Backbrain

Truenas Hangs at Reboot After Update

Tue, 16 Jun 2026 20:49:17 +0200

If your truenas scale hangs after a update and reboot with initramfs just mount the boot pool!

zpool import boot-pool
exit

Proxmox Set Mailserver

Tue, 10 Mar 2026 20:05:28 +0100

/etc/postfix/main.cf

relayhost = 192.168.178.105

Zfs Bookmark

Tue, 10 Mar 2026 19:46:29 +0100

urzantwort: Mit dem Befehl zfs bookmark kannst du aus einem bestehenden Snapshot einen Bookmark erzeugen. Syntax:

zfs bookmark <dataset>@<snapshot> <dataset>#<bookmarkname>
Ein Bookmark ist ein sehr platzsparender Verweis auf den Zeitpunkt des Snapshots und kann z. B. als Quelle für inkrementelle zfs send-Operationen genutzt werden.

🔹 Was sind Bookmarks in ZFS? Snapshots: vollständige, unveränderliche Abbilder eines Datasets zu einem bestimmten Zeitpunkt.

Bookmarks: extrem leichte Marker, die nur Metadaten enthalten. Sie zeigen auf den Zeitpunkt eines Snapshots, ohne den Snapshot selbst vorzuhalten.

Vorteil: Wenn du einen Snapshot löschen willst, kannst du vorher einen Bookmark anlegen, um den Zeitpunkt für spätere inkrementelle Backups zu behalten.

🔹 Syntax und Beispiele Einfacher Bookmark aus Snapshot

zfs bookmark tank/data@snap1 tank/data#bmark1
tank/data@snap1 = vorhandener Snapshot

tank/data#bmark1 = neuer Bookmark

Verwendung in zfs send Bookmarks können wie Snapshots als Referenz für inkrementelle Send-Streams dienen:

zfs send -i tank/data#bmark1 tank/data@snap2 | zfs recv backup/data

Hier wird ein inkrementelles Backup von bmark1 bis snap2 erstellt.

🔹 Praktische Tipps

Feature aktivieren: Bookmarks sind ein ZFS-Feature. Stelle sicher, dass dein Pool das Feature bookmarks unterstützt (zpool get all | grep bookmark).

Auflisten:

zfs list -t bookmark

Löschen:

zfs destroy tank/data#bmark1

👉 Zusammengefasst: Mit zfs bookmark wandelst du Snapshots in platzsparende Marker um, die sich hervorragend für inkrementelle Backups eignen, auch wenn der ursprüngliche Snapshot gelöscht wird.

Um aus bestehenden Snapshots in ZFS platzsparende Bookmarks zu machen, nutzt du den Befehl zfs bookmark.

🔹 Grundsyntax

zfs bookmark <dataset>@<snapshot> <dataset>#<bookmarkname>
# <dataset>@<snapshot> → der vorhandene Snapshot

# <dataset>#<bookmarkname> → der neue Bookmark

🔹 Beispiel Angenommen, du hast ein Dataset tank/data mit einem Snapshot snap1:

zfs bookmark tank/data@snap1 tank/data#bmark1

Damit entsteht ein Bookmark bmark1, der auf den Zeitpunkt von snap1 verweist.

🔹 Bookmarks auflisten

zfs list -t bookmark

🔹 Einsatzmöglichkeiten

Inkrementelle Backups:

zfs send -i tank/data#bmark1 tank/data@snap2 | zfs recv backup/data

→ erstellt ein inkrementelles Backup von bmark1 bis snap2.

Snapshots löschen, Zeitpunkt behalten: Du kannst den Snapshot löschen, aber den Bookmark behalten, um später noch inkrementelle zfs send-Operationen durchführen zu können.

🔹 Unterschiede Snapshot vs. Bookmark

Merkmal	Snapshot	Bookmark
Speicherbedarf	benötigt Platz für geänderte Blöcke	nur wenige Bytes Metadaten
Sichtbar im FS	ja (.zfs/snapshot)	nein
Löschbar	ja, löscht aber Datenreferenzen	ja, ohne Datenverlust
Nutzung in send	ja	ja (als Referenzpunkt)

Zfs Local Properties

Tue, 10 Mar 2026 19:41:16 +0100

How can I find out what dataset properties are not default?

zfs get all -t filesystem -s local

Ceph & BLUESTORE_SLOW_OP_ERROR

Tue, 10 Mar 2026 19:36:55 +0100

https://www.unixe.de/ceph-bluestore-slow-op-error/

HEALTH_WARN: 8 OSD(s) experiencing slow operations in BlueStore
osd.32 observed slow operation indications in BlueStore
 osd.33 observed slow operation indications in BlueStore
 osd.37 observed slow operation indications in BlueStore
 osd.39 observed slow operation indications in BlueStore
 osd.40 observed slow operation indications in BlueStore
 osd.41 observed slow operation indications in BlueStore
 osd.42 observed slow operation indications in BlueStore
 osd.46 observed slow operation indications in BlueStore

ceph config set class:hdd bluestore_slow_ops_warn_lifetime 21600
ceph config set class:hdd bluestore_slow_ops_warn_threshold 5

OSDS=$(ceph osd ls)
for id in $OSDS; do
  host=$(ceph osd find $id | awk -F'"' '/"host"/{print $4; exit}')
  [ -z "$host" ] && continue

  out=$(ssh -o BatchMode=yes -o ConnectTimeout=2 root@$host \
    "ceph --admin-daemon /var/run/ceph/ceph-osd.$id.asok perf dump 2>/dev/null | grep -i -E 'slow_ops_count|slow_read_wait_aio_count|slow_aio_wait_count'")

  if echo "$out" | grep -q -E ':[[:space:]]*[1-9]'; then
    echo
    echo "osd.$id @ $host"
    echo "$out"
  fi
done

OSDS=$(ceph osd ls)
for id in $OSDS; do
  host=$(ceph osd find $id | awk -F'"' '/"host"/{print $4; exit}')
  [ -z "$host" ] && continue

  out=$(ssh -o BatchMode=yes -o ConnectTimeout=2 root@$host \
    "ceph --admin-daemon /var/run/ceph/ceph-osd.$id.asok perf dump 2>/dev/null | grep -i -E 'slow_read_wait_aio_count|slow_aio_wait_count|slow_committed_kv_count|slow_read_onode_meta_count'")

  if echo "$out" | grep -q -E ':[[:space:]]*[1-9]'; then
    echo
    echo "osd.$id @ $host"
    echo "$out"
  fi
done

Cocktail Latin Lover Free

Sat, 05 Jul 2025 10:48:46 +0200

🧾 Alkoholfreie Version

Ein tropisch-frischer Drink ohne Alkohol, aber mit Tiefe, Säure und Balance. Ideal für den bewussten Genuss.

