xpufx

AI Canary

Sat, 02 May 2026 00:00:00 +0000

Nothing.

100% Software KVM switch with a single monitor

Tue, 28 Jun 2022 00:00:00 +0000

Introduction

barrier is a software KVM which allows sharing one computer’s keyboard and mouse (server) with another computer (client) over the network. Notice that its feature set does not include sharing a single display. Normally you would have two computers with their own displays and be able to switch from one to the other by moving the mouse off the screen in the direction that the other computer is placed in the configuration. It looks like the mouse pointer literally jumps from one screen to the other which is a totally different computer. When configured properly it works really well.

Fix Lenovo Thinkpad T480s USB mouse/keyboard not working after waking up from suspend.

Sun, 03 Apr 2022 00:00:00 +0000

After some research and trial error I noticed that I can manually remove and reinsert the usbhid kernel module (using the laptop’s own keyboard) to get the USB mouse and keyboard to function again. All that was left was to make this run automatically after waking up from suspend.

Create a new file in /lib/systemd/system-sleep and call it something like myusbhidfix. The following content removes the usbhid module when you suspend the laptop and loads it back up when the laptop wakes. I think both steps can also be implemented together in one post line but it doesn’t matter.

Protecting your first app with Authentik. A no-fluff quick primer.

Mon, 24 Jan 2022 00:00:00 +0000

What we are trying to accomplish.

Identity providers are used for a variety of purposes almost all of which have to do with authentication (can I log in?) and authorization (what am I allowed to do?). They allow you to use Single Sign On (SSO) mechanisms like SAML and Oauth/OIDC as well as add one more layer of protection to your log in procedure by utilizing Two-Factor authentication (2FA) using hardware, software or SMS tokens.

Nextcloud Pretty URLs with Caddy web server

Sun, 09 Jan 2022 00:00:00 +0000

How to enable Nextcloud pretty URLs when using the Caddy web server.

The configuration is pretty simple after you found the exact configuration option necessary. The following assumes you are using the php_fastcgi directive in Caddy. This directive is an ease of use function provided by Caddy which makes some assumptions regarding modern PHP setups. It does by default support rewriting index.php router urls so there is no configuration to be done on the Caddy side.

Building a JSON string with shell variables, explained.

Tue, 21 Sep 2021 00:00:00 +0000

The example on stackoverflow (by chepner)

BUCKET_NAME=testbucket
OBJECT_NAME=testworkflow-2.0.1.jar
TARGET_LOCATION=/opt/test/testworkflow-2.0.1.jar

JSON_STRING=$( jq -n \
                  --arg bn "$BUCKET_NAME" \
                  --arg on "$OBJECT_NAME" \
                  --arg tl "$TARGET_LOCATION" \
                  '{bucketname: $bn, objectname: $on, targetlocation: $tl}' )

explanation

This was super confusing to me for a bit because I didn’t get all the repetition of identifiers for the same thing and duplicating the variable names and such. However, something else is going on here and perhaps this example makes it look more confusing than necessary.

Push TrueNAS/FreenAS alerts to Alerta

Tue, 21 Sep 2021 00:00:00 +0000

Use FreeNAS middleware client to push alerts from Freenas to Alerta

TrueNAS/FreeNAS does not have a plugin for Alerta, nor does it have a facility to use shell scripts or http/json for alerts.

I wrote a simple script that takes the alerts from the FreeNAS database using the included middleware client midclt and pushes them to the Alerta endpoint using curl, making some assumptions along the way.

Currently the script just invokes FreeNAS provided CLI tool midclt to get the info about ALL alerts without keeping track of their status and pushes them into Alerta. Alerta can take care of duplicates so this is not a big issue.

How to integrate Alerta alerts with Zulip

Wed, 15 Sep 2021 00:00:00 +0000

In addition to displaying alerts, Alerta can also be set up to send notifications to various external tools such as Telegram and Slack. At the moment there is no explicit way to send the alerts to Zulip instead. However, Zulip does support Slack style incoming webhooks as a compatibility feature through which we can push notifications to Zulip streams (like channels or chat rooms in Zulip lingo).

Please refer to the documentation on how to install and use Zulip¹ and Alerta² if you don’t already have them running. You also have to create a Zulip bot to be able to receive incoming webhooks from Alerta.

