Root Access

Bob

17:04

ughggggggh now I remember why I hate Java

XPathFactory!

FactoryFactory!

MikhailTal

17:16

Hello, anyone here with windows technical support experience

Bob

!!tell 23918818 meta

ChatBot John Cavil

@MikhailTal Please don't ask to ask; if you simply ask your actual question, we will help you if we know the answer or can help you find it. This is much faster and simpler than asking if it's OK to ask. As a rule, it is always OK to ask in this channel. Please go ahead.

MikhailTal

I have this very wierd internet problem

I can access the internet through tor browser

But not through chrome or other browsers

Bob

Step one: try ping 8.8.8.8 in the command prompt.

Should work.

MikhailTal

Ok

Request timed out

3 times

Bob

17:18

Huh. That's interesting.

MikhailTal

Yeah

Bob

What kind of network are you on?

Home network?

Work?

MikhailTal

School vpn

Bob

Ahhhhhhhhhhh that would do it

MikhailTal

I havent been blocked

I checked in another pc

My account is open

And tor works apparentyl

Bob

17:19

@MikhailTal When you say VPN - do you mean you're inside the school network, or do you mean you're tunnelling in from outside?

MikhailTal

Im inside

Not outside

Bob

Not a VPN then. Just inside the LAN.

VPN might include OpenVPN, PPTP, L2TP, etc.

They would complicate matters.

Anyway, school network explains the ping failure.

MikhailTal

The school calls it the School VPN

Bob

ICMP is probably blocked.

@MikhailTal The school has no clue what a VPN is.

MikhailTal

Probably

:p

Bob

17:21

Or you've misinterpreted them. One of those.

MikhailTal

Im sure they call it that

Its on the login page

Anyhow

Bob

A VPN (as commonly used) generally implies connecting two local networks over the internet.

MikhailTal

What can i do?

I know what a vpn is sir, not to be rude

Bob

Most likely? From school networks I've seen, they've probably got a captive portal.

And/or you'd need to send all your requests through the some forced proxy.

But it's hard to be sure - every network is set up differently.

MikhailTal

THing is

I was messing up with vpns today

Bob

17:24

1. Has this setup worked before?
2. Are you connecting your own personal laptop? If not - just get the school admins to fix it!
3. Do you know how you configured Tor?
4. Does Internet Explorer work? In my experience, IE tends to behave best with PAC/WAD proxies.

MikhailTal

Yes it has, it worked normally this morning

Im using a personal laptop

Bob

5. What exactly did you change?
6. Again, check DNS settings. Still a possibility.

MikhailTal

I just installed several vpn, checked if they worked

And after that, i uninstalled them if they didt

didnt*

Ill check internet explorer now

I dont know how i configured tor, i picked an auto route

Bob

Hm. Those VPNs might've stuffed the routing table.

Normally not permanent - have you tried restarting?

MikhailTal

I did

Twice

Might some settings have been configured?

Bob

17:26

route print

MikhailTal

Lotsa data

What do you need?

Bob

Ya, primarily interested in IPv4 Route Table

MikhailTal

How do i copy it?

Bob

Right click, click Mark, select (rectangle, not text...), hit enter.

Unless you're on Windows 10, in which case it's much easier.

MikhailTal

Windows proffesional x64

Bob

17:28

Ouch.

MikhailTal

working*

Bob

Could also try netsh interface ipv4 show route store=persistent and see what's there

MikhailTal

Windows 7 proffesional x64

It gave me some blank space in the cmd

Nothing more

Bob

hm

not even a default route?

...that would break tor

can you get the output from route print?

MikhailTal

Ill try

How do i copy it again?

Bob

17:33

5 mins ago, by Bob

Right click, click Mark, select (rectangle, not text...), hit enter.

MikhailTal

15...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
16...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.102.0.1 10.102.11.44 25
10.102.0.0 255.255.0.0 On-link 10.102.11.44 281

Umm, didnt come out so well

Bob

@MikhailTal hit ctrl+k (in the chat textbox) before sending the message

MikhailTal

15...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
16...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.102.0.1 10.102.11.44 25
10.102.0.0 255.255.0.0 On-link 10.102.11.44 281

Somewhat better

Bob

...that didn't work

HackToHell

Bleh have to memorize packet formats

Bob

17:35

@MikhailTal Hit ctrl+k after pasting, before sending.

Or click the "fixed font" button to the right

MikhailTal

 15...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
 16...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0       10.102.0.1     10.102.11.44     25
       10.102.0.0      255.255.0.0         On-link      10.102.11.44    281

Sorry :p

Bob

ya, that all looks pretty sane

@MikhailTal Did IE work?

