Jan's Wiki - User contributions [en]

DNSSec

2019-01-28T12:36:59Z

Der Jan:

How to setup DNSSEC with powerdns:

* Add dnssec to pdns.conf:
gpgsql-dnssec=yes

export ZONE=conti.work
sudo pdnsutil add-zone-key $ZONE zsk 1024 active rsasha256
sudo pdnsutil add-zone-key $ZONE ksk 2048 active rsasha256

Set nsec3 parameter [https://deepthought.isc.org/article/AA-00711/0/In-line-Signing-With-NSEC3-in-BIND-9.9-A-Walk-through.html]
sudo pdnsutil set-nsec3 $ZONE '1 0 10 db7fcd8a'

sudo pdnsutil secure-zone $ZONE
sudo pdnsutil rectify-zone $ZONE

Upload public KSK ZSK [https://www.gandi.net/admin/domain/dnssec/5104640]
host -tDNSKEY $ZONE

Or alternatively use:
pdnsutil show-zone -v $ZONE
Zone is not presigned
Zone has hashed NSEC3 semantics, configuration: 1 0 10 db7fcd8a
keys:
ID = 9 (KSK), tag = 28394, algo = 8, bits = 2048 Active: 1 ( RSASHA256 )
KSK DNSKEY = jan-riechers.de IN DNSKEY 257 3 8 AwEAAeEIULkj4vOsQ9nIaY4CR752p/OoCeBcdTcuNS2oUSWoKeQqMMmdFpqbPN3hc/ujEPa+SpbtN5ETNPECBac9udTwMVqjwkkh6ICrvq2tbsZT5ZgJUm1RRy7QF8Tr6LRiO/D2t/BkagfJbWN14AexjZJI6COxMF11/9WDtYDWd7cKMeEDBMrIvmzX2n/jRG3KURVgeOWIMWs3o+AkQvDF04yQmvkY/mmJMagXnvlUnplh8HOwbcAg0f6FfWtGtX3te/wztW8faUzEfuTez++xizZGv3zngIi6M9XFkebfuPIieHTv7AcoZXA2xSteX+Ddr8+mxvCSyXx5k8j4IUSXnY8= ; ( RSASHA256 )
DS = jan-riechers.de IN DS 28394 8 1 dfa8d8c35c5af1dbb192aba146d3274f756213e9 ; ( SHA1 digest )
DS = jan-riechers.de IN DS 28394 8 2 fa266f2dd3ff5f62712e9b44409b118662437d45e35bb1eb479cc47ca15dee3e ; ( SHA256 digest )
DS = jan-riechers.de IN DS 28394 8 3 8b830659d1b26dd0daadba31e60ec4dc4a897bc6509261829739282543e9a302 ; ( GOST R 34.11-94 digest )
DS = jan-riechers.de IN DS 28394 8 4 fffa309489dbc02dd7bfa8778b052140231555f0e4878f6c0f42e87abfa107b8649454bbad6f8f63c7e1a756ce8ccb0e ; ( SHA-384 digest )

ID = 8 (ZSK), tag = 51729, algo = 8, bits = 1024 Active: 1 ( RSASHA256 )
ZSK DNSKEY = jan-riechers.de IN DNSKEY 256 3 8 AwEAAaXGpzGDhUeFLH5xsVoswIsIfY7+ulz9xPLGkk3Eb9aBDtOE2eom7SPYLVnOy6ERrO7xokn3jEbZazkkYFGAdK+vVCP/cniphbLHZ9lOOYcQEJAO/BXq6becX23Vf4sgGNJTuooLQOLrf9gEpq45cC8Ql+S4ik2AGh2rTqAMpqPt ; ( RSASHA256 )
DS = jan-riechers.de IN DS 51729 8 1 2eb7292556df740fc6c54b85e91d23a782f207b9 ; ( SHA1 digest )
DS = jan-riechers.de IN DS 51729 8 2 8fb689fb906d70540acb7684c1fc3f1315820e88fe0f5738a342773faf887aff ; ( SHA256 digest )
DS = jan-riechers.de IN DS 51729 8 3 3eedef52bc7fd2407b0a9ea3d21c81694b693c24a3500f60f1940869e11d83f6 ; ( GOST R 34.11-94 digest )
DS = jan-riechers.de IN DS 51729 8 4 a435e93d78ce0312dfedef29df3f9380780bb3aa5c101eaf01034f11269ca319238aecdd017cb156c366229621e0ab17 ; ( SHA-384 digest )

Check if it worked [http://dnsviz.net/d/conti.work/analyze/] or here [http://dnssec-debugger.verisignlabs.com/conti.work]

[https://doc.powerdns.com/md/authoritative/dnssec/]

To renew the certificate run on mail:
certbot --dns-rfc2136 --dns-rfc2136-credentials /etc/letsencrypt/dns-rfc2136.ini renew

Adding DANE/TLSA record for mail server certificate verification or use this instead [https://www.huque.com/bin/gen_tlsa]

openssl x509 -in /etc/letsencrypt/live/mail3.conti.work/cert.pem -outform DER | openssl sha256

Add TLSA record to DNS:
_25._tcp.conti.work. IN TLSA 3 0 1 9bcd8c83d61e414bd5d935545637a2a98d3f38aaaf5ff9af415ddc574e28ae80

pdnsutil edit-zone jans.space

Howto [https://sys4.de/de/blog/2014/05/24/einen-tlsa-record-fuer-dane-mit-bind-9-publizieren/#den-tlsa-record-erstellen] and [http://www.internetsociety.org/deploy360/resources/dane/]

Verify with [http://www.internetsociety.org/deploy360/blog/2014/02/nist-offers-new-tool-to-verify-tlsa-records-for-dane-dnssec/]

For dynamic update setup zone with ALLOW-DNSUPDATE-FROM
pdnsutil set-meta $ZONE ALLOW-DNSUPDATE-FROM 172.16.0.0/15
pdnsutil set-meta $ZONE TSIG-ALLOW-DNSUPDATE dyndns
or

select id from domains where name='conti.work';
8
insert into domainmetadata (domain_id, kind, content) values(8, 'ALLOW-DNSUPDATE-FROM','172.16.0.0/16');
insert into domainmetadata (domain_id, kind, content) values (8, 'TSIG-ALLOW-DNSUPDATE', 'dyndns');

[https://doc.powerdns.com/md/authoritative/dnsupdate/]

To notify slaves use:
sudo pdnsutil set-meta r-jan.de ALSO-NOTIFY 185.181.104.96

DNSSec

2019-01-28T12:34:53Z

Der Jan:

How to setup DNSSEC with powerdns:

* Add dnssec to pdns.conf:
gpgsql-dnssec=yes

export ZONE=conti.work
sudo pdnsutil add-zone-key $ZONE zsk 1024 active rsasha256
sudo pdnsutil add-zone-key $ZONE ksk 2048 active rsasha256

Set nsec3 parameter [https://deepthought.isc.org/article/AA-00711/0/In-line-Signing-With-NSEC3-in-BIND-9.9-A-Walk-through.html]
sudo pdnsutil set-nsec3 $ZONE '1 0 10 db7fcd8a'

sudo pdnsutil secure-zone $ZONE
sudo pdnsutil rectify-zone $ZONE

Upload public KSK ZSK [https://www.gandi.net/admin/domain/dnssec/5104640]
host -tDNSKEY $ZONE

