If you want to setup an account on your system that will be used only to transfer files (and not to ssh to the system), you should setup SFTP Chroot Jail.
This explains how: [WayBack] How to Setup Chroot SFTP in Linux (Allow Only SFTP, not SSH)
Archive for the ‘*nix’ Category
How to Setup Chroot SFTP in Linux (Allow Only SFTP, not SSH)
Posted by jpluimers on 2018/12/24
Posted in *nix, *nix-tools, Communications Development, Development, Internet protocol suite, Power User, SFTP, SSH, TCP | Leave a Comment »
Dieses sudo-Gehampel unter Debian/Ubuntu nervt. Aber es gibt Abhilfe: alias…
Posted by jpluimers on 2018/12/24
[WayBack] Dieses sudo-Gehampel unter Debian/Ubuntu nervt. Aber es gibt Abhilfe: alias iddqd=’sudo su -‘ – Kristian Köhntopp – Google+
Or maybe this:
iddqd='sudo -i'
–jeroen
Share this:
Posted in *nix, Linux, Power User | Leave a Comment »
Reptyr – Forgot to “screen” your ssh session first, and now that long running…
Posted by jpluimers on 2018/12/24
From a while back, but still so cool! It allows you to “recover” the terminal (stdin/stdout/stderr) of a process that was attached to a terminal or ssh session.
Reptyr – Forgot to “screen” your ssh session first, and now that long running thing is stuck?
»
reptyr PIDwill grab the process with id PID and attach it to your current terminal.«server:~ # zypper install reptyr ... Retrieving: reptyr-0.3dev_git20120325-7.1.2.x86_64.rpm ...................[done] (1/1) Installing: reptyr-0.3dev_git20120325-7.1.2 ........................[done] server:~ # rpm -qi reptyr ... Summary : A tool for "re-ptying" programs Description : reptyr is a utility for taking an existing running program and attaching it to a new terminal. Started a long-running process over ssh, but have to leave and don't want to interrupt it? Just start a screen, use reptyr to grab it, and then kill the ssh session and head on home. Distribution: openSUSE 13.1
Source: [WayBack] Reptyr – Forgot to “screen” your ssh session first, and now that long running thing is stuck?… – Kristian Köhntopp – Google+
It works with tmux too and is supported on many Linux distributions, see for instance [WayBack] Reptyr – Move A Running Process From One Terminal To Another Without Closing It – OSTechNix.
You can even redirect a pty for gdb usage: [WayBack] reptyr(1): new terminal – Linux man page
StackExchange thread: [WayBack] How to recover a shell after a disconnection with these entries:
- [WayBack] Comment1
- [WayBack] Comment2
- [WayBack] Answer
- Blog entry:[WayBack] Made of Bugs – reptyr: Attach a running process to a new terminal
Originally from 2011 [WayBack] reptyr: Attach a running process to a new terminal – Made of Bugs it is still maintained:
GitHub repository [WayBack] nelhage/reptyr: Reparent a running program to a new terminal
–jeroen
Share this:
Posted in *nix, *nix-tools, Linux, openSuSE, Power User, screen, SuSE Linux, tmux | Leave a Comment »
linux – Keeping the fancy sudo warning forever – Super User
Posted by jpluimers on 2018/12/21
Be careful what you do: blindly following Super User can make sudo unavailable: [WayBack] linux – Keeping the fancy sudo warning forever – Super User.
Following the answer archived in the WayBack machine gets you into this situation:
sudo -i
>>> /etc/sudoers.d/privacy: syntax error near line 1 <<<
sudo: parse error in /etc/sudoers.d/privacy near line 1
sudo: no valid sudoers sources found, quitting
sudo: unable to initialize policy plugin
The cause:
I forgot to put a line terminator at the end of the line in the privacy file.
If you do that, then it works fine: add this line INCLUDING A LINE TERMINATOR to /etc/sudoers.d/privacy (any file in that directory will do):
Default lecture=always
Related
- “We trust you have received the usual lecture from the local System” – Google Search
- [WayBack] Terminal welcoming message – Ask Fedora: Community Knowledge Base and Support Forum
- [WayBack] linux – Keeping the fancy sudo warning forever – Super User
The first time I do
sudoon openSUSE I’m always warned with a someway fancy messageWe trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. root's password:After the first successful login I won’t be warned again.
