I'll see if Alertmanager has tag abilities for alerts. I know there are comments but not sure if you can sort by anything.

Having devs be able to change services in prod sounds like fun....

@StorageNinja uses Franz. No idea how well it works.

@irj said in Azulle mini pc: experience:

What can you do with 2gb of ram and 32gb storage on windows 10

Turn it on.

We use Exagrids and tape. Though for only 45TB you could just build a box and Colo it. RHEL/CentOS now have VDO support so you get dedupe and compression on those volumes.

A supermicro box with 24 8TB drives is around $13K. That's around 90TB in RAID 10. I don't know pricing for smaller because we build with those. But it shouldn't be too expensive to build your own and ship to it off-site.

@irj said in Azulle mini pc: experience:

@travisdh1 said in Azulle mini pc: experience:

@irj said in Azulle mini pc: experience:

I personally don't see much of a use case. IMO android does everything so much better less resource heavy than windows 10. What can you do with 2gb of ram and 32gb storage on windows 10?

Run Fedora, Ubuntu, CentOS and Debian at the same time instead

Yeah I agree if being used as a PC . Android is really nice as a media center.

And add a phone. I'm finally back on Android. I've missed it.

@wrx7m said in Encrypt Disk After Installation on Fedora:

Sort of related - Is there a best practice guide to "securing" or hardening linux OS flavors?

SCAP. The OpenSCAP tools have a lot of good info and checks. The SCAP Workbench tool will also write remediation scripts for you (I actually wrote a couple of the Ansible ones for them).

I seem to remember the /root/.esmtp_queue filling up on a system one time. But that was the only thing that randomly filled up that I recall.

@scottalanmiller said in Backup Systems without on-site external storage:

@obsolesce said in Backup Systems without on-site external storage:

I've recently come across Restic and looks great:

Site:
https://github.com/restic/restic

Documentation:
https://restic.readthedocs.io/en/latest/

I haven't tried it yet, but it's on my list to try on my KVM server using Google's cloud as a test.

https://restic.net/

Borg and Restic are really similar. Borg supports less targets but is faster. They are both pretty good simple utilities. I have Borg running at home for my laptop but I don't need S3 support or anything.

This application seems like more trouble than it's worth.

@scottalanmiller said in ZeroTier / Software VPN question:

@joel said in ZeroTier / Software VPN question:

Any ideas how i do this? Is this possible? Or do i just need to map the drives using the ZT IP address? But if I do that, when they take the laptops into the office, they will be using the ZT IP and not the internal lan ip of the FS!

If you want to use any IP address that isn't the ZeroTier IP address, you are attempting to misuse ZT. ZT is a SDN and by using it the idea is that you no longer use the underlying LAN IPs any longer. You are trying to shoehorn in two different approaches that aren't meant to work together into one thing.

Yeah. Set your DNS records for your ZT addresses and point everything to those. On site they will use the local LAN. Off-site they will use whatever routes they need to.

I honestly haven't done this since college. Maybe Brasero will work. I know it writes DVDs. I'm assuming it will also copy to images.

@scottalanmiller said in How to Stop Windoes 10 Resolution Pop Up?:

I saw a site recommend going to System > Display > Advanced Scaling Settings and fixing it there. But it is already off there, and that does nothing. So once again, Windows 10 total failure. How do normal people outside of IT even use Windows anymore?

Its popping up because it's off. It's alerting you to turn it on

@dustinb3403 said in Testing oVirt...:

@fateknollogee said in Testing oVirt...:

@dustinb3403 said in Testing oVirt...:

@fateknollogee Hardware RAID is recommended because a lot of people lack the practice and skill with software RAID to appropriately maintain/troubleshoot/fix software raid.

Plus you often get features like Blind swap.

Nope...
The folks at RH say, currently, performance is better with HW RAID & that is how most of their testing/validation is done.

That's odd, but okay. I would generally think they make the recommendation because they know there is a huge lack of understanding on how software raid needs to be managed.

I'm also guessing it's because RAID isn't necessarily needed. The overhead for software RAID doesn't gain much if you're bricks are replicated anyway.

@jaredbusch said in How to use a systemd timer instead of cron to automate a git pull:

Oh look I just found this posted here already /sigh..

So many questions I could have not asked of @stacksofplates, had I recalled this thread.
https://mangolassi.it/topic/13455/systemd-timers-instead-of-cron

I honestly forgot I posted that.

Wow this must be an old server. pam_tally was replaced with faillock in RHEL 6.

Started a new job last month and it's all VMware. I miss libguestfs tools.

That must be for CDN. DNS is free along with the stuff like certs.

@obsolesce said in Need SSL cert - What's next best?:

I can't just get the cert?

You have to set your domain up in it.

@scottalanmiller said in Check my 2 min audio theory on Containers:

Containers use shared kernels by definition, that's what makes it a container.

This isn't really how Docker works. Docker manages namespaces. If you use "FROM Alpine" then it will share the kernel, but if you write an app in Go and use "FROM scratch" it has zero reliance on a specific kernel. You can also run full VMs in a Docker container which is how Red Hat uses OpenShift to deploy OpenStack VMs.

@travisdh1 said in Check my 2 min audio theory on Containers:

@stacksofplates said in Check my 2 min audio theory on Containers:

@scottalanmiller said in Check my 2 min audio theory on Containers:

Containers use shared kernels by definition, that's what makes it a container.

This isn't really how Docker works. Docker manages namespaces. If you use "FROM Alpine" then it will share the kernel, but if you write an app in Go and use "FROM scratch" it has zero reliance on a specific kernel. You can also run full VMs in a Docker container which is how Red Hat uses OpenShift to deploy OpenStack VMs.

To simplify what you are saying. Write software that doesn't really on the kennel and Docker just works I actually agree with you on this.

My actual experience is that developers don't know when their code actually uses things from the kennel, thus 90+% of all Docker images I try to run are just broken.

Right. A lot of the containers use FROM everypackageinadistro because they don't know what their dependencies actually are.