Topics created by JaredBusch

@JaredBusch We are intentionally being vague on this because the technical stuff on the backend isn't solid yet. We may be able to attest those calls depending on the circumstances. So the vagueness is simply because the product is still in motion.

@stacksofplates said in CloudFlare announces Magic WAN:

@Dashrender said in CloudFlare announces Magic WAN:

@Obsolesce said in CloudFlare announces Magic WAN:

So basically just another SDP/SDN product but with a weird name.

I was wondering this - I have no idea how much firewall type controll normal SDN products have.

is SDP software defined protection?

Software defined perimeters

As opposed to being defined in a notepad or on a chalkboard, lol.

@flaxking said in Yet another way Azure sucks:

@stacksofplates said in Yet another way Azure sucks:

@IRJ said in Yet another way Azure sucks:

@JaredBusch said in Yet another way Azure sucks:

When you want to delete a virtual machine, you have to clean up all the its manually.

There is not even an option to remove everything at once.

This is by design, because all your resources are separate. Companies that leverage Azure/AWS are not using the console to deploy resources for this very reason. Using infrastructure as code is the only way to go. Both Azure and AWS offer their own IaC at no cost, but you can use terraform as an open source before neutral deployment method as well.

Azure VMs and AWS EC2 are not VPS as you know. AWS does offer VPS style servers called lightsail. It's more affordable than EC2 and you would be able to delete with one click like youre used to doing. Of course you don't get all the other features like advanced networking, storage, etc.

We've been looking at Pulumi lately for IaC. I'm kind of over DLCs to write things and then having to wait for that DLC to support control flows. Just let the language your used to using do the work.

Coming from a company that only uses ARM templates, Bicep was the most exciting thing I saw at Ignite.

The scariest thing was using AR and Teams to remotely assist with surgeries. Teams didn't even work properly for that whole presentation.

Yeah I'm even kind of over things like Terraform.

With Pulumi you can do things like this:

import pulumi import pulumi_aws as aws def make_ec2(name: str): size = 't2.micro' ami = aws.get_ami(most_recent="true", owners=["137112412989"], filters=[{"name":name,"values":["amzn-ami-hvm-*"]}]) group = aws.ec2.SecurityGroup('webserver-secgrp', description='Enable HTTP access', ingress=[ { 'protocol': 'tcp', 'from_port': 22, 'to_port': 22, 'cidr_blocks': ['0.0.0.0/0'] } ]) server = aws.ec2.Instance(name, instance_type=size, vpc_security_group_ids=[group.id], # reference security group from above ami=ami.id) pulumi.export('publicIp', server.public_ip) pulumi.export('publicHostName', server.public_dns) vms = ["test","myvm","things"] for x in vms: make_ec2(x)

You don't need to wait 6 years for the DSL to support for loops or if statements. And you can build in whatever scaffolding you want around it. Want to test your infrastructure? Include the same stuff in a testing suite. It's just much nicer overall.

@jaredbusch Well that is one way to secure things......

@jaredbusch
Glad Assuming the drives could be identified as to what is RAID, could you have removed the redundant set, then progressed with the reset and if it worked, great. If not, then you could have put the redundant set back in and not have lost anything other than the time and knowledge that the drives were indeed encrypted?

@black3dynamite works.

Thanks. I was looking for this article long time. Cheers.

@pete-s I've never claimed to be a real PHP dev. So this is good feedback.

@rjt said in Adding remote storage to Proxmox:

@jaredbusch nfs on top of ZFS.
ZFS should be the underlying block/fs for everything whether a single hard drive, block storage like iSCSi, file storage such as NFS or CIFS. I like TrueNAS for this purpose. As you can see, I love ZFS. My problem is I also love CentOS. Need to figure out easy ways to get ZFS on CentOS. We should all write a letter to Larry asking him to open up the license.

Most of us here do not subscribe to The Cult of ZFS. Yes, it has a place, but not nearly like it's made out to be.

Updated Nextcloud from 20.0.7 to 20.0.8 today and the problem went away.

Not the answer, but an answer.

@stacksofplates said in I need this script to email the log it generates:

@Pete-S said in I need this script to email the log it generates:

OK, I understand. Thanks.

Also, I wasn't trying to be abrasive. I kind of worded that strongly. I just don't like Bash much. I find it annoying, so I'd rather use something else unless it's a really simple thing.

