Match linux command-line arguments to view their help text.
Tag: SysAdmin
system administrator related links
stackshare.io
Dev / Production stacks for all to see. Handy tool to see what software is trending today.
aws.amazon.com
Amazons’s cloud computing & web hosting service.
AWS Compute Optimizer now applies AWS-generated tags to EBS snapshots created during automation
24 February 2026 @ 7:58 pm
AWS Compute Optimizer makes it easier to identify snapshots that are created when snapshotting and deleting unattached Amazon Elastic Block Store (EBS) volumes by automatically applying an AWS-generated tag during creation. This enhancement improves visibility and tracking of EBS snapshots created through Compute Optimizer Automation.
When Compute Optimizer creates a snapshot before deleting an unattached EBS volume—whether initiated through manual actions or automation rules—the snapshot now receives the tag aws:compute-optimizer:automation-event-id with a tag value that links the snapshot to the unique identifier of the automation event that created it. This allows you to easily identify, track, and manage snapshots created through the automated optimization process, helping you maintain better governance over your backup resources and understand the source of snapshots in your environment.
This is available in all AWS Regions where AWS Compute Optimizer
AWS Observability now available as a Kiro power
24 February 2026 @ 7:05 pm
Today, AWS announces AWS Observability as a Kiro power, enabling developers and operators to investigate infrastructure and application health issues faster with AI agent-assisted workflows in Kiro. Kiro Powers is a repository of curated and pre-packaged Model Context Protocol (MCP) servers, steering files, and hooks validated by Kiro partners to accelerate specialized software development and deployment use cases. The AWS Observability power packages four specialized MCP servers with targeted observability guidance: the CloudWatch MCP server for observability data; the Application Signals MCP server for application performance monitoring; the CloudTrail MCP server for security analysis and compliance; and the AWS Documentation MCP server for contextual reference access. This unified platform gives Kiro agents instant context for comprehensive workflows including alarm response, anomaly detection, distributed tracing, SLO compliance monitoring, and security investigation. A
Announcing AWS Elemental Inference
24 February 2026 @ 7:00 pm
AWS Elemental Inference, a fully managed Artificial Intelligence (AI) service that enables broadcasters and streamers to automatically generate vertical content and highlight clips for mobile and social platforms in real time, is now generally available. The service applies AI capabilities to live and on-demand video in parallel with encoding and helps companies and creators to reach audiences in any format without requiring AI expertise or dedicated production teams.
With Elemental Inference you can process video once and optimize it everywhere—creating main broadcasts while simultaneously generating vertical versions for TikTok, Instagram Reels, YouTube Shorts, Snapchat, and other mobile platforms in parallel with live video. For example, sports broadcasters can automatically generate vertical highlight clips during live games and distribute them to social platfo
Amazon RDS Snapshot Export to S3 now available in AWS GovCloud (US) Regions
24 February 2026 @ 6:26 pm
Amazon RDS Snapshot Export to S3 is now available in AWS GovCloud (US) regions, enabling you to export snapshot data in Apache Parquet format for analytics, data retention, and machine learning use cases. Snapshot export to S3 supports all DB snapshot types (manual, automated system, and AWS Backup snapshots) and runs directly on the snapshot without impacting database performance. The exported data in Apache Parquet format can be analyzed using other AWS services such as Amazon Athena, Amazon SageMaker, or Amazon Redshift Spectrum, or with big data processing frameworks such as Apache Spark. You can create a snapshot export with just a few clicks in the Amazon RDS Management Console or by using the AWS SDK or CLI. Snapshot Export to S3 is supported for Amazon Aurora PostgreSQL - Compatible Edition and Amazon Aurora MySQL, Amazon RDS for PostgreSQL, Amazon RDS for MySQL, and Amazon RDS for MariaDB snapshots. For more inform
AWS Deadline Cloud now supports running tasks together in chunks
24 February 2026 @ 6:13 pm
Today, AWS Deadline Cloud announces support for grouping tasks into chunks to efficiently execute multiple tasks together. AWS Deadline Cloud is a fully managed service that simplifies render management for computer-generated 2D/3D graphics and visual effects for films, TV shows, commercials, games, and industrial design. When your job has short tasks, or tasks that need to run in an environment with a long startup time, chunking them together for execution reduces the time and cost for completing the job. When creating a job, you can now manually specify a chunk size for the number tasks to group together for execution, or alternately specify a target run time for the execution of a chunk of tasks. The target run time will be used to dynamically change the number of tasks grouped together as the job completes to improve execution efficiency and achieve the target run time. Running tasks together in chunks is now available in all AWS Regions where AWS Deadline Clou
