
Buffer overflow in bootloader shim allows attackers to run code each time devices boot up.

Mastodon: @[email protected]
Blog: @[email protected]
We don't? We lost. I'm going to go back to huddling in the corner.
I run docker exclusively in VMs and VPS and it works fine.
Yes there is.
So Grocy doesn't directly support OIDC/SAML but it does support auth being passed along via the reverse proxy. This is how my grocy is configured. No double logins required.
I'm going to add Hoarder to the pile of suggestions.
A VPS is already a VM and nesting VMs, even if you get it to work, is generally a Bad Ideaโข๏ธ.
What you're asking for is squarely in "bare metal" territory. Does that reduce your flexibility? Sure. But it doesn't entirely eliminate it. Down the road if you decide you need more RAM or disk those are things you can have added (at a cost). CPU would likely necessitate a migration to a different system so I'd keep that in mind during initial sizing. Also, if you are using proxmox, migration will be as simple as backing up a container/VM and restoring it at the destination.
Your other alternative is multiple VPSes or possibly augmenting the bare metal server with one or more VPSes.
As far as unified billing goes, just have all the services with the same provider. Most providers I've encountered offer both services.
I can't speak to providers in our around Sydney, but I'd recommend checking out lowendbox.com to start your search.
Only by exposing the docker socket. And it doesn't support managing network or volumes.
The constant argument in this space that you must know the arcane workings of everything you use, is exhausting.
Just because something doesn't fit your use case doesn't make it a terrible product. Portainer isn't meant to complement managing docker via CLI. It's meant to be the management interface.
If you want to manage your environment via CLI, I agree, don't use Portainer. If you're content (or prefer) a GUI, Portainer is a solid option. Esp if you have multiple hosts or want to manage more than just the compose stack. Last time I checked Dockge doesn't do either.
Personal preference? I prefer the Portainer's presentation over the CLI. I especially find it easier to manage networks and volumes.
But my main reason is I have multiple docker hosts and it gives me a "single pane on glass" to manage everything from.
My note 20 still gets updates.
Dex is pretty cool. I just lack a use case.
soft meow
You've obviously never met my cat.
Heaven forbid I want to use an intuitive, simple, terminal based text editor when I ssh into one of my boxes.
But here's the real kicker. Why do people like you give two shits what text editor other people use?
Another good site for VPS deals is https://www.lowendbox.com/ . I've used them to find the RackNerd deals and also I've got a storage VPS I use for off-site backup that's stupidly cheap with another provider.
These deals are still active https://www.racknerd.com/BlackFriday/
Also tagging @[email protected] since I should have linked this last night.
Should check out Racknerd. I've got a 4 core, 4 gb ram, 50 gb disk VPS for $50/yr.
It's oracle. You can get up to 4 cores and 24gb ram on an arm vm from Oracle cloud for free when there are open slots. They get snapped up quick.
Appears to work as well as it does on windows. I guess the only downside is learning powershell if you have no previous experience with it.
Proxmox Disk Performance Problems
I've started encountering a problem that I should use some assistance troubleshooting. I've got a Proxmox system that hosts, primarily, my Opnsense router. I've had this specific setup for about a year.
Recently, I've been experiencing sluggishness and noticed that the IO wait is through the roof. Rebooting the Opnsense VM, which normally only takes a few minutes is now taking upwards of 15-20. The entire time my IO wait sits between 50-80%.
The system has 1 disk in it that is formatted ZFS. I've checked dmesg, and the syslog for indications of disk errors (this feels like a failing disk) and found none. I also checked the smart statistics and they all "PASSED".
Any pointers would be appreciated.
Edit: I believe I've found the root cause of the change in performance and it was a bit of shooting myself in the foot. I've been experimenting with different
Change tracking ideas
I'd like to start doing a better job of tracking the changes I made to my homelab environment. Hardware, software, network, etc. I'm just not sure what path I want to take and was hoping to get some recommendations. So far the thoughts I have are:
I know that several of you are going to say "config as code" and I get it. But I'm not there yet and I want to track the changes I'm making today.
Thanks
Backblaze B2 Reporting
I can't seem to find anything so I was hoping someone here has run into this.
Does anyone know if there's a way to get reporting on a per application key basis or per bucket. I periodically get threshold alerts (usually the download cap) but that doesn't give me any idea of what utilization is triggering the alert. The reporting I can find is pretty rudimentary and account wide.
Buffer overflow in bootloader shim allows attackers to run code each time devices boot up.
How to backup object storage for NextCloud
I'm experimenting with running NextCloud (AIO) on a VPS with a B2 bucket as the primary storage. I want to compare performance compared to running it on my home server (esp. when I'm remote) and get an idea of the kinds of costs I'd rack up doing it.
