Root Access

@Burgi pitty... not more people think you're way, now it gets down voted... took quite a while to collect the informations... still hope people would leave a reason when downvoting... oh well, that's life ;)

Burgi

@rahuldottech no "receptionist"

bertieb

NAT PLS

y u no work

Journeyman Geek

Naughty Nat

bertieb

2:52 PM

I fully blame the ISP-supplied router

MediaAccess Gateway, my arse

FIREWALL rule : Protocol: TCP Src ip: ME_IP Src port: 34130 Dst ip: LAN_IP Dst port: 80 Chain: forward_host_service Rule Id: 7 Action: accept

y u no connect then?!

djsmiley2k

he using usd?

Also where's the nat on that?

that just looks like access rule.

access-list rules for access from outside? I'd expect WAN_IP in dest ip

bertieb

I guess forward_host_service is the NAT bit

djsmiley2k

then NAT translation applied after, to change WAN_IP to LAN_IP

Burgi

which talk should i go to?

2018.manchester.wordcamp.org/session/…

bertieb

I am just looking at the logs- the services are defined and forwarded; ssh and synapse work; http, ssh on another port, openVPN are all timing out

Something definitely screwy going on

Would love to try pinging the internal IP from the router, but can't figure out if/how to do that yet

djsmiley2k

3:01 PM

What can you do with the router?

bertieb

"Assign a Game or Application" (port forwarding)

djsmiley2k

k

that should include applying nat, I agree.

is it just drop downs or do you type it in?

bertieb

option of either

Hmmm

So if I forward 2222 to the Xen server (port 22), ssh works

If I forward 2222 to the working synapse DomU guest, ssh works

If I forward 2222 to any of the other DomU guests that I've tried, it times out

Something's gone quite wrong here

(I can ping/ssh internally no problem)

Will put that issue to the side for now

Need to figure out why the D-I installed stretch DomU doesn't want to mount its root partition

@Burgi Both sound good

The security one sounds cooler

But the coding standards one sounds like it might also be useful

bertieb

3:53 PM

Welp

Changing from UDP to TCP sorted the "invalid packet ID" stuff in OpenVPN

I probably shoulda tried that before recreating the DomU guest from scratch

But hey ho, learning experience, something something something

That Brazilian Guy

@Burgi I'm jealous of your WordCamp.

@Burgi How did the image of you in pyjamas entered her mind, to begin with?

Burgi

@ThatBrazilianGuy we were talking about charlie and the chocolate factory

That Brazilian Guy

I don't remember any pajamas in the movie. Lots of tiny singing people, tho

Burgi

the grandparents in the bed

@ThatBrazilianGuy the company has bought me the ticket

That Brazilian Guy

I'm jealous of your company.

Well, I don't know internationally, but WordCamps here have quite cheap tickets.

Automattic pays for a lot of the costs.

I've been a volunteer for a couple WordCamps and part of the org team of two.

bertieb

4:09 PM

Speaking of people who use Docker being present

(he segued awkwardly)

Any firm recommendation for host distro?

bwDraco

roar

bertieb

I haven't used Alpine or Boot2Docker

bwDraco

I'm running openSUSE here.

Burgi

@ThatBrazilianGuy yeah the ticket is really cheap

bertieb

Desktop?

That Brazilian Guy

4:10 PM

Alpine is amazing. We use it as a basis for some images. Super, super, super minimalistic with a light footprint

bertieb

I'm looking at server / DomU here

bwDraco

Can be installed in text mode.

Burgi

i could have paid for it myself but i thought i'd see if the company would pay

bwDraco

Though the distribution is a bit heavy.

bertieb

@ThatBrazilianGuy No issues with non-glibc?

Will keep openSUSE in mind for future laptop install, haven't tried that in a while...

bwDraco

4:12 PM

It's very heavy as far as Linux distributions go, much heavier than Ubuntu FWIW. I'm not sure if that's okay with you...

The default desktop install is about 6 GB IIRC.

(though a minimal install can fit inside 1 GB)

It also requires more RAM to function. It'll run poorly with 512 MB of memory, unlike, say, Ubuntu.

bertieb

I'm interested in well-rounded distros- recently saw modern Mint (which I also haven't used in yonks) and it was quite cool to see the bells and whistles I don't have (prefer lightweight stuff)

Considering something to run on the oldish MBP I have

That Brazilian Guy

@bertieb Hm. We don't do anything too advanced with Alpine. Neither we build on top of it directly

We either use the "alpine" versions of some official images (elasticsearch, nginx, haproxy, node, etc)

bwDraco

Though oddly enough, it performs perfectly fine on a cheap netbook.

That Brazilian Guy

So I'm not even aware of these glibc issues you mention.

