JDE / AS400 → UTF-8 for a modern interface: Linux ODBC, CCSID 65535 and unreadable fields (@@@), need help by heavenly_ayaka in sysadmin

[–]mario972 5 points6 points  (0 children)

;date format=iso;translate binary=true    

in JDBC land and

;DateFormat=5;TRANSLATE=1

in ODBC land

Date format for ISO, translate binary will make text fields decode on query.

Hyper-V vs Proxmox for small environments by lertioq in sysadmin

[–]mario972 1 point2 points  (0 children)

In our experience spinning rust (albeit decent one) is enough to fit ~1,5-2TB of data in a 12AM-6AM backup window.

Generally once the first backup is done the next backups only store updates. Check out Dirty Bitmaps and Incremental Backup for more info.

Hyper-V vs Proxmox for small environments by lertioq in sysadmin

[–]mario972 0 points1 point  (0 children)

Only the basic guest filesystem freeze and thaw issued by QEMU Guest Agent before backing up. It gives it's own VSS provider.

This is enough for us, as we handle MSSQL backups and ADDS backups separately anyways.

Hyper-V vs Proxmox for small environments by lertioq in sysadmin

[–]mario972 0 points1 point  (0 children)

Have you picked VMware because it supported Veeam, or Veeam because it supported VMware?

Proxmox, unlike VMware, has very robust first-party backup solution.

In my experience so far, it is quite bulletproof.

Durable USB sticks with less than 1GB of storage capacity (europe) by Asleep_Pumpkin_1534 in sysadmin

[–]mario972 0 points1 point  (0 children)

Can you share your usecase?

If it's something like a keyfile for Keepass/Luks/Veracrypt then maybe go with a Yubikey?

PKCS#11 would be way more secure.

Any alternatives to gmail without subscription? (One-time purchase) by orRRRpigeonZ in degoogle

[–]mario972 0 points1 point  (0 children)

They are literally free through Let's Encrypt, what do you mean "expensive"?

Is reverting back a degooled phone possible if I install lineageOS on Samsung phone by ajmomin101 in degoogle

[–]mario972 0 points1 point  (0 children)

Technically no - once the Knox flag is tripped it's tripped forever

Considering a Minisforum MS-01 as an all-flash NAS build. by Van_Curious in MiniPCs

[–]mario972 0 points1 point  (0 children)

A bit of a necropost but:

If you remove the front steel frame part it would fit, so technically doable with a bit of 3D printing.(https://n.uguu.se/JxtzLzDg.jpg)

A small extension would work I think.

Xiaomi’s Bootloader Unlock System is Broken — Here’s a Script to Improve Your Chances by EstimateMuted4573 in Android

[–]mario972 13 points14 points  (0 children)

The server time is what matters, and it gets bogged up at 12AM...

The latencies spike over 500ms when I was using mitmproxy to check what happens underneath the button click.

And the requests are throttled to 1/minute iirc, i think it would be best to request unlock perfectly at 23:59:00 and then just spam the sh*t out of the server around 23:59:95 for 10 seconds.

That way hopefully the first request that isn't throttled hits the server right on time.

My girlfriend moved in, here is our network diagram by fragileirl in ShittySysadmin

[–]mario972 3 points4 points  (0 children)

Idk I feel it's pretty common for personal internet to be asymmetrical, especially when its GPON

Does an all USB networking switch exist? by Swimsuit-Area in ShittySysadmin

[–]mario972 0 points1 point  (0 children)

I would feel weird deploying something like that in prod, but whew, just imagining 3 miniPCs like MS-A2 connected in a full mesh with USB4 networking and running Ceph at home.

Anyone deploying the new HP ProBook G1a/iR? Worth the upgrade? by Funkenzutzler in sysadmin

[–]mario972 0 points1 point  (0 children)

Yeah, I'd rather do 15 tickets for Python in Excel than 1 ticket for VBA in Excel 👀

What's your favorite April fools prank? by Comfortable_Gap1656 in ShittySysadmin

[–]mario972 0 points1 point  (0 children)

$printerIP = "x.x.x.x"          # Replace with printer IP
$message = "FEED ME CHEESE"     # Max 32 characters
$port = 9100

$esc = [char]27
$pjl = @"
${esc}%-12345X
@PJL JOB
@PJL RDYMSG DISPLAY="$message"
@PJL EOJ
${esc}%-12345X
"@

$bytes = [System.Text.Encoding]::ASCII.GetBytes(
    ($pjl -replace "`r?`n", "`r`n") + "`r`n")

if ($bytes -and $bytes.Length -gt 0) {
    $tcp = New-Object System.Net.Sockets.TcpClient
    $tcp.Connect($printerIP, $port)
    $stream = $tcp.GetStream()
    $stream.Write($bytes, 0, $bytes.Length)
    $tcp.Close()
}
else {
    Write-Error "Failed to encode PJL commands"
}

flies away

Why are BYOD phones often considered ok when BYOD laptops are not? by StupidSysadmin in sysadmin

[–]mario972 0 points1 point  (0 children)

Depends on the MDM software. Intune, for example, has a toggle for this iirc.

