Topics created by Obsolesce

@stacksofplates said in Fedora 27 Update History; surprise BIOS update:

@tim_g said in Fedora 27 Update History; surprise BIOS update:

@stacksofplates said in Fedora 27 Update History; surprise BIOS update:

@tim_g said in Fedora 27 Update History; surprise BIOS update:

@aidan_walsh said in Fedora 27 Update History; surprise BIOS update:

I had a microcode update applied by Korora 26 during the week, perhaps that?

Check dnf history?

Yeah dnf history shows my command/install history. But I don't know how to get it to show everything that was updated.

You can do

dnf history info <history number>

I've tried that but it doesn't show the whole line... it gets cut off so it doesn't help at all.

huh? There should be a lot more than one line.

0_1516397979510_Screenshot 2018-01-19 at 4.39.19 PM.png

OH! I had it in the wrong order. I had the number and info switched around.

No experience with it, I'm afraid.

@bnrstnr said in Installing Fedora 27 LAMP Stack plus WordPress and SSL:

@tim_g said in Installing Fedora 27 LAMP Stack plus WordPress and SSL:

Create a new secure SSH key:
ssh-keygen -t rsa -b 4096 -C "root-webserv1-key"

Hit enter for default location and name.
Hit enter again to skip passphrase creation.
Now you should SSH to server to continue.

Does this step disable normal logins or change anything at all? After my first restart my root password isn't working.

This only generates a new certificate and does not do anything else. If your root password is not working, maybe you are typing it in incorrectly, or it's something else entirely, as what @NashBrydges is referring to. If you are using Putty, perhaps it's caching the old public key.

@matteo-nunziati said in Hyper-V now has VMs with batteries:

nice if you use hyperv instead of virtual box. useless on servers.
nothing wrong, just a question: which is the expected audience of hyper-v?!

It's broad. The use case here is developers working from desktops and testing interactions with battery stats.

Schweeeeet!!

@scottalanmiller said in Red Wine is good for you: Myth busted!:

This also flags ChatGPT because it misunderstood the topic.

Like this?
Interactive AI incorrectly describes Japan's Shiga gov. as 'Rurouni Kenshin' manga creator

OTSU -- Shiga Gov. Taizo Mikazuki is a "manga artist" known for the popular work "Rurouni Kenshin" -- or at least that's the mistaken description one artificial intelligence (AI) chatbot would have users believe.

When a Shiga Prefectural Government employee asked ChatGPT about Taizo Mikazuki it apparently explained that he was a "Japanese manga artist." Microsoft's Bing AI, meanwhile, correctly gave his job title as governor of Shiga Prefecture but provided an incorrect job history. The interactions serve as a reminder that chatbots may be providing a mixture of false information to users.

Works great on Fedora 27.

dir alias is easier to type btw.

@marcinozga said in Big Virtual Fileservers:

Have you looked into compression, deduplication and file minification before even considering splitting servers? Especially that last one, it's overlooked most of the time, but can give you some impressive storage gains. I did a project once, with minification alone we went down from 1.5TB to little over 200GB. Of course, it all depends what kind of files you're dealing with, but if you have typical users, I wouldn't be surprised to see 80MB powerpoint presentations. These can easily minify to 3-4MB.

I am already taking advantage of space-saving technologies where it makes sense.

I figured so, I didn't see a link to it on the site.

@francesco-provino said in oVirt Testing:

Testing oVirt 4.2 stable. Does anyone know how to manually start a VM on the ovirt node (EG when the engine is down)? Seems like vdsm-client can do a lot of stuff with VMs, but not start it.

Nothing in the man page?
It’s weird that you can stop and resume but start.

It works, I tested it with the EICAR test, even though it wouldn't be a threat on Linux.

Paste the following line in an extension-less file, for example, just "test". Not "test.txt".

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

Then see if your AV kills it.

