Topics created by Emad R

@Dashrender @JaredBusch

Of course that's true - but you have important data on a machine? no backups? or just don't want to deal with restoring the data?

We do have backups done on a regular interval via the help of SaltStack.

again not every situation is similar situation to the usual places you guys work, I work with MSF France as an I.T Supervisor in a hospital, where the users need to be mobile and work in locations at camps offline. and Central Authentication system can do more harm than good, and we have a lot of policies and rules to maneuver around.

trust me Jared you wont be able to survive here. it is way out of your comfort zone with everything ready for you in place and having a big budget for everything. Here I.T budget has to be shared with the Yemeni crisis and you can imagine where will the money will always go to. So we have to live and operate with what we have and do the best with it.

Oh and before suggesting something clever, that you assume I have not thought about already, We cant use cloud services in MSFF.

@jaredbusch said in The Ultimate KVM setup:

@mattbagan said in The Ultimate KVM setup:

@tim_g said in The Ultimate KVM setup:

@mattbagan said in The Ultimate KVM setup:

@tim_g said in The Ultimate KVM setup:

@mattbagan said in The Ultimate KVM setup:

@tim_g said in The Ultimate KVM setup:

@mattbagan said in The Ultimate KVM setup:

I'm having a hard time following this. So we have one(two) KVM host, fedora instance running virt manger, another fedora running vnc server?

Install Cockpit: dnf install cockpit cockpit-machines
Then do a dnf group install "Virtualization".

Set each VM to use SPICE and VNC. You can get VM console access via Cockpit and the VNC display.

cockpit gets installed on the KVM host?

Yes.

Can I create VMs within cockpit? I do not see an option for that.

No, but you can connect to your KVM host via virt-manager from another Linux PC.

Or do a search for my Kimchi guide:

https://mangolassi.it/topic/14675/fedora-26-kvm-html5-remote-access-with-web-console-via-kimchi

Guide is here:
https://www.timothygruber.com/linux/fedora-26-kvm-html5-remote-access-with-web-console-via-kimchi-part-1/

I have tried connecting virt manger to my KVM host but I get all kinds of errors. Not sure if I am doing it right. Do you have a guide for connecting to a remote KVM host with virt manger for a non-root user? I get lots of accessed denied. I did end up finding your guide after searching cockpit on the forum.

You have to put your user in the virtual manager group. Forget the proper name of the group.

@stacksofplates knows it

libvirtd

With a fresh installation of F26 worktation with lxqt, I found two issues:
1 - SELinux prevents the vncserver daemon to run. This is bug (on buzilla) #1412468. The solution is to run as root:
ausearch -c 'systemd' --raw | audit2allow -M my-systemd
semodule -i my-systemd.pp
After rebooting, you can run: (as user, for display #3 with SELinux enforcing)
sudo systemctl start vncserver@:3.service
2 - After fixing SELinux, you can connect with vncviewer but the screen is dark blue. I tested it on the same computer running vncserver with:
vncviewer :3 (easier to debug)
It executes ~/.vnc/xstartup, which executes /etc/X11/xinit/xinitrc
xinitrc executes /etc/X11/xinit/Xclients which, in the fresh installation, does not support lxqt. The solution appears to be to add lxqt support in that file. It requires two things:
a) create /etc/sysconfig/desktop as root. the file content is:
DESKTOP="LXQT"
set the permissions , as root: chmod 644 /etc/sysconfig/desktop
b) modify /etc/X11/xinit/Xclients to add lxqt. Here is the content of the modified file:
#!/bin/bash

Copyright (C) 1999 - 2004 Red Hat, Inc. All rights reserved. This copyrighted material is made available to anyone wishing to use, modify, copy, or redistribute it subject to the terms and conditions of the GNU General Public License version 2. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.

GSESSION="$(type -p gnome-session)"
MSESSION="$(type -p mate-session)"
STARTKDE="$(type -p startkde)"
STARTLXDE="$(type -p startlxde)"
STARTLXQT="$(type -p startlxqt)" # Added for LXQT

check to see if the user has a preferred desktop

PREFERRED=
if [ -f /etc/sysconfig/desktop ]; then
. /etc/sysconfig/desktop
if [ "$DESKTOP" = "GNOME" ]; then
PREFERRED="$GSESSION"
elif [ "$DESKTOP" = "MATE" ]; then
PREFERRED="$MSESSION"
elif [ "$DESKTOP" = "KDE" ]; then
PREFERRED="$STARTKDE"
elif [ "$DESKTOP" = "LXDE" ]; then
PREFERRED="$STARTLXDE"
elif [ "$DESKTOP" = "LXQT" ]; then # Added for LXQT
PREFERRED="$STARTLXQT" # Added for LXQT
fi
fi

if [ -n "$PREFERRED" ]; then
exec "$PREFERRED"
fi

now if we can reach here, either no desktop file was present, or the desktop requested is not installed.

