Sysadmin

Minor Blog Extensions First I added asciinema support to better show some console stuff. ASCIInema allows to record a terminal session in text and replay it as text. So no wasteful GIF or blurry MP4 for just text. You can see the first use of it in this blog in my FZF SSH Parser Article. Then inspired by Naty I also implemented humans.txt [?] and human.json [?] standards to this blog. Im not so big in all the Indieweb standards. But specially in times of AI slob everywhere, it cant hurt to have more humans on the web. ...

This short Article is in addition to my Pockethernet V2 Review I posted last year December. At the time of writing the original Article there was a announced BER Loop Adapter and ID Plugs but not available at that time. Now some time later this changed and I clicked them in the official Pockethernet store. Brief preface; I am neither sponsored by Pockethernet nor have I received anything for free; everything here was purchased by me through normal means and is in regular use by myself. ...

signal on Linux offer the way to store your encryption key in your system walled (encrypted) or local as plain-text unencrypted. Actually if you use a full disk encryption a clean text key isn’t a huge issue. But nevertheless to give it a bit more secure feeling I wanted to use KWalletD to store the signal key encrypted. Signal now even prompt you with a question if you want to do so or not. So easy I thought, quickly enabled it; But to verify I took a look at the logfile and found; It is actually trying to use kwallt6 but can’t. ...

Pockethernet 2: Hands-On Test of the Revived Network Tester Some years ago, at a event, I could try the original Pockethernet V1. At this time I owned a bigger Tester with display, mostly not with me because to heavy for every day carry. The Pocketethernet looked like a interesting0 small tester for cables and simple network checks, but after playing a bit with it I didn’t like it much. The App was mediocre, I had issues with the connection but now, fast forward: ...

Got one Ubiquiti Unifi 10G Ethernet Adapter, model UACC-Adapter-RJ45-USBC-10GE. In the past, I’ve mostly got StarTech adapters for 10G Copper, but right now they’re either sold out or going for double the price. The Unifi 10G is 150€ plus tax, it fits what I need. First off, it plugged right in on my Linux laptop running kernel 6.14 and a MacBook Air. No fuss with drivers or anything. Here’s what the kernel spit out on Linux: ...

MacOS Better ip info in terminal One particular painful point, coming from linux, was the ip command in the Terminal. The Default MacOS ifconfig command is very - well let’s say “old fashioned” :) Coming from Linux you mostly use ip for everyting ip a to display your interfaces ip r your routes, and so on. Luckily you can install the iproute2 Package on MacOS which give you the ip command. ...

Paperless-ngx “PostgreSQL 14 or later is required” Error After updating Paperless-ngx via Docker compose, I suddenly found that the service refused to start. In your paperless-ngx compose logs you will find something like this: webserver-1 | Connected to Redis broker. webserver-1 | [init-redis-wait] Redis ready webserver-1 | Connected to PostgreSQL webserver-1 | [init-db-wait] Database is ready webserver-1 | [init-migrations] Apply database migrations... webserver-1 | Traceback (most recent call last): webserver-1 | File "/usr/src/paperless/src/manage.py", line 10, in <module> webserver-1 | execute_from_command_line(sys.argv) webserver-1 | File "/usr/local/lib/python3.12/site-packages/django/core/management/init.py", line 442, in execute_from_command_line webserver-1 | utility.execute() webserver-1 | File "/usr/local/lib/python3.12/site-packages/django/core/management/init.py", line 436, in execute webserver-1 | self.fetch_command(subcommand).run_from_argv(self.argv) webserver-1 | File "/usr/local/lib/python3.12/site-packages/django/core/management/base.py", line 416, in run_from_argv [...] webserver-1 | File "/usr/local/lib/python3.12/site-packages/django/db/backends/base/base.py", line 201, in check_database_version_supported webserver-1 | raise NotSupportedError( webserver-1 | django.db.utils.NotSupportedError: PostgreSQL 14 or later is required (found 13.22). webserver-1 | s6-rc: warning: unable to start service init-migrations: command exited 1 webserver-1 | /run/s6/basedir/scripts/rc.init: warning: s6-rc failed to properly bring all the services up! Check your logs (in /run/uncaught-logs/current if you have in-container logging) for more information. webserver-1 | /run/s6/basedir/scripts/rc.init: fatal: stopping the container. The Important message from all this error log comes close to the end before the container is stopped again, it says: ...

