matthew, to sysadmin
@matthew@social.retroedge.tech avatar

Question on the PHP glibc vulnerability:

Does anyone know a blog post or other documentation for how to turn off the character set that allows the vulnerability in Ubuntu and Debian?

Here's a good blog post by Rocky Linux on the subject, but I'm not sure how to translate the instructions to Debian and Ubuntu.

https://rockylinux.org/pt_BR/news/glibc-vulnerability-april-2024/?language=en

elfin, to sysadmin
@elfin@mstdn.social avatar

So, it's technically my typo, but it's in the zone file, so I still get to blame ... right?

Nils, to sysadmin French

Amusons-nous encore : le sujet du jour peut se deviner avec la photo. Pour avoir la réponse, va sur twitch.tv/ahp_nils

stefano, to sysadmin
@stefano@bsd.cafe avatar

✅ Install software... done
✅ Create administrative user... done
✅ Set complex random password... done
✅ Enable 2FA... done
✅ Log out to test 2FA... done
✅ Realize didn't save complex password in password manager... do...
🤦‍♂️ D'OH!

25admins, to Podcast
@25admins@fosstodon.org avatar

2.5 Admins 192: ZFS Week

ZFS on root is back in the Ubuntu installer but there’s a better way to do it, next-generation hard drives are proving to be reliable but prices are going up thanks to storage-hungry AI, why getting started with ZFS is really easy, and the best filesystem for a single SSD (take a guess).

https://2.5admins.com/2-5-admins-192/

mwl, to sysadmin
@mwl@io.mwl.io avatar

"Run Your Own Mail Server" Kickstarter pre-launch page now up.

https://mwl.io/archives/23561

stefano, to proxmox
@stefano@bsd.cafe avatar
nixCraft, to linux
@nixCraft@mastodon.social avatar

Ah, the sweet smell of a production Linux container image… generously seasoned with sshd and a whole host of unwanted services you definitely didn't need. If only my "if" statements were as reliable as my morning coffee. Lmao.

Seinfeld gif: Not good, I'm a moran.

mwl, to sysadmin
@mwl@io.mwl.io avatar

holy crap, it seems I'm stoned enough to understand Kickstarter instructions that I had been staring at for five days!

https://www.kickstarter.com/projects/mwlucas/run-your-own-mail-server

If you have any interest, please follow. KS algorithms kick in once I have ten followers.

There's also https://mwl.io/ks

status_updates, to infosec

We've doubled our security measures to 50ml, so now our sysadmin's hands are steady.

#infosec #security #sysadmin

stefano, to sysadmin
@stefano@bsd.cafe avatar

This morning, a colleague (a sysadmin who works exclusively on Red Hat) needed to quickly create a VM for a reverse proxy. Among the requirements:

Minimal, only for nginx
Root file system on btrfs (I don't know why, but it's their internal policy)
Be online ASAP

I swiftly installed Alpine Linux for them. With just two commands, I set up the root on btrfs and got the setup running. Within a minute, the VM was up; in ten seconds, nginx was installed, and within two minutes, it was configured.

They were amazed by the speed and lightness of it all, as well as the updated kernel.

Alpine Linux remains, in my opinion, an excellent and flexible solution in the Linux environment.

#AlpineLinux #SysAdmin #VM #Efficiency #Linux

fell, to sysadmin
@fell@ma.fellr.net avatar

On my machines, I have begun to disable SSH on IPv4 and replaced it with a tarpit instead. :drgn_comfy_evil:

#SSH #SysAdmin #Tarpit #EndlesSSH

stefano, to linux
@stefano@bsd.cafe avatar
matthew, to sysadmin
@matthew@social.retroedge.tech avatar

Reminder:

Check to make sure your data backups are working as they should.

#backup #data #selfhost #sysadmin

coco, to linux

J'ai quand même un peu galéré à mettre ça en place, donc j'ai fait un pense-bête-tuto : recevoir les mails adressés à root ou autre user dans ma boîte mail personnelle. J'ai testé sur 3 machines différentes, ça a marché directement sur les 3

wiki.corentin.eu/books/aja/page/configurer-exim4-sous-debian-pour-recevoir-les-mails-du-systeme-sur-sa-propre-boite-mail

blogdiva, to Futurology
@blogdiva@mastodon.social avatar

a couple of question for the geeks:

  1. are people really using SSDs as external drives?