MikhailTal

Im afraid not

I tried several sites

Of multiple types

Maybe reset internet settings?

Are you there sir?

Bob

@MikhailTal Can you check that Internet Options => Connections => LAN Settings => is set to "Automatically detect settings"?

MikhailTal

It isnt

Should i set it?

Bob

17:41

Yes.

See if that works.

(I'm still assuming your school does a PAC/WPAD thing. They might not.)

MikhailTal

Im afraid it didnt work

Bob

Try reconnecting to the network? WPAD discovery happens with DHCP, I think

MikhailTal

I might lose you

Bob

ahh

MikhailTal

What?

Bob

17:44

nothing, sorry

MikhailTal

Should i or not?

Bob

anyway, my current guess is something with WPAD => en.wikipedia.org/wiki/Web_Proxy_Autodiscovery_Protocol

hard to be certain

does your laptop work with other networks?

at home?

MikhailTal

Test

If you can read this, please respond

Bob

yea

MikhailTal

Okay

It didnt work

Any way to reset the itnernet settings to all default?

Bob

17:47

@MikhailTal Nothing that global, unfortunately

gimme a second

MikhailTal

Okay

Bob

I mean, you could reset IE settings. But that's probably not related at this point.

MikhailTal

I have tor for emergencies, so i can wait as long as needed

Bob

You could reset your adapter settings. Again, probably not related.

Make sure you don't have any VPNs configured (Internet Options => Connections tab)

Also, see if you can connect to 216.58.220.142 in your browser.

MikhailTal

I checked

Bob

17:49

Wait, bad example.

MikhailTal

No vpns

Bob

Try 190.93.245.58

Should bring you to a Cloudflare error page, hopefully.

MikhailTal

Trying on chrome

Cloudfare error

Bob

Ok. Your DNS is mis-set.

allquixotic

oh boy...

the slimerjs community is talking about createWindowlessBrowser() again

Bob

17:51

Go to your IPv4 settings (you know how to get there?) and set it to automatically detect the DNS

MikhailTal

I dont

Sorry

Can you please show me?

Bob

@MikhailTal windows.microsoft.com/en-au/windows/…

It has pictures! :P

allquixotic

WOOHOO

@Bob my Haswell SP-128 is installed

Bob

\o/

allquixotic

and I'll be contending with software RAID-1 on ZFS rather than hardware RAID-5 on LSI

I expect it to be much more stable

Bob

17:53

ZoL, though...

allquixotic

meh

Bob

lol

allquixotic

it's been around for two years

Bob

I haven't had issues yet

allquixotic

two years to change up maybe 20% of the code?

Bob

17:53

though if something does get corrupted I probably won't notice

allquixotic

the vast majority of the internals can stay once they verify semantic correctness of whatever it does

Bob

@allquixotic ...that's not very long

allquixotic

and then all the kernel-independent pure "algorithms" in C remain as-is

(ARC algorithm, etc)

Bob

@allquixotic Did you get them to install the flash drive?

Or are you planning to run the SSDs raw (or on md-raid)?

allquixotic

@Bob not yet. do I absolutely need one?

md-raid is ugh

Bob

17:54

@allquixotic You need a non-ZFS boot drive.

allquixotic

what size flash drive is the smallest acceptable? OVH has a 16gb smallest

Bob

Could just chuck it on a little partition if you want. But then you depend on that drive for boot.

@allquixotic <100mb :P

@allquixotic If you wanted to try GRUB, you could boot straight form ZFS

MikhailTal

@Bob its giving me an error

at ipv6

Bob

@MikhailTal ...do IPv4, not IPv6.

MikhailTal

It says i need a network adapter card

Bob

17:56

Leave IPv6 alone unless you know what you're doing.

@allquixotic I believe there was a ZFS implementation for GRUB stage 1/1.5

but I couldn't get it to work

In fact, I couldn't get GRUB stage 2 to work with ZFS either

MikhailTal

@Bob Thank you sir for your help

@Bob it worked

Bob

Great!

MikhailTal

@Bob I wish you a good day/night!

Thank you again

Bob

@MikhailTal You too. Have fun.

MikhailTal

@bob

cya

Bob

17:57

@allquixotic Also, the limit for the EFI partition is something like 400 MB on Supermicro

allquixotic

@Bob okay, so a boot volume using something like xfs

Bob

@allquixotic I think I just did ext2. Or maybe it was fat32.