Or alternatively use:
pdnsutil show-zone -v $ZONE
Zone is not presigned
Zone has hashed NSEC3 semantics, configuration: 1 0 10 db7fcd8a
keys:
ID = 9 (KSK), tag = 28394, algo = 8, bits = 2048 Active: 1 ( RSASHA256 )
KSK DNSKEY = jan-riechers.de IN DNSKEY 257 3 8 AwEAAeEIULkj4vOsQ9nIaY4CR752p/OoCeBcdTcuNS2oUSWoKeQqMMmdFpqbPN3hc/ujEPa+SpbtN5ETNPECBac9udTwMVqjwkkh6ICrvq2tbsZT5ZgJUm1RRy7QF8Tr6LRiO/D2t/BkagfJbWN14AexjZJI6COxMF11/9WDtYDWd7cKMeEDBMrIvmzX2n/jRG3KURVgeOWIMWs3o+AkQvDF04yQmvkY/mmJMagXnvlUnplh8HOwbcAg0f6FfWtGtX3te/wztW8faUzEfuTez++xizZGv3zngIi6M9XFkebfuPIieHTv7AcoZXA2xSteX+Ddr8+mxvCSyXx5k8j4IUSXnY8= ; ( RSASHA256 )
DS = jan-riechers.de IN DS 28394 8 1 dfa8d8c35c5af1dbb192aba146d3274f756213e9 ; ( SHA1 digest )
DS = jan-riechers.de IN DS 28394 8 2 fa266f2dd3ff5f62712e9b44409b118662437d45e35bb1eb479cc47ca15dee3e ; ( SHA256 digest )
DS = jan-riechers.de IN DS 28394 8 3 8b830659d1b26dd0daadba31e60ec4dc4a897bc6509261829739282543e9a302 ; ( GOST R 34.11-94 digest )
DS = jan-riechers.de IN DS 28394 8 4 fffa309489dbc02dd7bfa8778b052140231555f0e4878f6c0f42e87abfa107b8649454bbad6f8f63c7e1a756ce8ccb0e ; ( SHA-384 digest )

ID = 8 (ZSK), tag = 51729, algo = 8, bits = 1024 Active: 1 ( RSASHA256 )
ZSK DNSKEY = jan-riechers.de IN DNSKEY 256 3 8 AwEAAaXGpzGDhUeFLH5xsVoswIsIfY7+ulz9xPLGkk3Eb9aBDtOE2eom7SPYLVnOy6ERrO7xokn3jEbZazkkYFGAdK+vVCP/cniphbLHZ9lOOYcQEJAO/BXq6becX23Vf4sgGNJTuooLQOLrf9gEpq45cC8Ql+S4ik2AGh2rTqAMpqPt ; ( RSASHA256 )
DS = jan-riechers.de IN DS 51729 8 1 2eb7292556df740fc6c54b85e91d23a782f207b9 ; ( SHA1 digest )
DS = jan-riechers.de IN DS 51729 8 2 8fb689fb906d70540acb7684c1fc3f1315820e88fe0f5738a342773faf887aff ; ( SHA256 digest )
DS = jan-riechers.de IN DS 51729 8 3 3eedef52bc7fd2407b0a9ea3d21c81694b693c24a3500f60f1940869e11d83f6 ; ( GOST R 34.11-94 digest )
DS = jan-riechers.de IN DS 51729 8 4 a435e93d78ce0312dfedef29df3f9380780bb3aa5c101eaf01034f11269ca319238aecdd017cb156c366229621e0ab17 ; ( SHA-384 digest )

Check if it worked [http://dnsviz.net/d/conti.work/analyze/] or here [http://dnssec-debugger.verisignlabs.com/conti.work]

[https://doc.powerdns.com/md/authoritative/dnssec/]

To renew the certificate run on mail:
certbot --dns-rfc2136 --dns-rfc2136-credentials /etc/letsencrypt/dns-rfc2136.ini renew

Adding DANE/TLSA record for mail server certificate verification or use this instead [https://www.huque.com/bin/gen_tlsa]

openssl x509 -in /etc/letsencrypt/live/mail3.conti.work/cert.pem -outform DER | openssl sha256

Add TLSA record to DNS:
_25._tcp.conti.work. IN TLSA 3 0 1 9bcd8c83d61e414bd5d935545637a2a98d3f38aaaf5ff9af415ddc574e28ae80

Howto [https://sys4.de/de/blog/2014/05/24/einen-tlsa-record-fuer-dane-mit-bind-9-publizieren/#den-tlsa-record-erstellen] and [http://www.internetsociety.org/deploy360/resources/dane/]

Verify with [http://www.internetsociety.org/deploy360/blog/2014/02/nist-offers-new-tool-to-verify-tlsa-records-for-dane-dnssec/]

For dynamic update setup zone with ALLOW-DNSUPDATE-FROM
pdnsutil set-meta $ZONE ALLOW-DNSUPDATE-FROM 172.16.0.0/15
pdnsutil set-meta $ZONE TSIG-ALLOW-DNSUPDATE dyndns
or

select id from domains where name='conti.work';
8
insert into domainmetadata (domain_id, kind, content) values(8, 'ALLOW-DNSUPDATE-FROM','172.16.0.0/16');
insert into domainmetadata (domain_id, kind, content) values (8, 'TSIG-ALLOW-DNSUPDATE', 'dyndns');

[https://doc.powerdns.com/md/authoritative/dnsupdate/]

To notify slaves use:
sudo pdnsutil set-meta r-jan.de ALSO-NOTIFY 185.181.104.96

DNSSec

2019-01-28T12:33:48Z

Der Jan:

How to setup DNSSEC with powerdns:

* Add dnssec to pdns.conf:
gpgsql-dnssec=yes

export ZONE=conti.work
sudo pdnsutil add-zone-key $ZONE zsk 1024 active rsasha256
sudo pdnsutil add-zone-key $ZONE ksk 2048 active rsasha256

Set nsec3 parameter [https://deepthought.isc.org/article/AA-00711/0/In-line-Signing-With-NSEC3-in-BIND-9.9-A-Walk-through.html]
sudo pdnsutil set-nsec3 $ZONE '1 0 10 db7fcd8a'

sudo pdnsutil secure-zone $ZONE
sudo pdnsutil rectify-zone $ZONE

Upload public KSK ZSK [https://www.gandi.net/admin/domain/dnssec/5104640]
host -tDNSKEY $ZONE

Or alternatively use:
pdnsutil show-zone -v $ZONE
Zone is not presigned
Zone has hashed NSEC3 semantics, configuration: 1 0 10 db7fcd8a
keys:
ID = 9 (KSK), tag = 28394, algo = 8, bits = 2048 Active: 1 ( RSASHA256 )
KSK DNSKEY = jan-riechers.de IN DNSKEY 257 3 8 AwEAAeEIULkj4vOsQ9nIaY4CR752p/OoCeBcdTcuNS2oUSWoKeQqMMmdFpqbPN3hc/ujEPa+SpbtN5ETNPECBac9udTwMVqjwkkh6ICrvq2tbsZT5ZgJUm1RRy7QF8Tr6LRiO/D2t/BkagfJbWN14AexjZJI6COxMF11/9WDtYDWd7cKMeEDBMrIvmzX2n/jRG3KURVgeOWIMWs3o+AkQvDF04yQmvkY/mmJMagXnvlUnplh8HOwbcAg0f6FfWtGtX3te/wztW8faUzEfuTez++xizZGv3zngIi6M9XFkebfuPIieHTv7AcoZXA2xSteX+Ddr8+mxvCSyXx5k8j4IUSXnY8= ; ( RSASHA256 )
DS = jan-riechers.de IN DS 28394 8 1 dfa8d8c35c5af1dbb192aba146d3274f756213e9 ; ( SHA1 digest )
DS = jan-riechers.de IN DS 28394 8 2 fa266f2dd3ff5f62712e9b44409b118662437d45e35bb1eb479cc47ca15dee3e ; ( SHA256 digest )
DS = jan-riechers.de IN DS 28394 8 3 8b830659d1b26dd0daadba31e60ec4dc4a897bc6509261829739282543e9a302 ; ( GOST R 34.11-94 digest )
DS = jan-riechers.de IN DS 28394 8 4 fffa309489dbc02dd7bfa8778b052140231555f0e4878f6c0f42e87abfa107b8649454bbad6f8f63c7e1a756ce8ccb0e ; ( SHA-384 digest )

