<div dir="ltr">/root/anaconda.ks would be my go to also. This is also good on Fedora. <br><div><br></div><div>Another option may be to check the file system creation date with tune2fs if it is an ext fs. </div><div><br></div><div>tune2fs -l /dev/mapper/${filesystem} | grep created</div><br><div class="gmail_quote"><div dir="ltr">On Wed, 5 Aug 2015 at 17:24 Dan <<a href="mailto:danduncan@gmail.com">danduncan@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>If it's a Redhat or Centos system there should be a /root/anaconda.ks file with the same timestamp.<br><br><div class="gmail_quote"></div></div><div><div class="gmail_quote">On August 5, 2015 4:36:44 PM MDT, "David L. Willson" <DLWillson@TheGeek.NU> wrote:</div></div><div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><pre>CLUE: What is your strategy for determining a server's "born on" date?<br><br>---<br><br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"> WRT the keys idea: On my Fedora 21 box, there weren't any ssh keys<br> until I started the ssh daemon, so no dice.<br></blockquote><br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"> ----- Original Message -----<br></blockquote><br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"> From: "Mike Shoup" <<a href="mailto:mike@shouptech.com" target="_blank">mike@shouptech.com</a>><br></blockquote><br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"> Near as I can tell, XFS doesn't store that information:<br></blockquote><br><blockquote class="gmail_quote" style="margin:0pt 0p t 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"> ~<br> [mike@voyager]$ sudo xfs_info /<br> meta-data=/dev/mapper/centos_voyager-root isize=256 agcount=4,<br> agsize=1147392 blks<br> = sectsz=512 attr=2, projid32bit=1<br> = crc=0 finobt=0<br> data = bsize=4096 blocks=4589568, imaxpct=25<br> = sunit=0 swidth=0 blks<br> naming =version 2 bsize=4096 ascii-ci=0 ftype=0<br> log =internal bsize=4096 blocks=2560, version=2<br> = sectsz=512 sunit=0 blks, lazy-count=1<br> realtime =none extsz=4096 blocks=0, rtextents=0<br></blockquote><br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"> ___<br></blockquote><br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"> You could probably look at the ctime of a unique file for each<br> machine, that gets created at install time. What about the host's<br> SSH key? I
don't
think most places change those very often.<br></blockquote><br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"> ~<br> [mike@voyager]$ stat /etc/ssh/ssh_host_rsa_key<br> File: ‘/etc/ssh/ssh_host_rsa_key’<br> Size: 1675 Blocks: 8 IO Block: 4096 regular file<br> Device: fd00h/64768d Inode: 416880 Links: 1<br> Access: (0640/-rw-r-----) Uid: ( 0/ root) Gid: ( 999/ssh_keys)<br> Access: 2015-08-05 12:48:27.021065883 -0600<br> Modify: 2015-04-26 20:05:46.378871265 -0600<br> Change: 2015-04-26 20:05:46.457871265 -0600<br> Birth: -<br></blockquote><br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"> --<br></blockquote><br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"> Mike<br></blockquote><br><blockquote class="gmail_quote" style="margin:0 pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"> On Wed, Aug 5, 2015 at 2:13 PM, David L. Willson <<br> <a href="mailto:dlwillson@sofree.us" target="_blank">dlwillson@sofree.us</a> > wrote:<br></blockquote><br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> BCC: LPIC-1 Study Group<br></blockquote> <br></blockquote><br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> "Born On Date"<br></blockquote> <br></blockquote><br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #a d7fa8;padding-left:1ex"> Sometimes it's useful to know when this server was "born", when it<br> was built. Usually, you also want to know who built it, so you know<br> who to question or kick, but that's a topic for another day.<br></blockquote> <br></blockquote><br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> The root filesystem was usually created on the same day, so that is<br> the date I use. To get that date, if your root filesystem is<br> ext2/3/4, run dumpe2fs and look for 'created'.<br></blockquote> <br></blockquote><br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> Here's an
example:<br></blockquote> <br></blockquote><br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> [dwills003c@wdv-logecoll nagios]$ sudo df -hT /<br></blockquote> <br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> Filesystem Type Size Used Avail Use% Mounted on<br></blockquote> <br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> /dev/sdi6 ext3 70G 32G 35G 48% /<br></blockquote> <br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> [dwills003c@wdv-logecoll nagios]$ sudo /sbin/dumpe2fs /dev/sdi6 |<br> grep -iC 3 created<br></blockquote> <br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> dumpe2fs 1.39 (29-May-2006)<br></blockquote> <br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> Fragments per group: 32768<br></blockquote> <br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> Inodes per group: 32736<br></blockquote> <br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> Inode blocks per group: 1023<br></blockquote> <br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> Filesystem created: Tue Jan 25 06:44:25 2011<br></blockquote> <br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> Last mount
time:
Fri Jul 31 09:02:54 2015<br></blockquote> <br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> Last write time: Fri Jul 31 09:02:54 2015<br></blockquote> <br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> Mount count: 10<br></blockquote> <br></blockquote><br></pre></blockquote></div></div><div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><pre><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> Now, Fedora Server 22 and Enterprise Linux 7 have moved to xfs. How<br> do you get the same information from it? I don't know... yet.<br></blockquote> <br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"><hr><br></blockquote> <br></blockquote></pre></blockquote></div></div><div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><pre><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #729fcf;padding-left:1ex"><blockquote style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> SFS mailing list<br></blockquote> <br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> <a href="mailto:SFS@thegeek.nu" target="_blank">SFS@thegeek.nu</a><br></blockquote> <br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid #ad7fa8;padding-left:1ex"> <a href="http://mailman.thegeek.nu/mailman/listinfo/sfs" target="_blank">http://mailman.thegeek.nu/mailman/listinfo/sfs</a><br></blockquote><br></blockquote><hr><br></pre></blockquote></div></div><div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><pre>clue mailing list: <a href="mailto:clue@cluedenver.org" target="_blank">clue@cluedenver.org</a><br>For information, account preferences, or to unsubscribe see:<br><a href="http://cluedenver.org/mailman/listinfo/clue" target="_blank">http://cluedenver.org/mailman/listinfo/clue</a></pre></blockquote></div></div><div><br>
-- <br>
Sent from my Android device with K-9 Mail. Please excuse my brevity.</div>_______________________________________________<br>
clue mailing list: <a href="mailto:clue@cluedenver.org" target="_blank">clue@cluedenver.org</a><br>
For information, account preferences, or to unsubscribe see:<br>
<a href="http://cluedenver.org/mailman/listinfo/clue" rel="noreferrer" target="_blank">http://cluedenver.org/mailman/listinfo/clue</a></blockquote></div></div>