I usually only backup files to it with #rsync or #scp but whenever I want to browse I use sometimes use #smb and wonder if #nfs would be better to do so.
Also #TIL, you could connect to a remote #SMB share right from the native Files app on your #iPhone. Did just that and copied over some BIOS files and ROMs, now I'm off to the races.
#Kubernetes/#K8S Q: I've been having an issue all this while I haven't quite been able to tackle. How do I properly mount a #Samba/#SMB/#CIFS share in a #Docker container on Kubernetes?
I definitely don't want a method that does any "pass through" outside of the container such as mounting said share on the Kubernetes node then passing it to the container, since that seems quite hacky and the deployment/pod could easily be reassigned to a different node.
Update: I've found #csi-driver-smb which seems to be perfect for my needs, and even a video of someone deploying it to their cluster for #Jellyfin.
I've deployed it successfully to my #Kubernetes cluster pretty easily, and am attempting to achieve the same thing but on #Plex rather than Jellyfin. Ran into another obstacle tho, while it seems that my #TrueNAS#SMB share is mounted to the container (shows up in df -h), my root user in the container could not ls the mount point (i.e. /mnt/smb), it'd just return the Permission denied error. Weird thing is the root user could cd into the mount point and its existing subdirectories, but not ls them or write any files to them. I could cat files inside it though, funnily enough.
the PV for said PVC has mounting options included in csi-driver-smb's example including dir_mode=0777, and file_mode=0777, with minor changes such as uid=1001 and gid=1001 I've updated them to 0, which is the uid and gid of the root user. I've even tried updating them to 1000 which is the id of the user plex, but still with the same results.
Anyone have any clue why I'm getting the permission denied error?
The #SMB share could be accessed (ls-ed) directly on the worker node:
sudo ls -alZ /var/lib/kubelet/plugins/kubernetes.io/csi/smb.csi.k8s.io/{volume}/globalmount
-but not on the container itself. The fix is, the worker nodes (with SELinux) needs the boolean, virt_use_samba to be enabled. On the worker node, check if it is indeed disabled:
I’m looking to hire a Principal Threat Intelligence Analyst here at @huntress . You’ll get to build a new program focused on the small business space (those that fall below the cybersecurity poverty line). Please feel free to reach out to me if you have questions or think you might be a good fit:
Is there anyone who uses a hardware #hifi component to #stream#music files from a #server or #nas in your network (using protocols like #smb or #upnp#dlna) to your amplifier? If so, what are you using and what are you experiences? I would like to have a chat about this matter and it would be nice to make an overview of different solutions with exact features (and bugs!) because this information is almost impossible to find. #streaming
Just realized it isn't S3 storage what I potentially need for the #Peertube instance I might want to host but that other service thingy for improved bandwidth. 🙃
If there are any CIFS/SMB experts floating around, does it seem accurate or absurd that deleting a file in a folder tree has a different effect on the timestamps of the folders "above" it than deleting a folder?
If dir1/dir2/dir3/dir4/hello.txt is the structure, dir1 is "above" dir3.
Additionally, starting with Windows 11 Insider Preview Build 25951, administrators can configure systems to automatically block sending NTLM data over SMB.
Someone I am mentoring asked me a profound question, and @SecureOwl had the best way to teach.
"do you have a best practice on how do a very basic risk assessment of third party applications / software?"
MSPs rely on services, and risk assessments for SaaS are always something that has to be done both for clients and internally.
Mike's methods do not change the need for detailed vendor reviews, but it can help a security practitioner do qualitative research quickly in small, move-fast environments.
Please keep in mind that my 139th Patreon subscriber will have the great benefit of putting "139th Patron of Low Quality Facts" on their resume. Employers will look at this and think "Oh wow, 139 is my favorite number. They must be a wonderful person. Let's put them on the payroll but not make them do any actual work, for our company will simply benefit from their wonderful presence". https://patreon.com/lowqualityfacts
@lowqualityfacts 139 was every '90s script kiddie's favorite number. The Winnuke attack required the victim to have an open #TCP port, and every #Windows95 machine had port 139 (#SMB file sharing protocol) open by default. So, connect to port 139, send some bogus packets, and boom, the victim's computer immediately goes #BSOD.
#AMD Launches The #EPYC8004 "Siena" 4th Gen #EPYC Processors Review
Overall the EPYC 8004 series "Siena" processors are quite interesting and open up Zen 4(C) EPYC to new markets at lower price points and TDPs than what is targeted by Genoa. Siena is very complementary to Genoa(X) and Bergamo and fills a nice void between them and then AMD #Ryzen for more budget-minded and #SOHO/#SMB#server deployments. https://www.phoronix.com/review/amd-epyc-8004-linux
Amazing, soon we will have the Super Mario Bros equivalent to Sonic 3 AIR as it requires the actual SMB rom to work. And comes with the usual additions, like multiplayer and widescreen support. Too good.