Best posts made by stacksofplates

I'll give a real world example for this. We have in house applications that are written in Fortran. We have a PGI and Intel compiler for these applications that compile the fortran code into executables. These aren't "installed" anywhere. They are automounted on all of our systems. The binaries are launched with a script by the user that checks some things on the local system like kernel version, OS, OS release, etc. If these check out the script launches the binary for the user.

@scottalanmiller said in What Are You Doing Right Now:

@stuartjordan said in What Are You Doing Right Now:

@scottalanmiller Never heard of it to be fair. Just done a google search and does look like a nice product. and you can save to pdf etc. battery life is good as well. Have you personally used one of these?

I've been following them for a while but have not played with one. Ask @stacksofplates about how he likes it.

I just got it Friday. I know two other people who have it and they convinced me it was worth it. I'll let everyone know how it is after I get to use it for a bit.

@scottalanmiller said in KVM nested virtualization ? stable and why would you ?:

@Dashrender said in KVM nested virtualization ? stable and why would you ?:

@scottalanmiller said in KVM nested virtualization ? stable and why would you ?:

This is where KVM and ESXi have a superior architecture. No need for a Dom0 VM.

uhhh.. ok - then can you do what JB suggested? Install KVM into your CentOS that's already on your laptop?

That's what Boxes is.

Ya don't use that crap though. I run VirtManager on my laptop. The console full screen through SPICE is awesome. Even over the network, on a LAN you could think you're using that machine instead of a VM.

I think at this stage it would be the company with more money. I'd get more exposure to the things I want to learn and deal with.

We use the new Latitudes at work. I have an e7270 also that I use personally and I really like them.

@scottalanmiller said in Linux File Server. Which One Would You Pick?:

@wrx7m said in Linux File Server. Which One Would You Pick?:

@scottalanmiller Would you happen to know of a way to subscribe to RSS or email for when CentOS has available updates? I have seen some feeds for other distros but can't find one for CentOS.

I've not looked for one. Not sure.

I think officially updates are sent to the mailing list https://lists.centos.org/pipermail/centos-announce/

What's your goal?

@scottalanmiller said in Debian File Server File Recovery:

@DustinB3403 said in Debian File Server File Recovery:

I've played with Turnkey linux, and its scary how easy of a process those guys have made those systems.

Sooooo EASY! You miss everything that you really need to know about the system in every case.

That's scary.

Ya it's nice to see final configs and how they (possibly) should look but to run it in an environment is kind of concerning. Esp when each image has webmin installed by default.

For example the openldap image has some php web interface to manage ldap. That's fairly concerning to me. It would take more work to rip it out than to just set it up properly.

@wirestyle22 said in Debian File Server File Recovery:

We finally found the replication point and recovered the file. One thing I noticed working here is that the VM's are not named the host names. I looked for it for hours across all of our subdomains and could not find it. I had to go through each individual VM and eventually found it.

We still have some old Unix white beards that do this. It annoys the crap out of me. He just set up a server and called it Odin.....

@scottalanmiller said in Is the Era of Long Term Support Over for Operating Systems?:

For us, after many years of using CentOS we have been moving heavily to Fedora. We've found it to be more capable and easier to maintain - solving many of our issues around performance, features and product support. It's made my job much easier.

I wish Red Hat would offer support for Fedora.

@Ambarishrh said in File server/Document management system:

I am currently checking for a file server/document management system solution for a friend of mine. His company needs a solution, currently looking at SharePoint online (Migration will be from local file server). What they are more interested is to have compliance, security, DLP etc. Box is another option, but I don't really like the waterfall permission rights that's been used on box.

I am checking if NextCloud enterprise has some features that matches box for example https://www.box.com/security/governance-and-compliance

What would be the solutions if the requirement is more on the above-mentioned features?

Alfresco sounds like it would fit well.

@Dashrender said in Benefits of using open source GPL software:

@scottalanmiller said in Benefits of using open source GPL software:

@Dashrender said in Benefits of using open source GPL software:

Other than being free to use, what value does this give the people using it?

Open source does NOT mean free to use. It means free to support, inspect and modify. Often it is free to use, but that is not implied by the term open source nor by the GPL license.

OH? the GPL license doesn't mean that anything licensed under GPL has to be given away free?

Source code, that's all. Not a fully built and functioning version.

While annoying, if you just hover over the toggle it will work. I hardly ever do full screen so I've not encountered this.

@Dashrender said in Cross Post - Help sorting out a Firewall Issue on a Debian Box:

A default gateway on the debian box?

