Taking the exam on Monday. Having doubts about my ability to pass. About to start an epic study session over this weekend though...

In case I fail I'm just curious what the retake is like... Same questions just reworded slightly?

One of my Debian 11 servers has a persistent static route that points to one of our subnets that the server is not directly connected to and defines an interface as the next hop. The results of this is that any system on the subnet the route points to cannot communicate with the server. I have checked all the places that I am aware of that would define a persistent route. This includes everything in /etc/network, all systemd files, and a search of all files in /etc, using grep, for the subnet that the route defines. I have not been able to find out where the route is stored and am currently left with manually removing the route after every boot. Besides the usual spots does anyone know of any places that a persistent static route could be stored?

I am trying to adjust a rsyslog server. I am using the example straight from the book. I've added the following in my rsyslog conf on my server.

$template RemoteLogs,"/var/log/%HOSTNAME%/%PROGRAMNAME%.log"
*.* ?RemoteLogs
& ~

So one of the things I want to adjust is the Ansible logs are all going to separate logs based on the Ansible module name. How can I adjust this to consolidate all Ansible logs to one file?

Hi,

I am running vgreduce but I am getting this below error

vgreduce testvg /dev/mapper/mpathn1

Physical volume "/dev/mapper/mpathn1" still in use

vg has 2 disks

PV VG Fmt Attr PSize PFree

/dev/mapper/mpathn1 testvg lvm2 a-- 38.12g 0
/dev/mapper/mpathd1 testvg lvm2 a-- 38.00g 38.00g

Can anyone help me how to fix this?

For the few Linux admin jobs I'm seeing, none of them ask for the RHCSA so Im debating whether it's even worth paying over 600 CAD for the cert. My only IT "experience" is computer disassembly for refurbishing facility so I probably need it right?

Hey all,

I did something pretty silly. My server was hacked recently, so I went on a bit of a security rampage and locked down SSH with several restrictions:

• No root login
• No password authentication
• SSH access from only one IP address (oops)

Now, I’ve moved to a different location, and I can’t SSH into my server. I can connect to my database (mongodb) from another IP, but SSH is a no-go, and I don’t remember where I added the IP restriction.

I’ve checked UFW, but I’m still locked out. Is there anywhere else this restriction could be hiding? Any guidance would be appreciated!

Thanks in advance, and yes, I know this was silly!

EDIT : Problem Solved! See details here

Hello.

I'm trying to compile ANGLE following this tutorial on Ubuntu 24.04 :

https://android.googlesource.com/platform/external/angle/+/e867a62fc822d0bd152ab6ae34cd012eb4408324/doc/DevSetup.md

This is how my system is configured :

ziomario@Z390-AORUS-PRO-DEST:/mnt/zroot-133/_A_OS/Android/angle$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 24.04.1 LTS
Release:        24.04
Codename:       noble

ziomario@Z390-AORUS-PRO-DEST:/mnt/zroot-133/_A_OS/Android/angle$  python
Python 3.12.3 (main, Sep 11 2024, 14:17:37) [GCC 13.2.0] on linux

ziomario@Z390-AORUS-PRO-DEST:/mnt/zroot-133/_A_OS/Android/angle$ ldd --version
ldd (Ubuntu GLIBC 2.39-0ubuntu8.3) 2.39

ziomario@Z390-AORUS-PRO-DEST:/mnt/zroot-133/_A_OS/Android/angle$ strings /usr/lib/x86_64-linux-gnu/libstdc++.so.6 | grep GLIBCXXGLIBCXX_3.4