ESP, silly me

Oh yea it was fat32

allquixotic

I'd like to use an FS that's in the mainline Linux kernel that also supports checksumming... but I think only btrfs and ZFS do it properly

Bob

@allquixotic you must use fat32 if you're doing it my way (EFI)

allquixotic

OR

ahh

Bob

17:59

if you use GRUB you can choose

but you need to figure out GRUB :P

I couldn't

maybe the Ubuntu one works better

there's a bunch of issues on github about the brokenness of GRUB for ZoL

might've fixed some in the last few months

allquixotic

I could write a script that hooks into the process for installing a new kernel that sha1sums the installed binaries, and periodically (daily?) read out the sha1sums and recompute them to do a kind of active policing on the data integrity of the flash drive, so that if there's a bit flip, it'll detect it, and I can alert OVH

not as reliable as putting the kernel on ZFS, but better than nothing

Bob

@allquixotic My doc I sent you includes a bit about post-kernel-update copying. You can stick a sha1sum in there.

allquixotic

nice

it'll just be kind of an alert to me that "hey, you can't reboot or this system will fail to boot"

at least without a hardware RAID card, the reboot process will be significantly faster

Bob

step 22 there => gist.github.com/Elusive138/f3eb7ac4d6473ae54f14

allquixotic

> Dear Customer,

Please note that our technical teams will intervene on your server !!no in 15 minutes in order to carry out the following intervention:

USB key add

Regards,

OVH Support

Bob

18:04

@allquixotic Hope they don't knock out your IPMI while they do that :P

allquixotic

let's hope it doesn't take them 3 days like last time

eh, I'm not doing anything on the box right now, not even IPMI

Bob

@allquixotic Referring to how they broke my IPMI :P

allquixotic

@Bob ahh

I remember that lol

should I reply and say "please check the IPMI connection after you put the USB drive in"?

:D

Bob

heh

allquixotic

I briefly contemplated sticking Solaris 11 on there, which is basically the king of storage, but then to have all my apps running on Linux (branded lx zones are gone in Solaris 11) I'd have to run VMs, and the overhead of that will probably counteract the storage performance gains

Bob

18:07

@allquixotic There's a PPA for Ubuntu => github.com/zfsonlinux/pkg-zfs/wiki/…

allquixotic

if ZoL works even 80% as well as Solaris 11's latest proprietary improvements, and I can run containers, there's a net win

Bob

Apart from that it's mostly similar to Debian

allquixotic

@Bob I used that PPA before on my existing server, except that my ZFS pool was inside a partition, and boot and / were xfs

tiny ESP, tiny /boot, a few dozen gigs for /, and terabytes of /z

then symlinks from big stuff in / to /z/...

I can't do that on my new setup though

Bob

Well, you could, but you'd have no rootfs redundancy.

You have no boot redundancy anyway but it's a fairly easy rebuild :P

And you should be writing to the flash drive very sparingly so the chance of failure is minuscule.

allquixotic

could I do md-raid RAID-1 for, say, 25 GB on both HDDs, and stick XFS on there and do a perfectly bog standard boring install there, then use the remainder of each disk for the ZFS pool?

Bob

18:10

Probably?

allquixotic

that eliminates the ability to use wholedisk though :S

Bob

Another option is to manually mirror a rootfs on the HDDs

allquixotic

is wholedisk perf that much better?

Bob

@allquixotic on ZoL? not at all

allquixotic

ahh

Bob

18:11

ZoL technically doesn't support wholedisk. yet.

allquixotic

how about sector alignment etc? could that be an advantage of going whole disk ZFS?

Bob

I just did it that way (a) for simplicity and (b) for rootfs checksums

and (c) for flexible rootfs size

allquixotic

anyway I already ordered the flash drive :P

Bob

@allquixotic If you create aligned partitions then it doesn't really matter

allquixotic

let's see if OVH "intervenes" on time

and stops intervening within a reasonable time

Bob

18:13

@allquixotic Also, that's what the ashift param does

still getting random brief pauses on the BT speaker

allquixotic

mhm

screen on or off?

Bob

off

I wonder if I should reflash back to stock (4.0) to make sure

(it's a junk phone anyway)

allquixotic

18:35

Best Diesel Engine Runaway 2014

►

allquixotic

19:03

> Dear Customer,

The intervention on !!no

This operation was closed at 2015-09-06 14:55:29

Here are the details of this operation:
USB key add

If you need any further information regarding this intervention, please do not hesitate to contact our technical support.

Regards,

allquixotic

19:40

new chipset - supermicro.com/products/motherboard/xeon/c600/x10sri-f.cfm

Michael Frank

20:57

@allquixotic Oh, they finally managed to install your USB?! :o

allquixotic

@MichaelFrank new box

Michael Frank

@allquixotic Ahh okay.

Journeyman Geek

23:59

wee

As of today, I've been on SU 6 years ._.

7

Transcript for