clerie's Wiki - notiz

Akkustand auslesen

Anonymous (anonymous@undisclosed.example.com) — 2020-07-23T10:57:44+00:00

Akkustand auslesen cat /sys/class/power_supply/BAT1/uevent

Debian auf einem APU Board installieren

Anonymous (anonymous@undisclosed.example.com) — 2020-12-06T11:39:14+00:00

Debian auf einem APU Board installieren Einen USB-Stick fertig machen mit einem Debian Netinstall Image und in eine USB-Buchse stecken. Netzwerk in die ganz linke Buchse stecken, das ist enp1s0. Serial Kabel mit 115200 Baud anstecken und APU mit Strom versorgen. Direkt nach dem Booten bei der Aufforderung F10 zu drücken dies tun und den USB-Stick als Bootmedium wählen.

Archlinux per efistub booten

Anonymous (anonymous@undisclosed.example.com) — 2020-07-23T20:20:16+00:00

Archlinux per efistub booten efibootmgr -c -d /dev/nvme0n1 -p 1 -l \vmlinuz-linux -L "Arch Linux efistub" -u "initrd=\initramfs-linux.img cryptdevice=/dev/nvme0n1p2:main root=/dev/mapper/main-root rw" efibootmgr -c -d /dev/nvme0n1 -p 1 -l \vmlinuz-linux -L "Arch Linux efistub Fallback" -u "initrd=\initramfs-linux-fallback.img cryptdevice=/dev/nvme0n1p2:main root=/dev/mapper/main-root rw" efibootmgr -c -d /dev/nvme0n1 -p 1 -l \vmlinuz-linux -L "Arch Linux efistub Resume" -u "initrd=\initramfs-l…

Archlinux installieren (simple, systemd-boot)

Anonymous (anonymous@undisclosed.example.com) — 2026-01-10T21:28:15+00:00

Archlinux installieren (simple, systemd-boot) chrooten arch-chroot -S /mnt bootloader mkinitcpio -p linux bootctl install default arch.conf timeout 4 console-mode max editor no title Arch Linux linux /vmlinuz-linux initrd /initramfs-linux.img options root=UUID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx rw

Archlinux installieren (EFISTUB, Luks, Gnome, Hibernate)

Anonymous (anonymous@undisclosed.example.com) — 2026-01-10T21:06:31+00:00

Archlinux installieren (EFISTUB, Luks, Gnome, Hibernate) Zielsystem Dieser Guide ist gedacht für reine Intel ThinkPads mit EFI Boot und wurde getestet auf einem ThinkPad X270 und ThinkPad L380. Für andere Geräte sind ggf. kleine Änderungen notwendig. So konnte zB schon erfolgreich ein ThinkPad X230 installiert werden.

clerie's ultimative Bash Template

Anonymous (anonymous@undisclosed.example.com) — 2020-05-26T17:31:40+00:00

clerie's ultimative Bash Template Leicht inspiriert duch: * * #!/usr/bin/env bash msg() { echo "[*] $*" >&2 } err() { echo "[!] $*" >&2 } die() { echo "[X] $*" >&2 exit 1 } cmd() { echo "[#] $*" >&2 "$@" }

bird 2 auf Debian Buster installieren

Anonymous (anonymous@undisclosed.example.com) — 2020-11-18T21:18:56+00:00

bird 2 auf Debian Buster installieren Abhängigkeiten installieren apt install build-essential autotools-dev autoconf flex bison libncurses-dev libreadline-dev bird2 bauen und installieren wget https://bird.network.cz/download/bird-2.0.7.tar.gz tar -xf bird-2.0.7.tar.gz cd bird-2.0.7/ ./configure make -j 2 sudo make install

List of interesting Blogs

Anonymous (anonymous@undisclosed.example.com) — 2022-03-25T10:35:15+00:00

List of interesting Blogs * Daniel Stenberg: cURL * CCC Event Blog

Linux Bridge: Multicast

Anonymous (anonymous@undisclosed.example.com) — 2024-10-21T16:52:14+00:00

Linux Bridge: Multicast Manchmal lassen linux Bridges kein Multicast traffic durch, was verhindert, dass IPv6 Autoconfig nach einiger Zeit nicht mehr funktioniert (siehe media-1). Das hier hat geholfen: echo 1 > /sys/devices/virtual/net/br0/bridge/multicast_querier echo 0 > /sys/devices/virtual/net/br0/bridge/multicast_snooping

