main June 2024

main@lists.alug.org.uk

6 participants
6 discussions

Re: VPN options
by Mark Rogers 09 Jul '24

09 Jul '24

On Thu, 13 Jun 2024 at 11:08, BD <dzidek23(a)gmail.com> wrote: > An example that I have seen working was a ZTNA configuration with Fortinet hardware and SDN for network separation. That sort of thing will be out of my budget! > I suspect the same thing could be achieved using pfSense and network management (with > a nice GUI to control it). Quick search on the Internet for "pfSense zero trust" returned a > few interesting sites. Additionally pfSense can serve as a VPN concentrator too. I spent a bit of time looking into this. The biggest issue for me is that it's FreeBSD and most of our stuff is hosted at DigitalOcean, and they no longer offer FreeBSD as an option. I can of-course look elsewhere, but DO combine the bandwidth of all your services and we're nowhere close to using it all, so putting a VPN which could potentially be fairly heavy traffic somewhere it can use that bandwidth makes sense if I can. I spent ages playing with Wireguard - there are some useful tools for building the config ([1], [2]) but I never got a configuration which worked properly with my phone over mobile data (or my laptop using mobile data over a hotspot) and as that's one of the main things I needed to achieve I ended up walking away from my attempts (in part because I managed to get the old SSL-based VPN working over those connections by turning off "FastSSL". I'd like to get this working at some point but a day and half of experimenting and getting nowhere useful was as much (more if I'm honest) as I could afford to allocate to it. [1] https://www.wireguardconfig.com/ - Configuration builder [2] https://github.com/mvpsnet/wireguard4vps - PHP-based manager -- Mark Rogers // More Solutions Ltd (Peterborough Office) // 0344 251 1450 Registered in England (0456 0902) 21 Drakes Mews, Milton Keynes, MK8 0ER

3 6

OT Firefox 125 won't show me btl comments
by Bev Nicolson 17 Jun '24

17 Jun '24

Or at least, Firefox 125 and onward on Linux Mint won't show much content under a Guardian article, nor can I sign in. All I see is a kind of swirly whiteness like it might be trying to load but can't. It's fine on my tablet. I have tried it in safe mode and tried clearing the cache. I have no idea what else to do. Bev

2 2

Re: LSI megaraid recovery
by Phil Ashby 17 Jun '24

17 Jun '24

On 15/06/2024 12:00, Laurie Brown <laurie(a)brownowl.com> wrote: > ... > Disk /dev/mapper/ddf1_RAID10: 931 GiB, 999653638144 bytes, > 1952448512 sectors > > Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): > 512 bytes / 512 bytes > ... > Device Boot Start End Sectors Size Id Type > /dev/mapper/ddf1_RAID10-part1 1 4294967295 4294967295 2T ee GPT > ... > So it has a partition - but I can't find a way to mount it.> > mount /dev/mapper/ddf1_RAID10-part1 /mnt/test mount: /mnt/test: > special device /dev/mapper/ddf1_RAID10-part1 does not exist. Hi Laurie, I'd guess that whatever distro you are running doesn't like the GPT partition format, so hasn't created the device file(s) for each partition. I'd go for the simple option of creating a loopback device using the sector size & offsets in the partition table: # losetup -o 512 -b 512 -f /dev/mapper/ddf1_RAID0 This should make you a new /dev/loop<n> that avoids existing ones (probably your USB boot stick), which you can mount as NTFS or whatever. If losetup doesn't like having a block device underneath, then more messing with dmsetup should be able to achieve the same (but I've never done that...) Good luck, Phil. PS: Did you check in /dev/disk/... for those partitions?