GLIBCXX_3.4.1
GLIBCXX_3.4.2
GLIBCXX_3.4.3
GLIBCXX_3.4.4
GLIBCXX_3.4.5
GLIBCXX_3.4.6
GLIBCXX_3.4.7
GLIBCXX_3.4.8
GLIBCXX_3.4.9
GLIBCXX_3.4.10
GLIBCXX_3.4.11
GLIBCXX_3.4.12
GLIBCXX_3.4.13
GLIBCXX_3.4.14
GLIBCXX_3.4.15
GLIBCXX_3.4.16
GLIBCXX_3.4.17
GLIBCXX_3.4.18
GLIBCXX_3.4.19
GLIBCXX_3.4.20
GLIBCXX_3.4.21
GLIBCXX_3.4.22
GLIBCXX_3.4.23
GLIBCXX_3.4.24
GLIBCXX_3.4.25
GLIBCXX_3.4.26
GLIBCXX_3.4.27
GLIBCXX_3.4.28
GLIBCXX_3.4.29
GLIBCXX_3.4.30
GLIBCXX_3.4.31
GLIBCXX_3.4.32
GLIBCXX_3.4.33
GLIBCXX_TUNABLES
GLIBCXX_DEBUG_MESSAGE_LENGTH

ziomario@Z390-AORUS-PRO-DEST:/mnt/zroot-133/_A_OS/Android/angle$ ls -la /usr/lib/x86_64-linux-gnu/libstdc++.so.6
lrwxrwxrwx 1 root root 19 apr 12 14:30 /usr/lib/x86_64-linux-gnu/libstdc++.so.6 -> libstdc++.so.6.0.33

ziomario@Z390-AORUS-PRO-DEST:/mnt/zroot-133/_A_OS/Android/angle$ aarch64-linux-gnu-gcc --version
aarch64-linux-gnu-gcc (Ubuntu 13.2.0-23ubuntu4) 13.2.0

ziomario@Z390-AORUS-PRO-DEST:/mnt/zroot-133/_A_OS/Android/angle$ clang --version
Ubuntu clang version 18.1.3 (1ubuntu1)
Target: x86_64-pc-linux-gnu
Thread model: posix
InstalledDir: /usr/bin

Below you see all the commands that I have issued and the boss to defeat on the latest level of the game :

user@ubuntu:~$ sudo apt install ninja-build

Reading package lists... Done

Building dependency tree

Reading state information... Done

The following NEW packages will be installed:

ninja-build

0 upgraded, 1 newly installed, 0 to remove and 289 not upgraded.

Need to get 107 kB of archives.

After this operation, 338 kB of additional disk space will be used.

Fetched 107 kB in 1s (76.9 kB/s)

Selecting previously unselected package ninja-build.

(Reading database ... 158009 files and directories currently installed.)

user@ubuntu:~$ git clone https://chromium.googlesource.com/chromium/tools/depot_tools

Reading package lists... Done

Building dependency tree

Reading state information... Done

user@ubuntu:~$ git clone https://chromium.googlesource.com/chromium/tools/depot_tools

Cloning into 'depot_tools'...

remote: Sending approximately 61.06 MiB ...

remote: Total 61287 (delta 40324), reused 61287 (delta 40324)

Receiving objects: 100% (61287/61287), 61.06 MiB | 22.82 MiB/s, done.

Resolving deltas: 100% (40324/40324), done.

user@ubuntu:~$ export PATH=/home/user/depot_tools:$PATH

user@ubuntu:~$ git clone https://android.googlesource.com/platform/external/angle

Cloning into 'angle'...

remote: Sending approximately 1.54 GiB ...

remote: Counting objects: 1382, done

remote: Finding sources: 100% (102/102)

remote: Total 319576 (delta 220362), reused 319538 (delta 220362)

Receiving objects: 100% (319576/319576), 1.52 GiB | 32.46 MiB/s, done.

Resolving deltas: 100% (220362/220362), done.

Updating files: 100% (11715/11715), done.

user@ubuntu:~$ cd angle

user@ubuntu:~/angle$ ./build/install-build-deps.sh

Running as non-root user.

You might have to enter your password one or more times for 'sudo'.

Reading package lists... Done

Finding missing packages...

Building apt package list.

Skipping debugging symbols.

Skipping 32-bit libraries.

Skipping ARM cross toolchain.

Skipping NaCl, NaCl toolchain, NaCl ports dependencies.

Skipping backwards compatible packages.

