had the chance to become a mother and she was publicly ashamed at their community and did not know where her Husband has been, perhaps thinking he might passed out somewhere because of his exceeding grief.

Sts. Joachim and Anna had been married for fifty years, and were barren. They lived devoutly and quietly, using only a third of their income for themselves and giving a third to the poor and a third to the Temple. Joachim had done this since he was 15-years-old, and God multiplied his flocks, so the couple was well provided for. 


The Miracle of Faith, Hope and Love – The Birth of the God-Mother the Queen of Heaven Virgin Mariam
 

Saint-Joachim-and-Anne-Chanter_Angelos_Akotandos_-_St_Anne_with_the_Virgin

God has seen the great grief of the two and as he is merciful worked a great miracle just like with  Abraham and Sarah, and give them a blessed child to comfort their old age, which will become later the Holy Virgin Mary (Theotokos / Богородица), to become the Mother and Hope and all Humanity from which the Light of the World and Saviour Christ was born. 

Holy-Righteous-Joachim-and-Saint-Anne-Birth-of-Virgin-Mary

God sent the Archangel Gabriel to each of them, who gave them tidings of the birth of "a daughter most blessed, by whom all the nations of the earth will be blessed, and through whom will come the salvation of the world." Each promised to have their child raised in the Temple as a holy vessel of God. The archangel told St. Joachim to return home, where he would find his wife waiting for him in the city gate. St. Anna he told to wait at the gate. When they saw one another, they embraced, and this image is the traditional icon of their feast.

Saint-Joachim-and-Anne-with-Holy-Virgin-Mary

St. Anna conceived shortly thereafter, and in the ninth month gave birth to the Blessed Virgin Mary. This Conception of the Most Holy Mother of God is celebrated by the Church on December 9 and the Nativity of the Theotokos is celebrated on September 8.

God sent the Archangel Gabriel to each of them, who gave them tidings of the birth of "a daughter most blessed, by whom all the nations of the earth will be blessed, and through whom will come the salvation of the world." Each promised to have their child raised in the Temple as a holy vessel of God. The archangel told St. Joachim to return home, where he would find his wife waiting for him in the city gate. St. Anna he told to wait at the gate. When they saw one another, they embraced, and this image is the traditional icon of their feast.

Ikona_Kopiya_Sveta_Pravednaya_Anna

St. Anna conceived shortly thereafter, and in the ninth month gave birth to the Blessed Virgin Mary. This Conception of the Most Holy Mother of God is celebrated by the Church on December 9 and the Nativity of the Theotokos is celebrated on September 8.

Sts. Joachim and Anna took Mary, at the age of three, to the temple to be dedicated to the service of the Lord, and presented her to the priest Zechariahs. The parents then, after offering up her sacrifice (according to the custom of the time), left the Virgin with other maidens in the apartments of the temple to be brought up therein. The Church commemorates the Presentation of the Theotokos on November 21.

 Although Anne receives little attention in the Latin Church prior to the late 12th century, dedications to Anne in Eastern Christianity occur as early as the 6th century.

Bistritsa Monastery of Saint Jaochim and Saint Anne (near Sofia, Bulgaria)

The Bistritsa monastery "St. Yoakim and Anna" is located in the Mali dol part of the Vitosha mountain, about 2 km to the south-east of the village of Bistritsa.

Bistrishki-monastery-st-Joachim-and-st-Anna

Short History

According to priest Dragomir Kotev, author of regional studies of Bistritsa, during the time of Tsar Boris I or later during the rule of Simeon, a great temple was built there and was expanded during the Second Bulgarian Kingdom. It was part of the monastery complex called "The Little Mount Athos."

Bistritsa-monastery-st_Ioakim-Anna-Church

During the siege of the Ottomans and after strong resistance, the fortress and monastery were destroyed, and during the Ottoman domination the ruins of the old monastery were buried deep in the ground. The site was marked by a stone cross and people continued to gather at the sacred place. During excavations in the 20 century, the cross was discovered erect placed in what is today's holy throne in the temple. Now the cross can be seen outside the church.

