@IRJ said in Cannot SSH using public key:

RSA key working on Nessus, too. Thanks @DustinB3403 for calming me down

You're welcome.

A good workflow would be using Packer to build your immutable images with Ansible. That way you don't need to log into the image, just make a new image with your changes using the same process, and then deploy those images with Terraform.

Like this.

be78d39b-4bf6-4b74-a15e-ec044e88ed03-image.png
04f1585b-838d-46eb-826c-be15fd766645-image.png

@Pete-S said in Getting ready to spec new desktops:

The A chips are probably AMD's A-series desktop chips.
https://www.amd.com/en/processors/athlon-and-a-series

Those are what we use when we say that we use AMD chips. AMD A9 and A10. They are perfect for business desktops that aren't like CAD stations or whatever. I use the A10 myself. I'd really like to move up to the new A12. Ryzen is more for video game or high performance workstation usage, not standard office work. The A series are, IMHO, ideal for the average office worker (which includes IT people.)

Just a reminder that on new threads of this nature, no links allowed to any services or products. This is a non-promotional thread. None have been posted, it's just a reminder. Thanks!

@Vlinderbeest said in Infrastructure Needed for Hypervisor Cluster:

@scottalanmiller said in Infrastructure Needed for Hypervisor Cluster:

Clustering is done when the cost of clustering is low versus the risk of not clustering.

I would change that slightly to Clustering is done when the cost of clustering is low versus the cost of not clustering. A risk is always a cost, but some costs are not risks. For example taking down a hypervisor for maintenance vs moving guests to another node and taking down a free node for maintenance.

Sure, using risk cost vs investment cost as cost v cost is a perfect valid way to look at it. I use that all the time in the opposite way.

You can say that risk is a cost. Or conversely, you can look at the clustering cost up front as essentially a "financial event" similar to an outage.

@IRJ said in Can someone help explain this alias part to me?:

@travisdh1 said in Can someone help explain this alias part to me?:

@IRJ said in Can someone help explain this alias part to me?:

This is actually a decent explanation of what I am trying to do:

https://community.spiceworks.com/topic/108735-scanning-linux-devices-with-non-root-user

That original one, while technically correct, seems purposely made more difficult to me.

Ugh, that 🌶 thread, don't name your custom script the same thing as the program being run, FFS.

This is where I have to ask, what exactly are you trying to accomplish? Just grab system information with dmidecode, or something different?

https://www.tenable.com/blog/configuring-least-privilege-ssh-scans-with-nessus

All right, not the greatest tutorial/how-to ever. You should only need a single user to accomplish this, so the whole group and alias conversation is pointless.

Just follow the rest of that tutorial, adding only the needed programs to the sudoers file.

nessus_user ALL=NOPASSWD: /usr/bin/program1, /usr/bin/program2

Worth noting that using rsync worked very well, but there were issues with the Outlook profile on the existing user workstation and the end result.

Not a huge issue for us as everything is stored in O365, but worth being mindful of if your email was hosted locally.

Also because of username convention changes, I had to set the ownership of the user profile to match the new shortened name.

@black3dynamite said in Windows Server 2019 Need to Download and Run without AV Deleting Files:

https://www.thomasmaurer.ch/2016/07/how-to-disable-and-configure-windows-defender-on-windows-server-2016-using-powershell/

For now, just temporary disable Real-Time Protection via PowerShell
Set-MpPreference -DisableRealtimeMonitoring $true

Download the executable and scan it manually before you install
Start-MpScan -ScanPath C:\datastore\file.exe -ScanType QuickScan

Enable Real-Time Protection after the install
Set-MpPreference -DisableRealtimeMonitoring $false

Excellent, now THAT did it.

@pmoncho said in The Hidden Cost of Licensing Windows Server - Activation:

@scottalanmiller said in The Hidden Cost of Licensing Windows Server - Activation:

Just looking at this with a customer that just put in a new Windows 2019 server. The machine was purchased with a volume license agreement for Server 2019 Standard. Everything should be super easy, in theory. Problem is, license key from the volume license center doesn't work. We spend a bit of time trying to get this to apply, but no luck.

I have run into a similar situation this morning and not being able activate the VLSC liscense.

Before I decided to call MS and getting frustrated, I was able to activate from an elevated command line.
cscript c:\windows\system32\slmgr.vbs /ipk <product key>

Throwing this out here in case someone comes along this post at a later time.

I've heard that that often works. We had tried that in our case and it had failed.

Turns out it is just the disk number in Disk Manager.

