@dashrender said in The Inappropriate Bundling of Services SAMIT Video:

@scottalanmiller said in The Inappropriate Bundling of Services SAMIT Video:

"what they do" for the other it is "what they have to do and hope you do as little as possible." Keeping lots of cooks in their own

Let's use GoDaddy as an example, short of them not supporting a record type, what's the issue with GoDaddy DNS and registrar in one account - specifically?

That's a good one to look at specifically.

GoDaddy DNS is cumbersome to use and wastes time. This is a vendor issue, not a bundling one. GoDaddy DNS has a less than stellar uptime track record. This isn't a service they are known for, they don't really care as serious customers don't use it for this. Under normal operations, non-IT staff should never have access to DNS records and IT staff should never have access to corporate identity records. Using GoDaddy for both removes the possibility of keeping those highly critical roles separate and puts the company in danger of IT running off with the company identity and business people of accidentally taking services offline. As above, there is no safe means of using contractor support for simple IT tasks. GoDaddy doesn't offer key DNS related features like caching. You are either stuck using a single registrar (often not even possible as different registrars offer different domains) or stuck managing DNS is multiple locations. It lowers flexibility. An outage from your registrar can take out your DNS with your risk mitigation removed as part of the outage. Otherwise a DNS outage can be protected against from the registrar and a registrar outage has no production impact. This is the biggest issue, it creates a whole form of risk that need not exist.

@jrc said in Help with some Cisco Questions:

But could it handle the traffic from over 3000 devices from 5 different sites?

Most likely. You'll have to see what your current switches are capable of.

@jaredbusch said in Disk2VHD/SQLServer:

@dashrender said in Disk2VHD/SQLServer:

It seems weird to me that the driver would have anything to do with it, but I do agree that the Network Profile is like different - i.e. The server thinks it's on a public network now instead of a domain or private network, so the firewall settings changed to match the new network profile.

Why would this be weird? Every time you change the network card you get new adapters. That is how windows has always worked.

What's weird is (was) that simply a new NIC would cause this issue. That's all I was saying. If the new NIC came up on the Domain Network Profile, you would assume all would stay the same. It's not weird that a new NIC would come up on a different Network Profile, i.e. prehaps it didn't detect the network link correctly - I've seen this many times.

thank you all.

@jrc said in Observium:

@hobbit666 said in Observium:

Looks very nice. Does Zabbix offer monitoring of servers to that level?

Huh? This thread is about Observium...

He was asking as a comparison.

If you have a mac you can use apple device configurator wmby which devoces can be pre cofigured and push apps. Catch is you need to use usb cable and configure phones one by one

@black3dynamite said in Remote Administration of FreePBX:

@scottalanmiller said in Remote Administration of FreePBX:

Also gives you (if you use GIT like we do) a record of when the port was opened, why and when it was closed again.

How does that work?

You commit your change to your local file system on your workstation. Then you commit it to the GIT repo. When you do this, GIT stores your change as well as the previous state of the system and you add a comment when you commit. This gives you a chance to say "Opening port to work on PBX" or whatever. Then when you are all done, change the firewall back, commit it, comment again saying you are done and closing it and it closes itself.

@emad-r One of the main points of using configuration management tools is that when using them properly you create idempotent operations (getting the same result no matter the number of times the operation is executed).

Instead of using cmd.run to execute the install, you could as others have mentioned the chocolatey module, or if you don't want to install chocolatey on your computers you could use the win_pkg which requries a repo created on the salt-master. Both of those modules are idempotent, so once you reach the desired state no matter how many times you run them they will not make any more changes.

https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.win_pkg.html
https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.chocolatey.html

The software available in the official windows git repo.
https://github.com/saltstack/salt-winrepo-ng

Creating a windows software repository:
On your salt master run

salt-run winrepo.update_git_repos

Sync the repo on your Windows minions

salt -G 'os:windows' pkg.refresh_db

Now you can use the pkg module in your states, or adhoc commands.

//Example adhoc command (remote execution) salt -G 'os:Windows' pkg.install salt-minion

That last command will always install the latest version of the salt-minion you could add the version parameter to specify the one you require.

@dustinb3403 Nope, no webex domain.
I can also get there, just cant sign in. Probably not the only one as ive now been on hold 20 minutes. Oh as i type this i can sign in again.

@bishnitro said in How to backup VMWare VMs?:

Just want to confirm, so up to now Vsphere has no means of backing up the VM's live? I read that i can actually copy it when its powered off. or i maybe wrong. If not then Veeam, Altaro and Unitrends are my options. I will use the cost effective and easy to deploy solution.