  2. are they worth as a backup media or should we stick to hard drives for that?

thomas, to sysadmin
@thomas@metalhead.club avatar

In case your Icingadb complains about "unexpected database schema version: v2 (expected v3)"

Run this:

$ sudo -u postgres psql icingadb < /usr/share/icingadb/schema/pgsql/upgrades/1.2.0.sql
$ sudo systemctl restart icingadb

nixCraft, to debian
@nixCraft@mastodon.social avatar

How to configure AWS SES with Postfix MTA on 11/12

https://www.cyberciti.biz/faq/howto-configure-aws-ses-with-postfix-mta-on-debian-linux/

This is something work demands. At a personal level, you don't need this.

25admins, to Podcast
@25admins@fosstodon.org avatar

2.5 Admins 191: Mechanical Turk

Why updating iPhones in their sealed boxes might have some downsides, Amazon’s “AI” turned out to just be people, LLMs hallucinating imaginary dependencies is potentially a security risk, Aruba backs up its government data to the Internet Archive, and disk queue schedulers in Linux.

https://2.5admins.com/2-5-admins-191/

mboelen, to linux
@mboelen@mastodon.social avatar

I'm working on a cheat sheet for #AWK. This nifty tool is easily overlooked, but so powerful that it really made me invest more time into learning it.

The initial version of the cheat sheet is available and ready for feedback: https://linux-audit.com/cheat-sheets/awk/

Boosts would be appreciated, and feedback even more!

What are your AWK one-liners that others really need to know and should be included?

Special thanks to @DopeGhoti

#linux #sysadmin #automation #shell

osjobhub, to sysadmin
@osjobhub@fosstodon.org avatar

On a mission to promote and defend digital privacy, @calyxinstitute is seeking applicants for Senior Systems Developer positions. Learn more and apply now on https://opensourcejobhub.com/job/15037/

coco, to sysadmin

Comment je peux faire avec nginx pour avoir un bloc server par défaut pour chaque domaine, avec HTTPS ?

Je sais pas si vous comprenez la question, en gros il me faudrait plusieurs blocs de ce type :

server {
  listen 443 default_server ssl;
  listen [::]:443 default_server ssl;
  server_name _;

  return 444;
}

Le problème si je fais ça, c'est que je dois spécifier un certificat d'un seul de mes domaines, donc les autres domaines afficheront une erreur HTTPS

Cimer !

jhx, to sysadmin
@jhx@fosstodon.org avatar
jhx, to Shelly
@jhx@fosstodon.org avatar

Fun in the morning....
My two plugs just went out - server rack and desktop.
I don't have a clue why they failed, let alone both at the same time.
The only thing that comes to mind is that there was a firmware upgrade....
fun for sure 😂

stefan, to accessibility
@stefan@stefanbohacek.online avatar

Hm. I wonder if I can get any fediverse admins onboard to disable all images on their instance on the World Sight Day in October, so that only alt text shows up.

https://en.wikipedia.org/wiki/World_Sight_Day

stefan,
@stefan@stefanbohacek.online avatar

I think I figured out the folder permissions to pull this off?

Not much luck with the nginx config though, would really appreciate some help.

https://gist.github.com/stefanbohacek/ca85adc8a22311094c9f219e3b899583

  • All
  • Subscribed
  • Moderated
  • Favorites
  • provamag3
  • InstantRegret
  • mdbf
  • ngwrru68w68
  • magazineikmin
  • thenastyranch
  • rosin
  • khanakhh
  • osvaldo12
  • Youngstown
  • slotface
  • Durango
  • kavyap
  • DreamBathrooms
  • JUstTest
  • tacticalgear
  • ethstaker
  • cisconetworking
  • modclub
  • tester
  • GTA5RPClips
  • cubers
  • everett
  • normalnudes
  • megavids
  • Leos
  • anitta
  • lostlight
  • All magazines