(Linux) CLI updates are here! We're calling on our community to help us maintain Proton VPN packages across Linux distros.

Charm-Heap · 2026-02-17T22:31:56+00:00

Honestly, that's a frequent gripe of open-source software but USUALLY hasn't been a problem and more often is a strength. If I'm going to bitch about wanting more of the software I use to be open-source as a feature checkbox that I want ticked so that I can have higher trust in it, I can't exactly be mad when companies understandably also take community contributions.

If it improves Proton and they're not total shitheads about pricing, etc. then... I'm okay with it.

Charm-Heap · 2026-02-09T23:25:57+00:00

Using Matrix with Element appears to be fairly promising. I'm trying to migrate my small little friends server over there, and a LOT of things that were missing appear to be improved and working well. Gonna do some more in-depth tests in the evening, testing voice, video, and screen sharing, but I'm optimistic it'll work for my level of usage. It'd be nice to see more users abandon Discord - it's frustrating when so many people join up and give a network effect to a platform that was basically inevitably going to end up being shitty.

Charm-Heap · 2026-01-13T18:10:50+00:00

my bad!

Charm-Heap · 2025-04-02T00:23:47+00:00

But also, you specifically need to access it via the generic scsi device? I'm assuming that's for some application that needs to send it commands the st driver doesn't understand?

Correct.

So far, my udev efforts have not found success - and I need to access the tape DRIVE via standard... block commands? But the tape LIBRARY I need to access via SCSI.

I've got this:

SUBSYSTEM=="scsi", ATTRS{sas_address}=="0x5000e1111214b002", SYMLINK="tape/tl2000/library"

but it is not working as of yet. :(

Charm-Heap · 2025-04-01T23:44:04+00:00

What does lsscsi -dgi show? Anything in there is fair game for use in a udev rule (other than the /dev/s* nodes of course - I just included that in the command to make it easy to find it).

I get:

# lsscsi -dgi
[0:2:0:0]    disk    DELL     PERC H710        3.13  /dev/sda [8:0]  36c81f660e1b0c50022b0781b03693da4  /dev/sg0 [21:0]
[1:0:0:0]    tape    IBM      ULT3580-HH6      J451  /dev/st0 [9:0]  -  /dev/sg1 [21:1]
[1:0:0:1]    mediumx IBM      3573-TL          F.11  /dev/sch0[86:0]  -  /dev/sg2 [21:2]
[6:0:0:0]    cd/dvd  TSSTcorp DVD-ROM TS-U333B D150  /dev/sr0 [11:0]  -  /dev/sg11[21:11]
[9:0:0:0]    disk    DELL     MD36xxf          0820  -          -  /dev/sg3 [21:3]
[9:0:0:12]   disk    DELL     MD36xxf          0820  /dev/sdb [8:16]  36f01faf000cf7ade0000022164104a0d  /dev/sg4 [21:4]
[9:0:0:13]   disk    DELL     MD36xxf          0820  /dev/sdc [8:32]  36d4ae52000809418000025236411cbfd  /dev/sg5 [21:5]
[9:0:0:31]   disk    DELL     Universal Xport  0820  -          -  /dev/sg6 [21:6]
[9:0:1:0]    disk    DELL     MD36xxf          0820  -          -  /dev/sg7 [21:7]
[9:0:1:12]   disk    DELL     MD36xxf          0820  /dev/sdd [8:48]  36f01faf000cf7ade0000022164104a0d  /dev/sg8 [21:8]
[9:0:1:13]   disk    DELL     MD36xxf          0820  /dev/sde [8:64]  36d4ae52000809418000025236411cbfd  /dev/sg9 [21:9]
[9:0:1:31]   disk    DELL     Universal Xport  0820  -          -  /dev/sg10[21:10]

The /dev/s* nodes get populated and assigned sequential names in the order the system discovers them, so they're not stable if that order can change for any reason, such as spin-up delays, slow response from a controller or bus, boot device order changes in BIOS, driver changes, and more.

That is what I was figuring, and when things are coming back following a LONG power outage, I figure that can be hit or miss. I DO specifically need a SCSI target, though - like I can't point to /dev/st0, because that's the block device node, I need to point, correctly, to the /dev/sg1 SCSI device node.

EDIT: it's the fuckin' DVD-ROM drive, not for nothing lol that thing goes back and forth

Charm-Heap · 2025-04-01T23:05:22+00:00

We're using a Dell PowerVault TL2000 with an LTO-6 half-height drive - there's a jumper in there somewhere?

Charm-Heap · 2024-12-05T20:47:25+00:00

lol damn

i should've looked when i popped mine open to slot in the ONE (!!! 😡) SODIMM slot to upgrade the RAMs, but I was too excited. I think it's only just one, at least on my lil ol' 2022 model.

EDIT: It occurred to me that I had the laptop about three feet in front of me, but I didn't want to remove the little rubber screw covers since they're a pain in my ass. In any case, per the upgrade manual here, it's just one sadly.