Saint-Joachim-and-Anne-Bistritsa-near-Sofia-monastery-Cross

During the period of the Bulgarian Revival the memory for the monastery continued to exist.
The monastery "St. Peter" which had existed on its present place in the IX—X century, was destroyed by the turks in the XIV century. Its foundations were discovered in 1925 and the present church was sancrified in 1950. After the Liberation of Bulgaria from Ottoman rule in 1878 the church was rebuilt as a chapel. The construction of the present monastery is connected with the visions of the prophet Bona Velinova. On Orthodox Sunday (the first Sunday of Lent) in 1925 she spent the night in fasting and prayer, and in the morning gave a detailed explanation of how the church destroyed by the Ottomans looked like. Bona ordered people to dig and foundations of the old temple were discovered. She said that it should be rebuilt, and called after the holy family pf Sts. Joachim and Anna. Since then, every year on Orthodox Sunday a solemn service takes place here. The new church was built with funds and volunteer work from local people in the period from 1936 to 1950 and was consecrated on August 6, 1950. Legend has it that the treasures of the last Bulgarian kings are buried somewhere around. Not far from the monastery there is a a spring. Here on Christian holidays, after services in the monastery, pilgrims come to drink water from the holy spring. They believe that this water cures eye diseases. 
During the period 1965-77 residential buildings were built. The complex consists of a parish church, the St. Ivan Rilski chapel and a massive building to its right, a kitchen and rooms. 

At present the monastery functions regularly. It is a complex including a church, one-nef, one-apse, with a cupola and inner and outer narthex, residential and farm buildings. The church was built over a mound necropolis, and under the church nef there is a preserved ancient vault from the end of the IV – the beginning of the V century (3,35 x 2,99 x 2,28 m), to which a stone staircase from the narthex.

Bistritsa-Monastery-saint-Joachim-and_Anne-near-Sofia-Church-view-to-altar

The iconostasis of on the picture is from the palace (chapel) of last Bulgarian King Boris III. It was brought to the monastery after 1944.

Let by the Holy Prayers of Saint Joachim and Saint Anne God grants mercy and Grace to All families everywhere and to everyone that is grieving
God provides his abundant consolation of the Holy Spirit so we can endure the temptations and hardships of life !

Amen

Zabbix rkhunter monitoring check if rootkits trojans and viruses or suspicious OS activities are detected

Wednesday, December 8th, 2021

monitor-rkhunter-with-zabbix-zabbix-rkhunter-check-logo

If you're using rkhunter to monitor for malicious activities, a binary changes, rootkits, viruses, malware, suspicious stuff and other famous security breach possible or actual issues, perhaps you have configured your machines to report to some Email.
But what if you want to have a scheduled rkhunter running on the machine and you don't want to count too much on email alerting (especially because email alerting) makes possible for emails to be tracked by sysadmin pretty late?

We have been in those situation and in this case me and my dear colleague Georgi Stoyanov developed a small rkhunter Zabbix userparameter check to track and Alert if any traces of "Warning"''s are mateched in the traditional rkhunter log file /var/log/rkhunter/rkhunter.log

To set it up and use it is pretty use you will need to have a recent version of zabbix-agent installed on the machine and connected to a Zabbix server, in my case this is:

[root@centos ~]# rpm -qa |grep -i zabbix-agent
zabbix-agent-4.0.7-1.el7.x86_64

 placed inside /etc/zabbix/zabbix_agentd.d/userparameter_rkhunter_warning_check.conf

[root@centos /etc/zabbix/zabbix_agentd.d ]# cat userparameter_rkhunter_warning_check.conf
# userparameter script to check if any Warning is inside /var/log/rkhunter/rkhunter.log and if found to trigger Zabbix alert
UserParameter=rkhunter.warning, (TODAY=$(date |awk '{ print $1" "$2" "$3 }'); if [ $(cat /var/log/rkhunter/rkhunter.log | awk “/$TODAY/,EOF” | /bin/grep -i ‘\[ Warning \]’ | /usr/bin/wc -l) != ‘0’ ]; then echo 1; else echo 0; fi)
UserParameter=rkhunter.suspected,(/bin/grep -i 'Suspect files: ' /var/log/rkhunter/rkhunter.log|tail -n 1| awk '{ print $4 }')
UserParameter=rkhunter.rootkits,(/bin/grep -i 'Possible rootkits: ' /var/log/rkhunter/rkhunter.log|tail -n 1| awk '{ print $4 }')


2. Prepare Rkhunter Template, Triggers and Items


In Zabbix Server that you access from web control interface, you will have to prepare a new template called lets say Rkhunter with the necessery Triggers and Items