Bridgeing VLANS

Anonymous (anonymous@undisclosed.example.com) — 2020-02-21T14:14:13+00:00

Bridgeing VLANS ### Cluster interal network auto vmbr1 iface vmbr1 inet manual bridge-ports eno2 bridge-stp off bridge-fd 0 bridge-vlan-aware yes bridge-vids 2-4094 ### External Traffic for C-BR auto vmbr2 iface vmbr2 inet manual bridge-ports eno4 bridge-stp off bridge-fd 0 bridge-vlan-aware yes bridge-vids 2-4094 # C-BR VLAN 1000 auto cbrbr1000 iface cbrbr1000 inet manual bridge-ports vmbr2.1000 vmbr1.10…

ChromiumOS bauen

Anonymous (anonymous@undisclosed.example.com) — 2020-05-17T12:51:37+00:00

ChromiumOS bauen root adduser --disabled-login chromiumos sudo apt-get install git-core gitk git-gui subversion curl lvm2 thin-provisioning-tools python-pkg-resources python-virtualenv python-oauth2client cd /tmp cat > ./sudo_editor < \$1 # Entering your password in one shell affects all shells echo Defaults timestamp_timeout=180 >> \$1 # Time between re-requesting your password, in …

Cisco Serial on USB-A Connector

Anonymous (anonymous@undisclosed.example.com) — 2023-05-27T08:36:50+00:00

Cisco Serial on USB-A Connector On some Cisco routers there is the plain serial management port on a USB-A connector. (Do not confuse with the USB-A connectors that provide a serial console but are a normal USB connection that require a USB rollover cable!)

dhclient

Anonymous (anonymous@undisclosed.example.com) — 2020-02-21T16:58:10+00:00

dhclient sudo dhclient eth0 # request v4 sudo dhclient -6 ent0 # request v6 sudo dhclient -r eth0 # release v4

DIY Backup Backup

Anonymous (anonymous@undisclosed.example.com) — 2020-09-20T10:12:06+00:00

DIY Backup Backup /usr/bin/rsync --rsync-path="sudo rsync" --delete -avzb -e "ssh -i ${1}" 'system-backup@clerie-backup.clerie.de:/mnt/clerie-backup/*' './clerie-backup' --backup-dir="./clerie-backup-old-$(date +\"%s\")"

DPDK auf einem Debian installieren

Anonymous (anonymous@undisclosed.example.com) — 2020-06-17T16:27:18+00:00

DPDK auf einem Debian installieren Erst ein Debian wie gewohnt installieren. Hugepages einrichten: nano /etc/default/grub Dort dann an an den Inhalt von GRUB_CMDLINE_LINUX_DEFAULT folgendes ergänzen: default_hugepagesz=1G hugepagesz=1G hugepages=4 intel_iommu=on iommu=pt

Dual Stack Lite (DS-Lite) B4 Element on Linux

Anonymous (anonymous@undisclosed.example.com) — 2025-11-20T19:09:13+00:00

Dual Stack Lite (DS-Lite) B4 Element on Linux RFC6333 specifies a so called Basic Bridging BroadBand (B4) element on the CPE side. This is about this B4 element. What I write here is what I learned by figuring making this NixOS configuration. You can use it as a reference. It is tested against a FTTB connection from

Equipment für Veranstaltungen versenden

Anonymous (anonymous@undisclosed.example.com) — 2023-03-30T19:15:38+00:00

Equipment für Veranstaltungen versenden Mit der Post * Nur rechteckige Kartons aus Pappe dürfen mit den normalen Tarifen versendet werden Karton Qualität * Karton Qualität wird nach WK-10 angegeben * erste Zahl ist Anzahl an Wellen * Zweite Zahl ist eine Kategorie

Faillock

Anonymous (anonymous@undisclosed.example.com) — 2021-03-20T10:53:31+00:00

Faillock Wenn öfter das Passwort falsch eingegeben wurde kann es einen Cooldown geben. Die kann unter `/etc/security/faillock.conf` eingestellt werden.

