Advanced Search
Search Results
65 total results found
2025-09-19 - Summer hurries not over yet
Closed cloud perimeter for direct SSH access, adjusted firewall policies. Mail client to support Microsoft 365, IMAP, PGP encryption/signing and S/MIME encryption/signing. Speech recognition engine MacWhisper run locally (data remains local) Tested Calend...
Obtain and activate free 3DES-AES license for Cisco ASA5505 from Cisco?
Get free license from Cisco Proceed with normal registration to get Cisco ID. https://software.cisco.com/software/swift/lrp/#/pak Add device Choose in 'Product Family' Enter serial or Enter serial Approve agreement Add device Download licenses Unpac...
Firmware upgrade
Login into ASA (SSH or serial port) Provide 'enable' password enable Prepare files on TFTP server. ping 192.168.74.128 copy tftp: disk0: dir Perform change of booting image show version configure terminal dir show bootvar no boot system disk0:/asa845-k8.bin...
Encryption
Enable encryption app (functionality) sudo -u www-data php /var/www/nextcloud/occ app:enable encryption Enable encryption sudo -u www-data php /var/www/nextcloud/occ encryption:enable Enable master key mode sudo -u www-data php /var/www/nextcloud/occ encrypt...
Asterisk and FreePBX on Debian12
Preparations Database Create new user in Cloud SQL https://console.cloud.google.com/sql/instances/xxx/users?project=yyy Warning: - dashes (hyphens) can not be used in the MariaDB databases' naming. To match user to database, only underlines are used. Verify ...
Raspberry PI Connect
CLI only (without graphics) Install PAM agent sudo apt install rpi-connect-lite Enable PAM agent by desired user (normal user) rpi-connect on Enroll (connect) device rpi-connect signin Sign in with your account Give name for device Device connected List...
Fresh installation of Raspberian (RaspOS)
What is inside ? free -h df -hT | sort Lite (no-GUI) Full Raspberian Add yourself privileged access sudo su nano /etc/sudoers.d/099_anton anton ALL=(ALL:ALL) NOPASSWD: ALL Verify (valuable is last command) sudo -l -U anton Install tmux (screen) sudo su...
Icinga2 agent on Debian13 (trixie)
(On Raspberry PI) apt install \ icinga2 \ monitoring-plugins \ monitoring-plugins-basic \ monitoring-plugins-common Register icinga2 node wizard Logs tail -f \ /var/log/icinga2/icinga2.log \ /var/lib/icinga2/api/zones-stage-startup.lo...
Backup and restore configuration using Trivial File Transfer Protocol (TFTP)
Run tftp server (pumkin on tftpd) Ensure tftp server is listening ping 192.168.74.129 Backup (from ASA) copy running-config tftp://192.168.74.129 On the server side: Rename config. Restore (to ASA) ensure the correct name of config exists before pulling...
tftp on MacOS v26 (Tahoe) [CANCELLED]
preface tftp was depreciated from macOS. lesson (might be useful) Check is it available ls /usr/libexec/tftpd Create local tftp directory AS NORMAL user export u="anton-w" export dir="/Users/${u}/delme/tftp" mkdir -p ${dir} cd ${dir} pwd current status nets...
Backup and restore configuration using Secure SHell (SSH)
scp must be enabled enable conf t ssh enable scopy dump running-config into file copy running-config flash:/running-config dir SSH weak algorithms and ciphers need to be enabled vi ~/.ssh/config config Host 192.168.74.1 KexAlgorithms +diffie-hellman-gro...
Morning script (for MacOS)
Hereby I publish part of my morning script, which perform needed actions. The nature of this script, that it is all-time adjustable. location vi /Users/anton/dox-pvt/tech/scripts/start_general_env_on_mac.sh #!/bin/sh # # this is a morning script of Anton to ...
fixperm.sh for /Users/Shared
Usage of resources from several profiles: /Users/Shared/tech/scripts/fixperm.sh #!/bin/bash # # This script will restore permissions on shared directories # # # 2023-05-24 + init /A # 2023-06-06 * changed to use 'find' /A # 2023-10-22 + set executables t...
Hostname
Disbale cloud-init (which overwrites everyboot, not the first only) touch /etc/cloud/cloud-init.disabled Set new hostname hostnamectl set-hostname ku5mon1 shutdown -r now
Podcasts
Audio Nextcloud Podcast SUSE Podcast Video
RustDesk - deployment
Environment Operating System: Debian GNU/Linux 12 (bookworm) Create DNS record dig A desk.2dz.fi +short 35.228.9.88 Request LE certificate cd /etc/nginx/sites-available/ cp default desk.2dz.fi.conf ln -s /etc/nginx/sites-available/desk.2dz.fi.conf /etc/nginx...
RustDesk on SUSE v15.6 Xfc DE
Installing RustDesk remote management solution on pure, clean, fresh install of SUSE 15.6 with 'Xfc' Graphical Desktop Environment. For non-GUI/DE setup, refer here. hostnamectl set-hostname ku5desk2 zypper lr zypper mr -d repo-openh264 zypper ps -s Install...
LVM - extend the volume
To extend the volume, we have to attach new physical (virtual) disk on hypervisor. Preparations We need to understand which disk need to be extended: In my case it is a root which is full. df -h and verify it is LVM lsblk After adding the disk, it should a...
Terminal via serial port on MacOS Sonoma
Connect Verify connectivity system_profiler SPUSBDataType | grep -i -A5 serial ioreg -p IOUSB Identify device ls -ltr /dev/tty* Disconnect, connect back, repeat command to identify it is exactly the same device (it will be usually owned by the root, but ...
Determine the best server for OPNsense updates and upgrades
Wherever you are on the planet, there is a need to determine, which server out of many is accessible and which has the lowest latency. Let's create a mirros list vi mirrors.list Mirrors (this one was reverse engineered from official OPNsense page) https://ftp...