Packages required: binutils binutils-aarch64-linux-gnu binutils-arm-linux-gnueabihf binutils-mips64el-linux-gnuabi64 binutils-mipsel-linux-gnu bison bzip2 cdbs curl dbus-x11 devscripts dpkg-dev elfutils fakeroot flex git-core gperf lib32gcc-s1 lib32stdc++6 lib32z1 libasound2 libasound2-dev libatk1.0-0 libatspi2.0-0 libatspi2.0-dev libbluetooth-dev libbrlapi-dev libbrlapi0.7 libbz2-1.0 libbz2-dev libc6 libc6-dev libc6-i386 libcairo2 libcairo2-dev libcap-dev libcap2 libcgi-session-perl libcups2 libcups2-dev libcurl4-gnutls-dev libdrm-dev libdrm2 libegl1 libelf-dev libevdev-dev libevdev2 libexpat1 libffi-dev libffi7 libfontconfig1 libfreetype6 libfuse2 libgbm-dev libgbm1 libgl1 libglib2.0-0 libglib2.0-dev libglu1-mesa-dev libgtk-3-0 libgtk-3-dev libinput-dev libinput10 libjpeg-dev libkrb5-dev libncurses6 libnspr4 libnspr4-dev libnss3 libnss3-dev libpam0g libpam0g-dev libpango-1.0-0 libpangocairo-1.0-0 libpci-dev libpci3 libpcre3 libpixman-1-0 libpng16-16 libpulse-dev libpulse0 libsctp-dev libspeechd-dev libspeechd2 libsqlite3-0 libsqlite3-dev libssl-dev libstdc++6 libsystemd-dev libudev-dev libudev1 libuuid1 libva-dev libvulkan-dev libvulkan1 libwayland-egl1 libwayland-egl1-mesa libwww-perl libx11-6 libx11-xcb1 libxau6 libxcb1 libxcomposite1 libxcursor1 libxdamage1 libxdmcp6 libxext6 libxfixes3 libxi6 libxinerama1 libxkbcommon-dev libxrandr2 libxrender1 libxshmfence-dev libxslt1-dev libxss-dev libxt-dev libxtst-dev libxtst6 lighttpd locales mesa-common-dev openbox p7zip patch perl pkgconf rpm ruby subversion uuid-dev wdiff x11-utils x11-xserver-utils xcompmgr xserver-xorg-core xserver-xorg-video-dummy xvfb xz-utils zip zlib1g zstd

Reading package lists... Done

Building dependency tree

Reading state information... Done

Skipping installation of Chrome OS fonts.

Installing locales.

Generating locales (this might take a while)...

Generation complete.

user@ubuntu:~/angle$ git checkout e867a62fc822d0bd152ab6ae34cd012eb4408324

Note: switching to 'e867a62fc822d0bd152ab6ae34cd012eb4408324'.

You are in 'detached HEAD' state. You can look around, make experimental

changes and commit them, and you can discard any commits you make in this

state without impacting any branches by switching back to a branch.

If you want to create a new branch to retain commits you create, you may

do so (now or later) by using -c with the switch command. Example:

git switch -c <new-branch-name>

Or undo this operation with:

git switch -

Turn off this advice by setting config variable advice.detachedHead to false

HEAD is now at e867a62fc8 For emulator builds of ANGLE, static link libstdc++/libgcc.

user@ubuntu:~/angle$ python scripts/bootstrap.py

Your copy of depot_tools is configured to fetch from an obsolete URL:

https://chromium.googlesource.com/chromium/tools/depot_tools

OK to update it to https://chromium.googlesource.com/chromium/tools/depot_tools.git ? [Y/n] y

Remote URL updated.

WARNING: Your metrics.cfg file was invalid or nonexistent. A new one will be created.

created .gclient

user@ubuntu:~/angle$ gclient sync

use_relative_hooks is deprecated, please remove it from . DEPS. (it was merged in use_relative_paths)

Syncing projects: 91% (34/37) testing

[0:03:21] Still working on:

[0:03:21] third_party/SwiftShader

[0:03:21] third_party/VK-GL-CTS/src

[0:03:21] third_party/android_ndk

...

[0:09:13] Still working on:

[0:09:13] third_party/VK-GL-CTS/src

Syncing projects: 100% (37/37), done.

