[Wayback/Archive] Uitstel aanvragen belastingaangifte 2021 – hoe doe ik dat?
Archive for the ‘Power User’ Category
Uitstel aanvragen belastingaangifte 2021 – hoe doe ik dat?
Posted by jpluimers on 2022/03/18
Posted in LifeHacker, Power User | Leave a Comment »
ardour – the digital audio workstation: Record, Edit, and Mix on Linux, macOS and Windows
Posted by jpluimers on 2022/03/17
Given that Audacity became toxic last year, and I should have recovered enough to be both working again and having energy to do audio processing, I should install [Wayback] ardour – the digital audio workstation
[Wayback/Archive.is] Ardour repositories:
- [Wayback/Archive.is] Ardour/ardour: Mirror of Ardour Source Code
- [Wayback/Archive.is] Ardour/manual: Mirror of the Ardour manual
Via: [Wayback] Kristian Köhntopp on Twitter: “Ardoer… “ (in response to Bye, bye Audacity)
[Wayback] Audacity Is Now A Possible Spyware, Remove It ASAP
–jeroen
Posted in About, Audacity, Audio, LifeHacker, Media, Music, Personal, Power User | Leave a Comment »
Some notes on replacing parts of a text file with template text using sed on a Busybox system
Posted by jpluimers on 2022/03/17
Note before you think about putting stuff in
/etc/rc.local.d/local.sh: that script will not be executed when UEFI booting.
In a very lightweight Busybox system, I wanted to modify some configuration files automatically using fragments stored in template files.
The system has diff, but no patch.
The basic idea is to use sed to insert the template files into certain spots of the configuration file when certain marker texts are not present. So I want the opposite of [Wayback] Hey Stephen Wood: Try patch instead of sed in shell scripts.
Basically the idea is a poor-man’s patch, described in Too bad: ESXi busybox has diff, but not patch « The Wiert Corner – irregular stream of stuff.
Some links that might help me with this:
- [Wayback] regex – Using sed to delete all lines between two matching patterns – Stack Overflow (thanks users [Wayback] Lri and [Wayback] Akito)
- [Wayback/Archive.is] akito-libbash/setup.bash at dd91364083f13d1132d68489172bbce664b9c9c0 · theAkito/akito-libbash an actual example close to what I am after (it appends, I want to keep the end of the file in tact).
- [Wayback] bash – removing lines between two patterns (not inclusive) with sed – Stack Overflow
- [Wayback] shell – How to append multiple lines to a file – Unix & Linux Stack Exchange
- [Wayback] text processing – How to insert the content of a file into another file before a pattern (marker)? – Unix & Linux Stack Exchange
One alternative would have been to use ed (which is part of the normal Busybox), but ESXi Busybox omits ed like it omits patch.
Too bad that sed commands are too different from ed commands, as I could have used diff -e on another system based on ideas here:
- [Wayback] How can I create a sed command line from diff? – Super User
- [Wayback] Using diff -e Option to Create a Baseline diff File – Alvin Bunk
I might give it one more go, as vi is sort of derived from ed via ex (see vi: Creation – Wikipedia), which means that vi “colon mode” (officially command mode: [Wayback] Vim documentation: cmdline) is very similar to ed.
Another alternative would be awk, but I have done so little work with it awk, that I’m hesitating to use a new tool. Some links:
And finally, ash could be used:
- [Wayback] text processing – Script matching literal pattern over multiple lines? – Unix & Linux Stack Exchange
The kind of modifications I am after
Below are a few links with examples of the kind of modifications I want to make. Most patch just /etc/rc.local.d/local.sh, but some others introduce other changes as well.
