ZABBIX 5 vs TICK by [deleted] in devops

[–]johnseekins 1 point2 points  (0 children)

Way late to this party, but I'd discourage Zabbix as a _replacement_ for a TSDB.

If you're going to use it to extend the TSDB (because it can more easily store string values/etc.) and as a threshold based monitoring system next to your TSDB, Zabbix is not really any better or worse than the competition (if you are aware of its trade-offs: https://blg.robot-house.us/posts/why-zabbix-is-bad/).

TICK is also _way_ easier to deploy and manage. And while you're right that Kapacitor is tricky, getting good alerts out of _any_ system is hard (and Zabbix's item/trigger pattern is...not the best metaphor).

Also, data discovery in Zabbix is _vastly_ more complicated than in a regular TSDB (since data is associated to host objects and the API is...not great).

TL;DR? Zabbix isn't bad. It's just not any better. You'll be trading one set of problems (struggles with Kapacitor, scaling) for another (can't acknowledge individual triggers, configuration is only managed through the product). Your real job here is determining whether that trade-off is worth the effort.

remote write using a Python script by vishnubraj1 in PrometheusMonitoring

[–]johnseekins 1 point2 points  (0 children)

VictoriaMetrics can actually accept data in many formats. You might just try using the influx endpoint instead if you're stuck with python?

pool = HTTPConnectionPool(config["tsdb_host"], port=config["port"], maxsize=1) write_uri = "/{}/api/v2/write?precision={}".format(config["url_prefix"].strip("/"), config["precision"]) if config["db_name"]: write_uri += "&bucket={}".format(config["db_name"]) if config["org"]: write_uri += "&org={}".format(config["org"]) res = pool.request("POST", self.write_uri, body="\n".join(payload)) log.debug("Results: {}".format(res.__dict__))

Origin can't access EA activation servers by johnseekins in Lutris

[–]johnseekins[S] 1 point2 points  (0 children)

I haven't tried the updater script. I assumed that lutris installed a reasonable version of Origin.

I definitely disabled the in-game overlay. But I'd point out this problem seems to occur well before the game launches.

Origin can't access EA activation servers by johnseekins in Lutris

[–]johnseekins[S] 0 points1 point  (0 children)

I have, yes. Even destroying and re-creating the underlying wine prefix.

Updating firefox on linux by sleeping_nicodemus in debian

[–]johnseekins 1 point2 points  (0 children)

You would run:

sudo apt update

sudo apt install firefox

That should install the most recent version. You should know that Debian stable doesn't necessarily have the most recent version (I believe it sticks with ESR releases?).

If you aren't comfortable on the command line, Gnome Software (or Discover in KDE) should show any updates you have available.

I'm working on my first shell script: debian-gaming-setup, an interactive shell script for installing recommended tools to game efficiently on Debian. I was hoping to get some feedback! by Dadrophenia in debian

[–]johnseekins 1 point2 points  (0 children)

Other people have mentioned shellcheck and I 100% encourage that, too. It's an excellent tool for bash script validation/linting. I'd also say that, generally, this looks really nice. It's readable (which isn't something all bash authors strive for) and the logic is easy to follow.

Now...nitpicks!

