Match linux command-line arguments to view their help text.
Tag: SysAdmin
system administrator related links
stackshare.io
Dev / Production stacks for all to see. Handy tool to see what software is trending today.
aws.amazon.com
Amazons’s cloud computing & web hosting service.
Amazon EC2 M8g instances now available in additional AWS regions
15 April 2025 @ 5:00 pm
Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M8g instances are available in AWS Asia Pacific (Tokyo, Sydney) regions. These instances are powered by AWS Graviton4 processors and deliver up to 30% better performance compared to AWS Graviton3-based instances. Amazon EC2 M8g instances are built for general-purpose workloads, such as application servers, microservices, gaming servers, midsize data stores, and caching fleets. These instances are built on the AWS Nitro System, which offloads CPU virtualization, storage, and networking functions to dedicated hardware and software to enhance the performance and security of your workloads. AWS Graviton4-based Amazon EC2 instances deliver the best performance and energy efficiency for a broad range of workloads running on Amazon EC2. These instances offer larger instance sizes with up to 3x more vCPUs and memory compared to Graviton3-based Amazon M7g instanc
Amazon EC2 C8g instances now available in additional regions
15 April 2025 @ 5:00 pm
Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C8g instances are available in AWS Asia Pacific (Sydney), AWS Europe (London), AWS US West (N. California), and AWS South America (Sao Paulo) regions. These instances are powered by AWS Graviton4 processors and deliver up to 30% better performance compared to AWS Graviton3-based instances. Amazon EC2 C8g instances are built for compute-intensive workloads, such as high performance computing (HPC), batch processing, gaming, video encoding, scientific modeling, distributed analytics, CPU-based machine learning (ML) inference, and ad serving. These instances are built on the AWS Nitro System, which offloads CPU virtualization, storage, and networking functions to dedicated hardware and software to enhance the performance and security of your workloads. AWS Graviton4-based Amazon EC2 instances deliver the best performance and energy efficiency for a broad ra
AWS Batch now supports Amazon Elastic Container Service Exec and AWS FireLens log router
15 April 2025 @ 5:00 pm
AWS Batch now supports Amazon Elastic Container Service (ECS) Exec and AWS FireLens log router for AWS Batch on Amazon ECS and AWS Fargate. With ECS Exec you can track the progress of your application and troubleshoot issue by by running interactive commands against the containers in your AWS Batch job. AWS FireLens allows you to stream logs of your AWS Batch jobs to your chosen destinations including Amazon CloudWatch, Amazon S3, Amazon OpenSearch Service, Amazon Redshift, partner services such as Splunk and more. You can configure ECS Exec and AWS FireLens while registering a new AWS Batch job definition or making a revision to an existing job definition. For more information, see Register Job Definition page in the AWS Batch API reference and Amazon ECS Developer Guide for
Amazon Corretto April 2025 Quarterly Updates
15 April 2025 @ 5:00 pm
On Apr 15, 2025 Amazon announced quarterly security and critical updates for Amazon Corretto Long-Term Supported (LTS) and Feature Release (FR) versions of OpenJDK. Corretto 24.0.1, 21.0.7, 17.0.15, 11.0.27, 8u452 are now available for download. Amazon Corretto is a no-cost, multi-platform, production-ready distribution of OpenJDK. Click on the Corretto home page to download Corretto 8, Corretto 11, Corretto 17, Corretto 21, or Corretto 24. You can also get the updates on your Linux system by configuring a Corretto Apt or Yum repo. Feedback is welcomed!
