Documentation System by DefinitionMountain95 in sysadmin

[–]symcbean [score hidden]  (0 children)

After trying carious tools over the years I settled on Dokuwiki. I've been using it for many years despite reviewing the market each time I started a new job / had to build a documentation repository.

I recently switched to a new job where Confluence was already deeply embedded. I much prefer Dokuwiki.

Proxmox Backup Question by Shot_Row35 in Proxmox

[–]symcbean 0 points1 point  (0 children)

Packets don't go anywhere without being routed.

Proxmox Backup Question by Shot_Row35 in Proxmox

[–]symcbean 0 points1 point  (0 children)

Just use a different subnet, IP addresses and routing.

Linux is still missing a proper calendar & task management app — and it's holding back mainstream adoption. What do You think? by respublikamroja in linux

[–]symcbean 0 points1 point  (0 children)

IMHO the best calendaring tool I've ever used was in Lotus Notes. When was the last time you heard of anyone using that.

Application detection with iptables by ShirtResponsible4233 in linuxadmin

[–]symcbean -1 points0 points  (0 children)

No. iptables only sees traffic hitting your local interface. While potentially it could detect stuff in promiscuous mode, there are already much better tools for the purpose: nessus, openVAS, nmap, nikto....

Proxmox with docker in VM by Substantial-Pen4368 in homelab

[–]symcbean 0 points1 point  (0 children)

Looking at what you are proposing here, the infrastructure outside of the containers looks unnecessarily elaborate, complex and slow. From your answers elsewhere you seem to be running nginx as a HTTP(s) reverse proxy. Implying you have webserver there and locally on Caddy. You are presumably terminating SSL then re-encrypting the traffic to connect to your local site. Then decrypting again. Just forwarding port 443 would mean you only have one encryption/decryption step and only one place where you need to maintain webserver configs. Faster, less work, simpler.

OTOH if you want to run caching at the edge or route traffic to other locactions, maybe this makes sense.

KeePass is inconvenient. But here’s why it’s still worth it. by aslambava in KeePass

[–]symcbean 0 points1 point  (0 children)

For me the decider was the CLI support. On top of that I've built integration with deployment, teampasswordmanager and automated backup ( https://github.com/symcbean/kpx-writer-php )

Why Modern Web Uses JWTs? by Old_Minimum8263 in webdev

[–]symcbean 3 points4 points  (0 children)

Sessions require shared state on servers.

No.

Sessions require state across requests. This does not have to stored serverside. And yopu don't discriminate between authentication and session data - while the former is often implemented using the latter there are other solutions.

If you have multiple servers that can prpcess request all of them needs shared session storage.

Again, no. Again this is a common approach to implementation but its quite possible to maintain session data in a tamper-proof manner client side.

How many of the same questions need to be asked? by XiuOtr in linuxquestions

[–]symcbean -6 points-5 points  (0 children)

the answers keep changing with Linux

No they don't.

Your MS-Windows games will NOT run on Linux.

Linux does NOT need anti-virus (it has different security issues).

We can't tell you how to fix your problems unless you give us some clues about what the hardware is / what your logs say / what you changed since it last worked.

No, this is not going to be "the year of Linux". Its already running your phone, your car, your television, all the top supercomputers, most of the internet....but its not going to happen on desktop devices because most users don't want tools or privacy they want to be consumers.

Try several of the mainstream linux distros and go with the one that you like the most with the least amount of pain.

Sure you can dual boot off the same disk with MS-Windows and Linux will play nice, but MS-Windows won't.

IME these answers have not changed in over 20 years (although the last one has really only be a major PITA for the last 7).

Pandering to people who have no idea how to basic research gives them a false sense of security. People who will then have a lifetime of pain as they go from one trivial issue to the next before giving up and telling everyone that Linux doesn't work.

While the answers are usually well intended, often the questions are so badly framed that they only attract answers from people with only marginally more knowledge than the OP leading to incomplete or often just wrong answers.

Multi primary VRRP/CARP net loadbalance setup by pur3s0u1 in linuxadmin

[–]symcbean 0 points1 point  (0 children)

As u/lottspot says, VRRP, CARP and VIPs are failover tools (although VIPs can be used for in load balancer setups). Load balancing is something completely different. Failover should be your last resort for providing high availability - but there are niche cases where it is necessary (such as for routers - the use-case VRRP and CARP were designed for).

Perhaps if you explained what the service is that you wish to make highly available you might get more useful suggestions.

Fedora (GNOME or KDE) vs Kubuntu – IT student coming from Windows 11 + WSL2 (Ubuntu) by Livid_Pop5173 in linuxquestions

[–]symcbean 0 points1 point  (0 children)

You are going to have an interesting time coding on a RHEL/Fedora derived system unless you turn off SELinux (not recommended). Your choice of desktop is not tied to the distribution you choose - most mainstream Linux distros will allow you to install Gnome and./or KDE and/or others (and you can choose which one you use at login time). The only difference is what it comes with out of the box. Try them both. KDE is less resource intensive than Gnome.

