Haack's Wiki

User Tools

Site Tools

Trace:
computing:miscadmin

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
computing:miscadmin [2019/11/03 02:57] – oemb1905computing:miscadmin [2024/12/07 19:48] (current) – oemb1905
Line 1: Line 1:
- 
 ------------------------------------------- -------------------------------------------
   * **miscadmin**    * **miscadmin** 
Line 26: Line 25:
   gsettings set org.gnome.desktop.background show-desktop-icons false   gsettings set org.gnome.desktop.background show-desktop-icons false
   gsettings set org.nemo.desktop show-desktop-icons true   gsettings set org.nemo.desktop show-desktop-icons true
- 
  
 -motd- -motd-
Line 47: Line 45:
      
   cat /etc/motd   cat /etc/motd
-  
    
 -Firefox- -Firefox-
  
 To install the latest firefox on Debian and make it default, do the following.  The link below may not always work, so replace when updated. To install the latest firefox on Debian and make it default, do the following.  The link below may not always work, so replace when updated.
- 
  
   sudo mkdir -p /opt/firefox   sudo mkdir -p /opt/firefox
Line 66: Line 62:
   mv /usr/lib/firefox-esr/firefox-esr_orig /usr/lib/firefox-esr/firefox-esr   mv /usr/lib/firefox-esr/firefox-esr_orig /usr/lib/firefox-esr/firefox-esr
      
 +-youtube-dl-
  
--optical ripping-+  sudo curl -L https://yt-dl.org/downloads/latest/youtube-dl -o /usr/local/bin/youtube-dl 
 +  sudo chmod 750 /usr/local/bin/youtube-dl 
 + 
 +-optical ripping example-
  
   cdrecord -pad -dao -data blag-140k-i686.iso   cdrecord -pad -dao -data blag-140k-i686.iso
  
- +-pam hardening location-
- +
--pam garbage-+
  
   sudo nano /etc/pam.d/common-password   sudo nano /etc/pam.d/common-password
Line 196: Line 194:
   use this for local interfaces for ipv6   use this for local interfaces for ipv6
   ::::0:0.0.0.0   ::::0:0.0.0.0
 +  
 +  view
 +  exim -Mvh
      
