networking

[little schooner]

were so difficult

[tame carbon]

BRRRR

[little schooner]

lool yea

[tame carbon]

Are you not a drill person?

[little schooner]

yeah im not

[livid marlin]

we have 2 lazy 2nd lvl it supps hahahaha

[tame carbon]

https://pbs.twimg.com/media/D6YkMCsUwAEn2GF?format=jpg&name=large

[little schooner]

eventually it popped on the other side

and all was good.

[thick minnow]

everyone is a drill person, if you think your not, you just dont know it yet

[little schooner]

well I dont like making holes and drill person is one who likes that ig lol

i want to preserve as much as i can

[thick minnow]

wrong aswer

[little schooner]

its like with sheet rock. once you cut, it wont ever be the same strength

[tame carbon]

https://tenor.com/view/funny-man-male-gif-9199139

[little schooner]

i dont like that

[tame carbon]

not a powertool fan eh?

[little schooner]

everyone needs a powertool

[tame carbon]

the compressor I use for cleaning out computers

runs on 400V

it has one of those beefy red cables

[thick minnow]

👀

marry me

[tame carbon]

its all fine and dandy, until you don't have access to three phase power

which is 99% of residential homes

[little schooner]

im the one that measures twice, cut once

i want to be careful and get it right the first time

[thick minnow]

you dont have three phase power in every room? amateur 😤

[dense apex]

PiHole users! Anyone have a good ad list for YouTude ads?

[tame carbon]

isnt easylist kinda the standard that gets them all?

https://easylist.to/

[dense apex]

I’ll check it out

[oak night]

Where can i ask question about HTML?

[tame carbon]

#development

[oak night]

Ok

Thanks

[thick minnow]

Where would I ask a question about power line adaptors?

[oak night]

Here?

[thick minnow]

Ok

So I need to know if this would work:
The transmitter and receiver would be on different mains circuits, but would be connected to the same breaker, would it work?
See my image for visual representation

[waxen scroll]

thats against code isnt it?

☠️

@tame carbon muh sparkie

[tame carbon]

?

[waxen scroll]

two wires connected at the same breaker

[tame carbon]

@thick minnow there's no way to know for sure

unless you test

[thick minnow]

Ok

[thick minnow]

It’s the same breaker box, but not same switchy thing

[peak cloak]

a breaker is this

[thick minnow]

In that case they are not on the same breaker

[peak cloak]

I think if they are on the same phase then is should work

are you in NA

[thick minnow]

No

[peak cloak]

where?

[thick minnow]

Uk

[peak cloak]

ah

idk how that works

[thick minnow]

@tame carbon is CSS610-8G-2S+IN a good switch to start? i have a lot of devices that use utp like hue bridge and ps4

to start with fiber

[tame carbon]

@thick minnow yeah its a tiny 4 port 10G switch

generally if you want to connect 1G clients

you'd have another switch

to breakout 1x 10G -> 10x 1G

[thick minnow]

no it has Eight 1G Ethernet ports and two SFP+ ports for 10G fiber

[tame carbon]

oh wait

[thick minnow]

i need the 8 ethernet ports

[tame carbon]

misread

@thick minnow I wouldn't buy that personally, not because of the specs but because of the software

SwitchOS is rather limited

but then again if you want it purely as a switch

its perfect

one of the tips I can give you with mtik devices

[thick minnow]

yeah and with this one i can start with fiber

[tame carbon]

is looking at the block diagram

[thick minnow]

okay

[tame carbon]

oh they dont have one

not for this product

@thick minnow do you necessarily need more than 1 SFP+ port?

https://i.mt.lv/cdn/rb_images/1633_l.jpg

[thick minnow]

well i think 2 is better for later

[tame carbon]

well thats why I have the router on a stick configuration

I have a CRS305 https://i.mt.lv/cdn/rb_images/1661_l.jpg

connected to the RB4011

thats a 10G link between router & switch

you got 3 more 10G ports

ofc you are limited to 10G max between any device & the router

doesnt really matter what device is plugged into what port

either on the router or the switch

since you can use VLANs

[thick minnow]

yeah but i dont need a router because our modem alreay does that

[tame carbon]

if you put 10 bucks more down

https://mikrotik.com/product/CRS326-24G-2SplusRM

You can get a switch that also supports RouterOS

[thick minnow]

and with the CSS610-8G-2S+IN i can connect al my devices to our network and two 10gbit

[tame carbon]

its more than a router

RouterOS comes with a lot of L3 features

[thick minnow]

thats 100 more

[tame carbon]

really?