Glasfaser-Verbinder

Anonymous (anonymous@undisclosed.example.com) — 2021-02-21T14:07:32+00:00

Glasfaser-Verbinder LC vs SC vs ST Tube Cubic Scheiße ST SC LC Merke * S steht für Scheiße * SC ist klobing und ST ist fummelig zu stecken * für neue Anlagen willst du eigentlich nur noch LC verwenden

Fiberstore Switch untagged VLAN on trunk port

Anonymous (anonymous@undisclosed.example.com) — 2024-08-20T10:58:32+00:00

Fiberstore Switch untagged VLAN on trunk port Make sure the VLAN you want to have untagged on the port (in this example VLAN 203) is part of vlan-allowed and vlan-untagged. Then you set the actual untagged VLAN via pvid. interface GigaEthernet0/2 switchport trunk vlan-allowed 201,203,205 switchport trunk vlan-untagged 203 switchport mode trunk switchport pvid 203

Fujitsu Futro S940 - D3543-A1x

Anonymous (anonymous@undisclosed.example.com) — 2026-01-10T17:48:04+00:00

Fujitsu Futro S940 - D3543-A1x RCV Jumper Positions On the mainboard is a 2×3 6-pin header with a jumper where one of the center pin is missing. Remove BIOS Password * unplug power * open case * set RCV jumper * when the missing pin is at the top, bridge the two left pins with the jumper

Fujitsu Futro

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T22:06:21+00:00

Fujitsu Futro * PoE Extension Port It seems the weird PoE extension port is just PCIe * *

Self signed SSL Zertifikat generieren

Anonymous (anonymous@undisclosed.example.com) — 2021-04-08T11:59:47+00:00

Self signed SSL Zertifikat generieren openssl req -new -x509 -days 36500 -nodes -out /etc/ssl/private/selfsigned.pem -keyout /etc/ssl/private/selfsigned.key X.509 Zertifikat anschauen openssl x509 -noout -text -in cert.pem

clerie's Gentoo install Guide

Anonymous (anonymous@undisclosed.example.com) — 2020-07-23T15:17:53+00:00

clerie's Gentoo install Guide Konzept * Vollverschlüsselte Festplatte * (U)EFI Boot direkt in den Kernel * Hibernate Links * Partitionierung /boot/efi 512MB mkfs.fat -F 32 /boot 1G mkfs.ext4 lvm / 25GB

Gnome Keyring SSH Popup deaktivieren

Anonymous (anonymous@undisclosed.example.com) — 2020-01-23T15:43:30+00:00

Gnome Keyring SSH Popup deaktivieren (cat /etc/xdg/autostart/gnome-keyring-ssh.desktop; echo Hidden=true) > ~/.config/autostart/gnome-keyring-ssh.desktop

GPG generate key

Anonymous (anonymous@undisclosed.example.com) — 2026-04-10T17:08:44+00:00

GPG generate key Create key [clerie@krypton ~]$ gpg --full-generate-key --expert gpg (GnuPG) 2.4.5; Copyright (C) 2024 g10 Code GmbH This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Please select what kind of key you want: (1) RSA and RSA (2) DSA and Elgamal (3) DSA (sign only) (4) RSA (sign only) (7) DSA (set your own capabilities) (8) RSA (set your own capabilities) (9) ECC (sign and encrypt) *defa…

GPG Smart Card Setup

Anonymous (anonymous@undisclosed.example.com) — 2024-07-11T10:35:12+00:00

GPG Smart Card Setup Use Smart Card with new gnupg home To use the smart card with a new gnupg home, i.e. different host/user, you have to import the public keys first. $ gpg --card-edit … gpg/card> fetch … This will download the public keys from the

