I should’ve asked this first but what made you want to post this? With a post like that I would asked the same if it was reversed or about MacOS.

Wildcard/regex whitelist and per-client blocking is my favorite.

How effective it would be if Microsoft have Internet Explorer run in a container to isolate it from the system?

On Windows using Chocolatey.
choco install sshfs
choco install winfsp

@dafyre said in How to mount remote filesystem over ssh (both Windows & Linux):

This seems to work rather well... Wish I'd known about this a few months ago, lol!

Anyhow, one thing I'm trying to figure out how to work out how to specify the folder I want to mount.

IE: /var/www

... Any ideas?

Using sshfs.r instead of sshfs should show the host root directory.

Since you are using CentOS 8, how about updating that script to use dnf instead of yum?

Is this a UEFI or BIOS install? SecureBoot?

Windows Key + X, Press A for Windows PowerShell (Admin)
In powershell, type diskmgmt.msc

Here's a crazy one for you.

Windows Key + r, powershell -command "start-process diskmgmt.msc -verb runas"

EvTouch USB Graphics Tablet is the default when selecting Server 2019 config template.

@wrx7m said in Microsoft Windows Default Permissions for Fixed and External Drives:

@black3dynamite said in Microsoft Windows Default Permissions for Fixed and External Drives:

And I noticed that they are different on Servers and Desktops

I had no idea they would be different.

On the server one of the permissions that stands out for me is the CREATOR OWNER (full control / subfolders and files only.
From what I can tell, when a user creates a folder on the root drive, that person will be given the permission of full control of that folder only and then CREATOR OWNER on that folder is also added with full control of subfolders and files only.

But for the desktop, on the root drive you are not given any full control of that folder.

You can increase protection by setting up a Web Application Firewall.

https://modsecurity.org/
https://www.modsecurity.org/crs/
https://owasp.org/www-community/Web_Application_Firewall

Here's an example of setting up a web application firewall with Nginx and Nextcloud.
https://riegers.in/nextcloud-with-modsecurity-3-web-application-firewall/

@DustinB3403 said in Printers - IP or WSD:

GPO is how we manage our printer deployment for our Windows workstations, for Mac it's all CLI deployment over SSH.

I use SaltStack and a powershell script to deploy printers to Windows.

I’m also using r710 for my home lab but I’m using Fedora KVM. I like the flexibility of being able to use LVM, LVM Thin, or file-based for my VMs on the same host.

@travisdh1 said in Run virt-manager on Windows 10:

Just did this again tonight, and had 1 more step needed now.

apt-get install -y ssh-askpass-gnome

That is if you need to login. Might not need it if using a password protected ssh key instead.

It’s probably still needed if your key has a pass phrase with it.

Also deny access to all DNS servers except for PiHole.

I would definitely install Zammad via repo instead of docker.

There docker image is a single container based application designed to have Zammad up and running fast for testing purposes.
https://docs.zammad.org/en/latest/contributing/install-docker.html#install-with-docker

@scottalanmiller said in Managing Type 1 Hyper Visors:

KVM and LXC on the same box

I do that with Fedora and Ubuntu too.

@stacksofplates said in Managing Type 1 Hyper Visors:

@black3dynamite said in Managing Type 1 Hyper Visors:

The thing that annoys me about Promox WebUI is that subscription popup after login or running updates. You would normally just have to change a setting in file but now its more work.

Yeah. I mean I get that people don't like that, but their product is valid.

I agree that the product is valid too. I was using Proxmox along time ago. And once awhile I install it to see any new progress with it.

@JasGot said in Managing Type 1 Hyper Visors:

@scottalanmiller said in Managing Type 1 Hyper Visors:

@JasGot said in Managing Type 1 Hyper Visors:

Easily managed from a remote location, either through NAT in a firewall, or directly - through a VPN.

KVM really shines here. I've not seen anything come close.

Which Linux do you prefer to use for KVM installs?

If you want to use Cockpit to manage your KVM, I preferred Fedora just because it always gets the latest version of Cockpit.