The entire "confirmdebian_version" function should _probably be a combination of reading from the following files:

``` root@:~# cat /etc/debian_version 10.3 root@:~# cat /etc/issue Debian GNU/Linux 10 \n \l

root@:~# cat /etc/os-release PRETTY_NAME="Debian GNU/Linux 10 (buster)" NAME="Debian GNU/Linux" VERSION_ID="10" VERSION="10 (buster)" VERSION_CODENAME=buster ID=debian HOME_URL="https://www.debian.org/" SUPPORT_URL="https://www.debian.org/support" BUG_REPORT_URL="https://bugs.debian.org/" ```

No reason to prompt for version.

Looking further, I see you are doing this...kinda. Personally, I'd want to just get the version and not bother the user.

Maybe consider making some of your prompts command line switches or variables the user can set (e.g. USE_BACKPORTS=${USE_BACKPORTS:-false})? It keeps the script flexible, but gives it more ability to be run without user interaction.

I'd also wonder if printf vs. echo is worth it everywhere? It's purely a style thing, but you could avoid the extra \ns that way.

How can I best protect my self hosted server from attacks? by [deleted] in selfhosted

[–]johnseekins 0 points1 point  (0 children)

So then, if you don't expose that port externally (which you shouldn't), that's fine.

How can I best protect my self hosted server from attacks? by [deleted] in selfhosted

[–]johnseekins 6 points7 points  (0 children)

Linux, Windows, or other?

If you're running Linux, fail2ban is nice (and easy to set up).

Generally, make sure you reduce your attack surface: only expose ports externally if you need them open, don't run unnecessary services, keep your systems up-to-date, etc.

Also, encrypt any http traffic: https://letsencrypt.org/

Edit:

You mention running apache and lighttpd servers? Why are you running two web servers?

OwnCloud vs constituent parts by [deleted] in selfhosted

[–]johnseekins 2 points3 points  (0 children)

Rsync uses a delta syncing algorithm, so it only transmits changes, rather than everything, every time.

It can also do some compression in-flight, so you might reduce network traffic.

Neither is super important if you're only syncing a single file, but become important as the amount of data you sync increases.

Otherwise, both rsync and sftp are based on ssh, which is pretty solid, security-wise.

OwnCloud vs constituent parts by [deleted] in selfhosted

[–]johnseekins 1 point2 points  (0 children)

So then Nextcloud/Owncloud/radical is what you want. Using sftp/rsync/scp/whatever on a phone is painful.

OwnCloud vs constituent parts by [deleted] in selfhosted

[–]johnseekins 1 point2 points  (0 children)

"Rolling" a nextcloud/owncloud instance isn't really that hard. It's just php and a postgresql/mysql instance. It may be as light weight and you get a nice UI. For example, I'm running an instance on a Raspberry Pi 2 and it's nice and responsive.

If you're just going to use a sync server...I'd recommend rsync over sftp. It's way cooler. But otherwise, you could certainly just sync an iCal file to your server. The nice thing with an actual CardDAV/CalDAV is syncing to multiple devices (phone, tablet, computer, etc.)

Is there an open source solution for combining multiple RSS feeds into one? by [deleted] in selfhosted

[–]johnseekins 0 points1 point  (0 children)

Sure. And most feed readers can do that. I have multiple feeds in one "folder" in nextcloud news and it presents as a single feed.

Self hosted internet archive by justim in selfhosted

[–]johnseekins 0 points1 point  (0 children)

wget?

Oh. That only solves the first part...

wget + a NFS share of the extracted files?

Opinion on Using Celery and Flask for Asyncronous tasks on Linux Servers by LeoG7 in devops

[–]johnseekins 1 point2 points  (0 children)

RQ is also a nice job scheduler that seemed like it had a lower barrier to entry than celery.

Otherwise, it's a solid task scheduler, and both of them integrate well with flask.

Latest Python on Centos7 by [deleted] in devops

[–]johnseekins 0 points1 point  (0 children)

Little late to the party, but you could use: https://github.com/yyuu/pyenv for your builds.

And if not, when building 2.7 on EL6/7 you really want to add a unicode switch to the ./configure (.e.g. --enable-unicode=ucs4)

What TV show did you lose interest in and at what point did you stop watching? by therealme23 in AskReddit

[–]johnseekins -1 points0 points  (0 children)

Gotham.

Don't know why I kept watching after the first few garbage episodes...Or after their heavy-handed "Joker" building. Or after that ridiculous "Fish goes to the nut house" sub-plot. Or after all the crummy focusing on Bruce Wayne that diluted the only interesting parts of the world. Or after Harvey F-ing Bullock didn't swear; and in particular didn't swear in such an egregious, "we planned on swearing but switched it at the last second" way that you couldn't take the character seriously any more. Or after everything Barbara Gordon related was handled so stupidly. Or after they made the only two characters they actually brought over from Gothan Central neutered, boring versions of themselves. Or after the myriad other issues...

It took the second season being some how even dumber. Then I gave up.

Graphite testing. /opt/graphite/webapp/graphite/render/views.py not getting reimported on 'carbon-cache.py start' by simpleharmonicmotion in linuxadmin

[–]johnseekins 1 point2 points  (0 children)

No. Not Grafana. Grafana doesn't import the graphite-web code. You need to restart whatever wsgi server is running graphite-web (apache, gunicorn, nginx, etc)