 -verifying TLS with swaks on exim4 relay setup -verifying TLS with swaks on exim4 relay setup
Line 227: Line 228:
   cat /var/log/auth.log | grep 'sshd.*Invalid'   cat /var/log/auth.log | grep 'sshd.*Invalid'
   cat /var/log/auth.log | grep 'sshd.*opened'   cat /var/log/auth.log | grep 'sshd.*opened'
 +  
 +-checking disk space-
 +
 +  du -ch -d 1 | sort -hr
 +
 +-check disk space with ncurses tool-
 +
 +  sudo apt install ncdu
 +  ncdu
 +  
 +-stop/start sleep of any form on servers-
 +
 +  sudo systemctl mask sleep.target suspend.target hibernate.target hybrid-sleep.target
 +  sudo systemctl unmask sleep.target suspend.target hibernate.target hybrid-sleep.target
 +  
 +-xorg with ssh
 +
 +  touch /root/.Xauthority 
 +  touch /home/user/.Xauthority
 +  
 +-batch convert with ffmpeg to mp4 from mkv
 +
 +  for i in *.mkv; do
 +  ffmpeg -i "$i" -codec copy "${i%.*}.mp4"
 +  done
 +
 +-fix badly configured zpool that used short names to by-id names. This command can be entered as-is, and does not need to be adjusted at all for what your specific ids are or for multiple drives. It literally exports the short names and by-ids, unmounts the volumes/pool, then remakes it using the blkid.
 +
 +  zpool export tank 
 +  zpool import -d /dev/disk/by-id tank
 +  
 +monitor ram usage every 3 seconds in human readable way
 +
 +  free -h -w -s 3
 +  
 +postfix to relay, satellite option, enter the relay like this:  to prevent lookups
 +  
 +  [smtp.smtpserver.com]:587
 +  
 +Re-attach to screen session that's attached.
 +
 +  screen -d -r <session#.user>
 +  
 +mysqldump to local from remote
 +
 +  ssh root@hub.haacksnetworking.org /usr/bin/mysqldump --all-databases --single-transaction --skip-comments --skip-dump-date > hknet.sqldump
 +  
 +Turn off sleep.
 +
 +  sudo systemctl mask sleep.target suspend.target hibernate.target hybrid-sleep.target
 +  
 +Amd gPU errors fix
 +  
 +  mkdir ~/Repositories
 +  cd /home/user/Repositories && git clone https://kernel.googlesource.com/pub/scm/linux/kernel/git/firmware/linux-firmware.git
 +  sudo cp /home/user/Repositories/linux-firmware/amdgpu/* /lib/firmware/amdgpu && sudo update-initramfs -k all -u -v
 +  
 +Unattended Upgrades
 +
 +  sudo apt install unattended-upgrades
 +  sudo apt install apt-config-auto-update
 +  sudo unattended-upgrades --dry-run --debug
 +  sudo systemctl status unattended-upgrades
 +
 +Next ... ssh failed attempts
 +
 +  grep "Failed password" /var/log/auth.log
 +  journalctl _SYSTEMD_UNIT=ssh.service | egrep "Failed|Failure"
 +  faillock --user <user>
 +  grep "authentication failure" /var/log/auth.log | awk '{ print $14 }' | cut -b7-  | sort | uniq -c
 +
 +Display Managers (Lightdm, etc.)
 +
 +  sudo nano /etc/lightdm/lightdm-gtk-greeter.conf
 +  [SeatDefaults]
 +  allow-guest=false
 +  greeter-hide-users=true
 +  nano ~/.config/gtk-3.0/settings.ini
 +  [Settings]
 +  gtk-application-prefer-dark-theme=1
 +  sudo nano /etc/lightdm/lightdm.conf
 +  cd /usr/share/lightdm/light.conf.d/
 +  
 +Setting ufw to allow connections to only certain subnets.
 +
 +  ufw allow from 10.16.16.0/24 to any proto tcp port 8006
 +  ufw allow from 10.36.36.0/24 to any proto tcp port 8006
 +  ufw allow from 10.16.16.0/24 to any proto tcp port 22
 +  ufw allow from 10.36.36.0/24 to any proto tcp port 22
 +  ufw allow from 10.16.16.0/24 to any proto tcp port 80
 +  ufw allow from 10.36.36.0/24 to any proto tcp port 80
 +  ufw allow from 10.16.16.0/24 to any proto tcp port 443
 +  ufw allow from 10.36.36.0/24 to any proto tcp port 443
 +
 +Establish NIC name using mac:ID
 +
 +  nano /etc/udev/rules.d/70-persistent-net.rules
 +  SUBSYSTEM=="net",ACTION=="add",ATTR{address}=="00:00:00:00:00:00",ATTR{type}=="1",NAME="eth100"
 +  
 +Establish Nemo as default, remove desktop icons, verify nemo default
 +
 +  xdg-mime default nemo.desktop inode/directory application/x-gnome-saved-search
 +  gsettings set org.gnome.desktop.background show-desktop-icons false
 +  xdg-mime query default inode/directory
 +  
 +Sury php
 +
 +  sudo apt install -y apt-transport-https lsb-release ca-certificates wget
 +  wget -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg
 +  echo "deb https://packages.sury.org/php/ $(lsb_release -sc) main" | sudo tee /etc/apt/sources.list.d/php.list 
 +  
 +Static ipv6 in ifupdown
 +
 +  iface enp0s3 inet6 static
 +    address 2001:db8:1000::1
 +    netmask 64
 +    gateway 2001:db8:1000::1
 +    autoconf 0
 +    dns-nameservers 2001:4860:4860::8888 2001:4860:4860::8844
 +    
 +Assigning an interface a persistent name so that bridging and static ifupdown assignments don't fail on reboot.
 +
 +  sudo nano /etc/udev/rules.d/70-persistent-net.rules
 +  SUBSYSTEM=="net",ACTION=="add",ATTR{address}=="29:af:2c:34:g7:11",ATTR{type}=="1",NAME="eth100"
 +  
 +Convert pdf to Word
 +
 +  libreoffice --infilter="writer_pdf_import" --convert-to docx Terms-Of-Service.pdf
 +  
 +Instruct a client to ignore the DNS server offers made by the router on Debian. 
 +
 +  sudo nano /etc/dhcp/dhclient.conf
 +
 +In that file, find the section that begins with ''request subnet-mask'' and remove domain-name-servers from it.
 +
 +  request subnet-mask, broadcast-address, time-offset, routers,
 +    domain-name, __domain-name-servers__, domain-search, host-name,
 +    dhcp6.name-servers, dhcp6.domain-search, dhcp6.fqdn, dhcp6.sntp-servers,
 +    netbios-name-servers, netbios-scope, interface-mtu,
 +    rfc3442-classless-static-routes, ntp-servers;
 +
 +After that's removed, find the section that begins with ''prepend domain-name-servers 127.0.0.1;'' and change it as you see fit:
 +
 +  prepend domain-name-servers 192.168.1.20;
 +  prepend domain-name-servers 192.168.1.21;
 +  sudo systemctl restart networking
 +  
 +After you restart networking, run ''cat /etc/resolv.conf'' and make sure the DNS is what you desired. In order to test whether there are DNS leaks, use tcpdump and adjust port to 53, 5335, 853, etc.
 +
 +  tcpdump -vv -x -X -s 1500 -i eth0 'port 853'
 +
 +In order to set a policy on Chrome to stop DOT, or DNS over TLS/https, do the following:
 +
 +  sudo nano /etc/opt/chrome/policies/managed/policies.json
 +  {
 +  "BrowserGuestModeEnabled": false,
 +  "BrowserAddPersonEnabled": false,
 +  "IncognitoModeAvailability": 1,
 +  "DnsOverHttpsMode": false,
 +  "ExtensionSettings": {"*": {"installation_mode": "blocked"}}
 +  }
 +
 +Running Debian testing/unstable and your zfs modules suddenly won't load after a reboot and upgrade, well do the following:
 +
 +  sudo apt-get install linux-headers-$(uname -r)
 +
 +Alright ....
  
- --- //[[oemb1905@jonathanhaack.com|oemb1905]] 2019/11/02 20:56//+ --- //[[webmaster@haacksnetworking.org|oemb1905]] 2024/12/07 19:48//
computing/miscadmin.1572749831.txt.gz · Last modified: 2019/11/03 02:57 by oemb1905

Page Tools

Except where otherwise noted, content on this wiki is licensed under the following license: GNU Free Documentation License 1.3
GNU Free Documentation License 1.3 Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki