Sysadmin Mega Thread

Just small update, what I griped about was not exactly the case → default inherited permissions are probably set incorrectly, allowing any user who passes through pg_hba filter to inspect any object in any database, but selects themselves thankfully fail.

So you can traverse ang glen info on all databases, schemas and other objects.

TLDR: If you are sick as a dog, then dont panic outright and give yourself time to clean slate verification.

1 Like

How do we feel about this?

Idk how well supported CRLs are in package managers or other non-browser situations.

APIs? Curl? wget?

1 Like

yeah I just got this email too. Not sure how I feel about it.

2 Likes

I am currently living in certificate hell, I have very strong opinions right now that I am sure are mathematically/cryptophically unsound.

4 Likes

slippery slope

who invalidated these cert auth’s?
We know the publicly compromised auth’s, but stuxnet…well, I would not know cause people hold/held clearances…

Let’s not forget cloudflare DNS blocked perfectly legal sites stateside based on multiple presidential administrations (both sides of the aisle) pressure overseas…

Do any certificates exist outside of hell?

@wendell shot in the dark, but what would it take to make one of these with both vga and displayport inputs (and ideally replace the mini-usb with usb-c)

I currently have to shlep a small portable monitor and keyboard around to sites with headless systems, and it is a pain.

I know a pikvm with an active vga to hdmi adapter is probably viable, but still less convenient than this for quick on-site stuff.

theres a version of the pi kvm thats usb into a laptop. that plus vga to hdmi adapter is the beezknees

1 Like

You don’t need to lug the monitor around if you’ve got a laptop (or maybe even a tablet) with you. Those cheap $7 USB HDMI capture cards, and a set of VGA->HDMI and DP->HDMI adapters will work. I throw my set of those, and a mini USB keyboard with trackball, in my laptop bag.

The benefit of a crash cart adapter is that you can give someone remote control of it. The downside is the custom software of those crash-carts is usually awful and doesn’t often get upgraded to work after the next OS upgrade, while simple capture cards use normal system capture/webcam facilities that won’t ever go away.

1 Like

I can’t find this. Do you remember where you saw it?

Anyone know why after cloning a esxi cluster datastore LUN (at the SAN) and mounting it and adding a vmdk from the cloned datastore to a new VM/guest…

the LVM is seen but and when i try to mount the filesystem that should be there… isnt.
The superblock is missing.

I can see the volume group… I can see the logical volume

but if run blkid on the LV… nothing
if i try to mount the LV (which should be xfs) get a superblock is missing error.

a DM for the LV is created… and the path to the LV exists and shows up in /dev/mapper/

My best guess at the moment is theres some sync writes command for esxcli that i should do… or maybe theres a write sync option for the guest vm i need to turn on… idk yet

sipeed, got one, review soon. first batch on ali express and new more awesome firmware on GitHub

1 Like

Oh nanokvm! That’s great, can’t wait to see the review!

1 Like

Better put it here than the lounge haha

@wendell

I preordered one of these before your video came out. I typically dont preorder as its quite hit or miss to what you get.

You mentioned security risks because of networking. Is there any risk of network tunneling over USB c or anything?

1 Like

Wow that link preview is all moon runes. Uhhh well theres an english page folks :joy:

the USB kvm looks really really solid but keep in mind the web app is an html5 app. but it is browser sandboxed

I’m also really satisfied with the explanations for the nanokvm and don’t think there is a big security issue here vs say other similar devices

1 Like

I expected as such. Thanks for that heads up. I can typically tolerate web tech as long as it doesnt break when I build or install it. Its the breakage and maintenance that gets exhausting

Okay that puts me a bit at ease. Ive done a preorder from china before on something similar and have been burned lol