Zutaten für 1 Person

Zutat	Menge	Hinweis
Wasser + Agavensirup + Rauchsalz	3 cl	Ersatz für Tequila: 2,5 cl Wasser + 0,5 cl Agavensirup + 1 Spritzer Rauchsalz
Verjus + Ahornsirup	2 cl	Ersatz für Cachaça: 1,5 cl Verjus + 0,5 cl Ahornsirup
Monin Lime Juice Cordial	1,5 cl	Süß-säuerlich
Hitchcock Zitrone Pur	1 cl	Frische Säure
Ananassaft (Direktsaft)	5 cl	Fruchtbasis
Zucker	0,5 TL	Für runde Süße
Eiswürfel	Viel	Shaken

Zubereitung

Alle Zutaten mit Eis in den Shaker geben
Kräftig shaken
In ein Glas mit Eis abseihen
Garnieren mit Limette oder Ananasblatt

🧊 Leichte, spritzige Variante mit Selter

Ein Latin Lover für den Nachmittag, den Balkon oder als „Session Cocktail“.

Die Zutaten für 1 Person

Nutze die Finale optimierte Version (Mario Edition) mit folgenden Anpassungen:

Selter (nach dem Shaken)

Anpassung	Menge	Effekt
Ananassaft	+2 cl	Etwas fruchtiger
Selter	+4 cl	Leicht & prickelnd
Zitrone	1 cl	Für Balance
Zucker	0,5 TL	Nach Geschmack

Zubereitung: → Cocktail ganz normal shaken, ohne Selter! → Danach in ein Glas mit Eis abseihen → Erst dann Selter auffüllen und leicht umrühren

🧠 Hinweise

Die alkoholfreie Version profitiert von guter Balance zwischen Verjus (Säure) und Sirup (Süße)
Die Seltervariante wirkt leichter und erfrischender, ist aber etwas weniger intensiv
Beide Varianten lassen sich beliebig hochskalieren

Git Log Search for Deleted File

Tue, 24 Jun 2025 14:02:18 +0200

git log --all -- FILEPATH
git show COMMIT_ID -- FILE_PATH

Cocktail Latin Lover

Thu, 19 Jun 2025 09:16:09 +0200

🧾 Zutaten (für 1 Drink)

Zutat	Menge	Hinweise
Espolòn Tequila Blanco	3 cl	100 % Agave, klar, mild-aromatisch
Ypióca Cachaça Prata	2 cl	Mit leichter Holznote, mild
Monin Lime Juice Cordial	2 cl	Süß-säuerlich, nicht überdosieren
Hitchcock Zitrone Pur	1 cl	Frische Säure, 100 % Saft
Ananassaft (Direktsaft)	6 cl	Gekühlt, nicht aus Konzentrat, wenn möglich
🧊 Eiswürfel	–	Zum Shaken und Servieren
Prise Meersalz	–	Hebt Fruchtaromen hervor, macht Süße weicher
Zucker	1 TL	Macht den Coktail etas süßer

🥄 Zubereitung

Shaker mit Eis füllen
Alle Zutaten in den Shaker geben
Kräftig shaken (ca. 15 Sekunden)
In ein vorgekühltes Tumblerglas oder Cocktailglas mit frischem Eis abseihen
Nach Belieben garnieren: – z.B. mit Limettenscheibe, Ananasblatt oder Zitronenzeste

🎯 Geschmacksprofil

Süß-säuerlich, tropisch-fruchtig
Tequila (Espolòn) bringt Zitrus & Würze, Cachaça (Ypióca) etwas Körper & Tiefe
Abgerundet durch milde Säure von Hitchcock und leichte Süße vom Monin Cordial

📦 Einkaufshinweis (alle haltbar & lagerfähig)

Produkt	Kategorie	Haltbarkeit
Espolòn Blanco	Spirituose	Jahre, dunkel lagern
Ypióca Prata	Spirituose	Jahre, trocken lagern
Monin Lime Juice Cordial	Sirup	Ungeöffnet >1 Jahr
Hitchcock Zitrone Pur	Saft	Nach Öffnen kühlen
Ananassaft	Saft	Ungeöffnet lange haltbar

Markdown Colors

Mon, 19 May 2025 10:44:37 +0200

🔴 red: +5V
🟠 orange: +3.3V
⚫ black: ground
⚪ white: ground (pull-down)
🟣 purple: I2C signal
🟢 green: clock signal
🟡 yellow: WS2812 signal
🔵 blue: resistor bridge (analogue) input
🟤 brown: free

Run Cmd as System User

Wed, 30 Apr 2025 14:33:07 +0200

psexec -i -s cmd.exe

PS-Tools

Windows Reset Ntp

Fri, 07 Feb 2025 11:09:18 +0100

net stop w32time
w32tm /config /syncfromflags:manual /manualpeerlist:"0.de.pool.ntp.org 1.de.pool.ntp.org 2.de.pool.ntp.org 3.de.pool.ntp.org"
net start w32time
w32tm /config /update
w32tm /resync /rediscover

Fish No Config No History

Thu, 06 Feb 2025 13:18:50 +0100

fish --private --no-config

Slack High Cpu Usage

Wed, 08 Jan 2025 10:05:55 +0100

Clear cache

Disable hardware acceleration

Vlc Player Starts Very Slow

Mon, 06 Jan 2025 14:18:23 +0100

FIX

A

Start cmd as Administrator

cd C:\Program Files\VideoLan\VLC
vlc-cache-gen .\plugins

B

Open VLC preferences via the menu or by pressing CTRL+P.
Select show settings > All from the bottom left corner
In the Advanced section, uncheck “Scan for new plugins”

Git on Windows chmod +X

Mon, 30 Dec 2024 19:49:46 +0100

git update-index --chmod=+x script.sh

Add an alias to git config

git config --global alias.chmod "update-index --chmod"

Git Reset Last Commit

Mon, 23 Dec 2024 14:06:30 +0100

nobody pulled yet

git reset --hard <commit-hash-one-before-the-bad-commit>
git push --force

someone already pulled

git revert <bad-commit-hash>
git push

Ceph Cruch Map

Mon, 09 Dec 2024 10:18:18 +0100

crunch map

ceph osd crush add-bucket left rack
ceph osd crush add-bucket right rack

ceph osd crush move left root=default
ceph osd crush move right root=default

ceph osd crush move node-1 rack=right
ceph osd crush move node-2 rack=right
ceph osd crush move node-3 rack=right

ceph osd crush move node-4 rack=left
ceph osd crush move node-5 rack=left
ceph osd crush move node-6 rack=left

ceph osd tree

revert changes to default

ceph osd crush move node-1 root=default
ceph osd crush move node-2 root=default
ceph osd crush move node-3 root=default
ceph osd crush move node-4 root=default
ceph osd crush move node-5 root=default
ceph osd crush move node-6 root=default

FreeBSD ZFS Samba / SMB with Previous versions

Mon, 11 Nov 2024 13:50:05 +0100

First, let’s tune some kernel settings to optimize handling of many files. Edit /etc/sysctl.conf and add the following lines:

kern.maxfiles=25600
kern.maxfilesperproc=16384
net.inet.tcp.sendspace=65536
net.inet.tcp.recvspace=65536

pkg search samba
pkg install samba419

Samba 4 expects a filesystem which respects POSIX acls, but ZFS uses the nfsv4acl model. We can configure ZFS to operate in passthrough mode, then tell Samba to use nfsv4 acls. In addition, we want to make the volume’s .zfs/snapshot directory visible. This will allow us to present snapshots as Volume Shadow Copies, which appear to Windows clients as Previous Versions of the volume.