- [Wayback] Shell script to automatically power on a specific VM which is powered off – VirtuallyVTrue
- [Wayback] Enable the SSH shell permanently in VMWare ESXi 6.7.0 and above
- [Wayback] Executing Commands During Boot Up In ESXi 5.1
- [Wayback] How to clone ESXi setup – VMware Technology Network VMTN
- [Wayback] Article Detail: Many current.png.xxxx on the /tmp on ESXi host causes hostd to crash and disconnect (2031839)
- [Wayback] ESXi booting faster than your SAN
- [Wayback] Shell script to automatically power on a specific VM which is powered off – VirtuallyVTrue
- [Wayback/Archive.is] Help getting GhettoVCB & cron jobs working on ESXi 6. : vmware
- [Wayback/Archive.is] Want to modify Roots CronTab : vmware
- [Wayback/Archive.is] Script Share: ESXi 6.7 re-scan iSCSI after FreeNAS VM has booted : freenas
- [Archive.is] Wayback: VMware KB: Changing the port used by SSH on an ESXi 5.0 host
- [Wayback/Archive.is] Creating custom firewall rules in VMware ESXi 5.x (2008226)
- [Wayback] Solved: Re: Persistent firewall rule – VMware Technology Network VMTN
- [Wayback] Execute ESXCLI commands during ESXi startup – The Virtualist
Note that especially with networking settings, local.sh commands might not have any effect (for instance when having slow DHCP or other network issues), see for instance [Wayback/Archive.is] I’m running ESXi 5.5 and my persistent route in local.sh is not taking effect after boot. : vmware.
There is a very convoluted way around using local.sh by using the VIB authoring tool as described in [Wayback] How to create persistent firewall rules on ESXi. It requires lowering the software acceptance level to Community Supported (esxcli software acceptance set --level=CommunitySupported), which gives you a hard time installing ESXi updates.
I got that VIB idea from [Wayback] Solved: Re: Persistent firewall rule – VMware Technology Network VMTN, as:
The
local.shfile gets overwritten often with upgrades so it would mean another step during the process.
From the same thread comes [Wayback] Solved: Re: Persistent firewall rule – VMware Technology Network VMTN
set the sticky bit on your separate xml-file – then it will be backed up and persist through reboot:
chmod +trun backup manually before the first reboot:
/sbin/auto-backup.shbecause backup runs only once per hour
Within vSphere, one could use [Wayback] Configure ESXi Hosts with Host Profiles, but a standalone ESXi box is not part of vSphere, so that won’t work.
ESXi 7 and up
ESXi 7 makes the above harder as for instance user root cannot change file rights any more, so eventually I might revert to a VM that auto-boots when ESXi comes up, then patches the right files in place over PowerCLI (read-only) or SSH.
Need to give this some thought later:
- [Wayback] virtualization – ESXi 7.X file permissions – how to buypass new security measures – Server Fault
- [Archive.is] The root account can no longer change permissions or executable files in ESXi 7.0.x (78689)
- [Wayback/Archive.is] PowerCLI, ESXi 6.5 free and Start-VM: Current license or ESXi version prohibits execution of the requested operation : homelab
PowerCLI commands on the free version are limited to commands that are “read-only”, so you can only find out information rather than perform actions, if that makes sense.
So you can find out if a VM is turned on, find it’s uptime, but you can not turn it on or reboot it
This presumably is to prevent automation without a license…
Having a quick look at the VMware KB, it looks like PowerCLI was limited on the free version to “read-only” operations from 5.0 (I.e. when it went from ESX to ESXI) along with vCLI and vSphere-Perl, so for some time from the looks of it
–jeroen
Posted in *nix, *nix-tools, ash/dash, ash/dash development, Awk, BusyBox, Development, ESXi6, ESXi6.5, ESXi6.7, ESXi7, Power User, PowerCLI, Scripting, sed, sed script, Software Development, Virtualization, VMware, VMware ESXi | Leave a Comment »
Digital accessibility is hard; Wayback archival of: Formulieren – CIZ
Posted by jpluimers on 2022/03/17
I know that digital accessibility does not come for free, but it is mandatory in Europe for at least documents and web-sites provided by government and semi-government as per [Wayback] EN 301 549 – Wikipedia
EN 301 549 is a European standard for digital accessibility. It specifies requirements for information and communications technology to be accessible for people with disabilities.