My sysadmin coworker just mentioned today he's using Alpine to power up this incarnation of our Rancher server.

bertieb

@ThatBrazilianGuy When I was searching, there were a few references to caveats of "it doesn't have glibc so some apps can be troublesome"

That Brazilian Guy

4:17 PM

He might know more, but he's a Linux super ninja guru

rahuldottech

@Burgi @JourneymanGeek

Look at the lag on this PC

rahul.party/files/VID_39940926_144424_423-9326.mp4

bertieb

Rancher's the one where everything is Dockerised?

rahuldottech

See the delay in CMD printing new lines of text

That Brazilian Guy

@bertieb Yeah, AFAIK it's really trimmed down and there might be some issues because of it.

bertieb

@ThatBrazilianGuy Hmm, not sure how nicely that'd play with Xen

That Brazilian Guy

4:18 PM

@bertieb No, Rancher is a Kubernetes orchestrator / GUI frontend

bertieb

@ThatBrazilianGuy Oh! RancherOS is a different thing?

Burgi

@rahuldottech looks ok?

That Brazilian Guy

You add baremetals or VMs as "nodes" to an infrastructure and it coordinates how the containers will be created and moved between those nodes.

@bertieb RancherOS is a small foot print, specialized distro aimed at being run as an OS for the Rancher nodes

bertieb

Ahh gotcha

Sounds fancy and all sortsa cool

That Brazilian Guy

Rancher can orchestrate Docker running on any (AFAIK) distro - Debian, CentOS, etc.

But apparently it runs better / smoother with RancherOS nodes.

bertieb

4:21 PM

Fair enough, ty for the explanation :)

Probably waaay overkill for what I've got here at home...

rahuldottech

@Burgi do you see how the 7zip window closes?

That Brazilian Guy

I was trying to instantiate one on @allquixotic's server before it just froze =/

And in the same period we tried building one here but two VM nodes were okay and one just borked itself pretty bad.

rahuldottech

You can see it pixel by pixel, line by line, from top to bottom

That Brazilian Guy

@bertieb Yeah, we want it for load balancing traffic and resources institution-wide.

bertieb

Sounds cool :D

That Brazilian Guy

4:24 PM

Yeah, we were / are really excited about it.

But it's not an official project, it's sorta rogue-ish.

bertieb

Ninja sysadmins

Getting the job done, no matter what the cost

(as long as it's not monetary cost)

That Brazilian Guy

"We can use our whole team of a dozen devs working for a few months with full dedication, or we can buy this tool for a few hundred bucks with a lifetime license" "Sorry, no budget".

bertieb

:-\

Must be heckin' frustrating

Burgi

looks ok

you could be running a crapload of things in the background

That Brazilian Guy

@rahuldottech Damn, son.

rahuldottech

4:41 PM

@ThatBrazilianGuy yeah, lmao

That Brazilian Guy

Wrong video drivers? Cryptomalware?

bertieb

Did you forget to feed the hamster in the CPU?

Burgi

you lose half you ram to the GPU so you might want to shove another stick in it

rahuldottech

@ThatBrazilianGuy 2006 era laptop with possibly borked GPU

That Brazilian Guy

a saga de um processador (completa)

►

Burgi

4:49 PM

wtf?

That Brazilian Guy

Flash animation from the early 00's.

It's nearly as funny without subtitles...

It "illustrates" the insides of a computer. Hence the reply to @bertieb

rahuldottech

5:05 PM

Whenever Windows talks about MB and GB, it's using mibi/gibibytes, right?

Burgi

yes

rahuldottech

Okay, thanks

Burgi

5:26 PM

off to a laravel meetup

ttyl

bertieb

5:39 PM

o/

Xen, y u no boot recent Arch kernels still?

(leaving for future bertieb to find in chat, tagged: arch boot broke ffs console 0x03)

That Brazilian Guy

Possible freelancing job today. I'm going to this meeting after work to set things up.

(I already did a previous job for this client it's quite probable I'll ne doing it)

bertieb

Bonne chance!

lil bit of Brazilian French for you there

rahuldottech

@ThatBrazilianGuy good luck!

bertieb

5:55 PM

More specific note to future!bertieb: kernel 4.7.11 works on whatever incarnation of xen you're trying to get Arch running on. You can't copy the kernel over, but download the package from the archive and you're good to go. Trust me, past!bertieb.

That Brazilian Guy

I'm worried the most about balancing the reduced hours for sleeping / personal life / chores / etc

bertieb

I think I need to alias xen create to lynx https://chat.stackexchange.com/transcript/message/46926503#46926503; xen create

That Brazilian Guy

Oooohhh speaking about Kernel. What about the news that contributors might remove code from the kernel due to the new code of conduct?

I found the whole mess so bizarre, the first mention of it made me think of fake news.

But apparently it is true.

bertieb

Wuhh

Seriously?

Can code be removed unilaterally?

That Brazilian Guy

Apparently GPL (not sure if only v2) allows for it.

