[ ] DHCP reservation for X230 server (if not already configured)
[ ] DHCP reservation for Xperia Z3 Compact
[ ] SSH port forwarding for Z3C (find appropriate port)
[ ] Zabbix agent + logwatch + sendmail config for Z3C
[ ] ???
[ ] Profit!
Category: Technology
-
Streisand VPN
Managed to get this setup in a VM very easily. I think its really neat that it sets up so many different VPN protocols in one fell swoop. Also like the added touch of fetching clients in the event you can’t trust the publicly available clients in your country.
Managed to connect to L2TP/IPsec via Android.. once. Not sure what the deal is but for some reason I wasn’t able to connect again. Haven’t attempted to do much troubleshooting, but likely will later. Did establish a connection from Kubuntu 16.10 via WireGuard. Stupid easy that. Kind of amazed how simple the WireGuard connection is. Also having difficulty fully establishing a connection via OpenVPN. It gets super close to connecting then fails. Again, haven’t done much troubleshooting, but will do more later. UPDATE: OpenVPN works if you’re not an idiot.
I get that they want to make this an easy community thing that is meant to be shared but.. Would be nice (I realize this might be a tall order) if there were user management. From what i can see it only makes one user per VPN protocol. Considering how much it sets up, I could see how it would potentially be difficult to maintain users across that many different protocols/services, but again, would be nice to share a hand-rolled VPN VPS among a group of friends.
Pondering setting up a pfSense box for the apartment. Would be interesting to get OpenVPN running on pfSense.. and use the OpenVPN client functionality in pfSense to connect to the VPN server. VPN daisy chain of sorts.
This was my first experience with Ansible. Curious to read through the Ansible code to try to re-create even one of the services by hand how Streisand sets it up (like on a Pi, maybe?).
Will update further as I test, but so far, super intriguing project.
Initially discovered via The impossible task of creating a “Best VPNs” list today
Source: GitHub – jlund/streisand
-
NearlyFreeSpeech.NET Web Hosting
Source: NearlyFreeSpeech.NET Web Hosting
Its amazing how well things work when you’ve paid your registrar bill and DNS works again 😛 Services are available by domain again, the server itself experienced no downtime.
-
Disable Apache Web Directory Listing Using .htaccess File
In this article, we will show you how to disable or prevent directory listing of files and folders on your Apache web server using .htaccess file.
Source: Disable Apache Web Directory Listing Using .htaccess File
-
HBA SUCCESS
zpool status Got my LSI 9207 delivered and installed today!
Here is the approximate sequence of events:
- Updated backup
- Shutdown server, replaced Adaptec 6805 with LSI 9207
- Rebooted server into live media
- Discovered that I was able to see past the RAID metadata and import the existing ZFS pool
- Using my favorite guide on the planet, updated the GRUB bits to make sure it would boot properly
- Voila! Rebooted and I was in my Ubuntu Xenial install just like before!
Curious to see if this will remedy the strange hangs my server has been experiencing lately.
The whole process took a handful of hours, but it mostly spent waiting on things (booting into live media, etc). Very simple procedure. We’ll see how things go from here!
-
Re: ZFS Compression
In preparation for the arrival of my HBA, I’m creating a backup of my server. As things currently stand:
Filesystem Size Used Avail Use% Mounted on udev 79G 0 79G 0% /dev tmpfs 16G 86M 16G 1% /run rpool/root 6.9T 1.4T 5.5T 21% / tmpfs 79G 28K 79G 1% /dev/shm tmpfs 5.0M 8.0K 5.0M 1% /run/lock tmpfs 79G 0 79G 0% /sys/fs/cgroup cgmfs 100K 0 100K 0% /run/cgmanager/fs tmpfs 16G 0 16G 0% /run/user/1000
I’m using 1.4T. Thats less than a formatted 2T hard drive. That’ll definitely fit!
Except it doesn’t. Left the rsync running overnight, got to work today, and the drive was full at approximately 1.8T.
Why? Because apparently ZFS compression is doing it’s job..
That was a question I had regarding disk usage measurement with ZFS compression enabled. du output is (surprise) how much space is used on the disk, not how much data you actually have. In my case:
root@tnewman0:~# zfs get all rpool | grep compressratio rpool compressratio 1.17x - rpool refcompressratio 1.00x -
1.17 x 1498796032 kilobytes is 1753591357 kilobytes, or 1.8T. Tight fit. Probably could have done a bit of slimming down and squeezed it in, but wheres the fun in that.