As part of the setup I have configured the built in borg backup but it has this caveat:
Be aware that this solution does not back up files and folders that are mounted into Nextcloud using the external storage app - but you can add further Docker volumes and host paths that you want to back up after the initial backup is done.
The primary storage is external but I'm not using the "external storage" app. So, I have 2 questions.
I've done some research on this topic and I'm kinda coming up empty. I would normally use restic but restic doesn't work in that direction (B2 -> local backup).
It looks like rclone can be us
Retain source IP when proxying through VPS
So, I'm experimenting with running a Mailu instance on my home server but proxying all of the relevant traffic through a WireGuard tunnel to my VPS. I'm currently using NGINX Proxy Manager streams to redirect the traffic and it all seems to be working.
The only problem is that, all connections appear to come from the VPS. It's really screwing with the spam filter. I'm trying to figure out if there's a way to retain the source IP while still tunneling the traffic.
The only idea I have, and I don't know if it's a bad one, is to us iptables to NAT the ports inbound on the VPS and on my home router (opnsense) route all outbound traffic from that IP back through the VPS instead of the default gateway. This way I shouldn't need to rewrite the destination port on the VPS side.
It sound a bit hacky tho, and I'm open to better suggestions.
Thanks
Edit: I think I need to clarify my post as there's some confusion in the comments. I would like the VPS to masquerade/nat for my mailu sys
Weird Wireguard issues I could use some help with.
I've hit a wall with a weird Wireguard issue. I'm trying to connect my phone (over cell) to my home router using wireguard and it will not connect.
The router is opnsense, I have a tcpdump session going and when I attempt a connection from the phone I see 0 packets on that port. I am able to ping the router and reach the web server sitting behind it from the phone.
I have a VPS that I configured WG on and the phone connects fine to that. I also tested configuring the VPS to connect to my home router and that also works fine.
I'm really at a loss as to where to go next.
Edit 2: I completely blew out the config on both sides and rebuilt it from scratch, using a different UDP port, and it all appears to be working now. Thanks for everyone's help in tracking this down.
Edit: It was requested I provide my configs.
undefined
#####################
Non-Realtek NIC Recommendations
Since switching to Proxmox I've noticed an issue with intermittent network connectivity on my VMs. I've narrowed it down to the realtek based PCI NIC (Rosewill RNG-407-Dualv2) I currently have installed. Basically when I see a ton of these in my syslog:
Dec 14 13:55:37 server kernel: r8169 0000:09:00.0 enp9s0: rtl_rxtx_empty_cond == 0 (loop: 42, delay: 100).
It means it's time to reboot. I did some digging on it and it appears to be a kernel driver issue. Unless someone in this community has encountered this and knows of a good fix (other than rebooting) I'd rather just ditch Realtek and replace the NIC.
Can anyone recommend a 2 port PCIe (x1) card that has good driver support under Linux and (hopefully) won't cost me a small fortune? Bonus points if it's 2.5GbE capable.
Self-Hosting Email - Software Recommendations?
I'm going to start off but saying I know that self-hosting email can be a bad idea. That being said, I'm trying to de-googlfy my life and would like to experiment.
I have a VPS and a domain that doesn't get used for much at the moment. I'd like to try configuring a full mail suite on that domain and see if I can make it work. I've been looking into the various options on this list and was hoping for some feed back on options that people have used. If this works out it would be fairly low volume.
Ideally I'd like a full solution that includes web administration if at all possible. I think I'm leaning towards mailcow but it might be overkill.
I'd appreciate any input on what has or hasn't worked for people. Thanks.
Dropped connections to VM with multiple interfaces.
I'm not sure where to start with to troubleshoot this. I segregated my network into a few different VLANs (servers, workstations, wifi, etc...). I have VMs and LxC containers running in Proxmox, routing is handled by Opnsense, and I have a couple tplink managed switches. All of this is working fine except for 1 problem.
I have a couple systems (VM and LxC) that have interfaces on multiple VLANs. If I SSH to one of these systems, on the IP that's on the same VLAN as the client, it works fine. If I SSH to one of the other IPs it'll initially connect and work but within a minute or so the connection hangs and times out.
I tried running ssh in verbose mode and got this, which seems fairly generic:
undefined
debug3: recv - from CB ERROR:10060, io:00000210BBFC6810 debug3: send packet: type 1 debug3: send - WSASend() ERROR:10054, io:00000210BBFC6810 client_loop: send disconnect: Connection reset debug3: Successfully set console output code page from 65001 to 65001 debug3: Successfully set conso
Log Collection
I'm in the process of re-configuring my home lab and would like to get some help figuring out log collection. My setup was a hodgepodge of systems/OSes using rsyslog to send syslogs to a syslog listener on my qnap but that's not going to work anymore (partly because the qnap is gone).
My end-goal is going to be as homogeneous as I can manage. Mostly Debian 12 systems (phy and vm) and Docker containers. Does anyone know of a FOSS solution that can ingest journald, syslog, and if it's even possible to send docker logs to a log collector?
Thanks
Dead instance checker may be overzealous.
There's been some discussion about the dead instance checker over on !fediverse[email protected] being a bit overzealous but I didn't see anything here, so I wanted to raise it.
I did some spot checking of the instance table and can confirm that several of the instances with an older updated date were indeed actually up.
Feed loops back on itself.
Does anyone else have a problem where the feed loops back on itself. I'll scroll a handful of posts and then start seeing repeats. I've scrolled up to confirm they're the exact same post (not cross posts, or dupes).
What do you use to document your home lab?
My home lab has a mild amount of complexity and I'd like practice some good habits about documenting it. Stuff like, what each system does, the OS, any notable software installed and, most importantly, any documentation around configuration or troubleshooting.
i.e. I have an internal SMTP relay that uses a letsencrypt SSL cert that I need to use the DNS challenge to renew. I've got the steps around that sitting in a Google Doc. I've got a couple more google docs like that.
I don't want to get super complicated but I'd like something a bit more structured than a folder full of google docs. I'd also like to pull it in-house.
Thanks
Edit: I appreciate all the feedback I've gotten on this post so far. There have been a lot of tools suggested and some great discussion about methods. This will probably be my weekend now.
Redeploy Portainer Edge Agent without losing config?
cross-posted from: https://lemmy.procrastinati.org/post/27277
According to the documentation to change the Portainer address and Edge agent talks to, you have to redeploy the Edge agent. If I understand properly this is going to assign the agent a new ID and will blow away the configuration.
Does anyone know how to do this while retaining the stack configurations?
Redeploy Portainer Edge Agent without losing config?
According to the documentation to change the Portainer address and Edge agent talks to, you have to redeploy the Edge agent. If I understand properly this is going to assign the agent a new ID and will blow away the configuration.
Does anyone know how to do this while retaining the stack configurations?
Advice/poll on switching away from Ubuntu for my VM host.
First off, I know ultimately I'm the only person who can decide if it's worth it. But I was hoping for some input from your collective experience.
I have a server I built currently running Ubuntu 22.04. I'm using KVM/qemu to host VMs and have recently started exploring the exciting world of Docker, with a VM dedicated to Portainer. I manage the VMs with a mix of virt-manager via xRDP, cli tools, and (if I'm feeling extra lazy) Cockpit. Disks are spindles currently in software Raid 10 (md), and I use LVM to assign volumes to the KVM VMs. Backups are via a script I wrote to snapshot the LVM volume and back it up to B2 via restic.
It all works. Rather smoothly except when it doesn't ๐.
I've been planning an HD upgrade and was considering using that as an excuse to start over. My thoughts are to either install Debian and continue with my status quo, or to give Proxmox a try. I've been reading alot of positive comments about it here and I have longed for one unified web interface to ma
Are folding bluetooth keyboards any good
I've seen a handful of people's pics where they have the folding bt keyboards. I'd like to have a portable kbd with a trackpad for those infrequent times it'd be useful.
Has anyone had a good experience with one they can recommend?
Need some advice on my NAS situation.
I need some advice on my NAS situation. I've got a hand-me-down QNap TS-453BU-RP that's been working fine for the majority of the time I've had it. It's for 4x2TB spindles and 2xM.2 SSDs. The M.2's are on a PCI expansion card.
The past couple months I've been having problems where one of the M.2 drives will randomly disconnect. A cold restart doesn't seem to help (power down, remove power, wait, power back up). If I pull the thing open and reseat the drives that fixes it the majority of the time. It's usually slot 2, but slot 1 has disappeared before as well. I've tried swapping the drives around and I've tried replacement drives. None of it seems to make a difference. I've also reseated the pci card several times.
So my questions are 2 fold: First, any ideas on this issue that I maybe haven't thought of? I don't think it's the drives. Could be the PCI or the riser but I'm not sure how to go about identifying that.
Second, assuming I'm SoL with the QNap, what are my replacement
Liftoff v0.10.7 update brings comment size adjustments.
Ability to adjust comment font size and post body font size Implemented user deeplinking Added separate notification counts on the inbox tabs Fixes for copy/paste buttons and loading indicators (sw...
A new version of liftoff just dropped and it has my most needed feature. The ability to adjust the size of comment text.