No problem. Bash is primitive for sure. Pick the right tool for the job I guess.

@JaredBusch said in Pi-hole dumps on Fedora:

@stacksofplates said in Pi-hole dumps on Fedora:

@JaredBusch said in Pi-hole dumps on Fedora:

@stacksofplates said in Pi-hole dumps on Fedora:

Just run it in a container and none of this matters.

Pi-Hole's docker version was not a well done container 3 years ago when I implemented this solution. It was by no means a good idea at the time.

Well I just meant going forward.

That gets into different issues since Fedora went with podman. I haven't done much tinkering with it yet to see how compatible things are.

It's a drop in replacement. It doesn't use the Docker socket so you can't use things like docker-compose, but I don't necessarily see that as a bad thing. Any normal tasks should be the same. There's people who have said they aliased podman to docker and never noticed a difference.

I just followed this guide, worked great! Thanks!

I'll try and make a cleaner guide later..

First, spin up your ProxmoxVE system. During the install wizard, I left the boot drive as LVM but did change it to XFS instead of ext4. You do not setup secondary drives during the install wizard. Once up, you need to create the ZFS store on each system, named the same, prior to joining the cluster. The replication process wants the ZFS pool to be named the same on both systems and you cannot name it the same (at least in the GUI) if it already exists anywhere in the cluster.
3c9d3871-d8f6-4da0-93fd-22bf8526ef6b-image.png Then from the GUI, go to the disks of system 1.
67ae2a41-d84b-4fbc-9cd0-4dea04cb5465-image.png then click on ZFS and create the storage pool name it, single disk, compression off.
4379c8d3-edf1-4733-95ce-d3bc5f2400e9-image.png wait for it to show normal.
145f1381-2d1e-4215-b29c-30e2227c00d2-image.png then repeat the process on the second system. make sure to use the same name. Now create the cluster and join the second system to the cluster.
e9401472-ad68-433a-b569-5cc14f21552d-image.png You will not see the storage on ZFS storage on system 2 when it first loads up.
0e6e610a-21fd-4317-9f15-336eec787af3-image.png But it does exist if you look.
d5efc711-8126-4e30-955a-9d0deba7db10-image.png To make it available, go to storage under datacenter.
545a0b08-72e0-4912-bf3c-f10ce2527d73-image.png edit the existing "data" and add pve2
d8022847-45ea-46ce-be11-807f01e51449-image.png now it will show up and be available for use.
a68a5b5c-3024-4650-869b-c36065713c87-image.png

Is this perfect? No. but it is how I was able to get it setup to work.

The manual leave out quite a bit of specifics. on how to do things, but goes into detail on the technical of things.

@DustinB3403
I don't doubt it.
There wasn't really any added complexity though. PVE was installed with all the defaults.

@JaredBusch Thank you for that information 🙂

@scottalanmiller said in Zyxel backdoor found:

@jt1001001 said in Zyxel backdoor found:

Number of their products are OEM to isp and other manufacturers. We have a DSL backup circuit using an ORM Zyxel router. Will be disconnected on Monday as we don't need it

That's because DSL stands for Don't need that Shit any Longer.

I'm using DSL right now, but we're right next to the COLAC, so we actually see 80mbps/20mbps. Our only other option is a cable company that would cost 3x more due to such low caps (Armstrong).

@black3dynamite said in BTRFS is not default on Fedora 33 Server Minimal:

@scottalanmiller said in BTRFS is not default on Fedora 33 Server Minimal:

Stratis is just an automation and communication layer for XFS and LVM

I did not know that.

I didn't either, was just researching it, lol. It makes it a lot more valuable, it is essentially taking the "one filesystem" advantages of ZFS or BtrFS and making them happen with traditional, mature technologies. Kind of a best of both worlds approach. Actually quite nice, if it works well.

My guess would be yes. Most of those released 2015-2016. We've since seen their 3rd gen products released around 2018 with the HD products, and now the UAP6 devices are starting to trickle out. Doesn't really make sense to keep promoting the older stuff.

https://help.ui.com/hc/en-us/articles/360012192813#faq-device-gen

I'll get pictures of the other side tomorrow. those buildings are locked up. I only have a key to the office.

fiber_deploy_2.png