Unix / Linux on Nico Maas

WD My Cloud Mirror Gen2 with Debian 11 and Linux Kernel 5.15 LTS

Sun, 12 Jun 2022 18:05:32 +0000

Intro

Since 2017 I have been using an Western Digital My Cloud Mirror Gen 2 which I bought at Amazons Black Friday (or similar) - because the included 2x 8 TB WD Red were even cheaper with the NAS than standalone. Using the NAS had been quite ok, especially the included Docker Engine and Plex Support were a nice to have, the included Backdoor in older Versions - not so much. Recently WD had their new “My Cloud OS 5” replace the old My Cloud OS 3 - and made things worse for a lot of people. As I don’t want any more surprises - and more control over my hardware - I decided to finally go down the road and get Debian 11 with an LTS (5.15) Kernel running on the hardware. This is how it went.

fail2ban Cheat Sheet

Wed, 17 Feb 2021 10:22:00 +0000

Just the commands I always need to look up, because I forgot again…

Overview over fail2ban status and jails

fail2ban-client status

See which e.g. IPs are banned for sshd jail

fail2ban-client status sshd

Unban an IP from sshd jail

fail2ban-client set sshd unbanip IPADDRESSHERE

See which systems are actually banned

zgrep 'Ban' /var/log/fail2ban.log*

[WSL2/Win10] virt-manager for kvm on Windows

Tue, 29 Dec 2020 11:46:00 +0000

kvm Virtualisiation is great, however, useable tools to create and manage said VMs are rare. The best tool for the job, virt-manager is only available for Linux machines. But what if you want to manage said VMs also via Windows 10? WSL2 to the rescue: Just install WSL2 as shown by the excellent Microsoft Guide, install i.e. a Debian/GNU Linux instance and then launch into it.

You should update the instance to the latest version first:

Ubuntu 20.04 Update bricked KVM Virt

Sun, 27 Dec 2020 11:46:05 +0000

I updated an older Ubuntu 18.04 LTS system to the latest LTS and had (among other things) Docker and KVM installed. KVM is actually quite nice if you “just need” a small VM (pfsense ;)). I actually prefer Proxmox and ESXi, but hey, the right tool for the right job.

After the upgrade to 20.04, kvm did not work anymore and I got a lot of lvm2 errors during apt update / apt upgrade sessions, so a short google later I found this. I was a bit nervous, but the fix did neither hurt my kvm nor my Docker instances

Bash for sending and receiving raw IP packets

Fri, 03 Apr 2020 07:35:12 +0000

I stumbled across this feature during my bachelor studies:

echo "Hello World" > /dev/tcp/127.0.0.1/5000
echo "Hello World" > /dev/udp/127.0.0.1/5000

You need to be root (obviously) and its supported in bash environment - but not on all systems. You can also cat on the ports and use dns adresses. Its neat to just get a byte out :). And if you need something more sophisicated, be sure to use the good old netcat (nc).

SonarQube 6.7 Community with Postgres 9.6 in Docker on Ubuntu

Tue, 30 Apr 2019 12:45:40 +0000

This is a very quick install for SonarQube on Ubuntu 18.04 LTS. I presume you got the latest Docker CE 18.09 and docker-compose 1.24 installed.

# create folders for sonarqube files and postgres
sudo mkdir -p /var/sonarqube/{conf,data,logs,extensions}
sudo chown -R 999:999 /var/sonarqube
sudo mkdir -p /var/sonarqube/postgres
# make folder for all Docker files in home
mkdir ~/sonarqube
cd sonarqube
# create docker-compose.yml with following content
version: '3.1'
services:
  db:
    image: postgres:9.6-alpine
    restart: unless-stopped
    volumes:
      - /var/sonarqube/postgres:/var/lib/postgresql/data
    environment:
     - POSTGRES_USER=sonar
     - POSTGRES_PASSWORD=sonar

  sonarqube:
    image: sonarqube:6.7-community
    ports:
      - 9000:9000
      - 9092:9092
    restart: unless-stopped
    volumes:
      - /var/sonarqube/conf:/opt/sonarqube/conf
      - /var/sonarqube/data:/opt/sonarqube/data
      - /var/sonarqube/logs:/opt/sonarqube/logs
      - /var/sonarqube/extensions:/opt/sonarqube/extensions
    environment:
      - SONARQUBE_HOME=/opt/sonarqube
      - SONARQUBE_JDBC_USERNAME=sonar
      - SONARQUBE_JDBC_PASSWORD=sonar
      - SONARQUBE_JDBC_URL=jdbc:postgresql://db/sonar
# launch 
docker-compose up -d

You can then access your SonarQube instance on http://ServerIP:9000 with the credential admin/admin.

Migrate SonarQube from MySQL to PostgreSQL

Sat, 27 Apr 2019 12:45:33 +0000

For checking the quality of my private programming code, I have been using the free edition of SonarQube for multiple years. It is actually a cool project with a massive flaw: They did allow to use MySQL as Database - but not MariaDB. This struggle kept me a bit at bay, as I parted with MySQL years ago - with this one exception.

Some days ago I then stumbled upon the anouncement of SonarQube that did not fix this long-standing issue, but will be parting completly from MySQL. So the only choice would be to migrate to Oracle, MS SQL or PostgreSQL.

BeagleLogic

Mon, 15 Oct 2018 09:00:46 +0000

To get your Beaglebone Black (BBB) to work as an Logic Analyzer, you can use BeagleLogic:

1.) Download latest version of BeagleLogic

https://beaglelogic.readthedocs.io/en/latest/beaglelogic_system_image.html
Released on 2017-07-13
sha256sum = be67e3b8a21c054cd6dcae7c50e9e518492d5d1ddaa83619878afeffe59c99bd
https://goo.gl/RiXGBs

2.) Burn it onto sdcard with Etcher

3.) Put SDCard into BeagleBone Black

4.) Hold “Boot” Button, plug in BBB with Mini USB Cable to your PC

5.) After 10 seconds or so, release “Boot” Button (this will just boot from SDcard with this trick)

Debian 9 Offline Installation Bug

Fri, 22 Dec 2017 11:00:16 +0000

I had to install a Debian 9.3 without having access to the internet, so I downloaded the full size offline install DVD from https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd. As usual, I inserted the first DVD into the DVD Drive, started the install and everything worked fine - except for the moment where it didn’t ;): I needed to switch DVDs for some software - and directly afterwards, Debian came to the “Install Grub” step - and asked politly to insert DVD 1 again - which I tried to do - but could not:

[Dell] T30 Intel AMT Blank Screen on Ubuntu Fix

Fri, 17 Nov 2017 13:25:10 +0000

The Dell T30 is an awesome little Homeserver, packing a punch with the Xeon E3-1225 V5 - and being affordable at about 399 €. It also comes with Intels Active Management Technology / AMT which is an extension of the horrible Intel Mangement Engine (which was all over the place months ago when some genius figured out how to stop that Man-in-the-Middle-always-on chip with some simple commands) - but quite useful - nonetheless. The good thing about this, is that it acts like an DRAC (Dell) / ILOM (Sun) / IPMI (Supermicro) card - so it is an KVM (Keyboard Video Mouse, not the virtualization thingy this time, sorry ;)) extension which allows you to control the server via network as if you were plugged in directly.

Upgrade WSL (Windows Subsystem for Linux) on Windows 10

Wed, 20 Sep 2017 07:30:47 +0000

I had installed WSL (Windows Subsystem for Linux) a long time ago to gain access to Ubuntu 14.04 LTS directly from my Windows 10 Desktop. However, as time passes, Software grows old. Upgrading the Ubuntu Subsystem via apt-get update / do-release-upgrade should work, but that could have some nasty sideeffects, considering that the 14.04 LTS WSL release had been a beta test - so, a reinstall should be better.

Luckily, TechRepublic got this covered. Just open a CMD and run:

[Ubuntu] PERC6/i on Ubuntu 16.04 LTS

Wed, 06 Sep 2017 09:30:11 +0000

To use the PERC6/i i.e. the

03:00.0 RAID bus controller: LSI Logic / Symbios Logic MegaRAID SAS 1078 (rev 04)

on Ubuntu, megacli is the best tool - but rarely available due to the demise of LSI Logic. Good thing that the guys from https://hwraid.le-vert.net put together a nice repo to host the latest RAID files. And yes, for everyone that does not like the idea of including a foreign repo - sorry to disappoint here :/.