My solution:
root@tnewman0:~# zpool status pool: backup state: ONLINE scan: none requested config: NAME STATE READ WRITE CKSUM backup ONLINE 0 0 0 wwn-0x5000cca22de70c5e-part1 ONLINE 0 0 0 errors: No known data errors pool: rpool state: ONLINE scan: scrub repaired 0 in 2h15m with 0 errors on Mon Jan 9 22:03:44 2017 config: NAME STATE READ WRITE CKSUM rpool ONLINE 0 0 0 mirror-0 ONLINE 0 0 0 scsi-22f6baa1200d00000-part1 ONLINE 0 0 0 scsi-22f4b9a2e00d00000-part1 ONLINE 0 0 0 mirror-1 ONLINE 0 0 0 scsi-22f4be2f000d00000-part1 ONLINE 0 0 0 scsi-22f5b32bc00d00000-part1 ONLINE 0 0 0 mirror-2 ONLINE 0 0 0 scsi-22f5b92a900d00000-part1 ONLINE 0 0 0 scsi-22f5bc2a900d00000-part1 ONLINE 0 0 0 mirror-3 ONLINE 0 0 0 scsi-22f6b1ee800d00000-part1 ONLINE 0 0 0 scsi-22f6b5eb900d00000-part1 ONLINE 0 0 0 logs mirror-4 ONLINE 0 0 0 scsi-22f7b0a1900d00000 ONLINE 0 0 0 scsi-22f7b4a0d00d00000 ONLINE 0 0 0 cache scsi-22f7bda1b00d00000 ONLINE 0 0 0 spares scsi-22f4b4ac400d00000-part1 AVAIL errors: No known data errors
Make a compression enabled pool on the external!
Aaaand now we wait for rsync to do its business..
UPDATE: Interesting change in I/O wait time between filesystems. When going from ZFS pool to EXT4, the average I/O wait percentage is ~13.14%. When going from ZFS pool to ZFS pool, the I/O wait percentage is ~6.58%.
-
Openfire + Openfire Meetings
Didn’t take a screencap, but I now have XMPP and video chat functionality using Openfire with the Openfire Meetings plugin.
A few things I discovered.. During installation, you do need to create the database (MariaDB in my case) using:
mysql> CREATE DATABASE openfire CHARACTER SET utf8 COLLATE utf8_general_ci;
Simply ‘create database openfire;’ was not sufficient. It was obvious that the application could connect to the database, but it couldn’t finish the rest of it’s business setting things up.
Also, read the stuff that it says during the setup wizard. The last step has you create an administrative user. The fields are ‘Email’, ‘Password’, and ‘Confirm Password’ (or something like that). Then it takes you to the login screen for the first time. The username is ‘admin’ and the password is whatever you supplied in that previous step. I had trouble logging in because I thought that the username was my email. It isn’t. It’s ‘admin’. Of course, you’re free to create other administrative users once you’re logged in.
The other bump I ran into had to do with SSL. I’m a fan of free and letsencrypt works very well. I put the key in like I was supposed to, put the full chain in for the cert (didn’t put anything in for ‘Password’ since the key was created without one), and whacked save. But when I clicked on the cert I just added to view information about it (like you can do with the two existing self-signed certs) it threw up a bunch of Java errors. systemctl restart openfire solved that problem.
Still need to do a bit more research into certs though. When I installed the letsencrypt cert, there were three listed (letsencrypt + 2 self-signed). I’m not sure exactly how to tell openfire which cert to use. My low-tech solution was to (make a backup of the keystore beforehand and do a test restoration) remove the two self-signed certificates so that only my letsencrypt cert remained. systemctl restart openfire, and the letsencrypt cert was the cert that was used for everything that used a cert, including the administrative web interface, and xmpp (I checked the cert provided in pidgin and it was using the same letsencrypt cert the browser was using). I’m sure there’s a way to tell Openfire, “Of the certificates you have in your store, use X cert for Y service,” I’m just not sure where that is in the control panel.
UPDATE: confirmed Openfire Meetings can be used to transmit hand farts over the internet
-
LSI 9207-8i Ordered
Migrating from my current Adaptec 6805 RAID controller to an LSI 9207 HBA. Since I’m using ZFS, the RAID functionality kinda gets in the way. It’s an added layer of complexity that I’m not using, and they’re expensive to replace. It also locks me into a specific make (at least) of controller. I should have used an HBA from the start, but I just went with what I had at the time. Currently doing a full backup of /. Hopefully things will go smoothly!