if [ -n "$GSESSION" ]; then
# by default, we run GNOME.
exec "$GSESSION"
elif [ -n "$STARTKDE" ]; then
# if GNOME isn't installed, try KDE.
exec "$STARTKDE"
elif [ -n "$STARTLXDE" ]; then
# if neither GNOME nor KDE then LXDE
exec "$STARTLXDE"
elif [ -n "$STARTLXQT" ]; then # Added for LXQT
# if neither GNOME nor KDE nor LXDE then LXQT # Added for LXQT
exec "$STARTLXQT" # Added for LXQT
fi

We should also support /etc/X11/xinit/Xclients.d scripts

XCLIENTS_D=/etc/X11/xinit/Xclients.d
if [ "$#" -eq 1 ] && [ -x "$XCLIENTS_D/Xclients.$1.sh" ]; then
exec -l $SHELL -c "$SSH_AGENT $XCLIENTS_D/Xclients.$1.sh"
fi

Failsafe. these files are left sitting around by TheNextLevel.

rm -f $HOME/Xrootenv.0

Argh! Nothing good is installed. Fall back to twm

{
# gosh, neither fvwm95 nor fvwm2 is available;
# fall back to failsafe settings
[ -x /usr/bin/xsetroot ] && /usr/bin/xsetroot -solid '#222E45'

if [ -x /usr/bin/xclock ] ; then /usr/bin/xclock -geometry 100x100-5+5 & fi if [ -x /usr/bin/xterm ] ; then /usr/bin/xterm -geometry 80x50-50+150 & fi if [ -x /usr/bin/firefox -a -f /usr/share/doc/HTML/index.html ]; then /usr/bin/firefox /usr/share/doc/HTML/index.html & fi if [ -x /usr/bin/twm ] ; then exec /usr/bin/twm fi

}
After these changes, I rebooted the system and vncviewer worked fine.

@scottalanmiller

after reading my post again, I saw that it suggested that I was able to do this, but I was not able.

I really want something easy like this but it needs more research and web development skills, so posting it here encase someone that has that can provide easier steps and successfully accomplish this.

@stacksofplates said in Centos Power Profiles?:

@emad-r said in Centos Power Profiles?:

0_1501781625050_2017-08-03 20_32_03-Wok.png

So I was playing with Kimchi and I noticed this, I supposed to be running Centos KVM host and not guest.

I researched and I dont want to read 1000 page from RedHat, I wondered anybody have more info about this, and is there CLI command where you can manage this ?

It's probably just an interface for tuned. The names look similar.

Correct, the file is

/etc/tuned/active-profile

And there is service called tuned, thanks for this.

And to check on profiles available:

tuned-adm list

@emad-r

Fake Comment to make the post go back up and more people see it to help... corrupt comment.

Please mention another reason for not using Docker with Linux based operating systems:
If the UID on your host system doesn’t match the UID of the user inside your Docker container, you will have file ownership issues.

I think most people don’t encounter this because they are probably the only user on their development machine, and most people only add a single user in their Dockerfile to run their app.

I’m not sure about other Linuxes, but Ubuntu will assign the first user a UID of 1000 so if you’re the first user on an Ubuntu host and you have an Ubuntu-based Docker image, you won’t even notice.

Personally, i was given advice to avoid host volumes even though the case can be resolved with bindfs and a privileged machine in a Windows environment.

@mlnews

Thread resurrected !!!

I see, interesting . Regarding Ovirt + GLusterFs my update on this is that did learn glustering and it was easy to perform. I didnt apply it in production or VMs. I did use Ovirt a month ago and it was very slow web ui experience.

I should write a thread about my and Gluster.

Libvirt is the one that provides the Backing Store, see below:
https://kashyapc.fedorapeople.org/virt/lc-2012/snapshots-handout.html
Some more details below:
http://dustymabe.com/2015/01/11/qemu-img-backing-files-a-poor-mans-snapshotrollback/

@emad-r said in Hyper-V 2016 Server free file server included ?:

@dustinb3403 said in Windows 2016 Server free file server ?:

Not legal. You can't legally use Windows Server for production purposes without it being licensed.

Also I dont see any licensing options for file server role, FYI.

It's not a role. To license the use of any non-hypervisor functionality the license is a full Windows Server license.

Last commit on this package was from before the OP. Seems like this died on the vine, sadly.

@emad-r said in I.T Question for Parents:

@dashrender

@dashrender said in I.T Question for Parents:

@msff-amman-itofficer said in I.T Question for Parents:

Hello,

I wish all the best to your children but I wondered this, especially for small kids (I dont have any):

Would you like your kids to be I.T Smart as you and be in the I.T Field ? I actually would hate it, I would want them the farthest thing from I.T so we can leave the house once a while.