I don't have any links in English to provide.

On totally unrelated news: with the end of winter, guess what happened again?

Yeah, the air con is broken, again.

We have this cycle that works like clockwork:

- Old air con units alling apart

- They break one by one between the end of winder and the beginning of summer

(or even all at the same time)

- We request new units

- "Sorry no budgetm, but we'll fix it real soon"

- Keep requesting for months

- "Soon! Real, real soon"

- Request more

- They finally fix it, except... It's already winter again.

Every. SWEARWORDING. Year!!!

Burgi

6:09 PM

sigh...

shouldn't have bought dinner, this place offers free pizza

That Brazilian Guy

Which place?

Burgi

ok thats creepy... they have the AV suite on and i'm the only in the audiotrium

i'm watching myself on the big screen

the laravel meetup place

i'm burning through battery at a huge rate

That Brazilian Guy

@Burgi No unused power sockets?

You could buy a power bank for your phone and devices.

@Burgi There's this PHP meetup tonight where they'll be offering free pizza.

I'm not sure I'll be able to attend as I'll be starting a meeting 90min prior on the other side of the city

Burgi

i found a plug

William

berbiteb mint is reallly nice. I am running Xubunu solely because of the askubuntu.com site and them accepting xubuntu but not mint questions

Burgi

6:17 PM

@William there is the general linux SE

William

unix/linux site seems less distro specific questions fit

but I guess there is a tag

That Brazilian Guy

They're just less popular. I've seen lots and lots of questions on AU where they're fit for any linuxes with very little to none edits needed.

IMHO the perfect QA site would be a merge of AU and Linux SE

I think AU only came to life as a partnership with Canonical back then

William

ubuntu was my first linux distro so having a newcomer separate site I

'm okay with

ubuntu seems to be the most popular for newcomers and well in general

I mean mac is unix should it be on unix.SE solely?

Burgi

its BSD

That Brazilian Guy

Also there's a separate mac SE

Burgi

6:33 PM

welp the AV link thing is broken

William

where?

I'm not sure what you mean

bertieb

> [bertieb@atlas ~]$ docker run hello-world
> Unable to find image 'hello-world:latest' locally
> latest: Pulling from library/hello-world
> d1725b59e92d: Pull complete
> Digest: sha256:0add3ace90ecb4adbf7777e9aacf18357296e799f81cabc9fde470971e499788
> Status: Downloaded newer image for hello-world:latest
>
> Hello from Docker!

hacker voice I'm in

Only took a day or so :P

@William I used to use Mint aye, but haven't really touched it in a while

Think I still have it on a VM somewhere

William

i despise the dock transition on regular ubuntu, xubuntu and mint are the only really sane choices for me

I used Ubuntu back before it was the worst parts of mac+windows.

bertieb

I haven't used Ubuntu on the desktop since... they were still in the first half of the alphabet the first time around?

Or something

Burgi

they've got the AV working

djsmiley2k

7:35 PM

av?

DavidPostill

7:55 PM

@djsmiley2k Audio-Visual?

Anti-Virus?

Adult-Video?

Aerospace-Vehicle?

djsmiley2k

8:38 PM

/me shrugs

Michael Frank

Alterac Valley thumbsup

rahuldottech

9:22 PM

@DavidPostill amazing-vomen in Russian accent, of course :)

bertieb

9:53 PM

@Bob Guacamole is cool!

(I've remotely knackered the router in front of the Synapse server by tring to enable IPv^ via telnet so messaging on here until I get that sorted or spin up a Docker version of the homeserver)

rahuldottech

Man

I don't like my life

bertieb

@rahuldottech More exams still to come?

Or something else?

rahuldottech

@bertieb last one for this month in four hours

bertieb

Good luck!

Nearly done at least, then you can forget about them for a short while at least

rahuldottech

Thanks

bertieb

10:01 PM

(I seem to have included a bonus 'at least' in there... probably a sign it's past my bedtime)

rahuldottech

@bertieb yep. Unless I failed any, which I almost certainly did. In which case

I'll get yelled at

And have to study and give them again in a week

bertieb

Don't count your chickens before they cross the road

Or sell yourself short

The results may surprise you

rahuldottech

@bertieb unlikely, but ok

I gotta go study

Bye for now

bertieb

o/

bertieb

10:26 PM

Hah!

them: is 10 the highest CVE score you can have? me: ? them: a website has unauthenticated, remote access via a single get request me: seems like a 10. them: which returns select * on a quarter million unencrypted credit card #'s. me: okay, maybe 11.

Tweeted by kennwhite on September 25, 2018 at 8:25 PM

3

Michael Frank

10:42 PM

That's not great...

bertieb

@MichaelFrank Yea, someone's gonna have a bad day

Probably several someones

Michael Frank

I think quarter of a million people might have a bad day...

bertieb

OTOH, the twitter replies are gold