@Jimmy9008 said in VLAN on Dell N4064 Stacked:

Im guessing 'U' is fine. As I want vLAN2 to pass traffic where the device has already set vlan2 in its NIC. If the LAG is set to 'T', all traffic will be set to vlan2, right? Even when from vLan1/default...

I think it's better to tag every vlan in both ends. Then you can be certain traffic ends up on the same vlan on the other switch stack.

@RojoLoco said in Adobe After Effects - Preview is not real time:

@scottalanmiller mid to late 90s. absolutely. I graduated with my audio degree end of '96, literally EVERY VENDOR had Apple's ball juice conspicuously on their chin. According to "the industry" at that time, nobody could record multitrack audio, use photoshop/after effects / premiere etc, or do any kind of multimedia production without a Mac. My personal mission since then has been to shit all over that mindset.

I know what you're talking about. At the end of the nineties I worked with a company that was running Protools on Windows NT and not Mac. It was rather unusual. System could do 64 tracks of 24 bit @ 48kHz on a Pentium II full of effects, but that was in large part because audio processing was offloaded to DSP cards. That's Digital Signal Processors for those who don't know. Audio tracks where recorded to SCSI disks. I remember it was a very stable and good system but it was extremely picky on hardware.

@jt1001001 said in Deploying Polycom Phones Properly:

So I should just get rid of the TOTE of 20 or so IP650 Polycom phones someone left on my desk?
(for those not in the know, my desk often becomes the Junk/Recycle pile collection site for some reason)

I would. Or get them to eBay.

@scottalanmiller said in Windows Server 2019 Basic Installation:

@dbeato said in Windows Server 2019 Basic Installation:

@Obsolesce said in Windows Server 2019 Basic Installation:

@scottalanmiller said in Windows Server 2019 Basic Installation:

@Obsolesce said in Windows Server 2019 Basic Installation:

@scottalanmiller said in Windows Server 2019 Basic Installation:

@JaredBusch said in Windows Server 2019 Basic Installation:

The current install method brings Windows Server on parity with the Linux ecosystem really. You install, choose some options and end up at a prompt after reboot. Then you remotely add the features and shit you want.

Yeah, very in like with Fedora, Ubuntu, or Deepin. Deepin might still be my favourite installer for normal stuff of the four.

Did you have a Deepin install screenshot chain on here?

No, but I do it so often, it would be easy to get.

That'd be nice to see on here.

Last post on it was below
https://mangolassi.it/topic/14453/deepin-linux-15-4-1-install

The install still looks like that.

LOL that's not an installer. That's a push button, get peanuts.

Nice though.

@JaredBusch said in Setup: EdgeRouter 4 + co-lo + infrastructure:

@scottalanmiller said in Setup: EdgeRouter 4 + co-lo + infrastructure:

@JaredBusch said in Setup: EdgeRouter 4 + co-lo + infrastructure:

@scottalanmiller said in Setup: EdgeRouter 4 + co-lo + infrastructure:

@Pete-S said in Setup: EdgeRouter 4 + co-lo + infrastructure:

@scottalanmiller said in Setup: EdgeRouter 4 + co-lo + infrastructure:

@Pete-S said in Setup: EdgeRouter 4 + co-lo + infrastructure:

Can't edgerouter do
failover?

As in a live/live cluster? That uses VRRP and yes, they can.

https://help.ubnt.com/hc/en-us/articles/204962174-EdgeMAX-Virtual-Router-Redundancy-Protocol-VRRP-

Then that is the way to go.

I would agree.

It is the best thing to do. Sadly I have never had the leisure to actually test it. I have a pair of ERL in colo but they were put in place long before this feature was added.

Yeah, but I have been authorized to make some upgrades that will free up an ERL for us, and we have an ERL in our colo. So maybe I'll ship one out there to do this soon. That would be an awesome project.

Don't think I would try and live test in colo.

085260da739d5f8723a626ab23a0da4623be9458998bfc91b38c57cdffec16d4.jpg

@JaredBusch said in Make Yealink Ring While on the Phone:

@scottalanmiller said in Make Yealink Ring While on the Phone:

If you have Yealink T46S phone, and you are talking on the phone, instead of making it do a call waiting beep, can you make it ring normally? A bit odd, but there is a reason for it 🙂

Not to my knowledge.

It was supposedly added as a feature request a few years ago, and I have not noticed it in a firmware release note.

That would explain why I have never seen it come up. Not that anyone has ever wanted it previously.

So to answer my own question:
"Which hosts belong in what pool when running local storage?"

The answer is none - at least with xenserver. Don't use pools when using local storage.