Amazon EC2 C8i and C8i-flex instances are now available in Asia Pacific (Malaysia) and South America (Sao Paulo) regions
24 February 2026 @ 5:00 pm
Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C8i and C8i-flex instances are available in the Asia Pacific (Malaysia) and South America (Sao Paulo) regions. These instances are powered by custom Intel Xeon 6 processors, available only on AWS, delivering the highest performance and fastest memory bandwidth among comparable Intel processors in the cloud. These C8i and C8i-flex instances offer up to 15% better price-performance, and 2.5x more memory bandwidth compared to previous generation Intel-based instances. They deliver up to 20% higher performance than C7i and C7i-flex instances, with even higher gains for specific workloads. The C8i and C8i-flex are up to 60% faster for NGINX web applications, up to 40% faster for AI deep learning recommendation models, and 35% faster for Memcached stores compared to C7i and C7i-flex. C8i-flex are the easiest way to get price performance benefits for a majority of compute intensive workloads like web and application servers
Amazon EC2 R7a instances are now available in the Asia Pacific (Hyderabad) Region
24 February 2026 @ 5:00 pm
Starting today, the general-purpose Amazon EC2 R7a instances are now available in AWS Asia Pacific (Hyderabad) Region. R7a instances, powered by 4th Gen AMD EPYC processors (code-named Genoa) with a maximum frequency of 3.7 GHz, deliver up to 50% higher performance compared to R6a instances. These instances can be purchased as Savings Plans, Reserved, On-Demand, and Spot instances. To get started, visit the AWS Management Console, AWS Command Line Interface (CLI), and AWS SDKs. To learn more, visit the R7a instances page.
Amazon EC2 I7ie instances now available in AWS Africa (Cape Town) region
24 February 2026 @ 4:00 pm
AWS is announcing Amazon EC2 I7ie instances are now available in AWS Africa (Cape Town) region. Designed for large storage I/O intensive workloads, I7ie instances are powered by 5th Gen Intel Xeon Processors with an all-core turbo frequency of 3.2 GHz, offering up to 40% better compute performance and 20% better price performance over existing I3en instances. I7ie instances offer up to 120TB local NVMe storage density for storage optimized instances and offer up to twice as many vCPUs and memory compared to prior generation instances. Powered by 3rd generation AWS Nitro SSDs, I7ie instances deliver up to 65% better real-time storage performance, up to 50% lower storage I/O latency, and 65% lower storage I/O latency variability compared to I3en instances. I7ie are high density storage optimized instances, ideal for workloads requiring fast local storage with high random read/write performance at very low latency consistency to access large data sets. These instances are avai
Amazon EC2 M8a instances now available in AWS Europe (Frankfurt) region
24 February 2026 @ 4:00 pm
Starting today, the general-purpose Amazon EC2 M8a instances are available in AWS Europe (Frankfurt) region. M8a instances are powered by 5th Gen AMD EPYC processors (formerly code named Turin) with a maximum frequency of 4.5 GHz, deliver up to 30% higher performance, and up to 19% better price-performance compared to M7a instances. M8a instances deliver 45% more memory bandwidth compared to M7a instances, making these instances ideal for even latency sensitive workloads. M8a instances deliver even higher performance gains for specific workloads. M8a instances are up to 60% faster for GroovyJVM benchmark, and up to 39% faster for Cassandra benchmark compared to Amazon EC2 M7a instances. M8a instances are SAP-certified and offer 12 sizes including 2 bare metal sizes. This range of instance sizes allows customers to precisely match their workload requirements. M8a instances are built using the latest sixth generation AWS N
AWS AppConfig integrates with New Relic for automated rollbacks
24 February 2026 @ 4:00 pm
AWS AppConfig today launched a new integration that enables automated, intelligent rollbacks during feature flag and dynamic configuration deployments using New Relic Workflow Automation. Building on AWS AppConfig's third-party alert capability, this integration provides teams using New Relic with a solution to automatically detect degraded application health and trigger rollbacks in seconds, eliminating manual intervention. When you deploy feature flags using AWS AppConfig's gradual deployment strategy, the AWS AppConfig New Relic Extension continuously monitors your application health against configured alert conditions. If issues are detected during a feature flag update and deployment, such
networkworld.com
Information, intelligence and insight for Network and IT Executives.