[FreeBSD] Some personal notes for emergencies

Wed, 05 Jul 2017 14:13:41 +0000

Mounting zfs on FreeBSD 9.3 LiveFS for recovery

# List zfs pools
zpool import
-> i.e. syspool
# mount zfs pool syspool
zpool import -f -R /mnt syspool
# create mnt folder for new folder
mkdir /tmp/home
# mount data from zfs pool syspool
mount -t zfs syspool/DATA/home /tmp/home
# work on stuff and umount /tmp/home
# then umount zfspool
zfs umount -a

Format a harddrive on FreeBSD 9.3 and mount it as folder

Reboot Ubuntu if init daemon fails / systemd died

Thu, 27 Apr 2017 08:15:53 +0000

I got following error on an really badly “injured” Ubuntu machine:

Failed to start reboot.target: Failed to activate service 'org.freedesktop.systemd1': timed out
See system logs and 'systemctl status reboot.target' for details.
Failed to talk to init daemon.

Rebooting was not possible anymore, due to the beauty of 2933 zombie processes - slowing down the machine to a crawl.

[Windows/Ubuntu] ADB and Fastboot - useful stuff for your Android

Fri, 21 Apr 2017 08:00:23 +0000

1.) Setup on Linux (Ubuntu)

sudo apt-get update 
sudo apt-get install -y android-tools-adb android-tools-fastboot

1b.) Setup on Windows

I recommend the Minimal ADB and fastboot Package by shimp208, which you can get from: https://forum.xda-developers.com/showthread.php?t=2317790.

After you’ve installed it, you should add the folder of the installation to your PATH Variable: Press WIN+X Key, choose System, Advanced Systemsettings, Advanced, Path Variables - or just press WIN+R and enter "C:\Windows\system32\rundll32.exe" sysdm.cpl,EditEnvironmentVariables.

You will need to click on the entry Path in the User Variables, edit and then create a new entry by clicking on new.

Configure Git Line Endings

Sun, 01 Jan 2017 09:00:32 +0000

I tend to work crossplatform on different systems, mostly switching between different kinds of Ubuntu/Debian and Windows machines - always checking out and commiting git files on those machines. And I always forget to get the Git Line Endings right, as soon as I add a new machine to that list… So to do that, just a quick one liner:

git config --global core.autocrlf input
# Configure Git on Linux to properly handle line endings

Gitkraken - your next Git Client

Sat, 24 Dec 2016 15:00:28 +0000

If you’re in the NetOps/DevOps Teams, chances are high you need to develop code and use git. Well, on Windows Clients, I tended to use Atlassians Source Tree - however, that client became more and more buggy and unstable - unusable to say. Especially if I had to do an really big merge of my main to my deploy tag - it tended to crash most of the time.

So, without further ado: Enter Gitkranken. A nice, free, good looking and fast git client. Without dependencies.

Raspberry Pi Remote Desktop

Fri, 16 Dec 2016 20:23:56 +0000

To use the RPi via Remote Desktop, different protocols and programs exist, i.e. VNC. Due to simplicity of use, however, I mostly chose XRDP, which works with the Microsoft Remote Desktop Tools. However, you must not install it via sudo apt-get install xrdp - as this will install it with realvnc and break xrdp (Package error which has not been fixed yet in the recent “Pixel” Release of Raspbian…).

Instead, use:

Dell Servicetag on Ubuntu

Tue, 06 Dec 2016 10:02:48 +0000

You can find out your Dell/Sun Servicetag on Ubuntu via:
sudo dmidecode -s system-serial-number

[Ubuntu / Proxmox] Hosting NFSv3 Server on Ubuntu for Proxmox Server

Thu, 24 Nov 2016 15:24:36 +0000

So, yesterday evening y0sh came to me with following problem: “I got an real nice proxmox server with loads of CPU and RAM - and nearly no storage left. And I got an small little Atom Server with loads of Storage - but not very useful as VM Host - and yes, they are within the same network”. Ok, so: Lets create an NFSv3 Server on the Atom system and mount it as disk storage within Proxmox 🙂

[Docker] Sonarqube with Gogs/Drone to check software quality

Mon, 26 Sep 2016 08:00:20 +0000

Sonarqube is an really useful tool to check for different kind of errors in all kinds of programming languages. If you want to check out Sonarqube in a livedemo, just go over to https://sonarqube.com/. In the last two parts of my Docker series we created an gogs Git Repo as docker container and then went over to integrating gogs with drone (Version 0.4), an CI Build Server - also as Docker container. Today, we want to install Sonarqube as a tool to check upon our software quality, so that - as soon as we push an update to our gogs project, drone will execute an analysis using Sonarqube - which will give us information about different kind of errors and code quality.

[Ubuntu] Use Molly-Guard to stop shooting your own leg

Fri, 23 Sep 2016 08:00:06 +0000

If you’re working on some dozens of linux servers (or even more than 100,.. as in my case), you end up doing administration via SSH - which is the way to go. And chances are, that you’ll get dozens of SSH connections open in dozens of tabs and you did some updates on some of those servers and want to restart this thing with a quick sudo reboot now…
I won’t lie if I say, it happend more than once that I accidentally rebooted the wrong server - at least that was the case more than a year ago.
For the last year, since I have been using Molly-Guard - that did not happen once. Why? Because Molly-Guard does stop the reboot command if it detects that you’re issuing it from an SSH console - and asks for the server name. If you’re entering it correctly - it will reboot. If you’re in a frenzy, doing your “sudo reboot now” and enter name serverB while you’re on serverA - yep, Molly-Guard will stop you from shooting yourself in the leg. Neat, ain’t it?

[Docker] CI with Drone and Gogs

Mon, 19 Sep 2016 08:00:38 +0000

Now that we have a running Gogs installation for our source code (see here) - we can use Drone to build working software from those repos. Drone is an Continious Integration System, that comes in two flavors: Drone.io - which is the hosted service you could use - or Drone - as self-hosted service. We want to use the later one. To install drone in our existing Docker setup (with gogs already installed) we need to complete following steps:

[Ubuntu] Secure your Apache 2 Reverse Proxy

Mon, 12 Sep 2016 10:36:40 +0000

We got an Apache 2, working as Reverse Proxy to some Docker instances (we won’t talk about the nginx vs Apache stuff here for the same reasons we won’t talk about vi vs emacs vs xyz ;)) - and somehow we realized that our apps are a little bit too sensitive to allow them from any ip.

First, we want to activate the needed modules. Normally that should not be necessary, but for sake of completeness:

[Ubuntu] Radsecproy for secure Radius over WAN

Mon, 27 Jun 2016 11:51:44 +0000

Chances are you going to need an radius Auth over WAN - because your Radius and Identity Mngmnt is hosted in the security of the local datacenter of your corp… but the client (i.e. an network switch) is somewhere over the ~~rainbow~~ WAN. You could just pipe the radius traffic over the internet - but there be dragons: radius communication is unencrypted. So… just no.

Enter radsecproxy: Radsecproxy is - as the name implies, an radius proxy - which needs to be installed on both servers (the local one in your company, now called SERVER, and the remote one with the switch attached, now called CLIENT) - and does encrypt the communication between both server parts (over WAN i.e.) via TLS.

[Ubuntu] Freeradius: Improve Uptime

Fri, 20 May 2016 08:00:43 +0000

As a network admin, you’re going to have at least one Freeradius running, mostly for 802.1x authentication. At my place the problem arised, that the service was down too often - for different reasons.

1.) Logrotate
If you’re using logrotate, you should check out /etc/logrotate.d/freeradius:

/var/log/freeradius/*.log {
weekly
rotate 52
compress
delaycompress
notifempty
missingok
postrotate
invoke-rc.d freeradius reload &gt;/dev/null 2&gt;&1 || true
endscript
}

Logrotate does restart freeradius after it swapped the logs with reload, which often results in a crash or race condition (freeradius does not shutdown fast enough, and the restarting process thinks it already got one running process - and both terminate). So to change that, you should stop the process, wait, and start again.