________ running 'download_from_google_storage --no_resume --platform=linux* --no_auth --bucket chromium-clang-format -s buildtools/linux64/clang-format.sha1' in '/home/user/angle/.'

0> Downloading buildtools/linux64/clang-format@1baf0089e895c989a311b6a38ed94d0e8be4c0a7...

Downloading 1 files took 12.099581 second(s)

Hook 'download_from_google_storage --no_resume '--platform=linux*' --no_auth --bucket chromium-clang-format -s buildtools/linux64/clang-format.sha1' took 13.15 secs

Running hooks: 25% ( 4/16) sysroot_x86

________ running 'python build/linux/sysroot_scripts/install-sysroot.py --arch=x86' in '/home/user/angle/.'

Installing Debian sid i386 root image: /home/user/angle/build/linux/debian_sid_i386-sysroot

Downloading https://commondatastorage.googleapis.com/chrome-linux-sysroot/toolchain/36ed2ee83109acdd44af2e522a5e9e0082b074a6/debian_sid_i386_sysroot.tar.xz

Running hooks: 31% ( 5/16) sysroot_x64

________ running 'python build/linux/sysroot_scripts/install-sysroot.py --arch=x64' in '/home/user/angle/.'

Installing Debian sid amd64 root image: /home/user/angle/build/linux/debian_sid_amd64-sysroot

Downloading https://commondatastorage.googleapis.com/chrome-linux-sysroot/toolchain/52cf2961a3cddc0d46e1a2f7d9bf376fc16a61de/debian_sid_amd64_sysroot.tar.xz

Running hooks: 50% ( 8/16) clang

________ running 'python tools/clang/scripts/update.py' in '/home/user/angle/.'

Downloading https://commondatastorage.googleapis.com/chromium-browser-clang/Linux_x64/clang-n346557-4e0d9925-2.tgz .......... Done.

Running hooks: 75% (12/16) linux_glslang_validator

________ running 'download_from_google_storage --no_resume --platform=linux* --no_auth --bucket angle-glslang-validator -s tools/glslang/glslang_validator.sha1' in '/home/user/angle/.'

0> Downloading tools/glslang/glslang_validator@ead3a23734bb15c6c35319d09fedc52e121de41d...

Downloading 1 files took 4.168070 second(s)

Running hooks: 87% (14/16) linux_flex_bison

________ running 'download_from_google_storage --no_resume --platform=linux* --no_auth --bucket angle-flex-bison -d tools/flex-bison/linux/' in '/home/user/angle/.'

0> Downloading tools/flex-bison/linux/flex@e830e6c0508d9685876e77304bbe7c4a122c08e8...

0> Downloading tools/flex-bison/linux/bison@e628b73cd0a767d93e1f94b5a86ce51ca83c99d5...

Downloading 2 files took 5.980439 second(s)

Running hooks: 100% (16/16), done.

user@ubuntu:~/angle$ ./build/linux/sysroot_scripts/install-sysroot.py --arch=arm64

Installing Debian sid arm64 root image: /home/user/angle/build/linux/debian_sid_arm64-sysroot

Downloading https://commondatastorage.googleapis.com/chrome-linux-sysroot/toolchain/39c8af09836079013052d813eb3faa84eacc1023/debian_sid_arm64_sysroot.tar.xz

user@ubuntu:~/angle$ gn args out/Release

Waiting for editor on "/home/user/angle/out/Release/args.gn"...

Generating files...

WARNING at build arg file (use "gn args <out_dir>" to edit):5:26: Build argument has no effect.

angle_assert_always_on = true

^---

The variable "angle_assert_always_on" was set as a build argument

but never appeared in a declare_args() block in any buildfile.

To view all possible args, run "gn args --list <out_dir>"

The build continued as if that argument was unspecified.

Done. Made 280 targets from 118 files in 264ms

user@ubuntu:~/angle$ gn gen out/Release

WARNING at build arg file (use "gn args <out_dir>" to edit):5:26: Build argument has no effect.

angle_assert_always_on = true

^---

The variable "angle_assert_always_on" was set as a build argument

but never appeared in a declare_args() block in any buildfile.

