https://blog.stderror.net/ Recent content on stderror Hugo -- gohugo.io en-us Sat, 27 Jun 2020 16:07:08 +0100 https://blog.stderror.net/post/debian-disable-systemmails/ Sat, 27 Jun 2020 16:07:08 +0100 https://blog.stderror.net/post/debian-disable-systemmails/ Debian often send you local mail for updates or stuff like this, because I find it really annoying, if I get mail notification in my shell. This is stuff from the 80s and no longer needed on mordern system. To disable the local mails I just set a blackhole alias for my user to drop all this mails. I used this with the default debian exim config. Here is my /etc/aliases https://blog.stderror.net/post/auto-apt-update/ Wed, 01 Apr 2020 00:00:00 +0000 https://blog.stderror.net/post/auto-apt-update/ I had always the problem that my system don’t show me if updates are available. The most online howto just install the unattended-upgrades tool. But I don’t want to automatic install updates because I am running debian unstable and I want to have the control over my system. The good thing is that everything you need for this is already installed on a debian system. You just have to configure it. https://blog.stderror.net/post/dotfiles-zsh/ Sun, 08 Mar 2020 09:53:40 +0100 https://blog.stderror.net/post/dotfiles-zsh/ I am switch now a couple of years from bash to zsh and never regrets the decision. Even apple move finally in 2019 from bash to zsh. The probaly biggest advantage from zsh are the many community projects build with and around them for example oh-my-zsh. I also started with oh-my-zsh I used it your one or two year after that I go with a more homebrew solution. zinit I my current setup I use zinit as plugin manager. https://blog.stderror.net/post/dotfiles-vim/ Sat, 07 Mar 2020 11:53:40 +0100 https://blog.stderror.net/post/dotfiles-vim/ I change vim plugin manager form pathogen to vim-plug, because I want some plugin manager here that is still under active development. Also I want do get ride of the git submodules for all vim plugins. I search a bit around in the web and take the descision to go with vim-plug. What I like on vim-plug is that I can simple install and update the plugins direct in vim. https://blog.stderror.net/post/migrate-from-x-to-wayland/ Sun, 01 Mar 2020 11:53:40 +0100 https://blog.stderror.net/post/migrate-from-x-to-wayland/ I have watched the wayland now already for a long time. But I was afraid to switch on such a importent configuration in my desktop setup. Because I used i3 for long time now, because of that I want to switch direct to sway, but I don’t want to keep track of a self compiled sway, so I waited until sway get in Debian testing. This finially happens in the last month. https://blog.stderror.net/post/sonos-diffrent-subnet/ Sun, 19 May 2019 10:06:08 +0100 https://blog.stderror.net/post/sonos-diffrent-subnet/ I don’t want to have my new Sonos One in my private LAN. Because Quest should also able to play music over the Sonos. So I place the Sonos in my IoT LAN. To make Sonos work across diffrent networks you need to do the following taks on your router. I use a simple Debian Linux system as my Router. With this I am very flexible in my setup. Here I will show the steps I did to make my Sonos working across VLANs. https://blog.stderror.net/post/deploy-hugo-websites-with-travisci/ Sat, 27 Apr 2019 18:06:08 +0100 https://blog.stderror.net/post/deploy-hugo-websites-with-travisci/ As I described in my Blog Post earlier. I make my websites with Hugo a static website generator written in go. I the last post I write how to deploy the website manually to S3. In this post I will show you how to build the site every time you push something to the repository and push it automatically to S3. I use Travis Ci to do the automted build and upload to S3. https://blog.stderror.net/post/i3-lock-sleep/ Sat, 27 Apr 2019 10:06:08 +0100 https://blog.stderror.net/post/i3-lock-sleep/ I have two method to lock my screen. One is to close just the cover from my T480. And the second is to just press and hotkey. i3lock I use the i3 own screenlocker tool i3lock. It is really soild and only do the needful. Nothing more no bloat. There the basic i3lock command I use: i3lock -i ~/.config/i3/lock.png -f -i give the picture shown from i3lock -f show the number of failed attempts Lock i3 with hotkey I simply bind the lock function to F12. https://blog.stderror.net/post/bose-qc35-bluetooth/ Sat, 27 Apr 2019 10:06:08 +0100 https://blog.stderror.net/post/bose-qc35-bluetooth/ I want to configure my new Bose QuietComfort 35 II to use them as bluetooth headphones on my Linux laptop. Bluetooth On my debian buster laptop I had no problem to pair the the QC35 II with the laptop. I just us the default blueman configuration. Pulseaudio To switch the sound after connect directly to the bluetooth headphones. I just placed one line in in the pulseaudio configuration. load-module module-switch-on-connect Headset I don’t really get the QC35 II satisfactorily working for me. https://blog.stderror.net/post/startup-linux-desktop/ Sat, 27 Apr 2019 10:06:08 +0100 https://blog.stderror.net/post/startup-linux-desktop/ I will just explain how my laptop startup look like. One boot process from grub to login. I use Laptop only for me so I don’t have to take care for multiuser. I try no make the boot process as minimal as possible. And require as well user interaction as possible. Grub First of all I will use grub as my bootloader to load Linux itself. I setup the grub timeout to 0 get get a faster boot time. https://blog.stderror.net/post/installing-linux-on-t480/ Tue, 19 Mar 2019 10:06:08 +0100 https://blog.stderror.net/post/installing-linux-on-t480/ My setup I prefer a really minimal desktop setup. This give me the possibilty to understand most of my enviorment and in case of problem I can fast find and solve the problem. Antoher advantage is that I have more RAM free for caches and buffers, this makes the system even faster. I don’t use a display manager. I just use i3 as my Window Manager. To manage my network connections I use NetworkManager. https://blog.stderror.net/post/time-for-a-new-laptop/ Tue, 05 Mar 2019 10:06:08 +0100 https://blog.stderror.net/post/time-for-a-new-laptop/ After over 8 years of use it is time to send my old MacBook Pro(2010) in pension. At time to have a look on the new notebooks on the market. After some month of research I have finial my new Desktop Setup and I go with Linux on the Desktop. New desktop setup My new laptop is a Thinkpad T480 with Debian running on it. There a some facts over the laptop: * Intel i5 8250U (8 cores) * 16 GB of RAM * 512 GB of NVME Storage * Intel Graphics 620 https://blog.stderror.net/post/edgerouter-vpn-setup/ Wed, 15 Aug 2018 00:00:00 +0000 https://blog.stderror.net/post/edgerouter-vpn-setup/ VPN setup I setup an VPN with PSK for host authentication. set vpn l2tp remote-access ipsec-settings authentication mode pre-shared-secret set vpn l2tp remote-access ipsec-settings authentication pre-shared-secret PSK Configure a network range remote clients. set vpn l2tp remote-access client-ip-pool start 192.168.200.100 set vpn l2tp remote-access client-ip-pool stop 192.168.200.199 I have a PPPOE internet connection so my IP changes sometimes, because of the I configured the IPSec Interface listen to all IPs. https://blog.stderror.net/post/edgerouter-dyndns-setup/ Tue, 14 Aug 2018 00:00:00 +0000 https://blog.stderror.net/post/edgerouter-dyndns-setup/ I use the free cloudflare DNS service for my private domain. I also want to use this for my dynDNS setup. I the last year ubnt have updated the ddclient on the edgeOS for the cloudflareV4 API. Now the setup work easy out of the box. Just you the following snippet: set service dns dynamic interface pppoe0 service custom-cloudflare protocol cloudflare set service dns dynamic interface pppoe0 service custom-cloudflare host-name FQDN_to_update set service dns dynamic interface pppoe0 service custom-cloudflare login CLOUDFLARE_USER set service dns dynamic interface pppoe0 service custom-cloudflare password API_KEY set service dns dynamic interface pppoe0 service custom-cloudflare options "zone=YOUR_ZONE use=web ssl=yes" At the end save the configuration and you are done. https://blog.stderror.net/post/edgerouter-base-setup/ Mon, 13 Aug 2018 00:00:00 +0000 https://blog.stderror.net/post/edgerouter-base-setup/ I use since