Newest Questions
328,664 questions
0
votes
1
answer
48
views
bind9 silently fails over to random nameservers upon resolve timeout
I have bind9 set up on my router PC. It serves as DNS server for all machines in my home network. It's configured so that it's supposed to only forward DNS requests to stubby (listening locally on ...
0
votes
0
answers
9
views
Memory increasing when rebooting my vps in a service
I have a service running under systemctl that seems to use double the amount of memory after I reboot my VPS. This issue happens with a Go service as well as a service using Bun in a TypeScript ...
0
votes
0
answers
21
views
DMARC Alignment Failure 5% of the time
I am trying to troubleshoot a DNS (DMARC DKIM) issue and am stuck. My gut tells me that its a DNS issue where DKIM is not resolving correctly. But I don't understand how or why?
So, we use a 3rd party ...
0
votes
1
answer
6
views
How to configure automount through freeipa: Fedora 40 clients, Rocky 9.4 ipa servers
I've managed to riddle this out for myself, so please don't immediately jump in because I'm going to post an answer to my own question.
I wanted to move away from automount definitions in /etc/auto....
0
votes
0
answers
17
views
802.1X and CAs On Parent/Child Forest Environment
I have a Parent domain IPSOM.com in a Forest with 2 child domains PROD.IPSOM.COM and DEV.IPSOM.COM in an offline environment. My CA is on the top IPSOM.com domain and our system infrastructure is ...
0
votes
0
answers
11
views
qcow2 dynamic disk file is about double the size it should be. How do I shrink it?
qcow2 image on VM host:
# ls -l vdisk.qcow2
-rwxrwx--- 1 qemu qemu 31388270592 Feb 6 11:59 vdisk.qcow2
qemu-img info:
# qemu-img info vdisk.qcow2
image: vdisk.qcow2
file format: qcow2
virtual size: ...
0
votes
0
answers
4
views
Snort 2.9.20 is not logging traffic in snort.log
I'm running snort 2.9.20 on Ubuntu 24.04.1 and cant get packet logging to work using the command
sudo snort -l /var/log/snort/ -i eth0 -A full -c /etc/snort/snort.conf
Alerts are correctly appearing ...
0
votes
0
answers
19
views
How to create two extensions in kazoo via commandline
Good Morning, I have a Kazoo cluster on RockyLinux over an LXD cluster. It has 9 containers and using freeswitch as media servers. I am trying to create two extensions to be able to bridge calls ...
0
votes
0
answers
10
views
How to identify the base image digest on Docker Hub?
I'm looking for way to identify the base image used by another Docker image, down to the SHA256 digest, preferably without the need to download any of them. I used to be able to do it via Docker Hub's ...
0
votes
0
answers
5
views
Icinga2 how to check if a port is listening?
I just want to query a host in Icinga2 and see if a port is responding. After days of reading the documentation I'm still horribly confused. Here's what I came up with originally:
object CheckCommand &...
-1
votes
0
answers
11
views
Docker mailserver keeps on restarting
I deploy a docker mailserver in ubuntu 22.04 host, the server rebooted without proper shutdown when the server is up checked the docker mailserver
when i try sudo docker ps -a result is:
container_ID ...
0
votes
0
answers
19
views
Nginx: How to rewrite arguments passed in php url?
In Nginx I'm trying to redirect
example.com/app/index.php/view/proj?repository=oldrepo&file=oldfile#coord=...
to:
example.com/app/index.php/view/proj?repository=newrepo&file=newfile#coord=...
...
0
votes
0
answers
9
views
always needing innodb_force_recovery = 6
After many attempts I was able to restart a badly corrupted db by adding
innodb_force_recovery = 6
to my.ini
However now, I am unable to start the server at all unless that line is permanently in the ...
1
vote
0
answers
23
views
How to configure PAM to authenticate SSH logins with (password only) from locallan and (password & OTP) from any other IP address?
My goal is to achieve 2FA (password + OTP) SSH login when connected from outside of my local network, while use "password only" SSH login from local network (192.168.1.0/24).
Currently I ...
-1
votes
0
answers
26
views
MySQL on Windows - slow to connect after server idle, but once initial connect is done it's fast until idle again
I'm running Apache/2.4.51 (Win64) PHP/8.0.13 and MySQL 5.7.36 on Windows 10.
Project for personal use (e.g only me requesting the webpages)
Whenever the server has been idle, it takes about 3-5 ...
1
vote
0
answers
30
views
XFS uses more space that amount of stored files
We have an XFS volume mounted on RHEL9.5 (5.14.0-503.22.1.el9_5.x86_64) with only 88K files on it:
$ find /mnt -type f | wc -l
87739
The file system reports ~200GB of free space. However, the total - ...