2.1 Create Rkhunter Items
 

On Zabbix Server side, uou will have to configure 3 Items for the 3 configured userparameter above script keys, like so:

rkhunter-items-zabbix-screenshot.png

  • rkhunter.suspected Item configuration


rkhunter-suspected-files

  • rkhunter.warning Zabbix Item config

rkhunter-warning-found-check-zabbix

  • rkhunter.rootkits Zabbix Item config

     

     

    rkhunter-zabbix-possible-rootkits-item1

    2.2 Create Triggers
     

You need to have an overall of 3 triggers like in below shot:

zabbix-rkhunter-all-triggers-screenshot
 

  • rkhunter.rootkits Trigger config

rkhunter-rootkits-trigger-zabbix1

  • rkhunter.suspected Trigger cfg

rkhunter-suspected-trigger-zabbix1

  • rkhunter warning Trigger cfg

rkhunter-warning-trigger1

3. Reload zabbix-agent and test the keys


It is necessery to reload zabbix agent for the new userparameter to start to be sent to remote zabbix server (through a proxy if you have one configured).

[root@centos ~]# systemctl restart zabbix-agent


To make the zabbix-agent send the keys to the server you can use zabbix_sender to have the test tool you will have to have installed (zabbix-sender) on the server.

To trigger a manualTest if you happen to have some problems with the key which shouldn''t be the case you can sent a value to the respectve key with below command:

[root@centos ~ ]# zabbix_sender -vv -c "/etc/zabbix/zabbix_agentd.conf" -k "khunter.warning" -o "1"


Check on Zabbix Server the sent value is received, for any oddities as usual check what is inside  /var/log/zabbix/zabbix_agentd.log for any errors or warnings.

How to test RAM Memory for errors in Linux / UNIX OS servers. Find broken memory RAM banks

Friday, December 3rd, 2021

test-ram-memory-for-errors-linux-unix-find-broken-memory-logo

 

1. Testing the memory with motherboard integrated tools
 

Memory testing has been integral part of Computers for the last 50 years. In the dawn of computers those older perhaps remember memory testing was part of the computer initialization boot. And this memory testing was delaying the boot with some seconds and the user could see the memory numbers being counted up to the amount of memory. With the increased memory modern computers started to have and the annoyance to wait for a memory check program to check the computer hardware memory on modern computers this check has been mitigated or completely removed on some hardware.
Thus under some circumstances sysadmins or advanced computer users might need to check the memory, especially if there is some suspicion for memory damages or if for example a home PC starts crashing with Blue screens of Death on Windows without reason or simply the PC or some old arcane Linux / UNIX servers gets restarted every now and then for now apparent reason. When such circumstances occur it is an idea to start debugging the hardware issue with a simple memory check.

There are multiple ways to test installed memory banks on a server laptop or local home PC both integrated and using external programs.
On servers that is usually easily done from ILO or IPMI or IDRAC access (usually web) interface of the vendor, on laptops and home usage from BIOS or UEFI (Unified Extensible Firmware Interface) acces interface on system boot that is possible as well.

memtest-hp
HP BIOS Setup

An old but gold TIP, more younger people might not know is the

 

Prolonged SHIFT key press which once held with the user instructs the machine to initiate a memory test before the computer starts reading what is written in the boot loader.

So before anything else from below article it might be a good idea to just try HOLD SHIFT for 15-20 seconds after a complete Shut and ON from the POWER button.

If this test does not triggered or it is triggered and you end up with some corrupted memory but you're not sure which exact Memory bank is really crashing and want to know more on what memory Bank and segments are breaking up you might want to do a more thorough testing. In below article I'll try to explain shortly how this can be done.


2. Test the memory using a boot USB Flash Drive / DVD / CD 
 

Say hello to memtest86+. It is a Linux GRUB boot loader bootable utility that tests physical memory by writing various patterns to it and reading them back. Since memtest86+ runs directly off the hardware it does not require any operating system support for execution. Perhaps it is important to mention that memtest86 (is PassMark memtest86)and memtest86+ (An Advanced Memory diagnostic tool) are different tools, the first is freeware and second one is FOSS software.

To use it all you'll need is some version of Linux. If you don't already have some burned in somewhere at your closet, you might want to burn one.
For Linux / Mac users this is as downloading a Linux distribution ISO file and burning it with

# dd if=/path/to/iso of=/dev/sdbX bs=80M status=progress


Windows users can burn a Live USB with whatever Linux distro or download and burn the latest versionof memtest86+ from https://www.memtest.org/  on Windows Desktop with some proggie like lets say UnetBootIn.
 

