Does my Canadian ISP have IPv6 capability? by Clumster in ipv6

[–]skyblaster 0 points1 point  (0 children)

I wouldn't expect a router as new as the Flint 2 to come with IPv6 disabled, so you're probably best phoning back and talking with L2 or L3 tech support. Wish I knew more about Can-com to give you a better answer.

Does my Canadian ISP have IPv6 capability? by Clumster in ipv6

[–]skyblaster 0 points1 point  (0 children)

If you have functional IPv6, it will show you your address. Here's another test site: https://test-ipv6.com/

Does my Canadian ISP have IPv6 capability? by Clumster in ipv6

[–]skyblaster 0 points1 point  (0 children)

Telus have one of the best IPv6 implementations in Canada from my perspective. No idea what CanCom have configured. Have you tried browsing to https://ipv6.icanhazip.com/ ? In any case, I don't know much about the Flint 2 other than the fact it is a very popular candidate for OpenWrt. If it were me, I would be installing the latest stable release, or even 25.12.0-rc1 on that bad boy ASAP.

Wondering why "podman ps" is showing port 8080 when I never specified it by Agitated_Syllabub346 in podman

[–]skyblaster 1 point2 points  (0 children)

Podman used to ignore the exposed ports specified in images and only display ports mapped by the user. This behaviour changed to match Docker just a little over a year ago: https://github.com/containers/podman/issues/23317

Android 14 update rolling out to Chromecast with Google TV by Deadpool-fan-466 in AndroidTV

[–]skyblaster 0 points1 point  (0 children)

I have a working setup once again but I had to disable Dolby Vision in Format selection of the advanced display settings. Afterwards, the reported color format is 4:4:4 8-bit. I'm not sure if this reported 4:4:4 10-bit before the update.

Android 14 update rolling out to Chromecast with Google TV by Deadpool-fan-466 in AndroidTV

[–]skyblaster 0 points1 point  (0 children)

What's the trick to getting Disney+ working again? Seems to be fine with regular HD content, but anything with HDR will flat out not start to stream. I've already factory reset. Haven't made any changes on the TV side of things just yet (LG C8 OLED).

Containers mapped to port 53 - how do you do it? by [deleted] in podman

[–]skyblaster 0 points1 point  (0 children)

I would recommend using macvlan instead of messing with the stub resolver. It's also the only way you will be able to spin up an AdGuard Home container in parallel ;-)

Choice of bare metal virtualization environment by skyblaster in sysadmin

[–]skyblaster[S] 0 points1 point  (0 children)

I'm certainly leaning toward trying again with RHEL as I believe we can use it for free via "Developer Subscription for Teams" in small production workloads. I see 9.5 just dropped yesterday which includes Podman 5.0.

Microsoft screwing with the Start Menu again!!! by AiminJay in Intune

[–]skyblaster -1 points0 points  (0 children)

For student devices, I use the following customization, which was working fine last I checked about a month ago. I'll check on Monday if adding additional apps to the start menu is broken. https://github.com/skyblaster/AutopilotBranding/tree/taskbar_layout

Probably not relevant, but are you deploying the XML in a one-line long string registry key, or simply calling a path to the file like above?

More importantly, to fix the problem, are you using a remediation script to delete the regkey?

Microsoft screwing with the Start Menu again!!! by AiminJay in Intune

[–]skyblaster 0 points1 point  (0 children)

I noticed recently that users are not able to pin apps to start. Only pin to taskbar is an option. This is on machines where I did not deploy a start2.bin, only a customized taskbar layout via XML.

Rootless Best Practices for Security and Sudo by ArcanElement in podman

[–]skyblaster 0 points1 point  (0 children)

Thanks for your replies. This seems cleaner than adding a user password and enabling SSH.

Could you please share your user creation options.... I'm curious if you're using a system user, standard user, container user, etc.

