Best posts made by stacksofplates

So I've been using LXC for some things. I figured I'd do a quick small write up. I'm using it on Ubuntu because each distro is different on how they deploy it and it's most documented with Ubuntu and seems to have the least issues.

Start by installing lxc

sudo apt-get install lxc lxc-templates

There are a couple ways to do networking. I'm running these on my desktop so I can bridge the NIC and have addresses for each container on my subnet. If you're running on a VPS or cloud server you will most likely need to use iptables to port forward to the container.

For now I'll just show how to use the containers themselves.

To list containers you can use

sudo lxc-ls --fancy

It will give you this output

NAME    STATE    IPV4        IPV6  AUTOSTART  
--------------------------------------------  
d1      RUNNING  10.0.0.30   -     NO
xo      RUNNING  10.0.0.188  -     NO

Next create a new container. I'll use Ubuntu trusty 64 bit.

sudo lxc-create -t download -n cont1 -- -d ubuntu -r trusty -a amd64

That will download the ubuntu trusty 64 bit template, name the container cont1, and create the file system. It takes a little longer the first time since it needs to download everything.

Once it's finished just type:

sudo lxc-start -n cont1 -d

If you don't run it as a daemon, you will be launched into the container and then have to shut it down to get out. This way it runs in the background.

Next you will need to attach to the container and change the default user's (ubuntu) password.

sudo lxc-attach -n cont1

passwd ubuntu

exit

To attach to the container with a console just type:

sudo lxc-console -n cont1

And to leave the console use ctrl+a q

If you want to start up a handful at once here's a quick one liner:

for i in {1..5}; do  (sudo lxc-create -t download -n cont$i -- -d ubuntu -r trusty -a amd64 && echo "Container cont$i is finished..."); done

You can run unprivileged containers where normal non-sudo users can create the container and it's limited to their space, but it's some more work.

I'll have to try this when I get home.

http://www.tecmint.com/guacamole-access-remote-linux-windows-machines-via-web-browser

@scottalanmiller said:

Fixed. It is not so much this particular thread, but there are tons of these, a few per day. There is a huge number of people pushing VMware hard, but I've yet to see anything that seems like a logical argument (outside of the ones that I mentioned as those are valid.)

I used to push VMware and I believe that it used to be a good choice. But XenServer is now free, Hyper-V is now mature and VMware has fallen dramatically behind them. It's for today, for current recommendations, why would anyone support it. It's not that it isn't a good product, it's just the "least good" of all available options, in most cases.

Plus when you have things like Scale that do literally everything (not everything VMware does, but everything period) for a similar price to what you get with VMware, why choose them?

So just left a new client's office. They paid $500 for some Indian scam company to do their IT for 2 years. There was a file on the desktop called scan.bat that when run essentially echoed different percents complete and then at the end echoed you have 5823 issues that need to be resolved (along with some other junk). There was another batch file called reset that added and removed a bunch of registries and deleted some files.

@scottalanmiller said:

@ryanblahnik said:

You'd want a soldering station that can hold the iron in a set position as you work.

Often little alligator clamp kind of things. Nothing fancy.

Yup. I've got one of these and it works really well.

http://www.micromark.com/RS/SR/Product/84454_R.jpg

@Dashrender said:

@johnhooks said:

So just left a new client's office. They paid $500 for some Indian scam company to do their IT for 2 years. There was a file on the desktop called scan.bat that when run essentially echoed different percents complete and then at the end echoed you have 5823 issues that need to be resolved (along with some other junk). There was another batch file called reset that added and removed a bunch of registries and deleted some files.

Wow - so what did they say when you wanted $500 a month or more?

I didn't even quote anything. I just charged them for the time I was there and promptly ran away.

Last night I noticed that Guacamole is in the repos for the main distros so I figured I'd try it on CentOS.

Here's what you need

yum install epel-release

yum install tomcat guacamole guacd libguac-client-rdp libguac-client-ssh libguac-client-vnc

Then

systemctl start tomcat
systemctl enable tomcat
systemctl start guacd
systemctl enable guacd

firewall-cmd --permanent --zone=public --add-port=8080/tcp

Then you need to make and configure the /etc/guacamole/user-mapping.xml file.

Here's a sample

<user-mapping>

    <authorize username="loginusername" password="loginpassword">
        <connection name="RDP host">
            <protocol>rdp</protocol>
            <param name="hostname">hostname/ip address</param>
            <param name="port">3389</param>
            <param name="username">someusername</param>
            <param name="password">somepassword</param>
            <param name="domain">somedomain</param>
        </connection>

        <connection name="VNC host">
            <protocol>vnc</protocol>
            <param name="hostname">hostname/ip address</param>
            <param name="port">5900</param>
            <param name="password">somepassword</param>
        </connection>
        
        <connection name="SSH host">
            <protocol>ssh</protocol>
            <param name="hostname">hostname/ip address</param>
            <param name="port">22</param>
            <param name="username">someusername</param>
            <param name="password">somepassword</param>
        </connection>

 </authorize>

</user-mapping>

then just run

systemctl restart guacd

This page has a list of the available parameters http://guac-dev.org/doc/gug/configuring-guacamole.html

You can also use mysql for a back end but I just did the xml file.

