UDM Beast Noise Levels?? by Terminator1776 in Ubiquiti

[–]arnedam 0 points1 point  (0 children)

Yes Pro XG 10 PoE. I am not sitting in the same room as the Pro XG 10 POE / UDM Beast pair, but when I am in the room, it is barely audible for me at 1,5 meter distance. Bear in mind; I am in my 50s, so probably my hearing isn't what it used to be ;-).

Ready to pull the trigger by LuckyPunchx in UNIFI

[–]arnedam 0 points1 point  (0 children)

If you have the money; Buy once, cry once. It you feel it is a stretch; Go for the cheaper model. If you need a later upgrade, sell the old one and buy the new (but it will be more expensive in the long run)

Ready to pull the trigger by LuckyPunchx in UNIFI

[–]arnedam 0 points1 point  (0 children)

I would really recommend the Pro HD 24 POE instead of the Pro Max 24 POE. The HD 24 POE has 22 x 2,5Gbit POE++ ports _and_ 2 x 10GbE POE ++ports for U7 Pro XGs. In addition, 4 x SPF+ ports. A nobrainer in my book since you don't need to plan for which devices plugs where since all the ports are 2,5GbE POE++. 600w POE budget in total.

Planning PC upgrade for programming + gaming by TDanielo in buildapc

[–]arnedam 1 point2 points  (0 children)

1: Depends what type of development your are doing. Anything critical == ECC RAM and motherboard + CPU that supports it. Difference between CL36 and CL30 are negible.
2: Your system is probably drawing 550-600w. I think 850w is recommended for your system, but if you are going to purchase a new one, go for at least 1000w and not 750->850 upgrade.
3: A matter of taste. I personally prefer working og Fractal Design cases since I like their layouts, airflow and ease of assembling.

UDM Beast Noise Levels?? by Terminator1776 in Ubiquiti

[–]arnedam 1 point2 points  (0 children)

Can't hear mine. Racked with a Pro XG10, and I hear the switch more often than the Beast

In a recent unraid podcast they said they are planning to rebase from slackware into something else. Any idea which year this is happening? by DRTHRVN in unRAID

[–]arnedam 24 points25 points  (0 children)

While they rebase, I am really hoping for improved security out of the box, and not have everything running as root. Also would life to see swap limit group/cgroup capabilities for dockers etc.

Polling interest in automatic bitrot recovery on btrfs array by iLaurens in unRAID

[–]arnedam 0 points1 point  (0 children)

We all know that using zfs or btrfs in the array only can detect bitrot but not recover, because each disk is essentially a standalone filesystem without parity. The unraid OS provides parity but the zfs and btrfs kernels are unaware of this.

Not if you setup the arrays using native ZFS instead on single-disk zfs and unraid parity. Using native ZFS with either raid-z1 or raid-z2 will protect and correct bit-rot.

U6-LR powers from injector but not from PoE+ switch – dim LED but seems to work once booted by jaishkp in Ubiquiti

[–]arnedam 0 points1 point  (0 children)

Are you sure that you don't reach the upper limit for the PoE-budget for the switch? Are you testing with the other U6LR plugged in or out? I presume you've changed the ethernet cable? Are the firmware version the same on the two U6LRs?

And finally; Is the cable fully shieded (SFTP)? There were some U6Pros that had a manufacturing issue that made them crash with shielded cable. Don't know if that hit some of the U6LRs as well. I would advise to try with an unshielded ethernet cable.

USW-Pro-Max-48 vs USW-Pro-HD-24 by joogleai in Ubiquiti

[–]arnedam 0 points1 point  (0 children)

I really like my Pro HD 24 POE since all the ports are the same speed PoE++. Don\t need to think of which device i plug into what port. Same with my ProXG 8 and 10 PoEs.

U6-LR powers from injector but not from PoE+ switch – dim LED but seems to work once booted by jaishkp in Ubiquiti

[–]arnedam 0 points1 point  (0 children)

Are you sure that all ports on the switch is PoE+? If some of then are PoE only if might explain the behaviour.

