To begin with, the "canonical" reference for KVM hypervisor tuning is still IBM's excellent Best Practices for KVM which I suggest you go through point-by-point.
Some things you will almost certainly want to do, after carefully testing with your intended workload:
Use virtio drivers in your Wi...
@cole not surprising... I had a very dear friend who died just a few weeks short of his 40th birthday. I'd known him since high school - not the same as a girl friend but he was the only person outside my family that knew me from those days... it's 2,5 years ago now but I always think of him around that time of year and I miss him.
@cole Mate - I'm not surprised. I have no romantic feelings for my ex, but I'd feel pretty fucking bad if she died tomorrow. That's horrible :( I don't think I recall knowing that
@JennyD It's funny how people stick in your mind - I had an old friend who hung himself. I'd not seen in him in the best part of 10 years, but it was still horrid and I still think about him lots.
@cole Missed the link, but urgh. Scary how delicate life is really
@HopelessN00b Yeah, I kind of think the only thing worse than dying in a car crash is surviving one where someone close dies - especially if you're at fault. That's going to stick with you forever
@JennyD yeah she's a gamer and pretty nerdy...and she's 29 so that's a plus for me since I tend to date in the 24-25 age range which has worked out terrible for me lol.
@JennyD I agree. Also, she's the oldest child and I'm the baby in my family. I tend to have dated only (and realized this last night) either the baby or the only child.
@cole Yeah - I feel bad for my wife at the moment because she hates the person she shares an office with. But, if she leaves (And I'd of course support her) that completely throws out our plans for getting a house next year
@cole yeah, I think the oldest child always has to take more responsibility and grow up faster... it's certainly the case with my older sister and with my husband
@cole I think it makes a difference if one can do something during the commute. (I can't because I drive, but at least I get to listen to a lot of podcasts I wouldn't otherwise get around to.)
@JennyD Train commutes are so different to car commutes - especially if it's a nice commute. For 3 months this year I did 90 mins each way, but on one train in first class and I used to get home feeling totally refreshed
Sometimes the server take very heavy, and I cant pass users to another one because the folders stop sync. I just need give more priority to DFS process to access HD free.
@JennyD I'm commuting just over 2 hours to London each way this week - I think that's pushed it too far. It'll be fine and nice to be at home overnight, but I don't think I'll make a habit of it
@Dan yeah, I wouldn't like that either... right now I usually have a ~45 minutes drive and I'm OK with that. But if I do get to change gigs I'll probably be taking the train instead, it'll be faster since the other place is a lot closer to the train station
Actually, when I was driving in to work this morning, I was thinking it was oddly empty on the road. Didn't complain, for obvious reasons, but what thinking to myself "where the hell's rush hour traffic???"
@JourneymanGeek Yeah yeah...seems to be the case these days, eh? I think these come with Windows 7, but there's a 8.1 sticker on the back of it and the only disk that came with it is for 8.1 Pro
haven't fired it up yet, but if I'm greeted with a Win8 startup it'll be a much longer day than I wanted it to be (we aren't ready in any shape or form for a Windows 8 deployment)
@DennisNolte well, xp/vista was a different beast, with all the additional security and stuff... but what's the difference 7 / 8.1 from an app dev standpoint?
@NathanC Perfect reason to covertly automate your environment. "Oh, upgrading 100 machines by hand will take me... weeeeks, but I guess we don't have any other choice. Guess I won't be around the office much until month. Let you know when I'm done." Then kick off a scripted solution, and enjoy a month's vacation.
Hey, @cole, since you have a similarly janky-ass environment... if some PC in it got infected with crypto ransomware... how would you track down which computer it is/was?
@84104 yeah, they only really had three choices; en-suite where you can just hide from the rest of the place, 12-to-1 bathroom chicken coops and what he wanted which was two rooms with a joint bathroom between them
@HopelessN00b Yes and no, he wants to be a professional historian, so I'll be supporting him forever I imagine but there you go
@cole Oh. Bummer. Our Websnese missed it, or it used a different vector, and we has no IDP. Guess It's back to using my brain to figure it out. I hate that.
@Chopper3 Oh, good taste. What I wanted to do. If he does military history, that's about the one specialty where you can write books that actually make piles of money... so you just might not end up supporting him forever after all.
I suppose if you know the addresses of the C&C servers for the ransomware you'd be able to pick out who was communicating with them, even if it was encrypted.