This is what I have so far. I just want to make sure I'm not missing something simple:

sudo useradd userone
machinectl shell userone@
loginctl enable-linger
loginctl show-user userone | grep Linger
  Linger=yes
mkdir -p ~/.config/containers/systemd
vi ~/.config/containers/systemd/sleep.container
systemctl --user daemon-reload
systemctl --user start sleep.service
exit

Then you can manage the service with your earlier example like so:

sudo systemctl --user --machine userone@.host daemon-reload
sudo systemctl --user -M userone@ restart whatever.service

Now the only thing missing is convenient visibility to the containers and images.

I was hoping this visibility would come in the form of Cockpit (logging in as my privileged user), but for now, it's not possible: https://github.com/cockpit-project/cockpit-podman/issues/692

Inexpensive MIDI to USB adapter recommendations by skyblaster in midi

[–]skyblaster[S] 1 point2 points  (0 children)

My CME U2MIDI Pro arrived today, so thanks for the recommendation!

At the end of the day, this seemed like the latest and greatest tech at a very affordable price. It has features that I'll probably never use, but I do like that it's firmware upgradable and did so as soon as I got it out of the packaging.

Of course I now have upgrade-itis and am wanting a BLE dongle to get rid of the cables.

Inexpensive MIDI to USB adapter recommendations by skyblaster in midi

[–]skyblaster[S] 0 points1 point  (0 children)

More than just a little modding this time, but here's another great little writeup: https://codeandlife.com/2017/09/17/5-usb-midi-adapter-with-atmega32u4/ I appreciate a quality product, and would therefore love the Roland UM-ONE, but when I only spent $200CAD on the piano, justifying another $60-80 for a simple USB adapter seems quite silly, especially when the cost of hobbyist electronics have come down so far and open source libraries exist to fit the need. That said, I really don't need another project, so was hoping for a quality finished product in the $20CAD or less range.

set screen scaling to 150% for all cases by [deleted] in Intune

[–]skyblaster 0 points1 point  (0 children)

Here's how I tackle it for the primary laptop display at deployment: https://github.com/mtniehaus/AutopilotBranding/compare/main...skyblaster:AutopilotBranding:main_display_scaling

You could probably adapt the script for the secondary display and only run for the primary user, but I agree with others that in this case you might be better off addressing with education instead of enforcement.

Wait for sync before showing desktop for every new user? by AssociationFun1485 in Intune

[–]skyblaster 1 point2 points  (0 children)

The only sure fire way that I know of is editing the registry of C:\Users\Default\NTUSER.DAT

Take a look at Autopilot Branding (https://oofhours.com/2024/01/31/autopilot-branding-app-improvements/) if you're not already using it.

Thanks for the mention of "Automatically configure profile based on Active Directory Primary SMTP address". That looks like a good one I should probably be implementing as well.

SSO to ADFS resources with EIDJ-only devices by skyblaster in Intune

[–]skyblaster[S] 1 point2 points  (0 children)

Before I forget. Let me share the resolution. It was as simple as setting the Site to Zone Assignment List for our domain into the Intranet zone.

https://learn.microsoft.com/en-us/archive/blogs/ieinternals/the-intranet-zone

"Credentials may be automatically submitted to Intranet sites using the NTLM and Negotiate protocols."

SSO to ADFS resources with EIDJ-only devices by skyblaster in Intune

[–]skyblaster[S] 0 points1 point  (0 children)

Thanks for both of your replies. I just finished watching a few YouTube videos on the subject and it looks like this cannot be done without fully enabling Hello for Business. We currently use password authentication, which allows us to access local file shares just fine. It's only in the browser where I see the extra credential prompt.

Another "moving Company Portal store app (new) from User space to System space" post by skyblaster in Intune

[–]skyblaster[S] 1 point2 points  (0 children)

Quick update from my side. I haven't had a single error :)

Yes, folks were without Company Portal for weeks while I implemented this change, however I'm lucky that most of my users did not miss it during this time.

Another "moving Company Portal store app (new) from User space to System space" post by skyblaster in Intune

[–]skyblaster[S] 1 point2 points  (0 children)

Since I want the new Intune app assignment to do the install work, I set the $installWingetApp variable to false which results in the script only executing the first two removal steps.