[Ubuntu] Letsencrypt with Apache and Freeradius

Mon, 16 May 2016 08:00:53 +0000

This little tutorial describes how to use Letsencrypt with Apache, Freeradius and Auto-Renewal of the Certificates.

Install Letsencrypt

sudo apt-get update  
sudo apt-get install git  
cd /opt  
sudo git clone https://github.com/letsencrypt/letsencrypt /opt/letsencrypt  
cd /opt/letsencrypt

# Become root  
sudo su

# "Order" certificates (replace SERVERDOMAIN.COM with the DNS of your Server!)  
./letsencrypt-auto --apache -d SERVERDOMAIN.COM --rsa-key-size 4096  
Enter Contact Mail: mail@SERVERDOMAIN.COM  
Configuration Type: Secure #is best, as it does redirect insecure http to https)

# Read PATH variable  
echo $PATH

# Cronjob for certificate renewal  
#you should under all circumstances replace the string following PATH= with your own, as read with the command above.  
#Seperate with ; from the rest of the command like shown in the example  
crontab -e

# letsencrypt
30 2 * * 1 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games;/opt/letsencrypt/letsencrypt-auto renew &gt;&gt; /var/log/le-renew.log
35 2 * * 1 /etc/init.d/freeradius restart
35 2 * * 1 /etc/init.d/apache2 restart

Configure Freeradius

cp -r /etc/freeradius/certs/ /etc/freeradius/certs_bkp  
rm /etc/freeradius/certs/*.pem  
cp /etc/freeradius/eap.conf /etc/freeradius/eap.conf_bkp

vi /etc/freeradius/eap.conf

#certdir = ${confdir}/certs
#cadir = ${confdir}/certs
certdir = /etc/letsencrypt/live/SERVERDOMAIN.COM
cadir = /etc/letsencrypt/live/SERVERDOMAIN.COM
#dh_file = ${certdir}/dh
dh_file = ${confdir}/certs/dh
#private_key_password = whatever
private_key_file = ${certdir}/privkey.pem
certificate_file = ${certdir}/cert.pem
CA_file = ${cadir}/fullchain.pem

# Configure access rights on /etc/letsencrypt  
cd /etc/letsencrypt/  
chgrp -R ssl-cert archive csr keys live options-ssl-apache.conf renewal # set group of cert/key dirs to ssl-cert  
find . -type d -exec chmod g+xs {} \; # directories executable and setguid (set group ssl-cert for new files/dirs)  
find . -type f -exec chmod g+r {} \; # files readable

# Restart Freeradius  
service freeradius stop  
service freeradius start

Additional infos: https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-ubuntu-14-04

[Ubuntu] Networked UPS with apcupsd, APC 750 and Windows

Tue, 10 May 2016 14:47:33 +0000

Due to some serious power outages, I had to install an UPS at the Office of one client. It is an rather small setup: One low-power Ubuntu Server, one Laptop with one TFT Screen, one i3 Desktop with two TFT Screens, one network switch. All in all, about 400VA. I had an old APC Smart UPS 750 VA at hand and used it. Idea was to connect the UPS via USB directly to the Server and hook Laptop and Desktop to that Server via Network. As soon as the Server found that the whole Powergrid went offline, all pcs should shutdown automatically: Enter apcupsd.

[Docker] Install Gogs as Docker container

Thu, 21 Jan 2016 19:00:51 +0000

Gogs (Go Git Service) is an awesome Github/Gitlab like solution, completly written in Go(lang) - which makes it blazing fast - and lightweight.
And as there is even an Docker Container of Gogs available - I thought - why not using this to finally move from my SSH-only-Git to an “real” Gitservice :).

We are going to use docker-compose in this example - so I assume you have installed this as shown in my last guide on Docker.

[Ubuntu] Install Docker

Thu, 14 Jan 2016 19:00:44 +0000

This is a short guide to install the recent Docker Version from the official ppa on Ubuntu 14.04 LTS - along with some other great tools like docker-compose.
Please bear in mind, that Docker needs an 64 Bit System to work with :)! So no i686 plattforms from here on.

# Add Docker Key  
sudo apt-key adv --keyserver hkp://p80.pool.sks-keyservers.net:80 --recv-keys 58118E89F3A912897C070ADBF76221572C52609D  
# Add Repo  
echo "deb https://apt.dockerproject.org/repo ubuntu-trusty main" | sudo tee /etc/apt/sources.list.d/docker.list  
# Update and Install  
sudo apt-get update  
# Install Recommended Package  
sudo apt-get install linux-image-extra-$(uname -r)  
# Install Docker itself  
sudo apt-get install docker-engine  
# Useradd - so you can use docker with your own user without sudo  
sudo usermod -aG docker ${USER}  
# Install pip  
sudo apt-get install python-pip  
# Install docker-compose  
sudo pip install docker-compose  
# Test Docker Install  
sudo docker run hello-world  
# After an additional reboot, you will be able to use docker with your own user (also recommend because of the the new linux-image-extra 🙂

[Windows/Ubuntu] Install chromeIPass: KeePass2 to Chromium Password Management

Fri, 01 Jan 2016 16:37:56 +0000

This post is outdated, the plugin in question does not exist anymore. I would recommend to use “Kee” (https://www.kee.pm/) plugin - but please as bridge to KeePass Password Safe 2 - and not in its own database mode 🙂

I really loved KeeFox, an cool tool which let you use KeePass2 as Password Safe for your Firefox Passwords.
But today, I use Chrome - so no KeeFox for me anymore. And I really do not like the “Synchronize Password” Feature of Google.
So… chomeIPass it is ;)!

Netflow on Ubuntu

Mon, 26 Oct 2015 12:18:37 +0000

Netflow consists of three parts:

The collector, which collects the connection data on a host
the capture, which receives data from collectors and writes them to disk in binary format
the dump tool, which presents the data

We use fprobe as collector and nfcapd as capture tool:

sudo apt-get install fprobe nfdump

fprobe wants to be configured during the installation. It asks for the interface which should be listend upon and where the flow collector does listen. In our example, eth0 should be listend upon and the flow collector is situated on the same computer. Please use 127.0.0.1:9995 for that.

[Ubuntu] Screenshot to File

Thu, 06 Aug 2015 16:00:00 +0000

Just a quick tip. If you want to do a screenshot of a certain area of your screen and save it to a file, use the command CTRL + Shift + Print on Ubuntu Linux.

Open-source / private Evernote alternative: Paperwork

Fri, 26 Jun 2015 17:30:36 +0000

I use tools like Google Keep and Evernote from time to time to manage my pile of recipies, data and “knowledge” (what ever that’d be ;)). However, I don’t feel really comfortable and looked for alternatives. There are certain plugins for ownCloud, however, these are basically text-editors at best… Never liked that idea. So I came around Paperwork: http://paperwork.rocks/
Truth beeing told: It is still in development. It is as bleeding edge as it gets. Sharp as a knife. And yes - I forgot to do backups of my (until then not used) database and lost a lot of data on an simple update… (Yep, the reason why I introduced you to automysqlbackup some days ago…).
But at the moment, it is working very well and I like it very much. I think it will become an really great tool :)!

Private Dropbox/Google Drive/File Sync: Syncthing

Wed, 24 Jun 2015 17:30:06 +0000

I tested quite a lot of sync tools out there: Dropbox, G-Drive, Bittorrent Sync, ownCloud, plain Rsync,… You name it.
But to be true, I never really liked any tool that much: It never really worked out somehow: The Mobile Apps were bad, “Servers” did eat up too much performance, etc. etc.
And we don’t want to forget these little itching problems with privacy - thinking about Dropbox, G-Drive and the now closed source Bittorrent Sync…
Well - enter Syncthing: https://syncthing.net/
In truth I can only say one thing: It works. It just, plainly, works for syncing data from your mobile devices to your swarm of servers or pcs.
So give it a shot :)!

[Ubuntu] Automatic Backup of MySQL Databases

Mon, 22 Jun 2015 17:35:54 +0000

Just install automysqlbackup via apt-get.
You can configure the whole system via /etc/default/automysqlbackup
Backups will be sent to /var/lib/automysqlbackup

[RaspPi] Virtual Accesspoint on Xbian

Fri, 20 Mar 2015 13:08:08 +0000

Little How To to get an Virtual AP running on XBian.
I did NOT choose to install an DHCP Server on Xbian, as I just wanted to use the central one in my network.