zfs create -o aclmode=passthrough -o aclinherit=passthrough -o snapdir=visible zroot/samba

/usr/local/etc/smb4.conf

[global]
    unix charset         = UTF-8
    workgroup            = NAME
    netbios name         = datengrab
    disable netbios      = yes
    server string        = datengrab
    security             = user
    max smbd processes   = 20
    encrypt passwords    = yes
    aio read size        = 16384
    aio write size       = 16384
    kernel change notify = no
    strict locking       = no
    strict sync          = no
    deadtime             = 60

    dns proxy            = no

    lanman auth          = no
    ntlm auth            = yes
    client lanman auth   = no
    local master         = yes
    preferred master     = yes
    client min protocol  = SMB2
    server min protocol  = SMB2_02
    server multi channel support = yes
    read raw             = yes
    write raw            = yes
    min receivefile size = 16384
    getwd cache          = true

    ;; acl_xattr = Enables to use fine-granular Windows ACL.
    ;; streams_xattr = Enables ADS support.
    ;; shadow_copy2 = Enables Windows clients to use browse snapshots as shadow copies.
    vfs objects          = shadow_copy2 streams_xattr acl_xattr zfsacl
    shadow:snapdir       = .zfs/snapshot
    shadow:sort          = desc
    shadow:format        = -%Y-%m-%d-%H%M
    shadow:snapprefix    = ^zfs-auto-snap_\(frequent\)\{0,1\}\(hourly\)\{0,1\}\(daily\)\{0,1\}\(monthly\)\{0,1\}
    shadow:delimiter     = -20
    shadow:localtime     = yes

    ;; Hide the .zfs directory from clients
    veto files           = /.zfs/
    delete veto files    = yes

    nt acl support       = yes

    ;; Use nfsv4 acls (Since Samba 4.0 all options are per share options.)
    ;;  => See README.nfs4acls.txt for more information
    ;; https://www.samba.org/samba/docs/4.12/man-html/vfs_zfsacl.8.html
    ;; Use OWNER@ and GROUP@ special IDs
    nfs4:mode            = special
    ;; Merge duplicate ACEs
    nfs4:acedup          = merge
    ;; Enable changing owner and group
    nfs4:chown           = yes
    map acl inherit      = yes

    strict sync          = no
    use sendfile         = yes
    block size           = 4096
    fstype               = ZFS
    server smb encrypt   = required
    ;; Store DOS attributes in extended attributes (no mapping)
    store dos attributes = yes
    map hidden           = no
    map system           = no
    map archive          = no
    map readonly         = no
    map to guest         = bad user

    acl allow execute always = true
    acl map full control = yes


    dos filemode         = yes

    ;; Extended attributes
    ea support           = yes

    ;; DISABLE PRINTING
    printing                = bsd
    load printers           = no
    disable spoolss         = yes
    show add printer wizard = no

[mario]
    path            = /home/mario
    public          = no
    writable        = yes
    browsable       = yes
    write list      = mario
    ;; Use nfsv4 acls (Since Samba 4.0 all options are per share options.)
    ;;  => See README.nfs4acls.txt for more information
    ;; https://www.samba.org/samba/docs/4.12/man-html/vfs_zfsacl.8.html
    ;; Use OWNER@ and GROUP@ special IDs
    nfs4:mode            = special
    ;; Merge duplicate ACEs
    nfs4:acedup          = merge
    ;; Enable changing owner and group
    nfs4:chown           = yes

pdbedit -a -u mario
pdbedit -a -u USER2
pdbedit -a -u USER3

sysrc samba_server_enable=YES
service samba_server start

zfs snapshot -r zroot/home/mario@zfs-auto-snap_frequent-`date +%Y-%m-%d-%H%M`
zfs snapshot -r zroot/home/mario@zfs-auto-snap_hourly-`date +%Y-%m-%d-%H%M`
zfs snapshot -r zroot/home/mario@zfs-auto-snap_daily-`date +%Y-%m-%d-%H%M`
zfs snapshot -r zroot/home/mario@zfs-auto-snap_weekly-`date +%Y-%m-%d-%H%M`
zfs snapshot -r zroot/home/mario@zfs-auto-snap_monthly-`date +%Y-%m-%d-%H%M`
zfs snapshot -r zroot/home/mario@zfs-auto-snap_yearly-`date +%Y-%m-%d-%H%M`
zfs list -H -t snapshot -o name -S creation -r zroot/home/mario
zfs list -H -t snapshot -o name -S creation -r zroot/home/mario | grep "frequent" | tail -n +10 | xargs -n 1 zfs destroy -R
zfs list -H -t snapshot -o name -S creation -r zroot/home/mario | grep "hourly" | tail -n +23 | xargs -n 1 zfs destroy -R
zfs list -H -t snapshot -o name -S creation -r zroot/home/mario | grep "daily" | tail -n +7 | xargs -n 1 zfs destroy -R
zfs list -H -t snapshot -o name -S creation -r zroot/home/mario | grep "weekly" | tail -n +4 | xargs -n 1 zfs destroy -R
zfs list -H -t snapshot -o name -S creation -r zroot/home/mario | grep "monthly" | tail -n +11 | xargs -n 1 zfs destroy -R
zfs list -H -t snapshot -o name -S creation -r zroot/home/mario | grep "early" | tail -n +10 | xargs -n 1 zfs destroy -R

Install Nvim

Sat, 09 Nov 2024 10:21:58 +0100

curl -LO https://github.com/neovim/neovim/releases/latest/download/nvim-linux64.tar.gz
sudo rm -rf /opt/nvim
sudo tar -C /opt -xzf nvim-linux64.tar.gz
rm nvim-linux64.tar.gz

Windows Update Error 0x80073712

Mon, 16 Sep 2024 16:20:24 +0200

Run the DISM tool

tap Search.
Enter command prompt in the search box.
In the list of results, swipe down on or right-click Command Prompt, and then tap or click Run as administrator.
In the Administrator: Command Prompt window, type the following commands. Press the Enter key after each command:

DISM.exe /Online /Cleanup-image /Scanhealth
DISM.exe /Online /Cleanup-image /Restorehealth

To close the Administrator: Command prompt window, type Exit, and then press Enter.
Run Windows Update again.

