Goodbye cmd.exe

0

Remember all those times Microsoft, Microsoft MVPs, and others said “YOU MUST LEARN POWERSHELL” like there was no avoiding it?? Well, in case you didn’t start to learn, now is your last change. Microsoft released the latest insider build of Windows 10 and removed the 30-year old DOS command box. So, learn PowerShell (which celebrates it’s 10th birthday). Have a look at the Microsoft Virtual Academy for free courses.

Soft Restart in Windows Server 2016

1

A cool new, but optional feature has landed in Windows Server 2016: Soft Restart. Once installed, it provides the capability to initiate a soft restart, which skips hardware initialisation. In other words, it restarts the operating system without restarting the whole machine. After installation, there are two ways to initiate Soft Restart:

Command Line: shutdown /r /soft /t 0
PowerShell: Restart-Computer -Soft

The new (to be implemented) feature sounds very handy for physical servers with large amounts of memory and/or raid-controllers, eliminating the need to check these components. This will save minutes. This might, in particular, be handy when an unscheduled restart is needed during production hours. Well don’t, Microsoft.

RHEL 7.3 released

0

Last week, Red Hat released version 7.3 of her Enterprise Linux. CentOS builds will follow soon. There are a number of features introduced as Technology Preview. The complete release notes can be found on the Red Hat website.

Security

  • The SELinux userspace has been rebased and provides various enhancements and performance improvements. Notably, the new SELinux module store supports priorities, and the SELinux Common Intermediate Language (CIL) has been introduced.
  • OpenSCAP workbench now provides a new SCAP Security Guide integration dialog and enables modification of SCAP policies using a graphical tool.
  • The OpenSCAP suite now includes support for scanning containers using the atomic scan command.
  • Upgraded firewalld starts and restarts significantly faster due to a new transaction model. It also provides improved management of connections, interfaces, and sources, a new default logging option, and ipset support.
  • The audit daemon introduces a new flush technique, which significantly improves performance. Audit policy, configuration, and logging have been enhanced and now support a number of new options.
  • Media Access Control Security (MACsec) encryption over Ethernet is now supported.

(more…)

Switching Apache to Nginx and Selfoss

0

After updating the Synology and switch webserver from Apache to Nginx, the web-based RSS reader selfoss stopped working. This application uses a .htaccess file to rewrite all requests in Apache. Unfortunately, Nginx doesn’t support .htaccess files.
Make these adjustments in: /etc/nginx/app.d/server.webstation-vhost.conf (last line before the final closing bracket ‘}’. Keep in mind, the space after $1 belongs in the configuration file. If you forget about this nginx won’t restart (with the command: nginx -s reload).

# Custom configuration by Randy - Fix SelfOss RSS reader
location /selfoss {
 root /volume1/web;
}
location ~ ^/selfoss/$ {
 index index.php;
}
location ~ ^/selfoss/favicons/(.+)$ {
 try_files /selfoss/data/favicons/$1 =404;
}
location ~ ^/selfoss/(.+)$ {
 try_files /selfoss/public/$1 /selfoss/index.php$is_args$args;
}

If you also want to switch other applications from Apache reverse proxy to Nginx, the configuration would be:

# Custom configuration by Randy - Add reverse proxies
location /sabnzbd {
  proxy_pass http://127.0.0.1:8080;
}
location /sb {
  proxy_pass http://127.0.0.1:8083/sb;
}
location /transmission {
  proxy_pass http://127.0.0.1:9091/transmission;
}
location /couchpotato {
  proxy_pass http://127.0.0.1:5053/couchpotato;
}

Synology Disk Station Manager 6.1 Beta

0

Yesterday, Synology unveiled the newest version of her Disk Station Manager: 6.1 Beta. Testers are urged to download this build and test out new features. Amongst others, these are PHP7-support, a switchable web front end between Apache (2.2) and NGinx. The resource manager is extended with lots of new features showing per-process indication of disk, cpu and network use. The Storage Manager let’s users switch from SHR-1 (RAID5) to SHR-2 (RAID6) online.

Furthermore, a new package calles Active Directory Server will be available soon. I guess this DS is based on Samba 4, the Windows file sharing service for Linux. Starting with version 4.0, Samba is able to run as an Active Directory (AD) domain controller (DC).

More information, features and downloads can be found on the Synology DSM 6.1 Beta website.

Franz: One application, endless possibilities

0

Meet Franz, the multi-platform, multi-messenger application to have a (tabbed) single pane of glass for messengers like WhatsApp, Facebook, Telegram, LinkedIn, Twitter, Slack, etc. Clients are available for Windows, Mac OSX and Linux. Yes. I Like It!

franz_screenshot-97ec75912b

Synology DSM6 and mod_proxy

3

Since Synonoly released version 6 of Disk Station Manager (DSM), things in the Apache configuration where changed. I used to have a reverse proxy using Apache mod_proxy. The old configuration was stored in /etc/httpd/sites-enabled-user/httpd-vhost.conf (or httpd-ssl-vhost.conf in my case since I use SSL). The new configuration to put your reverse proxy configuration can be found in: /usr/local/etc/httpd/sites-enabled/httpd-vhost.conf-user.