[thick minnow]

yeah

[tame carbon]

oh I mistook the other ones

[peak cloak]

you want a non ISP router, ISP routers have very little configuration

[tame carbon]

^

how you gonna handle ur vlans

if you cant even route across them

cus I bet you the ISP router cant do vlans

[thick minnow]

wait im gonna go home now and look what our modem supports

[tame carbon]

Thats why I suggested the RB4011 as a centerpiece

[peak cloak]

99% sure it doesn't

[tame carbon]

it has 10G expansion

as well as 10x 1G

[thick minnow]

see yall in 20-30 mins

[tame carbon]

@peak cloak yeah I've yet to see one that allows you configure virtual interfaces lol

let alone

do it in a sane way

https://i.imgur.com/Xsazf6i.png

this is for bridge vlans

on a CRS305

and making an actual interface to forward from and to

you just create a new vlan interface

https://i.imgur.com/PsDhAMi.png

[peak cloak]

in routerOS you can just transfer a vlan from one interface to another?

b/c in edgemax a vif is tied to an interface

you can't easily move it

easiest way is to manually edit the config

[tame carbon]

@peak cloak a physical interface becomes a slave

@peak cloak the interface it sits on is just a config field yeah

[peak cloak]

nice

much better tbh

[tame carbon]

@peak cloak https://i.imgur.com/2gLkWyE.png

[thick minnow]

@tame carbon can I hop into your dms so I can quick explain something in Dutch?

[tame carbon]

you can call if you like

[thick minnow]

My uncle is using my mic rn I don’t have one

😢

[oak night]

do you know what is wrong?

[tame carbon]

@oak night you can verify nginx config files

sudo nginx -T

[oak night]

Oh right

Thanks for reminding

[tame carbon]

to see current status of the nginx daemon

you can use systemd

sudo systemctl status nginx

[oak night]

Active and running

[peak cloak]

you can also do

journalctl -u nginx to get a log

to make it live you can add -f

[oak night]

i dont need it live

[peak cloak]

or if you want to put it in a text file journalctl -u nginx > log.txt

[oak night]

Restarted just today

[tame carbon]

@oak night is there a reason you it set to ipv6 only?

[peak cloak]

it's ipv6? it's ipv4 on my end

[tame carbon]

@peak cloak well the config looks fine

only difference to my configs

is that I have a huge list of cipher suites it supports

what's odd is the fact you are using certbot

I'm using letsencrypt

[peak cloak]

certbot is letsencrypt

[tame carbon]

yeah

but the commands look diff

letsencrypt renew

is what I run

[peak cloak]

We recommend that most people with shell access use the Certbot ACME client.

letsencrypt has there own client?

[tame carbon]

https://packages.ubuntu.com/search?keywords=letsencrypt

@peak cloak if you go to the install instructions for certbot

they recommend using snapd

[peak cloak]

yeah

[tame carbon]

even though ubuntu just has a package for this

[peak cloak]

why

yeah

I told kri to just apt

When I eventually get an ssh I'll prob use this instead https://github.com/acmesh-official/acme.sh

certbox doesn't support HE dns "api"

[tame carbon]

@peak cloak ,lol check #public-chat

[peak cloak]

warship?

[waxen scroll]

too much going on, what word is banned?

[tame carbon]

I can't say it

[waxen scroll]

put a space in

[tame carbon]

yes

but they just banned people for evasion of filter

[oak night]

is this right?

I know that i can use -T

But it shows me that is right

But when i use the site it won't work

[tame carbon]

@oak night hold on

let me check my configs

[oak night]

ok

[tame carbon]

        location ~ \.php$ {
                include snippets/fastcgi-php.conf;
                fastcgi_pass unix:/run/php/php7.0-fpm.sock;
        }

this is how it runs on my laptop

oh that is slightly different

you can just add this to the server { }

index index.html index.php

it will pick either of those files

if its a .php file, it will put it in fast_cgi

through a unix p[ipe

[oak night]

server {
listen 80 default_server;
listen [::]:80 default_server;
server_name flarum.kristianburiascophotos.tk;
root /var/www/html/discussion/public;
index index.html index.htm index.php;

    location / {
            try_files $uri /index.php$is_args$args;
    }


    location ~ \.php$ {
    fastcgi_pass unix:/run/php/php7.4-fpm.sock;
    fastcgi_index index.php;
    fastcgi_read_timeout 240;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    include fastcgi_params;
    fastcgi_split_path_info ^(.+.php)(/.+)$;
    }
}

Thats mine

[tame carbon]

did you set up the permissions for the directory?

[oak night]

chmod?

[tame carbon]

ye

[oak night]

Yes

i did

[tame carbon]

put an index.php in the root of that

add

<?php
phpinfo();

then see what happens

at same time

you can read the log of nginx

see if anything goes wrong

did you install php-fpm ?

and make sure its running?

[tame carbon]

right

get rid of the other lines

try it with just the cgi pass

        location ~ \.php$ {
                include snippets/fastcgi-php.conf;
                fastcgi_pass unix:/run/php/php7.4-fpm.sock;
        }

all those config fields you are adding

are already in there

https://i.imgur.com/MYpQslE.png

so you can just include that default file

[tame carbon]

@oak night can you show me the updated config?