2.1. Run memtest86+ on Ubuntu

Many Linux distributions such as Ubuntu 20.0 comes together with memtest86+, which can be easily invoked from GRUB / GRUB2 Kernel boot loader.
Ubuntu has a separate menu pointer for a Memtest.

ubuntu-grub-2-04-boot-loader-memtest86-menu-screenshot

Other distributions RPM based distributions such as CentOS, Fedora Linux, Redhat things differ.

2.2. memtest86+ on Fedora


Fedora used to have the memtest86+ menu at the GRUB boot selection prompt, but for some reason removed it and in newest Fedora releases as of time such as Fedora 35 memtest86+ is preinstalled and available but not visible, to start on  already and to start a memtest memory test tool:

  •   Boot a Fedora installation or Rescue CD / USB. At the prompt, type "memtest86".

boot: memtest86

2.3 memtest86+ on RHEL Linux

The memtest86+tool is available as an RPM package from Red Hat Network (RHN) as well as a boot option from the Red Hat Enterprise Linux rescue disk.
And nowadays Red Hat Enterprise Linux ships by default with the tool.

Prior redhat (now legacy) releases such as on RHEL 5.0 it has to be installed and configure it with below 3 commands.

[root@rhel ~]# yum install memtest86+
[root@rhel ~]# memtest-setup
[root@rhel ~]# grub2-mkconfig -o /boot/grub2/grub.cfg


    Again as with CentOS to boot memtest86+ from the rescue disk, you will need to boot your system from CD 1 of the Red Hat Enterprise Linux installation media, and type the following at the boot prompt (before the Linux kernel is started):

boot: memtest86

memtestx86-8gigabytes-of-memory-boot-screenshot
memtest86+ testing 5 memory slots

As you see all on above screenshot the Memory banks are listed as Slots. There are a number of Tests to be completed until
it can be said for sure memory does not have any faulty cells. 
The

Pass: 0
Errors: 0 

Indicates no errors, so in the end if memtest86 does not find anything this values should stay at zero.
memtest86+ is also usable to detecting issues with temperature of CPU. Just recently I've tested a PC thinking that some memory has defects but it turned out the issue on the Computer was at the CPU's temperature which was topping up at 80 – 82 Celsius.

If you're unfortunate and happen to get some corrupted memory segments you will get some red fields with the memory addresses found to have corrupted on Read / Write test operations:

memtest86-returning-memory-address-errors-screenshot


2.4. Install and use memtest and memtest86+ on Debian / Mint Linux

You can install either memtest86+ or just for the fun put both of them and play around with both of them as they have a .deb package provided out of debian non-free /etc/apt/sources.list repositories.


root@jeremiah:/home/hipo# apt-cache show memtest86 memtest86+
Package: memtest86
Version: 4.3.7-3
Installed-Size: 302
Maintainer: Yann Dirson <dirson@debian.org>
Architecture: amd64
Depends: debconf (>= 0.5) | debconf-2.0
Recommends: memtest86+
Suggests: hwtools, memtester, kernel-patch-badram, grub2 (>= 1.96+20090523-1) | grub (>= 0.95+cvs20040624), mtools
Description-en: thorough real-mode memory tester
 Memtest86 scans your RAM for errors.
 .
 This tester runs independently of any OS – it is run at computer
 boot-up, so that it can test *all* of your memory.  You may want to
 look at `memtester', which allows testing your memory within Linux,
 but this one won't be able to test your whole RAM.
 .
 It can output a list of bad RAM regions usable by the BadRAM kernel
 patch, so that you can still use you old RAM with one or two bad bits.
 .
 This is the last DFSG-compliant version of this software, upstream
 has opted for a proprietary development model starting with 5.0.  You
 may want to consider using memtest86+, which has been forked from an
 earlier version of memtest86, and provides a different set of
 features.  It is available in the memtest86+ package.
 .
 A convenience script is also provided to make a grub-legacy-based
 floppy or image.

