Come to the vi side, no straights or drags. (And just as terrible to use for every starter as emacs is ;) )

Sorry, had to have the 1st vi post. ;D

At home, nagios, at work colleagues. (I finally escaped the admin rat race)

You forgot something…

• firewalld
• network manager

My work is done… 666

I have a Squeezebox Classic, so I started with Logitech Media Server. It’snnow slimserver (open source), so I use that. However, it’s pretty end of live, so I’m lookingbfora replacement as well for my player. (Love the device)

Sorry, totally forgot apparmor. On debian that thing can be nasty, I had to fix those rules as well for bind That was years ago and was added to my Puppet module, so I forgot.

It’s a better way, but not fool proof. I always keep root available for console login. (Saves booting from external media when there is an issue) For the rest, sudo is perfect though, but it doesn’t replace root login in 100% of the situations.

I don’t trust btrfs. Software that relies on not breaking is b0rken in my opinion. (Unless they finally fixed that)

Then those disks should have been wiped at the company before they were allowed to leave the building.

In defence, the power prizing here is a tad different, €0.45/KWh was the prize here. Also, when those disks are given away, they are usually smaller then the current standard and less efficient. On the other hand, those enterprise grade disks generate some heat, saving on the heating bill.

Sell them and buy low budget low power consumption disks that would fit my purpose.

Enterprise-grade usually has enterprise-grade power consumption. From the power saving alone you can buy nice stuff.

Nah, to much work, use curl to download a script and blindly run it…

Second that. I’m glad RPis are finally supported.

You need to include the files in the zone file. Bind 9.18.18 is a mess with the changed DNSSEC setup, it broke my domains as well. I’t isn the bind documentation, so I have to refer you there. I have no access to my setup now (or my browser history) as I’m not at my computer.

Edit: managed to get in dns.

named.conf.local: zonefile needa to be the .signed file the unsigned zone file must have both keys included, best is via absolute path:

$INCLUDE "/etc/bind/keys/example.com.123456.key"

for both the ZSK and KSK keys. The include is to get the RRSIG entries.

When you have to do something once, do it manually, when you need to do it more often, script/code it.

Oh, and coding is much more fun then manual labour.

Same feeling, although on some systems you need the non-free firmware to complete the installation. No screen or network is a tad annoying when installing. ;)

What is bad about it? It’s as fool proof as the RedHat installer, unless you go to the expert text mode one. (And even that is pretty straight forward)

Why would you want to disable root?

Remote root login is disabled by default, local root disabeling is useless anyway, as when you have acdess to the physical system you can break it open anyway.

Then still you can set Linux as default. Lilo had an option to reboot with an option to set a 1 time default. (that was neat) On dual boot hardware, I always set the one I want to default boot, which is in my case always Linux. (must still have a dual boot laptop somewhere)

Ubuntu has been around for 2 decades (close nough, octobet it’s 2 decades) and yes, Debian is 11 year older and now known for it’s desktop friendly use. That Debian caught up in the last decade is about time, but to late for the major population who want linux but not the hassle of manually configure the graphics environment.

To be honest, I see that most people of 30 and younger don’t know or care how a computer (or anything) works, it just works.

I’ve setup my email via a VPN to my own server.

• DNS, mail, business web, cusromer web on VPSes (2, 1 primary, 1 secondary DNS only)
• Personal email, incoming and outgoing via VPS, personal websites (all static) on local system (RPi 4 8GB)

This gives the advantage that your outgoing email always comes from the VPS ip address (pick a VPS provider that is trusted) and when your line is down, incoming email is cached on your VPS. It’s a tad of double work, but pretty secure. Even connecting to my employer to work from home is not a big issue. (and that connection is limited to it’s own vlan)

Also, with this method, you can route the mail into your network via port 26 when 25 is blocked or even set an outgoing vpn to your VPS and route the email that way. You’ll be provider independent at home. (I even have a private ipv6 /48 via a tunnel broker)

You’ll need to work a lot on your knowledge though, without DNSSEC, SPF, DKIM and DMARC the big 2 (Google and hotmail) will refuse your email.