What does this have to do with leaving the house? Granted, if your hobby is something on the computer, you're more likely to stay indoors, but it doesn't mean you're relegated to never going outside.

I think this has more to do with exposure to those other things.

Abit related to 1, if you teach them how to be smart in using I.T devices, It is scary for me seeing my brother child seeing all those weird videos supposedly target-ted for children on You-tube and ...

How to use devices doesn't mean you're smart in IT, it just means you learned how to use a device. A person who can make an iPad sing doesn't mean they are an IT Pro.
What weird videos are you talking about? Of course as a parent, it's your job to monitor what your children are viewing. I'm pretty sure YouTube has a child friendly mode for things like this.

how soon kids age of 4 can navigate smart phone or tablet, but how can we combat this? Offline content perhaps, any other good ideas .

What are you trying to combat? Their use of technology? why? It's the world we live in. Should they have more skills than just how to operate a smart phone/tablet, sure, but should you reduce their skill there? I don't think so.

Is there something about your own life you are unhappy with, that you think forcing yourself to do outdoor activities will make you happier? or any non IT activities that will make you happier?

What about shit like this:
https://www.youtube.com/watch?v=UYDWLuoE-vA
Youtube Video

For some reason its all the rage for some kinds of kids, they are obsessed with it. The thing is you cant monitor them all the time, btw I heard 2 parents complained over this in Canada and Jordan.

you do not protect your kids by make them more or less ignorant about a comminication medium. You protect them by educating them to contents.

@scottalanmiller said in Anybody noticed Win10 explorer file status delay:

@coliver said in Anybody noticed Win10 explorer file status delay:

We use it in our labs. All of our user devices are on the main path..

Ah. Then those labs ARE production.

Correct.

@stacksofplates Yeah, I work mostly in WIndows 10 but my laptop is based on Ubuntu right now.

My Favorite Ultra-VNC setup:

Not all issues can fixed from command line alas, thus this recipe:

uvnc: file.recurse: - source: salt://uvnc - name: 'c:\salt\uvnc' - makedirs: True cmd.run: - name: 'c:\salt\uvnc\state.cmd' module.run: - name: firewall.disable

remeber to re-enable the firewall of the client when finished. (salt "client" firewall.enable)
you will need to create uvnc folder (get it from UltraVNC portable builds) folder in your Salt master, in /srv/salt

in it :

winvnc.exe

UltraVNC.ini

state.cmd

SecureVNCPlugin32.dsm (Optional Encryption plugin)

Server_ClientAuth.pubkey (Optional Encryption server SSL handshake check)

And in the state.cmd put the following:

taskkill /f /im winvnc.exe sc stop uvnc_service sc delete uvnc_service "c:\salt\uvnc\winvnc.exe" -install "c:\salt\uvnc\winvnc.exe" -startservice sc config uvnc_service start= demand ipconfig | findstr /i "ipv4"

And whenever you want to connect to client, run this in salt master:
salt '172' state.apply uvnc

And you will see the IP of the client, you will need to match the IP and if you made any custom setting like port number/encryption plugin with vnc viewer and connect to client.

@Dashrender said in Saltstack commands redirects to systemprofile:

@scottalanmiller said in Saltstack commands redirects to systemprofile:

@msff-amman-Itofficer said in Saltstack commands redirects to systemprofile:

I want to backup the user account with the most data ? the thing is we have different user account names on each computer, and that is the why I am having issues, if only I can find way to run as logged in user

Odd, but, okay. So with or without salt to do this your approach would not work. You need to do some detection as to what folders hold the most data, then back that up. That variable won't give you that information even with logged in users.

Yeah - I think your idea of backing up %systemroot%\users is probably the way to go

Yes, grabbing EVERYTHING seems like it would be the most logical.

Petya hackers issue fresh ransom demand
http://www.bbc.co.uk/news/technology-40506616

@msff-amman-Itofficer 0_1498938797651_2017-07-01 22_52_06-debug - Clover.png
0_1498938800203_2017-07-01 22_53_01-Antivirus scan for 981528cbeafd245f003c838e0db3fb55d755b447631b0472fd2c164de72dc.png

Have you considered a backup ready node like StarWind does for example https://www.starwindsoftware.com/starwind-storage-appliance? They usually go preconfigured having all the required licenses including VEEAM. As far as I know, iSCSI/SMB/NFS are present and there is an option to seamlessly offload your backups to the cloud. Unfortunately, it is currently out of my budget so I am using their free product https://www.starwindsoftware.com/starwind-virtual-san-free which converts two of my older storage servers into a single mirrored backup pool. Works great so far.