@obsolesce Change the file extension to .ppsx
Or do what sane people do, convert powerpoint presentations to pdf and run them like that in full screen. It's better, faster and more portable. Just have to remove ridiculous bullet point animations and similar nonsense that shouldn't be used in the first place.
@dafyre Random in bursts. 85 times total in the last two months.
I have a server that shows the ethernet link going down and then up again. It is always around 3 seconds. In the log the first time it happened was 2 months ago. There are a total of 85 down/ups since then.
What could be the cause for this? Could it be another device on the LAN? Why always 3 seconds?
Excerpt from dmesg:
[28468259.557902] igb: eth0 NIC Link is Down
[28468262.617576] igb: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[28468268.462849] igb: eth0 NIC Link is Down
[28468271.522498] igb: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[28468274.480760] igb: eth0 NIC Link is Down
[28468277.452435] igb: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[28468281.006518] igb: eth0 NIC Link is Down
[28468283.958191] igb: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[28470067.093744] igb: eth0 NIC Link is Down
[28470070.033392] igb: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RXWhen you don't know the password to login on IPMI on Supermicro servers the only solution is to reset the IPMI to factory default settings. Then you can login with user ADMIN and password ADMIN.
Supermicro has a utility program called IPMICFG that can be used for this. It's available for Windows, Linux and DOS. The most straight forward way, with no dependencies, is to boot into DOS and use the DOS utility.
Easiest way to accomplish this is to create a bootable FreeDOS USB memory stick with Rufus (Windows required). https://rufus.akeo.ie/
Just select FreeDOS and Rufus will create a bootable USB memory stick with FreeDOS on it.
Next we need the IPMICFG utility. It can be found on Supermicro's site.
https://www.supermicro.com/SwDownload/SwSelect_Free.aspx
It's a zip file and one directory called DOS contains the DOS utility.
Take the DOS directory and copy it to your USB stick.
Then take the USB stick and insert it into your Supermicro server. Boot to the USB drive (might have to change BIOS settings for this).
Then run the IPMICFG utility to reset IPMI to factory default settings:
ipmicfg -fd
Program will respond with "Reset to the factory default completed."
IP settings should be unchanged from before and you should be able to login now.
A couple of other command that can be useful are:
Show IP and MAC.
ipmicfg -m
Set IP addr
ipmicfg -m 192.168.56.78
Set subnet mask
ipmicfg -k 255.255.255.0
@bigbear Just boot with another live linux distro and then write over the mbr with dd or delete all partitions. Make sure the USB device is set as the first bootable device in BIOS.
@storageninja The hypervisor is to the guest what hardware was to a physical OS install. There are plenty of examples where the vendor says hardware x,y,z works and is approved, aka HCL. That the vendor specifies what hypervisors are tested and compatible is equally logical and common.
And of course most applications don't have any requirements on the hypervisor and they didn't have it on the hardware either.
@bigbear Try adding nomodeset to the boot parameters.
Which hypervisors can be nested inside each other?
I'm thinking primarily about KVM, Xen, Hyper-V.
Purpose is of course for learning and playing with hypervisors, not production.
@scottalanmiller said in VM firewall for the rest of the VMs? (Xenserver host):
Is this a hosted machine in a datacenter so that you can't have a normal firewall?
Yes.
@scottalanmiller Are we talking about the edgerouter with POE?
I haven't used it but looked into it and it seems like some odd non-standard POE implementation. Not the usual PoE/PoE+ you'll find everywhere else.
Have been using Avocent IP KVM switches for a long time but am looking to transition to IPMI/iDRAC/ILO. What is best practice for setting this up?
Most servers have a dedicated LAN port for this. Should I build a separate LAN and hook up the machines to that? Or a VLAN?
How about the machines that doesn't have a dedicated port?
How should I handle login/password for the machines? How about SSL certificates? And how about the security when accessing off site?
Also just as with KVM switches, a lot of the remote console software is java-based and sometimes require older version and different security settings. Should I have a dedicated machine on location so I can have local access (similar to a KVM switch) and also remote into with the correct software already setup?
Supermicro comes with fully functional IPMI but HP and Dell comes with crippled ILO/iDRAC. How much is it to license each server from HP/Dell so you get remote console & remote media capability?
I'd really like to get some input on this. I have three locations where I'm thinking about this. One has maybe 25 servers and another with 5-6 servers and also 2 servers at a colocation datacenter.
@jaredbusch said in XenServer / NextCloud / backup build to move away form Dropbox:
@pete-s said in XenServer / NextCloud / backup build to move away form Dropbox:
However to store the VM themselves and boot your system I would very much like to have a small SSD drive for that.
There is no point in putting an SSD in a system for the hypervisor. That is just stupid.
There is no “storing the VM themselves” on the SSD unless you are talking about splitt8ng the storage VM into a boot vDisk and a data vDisk.
But even the, the OS will never use the SSD aside from boot. A file server al,ost never writes to the OS, it is all about the storage vDisk.
You're right. I was thinking putting the xenserver host (about 50GB space) and the guests on SSD and just have archive files and backups on the HDDs. From my experience the VMs will be sluggish running on the WD RED disks as they are much slower (avg seek and transfer rate) than your typical 10K, 15K 2.5" drives. But your right that it won't matter much in this case.
@mario-jakovina You do realize that the T30 is a small mini-tower server and not rackmount?
Also it has no drive bays so you have to mount the drives inside the case, connect cables etc. And there are only room for 4 drives total - so one boot drive and your two 4TB drives. So you can't do RAID10 or if you want to expand with another two drives you can't.
To be honest the T30 is more of a desktop computer than a server because it has no features that you will find on almost all servers. If you really want a tower server maybe a HP ML110. Sometimes you can find them for a good price ~300-400 EUR.
Two RED 4TB drives will have >100MB/s read & write so there will be no problem with speed for the files/backup because you need more than 1 gigabit network to saturate the disks.
However to store the VM themselves and boot your system I would very much like to have a small SSD drive for that.
Does anybody have experience with Supermicro iKVM/IPMI HTML5 viewer?
Are those only for the latest boards X11 or are there upgrades for X10 and X9 too?
What is required to get this? Is it just an update of the IPMI firmware?
Does it work well?
Looking for 10 gigabit network cards for some servers.
There are some options to consider.
What's your take on 10 gigabit over RJ45 copper versus SFP fiber?
Intel or Chelsio hardware? Or something else?
What kind of throughput can I expect over 10GbE, say running iperf between two machines?
What is the best way to setup a VM firewall controlling the traffic in and out of the box for the rest of the VMs?
It's a Xenserver (xcp-ng) host.
Or would it be better to put firewall rules on the host itself?
PS. For the firewall VM I'm thinking Pfsense (freebsd) or Vyos (debian)? Are there others I should consider?
Just guessing but I would take a look a the services for Remote Desktop and see what startup configuration they have and under what credentials they are running.
I suspect that when you log in certain services are started that should have been running before that.
Also do a bare installation without joining a domain so you have a fresh install to reference.
I'd also check the "allow remote desktop from any version" option.
Passwords don't need a mix of uppercase and lowercase, numbers or special characters - and they don't need to be changed often. That's outdated recommendations.
Passwords just needs to be long. Search for NIST password guidelines for more info.
@scottalanmiller said in Firewall rules for outgoing traffic:
@pete-s said in Firewall rules for outgoing traffic:
What is best practice for SMB?
SMB the protocol? Or SMB meaning small business?
Small business. The enterprises I've seen have heavy restrictions on outbound traffic..
@fuznutz04 You can't expect more if you have mechanical harddrives in RAID 1 or just 1 gigabit NIC.