Ok, one of our pfSense in Production just did it again, greet me with a friendly “Unable to check for updates”. My first suspect was DNS again, but after checking all resolvers can resolve the firmware.netgate.com domain without any issue. Next Step to try was in cli if the Package manager itself became a zombie or stuck somewhere. What is interesting is that it gave a response that was not expected. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. If you look at the Windows command prompt from a network perspective, Linux has better “weapons” to offer. Often it’s the little things that frustrate me with Windows from time to time. For example, the DHCP client. In Linux it is sufficient to enter dhcpc -v to get a detailed logged output of what happened in the background with the DHCP. In Windows you can only rely on the presented Information, define some Log Actions or just wisely nod your head. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. The Background Yesterday Netgate made a big leap into a new version branching for pfSense with pfSense plus. Instead of having 2.45, 2.5 versioning, there is now a partly proprietary pfSense+ build using Month/Year Versions for all Netgate-owned devices and optional bought subscriptions. The new Versions are YY.MM.VV, so 21.02 is the first one. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. I cannot point out often enough how critical it is to keep your internet-based Servers updated. I use and manage some Servers, about 20 currently. But I hate to check them on a weekly base for Security Updates. I still remember days where Sysadmins brag with uptimes – not a smart thing to do. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. Recently I moved from my old PI3B to an Intel NUC i3 as my “Home Server”. It has enough power to run all my local services and is still not wasteful in terms of power consumption and space requirement like a “real” Server, and it is fanless. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. TL;DR HoneySIP is a SIP Honeypot Blacklist for use in Firewalls to Block SIP Crawlers and Bruteforcer. All IPs coming from own SIP Validating Honeypots at several servers. If you run a Server accessible over the Internet you will quickly find a lot of “interested” Eyes on it, especially if it is a VoIP System using SIP on default udp/5060. In an Ideal World this system would never be exposed to the Internet – but if you have a PBX which need to be accessible by a lot of remote workers and know how critical SIP/RTP can be you want to avoid forcing SIP over VPN. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. Cause I’m not „blogging“ regularly on this page I just want to post more things in a “Today I learned” fashion. Specially if you work on/at Events and IT there are a lot of things which leave you puzzled questioning thing and forcing you to find solutions “RIGHT NOW”. While others in normal IT Ops have time to test things, Event-IT things are often MacGyver jobs. Working on a remote unknown site with other people’s IT Infrastructure and take what you get, at the end nobody cares – it need to work. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. Whoever works with Linux servers on the web knows it, logs filled with attempted accesses, bruteforcers or simply spambots. Fortunately, there are some sites that have specialized in collecting these “bad IPs” via honeypots or logging reports. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. Just as a note to myself or anybody who is interested in it, feel free to use. Often you come across hrefs linking to ssh://user@whatever:22. By default, Windows does not know what to do with this protocol. If you go to select the standard protocol handler for it, you only get redirected to the MS Store, offering you some expensive terminal apps you actually do not want to use. I, for myself, have been using the Pro version of MobaXterm for many years. MobaXterm has shell integration, but I never got it running right or being selectable as a protocol handler, unfortunately. But this is why I made this little method to actually make it working. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. Just a tiny write up with some Link recommendations I want to put here. 1. privacytools.io This one is a great page containing a lot of useful Information and Links how to improve your everyday privacy on the way through the web. Not only for beginners also some good useful Information and recommendation for experts. The Page is setup by some reddit users in privacy chan and is updated frequently. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. This is an updated posting from my older German Article. **I don’t want to give a rating of the Subsystem for Linux; for some, it is very useful; others may not be so happy about it, but let’s get straight to the point. The most pain I had was having my private key in the Subsystem and needing to re-authenticate every time by entering the key. I’m used to using the Keepass integrated (plugin) Agent, and that’s why my key has a password that’s too long to type. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. Translation This original post is written in german 🇩🇪, a rough Translation: I heard about Munich’s LiMux switch to Linux and possible return to Microsoft. Politicians blame Linux for typical IT issues, but many problems are internal, regardless of OS. My Linux attempts recur; past Ubuntu (around 8) had driver issues. Now I’m trying Linux Mint, staying in the Debian world. ...

Hey, just a heads-up that this content is based on an automatically imported version from our old CMS. If the formatting isn’t perfect, I’m sorry about that. Translation This original post is written in german 🇩🇪, a rough Translation: After updating to NetBeans 7 final, I get “JVM creation failed” at startup. Cause: on 64-bit systems with >4GB RAM, NetBeans memory detection fails. Fix: edit netbeans.conf in /etc/, in netbeans_default_options add: -J-Xmx512m inside quotes. If it still fails, lower the value. ...