Celebrating that my DSL link has finally been up for 24 consecutive hours.

@dashrender said in What Are You Doing Right Now:

@eddiejennings said in What Are You Doing Right Now:

Reading a DHCP v6 RFC document.

How fast did you fall asleep?

Luckily, it was only one section I needed to read (about DHCP options), so I was able to stay awake

Reading a DHCP v6 RFC document.

@dashrender said in Reverse Proxy for Single Public Facing Server:

@eddiejennings said in Reverse Proxy for Single Public Facing Server:

@dashrender said in Reverse Proxy for Single Public Facing Server:

That's pretty easy to do when you're self hosted, but if you're doing something like Vultr instances, I'm guessing it's a bit harder - unless Vultr allows for the creation of VMs that only exist on a private network.

True and that why I specifically mentioned a self-hosting scenario. I think I have a thread from the past asking about whether or not people bother with reverse-proxy for things hosted in Vulture or the like.

Writing a standard operating procedure document while I do a task.

@dashrender said in Reverse Proxy for Single Public Facing Server:

I don't think the VM example relates to the proxy question.

The fact that you are self hosting probably plays more into this than anything else.
As a self hoster, do you have have more than one IP? If not, and you're going to have more than one site, proxy becomes a must (no one wants to deal with ports).
I suppose having multiple IPs doesn't preclude you from using a proxy, just makes it less of a demand.

I think of it as a good practice to put something public-facing behind a proxy if possible, whether it's a single server or multiple. That was my connection to virtualization: not a technical connection, but a possible best practice of putting something behind a proxy by default instead of putting something behind a proxy as an exception.

If you were self-hosting a VM that's to be public facing (like MeshCentral, NextCloud, etc.), would you bother with also setting up a separate VM as reverse proxy server for that traffic?

I would say "yes." Even if you're just proxy-ing traffic for only one server, you would still want the single ingress point for external traffic.

I think of it like virtualization. Even for a single server you still install a hypervisor on the bare metal. There's no downside to the one server being a VM and if if you add servers in the future, you just spin up more VMs. In the case of a reverse proxy, if you find yourself hosting more stuff, you can simply add configs to your reverse proxy and manage TLS certs in one place as well.

Drafting a support agreement.

Heard about this article on a Crosstalk Solutions video today:

https://www.bleepingcomputer.com/news/security/former-ubiquiti-dev-charged-for-trying-to-extort-his-employer/

About to record a video.

I agree that such a scheduled task seems reasonable to help a poor application limp along.

@stacksofplates said in KVM or VMWare:

@eddiejennings said in KVM or VMWare:

@travisdh1 said in KVM or VMWare:

@stacksofplates said in KVM or VMWare:

@travisdh1 said in KVM or VMWare:

@irj said in KVM or VMWare:

@francesco-provino said in KVM or VMWare:

@WLS-ITGuy I haven’t been in this forum for years, and after years I still see similar questions and the same arguing…

Do yourself a favor and learn something useful like Terraform to automate VMware or similar stuff, the real deal today is not wasting your time reinventing the wheel and doing manual operations, not saving a few bucks on hypervisor’s license.

I agree here. Many on here don't understand the benefits of IaC and proper SDLC because they haven't been exposed to it yet. Penny wise and pound foolish.

Granted many of these one man shops don't have the resources (IT employees) to do it. If you're fixing printers you don't have the bandwidth to do this kind of stuff. Either way there is still pain in the long run for not doing automation, but for them it's just not feasible.

I'm all in favor of automation.

What I question is why you NEED VMWare to automate things? I've done it with XenServer/XCP-NG, and I don't see why anyone couldn't also automate KVM based things as well.

Can you give examples of this automation? I have a feeling the terms aren't exactly the same here.

What I'm thinking of in this case is using Ansible to provision and build and manage VMs and/or the host server.

I’ve been working with this in my home lab, and the virt module seems pretty limited in what it can do. For making a new VM, I’m basically creating and executing a script that runs virt-install to make the VM, which is similar to what the Fedora Project does for VM creation.

