@obsolesce said in Risks to Geo Blocking:

@scottalanmiller said in Risks to Geo Blocking:

So for the first time in YEARS, we just did some geo blocking today. How is this timing possible?

Oh yeah? Which? Why?

Only access for one tech, so trying to limit as much as possible. But it didn't work, (probably nothing to do with the geo blocking) so I don't know if they ended up keeping it or not.

@fateknollogee said in SaltStack setup for /etc/hosts:

I remember this has been discussed on the forums sometime back when...

I'd like to have a master host file & push this out to Linux & Windows servers & desktops.

Anyone have a good how to guide?

One more thing, you'll want to use file.managed in a State file.

That way, you keep a master copy on Git and only need to edit that. Saltstack will take care of the rest and make sure all minions have that updated file.

Otherwise, with salt-cp, you have to manually SSH to the salt-master server and run the command. I'd rather just update the file in VSCode, then be done with it...

In your State file, you can do Linux and Windows using an If statement, having it do it one way for each OS.

I use grains, os_family, etc.

We set up our Intel RMM and Dell iDRAC Enterprise KVM/IP setups on the internal LAN with a static IP address. Self-issued SSL is fine for this.

Older RMM/iDRAC units may need a legacy Win7 VM with IE9 around for those moments when they need to be managed (we keep one turned off but around for this exact reason). This is especially true with the certificate structure changes that have come through recently. Modern browsers refuse to connect to legacy web management consoles.

Rules are set up on the edge to allow both inbound and outbound packets for their services to our office IP address. VPN is another method to gain access if the edge supports it.

Username and password are set up with both settings being custom with info kept in KeePass here. Make sure to change the Dell default setting! Intel gets set up in the BIOS before it allows site authentication and access.

Cost wise Dell is $300 to $450 here in Canada to license while the Intel RMM module is sub $150.

A blog post on what we do: http://blog.mpecsinc.ca/2017/06/disaster-preparedness-kvmip-usb-flash.html

We don't do SuperMicro.

@bnrstnr said in Router / AP / Switch for business:

ES-24-LITE

That's right...

@eddiejennings said in VM firewall for the rest of the VMs? (Xenserver host):

@jaredbusch said in VM firewall for the rest of the VMs? (Xenserver host):

@pete-s said in VM firewall for the rest of the VMs? (Xenserver host):

PS. For the firewall VM I'm thinking Pfsense (freebsd) or Vyos (debian)? Are there others I should consider?

VyOS is a solid solution, less known than pfSense in general, but VyOS is forked from the same original source as Ubiquiti's EdgeOS.

VyOS is working fine for my colo server. +1

Ah so, @EddieJennings not @coliver, but i knew we had conversations about this.

@romo said in Zimbra and Zoho Share Favicon:

0_1534814454288_zoho-zimbra.png Yeah they don't look to similar

Go to Zimbra's documentation site, they reverse the colours apparently.

@iroal said in Guacamole 0.9.14 on CentOS 7:

@jackmartins_ said in Guacamole 0.9.14 on CentOS 7:

@iroal Did you solve this problem? I got the same error

I reinstall using this tutorial.

https://cstan.io/?p=11405&lang=en

Regards.

Those instructions is pretty good. He did leave out information about the default user and password for it.

@jaredbusch said in XenServer / NextCloud / backup build to move away form Dropbox:

@pete-s said in XenServer / NextCloud / backup build to move away form Dropbox:

However to store the VM themselves and boot your system I would very much like to have a small SSD drive for that.

There is no point in putting an SSD in a system for the hypervisor. That is just stupid.

There is no “storing the VM themselves” on the SSD unless you are talking about splitt8ng the storage VM into a boot vDisk and a data vDisk.

But even the, the OS will never use the SSD aside from boot. A file server al,ost never writes to the OS, it is all about the storage vDisk.

You're right. I was thinking putting the xenserver host (about 50GB space) and the guests on SSD and just have archive files and backups on the HDDs. From my experience the VMs will be sluggish running on the WD RED disks as they are much slower (avg seek and transfer rate) than your typical 10K, 15K 2.5" drives. But your right that it won't matter much in this case.

@scottalanmiller Did you ever fix this?

I found this site to be very helpful.
https://negativo17.org/bluray-playback-and-ripping-on-fedora-aacs-bd-bd-j/

There is also a libbluray-bdj package in the main fedora repo. I have no installed it yet. If the next BluRay I watch has a problem, I will maybe try those settings.
0_1534651704370_736ee8f3-0f1a-4899-8ac3-6f5f15e1b172-image.png

@stacksofplates said in Supermicro iKVM/IPMI HTML5 viewer?:

I've used it but only on newer. No idea if it's upgradeable or not. The HTML5 console works pretty well. They misspelled "Macro" in the interface though. It's spelled "Marco".

I only have seen reports of the Firmware been able to be run on X10 only but it is not supported
https://forums.servethehome.com/index.php?threads/supermicro-html5-ikvm-arrived.10320/page-2

https://forums.servethehome.com/index.php?threads/supermicro-html5-ikvm-arrived.10320/

Cavium over Chelsio any day if considering iWARP RDMA. Intel would be a distant second to Cavium.

The RJ45/SFP+ really depends on needs. If there are enough fibre runs to complete the setup then SFP+ would be the direction for top of rack (TOR) and/or aggregation.

For non-RDMA enabled networks we use RJ45 based setups for the NICs (Intel X540/X557 10GbE). For RDMA we use RoCE 10GbE/25GbE/40GbE/50GbE/100GbE via Mellanox NICs and switches which are SFPx based.

Intel 7xx series NICs utilize iWARP and SFPx and may be an option depending on server vendors and switch setup.

Performance wise, depending on network type and whether RDMA is present or not 10GbE should be around the numbers mentioned by @NashBrydges.

In Remote Viewer, click View > Displays > check Monitor 1/2/3 etc, after setting up like below.

0_1534540827938_b92e59c8-fdd5-4adb-a28e-c71738cddbd2-image.png

0_1534540859700_88ad0ed6-883e-4c89-8ba0-b4e039c05268-image.png

@jimmy9008 said in Hyper-V 2016 (Switch) and NIC:

169.x.x.x shouts out that the VM cant reach a DHCP server. If the vSwitch is using the active interface, and allows guest VMs to share the adapter, i'd check if my DHCP server is ok, on the same network, has IPs available etc. The host would be static so thats why that would be working as it was manually configured.

Should have thought! A reboot of my router fixed it! Thanks guys.

Thanks again. I'll take a look.
One prob I ran into last time was when I wanted to install Server 2016 on my guest VM. I had the CD Rom connected to my host, but I couldnt find where to load it to boot the VM from it.
I'd like to use a Gen2 server and i'm unsure how to get either a) to boot from the physical DVD connected to my host, or b) load an ISO to the host (ie in the D drive) to then boot from there. Any ideas on that?

@black3dynamite said in Firewall rules for outgoing traffic:

Block all DNS servers except for the one you provide via DHCP?

Not necessarily via DHCP, but whatever ones you have approved. 1.1.1.1, 8.8.8.8, for example.

Create a new folder in the root of the data partition being used, if any, and call it something like Hyper-V-2018.

Copy the VHDX file(s) from their current location to that (assuming there is enough space to do so).

Run the following in an elevated PowerShell where X is the destination partition:

Set-VMHost -VirtualHardDiskPath "X:\Hyper-V-2018\Virtual Hard Disks" –VirtualMachinePath "X:\Hyper-V-2018"
Get-VMHost | fl VirtualHardDiskPath,VirtualMachinePath

Create a new VM and configure its settings using the existing OS VHDX. After that is complete, open the VM's properties and add the second VHDX if it exists.

Try and start the VM. If it starts, it will require some tweaking at the network level as the vNIC's GUID and MAC will be different.

@bnrstnr said in Group Policy - Printer Deployment:

@jaredbusch Do you run the script at login?

Still a work in progress right now, so it is manual.

@emad-r said in Linux As File Server- Break Out From Other Thread:

@scottalanmiller said in Linux As File Server- Break Out From Other Thread:

@emad-r said in Linux As File Server- Break Out From Other Thread:

The only down side to it, that the files will take size on their machine as well as the NC server, thats it. If you can afford this, then this is the way to go.

That's purely optional. Not a given. NextCloud can be used with files purely on the server just like with SMB.

Huh, how so ? you mean only via web client. If your installing the agent at somepoint it will need to sync the files to your account synced folder.

That's one option, but not what I mean. You can map drives to it, too.

Have you checked eventvwr to make sure it isn't powering on to run a backup or something?