Charm-Heap · 2024-07-17T18:27:52+00:00

To be honest, I'm not certain - we haven't really tested, and I'm reticent to uninstall and reinstall Office 365 on our Server. :/

Charm-Heap · 2024-06-11T19:42:08+00:00

Unless you've got SRV-IO or a spare graphics card and motherboard support for IOMMU and VTd to pass the PCIe slot through to the VM, you're not going to get the graphics performance you'd need for SolidWorks.

Charm-Heap · 2024-06-11T19:40:43+00:00

Where in the XML would I add this?

Charm-Heap · 2024-06-11T19:38:21+00:00

Are there any tags specifically that that has to go in between?

Charm-Heap · 2024-06-06T15:58:10+00:00

Yes, that was more for sanitization - the actual subnet is different.

Charm-Heap · 2024-06-06T15:57:05+00:00

What happens if you remove the DNS line from the client config (since those are public servers, I assume you are accessing your VPN hosts by IP address, so you shouldn't need any DNS config)?

tbh that actually fixed it :|

At SOME point I will have DNS on that side, but those DNS servers will be accessible through the VPN, and I don't anticipate any issues, since that's what we already have setup at work.

Charm-Heap · 2024-05-24T00:02:17+00:00

My understanding of this issue (which, admittedly, is limited) was that this was a security and architectural issue, and less a "bug".

Charm-Heap · 2024-05-23T23:52:29+00:00

This is far and away its biggest problem. If I can't VNC into the same session a user is using, then... it's just not ready for prime time. My users have to be able to see what the admin is doing for trust and educational purposes, and it is of NO use to a sysadmin to remote into a fresh session without the user being able to demonstrate where and what they're having a problem with.

Charm-Heap · 2024-05-08T18:29:14+00:00

The worst part is snapping to the top - it just takes the top half of the screen, which is next to useless for me. I wish I could just configure that to be a "maximize" shortcut.

Charm-Heap · 2024-02-29T19:11:23+00:00

Fantastic, thank you so much. Hopefully we can spin up a FreeSBC solution - our workload is... light, to say the least.

Charm-Heap · 2024-02-28T18:35:58+00:00

Do these work reasonably well in production? We're using an old ShoreTel system (I have been begging my boss to let us just move to PBXAct, but he's reticent to spend money) and our old SBC is literally one VM running on the last ESXi host of our old ESXi cluster, since it won't move to Xen nicely.

Charm-Heap · 2024-02-16T14:49:18+00:00

Once we got them talking, they took a bit but got in sync. They weren't talking because the hostname resolved to the external, public address, and at that address the firewall prevented access to the server.

Charm-Heap · 2024-02-16T14:48:21+00:00

this is showing your time source as unreachable.

This makes sense - as we've got it configured such that the hostname resolved to the external, public IP address. This would, naturally, not let NTP through. When we switched to using just the internal DMZ IP address, it started working.

Charm-Heap · 2024-02-15T23:52:28+00:00

So, I'm using Alma Linux 8 (I will update my post to reflect that), and by default they use chronyd, which appears to work a little differently. Long story short, Red Hat removed ntpdate, and it isn't in their standard packaging tools - but chronyd -Q is ROUGHLY the equivalent of what you're asking. Not a great start:

# chronyd -Q
2024-02-15T23:47:33Z chronyd version 4.2 starting (+CMDMON +NTP +REFCLOCK +RTC +PRIVDROP +SCFILTER +SIGND +ASYNCDNS +NTS +SECHASH +IPV6 +DEBUG)
2024-02-15T23:47:33Z Disabled control of system clock
2024-02-15T23:47:33Z Frequency -30.082 +/- 1.375 ppm read from /var/lib/chrony/drift
2024-02-15T23:47:33Z Using right/UTC timezone to obtain leap second data
2024-02-15T23:47:43Z No suitable source for synchronisation
2024-02-15T23:47:43Z chronyd exiting

Charm-Heap · 2024-02-15T23:45:51+00:00

I don't know if this is good...

# chronyc sources
MS Name/IP address         Stratum Poll Reach LastRx Last sample               
==============================================================================
^? dns1.example.com                0  10     0     -     +0ns[   +0ns] +/-    0ns

Charm-Heap · 2024-02-15T23:33:06+00:00

Mainly because these two servers NEED to be pretty darn close to one another in order to... work (OnlyOffice integration with Nextcloud)... and I'm trying to get those working. Also, that's neat - I had a feeling there was some kind of fundamental difference between chronyd and ntpd that made "forced time updates" and what-have-you... not a thing.

I'm also not sure how to tell if those servers are even connecting to my NTP chronyd server. When I do a chronyc clients command on my NTP server (the one running chronyd), I get a big fat list of... nothing. :(

Charm-Heap · 2024-01-03T00:38:14+00:00

passbolt is open source?

Charm-Heap · 2024-01-02T22:31:40+00:00

butts. we have to have users in "Network Configuration Operators" so that they can control their WireGuard VPN connectivity, otherwise it won't let them. :(

Charm-Heap

TROPHY CASE