You can use virt-clone if you don't want to run full virt-install.

But you need to set the template up first through something.

Yeah. virt-clone is the next step. For my own learning, I wanted to see how I would deploy one from scratch first.

@travisdh1 said in KVM or VMWare:

@stacksofplates said in KVM or VMWare:

@travisdh1 said in KVM or VMWare:

@irj said in KVM or VMWare:

@francesco-provino said in KVM or VMWare:

@WLS-ITGuy I haven’t been in this forum for years, and after years I still see similar questions and the same arguing…

Do yourself a favor and learn something useful like Terraform to automate VMware or similar stuff, the real deal today is not wasting your time reinventing the wheel and doing manual operations, not saving a few bucks on hypervisor’s license.

I agree here. Many on here don't understand the benefits of IaC and proper SDLC because they haven't been exposed to it yet. Penny wise and pound foolish.

Granted many of these one man shops don't have the resources (IT employees) to do it. If you're fixing printers you don't have the bandwidth to do this kind of stuff. Either way there is still pain in the long run for not doing automation, but for them it's just not feasible.

I'm all in favor of automation.

What I question is why you NEED VMWare to automate things? I've done it with XenServer/XCP-NG, and I don't see why anyone couldn't also automate KVM based things as well.

Can you give examples of this automation? I have a feeling the terms aren't exactly the same here.

What I'm thinking of in this case is using Ansible to provision and build and manage VMs and/or the host server.

I’ve been working with this in my home lab, and the virt module seems pretty limited in what it can do. For making a new VM, I’m basically creating and executing a script that runs virt-install to make the VM, which is similar to what the Fedora Project does for VM creation.

Just finished uploading a video. Now for some Python practice.

Audio editing.

@stacksofplates said in What Are You Doing Right Now:

@eddiejennings said in What Are You Doing Right Now:

Working on some Python chops.

FastAPI is a really nice framework. Using it for a bunch of services at work.

From what I’m seeing from job posting most Linux system administration / “devops” gig seem to want a person with some skill in using Python, so post-RHCE this seems to be a good use of time.

Working on some Python chops.

@jaredbusch said in What Are You Doing Right Now:

@eddiejennings said in What Are You Doing Right Now:

Making a tar archive of my /home directory in preparation for my Fedora 35 install on laptop.

I need to go back through and document the things that I have symlinks and such. I want to do a clean install also.

I'm also going to use the KDE spin, and give Plasma a real try. Going to try to stick with it until Fedora 36.

Making a tar archive of my /home directory in preparation for my Fedora 35 install on laptop.

Here's the new content for the last few months. I'm finally getting around to releasing the practice sessions I recorded while preparing for the RHCE. Enjoy!

July
RHCE v8 Practice Session: Understand and use essential tools
RHCE v8 Practice Session: Operate running systems
RHCE v8 Practice Session: Configure local storage

August
Quick pre-RHCE exam Channel Update
My Experience with the RHCE v8 Exam (EX294)
RHCE v8 Practice Session: Create and configure file systems – Part 1
RHCE v8 Practice Session: Create and configure file systems – Part 2
RHCE v8 Practice Session: Deploy, configure, and maintain systems

September
RHCE v8 Practice Session: Manage users and groups
RHCE v8 Practice Session: Manage security
Home Lab Adventures: Reconfiguring Basic Home Lab Network
RHCE v8 Practice Session: Ansible Core Components: Inventories
RHCE v8 Practice Session: Ansible Core Components: Modules

October
Personal update and some Home Lab info
RHCE v8 Practice Session: Ansible Core Components: Variables – Part 1
RHCE v8 Practice Session: Ansible Core Components: Variables – Part 2
RHCE v8 Practice Session: Ansible Core Components: Variables – Part 3
Home Lab Adventures: Should You Shave that Yak?
RHCE v8 Practice Session: Ansible Core Components: Facts
RHCE v8 Practice Session: Ansible Core Components: Plays

You can also view the content on Odysee and Rumble, if you prefer to not use YouTube.