-1
votes
0
answers
17
views
How to avoid Windows Restore to rollback Mysql database IBD files? [migrated]
I distribute an Windows application with mysql server, I discovered that the Windows System Restore restores files with IBD extension and then when an user run it due to Windows issues, the process ...
0
votes
0
answers
16
views
Best practices for bastion user configuration on Linux
Context
I am introducing a bastion (jump) host to access my private servers. I want to configure a separate Linux (Ubuntu) user on the bastion host which I am going to use for SSH / SCP / RSYNC in my ...
0
votes
0
answers
32
views
How do I determine if a Docker image is incompatible with cgroup v2?
I have a Kubernetes cluster that runs a set of containers - some built by my team, some built by other teams in my org, and some built by third parties (i.e. externally to my org).
We're planning a ...
0
votes
1
answer
27
views
Allowed characters in a Kubernetes Role Name?
Up to now I thought : is not allowed in a Kubernetes Role Name (object name docs).
Now I see:
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: kubeadm:bootstrap-signer-clusterinfo
...
0
votes
0
answers
21
views
Why does my syslog-ng Docker container restart every ~1 minute?
I have a Docker Swarm with various services running. I've added a syslog-ng OSE service using https://github.com/linuxserver/docker-syslog-ng. The syslog-ng stack has the following docker-compose.yml:
...
0
votes
0
answers
10
views
compute engine instance with GPU H100-80GB [closed]
I am trying to setup an instance with GPU 1 x NVIDIA H100 80 GB ,but it's not allowing me to launch instance showing quota error. can anyone help me to setup an instance with the above configuration, ...
0
votes
1
answer
10
views
Pod Log Loss in k8s Cluster
Problem Description
When the cluster creates a Pod, the logs are initially normal, and kubectl logs pod-name -n namespace can display normal logs;
After approximately 30 seconds to 1 minute (the time ...
0
votes
0
answers
13
views
Almalinux whm error [closed]
Have problem in my server and try many solution to fixing but nothing is working
Can some one help me please
My server is almalinux 9
System update process has started.
-- error(117324) --
“/usr/bin/...
0
votes
0
answers
12
views
Pure-ftpd yocto build user account authentication failed
I tried to include pure-ftpd package when I build yocto Linux for my EVM.
After pure-ftpd is included, I can login FTP with my root account.
However, after I tried to add a user account by below ...
-1
votes
0
answers
18
views
What is a typical large file transfer speed moving 600mb files from one pc to another? Both machines have 2tb nvme pcie4 ssd drives [closed]
What is a typical large file transfer speed moving 600mb files from one pc to another?
Both machines have 2tb nvme pcie4 ssd drives.
I can't get more than 1.8gbps.
Thanks!
0
votes
0
answers
16
views
Avoiding conflicts when creating github repositories and managing labels with terraform
I would like to use terraform to manage repositories in a github organization. When using the github_repository resource to create repositories and the github_issue_labels resource to manage labels, I ...
0
votes
0
answers
22
views
DKIM ok for command line sendmail, but not for python sendmail
I'm setting up a python-based email server on Ubuntu 18 and I'm confused by the different DKIM behavior on the command line vs in python. When I use sendmail < message.tx recipient, DKIM signs it.
...
-1
votes
0
answers
14
views
CloudFront as Intranet CDN without Internet/IGW
Confirm if we can use CloudFront as on-premise CDN without IGW in the VPC and only accept access from the private IP address range of the organisation on-premise network private IP address (10.x.x.x) ...
0
votes
0
answers
26
views
domain hijacked for spam with Let's Encrypt cert, I think
Have ancient domain. Registrar NameCheap, nameservers point to linode, no server running. If I do a dig +trace, returns no DNS records, which is what I expect. However, the domain has apparently been ...
0
votes
0
answers
10
views
dockerfile for a postfix container with a predefined destination mail address for the local network
I would like to build a docker that accepts all emails from the local network without a password and only sends them a predefined email.
Unfortunately, the Contianer is crashing, but I have no idea ...
0
votes
0
answers
17
views
How to run sysprep /generalize + dism /optimize-image?
I'm working on a new Windows *.wim system image. I finished preparing the system in audit mode, and now I want to generalize with sysprep to prepare for capturing the image with dism. In between these ...
0
votes
0
answers
10
views
Dovecot with userdb as static domain is not passed
I have a handful of domains and want to have a small mail server. Now I thought that I didn't need an extra SQL query for the userdb and declared it as staic, as shown in the configuration example. ...
