@borgmatic entirely fwiw and feel free to ignore: https://gist.github.com/bigntallmike/c46032e742c4a29ee9d78f64e1f5a8c5
#borg #backup #sysadmin

📢 Nächster #Adminstammtisch in Berlin!

📅 01.10.2026, 19 Uhr
📍 BHT, Haus Bauwesen, Raum E17
💻 Hybrid + Stream

🎤 Norbert Auler:
*Synchronisieren von mehreren PowerDNS Authoritative DNS Servern*

Themen: #PowerDNS, LMDB, Lightning Stream & S3.

Details + Stream + Anmeldung zum Essen:
https://www.flarp.de/posts/2026/2026-10-01/ <https://www.flarp.de/posts/2026/2026-10-01/>

Kommt vorbei – wir freuen uns auf euch!

#Berlin #DNS #Sysadmin #Linux #OpenSource

Remember, kids, disable NAT on this network before leaving the office.

#sysadmin #shitposting #shitpost

SSH-Brute-Force-Attacken laufen auf jedem öffentlichen Server im Dauerbetrieb. Der Großteil der Linux-Server setzt standardmäßig auf Passwörter oder statische SSH-Keys – beides hat bekannte Schwächen. Passwörter sind durch Credential-Stuffing und GPU-Cluster in Minuten geknackt, statische Keys bleiben unverändert, bis jemand sie manuell rotiert.

Dieser Artikel zeigt, wie du auf #Ubuntu 24.04 LTS und Ubuntu 26.04 LTS deinen Server mit zwei konkreten Maßnahmen absicherst: SSH mit FIDO2 und YubiKey für hardwarebasierte, passwortlose Authentifizierung und #CrowdSec als kollaboratives Intrusion-Prevention-System. Beides zusammen schließt die häufigsten Angriffsvektoren, ohne dass du dich um Passwort-Rotation oder Key-Management kümmern musst.

-> https://admindocs.de/de/serverumgebungen/linux-server-haertung-fido2-crowdsec

#Linux #cybersecurity #ssh #fido #sysadmin

Ansible Grundlagen: Automatisierung für Linux-Administratoren

In modernen IT-Infrastrukturen gehört die manuelle Konfiguration einzelner Server über interaktive SSH-Sitzungen der Vergangenheit an. Wer Dutzende oder Hunderte Linux-Maschinen verwalten muss, stößt mit klassischen Ad-hoc-Skripten schnell an Grenzen: Fehlende Idempotenz, inkonsistente Paketstände und unübersichtliche Konfigurationsabweichungen (Configuration Drift) führen zu instabilen Umgebungen. Genau an dieser Stelle etabliert sich #Ansible als Industriestandard für Configuration Management, Bereitstellung und Orchestrierung.

https://admindocs.de/de/devops/ansible-grundlagen-automatisierung-fuer-linux-administratoren

#linux #devops #opensource #ansible #automatisierung #sysadmin

I know, sounds strange, but: Microsoft SQL Server can be installed on Linux.
Some people told me it's a bad idea as it works quite badly.

Is it true? Did any of you try it? What's your experience with it?

#SQL #IT #SysAdmin

The week starts with a phone call, apparently urgent, judging by the hour:

"Hey, the cybersecurity team says we have some insecure certificates that need to be updated immediately. The ones in Italy, Germany, France, and Poland are fine, but all the ones in the United States need to be updated right away!"
Me: "But... you don’t have any servers in the United States."
Him: "I'll email you the domains and IP addresses, hold on..."

I read the email.
I laugh.

"Those are the sites behind Cloudflare. They need to send the report to Cloudflare. Those are their certificates..."

#IT #SysAdmin #MondayMorning

New in FreeBSD Foundationals, part 4: rc.d, the service framework that fits in your head.

How /etc/rc orders your services, why rc.conf is just shell, what rc.subr gives you for free, and the daemon(8) pidfile trap that makes "service stop" quietly restart your process.

Then I audited my own production rc.d scripts. One of them reports "not running" while serving live Mastodon traffic.

https://blog.hofstede.it/freebsd-foundationals-rcd-the-service-framework-that-fits-in-your-head/

#FreeBSD #rcd #SysAdmin #Unix #RunBSD

I just need to share that I've "discovered" and started using the #MooseFS distributed file system on my local LAN and its really quite fantastic. As a professional #sysadmin I didn't find it hard to install or use, I think its quite straightforward but I'm coming at it from a different perspective perhaps than 'average' users. I will point out: it works for #immich storage, as well as steam games, believe it or not. Great for my #photography needs too. Ask anything!
#Linux #homelab #storage

ca m'apprendra à ne pas faire les mises à jour régulièrement...
#sysadmin #forgejo #homelab

je regarderait ca demain

The GNUHealth control center 5.0.4 is out!
https://docs.gnuhealth.org/his/techguide/administration/controlcenter.html
#GNUHealth #sysadmin #OpenScience #GNU

Fediverse: Do we know anyone/anywhere in the #Ottawa (National Capital) region or remote in #Canada that needs:
1) A #cybersecurity type person;
2) A hands-on (optional feet on the ground on-site) technical delivery / troubleshooting / deployment / maintenance / support escalation type person?

And in the #Kitchener #Waterloo #Guelph area or #remote in Canada:
3) A #sysadmin / #storage management type person?

I have three colleagues looking for work in these areas.

#FediHire #JobSearch

Alt...

A drawing of four people standing talking, sitting working on a laptop, or looking down from the top of a ladder around an oversized megaphone, with the general vibe of the concept of amplification and communication.

coucou les vimistes !

j'adore faire un gf sur un nom de fichier pour l'ouvrir.

sauf que ça marche pas si le fichier n'existe pas.

Une idée pour implémenter "ben s'il existe pas, créé le avant de l'ouvrir !" ?

poke @fabi1cazenave

#vim
#sysadmin

Well that's interesting. Nagios' own #documentation for installing on #FreeBSD includes steps for #SELinux. 🤔

#sysadmin #homelab #tech #monitoring #funny #hmmm

Alt...

Steps for installing Nagios4 on FreeBSD also includes info on SELinux. Why?!?!

2.5 Admins 319: Funding Open Source

The challenges of funding open source software projects, how Netflix uses FreeBSD in a positive way, why you shouldn’t try to complicate your monitoring, and running servers in a small residence.

https://2.5admins.com/2-5-admins-319/

#podcast #sysadmin

Alt...

2.5 Admins artwork

Klassische Linux-Distributionen folgen seit Jahrzehnten einem vertrauten Muster:

Ein Paketmanager entpackt Dateien direkt in gemeinsame Systemverzeichnisse wie /usr/bin, /usr/lib oder /etc. Auf Systemen mit #APT unter #Ubuntu, #DNF unter #Fedora, #Zypper unter #openSUSE oder #Pacman unter #ArchLinux funktioniert das im Alltag verlässlich – stößt aber an prinzipbedingte Grenzen, sobald widersprüchliche Anforderungen aufeinandertreffen.

Wird ein Paket aktualisiert, überschreibt es geteilte Dateien anderer Programme. Schlägt ein Systemupdate fehl oder bricht mitten im Entpackvorgang ab, verbleibt das System oft in einem inkonsistenten Zwischenzustand, der manuelle Reparaturen erfordert.

Nix wählt ein radikal anderes Architekturmodell:
-> https://admindocs.de/de/linux-neulinge/nixos-der-leitfaden-vom-paketmanager-nix

#nixos #nix #linux #paketmanagement #devops #linuxadmin #sysadmin #reproducibility

RE: https://social.owncast.online/@owncast/117362130347294367

Let me get this straight.

Digital Ocean paid 2 million dollars to fund that rich racist's Linux project.

But it has started pulling out support of open source projects that got tiny fractions of that for their functioning.

I'm never paying Digital Ocean again.

Vote with your wallet.

#enshittification #techbros #cloud #sysadmin #programming #linux #privacy #foss #opensource #technology

Russ Sharek boosted

Owncast » 🌐 2026-09-30
@owncast@social.owncast.online

This is very bad news. Owncast has relied on this program the past couple of years, and has allowed us to have servers and services we wouldn't normally afford to be able to do otherwise, especially now with Gabe being unemployed.

Any other cloud hosting providers want to step in and help all the open source projects that are going to be in this position?

Additionally, this might be a good time to show your financial support for Owncast.

https://fedifunding.org/projects/owncast/

Alt...

Hello, We're reaching out to share an important update regarding the DigitalOcean Open Source Credits Program. DigitalOcean has decided to sunset the Open Source Credits Program. As part of this change, we are no longer accepting new credit applications or approving credit renewals, extensions, or additional credit requests. If you currently have Open Source Credits that have already been granted, those credits will continue to be honored according to their existing terms and conditions. No action is required for your existing credit allocation. Additionally, the dedicated inbox for the Open Source Credits Program will stop being monitored as part of this transition. For any further questions or assistance, please submit your inquiries through our standard support channel: https:// www.digitalocean.com/company/contact/support We appreciate your participation in the DigitalOcean Open Source Credits Program and the work you do to support the open source community. Thank you for being part of the program.

Are you looking to deploy robust IT infrastructure in Europe? 🛑 Stop routing Western European traffic through distant hubs!

Explore iDatam's Bare-Metal Dedicated Servers in Paris, France! Located in a highly connected digital hub, you get unshared bare-metal compute power, up to 10Gbps bandwidth, and sub-millisecond latency across the EU via the France-IX.

Check out our available hardware here: https://www.idatam.com/dedicated-servers-france/paris/
#WebHosting #SysAdmin #DataCenter #Linux #Paris #BareMetal #TechNews

Alt...

Bare-Metal Dedicated Servers in Paris

I can delegate a dataset to a running #FreeBSD #jail, but I can't start a jail on a delegated dataset.

Trying to recall if this is normal? #sysadmin

(No, I don't normally delegate datasets to jails.)

Happy 26th birthday, Knoppix! 🐧🎂🎉

Based on @debian, #Knoppix is one of the first #CD and #USB bootable #Linux distros, a historic part of #opensource, and a #community favourite.

Thank you Klaus Knopper and the Knoppix community for your contributions to #FOSS.

#Knoppix #Debian #Sysadmin #LPI #programming #GNULinux #FLOSS

OpenBSD 8.0 is due out soon, and -current snapshots identify as 8.0 already. So it's time to reprise "You Have Installed OpenBSD. Now For The Daily Tasks." https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html which should help answer some common questions. #openbsd #newrelease #maintenance #sysadmin #security #dailytasks #freesoftware #libresoftware

Minutes since the last "your network isn’t secure because it doesn’t use XYZ" email:

0

Where XYZ is, as usual, some procedure copied from a compliance handbook that would actually make the current setup less secure.

#IT #SysAdmin

On passe notre temps à corriger des trucs, et bien souvent, en réparer un fait naître un petit nouveau ailleurs. C'est le cycle normal du code.
Au lieu de crier au scandale pour un widget qui fait des siennes (que ce soit sur iOS, chez #Samsung ou ailleurs), un peu de recul ferait du bien. La perfection absolue n'existe pas dans le numérique.
Et vous, vous en pensez quoi de cette tendance à dramatiser le moindre bug ?
#Informatique #SysAdmin #Tech #Bug #LogicielLibre

Worried that an upgrade could leave you with an unusable system?

