Common Server issues – FAQs and answers from those in the know
Cobian backup - native error 00059
15 May 2026 @ 2:38 am
I have these 2021-2022 backup files (.pbd) made with Cobian Backup Gravity 11.
Now I'm trying to restore its contents, but I'm getting "Hashed list of file names is invalid - Native error".
At binwalk I can see files within, which seems to indicate a healthy unencrypted file.
The hexdump shows head contains "FIMG" and "ADDI".
Edit
This post here (https://flammlin.com/blog/2022/11/06/hashed-list-of-file-names-is-invalid) shows this error, and his solution was to disable CRC after compression.
My case is that files are already created, therefore I still don't know how to solve this.
How can I automatically delete any deployment of a fine-tuned OpenAI model on Azure that hasn't been used in the past x hours?
14 May 2026 @ 11:58 pm
How can I automatically delete any deployment of a fine-tuned OpenAI model on Azure that hasn't been used in the past x hours?
I am aware of 15-day timeout. However, this is too long for me, as this represents a cost of. 15 days * 24 hours/day * 2 USD/hour = 720 USD, and I have often several fine-tuned OpenAI model on Azure, so I am looking at a 4-digit monthly bill for unused models.
How to truncate a zipped file?
14 May 2026 @ 8:02 pm
I have very large log files and I often truncate them with:
truncate -s 20M filename.log
However, I also have some files that have been zipped and they are smaller, but I want to shrink them further or trim them further. Ideally I would have truncated them before they were zipped.
filename.log.gz
I have not tried to truncate directly on the file as I am not sure it is safe, and I also don't want to unzip the file as it might be too large to fit. Is there a way to truncate so it truncates the file in the zip to make the final final much smaller.
Can Ansible list all hosts that use a specific role?
14 May 2026 @ 1:59 pm
I am using Ansible roles to configure certain aspects of a wide variety of servers. A good example is the webserver.
I have a playbook per server (e.g. server1.yml) which uses the role webserver if server1 should have a webserver configured.
This works fine.
But when I make a change to the webserver role, I want to update all servers which run a webserver. I struggle to convince Ansible to give me a list of the relevant servers (i.e. all servers that run a webserver, which is all servers that use the role webserver).
The options I came up with until now are:
have a group of all servers that run a webserver in the inventory -> I can use this group
have a playbook to deploy the webserver (instead of or in addition to the "per server" approach I currently have?)
find the hidden knob in Ansible that can do just what I want :)
The issue with t
Serve Django static content from container with local webserver and SELinux
14 May 2026 @ 1:39 pm
I have a Django application that is running in a container. On container startup, collectstatic is called and static files are collected into a volume that is mounted in the container.
I want to serve these static files using the webserver running on the host (not in a container). So basically the webserver on the host should forward everything but /static to the container and serve /static from disk.
The setup is working when I disable SELinux. But not with SELinux enabled...
The SELinux type of the directory where static files are collected to is container_file_t. With this SELinux type, the webserver cannot read the files (it needs httpd_sys_content_t).
The other way around (setting the directory to httpd_sys_content_t) would not allow the container to write the static files there.
So either way, one of the parties (either the container or the webserver) is unable to
Is it possible to configure recursing bind9 to try alternate authoritative servers on rejected queries?
14 May 2026 @ 1:03 pm
Context
Obviously reality is subject to change, but as I write this, the authoritative nameservers for achewood.com are in an interesting state. According to com., there are 2 authoritative servers:
achewood.com. 172800 IN NS ns1.korehosting.net.
achewood.com. 172800 IN NS ns2.korehosting.net.
ns2 is currently refusing all requests, but ns1 is working fine and shows there are actually 3 authoritative servers:
achewood.com. 86400 IN NS ns1.korehosting.net.
achewood.com. 86400 IN NS ns3.korehosting.net.
achewood.com. 86400 IN NS ns2.korehosting.net.
My problem is that my recursive dns server appears to be only trying ns2 (which, again, is refusing all requests), with this showing up in the logs (67.205.174.156 is ns2):
How do I know if I'm using Google Cloud Shielded Virtual Machines
13 May 2026 @ 9:27 am
Having received an email from Google about Secure Boot certificates expiring, I'm not sure if my servers are affected!
I'm pretty sure I'm unaffected as these are the Shielded VM settings. If someone could confirm I'd be happy :)
Secure Boot Off
vTPM Off
Integrity Monitoring Off
Thanks
Zabbix cannot fetch disk usage from a host
12 May 2026 @ 10:50 am
I set up Zabbix on my infrastructure and added a host.
Attempting to fetch disk usage details from the host results in this error:
Latest data
Details
Cannot execute operation
Cannot send request: item "FS [(C:)]: Get data" on host "CS-COK-LAP-036" is not monitored.
But it can fetch other metrics.
What is the cause?
But it can fetch other metrics.
What is the cause?Windows Server 2025 cannot rejoin Active Directory 2019 domain, due to "The request is not supported" [closed]
11 May 2026 @ 7:05 pm
I have a Windows Server 2025 machine I am trying to rejoin to an Active Directory 2019 domain that is healthy and has all FSMO roles. Attempting to join, results in "The request is not supported".
Some background -- this Server 2025 machine was previously a domain controller on this same domain, but was decommissioned due to replication was broken. I had the worst time trying to gracefully remove the Server. To attempt to clean up the old metadata, I went into ADUC on the 2019 DC, navigated to the Domain Controllers OU, right clicked the Server 2025 machine and deleted it. It warned me that it was a global catalog and I confirmed the deletion. I uninstalled the The AD DS and DNS roles, but I'm not sure how much is remaining. The server is in WORKGROUP. The old computer object was cleaned up from AD on the 2019 DC.
Here is what I have tried and verified:
Discovered replication was broken between the two domain controllers
Ran dcdiag /te
After phishing incident, some entra devices have registration time stamp = activity. Odd?
11 May 2026 @ 6:48 pm
In Microsoft Entra, are equivalent timestamps for registered and last activity and signed on and last password reset an indication of a persistence play by an attacker or is it a normal activity?
Example:
Registered / Activity (phishing mail, eg. 5th May 07:00):
BCC dispenser user account device: 5/5/2026, 08:27 and AM / 5/10/2026, 08:27 AM
Some other user account device: 5/5/2026, 08:45 AM and / 5/10/2026, 08:45 AM
... etc, 1:1 matching timestamp, close proximity to sending phishing event.
Looking at these user accounts properties, they all show timestamps like this:
User 1 properties:
Sign in sessions valid from date time: 5/5/2026, 07:21 AM
Last password change date time: 5/5/2026, 07:21 AM
User 2 properties:
Sign in sessions valid from date time: 5/5/2026, 07:12 AM
Last password change date time: 5/5/2026, 07:12 AM
Lets assume the attack happ