[tame carbon]

ok so the socket is not running

[peak cloak]

is there a service you need to enable for php?

[tame carbon]

check /var/log/nginx/error.log

@peak cloak php-fpm

https://i.imgur.com/QGtXAov.png

[peak cloak]

so systemctl status php-fpm?

[tame carbon]

sudo systemctl enable php7.4-fpm.service

sudo systemctl start php7.4-fpm.service

[oak night]

Same error

[tame carbon]

get status:

sudo systemctl status php7.4-fpm.service

I want to see what socket it is providing

[tame carbon]

ok see the config file there?

php-fpm.conf?

can you open that one

[oak night]

yeah

Sure

[peak cloak]

you want to show the whole config

so use nano

or cat

[oak night]

last lines?

[tame carbon]

can you see what files are in /run/php

[tame carbon]

anything else

?

[oak night]

No

[tame carbon]

there's supposed to be a socket file there

[oak night]

I can check with winscp

[tame carbon]

nginx cant find it

no

/run is a virtual filesystem

all those files are actually programs

[oak night]

ok

[tame carbon]

so is /sys and /dev

xD

[oak night]

Didnt know

[tame carbon]

think of it as a socket where data can be read and written to

[oak night]

ok

[tame carbon]

except in unix systems, datastreams, or sockets, can also be represented by files

[oak night]

like RAm?

[tame carbon]

yes there is one

the process can check its own memory and process info

in /proc

theres a directory in there for every process

@oak night this is a design philosophy from the 80s all the way back to the beginning of computing

"Everything is a file"

[oak night]

Cool

[tame carbon]

AT&B Bell Labs engineers came up with this

/dev/sda1 is first partition of your first harddrive

/dev/sda is the entire disk

/dev/sdb

[waxen scroll]

but muh uuid

[tame carbon]

xD

yes

its like a rest api almost

xD

[oak night]

should i create it?

[tame carbon]

@waxen scroll https://i.imgur.com/yz9p1Ds.png

[waxen scroll]

wow my eyes

[tame carbon]

@waxen scroll yeah windows can't handle solarized fonts

my zsh is hacked

[oak night]

Cool

[tame carbon]

@oak night ok so let me do some digging

sec

[oak night]

No problem

[mystic hull]

flarum eh

[oak night]

Yup

trying it

[mystic hull]

It's just a php app right

try serverpilot - will make ur life easier

[oak night]

Yes

[mystic hull]

lol

[oak night]

I'll try

[tame carbon]

@mystic hull he has everything running but one part is still not configured

its just a config file to modify

[mystic hull]

oh

well then do that

[tame carbon]

@oak night https://i.imgur.com/1rCb4VY.png

@mystic hull where you the one that set LTT up with those mtik routers/switches?

I see them in some shots sometimes

Never been featured in any video, how one might go to deploying those

@oak night in that pool.d should be a config file

can you open that one

[mystic hull]

the mikrotiks?

[tame carbon]

ya

[mystic hull]

like this one? Hehe

[tame carbon]

their new all in a single box switch lol

with all the I/O in the world

https://i.imgur.com/tpsdC0Y.png

[mystic hull]

that is a SHARP photo

ya the fault is a fan fault cuz I put noctua fans in it

[tame carbon]

🤣

@oak night you still with us?

[oak night]

Yup

Following

[tame carbon]

did you manage to find that pool config file?

[oak night]

Nope

[tame carbon]

can you check /etc/php

always the same with ubuntu...

[tame carbon]

ok go to 7.4

[oak night]

i suppose /fpm

[tame carbon]

ye

[tame carbon]

ok then the pool.d

[oak night]

What do you use for LTT Forum

?

[tame carbon]

thats a directory

[tame carbon]

ok whats in that www.conf

[tame carbon]

oh

its using tcp/ip

not a unix socket

[oak night]

it is a VPS

[tame carbon]

@oak night no no

a socket = tcp/ip

its same

[oak night]

Ok

[tame carbon]

you can either do a unix:/socket

or

an ip:port

in our case

[oak night]

For what?

[tame carbon]

port 9999

ok go back to your nginx config

[oak night]

Ok

Then

[tame carbon]

and replace the fast_cgi pass line

with

fastcgi_pass 127.0.0.1:9999;

[oak night]

Done

Reload

[tame carbon]

ye

see my laptop had an older version, but the IP variant commented out

https://i.imgur.com/Ht8Bssp.png

see ^

[oak night]

Yes

[tame carbon]

does it work?

[oak night]

So i should comment

[tame carbon]

ok what about /index.php

[oak night]

There is nothing there

[tame carbon]

there are files there though?

oh

well create a php file

and put

<?php
phpinfo();

in there

[oak night]

Also in /html

Np

[tame carbon]

wherever you set the server { root }

I have it pointed to /var/www/html

but if you have multiple sites

you may want to split this up into multiple directories

[oak night]

Ok

I have to eat

cya after

thanks

[thick minnow]

I need a router for home network

Pls can someone give me models?