Diskpart Windows

Fri, 30 Aug 2024 10:30:27 +0200

restore partion

diskpart
list disk
select disk #
clean
create partition primary
select partition 1
format quick

Git Tag Delete Local and Remote

Mon, 22 Jul 2024 15:56:44 +0200

# delete local tag '12345'
git tag -d 12345
# delete remote tag '12345' (eg, GitHub version too)
git push origin :refs/tags/12345
# alternative approach
git push --delete origin tagName
git tag -d tagName

Journalctl Tricks

Fri, 12 Jul 2024 11:45:27 +0200

journalctl command

vacuum / clean

journalctl --disk-usage
journalctl --vacuum-size=1G

--vacuum-size=BYTES   Reduce disk usage below specified size
--vacuum-files=INT    Leave only the specified number of journal files
--vacuum-time=TIME    Remove journal files older than specified time

read old journal

journcalctl --file /var/log/.../dsdsdsdsdsdsdsds.journal~

goto end of log

sudo journalctl -e

journalctl -e -u certbot.service
journalctl -xeu redis-server.service

list old boots

journalctl --list-boots

Alle Meldungen mit Kennzeichnung error, critical, alert oder emergency anzeigen

journalctl -p err -b

kernel messages only

journalctl -k -e

systemctl list-unit-files

systemctl --failed
# or
systemctl list-units --state=failed

journalctl -xb

Restart Systemd

Fri, 12 Jul 2024 11:42:27 +0200

sudo systemctl daemon-reexec

Ceph Reset Error

Wed, 03 Jul 2024 11:42:40 +0200

Display a list of messages:

ceph crash ls

read a message:

ceph crash info <id>

mark message as read

ceph crash archive <id>

or mark all as read

ceph crash archive-all

or remove it

 ceph crash rm <id>

Convert Crt and Key to Old Pfx

Tue, 25 Jun 2024 16:02:30 +0200

convert a crt and key /pem file to pfx for window 2008

normal conversion windows 10 and later

openssl pkcs12 -export -out example.pfx -inkey example.key -in wildcard.example.de.crt

validate

openssl pkcs12 -info -in example.pfx

conversion for Windows 2008

openssl pkcs12 -export -out exmaple.pfx -inkey exmaple.key -in wildcard..de.crt -certpbe PBE-SHA1-3DES -keypbe PBE-SHA1-3DES -nomac

Curl send email

Wed, 19 Jun 2024 09:33:49 +0100

Sending email with curl is done with the SMTP protocol.

From: John Smith <john@example.com>
To: Joe Smith <smith@example.com>
Subject: an example.com example email
Date: Mon, 7 Nov 2016 08:45:16

Dear Joe,
Welcome to this example email. What a lovely day.

curl smtp://mail.example.com --mail-from myself@example.com --mail-rcpt \
receiver@example.com --upload-file email.txt

Secure mail transfer

However, if your provider allows upgrading from clear-text to secure transfers you can use one of these options:

--ssl           Try SSL/TLS (FTP, IMAP, POP3, SMTP)
--ssl-reqd      Require SSL/TLS (FTP, IMAP, POP3, SMTP)

You can tell curl to require upgrading to using secure transfers by adding --ssl-reqd to the command:

curl --ssl-reqd smtp://mail.example.com:587 --mail-from myself@example.com \
     --mail-rcpt receiver@example.com --upload-file email.txt \
     --user 'user@your-account.com:your-account-password'

Ip bringing Interfaces Up Down

Tue, 18 Jun 2024 12:38:23 +0200

using ip

# ip link set dev <interface> down
ip link set dev eth0 down
# ip link set dev <interface> up
ip link set dev eth0 up

using ipconfig

# /sbin/ifconfig <interface> up
# /sbin/ifconfig <interface> down

Regex Robocopy Logfile Filter

Fri, 31 May 2024 14:45:41 +0200

Robocopy Log Dateien filtern mit Regex in Notepad++

REM Zeilen, die FEHLER enthalten
REM ^(.*)FEHLER
REM
REM Zeilen mit neuen Dateien
REM ^(.*)EXTRA Datei(.*)$
REM
REM Zeilen mit neuen Verzeichnissen
REM ^(.*)ZUS\. Verz(.*)$
REM
REM Doppelte Zeilen
REM ^(.*?)$\s+?^(?=.*^\1$)
REM
REM Leere Zeilen
REM ^\s*$

List All Crontabs

Tue, 21 May 2024 10:45:32 +0200

getent passwd | awk -F: '{ print $1 }' | sudo xargs -n1 crontab -l -u | grep -v '^#' | grep -v '^no crontab for'

Batch Is Online

Mon, 13 May 2024 12:48:06 +0200

Check if the server is online

@echo off
@ping -n 1 10.10.20.250 | find "TTL"
if ERRORLEVEL 1 (
    echo offline
) else (
    echo okay
)

with parameter

@echo off
IF "%~1" == "" GOTO noinput
@ping -n 1 %1 | find "TTL"
if ERRORLEVEL 1 (
    echo offline
) else (
    echo okay
)
GOTO end

:noinput
echo NO input given

:end

Shell Get Number of Files With Extension

Fri, 10 May 2024 16:31:48 +0200

find . -type f | awk -F. '{print $NF}' | sort | uniq -c

Docker Enable Remote Api

Tue, 30 Apr 2024 20:13:12 +0200

systemctl edit docker.service

[Service]
ExecStart=
ExecStart=/usr/bin/dockerd -H unix:// -H tcp://0.0.0.0:2375

systemctl daemon-reload
systemctl restart docker.service

Hacker Im Netzwerk

Tue, 09 Apr 2024 10:55:54 +0200

“Das sind keine Hacker im Netzwerk, Wir haben überraschende Gast-Administratoren”

proxmox "/usr/sbin/proxmox-boot-tool not found"

Thu, 04 Apr 2024 12:21:56 +0200

That is a pretty annoying error message. To get rid of it

apt install pve-kernel-helper

Zfs List Sort by Size

Sat, 30 Mar 2024 09:06:52 +0100

zfs list -s used | tail -n 10

Apache Extend Header

Wed, 20 Mar 2024 11:58:24 +0100

Add to an existing header from the application

Header always append Content-Security-Policy "frame-ancestors 'none';"

Powershell Download File

Wed, 20 Mar 2024 09:56:48 +0100

Invoke-WebRequest -Uri "https://opendata.dwd.de/climate_environment/health/alerts/s31fg.json" -OutFile "C:\s31fg-$(Get-Date -format 'yyyy-MM-dd').json"

Nmap Scan Ssl Vulnerability

Wed, 20 Mar 2024 09:55:02 +0100

nmap -sV --script ssl-enum-ciphers -p443 <host>

Ip Command

Thu, 14 Mar 2024 10:22:15 +0100

Vergleichstabelle ip versus ifconfig

Zweck	iproute2 Kommando	iproute2 Kommando Kurzversion	net-tools Kommando
Linkstatus anzeigen	`ip link show`	`ip l`	`ifconfig`
Linkstatus inkl. Statistik (RX/TX bytes, errors, …) anzeigen	`ip -statistics link show`	`ip -s l`	`ifconfig`
IP Adresse anzeigen	`ip addr show`	`ip a`	`ifconfig -a`
IP Adresse setzen	`ip addr add IP/NETMASK dev DEVICE`	`ip a a IP/NETMASK dev DEVICE`	`ifconfig DEVICE IP/NETMASK`
IP Adresse entfernen	`ip addr del IP/NETMASK dev DEVICE`	`ip a d IP/NETMASK dev DEVICE`	–
IP Adressen entfernen	`ip addr flush dev DEVICE`	`ip a f dev DEVICE`	–
Routingtabelle anzeigen	`ip route show`	`ip r`	`route -n`
Standardgateway setzen	`ip route add default via IP`	`ip r a default via IP`	`route add default gw IP DEVICE`
ARP-Cache anzeigen	`ip neigh show`	`ip n`	`arp -na`
Verbindungen anzeigen	`ss --tcp --all --processes --extended --numeric`	`ss -tapen`	`netstat -tapen`