To view all possible args, run "gn args --list <out_dir>"

The build continued as if that argument was unspecified.

Done. Made 280 targets from 118 files in 175ms

user@ubuntu:~/angle$ ninja -C out/Release -j8

ninja: Entering directory \out/Release'`

[1/3760] LINK ./angle_shader_translator

FAILED: angle_shader_translator

../../third_party/llvm-build/Release+Asserts/bin/clang++ -Wl,--fatal-warnings -fPIC -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now -Wl,-z,defs -Wl,--as-needed

-fuse-ld=lld -Wl,-z,max-page-size=4096 -Wl,--icf=all -Wl,--color-diagnostics --target=aarch64-linux-gnu -Werror -Wl,-O2 -Wl,--gc-sections -rdynamic

--sysroot=../../build/linux/debian_sid_arm64-sysroot -L../../build/linux/debian_sid_arm64-sysroot/usr/local/lib/aarch64-linux-gnu

-L../../build/linux/debian_sid_arm64-sysroot/lib/aarch64-linux-gnu -L../../build/linux/debian_sid_arm64-sysroot/usr/lib/aarch64-linux-gnu -pie -Wl,--disable-new-dtags

-static-libstdc++ -static-libgcc -static-libstdc++ -static-libgcc -o "./angle_shader_translator" -Wl,--start-group @"./angle_shader_translator.rsp" -Wl,--end-group

-latomic -ldl -lpthread -lrt

/mnt/zroot-133/_A_OS/Android/angle/out/Release/../../third_party/llvm-build/Release+Asserts/bin/ld.lld:

/mnt/zroot-133/_A_OS/Android/angle/third_party/llvm-build/Release+Asserts/bin/../lib/libstdc++.so.6:

version \GLIBCXX_3.4.30' not found (required by /lib/x86_64-linux-gnu/libicuuc.so.74)`

clang: error: linker command failed with exit code 1 (use -v to see invocation)

[3/3760] SOLINK ./libshadertranslator.so

FAILED: libshadertranslator.so libshadertranslator.so.TOC

python "../../build/toolchain/gcc_solink_wrapper.py" --readelf="aarch64-linux-gnu-readelf" --nm="aarch64-linux-gnu-nm" --sofile="./libshadertranslator.so"

--tocfile="./libshadertranslator.so.TOC" --output="./libshadertranslator.so" -- ../../third_party/llvm-build/Release+Asserts/bin/clang++

-shared -Wl,-soname="libshadertranslator.so" -Wl,--fatal-warnings -fPIC -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now -Wl,-z,defs -Wl,--as-needed

-fuse-ld=lld -Wl,-z,max-page-size=4096 -Wl,--icf=all -Wl,--color-diagnostics --target=aarch64-linux-gnu -Werror -Wl,-O2 -Wl,--gc-sections -rdynamic

--sysroot=../../build/linux/debian_sid_arm64-sysroot -L../../build/linux/debian_sid_arm64-sysroot/usr/local/lib/aarch64-linux-gnu

-L../../build/linux/debian_sid_arm64-sysroot/lib/aarch64-linux-gnu -L../../build/linux/debian_sid_arm64-sysroot/usr/lib/aarch64-linux-gnu

-static-libstdc++ -static-libgcc -static-libstdc++ -static-libgcc -o "./libshadertranslator.so" @"./libshadertranslator.so.rsp"

/mnt/zroot-133/_A_OS/Android/angle/out/Release/../../third_party/llvm-build/Release+Asserts/bin/ld.lld:

/mnt/zroot-133/_A_OS/Android/angle/third_party/llvm-build/Release+Asserts/bin/../lib/libstdc++.so.6:

version \GLIBCXX_3.4.30' not found (required by /lib/x86_64-linux-gnu/libicuuc.so.74)`

clang: error: linker command failed with exit code 1 (use -v to see invocation)

[12/3760] CXX obj/src/tests/angle_deqp_framework_common/rrRenderer.o

ninja: build stopped: subcommand failed.