My thought. I don't think I've seen a system firewall not accept icmp by default.

If you stop iptables and still can't ping it's not the firewall.

@JaredBusch said in SSH Keys and migrating to a new device:

@wirestyle22 said in SSH Keys and migrating to a new device:

@JaredBusch Thanks. This is great

Again, you want a unique private key on every device, in order to lock things out discretely. Otherwise if you simply had the same private key everywhere, you would lose all access form every device just because your laptop was compromised and you had to lock out the public key.

So this process is really only something that should ever happen on a profile migration.

Ya it's a big advantage to having automounted home directories or having LDAP store the keys. You can easily revoke and add another key and have it work everywhere.

Or using Kerberos instead of pub/priv keys.

I realize @JaredBusch knows this, but for others who may not.

Just practicing with some custom modules. I can't really think of anything useful to write because there are so many already, so I just made a random string generator that can be passed into a variable for other tasks.

Here's the output:

Here's the module:

#!/usr/bin/python

DOCUMENTATION='''
---
module: random_generator
short_description: Generates random string
description:
    - Generates random string
    - from a given size
options:
  size:
    description:
      - Size of the string to generate
    required: true
'''
RETURN = '''
msg:
    description: Returns random string
    type: string
'''
EXAMPLES = '''
- random_generator:
    size: 25
'''

import string
import random 
from ansible.module_utils.basic import AnsibleModule


def random_generator(size, chars=string.ascii_uppercase + string.digits):
    return ''.join(random.choice(chars) for _ in range(size))

module = AnsibleModule(
    argument_spec = dict(
    size = dict(required=True, type='int')
    )
)
size = module.params.get('size')

try:
    random_generator(size)
    success = True
    ret_msg = str(random_generator(size))
except KeyError:
   success = False
   ret_msg = "Error"

if success:
    module.exit_json(msg=ret_msg)
else:
    module.fail_json(msg=ret_msg)


if __name__ == "__main__":
  main()

Here's how the documentation looks:

@coliver said in If a business were all linux would they use Office 365:

@wirestyle22 said in If a business were all linux would they use Office 365:

@coliver said in If a business were all linux would they use Office 365:

@dashrender said in If a business were all linux would they use Office 365:

@coliver said in If a business were all linux would they use Office 365:

@wirestyle22 said in If a business were all linux would they use Office 365:

@coliver said in If a business were all linux would they use Office 365:

What prevents them from using O365? It's generally one of the least expensive enterprise email solutions available.

I think he means with full features

What features would be missing? Email, calendaring, contacts, OneDrive, Sharepoint, Skype for Business, are all available on Linux in one form or another.

Well specifically you left off all of the MS Office apps that can be installed locally. But I'm pretty sure it was Scott who said that WINE was originally created because someone wanted to run MS Office on Linux OSes

What benefit does Microsoft Office provide to a Linux shop that LibreOffice doesn't provide?

Libreoffice often requires conversion of the more complex office documents. If you can't seamlessly open them and have everything displayed correctly it's not very useful IMO. It's a little different if you're just starting your company and it starts as linux right in the beginning though.

The topic was about a Linux shop. If we're talking about a mixed shop you have a point, although it's not as big of an issue lately as it has been in the past.

And when are we going to stop sending office documents outside of the company? They should be PDFs. The hosted solutions (or sharepoint) allow for real time collaboration on documents. Then it should be converted to a PDF. If you want to do a one off document, create it and convert to PDF. Sending documents in doc types is just incorrect.

@lakshmana said in .Exe to .msi:

@ndc Any links ?

Seriously? You were given viable options and you chose to respond about a piece of dead software that was likely purposefully killed off?

So there's two things here. 1) Did you resize the volume with LVM or just resize the disk with Hyper-V? 2) If you resized with LVM, you might have to do a partprobe to get the system to see the changes, but the reboot should have handled that.

Here's the commands you need for LVM:

pvresize /dev/<whatever the data volume is> 

lvextend  -r -l 85%FREE /dev/mapper/vol_data1-lv_data

The -r will automatically resize the file system.

I usually leave space at the end for things like snapshots if needed which is why I put 85%.

I'm running openstack at home. So yes I'm running cloud. I still have a bare KVM server at home also and if I need to run a VM I use virt-builder, create the VM, and get the address with virsh. Then I just run Ansible against it.

In case anyone wants it. Haven't tested it on anything other than RHEL/CentOS/Fedora.

https://gitlab.com/hooksie1/ansible-hardening.git