[peak cloak]

just a router?

https://mikrotik.com/product/RB750Gr3

[thick minnow]

If I can ask I need a trusted company and a vpn to my home network

[dusty osprey]

Mikrotik has all entreprise features at a fraction of a price. We pay in $ instead of kidneys, with mikrotik

[peak cloak]

yeah mikrotik may be intimidating at first, but is has a lot of features. It runs routerOS which you can check out it's web interface here http://demo.mt.lv/

[thick minnow]

Ok th

[peak cloak]

@thick minnow keep in mind that's just a router, you also need an Access Point for wifi

[thick minnow]

Ok th

I know I’m anoing but u send a wap to?

And the last thing I swear a switch

[peak cloak]

mikrotik also has a WAP which intergrates with the router nicely with CAPsMAN, their own management thing https://mikrotik.com/product/cap_ac

I myself have an EAP225

[thick minnow]

Ok th so match

And just checking on this softwares I can do a virtual lan?

[peak cloak]

yeah, vlans are supported

[thick minnow]

👍🏼

[oak night]

nothing out of this

White page

[oak night]

Flarum

Thanks

What is the problem?

[peak cloak]

look in flarum logs

you have mysql installed right?

[oak night]

Yup

How do i show databases?

[peak cloak]

no clue

I don't use mysql

[oak night]

What you use?

[peak cloak]

nothing

[oak night]

Ok

[peak cloak]

I dipped my toes into mongodb, but that's it

[oak night]

Ok

Just a question

Can you login into the root account if you know the password but without letting the owner know that you've been there?

Ubuntu server

[peak cloak]

wdym by know that you've been there

it's show in the log

[oak night]

Where

I need it

[peak cloak]

unless they delete the line

[oak night]

I suspect a friend has entered my vps

[peak cloak]

/var/log/auth.log

[oak night]

Ok thanks

[peak cloak]

disable root login

and use ssh keys

and disable password login

[oak night]

What is that

[peak cloak]

ssh keys?

[oak night]

But i can still enter

?

[oak night]

?^

[peak cloak]

so you can't do ssh root@server because root login is disabled

and can't login as user with a password

the client's ssh key needs to be installed on the server

and the ssh key can have a password on it too, but doesn't need to

and for even more protection put ssh on a non standard port

https://www.digitalocean.com/community/tutorials/ssh-essentials-working-with-ssh-servers-clients-and-keys

[oak night]

He bruteforced me

[peak cloak]

you have a weak password

use ssh keys

that digitalocean guide is really good

@oak night

[oak night]

Ok

It is this?

[peak cloak]

you run ssh-keygen on the client, ex: your desktop computer that will initilizing the connection

with windows, idk how it works

but you need to install openssh

then you copy the public key over to the server

ssh-copy-id does it nice and fast for you

you can do it manually as well

wait

you are doing that on the server

[oak night]

Yes?

[peak cloak]

ssh-keygen is run on YOUR computer

[oak night]

I should do it on windows

OK

[peak cloak]

that starts the ssh connection

yeah

and 2

why are you logged in as root

[oak night]

Then i should use the CMD

[oak night]

I shouldn't use it

[peak cloak]

no

create your own user with sudo perms

and disable root ssh login

[oak night]

I should first Create a user

[peak cloak]

basically useradd nameofuser

[oak night]

What about password

[peak cloak]

passwd nameofuser

[oak night]

ok

[peak cloak]

then you want to add the user to wheel group, which is the sudo group (only on centos, on deb it's different)

[oak night]

I have to give it root privilegies?

[peak cloak]

usermod -aG sudo nameofuser

[oak night]

Ok

sudo adduser username group

?

To what group?

[peak cloak]

no look what I posted, I used to run centos which is different

[oak night]

i mean in ubunut server

[peak cloak]

#networking message

[oak night]

Once that?

[peak cloak]

?

[oak night]

I can just logoff Root

?

[peak cloak]

you can switch to your new user and check if it works

su - nameofuser

[peak cloak]

ah

useradd is deperacated

didn't know that

so delete that user

and create a new one using adduser

confusing

[peak cloak]

ps aux | grep 595015

[oak night]

Do i send the result?

[peak cloak]

yeah

[oak night]

t found
root@vmi495395:~# roo

[peak cloak]

we want to see what is running

[oak night]

Kristian 595015 0.0 0.0 2608 1936 pts/5 S 22:05 0:00 -sh
root 595186 0.0 0.0 9028 676 pts/5 S+ 22:10 0:00 grep --color=auto 595015

[peak cloak]

oh, probobly because it's not logged out

we can kill it

[oak night]

Ok

[peak cloak]

kill -15 595015

[oak night]

-15 are secondS'

?

[peak cloak]

huh

[oak night]

How to logout

?

[peak cloak]

pkill -KILL -u Kristian

[oak night]

Done

[peak cloak]

now try

[oak night]

ok

deleted

Should i create another?