Hibernate wenn Laptop Deckel zu

Anonymous (anonymous@undisclosed.example.com) — 2021-05-02T12:40:26+00:00

Hibernate wenn Laptop Deckel zu Für Archlinux mit Gnome und Systemd. HandleLidSwitch=hibernate Anwenden mit: systemctl kill -s HUP systemd-logind

HP 1920

Anonymous (anonymous@undisclosed.example.com) — 2022-02-13T12:47:39+00:00

HP 1920 Serial Console * 38400 baud * 8 data bits * 1 stop bit * no parity Default User * Username: admin * Password: all-command mode There are only a couple command available by default that are useful to set up access to the web interface. But you can enable

HP Proliant Gen 8 ILO Vitual Serial Port with Proxmox

Anonymous (anonymous@undisclosed.example.com) — 2024-10-21T15:15:10+00:00

HP Proliant Gen 8 ILO Vitual Serial Port with Proxmox Add these options to /etc/default/grub in Proxmox to provide a TTY to the virtual serial port of ILO of an HP Prolian Gen 8. The graphical terminal can still be used in the web view and via cable.

Internet Packets

Anonymous (anonymous@undisclosed.example.com) — 2024-06-02T17:08:30+00:00

Internet Packets IPv4 Fields 4 Bit: Protocol Version Is always 0x4 4 Bit: IHL - Internet Header Length Multiples of 4 Byte, minimum 0x5, greater than 0x5 signs that IPv4 Header Options are present 6 Bit: DSCP Arbitrary identifier mostly used by QoS. Can mark specific types of payload.

iptables NAT

Anonymous (anonymous@undisclosed.example.com) — 2020-02-21T19:10:15+00:00

iptables NAT #! /bin/bash IPTABLES=/sbin/iptables WANIF='ens18' LANIF='ens19' # enable ip forwarding in the kernel echo 'Enabling Kernel IP forwarding...' /bin/echo 1 > /proc/sys/net/ipv4/ip_forward # flush rules and delete chains echo 'Flushing rules and deleting existing chains...' $IPTABLES -F $IPTABLES -X # enable masquerading to allow LAN internet access echo 'Enabling IP Masquerading and other rules...' $IPTABLES -t nat -A POSTROUTING -o $LANIF -j MASQUERADE $IPTABLES -A FORWARD -i …

iptables speichern

Anonymous (anonymous@undisclosed.example.com) — 2020-02-21T19:05:01+00:00

iptables speichern Regeln speichern: iptables-save > /etc/iptables/rules.v4 ip6tables-save > /etc/iptables/rules.v6 Regeln laden: iptables-restore < /etc/iptables/rules.v4 ip6tables-restore < /etc/iptables/rules.v6 Regeln bei Neustart automatisch einspielen:

Juniper Vendor Specific Attributes in FreeRADIUS

Anonymous (anonymous@undisclosed.example.com) — 2023-12-12T17:40:13+00:00

Juniper Vendor Specific Attributes in FreeRADIUS This table shows how the different Juniper VSAs are called in different FreeRADIUS versions. Attribute Number Offical Juniper VSA Name FreeRADIUS 2.x.x FreeRADIUS 3.0.x FreeRADIUS 3.2.x FreeRADIUS 4.0-alpha1 26.4874.1 Virtual-Router ERX-Virtual-Router-Name ERX-Virtual-Router-Name ERX-Virtual-Router-Name

LineageOS bauen

Anonymous (anonymous@undisclosed.example.com) — 2019-12-15T13:25:11+00:00

LineageOS bauen Anleitung für LOS 14 und hammerhead Buildserver einrichten Neue Version auf bestehenden Server bauen cd ~/android/lineage repo sync source build/envsetup.sh breakfast hammerhead ccache -M 50G croot brunch hammerhead Die fertigen Builds liegen dann in einem Ordner, in den man per

LineageOS installation

Anonymous (anonymous@undisclosed.example.com) — 2019-12-15T14:33:51+00:00

LineageOS installation OS Update Gerät ausschalten. An Computer per USB anschließen. Ins Recovery booten und ADB Sideload aktivieren: 1. POWER+DOWN 2. Recovery mode 3. Advanced 4. ADB Sideload 5. Swipe Im Terinal: Sicherstellen, dass ADB erkannt wurde:

Linux on CheckPoint 5200

Anonymous (anonymous@undisclosed.example.com) — 2022-12-30T15:18:32+00:00

Linux on CheckPoint 5200 Hardware * System CheckPoint PB-20-00 * Version: PB-20-1.4 * Motherboard: INTEL DENLOW_REFRESH_WS * BIOS: American Megatrends * Core Version: 4.6.5.5 * Compliancy: UEFI 2.3.1; PI 1.2 * Project Version: 1ARXO 0.20 x64

Linux on Futro Z220

Anonymous (anonymous@undisclosed.example.com) — 2026-01-10T17:55:55+00:00

Linux on Futro Z220 USB Recovery Stick firmware can be downloaded from eLux RT On the device preinstalled was eLux RT. Digging a little in the Settings GUI revealed a Linux under the hood. After enabling desktop icons in the desktop setting one can open a

mine Keyboard Layout on NixOS unstable

Anonymous (anonymous@undisclosed.example.com) — 2026-04-08T20:50:20+00:00

mine Keyboard Layout on NixOS unstable mine is an optimized german keyboard layout. Manual per user install mkdir -p ~/.config/xkb/symbols curl https://dl.neo-layout.org/custom_mine_2.39 > ~/.config/xkb/symbols/custom Add keyboard layout: GNOME Settings > Keyboard > Input Sources > Add Input Source > Other > A user-defined custom Layout > Add

MPLS on Linux

Anonymous (anonymous@undisclosed.example.com) — 2021-12-31T11:47:17+00:00

MPLS on Linux * * *

NGINX Port Fortward

Anonymous (anonymous@undisclosed.example.com) — 2020-04-27T11:02:58+00:00

NGINX Port Fortward Manchmal möchte man Ports forwarden, die aber das IP Protokoll wechseln müssen. Dafür kann man den NGINX TCP/UDP Loadbalancer missbrauchen. Beispielconfig mkdir /etc/nginx/ports-enabled mkdir /etc/nginx/ports-available stream { include /etc/nginx/ports-enabled/*; }

NixOS cheats

Anonymous (anonymous@undisclosed.example.com) — 2022-10-15T11:33:16+00:00

NixOS cheats Nix Flakes Nix Build Host Configuration nix build .#nixosConfiguration.hostname.config.system.build.toplevel Neuen NixOS Host von Flake installieren sudo nixos-install --no-root-passwd --root /mnt --flake git+https://git.clerie.de/clerie/nixfiles.git#hydra-2

NixOS als Tarball

Anonymous (anonymous@undisclosed.example.com) — 2021-01-14T18:51:48+00:00

NixOS als Tarball { config, pkgs, modulesPath, ... }: let # format target device with `mkfs.ext4 -L NIXOS_ROOT` rootfsLabel = "NIXOS_ROOT"; in { imports = [ (modulesPath + "/installer/cd-dvd/system-tarball.nix") # (modulesPath + "/profiles/base.nix") ]; tarball.contents = [ { source = pkgs.writeText "grub.cfg" '' insmod gfxterm insmod png set gfxpayload=keep menuentry "NixOS" { search --set=drive1 --label ${rootfsLabel} …

NixOS VM Setup

Anonymous (anonymous@undisclosed.example.com) — 2024-04-06T10:38:48+00:00

NixOS VM Setup Disk Partition * 1M grub * ef02 * 100%FREE root * ext4 Checklist * IP addresses * correct interface names * HTTP ports allowed * user password set Install nixos-install --root /mnt --flake /mnt/etc/nixos#hostname --no-root-passwd

Nützliches SQL

Anonymous (anonymous@undisclosed.example.com) — 2020-04-29T20:27:57+00:00

Nützliches SQL doppelter join Wir hätten gerne aus einer Tabelle nur die Zeile wo climate.date max ist, gruppiert nach climate.stations und wollen noch stations.name anzeigen. SELECT stations.lat AS lat, stations.lon AS lon, stations.name AS name, climate.tmk AS tmk FROM climate INNER JOIN ( SELECT climate.station, MAX(climate.date) AS date FROM climate GROUP BY climate.station ) AS c ON climate.station = c.station AND climate.date = c.date INNER JOIN stations ON climate.station …