ID = 8 (ZSK), tag = 51729, algo = 8, bits = 1024 Active: 1 ( RSASHA256 )
ZSK DNSKEY = jan-riechers.de IN DNSKEY 256 3 8 AwEAAaXGpzGDhUeFLH5xsVoswIsIfY7+ulz9xPLGkk3Eb9aBDtOE2eom7SPYLVnOy6ERrO7xokn3jEbZazkkYFGAdK+vVCP/cniphbLHZ9lOOYcQEJAO/BXq6becX23Vf4sgGNJTuooLQOLrf9gEpq45cC8Ql+S4ik2AGh2rTqAMpqPt ; ( RSASHA256 )
DS = jan-riechers.de IN DS 51729 8 1 2eb7292556df740fc6c54b85e91d23a782f207b9 ; ( SHA1 digest )
DS = jan-riechers.de IN DS 51729 8 2 8fb689fb906d70540acb7684c1fc3f1315820e88fe0f5738a342773faf887aff ; ( SHA256 digest )
DS = jan-riechers.de IN DS 51729 8 3 3eedef52bc7fd2407b0a9ea3d21c81694b693c24a3500f60f1940869e11d83f6 ; ( GOST R 34.11-94 digest )
DS = jan-riechers.de IN DS 51729 8 4 a435e93d78ce0312dfedef29df3f9380780bb3aa5c101eaf01034f11269ca319238aecdd017cb156c366229621e0ab17 ; ( SHA-384 digest )

Check if it worked [http://dnsviz.net/d/conti.work/analyze/] or here [http://dnssec-debugger.verisignlabs.com/conti.work]

[https://doc.powerdns.com/md/authoritative/dnssec/]

To renew the certificate run on mail:
certbot --dns-rfc2136 --dns-rfc2136-credentials /etc/letsencrypt/dns-rfc2136.ini renew

Adding DANE/TLSA record for mail server certificate verification or use this instead [https://www.huque.com/bin/gen_tlsa]

openssl x509 -in /etc/letsencrypt/live/mail3.riechers.info/cert.pem -outform DER | openssl sha256

Add TLSA record to DNS:
_25._tcp.conti.work. IN TLSA 3 0 1 9bcd8c83d61e414bd5d935545637a2a98d3f38aaaf5ff9af415ddc574e28ae80

Howto [https://sys4.de/de/blog/2014/05/24/einen-tlsa-record-fuer-dane-mit-bind-9-publizieren/#den-tlsa-record-erstellen] and [http://www.internetsociety.org/deploy360/resources/dane/]

Verify with [http://www.internetsociety.org/deploy360/blog/2014/02/nist-offers-new-tool-to-verify-tlsa-records-for-dane-dnssec/]

For dynamic update setup zone with ALLOW-DNSUPDATE-FROM
pdnsutil set-meta $ZONE ALLOW-DNSUPDATE-FROM 172.16.0.0/15
pdnsutil set-meta $ZONE TSIG-ALLOW-DNSUPDATE dyndns
or

select id from domains where name='conti.work';
8
insert into domainmetadata (domain_id, kind, content) values(8, 'ALLOW-DNSUPDATE-FROM','172.16.0.0/16');
insert into domainmetadata (domain_id, kind, content) values (8, 'TSIG-ALLOW-DNSUPDATE', 'dyndns');

[https://doc.powerdns.com/md/authoritative/dnsupdate/]

To notify slaves use:
sudo pdnsutil set-meta r-jan.de ALSO-NOTIFY 185.181.104.96

Letsencrypt

2018-10-24T11:45:44Z

Der Jan:

To renew certificates use
./letsencrypt-auto certonly --webroot --webroot-path /usr/local/www/mail3 --debug -d mail3.riechers.info -d mail3.conti.work -d mail3.r-jan.de -d mail3.jan-riechers.de

Apache is setup for those 3 domains with aliases.

Or for non http sites use:
docker run -it --rm -v /var/lib/lxc/mini-server/rootfs/etc/letsencrypt:/etc/letsencrypt -v /var/lib/lxc/mini-server/rootfs/var/lib/letsencrypt:/var/lib/letsencrypt registry.gitlab.jans.space/der-jan/certbot certonly --dns-rfc2136 --dns-rfc2136-credentials /etc/letsencrypt/dns-rfc2136.ini -d horst.jans.space

Renew certs:
certbot renew --dns-rfc2136 --dns-rfc2136-credentials /etc/letsencrypt/dns-rfc2136.ini

To refresh the image
cd ~/Documents/src/certbot
git pull
docker pull certbot/certbot
docker build -t registry.gitlab.jans.space/der-jan/certbot .
docker push registry.gitlab.jans.space/der-jan/certbot

SAS Power Down

2018-08-19T14:34:03Z

Der Jan:

To spin down the SAS hard disks hdparm cannot be used (due to missing SATA part):
sg_start --stop /dev/sdl
sg_start --start /dev/sdl

Turn off led for a slot:
sg_ses --descriptor Slot12 --clear=ident /dev/sg1
[http://sg.danny.cz/sg/sg_ses.html]

# lsscsi -g
[0:0:0:0] disk ATA Samsung SSD 840 6B0Q /dev/sda /dev/sg0
[1:0:0:0] disk ATA Samsung SSD 840 4B0Q /dev/sdk /dev/sg11
[8:0:0:0] disk ATA ST6000NM0024-1HT SN05 /dev/sdb /dev/sg1
[8:0:1:0] disk ATA ST6000NM0024-1HT SN05 /dev/sdc /dev/sg2
[8:0:2:0] disk ATA ST6000DM004-2EH1 DN03 /dev/sdd /dev/sg3
[8:0:4:0] disk ATA WDC WD6001FFWX-6 0A81 /dev/sdf /dev/sg5
[8:0:5:0] disk SEAGATE ST10000NM0096 E001 /dev/sdg /dev/sg6
[8:0:6:0] disk SEAGATE ST10000NM0096 E001 /dev/sdh /dev/sg7
[8:0:7:0] disk SEAGATE ST10000NM0096 E001 /dev/sdi /dev/sg8
[8:0:8:0] disk SEAGATE ST10000NM0096 E001 /dev/sdj /dev/sg9
[8:0:9:0] enclosu LSI SAS3x36 0601 - /dev/sg10
[8:0:10:0] disk ATA ST6000NM0044 G002 /dev/sdl /dev/sg12
# sg_ses -C ident -x 5 /dev/sg10

Letsencrypt

2018-07-26T18:49:11Z

Der Jan:

To renew certificates use
./letsencrypt-auto certonly --webroot --webroot-path /usr/local/www/mail3 --debug -d mail3.riechers.info -d mail3.conti.work -d mail3.r-jan.de -d mail3.jan-riechers.de

Apache is setup for those 3 domains with aliases.