[peak cloak]

adduser

[oak night]

adduser: Only one or two names allowed.

[peak cloak]

well you need to specify a user adduser nameofuser

[peak cloak]

No capital letters

I think that's the issue

Unlike windows, Linux is case sensitive

[oak night]

It was

Added

[peak cloak]

Now put a password on it and add it to sudo

[oak night]

Done

su - kristian

[peak cloak]

yep

[oak night]

i'm in

[peak cloak]

nice

do sudo whois just to check you have sudo

[peak cloak]

🤦

my bad

[oak night]

Sudo who

[peak cloak]

it's whoami

[oak night]

just root

[peak cloak]

good

try sshing into it just by kristian@ip

just to make sure it works before we disable root login later

for one delete that image

it has the ip

[oak night]

Right

Ok

How do i resolve that

?

[peak cloak]

wait show the screenshot again

[oak night]

Now no ips

[peak cloak]

go to `C:\Users\Christian.ssh\known_hosts

and delete the entry for your vm

if that warning pops up later, then it's a bad thing

[oak night]

Does this cause issues with Putty

[peak cloak]

shouldn't

[oak night]

Ok

So known hosts

And delete the key?

[peak cloak]

delete the whole entry

I think it's the whole line

[oak night]

Ip SOmething something Key

Delete this line?

[peak cloak]

yeah

[oak night]

I'm in

[peak cloak]

ok and everything works right?

[oak night]

Yup

[peak cloak]

you are using openssh or putty?

[oak night]

openssh

Cmd

[peak cloak]

so just do ssh-keygen

in cmd

I think it may need admin perms

[oak night]

I'm administrator

For windows

[peak cloak]

if it asks for a passphrase, you can leave it blank for no passphrase or if you fill it in, then that's the passphrase for the key. So if someone steals the key, but doesn't have the passphrase it will be much more difficult

did ssh-keygen work?

[oak night]

Yup

Inserted the passphrase

[peak cloak]

doesn't have to be linux passphrase

fyi

windows doesn't have ssh-copy-id but I found this

type $env:USERPROFILE\.ssh\id_rsa.pub | ssh {IP-ADDRESS-OR-FQDN} "cat >> .ssh/authorized_keys"

I think it may need to be ran in powershell

whenever something is in {} get rid of the {}

[peak cloak]

type $env:USERPROFILE\.ssh\id_rsa.pub | ssh 1.1.1.1 "cat >> .ssh/authorized_keys"

example

[oak night]

Ok

bash: .ssh/authorized_keys: No such file or directory

[peak cloak]

ah

login normally via ssh

with a password

then mkdir .ssh

mkdir .ssh/authorized_keys

[oak night]

Now is a directory

[peak cloak]

oh my bad

If you havn't seen this is my first time really doing this through windows

[oak night]

Ok

[peak cloak]

ssh back in via password

[oak night]

Its ok

[peak cloak]

and

rmdir .ssh/authorized_keys

[oak night]

Done

[peak cloak]

touch .ssh/authorized_keys

creates an empty file called authorized_keys

[oak night]

Ok

[peak cloak]

now try

[oak night]

it worked

i hope

[peak cloak]

now try sshing again

[oak night]

Logout and back in

it worked

But i had to insert my passphrase

Anyway its better than before

[peak cloak]

it will ask for the passphrase

when you generate the key if you leave the passphrase blank it won't ask for one

[oak night]

Nah its ok

So it's more safe

[peak cloak]

but with a passphrase someone needs the key AND the passphrase to the key

don't loose your key

[oak night]

ok

So if he doesn't know me

He probably doesn't know my passphrase

[plucky crescent]

f'ril, don't lose your key

[oak night]

Ok

Sure

I'm not going to

[peak cloak]

now we need to disable root login and disable password login

and we can put ssh on a different port

[plucky crescent]

sneak 100

[oak night]

maybe not now for password login

[peak cloak]

but disable root login

[oak night]

Cuz Other people need to enter it

[oak night]

yep sure

But can i enable back Root login after is gone?

[peak cloak]

well it's ssh root login

[oak night]

I would have to

Su - Root

[peak cloak]

once you are logged in you can do sudo su - root

yeah

[oak night]

OK

perfect

[peak cloak]

/etc/ssh/sshd_config

[oak night]

-bash: cd: /etc/ssh/sshd_config: Not a directory

is a file

Sorry

[peak cloak]

yeah

nano /etc/ssh/sshd_config

[tame carbon]

@peak cloak live tv is le popc0rn rightnow

[oak night]

So nano

[peak cloak]

why

[tame carbon]

pm

[oak night]

PermitRootLogin yes i should say

No

Right?

[peak cloak]

yeah

[oak night]

Done

So no one can enter via root now?

if he is outside

[peak cloak]

yeah

[oak night]

Perfect

[peak cloak]

you may need to restart sshd service

let me look that up

[oak night]

i'll just try

[peak cloak]

it should be just sudo systemctl restart ssh

it'll kick you out

[oak night]

it doesnt

I'll restart it

It worked?

