Linux

Minor Blog Extensions First I added asciinema support to better show some console stuff. ASCIInema allows to record a terminal session in text and replay it as text. So no wasteful GIF or blurry MP4 for just text. You can see the first use of it in this blog in my FZF SSH Parser Article. Then inspired by Naty I also implemented humans.txt [?] and human.json [?] standards to this blog. Im not so big in all the Indieweb standards. But specially in times of AI slob everywhere, it cant hurt to have more humans on the web. ...

What it does… As said, fzf is my go to for great shell search and tui’s. Basically add a fuzzy search to everyting you can imagine. But this is not what I want to write about, today I want to show another usecase of fzf in combination with my fish shell. I start using fzf as a SSH config tui. It allows me to type ssh + space and the basically type any hostname or alias from within my .ssh/config to autocomplete and search using up down. See the recording: ...

Not an lenghy Article, just posting my findings for whoever may need it. The Hardware: i-tec USB-C 4K Metall Nano Docking Station Named by the bulky name i-tec USB-C 4K Metall Nano Docking Station 1x HDMI 1x GLAN 3x USB 3.0 1x SD/MicroSD 1x Audio Power Delivery 100W I found mine on Amazon. Port-wise, it has what I need. Mostly I use this kind of light dock if I work remotely or at events to attach one screen, network, mouse and have it charging my laptop. So I can quickly grab it when I need to go somewhere. ...

signal on Linux offer the way to store your encryption key in your system walled (encrypted) or local as plain-text unencrypted. Actually if you use a full disk encryption a clean text key isn’t a huge issue. But nevertheless to give it a bit more secure feeling I wanted to use KWalletD to store the signal key encrypted. Signal now even prompt you with a question if you want to do so or not. So easy I thought, quickly enabled it; But to verify I took a look at the logfile and found; It is actually trying to use kwallt6 but can’t. ...

Currently I use as my productivity working device a Tuxedo Laptop, the Infinity book pro 14". It is about 1.5yrs old and started acting up in december when it comes to battery. The Battery sometimes was overnight discharging to 0% even the laptop was powered off. Also it showed a reduced maximal capacity. In Linux you can check your battery stats quickly with upower -b the old battery looked like this: ...

Recently we had the Digital Independence Day what better Reason could one have to rethink how I use published photos. I actually wanted to integrate them better into my blog already since long. But Digital Independence Day was a good kick in the ass to finally quit Instagram for real. I’m not here to start a big moral talk… let’s focus on the Tech Aspects of what I did. As you may noted we now have the new Menu entry /photos which offers a small Gallery. Instead of integrating another workflow which is doomed to fail because of my lazyness, I need something easy usable from my Android phone. So I had my pixelfed account laying there, mostly collecting dust. Why not start using it again and integrate it into the blog. This post is about how I wired this up. ...

My Setup and the Problem I use Linux on my main work laptop, where remote access is effortless: I can SSH with Kitty’s remote edit kitten or mount remotes via KDE Dolphin. But at home, my desktop runs Windows 11 for gaming (thanks to stupid anti-cheat restrictions). I normally just game on the desktop; but sometimes I have to do some work from the Desktop, already at the desk and need to quickly edit stuff remote. Most time I just used scp. But remembering in the past as win user, I used WinSCP for remote file editing. Found out quicky it natively refuses to connect using my SSH key from the already running agent in 1password. ...

Got one Ubiquiti Unifi 10G Ethernet Adapter, model UACC-Adapter-RJ45-USBC-10GE. In the past, I’ve mostly got StarTech adapters for 10G Copper, but right now they’re either sold out or going for double the price. The Unifi 10G is 150€ plus tax, it fits what I need. First off, it plugged right in on my Linux laptop running kernel 6.14 and a MacBook Air. No fuss with drivers or anything. Here’s what the kernel spit out on Linux: ...

Paperless-ngx “PostgreSQL 14 or later is required” Error After updating Paperless-ngx via Docker compose, I suddenly found that the service refused to start. In your paperless-ngx compose logs you will find something like this: webserver-1 | Connected to Redis broker. webserver-1 | [init-redis-wait] Redis ready webserver-1 | Connected to PostgreSQL webserver-1 | [init-db-wait] Database is ready webserver-1 | [init-migrations] Apply database migrations... webserver-1 | Traceback (most recent call last): webserver-1 | File "/usr/src/paperless/src/manage.py", line 10, in <module> webserver-1 | execute_from_command_line(sys.argv) webserver-1 | File "/usr/local/lib/python3.12/site-packages/django/core/management/init.py", line 442, in execute_from_command_line webserver-1 | utility.execute() webserver-1 | File "/usr/local/lib/python3.12/site-packages/django/core/management/init.py", line 436, in execute webserver-1 | self.fetch_command(subcommand).run_from_argv(self.argv) webserver-1 | File "/usr/local/lib/python3.12/site-packages/django/core/management/base.py", line 416, in run_from_argv [...] webserver-1 | File "/usr/local/lib/python3.12/site-packages/django/db/backends/base/base.py", line 201, in check_database_version_supported webserver-1 | raise NotSupportedError( webserver-1 | django.db.utils.NotSupportedError: PostgreSQL 14 or later is required (found 13.22). webserver-1 | s6-rc: warning: unable to start service init-migrations: command exited 1 webserver-1 | /run/s6/basedir/scripts/rc.init: warning: s6-rc failed to properly bring all the services up! Check your logs (in /run/uncaught-logs/current if you have in-container logging) for more information. webserver-1 | /run/s6/basedir/scripts/rc.init: fatal: stopping the container. The Important message from all this error log comes close to the end before the container is stopped again, it says: ...