some year the edgerouter lite from ubnt. I am total happy with this device it have a solid performace and is really feature rich. The core OS is OpenSource. Today I will you some of the basic configuration for an edgerouter. I did my configuration mostly over the CLI. So simple login to your router via ssh. To go in the configuration mode you need to typ: https://blog.stderror.net/post/edgerouter-vdsl-setup/ Mon, 13 Aug 2018 00:00:00 +0000 https://blog.stderror.net/post/edgerouter-vdsl-setup/ My ISP is the Telekom in Germany. I use a drytek modem in front of my edgerouter. prepare the Interfaces First of all I preapre all interfaces on my edgerouter. My Interfaces: eth0 => to modem eth0.7 => internet connection eth0.8 => TV streaming eth1 => managment eth2 => wifi AP eth2.37 => private LAN eth2.50 => guest LAN eth2.101 => Internet of things LAN set interfaces ethernet eth0 vif 7 description 'DSL' set interfaces ethernet eth0 vif 7 mtu 1500 set interfaces ethernet eth0 vif 7 pppoe 0 default-route auto set interfaces ethernet eth0 vif 7 pppoe 0 mtu 1492 set interfaces ethernet eth0 vif 7 pppoe 0 name-server none set interfaces ethernet eth0 vif 7 pppoe 0 user-id 'XXXXXXXXXXXXXXXXXXXXXXXXXXXX@t-online. https://blog.stderror.net/post/fortinet-cheatsheet/ Sun, 18 Mar 2018 09:18:04 +0100 https://blog.stderror.net/post/fortinet-cheatsheet/ Hi, this is my fortinet CheatSheet created for version 5.6: General Information NTP Status diagnose sys ntp status ARP table diagnose ip arp list routing table show active routing table get router info routing-table all show all configured routes get router info routing-table database show NAT table get system session list VPN Phase1 show phase1 diag vpn ike gateway list name <name_of_phase1> clear phase1 diag vpn ike gateway clear name <name_of_phase1> Phase2 show phase2 diag vpn tunnel list name <name_of_phase1> bring phase2 up/down diag vpn tunnel up <name_of_phase2> diag vpn tunnel down <name_of_phase2> reset phase2 diag vpn tunnel reset <name_of_phase1> show vpn logs diagnose debug reset # reset the debug settings diagnose vpn ike log-filter clear # clear the logfilter diagnose vpn ike log-filter dst-addr4 <REMOTE_VPN_GATEWAY_IP> # set a filter to only show logs to the given gateway diagnose debug app ike 255 # set the IKE log level to 255 (loglevel below) diagnose debug enable # enable the debug log diagnose debug disable # disable the debug log IKE log level -1 or 255 means all message of debug in Phase1/2. https://blog.stderror.net/post/backup-personal-computer-with-arq/ Sun, 07 Jan 2018 11:33:20 +0100 https://blog.stderror.net/post/backup-personal-computer-with-arq/ I use the backup tool arq to backup my data from my computers to the cloud. With arq you only buy the backup software. So you can choose and switch the cloud provider as you like. Arq exists for Mac and Windows. Where to store the data Arq support a lot of cloud storage provider here a list of the supported providers: Amazon Cloud Drive Google Drive Dropbox OneDrive https://blog.stderror.net/post/limit-s3-access-to-cloudflare/ Tue, 02 Jan 2018 14:30:16 +0100 https://blog.stderror.net/post/limit-s3-access-to-cloudflare/ To limit the access to your S3 website buckets to the cloudflare network you can simple add the following Bucket Policy { "Version": "2012-10-17", "Statement": [ { "Sid": "PublicReadGetObject", "Effect": "Allow", "Principal": "*", "Action": "s3:GetObject", "Resource": "arn:aws:s3:::your.bucket.name/*", "Condition": { "IpAddress": { "aws:SourceIp": [ "103.21.244.0/22", "103.22.200.0/22", "103.31.4.0/22", "104.16.0.0/12", "108.162.192.0/18", "131.0.72.0/22", "141.101.64.0/18", "162.158.0.0/15", "172.64.0.0/13", "173.245.48.0/20", "188.114.96.0/20", "190.93.240.0/20", "197.234.240.0/22", "198.41.128.0/17", "2400:cb00::/32", "2405:8100::/32", "2405:b500::/32", "2606:4700::/32", "2803:f800::/32", "2c0f:f248::/32", "2a06:98c0::/29" ] } } } ] } https://blog.stderror.net/post/aws-billing-alert/ Sun, 12 Nov 2017 16:19:35 +0100 https://blog.stderror.net/post/aws-billing-alert/ Because aws has no billing limit. It is importent to get notified when the cost are growing. Create Budget To create an alert you simply go to