@thwr said in New Ubiquiti Unifi Switches:

@JaredBusch said in New Ubiquiti Unifi Switches:

@scottalanmiller said in New Ubiquiti Unifi Switches:

@thwr said in New Ubiquiti Unifi Switches:

So the UniFi lines main feature is central management, just judging from the name? I'm more into Cisco / Juniper / Nortel / Enterasys etc, never dealt with Ubiquiti but I'm open to anything new.

Yes, UniFi would remind you of Meraki, but you host your own controller and don't have to deal with an annual charge for owning the gear.

The UniFi line is also more limited in functionality than EdgeMax when it comes to the routers. I have not compared the switches.

I don't care about any routers, I'm a pfSense junky

What kind of hardware are you using for your pfSense routers?

The video only shows the Q&A, is there one with the whole talk?

@scottalanmiller said in Sanity check - DNS Filtering on WAN:

@Breffni-Potter said in Sanity check - DNS Filtering on WAN:

Let's make it clear, this is assuming no corporate management or endpoint on the devices. The only place you are allowed to make changes is the LAN or WAN. Not the client machines.

Essentially nothing that you can do, then. Whitelisting is the only reliable option.

@Breffni-Potter I've used your proposed setup and it does work, especially for regular users.

Egress filtering, only ports 80 and 443 were enabled for users all other needed ports where only enabled per specific request and of course port 53 was only open for my internal dns server. The filtering service provides the ability for disabling Proxy/Anonymizer sites so that basically takes care of 99% of the users trying to bypass your content filtering.

Of course technical users if truly motivated will bypass the solution tunneling through 80 or 443.

Trying to learn about the pros and cons of the various image formats (qcow2, raw, lvm) available for my kvm hypervisor. @stacksofplates any opinion and/or some benchmarks you can share?

@stacksofplates Another quick question, it is better to create the bridge from the os network utils instead of relying in virtmanager to create it right?

Guess I'll try setting the bridge with nmtui to check how it works.

I usually just created the interface scripts by hand and disabled Network Manager, but a colleague just told I should just be using Network Manager to create the bridge. Is there a best practice on how to create network bridges in CentOS 7 or it really doesn't matter?

@scottalanmiller @travisdh1 @stacksofplates

Setting up a new kvm host in my lab in order to test deployment for debian based machines with kickstart+preseed file.

Just subscribed to Linux Academy, really liking the content so far. I hope to learn alot more from there as well.

No need to usually search for drivers

@WrCombs Yes must stuff will just work in Linux Distros these days.

@scottalanmiller said in What Are You Doing Right Now:

@Romo said in What Are You Doing Right Now:

@scottalanmiller Yes indeed, I really like the social aspect of Zoho mail and free for 25 users is quite usefull.

Yeah it is ANd there are so many functions. And so much of it is quite a bit nicer than O365.

Just wrote something similar to you in Yammer

@scottalanmiller Yes indeed, I really like the social aspect of Zoho mail and free for 25 users is quite usefull.

@scottalanmiller Just a week ago I finished setting a up a friends small business in Zoho and I am really liking everything they offer.

@scottalanmiller is this something like ceph and glusterfs?

Did you select your USB as first device during boot?

@rejivincentc said in Installing Snipe-IT on CentOS 7 and MariaDB:

@scottalanmiller Script used - yum -y install wget firewalld; setenforce 0 && yum -y install epel-release; mkdir -p /var/www/html; cd /var/www/html/; wget https://raw.githubusercontent.com/snipe/snipe-it/master/install.sh && chmod 744 install.sh && ./install.sh && cd snipeit; sed -i "s/'timezone' => '',/'timezone' => 'UTC',/" app/config/app.php; php artisan app:install; firewall-cmd --zone=public --add-port=80/tcp --permanent; firewall-cmd --reloadrpm

OS -Centos 7
snipe-it-3.4

Just use the following and it will take you to a working install of Snipe-IT

wget https://raw.githubusercontent.com/snipe/snipe-it/master/install.sh
chmod 744 install.sh
./install.sh

Reading about kickstart and preseed files

@stacksofplates said in What is the best way to deploy Linux desktops?:

@Romo said in What is the best way to deploy Linux desktops?:

@stacksofplates said in What is the best way to deploy Linux desktops?:

@Romo said in What is the best way to deploy Linux desktops?:

@stacksofplates said in What is the best way to deploy Linux desktops?:

@Romo said in What is the best way to deploy Linux desktops?:

@coliver said in What is the best way to deploy Linux desktops?:

Ansible or kickstart files could go a long way to automating the process. So if you ever have to deploy more its just dropping it into the environment without touching it again.

Can I use Kickstart with Debian base distros?

Debian has preseed and I've never used it. Kickstarts are great because you can do a lot with your post install. It's essentially a big shell script. So you can update, configure users, make config backups, etc.

Is it worth to learn about preseeding in this case or using something like Clonezilla would be better in your opinion @stacksofplates

That's a tough one. I really know nothing about preseeds. However, if I had to make a guess, I would think it would be much easier to use those than to Clonezilla everything. Preseeds would allow you to have different configs for different systems. I can't imagine using Clonezilla for 30 machines. I can do 30 machines at once with kickstart configs (using pxe). Using a disk, I can start the kickstart on one machine, and then take the same disk and go to the next machine, etc.

I'll try to research more about preseeds then, by the way using Clonezilla SE you can PXE the image to several computers at the same time.

True, but how do you set hostnames, IP addresses, etc?

Ip addresses won't be trouble since my machines are using dhcp but hostnames indeed would be trouble. I have been reading that I am going to need to use a simple kickstart file plus the preseed file in order to deploy debian based distros.

How are different hostnames set when using kickstart?

@stacksofplates said in What is the best way to deploy Linux desktops?:

@Romo said in What is the best way to deploy Linux desktops?:

@stacksofplates said in What is the best way to deploy Linux desktops?:

@Romo said in What is the best way to deploy Linux desktops?:

@coliver said in What is the best way to deploy Linux desktops?:

Ansible or kickstart files could go a long way to automating the process. So if you ever have to deploy more its just dropping it into the environment without touching it again.

Can I use Kickstart with Debian base distros?

Debian has preseed and I've never used it. Kickstarts are great because you can do a lot with your post install. It's essentially a big shell script. So you can update, configure users, make config backups, etc.

Is it worth to learn about preseeding in this case or using something like Clonezilla would be better in your opinion @stacksofplates

That's a tough one. I really know nothing about preseeds. However, if I had to make a guess, I would think it would be much easier to use those than to Clonezilla everything. Preseeds would allow you to have different configs for different systems. I can't imagine using Clonezilla for 30 machines. I can do 30 machines at once with kickstart configs (using pxe). Using a disk, I can start the kickstart on one machine, and then take the same disk and go to the next machine, etc.

I'll try to research more about preseeds then, by the way using Clonezilla SE you can PXE the image to several computers at the same time.