Or for non http sites use:
docker run -it --rm -v /var/lib/lxc/mini-server/rootfs/etc/letsencrypt:/etc/letsencrypt -v /var/lib/lxc/mini-server/rootfs/var/lib/letsencrypt:/var/lib/letsencrypt registry.gitlab.jans.space/der-jan/certbot certonly --dns-rfc2136 --dns-rfc2136-credentials /etc/letsencrypt/dns-rfc2136.ini -d horst.jans.space

To refresh the image
cd ~/Documents/src/certbot
git pull
docker pull certbot/certbot
docker build -t registry.gitlab.jans.space/der-jan/certbot .
docker push registry.gitlab.jans.space/der-jan/certbot

Letsencrypt

2018-07-26T18:47:13Z

Der Jan:

Letsencrypt

2018-07-26T18:47:02Z

Der Jan:

SOLR Docker

2018-01-23T18:57:58Z

Der Jan:

docker run --name solr_nextcloud --ip 172.16.0.49 --network publicnet --volume /var/nextcloud_solr/solr:/opt/solr/server/solr -t solr
docker exec -it --user=solr solr_nextcloud solr create_core -c nextant -d basic_configs
[https://hub.docker.com/_/solr/]
[http://mor-pah.net/2016/08/15/dovecot-2-2-with-solr-6-or-5/]
[http://things.m31.ch/?p=379]

Installing OCR Image for nextcloud [https://github.com/janis91/ocr/wiki/Installation-and-Configuration-(Docker-setup)]
cd ~/Documents/src/ocr/worker
docker build -t riechers/ocr .
docker run --name ocr --network=public20 --ip=172.20.51.51 -e "NODE_ENV=development" -e "REDIS_HOST=redis" -e "REDIS_PORT=6379" -e "REDIS_DB=0" -e "REDIS_PASSWORD=<your custom very safe password>" -v /export/www-sites/owncloud/data:/home/node/data:ro -v /export/www-sites/owncloud/temp:/home/node/output -d riechers/ocr
cd ../redis
docker build --build-arg PASSWORD="<your custom very safe password>" -t riechers/redis .
docker run --name redis --ip 172.16.51.50 --network publicnet -t riechers/redis

SOLR Docker

2018-01-23T18:51:47Z

Der Jan:

Docker

2018-01-14T17:58:13Z

Der Jan:

Networking sometimes stops working
just delete the old
docker network rm publicnet

and create new
docker network create -d macvlan --gateway 172.16.0.1 --ip-range 172.16.0.32/27 --subnet 172.16.0.0/24 publicnet -o parent=lxcbr1

docker network create -d bridge public20 --subnet 172.20.0.0/16

Docker

2018-01-14T17:53:54Z

Der Jan:

Main Page

2018-01-13T13:59:35Z

Der Jan:

'''MediaWiki has been successfully installed.'''

Consult the [http://meta.wikimedia.org/wiki/Help:Contents User's Guide] for information on using the wiki software.

== Getting started ==
* [http://www.mediawiki.org/wiki/Manual:Configuration_settings Configuration settings list]
* [http://www.mediawiki.org/wiki/Manual:FAQ MediaWiki FAQ]
* [https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]

* [[command_line_tools]]
* [[lxc setup]]
* [[common_errors]]
* [[FreeBSD_Admin]]
* [[Fast Random Number Gen]]
* [[Znapzend]]

* [[Postfix]]
* [[XAPSD Apple Push]]

* [[DNSSec]]
* [[letsencrypt]]

* [[hsqldb manager]]

* [[OSX_Customization]]
* [[OpenVPN]]

* [[IPMI Serial Console]]

* [[Docker]]
* [[EcoDMS]]
* [[SOLR Docker]]
* [[Gitlab Docker]]
* [[Calibre_Docker]]
* [[Sonarr_Docker]]
* [[Plex_Docker]]

* [[LSI 9305 Kernel Module]]
* [[SAS Power Down]]

Docker

2018-01-13T13:59:08Z

Der Jan: Created page with "Networking sometimes stops working just delete the old docker network rm publicnet and create new docker network create -d macvlan --gateway 172.16.0.1 --ip-range 172.16..."

DNSSec

2017-11-21T17:45:36Z

Der Jan:

How to setup DNSSEC with powerdns:

* Add dnssec to pdns.conf:
gpgsql-dnssec=yes

export ZONE=conti.work
sudo pdnsutil add-zone-key $ZONE zsk 1024 active rsasha256
sudo pdnsutil add-zone-key $ZONE ksk 2048 active rsasha256

Set nsec3 parameter [https://deepthought.isc.org/article/AA-00711/0/In-line-Signing-With-NSEC3-in-BIND-9.9-A-Walk-through.html]
sudo pdnsutil set-nsec3 $ZONE '1 0 10 db7fcd8a'

sudo pdnsutil secure-zone $ZONE
sudo pdnsutil rectify-zone $ZONE

Upload public KSK ZSK [https://www.gandi.net/admin/domain/dnssec/5104640]
host -tDNSKEY $ZONE

Or alternatively use:
pdnsutil show-zone -v $ZONE
Zone is not presigned
Zone has hashed NSEC3 semantics, configuration: 1 0 10 db7fcd8a
keys:
ID = 9 (KSK), tag = 28394, algo = 8, bits = 2048 Active: 1 ( RSASHA256 )
KSK DNSKEY = jan-riechers.de IN DNSKEY 257 3 8 AwEAAeEIULkj4vOsQ9nIaY4CR752p/OoCeBcdTcuNS2oUSWoKeQqMMmdFpqbPN3hc/ujEPa+SpbtN5ETNPECBac9udTwMVqjwkkh6ICrvq2tbsZT5ZgJUm1RRy7QF8Tr6LRiO/D2t/BkagfJbWN14AexjZJI6COxMF11/9WDtYDWd7cKMeEDBMrIvmzX2n/jRG3KURVgeOWIMWs3o+AkQvDF04yQmvkY/mmJMagXnvlUnplh8HOwbcAg0f6FfWtGtX3te/wztW8faUzEfuTez++xizZGv3zngIi6M9XFkebfuPIieHTv7AcoZXA2xSteX+Ddr8+mxvCSyXx5k8j4IUSXnY8= ; ( RSASHA256 )
DS = jan-riechers.de IN DS 28394 8 1 dfa8d8c35c5af1dbb192aba146d3274f756213e9 ; ( SHA1 digest )
DS = jan-riechers.de IN DS 28394 8 2 fa266f2dd3ff5f62712e9b44409b118662437d45e35bb1eb479cc47ca15dee3e ; ( SHA256 digest )
DS = jan-riechers.de IN DS 28394 8 3 8b830659d1b26dd0daadba31e60ec4dc4a897bc6509261829739282543e9a302 ; ( GOST R 34.11-94 digest )
DS = jan-riechers.de IN DS 28394 8 4 fffa309489dbc02dd7bfa8778b052140231555f0e4878f6c0f42e87abfa107b8649454bbad6f8f63c7e1a756ce8ccb0e ; ( SHA-384 digest )