Description-md5: 0ad381a54d59a7d7f012972f613d7759
Homepage: http://www.memtest86.com/
Section: misc
Priority: optional
Filename: pool/main/m/memtest86/memtest86_4.3.7-3_amd64.deb
Size: 45470
MD5sum: 8dd2a4c52910498d711fbf6b5753bca9
SHA256: 09178eca21f8fd562806ccaa759d0261a2d3bb23190aaebc8cd99071d431aeb6

Package: memtest86+
Version: 5.01-3
Installed-Size: 2391
Maintainer: Yann Dirson <dirson@debian.org>
Architecture: amd64
Depends: debconf (>= 0.5) | debconf-2.0
Suggests: hwtools, memtester, kernel-patch-badram, memtest86, grub-pc | grub-legacy, mtools
Description-en: thorough real-mode memory tester
 Memtest86+ scans your RAM for errors.
 .
 This tester runs independently of any OS – it is run at computer
 boot-up, so that it can test *all* of your memory.  You may want to
 look at `memtester', which allows to test your memory within Linux,
 but this one won't be able to test your whole RAM.
 .
 It can output a list of bad RAM regions usable by the BadRAM kernel
 patch, so that you can still use your old RAM with one or two bad bits.
 .
 Memtest86+ is based on memtest86 3.0, and adds support for recent
 hardware, as well as a number of general-purpose improvements,
 including many patches to memtest86 available from various sources.
 .
 Both memtest86 and memtest86+ are being worked on in parallel.
Description-md5: aa685f84801773ef97fdaba8eb26436a
Homepage: http://www.memtest.org/

Tag: admin::benchmarking, admin::boot, hardware::storage:floppy,
 interface::text-mode, role::program, scope::utility, use::checking
Section: misc
Priority: optional
Filename: pool/main/m/memtest86+/memtest86+_5.01-3_amd64.deb
Size: 75142
MD5sum: 4f06523532ddfca0222ba6c55a80c433
SHA256: ad42816e0b17e882713cc6f699b988e73e580e38876cebe975891f5904828005
 

 

root@jeremiah:/home/hipo# apt-get install –yes memtest86+

root@jeremiah:/home/hipo# apt-get install –yes memtest86

Reading package lists… Done
Building dependency tree       
Reading state information… Done
Suggested packages:
  hwtools kernel-patch-badram grub2 | grub
The following NEW packages will be installed:
  memtest86
0 upgraded, 1 newly installed, 0 to remove and 21 not upgraded.
Need to get 45.5 kB of archives.
After this operation, 309 kB of additional disk space will be used.
Get:1 http://ftp.de.debian.org/debian buster/main amd64 memtest86 amd64 4.3.7-3 [45.5 kB]
Fetched 45.5 kB in 0s (181 kB/s)     
Preconfiguring packages …
Selecting previously unselected package memtest86.
(Reading database … 519985 files and directories currently installed.)
Preparing to unpack …/memtest86_4.3.7-3_amd64.deb …
Unpacking memtest86 (4.3.7-3) …
Setting up memtest86 (4.3.7-3) …
Generating grub configuration file …
Found background image: saint-John-of-Rila-grub.jpg
Found linux image: /boot/vmlinuz-4.19.0-18-amd64
Found initrd image: /boot/initrd.img-4.19.0-18-amd64
Found linux image: /boot/vmlinuz-4.19.0-17-amd64
Found initrd image: /boot/initrd.img-4.19.0-17-amd64
Found linux image: /boot/vmlinuz-4.19.0-8-amd64
Found initrd image: /boot/initrd.img-4.19.0-8-amd64
Found linux image: /boot/vmlinuz-4.19.0-6-amd64
Found initrd image: /boot/initrd.img-4.19.0-6-amd64
Found linux image: /boot/vmlinuz-4.19.0-5-amd64
Found initrd image: /boot/initrd.img-4.19.0-5-amd64
Found linux image: /boot/vmlinuz-4.9.0-8-amd64
Found initrd image: /boot/initrd.img-4.9.0-8-amd64
Found memtest86 image: /boot/memtest86.bin
Found memtest86+ image: /boot/memtest86+.bin
Found memtest86+ multiboot image: /boot/memtest86+_multiboot.bin
File descriptor 3 (pipe:[66049]) leaked on lvs invocation. Parent PID 22581: /bin/sh
done
Processing triggers for man-db (2.8.5-2) …

 

After this both memory testers memtest86+ and memtest86 will appear next to the option of booting a different version kernels and the Advanced recovery kernels, that you usually get in the GRUB boot prompt.