Not exactly. Your problem is a lack of knowledge on how virtualization works. Yes, you can power off a VM and then copy the file(s) that represent the hard disk. But that is not a backup. There is more to a VM than that. You can recover from that, but not simply. That type of functionality exists in all hypervisors simply because they are hypervisors.

@nerdydad said in How to backup VMWare VMs?:

Correct. vSphere has no capabilities of backing up natively. Have to use some type of 3rd party software to back up the VMs. Unlike what you can do natively in KVM or XenServer.

KVM and XenServer do not, natively, have anything to fully manage backups either last time I looked.

@emad-r

NVM, forgot about VMware Remote Console (VMRC), which is the optimized way of connection to VM GUI console, download it now.

I think vsphere C# client currently is VMRC in some minimal way. At least one is still actively developed. (You cant connect to an .iso file using webclient flex without uploading the whole .iso file to the host, however with the older C# client and newer method VMRC this can be still done).

That said, we lost the export to .ova or .ovf easier method compared to web ui export which gives you the .vmdk file as is.

@aaronstuder said in Nethserver:

Honestly, I wouldn't use Nethserver for this, I would go straightup CentOS 7

I beg to differ, NethServer IS CentOS 7 + a framework (web interface and automations) on top.
We have already scenarios like that, I would give it a try. If you need support please just ask.

@stuartjordan said in Nethserver:

This looks like a good project, defiantly keep us updated with how it all goes, I think Nethserver is brilliant, haven't tried it with that amount of users though.

Thanks man I appreciate it.

@emad-r said in Automatically Add New Vultr Fedora Minion to Salt Master:

@scottalanmiller said in Automatically Add New Vultr Fedora Minion to Salt Master:

If you are using Vultr as your VPS or Cloud Computing IaaS platform, then you have some simple tools to make automating a Salt Minion installation even easier. Vultr allows for "boot scripts" which run upon initial VM creation, along with their automatically installed system keys. Adding a tiny script can make all of the difference between needing to set up a new VM and having the entire process be totally automated.

Here is an example script that you can use. Notice that this is for Fedora and uses DNF. You will need a similar script for APT, YUM or other package management systems.

#!/bin/sh dnf -y install salt-minion echo "master: you.salt.master" >> /etc/salt/minion systemctl restart salt-minion systemctl enable salt-minion

That's all that it takes. Select the script when building your VM(s) and look for them to auto-populate in your Salt Master's key request list.

But what will be the ID/name of this Fedora instance in salt master ?

LOL, I got confused. Was thinking we were on Sodium, not salt.

It'll be your hostname.

Opened a ticket with Vultr. We'll see what they suggest.

@jaredbusch said in Custom IP tables rules for FreePBX:

@fuznutz04 said in Custom IP tables rules for FreePBX:

@jaredbusch Awesome. I'm going to try this.

I was just about to followup with this, saying that I was able to get it working, by not using any custom rules at all. Since the IP that I want to allow, is my local office, which is where I want to connect to the mySQL data from, it works already. Reason: I have my local office IP listed in the Trusted Network area of the Responsive firewall.

Of course, to get this to work, you have to change the listen address (bind address) in the etc/my.cnf file to listen on your public address, other than the loopback address.

I would probably change it to listen on any to have one thing less to remember just in case something changes, but that is just personal preference.

Oh yeah, I did that actually. Then I created a user with select access to the crdb database. The root user by default, on FreePBX installations, has no password. However, the root user can only log in from the local server, so I don't see a need to implement a password. Unless I'm missing something....

@travisdh1 said in ZOIPER unable to register over cellular:

@dustinb3403 said in ZOIPER unable to register over cellular:

It was apparently a setting under Connectivity > Run in Background

With it disabled I'm able to register the account without WiFi.

That is just so odd.

Yeah, it was the only setting that made any sense under the connectivity option. Might be a bug, but seems odd that with it disabled, you can register the account. With it enabled and WiFi disabled, you can't register the account.

Makes sense. I'll continue using the method of inbound routes.

Thank you very much to all. Camera view is better now, we clean and remove spider webs on the camera.

The solution might be downloading that file and manually move it into place with:

wget 'https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/config_file.repo?os=fedora&dist=26&name=centauri&source=script'
sudo mv config_file.repo /etc/yum.repos.d/gitlab.repo
sudo restorecon /etc/yum.repos.d/gitlab.repo
sudo dnf makecache
sudo dnf install gitlab