Amazon EventBridge Connector for Apache Kafka Connect now generally available
15 April 2025 @ 5:00 pm
The Amazon EventBridge connector for Apache Kafka Connect is now generally available. This open-source connector streamlines event integration of Kafka environments with dozens of AWS services and partner integrations without writing custom integration code or running multiple connectors for each target. The connector includes built-in support for Kafka schema registries, offloading large event payloads to S3, and IAM role-based authentication, and is available under the Apache 2.0 license in the AWS GitHub organization. Amazon EventBridge is a serverless event router that enables you to create highly scalable event-driven applications by routing events between your own applications, third-party SaaS applications, and other AWS services. With the EventBridge Connector for Apache Kafka Connect, customers can leverage advanced features such as dynamic event filtering, transformation, and scalable routing through a unified connector in Kafka environments. The connector simplif
Amazon EC2 I7ie instances now available in AWS Europe (Ireland) region
14 April 2025 @ 8:30 pm
Amazon Web Services (AWS) announces the availability of Amazon EC2 I7ie instances in the AWS Europe (Ireland) region. Designed for large storage I/O intensive workloads, these new instances are powered by 5th generation Intel Xeon Scalable processors with an all-core turbo frequency of 3.2 GHz, offering up to 40% better compute performance and 20% better price performance over existing I3en instances. I7ie instances offer up to 120TB local NVMe storage density—the highest available in the cloud for storage optimized instances—and deliver up to twice as many vCPUs and memory compared to prior generation instances. Powered by 3rd generation AWS Nitro SSDs, these instances achieve up to 65% better real-time storage performance, up to 50% lower storage I/O latency, and 65% lower storage I/O latency variability compared to I3en instances. Additionally, the 16KB torn write prevention feature, enables customers to eliminate performance bottlenecks for database workloads.
Amazon EC2 M7i-flex instances now available in AWS Asia Pacific (Melbourne) Region
14 April 2025 @ 8:10 pm
Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M7i-flex instances powered by custom 4th Gen Intel Xeon Scalable processors (code-named Sapphire Rapids) are available in AWS Asia Pacific (Melbourne) Region. These custom processors, available only on AWS, offer up to 15% better performance over comparable x86-based Intel processors utilized by other cloud providers. M7i-flex instances are the easiest way for you to get price-performance benefits for a majority of general-purpose workloads. They deliver up to 19% better price-performance compared to M6i. M7i-flex instances offer the most common sizes, from large to 16xlarge, and are a great first choice for applications that don't fully utilize all compute resources such as web and application servers, virtual-desktops, batch-processing, and microservices. In addition, these instances support the new Intel Advanced Matrix Extensions (AMX) that accelerate matrix multiplication operations for applications such as CPU-
Amazon Q Developer is now generally available in the AWS Europe (Frankfurt) Region
14 April 2025 @ 5:55 pm
Amazon Q Developer in the AWS Management Console and Amazon Q Developer in the IDE is now GA in the Europe (Frankfurt) Region. Pro tier customers can now use and configure Amazon Q Developer in the AWS Management Console and Amazon Q Developer in the IDE to store data in the Europe (Frankfurt) Region and perform inference in European Union (EU) Regions giving them more choice over where their data resides and transits. Amazon Q Developer Administrators can configure their user settings so that data is stored in Europe (Frankfurt) Region and inference is performed in EU geographies using cross-region inference (CRIS) to reduce latency and optimize availability. If you are requesting to contact AWS Support your data will be processed in the US East (N. Virginia) region. Amazon Q Developer
Amazon Q Business launches support for hallucination mitigation in chat responses
14 April 2025 @ 5:00 pm
Today, Amazon Q Business is launching a feature to reduce hallucinations in chat responses. Hallucinations are confident responses made by generative AI applications that are not justified by its underlying data. The new feature enables customers to mitigate hallucinations in real-time during chat conversations. Large Language Models (LLMs) underlying generative AI applications have reduced the extent of hallucination in their responses, but it is possible that these models could hallucinate. Hallucination mitigation is therefore needed to generate reliable and trustworthy responses. The Q Business hallucination mitigation feature helps ensure more accurate retrieval augmented generation (RAG) responses from data connected to the application. This data could either come from connected data sources, or from files uploaded during chat. During chat, Q Business evaluates a response for hallucinations. If a hallucination is detected with high confidence, it corrects the
Amazon SES now supports logging email sending events through AWS CloudTrail
14 April 2025 @ 5:00 pm
Today, Amazon Simple Email Service (SES) launched support for logging email sending events through AWS CloudTrail. Customers can maintain a record of email send actions performed using the SES APIs, including actions taken by a user, role, or an AWS service in SES. Previously, customers could use SES event destinations to route sending event notifications to custom data stores they created and managed themselves. This required custom solutions for data storage and data indexing, including development costs and operational oversight costs. Now, customers can configure event logging to AWS CloudTrail without any custom solution development. Customers can search for events, view the events, and download lists of events for processing in their private workflows. This gives customers a turn-key solution for event history management. SES supports AWS CloudTrail data events for sending events in all
networkworld.com
Information, intelligence and insight for Network and IT Executives.