Now you can visit your server at http://youriporhostname:8080/guacamole and login with the loginuser and loginpassword you set up in the xml file.

Here's a couple screenshots.

Just finished my interview with a DOD contractor. It looks promising

Quick thing, you may also see an exclamation mark before an encrypted password in the password field. This will also lock the account, but if you're not paying attention it can be missed.

So this would mean Jennifer could not log in also:

jennifer:!$6$Rmov1cd9$m5Z0JoE3fK6UvEpojvUQP1AOQV6zVoijFVKyyqRRPWJHu9Qu3dQDIVroRCwkadbLeuj98sK0rn/n2WlwlnHr7.:16772:0:99999:7:::

Big shout out to @adam-ierymenko, I emailed ZT support about a question and he's the one that responded to me.

@dafyre said:

@scottalanmiller said:

Today there is this Windows monoculture in entry level low end shops that self perpetuates.

I feel like sometimes it is up to us to help everybody take the Red Pill and see how deep the rabbit hole goes. They will be surprised that there's a whole other ecosystem out there... even if they wish they'd taken the Blue Pill.

If nothing else, we can expose the pure Windows Admins that we come across to the wonderful world of Linux and teach encourage them to move out of their comfort zones. take their jobs when they refuse to learn.

FTFY

@scottalanmiller said:

@wirestyle22 said:

@scottalanmiller said:

@wirestyle22 said:

@scottalanmiller said:

@wirestyle22 said:

So, I'm not trying to get into a political debate at all, but did anyone notice that Jeb Bush didn't pay for his domain name and Trump stole it? www.jebbush.com He made it re-direct to his own website. This is real life.

Only thing is... that's never been Jeb's domain. His domain is jeb2016.com.

Have I been had? Did the internet turn on me? There are a ton of websites reporting this. Are you sure he didn't just change it or didn't own multiple domains? I'm upset now

@Rob-Dunn looked in the Wayback machine, there is nothing indicating that it was ever his. It definitely is not and was not his current one for this election.

Then I have to apologize for spreading misinformation. It's sad that it isn't true. I wanted it to be true so badly.

It's been reported everywhere. It's hard to not believe that it is true given the volume. The trick is that the domain really did expire, Trump really did snatch it and they really did redirect it to a Trump domain (eventually, through an odd hop) but what people leave out is that it isn't Jeb's website. I've not seen anyone reporting that, they leave people to fill that in for themselves, in most cases.

It is however still a pretty smart move. Kind of like if Yahoo bought googel.com. Ah never mind, no one would use yahoo even if that did happen.

I see you need web development experience to post on Facebook and Instagram these days.

Well I was officially offered the other job So now I need to figure out how to tell the first one I'm not taking it haha.

So in case anyone else runs into the same issue. If you are using virt-install with a kickstart file, the kickstart file needs to be under /. If it's under any other directory, it doesn't seem to work. I haven't checked to see if it's an SELinux issue or not.

For info, here's the virt-install command:

virt-install --network type=direct,source=enp3s0f1,model=virtio --initrd-inject /cent7min.ks --extra-args="ks=file:/cent7min.ks console=tty0 console=ttyS0,115200" --name=testy --disk path=/data/VMs/testy.qcow2,format=qcow2,bus=virtio,cache=none --ram=1024 --vcpus=1 -l /iso/CentOS7.iso --nographics

I also get to tell a client that I can't help them any more since I took this job. The job is worth it just for that.

@dafyre said in ZeroTier Host:

@RamblingBiped said in ZeroTier Host:

@JaredBusch said in ZeroTier Host:

@RamblingBiped said in ZeroTier Host:

All intelligible and reasonable use cases aside, I might try and work on this a little this weekend to see if I can get a host up and running on my home network. If I do I will try and document the process and put it out in the wild.

I think this is their documentation for getting started: https://github.com/zerotier/ZeroTierOne/tree/master/controller

Yeah, that is all there is really.

I set one up when it first came up on ML. I even had something registered to it.

So the configuration was as straitforward as it actually seems?! If so, awesome.

Getting the controller built was easy. Managing it is where the pain point was at. I had some scripts at one time to help with that. I'm not sure they're still around though.

Back when they had the 10 device limit I stole your php scripts and used them to do my own. I'm sure I have a backup somewhere but I just don't do it anymore with the number of free devices now.

@IRJ said:

Florida is one of if not the most lenient state on firearms. a Florida CWP is excepted in more states than anywhere else. You can also open carry while hunting and fishing. This includes being in route to hunting and fishing. So technically you could keep rods in your vehicle and open carry whenever you wanted.

Pennsylvania is very lax. You can open carry anywhere. It's about $25 for a carry permit and takes about 10 minutes.

If anyone else wants to use X2Go with Mate on Fedora 24, you may run into an issue. If you are logged in locally, and then try to log in from X2Go you get this error: "Could not acquire name on session bus" It's a pretty simple fix.

#!/bin/bash

unset DBUS_SESSION_BUS_ADDRESS

/usr/bin/mate-session > /dev/null

Just save that script and instead of calling Mate with the X2Go Client, just call that script.

got a free pair of Keens this morning. We get a yearly allowance for boots and they have a company bring a ton of different styles in. So we just go down and pick out a pair of boots.