2.5. Use memtest embedded tool on any Linux by adding a kernel variable

Edit-Grub-Parameters-add-memtest-4-to-kernel-boot

2.4.1. Reboot your computer

# reboot

2.4.2. At the GRUB boot screen (with UEFI, press Esc).

2.4.3 For 4 passes add temporarily the memtest=4 kernel parameter.
 

memtest=        [KNL,X86,ARM,PPC,RISCV] Enable memtest
                Format: <integer>
                default : 0 <disable>
                Specifies the number of memtest passes to be
                performed. Each pass selects another test
                pattern from a given set of patterns. Memtest
                fills the memory with this pattern, validates
                memory contents and reserves bad memory
                regions that are detected.


3. Install and use memtester Linux tool
 

At some condition, memory is the one of the suspcious part, or you just want have a quick test. memtester  is an effective userspace tester for stress-testing the memory subsystem.  It is very effective at finding intermittent and non-deterministic faults.

The advantage of memtester "live system check tool is", you can check your system for errors while it's still running. No need for a restart, just run that application, the downside is that some segments of memory cannot be thoroughfully tested as you already have much preloaded data in it to have the Operating Sytstem running, thus always when possible try to stick to rule to test the memory using memtest86+  from OS Boot Loader, after a clean Machine restart in order to clean up whole memory heap.

Anyhow for a general memory test on a Critical Legacy Server  (if you lets say don't have access to Remote Console Board, or don't trust the ILO / IPMI Hardware reported integrity statistics), running memtester from already booted is still a good idea.


3.1. Install memtester on any Linux distribution from source

wget http://pyropus.ca/software/memtester/old-versions/memtester-4.2.2.tar.gz
# tar zxvf memtester-4.2.2.tar.gz
# cd memtester-4.2.2
# make && make install

3.2 Install on RPM based distros

 

On Fedora memtester is available from repositories however on many other RPM based distros it is not so you have to install it from source.

[root@fedora ]# yum install -y memtester

 

3.3. Install memtester on Deb based Linux distributions from source
 

To install it on Debian / Ubuntu / Mint etc. , open a terminal and type:
 

root@linux:/ #  apt install –yes memtester

The general run syntax is:

memtester [-p PHYSADDR] [ITERATIONS]


You can hence use it like so:

hipo@linux:/ $ sudo memtester 1024 5

This should allocate 1024MB of memory, and repeat the test 5 times. The more repeats you run the better, but as a memtester run places a great overall load on the system you either don't increment the runs too much or at least run it with  lowered process importance e.g. by nicing the PID:

hipo@linux:/ $ nice -n 15 sudo memtester 1024 5

 

  • If you have more RAM like 4GB or 8GB, it is upto you how much memory you want to allocate for testing.
  • As your operating system, current running process might take some amount of RAM, Please check available Free RAM and assign that too memtester.
  • If you are using a 32 Bit System, you cant test more than 4 GB even though you have more RAM( 32 bit systems doesnt support more than 3.5 GB RAM as you all know).
  • If your system is very busy and you still assigned higher than available amount of RAM, then the test might get your system into a deadlock, leads to system to halt, be aware of this.
  • Run the memtester as root user, so that memtester process can malloc the memory, once its gets hold on that memory it will try to apply lock. if specified memory is not available, it will try to reduce required RAM automatically and try to lock it with mlock.
  • if you run it as a regular user, it cant auto reduce the required amount of RAM, so it cant lock it, so it tries to get hold on that specified memory and starts exhausting all system resources.


If you have 8 Gigas of RAM plugged into the PC motherboard you have to multiple 1024*8 this is easily done with bc (An arbitrary precision calculator language) tool:

root@linux:/ # bc -l
bc 1.07.1
Copyright 1991-1994, 1997, 1998, 2000, 2004, 2006, 2008, 2012-2017 Free Software Foundation, Inc.
This is free software with ABSOLUTELY NO WARRANTY.
For details type `warranty'. 
8*1024
8192


 for example you should run:

root@linux:/ # memtester 8192 5

memtester version 4.3.0 (64-bit)
Copyright (C) 2001-2012 Charles Cazabon.
Licensed under the GNU General Public License version 2 (only).

pagesize is 4096
pagesizemask is 0xfffffffffffff000
want 8192MB (2083520512 bytes)
got  8192MB (2083520512 bytes), trying mlock …Loop 1/1:
  Stuck Address       : ok        
  Random Value        : ok
  Compare XOR         : ok
  Compare SUB         : ok
  Compare MUL         : ok
  Compare DIV         : ok
  Compare OR          : ok
  Compare AND         : ok
  Sequential Increment: ok
  Solid Bits          : ok        
  Block Sequential    : ok        
  Checkerboard        : ok        
  Bit Spread          : ok        
  Bit Flip            : ok        
  Walking Ones        : ok        
  Walking Zeroes      : ok        
  8-bit Writes        : ok
  16-bit Writes       : ok

Done.

