Bartosz Maciejewski - PRO-IT Rocks! (Page 2)

XCP-NG LACP bonding - 4Gb/s with Cisco 3750X

As I wrote some time ago here [https://pro-it.rocks/pseudo-failover-internet-controlled-by-homeassistant-and-zigbee-socket-using-asa5520/] , I've got new server to host all my internal servers and services, especially, home automation, lots of monitoring tools, space for files, vpn tunnels and many more. I have choosen this server [https://www.supermicro.com/products/system/1U/

homeassistant

Home Assistant Energy Management in 2021.8.0 not showing all devices with power monitoring (zigbee2mqtt)

In newest release [https://www.home-assistant.io/blog/2021/08/04/release-20218/] of Home Assistant there is cool new feature called Energy Management which adds dedicated dashboard when you can monitor all your devices that can do such measurment, mostly smart sockets. This should work out of the box, and

cisco

Pseudo internet failover controlled by HomeAssistant and zigbee socket using ASA5520

This might look a little too complicated for its purpose, but it actually works quite very well. Recently I've migrated all standalone machines tu new server based on low voltage Atom C2758 CPU (8 core, 20W). Hypervisor of my choice is XCP-NG, as this was the easiets method to get

netbsd

Server refused to allocate pty (NetBSD PV guest but probably related to PV Linuxes as well)

If you faced this kind of error on your terminal login as: **** Keyboard-interactive authentication prompts from server: | Password for ****@hostname.tld: End of keyboard-interactive prompts from server Server refused to allocate pty especially often in PV guest of XEN this means that there are no available terminals you can be

netbsd

Zabbix on NetBSD with IPMI (+ some info of recent changes in pkgsrc)

Finally on -CURRENT branch, and probably carried on to pkgsrc-2020Q4 there is new Zabbix port with version 5.0.6, and now also because openipmi came to pkgsrc (previously only ipmitool was available) can be compiled with IPMI support! With -current and future branches there is another change coming. As

apache

Apache with reverse proxy for nodejs website with LetsEncrypt and DNS verification

I couldn't get my website https://odlicznik.pl/ obtaining certificate with certbot both with --apache plugin and certonly option as well. First method failed because certbot somehow couldn't find vhost in httpd-vhost.conf (which is included in httpd.conf) certbot-3.7 --apache --apache-ctl /usr/pkg/sbin/apachectl --apache-server-root /usr/pkg/

centos

How to migrate paravirtualized DomU CentOS from XEN NetBSD Dom0 to XCP-NG

Recently I had to migrate all machines from old R520 Dell Server running very dated XEN installation on NetBSD as Dom0. Here is uname from it: # uname -a NetBSD hostname.hostname 6.99.24 NetBSD 6.99.24 (XEN3_DOM0) #0: Wed Oct 2 09:54:05 UTC 2013 builds@

cisco

Cisco Switch: Power Controller reports power Imax error detec ted

One of my IP cameras stopped working. It is PoE camera, so I restarted its port on my Cisco Catalyst 3750X switch, but that did not help. Looking at logs shown repeted error: May 1 23:35:37.769: %ILPOWER-7-DETECT: Interface Gi1/0/6: Power Device detected: IEEE PD May

microsoft

Auditing files on Windows Server

Recently some files went missing in very strict environment with all groups and rights made just right. Thing is, despite users, also third party program could modify files as well. Long story short - yes, it was that particular program that when changed some aspects in his own engine it

netbsd

NetBSD LVM disk extend

Recently I filled up all space for mails placed in LVM on NetBSD VM running in Xen (XCP-ng) environment. Filesystem Size Used Avail %Cap Mounted on /dev/mapper/varmailvg-virtuallv 984G 860G 74G 92% /var/mail/virtual There is still some free space, but this FS already started sending alerts.Xen

tasmota

Tasmota - prawidłowe ustawienie strefy czasowej

Prawidłowe ustawienie strefy czasowej w oprogramowaniu Tasmota dla Sonoff nie jest oczywiste, ponieważ w panelu firmware nie znajdziemy do niego ustawień. Dodatkowo, ustawienie strefy czasowej zgodnie ze standardem GMT/UTC spowoduje, że ustawienia DST i STD nie będą działać. Jak to zatem prawidłowo ustawić? Logujemy się do panelu tasmoty i

Upgrade NetBSD to 9.0

One of the best thing in NetBSD world is that is so well written that I'm still using same upgrade process as I was using in time when 1.6 was released. And now I will use it again to upgrade machine on which this blog sits from 8.0

Incorrect Password on Apple iOS devices with Ubiquiti APs

Yesterday I was reconfiguring my Wi-Fi network with settings like strenght of signal, channel which AP should transmit etc. After work has been done. All iPhones couldn't connect to long known network. Even after forgetting network in the device I was unable to connect again. Typing password always gave the

Server refused to allocate pty (NetBSD DOMU case)

When using NetBSD as DomU PV guest you can stumble upon this message when trying to connect via ssh: login as: root Keyboard-interactive authentication prompts from server: Password for root@server: End of keyboard-interactive prompts from server Server refused to allocate pty This is because of no more available terminals

ghost

Instalacja i update Ghost oraz drobne problemy z wersjami node.js pod NetBSD z pkgsrc 2019Q4

Pro-it.rocks działa pod kontrolą "bezgłowego" CMSa Ghost [https://ghost.org/]. Do jego działania potrzebny jest serwer nodowy node.js [https://nodejs.org/en/] oraz serwer www serwujący aplikację JavaScript na świat. Do zarządzania pakietami służy manager npm a sam Ghost posiada własne cli ułatwiające pracę z nim. Jeżeli środowisko

sysadmin

Odzyskiwanie utraconego hasła Administratora w Windows Server 2016 zainstalowanego na UEFI

Odzyskanie/zmiana hasła do Windowsa, także serwerowego przy fizycznym dostępie do maszyny jest trywialne. Ot, uruchomić z ISO NTPASSWD poszukać partycji z Windowsem oraz konta do odblokowania i postępować zgodnie z instrukcjami na ekranie. Problem może pojawić się w przypadku instalacji Windows Server nie jako LEGACY/BIOS a jako UEFI.

sysadmin

A+ w Qualys SSLLABS z certyfikatem LetsEncrypt (luty 2020)

Wynik 80% w https://www.ssllabs.com/ zapewnia już ocenę A, ale żeby dostać A+ trzeba dokonać kilku modyfikacji w samym certyfikacie oraz ustawieniach apache Po pierwsze klucz musi mieć minimum 4096 bity: certbot-3.7 certonly --standalone --rsa-key-size 4096 -d pro-it.rocks -d www.pro-it.rocks Po drugie trzeba opublikować

sysadmin

iDrac 6 KVM Launcher

iDrac w serwerach takich jak Dell Power Edge R710 ma już swoje lata, i na najnowszej Javie nie chce działać. Dotychczas, można było zainstalować starszą Javę w wersji 7, obniżyć Security w Panelu Starowania, dodać URL do zaufanych i działało. Ostatnio jednak, przy próbie uruchomienia wirtualnej konsoli serwera, efektem był