OpenSSL

Source: https://www.ibm.com/docs/en/runbook-automation?topic=certificate-generate-root-ca-key This is for experimentation/tinkering/lab, not production. Using proper certs from the start of a project is good practice so even if this is insecure. There is the -passin file:password.txt option...

Installing pfSense

Had problem installing pfSense 2.7.x from a usb device (memstick); waiting for cam usbus0 Had to find an older version (2.6.0, iso) to install, 2.6.0->2.7.0->2.7.2.

More Ubuntu and zfs

Check the number of snapshots, remove the oldest five. df -h /boot zfs list -r -t snapshot -o name,used,referenced,creation bpool/BOOT zfs list -H -r -t snapshot -o name,used,referenced,creation bpool/BOOT | head -n...

Jenkins – New user

Going to try this… https://gist.github.com/hayderimran7/50cb1244cc1e856873a4 This is a snippet that will create a new user in jenkins and if security has been disabled , it will enable it 🙂 Bonus: Add the...

Ubuntu and zfs

zsysctl show zsysctl state remove rpool/USERDATA/root_b59r4f@autozsys_vbqrly zsysctl state remove –system rpool/ROOT/ubuntu_3r65wz@autozsys_zi8elu zsysctl state remove –user username rpool/USERDATA/username_b59r4f@autozsys_x3699x Hope I got things the right way. Got a message stating that there isn’t enough...

CUDA – Compute Unified Device Architecture

sudo apt remove –autoremove nvidia-* Remove any cuda related from /etc/apt/sources.list.d/ sudo add-apt-repository ppa:graphics-drivers/ppa sudo apt update sudo apt install nvidia-driver-525-server sudo apt -y install nvidia-utils-525-server sudo apt -y install nvidia-settings sudo...

openssl – what a… something

This took way to long to solve. A good guide but… https://networklessons.com/uncategorized/openssl-certification-authority-ca-ubuntu-server Remember to enable this: copy_extensions = copy Otherwise you’ll spend an eternity trying to figure out what is wrong. And...

Mail server; dovecot, postfix etc

sudo apt -y install dovecot-core dovecot-imapd dovecot-pop3d postfix sasl2-bin sudo adduser postfix sasl systemctl restart saslauthd systemctl restart postfix /etc/postfix/sasl/smtpd.conf pwcheck_method: saslauthd mech_list: plain login And of course there’s a lot more...

pfsense

Port forward works only on interface with default gateway, does not work for alternative wans (CE Only)https://redmine.pfsense.org/issues/11805

unifi

# unifi cloud key plus 2.0.x # Updated with web gui for all services under one single port (443). Fantastic! # (Not explaining how to generate certificates here.) cp /data/unifi-core/config/unifi-core.crt /data/unifi-core/config/unifi-core.crt.bak cp...

Turning off automatic upgrades

I’m using other tools for checking and upgrading so… $ sudoedit /etc/apt/apt.conf.d/20auto-upgrades From... APT::Periodic::Update-Package-Lists "1"; APT::Periodic::Unattended-Upgrade "1"; ...to... APT::Periodic::Update-Package-Lists "1"; APT::Periodic::Unattended-Upgrade "0"; ...or... APT::Periodic::Update-Package-Lists "0"; APT::Periodic::Download-Upgradeable-Packages "0"; APT::Periodic::AutocleanInterval "0"; APT::Periodic::Unattended-Upgrade "0";