[peak cloak]

yeah

[oak night]

YESS

[peak cloak]

try sshing with the key

[oak night]

It works

Perfect

[peak cloak]

nice

good

[oak night]

For now also the port will remain the same

Also because there are other people

[peak cloak]

I mean you can tell other people the port

[oak night]

Yeah

I'll talk to them

I'll tell them for security reasons

[peak cloak]

you just do ssh user@ip -p 22

change the 22 to the port

[oak night]

oh ok

Now i'm going to install

Flarum

I wanna try it

it seams cool

[tame carbon]

@oak night did you end up getting the webserver to run php?

[oak night]

Yup

[tame carbon]

cool

[oak night]

But i had an error

[tame carbon]

mh?

[oak night]

Flarum

it gave me an error

too much specific

[tame carbon]

by default php doesnt generate an error log

but its probably in the nginx log

[oak night]

?

[peak cloak]

@oak night https://discuss.flarum.org/d/11562-can-t-install-something-went-wrong-undefined/2

[tame carbon]

@oak night can just cat or tail the log

[oak night]

Where is the log

?

[tame carbon]

/etc/ is config

logs are in /var/log

[vernal jacinth]

you can use ls to list the contents of directories instead of blindly trying to open a file

[tame carbon]

@vernal jacinth I dont even use ls most of the time

I just double tap tab

[vernal jacinth]

heh, sure

[tame carbon]

zsh

<3

[vernal jacinth]

learning about ls seems reasonable anyway

[oak night]

Access log 1

?

[tame carbon]

access log is just for logging individual requests

[tame carbon]

should be in error log

is this /var/log/nginx ?

[oak night]

yup

[tame carbon]

yeah pick one of them

btw

those .gz files are compressed text files

[oak night]

ok

[tame carbon]

you can use zcat to uncompress and print

but error.log is probably fine

[oak night]

wjat should i search for in the log

[tame carbon]

just dump the content

see if you can find something interesting

[oak night]

Cuz there are lots of ips

?

[tame carbon]

add these two lines to your php config

include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

its missing some info from nginx

remember, nginx calls php-fpm, which runs the actual script

[tame carbon]

no

[oak night]

?

[tame carbon]

in /etc/nginx/sites-available

add them to the place where you do fastcgi_pass

[oak night]

server {
listen 80 default_server;
listen [::]:80 default_server;
server_name flarum.kristianburiascophotos.tk;
root /var/www/html/discussion/public;
index index.html index.htm index.php;

    location / {
            try_files $uri /index.php$is_args$args;
    }


    location ~ \.php$ {
            include snippets/fastcgi-php.conf;
            fastcgi_pass 127.0.0.1:9999;

include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
}

    }

[tame carbon]

yu

and try now

[oak night]

It is not working

[tame carbon]

error logs?

btw

phpinfo dont work

cus security feature

it says it right there

but the 2nd error

is odd

[oak night]

I also use iredmail could this mean something?

[tame carbon]

mailservers are mailservers

all these protocols are standardized

[oak night]

So no

[tame carbon]

so its kinda plug and play

[oak night]

Ok

[tame carbon]

https://stackoverflow.com/questions/35261922/how-to-debug-fastcgi-sent-in-stderr-primary-script-unknown-while-reading-respo

its a permission error it seems

I never had these issues on ubuntu 16 and 18

must be a thing with 20

https://bbs.archlinux.org/viewtopic.php?id=251050

here's another interesting topic

[oak night]

Ok

Thanks

So i cant do anything?

[tame carbon]

https://i.imgur.com/II1qk74.png

this guy claimed he got it fixed

https://i.imgur.com/E5U66C4.png

this is a rather recent change in the program

[oak night]

So what sould i do?

Those commands?

There is nothing there

[vernal jacinth]

are you storing files in a home directory?

[oak night]

i'm not storing files

From my own

A part from a minecraft server

[vernal jacinth]

sounds odd to disable ProtectHome for hosting a website, storing such things under /home seems strange

[tame carbon]

@oak night thats cus that file dont exist

@vernal jacinth nah

[oak night]

So i have to create it?

[vernal jacinth]

wait what?

[tame carbon]

this is just the daemon that mediates between php and nginx

its fastcgi

[vernal jacinth]

why would it need to access home directories?

