@NetworkNerd

1. Identify the Cause of High Disk IO and CPU Wait MariaDB Activity: Since mariadb is showing high IO during the problematic window, it's crucial to identify the queries causing this load. You can enable the slow query log in MariaDB to capture queries that are taking an unusually long time to execute. Scheduled Tasks: Check for any scheduled tasks (cron jobs) on the server that run around 5 AM CST. These could be system tasks, WordPress cron jobs, or database maintenance tasks. 2. Systemd-journald Failure The failure of systemd-journal-flush.service suggests that the journaling system is overwhelmed, likely due to the high IO load. Investigate the journal logs (journalctl) for any errors or warnings that occur around this time. 3. Review WordPress Plugins and Activities Plugin Behavior: Even though plugins like Updraft Plus are scheduled for different times, they might be triggering background tasks. Verify plugin behavior and logs. WordPress Cron: WordPress has its own cron system (wp-cron.php) that can sometimes trigger resource-intensive tasks. Review the WordPress cron events. 4. Server and Database Optimization Database Optimization: Run a check and optimization task on your MariaDB database. Over time, databases can become inefficient and slow. Upgrade Resources: An e2-micro instance is quite limited in resources. If this issue is related to resource constraints, consider upgrading the VM instance type. 5. Monitoring and Logs Enable Enhanced Monitoring: Tools like sar, iotop, or atop can provide in-depth system metrics. Make sure they are configured correctly. Access and Error Logs: Review NGINX, PHP-FPM, and MariaDB logs for any anomalies during the problematic time frame. 6. External Factors Traffic Spikes: Although Jetpack stats show low traffic, consider checking the access logs for unexpected traffic spikes, which might be bots or crawlers. Network Analysis: Use tools to monitor network activity. Unexpected external connections might be contributing to the load. 7. Testing and Isolation Isolate Components: Temporarily disable certain components or plugins during the problem window to see if the issue persists. Test in a Staging Environment: If possible, replicate the setup in a staging environment to test without affecting the live site.

@scottalanmiller said in TMUX: hype or function:

@stacksofplates said in TMUX: hype or function:

Once really nice thing about tmux is you can keep jobs running in the session after disconnecting from SSH

Which means, for those who miss the implication, that you can reconnect to the same session from a different location.

Yeah. You can even share the socket so that multiple people can view a single session. Good for pairing with others.

Which is how things like tmate operate

https://tmate.io/

@eaglex said in FreePBX Contact Manager to Yealink Address Book:

Hello,

First of all, let me thank you for your wonderful work. This made our lives much easier...

If you don't mind, I would like some help: I'm running this script on 2 FreePBX machines, both are practically the same. On one machine, I have no problems viewing contacts with more than one number (In both the XML file and on the phone itself).
However, on the other machine, I can only see on phone number for each contact, even if they have more than one phone number, again, it happens both when I visit the XML file directly from a browser and on the phones.
I can't think of any difference between both the pbx's.

I'd appreciate your help and I'll be happy to provide additional details, logs, info, etc..

Thanks a lot!

My fingers are still crossed for a solution 😞

Thanks!

I'll add another note for future reference here.

For Fedora 39 Server, apcupsd has another package apcupsd-cgi that can be used with a web server to display UPS status. However, you have to move the files it installs by default because they're not in the /var/www/cgi-bin directory.

sudo dnf install -y apcupsd apcupsd-cgi httpd
sudo mv /var/www/apcupsd /var/www/cgi-bin/
sudo chown apache:apache /var/www/cgi-bin/apcupsd/*
sudo systemctl enable --now httpd

Should get it up and running.
I found 3 useful tools with it.
http://YOURIP/cgi-bin/apcupsd/uspstats.cgi
http://YOURIP/cgi-bin/apcupsd/multimon.cgi
http://YOURIP/cgi-bin/apcupsd/upsfstats.cgi

1027bdf5-650f-443d-a898-10669ff70e16-image.png

@RojoLoco said in Cloud Based Auto-Attendant:

@Danp said in Cloud Based Auto-Attendant:

@DustinB3403 I used RC in the past, and it should be able to handle this without issue. You should only need to pay for a single user for this to work.

We currently use RC. Honestly, as much as I want to bag on it, I can't. It works, all the time. The only thing I ever have to touch on RC is add/remove users.

If you are only doing a single line or two, RC is basically unbeatable. Get beyond that, they start getting pretty pricey.

@scottalanmiller said in ChromeOS vs Linux:

@gjacobse said in ChromeOS vs Linux:

Have I managed to mislead myself in believing that the two - while different - are in a basic manner, the same

Basically, yes. In essence, the kernel provides basic compatibility and underlying behaviour (task switching, memory resource management) allowing you to gauge performance, security and application compatibility (that is for binaries.)

