@JaredBusch said in supporting an office of computers with full drive encryption:

@scottalanmiller said in supporting an office of computers with full drive encryption:

@Mike-Davis said in supporting an office of computers with full drive encryption:

@wrx7m said in supporting an office of computers with full drive encryption:

I saw this marked as solved but can't seem to find the post that mentions the solution/what the OP ended up doing.

I was wondering how much time it would add to my job if I took on a client that was using full disk encryption. After a few posts it was clear that it would be additional overhead.

Yeah, definitely some for sure.

But potentially tiny amounts if you tell them that they must be present for any reboots you need to make.

Possibly. They might be okay with that.

@FATeknollogee The other thing to remember is that choosing the RHVH at installation likely changes the default layouts from what we normally see in a generic minimal install.

@Mike-Davis said in ubiquiti indoor wifi receiver, any?:

If it was just printers I wouldn't think twice about just using some APs in bridged mode. For PCs I would make sure their (the users) expectations are set correctly and make sure you don't have a some database application that is real sensitive to latency running on the link. As cheap as it is to try, I would try it for one set up and then do the rest if it meets their expectations.

Depending on the units, you can get really good latency on wireless links. but you need good ones. Some people argue that it beats wired. it doesn't, but it's good enough that people start to imagine that it does.

@matteo-nunziati said in Benefits of using open source GPL software:

Back to main OP questions, GPL/BSD and so are useful because:

you get more support form community. something quite difficult with closed source . In the latter case it is mostly empirical evidence, with opensource you can look at the code. Alao you can still buy enterprise support with opensource.

Basically open source maintains every benefit of closed source PLUS lots of its own benefits.

@scottalanmiller said in Xfinity data limits:

@Tim_G said in Xfinity data limits:

What about an Amazon Snowball?

Nice, how have I not seen this yet?

I wonder if that came from their idea of a semi-truck version of the same idea?

This is the laptop I am looking at getting, but I'm going very portable, so a small screen.

https://www.amazon.com/12-5-Inch-Ultraportable-i5-7200U-KabyLake-Fingerprint/dp/B01LHUA1NM

Hyper-V 2102 R2 and 2016 for most everything. I have a host with ESXi and XenServer but they are turned off.

@dafyre said in Why Do We Get IP Local Hostnames for Salt Minion Keys:

@scottalanmiller said in Why Do We Get IP Local Hostnames for Salt Minion Keys:

Okay, finally got around to tracking this down. In your minion file, on Linux systems this would be /etc/salt/minion, you need to uncomment the id: field and put in the name that you want to use and restart your minion process. This will update the name as seen in the Salt Master.

Is this separate from the /etc/salt/minion_id file?

It's just in the minion file.

@Dashrender said in Windows Server - removing a drive:

equating my situation to a phsyical server would be like having a system that has no RAID, 3 drives and you're removing the middle drive.

Well that much I can tell you, it will act the same as pulling out an end drive 🙂

@wirestyle22 said in Support - when can a vendor/support provider give up?:

@scottalanmiller Does this ultimately end up being a matter of blame then? If you can't fix a problem that you have and your only option is to come up with a new software solution, wouldn't they ask why we are at that point? I can kind of see why everything in support is just passing the buck, although I just refuse to do that.

In some cases it is about blame. In some about SLA. It's really about scope. Support of this nature is a business and one with scope limits. If you refuse to do that, you screw your employer by taking on responsibilities that it is not paid for.

@Doyler3000 said in OS/Filesystem for file server ~ 8Tb:

I've not used LVM snapshotting before so it'll be good to experiment with it and understand it's advantages and limitations. It may not keep the end users (almost all developers) happy so I might need to revisit.

If ZFS is a requirement do you think ZFS on Ubuntu rather than ZFS on FreeBSD say?
I'd need to get a lot more familiar with FreeBSD which is the disadvantage but maybe it's worthwhile?

ZFS on Ubuntu is fine. Especially for a VM. No need for FreeBSD in this case.

@EddieJennings said in Managing Hyper-V VMs:

Ah, I didn't think of the barrier restricting me to 2012 R2.

Yeah, the misinstallation is anything but trivial. It sounds trivial, and in some ways it is for the first two years, but it gets worse and worse as time goes on. If it was only the bloat, then whatever, not great but you wouldn't be anxious to work around it. But it is licensing and risk.

Now that said, any effort that you can use to move to 2016 today, you can still do tomorrow. So you just need to think about the right time to make the change.

@Mike-Davis Possibly this https://community.spiceworks.com/how_to/133316-how-to-control-windows-10-and-server-2016-updates-with-wsus

I switched to Korora because I wanted Fedora and the Cinnamon desktop.

I like the Fedora/RHEL ecosystem over Debian. I looked at Mint because it uses Cinnamon, but it is so old.

Unlike @scottalanmiller, I will not migrate all the existing CentOS workloads I have out there because the management is manual. If I had a state system setup for all the various client systems it would be different, but I do not.

@NerdyDad said in Fedora time limits for kids:

@scottalanmiller said in Fedora time limits for kids:

Fedora or Korora? Korora is probably a little nicer for a non-power user.

Either or. I've not set on a certain distro yet, as long as it's a fedora derived.

Korora has a lot of spit and shine.

This won't be an overnight fix. My first step though is complete. The Synology is now in RAID 10 with 1 hot spare disk. One thing to note; the disks in this Synology are WD reds :(. So even though the storage connects to the Hyper-V host via iSCSI, the VHDX stored on it, which contains the data for our file server is at least not living on a RAID 5 anymore.

Next will be dealing with the local storage situation on the Hyper-V host (the two-drive RAID 1 and the three-drive RAID 5). The only "production" VM storage left on the RAID 5 is our Spiceworks VM, which I'll move to the RAID 1 storage. The other VMs that have their VHDs on the RAID 5 are non-production / testing VMs, so if they're lost, it's not a big deal to just rebuild them.

Stuff on Wine rarely runs as well, it's the native stuff that really works.

@Tim_G said in Microsoft is expected to release another 2003/XP patch:

@IRJ said in Microsoft is expected to release another 2003/XP patch:

A nasty vulnerability has been recently identified in 2003/XP. The exploit does not require any credentials and should be considered highly critical. Credible security sources are indicating that Microsoft is expected to release the patch sometime today.

https://blog.fortinet.com/2017/05/11/deep-analysis-of-esteemaudit

I wonder if any other software vendors are releasing updates for versions that are a decade and a half old?

IBM does.

@gjacobse said in ReadyNAS ReadyCLOUD usage:

@JaredBusch said in ReadyNAS ReadyCLOUD usage:

Why would you expect a cloud service to work without authentication? Internal only or not.

Why would I expect it to work with out 'auth'

It worked out of the box, I enabled it on the ReadyNAS, installed the iOS app, and connected.

After the update(s) - now it forces you to sign into NETGEAR - ....

Why would you expect a cloud service to work without auth.

I am not arguing that it did work.