ID = 8 (ZSK), tag = 51729, algo = 8, bits = 1024 Active: 1 ( RSASHA256 )
ZSK DNSKEY = jan-riechers.de IN DNSKEY 256 3 8 AwEAAaXGpzGDhUeFLH5xsVoswIsIfY7+ulz9xPLGkk3Eb9aBDtOE2eom7SPYLVnOy6ERrO7xokn3jEbZazkkYFGAdK+vVCP/cniphbLHZ9lOOYcQEJAO/BXq6becX23Vf4sgGNJTuooLQOLrf9gEpq45cC8Ql+S4ik2AGh2rTqAMpqPt ; ( RSASHA256 )
DS = jan-riechers.de IN DS 51729 8 1 2eb7292556df740fc6c54b85e91d23a782f207b9 ; ( SHA1 digest )
DS = jan-riechers.de IN DS 51729 8 2 8fb689fb906d70540acb7684c1fc3f1315820e88fe0f5738a342773faf887aff ; ( SHA256 digest )
DS = jan-riechers.de IN DS 51729 8 3 3eedef52bc7fd2407b0a9ea3d21c81694b693c24a3500f60f1940869e11d83f6 ; ( GOST R 34.11-94 digest )
DS = jan-riechers.de IN DS 51729 8 4 a435e93d78ce0312dfedef29df3f9380780bb3aa5c101eaf01034f11269ca319238aecdd017cb156c366229621e0ab17 ; ( SHA-384 digest )

Check if it worked [http://dnsviz.net/d/conti.work/analyze/] or here [http://dnssec-debugger.verisignlabs.com/conti.work]

[https://doc.powerdns.com/md/authoritative/dnssec/]

Adding DANE/TLSA record for mail server certificate verification or use this instead [https://www.huque.com/bin/gen_tlsa]

openssl x509 -in /etc/letsencrypt/live/mail3.riechers.info/cert.pem -outform DER | openssl sha256

Add TLSA record to DNS:
_25._tcp.conti.work. IN TLSA 3 0 1 9bcd8c83d61e414bd5d935545637a2a98d3f38aaaf5ff9af415ddc574e28ae80

Howto [https://sys4.de/de/blog/2014/05/24/einen-tlsa-record-fuer-dane-mit-bind-9-publizieren/#den-tlsa-record-erstellen] and [http://www.internetsociety.org/deploy360/resources/dane/]

Verify with [http://www.internetsociety.org/deploy360/blog/2014/02/nist-offers-new-tool-to-verify-tlsa-records-for-dane-dnssec/]

For dynamic update setup zone with ALLOW-DNSUPDATE-FROM
pdnsutil set-meta $ZONE ALLOW-DNSUPDATE-FROM 172.16.0.0/15
pdnsutil set-meta $ZONE TSIG-ALLOW-DNSUPDATE dyndns
or

select id from domains where name='conti.work';
8
insert into domainmetadata (domain_id, kind, content) values(8, 'ALLOW-DNSUPDATE-FROM','172.16.0.0/16');
insert into domainmetadata (domain_id, kind, content) values (8, 'TSIG-ALLOW-DNSUPDATE', 'dyndns');

[https://doc.powerdns.com/md/authoritative/dnsupdate/]

To notify slaves use:
sudo pdnsutil set-meta r-jan.de ALSO-NOTIFY 185.181.104.96

Plex Docker

2017-11-11T18:21:14Z

Der Jan:

cd /home/riechers/Documents/src/plexmediaserver-docker
docker build -t riechers/pms-docker .
docker run \
-d \
--name plex \
--ip 172.16.0.33 --network publicnet \
-e TZ="Europe/Berlin" \
-e PLEX_CLAIM="claim-FZXVpj5Hg6e52AZUx9ms" \
-e PLEX_UID=139 -e PLEX_GUID=144 \
-e ALLOWED_NETWORK=172.16.0.0/16 \
-v /var/lib/plexmediaserver:/config \
-v /home/riechers/Documents/Videos:/home/riechers/Documents/Videos \
riechers/pms-docker

Main Page

2017-11-05T13:10:41Z

Der Jan: /* Getting started */

'''MediaWiki has been successfully installed.'''

Consult the [http://meta.wikimedia.org/wiki/Help:Contents User's Guide] for information on using the wiki software.

== Getting started ==
* [http://www.mediawiki.org/wiki/Manual:Configuration_settings Configuration settings list]
* [http://www.mediawiki.org/wiki/Manual:FAQ MediaWiki FAQ]
* [https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]

* [[command_line_tools]]
* [[lxc setup]]
* [[common_errors]]
* [[FreeBSD_Admin]]
* [[Fast Random Number Gen]]
* [[Znapzend]]

* [[Postfix]]
* [[XAPSD Apple Push]]

* [[DNSSec]]
* [[letsencrypt]]

* [[hsqldb manager]]

* [[OSX_Customization]]
* [[OpenVPN]]

* [[IPMI Serial Console]]

* [[EcoDMS]]
* [[SOLR Docker]]
* [[Gitlab Docker]]
* [[Calibre_Docker]]
* [[Sonarr_Docker]]
* [[Plex_Docker]]

* [[LSI 9305 Kernel Module]]
* [[SAS Power Down]]

Plex Docker

2017-11-05T13:10:18Z

Der Jan: Created page with " cd /home/riechers/Documents/src/plexmediaserver-docker docker build -t riechers/pms-docker . docker run \ -d \ --name plex \ --ip 172.16.0.33 --network publicnet..."

cd /home/riechers/Documents/src/plexmediaserver-docker
docker build -t riechers/pms-docker .
docker run \
-d \
--name plex \
--ip 172.16.0.33 --network publicnet \
-e TZ="Europe/Berlin" \
-e PLEX_CLAIM="<claimToken>" \
-e PLEX_UID=139 -e PLEX_GUID=144 \
-e ALLOWED_NETWORK=172.16.0.0/16 \
-v /var/lib/plexmediaserver:/config \
-v /home/riechers/Documents/Videos:/home/riechers/Documents/Videos \
riechers/pms-docker

Sonarr Docker

2017-11-04T11:52:52Z

Der Jan:

docker create \
--name sonarr \
--ip 172.16.0.31 --network publicnet \
-p 8989:8989 \
-e PUID=101 -e PGID=44 \
-e TZ=Europe/Berlin \
-v /etc/localtime:/etc/localtime:ro \
-v /var/sonarr:/config \
-v /home/riechers/Documents/Videos/Series:/tv \
-v /home/riechers/Downloads/complete/Series:/downloads \
linuxserver/sonarr

ln -s /downloads/ /home/riechers/Downloads/complete/Series

Main Page

2017-11-04T10:39:19Z

Der Jan: /* Getting started */

'''MediaWiki has been successfully installed.'''

Consult the [http://meta.wikimedia.org/wiki/Help:Contents User's Guide] for information on using the wiki software.

== Getting started ==
* [http://www.mediawiki.org/wiki/Manual:Configuration_settings Configuration settings list]
* [http://www.mediawiki.org/wiki/Manual:FAQ MediaWiki FAQ]
* [https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]

* [[command_line_tools]]
* [[lxc setup]]
* [[common_errors]]
* [[FreeBSD_Admin]]
* [[Fast Random Number Gen]]
* [[Znapzend]]

* [[Postfix]]
* [[XAPSD Apple Push]]

* [[DNSSec]]
* [[letsencrypt]]

* [[hsqldb manager]]

* [[OSX_Customization]]
* [[OpenVPN]]

* [[IPMI Serial Console]]

* [[EcoDMS]]
* [[SOLR Docker]]
* [[Gitlab Docker]]
* [[Calibre_Docker]]
* [[Sonarr_Docker]]

* [[LSI 9305 Kernel Module]]
* [[SAS Power Down]]

Sonarr Docker

2017-11-04T10:38:53Z

Der Jan:

Sonarr Docker

2017-11-04T10:36:30Z

Der Jan: Created page with " docker create \ --name sonarr \ --ip 172.16.0.31 --network publicnet \ -p 8989:8989 \ -e PUID=101 -e PGID=44 \ -e TZ=Europe/Berlin \ -v /etc/localti..."