FreeBSD boot environments, powered by ZFS, provide a straightforward way to recover.

In this video, learn how FreeBSD boot environments can make upgrades and system maintenance easier to manage.

Watch the video to learn more.
https://www.youtube.com/watch?v=MfHCXEzRfao&t=4s

#FreeBSD #ZFS #SysAdmin #OpenSource

Piece of old internet

#retro #yajoo #crt #nostalgia #linux #sysadmin #programming #macos #windows

Alt...

crt monitor with yahoo mail opened

Quelqu'un a vu des erreurs "451 4.7.500 Server busy" depuis les serveurs mail microsoft ce matin ?

#sysadmin #mail #microsoft

Your playbook failed. Management wants a root cause. You have 30 seconds.

Introducing larvitz.bofh, an Ansible collection that returns Bastard Operator From Hell excuses:

"Root cause: The mainframe tripped over an unhandled SIGSEGV in the automated espresso machine."

Seedable, so each host keeps its story straight. Bonus category: Deutsche Bahn.

https://codeberg.org/Larvitz/ansible-bofh

#Ansible #BOFH #SysAdmin #DevOps #Codeberg #Humor #Linux

SmartOS: The illumos Way of Thinking About Servers

A practical look at SmartOS, illumos, zones, LX compatibility and the way this operating system approaches servers. Not a complete guide, just enough to understand why I like it.

https://it-notes.dragas.net/2026/09/28/smartos-the-illumos-way-of-thinking-about-servers/

#SmartOS #illumos #Hosting #Server #IT #SysAdmin #OwnYourData #ITNotes #Tutorial

SmartOS: The illumos Way of Thinking About Servers

A practical look at SmartOS, illumos, zones, LX compatibility and the way this operating system approaches servers. Not a complete guide, just enough to understand why I like it.

https://it-notes.dragas.net/2026/09/28/smartos-the-illumos-way-of-thinking-about-servers/

#SmartOS #illumos #Hosting #Server #IT #SysAdmin #OwnYourData #ITNotes #Tutorial

For almost a year, my Ansible connection plugin for FreeBSD jails had a jail escape.

A symlink inside a jail, a root-owned mv on the host, and every file transfer could land wherever the jail wanted. Rejecting ".." didn't help at all.

Now it's CVE-2026-55074. Here's the bug, the fix, and what disclosing it looks like when the project has one maintainer.

https://blog.hofstede.it/my-ansible-plugin-had-a-jail-escape-cve-2026-55074/

#FreeBSD #Ansible #InfoSec #CVE #Jails #OpenSource #Security #SysAdmin

FreeBSD has freebsd-version to tell you which release and exact patchlevel you're running.

Is there a similar command for #Debian that tells you when you last did update & upgrade? #sysadmin

(Edit to add: As I thought, there is no way. Tag your ZFS boot environments with a date and get on with your life.)

Deep boot environments: 👎

Derp boot environments: 👍

#sysadmin #openzfsmastery

🇫🇷 #AdminSys, avez-vous remarqué une augmentation des attaques sur vos serveurs dernièrement ?

🇬🇧 #SysAdmin, have you noticed an increase in attacks on your servers lately?

#Sondage #Poll

#bhyve with #ZFS rollback makes testing boot environments for #openzfsmastery sooo much easier. Snapshots on the hypervisor. Snapshots in the VM. Snapshots EVERYWHERE. #sysadmin

AI bros genuinely have the most unhinged sales pitch in human history. Just three competing personalities fighting for the microphone:

a) Adapt or starve in a ditch, loser.
b) This technology will inevitably destroy societal cohesion and your job, pack your shit.
c) Anyway, why aren't you using our built-in summarizer? Come on. Look at the little stars. It only hallucinates 62% of the time now. Don't you want to summarize this recipe? Please. *Please.* we spent 40 billion on a new data center anticipating you!

You gotta respect the grift sometimes.

#ai #noai #jobs #capitalism #llm #openai #privacy #enshittification #sysadmin #reading #art #design #linux #gethired

Alt...

Altman and Dario

TFW you install a new boot loader on a VM and reboot but the entire virtualization host disappears seconds later so you think you installed a Linux boot loader on the FreeBSD host, but it turns out that the power cable on your test server slipped to the ground unnoticed so your robovac unplugs it. #sysadmin

Anyway, #openzfsmastery is going swimmingly.

Here is a fun piece of Linux filesystem trivia that feels like dark magic the first time you see it: rm does not delete files.

In POSIX, rm invokes the unlink() syscall. All it does is sever the directory entry (dentry) and decrement the inode's hard link counter by 1. The kernel will only actually deallocate the extents and free the disk blocks when two conditions are met, a.) the hard link count drops to 0 and b.) the open file descriptor (FD) reference count drops to 0.

This is why you can rm a 200GB log file and watch df -h stubbornly stay at 100%. The daemon holding that file descriptor is still happily writing to unlinked disk blocks.

That said if someone accidentally runs rm on an active, in-use database flatfile or massive dataset, maybe don't panic and don't kill the process. As long as that process is alive, the inode is fully intact. Find the PID and look into the virtual filesystem, ls -l /proc/<PID>/fd/

You will likely spot the descriptor pointing to /path/to/file (deleted).

You can then resurrect the entire file right out of the kernel's file table by dumping the descriptor back out, try cp /proc/<PID>/fd/4 /recovered_file

And if your disk is full because of an unlinked runaway log and you can't restart the daemon, don't restart it. Truncate the inode directly through its descriptor, /proc/<PID>/fd/4

Zero downtime while the VFS does its job. Understanding inodes is a superpower that anyone can acquire.

#linux #sysadmin #filesystem #kernel #storage #unix #devops #bash #programming

*boost for reach*

Do you pirate media?

#askfedi #question #piracy #netflix #streaming #movies #enshittification #sysadmin #programming

What's your monthly wifi data usage?

#askfedi #question #linux #sysadmin #cybersecurity #infosec #programming #privacy #windows #macos #apple #android #reading #art

#sysAdmin
Le monde actuel : https://fedi.cr-net.be/@haploc/117324820174454728

Client: "To access our VPN,m you need to install our VPN client".

Ok...let's try... "This installer will install 636 MB of stuff on your computer".

To access a...VPN?

No comment...

#IT #SysAdmin

Traditional hosting company:

“We had a Linux crash. Or maybe systemd. Or KVM. Possibly a kernel issue. There is also a non-zero chance aliens interfered with our servers.

We’re not entirely sure what happened.

Sorry for the inconvenience.”

OpenBSD Amsterdam:

“We had a crash.

One of the OpenBSD developers looked at it and is now patching OpenBSD so it won’t happen again.”

Who’s the boss now? 😎

Thank you, @OpenBSDAms !

#OpenBSD #RunBSD #IT #SysAdmin

Does anyone on this fine platform have any experience with the #Unifi series of switches?

I've only used their #wifi access points and I may be in the market for a new switch down the road.

#sysadmin #homelab #networking #tech

to all docker nerds, how do i go around running some services on a system with apache do i:

1. leave apache uncontainerized and use the linked ports from each docker container

2. containerize apache(idfk how to do this)

3. fuck docker i'm all with kubernetes

#docker #linux #sysadmin #askfedi #duckduckfedi

#Sysadmin question. Homelabbers welcome.

What is your preferred method of keeping the record of what you've done on a server?

Minutes since a person with zero computer background sends me an email with a mountain of information about logs to check, etc., for a service not working... but that I never provided them as part of the hosting package: 0

#IT #SysAdmin

I would like a #sysadmin dashboard as a #deltachat app.

I figured very quickly how to send notifications through delta chat... I'm sold.

But, do you think a dashboard with current alerts / recoveries sent by a bot would be feasible? It doesn't have to be interactive (actually I'd prefer no interactivity)

I'm not very fluent in web tools...

Manpage Monday: bastille list

See everything at a glance.

Default overview
> bastille list [all]

List all releases:
> bastille list releases

Running jails, by type, in pretty JSON columns:
> bastille list -jup type

You can also list: ips, ports, paths, states, snapshots, limits and templates.

#BastilleBSD #FreeBSD #sysadmin

Customer: "We need to hurry, they breached the old server and we need to set up the new one ASAP!"

Me: "Yeah, it was old and way beyond any kind of updates. You really should have replaced it earlier. If you want, we can build the new one now."

Customer: "Yes, and make sure it is accessible only through the VPN. We want security!"

I go and take a look at the VPN and find out that it is provided by a commercial appliance, I will not mention the brand, running a version and release affected by several serious security issues, and also exposing some completely unnecessary services.

I point this out, and the answer is:

"Well, but the VPN is secure. That’s exactly why we want to use it!"

#IT #SysAdmin

Haack's Networking

✍️ We would like to introduce everyone to our latest addition to the #pubglug PubGLUG community offerings. Ente #E2EE encrypted photos, files, and secrets is now live for testing. All users get 10GB upon sign up, but/and more is available upon request (DMs). The technical setup notes are here:

🔗 https://tech.haacksnetworking.org/2026/09/21/ente/

💡 The instance link is here:

🔗 https://gnulinux.pics

📜 We are in testing right now and there will definitely be bugs and/or other issues that need addressing. Please let us know in replies, DMs, and/or hit us on Matrix or DC. For now, registration is open - if it proves to be a problem we will close it. Until then, happy hacking!

#ente #sysadmin #selfhosted #caddy #debian #freesoftware #floss #opensource

Alt...

ente icon, e2ee app for files, photos, and 2fa secrets

Haack's Networking

✍️ We recently migrated from legacy email to chatmail for our Delta Chat implementation. In so doing, we retained the legacy Dreamhost account for sending alerts because it was not connected to chatmail, nor either server we manage. Unfortunately, Dreamhost is not playing nice with happy eyeballs and keeps timing out client connections.

💡 So, although it is inconvenient, we are going to migrate the broadcast channel to a new source account. We've added three backup relays to that source account to ensure deliverability of alerts. For those of you who use some or all PubGLUG services, please migrate to the new channel. Thanks for patience 🙏

🔗 https://i.delta.chat/#EF4F58493ED3E7887C9E9C0DE6AE044F45EB48BE&v=3&x=fzmVLM4FPPtOfKvUoOby_ZRo&j=re4O0wgyytzNUMPlDkpW28tE&s=n0MI-iU53d2u2Lig2Iy29m2q&a=41f5sqy5e%40mail.gnulinux.online&n=oemb1905&b=PubGLUG+Alerts

#pubglug #sysadmin #deltachat #arcanechat

Haack's Networking

🔗 https://content.haacksnetworking.org/w/ddXeefRJ8rw9zeUZRiiRg3

💡 Tonight's agenda is to relax, organize notes, organize projects, if time permits I need to make a metasploit image for a student. I also need to see if a primary backup script is failing and doubling the loop OR not. Other miscellaneous stuff as it comes up or as I catch it in the week's notes.

✅️ Good vibes and good times. Come on by and join the Haacknet ... let's have some fun.