0
votes
0
answers
22
views
Coraza SPOA Error: "response id is empty"
I'm running Coraza SPOA on a HAProxy VM and encountering a recurring error in the logs:
root@haproxyvm:~/coraza-spoa# tail -f /var/log/coraza-spoa/coraza-agent.log 3:44PM PNC Error handling request ...
0
votes
0
answers
11
views
Prevent log message about ALLOWED apparmor events
On some Ubuntu 22 and 24 systems, syslog is being cluttered with messages like this which is completely uninteresting:
Feb 05 16:17:01 myhost.example.com audit[353829]: AVC apparmor="ALLOWED"...
1
vote
1
answer
40
views
Unable to connect between Oracle compute instances
I manage several Oracle cloud compute instances (all Ubuntu servers) located in different regions.
All VMs have iptables set to allow ingress traffic on port 22, and the same ingress rules are applied ...
0
votes
0
answers
19
views
Filter postfix based on to: and from: address
One of our suppliers emails everything to all email addresses they have on file. This means that invoices are emailed to support staff as well as admin staff and operational emails are emailed to all ...
0
votes
0
answers
6
views
thruk ver 3.18 not creating host and service objects when business process is created
We have a current thruk instance, Ver 3.10, that replicated any business processes correctly to Service and Host objects. We have stood up new instances, ver 3.18, and they don't seem to be doing this ...
1
vote
1
answer
34
views
How can I grant all privileges on a database in PostgreSQL
We have a template database with schemas, tables, sequences etc. We create a new database from it and provide ownership of the new database to a user (a new user created as part of this workflow). The ...
0
votes
0
answers
21
views
Can git be configured to fallback to HTTPS if SSH isn't working? [closed]
I have a pretty standard SSH config for github on my laptop:
Host github.com
HostName github.com
User xxxxxx
PreferredAuthentications publickey
IdentityFile /Users/xxxxxx/.ssh/xxxxxx-GitHub
...
0
votes
0
answers
7
views
How can we provide dynamic credentials to the dynamic data source selected by user via parameter in SSRS
I have created a report which can be used against different server based on the user selection parameter. However I couldn't provide dynamic credentials to the dynamically selected server based on ...
-1
votes
0
answers
21
views
Cannot connect to my local apache server from another pc in my home network [migrated]
I have a debian host that was recently replaced. This has Apache server with a an API for testing. The API was used either locally by using the localhost address, and another Windows host on the same ...
1
vote
1
answer
69
views
Route53 not resolving or propagating
I have this domain edinstance.co.uk the domain is from route53 and hosted there but after looking at it through online tools it either says it hasn't propagated yet or the the server is refusing the ...
0
votes
1
answer
59
views
Mysql 8 on Windows: any change to my.ini breaks the startup sequence
Mysql 8.0.41 on Windows (but this applies to previous versions too, at least all the 8.x versions)
I can stop and restart the service from task manager/services as many times as I want, no problems.
...
-1
votes
1
answer
72
views
MASQUERADE everything except SSH
I am currently trying to get my Apache Reverse Proxy to MASQUERADE everything except SSH to one specific server on the internal network. The reason behind this is that I want that SSH-reachable server ...
0
votes
0
answers
49
views
Moving AD objects between OU
We are upgrading Windows 10 to 11. I am trying to automate moving workstation objects between two OU's, however the script does not catch anything.
Import-Module ActiveDirectory
$SourceOU = “OU=Win10,...
0
votes
0
answers
14
views
Data Loss Prevention lightweight option [closed]
I am looking for a lightweight Data Loss Prevention solution for a Rails app. Please let me know if you are aware of an option that will allow me to sign up quickly and inexpensively. All of the ...
0
votes
0
answers
35
views
Custom SAN attribute using +EDITF_ATTRIBUTESUBJECTALTNAME2 not working
I have a CSR generated by an older Dell RAC. It does not include SAN, and I cannot extract the private key off the card. So, I want to add the SAN attributes in my Windows 2019 CA server using the +...
0
votes
0
answers
70
views
dhcpcd exited during network booting of Ubuntu
Here is an overview of my setup:
I have a tftp server hosting the vmlinuz and the initrd.img file. The one that I'm using is an ubuntu-lowlatency kernel designed for HPC machines (https://unix....
0
votes
0
answers
12
views
Loki distributed helm chart not writing to S3 bucket
I am trying to run a loki distributed helm chart in my kubernetes cluster, I have a folder with a Chart.yaml:
apiVersion: v2
name: loki
description: Umbrella chart for loki
type: application
version: ...