From packets to prompts: What Cisco’s AITECH certification means for IT pros
24 February 2026 @ 8:08 pm
Cisco’s new AI Technical Practitioner (AITECH) certification marks a key moment in AI’s transition from an interesting experiment to a core technical requirement.
Unveiled at Cisco Live EMEA, the AITECH certification reinforces the idea that AI is a core skill for mainstream IT professionals, not just data scientists and ML researchers. AI is now part of the infrastructure job versus something that lives off to the side in an innovation lab.
For decades, Cisco certifications have been the gold st
HPE’s latest Juniper routers target large‑scale AI fabrics
24 February 2026 @ 6:49 pm
HPE is taking the wraps off two new router families aimed at helping customers build the infrastructure needed to support large‑scale AI fabrics, distributed cloud environments, and data center interconnects (DCI).
At next week’s Mobile World Congress 2026, the vendor will introduce the additions to its core Juniper PTX Series routers: the high-end Juniper PTX12000 family, and the
Nvidia: Latest news and insights
24 February 2026 @ 5:50 pm
More processor coverage on Network World:Intel news and insights | AMD news and insights
With its legacy of innovation in GPU technology, Nvidia
New Relic connects observability platform to business outcomes
24 February 2026 @ 4:28 pm
New Relic this week updated its observability platform with new capabilities designed to tie application health and performance directly to business outcomes. The updates will help enterprises that are embedding AI into revenue-generating applications and using code generation tools in their software development processes, New Relic says.
Brian Emerson, New Relic’s chief product officer, says there ar
2026 network outage report and internet health check
24 February 2026 @ 3:17 pm
ThousandEyes, a Cisco company, monitors how ISPs, cloud providers and conferencing services are handling any performance challenges and provides Network World with a weekly roundup of events that impact service delivery. Read on to see the latest analysis, and stop back next week for another update on internet and cloud traffic performance.
Note: We have archived prior-year outage updates, including our reports from 2025, 2024,
Nvidia lines up partners to boost security for industrial operations
24 February 2026 @ 1:51 am
Nvidia has extended its collaborations with a handful of security vendors in an effort to improve real-time threat detection and response across operational technology (OT) environments and industrial control systems (ICS).
“Many of these systems were originally designed for reliability and longevity, not for today’s threat techniques,” wrote Itay Ozery, director of product marketing for networking at Nvidia, in a blog post about the news.
Nvidia’s collaborations with Akamai, Forescout, Palo Alto Networks
Pure Storage becomes Everpure, acquires 1touch
24 February 2026 @ 1:07 am
Pure Storage has changed its name to Everpure and bought data classification company 1touch, the company announced on Monday. It’s moving to become not just a storage company but also a data management company that aims to help its enterprise customers make data usable for AI.