Main Page

2017-08-27T11:37:55Z

Der Jan:

'''MediaWiki has been successfully installed.'''

Consult the [http://meta.wikimedia.org/wiki/Help:Contents User's Guide] for information on using the wiki software.

== Getting started ==
* [http://www.mediawiki.org/wiki/Manual:Configuration_settings Configuration settings list]
* [http://www.mediawiki.org/wiki/Manual:FAQ MediaWiki FAQ]
* [https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]

* [[command_line_tools]]
* [[lxc setup]]
* [[common_errors]]
* [[FreeBSD_Admin]]
* [[Fast Random Number Gen]]
* [[Znapzend]]

* [[Postfix]]
* [[XAPSD Apple Push]]

* [[DNSSec]]
* [[letsencrypt]]

* [[hsqldb manager]]

* [[OSX_Customization]]
* [[OpenVPN]]

* [[IPMI Serial Console]]

* [[EcoDMS]]
* [[SOLR Docker]]
* [[Gitlab Docker]]
* [[Calibre_Docker]]

* [[LSI 9305 Kernel Module]]
* [[SAS Power Down]]

Calibre Docker

2017-08-27T11:37:32Z

Der Jan: Created page with " docker create --name=calibre-web --restart=always -v /export/Software/Ebooks:/books -e PGID=993 -e PUID=994 -e SET_CONTAINER_TIMEZONE=Europe/Berlin --network=publicnet --ip 1..."

docker create --name=calibre-web --restart=always -v /export/Software/Ebooks:/books -e PGID=993 -e PUID=994 -e SET_CONTAINER_TIMEZONE=Europe/Berlin --network=publicnet --ip 172.16.0.52 technosoft2000/calibre-web

Main Page

2017-08-21T16:04:23Z

Der Jan:

'''MediaWiki has been successfully installed.'''

Consult the [http://meta.wikimedia.org/wiki/Help:Contents User's Guide] for information on using the wiki software.

== Getting started ==
* [http://www.mediawiki.org/wiki/Manual:Configuration_settings Configuration settings list]
* [http://www.mediawiki.org/wiki/Manual:FAQ MediaWiki FAQ]
* [https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]

* [[command_line_tools]]
* [[lxc setup]]
* [[common_errors]]
* [[FreeBSD_Admin]]
* [[Fast Random Number Gen]]
* [[Znapzend]]

* [[Postfix]]
* [[XAPSD Apple Push]]

* [[DNSSec]]
* [[letsencrypt]]

* [[hsqldb manager]]

* [[OSX_Customization]]
* [[OpenVPN]]

* [[IPMI Serial Console]]

* [[EcoDMS]]
* [[SOLR Docker]]
* [[Gitlab Docker]]

* [[LSI 9305 Kernel Module]]
* [[SAS Power Down]]

Znapzend

2017-08-21T16:03:36Z

Der Jan: Created page with "To add a new backup plan, first create the destination file system: zfs create tank/sys/gitlab Then setup the backup plan: /opt/znapzend/bin/znapzendzetup create --recursive..."

To add a new backup plan, first create the destination file system:
zfs create tank/sys/gitlab
Then setup the backup plan:
/opt/znapzend/bin/znapzendzetup create --recursive --tsformat='znapzend-%Y-%m-%d-%H%M%S' SRC '2days=>1hours,2weeks=>1days,8weeks=>1weeks,1years=>1months' tank/sys/gitlab DST '8weeks=>1weeks,1years=>1months' znapzend@bsd4.conti.work:tank/backup/znapzend/gitlab

Gitlab Docker

2017-08-21T15:29:43Z

Der Jan: Created page with "Goto to directory ~/Documents/gitlab-docker. The file docker-compose.yml contains the options for docker-compose [https://docs.docker.com/compose/compose-file]. To update, sh..."

Goto to directory ~/Documents/gitlab-docker. The file docker-compose.yml contains the options for docker-compose [https://docs.docker.com/compose/compose-file].

To update, shutdown the gitlab docker and:
sudo docker-compose up

Main Page

2017-08-21T15:27:11Z

Der Jan:

'''MediaWiki has been successfully installed.'''

Consult the [http://meta.wikimedia.org/wiki/Help:Contents User's Guide] for information on using the wiki software.

== Getting started ==
* [http://www.mediawiki.org/wiki/Manual:Configuration_settings Configuration settings list]
* [http://www.mediawiki.org/wiki/Manual:FAQ MediaWiki FAQ]
* [https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]

* [[command_line_tools]]
* [[lxc setup]]
* [[common_errors]]
* [[FreeBSD_Admin]]
* [[Fast Random Number Gen]]

* [[Postfix]]
* [[XAPSD Apple Push]]

* [[DNSSec]]
* [[letsencrypt]]

* [[hsqldb manager]]

* [[OSX_Customization]]
* [[OpenVPN]]

* [[IPMI Serial Console]]

* [[EcoDMS]]
* [[SOLR Docker]]
* [[Gitlab Docker]]

* [[LSI 9305 Kernel Module]]
* [[SAS Power Down]]

SAS Power Down

2017-08-18T18:02:08Z

Der Jan:

SAS Power Down

2017-08-17T11:42:18Z

Der Jan: Created page with "To spin down the SAS hard disks hdparm cannot be used (due to missing SATA part): sg_start --stop /dev/sdl sg_start --start /dev/sdl"

To spin down the SAS hard disks hdparm cannot be used (due to missing SATA part):
sg_start --stop /dev/sdl
sg_start --start /dev/sdl

Main Page

2017-08-17T11:40:52Z

Der Jan:

'''MediaWiki has been successfully installed.'''

Consult the [http://meta.wikimedia.org/wiki/Help:Contents User's Guide] for information on using the wiki software.

== Getting started ==
* [http://www.mediawiki.org/wiki/Manual:Configuration_settings Configuration settings list]
* [http://www.mediawiki.org/wiki/Manual:FAQ MediaWiki FAQ]
* [https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]

* [[command_line_tools]]
* [[lxc setup]]
* [[common_errors]]
* [[FreeBSD_Admin]]
* [[Fast Random Number Gen]]

* [[Postfix]]
* [[XAPSD Apple Push]]

* [[DNSSec]]
* [[letsencrypt]]

* [[hsqldb manager]]

* [[OSX_Customization]]
* [[OpenVPN]]

* [[IPMI Serial Console]]

* [[EcoDMS]]
* [[SOLR Docker]]

* [[LSI 9305 Kernel Module]]
* [[SAS Power Down]]

SOLR Docker

2017-08-13T08:08:54Z

Der Jan:

docker run --name solr_nextcloud --ip 172.16.0.49 --network publicnet --volume /var/nextcloud_solr/solr:/opt/solr/server/solr -t solr
docker exec -it --user=solr solr_nextcloud solr create_core -c nextant -d basic_configs
[https://hub.docker.com/_/solr/]
[http://mor-pah.net/2016/08/15/dovecot-2-2-with-solr-6-or-5/]
[http://things.m31.ch/?p=379]