But NOTHING that people think of as a system is its kernel. If you put the GNU utils on top of Windows, literally no one can tell. Is it Linux? Nope, it's Windows!

Test this with the Ubuntu for Windows in the Windows 11 Store. It'll install Ubuntu for you to run on your Windows workstation. It will look and feel exactly like Ubuntu you are used to. It IS Ubuntu. What it is not, is Linux, at all. It's 100% Windows, just with the Ubuntu user interface on top, rather than the Windows Desktop interface.

There's no Linux, whatsoever. The Linux Subsystem for Windows is an API compatibility layer NOT an implementation of Linux.

You're thinking of WSL 1. If you follow your instructions that should be WSL 2, which does use the Linux kernel

@DustinB3403 said in QBX, Priorietary Dashcams and Hacked Police Departments:

@scottalanmiller Yea I've had to deal with this in the past, the software is just awful to deal with, and literally makes nothing more secure, for either the prosecution, defendant(s) or the public attempting to view the material.

Simple answer is, that it just proves how vulnerable police departments are with such horrible software requirements.

Not aware of any requirement. They just choose this kind of equipment over other options.

@DustinB3403 said in Is Intel VROC FakeRAID?:

@scottalanmiller

I'm not shocked.

Par for the course for Intel storage.

@JasGot if they are different extensions, it'll act just like any normal pair of extensions

Turns out our headquarters uses: https://www.sharingcloud.com/?lang=en

I've never heard of this, but if we choose to use it I'll be able to answer questions in a few months.

@Obsolesce said in SSL Decryption of American K12 School in Connecticut: Legality?:

Here are some points to consider:

Consent and Notification: It's essential to have explicit consent from parents or legal guardians if students are minors. Even if students are not employees, they still have privacy rights. Proper notification to both students and parents is crucial.

FERPA Compliance: The Family Educational Rights and Privacy Act (FERPA) protects the privacy of student education records. Any monitoring should be in compliance with FERPA regulations to avoid violations.

Children's Online Privacy Protection Act (COPPA): If the school is providing online services or websites to students under the age of 13, COPPA may come into play. It requires obtaining parental consent for collecting personal information from children.

Vendor Liability: If a breach of student private communications occurs due to IT or vendor mistakes, there could be potential liability issues. Schools should have agreements in place with vendors that address data security and liability.

Local and State Laws: Laws regarding electronic surveillance, data privacy, and education can vary by state and locality. It's important to consult with legal experts who are knowledgeable about local regulations.

Balancing Security and Privacy: Schools must strike a balance between ensuring network security and respecting student privacy. An overly intrusive monitoring system could raise concerns.

Ultimately, it's crucial to consult with legal counsel who specializes in education law and data privacy to ensure that the school system's practices comply with all applicable laws and regulations. Additionally, a transparent and well-documented approach to monitoring, including clear notification to students and parents, can help mitigate potential legal risks.

This is good input. Ultimately liability is going to come down to primarily local laws and statutes and what the legal department of the district has done to ensure safety and indemnification, and of course what transparency, notification and consent has been granted. That students are required to attend school, are not employees or at will, and are minors make this not just different, but essentially the opposite, of an employment situation. Any breach of privacy (not meaning a breach of IT systems, but the IT systems themselves) could violate constitutional rights as well as international human rights...

From a law firm on US right to privacy... "The right to privacy is a fundamental human right, and it is recognized by international treaties and many countries’ Constitutions. The Universal Declaration of Human Rights recognizes the right to privacy in Article 12, and the International Covenant on Civil and Political Rights further elaborates on the right to privacy in Article 17.

At the same time, different countries have different laws and regulations when it comes to privacy. In the United States, for example, the Fourth Amendment to the Constitution protects citizens from unreasonable searches and seizures by the government. This has been interpreted by the courts to include the right to privacy."

Even if students are not minors, the question is whether this constitutes unreasonable search leading to violation of privacy. And of course if it puts minors at risk, that's an additional concern.

@AdamF said in Proxmox and VM Replication - Followup:

Also curious if your clients(or you) purchase support plans from Proxmox?

No. None of the setups in use are complicated enough that there is a need for support from the vendor.

@ElecEng said in Is the domain .Local a real problem in a private lan that has no public facing services?:

@scottalanmiller What's the best thing to use on green field networks that are private and have no public facing services?

Not AD.

@ElecEng easy to do with Postfix. But with Office 365 I don't know how that would be done.

@flaxking said in Need and IIS based hosting option aside from Azure:

they could rewrite enough to upgrade to the latest .Net and not have to run on Windows.

And confirmed. They are updating to ASP.Net Core 7

So they can run everything pretty much anywhere. Time to test out Kestrel and YARP it seems.