2 5

LSI megaraid recovery
by Laurie Brown 14 Jun '24

14 Jun '24

I'm at my wits' end on this one, folks, and I could do with some help please. This is all for a customer who is desperate to get this data back... I have an LSI RAID card (Broadcom MegaRAID SAS 9341-4) which has suddenly stopped working. I've been to hell and back trying to get a couple of newer machines to recognise the card and let me near the BIOS. In fact, this card has been working as a 4-disc RAID10 array for more than a year in a 'Doze 11 machine but just stopped a couple of weeks ago. I bought a new card, a different mobo, new cables, the lot. Nothing. The customer shipped me the original machine so I have access to all that was there before. I eventually found an older (Ubuntu) machine in my junk pile in which the PCIe slot let me into the BIOS so I recovered the RAID array, but the megaraid_sas driver in Ubuntu refused to work, so I couldn't access the data. I won't go into the pain involved in getting to this point, but it was extreme and lengthy! I have finally given up on the card, and dropped the 4 drives straight into an Ubuntu box, where I'm trying to get to the data. What I have now is the four disks all seen by the system, and a /dev/mapper device which is the RAID array. ---- cut here ---- # blkid /dev/sda: UUID="LSI ^P" TYPE="ddf_raid_member" /dev/sdb: UUID="LSI ^P" TYPE="ddf_raid_member" /dev/sdc: UUID="LSI ^P" TYPE="ddf_raid_member" /dev/sdd: UUID="LSI ^P" TYPE="ddf_raid_member" /dev/sde1: LABEL_FATBOOT="Windows USB" LABEL="Windows USB" UUID="8B53-C0AB" BLOCK_SIZE="512" TYPE="vfat" PARTUUID="a85d43c9-01" /dev/loop0: TYPE="squashfs" /dev/mapper/ddf1_RAID10: PTTYPE="PMBR" ---- cut here ---- /sde1 is the USB stick I booted from. fdisk -l gives me 2 mapper devices: ---- cut here ---- Disk /dev/mapper/ddf1_RAID10: 931 GiB, 999653638144 bytes, 1952448512 sectors Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disklabel type: dos Disk identifier: 0x00000000 Device Boot Start End Sectors Size Id Type /dev/mapper/ddf1_RAID10-part1 1 4294967295 4294967295 2T ee GPT ---- cut here ---- fdisk on the mapper devices says this: ---- cut here ---- Disk /dev/mapper/ddf1_RAID10: 931 GiB, 999653638144 bytes, 1952448512 sectors Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disklabel type: dos Disk identifier: 0x00000000 Device Boot Start End Sectors Size Id Type /dev/mapper/ddf1_RAID10-part1 1 4294967295 4294967295 2T ee GPT ---- cut here ---- So it has a partition - but I can't find a way to mount it. mount /dev/mapper/ddf1_RAID10-part1 /mnt/test mount: /mnt/test: special device /dev/mapper/ddf1_RAID10-part1 does not exist. ---- cut here ---- ---- cut here ---- mdadm --examine /dev/mapper/ddf1_RAID10 /dev/mapper/ddf1_RAID10: MBR Magic : aa55 Partition[0] : 4294967295 sectors at 1 (type ee) ---- cut here ---- Any help appreciated! Cheers, Laurie. -- --------------------------------------------------------------------- Laurie Brown laurie(a)brownowl.com ---------------------------------------------------------------------

1 0

VPN options
by Mark Rogers 13 Jun '24

13 Jun '24

The scenario: Two individuals both with fast home Internet connections, plus an office on a pretty basic VDSL connection. All three have distinct subnets. Routers in all three locations have VPN support. The home ones support OpenVPN and Wireguard, the office OpenVPN only, but I'd consider replacing the router if it gave us what we needed. Objective: I want to link all three locations so that IPs on each network can be reached from the others, but in a configurable way. Ie neither individuals home devices should be accessible to the other individual (albeit they may use the VPN themselves to access them personally). Some office-based resources may not be shared. Etc. How can I do this? I'm assuming I'll get a cheap VPS somewhere to act as VPN server and have all three routers connect to that, and after that it's "just" a question of managing access and routing. But I need the result to be maintainable and ideally not just by me, which would mean either some kind of GUI or some really simple commandline tools. When I started looking at this I figured there'd be some simple appliance-type applications I could install on the VPS that would do this but I've come up short so far. I don't have any real budget for this - I'm OK with a few quid a month on a VPS and likewise on a subscription service if I have to go down that route (I'd rather not). (We do already have an office dial-in VPN option which could be used on the routers but I don't think putting all our domestic devices into one bit VPN is a good idea for all sorts of security reasons.) -- Mark Rogers

2 1

Re: KVM shared folders (Mark Rogers)
by peter.northerly＠gmail.com 03 Jun '24

03 Jun '24

I am finding this a very useful point of research for these kinds of question. Not always right, but it mostly gets you there if you persist. https://www.perplexity.ai/search/how-to-set-rxsxMNWDRjeuwX3WssHVRQ

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

main June 2024