Iptables

Thu, 07 Mar 2024 10:31:50 +0100

find blocking rule and delete it

iptables -L -n -v --line-numbers | grep -v " 0 DROP"
iptables -D bannedDownloader [LINE_NUMBER]

clean iptables

completely clean iptables

sudo iptables -F
sudo iptables -X
sudo iptables -t nat -F
sudo iptables -t nat -X
sudo iptables -t mangle -F
sudo iptables -t mangle -X

nat rules

iptables -t nat -L --line-numbers -n
ip6tables -L -n -v -t nat --line-numbers

delete

sudo iptables -D INPUT <<number here>>

1.202.241.214 <– china :D

How can I check the hit count for each rule in iptables?

inspecting iptables / usage

iptables -L -nvx

sudo apt-get install -y iptables-persistent
sudo service iptables-persistent start

sudo iptables-save > /etc/iptables/rules.v4
sudo service iptables-persistent restart

“Unsichtbarmachen”

Das System “unsichtbar” zu machen, indem man Pakete nicht regelgerecht abweisen, sondern kommentarlos verwerfen lässt (DROP), ist ebenfalls nicht sinnvoll. Ein System, das keine Ports offen hat, wie ein Standard-Ubuntu-Desktop, hat keinen einzigen Grund, “unsichtbar” zu sein. Im Gegenteil: Sendet ein System eine Verbindungsanfrage (bspw. weil es sich vor kurzem mit einem anderen System ausgetauscht hat, das zu dem Zeitpunkt diese IP-Adresse hatte) weiß es sofort, dass es dort keinen Dienst gibt, und bricht ab (wenn es sauber programmiert ist). Bei “unsichtbaren” Systemen versucht es dagegen noch eine halbe Ewigkeit, die Daten zuzustellen. Wenn ein Rechner aber sowieso einen Dienst offen hat, bspw. ssh, dann kann keine “Firewall” der Welt diesen Port “unsichtbar” machen.

“Unsichtbarmachen” kann sogar Probleme verursachen. Bspw. versuchen einige FTP- und IRC-Server, bei jedem Login eine ident-Abfrage zu machen (Port 113). Wenn dieser Port auf dem Client nun “unsichtbar” ist, wird der Login verzögert, bis der Timeout kommt. Andere Probleme kann man bekommen, wenn irgendeine Software wahllos ICMP-Pakete verwirft, wie es viele Windows-Firewalls machen. Dann funktioniert nämlich unter Umständen die sogenannte Path-MTU-Discovery nicht mehr, und es kann zu “rätselhaften” Verbindungsproblemen kommen, die sich der Laie nicht erklären kann.

What do the three rules do?

Those 3 rules seem pretty self-explanatory:

Reject incoming UDP packets with an ICMP message “port unreachable”
Reject incoming TCP packets with “tcp reset”
Reject incoming packets (of any other protocol) with ICMP message “protocol unreachable”

sudo iptables -A INPUT -p tcp --dport 3306 -j REJECT --reject-with tcp-reset
sudo iptables -A INPUT -p tcp --dport 9999 -j REJECT --reject-with tcp-reset
sudo iptables -I INPUT 1 -p ICMP --icmp-type timestamp-request -j DROP
sudo iptables -I INPUT 1 -p ICMP --icmp-type timestamp-reply -j DROP
sudo iptables -A INPUT -p icmp --icmp-type 13 -j DROP

Linux Find

Tue, 05 Mar 2024 09:14:43 +0100

find by name

find / -name libssl.so.3

find by extension

find ./ -type f -name "*.m4b"

find an destroy

find ./ -type f -name "metadata.abs" -exec rm {} \;

Kainos

Mon, 04 Mar 2024 10:34:06 +0100

Im Altgriechischen gibt es einen Unterschied zwischen den beiden Begriffen “kainos” und “neos”.

Kainos (καινός):
- Dieser Begriff bezieht sich oft auf etwas, das neuartig ist, frisch, ungewöhnlich oder anders als das, was zuvor existierte.
- Kainos kann auch eine Qualität der Neuartigkeit oder Frische in Bezug auf Zeit oder Zustand ausdrücken.
- Es bezieht sich darauf, dass etwas eine neue Art oder Qualität hat, im Gegensatz zu etwas Altem oder Gewöhnlichem.
Neos (νέος):
- Neos hingegen bezieht sich einfach auf das, was neu ist, ohne unbedingt einen Fokus auf die Qualität oder die Einzigartigkeit zu legen.
- Es wird verwendet, um zu betonen, dass etwas jung, frisch oder neu ist, ohne spezifisch auf eine innovative oder ungewöhnliche Eigenschaft hinzuweisen.

Zusammengefasst könnte man sagen, dass “kainos” eher auf die Qualität der Neuartigkeit oder Frische hinweist, während “neos” einfach auf die Tatsache der Neuheit verweist. Je nach Kontext können diese Begriffe jedoch leicht variieren.

Run as Domain Admin

Fri, 02 Feb 2024 15:53:10 +0100

runas /noprofile /env /user:Administrator@exampl.local cmd

Regex

Wed, 31 Jan 2024 10:17:12 +0100

duplicate lines

^(.*?)$\s+?^(?=.*^\1$)

every second line

(.*(\n|$)){2}

empty line

^\s*$

Show Ip at Login

Mon, 29 Jan 2024 09:13:02 +0100

cat /etc/issue
Debian GNU/Linux 12 \n \l

My IP address: \4{enp0s3}

Lsblk

Fri, 12 Jan 2024 11:25:07 +0100

lsblk --ascii -o NAME,PARTUUID,LABEL,PATH,FSTYPE
lsusb -t
lsblk -o NAME,MOUNTPOINT,PHY-SEC,LOG-SEC,OPT-IO,FSTYPE
mount |column -t
lsblk -o NAME,FSTYPE,UUID,RO,RM,SIZE,STATE,OWNER,GROUP,MODE,TYPE,MOUNTPOINT,LABEL,MODEL

lsblk -o NAME,FSTYPE,SIZE,MOUNTPOINT,MODEL,SERIAL,HCTL,PHY-SEC,LOG-SEC

lsblk FreeBSD

fetch -o /usr/local/bin/lsblk https://raw.githubusercontent.com/vermaden/scripts/master/lsblk.sh
chmod +x /usr/local/bin/lsblk
hash -r || rehash
lsblk

Linux Change Date of a File

Wed, 10 Jan 2024 09:34:32 +0100

Change the last mod date to Apr 23 2019

touch -a -m -t 201904231230.09 .bash_history

-a access time
-m modified time
-t use [[CC]YY]MMDDhhmm[.ss] time format

Docker

Tue, 09 Jan 2024 13:44:09 +0100

usage

docker stats

global log / daemon log

journalctl -e -xu docker.service

docker compose update image

docker compose pull && docker docker compose up -d

remove images

remove unused images and volumes

docker image prune -a
docker volume rm $(docker volume ls -qf dangling=true)
docker system prune

docker system

docker system df

docker ps --format "table {{ .Names }}"

