This script worked great!

I just tried it on a new laptop and it removed lots of stuff nobody needs.

@Dashrender said in Headsets for customer service using Yealink phones?:

@CCWTech said in Headsets for customer service using Yealink phones?:

@Dashrender said in Headsets for customer service using Yealink phones?:

@JaredBusch said in Headsets for customer service using Yealink phones?:

@Dashrender said in Headsets for customer service using Yealink phones?:

One word of warning on these, the mic pivot point it's that robust, be semi-ginger with it, and once you set it, leave it alone.

WTF? That would be a hard no. The entire point of a hinged boom mic is to easily move it.

I'll show it to you next time we're together..

I have a similar one and love it:

https://www.amazon.com/gp/product/B083V273S9/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1

I do like the full over the ear idea..not on the ear.

Same here, If giving the option, go wireless. Dealing with the cord is troublesome.

@stacksofplates said in Virtual appliances?:

@travisdh1 said in Virtual appliances?:

@stacksofplates What the what?

Install Fedora sudo dnf install -y kubernetes `systemctl enable --now podman1

That's all it takes.

Yeah I see you haven't actually done that.

Podman is not Kubernetes. Also when you install Kubernetes you don't get a podman1 service (or any type of podman service). When you install Kubernetes that way you don't get a Kubernetes service. You seemingly have to start the kube-proxy, kube-scheduler, kube-controller-manager, kube-api-server, and the kubelet separately. It installs docker, which is deprecated in k8s now. They have switched to using containerd which is pretty much the standard runtime now.

So I'll stick with my original recommendation.

Yep, this is why I need to mess with this stuff in my home lab. I can't even talk about it intelligently yet!

@Pete-S said in Experience with HPs small laptops/chromebooks?:

On faster computers I don't notice much of a difference between chrome and firefox and actually prefer firefox personally. But in this particular case I'm not sure it's the CPU at fault, it could also have been lack of RAM.

Same here, about the same and tend to use Firefox.

https://github.com/bastienwirtz/homer

https://github.com/linuxserver/Heimdall - this one doesn't have a way to add news feed 😞 , still great, it's being rewritten to nodejs

https://github.com/rmountjoy92/DashMachine

https://github.com/jeroenpardon/sui

For RHEL, CentOS, and Fedora that have Wayland enabled and is set to Wayland session by default when logging in. You would have to log out and then select GNOME on Xorg before you log in so you can remote desktop into them using remote tools like MeshCentral or TeamViewer.

Lately I've been disabling Wayland and selecting Xorg as the default GNOME session for that reason.

@scottalanmiller said in Ticket versus Projects:

@Pete-S said in Ticket versus Projects:

Looking at Zoho One we're actually thinking about going all-in for real. Zoho One is a subscription that gives you access to almost everything Zoho has - Mail, Workdrive, CRM, Desk, Projects, etc, etc. It's $30 per month for every employee.

We've looked at it, but the price just doesn't work for us. Even if we bought every tool that every person would ever use, we don't have a single user who comes up to the $30/mo price. Most are in the $3 range, so the gap is huge.

Our core users are mail, workdrive, and connect. Beyond that, everything is unique to a role.

Yes, I think it hard to come up in price for the common cheaper services and only makes sense when you have a high percentage of your workforce on one of the more costly things like Zoho Desk or Zoho CRM.

The enterprise edition of Zoho CRM for instance is $35 per month. Enterprise edition of Zoho Desk is also the same price.

@JaredBusch said in SMS-Magic or Clickatell?:

I've heard of Clickatell but not SMS-Magic.

I've not researched them at all.

Thanks, we've signed up for Clickatell now so we'll see how it goes.

@DustinB3403 said in Youtube is down:

Was it HP, I could've sworn it was IBM for a superbowl commerical?

They both have probably pulled the same sort of stunt.

@Dashrender said in How much RAM for this VM?:

why does the consumed have those dips?

I'd say this was invoked by the apps running on it. This VM is used for analytics and reporting, it's got Visual Studio, Power Bi and SQL server running on it. The vendor must've been doing some shit on it.