I bumped into numerous tab-order issues when filling out CIZ forms. This makes it way harder for my, as now I require a mouse despite having RSI symptoms for some 30+ years.
So, for my link archive so I can document that all these forms have severe tab-order issues (some fields are not even accessible by keyboard, are being emptied when you leave the field, or not even accessible by mouse): [Wayback] Formulieren – CIZ
Doet u een aanvraag bij het CIZ? Op deze pagina vindt u een overzicht van onze formulieren, zoals een machtigingsformulier en het Wlz-aanvraagformulier.
- Formulieren Wet langdurige zorg (Wlz)
- Formulieren Wet zorg en dwang (Wzd)
- Aanvraagformulieren
- Machtigingsformulieren
Hopefully by now the forms have been fixed.
Via:
- [Archive.is] CIZ webcare on Twitter: “Graag, dat kan naar communicatie@ciz.nl. Als u op onze website het formulier download op uw computer en via Adobe invult, moet dat geen problemen opleveren met invullen: … “
- [Archive.is] Jeroen Wiert Pluimers on Twitter: “Ik heb nog uit de kantlijn de versie van het formulier gevist: CIZ-Wlz-M-26nov2020 Dat is dezelfde als op de pagina waar je naar verwees (directe link: …) met dezelfde problemen. 1/2… “
- [Archive.is] Jeroen Wiert Pluimers on Twitter: “PPS: De oude versies uit 2019 heb ik ook teruggevonden. – “CIZ-041.04, april 2019” ging beter dan de huidige “CIZ-Wlz-M-26nov2020” – “CIZ040.04, februari 2019” ging even slecht als de huidige “CIZ-Wlz-8dec2020″ Met deze codes kunnen jullie intern de versies terugvinden.… https://t.co/t1mX6Fxzuc”
Posted in About, InternetArchive, LifeHacker, Personal, Power User, WayBack machine | Leave a Comment »
Installing Wireshark on MacOS is not as simple as `brew install wireshark`
Posted by jpluimers on 2022/03/16
I wish that MacOS Homebrew would warn in advance of any caveates instead of after installing.
Only after brew install wireshark [Wayback] it is told that:
==> wireshark cask is installed, skipping link. ==> Caveats This formula only installs the command-line utilities by default. Install Wireshark.app with Homebrew Cask: brew install --cask wireshark If your list of available capture interfaces is empty (default macOS behavior), install ChmodBPF: brew install --cask wireshark-chmodbpf
Now what? Do I need to uninstall Wireshark first, or does the cask stuff just work when it is installed?
These two do not make me happy:
- [Wayback] macos – Mac Homebrew and Wireshark – Super User
- [Wayback] homebrew – Install Wireshark on MacOS X via brew – Stack Overflow (thanks [Wayback] Radu, [Wayback] Cho and [Wayback] alex):
I suggest using
caskto create the.appbinary in your/Applicationsfolder (usereinstallif already installed):brew install --cask wiresharkThe advantage of this approach over
brew install wireshark --with-qtis that more features are enabled without spending a lot of time compiling.This is also the [Wayback] recommended approach for graphical applications and will use the official, feature-complete builds as distributed by the Wireshark developers.
…
Related:
- Tools that Isotopp installed on his Mac…
- macos – How can I modify the list of Applications under ‘Open With…’? – Ask Different
- [Wayback] wireshark — Homebrew Formulae
–jeroen
Posted in Apple, Home brew / homebrew, Mac OS X / OS X / MacOS, Power User | Leave a Comment »
Jilles posted a small script to show offline/online status based on ping
Posted by jpluimers on 2022/03/16
Jilles posted a small script to show offline/online status based on ping in [Archive.is] Jilles on Twitter: “#!/bin/bash HOST={1ST HOP HERE} while true;do p=$(ping -c1 $HOST) if [ $? -ne 0 ];then s=offline else s=online\ fi echo $(date +%F\ %T) $s – $(echo $p | sed -e ‘s/^PING.*— 1/1/g’) sleep 10 done”
#!/bin/bash HOST={1ST HOP HERE} while true;do p=$(ping -c1 $HOST) if [ $? -ne 0 ];then s=offline else s=online\ fi echo $(date +%F\ %T) $s - $(echo $p | sed -e 's/^PING.*--- 1/1/g') sleep 10 done
The reason was that his ISP had connection problems for the block of homes where Jilles lives.