[oak night]

Where should i put protect home

[tame carbon]

@oak night its probably somewhere else in the directories

I'm also too tired for this rn

[oak night]

it ok

[vernal jacinth]

dont disable security stuff blindly, it sounds like an exceptional bad idea to give /home access to random software if you are not knowing why

[oak night]

That is true

[tame carbon]

https://i.imgur.com/MNQ6uG6.png

[vernal jacinth]

you can read what ProtectHome is for here: https://www.freedesktop.org/software/systemd/man/systemd.exec.html

[tame carbon]

@vernal jacinth honestly, I just wanted to toggle it to verify if it was indeed a permission problem

[vernal jacinth]

Takes a boolean argument or the special values "read-only" or "tmpfs". If true, the directories /home/, /root, and /run/user are made inaccessible and empty for processes invoked by this unit

[tame carbon]

usually I then use strace to figure out what exactly it tries to access

and then fix it there

[vernal jacinth]

unless you know there are files living under any of those dirs that you need, the above sounds unrelated to the problems

[tame carbon]

https://cdn.discordapp.com/attachments/387022787480387605/796503271485341696/unknown.png

[oak night]

I'm tired too

So i'm going to sleep

Here is like 23:49

11:49 PM

Cya

[tame carbon]

@vernal jacinth https://cdn.discordapp.com/attachments/387022787480387605/796438282275782676/unknown.png

and this was his php-fpm config

[vernal jacinth]

hmm, so the logs above states "no such file or directory" for /var/www/html/owa/auth/logon.aspx", is that related to your setup or some random bot looking for vulnerabilities?

sounds more like a bot since im guessing you are not running .aspx on a linux host

@oak night figure out what file you are trying to reach when accessing the web server, then see if logs mentions any file like that. As @tame carbon mentioned using strace is a nice idea when not being able to figure out what a process is doing, but it can be hard to grasp the wall of text that tends to be a result from that when you are not used to it

[tame carbon]

@vernal jacinth yeah I was wondering what that was too

wait

facepalm

I think his install is functional

he only tried to load phpinfo

which didnt work

but that was explained by that log

I just assumed he was trying to load wordpress, but that seems like a typical kind of chinese crawler

[vernal jacinth]

guess its possible 🙂

i'm guessing the owa-log is probably something looking for a outlook web access site (the web frontend for microsoft exchange)

[peak cloak]

any good domain registars you would reccomend?

because my original domain on get.tech which I got though github costs 30 bucks to renew

.tech seems to be expensive accross the board

[coral scroll]

[thorny vector]

@peak cloak Gandi

[peak cloak]

Never heard of them, will look at it

[thorny vector]

They're who I register all my domains through

[lean pebble]

Someone knows a good virtualization to run on centos server?
Except terminal kvm virtualization, it's for a friend that doesn't have enough knowledge in managing vms from ssh.
I need something with web interface.
Thanks.

[peak cloak]

kvm with cockpit?

I think cockpit can do that idk

proxmox?

[lean pebble]

Ya kinda can do it

Nah I want base os centos

[peak cloak]

any reason why?

centos is now soon rolling release anyway

[lean pebble]

Because I want to help him managing it for his business

[peak cloak]

no I mean, why centos?

[lean pebble]

I know but I'm used to centos

Redhat systems

[peak cloak]

I barely touch proxmox cli

proxmox ui is pretty user friendly

[lean pebble]

It comes with web interface or something else ?

[peak cloak]

proxmox is made to be mostly managed though web interface

[lean pebble]

Ok

[lean pebble]

How the installation going ? Because I'm installing the os remotely

[peak cloak]

oh, how remotly?

via something like iDRAC?

or on a vps?

[lean pebble]

Last time I installed os virtualization via kvm on my server it was hell

[peak cloak]

because proxmox is an os

[lean pebble]

Dedicated server

[peak cloak]

it comes as an iso and you install it like debian

https://www.proxmox.com/en/proxmox-ve

[lean pebble]

Ya the problem was to start the installation from lara (lantronix) kvm uploading the iso

The part of uploading the iso was hell

[peak cloak]

ah

[lean pebble]

Because it's uploading and loading it at the same time

[peak cloak]

https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_Buster

[lean pebble]

And my internet now is not that stable

[peak cloak]

looks like you can install it on debain

[lean pebble]

I'll look on it later today

It's 4am here I should get some sleep

Thanks :)

[peak cloak]

you should

[lean pebble]

I installed ovirt but something fucked up the cert so I lost access to the admin panel

[peak cloak]

oh never heard of ovirt

[lean pebble]

It's libvirt / kvm

[peak cloak]

so same underlying tech like proxmox

kvm

[lean pebble]

Very nice option but burning your brain cells

Do you heard about openstack?

Almost the same

[peak cloak]

isn't openstack a manager

not what you install on the machine

[lean pebble]

Nope

It's some kind of docker based

Not like other virtualization

[peak cloak]

ah

not docker

docker is different

Nova for VM's

and Zun for containers

it's a whole orchestration system

kinda like kubernetes

[thorny vector]

For the love of all that is holy, do not use openstack

[unborn sluice]

if you don't like openstack, what would you recommend

[thorny vector]

Depends on what you’re doing. Single host, nothing fancy? KVM. Single host, free, some nice to have features, proxmox. Single host, paid, lots of that good-good, ESXi. And clustered, I’ve found it’s hard to be an esxi vSphere cluster.