Fish Shell Most Used Commands

Mon, 08 Jan 2024 20:08:32 +0100

history | awk '{print $1}' | sort | uniq -c | sort -rn | head

Run Fish Shell Without Customizations

Sat, 06 Jan 2024 23:04:23 +0100

sh -c 'env HOME=$(mktemp -d) fish'

Docker Ps Custom

Sat, 06 Jan 2024 22:36:30 +0100

Customize docker ps output.

docker ps --format "table {{.ID}}\t{{ .Names }}\t{{ .Image }}\t{{ .Status }}\t{{ .Ports }}"

docker ps --format "table {{ .Names }}" -a

options

Placeholder	Description
.ID	Container ID
.Image	Image ID
.Command	Quoted command
.CreatedAt	Time when the container was created.
.RunningFor	Elapsed time since the container was started.
.Ports	Exposed ports.
.State	Container status (for example; “created”, “running”, “exited”).
.Status	Container status with details about duration and health-status.
.Size	Container disk size.
.Names	Container names.
.Labels	All labels assigned to the container.
.Label	Value of a specific label for this container. For example ‘{{.Label “com.docker.swarm.cpu”}}’
.Mounts	Names of the volumes mounted in this container.
.Networks	Names of the networks attached to this container.aceholder Description

Cola

Sat, 06 Jan 2024 18:47:56 +0100

Cola Rezepte

Merchandise 7x Flavor [Verwenden Sie 2 Unzen Aroma (unten) für 5 Gallonen Sirup (ich habe 15 ml pro 19 Liter oder 1,3 ml / 1 Liter verwendet)]

236 ml (8 oz) hochprozentiger Alkohol in Lebensmittelqualität
20 Tropfen (0,5 g / 1 ml) Orangenöl
30 Tropfen (0,75 g / 1,5 ml) Zitronenöl
10 Tropfen (0,25 g / 0,5 ml) Muskatnussöl
5 Tropfen (0,125 g / 0,25 ml) Korianderöl
10 Tropfen (0,25 g / 0,5 ml) Neroliöl (Bitterorangenöl)
10 Tropfen (0,25 g / 0,5 ml) Zimtöl (Cassia / True Cinnamon)

Original Zuckersirup Rezept:

FE Coca (flüssiger Extrakt aus Coca) 3 trinkt USP (10,5 ml)
Zitronensäure 3 oz (85g)
Koffein 1 oz (30 ml)
Zucker 30 #
Wasser 2,5 Gallonen
Limettensaft 2 Pints (473 ml)
Vanille 1 Unze (30 ml)
Karamell 1,5 Unzen oder mehr zum Ausmalen

Ich habe 1/8 Original hergestellt und die Zutaten in der Reihenfolge ihrer Verwendung nachbestellt:

Wasser 1,18 l
Zucker 1,7 kg
Karamell 5,5 ml
FE Coca 1,3 ml (nicht verwendet)
Vanille 3,75 ml
Koffein 3,75 ml
Limettensaft 59,12 ml
Zitronensäure 10,6 g

Methode

Mischen Sie alle Zutaten des 7X Flavours zusammen. Legen Sie diese in eine verschlossene Flasche. Wasserzucker und Karamell in einem großen Topf erhitzen. Ständiges Rühren, bis der Zucker gelöst ist. Nehmen Sie die Hitze ab und mischen Sie Vanille, Koffein, Limettensaft und Zitronensäure. Rühren Sie sich, um vollständig zu kombinieren. Fügen Sie dem Zuckersirup eine abgemessene Menge 7X Aroma hinzu.

Mit kohlensäurehaltigem Wasser im Verhältnis von einem Teil Sirup und 5 Teilen Wasser mischen.

Mariadb Current Storage Engine Recommendations Based on Workload

Thu, 04 Jan 2024 20:44:36 +0100

Read-heavy workloads: Aria
General purpose: InnoDB
ACID: InnoDB
Write-heavy workloads: MyRocks
Compression: MyRocks
Sharded: Spider
Analytical workloads: MariaDB ColumnStore

Zfs Mount Snapshot for Recovery

Thu, 04 Jan 2024 20:11:47 +0100

mount -t zfs tank/www@zfs-auto-snap_hourly-2024-01-04-1917 /mnt/snapshot/tank/www
# ... do stuff
umount /mnt/snapshot/tank/www

Openssl Encrypt Files

Thu, 04 Jan 2024 14:45:58 +0100

encrypt

openssl enc -e -aes-256-ctr -pbkdf2 -in $1 -out $1.enc

decrypt

openssl enc -d -aes-256-ctr -pbkdf2 -in $1 -out $2

with a file

openssl genrsa -aes256 -out private.pem 4096

#!/bin/bash
if [[ "$1" == "de" || "$1" == "dec" || "$1" == "decrypt" ]]; then
        openssl enc -d -chacha20 -pbkdf2 -kfile ./private.pem -in $2 -out $3
fi

if [[ "$1" == "en" || "$1" == "enc" || "$1" == "encrypt" ]]; then
    openssl enc -e -chacha20 -pbkdf2 -kfile ~/private.pem -in $2 -out $2.enc
fi

Zfs Snapshot Send Resume

Wed, 03 Jan 2024 11:28:30 +0100

zfs send ... | <network> | zfs receive -s otherpool/new-fs

On the receiving side, get the opaque token with the <DMU object #, offset> stored in it

zfs send ... | <network> | zfs receive -s otherpool/new-fs
zfs get receive_resume_token otherpool/new-fs
# 1-e604ea4bf-e0-789c63a2...

zfs get -H -o value receive_resume_token ztank/newtest

Re-start sending from the <DMU object #, offset> stored in the token

zfs send -t 1-e604ea4bf-e0-789c63a2... | <network> | zfs receive -s otherpool/new-fs

If you don’t want to resume the send, abort to remove the partial state on the receiving system

zfs receive -A otherpool/new-fs

Notes on How to Disable the Cache File in ZoL

Wed, 03 Jan 2024 11:22:03 +0100

I noticed that even though I created our data pool with -o cachefile=none, the vdevs were still present in /etc/zfs/zpool.cache, and it was still getting imported that way. When I looked at the pool properties, cachefile was set to the default value of - instead of the local value of none. I believe this was happening because the cache file is very “sticky”: if it’s there, ZoL wants to use it—overriding the cachefile property—and I think it got there in the first place because there’s a second pool on the machine (the root pool) that was configured to use it.

This is bad for zfs-ha, so I set about trying to fix it. I decided to disable the cache file entirely, for both pools, because that seems to be an ultimate goal of the project anyway. Here are my notes on how I accomplished it; it wasn’t hard, but it feels worth documenting. Please chime in if you have answers for my open questions and/or suggestions on better ways to do any steps of the process.