–jeroen
Posted in *nix, *nix-tools, bash, bash, Development, grep, Power User, Scripting, sed, Software Development | Leave a Comment »
Fixed Windows Update errors 0x80070643 and 0x80073712 in one go
Posted by jpluimers on 2022/03/15
The below image is Dutch, but it presents Windows Update errors [Wayback] 0x80070643 and [Wayback] 0x80073712. The first happened when any update was installed after the second occurred.
My hunch was that both were related, so fixing the second should fix the first.
Windows update errors 0x80070643 and 0x80073712
Try 0: reboot
The first step in any odd error is trying to reboot.
Try 1: cleanup
With most Windows Update errors, after rebooting, I usually check disk space (since quite a few of my Windows installs are VMs, so I need to keep VM disk sizes low enough to be able to store all these VMs): there was a comfortable 13 gigabytes free.
Running cleanmgr.exe showed some 5 gigabytes was taken by Windows Update files and almost 1.5 gigabyte by Windows Delivery Optimisation. Cleaning that up brought the free space to almost 20 gigabytes and clear any potential download corruptions: they happen, despite TLS.
Oh Delivery Optimization is just a distributed peer-to-peer cache of Windows related updates, see List of Microsoft Windows components: Services – Wikipedia and [Wayback] Delivery Optimization for Windows 10 updates – Windows Deployment | Microsoft Docs.
Try 2: run the console version of the the Windows Update troubleshooter
After cleanup did not resolve the issue, so the next step is to either run the [Wayback] GUI version of the Windows Update Troubleshooter or from the console equivalent using the below DISM statements.
The below steps are from [Wayback] Windows Update error 0x80073712, but many other sources describe the same steps:
Start a Command Prompt as elevated Administrator
In the Administrator: Command Prompt window, type the following commands. Press the Enter key after each command:
DISM.exe /Online /Cleanup-image /Scanhealth
DISM.exe /Online /Cleanup-image /Restorehealth- When finished, re-run the updates
Note that DISM can take a very long time, even on a recently installed Windows machine: the first took 5 minutes, the second also 5 minutes on a VM that was backed with fast SSD storage and had plenty of CPU and memory. These are my results show no corruption, but did repair the problem:
C:\temp>DISM.exe /Online /Cleanup-image /Scanhealth Deployment Image Servicing and Management tool Version: 10.0.19041.844 Image Version: 10.0.19043.1052 [==========================100.0%==========================] No component store corruption detected. The operation completed successfully. C:\bin\bin>DISM.exe /Online /Cleanup-image /Restorehealth Deployment Image Servicing and Management tool Version: 10.0.19041.844 Image Version: 10.0.19043.1052 [==========================100.0%==========================] The restore operation completed successfully. The operation completed successfully. C:\temp>
Success
Despite DISM not showing any issues, it did repair the problem.
A retry of the updates (without even rebooting) showed a successful update requiring a reboot:
Success: updates were installed and Windows wanted to reboot
More to try
If the above fail, there are two more things to try: reset the whole update mechanism, or verify/repair the .NET framework integrity.
Repairing the .NET framework (specifically for 0x80070643)
Via [Wayback] Windows Update – error 0x80070643 – Microsoft Community.
From [Wayback] Download Microsoft .NET Framework Repair Tool from Official Microsoft Download Center, download NetFxRepairTool.exe (the actual download is via the [Wayback] Download Microsoft .NET Framework Repair Tool from Official Microsoft Download Center:confirmation at [Wayback] download.microsoft.com/download/2/B/D/2BDE5459-2225-48B8-830C-AE19CAF038F1/NetFxRepairTool.exe) and run it.
