Honestly the best thing in my opinion is put k3os on it and run the stuff in a single node Kubernetes cluster. You'll get experience with k8s and the applications use very little resources when deployed this way.

I use it in pfsense router. It works against script kiddies, bots/botnets, at least partially. It's just another layer of security. And like it was mentioned before, it reduces log noise, with almost no effort.

@JaredBusch said in Redirecting feedback from Linux command:

@Pete-S Pretty much what I do not want is the status bar from these two commands.

fwconsole ma upgradeall

fwconsole chown

Well, use grep to match for the progress bar then.

First output stderr to a file and look in the file.

I don't know how the progress bar looks when it's output as a stream of characters.
I'm guessing every update is something like

3076094/3076094 [===========>-------------] 60%<CR>

In that case grep for every line that doesn't contain a [ followed by a number of =, > or - and finally a ].

So something like:

grep -v '\[[=->]+\\]'

Or maybe even better:

grep -v '\[[=->]{28}\\]'

Above assuming there are always 28 characters inside the brackets in the progress bar.

PS.
Funny thing but there seems to be a bug in the forum software.
I had to use an extra backslash to get the above regex look right \[[=->]+\\\] instead of \[[=->]+\\]
They look right in the preview though.

Tweaked a bit to provide an output file.

https://gitlab.com/EddieJennings/bash-general/-/blob/master/find_files_sort_by_filename.sh

@EddieJennings said in Script for Creating VMs from Template VM in KVM:

@travisdh1 said in Script for Creating VMs from Template VM in KVM:

@EddieJennings said in Script for Creating VMs from Template VM in KVM:

@Pete-S said in Script for Creating VMs from Template VM in KVM:

Not the exactly the same thing but you might want to look into how to create a VM from scratch.
Meaning a script that will set up a VM with vCPU, memory, storage, network etc and then boot it from iso and have it do an unattended install, create what users you want and install the packages you need.

That's one of the next things I'm looking into.

@EddieJennings Also remember about things like kickstart in RedHat based operating systems. In Fedora/CentOS/RHOS you can use a kickstart file to automatically select all the install time options for the OS. A short time later you've got a fresh server and all the time it took you to setup was running the creation script on your hypervisor.

One of the things I'll need to figure out going the Kickstart route is setting the hostname what I want it to be at the time of installation. Likely not difficult to do, I just have to figure it out. Or perhaps, I can just truly take the approach of just making a clean minimal install, and then later configure to whatever specific thing I'm wanting the VM to do for my lab / testing.

Inside the kickstart file you'll find something like this:

network --hostname=centos8-4.example.com

We use debian as our goto and then it's called a preseed file. The only real thing that can be tricky is to tell the installation what kickstart/preseed file you want to use. You can do it in different ways. If you don't want to rely on dhcp/tftp/pxe etc you can roll your own iso file. I think the kickstart file can also be mounted as a drive that the installation will detect when it starts.

I think the best approach is to make an automated installation with same basic settings and some of those will get changed later in the installation. For example you can use a fixed hostname that is later changed from ansible.

@Dashrender said in ScreenConnect Unable to Start on Fedora 33:

@scottalanmiller said in ScreenConnect Unable to Start on Fedora 33:

You can use an RDP client if you want for Windows users.

I've read that - I need to figure how how that works.

We have some customers using them, but we don't use them internally AFAIK.

@Dashrender

Gotta love Bob-

e0defcac-7cf0-4601-8e04-178a60ea74ed-image.png

@warren-stanley said in Asus ZenBook UX334FLC-AH79 with Linux:

@scottalanmiller How's the Aspire Linux support working out ?

So far, it's been great. Really liking it.

Checkout https://www.nomachine.com/
https://www.nomachine.com/terminal-server

https://github.com/UPC/ravada

@travisdh1 said in YouTube Months in Review: July and August 2020:

@EddieJennings You've been busy!

