Common Server issues – FAQs and answers from those in the know
How would I add a catalog to a linked server in Microsoft SQL?
13 January 2026 @ 3:34 pm
This is a common question that I cannot seem to find anything on.
How do I add an existing catalog to a linked server?
I have read through the "you have to add a login to the catalog you need to access from the linked server".
But, very little guidance past that. Are there some references or third-party books that I can obtain that actually discuss this?
Automate Debian Trixie upgrade (locally modified config files)
13 January 2026 @ 3:09 pm
I haved used this command line previously to upgrade from Debian Buster to Bullseye, and Bullseye to Bookworm : (after editing sources.list files to point to the new release)
UCF_FORCE_CONFFOLD=y /usr/bin/apt-get -q -y -o Dpkg::Options::="--force-confold" -o Dpkg::Options::="--force-confdef" full-upgrade
(*) see below for flag explanation
When upgrading to Trixie, I was surprised to see a few prompts appear during the upgrade, asking :
A new version […] of configuration file […] is available, but the
version installed currently has been locally modified
With previous releases, these prompts didn't appear, although the locally edited config files were present, so I'm wondering what changed, and how to troubleshoot this :
Is this a dpkg or ucf prompt ?
Are the flags I use not suitable any more ?
Windows MSU Patch Installation Fails at 94% Post-Restart with "Undoing Changes" – No Errors in CBS Logs (Tried DISM Extraction & Step-by-Step Install)
13 January 2026 @ 10:32 am
I'm encountering an issue installing a Windows MSU patch (e.g., KBXXXXXXX) using WUSA on Windows 10. The initial installation phase completes successfully, but after restarting, the post-install phase reaches 94% on the blue screen and fails with the message: "We couldn't complete the updates. Undoing changes. Don't turn off your computer." The system then reverts, and the update isn't applied.
No obvious errors in CBS.log, WindowsUpdate.log, or
SetupAPI.dev.log. I've enabled verbose logging and used
Get-WindowsUpdateLog to check ETL files, but nothing points to the
cause.
This happens consistently, even in Safe Mode.
System health checks (DISM /RestoreHealth, SFC /scannow, CHKDSK /f
/r) pass without issues.
Reset Windows Update components (cleared SoftwareDistribution and
Catroot2 folders).
Tried manual installation via a PowerShell script that extracts the
MSU (using expand.exe), identifies SSU and main CABs, checks if
the
xmlsec1 - KEY-NOT-FOUND
13 January 2026 @ 9:11 am
I wan't to add a batch script to verify xml signatures.
The keys are in x509 certificates (all.pem). All 3 certificates are in the pem file: signing, ca and root - in that order. I also have an <ds:Signature> Element in the XML, also containing all 3 certificates. So it should work even without the extra pem file.
xmlsec1 --verify --print-debug --insecure --pubkey-cert-pem all.pem --enabled-key-data x509 --id-attr:id "datatosign" ./foo.xml
As soon as I remove the '--insecure' flag, i get the error: KEY-NOT-FOUND It validates with the flag.
Why are the key's not found in the XML or in the separate pem file?
I'm using xmlsec1 version 1.3.9 on alpine.
Import podman created image to proxmox cluster
12 January 2026 @ 7:37 pm
I found out that in proxmox 9.1 it is now possible to create LXC containers from OCI images.
I would like to leverage this feature to implement the following workflow:
define an image using a Containerfile
build the image in OCI format using podman
export the image as a tar.gz file and import it within a storage in a proxmox cluster, to use as a container template
create a container from the image
(the ability to use a Containerfile is particularly important, as it would allow me to easily tweak my build as I discover requirements during the development process).
However when trying to run containers created through this method I get the following error:
__lxc_start: 2127 Failed to spawn container "105"
TASK ERROR: startup for container '105' failed
Here are the detailed steps:
firstly, I created a basic containerfile on my development machin
Domino Server Stops Responding to HTTP Requests
12 January 2026 @ 6:14 pm
The Domino server runs fine for a few hours, sometimes even for a day or so, then it displays an error on the console "HTTP Server: Open Error, unexpected error returned from NTI subsystem" after which it stops responding to HTTP requests and subsequently displays "Insufficient memory" for some other Domino server tasks. As soon as I restart the server everything is fine for a while then it happens again.