OCEDO Koala

Anonymous (anonymous@undisclosed.example.com) — 2022-01-01T17:54:55+00:00

OCEDO Koala OpenWRT * Git Commit / Installation Instructions: * Datasheet:

Linux Partition Layouts

Anonymous (anonymous@undisclosed.example.com) — 2025-02-21T17:15:58+00:00

Linux Partition Layouts EFI + GPT + Cryptsetup + LVM * 512M efi (ef00) /boot * mkfs.fat -F 32 -n EFI * 100%FREE crypt (8300) * cryptsetup lvm * lvm vg main * lvm lv main-swap RAM+1G * mkswap -L swap * lvm lv main-root 50-100G /

Ping IPv6 Broadcast

Anonymous (anonymous@undisclosed.example.com) — 2020-08-18T21:14:18+00:00

Ping IPv6 Broadcast Eigentlich Multicast. Multicast Adresse beginnen immer mit ff. Alle link-local Geräte: ping -6 ff02::1%eth0 * Alle Scopes: * Deutsche Erklärung:

Planet VC-231G VDSL2 Modem

Anonymous (anonymous@undisclosed.example.com) — 2026-01-10T17:50:53+00:00

Planet VC-231G VDSL2 Modem The Planet VC-231G VDSL2 modem is a dumb bridge modem that can be configured to CO mode and CPE mode via some dip switches. Supported VDSL standarts * ITU-T G.993.1 VDSL * ITU-T G.997.1 * ITU-T G.993.2 VDSL2 (Profile 17a/30a support)

PM: hibernation: Image allocation is 97054 pages short

Anonymous (anonymous@undisclosed.example.com) — 2023-07-10T21:48:03+00:00

PM: hibernation: Image allocation is 97054 pages short I encountered an issue where hibernation on a freshly booted system works, but after a while it failed and the system just came up again. I checked dmegs and found the following messages. [Di Jul 11 06:07:02 2023] PM: hibernation: hibernation entry [Di Jul 11 06:07:02 2023] Filesystems sync: 0.011 seconds [Di Jul 11 06:07:02 2023] Freezing user space processes [Di Jul 11 06:07:02 2023] Freezing user space processes completed (elapsed 0.00…

Postfix Mailrelay

Anonymous (anonymous@undisclosed.example.com) — 2020-08-24T17:03:01+00:00

Postfix Mailrelay apt install postfix Im Wizard dann Satellite auswählen und entsprechend Angaben machen. # See /usr/share/postfix/main.cf.dist for a commented, more complete version # Debian specific: Specifying a file name will cause the first # line of that file to be used as the name. The Debian default # is /etc/mailname. #myorigin = /etc/mailname smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) biff = no # appending .domain is the MUA's job. append_dot_mydomain = no # …

PostmarketOS Buildservre

Anonymous (anonymous@undisclosed.example.com) — 2019-12-15T14:11:29+00:00

PostmarketOS Buildservre Buidumgebung einrichten Als superuser sudo apt update && apt upgrade sudo apt install python3-pip sudo pip3 install pmbootstrap sudo pip3 install argcomplete sudo adduser --disabled-login postmarketos postmarketos ALL = NOPASSWD: ALL

Proxmox HDD durchreichen

Anonymous (anonymous@undisclosed.example.com) — 2020-02-19T21:01:32+00:00

Proxmox HDD durchreichen qm set 108 -sata2 /dev/sdh

Raspberry Pi im FeM-Net

Anonymous (anonymous@undisclosed.example.com) — 2019-12-14T19:50:26+00:00

Raspberry Pi im FeM-Net Anleitung zum einrichten eines Raspberry Pi im FeM-Net mit IPv6 only. Vorbereitung * Raspberry Pi * SD-Karte * Netzteil * Netzwerkkabel * Monitor * HDMI-Kabel * Tastatur SD-Karte mit aktuellem Raspbian flashen.