The vendor now known as Everpure is a significant player in the enterprise storage market and has racked up acknowledgements from analyst firms. Gartner ranked it ahead of competitors in the “leader” section of its enterprise storage market analys
Favorable Wi-Fi 7 prices won’t be around for long, Dell’Oro Group warns
23 February 2026 @ 10:30 am
If you’re considering a Wi-Fi 7 upgrade, now’s the time because prices are unusually low, according to the latest research from Dell’Oro Group.
A number of factors contributed to establish initial Wi-Fi 7 pricing far lower than normal for a new technology, says Siân Morgan, research director at Dell’Oro Group and lead author of the company’s latest quarterly Wireless LAN 5-Year F
Raising the temp on liquid cooling
23 February 2026 @ 10:00 am
Nvidia CEO Jensen Huang announced early this year that the new Vera Rubin processor, which is twice as powerful as the previous Grace Blackwell chip, doesn’t require its cooling water to be at a very cold temperature. In fact, the Vera Rubin can be cooled with water that’s 45 degrees Celsius, which is 113 degrees Fahrenheit. That’s hotter than the recommended settings for a hot tub. And it’s one degree hotter than the peak summer temperature in Las Vegas in 2025.
“With 45 degrees Celsius, no water chillers are necessary for data centers,” Huang said in his keynote address at the Consumer Electronics Show. “We’re b
Cisco and AT&T partner for 5G IoT services
20 February 2026 @ 6:28 pm
Cisco and AT&T have expanded their partnership to offer IoT and private network services via a dedicated 5G backbone that supports ultra-low latency, high speeds, security, and simplified management.
Specifically, Cisco will integrate its Mobility Services Platform, IoT Control Center, and Converged Core products with AT&T’s 5G Standalone service. The AT&T service, like other standalone offerings from Verizon or T-Mobile, is what the carrier calls a true 5G core, meaning it doesn’t rely on older 4G LTE infrastructure to deliver 5G services. It includes features such as the ability to support dedicated bandwidth to specific application workloads and to identify traffic ty
forensicswiki.org
Computer forensic tools and techniques used by investigators
cyberciti.biz
online community of new and seasoned Linux / Unix sysadmins.
Download of the day: GIMP 3.0 is FINALLY Here!
18 March 2025 @ 3:45 am
Wow! After years of hard work and countless commits, we have finally reached a huge milestone: GIMP 3.0 is officially released! I am excited as I write this and can't wait to share some incredible new features and improvements in this release. GIMP 2.10 was released in 2018, and the first development version of GIMP 3.0 came out in 2020. GIMP 3.0 released on 16/March/2025. Let us explore how to download and install GIMP 3.0, as well as the new features in this version.
Love this? sudo share_on: Twitter - Facebook -
How to list upgradeable packages on FreeBSD using pkg
16 March 2025 @ 8:25 pm
Here is a quick list of all upgradeable packages on FreeBSD using pkg command. This is equivalent to apt list --upgradable command on my Debian or Ubuntu Linux system.
Love this? sudo share_on: Twitter - Ubuntu to Explore Rust-Based “uutils” as Potential GNU Core Utilities Replacement
16 March 2025 @ 12:17 pm
In a move that has sparked significant discussion within the Ubuntu Linux fan-base and community, Canonical, the company behind Ubuntu, has announced its intention to explore the potential replacement of GNU Core Utilities with the Rust-based "uutils" project. They plan to introduce new changes in Ubuntu Linux 25.10, eventually changing it to Ubuntu version 26.04 LTS release in 2026 as Ubuntu is testing Rust 'uutils' to overhaul its core utilities potentially. Let us find out the pros and cons and what this means for you as an Ubuntu Linux user, IT pro, or developer.
Love this? sudo share_on: Twitter -
How to install KSH on FreeBSD
3 March 2025 @ 11:50 pm
Installing KSH (KornShell) on FreeBSD can be done with either FreeBSD ports or the pkg command. The ports collection will download the KSH source code, compile it, and install it on the system. The pkg method is easier, and it will download a pre-compiled binary package. Hence, it is recommended for all users. KornShell (KSH) has a long history, and many older Unix systems and scripts rely on it. As a result, KSH remains relevant for maintaining and supporting legacy infrastructure. Large enterprises, especially those with established Unix-based systems, continue to use KSH for scripting and system administration tasks. Some industries where KSLinux Sed Tutorial: Learn Text Editing with Syntax & Examples
3 March 2025 @ 9:47 am
Sed is an acronym for "stream editor." A stream refers to a source or destination for bytes. In other words, sed can read its input from standard input (stdin), apply the specified edits to the stream, and automatically output the results to standard output (stdout). Sed syntax allows an input file to be specified on the command line. However, the syntax does not directly support output file specification; this can be achieved through output redirection or editing files in place while making a backup of the original copy optionally. Sed is one of the most powerful tools on Linux and Unix-like systems. Learning it is worthwhile, so in tHow to tell if FreeBSD needs a Reboot using kernel version check
23 February 2025 @ 10:07 pm
Keeping your FreeBSD server or workstation updated is crucial for security and stability. However, after applying updates, especially kernel updates, you might wonder, "Do I need to reboot my system?" Let's simplify this process and provide a straightforward method for determining whether a reboot is necessary using the CLI, shell script, and ansible playbook.
Love this? sudo share_on: TwitterCritical Rsync Vulnerability Requires Immediate Patching on Linux and Unix systems
15 January 2025 @ 6:04 pm
Rsync is a opensource command-line tool in Linux, macOS, *BSD and Unix-like systems that synchronizes files and directories. It is a popular tool for sending or receiving files, making backups, or setting up mirrors. It minimizes data copied by transferring only the changed parts of files, making it faster and more bandwidth-efficient than traditional copying methods provided by tools like sftp or ftp-ssl. Rsync versions 3.3.0 and below has been found with SIX serious vulnerabilities. Attackers could exploit these to leak your data, corrupt your files, or even take over your system. There is a heap-based buffer overflow with a CVSS score of 9.8 that needs to be addressed on both the client and server sides of rsync package. Apart from that info leak via uninitialized stack contents defeats ASLR protection and rsync server can make client write files outside of destination directory using symbolic links.
Love this? sudo share_on:
How to control the SSH multiplexing with the control commands
15 January 2025 @ 8:29 am
Multiplexing will boost your SSH connectivity or speed by reusing existing TCP connections to a remote host. This is useful when you frequently connect to the same server using SSH protocol for remote login, server management, using IT automation tools over SSH or even running hourly backups. However, sometimes your SSH command (client) will not respond or get hung up on the session when using multiplexing. Typically, this happens when your public IP changes (IPv4 to IPv6 changes when using DNS names), VPN issues, or firewall cuts connections. Hence, knowing SSH client control commands can save you time and boost your productivity when such gotcZFS Raidz Expansion Finally, Here in version 2.3.0
14 January 2025 @ 9:19 am
After years of development and testing, the ZFS raidz expansion is finally here and has been released as part of version 2.3.0. ZFS is a popular file system for Linux and FreeBSD. RAIDz is like RAID 5, which you find with hardware or Linux software raid devices. It protects your data by spreading it across multiple hard disks along with parity information. A raidz device can have single, double, or triple parity to sustain one, two, or three hard disk failures, respectively, without losing any data. Hence, expanding or adding a new HDD is a very handy feature for sysadmins in today's data-sensitive apps.
Love this? sudo share_on: Twitter -
How to run Docker inside Incus containers
18 December 2024 @ 5:44 am
Incus and Docker both use Linux kernel features to containerize your applications. Incus is best suited when you need system-level containers that act like traditional VMs and provide a persistent developer experience. On the other hand, Docker containers are ephemeral, i.e., temporary in nature. All files created inside Docker containers are lost when your Docker container is stopped or removed unless you stored them using volumes in different directories outside Docker. Docker is created as a disposable app deployment system. Incus containers are not typically created as disposables, and data is kept inside heartinternet.co.uk
Hosting packages for an initial web presence
Heart Internet Win Gapstars Innovation Award 2026
23 February 2026 @ 11:57 am
We’re incredibly proud to celebrate our Site Reliability Engineering team, who have won the Gapstars Innovation Award for their outstanding work improving platform stability, security, and visibility across our shared...
The post Heart Internet Win Gapstars Innovation Award 2026 appeared first on Heart Internet.
A/B Testing Explained: A Practical Guide To Better Results | Part 1
20 February 2026 @ 8:32 am
If you want to improve your website you probably need to do A/B testing, otherwise known as split testing. Instead of guessing, A/B testing allows you to experiment more scientifically....
The post A/B Testing Explained: A Practical Guide To Better Results | Part 1 appeared first on Heart Internet.
How to enable two-factor authentication (2FA) on your Heart Internet account
28 January 2026 @ 12:37 pm
Account security matters, and switching on two-factor authentication (2FA) is a quick win. 2FA adds a second check during the sign-in process, so even if someone compromises your password, they still can’t get in. To enable 2FA: Step 1: Open your...
The post How to enable two-factor authentication (2FA) on your Heart Internet account appeared first on Heart Internet.
How to Choose the Perfect Domain Name for Your Business
9 July 2025 @ 9:30 am
Get Your Name Right – The Internet Never Forgets Choosing a domain name might sound simple – until you realise it’s the online equivalent of naming your child. No pressure....
The post How to Choose the Perfect Domain Name for Your Business appeared first on Heart Internet.
What is a VPS? And is it Time You Got One?
25 June 2025 @ 9:30 am
Discover what a VPS server is, how VPS hosting works, and why it’s ideal for small businesses. Learn the benefits and explore VPS plans with Heart Internet.
The post What is a VPS? And is it Time You Got One? appeared first on Heart Internet.
We’re Now Certified by the Green Web Foundation
11 June 2025 @ 9:30 am
💚 Hosting that works hard, treads lightly. Big news: Heart Internet is now officially listed with the Green Web Foundation. That means our hosting services are recognised as being...
The post We’re Now Certified by the Green Web Foundation appeared first on Heart Internet.
What is Web Hosting and Why Does Your Business Need It?
6 May 2025 @ 4:54 pm
Without web hosting, your website would not be visible or accessible to users! It is crucial to host your website with a website hosting service to ensure that your business...
The post What is Web Hosting and Why Does Your Business Need It? appeared first on Heart Internet.
How to Enable Root Access via SSH on Your VPS for Migration using Plesk
11 March 2025 @ 7:41 am
If you get one of the following messages from the Plesk migrator you should check that you are using root as the username along with the Plesk admin password. “The...
The post How to Enable Root Access via SSH on Your VPS for Migration using Plesk appeared first on Heart Internet.
How to Enable Root Access on Your VPS Server Using Plesk
11 March 2025 @ 7:40 am
If you get one of the following messages from the Plesk migrator you should check that you are using root as the username along with the Plesk admin password. “The...
The post How to Enable Root Access on Your VPS Server Using Plesk appeared first on Heart Internet.
Are your website fonts sending the right message?
3 February 2025 @ 10:18 am
Did you know that the fonts you use on your website can impact the way your customers perceive and interact with your brand?
The post Are your website fonts sending the right message? appeared first on Heart Internet.
serverfault.com
Common Server issues – FAQs and answers from those in the know
Dovecot is not allowing global sieve extensions
24 February 2026 @ 11:06 pm
I'm running dovecot-2.4.1-4 and postfix-3.10.5-1 on my Debian 13 machine. These are the default dovecot and postfix versions which got installed via "apt".
Everything is working fine with this email server, except for the fact that sieve thinks that global extensions are not enabled.