8 unusual Linux commands
15 April 2025 @ 5:58 pm
This post examines eight somewhat unusual Linux commands that are worth knowing. But before we get into the specific commands, you can run the command below to see whether these eight commands are installed on your system. For each command, you’ll see the file system location for the command executable or a line that starts with “no command in (PATH)” where “PATH” will be a display of your search path – the places where the command looks for them.
[shs@fedora ~]$ for cmd in yes shuf column pv tldr stat namei revdo which $cmddone
The output should look like this if all the commands are installed:
Cato Networks augments CASB with genAI security
15 April 2025 @ 5:33 pm
Cato Networks recently unveiled new generative AI capabilities in its Cloud Access Security Broker (CASB) that the secure access service edge (SASE) provider says will let enterprise IT organizations detect, analyze, and gain insights into the use of genAI applications.
Cato CASB is a native feature in the Cato SASE Cloud Platform that can track applications that employees access, where employees log in from, and in
2025 global network outage report and internet health check
15 April 2025 @ 1:32 pm
The reliability of services delivered by ISPs, cloud providers and conferencing services is critical for enterprise organizations. ThousandEyes, a Cisco company, monitors how providers are handling any performance challenges and provides Network World with a weekly roundup of events that impact service delivery. Read on to see the latest analysis, and stop back next week for another update on the performance of cloud providers and ISPs.
Note: We have archived prior-year outage updates, including our 2024 report,
AI agents vs. agentic AI: What do enterprises want?
15 April 2025 @ 11:00 am
Enterprises have told me from the start that cloud-hosted generative AI based on large language models isn’t going to transform their business operation. They were very hopeful when the concept of AI agents came along, because it seemed to align with their own AI thinking. Now that this AI agent story has morphed into “agentic AI,” it seems to have taken on the same big-cloud-AI flavor that they already rejected. What do enterprises want from AI agents, why is “agentic” thinking wrong, and where is this all headed?
Enterprises tend to think of AI as part of their applicati
Intelligence at the edge opens up more risks: how unified SASE can solve it
15 April 2025 @ 8:02 am
In an increasingly mobile and modern workforce, smart technologies such as AI-driven edge solutions and the Internet of Things (IoT) can help enterprises improve productivity and efficiency—whether to address operational roadblocks or respond faster to market demands.
However, new solutions also come with new challenges, mainly in cybersecurity. The decentralized nature of edge computing—where data is processed, transmitted, and secured closer to the source rather than in a data center—has presented new risks for businesses and their everyday operations.
This shift to the edge increases the number of exposed endpoints and creates new vulnerabilities as the attack surfac
The network blueprint to take your modern enterprise global
15 April 2025 @ 7:58 am
Adopting new technologies is synonymous with improving productivity, enhancing decision-making, and driving innovations today. Almost every enterprise integrates some form of AI/ML capabilities within their operations or tapping into the Internet of Things (IoT) to keep operations at the edge. According to the 2025 State of the CIO research, 62% of organizations have shared that they are expecting to see an increase in their overall IT budget, with the num
Transforming the WAN to future-proof the network infrastructure
15 April 2025 @ 7:54 am
Enterprise network infrastructures have evolved significantly alongside the rise of cloud computing, Software-as-a-Service (SaaS), and AI. As businesses transform and become more sophisticated, organizations today should expect no less than an always-on, high-performance network connectivity that’s reliable across the globe. To solve new challenges, IT leaders need to look into their existing infrastructures to keep up with modern operations.