To set-up a reverse proxy to services listening on strange ports, like SabNZBd, SickRage / SickBeard, CouchPotato or Transmission use these lines as an example and edit them to your needs. With this configuration you should be able to download your CentOS images from usenet without getting blocked by the company firewall…

<Location /sb>
  ProxyPass http://127.0.0.1:8083/sb
  ProxyPassReverse http://127.0.0.1:8083/sb
</Location>

<Location /sabnzbd>
  ProxyPass http://127.0.0.1:8080
  ProxyPassReverse http://127.0.0.1:8080
</Location>

<Location /couchpotato>
  ProxyPass http://127.0.0.1:5053/couchpotato
  ProxyPassReverse http://127.0.0.1:5053/couchpotato
</Location>

<Location /transmission>
  ProxyPass http://127.0.0.1:9091/transmission
  ProxyPassReverse http://127.0.0.1:9091/transmission
</Location>

 

Welkom, Sierra

0

 

Schermafbeelding 2016-08-09 om 13.33.11

Bugs so far:

  • TimeMachine (Synology DS1815+) doesn’t work
  • Networking to Synology (AFP and SMB) share doesn’t work
    • Fix: Let the firewall accept incoming mDNSresponder connections
  • DHCP (FRITZ!Box 7390) doesn’t work. Fixed IP does
    • Fix: Let the firewall accept incoming configd connections
  • MacPGP (GPGmail) doesn’t work, but this was expected
    • Fix: Wait for update.
  • Citrix Receiver doesn’t work anymore
    • Fix: Reinstall Citrix Receiver from this package.

Fix Brew (MacPorts alternative)

sudo chown -R $(whoami) /usr/local
xcode-select –install

Getting ready for RHCSA and RHCE

0

rhce_logoI’m busy with the training and certification for Red Hat Enterprise Linux 7. Many things changed in the new release of Red Hat Linux. IPtables is replaced by Firewalld, UPstart is replaced by systemd and the ext4 file-system by xfs. The problem: good documentation isn’t available in books. However, online there are tons of documentation. One of my favorites: certdepot.net.

This website doesn’t only include documentation but also daily lab-exercises that are mandatory to pass the RHCSA or RHCE exams since these are hands on instead of multiple choice questions. Sorry braindump fellows out there. These will not help you. Hands on experience is mandatory in order to separate the wheat from the chaff. Without this, you won’t pass the exams.

My RHCSA exam is planned for August. RHCE will follow later. There were no options to take the exam earlier in the Netherlands due to the holiday season.

Update: another website to help you: Tecmint.com.
Update: Passed RHCSA on 12/aug/2016. Next: RHCE (but time…).

Disable auto-updates on Windows 10

2

Windows10Yesterday, Microsoft released Windows 10 to the public. For home users this update will be free of charge, even if your current Windows 7, 8 or 8.1 installation is semi-legal.

Windows 10 brings new features to the desktop. Among others, these include:

  • The start menu is back. Live tiles are integrated in this menu;
  • Speech control with Cortana, just like Siri on the iPhone does;
  • A new task-switcher to replace the Alt-Tab combination;
  • Action Center, just like the Notification center in Mac OSX;
  • The command prompt enters the 21st century;
  • The new Edge browser. Goodbye Internet Explorer and Silverlight;
  • Automatic installation of Windows updates and auto-rebooting.

The last one is a good feature to protect end-users if we forget about the consequences when Microsoft pushes out a bad update. Been there, done that. Even during the Beta-testing of Windows 10, when Microsoft pushed out a bad Nvidia video driver. But let’s not focus on that at this moment. In some environments you want to have more control over when and how updates are being installed and, if needed, when your PC is being restarted.

Option 1: Disable the Windows update service

There are a few options to disable auto-updating of Windows 10. The first one is to disable the Windows Update service itself. The disadvantage of this is that you don’t have the option to automatically check for updates and you won’t get notified is updates are ready, to install them on your workstation at a time convenient for you. However, if you want to go for this, use these PowerShell lines (or click around in the GUI).

stop-service wuauserv
set-service wuauserv –startup disabled

Finally, check if this all worked via WMI

get-wmiobject win32_service –filter "name='wuauserv'"

Option 2: Registry hack to bring back the old update

The second option is to bring back the old Windows update style by applying some lines in the registry. Copy and paste the lines below in a .reg file and apply this. This will bring back the old Windows Update applet in the Control Panel.

Windows Registry Editor Version 5.00 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\UX] "IsConvergedUpdateStackEnabled"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings] "UxOption"=dword:00000000

Go to Top