<html><head></head><body>If it's a Redhat or Centos system there should be a /root/anaconda.ks file with the same timestamp.<br><br><div class="gmail_quote">On August 5, 2015 4:36:44 PM MDT, "David L. Willson" <DLWillson@TheGeek.NU> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="k9mail">CLUE: What is your strategy for determining a server's "born on" date?<br /><br />---<br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> WRT the keys idea: On my Fedora 21 box, there weren't any ssh keys<br /> until I started the ssh daemon, so no dice.<br /></blockquote><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> ----- Original Message -----<br /></blockquote><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> From: "Mike Shoup" <mike@shouptech.com><br /></blockquote><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> Near as I can tell, XFS doesn't store that information:<br /></blockquote><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex
0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> ~<br /> [mike@voyager]$ sudo xfs_info /<br /> meta-data=/dev/mapper/centos_voyager-root isize=256 agcount=4,<br /> agsize=1147392 blks<br /> = sectsz=512 attr=2, projid32bit=1<br /> = crc=0 finobt=0<br /> data = bsize=4096 blocks=4589568, imaxpct=25<br /> = sunit=0 swidth=0 blks<br /> naming =version 2 bsize=4096 ascii-ci=0 ftype=0<br /> log =internal bsize=4096 blocks=2560, version=2<br /> = sectsz=512 sunit=0 blks, lazy-count=1<br /> realtime =none extsz=4096 blocks=0, rtextents=0<br /></blockquote><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> ___<br /></blockquote><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> You could probably look at the ctime of a unique file for each<br /> machine, that gets created at install time. What about the host's<br /> SSH key? I don't
think most places change those very often.<br /></blockquote><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> ~<br /> [mike@voyager]$ stat /etc/ssh/ssh_host_rsa_key<br /> File: ‘/etc/ssh/ssh_host_rsa_key’<br /> Size: 1675 Blocks: 8 IO Block: 4096 regular file<br /> Device: fd00h/64768d Inode: 416880 Links: 1<br /> Access: (0640/-rw-r-----) Uid: ( 0/ root) Gid: ( 999/ssh_keys)<br /> Access: 2015-08-05 12:48:27.021065883 -0600<br /> Modify: 2015-04-26 20:05:46.378871265 -0600<br /> Change: 2015-04-26 20:05:46.457871265 -0600<br /> Birth: -<br /></blockquote><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> --<br /></blockquote><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> Mike<br /></blockquote><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt
1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> On Wed, Aug 5, 2015 at 2:13 PM, David L. Willson <<br /> dlwillson@sofree.us > wrote:<br /></blockquote><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> BCC: LPIC-1 Study Group<br /></blockquote> <br /></blockquote><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> "Born On Date"<br /></blockquote> <br /></blockquote><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8;
padding-left: 1ex;"> Sometimes it's useful to know when this server was "born", when it<br /> was built. Usually, you also want to know who built it, so you know<br /> who to question or kick, but that's a topic for another day.<br /></blockquote> <br /></blockquote><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> The root filesystem was usually created on the same day, so that is<br /> the date I use. To get that date, if your root filesystem is<br /> ext2/3/4, run dumpe2fs and look for 'created'.<br /></blockquote> <br /></blockquote><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> Here's an
example:<br /></blockquote> <br /></blockquote><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> [dwills003c@wdv-logecoll nagios]$ sudo df -hT /<br /></blockquote> <br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> Filesystem Type Size Used Avail Use% Mounted on<br /></blockquote> <br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> /dev/sdi6 ext3 70G 32G 35G 48% /<br /></blockquote> <br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> [dwills003c@wdv-logecoll nagios]$ sudo /sbin/dumpe2fs /dev/sdi6 |<br /> grep -iC 3 created<br /></blockquote> <br /><blockquote
class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> dumpe2fs 1.39 (29-May-2006)<br /></blockquote> <br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> Fragments per group: 32768<br /></blockquote> <br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> Inodes per group: 32736<br /></blockquote> <br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> Inode blocks per group: 1023<br /></blockquote> <br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> Filesystem created: Tue Jan 25 06:44:25 2011<br /></blockquote> <br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> Last mount time:
Fri Jul 31 09:02:54 2015<br /></blockquote> <br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> Last write time: Fri Jul 31 09:02:54 2015<br /></blockquote> <br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> Mount count: 10<br /></blockquote> <br /></blockquote><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> Now, Fedora Server 22 and Enterprise Linux 7 have moved to xfs. How<br /> do you get the same information from it? I don't know... yet.<br /></blockquote> <br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><hr /><br /></blockquote> <br /><blockquote class="gmail_quote"
style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> SFS mailing list<br /></blockquote> <br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> SFS@thegeek.nu<br /></blockquote> <br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> <a href="http://mailman.thegeek.nu/mailman/listinfo/sfs">http://mailman.thegeek.nu/mailman/listinfo/sfs</a><br /></blockquote><br /></blockquote><hr /><br />clue mailing list: clue@cluedenver.org<br />For information, account preferences, or to unsubscribe see:<br /><a href="http://cluedenver.org/mailman/listinfo/clue">http://cluedenver.org/mailman/listinfo/clue</a></pre></blockquote></div><br>
-- <br>
Sent from my Android device with K-9 Mail. Please excuse my brevity.</body></html>