@scottalanmiller said in New to Linux Administration: RHEL-Based or Debian-Based OS: I agree, both is the obvious choice. But to truly answer the question, I'd focus on Ubuntu (not Debian) and then RHEL. Debian is great, but it is Ubuntu specifically that has the market. Yes, almost the same is never the same as exactly the same.

@scottalanmiller said in SAMIT: IBM Is Killing Off CentOS: @Obsolesce that's a great visualization of it! Except it could easily be Fedora there also. And Fedora is not full of idiots thinking that they use Ubuntu because LTS and never upgrade shit.

@Dashrender said in Best practice security updates linux servers?: saying Well - Johnny is just better employee than you, so I choose to pay him more, that isn't going to make people happy, it will likely make them less happy... You are looking at it from the employer's perspective. Of course it doesn't help the employer. It helps the employee when they can see what X work is worth. If employee 1 makes X for a job, and employee 2 wants to know their own value, they have something to go on. If you don't know what others are paid you have almost nothing to go on. Remember on Spiceworks when loads of people would claim that $65K was the IT industry cap? Imagine if people (and companies) were able to repeat that without anyone speaking up! People would surmise that if $65K is the top for a CIO, that a system admin must cap out at $50K and a helpdesk tech at $9/hr! But in the real world, we know that CIOs make well into the seven figure range, admins can get well into the multiple six figures. Even good help desk leads can hit six figures. If we didn't have others to compare against, it's easy to see people misunderstanding the scope of the industry by an order of magnitude.

@Pete-S said in YouTube Month in Review: December 2020: @EddieJennings Impressive work Eddie! Thanks

Honestly the best thing in my opinion is put k3os on it and run the stuff in a single node Kubernetes cluster. You'll get experience with k8s and the applications use very little resources when deployed this way.

I use it in pfsense router. It works against script kiddies, bots/botnets, at least partially. It's just another layer of security. And like it was mentioned before, it reduces log noise, with almost no effort.

@JaredBusch said in Redirecting feedback from Linux command: @Pete-S Pretty much what I do not want is the status bar from these two commands. fwconsole ma upgradeall fwconsole chown Well, use grep to match for the progress bar then. First output stderr to a file and look in the file. I don't know how the progress bar looks when it's output as a stream of characters. I'm guessing every update is something like 3076094/3076094 [===========>-------------] 60%<CR> In that case grep for every line that doesn't contain a [ followed by a number of =, > or - and finally a ]. So something like: grep -v '\[[=->]+\]' Or maybe even better: grep -v '\[[=->]{28}\]' Above assuming there are always 28 characters inside the brackets in the progress bar. PS. Funny thing but there seems to be a bug in the forum software. I had to use an extra backslash to get the above regex look right \[[=->]+\\] instead of \[[=->]+\] They look right in the preview though.

Tweaked a bit to provide an output file. https://gitlab.com/EddieJennings/bash-general/-/blob/master/find_files_sort_by_filename.sh

@EddieJennings said in Script for Creating VMs from Template VM in KVM: @travisdh1 said in Script for Creating VMs from Template VM in KVM: @EddieJennings said in Script for Creating VMs from Template VM in KVM: @Pete-S said in Script for Creating VMs from Template VM in KVM: Not the exactly the same thing but you might want to look into how to create a VM from scratch. Meaning a script that will set up a VM with vCPU, memory, storage, network etc and then boot it from iso and have it do an unattended install, create what users you want and install the packages you need. That's one of the next things I'm looking into. @EddieJennings Also remember about things like kickstart in RedHat based operating systems. In Fedora/CentOS/RHOS you can use a kickstart file to automatically select all the install time options for the OS. A short time later you've got a fresh server and all the time it took you to setup was running the creation script on your hypervisor. One of the things I'll need to figure out going the Kickstart route is setting the hostname what I want it to be at the time of installation. Likely not difficult to do, I just have to figure it out. Or perhaps, I can just truly take the approach of just making a clean minimal install, and then later configure to whatever specific thing I'm wanting the VM to do for my lab / testing. Inside the kickstart file you'll find something like this: network --hostname=centos8-4.example.com We use debian as our goto and then it's called a preseed file. The only real thing that can be tricky is to tell the installation what kickstart/preseed file you want to use. You can do it in different ways. If you don't want to rely on dhcp/tftp/pxe etc you can roll your own iso file. I think the kickstart file can also be mounted as a drive that the installation will detect when it starts. I think the best approach is to make an automated installation with same basic settings and some of those will get changed later in the installation. For example you can use a fixed hostname that is later changed from ansible.

@scottalanmiller said in ScreenConnect Unable to Start on Fedora 33: @JaredBusch said in ScreenConnect Unable to Start on Fedora 33: @scottalanmiller said in ScreenConnect Unable to Start on Fedora 33: Some updates can cause this to revert, so be aware that you might want to set something up to verify it. What Updates? I have not seen an update to the Linux server version in months. Something that touches that library. ah, Fedora updates.. Understood.

@Dashrender Gotta love Bob-

@warren-stanley said in Asus ZenBook UX334FLC-AH79 with Linux: @scottalanmiller How's the Aspire Linux support working out ? So far, it's been great. Really liking it.