🎶 Music as always, doing a re-listen to Michael Jackson's Dangerous album - one of the most monumental late career releases. Coming out in a time where marketing ruled over authenticity, this album cemented his greatness with hit after hit and rich sleeper songs permeating the album.

#debian #sysadmin #selfhosted on #peertube #linuxstreaming #livestream #metasploit #music #freesoftware

Haack's Networking

🔗 https://content.haacksnetworking.org/w/ddXeefRJ8rw9zeUZRiiRg3

💡 Tonight's agenda is to relax, organize notes, organize projects, if time permits I need to make a metasploit image for a student. I also need to see if a primary backup script is failing and doubling the loop OR not. Other miscellaneous stuff as it comes up or as I catch it in the week's notes.

✅️ Good vibes and good times. Come on by and join the Haacknet ... let's have some fun.

🎶 Music as always, doing a re-listen to Michael Jackson's Dangerous album - one of the most monumental late career releases. Coming out in a time where marketing ruled over authenticity, this album cemented his greatness with hit after hit and rich sleeper songs permeating the album.

#debian #sysadmin #selfhosted on #peertube #linuxstreaming #livestream #metasploit #music #freesoftware

At Software Heritage we put up a bot wall like everyone else, and it blocked the people trying to give us code. The commit that fixed it states the thesis of this whole series, in a parenthesis, with no irony. 👉 https://www.dicosmo.org/good-enough/ #GoodEnoughIsNotGoodEnough #SysAdmin #OpenSource #AI

Alt...

A commit message reading "This is a trivially circumventable 'are you a browser?' check, but one can't answer an Anubis challenge when doing cross-site requests to the API anyway".

#TechTipThursday: stop losing long jobs to a dropped SSH session.

Before you kick off that big rsync:

tmux new -s migration

It runs on the server, not in your terminal. Ctrl+b then d to detach, close the laptop, walk away. Come back with tmux attach -t migration and it's right where you left it.

Run it first. Regret it never.

#Linux #SysAdmin #tmux #CLI

Prosody (prosody.im) is such a sweet deploy. Your own e2ee text/voice/video service, up and running on your own infra, in minutes (so long as you have a TURN server). Ejabberd has been a mainstay over the years, and makes sense for big communities, but for lesser needs, & when you have more servers than sense to look after, low maintenance burden goes a long way.

With apps like Conversations, the UX is at least as good as Signal.

#sysadmin #privacy

Spot the moment that I blocked Brazil.

#sysadmin #webscraping

Alt...

A line graph where the Y axis is number of requests, running from 0 to 1 million. The X axis is days running from 1 September to 15 September. The number of requests around 900,000 to 800,000 from September 1 to September 5. Then it rapidly drops off to right around 200,000 from September 6 onward.

I'm looking for options, perhaps other #sysadmin can chime in.

I've got a small company that wants to use a tablet in their warehouse, they picked up a couple of cheap $120 andoid devices.

These devices need to be managed by me but the company is on the google basic plan, to fully manage this device the entire company must upgrade to google business Plus, that's an additional $7k per year.

I cannot justify a cost increase of $7000 to manage a single $100 device.

Options? alternatives? this device only needs a web browser and printer access.
device is Tablet 10 Inch Android 16 Tablet

#Puertorico #linux #android

Are you the Systems Administrator we need? Apply for the post of Software Infrastructure and Continuous Delivery Engineer at KDE:

https://ev.kde.org/2026/09/14/2026-09-14-jobad-sysadmin/

Check out the requirements here:

https://ev.kde.org/resources/jobad-sysadmin2026/

--
Keep KDE funded💲! Become a Supporter! Adopt an App! All at once!:

https://kde.org/anniversaries/30/?mtm_campaign=SupportingMemberDriveM&mtm_kwd=m#become-a-member-and-build-a-better-world

#job #sysadmin #parttime #OpenSource #FreeSoftware

La puissance des logs ne ment pas ! 📊 Suite à ma petite publication pour mettre en avant mon métamoteur SearXNG, vous avez débarqué en masse. Regardez-moi cette activité en direct sur le serveur, ça fait plaisir à voir ! 🚀
Envie de surfer sans pister ni être pisté ? C'est par ici que ça se passe : https://searxng.blablalinux.be 🕵️‍♂️✨
#SearXNG #SelfHosted #Sysadmin #OpenSource #BlablaLinux

#Article 🖥️ Gérer un parc de centaines de serveurs sans y laisser sa santé mentale ? C'est possible avec la stack #PFK !

Dans notre dernier article, on décortique le trio #OpenSource qui pilote vraiment le cycle de vie de vos serveurs :

🔧 #Foreman orchestre le provisioning
📦 #Katello gère la distribution et le versioning
🗄️ #Pulp stocke et synchronise vos paquets

Un point de contrôle unique, une traçabilité renforcée pour vos audits 👇
https://www.capensis.fr/stack-pfk-pulp-foreman-katello-le-trio-open-source-qui-pilote-le-cycle-de-vie-de-vos-serveurs/

#Linux #DevOps #Sysadmin #ITOps

I have some questions for the #FreeBSD folks in the room:

1.) What are the best practices for Poudriere and Packages. I understand one shouldn't mix Ports and packages, but I want to have some custom builds for my machines, like vim, zsh, wget, mutt, nano, while not relying on compiling everything. Is there a safe way to do this? Presumably one tracks the same quarterly ports tree as packages. But is there more to it?

2.) When managing software using Poudriere and Ports, how does one manage emergency OOB patches? I would imagine switching Poudriere to use LATEST is an operational death wish.

#RunBSD #homelab #tech #unix #software #sysadmin

RE: https://autonomous.zone/@d1/117256788368297161

A wonderful review and contribution to a political discussion about autonomy in digital infrastructure. Great read.

#MutualAidHosting #MutualHosting #SelfHosting #sysadmin

@mhoye

Right away this sounds like a task for a "declaratively defined" distros, based on nixpks, guix or any other similar toolkit. There are tools, but no ready-made distro that does that, as far as I know.

The second set that comes into my mind is the "immutable" distros that utilises CoW FS, snapshots of the initial state and some machinery to change it. I'm most familiar with the SUSE famliy, thus I'm thinking of MicroOS, Leap Micro and Aeon Desktop - with snapper and transaction-update one have an access to the post-install state and may replay it anyware.

This kinda similar to what FreeBSD and illumos distros achieve with the ZFS and a "boot environment" concept (administrated via bectl/beadm).

And in the devops world it'd be a packer image applied to a new device.

@suetanvil @paculino

#Linux #FreeBSD #illumos #SysAdmin

We had a big wave of automated Mastodon signups with very predictable usernames.

I first tried the sledgehammer approach and blocked known VPN ranges at the firewall.

It worked.

It also blocked legitimate ProtonVPN users. 😬

So I replaced that with a tiny custom Mastodon validator that rejects the actual abusive username pattern instead.

Much cleaner: block the abuse, not the transport.

How-to + code:
https://gist.github.com/chofstede/a422427570004719196cde948521dd04

#Mastodon #Mastoadmin #Fediverse #SysAdmin #Ruby #Rails #Security @tux @AlienJay @aping

sudo sed -i -E 's/^#?port = [0-9]+/port = 3306/' /etc/postgresql/*/main/postgresql.conf

sudo sed -i -E 's/^#?port\s*=\s*[0-9]+/port = 5432/' /etc/mysql/mariadb.conf.d/50-server.cnf

sudo systemctl restart postgresql mariadb

My colleagues will hate me, but I couldn't resist 😈

#Linux #SysAdmin #DevOps #Database #ChaoticEvil #PostgreSQL #MariaDB

Haack's Networking

🔗 https://i.delta.chat/#87F48D66BB33B25E5E8C06CA5656447B032AB528&v=3&x=8VdaVSAkDEbYVYewkhczz4xL&j=ETeW5-HXRaHCAN9g0ZYyQRPY&s=3xcGSP7oVPPD3fejlpcpUJwr&a=oemb1905%40haacksnetworking.dev&n=oemb1905&b=PubGLUG+Alerts

🚨 Please join the PubGLUG Alerts channel on Delta Chat to receive important announcements about uptime, downed lines, route outages, upgrades, backups, and more ‼️

✍️ This account is managed by a Dreamhost-based email, so it is not connected to either the primary and co-located server at Brown Rice, nor the backup and auxiliary dedicated host at Pebble Host ⚡️

💡 For those of you using PubGLUG-based chatmail servers, it is recommended that you join this channel with a personal email not connected to either service, as you count use something that's down to monitor status about it being down 🙃

👀 And, if you are looking to reach me - Jonathan Haack - personally, then use this link to DM me if/when you have questions, concerns, inquiries, or what have you. My DMs are open but/and mind your manners or you might get 🔨

🔗 https://i.delta.chat/#A870EFD078834E14772F536EF9FC39EA9ED71429&v=3&x=RKIfzwgZYz63MZdT7tsP1dIE&i=xj-YG-zrEiY8g2lAwrSe8osH&s=GUXOkD37Fo93BiKQsZHTazY2&a=okymq7df6%40mail.haacknet.org&n=oemb1905&g=Landing

#deltachat #chatmail #pubglug #alerts #outages #selfhosted #sysadmin #community #dreamhost #hosting

STOP DOING SWAP PARTITIONS

HARD DRIVES WERE NOT SUPPOSED TO ACT LIKE RAM

YEARS OF LINUX SYSADMINNING yet NO REAL-WORLD USE FOUND for going beyond CLOSING A FEW TABS

Wanted to avoid the OOM killer anyway for a laugh? We had a tool for that: It was called ZRAM

"Yes please give me a dedicated 64GB logical volume of SWAP. Please give me unresizable block devices trapped at the end of my disk." - STATEMENTS DREAMED UP BY THE UTTERLY DERANGED

LOOK at what Neckbeards have been demanding your Respect for all this time, with all the fdisk and GParted Live USBs we built for them. (This is REAL PARTITIONING, done by REAL LINUX USERS):

# mkswap /dev/nvme0n1p3
# echo  /dev/nvme0n1p3 none swap sw 0 0 >> /etc/fstab
# swapon -a

"Hello I would like to torture my SSD's FTL because I left three Electron apps open."

They have played us for absolute fools.

#linux #sysadmin

Thinking of pulling my externally hosted services into my own basement.

What's everybody's favourite way to put a container on the Internet without giving it LAN access?

#homeLab #sysadmin #podman #docker

ÇA VA ÊTRE TOUT NOIR #reboot #sysadmin

Rituel du samedi matin !
Les VM et les conteneurs LXC du cluster Proxmox VE sont tout propres et à jour.
Étape 1 terminée avec succès... la suite cet après-midi avec la partie Docker !
Bon week-end à tous !
#Proxmox #Linux #SelfHosted #Docker #SysAdmin #Automation

Haack's Networking

🔗 https://content.haacksnetworking.org/w/ddXeefRJ8rw9zeUZRiiRg3

✍️ We are live now folks! Tonight, just chilling and trying to spread positive vibes while researching:

1️⃣ post quantum encryption
2️⃣ kex, mtu, and ssh issues with tunnels
3️⃣ chatmail and pgp, legacy email, DC

🎶 As always, should have some music going as well. Come on by and spam me in chat!