Addressing performance gaps in the modern workplace
The rise of AI, emerging technologies, and modern workflows has significantly increased the volume of data flowing through networks ever
Why digital transformation starts with an intelligent network infrastructure
15 April 2025 @ 7:47 am
Heightened end-user expectations and a greater emphasis on digitalization are rewiring the business landscape again. Businesses looking to sharpen their competitive edge and stay innovative in this climate must tap into solutions such as artificial intelligence (AI), machine learning (ML) and hybrid multicloud.
Yet, this new digital landscape has seen more fragmented data sources and disparate systems than ever, resulting in siloed operations, security vulnerabilities, and inefficiencies. And with IDC concluding that network security a
Microsoft releases out-of-band updates to fix reporting error
15 April 2025 @ 2:01 am
Microsoft has released emergency patches to fix an apparent reporting error in Active Directory (AD) Group Policy, which allows administrators to manage and configure user and computer settings in Windows.
The company reported in a Microsoft 365 message center update that the status of local audit logon/logoff policies might be incorrectly displayed, with audits showing as not occurring when they were actually running in the background.
The issue is occurring across various Windows and Windows Server versions, including Windows 11. The out-of-band (OOB) updates only need to be installed by impacted
Nvidia lays out plans to build AI supercomputers in the US
14 April 2025 @ 7:57 pm
There was mixed reaction from industry analysts Monday over an announcement from Nvidia that it plans to produce AI supercomputers entirely in the US for the first time.
The company said in a blog post that, together with its manufacturing partners, it has commissioned more than one million square feet (92,900 square meters) of manufacturing space to build and test Nvidia Blackwell chips in Arizona, and AI superc
forensicswiki.org
Computer forensic tools and techniques used by investigators
cyberciti.biz
online community of new and seasoned Linux / Unix sysadmins.
Download of the day: GIMP 3.0 is FINALLY Here!
18 March 2025 @ 3:45 am
Wow! After years of hard work and countless commits, we have finally reached a huge milestone: GIMP 3.0 is officially released! I am excited as I write this and can't wait to share some incredible new features and improvements in this release. GIMP 2.10 was released in 2018, and the first development version of GIMP 3.0 came out in 2020. GIMP 3.0 released on 16/March/2025. Let us explore how to download and install GIMP 3.0, as well as the new features in this version.
Love this? sudo share_on: Twitter - Facebook -
How to list upgradeable packages on FreeBSD using pkg
16 March 2025 @ 8:25 pm
Here is a quick list of all upgradeable packages on FreeBSD using pkg command. This is equivalent to apt list --upgradable command on my Debian or Ubuntu Linux system.
Love this? sudo share_on: Twitter - Ubuntu to Explore Rust-Based “uutils” as Potential GNU Core Utilities Replacement
16 March 2025 @ 12:17 pm
In a move that has sparked significant discussion within the Ubuntu Linux fan-base and community, Canonical, the company behind Ubuntu, has announced its intention to explore the potential replacement of GNU Core Utilities with the Rust-based "uutils" project. They plan to introduce new changes in Ubuntu Linux 25.10, eventually changing it to Ubuntu version 26.04 LTS release in 2026 as Ubuntu is testing Rust 'uutils' to overhaul its core utilities potentially. Let us find out the pros and cons and what this means for you as an Ubuntu Linux user, IT pro, or developer.