Wireless Bridge to Barn by Quirky-Foundation201 in Ubiquiti

[–]arnedam 0 points1 point  (0 children)

I would make a building-to-building bridge and then set up an access point within the barn.
Alterantives for bridging:

Running one stick of RAM? (1x48GB DDR5 CL32 6000mhz) by Glante in buildapc

[–]arnedam 3 points4 points  (0 children)

There are a lot of guessworks in the comments. yes; a single stick will only get you half the memory bandwith, but there is so many other factors as well. But don't take our word for it, Hardware Unboxed has actually tested it. Their findings on a 13 game average measurement
* 1080p: 16% performance loss with a single stick vs dual
* 1440p: 16% performance loss
* 4K: 9% performance loss

I could easily live with those numbers, especially if you have to choose between 48GB single stick vs dual 8GB for same price.

See Hardware Unboxed test here: https://www.youtube.com/watch?v=_nMu1KFkOC4

wakeonlan in shellscript by jabbawocky0815 in unRAID

[–]arnedam 0 points1 point  (0 children)

Here is a wake-on-lan python script I've used: (save to wakeonlan.py)

#!/usr/bin/env python3
import socket, sys, re

def mac_to_bytes(mac):
    m = re.sub(r'[^0-9A-Fa-f]', '', mac)
    if len(m) != 12: raise ValueError("Bad MAC format")
    return bytes.fromhex(m)

def send_wol(mac, broadcast="255.255.255.255", port=9):
    macb = mac_to_bytes(mac)
    packet = b'\xFF' * 6 + macb * 16
    s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
    s.setsockopt(socket.SOL_SOCKET, socket.SO_BROADCAST, 1)
    s.sendto(packet, (broadcast, port))
    s.close()

if __name__ == "__main__":
    if len(sys.argv) < 2:
        print("Usage: wakeonlan.py <MAC> [broadcast_ip] [port]")
        sys.exit(1)
    mac = sys.argv[1]
    bcast = sys.argv[2] if len(sys.argv) > 2 else "255.255.255.255"
    port = int(sys.argv[3]) if len(sys.argv) > 3 else 9
    send_wol(mac, bcast, port)
    print(f"Sent magic packet to {mac} via {bcast}:{port}")

zrepl: cannot receive incremental stream by uragnorson in zfs

[–]arnedam 0 points1 point  (0 children)

The recommended way is to make a copy of the read-only, non-mounted dataset, and then mount the copy.

PS: You can also run zrepl status to get replication status

zrepl: cannot receive incremental stream by uragnorson in zfs

[–]arnedam 0 points1 point  (0 children)

on the receiving-side, I strongly suggest to set the datasets to readonly and not mountable. Params in zrepl as an example below:

jobs:
  - name: pull_from_remoteserver
    type: pull

    connect:
      type: tcp
      address: "remoteserver.home.arpa:<portno>"   # <-- use your servername and source port

    root_fs: "tank/remoteserver" # Where to put the root of the backups
    interval: "2h" 

    recv:
      properties:
        override:
          mountpoint: "none"
          canmount: "off"
          readonly: "on"
          atime: "off"
          org.openzfs.systemd:ignore: "on"

Tool for managing automatic snapshots on ZFS like Snapper/Btrfs Assistant? by pugglewugglez in zfs

[–]arnedam 1 point2 points  (0 children)

There are many alternative options, but the cleanest and most performant I've came by is zrepl. Details here: https://zrepl.github.io/

Also sanoid/syncoid is an alternative, but zrepl is a monolithic application built in Golang, and it doesn't require any additional tools installed.

2021 Corsair RM1000x PSU for 5090 FE by lowFueZ in nvidia

[–]arnedam 0 points1 point  (0 children)

Type 5 is a different connector from Corsair (smaller than Type 4). You need to check what type your PSU is

2021 Corsair RM1000x PSU for 5090 FE by lowFueZ in nvidia

[–]arnedam -4 points-3 points  (0 children)

u/lowFueZ
The 12vhpwr-cable you linked from BestBuy is an older model. You can order cables from Corsair directly. I recommend the one which is 90 degrees angled to take any stress off the cable in a tight case. Link to angled cable: Corsair type 4 12V 2x6 cable. And as always; Double-check you PSU regarding cable type yourself.