Strictly SYSCTL speaking, here's what I got so far:

kernel.randomize_va_space: sysctl.present: - value: 2 fs.protected_hardlinks: sysctl.present: - value: 1 fs.protected_symlinks: sysctl.present: - value: 1 net.ipv4.icmp_echo_ignore_broadcasts: sysctl.present: - value: 1 net.ipv4.icmp_ignore_bogus_error_responses: sysctl.present: - value: 1 net.ipv4.tcp_syncookies: sysctl.present: - value: 1 net.ipv4.conf.all.log_martians: sysctl.present: - value: 1 net.ipv4.conf.default.log_martians: sysctl.present: - value: 1 net.ipv4.conf.all.accept_source_route: sysctl.present: - value: 0 net.ipv4.conf.default.accept_source_route: sysctl.present: - value: 0 net.ipv4.conf.all.rp_filter: sysctl.present: - value: 1 net.ipv4.conf.default.rp_filter: sysctl.present: - value: 1 net.ipv4.conf.all.accept_redirects: sysctl.present: - value: 0 net.ipv4.conf.default.accept_redirects: sysctl.present: - value: 0 net.ipv4.conf.all.secure_redirects: sysctl.present: - value: 0 net.ipv4.conf.default.secure_redirects: sysctl.present: - value: 0 net.ipv4.ip_forward: sysctl.present: - value: 0 net.ipv4.conf.all.send_redirects: sysctl.present: - value: 0 net.ipv4.conf.default.send_redirects: sysctl.present: - value: 0 net.ipv4.conf.all.forwarding: sysctl.present: - value: 0 net.ipv6.conf.all.forwarding: sysctl.present: - value: 0 net.ipv4.conf.all.mc_forwarding: sysctl.present: - value: 0 net.ipv6.conf.all.mc_forwarding: sysctl.present: - value: 0 net.ipv6.conf.all.accept_source_route: sysctl.present: - value: 0 net.ipv6.conf.default.accept_source_route: sysctl.present: - value: 0 net.ipv6.conf.all.accept_redirects: sysctl.present: - value: 0 net.ipv6.conf.default.accept_redirects: sysctl.present: - value: 0

I know some of it may be redundant, as in they already may be set as such by default. My thinking is that should they become changed somehow, this will set it straight again.

Is this a bad way of thinking or simply not needed?

Are there any others a good idea or generally a best practice to include?

Pinging @KOOLER and @Stuka @StarWind_Software

@jaredbusch said in SaltStack State: DNF-Automatic:

@tim_g said in SaltStack State: DNF-Automatic:

@jaredbusch said in SaltStack State: DNF-Automatic:

This would be the default one that comes down with the package. So that means there is nothing to grab.

Correct. I installed it on something first to get the config files, so I know what I'm working with.

That is more work and does nothing to help you when the file is updated upstream.

I did find how to easily modify files with SaltStack: https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.file.html#salt.modules.file.replace

But I think I would still rather host my own config file(s) at least for now. If they change in future updates, I'll just modify the config files on GitLab.

Anyways, link above for future reference when I come back to this later.

@tim_g said in VPS Open Ports - Thoughts?:

@stacksofplates said in VPS Open Ports - Thoughts?:

@tim_g said in VPS Open Ports - Thoughts?:

I think if SodiumSuite plays their cards right, it has the potential to completely replace Microsoft's system management (like Group Policy and SCCM and others in the suite) as well as the major alternatives, such as Dell's KACE, etc.

Quest bought KACE and it's gone downhill a bit.

Yeah I know, old habit. I even see the new Quest branding every day when I log in to it.

I don't know how I feel about the new interface. The K logo is weird.

I just noticed I had a typo in the salt-highstate part above. Fixed now. I left out the '*', which specifies all minions.

Also, a \ is needed before the % symbol to escape it.

@bigbear said in TurnkeyInternet VPS / Dedicated Server Deal worth it?:

http://www.webhostingtalk.com/showthread.php?t=1345438

Old review but...

I can't comment on that yet. I've only had it for a day. But I have unlimited bandwidth and it's not a reseller account. So far no down time that I noticed.

I've contacted support a few times already, though, with getting my ISO uploaded. Support seemed very helpful and responsive in my experience. This was after I paid.