https://mangolassi.it/topic/12520/unix-sudo

How has your project to learn Linux been going?

@JaredBusch said in Create isolated (wired) LAN for Guest Room?:

@scottalanmiller said in Create isolated (wired) LAN for Guest Room?:

@jeffepops said in Create isolated (wired) LAN for Guest Room?:

@JaredBusch Thanks. I don't want to assume, so do you think an intelligent person can configure the Ubiquiti using its on line tutorial/manual? AS I mentioned earlier, I could pay someone, but would like the challenge of figuring it out.

It's not too bad. It's not the easiest router to set up ever, but it's not overly complex either.

My number one gripe with this equipment is that they have never change their base firmware to have one of the ethernet ports get a DHCP address. If they did this thing would be trivial to set up.

@JaredBusch said in Create isolated (wired) LAN for Guest Room?:

@scottalanmiller said in Create isolated (wired) LAN for Guest Room?:

@jeffepops said in Create isolated (wired) LAN for Guest Room?:

@JaredBusch Thanks. I don't want to assume, so do you think an intelligent person can configure the Ubiquiti using its on line tutorial/manual? AS I mentioned earlier, I could pay someone, but would like the challenge of figuring it out.

It's not too bad. It's not the easiest router to set up ever, but it's not overly complex either.

My number one gripe with this equipment is that they have never change their base firmware to have one of the ethernet ports get a DHCP address. If they did this thing would be trivial to set up.

Right, I can't recall if the USG does or not?

It does "act" an awful lot like Ubuntu. But it's a very existential naming conundrum.

The business here uses Zones. I prefer to get my licensing from whomever is least expensive and most helpful.
I care not for who sells me the licenses as long as they're legit.

f83374ca4f770f6e80496cf65c44f9a6.jpg

@scottalanmiller said in UNIX: Switching Users with su:

@Grey said in UNIX: Switching Users with su:

Pop quiz: why do you need the dash with su?

That was in the original article.

And I quoted you without quoting you..... see what I did there, I switched a few words 😛

Did you figure this out? I know it's a pain, but if you're stuck you can convert it with qemu to raw.

qemu-img convert -f vhdx -O raw

@JaredBusch said in Unifi AP refusing to upgrade:

@Dashrender said in Unifi AP refusing to upgrade:

@brianlittlejohn said in Unifi AP refusing to upgrade:

Did yall notice that the new update has the ability to export and import individual sites instead of the entire config?

didn't JB post about that a week or so ago?

Nope.

I must have just read it in a released then.

I'm just popping in here. Looks ultra simple and just about all figured out. Glad I could help. 😛

Going to update this for Amazon Lightsail, and make any needed changes.

I'll take it

Yes, I have. It was talked about on Security Now a few years ago.

It allows TNO (Trust No One) on cloud storage . You control the keys for encryption. of course, if you don't have the keys, the data is useless.

The Register uses the term "enterprise Linux" to qualify the RHEL/Suse/Ubuntu group.

Maybe calling them USR would work better.

http://www.theregister.co.uk/2017/02/09/microsoft_eye_from_the_linux_guy/

@scottalanmiller said in When We Start to Eat the Teachers: Millerian Societal Collapse:

@Dashrender said in When We Start to Eat the Teachers: Millerian Societal Collapse:

100% premium coverage on a PPO plan from BCBS, 3-4 weeks time off (assigned time)

Assigned? Do you mean, spring break kind of things?

Her college is quarter based. There are three quarters during the 'normal' school year, and a fourth in the summer. There is a 5-10 day break between each quarter, plus winter break (xmas/new years).

@jrc said in Virtualizing Smoothwall (edge firewall and content filtering):

Yeah, this will be a dedicated piece of hardware with the hypervisor on it and just a single VM, the Smoothwall install. Nothing else, and it will not be tied into my existing pool, it will be, for the most part stand alone.

As to the point of no access if things go down, I don't see that as a major issue, because if things go down like that, then I will need to be on site, in which case I would have physical access to the server and will then be able to fix it from there if needed.

This device is how my network is connected to the internet, so if it goes down I have zero remote access, with or without it being virtualized.

If you have an iLo or like option on the server, you could make that available either directly to the internet, or through an ER-X that you VPN into. This would require it's own IP just for that.

That would be good on a case by case basis, but I assume he wants this for all services. If he had like fifty pay walled sites that he never wanted coming up in searches, it would be cumbersome to have to add that in for any given search. You could store that on a notepad somewhere to copypasta but would still be a big pain.

@Dashrender said in Building new Wordpress on CentOS 7:

@JaredBusch I don't see any point in securing the server not be part of the entire process. As I continue on this thread, I will be including it. Of course these things will only apply to this specific situation, but it will be an end to end of my journey.

Because they are rather different things.

How do you install Apache? - "yum -y install httpd"

How do you secure Apache? - Well, define your needs and let's talk about the degree to which you feel it needs to be locked down, what threats are pointed at you, what the value of the data is, etc.

One is concrete, one is not at all. They don't go together as a single thing.