Re: VPN et demande de redirection de port

2022-07-15 Thread Jérémy Prego
Bonjour, si le vpn est connecter sur un pc, la box, ne pourra rien faire pour toi. Si tu souhaites que l'ordi qui héberge le serveur web, soit accessible par le vpn sur le port 80 /443, il faut faire le port translating, sur le pc qui a le vpn, pour lui dire qu'il doit contacter le pc qui a

Re: root crontab @reboot for loop fails

2022-07-15 Thread Gareth Evans
On Sat 16 Jul 2022, at 05:30, Gareth Evans wrote: > Why isn't root's $PATH available to root crontab? ie. including the > link /sbin -> /usr/sbin? By which I mean: why can't root crontab do everything sudo can do? Thanks G

Re: root crontab @reboot for loop fails

2022-07-15 Thread Gareth Evans
Hi Greg, On Sat 16 Jul 2022, at 04:07, Greg Wooledge wrote: [...] > "Well, read the email that cron sends you and see what the errors are." [amongst others] /bin/sh: 1: zfs: not found suggests the need for /usr/sbin/zfs It seems reasonable that /usr/sbin/* should be available to root

Re: root crontab @reboot for loop fails

2022-07-15 Thread Greg Wooledge
On Sat, Jul 16, 2022 at 03:49:09AM +0100, Gareth Evans wrote: > $ sudo crontab -l > [...] > @reboot for f in $(/usr/sbin/zfs list -t snap -o name|grep reboot); do > /usr/sbin/zfs destroy $f;done > @reboot /usr/sbin/zfs snap -r rpool@reboot > > > Prepending "/usr/sbin/" to "zfs" doesn't make a

Re: root crontab @reboot for loop fails

2022-07-15 Thread Gareth Evans
$ sudo crontab -l [...] @reboot for f in $(/usr/sbin/zfs list -t snap -o name|grep reboot); do /usr/sbin/zfs destroy $f;done @reboot /usr/sbin/zfs snap -r rpool@reboot Prepending "/usr/sbin/" to "zfs" doesn't make a difference. Thanks, Gareth

root crontab @reboot for loop fails

2022-07-15 Thread Gareth Evans
Hello, $ sudo crontab -l | grep reboot [...] [1] @reboot sleep 10; nmcli c up [2] @reboot for f in $(zfs list -t snap -o name|grep reboot); do zfs destroy $f;done [3] @reboot zfs snap -r rpool@reboot [1] succeeds, but [2,3] do not. Any ideas why would be gratefully received. Many thanks,

VPN et demande de redirection de port

2022-07-15 Thread Pierre ESTREM
Bonsoir, J'éi souscrit au VPN "Private Internet Access" et j'ai eu tenté d'acquérir une IP dédiée. Comme j'ai fait une bêtise je n'ai pas pu en profiter (j'ai perdu le "jeton" et le support n'a pas répondu ! :-( ). Mais j'ai pu activer un port qui m'est dédié avec la commande "piactl set

Re: SSH resources, specifically on certificates (certificate authentication)

2022-07-15 Thread David Christensen
On 7/15/22 05:32, Curt wrote: The question I ask myself preliminarily, before delving further into the matter, is whether certificate-based SSH authentication is appropriate for a home LAN with three users. +1 I decided SSH with publickey authentication and passphrase keys were plenty for

Re: avahi-daemon allow/deny interfaces question

2022-07-15 Thread Ram Ramesh
On 7/15/22 00:31, Ram Ramesh wrote: On 7/14/22 09:15, Ram Ramesh wrote: Hi Ramesh, There are numerous reports (mostly old, afaics) of the issue you describe, but with various suggested reasons. I suspect the avahi related part is a consequence rather than a cause - I didn't think avahi was

Re: How did I get into dependency hell and how do I get out?

2022-07-15 Thread Greg Wooledge
On Fri, Jul 15, 2022 at 12:08:12PM -0400, Dan Ritter wrote: > Ottavio Caruso wrote: > > $ apt-cache policy libglib2.0-0 > > libglib2.0-0: > > Installed: 2.72.1-1 > > Candidate: 2.72.1-1 > > Version table: > > *** 2.72.1-1 100 > > 100 /var/lib/dpkg/status > > 2.66.8-1 500 > >

Re: How did I get into dependency hell and how do I get out?

2022-07-15 Thread Dan Ritter
Ottavio Caruso wrote: > Hi, > > > $ uname -a > Linux e130 5.18.0-0.bpo.1-amd64 #1 SMP PREEMPT_DYNAMIC Debian > 5.18.2-1~bpo11+1 (2022-06-14) x86_64 GNU/Linux > $ cat /etc/debian_version > 11.2 Your kernel is from backports, so you have at least some backports installed. What else is in your

Re: How did I get into dependency hell and how do I get out?

2022-07-15 Thread Hans
Am Freitag, 15. Juli 2022, 17:47:30 CEST schrieb Ottavio Caruso: I could install libpulse-dev without any issues. However, it depends on libglib2.0-dev. If you need to install libglib2.0, then it might interfere with the system. I checked with aptitude and its ncurses surface (so I can see

Re: SSH resources, specifically on certificates (certificate authentication)

2022-07-15 Thread rhkramer
On Friday, July 15, 2022 08:49:01 AM to...@tuxteam.de wrote: > On Fri, Jul 15, 2022 at 12:32:35PM -, Curt wrote: > > The question I ask myself preliminarily, before delving further into > > the matter, is whether certificate-based SSH authentication is > > appropriate for a home LAN with three

3 more surprising (to me) things about ssh (was: Re: SSH resources, specifically on certificates (certificate authentication))

2022-07-15 Thread rhkramer
Thanks for the response, and to dsr as well. I won't really ask a question here, but I will make some comments -- not sure how / where to fit them in -- will try to intersperse below. Or maybe I'll just top post them here: Surprise 2: Another surprising thing to me (with the evolution of the

Re: SSH resources, specifically on certificates (certificate authentication)

2022-07-15 Thread tomas
On Fri, Jul 15, 2022 at 12:32:35PM -, Curt wrote: > On 2022-07-14, Dan Ritter wrote: > > > > If you've got a very large organization, you may want to support > > the infrastructure to generate new SSH certs for people daily, > > with expiration dates of 24 hours. Then you need to make sure >

Re: SSH resources, specifically on certificates (certificate authentication)

2022-07-15 Thread Curt
On 2022-07-14, Dan Ritter wrote: > > If you've got a very large organization, you may want to support > the infrastructure to generate new SSH certs for people daily, > with expiration dates of 24 hours. Then you need to make sure > that mechanism is working perfectly and has appropriate >

Re: SSH resources, specifically on certificates (certificate authentication)

2022-07-15 Thread Dan Ritter
to...@tuxteam.de wrote: > See, asymmetrical encryption (e.g. RSA, Elliptic Curve) is far too expensive > to use on bulk data, so it typically is used to encrypt a key (generated on > the spot), called "session key". The latter is used to symmetrically (e.g. > AES) encrypt the bulk data. You use