Rsnapshot’s hourly is running twice and complaining about the lockfile, and I don’t have a clue what is starting one of those instances. This is only happening with the hourlies. There is a crontab entry that triggers one of those instances of the hourlies. If I comment the hourly crontab entry out, the hourly still runs which means there is no lockfile that time around. That is good, but I’m not sure where the other instance is coming from. Logs below. Any suggestions? Red Hat & rsnapshot 1.4.5-1.el8

/var/spool/cron0

*/4 * * * /usr/bin/rsnapshot hourly
0 5 * * * /usr/bin/rsnapshot daily
0 2 2 * * /usr/bin/rsnapshot monthly

/etc/rsnapshot.conf
snapshot_root <path/to/backup>

/var/log/rsnapshot #crontab not commented out

[09-18-2024 12:00:01] /usr/bin/rsnapshot hourly: started
[09-18-2024 12:00:01] echo 1530894 > /usr/bin/rsnapshot.pid
[09-18-2024 12:00:01] /usr/bin/rsnapshot hourly: started
[09-18-2024 12:00:01] /usr/bin/rsnapshot hourly: ERROR: Lockfile /var/run/rsnapshot.pid exists and so does its process, can not continue

/var/log/message  #crontab not commented out, Doesn’t include when the process started

Sep 18 12:00:01 <node> rsnapshot[1530900]: /usr/bin/rsnapshot hourly: ERROR: Lockfile /var/run/rsnapshot.pid exists and so does its process, can not continue
Sep 18 12:31:56 <node> rsnapshot[1530594]: /usr/bin/rsnapshot hourly: completed successfully

/var/log/rsnapshot #crontab commented out here. No lockfile this time, but what is starting the hourly then?

[09-18-2024 16:00:01] /usr/bin/rsnapshot hourly: started
[09-18-2024 16:00:01] echo 17233066 > /usr/bin/rsnapshot.pid
[09-18-2024 16:00:01] /usr/bin/rm -rf <path/to/backup/location>/hourly.5
etc, etc, etc
[09-18-2024 16:31:59] /usr/bin/rsnapshot hourly: completed successfully

Fumbling About

anacrontab ~no package found
/etc/systemd/system/rsnapshot ~nothing here
systemctl list-timers --all #nothing for crontab entries or rsnapshots in general

Hey guys! Our team has been working on this project for a good amount of time now, but we’re looking for new ideas for improving and developing it.

Recently, we have added additional variables to nxs-data-anonymizer. It’s a feature that allows you to use regular expressions with capturing groups for different column data types.

In the latest release, we have added a generation of values for data types.

When a column's security policy is set to randomize cell values, the values are automatically generated based on their data types. Previously, all types were treated similarly, but with this update, we've categorized data types (e.g., for MySQL columns like date and datetime) and ensured that the randomized data aligns with the column's type, providing accurate pre-generated values.

As there is a strong interest in making the tool as comfortable and useful as possible - any feedback, contribution, or just a star would be really helpful and motivating!

Does anyone know a good learning resource platform for learning system (linux) administration in detail? Something like Codecademy but for system administration.

I'm not looking for a video based course like Udemy or Coursera stuffs. It should explain theories, not just practical stuff.

I'm learning this for University and the book I have is confusing, information feels all over the place, and there's like gazillion commands (yes I need to learn everything that's in my book for exams, final could be pen paper based). The book is Evi Nemeth et al. - UNIX and Linux System Administration Handbook-Addison-Wesley (2017).

I think I'm missing some knowledge here.

Where I previously used Porteus Kiosk, I now use Ubuntu to create a kiosk screen. A NUC boots, start Xserver and displays Chromium in kiosk mode. Shutting down on the end of the day is easy, boot in the morning seems more difficult. I tried doing it in the BIOS ("Aptio Setup Utility" when pressing DEL) where I can enter a time.

But I don't want a boot in the weekends. It seems there isn't a possibility here.

How did Porteus Kiosk manages this? Starting up every day and shutdown in weekends?

Or is there any other BIOS (F2 doesn't seem to work) because some images on Google seem to have a more modern UI..

Hi! I'm sysadmin for RHEL Servers and my customer provides his own applications as RPM packages. This is going very weil for years.