I’d like to be always warned. I find this message someway fancy. Is there any way to be warned like that by sudo prompt?
- [WayBack] linux – Changing the Sudo warning – Server Fault
Happily, however, my
man sudoersadmits of the stringlecture_filewhich it says is the[p]ath to a file containing an alternate sudo lecture that will be used in place of the standard lecture if the named file exists. By default, sudo uses a built-in lecture.
So see if your sudo supports that, and if it does, set it to a particular filename with e.g.
Defaults lecture_file = /etc/sudoers.lectureand put your lecture text in that file. You may find this easier to test, as I did, if you also do
Defaults lecture = alwayswhich will display the lecture on every invocation of sudo. Otherwise you may run out of accounts which have never sudo’ed while you get this right!
–jeroen
Share this:
Posted in *nix, *nix-tools, Power User | Leave a Comment »
linux – Is there a way to remove “Last message repeated x times” from logs? – Server Fault
Posted by jpluimers on 2018/12/17
One day I will need to enable repeating those messages: [WayBack] linux – Is there a way to remove “Last message repeated x times” from logs? – Server Fault
–jeroen
Share this:
Posted in *nix, *nix-tools, Linux, Power User | Leave a Comment »
OpenSuSE Tumbleweed E20 on Raspberry Pi 3: accessing the enlightenment desktop over VNC after automatic logon
Posted by jpluimers on 2018/12/14
For a keyboard-less Raspberry Pi machine that functions as a read-only screen, I needed:
- automatic logon
- remote VNC accessibility
- no screen blanking
I already had the E20 ([WayBack] Enlightenment) X11 server running as that’s the first image on [WayBack] HCL:Raspberry Pi3 – openSUSE that as a graphical UI that works.
Share this:
Posted in *nix, *nix-tools, Power User, Screen sharing, VNC/Virtual_Network_Computing, X11, X11vnc | Leave a Comment »
Links for Nagios openSuSE Tumbleweed monitoring (including Android devices)
Posted by jpluimers on 2018/12/13
For my link archive:
- opensuse zypper nagios tumbleweed – Google Search.
- [WayBack] openSUSE 12.2: Chapter 3. Monitoring with Nagios.
- [WayBack] check_zypper – Nagios Exchange.
- [WayBack] How to install Nagios NRPE client on openSuse | Blogs on Octopus.
- [WayBack] How-to : Nagios installation on openSUSE 11.4 “Celadon” | SK Tech Scratchpad.
- [WayBack] sakananote with English: Nagios with openSUSE 12.1.
- Icinga is a drop-in replacement for Nagios.
- I have used nagios in openSUSE from 12.1 upto 13.1 and worked great. I have just upgraded to 13.2 and Nagios will no longer start. Is there something missing from the openSUSE 13.2 install? Has the product being removed from the distro … I could not find any reference to this. Any help would be appreciated.Source: [WayBack] Nagios Wont start in 13.2
- Icinga nagios – Google Search.
- [WayBack] Bug and Feature Comparison – Development – Icinga Wiki archived at github.com/icinga/wiki-archive
- [WayBack] Icinga vs Nagios | Icinga.
- [WayBack] Icinga | Open Source Monitoring.
- [WayBack] Icinga – Wikipedia, the free encyclopedia.
- Icinga android app – Google Search.
- [WayBack] Mobile App | Icinga.
- [WayBack] TiNag Icinga Clients for Android | Icinga.
- [WayBack] Icinga on Android Thanks to aNag | Icinga.
- [WayBack] Icinga + Android = IcingaDroid | Icinga.
- [WayBack] uNagi Icinga Client for Android | Icinga
- [WayBack] uNagi – Nagios and Icinga client for android platform – Application overview.
- Nagios Android apps
- “No provider of ‘nagios’ found.” – Google Search.
- nagios site:forums.opensuse.org – Google Search.
- [defunct] Show server:monitoring / nagios – openSUSE Build Service.
- [WayBack] Users of nagios (Project server:monitoring) – openSUSE Build Service.
Non-stable repos:
- [defunct] software.opensuse.org: Install package home:gerritbeine / nagios-plugins-smart.
- [WayBack] software.opensuse.org: Install package server:monitoring / nagios-rpm-macros.
