@scottalanmiller said in What's in your bag?:

@irj said in What's in your bag?:

@scottalanmiller said in What's in your bag?:

@irj said in What's in your bag?:

@scottalanmiller said in What's in your bag?:

@irj said in What's in your bag?:

@pete-s said in What's in your bag?:

@irj said in What's in your bag?:

@pete-s said in What's in your bag?:

@irj said in What's in your bag?:

One of the best ways to identify a veteran fisherman vs an inexperienced one is by the size of his tackle box. Less is more. The better fisherman I become the less lures I carry. It's the opposite of what most people think..

What do you need other than a laptop to make connector whatever you need to access?

That's pretty funny. Except that a real fisherman has a frickin' boat and nets. Tackle box is for amateurs. :grinning_face_with_smiling_eyes:

Using a net is much easier than fishing lures. With a net, you only need to find fish. Find bait fisherman needs to find and hook the fish. The sport fisherman needs to find, lure and hook in the fish.

While fishing with a net yeilds the most numbers, obviously it doesn't translate to more pay. The highest paid fishermen are sport fishermen. Obviously the sponsored tournament guys are millionaires, but many local guys do quite well. Sport fishing charters often charge $700-1000 a day. We have about 100 of them just in our county. We are a big tourist area, but most areas have 10-20 of those guys in each area around The US. I know of many fishing guides and charters around the world as well.

I understand what you're saying - I have a friend that's really into fly fishing. But sports fishing is still small potatoes to the commercial fishing industry. They make billions.

Sport fishing has 110 billion dollar industry in just US.

That's like $300 per citizen (including babies, prisoners, etc.), per year. I have no idea what the fishing population is like, but the cost of sport fishing must be enormous. My own experience is that @irj is the only fisher I know, anywhere. Seems like the cost for fishing is huge.

Even assuming as many as one out of ten people are avid fishers, and that seems extremely high, that's $3,000 to fish every year for life.

$3k a year spent on fishing is not uncommon at all.

It couldn't be given the size of the market. But 1:10 people as avid fishers seems extreme.

Really $10k isn't uncommon at all. Some may spend $30-50k on offshore stuff a year easily.

That's crazy.

Boat maintenance, storage, and fuel is really expensive.

Here's a good talk from Kelsey on using Fabio, Consul, and Nomad.

Youtube Video

@scottalanmiller said in Remote management of VMs hosted in colocation:

@eddiejennings said in Remote management of VMs hosted in colocation:

Allowing an SSH connection to the managementVM from the Internet

I have not tried this approach yet, and it appears more risky than the Screen Connect approach, since SSH to that VM would be open to the Internet. Unless I'm missing some benefit to this approach, I'll not be using it.

Use a strong key, lock to your IP. Very safe. Add Fail2Ban, of course.

Or add Salt and open/close based on need so it doesn't stay open.

Fail2ban doesn't work with keys.

@dashrender said in Remote management of VMs hosted in colocation:

@stacksofplates said in Remote management of VMs hosted in colocation:

@scottalanmiller said in Remote management of VMs hosted in colocation:

@stacksofplates said in Remote management of VMs hosted in colocation:

@scottalanmiller said in Remote management of VMs hosted in colocation:

@eddiejennings said in Remote management of VMs hosted in colocation:

Allowing an SSH connection to the managementVM from the Internet

I have not tried this approach yet, and it appears more risky than the Screen Connect approach, since SSH to that VM would be open to the Internet. Unless I'm missing some benefit to this approach, I'll not be using it.

Use a strong key, lock to your IP. Very safe. Add Fail2Ban, of course.

Or add Salt and open/close based on need so it doesn't stay open.

Fail2ban doesn't work with keys.

But it would work normally with people attacking using non-keys, would it not? Or am I missing something about what it would do?

Why would you not require keys? Not making them mandatory defeats the purpose of using them.

I think he means - if a hacker is trying to use a password on a system setup to only allow keys - the fail2ban will block those users, or won't it?