your admin console and navigate to Billing. There you will finde the point Budget. Here can you define an alert for your account. First thing you have to do is define the period in there your budget work. Mostly monthly is the choise. https://blog.stderror.net/post/google-file-stream-disaster/ Wed, 01 Nov 2017 10:06:08 +0100 https://blog.stderror.net/post/google-file-stream-disaster/ Because I switch my mail system from decided server to googles gsuite. I want to try google new file stream application for google drive. First I only tested the mac version. So I can not talk over the windows version. Why I have a look to Google File Stream I am already a Gsuite and a Dropbox customer. So I try to give Google Drive with the new File Stream client a chance. https://blog.stderror.net/post/host-static-hugo-website-on-s3-with-cloudflare/ Tue, 31 Oct 2017 18:44:50 +0100 https://blog.stderror.net/post/host-static-hugo-website-on-s3-with-cloudflare/ I migrate my personal website from a decided server to a more modern cloud solution. I used the aws S3 Service as basic file store and webserver. After that I use the free cloudflare service to enable TLS on my site. Generate the website For my personal website I use the hugo website generator. I used hugo because it is a lite fast app to generate static website from markdown files. https://blog.stderror.net/post/cloudflare-as-dns-provider/ Tue, 31 Oct 2017 15:29:43 +0100 https://blog.stderror.net/post/cloudflare-as-dns-provider/ I switched my DNS server Provider to cloudflare. I only switch the DNS server provider not the DNS register Service. How to switch the DNS servers to cloudflare It is really simple to switch your DNS server to cloudflare. The documentation from cloudflare is really straight forward. After you create a cloudflare account you will guide step by step throw the setup. Here I will give a short list what to do to setup cloudflare DNS. https://blog.stderror.net/post/openmanage-failure-after-update/ Tue, 05 Sep 2017 16:07:08 +0100 https://blog.stderror.net/post/openmanage-failure-after-update/ If you use the OpenManage tools from Dell to monitor the server hardware maybe with nagios or something else. You may have notice the after an update from the OpenManage Tools showing something like the following error. UNKNOWN: Storage Error! No controllers found UNKNOWN: Problem running 'omreport chassis memory': Error: Memory object not found UNKNOWN: Problem running 'omreport chassis fans': Error! No fan probes found on this system. UNKNOWN: Problem running 'omreport chassis temps': Error! https://blog.stderror.net/post/how-i-switch-to-letsencrypt/ Sat, 13 May 2017 16:07:08 +0100 https://blog.stderror.net/post/how-i-switch-to-letsencrypt/ I switch this year all my TLS certificates from CAcert to Let’s Encrypt. For all my personal webservers and mailservers. What I want from TLS certificates For my personal stuff I only want to provide encryption for my websites and mail. I don’t need some stong identity checks. The certificates should trusted by the most common devices so I don’t need to import the CA all the time and the visitors on my websites get no warning messages. https://blog.stderror.net/post/load-ssh-keys-automati-in-macos-sierra/ Sun, 26 Mar 2017 16:07:08 +0100 https://blog.stderror.net/post/load-ssh-keys-automati-in-macos-sierra/ Since macOS sierra ssh not automaticly use the the passhrase from the keychain. You have to configure ssh to use the keychain to lookup the passhrase. In this snippet from my ~/ssh/config I enable the keychain with UseKeychain yes. The AddKeysToAgent yes line load the key by the frist use in the ssh agent. With IdentityFile I added my two ssh keys. Host * UseKeychain yes AddKeysToAgent yes IdentityFile ~/.ssh/id_rsa IdentityFile ~/. https://blog.stderror.net/post/hijack-a-xsession/ Sun, 15 Jan 2017 22:26:32 +0100 https://blog.stderror.net/post/hijack-a-xsession/ In this actricle I will describe how to hijack a X session from a diffrent user. So you are able to start X application in a diffrent user session, maybe open an browser window on the screen. For this method you will probelly need root access on the mashine where the X session is