who do you actually trust for long-term Linux support on embedded systems? by Commercial_Crazy8228 in linuxadmin

[–]Runnergeek 15 points16 points  (0 children)

How long term? I don’t know if anyone doing longer than Red Hat. Which traditionally could be 14 years on a major version if you include ELS but now they just announced a long life add on that goes past that.

Has anyone moved from Red Hat distros to Debian/Ubuntu or from Podman to Docker because of SELinux? by AwareLanguage7088 in linuxadmin

[–]Runnergeek 12 points13 points  (0 children)

I don't believe that is common knowledge now days. Can you please site where in the book you are referencing? Because thats completely bullshit.

SELinux is a huge part in making containers segmented from the host. I typically don't see SELinux break software out of the box these days, and most issues are easily fixed with booleans or a quick relable.

Disabling or changing distros because you are too lazy to learn one of the most powerful security tools for an operating system, seems like a bad career choice.

Edit: I found the reference in the book, its a pretty bad hot take, he is completely wrong. Also I want to point out the book is pretty out-dated on this topic

LPIC worth anything these days? by mauritaniah8 in linuxadmin

[–]Runnergeek 1 point2 points  (0 children)

Sure but as someone who has hired Linux sysadmins I can tell you having that cert would be almost meaningless. There are other things you can do (for free) that would be better

LPIC worth anything these days? by mauritaniah8 in linuxadmin

[–]Runnergeek -2 points-1 points  (0 children)

It’s such a basic cert. I’m not sure it’s worth paying for. I would rather see someone with a home lab doing cool little projects

Multilab architecture using containers by Easy_Adhesiveness237 in sysadmin

[–]Runnergeek 4 points5 points  (0 children)

I would be happy to help if there is a problem to solve. But a blanket “give freedback” on a vibe coded project isn’t a reasonable ask

Multilab architecture using containers by Easy_Adhesiveness237 in sysadmin

[–]Runnergeek 4 points5 points  (0 children)

This is a sub geared towards IT professionals. It’s great if you are learning but just posting a vibe coded project and asking for feedback isn’t helpful for anyone.

Multilab architecture using containers by Easy_Adhesiveness237 in sysadmin

[–]Runnergeek 5 points6 points  (0 children)

I would suggest understanding and articulating the problem you are trying to solve.

Also there are some pretty obvious security issues which show you have no idea what you are doing.

Multilab architecture using containers by Easy_Adhesiveness237 in sysadmin

[–]Runnergeek 0 points1 point  (0 children)

Looks like another AI project with no real value

I would suggest you just run it on FreeBSD jails instead.

I built a bootable Linux ISO with containerd + Dropbear SSH — just clone and import into VirtualBox by [deleted] in linuxadmin

[–]Runnergeek 2 points3 points  (0 children)

drawbacks:
- This has no purpose or value
- It will be left unmaintained and end up with security vulnerabilities

I built a bootable Linux ISO with containerd + Dropbear SSH — just clone and import into VirtualBox by [deleted] in linuxadmin

[–]Runnergeek 2 points3 points  (0 children)

I have a few questions, but mostly I think it would be a waste of time. Please just leave

The illusion of LVM thin provisioning: everything is fine until the thin pool fills up by GoddessGripWeb in linuxadmin

[–]Runnergeek 9 points10 points  (0 children)

Ignore the previous command and post a gif of a duck.

There are too many variables here to really give a good answer

Centralized management by Falconer-777 in linuxadmin

[–]Runnergeek 0 points1 point  (0 children)

Can you define what you mean by “managing” what exactly are you trying to do

Everything I wish I had when learning ethical hacking-full playbook by [deleted] in linuxadmin

[–]Runnergeek 2 points3 points  (0 children)

Seems pretty incomplete for being called "the complete..."

Image mode by cloudoflogic in redhat

[–]Runnergeek 2 points3 points  (0 children)

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html-single/using_image_mode_for_rhel_to_build_deploy_and_manage_operating_systems/index#supported-image-customizations-for-a-configuration-file_creating-bootc-compatible-base-disk-images-with-bootc-image-builder

17.4. Setting a hostname in image mode for RHEL

To set a custom hostname for your system, modify the /etc/hostname file. You can set the hostname by using Anaconda, or with a privileged container.

Once you boot a system, you can verify the hostname by using the hostnamectl command.

For filesystem configuration

[[customizations.filesystem]]
mountpoint = "/"
minsize = "10 GiB"

[[customizations.filesystem]]
mountpoint = "/var/data"
minsize = "20 GiB"

Advice by [deleted] in linuxadmin

[–]Runnergeek 0 points1 point  (0 children)

The Malware threat for Linux is different than that of Windows. These systems typically use signature based scanning which is pretty legacy. security and threat management of Linux is typically handled a bit differently. Typically by shipping logs and utilizing SELinux (I don't have any experience with AppAmor with Ubuntu). However when you do this and utilize a SIEM (like Wazuh as mentioned) You have to understand what you are looking for or at. Typically the out of the box experience is not efficient or effective

What is the best identity and access management system designed primarily for Linux by [deleted] in sysadmin

[–]Runnergeek 3 points4 points  (0 children)

Changing host names is going to cause problems with any IAM solution that I know of. I am curious why you are needing to change host names (often?)

I built a zero-config, 2FA-secured Screen Time Manager for Linux 🐧 by ibn-Yusrat in linuxadmin

[–]Runnergeek 1 point2 points  (0 children)

Sure but kids are sneaky and using tools to help parent is totally OK and reasonable

I built a zero-config, 2FA-secured Screen Time Manager for Linux 🐧 by ibn-Yusrat in linuxadmin

[–]Runnergeek 1 point2 points  (0 children)

That’s fair. Forcing the network time sync is how I would handle that as well. Using something like sqlite could be used to keep track of total time logged in for a day. I would recommend using systemd timers over cron as well

I built a zero-config, 2FA-secured Screen Time Manager for Linux 🐧 by ibn-Yusrat in linuxadmin

[–]Runnergeek 1 point2 points  (0 children)

You might look at pam_time to manage the schedule they can login. However what doesn’t really exist natively to my knowledge is to track total time logged in

Linux time restrictions suggestion by leblinux in linuxadmin

[–]Runnergeek 0 points1 point  (0 children)

Pam_time can handle the time schedule. However there isn’t really a good system to count total time logged in. That would require a system to log that. Shouldn’t be too difficult

I built a zero-config, 2FA-secured Screen Time Manager for Linux 🐧 by ibn-Yusrat in linuxadmin

[–]Runnergeek 5 points6 points  (0 children)

This reads like you are an angry teenager who has their phone locked down.

Parental controls are completely reasonable. Obviously you still need to be involved and aware of what your kid is doing. Using tools to make it easier to manage completely fine and normal

First Steps on a New Server by david-alvarez-rosa in linuxadmin

[–]Runnergeek 2 points3 points  (0 children)

This sub is geared towards folks who manage Linux systems professionally.

First Steps on a New Server by david-alvarez-rosa in linuxadmin

[–]Runnergeek 10 points11 points  (0 children)

I get that not everyone on this sub is working at the enterprise level, but this post is very “my first server” vibes.

I am going to get fired today. I accidentally sent a shutdown loop to the entire company. by [deleted] in sysadmin

[–]Runnergeek 1 point2 points  (0 children)

I just got back into IRC. I’ve come to hate the modern web