November 2019

SSL client vs server certificates and bacula-fd

See also OpenVPN: unsupported certificate purpose. NOTES NOTE: When using ssl-admin for Bacula: use option 4 (Perform a one-step request/sign) for clients (bacula-fd) use option S (Create new Signed Server certificate) for servers (bacula-sd and bacula-dir) I know these things, but I repeatedly go to option 4 and forget…. Original post follows Sometimes I forget …

SSL client vs server certificates and bacula-fd Read More »

Which hosts have this vuln package installed? SamDrucker knows.

Today I found out about a vuln in net/py-urllib3. Nagios told me: Checking for security vulnerabilities in base (userland & kernel): Host system: Database fetched: Tue Nov 26 18:23:32 UTC 2019 py36-urllib3-1.22,1 I logged into that host and ran a pkg upgrade py36-urllib3. What other hosts have that installed? There. That’s the hosts I have …

Which hosts have this vuln package installed? SamDrucker knows. Read More »

patching your Intel CPU Microcode using FreeBSD ports

Today this Nagios alert showed up: I admit it. I have not patched my micro code before. I’m doing it only because it turned up in Nagios. Browsing to that URL, I found “Starting with version 1.26, the devcpu-data port/package includes updates and mitigations for the following technical and security advisories (depending on CPU model).”. …

patching your Intel CPU Microcode using FreeBSD ports Read More »

knew

This post has been replaced by a newer post. For future reference, this is the knew server … oh wait, I think it’s this server which is was mounted in the 4U chassis mentioned in this post. It runs a few jails, including Bacula regression testing services. It is now mounted in a SuperChassis 846E16-R1200B …

knew Read More »

zpool degraded – one drive missing from system

I rebooted knew yesterday for upgrades. When it came back, the main storage zpool was degraded: Is the drive alive? The drive is not listed at all in /var/run/dmesg.boot. I keep a list of the expected drives in /etc/periodic.conf, for use by a Nagios check: [dan@knew:~] $ /usr/sbin/sysrc -nf /etc/periodic.conf daily_status_smart_devices /dev/da22 /dev/da21 /dev/da20 /dev/da19 …

zpool degraded – one drive missing from system Read More »

slocum

This post has been replaced by a new one. For reference, the previous post on this server is still available. FYI, this server is named after Joshua Slocum, who was the first person to sail single-handedly around the world. This server was upgraded on Feb 2 2019. Only the storage persisted. Everything else was upgraded. …

slocum Read More »

zfstools & sanoid – snapshots on the local host

I’m going to implement zfstools on all my ZFS-based hosts today. I first started using this tool in July 2019. In this post: FreeBSD 12.0 and 12.1 zfstools 0.3.6_1 sanoid-2.0.1_2 Local snapshots only I will be using zfstool only for creating local snapshots. If I wanted snapshots for sending to other hosts, I would probably …

zfstools & sanoid – snapshots on the local host Read More »

SATA: Avoid molded ATA adapters, instead, use crimped-on connectors

When I set up the R720 with internal SSDs, I used a SATA power splitter, a Y-shaped cable. Today I replaced it because of a known fire-hazard. I received an email from a reader urging me to replace it and supplied a reference to a known good cable. I happened to have that very cable. …

SATA: Avoid molded ATA adapters, instead, use crimped-on connectors Read More »

Scroll to Top