Installing OCR Image for nextcloud [https://github.com/janis91/ocr/wiki/Installation-and-Configuration-(Docker-setup)]
cd ~/Documents/src/ocr/worker
docker build -t riechers/ocr .
docker run --name ocr --network=publicnet --ip=172.16.0.51 -e "NODE_ENV=production" -e "REDIS_HOST=172.16.0.50" -e "REDIS_PORT=6379" -e "REDIS_DB=0" -e "REDIS_PASSWORD=<your custom very safe password>" -v /export/www-sites/owncloud/data:/home/node/data:ro -v /export/www-sites/owncloud/temp:/home/node/output -d riechers/ocr
cd ../redis
docker build --build-arg PASSWORD="<your custom very safe password>" -t riechers/redis .
docker run --name redis --ip 172.16.0.50 --network publicnet -t riechers/redis

SOLR Docker

2017-08-13T07:25:03Z

Der Jan:

docker run --name solr_nextcloud --ip 172.16.0.49 --network publicnet --volume /var/nextcloud_solr/solr:/opt/solr/server/solr -t solr
docker exec -it --user=solr solr_nextcloud solr create_core -c nextant -d basic_configs
[https://hub.docker.com/_/solr/]
[http://mor-pah.net/2016/08/15/dovecot-2-2-with-solr-6-or-5/]
[http://things.m31.ch/?p=379]

Installing OCR Image for nextcloud [https://github.com/janis91/ocr/wiki/Installation-and-Configuration-(Docker-setup)]
cd ~/Documents/src/ocr/worker
docker build -t riechers/ocr .
docker run --name ocr --network=publicnet --ip=172.16.0.51 -e "NODE_ENV=production" -e "REDIS_HOST=172.16.0.49" -e "REDIS_PORT=6379" -e "REDIS_DB=0" -v /export/www-sites/owncloud/data:/home/node/data:ro -v /export/www-sites/owncloud/temp:/home/node/output -d riechers/ocr
cd ../redis
docker build --build-arg PASSWORD="<your custom very safe password>" -t riechers/redis .
docker run --name redis --ip 172.16.0.50 --network publicnet -t riechers/redis

SOLR Docker

2017-08-13T07:07:11Z

Der Jan:

SOLR Docker

2017-08-11T15:01:25Z

Der Jan:

SOLR Docker

2017-08-11T14:41:17Z

Der Jan:

SOLR Docker

2017-08-09T15:41:18Z

Der Jan:

docker run --name solr_nextcloud --ip 172.16.0.49 --network publicnet --volume /var/nextcloud_solr:/opt/nextant -t solr solr-create -c nextant -d /opt/nextant
[https://hub.docker.com/_/solr/]

SOLR Docker

2017-08-09T15:24:36Z

Der Jan:

docker run --name solr_nextcloud --ip 172.16.0.49 --network publicnet -t solr -v /var/nextcloud_solr:/opt/solr/nextcloud -d /opt/solr/nextcloud
docker run -d -P -v $PWD/myconfig:/myconfig solr solr-create -c mycore -d /myconfig
[https://hub.docker.com/_/solr/]
--name nextcloud_solr

SOLR Docker

2017-08-09T15:18:27Z

Der Jan:

docker run -d --ip 172.16.0.49 --network publicnet -v /var/nextcloud_solr:/opt/solr/nextcloud solr solr-create -c nextcloud -d /opt/solr/nextcloud
docker run -d -P -v $PWD/myconfig:/myconfig solr solr-create -c mycore -d /myconfig
[https://hub.docker.com/_/solr/]
--name nextcloud_solr

SOLR Docker

2017-08-09T15:05:51Z

Der Jan: Created page with " docker run --name nextcloud_solr -d -t solr --ip 172.16.0.49 --network publicnet -v /var/nextcloud_solr:/opt/solr/mydata solr [https://hub.docker.com/_/solr/]"

docker run --name nextcloud_solr -d -t solr --ip 172.16.0.49 --network publicnet -v /var/nextcloud_solr:/opt/solr/mydata solr
[https://hub.docker.com/_/solr/]

Main Page

2017-08-09T15:02:59Z

Der Jan:

'''MediaWiki has been successfully installed.'''

Consult the [http://meta.wikimedia.org/wiki/Help:Contents User's Guide] for information on using the wiki software.

== Getting started ==
* [http://www.mediawiki.org/wiki/Manual:Configuration_settings Configuration settings list]
* [http://www.mediawiki.org/wiki/Manual:FAQ MediaWiki FAQ]
* [https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]

* [[command_line_tools]]
* [[lxc setup]]
* [[common_errors]]
* [[FreeBSD_Admin]]
* [[Fast Random Number Gen]]

* [[Postfix]]
* [[XAPSD Apple Push]]

* [[DNSSec]]
* [[letsencrypt]]

* [[hsqldb manager]]

* [[OSX_Customization]]
* [[OpenVPN]]

* [[IPMI Serial Console]]

* [[EcoDMS]]
* [[SOLR Docker]]

* [[LSI 9305 Kernel Module]]

XAPSD Apple Push

2017-08-07T09:28:59Z

Der Jan: Created page with "- Generate Certificate with OSX Server - Export Certificate (com.apple.servermgrd.apns.mail) sudo openssl pkcs12 -in ~/com.apple.servermgrd.apns.mail.2017.p12 -nocerts -node..."

- Generate Certificate with OSX Server

- Export Certificate (com.apple.servermgrd.apns.mail)
sudo openssl pkcs12 -in ~/com.apple.servermgrd.apns.mail.2017.p12 -nocerts -nodes -out key2017.pem
sudo openssl pkcs12 -in ~/com.apple.servermgrd.apns.mail.2017.p12 -clcerts -nokeys -out certificate2017.pem
sudo chown xapsd key2017.pem certificate2017.pem

[https://github.com/st3fan/dovecot-xaps-daemon]

Main Page

2017-08-07T09:20:15Z

Der Jan:

'''MediaWiki has been successfully installed.'''

Consult the [http://meta.wikimedia.org/wiki/Help:Contents User's Guide] for information on using the wiki software.

== Getting started ==
* [http://www.mediawiki.org/wiki/Manual:Configuration_settings Configuration settings list]
* [http://www.mediawiki.org/wiki/Manual:FAQ MediaWiki FAQ]
* [https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]

* [[command_line_tools]]
* [[lxc setup]]
* [[common_errors]]
* [[FreeBSD_Admin]]
* [[Fast Random Number Gen]]

* [[Postfix]]
* [[XAPSD Apple Push]]

* [[DNSSec]]
* [[letsencrypt]]

* [[hsqldb manager]]

* [[OSX_Customization]]
* [[OpenVPN]]

* [[IPMI Serial Console]]

* [[EcoDMS]]

* [[LSI 9305 Kernel Module]]

Fast Random Number Gen

2017-07-31T19:48:58Z

Der Jan: Created page with "To check synchronous write speed: openssl enc -aes-256-ctr -pass pass:"$(dd if=/dev/urandom bs=128 count=1 2>/dev/null | base64)" -nosalt < /dev/zero | pv -pterb | dd bs=102..."

To check synchronous write speed:
openssl enc -aes-256-ctr -pass pass:"$(dd if=/dev/urandom bs=128 count=1 2>/dev/null | base64)" -nosalt < /dev/zero | pv -pterb | dd bs=1024k of=random oflag=dsync

Main Page

2017-07-31T19:48:31Z

Der Jan:

'''MediaWiki has been successfully installed.'''

Consult the [http://meta.wikimedia.org/wiki/Help:Contents User's Guide] for information on using the wiki software.