@marcinozga said in Do you add CAA records to your DNS records?:

Yes, but word of caution. If you get certs from multiple different providers, don't forget to add records for all of them. Otherwise getting certs will fail, and it's almost impossible to troubleshoot.

Yes, like this.
caae902b-b24b-46a0-9102-6267aa67770a-image.png

@manxam said in What does Slackbot do?:

@Pete-S said in What does Slackbot do?:

Slackbot-LinkExpanding

When someone pastes a link in Slack it attempts to reach out to the site linked to A. verify that it's a valid link and B. tries to create a small screenshot with a blurb about the page in question.

I.E.
alt text

Awesome, thanks!

I find myself using Fedora's Media Writer, it's quick and simple.

But good guide @Pete-S

@JaredBusch said in Validation when renewing let's encrypt?:

@Pete-S said in Validation when renewing let's encrypt?:

When LE certs are renewed are they using the same type of validation again as when they are created?

(We're using certbot)

They should, yes.

OK, thanks.

@Pete-S said in How to use firewall-cmd to verify that tcp 80 & 443 is open?:

One thing that would be nice to have, something that I've used on hardware firewalls, is a command that will simulate packets through the firewall rules to see if they will pass or not.
I've not seen something like that for iptables/netfilter.

Not sure about simulating, but you can always send packets at it and use iptables -v to see the counters.

@Pete-S said in Formatting text instructions into html?:

@stacksofplates said in Formatting text instructions into html?:

I prefer asciidoc to markdown. Asciidoc has actual standards for things. Antora will build a pretty nice site with your projects written in Asciidoc as well.

Ifyou just want a single page, Asciidoctor will build a site as well.

I had a look at asciidoc and it looks very nice, especially for larger documentation projects.

I have a couple projects in an Antora site. We had a ton more at work, but I can't show it on here. You can include multiple projects and have them appear at the bottom left, each with versions. We used it so that teams could create documentation for tools (or really whatever they wanted) and then that documentation could be scraped and included in the central site. I just have a few projects included in my site, but Antora makes that pretty easy.

Here's my very bad/basic example.

https://docs.hooks.technology

Depends on the Apache version, what version do you have 2.2 or 2.4?

Standard size was 48qt for many years but that one may be 50.

@flaxking said in SSL/TLS client certificates questions:

Domain name doesn't matter, unless you're signing with a public CA. I'd think self-signed vs internal CA vs public CA would depend on what the authentication mechanism supports and how you have to manage the certificates. (i.e. if there are going to be a ton of them it might be easier for the authentication mechanism just to trust certificates signed by a certain internal CA rather than having to make each certificate trusted.

From what I've seen so far, I've come to the same conclusion.

@stacksofplates said in How to let only customers download files with wget/curl?:

@Pete-S said in How to let only customers download files with wget/curl?:

@stacksofplates said in How to let only customers download files with wget/curl?:

@Pete-S said in How to let only customers download files with wget/curl?:

have scripts serve the data and what not.

Wait are you talking about CGI scripts?

Yes, that's a possibility when you are using a webserver, instead of ssh.

If you access a file over ssh, AFAIK the file is a static file and it is what it is.

If you however access a file over https, you can have a script on the webserver delivering you the file and you can send parameters to it. For instance :

wget -o install.sh "https://xyz.com/my_special_install_script.py?os=CentOS7&special=2&customer=2432"

You just have a gazilion options when you connect over a webserver.

Yeah I thought you were providing files through just a default webserver. So while CGI isn't insecure by itself, you have a ton of work in securing the scripts you create. You might be better off just writing a small API to hand off the info instead of trying to properly secure CGI scripts.

Another option is a serverless function leveraging the providers authentication to serve the files up.

Here's an example from GCP where you can just check require authentication using their IAM.

Thanks, I had the intention of letting the webserver authenticate and in most cases provide a static file directly or when needed invoke a script that will provide dynamic content.

I haven't checked nginx yet but apache can check client SSL certificates easily.