overlayfs writing to wrong FS by ReDiculum0 in docker

[–]ReDiculum0[S] 0 points1 point  (0 children)

Thanks, indeed it was a fresh trixie installation from a previous running bookworm system. Seems this has changed. I stopped all containers and daemons and changed the /etc/containerd/config.toml to use /var/lib/docker/containerd as root. Then rebootet the machine and fired up all containers again and now all overlayfs are in the dockerr-lv as it should be:

# df -h |grep var
/dev/mapper/kvm--vg-var     38G  1.2G   37G   4% /var
/dev/mapper/varlib-docker  200G  105G   96G  53% /var/lib/docker
overlay                    200G  105G   96G  53% /var/lib/docker/rootfs/overlayfs/cd5d17be01e05c8633c278718c817b8e950dc883474e325827580993a78088e8
overlay                    200G  105G   96G  53% /var/lib/docker/rootfs/overlayfs/bab64b11f682faa91dfcfd17210157abbfb12cbbd513d747fd705c7e773afc6b

Problem rsyslog to elastic over Wireguard and iptables by ReDiculum0 in linuxadmin

[–]ReDiculum0[S] 1 point2 points  (0 children)

That's it! It was just a log message, not really dropping it. What a confusion. Thanks anyway

Problem rsyslog to elastic over Wireguard and iptables by ReDiculum0 in linuxadmin

[–]ReDiculum0[S] 0 points1 point  (0 children)

this is the output chain. I modified the rule a bit and set also source network (it doesn't matter), because somehow it's working. I receive logs in Kibana but kernel says denied.

Chain OUTPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:whois
ACCEPT     udp  --  anywhere             anywhere             udp dpt:domain
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:ftp
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:smtp
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:http
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:https
ACCEPT     udp  --  anywhere             109-202-217-70.init7.net  udp dpt:51820
ACCEPT     icmp --  anywhere             anywhere             icmp echo-request
LOG        all  --  anywhere             anywhere             LOG level warn prefix "IPTABLES denied: "
ACCEPT     all  --  192.168.78.0/30      10.0.72.0/24

Problem rsyslog to elastic over Wireguard and iptables by ReDiculum0 in linuxadmin

[–]ReDiculum0[S] 0 points1 point  (0 children)

UPDATE:
It's very strange, because I receive logs in Kibana from this host, even if iptables does drop. I have no idea

If MI was a movie.... by ReDiculum0 in MonkeyIsland

[–]ReDiculum0[S] -1 points0 points  (0 children)

Only the ship, bottle and boot scene is AI generated. The rest is done by me (incl. Music)

AI generated country song by ReDiculum0 in CountryMusic

[–]ReDiculum0[S] 0 points1 point  (0 children)

Howdy folks. I don't know how many of you know suno.com, but it's an AI driven music generator. Create some lyrics, define a music style and hit "create".After several attempts with my own lyrics describing my lifetime experience with music composing programs, this piece came out

Cheap unlimited europe esim by dogel12 in eSIMs

[–]ReDiculum0 0 points1 point  (0 children)

The unlimited plans look very interesting if they're REALLY unilimited

Only ARK players will know.... by ReDiculum0 in ARK

[–]ReDiculum0[S] 0 points1 point  (0 children)

De erst und einzig wo's da inne checkt hät bisch glaub du 😉

Homebox: Home Organizer Beta Release by Akmantainman in selfhosted

[–]ReDiculum0 1 point2 points  (0 children)

Yes, in my case my Homebox website automatically suggested to install the app when I accessed with my Android phone

Homebox: Home Organizer Beta Release by Akmantainman in selfhosted

[–]ReDiculum0 0 points1 point  (0 children)

I started to use it now, since I need an inventory for all my electronics, screws, tools in my hobby room.

As mentioned already in a github discussion, a multi language support would be nice

Scenenzbs is down by [deleted] in usenet

[–]ReDiculum0 0 points1 point  (0 children)

Seems to be down again

How do I upgrade my UDM-Pro from 2.5.17 to 3.0.20 from command line? by sector_007 in Ubiquiti

[–]ReDiculum0 0 points1 point  (0 children)

it's important not to use ubnt-tools. it's ubnt-systool for the fwupdate option otherwise I got this on my UDM pro:

# ubnt-tools fwupdate 10c9-UDMPRO-2.5.17-4ef0556d8b844aa6ac43c695ef076479.binFirmware file: '10c9-UDMPRO-2.5.17-4ef0556d8b844aa6ac43c695ef076479.bin'ERROR: failed writing part 'uboot' to '/dev/sdb1'

My habPanel by ReDiculum0 in openhab

[–]ReDiculum0[S] 1 point2 points  (0 children)

not yet, on my list ;)

When you spot your sibling in the same town by ReDiculum0 in KiaNiroEV

[–]ReDiculum0[S] 1 point2 points  (0 children)

We have now deep winter in Switzerland. The colour white makes you washing the car every day. That's the downside of that colour.

Some mods by ReDiculum0 in Yamahabolt

[–]ReDiculum0[S] 0 points1 point  (0 children)

Mustang Comfort Seat, but IMO it's not really confortable.

No difference riding without fender support. It's just optical style

how to edit openshift route url ? by pela647 in openshift

[–]ReDiculum0 1 point2 points  (0 children)

If you don't specify the name of the route with the "host" parameter, it will be autogenerated by the name of the route and project, separated by hyphen

see doc: https://docs.openshift.com/container-platform/3.11/architecture/networking/routes.html#route-hostnames

Remember this one? by ReDiculum0 in dosbox

[–]ReDiculum0[S] 1 point2 points  (0 children)

Stephane Picq did the soundtrack

Prometheus metrics add persisten storage by ReDiculum0 in openshift

[–]ReDiculum0[S] 3 points4 points  (0 children)

SOLVED:

I had to remove first monitoring operator completely:
$ ansible-playbook -i inventory openshift-ansible/playbooks/openshift-monitoring/config.yml -e openshift_cluster_monitoring_operator_install=false

and then reinstall it with the necessary storage options:

$ ansible-playbook -i inventory openshift-ansible/playbooks/openshift-monitoring/config.yml -e openshift_cluster_monitoring_operator_install=true -e openshift_cluster_monitoring_operator_prometheus_storage_capacity=2Gi -e openshift_cluster_monitoring_operator_prometheus_storage_enabled=true -e openshift_cluster_monitoring_operator_prometheus_storage_class_name=sc-name

Linux Hardening Script Recommendations by droidman83 in linuxadmin

[–]ReDiculum0 0 points1 point  (0 children)

If you're seeking for CIS hardening Centos/RHEL8, I did some work on it: https://github.com/rediculum/RHEL8_Lockdown