[unborn sluice]

Oh no esxi

[thorny vector]

I have never seen, in enterprise, education, and personal use/application of openstack, it perform like it said it should.

Esxi is an industry titan/standard for a reason

[unborn sluice]

Is the reason, they are locked in

[thorny vector]

No. Believe me, people love using free and open source stuff whenever they can. Mainly because of the free part. But nothing matches VMware offerings in terms of, well, everything.

[lean pebble]

My own server runs esxi I don't like...
My friend doesn't need esxi waste of money and time.
Just need some basic features and easy to use interface.
I have tried ovirt that uses kvm / libvirt but need reinstall the server for install it

[primal ice]

fedora server - web interface or terminal or desktop environment.

¯_(ツ)_/¯

[jade storm]

Does anyone know about nftable hooks?

[thorny vector]

@lean pebble What do you not like about it?

[tame carbon]

esxi is closed source and requires licensing

to me thats a blocker

[thorny vector]

I can understand the closed source part, and why that might irk people

But a essentially limitless dev license is 200$/year, and includes support.

[tame carbon]

@thorny vector meh

with kvm you can pretty much get all the features you'd want in a VM

and there are plenty of tools that basically offer same functionality as vCenter

dont need an all in one solution

[desert briar]

meh, +1 for vsphere

[thorny vector]

I've yet to see a solution that gets close to all the features that vSphere has. Especially when it comes to integration with other products

[tame carbon]

I had to make a custom esxi image before, to add support for this one raid controller

[desert briar]

you probably never had to use the higher end vcenter features such as DRS or live migration etc.

[tame carbon]

amount of effort involved...

[desert briar]

vsphere is awesome, however an overkill for homelab

[tame carbon]

@desert briar yes but there are open alternatives for that

[thorny vector]

It's called using supported hardware. They put out massive lists for that.

[desert briar]

i use VMUG too though 😄 . 200 per year is reasonable to pay

[tame carbon]

Proxmox is a compelling alternative for an advanced homelab

also enjoys scaling capabilities for enterprise

@thorny vector yeah but if you run kvm, you don't have to worry about hw compatability

since linux runs on everything

I'm not sure what kind of kernel ESX uses

Its a unix-like system though

[thorny vector]

Its a modified linux kernel

[tame carbon]

It can't be, since it is propietary and commercially sold

if it was, it would have sourcecode available

[thorny vector]

Disregard, VMKernel

[tame carbon]

VMware has been sued by Christoph Hellwig, a Linux kernel developer, for GPL license violations. It was alleged that VMware had misappropriated portions of the Linux kernel

@thorny vector ahh so

they wrote an interface for loading kernel modules from linux

they have their own kernel

[thorny vector]

ESX (up to version 5) was linux based

[desert briar]

my whole copyright knowledge is very iffy, but as far as im correct, you can re-purpose open source projects for commercial use, as long as the open source ideology is still maintained

[tame carbon]

Yeah it couldnt be linux itself, since that would be a violation

@desert briar you just have to provide source code

and have a list of your modifications

if you just use linux itself as part of the system, without modification

you don't have to provide sourcecode

merely provide a license to GPL

[desert briar]

fair enough

[tame carbon]

if its a hosted service, eg: you are not selling sourcecode

you dont have to provide a notice at all

so using linux is free

[desert briar]

sounds about right

[tame carbon]

@desert briar https://tldrlegal.com/license/gnu-lesser-general-public-license-v3-(lgpl-3)

This is an amazing website for programmers

to understand what a license might mean

This is for LGPL

often used by libraries

[desert briar]

thanks

will be sure to give it a look

[tame carbon]

https://i.imgur.com/GRw7xon.png

and this is kinda defualt for all GPL

https://i.imgur.com/LyYgYGL.png

even mikrotik that uses linux as core in their RouterOS

https://github.com/robimarko/routeros-GPL

has provided copies of their source

as per request

not for every release

[thorny vector]

Meh. I still don't see anything competing, REALLY, with VMware. Big thing they do is the networking they support, with stuff like Distributed Switches

[tame carbon]

technically

mtik is still violating GPL

but GPL is infectious like that

@thorny vector only reason why its so popular is because it integrates with active directory and such

its ment for enterprise and corporate settings

and there's contractors that sell managed solutions

you can ring a company up: I want a vm solution

and they sell you hardware and support

thats where vmware is king

damn this guy hits the nail on the head

https://i.imgur.com/fChk8BH.png

I was never taught any legal stuff

and I had a 4 year engineering course

[thorny vector]

My lab is setup at an enterprise scale. I don't recommend VMware to the average user, but when it comes to the king of virtualization, No one beats out vmware.

[tame carbon]

@thorny vector I used vmware before I grew a clue

once I became proficient with kvm and libvirt, I ditched vmware

glad I don't need a windows vm anymore to run the vSphere client

vSphere client for linux was through the Workstation Player, which was subject to licensing fees on linux