Raspi-Arpscan

Anonymous (anonymous@undisclosed.example.com) — 2020-01-23T15:23:53+00:00

Raspi-Arpscan alias piscan="sudo arp-scan --localnet --ignoredups | grep -P 'b8:27:eb(:..){3}'"

Resize Partition

Anonymous (anonymous@undisclosed.example.com) — 2025-05-29T10:21:12+00:00

Resize Partition [root@hydra-1:~]# parted /dev/vda GNU Parted 3.6 Using /dev/vda Welcome to GNU Parted! Type 'help' to view a list of commands. (parted) print Warning: Not all of the space available to /dev/vda appears to be used, you can fix the GPT to use all of the space (an extra 209715200 blocks) or continue with the current setting? Fix/Ignore? F Model: Virtio Block Device (virtblk) Disk /dev/vda: 322GB Sector size (logical/ph…

Komplettes Backup eines entfernten System mit rsync

Anonymous (anonymous@undisclosed.example.com) — 2019-12-14T20:57:18+00:00

Komplettes Backup eines entfernten System mit rsync Zu sicherndes System rsyncbenutzer ALL = NOPASSWD: /usr/bin/rsync Sicherndes System rsync --rsync-path="sudo rsync" --delete -avzbe ssh rsyncbenutzer@example.com:/ /home/benutzer/serverbackup --backup-dir=~/old

Simple NixOS install

Anonymous (anonymous@undisclosed.example.com) — 2022-12-27T20:53:34+00:00

Simple NixOS install sudo gdisk /dev/sda Number Start (sector) End (sector) Size Code Name 1 2048 31277055 14.9 GiB 8300 Linux filesystem sudo mkfs.ext4 /dev/sda1 sudo mount /dev/sda1 /mnt sudo nixos-generate-config

Single git commit with custom committer

Anonymous (anonymous@undisclosed.example.com) — 2023-12-08T17:49:35+00:00

Single git commit with custom committer Override committer and author for a single git commit: git -c user.name=clerie -c user.email=git@clerie.de commit

SSH Authorized Keys Command

Anonymous (anonymous@undisclosed.example.com) — 2021-05-05T12:22:28+00:00

SSH Authorized Keys Command In .ssh/authorized_keys kann man nicht nur einfach SSH-Public-Keys hinterlegen, sondern auch direkt Skripte ausführen lassen. command="~/script" ssh-dsa ... Wenn sich mit dem entsprechenden Key angemeldet wird, wird direkt das Skript ausgeführt und die Verbindung nach Beendigung von diesem geschlossen.

SSH UDP Portforward

Anonymous (anonymous@undisclosed.example.com) — 2020-03-29T17:50:14+00:00

SSH UDP Portforward Wir wandelt UDP Pakete in TCP um, versenden sie und wandeln sie wieder zurück. Also einen TCP SSH Tunnel erzeugen: ssh -L 8123:localhost:8123 host.tld Auf dem Server dann: socat tcp4-listen:8123,reuseaddr,fork udp:localhost:34197

Notizen

Anonymous (anonymous@undisclosed.example.com) — 2026-04-10T17:00:10+00:00

Notizen Mein unsortierte Notizsammlung. Einige Seiten sind privat, weil sie nicht alle was angehen :P * Uberspace Backup * Raspberry Pi im FeM-Net * Veschlüsselte Festplatte * Komplettes Backup eines entfernten System mit rsync * LineageOS bauen * PostmarketOS Buildservre * LineageOS installation * Raspi-Arpscan * Gnome Keyring SSH Popup deaktivieren * Threema Web Full * Proxmox HDD durchreichen * Bridgeing VLANS * dhclient * iptables speichern * iptables NAT * …

System Mails

Anonymous (anonymous@undisclosed.example.com) — 2020-06-01T16:34:09+00:00

System Mails ssmtp (alt) * msmtp apt install msmtp defaults aliases /etc/aliases account net host mail-1.net.clerie.de port 465 tls on tls_starttls off user auth-only@net.clerie.de password maildomain hostname.net.clerie.de auto_from on account default : net