#deltachat #pgp #sysadmin #selfhosted #stream #linuxstreaming #debian #kex #mtu #ssh #chatmail #dovecot #postfix

Attempting to emulate ZFS boot environments on Proxmox for #openzfsmastery. #sysadmin

"In Linux, running ZFS-on-root is an advanced skill.¹

¹ You can tell it's an advanced skill by the way senior sysadmins say, 'oh, it's not that hard.'"

#openzfsmastery #sysadmin

Watching a coworker doing some work I'm teaching them, they have to input a password at some point. Even when they were copying from a password manager, and all I could see were big dots, and pasting into `ssh`'s prompt, which does not echo the characters back, 30y of #SysAdmin'ing kicked in and I looked away :)

Email this morning: someone sent a wordpress password reset request for my admin account from IP 127.0.0.1.

I didn't need this today. #sysadmin

Inspired by @klarainc's excellent video on FreeBSD hardening, I've put together a beginner's guide expanding on their walkthrough.

The goal is to break down the concepts and make these practices approachable for anyone looking to get started:

https://freebsd.toomany.net/hardening

Full credit and sincere thanks to Klara Systems for the solid foundation!

#FreeBSD #SysAdmin #InfoSec #Security

Haack's Networking

🥚 The newest member of the Public GNU/Linux Users Group has hatched! Everyone, please welcome our Delta Chat chatmail server:

🔗 https://mail.gnulinux.online

✍️ Again, the full list of community servers that Haack's Networking and community volunteers steward can be found here:

🔗 https://haacksnetworking.dev

💡 Need help in open source and floss space? Hit us up on the Matrix! Want a privacy centered and free Masto? We are open for reg! Want to create floss content, swing by our PeerTube ... and there's much more!

#gnulinux #freesoftware #opensource #debian #selfhosted #sysadmin #linux #gnulinux #community

If you want to raise your shell scripts to a new level, give this a try! It'll give useful feedback on the style of your shell code and on possible issues with it.

https://www.shellcheck.net/

PS: Know when to switch to a proper programming language.

#Linux #SysAdmin #SystemAdministration

@markwyner dear everyone, if you're using ANY password in more than one place, go get a password manager and start using random passwords *everywhere* -- this is not a Mastodon issue, this is a web login issue. I highly recommend Bitwarden.
#passwords #passwordManager #cyberSecurity #security #sysadmin

Receiving requests from clients or colleagues is normal, and I'm happy to solve problems.
It's a bit less fun when they email me instructions on what to do - clearly written by an AI - that often don't know the underlying setup. "You need to enable the Apache module X and reload using the command..."

I know how to reload Apache. And I know that I'm going to have to disobey your orders because... that server runs Nginx 😆

#IT #SysAdmin

If your terminal ever gets confused by random control sequences, for example after you accidentally output binary data, there's a good chance you can restore order with the `reset` command.

#Linux #Shell #SystemAdministration #SysAdmin

inxi (full featured CLI system information tool) imported in official OpenBSD ports tree - Very useful tool to report system informations (CPU, memory, GPU, disks, network...) #OpenBSD #SysAdmin https://github.com/openbsd/ports/commit/9c357fba7fcfb8ca067957f1f47d16dad2e499fd

Je regarde s'il y a des formations, mais je tombe soit sur des formations cpf en mode licence, soit sur des cours en libre en accès mais j'ai peur de pas être assez assidu si je n'ai pas soit un suivi soit un projet concret.
Est-ce que des gens auraient des conseils ?
#formation #linux #sysadmin #metz #logiciellibre
2/2

Pleased to announce there will be a 6th edition of the Tunnel training taking place Oct 12-15.

This course is a strong introduction to the craft of system administration atop a stack entirely free from big tech. Students are guided in the deployment of powerful and sovereign privacy infrastructure on a server all of their own, running on renewable energy in Iceland.

Details here:

https://courses.nikau.io/tunnel

6 seats left.

#selfhosting #privacy #sysadmin #decentralisation #vpn

Alt...

A screenshot of part of the Tunnel course information page, showing an archaeological site showing a vertical tunnel column. The image is two-tone, emerald green highlights and greyscale.

Next Saturday at #EuroBSDCon 2026, I'll tell the story of one of the longest nights of my career.

On 10 March 2021, I had just fallen asleep when the alerts started arriving. One server down. Then another. And another.
Different servers, different workloads, one thing in common: the OVHcloud Strasbourg data centre.

Then came the news: SBG2 was on fire.

I had 142 servers there.

The mission for the night was simple to state: bring the critical services back before 8, then recover everything else as quickly as possible.

This talk is about what happened next. The things that worked, the architectural choices that saved us, and especially the ones that failed when we needed them most.

And it's also the story of why that night changed the way I design infrastructure, and why BSD systems became such an important part of it.

The night 142 of my servers went up in the clouds. Physically.

📅 Saturday 12 September, 11:15
📍 EuroBSDCon 2026, D.0.02

#BSD #FreeBSD #EuroBSDCon #Sysadmin #Infrastructure #RunBSD #NetBSD #OwnYourData #Linux #DisasterRecovery

Alt...

Cover slide for Stefano Marinelli’s EuroBSDCon 2026 presentation. A nighttime photo shows the OVHcloud Strasbourg data centre engulfed in flames and thick smoke. A huge orange "142" overlays the fire. Below, on a black background, the title reads: "The night 142 of my servers went up in the clouds. Physically." In the top-right corner: "Stefano Marinelli · EuroBSDCon 2026 · Saturday 12 September, 11:15 · D.0.02."

Running OpenStreetMap.org in the Age of AI - peertube.openstreetmap.fr

https://peertube.openstreetmap.fr/w/gsbfGLtNzhPkw2uQzBXo3y

#infrastructure #osm #sysadmin

#Grml 2026.09 Linux Distro Is Out with #Linux Kernel 7.1, Based on #Debian 14 Forky https://9to5linux.com/grml-2026-09-linux-distro-is-out-with-linux-kernel-7-1-based-on-debian-14-forky

#OpenSource #sysAdmin

Alt...

A screenshot of Grml 2026.09 showing the terminal emulator and the Fluxbox menu.

Philosophical question:

If a service is down due to lack of DNS, but if it's actually orchestration that's down rather than DNS, do we still blame DNS?

#sysadmin

Beautiful post by @crocidb :

This blog ran on Ubuntu 16.04 for 10 years. I migrated it to FreeBSD

https://crocidb.com/post/this-blog-ran-on-ubuntu-16-04-for-10-years-i-migrated-it-to-freebsd/

#FreeBSD #RunBSD #IT #SysAdmin

It's a long weekend ... guess I will hack my legacy #emailserver to include stun/turn for #deltachat and when that's done ... time to spin up a separate #chatmail server.

🔗 https://support.delta.chat/t/how-to-provide-custom-turn-server-settings-when-using-a-classic-email-account/5045
🔗 https://github.com/chatmail/core/blob/main/standards.md

#email #sysadmin #debian #linux #freesoftware #floss #selfhosted #selfhostedlife

This morning's mission is to repel an attack currently hitting a client's server.
I'd like to avoid external solutions, so I'm trying to handle it at the firewall level. Anubis works, but the client doesn't want a "banner" in front of it.

It's a complex mission... let's see how it goes!

authentication issue at work, InfoSec guy gives me an update on "sing-in" logs

I'm worried about how much singing logs would depend on autotune

#sysadmin #GeekHumor

One of today’s tasks: migrating an old Ubuntu server hosting around 15 WordPress sites to a FreeBSD server, with Caddy acting as a reverse proxy in its own jail, one jail per WordPress instance, and a shared database in yet another jail.

Yesterday I configured Caddy to reverse proxy all the domains while still pointing to the old server. That allowed the customer to update the DNS records in advance, while I could migrate each site one by one and simply switch the upstream in Caddy as soon as it was ready.

Zero downtime. Just a reload.

I asked only for one thing: freeze everything this morning, so a colleague asked the customer not to make any changes to the websites after 7 today.

Ack.

So I go to clone one of the sites… and notice the customer published a totally deferrable post at 9.

Which, of course, means I now get to resync everything.

Ah, the joys of working "behind the scenes". 😆

#IT #SysAdmin #Ubuntu #FreeBSD #RunBSD #ITLife

Je commence à utiliser un peu Crowdsec sur un serveur perso. Pour le moment j'ai un bon sentiment. L'architecture a l'air bien pensée. L'interface CLI est plutôt bien faite et assez aboutie. J'ai encore un peu peur de me tirer des balles dans les pieds et les yeux mais sur des choses persos je ne risque pas grand chose.
Chez @evolix on commence aussi à l'utiliser un peu, de manière encore plus prudente, mais c'est prometteur.
#crowdsec #security #sysadmin

Stop spending days on VPNs for simple access. Master Local, Remote, and Dynamic SSH forwarding, and learn why TCP-over-TCP destroys network performance. #SSH #Linux #SysAdmin

https://www.valtersit.com/guides/networking/ssh_tunneling-the_swiss_army_knife_of_networking_youre_not_using/

The /proc filesystem was a genius idea giving the #sysadmin direct control of the Linux kernel. In this article, David Both explains how to change kernel parameters at runtime.

https://www.redhat.com/sysadmin/linux-kernel-tuning

In 2024 the bill for the wasteful web exploded: the software archive I direct buckled under AI crawlers, and our engineers spent their days blocking addresses instead of building. We are not Google. 👉 https://www.dicosmo.org/good-enough/ #GoodEnoughIsNotGoodEnough #WebScraping #SysAdmin #AI

Alt...

In 2024 the bill for the wasteful web exploded: the software archive I direct buckled under AI crawlers, and our engineers spent their days blocking addresses instead of building. We are not Google.

And the top 10 Mastodon users devouring your cache:

SELECT
CONCAT(accounts.username, '@', accounts.domain) AS account,
SUM(media_attachments.file_file_size) AS sum
FROM
media_attachments INNER JOIN accounts
ON media_attachments.account_id = accounts.id
WHERE media_attachments.file_file_size IS NOT NULL
GROUP BY account
ORDER BY sum DESC
LIMIT 10;

#mastodon #sysadmin

In case this might be useful to someone, here are the SQL request to get the top 10 Mastodon instances devouring your cache:

SELECT
accounts.domain,
SUM(media_attachments.file_file_size) AS sum
FROM
media_attachments INNER JOIN accounts
ON media_attachments.account_id = accounts.id
WHERE media_attachments.file_file_size IS NOT NULL
GROUP BY accounts.domain
ORDER BY sum DESC
LIMIT 10;

#mastodon #sysadmin

Le glossaire de la tech et du DevOps
https://www.rudeops.com/rudefinitions
#sysadmin #dev

As of today, I believe NetBSD is one of the most important operating systems to consider for your deployments.

With hardware costs rising dramatically, portability and efficiency have become more important than ever. If prices do not come down, we will probably have to adapt and create new kinds of hardware, at lower cost. And NetBSD, by its very nature, will be very easy to port to that hardware.

Does it run on your modern PC? Maybe. Maybe not.

But it runs on your server. On your VPS. On your SBC. On your old computer, which may still have a lot to give, especially if you want to keep ownership of your own data.