1.) Install software

sudo apt-get update  
sudo apt-get install install hostapd hostap-utils iw bridge-utils

2.) Update hostapd

cd ~  
wget http://www.adafruit.com/downloads/adafruit_hostapd.zip  
unzip adafruit_hostapd.zip  
sudo mv /usr/sbin/hostapd /usr/sbin/hostapd.ORIG  
sudo mv hostapd /usr/sbin  
sudo chmod 755 /usr/sbin/hostapd

3.) Configure hostapd
sudo vi /etc/hostapd/hostapd.conf

[Linux] Delete old SSH Keys and recreate them

Sat, 14 Mar 2015 13:07:08 +0000

If you are downloading an Linux Image for i.e. Embedded Systems like Raspberry Pi, sometimes, the SSH Keys are still on the system and are not recreated.
To do that manually, just enter:

sudo rm /etc/ssh/ssh_host_*
sudo dpkg-reconfigure openssh-server
sudo service ssh restart

[RaspPi] Snappy Ubuntu Core on Raspberry Pi 2

Wed, 04 Mar 2015 12:55:09 +0000

Well, I finally got my Raspberry Pi 2 and just could not hold back and wanted to test Snappy Ubuntu Core and give a little introduction and how that thing works.

Ok, but short into: What is Snappy Ubuntu Core?
Well it is meant to be a secure operating system for embedded applications.
It is based on an transactional system-management and can even rollback upgrades of the system core.
There are three kinds of Snappy Ubuntu Core Components:
Snappy Ubuntu Core itself (Core), Frameworks and Apps.
Frameworks can access the Core in certain ways and thus need to be reviewed by the Ubuntu Team.
Apps are completly isolated from each other and have limited access to the system, therefore they don’t need special security profiles or reviews, which makes publishing easier.
Ok, and everything is controlled via the command “snappy”.

[RaspPi] Raspberry Pi and the ili9341 Display

Sun, 27 Apr 2014 15:14:36 +0000

Raspberry Pi - Bad Apple on ili9341 Display

1.) Enable SPI

# remove or comment out the spi blacklist line  
sudo nano /etc/modprobe.d/raspi-blacklist.conf

2.) Install
a) FBTFT drivers as loadable modules

sudo REPO_URI=https://github.com/notro/rpi-firmware rpi-update  
sudo shutdown -r now

b) FBTFT drivers built into the kernel proper

sudo REPO_URI=https://github.com/notro/rpi-firmware BRANCH=builtin rpi-update  
sudo shutdown -r now

3.) Install the frame buffer driver (as root):

apt-get install xserver-xorg-video-fbdev

4.) Configure frame buffer driver:

sudo vi /usr/share/X11/xorg.conf.d/99-fbdev.conf  
Section "Device"  
Identifier "myfb"  
Driver "fbdev"  
Option "fbdev" "/dev/fb1"  
EndSection

5.) add Autostart:
( the gpios= Pins need to be changed to YOUR specification and connection! )
sudo vi /etc/modules

[Security Spotlight] Upgrade OpenSSL to 1.0.1g - Heartbleed Bug - Urgent!

Mon, 07 Apr 2014 14:00:49 +0000

So, thats no joke: OpenSSL broke badly!
Here is the background: https://heartbleed.com/

And as there is no zero-hour-fix for Ubuntu (including 12.04 LTS…), I decided to take chances and overwrite my existing OpenSSL 1.0.1 with the new code. It worked out flawlessly - but your system could REALLY break. Thats as dirty as it possibly could get!

wget http://www.openssl.org/source/openssl-1.0.1g.tar.gz
tar -xvzf openssl-1.0.1g.tar.gz
cd openssl-1.0.1g/
./config --prefix=/usr
sudo make
sudo make test
sudo make install

[Arduino] Intel Galileo Board Unboxing Video

Thu, 03 Apr 2014 18:13:57 +0000

Hello there,

tonight I got my Intel Galileo Dev Board and I decided to do an Unboxing Video.

The first one for me - so.. be kind ;): Youtube

Regards,

Nico

[RaspPi] OpenWRT Trunk with latest Raspberry Pi 3.10.32+ #648 Kernel – as Image download

Tue, 11 Mar 2014 18:09:24 +0000

As a lot of people asked for the OpenWRT / Raspberry Pi Images, I decided to make a new version which replaces the old one from this post ([RaspPi] OpenWRT Trunk with latest Raspberry Pi 3.10.18+ #585 Kernel – as Image download.

That said, the rules haven’t changed:

It is the trunk version of OpenWRT, injected with the latest Raspberry Pi Kernel
opkg list does contain the current stable package list for the OpenWRT RPi port of the latest stable release and will work out of the box (opkg update, opkg install..) Most packages like apache should work out of the box – but kernel moduls could/will probably fail. I won’t build an package mirror and won’t build packages because of limitied time. Sorry!
Other than the normal behavior, the RPi does use DHCP to get its IP Adress. To connect for the first time, use nmap to find your RPi in your network. (Then connect via telnet, set an password with passwd and you’re good to use SSH finally!)
The main partition size has been changed from 48 MB to 64 MB – giving you additional space

You can just download and use the (7zip-ed) image here: rpi_openwrt_2.7z [ 6.1 MB ]

[Ubuntu 12.04] Resolve Grub Boot Problems

Wed, 20 Nov 2013 16:19:32 +0000

If you killed your trusty grub (i.e. by new Install of Windows 8.. :/) you can repair it quite easily:

Boot with an Ubuntu 12.04 Live CD
CTRL + ALT + T

sudo add-apt-repository ppa:yannubuntu/boot-repair
sudo apt-get update
sudo apt-get install -y boot-repair && boot-repair

And click on the repair button! Done!

Source: http://askubuntu.com/questions/333483/how-to-restore-grub-after-deleting-it-from-windows-8-disk-manager

Disable Root Account in Ubuntu

Fri, 15 Nov 2013 18:56:26 +0000

An freshly installed Ubuntu got the root Account set to the best and most secure state ever: DISABLED!
But if you use ready-made Appliances and such, most of these Ubuntu Appliances come with an enabled Root Account. How to disable this account? Easy:

sudo usermod -p '!' root

Source: https://serverfault.com/questions/178080/how-do-i-disable-root-login-in-ubuntu

[RaspPi] OpenWRT Trunk with latest Raspberry Pi 3.10.18+ #585 Kernel - as Image download

Sun, 10 Nov 2013 17:49:53 +0000

THIS POST IS OUTDATED! A NEW IMAGE HAS BEEN POSTED! PLEASE USE THE SEARCH FUNCTION TO FIND THE LATEST VERSION!

As I found out that the old tutorials weren’t helpful and either the OpenWRT Trunk OR the Raspberry Pi Kernel broke the build process (you can still build it successfully, but you won’t be able to use the RPi after boot!) - I sat down and found an new way. This time I don’t let the kernel build by the OpenWRT enviroment, but insert an healthy and prebuilt one by the RPi Team ;)!

[RaspPi] Build Raspberry Pi Kernel 3.10 / NEXT for Debian Wheezy / Raspbian with eGalax Touchscreen Support on Ubuntu 12.04

Thu, 12 Sep 2013 19:26:33 +0000

This is about building the latest Kernel / 3.10 for RPi. Bleeding Edge.

Preperations

sudo apt-get install git libncurses5 libncurses5-dev qt4-dev-tools qt4-qmake pkg-config build-essential gcc-arm-linux-gnueabi bc  
# NEEDS BC!!!!