Love this? sudo share_on: Twitter -
How to install KSH on FreeBSD
3 March 2025 @ 11:50 pm
Installing KSH (KornShell) on FreeBSD can be done with either FreeBSD ports or the pkg command. The ports collection will download the KSH source code, compile it, and install it on the system. The pkg method is easier, and it will download a pre-compiled binary package. Hence, it is recommended for all users. KornShell (KSH) has a long history, and many older Unix systems and scripts rely on it. As a result, KSH remains relevant for maintaining and supporting legacy infrastructure. Large enterprises, especially those with established Unix-based systems, continue to use KSH for scripting and system administration tasks. Some industries where KSLinux Sed Tutorial: Learn Text Editing with Syntax & Examples
3 March 2025 @ 9:47 am
Sed is an acronym for "stream editor." A stream refers to a source or destination for bytes. In other words, sed can read its input from standard input (stdin), apply the specified edits to the stream, and automatically output the results to standard output (stdout). Sed syntax allows an input file to be specified on the command line. However, the syntax does not directly support output file specification; this can be achieved through output redirection or editing files in place while making a backup of the original copy optionally. Sed is one of the most powerful tools on Linux and Unix-like systems. Learning it is worthwhile, so in tHow to tell if FreeBSD needs a Reboot using kernel version check
23 February 2025 @ 10:07 pm
Keeping your FreeBSD server or workstation updated is crucial for security and stability. However, after applying updates, especially kernel updates, you might wonder, "Do I need to reboot my system?" Let's simplify this process and provide a straightforward method for determining whether a reboot is necessary using the CLI, shell script, and ansible playbook.
Love this? sudo share_on: TwitterCritical Rsync Vulnerability Requires Immediate Patching on Linux and Unix systems
15 January 2025 @ 6:04 pm
Rsync is a opensource command-line tool in Linux, macOS, *BSD and Unix-like systems that synchronizes files and directories. It is a popular tool for sending or receiving files, making backups, or setting up mirrors. It minimizes data copied by transferring only the changed parts of files, making it faster and more bandwidth-efficient than traditional copying methods provided by tools like sftp or ftp-ssl. Rsync versions 3.3.0 and below has been found with SIX serious vulnerabilities. Attackers could exploit these to leak your data, corrupt your files, or even take over your system. There is a heap-based buffer overflow with a CVSS score of 9.8 that needs to be addressed on both the client and server sides of rsync package. Apart from that info leak via uninitialized stack contents defeats ASLR protection and rsync server can make client write files outside of destination directory using symbolic links.
Love this? sudo share_on:
How to control the SSH multiplexing with the control commands
15 January 2025 @ 8:29 am
Multiplexing will boost your SSH connectivity or speed by reusing existing TCP connections to a remote host. This is useful when you frequently connect to the same server using SSH protocol for remote login, server management, using IT automation tools over SSH or even running hourly backups. However, sometimes your SSH command (client) will not respond or get hung up on the session when using multiplexing. Typically, this happens when your public IP changes (IPv4 to IPv6 changes when using DNS names), VPN issues, or firewall cuts connections. Hence, knowing SSH client control commands can save you time and boost your productivity when such gotcZFS Raidz Expansion Finally, Here in version 2.3.0
14 January 2025 @ 9:19 am
After years of development and testing, the ZFS raidz expansion is finally here and has been released as part of version 2.3.0. ZFS is a popular file system for Linux and FreeBSD. RAIDz is like RAID 5, which you find with hardware or Linux software raid devices. It protects your data by spreading it across multiple hard disks along with parity information. A raidz device can have single, double, or triple parity to sustain one, two, or three hard disk failures, respectively, without losing any data. Hence, expanding or adding a new HDD is a very handy feature for sysadmins in today's data-sensitive apps.