And I know something about old hardware still having a lot to give:
https://it-notes.dragas.net/2023/08/27/that-old-netbsd-server-running-since-2010/

No jails or containerisation? smolBSD has already shown that a reduced NetBSD kernel can be so small that it can be started in milliseconds, while also adding the security benefits of virtualisation. A different concept, certainly. But one that already exists and can already be used.

Linux itself has opened up to AI. That is a choice I will not comment on.

But from now on, for those who do not want LLM-generated code in their operating system, there are essentially two options: fork Linux (!!!), or choose something different.

And NetBSD is that something different.

Already in 2024:

“...code generated by a large language model or similar technology (e.g. ChatGPT, GitHub Copilot) is presumed to be tainted (i.e. of unclear copyright, not fitting NetBSD's licensing goals) and cannot be committed to NetBSD.”

#NetBSD #RunBSD #smolBSD #IT #SysAdmin #OwnYourData #ModernTech

Never been a better time to switch to Debian. #debian #floss #freesoftware #opensource #floss #ai #freedom #sysadmin #linux #gnu #gnulinux

Quand l'infra tourne comme une horloge suisse !
Tout le cluster y est passé : #LXC, #VMs... 100 % de succès et même pas besoin de redémarrer un seul conteneur.
Bref, mise à jour propre, tranquille, et le #sysadmin peut aller boire son café sereinement !
#Proxmox #Gotify

Hi! I'm looking for a simple to use HTTP benchmark tool which can simulate the page load by a browser: load the page but also all the linked assets (CSS, favicon, images…) without the need to write a scenario (listing all resources).
I thought Apache ab will do it but no.

Any help appreciated :)

#HTTP #load #test #performance #linux #sysadmin #mastohelp

RE: https://framapiaf.org/@framasky/117172516040615744

Any #SysAdmin running #Nginx could be interested in #NginxBotcheck IMHO

Fred de CLX boosted

Luc » 🌐 2026-08-28
@framasky@framapiaf.org

Some updates on #NginxBotcheck:
- repository has moved to https://framagit.org/framasoft/adminsys/nginx/botcheck
- new map, to allow some paths only for some virtualhosts
- fix cookie expiration

Autistici designated a terrorist group by the US administration, supposedly due to them providing infrastructure for movements the US gov wants to crush (is threatened by).

This is an excessive, absurd and yet notable escalation, speaking to something seen in the wild. Sysadmins that provide infrastructure for activism are themselves often targeted, an overlooked at-risk group.

(Warning, US gov site link)

TY @marcoferrari

https://www.state.gov/releases/office-of-the-spokesperson/2026/08/designation-of-autistici-inventati-as-a-specially-designated-global-terrorist

#sysadmin #opsec #infrastructure

Keeping your dotfiles in sync between machines can be a challenge. In today's livestream, I'll give a talk about how I manage my (many) Linux configuration files using Chezmoi. I'll explain its features for templates, scripts, password manager integration, and file encryption.

Join me at 19:00 UTC on Twitch: https://twitch.tv/monospacementor

#LiveStream #Linux #SysAdmin #SystemAdministration

Minutes since a ZFS local snapshot saved a lot of time by avoiding a recover from backup: 0

#RunBSD #ZFS #OpenZFS #FreeBSD #IT #SysAdmin

See also snmpwalk for viewing snmp data especially on printers and switches.
#networking #sysadmin

#JeRecrute !

Vous voulez faire partie d'une société coopérative spécialisée en logiciels libres ? Nous recrutons un·e administrateur·ice système et réseau !

Venez rejoindre notre équipe d'administration système et réseau sur Grenoble pour accompagner nos clients dans la transition et le maintien de leurs infrastructures composées de solutions libres.

Plus d'infos par ici : https://probesys.coop/recrutementadminsys2026

#Grenoble #Emploi #Sysadmin #Linux #SCOP #Cooperative #GetFediHired

🤔 Did you know that you can easily disconnect a particular network connection from Linux?

The 'ss' command is typically used to display information about sockets, but it can do more. Yes, killing connections! 💀

This option can be useful to drop an unwanted connection, one that is stuck, or to test out how software deals with unexpected disconnects 💪

👀 See the image to only disconnect a SSH connection for one particular IP address.

🔁 #Linux #terminal #sysadmin #commandline #networking

Alt...

The 'ss' command can be used to kill a connection, in this case one connected to port 22 (SSH)

What's your favorite #openzfs snapshot automation tool? I see many recommendations for sanoid, but I'm biased towards zfs-auto-snapshot. What are people using in the real world? #sysadmin

@adrianmorales you just do. Write to your local counsellors and tell them the advantages of switching to open source and point out the perils of the systems they're already using. Go to council meetings if you can. Tell your boss your concerns around the IT infrastructure you can't modify and the advantages of going with more open solutions in the future.
#IT #sysadmin #computing

What's the right way to read ext4 partitions on Windows¹, now that the standard (ext2FSC) has become abandonware ?

¹not my choice, please don't hit me

#ext4 #sysadmin #AskFedi #Windows

I love it when technology lifts get so big and technical that they eclipse enterprise solutions and return to fundamentals. That's my game. I'm here for you when that happens. It will happen. 🤣

Also, it's always DNS.
Also too, it's never a better time to switch to Debian.

#sysadmin #greybeard #linux #unix #opensource #freesoftware #floss #selfhosted #smallbusiness #residential #consumer #consumergrade #gomindswithmeidareu #debian #fundamentals

No matter how much you hate #ai tools and what they represent, this video by Nate B Jones is worth watching if you want to be aware of what's going on in modern #computing: https://youtu.be/FCRT7M30Wtw

This type of agent behaviour has global implications we aren't on top of yet.

#hacking #cybersecurity #sysAdmin

The people vs the AI overlords https://anarc.at/blog/2026-08-18-people-vs-ai-overlords #llm #analysis #sysadmin #work #debian-planet #python-planet #free-software

Computers are like onions. Everything is layers built on layers, and every layer makes you cry. #sysadmin

Fellow system administrators, what is the wonkiest system you've had to manage in your career?

#tech #sysadmin #technology #it #informationtechnology #systems #infrastructure #server

I'd like my next job to have something more than Linux, yes, I'm looking at your FreeBSD.

#runbsd #freebsd #getfedihired

↩ Ludovic Hirlimann :
"I can work in both French and English. I'm interested in infrastructure roles.

#infrastructure #sysadmin #sre"

[via Ponos] https://ponos.fr/thread/clf364ichbjbh9c9vb4nu8d4d

I can work in both French and English. I'm interested in infrastructure roles.

#infrastructure #sysadmin #sre

↩ Ludovic Hirlimann :
"I've been remote, fully since 2009 and would like to keep it that way.

#fullremote"

[via Ponos] https://ponos.fr/thread/c615qh73u2fb87zc86iq7hk5z

Apparemment en créant une clé bootable je me suis trompé de disque (pourtant il me semblait avoir vérifié plusieurs fois ?) et j'ai donc fait un dd d'une ISO de 7 Go sur le SSD chiffré qui contient mon système et mon /home.

Est-ce qu'il y a un moyen de récupérer le système ou au moins mes données ?

(je crains que non, hélas)
(je crois que j'avais sauvegardé mes headers LUKS mais aucune idée d'où)

#Linux #Sysadmin #LUKS

Envoi d'un signal de mise sous tension pour tout faire repartir au propre.
À 4h07, Uptime-Kuma confirme : tout est repassé au vert ! 🟢
#Proxmox #Nextcloud #SysAdmin #Automation #SelfHosted #Gotify

À 3h31, juste après Mastodon et avant le grand reboot de 4h, c'est au tour de PeerTube d'avoir son nettoyage automatique : « ✅ PeerTube Cleanup TERMINÉ » sur docker-peertube.
Purge des caches, ménage des fichiers temp et des médias fédérés. Au réveil, tout est propre sans avoir levé le petit doigt !
#PeerTube #SelfHosted #SysAdmin #Automation #Gotify

Décidément, la nuit réserve plein de surprises ! 🌙😜
À 3h18 du matin, Gotify repasse par là : « ✅ Mastodon Cleanup TERMINÉ » sur le conteneur docker-mastodon.
Un petit coup de balai automatique sur le cache et les médias distants pendant que tout le monde dort. Quand ton infra est plus disciplinée que toi ! 🧹🐘✨
#Mastodon #SysAdmin #Linux #Automation #SelfHosted #Gotify #Proxmox

Quand tu automatises tellement tout que tu en oublies tes propres scripts ! 😅
À 23h pile, notification Gotify : purge massive et nettoyage de /var/log sur tous les nœuds du cluster Proxmox (purge_logs.sh).
Le moment exact où tu te dis : « Ah oui c'est vrai, j'avais écrit un script pour ça ! » 😂
C'est ça, la vraie magie d'un système qui tourne en totale autonomie !
#SysAdmin #Proxmox #Linux #Automation #Bash #Gotify #SelfHosted

Pour voir la capture en bonne résolution, rendez-vous sur Picsur : https://picsur.blablalinux.be/i/d41a86aa-eefa-41f5-8858-b5c6d695f04c.jpg

Fin du marathon d'automatisation. Bon week-end à tous !

#Docker #Watchtower #SelfHosted #Proxmox #SysAdmin #DevOps

👉 Lire le guide complet : https://wiki.blablalinux.be/fr/nettoyage-automatique-tmp-nextcloud

#Linux #Nextcloud #SelfHosted #SysAdmin #OpenSource #BlablaLinux

Some services will be momentarily down today while we migrate from Dynadot to Dreamhost for our domain Registrar. Moving forward, all DNS will be managed at Hurricane Electric and/or Dreamhost. Thanks for patience 🙏🏼

This sudden change was due to Dynadot changing their subdomain record policy from 250 to 50 without notice. This caused a week-long disruption in building out new services due to any record over the cap being irrecoverable once deleted and new ones being impossible to create. Despite having 150+ records in the past, Dynadot responded that they've never supported more than 150 and would only restore that.

Both the change in terms and contract without notice and the dishonesty once a ticket was filed serve as sufficient reasons to ditch Dynadot. This was surprising to say the least. They've been a solid Registrar. As for DNS, we only used it the last three years having originally used afraid.org for over a decade. Ultimately, this is for the best however, because it is always unwise to keep one's DNS and Registrar at the same host. Hurricane Electric's DNS is additionally a breath of fresh air from 1998-2002 era and so easy to use - the alphabetical rendering of records amazing 🤩

It's always DNS !!