running you want to hijack. X11 security model The X11 security model is preety simple. You only have to know two diffrent things to connect to the Xserver. https://blog.stderror.net/post/timestamp/ Mon, 26 Dec 2016 16:07:08 +0100 https://blog.stderror.net/post/timestamp/ I often need timestamp on the commandline or in scripts to save files with the exact time. In the shell you can easy get a unix timestamp when you enter the following command: date +%s You can now simple save a mysqldump from with the exact time in the filename. mysqldump DATABSE > DATABASE-`date +%s`.sql Also you are able to create a bash/zsh alias for the timestamp. Just put the follwing line in your shell configuration: https://blog.stderror.net/post/add-extra-swap-space/ Thu, 01 Dec 2016 00:00:00 +0000 https://blog.stderror.net/post/add-extra-swap-space/ Why i need swap Swap is space on the hard disk to where the operating system can store data the does not fit on in the memory any more. The Swap Space is part of the virtual memory. Every time when the system runs out of memory, the operating system begins the write the old and not often used part from memory to the swap pace on the hard drive. https://blog.stderror.net/post/unlock-active-directory-user/ Sun, 23 Oct 2016 22:26:32 +0100 https://blog.stderror.net/post/unlock-active-directory-user/ in common active directory enviorment the user account will be locked after some failed login attempt. This is a security mechamisen against brute-force attack to find out the account password. Often this is to secure for the users so they will lock their useraccount by her self. It is a common admin task to free the user. The way over the default windows mmc take often much time. But it is quite simple to script the unlock process. https://blog.stderror.net/post/get-macadress/ Sat, 21 May 2016 00:00:00 +0000 https://blog.stderror.net/post/get-macadress/ Hi guys, in my job i sometimes need to know the MAC adresse of an local device. Sometimes you need to look in the invertory but this is always some pain. so I got the cool way and you arp the get the mac adresse from devices in a local network. ARP the address resolotion protocol is used in IPv4 to get the mac address for an IP address so you can send data to the device in a boadcast domain. https://blog.stderror.net/post/yum-package-from-whch-repo/ Mon, 21 Mar 2016 22:26:32 +0100 https://blog.stderror.net/post/yum-package-from-whch-repo/ Last week i have a problem with yum, i want so see what packages are include in a repository. This is not easy with yum, so i will share the trick here. You simple need the following commandline. yum --disablerepo="*" --enablerepo="$REPO" list available This tell yum to disable all repositories and only enable that one you want to know and list alle packages for this repository. With the following command yum will show you all os it’s repos: https://blog.stderror.net/imprint/ Wed, 06 Jan 2016 00:00:00 +0000 https://blog.stderror.net/imprint/ Legal Disclosure Information in accordance with section 5 TMG Daniel Goeke Friedrichstraße 232 10969 Berlin Contact: Telephone: +49 (0) 30 25931638 E-Mail: dgo+blog[at]stderror.net Internetadresse: https://blog.stderror.net/ Person responsible for content in accordance with 55 Abs. 2 RStV Disclaimer Accountability for content The contents of our pages have been created with the utmost care. However, we cannot guarantee the contents’ accuracy, completeness or topicality. According to statutory provisions, we are furthermore responsible for our own content on these web pages. https://blog.stderror.net/privacy.statement/ Wed, 06 Jan 2016 00:00:00 +0000 https://blog.stderror.net/privacy.statement/ General Your personal data (e.g. title, name, house address, e-mail address, phone number, bank details, credit card number) are processed by us only in accordance with the provisions of German data privacy laws. The following provisions describe the type, scope and purpose of collecting, processing and utilizing personal data. This data privacy policy applies only to our web pages. If links on our pages route you to other pages, please inquire there about how your data are handled in such cases.