That I have. I didn't do a practice session for every objective because I ran out of time before the test. But taking the time to talk through most of them was a good way for me to determine if I needed to go back and review details.

@flaxking said in SSL/TLS client certificates questions:

Domain name doesn't matter, unless you're signing with a public CA. I'd think self-signed vs internal CA vs public CA would depend on what the authentication mechanism supports and how you have to manage the certificates. (i.e. if there are going to be a ton of them it might be easier for the authentication mechanism just to trust certificates signed by a certain internal CA rather than having to make each certificate trusted.

From what I've seen so far, I've come to the same conclusion.

@scottalanmiller said in Installing Laravel on Ubuntu 20.04:

@Pete-S said in Installing Laravel on Ubuntu 20.04:

@Pete-S said in Installing Laravel on Ubuntu 20.04:

@scottalanmiller said in Installing Laravel on Ubuntu 20.04:

@Pete-S said in Installing Laravel on Ubuntu 20.04:

OK, if you are not running apache or nginx, you should install the php-cli package instead.

So that seems to get installed anyway as a dependency on its own.

Yes, it does. But by using the php package and not php-cli, you probably got apache installed on your system as well - by dependencies.

You could find out by running: apt list --installed | grep apache

Or systemctl status apache2 to see if it's running.

Even if it was, Laravel uses Artisan's server.

I'm guessing they are invoking php's built-in webserver.

Regardless, the point is that if you swap php to php-cli in your install guide you don't get apache and other stuff you don't need.

Yeah this is bread and butter for config management tools. You'd either use a template for the config or the lineinfile module for Ansible.

Your template would have something like this:

PermitRootLogin {{ root_login_enabled }}

In it and then you can control which servers allow root login with the root_login_enabled variable.

@Obsolesce said in Searching for text in file:

@dafyre said in Searching for text in file:

@Pete-S said in Searching for text in file:

If you have a text file that looks like this:

start_folder='/folder1/abc.txt' iterations='123' passphrase='xyz' last_command='invoke' return_value='0'

How can you pick out just xyz when looking for "passphrase"?

I know grep will get me the line but what should I use if I want just a part of the line?
Can it be done in one command or do I have to pipe several together?

If you the text has a character that would be a good delimiter, you can pipe grep to cut... ie:

cat myfile.txt|grep "iterations"|cut -d '=' -f 2 Output: '123'

the -f # is which column you want.

There may be other ways to do it, but that's the first way I can think of.

You can specify a file with grep, no need to pipe in from cat.

This is true! I always seem to get it backwards when I do that, so i just cat $thefile | grep | blah ... Cuts down on frustration, ha ha.

@marcinozga said in Install Skyetel Postcards on CentOS 7:

@scottalanmiller said in Install Skyetel Postcards on CentOS 7:

@marcinozga said in Install Skyetel Postcards on CentOS 7:

@black3dynamite said in Install Skyetel Postcards on CentOS 7:

Still preferred fallocate instead of dd to create a swap file?

dd if=/dev/zero of=/swapfile count=4096 bs=1MiB && chmod 600 /swapfile && mkswap /swapfile && swapon /swapfile && echo "/swapfile swap swap defaults 0 0">>/etc/fstab

Still using swap file? Memory is cheap. I don't recall a server where I created swap partition or swap file.

Memory is NOT cheap, not at all.

It is if you own it. If you rent your hardware, yeah, it adds up.

Even if I own it, throwing away 2-3GB of RAM makes no sense. Now, if I own it, I can easily assign 4GB of RAM then remove it once installed, by why? That's harder to script and still no benefit.

It's a bad habit to see resources as cheap and so waste them just because you can. Extra memory doesn't improve performance, it hurts it (just the tiniest bit). And it's not free, if you always apply twice as much RAM as you use (or four times, here), that gets costly one way or another. Either you wasted money overspeccing in the beginning, or you are stuck buying more now.