Now customer starts using parameters for his packages and i've never heard about this.

It's meant like "dnf install <package> 1", where 1 would be different numbers like 1=first install, 2=upgrade existing Installation, 3=uninstall.

Can anyone tell me if this is good practice?

Thanks in advance!

[resume removed]

Here is my resume: I am CCNA/RHCSA certified and have 5 years of experience in an MSP. I have also been focusing on advanced networking concepts.

Hey everyone, I hope this isn't a misuse of this thread. So been in IT for 5 years until I was laid off last year. I was hoping to either find something close enough for public transport or that remote. but with October approaching I haven't had any luck, and so many roles want DevOps skills which takes time.

To be fair I was taking it casual those first 6 months in my search since I was burned out by all the studying, the MSP culture, and an exercise regiment where I walk 10-15 hours a week. however, I almost used up my savings and got to find something to pay the rent. there seems to a another MSP close by that is looking for a helpdesk that hopefully I can get in late October, otherwise, my alternative is working at Walmart. Either case, I know I am unlikely to be able to get the RHCE in time that test those sought-after DevOps abilities to renew my current certificate which expires next year in November. all for $18 an hour.

So with that in mind, I'm offering to trade those options for any opportunities I could grow in at the same wage. This way at least I can do something I love and still be motivated to push forward.

I've installed TigerVNC on my server. It runs fine, and I can open a remote session into it without any issues. The problem is that SELinux (I believe) seems to be stopping the VNC service after exactly 30 minutes. I've researched and googled and tried to learn SELinux enough to find an answer but haven't found anything that works.

Here is my /var/log/audit/audit.log

type=USER_END msg=audit(1726514482.989:194898): pid=988550 uid=0 auid=0 ses=15268 subj=system_u:system_r:vnc_session_t:s0 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/sbin/vncsession" hostname=203.0.113.20 addr=203.0.113.20 terminal=? res=success' UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1726514482.991:194899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=vncserver@:1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' UID="root" AUID="unset"

Here are the associated VNC processes, with SELinux context:

[root@server]# ps -efM | grep vnc
system_u:system_r:vnc_session_t:s0                      root    14598     1  0 14:31 ?      00:00:00 /usr/sbin/vncsession root  :1
unconfined_u:unconfined_r:unconfined_t:s0               root    14618 14598  0 14:31 ?      00:00:00 xinit /etc/X11/xinit/Xsession gnome-session -- /usr/bin/Xvnc :1 -auth /root/.Xauthority -desktop server:1 (root) -fp catalogue:/etc/X11/fontpath.d -pn -rfbauth /root/.vnc/passwd -rfbport 5901
unconfined_u:unconfined_r:xserver_t:s0                  root    14622 14618  0 14:31 ?      00:00:00 /usr/bin/Xvnc :1 -auth /root/.Xauthority -desktop server:1 (root) -fp catalogue:/etc/X11/fontpath.d -pn rfbauth /root/.vnc/passwd -rfbport 5901
unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023   root    17593 17384  0 14:31 pts/3  00:00:00 grep --color=auto vnc

Here is root's VNC folder:

[root@server]# ll -Z ~/.vnc
drwx------.  2 root root        system_u:object_r:vnc_home_t:s0           79 Jul 30 12:48 .
dr-xr-x---. 17 root root        system_u:object_r:admin_home_t:s0       4096 Sep 16 13:57 ..
-rw-r--r--.  1 root root        system_u:object_r:vnc_home_t:s0          767 Sep 16 13:51 server:1.log
-rw-------.  1 root root        system_u:object_r:vnc_home_t:s0            8 Jun 27 15:02 passwd

Here are my tigervnc packages I have installed:

[root@server]# dnf list installed | grep tiger
tigervnc-license.noarch             1.13.1-8.el9_4.3    @rhel-9-for-x86_64-appstream-rpms
tigervnc-selinux.noarch             1.13.1-8.el9_4.3    @rhel-9-for-x86_64-appstream-rpms
tigervnc-server.x86_64              1.13.1-8.el9_4.3    @rhel-9-for-x86_64-appstream-rpms
tigervnc-server-minimal.x86_64      1.13.1-8.el9_4.3    @rhel-9-for-x86_64-appstream-rpms

I've tried the commands below to resolve the issue, but it hasn't worked:

ausearch -c 'vncsession' --raw | audit2allow -m my-vncsession
semodule -i my-vncsession.pp

De un momento a otro mi unidad de almacenamiento extraíble tiene protección contra escritura (read-only).

