Match linux command-line arguments to view their help text.
Tag: SysAdmin
system administrator related links
stackshare.io
Dev / Production stacks for all to see. Handy tool to see what software is trending today.
aws.amazon.com
Amazons’s cloud computing & web hosting service.
Amazon Connect now offers persistent agent connections for faster call handling
20 November 2025 @ 10:00 pm
Amazon Connect now offers the ability to maintain an open communication channel between your agents and Amazon Connect, helping reduce the time it takes to establish a connection with a customer. Contact center administrators can configure an agent’s user profile to maintain a persistent connection after a conversation ends, allowing for subsequent calls to connect faster. Amazon Connect persistent agent connection makes it easier to support compliance requirements with telemarketing laws such as the U.S. Telephone Consumer Protection Act (TCPA) for outbound campaigns’ calling by reducing the time it takes for a customer to connect with your agents. Amazon Connect persistent connection is now available in all AWS regions where Amazon Connect is offered, and there is no additional charge beyond standard pricing for the Amazon Connect service usage and associated telephony char
Validate and enforce required tags in CloudFormation, Terraform and Pulumi with Tag Policies
20 November 2025 @ 7:28 pm
AWS Organizations Tag Policies announces Reporting for Required Tags, a new validation check that proactively ensures your CloudFormation, Terraform, and Pulumi deployments include the required tags critical to your business. Your infrastructure-as-code (IaC) operations can now be automatically validated against tag policies to ensure tagging consistency across your AWS environments. With this, you can ensure compliance for your IaC deployments in two simple steps: 1) define your tag policy, and 2) enable validation in each IaC tool. Tag Policies enables you to enforce consistent tagging across your AWS accounts with proactive compliance, governance, and control. With this launch, you can specify mandatory tag keys in your tag policies, and enforce guardrails for your IaC deployments. For example, you can define a tag policy that all EC2 instances in your IaC templates must have “Environment”, “Owner”, and “Application” as required tag keys. You can start valida
AWS DMS Schema Conversion adds SAP (Sybase) ASE to PostgreSQL support with generative AI
20 November 2025 @ 7:11 pm
AWS Database Migration Service (DMS) Schema Conversion is a fully managed feature of DMS that automatically assesses and converts database schemas to formats compatible with AWS target database services. Today, we're excited to announce that Schema Conversion now supports conversions from SAP Adaptive Server Enterprise (ASE) database (formerly known as Sybase) to Amazon RDS PostgreSQL and Amazon Aurora PostgreSQL, powered by Generative AI capability. Using Schema Conversion, you can automatically convert database objects from your SAP (Sybase) ASE source to an to Amazon RDS PostgreSQL and Amazon Aurora PostgreSQL target. The integrated generative AI capability intelligently handles complex code conversions that typically require manual effort, such as stored procedures, functions, and triggers. Schema Conversion also provides detailed assessmen
Recycle Bin adds support for Amazon EBS Volumes
20 November 2025 @ 6:00 pm
Recycle Bin for Amazon EBS, which helps you recover accidentally deleted snapshots and EBS-backed AMIs, now supports EBS Volumes. If you accidentally delete a volume, you can now recover it directly from Recycle Bin instead of restoring from a snapshot, reducing your recovery point objective with no data loss between the last snapshot and deletion. Your recovered volume can immediately achieve the full performance without waiting for data to download from snapshots. To use Recycle Bin, you can set a retention period for deleted volumes, and you can recover any volume within that period. Recovered volumes are immediately available and will retain all attributes—tags, permissions, and encryption status. Volumes not recovered are deleted permanently when the retention period expires. You create retention rules to enable Recycle Bin for all volumes or specific volumes, using tags to target which volumes to protect. EBS Volumes in Recycle Bin are billed at the same pr
Amazon OpenSearch Serverless adds AWS PrivateLink for management console
20 November 2025 @ 6:00 pm
Amazon OpenSearch Serverless now supports AWS PrivateLink for secure and private connectivity to management console. With AWS PrivateLink, you can establish a private connection between your virtual private cloud (VPC) and Amazon OpenSearch Serverless to create, manage, and configure your OpenSearch Serverless resources without using the public internet. By enabling private network connectivity, this enhancement eliminates the need to use public IP addresses or relying solely on firewall rules to access OpenSearch Serverless. With this feature release the OpenSearch Serverless management and data operations can be securely accessed through PrivateLinks. Data ingestion and query operations on collections still requires OpenSearch Serverless provided VPC endpoint configuration for private connectivity as described in the OpenSearch Serverless VPC developer guide.
Amazon RDS supports Multi-AZ for SQL Server Web Edition
20 November 2025 @ 6:00 pm
Amazon Relational Database Service (Amazon RDS) for SQL Server now supports Multi-AZ deployment for SQL Server Web Edition. SQL Server Web Edition is specifically designed to support public and internet-accessible web pages, websites, web applications, and web services, and is used by web hosters and web value-added providers (VAPs). These applications need high availability, and automated failover to recover from hardware and database failures. Now customers can use SQL Server Web Edition with Amazon RDS Multi-AZ deployment option, which provides a high availability solution. The new feature eliminates the need for customers to use more expensive options for high availability, such as using SQL Server Standard Edition or Enterprise Edition. To use the feature, customers simply configure their Amazon RDS for SQL Server Web Edition instance with Multi-AZ deployment option. Amazon RDS automatically provisions
AWS Cloud WAN adds Routing Policy for advanced traffic control and flexible network deployments
20 November 2025 @ 5:00 pm
AWS announces the general availability of Cloud WAN Routing Policy providing customers fine-grained controls to optimize route management, control traffic patterns, and customize network behavior across their global wide-area networks. AWS Cloud WAN allows you to build, monitor, and manage a unified global network that interconnects your resources in the AWS cloud and your on-premises environments. Using the new Routing Policy feature, customers can perform advanced routing techniques such as route filtering and summarization to have better control on routes exchanged between AWS Cloud WAN and external networks. This feature enables customers to build controlled routing environments to minimize route reachability blast radius, prevent sub-optimal or asymmetric connectivity patterns, and avoid over-running of route-tables due to propagation of unnecessary routes in global networks. In addition, this feature allows customers to set advanced Border Gateway Protocol (BGP) attri
Amazon MQ now supports RabbitMQ version 4.2
20 November 2025 @ 3:00 pm
Amazon MQ now supports RabbitMQ version 4.2 which introduces native support for the AMQP 1.0 protocol, a new Raft based metadata store named Khepri, local shovels, and message priorities for quorum queues. RabbitMQ 4.2 also includes various bug fixes and performance improvements for throughput and memory management. A key highlight of RabbitMQ 4.2 is the support of AMQP 1.0 as a core protocol offering enhanced features like modified outcome which allow consumers to modify message annotations before requeueing or dead lettering, and granular flow control, which offers benefits including letting a client application dynamically adjust how many messages it wants to receive from a specific queue. Amazon MQ has also introduced configurable resource limits for RabbitMQ 4.2 brokers which you can modify based on your application requirements. Starting from RabbitMQ 4.0, mirroring of classic queues is no longer supported. Non-replicated classic queues are still supported. Quorum que
Amazon EC2 Mac instances now support Apple macOS Tahoe
20 November 2025 @ 3:00 pm
Starting today, customers can run Apple macOS Tahoe (version 26) as Amazon Machine Images (AMIs) on Amazon EC2 Mac instances. Apple macOS Tahoe is the latest major macOS version, and introduces multiple new features and performance improvements over prior macOS versions including running Xcode version 26.0 or later (which includes the latest SDKs for iOS, iPadOS, macOS, tvOS, watchOS, and visionOS). Backed by Amazon Elastic Block Store (EBS), EC2 macOS AMIs are AWS-supported images that are designed to provide a stable, secure, and high-performance environment for developer workloads running on EC2 Mac instances. EC2 macOS AMIs include the AWS Command Line Interface, Command Line Tools for Xcode, Amazon SSM Agent, and Homebrew. The AWS Homebrew Tap includes the latest versions of AWS packages included in the AMIs. Apple macOS Tahoe AMIs are available for Apple silicon EC2 Mac instances and are published to all AWS r
Amazon Braket introduces spending limits feature for quantum processing units
20 November 2025 @ 3:00 pm
Amazon Braket now supports spending limits, enabling customers to set spending caps on quantum processing units (QPUs) to manage costs. With spending limits, customers can define maximum spending thresholds on a per-device basis, and Amazon Braket automatically validates each task submission doesn't exceed the pre-configured limits. Tasks that would exceed remaining budgets are rejected before creation. For comprehensive cost management across all of Amazon Web Services, customers should continue to use the AWS Budgets feature as part of AWS Cost Management. Spending limits are particularly valuable for research institutions managing quantum computing budgets across multiple users, for educational environments preventing accidental overspending during coursework, and for development teams experimenting with quantum algorithms. Customers can update or delete
networkworld.com
Information, intelligence and insight for Network and IT Executives.
What are TPUs? Your guide to tensor processing units and AI acceleration
20 November 2025 @ 9:21 pm
The gist
>
TPUs are Google’s specialized ASICs built exclusively for accelerating tensor-heavy matrix multiplication used in deep learning models.
TPUs use vast parallelism and matrix multiply units (MXUs) to achieve significantly higher throughput and energy efficiency than GPUs for training.
Unlike more-flexible GPUs and CPUs, TPUs are optimized only for AI workloads and are primarily accessed as managed instances through Google Cloud.
Tensor processing units (TPUs) are specially designed AI accelerators. They are a type of application-specific integrated circuit (ASIC), or chips des
Cisco initiative targets device security
20 November 2025 @ 8:42 pm
Cisco is announcing a security initiative that will push customers to update or replace aging infrastructure components, such as routers, switches and firewalls, as well as discourage them from using any insecure features.
Called Resilient Infrastructure, the plan calls for Cisco to strengthen network security by increasing default protections, removing insecure legacy features, and introducing new capabilities that reduce the attack surface and enable better threat detection and response.
“Simply put, we are making
Cisco, IBM team to build large-scale quantum networks
20 November 2025 @ 3:06 pm
Cisco and IBM plan to pool their R&D efforts to build a network of large-scale, fault-tolerant quantum computers capable of working together to run computations up to hundreds of thousands of qubits. They aim to demonstrate the first proof-of-concept within five years, though much of this technology has not been developed yet.
As part of the collaboration, the vendors will look to develop quantum hardware and software that could physically link many large-scale, fault-tolerant quantum computers together to form networked distributed quantum computing. Their
Server memory prices could double by 2026 as AI demand strains supply
20 November 2025 @ 12:37 pm
Server memory prices could double by the end of 2026, driven by manufacturers’ pivot to AI-focused production and Nvidia’s shift to smartphone-style memory that is straining supply further.
DRAM prices have already risen approximately 50% year to date and are expected to climb another 30% in Q4 2025, followed by an additional 20% in early 2026, Counterpoint Research said in its report. The firm projected that DDR5 64GB RDIMM modules, widely used in enterprise data centers, could cost twice as much by the end of 2026 as they did
Cobalt 200: Microsoft’s next-gen Arm CPU targets lower TCO for cloud workloads
20 November 2025 @ 11:35 am
Microsoft has unveiled the next generation of its Arm-based custom CPUs in the form of Cobalt 200 as part of its ongoing efforts to reduce dependency on x86-based instances and make its data centers more energy-efficient while offering better performance for cloud computing workloads.
Microsoft has been using Cobalt chips to power its own services, such as Teams and Defender, and also offers them to enterprise customers through virtual machines.
According to Microsoft, the second-generation custom chip offers better energy efficiency and 50% more performance than its predecessor,
NetOps teams struggle with AI readiness
20 November 2025 @ 10:00 am
As more enterprise organizations adopt artificial intelligence, research reveals a growing gap between AI plans and network preparedness, according to Broadcom.
While 99% of organizations have cloud strategies and are adopting AI, just 49% believe their network could support the bandwidth and low latency that AI requires, according to Broadcom�
SAP touts Microsoft disaster recovery plan for Europe; Analysts doubt it will work
20 November 2025 @ 3:03 am
SAP has cut European deals with Microsoft, Capgemini, and Orange to ostensibly deliver an emergency disaster recovery failover if Microsoft is legally blocked from delivering European services.
The plan is unlikely to be needed, analysts agree, but it wouldn’t likely work for very long even if it was needed, based on the scant details the companies announced on Tuesday.
SAP, through its
Meter ups its NaaS portfolio with new hardware, autonomous operations
19 November 2025 @ 6:45 pm
The basic promise from network-as-a-service (NaaS) providers is to make networking easier. It’s a need that is becoming increasingly relevant as modern networks pivot to AI and network engineers are a tough job to fill. While all NaaS vendors provide a service, San Francisco-based startup Meter is looking to differentiate with purpose-built hardware, a custom
AWS boosts its long-distance cloud connections with custom DWDM transponder
19 November 2025 @ 4:53 pm
Amazon Web Services has developed a new Dense Wavelength Division Multiplexing (DWDM) transponder to significantly boost its long-distance, high-capacity, data center networking capabilities.
DWDM technology lets many optical channels, or wavelengths, multiplex over the same fiber backbone, increasing bandwidth immensely. AWS’ massive network infrastructure will take advantage of the increased fiber capacity to deliver global services such as cloud-based apps, online purchases and movie streaming much more efficiently, the company said. The custom-built DWDM also gives AWS tight control over routing, redundancy, an
How a bot management file push crippled Cloudflare’s global network
19 November 2025 @ 11:38 am
A massive outage at content delivery network Cloudflare, which took down services including ChatGPT, Canva and parts of AWS, was traced to a routine change in database permissions linked to Cloudflare’s Bot Management system, which inadvertently knocked offline a significant portion of the web.
The November 18 outage, which lasted approximately six hours, has once again highlighted how ordinary software updates have become one of the leading triggers of large-scale internet outages in recent years.
The issue was triggered by a change to one of Cloudflare’s dat
forensicswiki.org
Computer forensic tools and techniques used by investigators
cyberciti.biz
online community of new and seasoned Linux / Unix sysadmins.
Download of the day: GIMP 3.0 is FINALLY Here!
18 March 2025 @ 3:45 am
Wow! After years of hard work and countless commits, we have finally reached a huge milestone: GIMP 3.0 is officially released! I am excited as I write this and can't wait to share some incredible new features and improvements in this release. GIMP 2.10 was released in 2018, and the first development version of GIMP 3.0 came out in 2020. GIMP 3.0 released on 16/March/2025. Let us explore how to download and install GIMP 3.0, as well as the new features in this version.
Love this? sudo share_on: Twitter - Facebook -
How to list upgradeable packages on FreeBSD using pkg
16 March 2025 @ 8:25 pm
Here is a quick list of all upgradeable packages on FreeBSD using pkg command. This is equivalent to apt list --upgradable command on my Debian or Ubuntu Linux system.
Love this? sudo share_on: Twitter - Ubuntu to Explore Rust-Based “uutils” as Potential GNU Core Utilities Replacement
16 March 2025 @ 12:17 pm
In a move that has sparked significant discussion within the Ubuntu Linux fan-base and community, Canonical, the company behind Ubuntu, has announced its intention to explore the potential replacement of GNU Core Utilities with the Rust-based "uutils" project. They plan to introduce new changes in Ubuntu Linux 25.10, eventually changing it to Ubuntu version 26.04 LTS release in 2026 as Ubuntu is testing Rust 'uutils' to overhaul its core utilities potentially. Let us find out the pros and cons and what this means for you as an Ubuntu Linux user, IT pro, or developer.
Love this? sudo share_on: Twitter -
How to install KSH on FreeBSD
3 March 2025 @ 11:50 pm
Installing KSH (KornShell) on FreeBSD can be done with either FreeBSD ports or the pkg command. The ports collection will download the KSH source code, compile it, and install it on the system. The pkg method is easier, and it will download a pre-compiled binary package. Hence, it is recommended for all users. KornShell (KSH) has a long history, and many older Unix systems and scripts rely on it. As a result, KSH remains relevant for maintaining and supporting legacy infrastructure. Large enterprises, especially those with established Unix-based systems, continue to use KSH for scripting and system administration tasks. Some industries where KSLinux Sed Tutorial: Learn Text Editing with Syntax & Examples
3 March 2025 @ 9:47 am
Sed is an acronym for "stream editor." A stream refers to a source or destination for bytes. In other words, sed can read its input from standard input (stdin), apply the specified edits to the stream, and automatically output the results to standard output (stdout). Sed syntax allows an input file to be specified on the command line. However, the syntax does not directly support output file specification; this can be achieved through output redirection or editing files in place while making a backup of the original copy optionally. Sed is one of the most powerful tools on Linux and Unix-like systems. Learning it is worthwhile, so in tHow to tell if FreeBSD needs a Reboot using kernel version check
23 February 2025 @ 10:07 pm
Keeping your FreeBSD server or workstation updated is crucial for security and stability. However, after applying updates, especially kernel updates, you might wonder, "Do I need to reboot my system?" Let's simplify this process and provide a straightforward method for determining whether a reboot is necessary using the CLI, shell script, and ansible playbook.
Love this? sudo share_on: TwitterCritical Rsync Vulnerability Requires Immediate Patching on Linux and Unix systems
15 January 2025 @ 6:04 pm
Rsync is a opensource command-line tool in Linux, macOS, *BSD and Unix-like systems that synchronizes files and directories. It is a popular tool for sending or receiving files, making backups, or setting up mirrors. It minimizes data copied by transferring only the changed parts of files, making it faster and more bandwidth-efficient than traditional copying methods provided by tools like sftp or ftp-ssl. Rsync versions 3.3.0 and below has been found with SIX serious vulnerabilities. Attackers could exploit these to leak your data, corrupt your files, or even take over your system. There is a heap-based buffer overflow with a CVSS score of 9.8 that needs to be addressed on both the client and server sides of rsync package. Apart from that info leak via uninitialized stack contents defeats ASLR protection and rsync server can make client write files outside of destination directory using symbolic links.
Love this? sudo share_on:
How to control the SSH multiplexing with the control commands
15 January 2025 @ 8:29 am
Multiplexing will boost your SSH connectivity or speed by reusing existing TCP connections to a remote host. This is useful when you frequently connect to the same server using SSH protocol for remote login, server management, using IT automation tools over SSH or even running hourly backups. However, sometimes your SSH command (client) will not respond or get hung up on the session when using multiplexing. Typically, this happens when your public IP changes (IPv4 to IPv6 changes when using DNS names), VPN issues, or firewall cuts connections. Hence, knowing SSH client control commands can save you time and boost your productivity when such gotcZFS Raidz Expansion Finally, Here in version 2.3.0
14 January 2025 @ 9:19 am
After years of development and testing, the ZFS raidz expansion is finally here and has been released as part of version 2.3.0. ZFS is a popular file system for Linux and FreeBSD. RAIDz is like RAID 5, which you find with hardware or Linux software raid devices. It protects your data by spreading it across multiple hard disks along with parity information. A raidz device can have single, double, or triple parity to sustain one, two, or three hard disk failures, respectively, without losing any data. Hence, expanding or adding a new HDD is a very handy feature for sysadmins in today's data-sensitive apps.
Love this? sudo share_on: Twitter -
How to run Docker inside Incus containers
18 December 2024 @ 5:44 am
Incus and Docker both use Linux kernel features to containerize your applications. Incus is best suited when you need system-level containers that act like traditional VMs and provide a persistent developer experience. On the other hand, Docker containers are ephemeral, i.e., temporary in nature. All files created inside Docker containers are lost when your Docker container is stopped or removed unless you stored them using volumes in different directories outside Docker. Docker is created as a disposable app deployment system. Incus containers are not typically created as disposables, and data is kept inside heartinternet.co.uk
Hosting packages for an initial web presence
Unable to load the feed. Please try again later.
serverfault.com
Common Server issues – FAQs and answers from those in the know
Domain Name Service (DNS) resolving Content Delivery Network (CDN) name
21 November 2025 @ 12:23 am
We have contracted a company to provide the new web server, and they use a company called Vercel to provide infrastructure for the site. They demand that we make the DNS for the site a CNAME which points to a Vercel domain name which works in the same way as the CDN, and that this will be an instant world wide change. I don't understand how this works.
I used to run a DNS server (named on Solaris) when I worked for the University, our DNS server was allowed to be authoritative for our faculty, and we could apply for more IPs from a pool given to our faculty by the central IT services. I assumed they were granted their pool from another regulated body which assigns IPs for the country, and they in turn get it from an international body (in America?).
When I made DNS changes, say for our site, I would update the forward and backward resolution files to link the domain name with ONE IP address, and then update the serial number on the configuration which told the DNS serv
Ansible’s docker-compose plugin and bullseye nodes
20 November 2025 @ 8:00 pm
With the upgrade of the Ansible control node to Debian trixie, the docker_compose module is gone.
However, the community.docker.docker_compose_v2 module fails to work with a Debian bullseye target node.
There is no available upgrade for Docker in Debian bullseye to make this work, and a switch to Docker-upstream-provided packages is undesirable.
As someone who merely has to occasionally run the playbooks and needs to make them continue to work until the box can be upgraded to bookworm and then trixie, what are my options?
Can I just download/clone the community.docker collection at release 3.9.0 (the last one before the removal) and put it as old.docker (i.e. rename the directory), or are the collection names also hardcoded in the collections themselves and relevant for execution? If so, can I just s/community\.docker/old.docker/g over all files?
RapidSSL wildcard - Issuer of this certificate could not be found
20 November 2025 @ 7:27 pm
I imported it into the Exchange server. But there is a warning for the certificate as follows.
Issuer of this certificate could not be found
Issued by : RapidSSL TLS RSA CA G1
Issuer:
CN = RapidSSL TLS RSA CA G1
OU = www.digicert.com
O = DigiCert Inc
C = US
My question: How do I find the Root CA and intermediate certificates here?
ROOT CA : DigiCert Global Root G2
copy/duplicate remote VPS to a new server, some questions
20 November 2025 @ 7:23 pm
I want to duplicate my current VPS to a new home with the same provider. And I would like to avoid, if possible, to transfer the disk's contents to my local desktop and then back again to the new system.
The provider has a feature called "rescue disk" (call it RD) and VNC. Rescue disk allows you to ssh to the "mother" of the VPS, where you have access to the unmounted disks of the VPS. VPS OS is fedora linux and the disk is 200GB of which 150GB are used. RD OS is linux, I am not sure what flavour.
My current VPS has two disks /dev/sda1 mounted as /boot and /dev/sda2 mounted as /.
One option is to ssh to the RD of the current VPS (RD1) and to the new VPS (RD2), with IPs IP1 and IP2. This will temporarily shutdown both VPS and unmount their disks but still be able to "see" them from the RD. Before that, I will install a Fedora image
remote VPS/Fedora Linux 41, reasons why firewalld service is masked?
20 November 2025 @ 6:19 pm
My question is what are the reasons for the firewalld systemd service to be masked on a remote VPS running Fedora Linux v41? The OS image came from the VPS provider. Is it possible that they mask it so that their users do not accidentally block remote access?
Mail delivery and DMARC policy
20 November 2025 @ 5:29 pm
My domain has a valid DKIM record, DMARC record, and SPF record.
My DMARC record has p=none.
Looking at headers of emails sent to gmail, I see ARC-Authentication-Results showing dkim=pass, spf=pass, dmarc=pass.
Mxtoolbox I think fails my dmarc policy (with a red X) because I have not enabled it.
I know my emails are delivered to gmail, but I have no insight into how other mail systems handle this situation. I'd rather not open the door to quarantining email - which I think p=quarantine does.
Is it common practice to reject email when Dmarc policy is not enabled, even if dkim and SPF pass and there is a dmarc record?
Dovecot: User doesn't exist
20 November 2025 @ 5:24 pm
Cannot get postfix to deliver email to virtual mailbox, either locally or from a gmail or other provider.
I can login locally to dovecot.
openssl s_client -connect 10.66.66.1:993 -crlf
* OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
a LOGIN [email protected] YourSupportPassword
a OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS BINARY MOVE REPLACE SNIPPET=FUZZY PREVIEW=FUZZY PREVIEW SPECIAL-USE STATUS=SIZE SAVEDATE COMPRESS=DEFLATE INPROGRESS NOTIFY LITERAL+] Logged in
The command below fails:
admin@ip-172-31-34-228:~$ echo "=== LMTP PROBE
freeipa replica issues - can't kinit or ipa-ca-install
20 November 2025 @ 4:37 pm
Attempting to setup a replica to an existing (working) freeipa installation.
The ipa-replica-install step appeared to finish successfully but subsequent attempts to run kinit are not working.
kinit: Generic error (see e-text) while getting initial credentials
Attempts to run ipa-ca-install are met with a request for a host password. I tried to set an OTP for the host on the working server but got this error:
IPA Error 3009: ValidationError invalid 'password': Password cannot be set on enrolled host.
Looking at /etc/krb5.conf I noticed that the entries in the [realms] section all point to the replica and not the master. Is this correct?
Running ipa topologysegment-find domain on the master shows an entry with "Connectivity: both" between the master and replica hosts.
edit
looki
Is it possible to tunnel IPv6 over IPv4 using Libreswan's IKEv2?
20 November 2025 @ 4:20 pm
My local server only accesses the internet via IPv4 addresses. IPv6 is not supported.
The remote server has exactly one public IPv4 address and a /48 IPv6 subnet. Is it possible to provide the local server with an IPv6 address through an IKEv2 tunnel?
On the remote server, the IKEv2 tunnel is established via libreswan, an Ubuntu 24.04 Linux distribution. On the remote server, the IKEv2 tunnel is established via strongswan, an Arch Linux distribution.
How do I configure libreswan and strongswan to support IPv6 over IPv4? Is it possible to encapsulate IPv6 in an IPv4 tunnel?
ospf bird - mikrotik7 not working static
20 November 2025 @ 8:22 am
Network [VPS-Linux-Bird 2.17.1-1 ] <-two liks gre-> [Mikrotik 7.20] <-l2tp-> [Mikrotik 7.19] <-l2tp-> [ same VPS-Linux-Bird 2.17.1-1 ] <-l2tp-> [Other router eg 192.168.194.125 with 192.168.125.0/24]
Bird config
log syslog all;
router id 192.168.100.1;
filter localfilter {
if net ~ [ 192.168.0.0/16+ ] then accept;
reject;
}
protocol device {
scan time 10;
interface "*";
}
protocol direct {
interface "*";
check link ;
ipv4 {
import filter localfilter;
export filter localfilter;
};
ipv6;
}
protocol kernel {
scan time 10;
merge paths;
ipv4 {
export filter localfilter;
import filter localfilter;
};
learn;
}
protocol kernel {
ipv6 {
};
}
protocol static vpn {
ipv4 {
import filter localfilter;
export filter lo
poundhost.com
Cheap dedicated server hosting
tagadab.com
Cheap developer VPS hosting from £10