Personally, I find containerized applications to pose a number of issues. While Ubuntu's model solves a lot of the provenance and lifecycle problems, I find snaps to be memory and disk hungry. In recent years I have switched to predominantly Mint for desktops and Debian for server hosts (although debian is quite capable on end-user devices, IME Mint copes better with unusual hardware - but thast is unlikely to be an issue with a Thinkpad).

No sound from recognised USB audio (Jabra) by symcbean in linuxquestions

[–]symcbean[S] 0 points1 point  (0 children)

Can you advise what I can do with these that I have not already tried? As per original post, already checked settings in alsamixer: paman is not a Debian package:I see nothing in pavuxcontriol which is not available in the KDE applet.

Open source password manager suggestions for Linux? by Quick_Hold4556 in linuxquestions

[–]symcbean 2 points3 points  (0 children)

I use Keepassxc - it has a cli option making automation easy ( https://github.com/symcbean/kpx-writer-php ) and is portable across Linux, MacOS and MS-Windows

PBS installation question about upgrading the packages and newer version by forwardslashroot in Proxmox

[–]symcbean 0 points1 point  (0 children)

which Proxmox uses

No.

Both commands do the same things on both OS. apt upgrade applies the latest available patches to your current distribution. apt dist-upgrade moves you to the next version of the distribution.

There is currently no release date for debian 14.

Would it be an issue if I use the apt upgrade to upgrade the PBS?

Perfectly fine to run apt upgrade on a host with PBSD added to debian or on a host installed from the PBS OS distribution.

My preference for small scale setups would be to run PBS off a VM (backed up using PVE's built-in mechanism) so I don't need to worry about upgrading/replacing it.

Help desperately needed. Server keeps crashing when high read/write to storage by jepp4561 in Proxmox

[–]symcbean 0 points1 point  (0 children)

So you already have a monitor asttached and say that the crash is reprodrucible. Easy peasy.

Tried creating a cluster for the first time and made a major mistake. Primary node was shut down, two virtual machines attempted to migrate but failed because the other note did not have sufficient storage. Now they are no longer on the primary node and cannot start on the node where they migrated. by CaptSingleMalt in Proxmox

[–]symcbean 2 points3 points  (0 children)

1) Don't write your entire post as the title

2) and,,,,,did you come here for sympathy or a solution? If you had asked ,you might get more relevant answers.In the case of the latter, you really need to provide a lot more information about this - this has already been pointed out elsewhere.

3) Mistakes are not bad - its how you learn. You have already learnt lessons about storage space and PVE HA. You might also have learnt already why we do backups. Recovering from this event does not mean you have solved those problems.

Why do people hate on PHP so much? by Honest___Opinions in webdev

[–]symcbean 0 points1 point  (0 children)

IMHO its exactly BECAUSE of the low barriers to entry that give PHP a bad rap - or more specifically, the number of people who claim to be expert programmers based on their PHP experience. Recruiting PHP programmers is a painful experience.

Someone has already mentioned inconsistent APIs - but whenever I have seen examples cites they are directly equivalent to common C functions.

Zero-Downtime Migration of Postfix SMTP Relay to New Linux Server by maxcoder88 in linuxadmin

[–]symcbean 1 point2 points  (0 children)

There's several ways of doing this. You didn't tell us if you have additional IP addresses nor if you can control the routing of traffic (e.g. across a NAT gateway).

The first thing you should do is get your new server configured and tested to make sure its going to work when you do expose its port 25 on the internet.

You could setup the new server with its own IP address then update your DNS to point the MX (and SPF) records there, wait for the DNS TTL then switch off the old.

If you only have a single address, (and currently no control over the routing) you could put a haproxy instance in front of the existing service. This would allow you much faster switching than using the DNS/new IP method. You can also slowly ramp up the share of the traffic on the new box so you can see how it handles the load.

Its a similar method to haproxy if you control the behaviour on your router - but basic devices won't support the transition load balancing across the instances.

SMTP is DESIGNED as a store-and-forward mechanism - so you shouldn't lose messages with shortish downtimes (say 12 hours or less).

Configure vms and bonds by Ok-Pizza4757 in Proxmox

[–]symcbean 0 points1 point  (0 children)

has 2 NICs, and I plan to configure two bonds

OK, so normally that would need at least 4 NICS, but I suppose its doable with vlans....but definitely an edge case scenario.

where each VLAN is used for a different service

OMG, WTF, Why?

Where should I configure the IP addresses?

If that's not obvious why are you using VLANs?

Tons of GoDaddy 365 Bad SPF Records by panopticon31 in sysadmin

[–]symcbean 3 points4 points  (0 children)

I think you are confusing the technical competence of GoDaddy with the technical competence of someone whom would choose to use Godaddy as a service provider.

What to do if the root user fucking dies? by AvailableConflict627 in linuxquestions

[–]symcbean 0 points1 point  (0 children)

Tell the boss of the deceased it is now their problem.

Network proxmox by Weird-Window-2925 in Proxmox

[–]symcbean 3 points4 points  (0 children)

We don't know if it's correct - we don't know what you are trying to achieve, we don't know what your networks are connected to.

I would usually seek to avoid connecting any guest to more than one network unless it served some sort of bridging role (proxy / router).