Clone Stuff

mkdir rpi_kernel_10  
cd rpi_kernel_10  
git clone https://github.com/raspberrypi/tools.git  
git clone https://github.com/raspberrypi/linux.git  
cd ~/rpi_kernel_10/linux/.git  
git branch -a  
cd ~/rpi_kernel_10/linux  
git checkout -t -b rpi-3.10.y remotes/origin/rpi-3.10.y  
git pull  
cd ~/rpi_kernel_10  
git clone https://github.com/raspberrypi/firmware.git  
cd ~/rpi_kernel_10/firmware/.git  
git branch -a  
cd ~/rpi_kernel_10/firmware  
git checkout -t -b next remotes/origin/next  
git pull  
cd ~/rpi_kernel_10

Make Kernel

cd linux  
make mrproper  
mkdir ../kernel  
# Kernel Types  
# find . -name \*bcmrpi\*config -print  
# ./arch/arm/configs/bcmrpi_emergency_defconfig  
# ./arch/arm/configs/bcmrpi_defconfig  
# ./arch/arm/configs/bcmrpi_cutdown_defconfig  
make O=../kernel/ ARCH=arm CROSS_COMPILE=/usr/bin/arm-linux-gnueabi- bcmrpi_defconfig  
make O=../kernel/ ARCH=arm CROSS_COMPILE=/usr/bin/arm-linux-gnueabi- menuconfig #xconfig  
#Device Drivers->Input Device Support->TouchScreens->USB Touchscreen Driver (Build it into or as module, check if eGalax here!)  
make O=../kernel/ ARCH=arm CROSS_COMPILE=/usr/bin/arm-linux-gnueabi- -k -j3  
cd ../  
cd tools/mkimage  
./imagetool-uncompressed.py ../../kernel/arch/arm/boot/Image  
cd ../../

Make Modules

cd kernel  
mkdir ../modules/  
make modules_install ARCH=arm CROSS_COMPILE=/usr/bin/arm-linux-gnueabi- INSTALL_MOD_PATH=../modules/

Install Kernel on existing RPi SD Card / Raspbian

# mount sdcard in your Ubuntu (I made an folder sdb1 for boot partiton and sdb2 for the root partition)  
cd ~  
mkdir sdb1 sdb2  
mount /dev/sdb1 sdb1  
mount /dev/sdb2 sdb2

# boot partition  
#replace /sdb1/boot/bootcode.bin with rpi_kernel_10/firmware/boot/bootcode.bin  
sudo rm ~/sdb1/bootcode.bin  
cp ~/rpi_kernel_10/firmware/boot/bootcode.bin ~/sdb1/  
#replace /sdb1/boot/kernel.img with the previously created kernel image  
sudo rm ~/sdb1/kernel.img  
cp ~/rpi_kernel_10/tools/mkimage/kernel.img ~/sdb1/  
#replace /sdb1/boot/start.elf with rpi_kernel_10/firmware/boot/start.elf  
sudo rm ~/sdb1/start.elf  
cp ~/rpi_kernel_10/firmware/boot/start.elf ~/sdb1/

# root partition  
#replace /sdb2/lib/firmware with <modules_builded_above_folder>/lib/firmware  
sudo rm -rf ~/sdb2/lib/firmware/  
sudo cp -a ~/rpi_kernel_10/modules/lib/firmware/ ~/sdb2/lib/  
#replace /sdb2/lib/modules with <modules_builded_above_folder>/lib/modules  
sudo rm -rf ~/sdb2/lib/modules/  
sudo cp -a ~/rpi_kernel_10/modules/lib/modules/ ~/sdb2/lib/  
#replace /sdb2/opt/vc with firmware-next/hardfp/opt/vc/  
sudo rm -rf ~/sdb2/opt/vc  
sudo cp -a ~/rpi_kernel_10/firmware/hardfp/opt/vc/ ~/sdb2/opt/

# sync usb mount  
sync

# Unmount sdcard  
cd ~  
umount sdb1  
umount sdb2

Boot Pi and calibrate Touchscreen

This stuff happens on the Pi!

Preperations

sudo apt-get install libx11-dev libxext-dev libxi-dev x11proto-input-dev

Install Tool / xinput_calibrator

cd ~  
wget http://github.com/downloads/tias/xinput_calibrator/xinput_calibrator-0.7.5.tar.gz  
tar -xvzf xinput_calibrator-0.7.5.tar.gz  
cd xinput_calibrator-0.7.5  
./configure  
make  
sudo make install

Calibrate (in Xserver, so open Terminal while beeing in Graphical User Mode)

xinput_calibrator

It will give output like this:

[Ubuntu 12.04] EEE PC 1015 PN with Ubuntu 12.04 LTS

Fri, 06 Sep 2013 14:57:03 +0000

I could not help myself but felt the need to have at least one real “Dual Boot” system (not VMWare Stuff) - so I setup my Asus EEE PC 1015 PN with the Ubuntu 12.04 LTS according to mtrons excellent Tutorial ( https://sites.google.com/site/mtrons/howtos/eeepc-1015pn ) which worked out right out of the box.

But - as I haid some trouble with the old Broadcom Wifi/BT Card in Windows 7, I went for an Intel 6250 AGN/WiMax Card. I do not use WiMax and would love an BT option - but the price point of that card on ebay finally got me to press the “Buy now” button. I thought “Well, it is an Intel Card - that should work quite well and stop throwing me out of the University Wifi with no chance but doing an hard reboot of the Laptop to solve the problem” - yeah - it really did. BUT - somehow, after some time and updates to the Ubuntu System, I lost connectivity: Network Manager was nagging for the password all the time - without a reason. Finally I found the solution on this website: http://askubuntu.com/questions/104651/how-do-i-get-wireless-working-on-an-asus-notebook-u56e - with some changes.

[RaspPi] Build Raspberry Pi Kernel for Debian Wheezy / Raspbian with eGalax Touchscreen Support on Ubuntu 12.04

Mon, 02 Sep 2013 14:54:35 +0000

Preperations

sudo apt-get install git libncurses5 libncurses5-dev qt4-dev-tools qt4-qmake pkg-config build-essential gcc-arm-linux-gnueabi bc

Clone Stuff

mkdir rpi_kernel  
cd rpi_kernel  
git clone https://github.com/raspberrypi/tools.git  
git clone https://github.com/raspberrypi/linux.git  
git clone https://github.com/raspberrypi/firmware.git  
cd ~/rpi_kernel/firmware/.git  
git branch -a  
cd ~/rpi_kernel/firmware  
git checkout -t -b next remotes/origin/next  
git pull  
cd ~/rpi_kernel

Make Kernel

cd linux  
make mrproper  
mkdir ../kernel  
# Kernel Types  
# find . -name \*bcmrpi\*config -print  
# ./arch/arm/configs/bcmrpi_emergency_defconfig  
# ./arch/arm/configs/bcmrpi_defconfig  
# ./arch/arm/configs/bcmrpi_cutdown_defconfig  
make O=../kernel/ ARCH=arm CROSS_COMPILE=/usr/bin/arm-linux-gnueabi- bcmrpi_defconfig  
make O=../kernel/ ARCH=arm CROSS_COMPILE=/usr/bin/arm-linux-gnueabi- menuconfig #xconfig  
#Device Drivers->Input Device Support->TouchScreens->USB Touchscreen Driver (Build it into or as module, check if eGalax here!)  
make O=../kernel/ ARCH=arm CROSS_COMPILE=/usr/bin/arm-linux-gnueabi- -k -j3  
cd ../  
cd tools/mkimage  
./imagetool-uncompressed.py ../../kernel/arch/arm/boot/Image  
cd ../../

Make Modules

cd kernel  
mkdir ../modules/  
make modules_install ARCH=arm CROSS_COMPILE=/usr/bin/arm-linux-gnueabi- INSTALL_MOD_PATH=../modules/

Install Kernel on existing RPi SD Card / Raspbian

# mount sdcard in your Ubuntu (I made an folder sdb1 for boot partiton and sdb2 for the root partition)  
cd ~  
mkdir sdb1 sdb2  
mount /dev/sdb1 sdb1  
mount /dev/sdb2 sdb2

# backup config  
cp ~/sdb1/config.txt ~/rpi_kernel/  
# boot partition  
sudo rm -rf ~/sdb1/*  
# Copy all Files from boot  
cp -R ~/rpi_kernel/firmware/boot/* ~/sdb1/  
#replace /sdb1/boot/kernel.img with the previously created kernel image  
sudo rm ~/sdb1/kernel.img  
cp ~/rpi_kernel/tools/mkimage/kernel.img ~/sdb1/  
# restore config  
cp ~/rpi_kernel/config.txt ~/sdb1/