Love this? sudo share_on: Twitter -
How to run Docker inside Incus containers
18 December 2024 @ 5:44 am
Incus and Docker both use Linux kernel features to containerize your applications. Incus is best suited when you need system-level containers that act like traditional VMs and provide a persistent developer experience. On the other hand, Docker containers are ephemeral, i.e., temporary in nature. All files created inside Docker containers are lost when your Docker container is stopped or removed unless you stored them using volumes in different directories outside Docker. Docker is created as a disposable app deployment system. Incus containers are not typically created as disposables, and data is kept inside heartinternet.co.uk
Hosting packages for an initial web presence
How to Enable Root Access via SSH on Your VPS for Migration using Plesk
11 March 2025 @ 7:41 am
If you get one of the following messages from the Plesk migrator you should check that you are using root as the username along with the Plesk admin password. “The source server does not appear to be a Plesk server” “Plesk Migrator tool requires original ‘root’ user access or root user with GUI/UID = 0.” [read more...]
How to Enable Root Access on Your VPS Server Using Plesk
11 March 2025 @ 7:40 am
If you get one of the following messages from the Plesk migrator you should check that you are using root as the username along with the Plesk admin password. “The source server does not appear to be a Plesk server” “Plesk Migrator tool requires original ‘root’ user access or root user with GUI/UID = 0.” [read more...]
Are your website fonts sending the right message?
3 February 2025 @ 10:18 am
Did you know that the fonts you use on your website can impact the way your customers perceive and interact with your brand?
Black Friday at Heart Internet
28 November 2024 @ 3:27 pm
Black Friday is here, and we’re bringing you incredible savings to help your business thrive online. From 29th November 2024 to 9th December 2024, you can enjoy 15% off some of our most popular products to get the tools you need at a fraction of the cost. What’s on Offer? Here’s what you can save [read more...]
13 Easy Ways to Optimise Your Website for Speed and Performance
1 October 2024 @ 2:53 pm
A slow website is like a slow waiter: it doesn’t matter how good the food is if the service is frustratingly sluggish. If your site takes too long to load, visitors are likely to abandon it faster than you can say “bounce rate.” But fear not! Here are some tips to help you optimise your [read more...]
Black Friday and Cyber Monday sale now on at Heart Internet
22 November 2022 @ 3:31 pm
You can now get up to 33% off the price of a cPanel-managed Web Hosting plan at Heart Internet.
10 of the best WooCommerce plugins
27 October 2022 @ 10:53 am
Including options for optimising your cart, boosting customer loyalty, and selling tickets.
9 creative alternatives to .com and .co.uk domains
5 October 2022 @ 2:37 pm
Discover the appeal of .ninja, .coffee, .guru and more - all available in our domain name sale.
Save up to 43% on WordPress Hosting in our latest sale
20 September 2022 @ 3:23 pm
We’ve just slashed the price of WordPress Hosting at Heart Internet.
What to do once you’ve bought a domain
7 September 2022 @ 12:48 pm
A guide to what to do next once you've chosen your perfect domain name.
serverfault.com
Common Server issues – FAQs and answers from those in the know
Meteor Rupee loan app customer. care. helpline. NUMBER -)7366826579-//-7044760668-Call.dii
16 April 2025 @ 5:26 am
Meteor Rupee loan app customer. care. helpline. NUMBER -)7366826579-//-7044760668-Call.
Firewalld in failed state
16 April 2025 @ 2:00 am
Wireguard stopped working in a Rocky Linux 9 server. When checking the firewalld service status:
# systemctl status firewalld.service
● firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; preset: enabled)
Active: active (running) since Wed 2025-04-16 01:25:55 UTC; 10min ago
Docs: man:firewalld(1)
Main PID: 5247 (firewalld)
Tasks: 2 (limit: 48933)
Memory: 26.0M
CPU: 462ms
CGroup: /system.slice/firewalld.service
└─5247 /usr/bin/python3 -s /usr/sbin/firewalld --nofork --nopid
Apr 16 01:25:54 www.example.com systemd[1]: Starting firewalld - dynamic firewall daemon...