- [WayBack] software.opensuse.org: Install package server:monitoring / nagios.
–jeroen
Share this:
Posted in *nix, Linux, Monitoring, Nagios, openSuSE, Power User, SuSE Linux, Tumbleweed | Leave a Comment »
on my research list: autossh
Posted by jpluimers on 2018/12/12
Having mainly used ssh as a means to connect to a shell on remote machines and occasionally a manual port forward.
I never noticed autossh where you can automate the ssh logon process to keep permanent port forwards up and running. Cool!
It’s on my research list now, as this will be useful probably sooner than later:
- [WayBack] autossh
- [WayBack] autossh(1): monitor/restart ssh sessions – Linux man page autossh is a program to start a copy of ssh and monitor it, restarting it as necessary should it die or stop passing traffic.
- [WayBack] Permanent SSH Tunnels with autossh | Linuxaria
- Translation of Italian article [WayBack] AutosshTunnel – Truedoc – labs
- [WayBack] Keeping your SSH connections alive with autossh | Linux.com | The source for Linux information: With autossh, you can monitor your SSH connections and restart them if they stop sending traffic or SSH exits abnormally. This makes autossh perfect for keeping secure port forwarding available.
- [WayBack] Autossh for persistent database connectivity – Compose Articles Both SSL with whitelisting and SSH tunnelling into databases are powerful options when it comes to connecting to Compose database deployments. We recently introduced SSL for RethinkDB because it is the quickest and easiest way to get a secure connection, but there are still situations when you need an SSH
- [Archive.is] SSH tunnelling for fun and profit: Autossh SSH tunnelling for fun and profit: AutoSSH. Automatically restart SSH sessions and tunnels with AutoSSH and use systemd to launch SSH tunnels at boot time.
- [WayBack] npm autossh: Persistent SSH tunnels
My initial impression is that autossh is a wrapper around the regular ssh client that allows reconnection upon communication failures.
–jeroen
Share this:
Posted in *nix, *nix-tools, Communications Development, Development, Internet protocol suite, Power User, SSH, TCP | Leave a Comment »
Adding Windows machines to Samba domains and security
Posted by jpluimers on 2018/12/07
If adding a Windows machine to a Samba domain fails and the below “solves” your issue, then you need to tighten the security on the Samba side:
- [WayBack] Old Nabble – Samba – General – Windows 7 RC
- [WayBack] Windows 7 can see Samba Shares but cannot see Samba Domain
- [WayBack] Adding a Windows 8.1 computer to a SAMBA domain – twm’s blog
- [WayBack] Note to self: If adding a Windows 8.1 computer to a SAMBA domain fails with the error “The specified domain either does not exist or could not be contac… – Thomas Mueller (dummzeuch) – Google+
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters] ; Enable NT-Domain compatibility mode ; Default: ; [value not present] ; "DomainCompatibilityMode"=- "DomainCompatibilityMode"=dword:00000001 ; Disable required DNS name resolution ; Default: ; [value not present] ; "DNSNameResolutionRequired"=- "DNSNameResolutionRequired"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon\Parameters] ; Disable requirement of signed communication ; My Samba (3.0.33) works with signed communication enabled, so no need to disable it. ; Default: ; "RequireSignOrSeal"=dword:00000001 ; Disable the usage of strong keys ; Default: ; "RequireStrongKey"=dword:00000001 "RequireStrongKey"=dword:00000000
–jeroen
Share this:
Posted in *nix, *nix-tools, Power User, samba SMB/CIFS/NMB, Windows, Windows 10, Windows 7, Windows 8, Windows 8.1, Windows 9 | Leave a Comment »
Backing up ZFS snapshots
Posted by jpluimers on 2018/12/06
An interesting idea at [WayBack] I was getting concerned about a backup, which had exceeded 1GB, when the data was only about 400MB. Once the job finished, I realized: Ahh, ZFS compres… – Dan Langille – Google+:
Here’s that script I use for creating/destroy the snaphots for a particular long dataset name. Then I backup from /mnt
[WayBack] gist.github.com/dlangille/480dbca509562eb03e76c2e1b576c6d2 is in sh, not even bash.
–jeroen
Share this:
Posted in Development, Power User, Scripting, sh, ZFS | Leave a Comment »
The Wiert Corner - irregular stream of stuff 