== Getting started ==
* [http://www.mediawiki.org/wiki/Manual:Configuration_settings Configuration settings list]
* [http://www.mediawiki.org/wiki/Manual:FAQ MediaWiki FAQ]
* [https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]

* [[command_line_tools]]
* [[lxc setup]]
* [[common_errors]]
* [[FreeBSD_Admin]]
* [[Fast Random Number Gen]]

* [[Postfix]]

* [[DNSSec]]
* [[letsencrypt]]

* [[hsqldb manager]]

* [[OSX_Customization]]
* [[OpenVPN]]

* [[IPMI Serial Console]]

* [[EcoDMS]]

* [[LSI 9305 Kernel Module]]

LSI 9305 Kernel Module

2017-06-22T17:39:17Z

Der Jan: Created page with "Download the driver from Broadcom [https://docs.broadcom.com/docs/Linux_Driver_RHEL6-7_SLES11-12_P14.zip] Extract source to /usr/src/mpt3sas-15.0.0.0 Create dkms.conf in that..."

Download the driver from Broadcom [https://docs.broadcom.com/docs/Linux_Driver_RHEL6-7_SLES11-12_P14.zip]

Extract source to /usr/src/mpt3sas-15.0.0.0
Create dkms.conf in that folder [https://wiki.ubuntuusers.de/DKMS/]:
PACKAGE_NAME=mpt3sas
PACKAGE_VERSION=15.0.0.0

DEST_MODULE_LOCATION=/kernel/drivers/scsi/mpt3sas/
BUILT_MODULE_NAME=mpt3sas
BUILT_MODULE_LOCATION=.

MAKE="./compile.sh"
CLEAN="./clean.sh"
REMAKE_INITRD=yes

Add module to DKMS
dkms add -m mpt3sas -v 15.0.0.0
dkms build -m mpt3sas -v 15.0.0.0
dkms install -m mpt3sas -v 15.0.0.0

Main Page

2017-06-22T17:35:45Z

Der Jan:

'''MediaWiki has been successfully installed.'''

Consult the [http://meta.wikimedia.org/wiki/Help:Contents User's Guide] for information on using the wiki software.

== Getting started ==
* [http://www.mediawiki.org/wiki/Manual:Configuration_settings Configuration settings list]
* [http://www.mediawiki.org/wiki/Manual:FAQ MediaWiki FAQ]
* [https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]

* [[command_line_tools]]
* [[lxc setup]]
* [[common_errors]]
* [[FreeBSD_Admin]]

* [[Postfix]]

* [[DNSSec]]
* [[letsencrypt]]

* [[hsqldb manager]]

* [[OSX_Customization]]
* [[OpenVPN]]

* [[IPMI Serial Console]]

* [[EcoDMS]]

* [[LSI 9305 Kernel Module]]

Discourse

2017-06-17T21:58:55Z

Der Jan: Created page with "Make sure to provide the parameters... /var/discourse# ./launcher start discourse --docker-args "--ip 172.16.0.48 --network publicnet" If not - do before docker rm discourse"

Make sure to provide the parameters...
/var/discourse# ./launcher start discourse --docker-args "--ip 172.16.0.48 --network publicnet"

If not - do before
docker rm discourse

Command line tools

2017-06-11T14:22:57Z

Der Jan: /* Ubuntu Packaging */

* st - simple statistics from the command line interface [https://github.com/nferraz/st]
* pk - A field extraction utility [https://github.com/johnmorrow/pk]
* z - jump around directories [https://github.com/rupa/z]

* kpartx - setup partitions in full disk image via loop, so they can be mounted [http://nfolamp.wordpress.com/2010/08/16/mounting-raw-image-files-and-kpartx/]
* xmount - disk image conversion (VMware, RAW, virtualbox etc.) [https://www.pinguin.lu/index.php]
* qemu-img - qemu-img convert -O vmdk imagefile.dd vmdkname.vmdk [https://stackoverflow.com/questions/454899/how-to-convert-flat-raw-disk-image-to-vmdk-for-virtualbox-or-vmplayer]

* jacksum - use CRC64 to check if file contains only zeroes [http://www.jonelo.de/java/jacksum/index_de.html]
find . -type f -not -size 0 -print0 | xargs -0 java -jar ~/Documents/src/jacksum-1.7.0/jacksum.jar -a crc64 | grep ^0000000000000000

* rmate - execute textmate via SSH [https://github.com/textmate/rmate]
* vimdiff - as git mergetool [[vimdiff]]

== Shell Stuff ==
* zsh - Z Shell
* oh my zsh - A community-driven framework for managing your zsh configuration [https://github.com/robbyrussell/oh-my-zsh]

== TMux ==
* copy from buffer
**go to buffer history with '''ctrl-b ['''
**begin selection with '''ctrl-space'''
**copy to clipboard '''ctrl-w'''
**paste from clipboard '''ctrl-b ='''

== Configuration ==
* etckeeper - keep track of your etc settings in a git [http://evilrouters.net/2011/02/18/using-etckeeper-with-git-on-ubuntu/]

== Ubuntu Packaging ==
* Debug build:
export DEB_BUILD_OPTIONS=nostrip,noopt [http://jameswestby.net/tips/tips/compiling-debian-package-for-debug.html]
* Build from git:
git-buildpackage -uc -us [https://github.com/zfsonlinux/grub/tree/readme]
* Signed built:
gbp buildpackage -k7EC5B966 --git-sign-tags --git-retag --git-tag
* Make sure to clean your directory (e.g. you used dpkg-buildpackage before)
rm .gitignore; git clean -f -d; git reset --hard
* For patches use git-dpm [http://git-dpm.alioth.debian.org/examples.html]
* Install build dependencies
apt-get build-dep package-name

* Override a package file with a local file (original file is moved file.distrib)
dpkg-divert --local --rename --add /usr/sbin/grub-probe

* Force IPv4 for apt-get [https://unix.stackexchange.com/questions/9940/convince-apt-get-not-to-use-ipv6-method]
apt-get -o Acquire::ForceIPv4=true update

* Find files not in package [https://unix.stackexchange.com/a/256334/235563]
( export LC_ALL=C; comm -23 <(find /etc/init -xdev -type f | sort) <(sort -u /var/lib/dpkg/info/*.list); )

== Postfix ==
* checking the mail queue:
mailq
postcat -q <queueid>
To Delete: postsuper -d <queueid>

Cloning ZFS root

2017-06-03T21:47:25Z

Der Jan:

* List partitions
parted
unit s
p

* Clone start of disk
dd if=/dev/sdb bs=512 of=80gb.img count=22527 conv=nocreat,notrunc

* Create loop device for partitions
kpartx -a 80gb.img

* Create new pool
zpool create apool /dev/mapper/loop0p2

* Create snapshot on source pool
zfs snapshot -r rpool@cptovm

* Send to new pool
zfs send -R rpool@cptovm | pv | zfs receive -Fd apool

* Export new pool
zpool export apool

* Convert to VMWare image
qemu-img convert -O vmdk ~/VirtualBox\ VMs/zolnascp/80gb.img 80gb.vmdk

* Replace new image in .vmx
* Use Debian ZFS LiveCD in VM to boot from image
* Import apool as rpool
zpool import apool rpool -R /mnt

* mount grub partition
mount /dev/sda1 /mnt/boot/grub

* Setuo chroot env
chroot /mnt
mount -t sysfs sys /sys
mount /proc
mount /dev

* Create new zpool.cache
zpool set cachefile=/etc/zfs/zpool.cache rpool

* set bootfs
zpool set bootfs=rpool/ROOT/ubuntu-1 rpool

* Update initramfs (should use new cache file) [https://github.com/zfsonlinux/pkg-zfs/wiki/HOWTO-install-Ubuntu-to-a-Native-ZFS-Root-Filesystem]
update-initramfs -c -k all
update-grub
grub-install /dev/sda

That's it...