Install fdupes (or other small program) on FreeNAS

Mon, 13 Sep 2021 00:00:00 +0000

It is not advised to install packages on an appliance such as FreeNAS. For this reason FreeNAS does not come with FreeBSD packages or ports. In these situations you’re supposed to create a jail and install the software you need inside that jail instead. However you might prefer to have some basic utilities on the host itself. In my use case I thought fdupes would be much more useful if it had access to all my disks directly. The following instructions are fdupes, a duplicate file finder, but it will work for sufficiently small utilities for which there is a package on a similar FreeBSD version. For large programs the dependencies might be too big to handle.

Anarşi Nedir?

Thu, 01 Jul 2021 00:00:00 +0000

Anarşi Nedir – Butler Shaffer

Gerek kendimin gerekse diğer kişilerin felsefi görüşlerini tarif ederken “etiketlerin” kullanılması konusunda karmaşı duygular içindeyim. Bunu yapmaktan kaçınmak zor çünkü dünyayı anlamak ve onun hakkında iletişim kurmak için gösterdiğimiz çaba ister istemez kelimelerin kullanılmasını gerektiriyor ve kelimeler Alfred Korzybski’nin bizi uyardığı gibi, tarif etmeye çalıştıkları şeye asla eşit olmayan soyutlamalardır. Korzybski’nin sıkça tekrarlanan “Harita, arazi değildir” ifadesinden çıkarılması gereken ders, konu siyasi felsefe gibi soyut kavramlar olduğu zaman kafa karıştırma potansiyelinin misliyle artacağı yolundadır.

Containerception: It's virtual all the way down

Sat, 28 Mar 2020 00:00:00 +0000

The main machine is not virtual at all. It’s a pretty beefy dedicated server or if we’re being hip, bare-metal.

[kvm ~]$ uname -a
Linux kvm.DOMAIN.com 3.10.0-1062.18.1.el7.x86_64 #1 SMP Tue Mar 17 23:49:17 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

I am running qemu-kvm with libvirt on this machine.

[kvm ~]$ virsh list
 Id    Name                           State
----------------------------------------------------
 5     UbuntuServer              running
 6     ubuntu16.04server              running
 7     ERPCentos7New            running
 8     virt01.debian8                 running

Let’s pick one vm that has nested virtual stuffs in it.

Weird dovecot Error: dovecot/doveadm "failed: cache message size"

Thu, 26 Mar 2020 00:00:00 +0000

Here’s what the error message I encountered while using doveadm to read a message looked like.

doveadm fetch -u user@DOMAINNAME hdr mailbox SpamCheck/Spam uid 10
doveadm(user@DOMAINNAME): Error: Mailbox SpamCheck/Spam: UID=10: 
 read(/var/spool/mail/virtual/DOMAINNAME/public/.Spam/cur/1583888147.M606102P10872.MAILDOMAIN,S=5367,W=5455:2,S) failed: 
 Cached message size larger than expected (5367 > 2476, box=SpamCheck/Spam, UID=10) (read reason=mail stream)
doveadm(user@DOMAINNAME): Error: Corrupted record in index cache file /var/spool/mail/virtual/DOMAINNAME/public/.Spam/dovecot.index.cache: 
 UID 10: Broken physical size in mailbox SpamCheck/Spam: [...]

dovecot has a nice feature where its imap module as well as all of its components (lmtp,doveadm etc) can read and write compressed email files. You would use this if you are running low on space and want to preserve some until you can upgrade. Although you can compress old email files too, it is not strictly necessary (and is a complicated process anyway) since dovecot is able to distinguish and read plain emails along with those that are compressed, regardless of the compression algorithm.

How to upgrade portainer running as a docker container

Wed, 25 Mar 2020 00:00:00 +0000

Update: The docker package name changed from portainer/portainer to portainer/portainer-ce. This has not been updated below.

Short Version: make sure the portainer data directory is mounted as a persistent volume and recreate the container using the latest docker image. Here’s how it’s done.

I’m going to assume you used docker without swarm when you installed your current version of portainer since I haven’t tried swarms yet.

We have to make note of the original docker command we’ve used while initially setting up the container portainer lives in. Currently the default way to do that based on the official documentation is:

How to change LXC container IP under LXD

Tue, 24 Mar 2020 00:00:00 +0000

In the below example we’re changing the IP address for the container called grafana. We will have to stop the container before we can do it. The IP we’re setting for this example is 10.0.0.30. The bridge interface on the host is lxdbr0 and the interface name inside the container is eth0. Change these parameters for your environment.

lxc stop grafana
lxc network attach lxdbr0 grafana eth0 eth0
lxc config device set grafana eth0 ipv4.address 10.0.0.30
lxc start grafana

You can check the change using lxc list

Search

Mon, 01 Jan 0001 00:00:00 +0000