 

4. Shell Script to test server memory for corruptions
 

If for some reason the machine you want to run a memory test doesn't have connection to the external network such as the internet and therefore you cannot configure a package repository server and install memtester, the other approach is to use a simple memory test script such as memtestlinux.sh
 

#!/bin/bash
# Downloaded from https://www.srv24x7.com/memtest-linux/
echo "ByteOnSite Memory Test"
cpus=`cat /proc/cpuinfo | grep processor | wc -l`
if [ $cpus -lt 6 ]; then
threads=2
else
threads=$(($cpus / 2))
fi
echo "Detected $cpus CPUs, using $threads threads.."
memory=`free | grep 'Mem:' | awk {'print $2'}`
memoryper=$(($memory / $threads))
echo "Detected ${memory}K of RAM ($memoryper per thread).."
freespace=`df -B1024 . | tail -n1 | awk {'print $4'}`
if [ $freespace -le $memory ]; then
echo You do not have enough free space on the current partition. Minimum: $memory bytes
exit 1
fi
echo "Clearing RAM Cache.."
sync; echo 3 > /proc/sys/vm/drop_cachesfile
echo > dump.memtest.img
echo "Writing to dump file (dump.memtest.img).."
for i in `seq 1 $threads`;
do
# 1044 is used in place of 1024 to ensure full RAM usage (2% over allocation)
dd if=/dev/urandom bs=$memoryper count=1044 >> dump.memtest.img 2>/dev/null &
pids[$i]=$!
echo $i
done
for pid in "${pids[@]}"
do
wait $pid
done

echo "Reading and analyzing dump file…"
echo "Pass 1.."
md51=`md5sum dump.memtest.img | awk {'print $1'}`
echo "Pass 2.."
md52=`md5sum dump.memtest.img | awk {'print $1'}`
echo "Pass 3.."
md53=`md5sum dump.memtest.img | awk {'print $1'}`
if [ “$md51” != “$md52” ]; then
fail=1
elif [ “$md51” != “$md53” ]; then
fail=1
elif [ “$md52” != “$md53” ]; then
fail=1
else
fail=0
fi
if [ $fail -eq 0 ]; then
echo "Memory test PASSED."
else
echo "Memory test FAILED. Bad memory detected."
fi
rm -f dump.memtest.img
exit $fail

Nota Bene !: Again consider the restults might not always be 100% trustable if possible restart the server and test with memtest86+

Consider also its important to make sure prior to script run,  you''ll have enough disk space to produce the dump.memtest.img file – file is created as a test bed for the memory tests and if not scaled properly you might end up with a full ( / ) root directory!

 

4.1 Other memory test script with dd and md5sum checksum

I found this solution on the well known sysadmin site nixCraft cyberciti.biz, I think it makes sense and quicker.

First find out memory site using free command.
 

# free
             total       used       free     shared    buffers     cached
Mem:      32867436   32574160     293276          0      16652   31194340
-/+ buffers/cache:    1363168   31504268
Swap:            0          0          0


It shows that this server has 32GB memory,
 

# dd if=/dev/urandom bs=32867436 count=1050 of=/home/memtest


free reports by k and use 1050 is to make sure file memtest is bigger than physical memory.  To get better performance, use proper bs size, for example 2048 or 4096, depends on your local disk i/o,  the rule is to make bs * count > 32 GB.
run

# md5sum /home/memtest; md5sum /home/memtest; md5sum /home/memtest


If you see md5sum mismatch in different run, you have faulty memory guaranteed.
The theory is simple, the file /home/memtest will cache data in memory by filling up all available memory during read operation. Using md5sum command you are reading same data from memory.


5. Other ways to test memory / do a machine stress test

Other good tools you might want to check for memory testing is mprime – ftp://mersenne.org/gimps/ 
(https://www.mersenne.org/ftp_root/gimps/)

  •  (mprime can also be used to stress test your CPU)

Alternatively, use the package stress-ng to run all kind of stress tests (including memory test) on your machine.
Perhaps there are other interesting tools for a diagnosis of memory if you know other ones I miss, let me know in the comment section.