Apr 16 01:25:55 www.example.com systemd[1]: Started firewalld - dynamic firewall daemon.
Apr 16 01:25:55 www.example.com firewalld[5247]: ERROR: '/usr/sbin/iptables-restore -w -n' failed: iptables-restore v1.8.10 (nf_tables): Set f2b-sshd doesn't exist.
Can't install SecretProiderClass CRD in AWS EKS
15 April 2025 @ 8:48 pm
In my AWS EKS Cluster, I need to access a secret in my AWS SecretManager. To that end, I'm trying to apply a SecretProviderClass that looks like:
apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
name: nginx-irsa-deployment-aws-secrets
spec:
provider: aws
parameters:
objects: |
- objectName: "***"
objectType: "secretsmanager"
but receive the error:
error: resource mapping not found for name: "nginx-irsa-deployment-aws-secrets" namespace: "" from "ProviderClass.yaml": no matches for kind "SecretProviderClass" in version "secrets-store.csi.x-k8s.io/v1"
ensure CRDs are installed first
Following this guide (https://docs.aws.amazon.com/s
Debian 12. Why does the bridge between a physical interface and an MLAG interface fail to start in an operational state?
15 April 2025 @ 7:32 pm
The laptop has three USB ports. All are occupied by USB-to-LAN adapters. Two are connected to aggregation routers forming a bond0 interface using LACP protocol. The third one provides internet access. The internet connection is non-DHCP (statically configured):
source /etc/network/interfaces.d/*
auto lo
iface lo inet loopback
# MLAG by LACP with 23-th ports on s41 and s42
auto bond0
iface bond0 inet manual
bond-slaves enx00e04c680115 enx00e04c6800a9
bond-mode 4
bond-miimon 100
bond-downdelay 200
bond-updelay 200
bond-lacp-rate fast
bond-xmit-hash-policy layer2+3
up ifconfig bond0 inet 10.0.4.10/19 del fe80::2e0:4cff:fe68:115/64 up
post-up sleep 2
allow-hotplug enx00e04c780216
iface enx00e04c780216 inet static
address 93.123.240.219/24
gateway 93.123.240.1
The IPv6 network address must be removed because, otherwise, the USB-to-LAN adapters automatically generate an IPv6 address from somewhere. As a result,
A Windows 10 PC which is in the US seems to think it is in China, despite correct region setting
15 April 2025 @ 7:28 pm
I have a Windows 10 PC, which originally came from China. It is in the US now. The Windows Region settings were originally set to China, but have now been changed to "United States."
However, when I view the web, it directs me to Chinese versions of websites. For example, Google.com will show partially in Chinese.
It is almost as if I am connected to a VPN with a Chinese endpoint. But I am not (at least not to my knowledge).
This is an important PC because it is the controller for, and is built-into an industrial laser cutting machine. So I can't easily replace the PC.
My internet settings are using DHCP, and it is not using any custom DNS servers. Windows regional settings have been set to "United States." I have cleared the cache in the web browsers.
Any ideas for how to get the PC to act like a "normal" US-based PC?
Or, is there a way to tell if the machine is perhaps routing traffic through a VPN to China wit
How can 10G link be slower to WAN than 1G link, on the same machine?
15 April 2025 @ 6:45 pm
I'm using the following command to test network speed to my.remote.server, from my workstation:
dd if=/dev/random | pv | ssh my.remote.server "dd of=/dev/null"
When I set en0 to 10Gb, performance drops significantly (15MB/s upload).
But when I set en0 to 1Gb, I get much better results (56MB/s upload).
This happens despite the 10Gb link working perfectly in every other scenario!
10Gb performs reliably, giving me around 900MB/s via Samba, and over 10Gbps to a local server using iperf
netstat -ibn | grep -i en0 shows no errors or collisions on either 1Gb or 10Gb
iperf to my.remote.server shows expected performance (56MB/s upload) — it's only SSH that is slow!