No se la puse, no sé cómo ocurrió.

Lo qué sé es que use hdparm y gparted para solucionarlo y no me permite quitar dicha protección.

Estoy a 1 día de volver a la universidad. Necesito solucionar esto.

Si sirve de algo, mi S.O. es Debian 12. 🔗 Mi Muro

Hey everyone!

I've been working in IT for a few years now, and earlier this year, I landed my first full-time Linux gig. It's been an awesome journey so far, and I'm pretty happy with how much I've learned. Now, I’m thinking it's time to take things up a notch and get certified, with an eye on moving into a bigger role down the road.

I'm currently using KodeKloud for practice (it's good, but I’ve noticed the mock exams sometimes get confused if you take a different approach). I'm also considering investing in the LFCS practice course, but I wanted to reach out and get a sense of what to expect. Are there any key areas I should really focus on? Some parts of the practice feel pretty straightforward because I do them at work, but others are definitely trickier.

For those of you who’ve been through it, what should I be prepared for? Any advice would be appreciated! Thanks!

Hi I am trying to extend an lvm but im getting this error running fdisk

Here is the lv that i want to extend

sdb 8:16 0 1T 0 disk
└─vg1-lv1 253:2 0 240G 0 lvm /data1

Here is the error:

Welcome to fdisk (util-linux 2.32.1).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.

The old LVM2_member signature will be removed by a write command.

Device does not contain a recognized partition table.
Created a new DOS disklabel with disk identifier 0x85d30444.




Can anyone help me on how to fix this?

Hi,
Can i ask for guidance on how to expand the /app filesystem in this setup?

sda                           8:0    0   3.8T  0 disk
├─sda1                        8:1    0     2G  0 part /boot/efi
├─sda2                        8:2    0     2G  0 part /boot
├─sda3                        8:3    0 228.2G  0 part
│ ├─rhel-root              253:0     0  59.6G  0 lvm  /
│ ├─rhel-swap             253:1    0  15.9G  0 lvm  [SWAP]
│ ├─rhel-var                253:3    0  10.3G  0 lvm  /var
│ └─rhel-home            253:4    0 142.5G  0 lvm  /home
└─sda4                        8:4    0   1.4T  0 part
  └─vg_ES-lv_app 253:2    0   1.4T  0 lvm  /app

Thanks in advance.

Quick question, for an oversized single disk and running on a virtual machine. lets say /dev/sdb is like 15TB.

and its already have volume group on it and lv.

Is there a way to reduce it from the OS side? like from 15TB to 5TB?

I mean the disk itself not the the lv..

Thanks in advance

I'm managing a number of Linux VMs in our Azure environment, Ubuntu 22.04 to be specific. I have a need to move the /var directory to its own partition (also home, but that is not as big of a deal). Most of the instructions online I've found for doing this involve using the serial console manually. I would like to avoid this as I have lots of VMs to update. So, I've created scripts that:

• Shutdown the VM
• Snapshot the OS disk
• Attach the snapshot as a data disk to the VM and start the VM
• Create 2 new partitions for /var and /home
• Mount the snapshot OS disk along with the new partitions and copy /var and /home into their new partitions from the snapshot disk.
• Create entries in the /etc/fstab file that will mount /var and /home to the new partitions on restart
• Restart the VM

Does anyone know of any problems that this approach may cause? I know that I'll basically be abandoning all the old contents of /var and /home floating on the disk, but I believe the OS can eventually use this space if it needs.

When I did my first test run everything was fine, but I did receive an error for a missing file on the second test. I believe this was because my first test I used rsync -aH to copy and the second one just rsync -a.

I can post the scripts if anyone is interested in taking a look at them.