#DNS #selfhosted #linux #debian #registrar #sysadmin

📊 La liste complète des conteneurs est visible ici : https://picsur.blablalinux.be/i/f8bcd804-76b7-4359-a8d7-feb276dd5a21.jpg

Un rapide passage à 512 Mo de RAM, et le problème est réglé. C'est aussi ça la magie du monitoring et des scripts auto : repérer les petits goulots d'étranglement en un clin d'œil ! ☕️💪

#Proxmox #LXC #SysAdmin #Linux #SelfHosted #DevOps

C'est samedi, jour de l'automatisation sur le cluster Proxmox ! ⚙️
La première tâche s'est lancée à 10h pile et s'est terminée 11 minutes plus tard : 3 VM mises à jour en douceur (PBS, Elasticsearch et Jitsi Meet, bien identifiables en bleu sur la capture) et aucun redémarrage nécessaire. Tout roule tout seul pendant que je peux profiter de mon café ! ☕️
Et chez vous, ça automatise aussi le week-end ou c'est tout à la main ? 🛠️
#Proxmox #SysAdmin #Linux #SelfHosted #Automation #DevOps

@mboelen "A #Sysadmin's #Unixersal Translator (ROSETTA STONE) OR What do they call that in this world?" #unix

https://bhami.com/rosetta.html

Advice for upcomming #UnixAdmins #Unix =/= #Linux tho very close xD

Very good read:
https://tailscale.com/blog/sqlite-wal-reset-bug

#SysAdmin

Very good read:
https://tailscale.com/blog/sqlite-wal-reset-bug

#SysAdmin

In less than 12hrs I'll be taking graduates of the Tunnel training into another edition of Fortress. 4x6hrs, followed by 2 weeks of supported service deployments and experimentation.

I'm excited about every part of it (esp to see what participants build up), except the 1am starts, in my, umm, challenging timezone.

It'll be coffee black as midnight for a bit.

https://courses.nikau.io/fortress/

#sysadmin #education #infrastructure #floss

@mwl That one sentence accurately describes the life of a #sysadmin. 🤣

Anybody any news on DNS-PERSIST-01? It would allow me to simplify some things massively, once it's available…
https://letsencrypt.org/2026/02/18/dns-persist-01

#SysAdmin #InfoSec #DevOps #LetsEncrypt

There is a person I've been helping for a while who runs two instances, one #GoToSocial and one #snac.

Yesterday, they suffered severe file system corruption on their device, and I lent them a hand with the recovery. For GoToSocial, they restored the DB from the previous backup and got it running again. For snac, although a few files were lost, no action was necessary... it just started back up and did what it had to do, bringing the instance back to full operation.

This goes to show that when software is well-designed and intentionally kept simple, it's also easier to get back up and running when something goes wrong. In this case, snac's "files-only" approach demonstrated excellent resilience.

Thanks, @grunfink !

#snac2 #snac #ThankYouTuesday #Efficiency #IT #SysAdmin #OwnYourData

SMB Is Mandatory Now: What macOS Dropping the AFP Client Means for Storage Engineers ― Mitaka Digital | DEV Community

https://dev.to/mitakadigital/smb-is-mandatory-now-what-macos-dropping-the-afp-client-means-for-storage-engineers-46p0

"For four decades, the Apple Filing Protocol quietly underwrote every "just works" file-sharing experience in the Apple ecosystem. That era has ended. Apple deprecated the AFP client in macOS Sequoia 15.5, carried a removal warning through macOS 26 Tahoe, and shipped the macOS 27 "Golden Gate" developer beta with no AFP client at all. If your storage estate still serves Mac clients over afp://, the compatibility gap is live today, not on a future roadmap. …"

#AFP #Apple #CIFS #Samba #SMB #NAS #storage #macOS #networking #sysadmin

With Apple phasing out AFP in macOS 27 and Time Capsules officially reaching end-of-life, it's time to move network backups to proper SMB.

If you run a FreeBSD server, you can build a fast, rock-solid, and secure Time Machine target powered by ZFS and Samba - neatly isolated inside a FreeBSD jail using Bastille.

https://it-notes.dragas.net/2026/01/28/time-machine-freebsd-jail/

Keep your macOS backups running smoothly via SMBv3 (with full vfs_fruit support) and full dataset quota control on ZFS!

#FreeBSD #macOS #TimeMachine #ZFS #BastilleBSD #Samba #SysAdmin #Backup #OwnYourData #SelfHosted #BSD #RunBSD #OwnYourData

With Apple phasing out AFP in macOS 27 and Time Capsules officially reaching end-of-life, it's time to move network backups to proper SMB.

If you run a FreeBSD server, you can build a fast, rock-solid, and secure Time Machine target powered by ZFS and Samba - neatly isolated inside a FreeBSD jail using Bastille.

https://it-notes.dragas.net/2026/01/28/time-machine-freebsd-jail/

Keep your macOS backups running smoothly via SMBv3 (with full vfs_fruit support) and full dataset quota control on ZFS!

#FreeBSD #macOS #TimeMachine #ZFS #BastilleBSD #Samba #SysAdmin #Backup #OwnYourData #SelfHosted #BSD #RunBSD #OwnYourData

Well, I guess I'm going to be suggesting #AnyRun to the company I work for as a new(first) sandbox detonation option.

Anyone have any experience or insights they'd like to give me before I make a pitch? #SysAdmin #phishing #email

🔹 Plus de choix matériel : Idéal pour diversifier vos serveurs ou tester de nouvelles architectures.

Une excellente nouvelle pour réduire la consommation d'énergie sans sacrifier les fonctionnalités !

📖 Pour lire le communiqué officiel complet : https://www.proxmox.com/en/about/company-details/press-releases/proxmox-virtual-environment-launches-official-arm64-support

#Proxmox #ARM64 #OpenSource #Virtualisation #Linux #SysAdmin

Did I NOT just do kernel updates Friday?

Yes, yes I did.

Do I think I can get away with updating and rebooting without anyone noticing?

Yes, yes I do.

#SysAdmin

Haack's Networking

🔗 Haack's Streams: https://content.haacksnetworking.org/w/p/45TVYa285E7AV4vZicuo7N

This is a bookmarked post of my live streams. This playlist is public - feel free to share and spread the word! The more the merrier ;)

#stream #linuxstreaming #streaming #sysadmin #opensource #floss #freesoftware #selfhosted #peertube

Haack's Networking

The PubGLUG Nextcloud is live and open for registration. All accounts are manually approved and users must be 18 years of age and/or older. This instance is a community effort and part of the greater set of offerings that Haack's Networking provides.

🔗 The PubGLUG Nextcloud: https://cloud.gnulinux.vip
🔗 All PubGLUG Services: https://haacksnetworking.dev

It is my hope that in offering a community Nextcloud with open and moderated registration ... that this will result in more users choosing #selfhosted and/or #floss offerings for groupware (contacts, calendars, etc.). Those interested in setup notes and/or seeking assistance are encouraged to come chat on Matrix (link above). This instance has the following features:

▶️ Server-side encryption ensures that content on External Storage will be encrypted whether users set it up or not
↪️ E2E encryption provides users an easy way to use the Nextcloud sync client to create shares that even the sysadmin cannot see
💾 Users are given 50GB of storage from a large btrfs platter-based pool; users may request more in DMs with valid use-cases; users may attach their own external storage.
🔦 This instance is designed to assist in pulling people off iCloud, Google, etc. and teach/persuade them how to self-host NC themselves

✨️This is early registration. Some policies are not yet finished, some bugs remain, and we might find that some things don't work. Please be patient. With that said, feel free to sign up and let me know when you've joined. We are at the mall all day, but I've got access for approvals on the phone.

✍️ By using this instance, you agree to the Terms of Service: https://cloud.gnulinux.vip/index.php/s/roioz485eNsYTPm

#sysadmin #gnulinux #debian #linuxstreaming #linux #gnulinux #freesoftware #opensource #selfhosted #music #stream #streaming #floss #nextcloud #privacy #encryption

Alt...

gnu/linux club icon and logo, artwork by @migglesmilkes aka Dascha

Haack's Networking

🔗 https://content.haacksnetworking.org/w/ddXeefRJ8rw9zeUZRiiRg3

✍️ We are live folks ... the Nextcloud and Gitlab are done, email server is complete, and now just looking over smaller settings and performance. Set a new world record for stupid today when I actually installed two web servers on the Nextcloud using my own tutorial. The jokes literally write themselves ❣️

#sysadmin #gnulinux #debian #linuxstreaming #linux #gnulinux #freesoftware #opensource #selfhosted #music #stream #streaming #floss

Alt...

picture of my tutorial (actually in print) where you can see apt install nginx apache2 right in the dang tutorial ... pulled from wiki.haacksnetworking.org

If you work with or as a #sysAdmin this video might hit home a few times.

https://youtu.be/I7IHInNJZvE

#comedy #YouTube

Happy Sysadmin Appreciation Day

To all the sysadmins quietly keeping the lights on, we salute you.

#Sysadmin #FreeBSD #Linux #OpenBSD #BastilleBSD

Alt...

A "UNIX System Park" t-shirt, with a silhouette of characters Lex and Tim. Lex is saying, "IT'S A UNIX SYSTEM. I KNOW THIS!" and then the text, "REBOOTING SYSTEM...", in a parody of the 'Jurassic Park' logo.

I really don’t need any more peers for my AS201379! (Okay, maybe a few more...)

Started back in December 2025, and now this "little" infrastructure is running:

14 individual eBGP sessions
3 Internet Exchanges
Multiple transit providers
110+ direct peers

All 100% IPv6 (2a06:9801:1c::/48) because legacy IP belongs in the last century.

Powered entirely by FreeBSD 4 routers on 15.1-RELEASE running FRR and PF.

#BGP #IPv6 #FreeBSD #Routing #Networking #sysadmin

Haack's Networking

🔗 https://content.haacksnetworking.org/w/ddXeefRJ8rw9zeUZRiiRg3

✍️ We are live folks ... today's task is to setup the email server and to fine tune both the nextcloud and gitlab for public registration. Feel free to come by and chill. Sipping coffee, just finished breakfast. It's time to hack‼️

#sysadmin #gnulinux #debian #linuxstreaming #linux #gnulinux #freesoftware #opensource #selfhosted #music #stream #streaming #floss

Haack's Networking

🔗 https://content.haacksnetworking.org/w/ddXeefRJ8rw9zeUZRiiRg3

✍️ We are live folks ... finishing up the nextcloud, polishing up the VM, setting up storage. Fixing reported errors. Come on by, chat needs some love. Music and popcorn are free ❣️

#sysadmin #gnulinux #debian #linuxstreaming #linux #gnulinux #freesoftware #opensource #selfhosted #music #stream #streaming #floss

A few months ago, a client asked me to shave about €200 a month off our agreement. "We’re trying to cut back on expenses", he said, "to boost our cash flow." I was hesitant, but hey, I agreed.

Fast forward to this morning: one of his team members calls me asking for help because - and I quote - "both Claude and ChatGPT are giving me answers that just don't feel right."

I asked for a little context, only to find out they had upgraded to the top-tier plans for both AIs so they could "solve problems on their own without bothering me."

So, I dropped my client a line: we either revert to our original agreement, or we wrap up this collaboration effective immediately.

Asking me for a discount just to throw far more money at AI subscriptions - only to call me anyway when the bots fail - is, to say the least, a slap (or slop?) in the face.

#IT #SysAdmin

A few days ago, a client’s data center (well, actually a server room) "vanished" overnight. My monitoring showed that all devices were unreachable. Not even the ISP routers responded, so I assumed a sudden connectivity drop. The strange part? Not even via 4G.

I then suspected a power failure, but the UPS should have sent an alert.

The office was closed for the holidays, but I contacted the IT manager anyway. He was home sick with a serious family issue, but he got moving.