Threema Web Full

Anonymous (anonymous@undisclosed.example.com) — 2021-04-15T19:48:16+00:00

Threema Web Full Folgende uBLOCK Regeln müssen angewendet werden (einfach nach My Filters kopieren), um Threema in vollen Browserfenster zu nutzen: web.threema.ch###main-wrapper > .ng-scope > ul web.threema.ch###logo > .ng-scope web.threema.ch##header web.threema.ch###main-wrapper > .ng-scope web.threema.ch###main-wrapper.wide:style(max-width: initial !important; max-height: initial !important) web.threema.ch###main-wrapper:style(height: 100% !important; width: 100% !important)

Transceiver

Anonymous (anonymous@undisclosed.example.com) — 2020-11-26T13:12:07+00:00

Transceiver Laut Datenblatt unterstützen die HP NC523SFP (SFP+ NIC) die HPE BladeSystem 455886-B21 Transceiver, die sind aber baugleich mit den HPE J9151A. Die HP 2810-48G (Switch) unterstützen die HPE J4859C.

Nützliche Prometheus Expressions

Anonymous (anonymous@undisclosed.example.com) — 2021-05-12T17:43:02+00:00

Nützliche Prometheus Expressions Uptime Prozentsatz eines Tages über die letzten 14 Tage (sum_over_time(up{job="node-exporter"}[1d]) / count_over_time(up{job="node-exporter"}[1d]))[14d:1d]

VDSL2 SFP Modem

Anonymous (anonymous@undisclosed.example.com) — 2022-08-27T16:59:40+00:00

VDSL2 SFP Modem There exist some VDSL2 SFP Bridge Modems. They do symmetric DSL up to 100Mb/s and support ADSL, ADSL2+ (Annex A/B/M), VDSL2, Vectoring (Annex A/B/C), VDSL Profile 8a/b/c/d, 12a/b, 17a, 30a. All of the available modules seem to be identical and just rebranded

Veschlüsselte Festplatte

Anonymous (anonymous@undisclosed.example.com) — 2019-12-15T16:23:13+00:00

Veschlüsselte Festplatte Entsprechende Pakete installieren: sudo apt install cryptsetup sudo modprobe dm-crypt Erstellen Platte formatieren sudo cgdisk /dev/sda Eine normale Partition erstellen, die Verschlüsselt werden soll. Partition verschlüsseln:

Wireguard

Anonymous (anonymous@undisclosed.example.com) — 2020-03-30T22:31:26+00:00

Wireguard Kryptografie Privaten Schlüssel erzeugen wg genkey > wg-c2s-private.key Öffentlichen Schlüssel erzeugen cat wg-c2s-private.key | wg pubkey > wg-c2s-public.key Konfiguration Wireguard wird über Konfigurationsdateien verwaltet. Diese liegen unter /etc/wireguard/.conf.

Dell XPS 13 7390 with flickering screen

Anonymous (anonymous@undisclosed.example.com) — 2022-02-12T16:25:44+00:00

Dell XPS 13 7390 with flickering screen I got an XPS 13 as a work laptop and immediately installed arch on it. It worked really fine, but sometimes some pixel rows showed windows that are behind the current ones or the whole screen got a red tone. This happened only on the built in screen. External monitors worked completely fine.

XPS13 fix headphone hissing

Anonymous (anonymous@undisclosed.example.com) — 2020-01-13T21:19:01+00:00

XPS13 fix headphone hissing * (9360)#Continuous_hissing_sound_with_headphones Bei Cosima hat letztenendes folgendes geklappt: [Element Headphone Mic Boost] required-any = any switch = select # Replace "volume = merge" by: volume = 1 override-map.1 = all override-map.2 = all-left,all-right

ZTE MU5001 HyperMobile 5G

Anonymous (anonymous@undisclosed.example.com) — 2023-08-22T08:49:57+00:00

ZTE MU5001 HyperMobile 5G The following states facts that I experienced while using the ZTE HyperMobile 5G. Battery The battery gets drained quite fast, but seem to be around 10% per hour. Usually 8h of usage is possible at least. The battery gets drained while the modem is powered off too. Not as much as while operation, but battery is empty after a few days.