Checkout https://www.nomachine.com/ https://www.nomachine.com/terminal-server https://github.com/UPC/ravada

@travisdh1 said in YouTube Months in Review: July and August 2020: @EddieJennings You've been busy! That I have. I didn't do a practice session for every objective because I ran out of time before the test. But taking the time to talk through most of them was a good way for me to determine if I needed to go back and review details.

@flaxking said in SSL/TLS client certificates questions: Domain name doesn't matter, unless you're signing with a public CA. I'd think self-signed vs internal CA vs public CA would depend on what the authentication mechanism supports and how you have to manage the certificates. (i.e. if there are going to be a ton of them it might be easier for the authentication mechanism just to trust certificates signed by a certain internal CA rather than having to make each certificate trusted. From what I've seen so far, I've come to the same conclusion.

@scottalanmiller said in Installing Laravel on Ubuntu 20.04: @Pete-S said in Installing Laravel on Ubuntu 20.04: @Pete-S said in Installing Laravel on Ubuntu 20.04: @scottalanmiller said in Installing Laravel on Ubuntu 20.04: @Pete-S said in Installing Laravel on Ubuntu 20.04: OK, if you are not running apache or nginx, you should install the php-cli package instead. So that seems to get installed anyway as a dependency on its own. Yes, it does. But by using the php package and not php-cli, you probably got apache installed on your system as well - by dependencies. You could find out by running: apt list --installed | grep apache Or systemctl status apache2 to see if it's running. Even if it was, Laravel uses Artisan's server. I'm guessing they are invoking php's built-in webserver. Regardless, the point is that if you swap php to php-cli in your install guide you don't get apache and other stuff you don't need.

Yeah this is bread and butter for config management tools. You'd either use a template for the config or the lineinfile module for Ansible. Your template would have something like this: PermitRootLogin {{ root_login_enabled }} In it and then you can control which servers allow root login with the root_login_enabled variable.

@Obsolesce said in Searching for text in file: @dafyre said in Searching for text in file: @Pete-S said in Searching for text in file: If you have a text file that looks like this: start_folder='/folder1/abc.txt' iterations='123' passphrase='xyz' last_command='invoke' return_value='0' How can you pick out just xyz when looking for "passphrase"? I know grep will get me the line but what should I use if I want just a part of the line? Can it be done in one command or do I have to pipe several together? If you the text has a character that would be a good delimiter, you can pipe grep to cut... ie: cat myfile.txt|grep "iterations"|cut -d '=' -f 2 Output: '123' the -f # is which column you want. There may be other ways to do it, but that's the first way I can think of. You can specify a file with grep, no need to pipe in from cat. This is true! I always seem to get it backwards when I do that, so i just cat $thefile | grep | blah ... Cuts down on frustration, ha ha.

@marcinozga said in Install Skyetel Postcards on CentOS 7: @scottalanmiller said in Install Skyetel Postcards on CentOS 7: @marcinozga said in Install Skyetel Postcards on CentOS 7: @black3dynamite said in Install Skyetel Postcards on CentOS 7: Still preferred fallocate instead of dd to create a swap file? dd if=/dev/zero of=/swapfile count=4096 bs=1MiB && chmod 600 /swapfile && mkswap /swapfile && swapon /swapfile && echo "/swapfile swap swap defaults 0 0">>/etc/fstab Still using swap file? Memory is cheap. I don't recall a server where I created swap partition or swap file. Memory is NOT cheap, not at all. It is if you own it. If you rent your hardware, yeah, it adds up. Even if I own it, throwing away 2-3GB of RAM makes no sense. Now, if I own it, I can easily assign 4GB of RAM then remove it once installed, by why? That's harder to script and still no benefit. It's a bad habit to see resources as cheap and so waste them just because you can. Extra memory doesn't improve performance, it hurts it (just the tiniest bit). And it's not free, if you always apply twice as much RAM as you use (or four times, here), that gets costly one way or another. Either you wasted money overspeccing in the beginning, or you are stuck buying more now.

@scottalanmiller said in Deploying NodeBB 1.14 on CentOS 8 with MongoDB 4.2: By default, NodeBB uses the REDIS NoSQL database, By default, in 1.15.x it uses Mongo I'm pretty sure it did in the last version I installed also. But that was months ago and I do not recall clearly.

I ran some test on a VM and created some groups and added some top-level directories for those groups. Changed the group on each top-level directories and files below recursively with chown -R. Set directories to permission 2770 and files to 0660 with chmod -R. Changed smb.conf and added create mask=0660 and directory mask=2770. Now new files and directories created on the share have the right permission and belongs to the right group automatically, simply depending on what group the top-level directory belongs to. If you're not a member of a group, you will not even see the directories or files that belongs to that group. I think this is a good interim solution without too much work. Then moving to onedrive or whatever can be done in the future on a department to department basis. Only admin required for adding users is to add them to linux/samba and make sure they become members of the right groups. It's also very simple to make a separate share out of the top-level folders if you wanted.

@jmoore said in YouTube Month in Review: June 2020: @EddieJennings Good info thanks eddie! You're welcome. My RHCSA videos are truly "practice sessions" for me, but the information should be accurate.

@krisleslie said in Linux Copy a Disk Over SSH with DD: @scottalanmiller can this be used while on XCP-NG host? Can be used on every non-Windows system.