No. It's dropped before fail2ban even sees it.

@wirestyle22 said in Ansible 2.4.2.0 on CentOS 7--ping module isn't working:

@stacksofplates How are you organizing? I have playbooks and inventory together in the same directory right now. Seems bad. Also, are you using an IDE?

I'll give you a layout this afternoon. I keep my inventory with my playbooks but roles have their own repositories.

@wirestyle22 said in Ansible 2.4.2.0 on CentOS 7--ping module isn't working:

@stacksofplates That's pretty incredible. Any advice on things I should attempt to set up right now for learning purposes?

A big benefit is Ansible Galaxy. Look over how everyone sets up their stuff. That will give you good ideas on what to try and how to start writing stuff.

@dbeato said in Documenting rack, servers, drives, CPU, RAM etc:

I use https://www.draw.io/ and I know a tool that @stacksofplates recommended for Cloud Diagrams.

Draw.io recently implemented one that looks almost identical to the one I was using so I've been playing with that. The other was cloudcraft.co.

For rack diagrams, phpIPAM isnt too bad. And you get the benefit of IPAM software with it.

Manta looks pretty cool. Haven't had a chance to really use it.

https://github.com/hql287/Manta/blob/dev/README.md

I know there's another that I found but I can't remember what it is.

These two

http://www.opensourcebilling.org/

https://invoiceplane.com/

For free Wave is hard to beat though. Not self hosted but I hated self hosting my billing stuff.

@Obsolesce said in Inventory tools:

Have you given Sodium Suite a try yet?

Is that still a thing anymore?

@JaredBusch said in Bi-Directional GIT:

@scottalanmiller said in Bi-Directional GIT:

Thanks, I'll give it a try.

I think the "proper" way is sub modules or something like that. I looked into this once a while ago when designing a git structure for one of our web service projects.

Depends what you want. If you just want the remote repo then use a subtree. If you want a specific commit from another repo then use a submodule.

@scottalanmiller said in Safe to have a 48TB Windows volume?:

NTFS has improved a lot over the years. This is definitely a big volume for NTFS to handle. ZFS is better designed for volumes of this size.

You are correct, with your triple mirrored (and hot spare!) setup, it's your filesystem, not your array, that you have to worry about. You have definitely managed to shift the risk from the RAID to the FS.

This isn't insanely big, but certainly having Windows managing storage always gives me a little moment of pause. Storage is not their strong suit and has weakened, rather than improving, in recent years. ReFS has had issues, the recent releases have had their own issues even with NTFS, and their software RAID has had big time issues (you aren't using that here, so not applicable either.) But this is just generally an area that Microsoft struggles with and doesn't tend to see as critical so seems to mostly poo-poo reliability concerns to focus on other areas.

If I was doing storage this large, I would almost certainly be using XFS on hardware RAID based on your setup. XFS is faster than NTFS, and pretty much bullet proof.

I agree. Last place I worked we did 96TB arrays on RAID 10 with XFS.

You might be able to use a BPM software to accomplish this. Sounds like you just want a runbook.

We constantly had issues with them switching between PCs. Our solution was mainly to give dual monitors and the KVM only switched keyboard and mouse. So we bought cheap tripplite ones.

@IRJ said in The Receptionist conumdrum:

It's not always true that first level support is useless. Tenable has great support. The guy you chat with is the guy that will work your case. They do everything from chatting, spinning up VMs to test and try to get the same results, analyze diagnostic files, etc.

Elastic is the same way. They have a dedicated developer pair that supports you and since we were DoD we could even get cleared people as support so they could on site visit.

Coincidentally this is also how my site is built. It's a static site built with Hugo on GitLab pages. Once a commit is made the CI/CD process starts on my GitLab runner and builds my site for me.

Here's a direct link to the artifact : https://hooksie1.gitlab.io/-/test-pipeline-site/-/jobs/168166600/artifacts/site.html

Now anytime you update the .adoc file, GitLab will kickoff the CI/CD process and build the site automatically with the updated content.