How to mask rpcbind on CentOS to prevent rpcbind service from auto start new local server port listener triggered by Security audit port scanner software

Wednesday, December 1st, 2021

how to mute rpcbind on CentOS to prevent rpcbind service from auto start new local server port rpc-remote-procedure-call-picture

 

Introduction to  THE PROBLEM :
rpcbind TCP/UDP port 111 automatically starting itself out of nothing on CentOS 7 Linux

For server environments that are being monitored regularly for CVI security breaches based on opened TCP / UDP ports with like Qualys (a proprietary business software that helps automate the full spectrum of auditing, compliance and protection of your IT systems and web applications.), perhaps the closest ex-open source equivallent was Nessus Security Scanner or the more modern security audit Linux tools – Intruder (An Effortless Vulnerability Scanner), OpenVAS (Open Vulnerability Assessment Scanner) or even a simple nmap command port scan on TCP IP / UDP protocol for SunRPC default predefined machine port 111.

 

[root@centos~]# cat /etc/redhat-release
CentOS Linux release 7.9.2009 (Core)

 

[root@centos~]# grep -i rpcbind /etc/services
sunrpc          111/tcp         portmapper rpcbind      # RPC 4.0 portmapper TCP
sunrpc          111/udp         portmapper rpcbind      # RPC 4.0 portmapper UDP


Note! For those who don't know it or newer to Linux 
/etc/services file
used to be a file with predefiend well known services and their ports in Linux as well as other UNIXes for years now.

So once this scan is triggered you might end up in a very strange situation that the amount of processes on the CentOS Linux server misterously change with +1 as even though disabled systemctl rpcbind.service process will appear running again.
 

[root@centos~]# ps -ef|grep -i rpcbind
rpc        100     1  0 Nov11 ?        00:00:02 /sbin/rpcbind -w
root     29099 22060  0 13:07 pts/0    00:00:00 grep –color=auto -i rpcbind
[root@centos ~]#

By the wayit took us a while to me and my colleagues to identify what was the mysterious reason for triggering rpcbind process on a  gets triggered and rpcbind process appears in process list even though the machine is in a very secured DMZ Lan and there is no cron jobs or any software that does any kind of scheduling that might lead rpcbind to start up like it does.

[root@centos ~]# systemctl list-unit-files|grep -i rpcbind
rpcbind.service                               disabled
rpcbind.socket                                disabled
rpcbind.target                                static


There is absoultely no logic in that a service whose stopped on TCP / UDP 111 on a machine that is lacking no firewall rules such as iptables CHAINs or whatever.

[root@centos~]# systemctl status rpcbind
● rpcbind.service – RPC bind service
   Loaded: loaded (/usr/lib/systemd/system/rpcbind.service; disabled; vendor preset: enabled)
   Active: inactive (dead)


A you can see the service after all seems to have been disabled originally but after some time this output auto-magically was turning to rpcbind.socket enabled:

root@centos ~]# systemctl list-unit-files|grep -i rpcbind
rpcbind.service                               disabled
rpcbind.socket                                enabled
rpcbind.target                                static

Hence to prevent the rpcbind.socket to automatically respawn itself and lead to resurrection of the dead and disabled /sbin/rpcbind


1. Disable listener in  /usr/lib/systemd/system/rpcbind.socket file


And comment all Listen* rows there

[root@centos ~]# vi /usr/lib/systemd/system/rpcbind.socket

[Unit]

Description=RPCbind Server Activation Socket

 

[Socket]

ListenStream=/var/run/rpcbind.sock

 

# RPC netconfig can't handle ipv6/ipv4 dual sockets

BindIPv6Only=ipv6-only

#ListenStream=0.0.0.0:111

#ListenDatagram=0.0.0.0:111

#ListenStream=[::]:111

#ListenDatagram=[::]:111

 

[Install]

WantedBy=sockets.target

2. Mask rpcbind.socket and, sure /etc/systemd/system/rpcbind.socket links to /dev/null

Mute completely rpcbind.socket (this is systemd option "feature" to link service to /dev/null)

[root@centos ~]# systemctl mask rpcbind.socket

 

Hence, the link from /etc/systemd/system/rpcbind.socket must be linked to /dev/null

[root@centos ~]# ls -l /etc/systemd/system/rpcbind.socket
lrwxrwxrwx 1 root root 9 Jan 27  2020 /etc/systemd/system/rpcbind.socket -> /dev/null


Voila ! That should be it rpcbind should not hang around anymore among other processes.