@HopelessN00b economic history - specifically post-war soviet/russian economic history - he wrote an extended project thing about the finances behind the russian side of the space race that got published
@84104 Nah, boat sailed already. Did its thing over the weekend, so the client isn't communicating over the network more than any of the other clients.
@84104 Probably not. Looks like I'll just have to scan a large list of computers for certain files.
@Chopper3 It might be a good idea to have a fallback (dual-major, for example). Served me well, once I realized that I'd rather eat the gun than fight my way through another 8 years of academia. :)
@84104 I suspect it's web-shit. We have to run IE with an old java version for compatibility with a lot of the "enterprise" craplications the business insists on using.
@Bob Exactly. To be completely honest, I'm kind of hoping that it'll happen one day to a C-level executive, or one of our DBAs, or someone else (that's not me) that would basically cause ALL THE THINGS!!! to get encrypted. All that might be enough to make them listen when I/we say "don't use this app, it's Java-shit."
@HopelessN00b for that whitelisting and/or a transparent proxy help me in previous companies. If none of that is possible you could allways add a hosts file you update via group policy (dunno if that is possible though)
@Bob Well, it's still IE. And a lot of enterprise craplications break with different versions of IE because their crappy code practices relied on a version-specific function or library.
@84104 Maybe, after this. Not likely, though. The problem we have is that we have two absolutely god-awful enterprise craplications that we must maintain compatibility with, which severely limits our policies on java and plugins, and even the IE version. Come to find out, one of these even delayed our Windows 7 migration by a couple years.
It's gotta be the corporate version of a woman who keeps taking her abusive ex back.
@Bob In this case, my money's on Java. I don't think IE will help. We're stuck on Java 6u29, and will be for some time... at least until we get of our crap time keeping and crap payroll (?) enterprise applications.
@Bob They are. IIRC, I related the story/profanely ranted about the user who our email filter caught giving a 419 scammer her SSN and bank account numbers.
@Bob I was actually reading an interesting analysis of them, talking about how the awful grammar and misspellings and all that was intentional. Kind of a crude filter to better select for victims who'll actually fall for the scam.
I built an SFTP server on Friday, sent the client the info....
first email of the day today
"So I did get connected, however there is a problem. Although it says sftp, its actually a ftp port 21 connection. Can you set up a sftp port 22 connection for us (with user and password) as this customer data needs to be sent on a sftp (ssh) secure encrypted data connection."
@Nick Heretic! vi is actually useful. (Although, I too, use nano, because... well, I also don't have 12,000 hours of my life to devote to learning how to use a text editor.)
cant decide if I'm going to just tell the guy "the damn port number is arbitrary, use it or im switching it to 65533" or just switch it to 22 to make him happy....
@MichelZ Already have AD. We've got other SQL servers. I don't like Zimbra, but I'm not about to change it for Exchange (I actually don't have anything I like better there). WSUS and SCCM seem handy. Not sure about SCOM, but I figure I have enough on my plate as it is.
The IPMI board on one of our servers seems to have become infected - we were hit by the "password in the clear" vulnerability - and it seems to have allowed something to have infected by a bot that launched a DDoS attack.
Right now, we've taken it off-line, and know how to prevent it re-occuring...
@MichaelHampton Not so sure about that. His brief mention of the exploit suggests it's just the IPMI board leaking the admin password... not an actual IPMI/firmware infection.
If I've got a shell, I can just mtd write and put whatever I want in the flash. The system would have to actually check the signature of whaever was flashed to be secure against this.
I guess I'm responding to what I just got in the mail...
Today marks the next step forward for Moore’s Law -- the new Intel Xeon E5-2600 v3 Processor Family has arrived! Packing more cores and more cache, these new processors bring new levels of performance to HPC, storage, and cloud workloads. In addition, DDR4 memory provides increased bandwidth and greater power efficiency, translating to a lower total cost of ownership (TCO).
Intel’s latest platform includes new features like 40GB Ethernet, faster QPI, and 40 lanes of PCIe per socket. Most platforms now also support 12GB SAS, and are ready for NVMe storage devices. These new systems, based o…
To begin with, the "canonical" reference for KVM hypervisor tuning is still IBM's excellent Best Practices for KVM which I suggest you go through point-by-point.
Some things you will almost certainly want to do, after carefully testing with your intended workload:
Use virtio drivers in your Wi...
Sometimes the server take very heavy, and I cant pass users to another one because the folders stop sync. I just need give more priority to DFS process to access HD free.