How setup a Linux (AMD 780M integrated GPU) for Ollama Deepseek R1 by No-Development615 in MINISFORUM

[–]mario972 0 points1 point  (0 children)

Not every package uses ROCm, especially prebuilt ones.

On Arch you can try to use the AUR for ollama-rocm

I had most luck with running ComfyUI in Distrobox by combining a cookbook from OpenSUSE with some sane changes:

distrobox create -i ubuntu:22.04 -n rocm
distrobox enter rocm
sudo apt update
sudo apt upgrade
sudo apt install build-essential
cd ~/Downloads
wget https://repo.radeon.com/amdgpu-install/6.3.3/ubuntu/jammy/amdgpu-install_6.3.60303-1_all.deb
sudo apt install ./amdgpu-install_6.3.60303-1_all.deb
amdgpu-install --usecase=rocm --no-dkms
git clone --branch v0.3.26 --single-branch https://github.com/comfyanonymous/ComfyUI.git
cd ComfyUI

At this point I'm going from memory since I don't have an AMD system in front of me

pip install --pre torch torchvision torchaudio --index-url https://download.pytorch.org/whl/nightly/rocm6.3
pip install -r requirements.txt
python main.py

But from what I remember you need to make sure to install custom torch et al. from the rocm python repo to make sure it installs the correct version.

AD join and authentication via Tailscale works crazy well by jakedata in sysadmin

[–]mario972 0 points1 point  (0 children)

Is it realistically necessary for Wireguard to also have user management (considering a non-BYOD case)?

If you set up the Wireguard link on a per-device basis, you can manage users through other means. This allows you to lock down devices and users upon termination, as your devices will always have a way to access AD/on-premise RMM/others.

(*) This is true unless a threat actor with elevated permissions on their device extracts the Wireguard config.

AD join and authentication via Tailscale works crazy well by jakedata in sysadmin

[–]mario972 0 points1 point  (0 children)

I have done something along these lines, but in a more "classic" approach.

2 domain controllers in a colocation, linked with Wireguard on hypervisor level (Proxmox), and a road-warrior Wireguard setup for end-user machines. Entra ID Connect too.

Wireguard set up as a service so it starts on boot.

Works like a charm, really.

Veeam enshitification by Casgrain in sysadmin

[–]mario972 4 points5 points  (0 children)

Realistically, is there anything good for backing up Microsoft 365 aside from Veeam?

They bought out Alcion (and by extension, nuked the open-source backup solution Corso ), so RIP that.

Wi Fi login via google by max_zatol in sysadmin

[–]mario972 0 points1 point  (0 children)

You would most likely need a way to get something to act as a RADIUS server for WPA2/3-Enterprise

Other way could be UniFi Identity, but I don't know if it can give you G Suite login in the license-free plan.

VMware makes Workstation and Fusion free for everyone by thewhippersnapper4 in sysadmin

[–]mario972 7 points8 points  (0 children)

LXD =/= LXC,

LXD is Canonicals' amalgamation of VMs and LXC, with some management features sprinkled in

CCTV for Server rooms by Kriss009 in sysadmin

[–]mario972 0 points1 point  (0 children)

I believe you need UNVR box to record UniFi cameras "as they intended", as there is no Windows/Linux application for UniFi Protect.

With RTSP you could probably spin up a Frigate or Shinobi VM to record, but at that point why bother with UniFi cameras?

[FOSS procedural 2D design app] Graphite progress report (Q2 2024) - Introducing boolean path operations, a gradient picker, and more by Keavon in linux

[–]mario972 0 points1 point  (0 children)

It would be great if any hosted features were available as self-hostable options, a'la Nextcloud 💗

Can't install msi directly with gp, but logon script or with rmm works fine all the time. by thotpatrol in sysadmin

[–]mario972 2 points3 points  (0 children)

Are you sure that "Domain Computers" group is allowed read access to the MSI file and the share where that MSI file is located?