# root partition  
#replace /sdb2/lib/firmware with <modules_builded_above_folder>/lib/firmware  
sudo rm -rf ~/sdb2/lib/firmware/  
sudo cp -R ~/rpi_kernel/modules/lib/firmware/ ~/sdb2/lib/  
#replace /sdb2/lib/modules with <modules_builded_above_folder>/lib/modules  
sudo rm -rf ~/sdb2/lib/modules/  
sudo cp -R ~/rpi_kernel/modules/lib/modules/ ~/sdb2/lib/  
#replace /sdb2/opt/vc with firmware-next/hardfp/opt/vc/  
sudo rm -rf ~/sdb2/opt/vc  
sudo cp -R ~/rpi_kernel/firmware/hardfp/opt/vc/ ~/sdb2/opt/

# sync usb mount  
sync

# Unmount sdcard  
cd ~  
umount sdb1  
umount sdb2

Boot Pi and calibrate Touchscreen

# This stuff happens on the Pi!

Preperations

sudo apt-get install libx11-dev libxext-dev libxi-dev x11proto-input-dev

Install Tool / xinput_calibrator

cd ~  
wget http://github.com/downloads/tias/xinput_calibrator/xinput_calibrator-0.7.5.tar.gz  
tar -xvzf xinput_calibrator-0.7.5.tar.gz  
cd xinput_calibrator-0.7.5  
./configure  
make  
sudo make install

Calibrate (in Xserver, so open Terminal while beeing in Graphical User Mode)

xinput_calibrator

It will give output like this:

Java 7 Update 13 Hotfix

Tue, 05 Feb 2013 10:28:32 +0000

The Java 7 Update 13 has been released by Oracle. You should make sure to download it from http://www.java.com/download asap.

OpenWRT

Thu, 15 Nov 2012 06:00:32 +0000

OpenWRT is one of my most “beloved” operating systems ever. I am using it since 2006, already. It is very small (>= 4 MB), light weight and therefore an excellent choice for embedded computing or very small appliances. I have used it on several occasions (“prototype”) in my blog, but never actually gave a heads up in terms of “What is it?” - So, let’s get rid of that:

OpenWRT is a debian linux derivate especially made for routers. OpenWRT does derive from the famous Linksys WRT series, which were based on Linux. One of the founders found out about that and got Linksys (by pointing out about the caveats of the used Linux GPL License) to the point of releasing the source code (except the wifi drivers). From the point on, OpenWRT was founded and the project began to write an own “router linux”. On the course of that adventure, several forks of OpenWRT were founded (i.e. FreeWRT) - but in the end, OpenWRT remained “THE” third hand firmware for your router. Nowadays OpenWRT does support a load of routers out of the box, with famous titles like the Linksys WRT Series or even hardware like the Seagate Dockstar (which was an sort of NAS Appliance for Seagate Hard drives).

Raspberry Pi Con "Pi and More"

Wed, 14 Nov 2012 18:17:32 +0000

At the 23. of August 2012, the University of Trier held the first Raspberry Pi Convention in Germany. It was a little, but awesome gig with about 30 IT Students and other interested people.

The main idea was to rise the awareness for the new microcomputer, called “Raspberry Pi” which combines an 700 MHz ARM Processor, 512 MB of RAM, Full HDMI Output, Audio, Ethernet and USB into an very small and affordable package (about 35 US Dollar). With this microcomputer, and its General Purpose Input and Outputs (GPIO), pupils can actually have a “hands-on” (in) physical computing. That means: Connecting software (i.e. Python, Perl, C programs) with the real world. For example: Controlling LEDs, driving motors or even react on buttons, attached to the GPIO port. Combining these possibilities into a small and affordable package started a big hype about this little computer, long before it was even available to the public.

IPv6 Primer \ Presentation

Wed, 14 Nov 2012 13:37:17 +0000

Following my work on IPv6/Dualstack EIGRP Routing on c3560 I did create an IPv6 Primer / Presentation for my staff and other technical interessted people. So if you are interessted in an little insight to my work and IPv6, feel free to download this file (German, about 1 MB): IPv6, Nico Maas (2012) PDF

[Samba] Windows Client can't access Unix Samba Share KB2536276

Thu, 07 Jul 2011 14:07:43 +0000

On 16.06.2011 Microsoft fixed an Security Issue with Samba which ended in Windows Users beeing unable to access Unix Samba Shares by using Plain Text Authentication.
By removing Security Update KB2536276 and rebooting you can enable your client again - or you patch your samba server, which is the real source of error - Microsoft did just fix an flaw.

https://bugzilla.samba.org/show_bug.cgi?id=8238

https://bugzilla.samba.org/attachment.cgi?id=6593

Infos taken from:
http://answers.microsoft.com/en-us/windows/forum/windows_xp-windows_update/kb2536276-windows-xp-pc-get-system-error-58-when/d9dbdde5-2666-4423-b47c-fbdb80b995d9

[PROCMAIL] Anonymized E-Mail

Tue, 28 Jun 2011 11:59:52 +0000

Feedback is always important, especially if its about working with other people.

For our little (now over 10 year lasting) monthly meeting we wanted an Mailaccount to which people could send ideas and other stuff - but before the Mail would be forwared to the “heads” accounts, we wanted an function to strip off the senders email address - as we wanted to give them the freedom of sending anonymous feedback with their current Mailaccounts (yeah, we won’t be able to answer because of that - but its ok!).

[Linux] Ubuntu Root Server to VMWare BareMetal Recovery

Fri, 18 Mar 2011 07:00:41 +0000

I got an root server on the net hosting an important website and am doing backups on a daily base using Tartarus ( http://wiki.hetzner.de/index.php/Tartarus_Backup-Konfiguration ). But as we all know: Backups are only worth a penny if they really work and are usable after an crash. Therefor I did try to recover the “dead called” machine onto BareMetal - or at least BareAir - as it was an VMWare Machine I used.

[Linux] Multiplexing Screen

Wed, 09 Mar 2011 07:40:03 +0000

And now an nice tip by Darren Kitchen of Hak5!
( www.hak5.org )

HakTip: Multiplexing Screen Sessions

What’s more wicked than a screen session? Two screen sessions! As we’ve talked about recently the unix command Screen is a great way to maintain bash sessions from multiple SSH clients without losing your work. My favorite shortcut after invoking the “screen” command is CTRL+a followed by “S”, which splits the screen horizontally in two. Use CTRL+a then Tab to switch between the views. Debian users get the added sexyness of vertical split by hitting CTRL+a then Pipe.

[Linux] Screen

Thu, 24 Feb 2011 17:12:50 +0000

Hello there, this a 5 Minute Tutorial to screen.
What Screen is?
Well screen is an old unix / linux terminal programm with which you can create multiple virtual “screens”.
You can switch between these screens and also can disconnect from them.
Especially useful: If you start an daemon within screen and disconnect from it,
you can reconnect anytime and see what its doing.
Or you can setup a screen session, detach and close your SSH.
If you reconnect, it will still be running.
Oh, and it will be also there and running if your connection drops.

Webconverger - Install ISO to HDD

Thu, 24 Feb 2011 04:46:55 +0000

Just found some old notes, dunno wheter they still apply but its worth a try.

Make an Image of your choice by the creator. I made an post about that. Copy the resulting ISO to an USB Stick.
Boot in the new PC with Ubuntu or Knoppix Live DVD. Mount the USB Stick.
Copy the ISO to the Harddrive. With dd. Check your of first, don’t do something stupid - like overwriting your main drive…
dd if=webconverger.iso of=/dev/sda
Reboot, thats it

[OpenWRT] Build your own image on Ubuntu 10.03

Tue, 22 Feb 2011 17:22:36 +0000

I’m a huge geek when it comes down to OpenWRT.
I love the style of small little router boards with not much power consumption and still big impact and power.
I have been registred on OpenWRT Forums since 2006, and thats also the time I’m already working on it and doing (weird) stuff with it.
And actually I just plainly love that small debian derived linux.

And thats why most of you would be wondering why I never downloaded the build enviroment and build an image myself.
Actually, I have to face the same question. Because, In fact, its very easy to build an image from source to your own like.