However, I have done everything that I can think of in order to enable the use of global extensions.
In conf.d/90-sieve.conf ...
sieve_script personal {
driver = file
path = /var/lib/dovecot/sieve
active_path = /var/lib/dovecot/sieve/default.sieve
}
sieve_script default {
type = default
name = default
driver = file
path = /var/lib/dovecot/sieve/default.sieve
}
sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute
sieve_plugins = sieve_imapsieve sieve_extprograms
sieve_pipe_bin_dir = /usr/share/dovecot-pigeonhole/sieve
In conf.d/90-sieve-extprograms.conf ...
sieve_pipe_socket_dir = sieve-pipe
sieve_filt
Sugon openbmc: how to reset password?
24 February 2026 @ 9:00 pm
I have a board (kgpe-d16) with sugon-openbmc as bmc.
I want to access via http.
This is the actually situation
ipmitool user list 1
ID Name Callin Link Auth IPMI Msg Channel Priv Limit
1 false false true CALLBACK
2 root true false true CALLBACK
3 admin true true true ADMINISTRATOR
ssh access works
Http not and return "Login failed. Please try again."
Any idea?
Youtube stream with ffmpeg getting squared 1:1
24 February 2026 @ 7:11 pm
I'm streaming to youtube with ffmpeg. This is the command
ffmpeg -probesize 32 -analyzeduration 0 -thread_queue_size 64 -f x11grab -draw_mouse 0 -video_size 1920x1080 -framerate 30 -use_wallclock_as_timestamps 1 -i :101+0,0 -thread_queue_size 64 -f pulse -ac 2 -ar 44100 -i auto_null.monitor -c:v libx264 -preset veryfast -tune zerolatency -b:v 13500k -maxrate 13500k -bufsize 18000k -pix_fmt yuv420p -g 60 -x264opts keyint=60:scenecut=0 -vf setsar=1:1,setdar=16/9 -c:a aac -b:a 160k -ac 2 -ar 44100 -af aresample=async=1:first_pts=0 -fflags nobuffer -flags low_delay -max_muxing_queue_size 512 -f flv -flvflags no_duration_filesize rtmp://a.rtmp.youtube.com/live2/KEY
Youtube displays the stream as a square, with the black bars on top and below. You can see it here:
https://www.youtube.com/watch?v=GdUlCYkcs_4
In stats for nerds you will notice the resolution at 1080x1
Apache prefork overload when Googlebot crawls thousands of subdomains via vhost rewrite
24 February 2026 @ 1:33 pm
Environment
VPS: 2 CPU / 4 GB RAM / 1 IP
OS: CentOS 7.4
Web server: Apache (Sentora) + PHP 5.4 prefork
DNS/CDN: Cloudflare Free + Flexible SSL
~10 main domains, ~24k mini-sites (subdomains)
Architecture overview
I use one central domain (maindomain.com) to handle routing
for all subdomains of all other domains.
On Cloudflare, every secondary domain has:
CNAME * maindomain.com
All requests from subdomains are rewritten at the Apache global VirtualHost level
(not .htaccess), and AllowOverride is disabled and mapped dynamically to folders under:
/app/sites/{unique-sub-domain-slug}/
Each main domain itself has its own independent VirtualHost and works normally.
Symptoms
Everything works correctly under low traffic.
However, when
Permissions denied inside podman volume
24 February 2026 @ 1:08 pm
I'm running synapse inside a podman compose setup, but inside the container, the service runs into errors due to not being able to access a file inside the mounted volume:
...