Today a small blog post about a real headache I had with Fedora and public WiFi in hotels or at events and such places. If you work remote like me you hop from wifi to wifi all the time. Hotels, airports, venues… connect to the wifi and normally you get the portal page to accept the terms or login. Only after that internet works. Except on Fedora this portal page never showed up. A simple workaround that helps most of the time is open a browser and go to something like http://neverssl.com. Then it often redirects to the portal. ...

ColorMyShell.tcpip.wtf We all have our little digital sanctuaries, places where we spend countless hours typing away, solving problems, and creating things. For many of us, that’s the terminal. But let’s be real – staring at the same old prompt day in and day out can get a bit… monotonous. Specially all those minimal small debian boxes or containers I use for this and that. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. Intel NUCs from two generations ago have a nice feature: a multicolor LED Ring and Power LED that you can control by software. I use an i5 9th gen NUC at home as my “Homeserver, IoT, whatever” device. I created a tiny script running as cron every minute to set the LED Color depending on the internet connection “quality”. I’m not really pulling data from the modem; for my purposes, it’s not necessary. I just want to have a quick solution to let others in my family at home see if there are any issues or not. You know the situation: Wife cannot open a certain internet page or something is loading very slowly. “What’s wrong with our internet?” Most of the time the answer is “Nothing - it’s not on our end,” but now I have a quick way to visualize if anything may be wrong. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. Just a tiny post about my home Internet Connection. I use a Vodafone, former Unitymedia, CableMax 1000 home connection. That’s a Gbit Coax line with 50 Mbit upstream. Problem at the beginning of the new 1G Tarif there where several Problems regarding IPv4 / IPv6 – either you got a IPv4 only connection or something like DS-Lite or a SLAAC IPv6. I quickly figured out there is a way to change your contract and let them enable “Dual Stack”. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. I cannot point out often enough how critical it is to keep your internet-based Servers updated. I use and manage some Servers, about 20 currently. But I hate to check them on a weekly base for Security Updates. I still remember days where Sysadmins brag with uptimes – not a smart thing to do. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. If you run Letsencrypt SSL Certs on your servers and use certbot you probably know what I’m talking about. In the past I had it several times that the cert itself was renewed but the webserver, for whatever readon, didn’t reload. Causing the website to report a expired certificate, even it’s not. As soon as I did a manual NGINX Reload it workend. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. Whoever works with Linux servers on the web knows it, logs filled with attempted accesses, bruteforcers or simply spambots. Fortunately, there are some sites that have specialized in collecting these “bad IPs” via honeypots or logging reports. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. This is an updated posting from my older German Article. **I don’t want to give a rating of the Subsystem for Linux; for some, it is very useful; others may not be so happy about it, but let’s get straight to the point. The most pain I had was having my private key in the Subsystem and needing to re-authenticate every time by entering the key. I’m used to using the Keepass integrated (plugin) Agent, and that’s why my key has a password that’s too long to type. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. Translation This original post is written in german 🇩🇪, a rough Translation: I heard about Munich’s LiMux switch to Linux and possible return to Microsoft. Politicians blame Linux for typical IT issues, but many problems are internal, regardless of OS. My Linux attempts recur; past Ubuntu (around 8) had driver issues. Now I’m trying Linux Mint, staying in the Debian world. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. Translation This original post is written in german 🇩🇪, a rough Translation: Non-gaming note for my blog: Unitymedia surfstick on Raspberry Pi via wvdial/ppp0. E220 works directly (lsusb shows Huawei 12d1:1003); E170 needs usb_modeswitch. wvdial.conf with APN internet.partner. Disable SIM PIN once with “sudo wvdial pin”. Network interfaces configured for ppp0 via wvdial; auto commented out. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. Translation This original post is written in german 🇩🇪, a rough Translation: I discuss hashes due to recent data leaks (Sony, Ashampoo). Passwords should be stored as hashes, not plaintext. Hashing isn’t encryption; it can’t be reversed. Example with digit sum shows collisions. Common algorithms: MD5, SHA; others include Whirlpool, Tiger, RipeMD, Haval, Adler32. Example: 12345 -> md5, SHA-1, Haval. ...