To make a long story short: the company deals in gold and precious metals. They have an underground bunker with two-meter thick walls. They were targeted by a professional gang. They used a tactic seen in similar hits: they identify the main power line, tamper with it at night, and send a massive voltage spike through it.

The goal is to fry all alarm and surveillance systems. Even if battery-backed, they rarely survive a surge like that. Thieves count on the fact that during holidays, owners are away and fried systems can't send alerts. Monitoring companies often have reduced staff and might not notice the "silence" immediately.

That is exactly what happened here. But there is a "but": they didn't account for my Uptime Kuma instance monitoring their MikroTik router, installed just weeks ago. Since it is an external check, it flagged the lack of response from all IPs without needing an internal alert to be triggered from the inside.

The team rushed to the site and found the mess. Luckily, they found an emergency electrical crew to bypass the damage and restore the cameras and alarms. They swapped the fried server UPS with a spare and everything came back up.

The police warned that the chances of the crew returning the next night to "finish" the job were high, though seeing the systems back online would likely make them move on. They also warned that thieves sometimes break in just to destroy servers to wipe any video evidence.

Nothing happened in the end. But in the meantime, I had to sync all their data off-site (thankfully they have dual 1Gbps FTTH), set up an emergency cluster, and ensure everything was redundant.

Never rely only on internal monitoring. Never.

#IT #SysAdmin #HorrorStories #ITHorrorStories #Monitoring

RE: https://gnulinux.social/@oemb1905/116637233695764799

Haack's Networking

🖼️ A wild NVIDIA RTX 2000 w/ 16GB and native AV1 transcoding support has arrived‼️

✍️ We are pleased to announce that we secured this excellent condition used GPU for the PeerTube instance. After @oemb1905 traveled up to Brown Rice Data Center and installed it and passed it through to the virtualized PT, Lord @sen took care of customizing the JSON for the ffmpeg logic and did some tinkering under the hood so that PT would be efficient in its choices. Efficient hardware AV1 transcoding is now live.

💡 We still have slots open for registration and the quoted post below shows our starting quotas and limits. More is available upon request or for justified use-cases. As a reminder, the GNUTube requires members to be posting either floss content and/or for supporting floss organizations. Linux gamers and benchmarkers are also welcome.

💰️ Already a satisified member and want to give back?
↪️ https://liberapay.com/oemb1905/
🔗 https://gnulinux.tube

#gaming #linuxgaming #opensource #selfhosted #sysadmin #peertube #av1 #transcoding #freesoftware #floss #debian

Le niveau ultime de l’automatisation ?
Quand tu reçois une notification Gotify pour une tâche de maintenance automatisée que tu avais toi-même codée… et que tu avais complètement oubliée ! 😂
Merci au "moi du passé" d'avoir pensé à tout. L'infra bosse pendant que je bosse !
#SysAdmin #Proxmox #Mastodon #Automation #SelfHosted

La suite du bilan : après les nœuds et les LXC Proxmox, c'est au tour de Watchtower de faire le ménage dans mes conteneurs. Ça tourne tout seul ! 🚀 🤖
#Proxmox #Linux #Automation #SelfHosted #SysAdmin

Premise: LLM-gen-AI is here to stay.

Therefore, gnulinux devs ultimately have two logical choices: a) reject OR b) accept. If you reject, you are ultimately - in my opinion - denying or encouraging the denial of helpful tooling for lower SES groups. Upper SES groups already have access to these tools ... choosing to abstain is a position derived from privilege. Lower SES groups need access and equity to the same tools that academic/elite circles have access to. This is why we need fully floss AI that's accessible, uses a non-token and non-gouging pricing model (or is free / donated), and relies on distributed leadership and community support/building. Also, green data centers ...

#ai #floss #freesoftware #opensource #sysadmin #debian #linux

L'automatisation sous Linux, c'est quand même une vraie merveille ! 😎
#Proxmox #Linux #Automation #SelfHosted #SysAdmin

It's been roughly a year since I switched three production servers to btrfs from zfs. No issues at all, less ram consumption, slightly quicker performance on backups, and no dkms rebuilding shyze when major upgrades come out. Pretty awesome. #btrfs #sysadmin #Linux #Debian #zfs

Today, the Linuxulator did its job, and it did it very well.
A client is experimenting with moving from Docker to FreeBSD and jails, and they seem very happy with it so far.
The issue is that part of their build process - as so often happens - relies on Node dependencies that only compile on Linux, macOS, etc., but not on FreeBSD, due to a missing binary that isn't provided for it. Currently, they build on their local machines and push the output to the server, but sometimes they need to make quick changes on the fly.

So, I set up a Linux jail (Ubuntu) using BastilleBSD, installed the dependencies, set up a bind mount, and granted them access to the jail. The result: now they can compile right from there too, improving their overall workflow.

The Linuxulator - and even more so, illumos's lx zones - are truly remarkable pieces of technology.

#FreeBSD #Linux #RunBSD #illumos #SmartOS #OmniOS #Tribblix #Linux #IT #SysAdmin

I stand up from working all day on Subjam server infra updates & PR, to take a break in a cooler room. I did good and need to rest my eyes.

I pick up my phone and start to walk away from my desk, and immediately receive an e-mail telling me there was a bind9 security update.

🙃

The life of a sysadmin is getting more and more demanding by the day.

https://lists.debian.org/debian-security-announce/2026/msg00306.html

#selfhosted #cybersecurity #bind9 #security #sysadmin #devops

Haack's Networking

📰 GNU/Linux Pics
🔗 https://gnulinux.pics

⭐️ We are re-opening the GNU/Linux Pics Pixelfed instance. It is not yet discoverable but we encourage folks to join and use web-based access for now.

⚡️ We are working with the Pixelfed team to ensure discovery becomes active. It's unclear what's causing the issue, but rest assured we are committed to resolving it.

✍️ If you are interested in how it was setup and built, please review the blog post here:

💡 https://tech.haacksnetworking.org/2026/03/01/creating-a-production-pixelfed-instance/

#pixelfed #gnulinux #selfhosted #sysadmin #debian #gnulinux #floss #freesoftware #opensource #pictures #art #linux

The feud is finally over. And it's honestly hilarious.

Recap: Last week, a client forwarded me a request from the CRM company's support to verify the presence and content of a file in a specific directory.
I SSH'd in, ran ls, pwd, and cat on the file, then copied and pasted the output.

That kicked off a back-and-forth demands for "screenshots." The more I explained (through the client) that all the raw text was right there, the more this guy kept demanding a screenshot - becoming increasingly rude, arrogant, and condescending.
Finally, I told the client: "Put me in direct contact with him, I'll handle it."
He did, but the guy, completely unfazed, kept demanding screen grabs from the client, ignoring me entirely.

I refused to give in. In my field, I love working with people who know more than me so I can learn, and with people who know less so I can teach - or at least share my experience. But arrogance combined with stupidity is something I just can't stomach, especially when they come hand in hand.

Finally, this morning, he comes back at it again. My client, completely fed up, takes a screenshot of the text I had emailed him earlier and sends it over.

Only then did the guy notice a typo and suggest how to fix it.

#IT #SysAdmin

Alt...

What a week, huh? Captain, it's Wednesday

Linux tip: Use `systemctl --failed` to quickly identify which services failed to start after boot. Much faster than scrolling through journal logs when troubleshooting system issues. #Linux #SystemAdministration #SysAdmin

Linux tip: Set `HISTCONTROL=ignoredups:erasedups` in your init script to prevent duplicate commands cluttering your history. Clean history makes command recall much more efficient. #Linux #SystemAdministration #SysAdmin

Shell tip: `${var%suffix}` removes the shortest matching suffix. `${var%%suffix}` removes the longest. `${var#prefix}` and `${var##prefix}` work the same for prefixes. Mnemonic: # comes before % on the keyboard. #Linux #SystemAdministration #SysAdmin

@kn4ntu usage example I have right now: databackup@.service that does xfsdump backups of level N where N is specified by databackup@N.timer which lets me set how often each level runs.
#systemd #timers #cron #sysadmin

@kn4ntu given that models *can* make mistakes, I refuse to let them run things on their own without supervision on computers I care about.
I also don't use #cron anymore because systemd timers exist.
The #systemd timer format is gross, but it does have a bunch of cool features.
#sysadmin #Linux #geek

7 Open Source Infrastructure Projects Worth Watching in 2026

Chapters :
00:00 Introduction
01:16 Pi-hole HA
02:37 Sencho Docker Compose Manager
03:48 Portabase Docker Volume Backups
05:00 Incus System Containers
06:06 Omni for Talos Kubernetes
07:08 NetBird Zero Trust Networking
08:27 Pangolin Secure Remote Access
09:47 Why these projects matter
11:32 Final thoughts and community discussion

#SysAdmin #OpenSource #Docker #DockerCompose #Kubernetes #VPN

🚨 CRITICAL: WordPress Core "wp2shell" RCE

A single anonymous HTTP request can lead to Remote Code Execution on vulnerable WordPress Core installations.

⚠️ No plugins.
⚠️ No themes.
⚠️ No authentication required.

Tracked as:
🔴 CVE-2026-63030 (REST API Batch Route Confusion → RCE)
🔴 CVE-2026-60137 (Facilitated SQL Injection)

Affected versions
• WordPress 6.9.0–6.9.4
• WordPress 7.0.0–7.0.1

✅ Update immediately to WordPress 6.9.5 or 7.0.2. Due to the severity, WordPress has enabled forced automatic security updates for affected installations.

🔗 Full technical analysis:
https://thecybersecguru.com/news/wordpress-core-rce-wp2shell/

#WordPress #WordPressSecurity #wp2shell #CVE202663030 #CVE202660137 #RCE #RemoteCodeExecution #SQLInjection #RESTAPI #CyberSecurity #InfoSec #WebSecurity #WebsiteSecurity #PatchNow #ThreatIntelligence #BlueTeam #SOC #Linux #PHP #ZeroDay #SecurityResearch #SysAdmin #DevSecOps

A software vendor's sysadmin asked me to verify whether a configuration file existed and whether the path was correct.

I had already sent this:

root@server:/home/application/WEB-INF/classes/initscripts# ls -l
...
-rwxr-xr-x 1 app app 56 Jul 13 12:03 Security.config

root@server:/home/application/WEB-INF/classes/initscripts# cat Security.config
m_currentAuthentication=authenticationuser.Authenticate

The reply was:

> Could you send me a screenshot, so I can check whether the path is correct and the file is there?

The shell prompt contains the full path.

ls shows that the file exists.

cat shows its contents.

One would have thought this was reasonably conclusive, but apparently plain text remains an unverified hypothesis until photographed.

At this point, a modern AI would probably hallucinate less.

#IT #SysAdmin

@rl_dane

This is the second post where you'd dropped the F bomb....for good reason.

I have so much to say but not sure how to say it but I will do my best. For *years*, I've enjoyed using #Linux both as a hobbyist and professional #sysadmin. The OS is definitely not the one I started with 20+ years ago. Since at least COVID has....well, it's turned into a full blown corporate-controlled high speed sprawling mess. Not necessarily matured just grown exponentially wherever the various powers see fit. For this and other reasons, I am leaning more and more towards #FreeBSD.