From console:
01/11/2026 01:09:12 PM HTTP Server: Open Error, unexpected error returned from NTI subsystem
01/11/2026 01:29:34 PM Directory Cataloger Finished processing entitlements.nsf: Insufficient memory.
01/11/2026 01:29:34 PM Directory Cataloger shutdown: Insufficient memory.
Domino version:
Release 12.0.2FP7 HF26 for Windows/64
Using ACME/LetsEncrypt or TLS web.
SMTP is not running on the server
I have a copy running on 3 different servers. An in house physical Windows Server 2019, a VPS running Windows Server 2022, and another VP
Set up BIND to redirect captive.apple.com to internal IP
12 January 2026 @ 2:20 pm
We are setting up a captive portal for guest users using our Cisco ISE servers, and we have a linux box running BIND just for those users.
All OSes work fine and redirect to the ISE guest login page to allow users to sign up for guest access, but Apple does not.
Cisco said we need to redirect captive.apple.com back to the ISE server to get the portal splash screen, but BIND fails to recognise an apple.com configuration file in the named directory. Any ideas how this might be able to be done?
Sharing / shiping of layer of an immutable linux distribution
12 January 2026 @ 12:24 pm
First, let's share some context. I have been tasked to design a new development environment for the team I work in. Most details of the constraints don't matter for this question, though.
After a bit of research, I have come to the conclusion that the best base would be an immutable Linux distribution. In my case, Fedora Kionite.
From my understanding, the whole root FS is built as a set of image, the base image is provided by fedora, and we can add more layers if we ever need to touch the root FS.
I would like to preinstall some tools and software into the system and I have three options :
Automate the entire installation through scripts.
Connect as the user (with a default password before they touch the computer) and install all tools for their users.
Do the installation in a layer and then ship this layer to all of the systems.
The two first solutions are ways that I understand and know I can build.
The last
Iptables on ubuntu 24.04 completely ignores NAT table (even for logging)
12 January 2026 @ 12:10 pm
Faced a problem while trying to setup port forwarding on ubuntu 24.04 - turns out, any NAT rules in iptables (PREROUTING, in particular) are completely ignored.
What i've tried:
# Generated by iptables-save v1.8.10 (nf_tables) on Mon Jan 12 12:01:40 2026
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A PREROUTING -j LOG
COMMIT
# Completed on Mon Jan 12 12:01:40 2026
# Generated by iptables-save v1.8.10 (nf_tables) on Mon Jan 12 12:03:31 2026
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A PREROUTING -j LOG
-A PREROUTING -j ACCEPT
COMMIT
# Completed on Mon Jan 12 12:03:31 2026
# Generated by iptables-save v1.8.10 (nf_tables) on Mon Jan 12 12:04:33 2026
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A PREROUTING -j ACCEPT
-A PREROUTING -j LOG
COMMIT
# Completed on Mon J
SMART Extended self-test stuck at 10% remaining - WDC WD60EZAZ-00SF3B0 [migrated]
12 January 2026 @ 6:21 am
I have 3 computers with a combined total of 10 6TB Hard Drives, all WDC WD60EZAZ-00SF3B0. All computers are Ubuntu 24.04 so software tools for other systems (Windows) will not work on my machines.
The other hard drives in the computers are not having issues.
For these 10 drives, the short tests run fine, but extended tests get stuck at 10%:
Self-test execution status: ( 241) Self-test routine in progress... 10% of test remaining.
The extended self test routine recommended polling time varies from drive to drive from ~200 minutes (~3.5 hours) to ~750 minutes (~12.5 hours).
I have had the tests run for about 3 days with no change in status, so I presume the tests are stuck. I have cancelled the extended tests and rerun them multiple times to no avail. I am fairly confident that the drives are healthy since they pass the short offline test and I would not expect all 10 drives to be failing at the same time.
I