Dropbox

Sat, 19 Feb 2011 22:39:46 +0000

So, another tool I’d like to present, Dropbox.
Dropbox is an online file synchronisation service which does take place on Amazon Servers.
The files are encrypted and stored securely, also with quite high performance.
Nice part? 2 GB of space are free.
You get 250 MB for doing the Tour,
and another 250 MB if you followed the invitation of another person.
( Oh, and yes the other person does get 250 MB as well.. )
Just in terms, heres my invitation link, would be nice if you would consider using it: http://db.tt/tIYzeey

Ubuntu 10.04 - Install Madwifi and Aircrack-ng

Sun, 03 Oct 2010 17:08:15 +0000

PreWork:

apt-get update  
apt-get install build-essential  
apt-get install libssl-dev

Install Madwifi for AR5007EG / AR5001

# Download latest from http://snapshots.madwifi-project.org/madwifi-hal-0.10.5.6/  
tar -xvzf madwifi-hal-0.10.5.6-r4126-20100324.tar.gz  
cd madwifi-hal-0.10.5.6-r4126-20100324  
make  
make install  
# System, Hardware Driver, mark "Activate Alternate Drivers"  
reboot

Install latest Aircrack-ng

# Download latest from http://www.aircrack-ng.org/  
# i.e. wget http://download.aircrack-ng.org/aircrack-ng-1.1.tar.gz  
tar -xvzf aircrack-ng-1.1.tar.gz  
cd aircrack-ng-1.1  
make  
make install

Lets go! ^^

Integreate KonBoot in UBCD 5.02

Fri, 30 Jul 2010 06:21:59 +0000

Konboot

ubcd\menus\grub4dos\others.lst

title Kon-Boot V1.1\n Boot into any OS without admin account password!  
map --mem /ubcd/images/konboot.img.gz (fd0)  
map (hd1) (hd0)  
map (hd0) (hd1)  
map --hook  
rootnoverify (fd0)  
chainloader +1

ubcd\menus\syslinux\others.cfg

LABEL -  
MENU LABEL Kon-Boot V1.1  
TEXT HELP  
Boot into any OS without admin account password!  
ENDTEXT  
LINUX /boot/syslinux/memdisk  
INITRD /ubcd/images/konboot.img.gz

PXE Boot UBCD 5.02

Fri, 25 Jun 2010 07:26:36 +0000

EDIT: Reuploaded the PXE Package

What you need:

tftpd32 ( http://tftpd32.jounin.net/ )
UBCD 5.02 ( http://www.ultimatebootcd.com/ )
PXE Package ( https://mega.nz/#!4uxXyTCL!XrFyhuW5TnkdAomdtEWKZ-pbZnMXaiy0FjT_7mgcf1I )

We do start with the file preparations:

Preparing UBCD
Unzip the ISO to an folder, lets choose C:\ubcd
Unzip the PXE Package to C:\ubcd, so that pxelinux.0, memdisk, menu.c32 and the pxelinux.cfg Folder are within the root Folder of the ubcd
Setup up the tftpd32
Easy as hell. Download, unzip.
For example C:\tftpd32
And now to the config.

But first basics tftp config:

Webconverger - Build your own Internetcafé

Tue, 22 Jun 2010 14:18:32 +0000

Install Debian
Add following lines to /etc/apt/sources.list :
deb http://live.debian.net/ sid-snapshots main contrib non-free deb-src http://live.debian.net/ sid-snapshots main contrib non-free
apt-get install live-helper git git-core svn sudo
mkdir /home/webconverger
cd /home/webconverger
git clone git://git.debian.org/git/debian-live/config-webc.git
modify /home/webconverger/config-webc/webconverger/auto/config
( i.e. change
homepage=http://portal.webconverger.com to the one you want,
add Kioskrest every 10 Minutes after last use:
kioskresetstation=10
change bootlogo
change website to the one you want and add an bg.png to the account,
otherwise add noxbg to the boot to make the background blank )
cd /home/webconverger/config-webc/webconverger
lh config
lh build
/home/webconverger/config-webc/webconverger/binary-hybrid.iso

Clean to rebuild:

[ESXi 3.5] ESXi 3.5 Update 5 Install CD with oem.tgz + ssh,ftp,rsync and wget (made easy)!

Tue, 30 Mar 2010 14:41:53 +0000

Hello,

It has been a while since I was really doing something new with VMWare, but as I had the need to install some new Servers, I also was looking for better ways on integrating oem.tgz and other features. For that, I stumbled upon an very cool and useful Linux Build Script for ESXi, made by the User Varazir. After this How To you’re going to hold an ISO Installer with SSH, FTP, RSYNC, WGET and the Community Unified Driver Pack 1.1.0 oem.tgz in your Hands. Or an USB Stick with the same features - as Live Boot or Installer. Your choice.

[pRoToTyPe] LaFonera OpenWRT/Kismet/GPS/SD-Mod

Fri, 19 Feb 2010 12:26:54 +0000

So, here is the Documentation of the Project that I have been working on the past Months. I called it “Prototype” for no other reason as not having another name ^^’. But actually its just an plain and simple Kismet Server running on an LaFonera 2100 and using GPS for Positing and Time aswell as an SD Card for the Log Files. So… there were many things to do on that project, so that thing will get quite a bit longer and get some pics.

Iptables Basic Introduction

Wed, 17 Feb 2010 13:36:01 +0000

Iptables are the Firewall of many Unix based Systems. Its quite easy to install and more easy to manage than most ppl would think of. Lately I became the SysAdmin of an Linux based Root Server and wanted to secure it as much as possible. So I went for my first exercise with Iptables and found that they are quite to manage as long as you know some important things.

[Jasager] Fon/Fon+ Newbie Guide to Installlation of Jasager 1.0 Firmware

Wed, 17 Feb 2010 12:58:56 +0000

Pre Info:
This guide has been made with an Fon+ (2201), but should work with any other
Fonera Classic as well. Only limitation is that I have Problems with my
Jasager in Terms of SSIDs, there seems to be a Problem which hasn’t been
addressed by Digininja, but the Rest should work.
(Problem described here: http://hak5.org/forums/index.php?showtopic=13883 )

This guide should be quite useful and has been written by using guides and
stuff from this Forum, I just wrote it together and added my own experiances.
Maybe that will turn out as a good starting point and help some newbies.

Quick'n Dirty Moodle Learning Platform Setup

Fri, 22 Jan 2010 07:34:57 +0000

Download and Install TurnKey LAMP (Vmware Appliance)
http://www.turnkeylinux.org/redir.php?url=http%3A%2F%2Fswitch.dl.sourceforge.net%2Fproject%2Fturnkeylinux%2Fturnkey-lamp%2F2009.10-hardy-x86%2Fturnkey-lamp-2009.10-hardy-x86.zip

go to http://IP

go to Webmin (https://IP:12321)

change root pw  
change root pw in mysql  
create mysql table utf8-unicode "moodle"  
mkdir /var/moodledata  
chown nobody /var/moodledata  
chmod 777 /var/moodledata

root@lamp:/var# apt-get update  
root@lamp:/var# apt-get install wget  
root@lamp:/var# apt-get install php5-gd  
root@lamp:/var# apt-get install php5-curl  
root@lamp:/var# apt-get install php5-xmlrpc

cd /var/www  
wget http://download.moodle.org/download.php/direct/stable19/moodle-weekly-19.zip  
unzip moodle-weekly-19.zip

Access http://ip/moodle

(create config.php in /var/www/moodle)

change pwd,
user admin, pw admin

[ESXi 3.5] Dell Optiplex G620 ESXi 3.5 U5 & Problems with Ubuntu 9.10 and Vmware Tools

Fri, 08 Jan 2010 07:19:46 +0000

So, we happend to get an new ESXi 3.5 Server, using an Dell Optiplex G620 for that.

To install ESXi 3.5 U5 onto that Desktop Machine, you NEED to upgrade to Bios A11 and Shutdown CPU Limit ID - and do the Install in SATA Normal Mode (not Compability!). You also need to use the Tipps to install to an IDE Drive (so changing TYPE_IDE to TYPE_ISCSI in the TargetFilter.py) - than it will work flawlessly… (As long as you get the Bios updated, we had the “orignial” A01 Bios and it refused to use an Boot CD for the Update (did load but then always did disable Keyboard - you couldn’t enter anything…). We solved the Problem by using an REAL Floppy Disk… Yeah, was hard to get one. That worked! Ah and by the way, the ESXi install did load then, but the Keyboard got Stuck again - we plugged in an USB Keyboard and that one worked, the PS2 didn’t wanted to.. well, it always an Adventure setting up ESXi on non-listed Hardware - especially with Dell Bios ;-)…

Remote Desktop with XDMCP on Ubuntu 9.10

Thu, 07 Jan 2010 11:46:54 +0000

To access the unsecured(!) Remote Desktop of an Ubuntu 9.10 installation, you need following:

First, install the openssh-server:

sudo apt-get install openssh-server

Then, you need to enable the XDMCP Server.