The root pool is named rpool and the data pool is named tank, so adjust accordingly if you plan to follow some or all of these steps. These instructions assume that you’re on Ubuntu 18.04—although they might be portable to other ZoL targets, such as Ubuntu 16.04 and Debian 9—and have zfs-initramfs 0.7.x installed.

Set the cache file to none for each and every pool:

zpool set cachefile=none rpool
zpool set cachefile=none tank

Delete rm -f /etc/zfs/zpool.cache

Make sure zfs-import-scan.service is enabled

Make sure zfs-import-cache.service is disabled (optional; ZoL will conditionally use the correct service based on the presence or absence of the cache file)

Set the following variables in /etc/default/zfs:

ZFS_POOL_IMPORT='rpool'

N.B. This selects which pool(s) to import at boot time. It should be set to the name of your root pool!

ZPOOL_CACHE='none' N.B. I think this can be any string that will fail a test -f, based on my reading of the ZoL source.

ZPOOL_IMPORT_OPTS='-o cachefile=none' N.B. I think this is superfluous if you set ZPOOL_CACHE='none', but am unable to confirm. My hope is that this guarantees that a cache file will never be created at import time, although I don’t know if it has any effect on manual imports.

ZPOOL_IMPORT_PATH='/dev/disk/by-vdev:/dev/disk/by-id' (optional) N.B. This is not strictly required for this exercise, but I prefer WWNs and would like the option of adding a vdev_id configuration in the future. This just makes sure the scan operation doesn’t import a pool using e.g. /dev/sdX, which is particularly important if you’re using dm-multipath (which we are for zfs-ha).

Update initramfs:

update-initramfs -u -k all

Reboot!

Set the cache file to none for each and every pool:

zpool set cachefile=none rpool
zpool set cachefile=none tank

Delete rm -f /etc/zfs/zpool.cache

Make sure zfs-import-scan.service is enabled

Make sure zfs-import-cache.service is disabled (optional; ZoL will conditionally use the correct service based on the presence or absence of the cache file)

Set the following variables in /etc/default/zfs:

ZFS_POOL_IMPORT='rpool'

N.B. This selects which pool(s) to import at boot time. It should be set to the name of your root pool!

ZPOOL_CACHE='none' N.B. I think this can be any string that will fail a test -f, based on my reading of the ZoL source.

Update initramfs:

update-initramfs -u -k all

Reboot!

Remove Pc from AD via PowerShell

Wed, 03 Jan 2024 09:19:33 +0100

Local

Remove-Computer -UnjoinDomaincredential DOMÄNE\BENUTZER -PassThru -Verbose -Restart

DC server

Remove-ADComputer -Identity COMPUTERNAME

Git Commit Signing

Tue, 02 Jan 2024 19:36:18 +0100

create key

ssh-keygen -o -a 100 -t ed25519 -f ~/.ssh/signing -C "signing"
touch ~/.ssh/allowed_signers

allowed_signers

add the public key

cat ~/.ssh/signing.pub >> ~/.ssh/allowed_signers

repo

git config commit.gpgsign true
git config gpg.format ssh
git config gpg.ssh.allowedSignersFile "~/.ssh/allowed_signers"
git config tag.forceSignAnnotated true
git config tag.gpgsign true
git config user.email example@example.com
git config user.name example
git config user.signingkey ~/.ssh/signing.pub

verify

git log --show-signature

Zfs Deleting

Tue, 02 Jan 2024 16:09:39 +0100

Deleting a filesystem in ZFS looks immediate, but internally, the filesystem is hidden immediately, but its data is freed asynchronously by a background thread which can take a while. You can see the amount of space waiting to be freed by running the command zpool get freeing <pool>. So this whole design of using ZFS to delete stuff faster might not actually be doing that much for you. If you want to get this behavior without the txg (transaction group) overhead, you could just create a queue inside your application with a background thread that will delete directories that are no longer in use.

However, if you didn’t back up and got the pool corrupted somehow, there are several ways you can try to access the data on your datasets.

First you can try and import the pool in read-only mode. If that doesn’t work, you can try and find an older but still recent txg and try to import using that checkpoint. You will not have the latest file modifications but you will be able to recover some of your data.

In order to see older txg issue, use:

zdb -e <pool_name> -ul

and choose a txg from the most recent uberblocks.

The pool can then be imported with the -T parameter followed by the txg number.

Ceph Scrub Time

Tue, 02 Jan 2024 15:37:54 +0100

With the new ceph version the ini settings about the time when the scrubbing is set was ignored. This is how to set it via CLI

root@pve-01:/etc/ceph# ceph config get osd osd_scrub_begin_hour
0
root@pve-01:/etc/ceph# ceph config set osd osd_scrub_begin_hour 22
root@pve-01:/etc/ceph# ceph config get osd osd_scrub_begin_hour
22
root@pve-01:/etc/ceph# ceph config get osd osd_scrub_end_hour
0
root@pve-01:/etc/ceph# ceph config set osd osd_scrub_end_hour 7
root@pve-01:/etc/ceph# ceph config get osd osd_scrub_end_hour
7
root@pve-01:/etc/ceph#

Wake on Lan Linux

Tue, 02 Jan 2024 12:43:41 +0100

nala install ethtool
ethtool -s enp6s0 wol g

/etc/systemd/system/wol.service

[Unit]
Description=Configure Wake-up on LAN

[Service]
Type=oneshot
ExecStart=/sbin/ethtool -s enp6s0 wol g

[Install]
WantedBy=basic.target

sudo systemctl enable wol.service
sudo systemctl daemon-reload

36 Questions That Will Change Your Life

Mon, 01 Jan 2024 21:33:49 +0100

Try this experiment yourself in a laboratory, a restaurant, your apartment or wherever, and report back in the Comments section below.

Questions

Given the choice of anyone in the world who would you want to have as a dinner guest?
Would you like to be famous? In what way?
Before making a telephone call do you ever rehearse what you are going to say? Why?

two

What would constitute a “perfect” day for you?
When did you last sing to yourself? To someone else?
If you were able to live to the age of 90 and retain either the mind or the body of a 30-year-old for the last 60 years of your life, which would you want?
Do you have a secret hunch about how you will die?

three

Name three things the two of you have in common.
For what in your life do you feel most grateful?
If you could change anything about the way you were raised what would it be?
Take four minutes and tell your life story in as much detail as possible.

four

If you could wake up tomorrow having gained one quality or ability what would it be?
If a crystal ball could tell you the truth about yourself, your life, the future or anything else, what would you want to know?
Is there something you’ve dreamed of doing for a long time? Why haven’t you done it?
What is the greatest accomplishment of your life?

five

What do you value most in a friendship?
What is your most treasured memory?
What is your most terrible memory?
If you knew that in one year you would die suddenly, would you change anything about the way you are now living? Why?

six

What does friendship mean to you?
What roles do love and affection play in your life?
Alternate sharing something you consider a positive characteristic of the person you’re with. Share a total of five items each.
How close and warm was your family? Do you feel your childhood was happier than most other people’s?

seven

How do you feel about your relationship with your mother?
Make 3 true “we” statements for each. For instance, “We are both in this room feeling …”
Complete this sentence, “I wish I had someone with whom I could share ….”
If you were going to become a close friend of the person you’re with, share what would be important for her or him to know.
Tell the person you’re with what you like about them; being very honest and saying things that you might not say to someone you just met.

eight

Share an embarrassing moment in your life.
When did you last cry in front of another person? By yourself?
Tell the person you’re with something you already like about them.
What, if anything, is too serious to be joked about?

nine

If you die this evening without the opportunity to communicate with anyone, what would you most regret not having told someone? Why haven’t you told them yet?
Your house containing everything you own catches fire. After saving your loved ones and pets you have time to make one final dash to save one item. What would it be? Why?
Of all the people in your family, whose death would you find most disturbing? Why?
Share a personal problem and ask for advice on how the person you’re with would handle it. Also, ask the person you’re with to reflect back to you how you seem to be feeling about the problem you have chosen.