I've analyzed tcpdump captures, and here's what I found when using 10Gb:
SACK packets appear → packets are arriving
EC2 Inter-instance Traffic Routing Issues - How to Investigate and Solve Them?
15 April 2025 @ 6:35 pm
I have a db server (let's call it DB) on another cloud service and a VPN server running wireguard on Amazon AWS (let's call it GW), an EC2 instance. I also have a web server as an EC2 instance (let's call it WEB).
I'm a complete noob to AWS services. My networking setup contains the following:
A VPC containing two subnets, one public (let's call it PUB), one private (let's call it PVT).
An internet gateway at the PUB subnet
An Elastic IP attached to one of GW's network interface
The GW instance has two network interfaces:
one at the PUB subnet (10.25.0.2/24) with the EIP attributed
one at the PVT subnet (10.25.240.2/24)
The WEB instance has one network interface (10.25.240.50/24).
Both have private IPv4, only the GW has a public IPv4, and both have IPv6, but I'm focusing on setting up the IPv4 first, so let's ignore the IPv6 setup.
There's a Wi
Ubuntu upgrade issues with shim-signed, grub-efi-amd64-signed, grub-efi-amd64-signed, grub2-common
15 April 2025 @ 5:50 pm
When trying most of the apt commands, I get this error:
# apt remove libpython3.12-stdlib
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:
The following packages have unmet dependencies:
shim-signed : Depends: grub-efi-amd64-signed (>= 1.191~) but it is not going to be installed or
grub-efi-arm64-signed (>= 1.191~) but it is not installable or
base-files (< 12.3) but 13ubuntu10.2 is to be installed
Depends: grub-efi-amd64-signed (>= 1.187.2~) but it is not going to be installed or
grub-efi-arm64-signed (>= 1.187.2~) but it is not in
Configure order of certificates used by SCHANNEL
15 April 2025 @ 2:58 pm
We have an LDAP instance with an SSL certificate for LDAPS traffic, issued by our CA.
We have two types of accounts (standard, privileged) and for each of course separate user profile. The standard account has in cert store a certificate deployed by one enterprise application, but it uses the certificate (with client authentication purpose) issued by a different CA, outside of our company PKI and not trusted by our PKI.
The privileged account profile does not have this certificate pushed in the user cert store.
TLS version forced on the LDAP instance server is 1.3, same as on the client computers.
When I tried to test the connection to the LDAP instance using LDP.exe, I got error:
Error 81 = ldap_connect(hLdap, NULL); / Error <0x51>:
In the CAPI2 event log, there is an error message about a wrong certificate chain.
I removed the 3rd party certificate from the cert store of the standard user, and immediately the problem dis
I try to get paperless-ngx running on Synology NAS, webserver or postgres fail
15 April 2025 @ 1:31 pm
I've tried to get paperless-ngx running on my NAS. I followed some YT-tutorials, I downloaded the docker-compose.yml and docker-compose.env from github and started the project inside of the container manager.
this is my docker-compose.yml:
services:
broker:
image: docker.io/library/redis
container_name: paperless-redis
restart: unless-stopped
volumes:
- /volume1/docker/paperless/redisdata:/data
db:
image: docker.io/library/postgres:17
container_name: paperless-db
restart: unless-stopped
volumes:
- /volume1/docker/paperless/pgdata:/var/lib/postgresql/data
environment:
POSTGRES_DB: paperless
POSTGRES_USER: paperless
POSTGRES_PASSWORD: paperless
webserver:
image: ghcr.io/paperless-ngx/paperless-ngx:latest
container_name: paperless-web
restart: unless-stopped
depends_on:
- db
- broker
- gotenberg
- tika
ports:
- 8080:8000
volumes:
-
poundhost.com
Cheap dedicated server hosting
tagadab.com
Cheap developer VPS hosting from £10