File "/usr/local/lib/python3.13/site-packages/synapse/media/media_storage.py", line 233, in store_into_file
os.makedirs(os.path.dirname(media_filepath), exist_ok=True)
~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "<frozen os>", line 218, in makedirs
File "<frozen os>", line 218, in makedirs
File "<frozen os>", line 218, in makedirs
File "<frozen os>", line 228, in makedirs
PermissionError: [Errno 13] Permission denied: '/data/media_store/remote_content'
Inside the container (with podman exec -it <container> bash) I can see that the directory is owned by root:
Monitor expiration of OpenSSH certificates (users and hosts)
24 February 2026 @ 10:52 am
Using OpenSSH certificates for host keys and user keys, I wonder whether their expiration could be monitored automatically in advance (before they actually do expire):
Of course the issuing CA could monitor the expiration, but it's not clear whether all certificates are used actually
When the user logs in using a certificate, the ID, serial number and fingerprint are logged, so that could be cross-checked with the CA
When logging in to a host that presents a host certificate, nothing about the certificate is being displayed (only when using ssh -v you'll see certificate, ID, serial number, issuing CA and validity)
Say you have a central monitoring system, how could host and user certificates be monitored?
Specifically user certificates used for automatic processing (like clusters, configuration, backup, monitoring) would be interesting.
https redirect with apache behind nginx
24 February 2026 @ 9:06 am
Let suppose we have static website with Apache 2.4 behind nginx reverse proxy.
Nginx provides HTTPS and connects to Apache on HTTP port.
Then you request https://example.com/dir . Because it is a directory, Apache process the trailing slash with:
location: http://example.com/dir/
This is obviously "incorrect", because the connection suppose to be https:// . I tried to fix this problem using following:
SetEnvIf X-Forwarded-Proto https HTTPS=on
However this fix nothing. Another fix that was suggested to me was something complicated with mod_rewrite. I don't think mod_rewrite is the way to go, but it still did not worked when I tried.
The only way I was able to fix it was with nginx:
proxy_redirect http://$host $scheme://$host;
However this breaks redirects like https:// -> http:// , I know
vsftpd using user_conf_dir causes gnutls -15 error
24 February 2026 @ 2:23 am
I have encountered a particularly strange issue using vsftpd 3.0.3 on Debian 12.
I have created an vsftpd user testftp which works when connecting without additional configuration.
My vsftpd config includes the user_config_dir=/etc/vsftpd_user_conf option as I intend to change the local_root option for this user.
The moment I create the /etc/vsftpd_user_conf/testftp file, my connection will no longer work. FileZilla gives the following error:
tatus: Connection established, waiting for welcome message...
Status: Initializing TLS...
Status: TLS connection established.
Command: USER testftp
Response: 331 Please specify the password.
Command: PASS ***********
Error: GnuTLS error -15 in gnutls_record_recv: An unexpected TLS packet was received.
Error: Could not read from socket: ECONNABORTED - Connection aborted
Error: Could not connect to server
On the vsftpd log side, I
Restore of files on S3 from Glacier Failing silently - No error output
23 February 2026 @ 6:58 pm
I've tried all of:
aws s3api restore-object --bucket $MYBUCKET --key $KEYFORFILE --restore-request '{"Days": 15, "GlacierJobParameters":{"Tier": "Standard"}}' --output json
which had no error or output but nothing restored.
also:
s3cmd restore s3://$BUCKET/$SUBDIR/ --dry-run --debug --recursive --verbose --stats --progress --restore-priority=standard --restore-days=15 --region=us-east-1 --include="${KEY_PREFIX}*"
that choked even without doing anything for real.
I've tried the example at https://aws.amazon.com/blogs/storage/restoring-archived-objects-at-scale-from-the-amazon-s3-glacier-storage-classes/ with modifications for our bucket set up. I get job output, but no restores, no error messages.
I'll just
How can I use Azure Cloud Shell to deploy a new Azure OpenAI GPT endpoint using CLI?
23 February 2026 @ 6:12 pm
I find that using the web UI https://portal.azure.com is rather slow to deploy a new Azure OpenAI GPT endpoint. How can I use Azure Cloud Shell to deploy a new Azure OpenAI GPT endpoint using CLI?
poundhost.com
Cheap dedicated server hosting
tagadab.com
Cheap developer VPS hosting from £10