Lastly, I will admit there are some #AI niche use cases which do interest me (related to my own hobbies) but shoving it into everything is not a good idea.

@patrick

On 10 March 2021, I had only just fallen asleep when my phone started buzzing. Then another notification, and another. In a matter of minutes, 142 of my servers went up in the clouds. And not the cloud-computing kind.

Most of them were physically going up in a column of smoke in Strasbourg.

My wife looked at me and asked if I wanted a coffee. I nodded. It was going to be a very long day.

At EuroBSDCon 2026, I won't be giving a theoretical lecture on high availability. Instead, I’m going to tell the raw story of that night: the emergency recovery, the architectural choices that actually saved us, and the ones that crumbled under pressure (because we rarely talk about what fails).

Most of all, I’ll explain why that night changed my perspective, and why I’ve come to see BSD systems not just as operating systems, but as essential, practical tools for building simpler, more resilient infrastructure.

The official schedule is now live. If you want to hear a real-world post-mortem, join me on Saturday, 12 Sept at 11:15 (Room D.0.02).

EuroBSDCon Full schedule: https://events.eurobsdcon.org/2026/schedule/
See you there! ☕️

#FreeBSD #NetBSD #OpenBSD #DragonFlyBSD #RunBSD #EuroBSDCon #SysAdmin #SelfHosted #IT #EuroBSDCon2026 #BSDCon

Linux tip: `fuser -v /path/to/file` shows which processes have a file open. Use `-k` to kill those processes when "device busy" errors prevent unmounting filesystems. #Linux #SystemAdministration #SysAdmin

When I was younger, I was expecting systems to work all of the time and I was really angry when it was failing.

Now, I’m expecting that a system will fail after some time and I try to :

• set up alternative ways to get back my admin access, even if it’s not easy to get it back
• ensure a reboot won’t break things (or at least, less)

Today, it paid off : I got a strange network issue on one of my hypervisors and I was able to reboot the thing using a remote KVM and my VPN, while I was in a train! #lifeasasysadmin #sysadmin

Version-control every configuration change. Use git even for single files. When something breaks, you can see exactly what changed and when. Your future self will be grateful. #Linux #SystemAdministration #SysAdmin #Coding

Linux tip: `ionice -c 3 command` runs a command with idle I/O priority. It only gets disk access when no other processes need it. Perfect for backups or maintenance tasks. #Linux #SystemAdministration #SysAdmin #Performance

Linux tip: `sysctl vm.drop_caches=3` clears page cache, dentries, and inodes from memory. Useful for testing cold cache performance, but never use in production scripts. Only for debugging! #Linux @#SystemAdministration #SysAdmin

Linux tip: `pidof process_name` returns process IDs by name. Unlike `pgrep`, it matches only the command name, not arguments. Use in scripts where you need exact process name matching. #Linux #SystemAdministration #SysAdmin

Dealt with a lovely and very helpful third-party support person for a client's E-mail and once again was reminded why I don't use #Office365 for E-mail. What a nightmare to administer. Bear in mind, I'm still running a couple medium sized #qmail servers.

As I type this, Office365 still isn't letting us send E-mail but I'm sure we'll get there.

#email #sysadmin #techsupport

Linux tip: `strace -e trace=file program` traces only file-related system calls. Add `-o output.txt` to save results. Reveals which config files, libraries, or data files your program actually accesses. #Linux #SystemAdministration #SysAdmin

Linux tip: `systemd-analyze blame` shows which services slow down boot time. Use `systemd-analyze critical-chain` to see the dependency chain causing delays. Optimize the real bottlenecks. #Linux #SystemAdministration #SysAdmin

Quand tu relances ton cluster Proxmox et que ton serveur Gotify se transforme en sapin de Noël ! 🎄✨
Le doux bruit des services qui reviennent à la vie les uns après les autres... Uptime-Kuma et Watchtower sont au taquet ! Y a pas à dire, ça fait toujours plaisir de voir tout ce beau monde repasser au vert 🟢💪
Et chez vous, ça donne quoi le monitoring après un reboot ? 🚀
#SelfHosted #Proxmox #SysAdmin #Gotify #UptimeKuma #Docker #OpenSource #Homelab

Updated Debian Linux version 13: 13.6 has been released. If you regularly update your system using the APT you will get these updates but you may have to schedule system reboots.

https://www.debian.org/News/2026/20260711

#linux #debian #sysadmin

Haack's Networking

✍️ Starting today at 5pm UTC-06/7, the following instances will go down for maintenance:

1) gnulinux.studio
2) gnulinux.media

👀 This maintenance will reduce total core consumption on the host by 8 vCPUs and reduce RAM usage by 16GB. Furthermore, these instances will switch from testing to production usage and public availability.

‼️It is expected that this transition should only take 6-12 hours, however, it could take as long as 72 hours if DNS caching gets delayed. Prepare for down time accordingly.

#sysadmin #selfhosted #linux #freesoftware #opensource #navidrome #jellyfin

RE: https://gnulinux.social/@oemb1905/116818157162562628

Just a heads up that this was delayed due to a foot injury that went from okay to terrible very quickly. We are resuming this project today and it should take roughly 48-72 hours to complete.

#navidrome #jellyfin #selfhosted #debian #floss #linux #opensource #freesoftware #sysadmin

Haack’s Networking » 🌐 2026-06-26
@oemb1905@gnulinux.social

Haack's Networking

✍️ Starting today at 5pm UTC-06/7, the following instances will go down for maintenance:

1) gnulinux.studio
2) gnulinux.media

👀 This maintenance will reduce total core consumption on the host by 8 vCPUs and reduce RAM usage by 16GB. Furthermore, these instances will switch from testing to production usage and public availability.

‼️It is expected that this transition should only take 6-12 hours, however, it could take as long as 72 hours if DNS caching gets delayed. Prepare for down time accordingly.

#sysadmin #selfhosted #linux #freesoftware #opensource #navidrome #jellyfin

Is this the moment where I get annoyed enough with state and quirks of configuration management tools, and switch my #OpenBSD boxes to somewhat more hands-off #NixOS ? 🤔

#SysAdmin #HomeLab #SelfHosting

Trying running my office on wireless. Things connect, but seemed laggy compared to the dmarc. Speedtest.net is not a great way to test connectivity, but performing two consecutive tests against the same server is a reasonable test.

Mac Studio wifi: 18mbs down, 16 up. Good enough to work, but I'm paying for 300mbs.

Mac Studio ethernet to Mikrotik wifi bridge: 210mbs down, 200 up.

Sigh. Apparently I'm back on my Redundant Array of Inexpensive Crap kick. #sysadmin

A good #sysadmin article on how to tell if AI scrapers are eating your bandwidth.

https://bunny.net/blog/how-to-tell-if-scrapers-are-eating-your-bandwidth/

#TIL `zsh`'s builtin `[`is not only not like `bash`'s, it's mostly unlike any other programming language, in the sense that the string equal operator is `=` and not `==`.

The error message is, of course, `zsh: = not found`.

#SysAdmin

Coté Source :
~614 487 IP sources : rappel, on est sûr du logiciel NON grand publique, un peu niche avec zéro contribution de dev externe a l'entreprise, ce qui est normale.

Si j'enlève les IP de l'infra (monitoring, jenkins, redmine) on enlève ~630 000 requêtes pour 6 IPs.

reste 2 500 000 requêtes et 614 481 IPs ...

~ 582 000 IPs, on fait moins de 10 requêtes (pour un total de 1754808 requêtes soit plus de 50%) dans les détails :
~ 257 998 IPs, on fait une seule requête pour un total de 257998.
36395 IPs, on fait seulement 2 requêtes pour un total de 72790
125627 IPs, on fait seulement 3 requêtes pour un total de 376881
28233 IPs, on fait seulement 4 requêtes pour un total de 112932
15122 IPs, on fait seulement 5 requêtes pour un total de 75610
60216 IPs, on fait seulement 6 requêtes pour un total de 361296

sinon on est ~ une trentaine (et pas tous dev) et en ce lundi de juillet, les bureaux parisiens (ou il y a pas grand monde ~ 3 personnes) ont fait environ 800 requêtes...
donc l'usage "légitime" sur la journée doit être ~ 30 000 requêtes (évaluation haute) soit 1% de l'usage. (bon l'infra compte pour 20% quand même 🙂 )

bref, on n'est pas sur les mêmes chiffres, mais on dépasse largement ton test.

Plusieurs point : l'url du git est ancienne (depuis plus de 10 ans) il y a eu quelques changements, mais globalement ce sont les mêmes urls.
De toute façon, c'est seulement depuis moins de 2 ans qu'on a un nombre de requêtes aussi importantes. Au point de déclencher des erreurs sur le monitoring et d'empêcher l'usage correct de la plateforme.
Je pense que les robots ne sont pas ceux des moteurs de recherche, ils ne parcourent pas internet à la recherche de page a indexé, mais plutôt des robots qui ciblent des URLS particulières " à forte valeur ajoutée" (des urls de code opensource accessible, super pour alimenter des IAs de code).

#sysadmin #git #IA #forge #bots #stats

Linux tip: `iostat -x 1` monitors disk I/O performance every second. Watch the `%util` column - consistently high values indicate I/O bottlenecks. Press Ctrl+C to stop monitoring. #Linux #Performance #SystemAdministration #SysAdmin

Linux tip: `ss -s` provides socket statistics summary. Shows TCP/UDP connection counts and states. Much faster than parsing full socket lists when you just need connection metrics. #Linux #SystemAdministration #SysAdmin

For all those people building #NAS boxes with huge CPUs and lots of #RAM because that's how Linus (of YouTube not #Linux) did it, I'm running a 50+ TiB NAS on a Celeron N5105 with 8GiB of RAM using #LVM and #XFS.

My highest loads are during backups (borg) when the system hits just 80% idle. Use your precious RAM for gaming.

#sysadmin

I managed an e-commerce server for about ten years. It grew from a small local shop into a major national business, even handling international orders. They expanded to the point where they reduced their local brick-and-mortar store hours because the bulk of their revenue was coming from online sales.

Then one seller came along and convinced them that switching to Shopify would be the key to growing even further. Apparently, their €130/month bare-metal redundant setup - which boasted a calculated uptime of 99.995% over 10 years - just wasn't cutting it anymore.

They’ve been on Shopify for about six months now, and every now and then, I still get the alerts. I left the monitoring active via Uptime Kuma and ran the numbers. Over the last six months, their uptime dropped below 98%.
In other words, in just six months, they’ve been down for almost as many hours as they were during the entire previous decade.

I contacted the client - not because I want to take over the hosting again, but just to understand what on earth happened (we're on excellent terms). Their response was: "We don't know, but if it happened on Shopify, it means it was bound to happen anyway."

As long as we keep swallowing the lie that "the cloud" and "tech giants" are always the right solution for us, we completely deserve the cloud and the tech giants.

#IT #SysAdmin #OwnYourData

For all those people building #NAS boxes with huge CPUs and lots of #RAM because that's how Linus (of YouTube not #Linux) did it, I'm running a 50+ TiB NAS on a Celeron N5105 with 8GiB of RAM using #LVM and #XFS.