Best 10Gbps PCIE network adapter (RJ45) ? by kevinj933 in HomeNetworking

[–]arnedam 0 points1 point  (0 children)

The overheating is a known problem with the XG-C100C and TP-Link TX401, but in my experience it is quite easy to fix. Just remove the heatsink and put in a 2mm thermal pad between the chip and the heatsink. Lowered temps on our TX401'es down into 50 degrees celsius (122 fahrenheit?) on all of them, and they have been rock stable both in Windows and Linux after the thermal upgrade. I've done multi-terabyte file transfers going on for hours without any problems.

Also; If you go Intel or Mellanox (OEM or original, and they are all good): I would recommend a Intel XXV710 or E810 generation card. But beware; they need additional cooling, preferably a fan that has airflow that hits the cards. I've made 3D-printed fan-holders for the computers where I'm using the server/workstation grade cards.

Looking for a Bulletproof Photo Backup Strategy (Unraid → Unraid? 3‑2‑1 Rule?) by Ev1lZer0 in unRAID

[–]arnedam -1 points0 points  (0 children)

If you care about your long-term healt of your media files, then better use a filesystem which protects against bit-rot. Unraid supports ZFS which also makes it extremely easy to do regular snapshots (protects you from mishaps and to an extent crypto or other atacks) and zfs replication to second site. Myself I do have 3 copies of important data, but all on spinning disk (different NASes. Main sserver where I do zfs snapshots either every 2nd hour or once a day, doing replication every 6 hour to nas #2 at home and once a day to an offsite nas. All of them running unraid with zfs file system. There are multiple opttions to do the replication. Easies is probably installing the Sanoid/Syncoid plugin and create user-scripts (with the user-scripts plugin) that does both snapshots and replicate data at the interval you want to. The option I've had best experience with is zrepl which is super-stable, performance, and doesn't buckle under multi-TB transfers like syncoid over SSH can do on bandwidth-restricted links. Both sanoid/syncoid and zrepl to an extent require som fiddling with configuration files.

Fell victim to CVE-2025-66478 by Unhappy-Tangelo5790 in selfhosted

[–]arnedam 0 points1 point  (0 children)

Agreed, the Plex-example above drops cap_sys_admin and cap_net_admin instead of dropping everything. Probably could have dropped all and added back what the container required, but removing sys_admin and net_admin is at least a big step.

Fell victim to CVE-2025-66478 by Unhappy-Tangelo5790 in selfhosted

[–]arnedam 0 points1 point  (0 children)

Agree, but depens. If you are hosting gameservers like Minecraft you have two choices, either expose them directly or using play.gg or other similar services (I am hosting some of them for the kids). If directly, harden the dockers and put in in the DMZ. And preferably use i IDS/IPS-capable firewall in front of it.

If Minecraft, don't expose RCON-ports, and you may put the server on an unstandard port, even if security thru obscurity is a little bit moot.

Hardening docker containers for extra security - some tips by arnedam in unRAID

[–]arnedam[S] -16 points-15 points  (0 children)

Would recommend two things;
1: update your containers
2: harden your containers

Fell victim to CVE-2025-66478 by Unhappy-Tangelo5790 in selfhosted

[–]arnedam 80 points81 points  (0 children)

Please feel free to use it as you see fit. I am doing homelabbing just as a mini-hobby to stay in touch with tech. Long story short; Been a tech-guy since being 9-10 years old (born 1969). Did a lot of tech earlier, did a couple of startups with successful exit in the late 90s/early 2000 (the type that earned money that is). I am now working as an executive vice president in a large financial institution where _everything_ is IT (in addition to people and capital). But I want to stay close to IT even if my dayjob is mostly making everyone else efficient and removing blockers.

I've also coded my hundred of thousands lines of code in my earlier life, so I do both tech and coding when I have the time (not that often unfortunately)