That became a bit tricky on that Installation, as the “Point ’n Click” enabling has been removed.

Dunno why. So, thats how it works. First we copy over the “empty” custom.conf for gdm:

sudo cp /usr/share/doc/gdm/examples/custom.conf /etc/gdm/

Then we edit it:

sudo vi /etc/gdm/custom.conf

It should look like this in the end:

SSH Tunneling

Wed, 06 Jan 2010 12:30:44 +0000

One of the most important things by working in “dangerous” Networking Enviroments is protection.

And by that I don’t mean the usual (and important!) Anti Virus, Anti Malware and Firewall Software, but Traffic Tunneling, meaning VPN or SSH.

SSH is the secure equivalent to the good old (and Plaintext transmitted) Telnet. And its also more powerful: Its use is not limited to remote Control, but can also provide an secured Datatunnel through which all your Traffic to your Remote Location (i.e. an Mysql Database, Web- or Mailserver or the Web itself) is tunneld - and encrypted. Giving therefore little to no chance to “Wiresharkes” and other Cable Tappers or Span Users.

[Eee901] Create an Backtrack 3 Eee901 Usb Stick

Wed, 07 Oct 2009 13:53:21 +0000

There are dozend Situations in which Backtrack 3 comes in handy.
Backtrack 3 is an special Linux Suite of Security Auditing Tools which allow i.e. WEP Cracking, Network Security Checking, Sniffing, and so on.
To make this nice Suite a bit more portable, we will put it onto an Usb Stick and customize it with Eee901 Drivers, persistent Changes and Nessus 4!

Download:
Backtrack 3 USB Version: http://www.remote-exploit.org/backtrack_download.html
unetbootin Windows: http://unetbootin.sourceforge.net
Partiton Tool, like partedmagic: http://partedmagic.com
Eee901 Pack: 901_net_gfx.lzm (you’ll find it in google)
Nessus 4.0.2: http://www.nessus.org/download/
( We need the 4.0.2 as Nessus-4.0.2-linux-generic32.tar.gz and the Graphical Linux Interface for nessusd NessusClient-4.0.2-es4.i386.rpm )
And you should help yourself to an free personal key under http://www.nessus.org/plugins/?view=register-info

Reset Password on Linux

Fri, 02 Oct 2009 08:55:52 +0000

Boot with Knoppix
mount /dev/sda1 /mnt
vi /etc/shaodw
i
kill the string between the first and second :…
for example: user:$1$pM8HYEMB$Cx0yiRM4pj2Ty4lFBWuy4.:12038:0:99999:7::: becomes:
user::12038:0:99999:7:::
ESC :w Enter
cd /
umount /mnt
reboot
login with user and just press enter on password.
enter passwd and change the password.
you’re done!

SCP with Plain Password

Mon, 10 Aug 2009 13:33:58 +0000

My altered Version:

Call it with ./scp_bkp.sh User Password BKPPath ServerIP

#!/usr/bin/expect -f
set USER [lrange $argv 0 0]
set PW [lrange $argv 1 1]
set BKPPath [lrange $argv 2 2]
set IP [lrange $argv 3 3]
# 1 User, 2 PW, 3 BkpPath, 4 IP
# trick to pass in command-line args to spawn
#eval spawn scp $argv
eval spawn scp $USER@$IP:/bootbank/state.tgz $BKPPath
expect "password: $"
send "$PW\n"
# wait for regular shell prompt before quitting
# probably a better way using 'wait'
expect "$ $"

Orginally taken from: http://tiebing.blogspot.com/2009/01/scp-with-automatic-password-input.html

Linux Tar and Zip

Mon, 03 Aug 2009 07:47:48 +0000

Untar tar.gz

tar -xvzf filename

Tar tar.gz

tar -pczf filename folder/

Untar tar.bz2

tar -xvjf filename

Unzip

unzip filename

FreeNAS on ESXi

Fri, 31 Jul 2009 21:44:30 +0000

If creating an FreeNAS VM, choose Windows Vista (32bit) as VM Machine, as it will use the Intel E1000 NIC which does give you about double network performance.
DON’T FORGET TO CHANGE BACK VM TYPE TO LINUX (32bit) BEFORE POWERING ON!!!!

Taken from: http://www.network0.org/2008/11/18/on-freenas-and-esx-performance/

Linux Networking

Sun, 26 Jul 2009 08:36:11 +0000

Configure NIC:

ifconfig -a eth0 192.168.1.132 netmask 255.255.255.128  
route add default gw 192.168.1.129

Set NIC down / up:

ifconfig eth0 down  
ifconfig eth0 up

Restart Networking:

/etc/init.d/networking restart

Shrink VMware Image Files on Linux Appliances

Thu, 16 Jul 2009 13:35:19 +0000

Works only with dynamic HDDs!

Backup!
Remove old / unused Packages
Remove downloaded Packages: sudo apt-get clean, Remove only old downloaded Packages: sudo apt-get autoclean
“ZeroOut” unused Space: cat /dev/zero > zero.dat ; sync ; sleep 1 ; sync ; rm zero.dat
Under GUI: “sudo vmware-toolbox” and use shrink on “/”
Under VIClient: Defrag

sudo File

Thu, 16 Jul 2009 13:26:02 +0000

sudo visudo /etc/sudoers

yourUsername ALL=(ALL) ALL

Get Ethernetcard working again in Linux under ESXi

Thu, 16 Jul 2009 13:25:10 +0000

After installing Ubuntu Server on Vmware ESXi, I couldn’t find a NIC:

sudo /etc/init.d/networking restart

Reconfiguring network interfaces…

eth0: ERROR while getting interface flags: No such device  
SIOCSIFADDR: No such device  
eth0: ERROR while getting interface flags: No such device  
SIOCSIFNETMASK: No such device  
SIOCSIFBRDADDR: No such device  
eth0: ERROR while getting interface flags: No such device  
eth0: ERROR while getting interface flags: No such device  
Failed to bring up eth0.

Problem is that the ethernet MAC addresses are cached.

Install Vmware Tools on Linux

Thu, 16 Jul 2009 13:21:25 +0000

Under Debian necessary:

apt-get install autoconf automake make psmisc gcc  
apt-get install linux-headers-`uname -r` build-essential

Short:

tar -xzvf VMwareTools-######.tar.gz  
cd vmware-tools-distrib  
./vmware-install.pl  
vmware-tools-config.pl

Long:

Viclient, Connect to VM  
Menu "VM/Install VMware Tools"  
Tools are mounted to Cdrom  
mkdir /mnt/cdrom  
mount /dev/cdrom /mnt/cdrom  
cd /mnt/cdrom  
tar zxvf VMware-Tools-xxxxxx.tar.gz -C /opt/  
cd /opt/vmware-tools-distrib  
./vmware-install.pl

sed and awk Commandlist

Thu, 16 Jul 2009 12:59:41 +0000

sed -e :a -e 's/<[^>]*>//g;/</n;//ba'

(Entfernt Html)

sed -e s/Stop.*$//

(Löscht Alles Nach Stop)

sed q

(Ausgabe Erste Zeile)

sed 's/[ \t]*$//'

Lösche Unsichtbare Zeichen (Leerzeichen, Tabulatoren) Vom Ende Aller Zeilen

sed 's/^[ \t]\*//;s/[ \t]\*$//'

Lösche Unsichtbare Zeichen Sowohl Am Anfang Als Auch Am Ende Jeder Zeile

sed '1d'

(Lösche Erste Zeile)

sed '$d'

(Lösche Letzte Zeile)

head -n -5

(löscht 5 letzten Zeilen)

sed 'n;n;s/\n/ /g'

(Fügt Drei Zeilen Die Untereinander Stehen Zusammen, Mit Leerzeichen)

sed '/pics[/]pix.gif/s/^/notRepl:

(fügt notRepl direkt an Anfang der Zeile hinzu wenn pic/pix.gif enthalten ist in der Zeile)