Resetting the Windows Update mechanism
This is a two part exercise of which the second part is not always needed.
First part: start with a fresh %windir%\SoftwareDistribution
Suggested by for instance
Run these commands in an Administrator elevated command prompt:
net stop wuauserv rename %windir%\SoftwareDistribution SoftwareDistribution.old net start wuauserv
If after this, Windows updates work again, then recursively delete the %windir%\SoftwareDistribution folder.
Second part: start with a fresh %windir%\System32\catroot2
Order slightly corrected from [Wayback] Can’t rename Catroot2 and SoftwareDistribution folder in Windows – Microsoft Community because of service dependencies:
net stop bits net stop wuauserv net stop cryptsvc rename %windir%\System32\catroot2 catroot2 .old net start bits net start wuauserv net start cryptsvc
Note that some sources
- indicate you need to stop and start
msiservertoo, but that does not seem necessary any more. - fail to indicate you need to stop and start
cryptsvc, but that is indeed needed.
Third: fully reset the Windows Update mechanism
This is hardly needed, but [Wayback] Windows Update – Additional resources – Windows Deployment | Microsoft Docs has even more steps to fully reset the Windows Update components on your system.
–jeroen
Posted in Power User, Windows, Windows 10 | Leave a Comment »
Cryptosense Discovery
Posted by jpluimers on 2022/03/15
This is cool: [Wayback] Cryptosense Discovery:
Free tool that discovers security configuration errors in SSH and TLS servers and explains how to fix them. Supports STARTTLS and can also scan HTTPS, POP3, IMAP and SMTP servers.
It gives you a list of servers a target domain uses (for purposes like web, email, etc) that can have external encryption enabled, then allows you to test these.
The list by default has only servers within that target domain enabled, but you can optionally include other servers (for instance if a domain uses a third party for their SMTP handling).
Basically it is the web-counterpart of a tool like testssl.sh (which I have written about before).
Found while checking out how to test the MX security of a domain using [Wayback] testssl.sh as I forgot the syntax, which in retrospect is dead easy as per [Wayback] tls – How to use testssl.sh on an SMTP server? – Information Security Stack Exchange (thanks [Wayback] Z.T.!):
…
testssl.sh --mx <domain name>works fine.
testssl.sh -t smtp <ip>:25and
testssl.sh -t smtp <ip>:587also work fine.
Note that not specifying the port assumes port 443, despite specifying protocol
smtp. That doesn’t work.…
Also, you might try discovery.cryptosense.com which does the same thing only better
That website is made by the cool people at [Wayback] Cryptosense.
Both are a lot easier than the alternatives described in [Wayback] Blog · How to test SMTP servers using the command-line · Halon MTA: using nslookup and dig for determining the affected hosts, using nc or telnet for testing basic connectivity, using [Wayback/Archive.is] openssl s_client to test TLS, and [Wayback/Archive.is] smtpping for measuring throughput.
In addition to the above tools mentioned in the blog, I’ve also used
sendEmail(note case sensitivity),ehlo-size, andswaks.
This is what I tested:
- [Wayback] Cryptosense Discovery: clientondersteuningplus.nl
We found these machines for
clientondersteuningplus.nl. Select those you would like to scan:clientondersteuningplus.nl185.37.70.68localhost.clientondersteuningplus.nl127.0.0.1pop.clientondersteuningplus.nl5.157.84.75These machines are also used by
clientondersteuningplus.nl. They seem to be managed by a third party:…
–jeroen
Posted in *nix, *nix-tools, Awk, bash, bash, Communications Development, Development, DNS, Encryption, grep, HTTPS/TLS security, Internet, Internet protocol suite, Power User, Scripting, Security, SMTP, Software Development, SSH, ssh/sshd, TCP, testssl.sh, TLS | Leave a Comment »








brew install --cask wireshark. If you use this, you may need to uninstall the non-cask version of wireshark prior to installing the cask.