DONE

That’s it — the 36 questions. Could they make you fall in love? Help you fall back in love?

Look into the others eyes for 4 minutes without saying anything.

Copy and Paste in Tmux Aka Copy Mode in Tmux

Mon, 01 Jan 2024 21:30:59 +0100

Enter ‘copy mode’ by pressing CTRL+b, [.
Use the arrow keys to go to the position from where you want to start copying. Press CTRL+SPACE to start copying.
Use arrow keys to go to the end of text you want to copy. Press ALT+w or CTRL+w to copy into Tmux buffer.
Press CTRL+b, ] to paste in a possibly different Tmux pane/window.

Active Directory (AD) Get all Groups and its members

Mon, 01 Jan 2024 21:25:15 +0100

$ExportPath = 'c:\Users\Adminstrator\ad-export'

$groupNames = (Get-ADGroup -Filter * -SearchBase "OU=Groups,OU=Users,DC=local,DC=example,DC=com")

foreach ($group in $groupNames) { 
    $fileName = (Get-ADGroup $group | Select-Object SamAccountName | Out-String -Stream)
    $fileName2 = (
        $fileName.
            replace('@{Name=','').
            replace('}','').
            replace('\','').
            Replace('SamAccountName','').
            Replace('----------','').
            replace('\\r\\n','').
            replace('\r\n','').
            replace('----','').
            replace('  ','')
    )
    $path = $ExportPath + "\" + $fileName2 + ".csv"
    Get-ADGroup $group | Get-ADGroupMember -Recursive | Get-ADUser -Properties * | Select SamAccountName, Surname, GivenName, Title, Mail | Export-Csv -NoType -Encoding UTF8 -Delimiter ";" $path
}

Git Create Empty Branch

Mon, 01 Jan 2024 17:14:39 +0100

To create a new empty branch in Git, we can use the --orphan command line option

git checkout --orphan <newemptybranchname>

The command above creates the new empty branch and switches into it. Once the empty branch s created, we can can delete files from the working directory, so they are not committed in to the new branch

git rm -rf .

Now you are in the empty branch without any inherited files or commits. If you want to push your empty branch to a remote repository, do the following

git commit --alow-empty -m "Init"
git push origin <newemptybranchname>

Note, that if you try to merge another branch into the empty one, you will receive the error: fatal: refusing to merge unrelated histories

Use the --allow-unrelated-history< option to force the merge into the empty branch.

git merge --allow-unrelated-history <branchname>

Zfs

Mon, 01 Jan 2024 13:04:36 +0100

Single disc

tank is the storage name

zpool create tank /dev/sdb

zpool create -o ashift=12 -o autotrim=on -o autoexpand=on

zpool create -o ashift=12 -o autotrim=on tank mirror /dev/disk/by-id/usb-SanDisk_SDSSDA-1T00_0123456789CA-0:0 /dev/disk/by-id/usb-SanDisk_SDSSDA-1T00_0123456789CB-0:0
zfs set atime=off compression=lz4 tank

zpool set autotrim=on tank

zpool trim tank

zpool status -t

cache file

zpool set cachefile=none tank

mirror pool (similar to raid-1, ≥ 2 disks, 1:1 redundancy)

zpool create tank mirror /dev/sdb /dev/sdc

stripe pool (similar to raid-0, no redundancy)

zpool create tank /dev/sdb /dev/sdc

Add cache disk

zpool add tank cache /dev/nvme-MT001600KWHAC_S3M0NA0K700264

deduplication

zfs set dedup=on tank

compression

zfs set compression=on tank

list dics

lsblk --ascii -o NAME,PARTUUID,LABEL,PATH,FSTYPE
lsusb -t
lsblk -o NAME,MOUNTPOINT,PHY-SEC,LOG-SEC,OPT-IO,FSTYPE
mount |column -t
lsblk -o NAME,FSTYPE,UUID,RO,RM,SIZE,STATE,OWNER,GROUP,MODE,TYPE,MOUNTPOINT,LABEL,MODEL

lsblk -o NAME,FSTYPE,SIZE,MOUNTPOINT,MODEL,SERIAL,HCTL,PHY-SEC,LOG-SEC

Ich habe gestern, weil mein mdadm Software Raid auf dem Raspberry PI nicht so richtig funktioniert, die USB Ports verschwinden aus /dev, eine drehende Platte an meinen Linux Server angeschlossen. Dann mit zpool (ZFS) einen pool mit nur einer Platte erzeugt. Dann habe ich die Daten vom PI per Netzwerk auf die neue Platte kopiert. Das mdadm RAID auf dem PI aufgelöst und die Platten zu dem Pool als Mirror platten hinzugefügt. Dann nach dem Sync die drehende Platte entfernt. Klingt kompliziert. Aber mit ZFS war das echt einfach.

zpool create tank /dev/sdb
zpool attach tank /dev/sdb /dev/sdc /dev/sdd
zpool status
zpool detach tank /dev/sdb
zpool status
reboot

Determining Available Storage Pools to Import

After the pool has been removed from the system (either through an explicit export or by forcefully removing the devices), you can attach the devices to the target system. ZFS can handle some situations in which only some of the devices are available, but a successful pool migration depends on the overall health of the devices. In addition, the devices do not necessarily have to be attached under the same device name. ZFS detects any moved or renamed devices, and adjusts the configuration appropriately. To discover available pools, run the zpool import command with no options.

don’t use raidz(x)

DON’T use raidz!! use mirrors! https://louwrentius.com/the-hidden-cost-of-using-zfs-for-your-home-nas.html

zpool create tank mirror sda sdb
zpool add tank mirror sdc sdd

better use /dev/disk/by-id/ rather than /dev/sd

zpool add tank log mirror sde sdf

zpool add tank cache  sdg sdh

zfs command

zfs create tank/data
zfs create tank/data/dummy
zfs create tank/data/joe
zfs set quota=100G tank/data/joe
zfs create tank/data/jane
zfs set reservation=2G tank/data/jane

settings

zfs get all tank
zfs set atime=off tank

scrub / maintain

zpool scrub tank

stop srub

zpool scrub -s tank

slow scrub https://www.reddit.com/r/zfs/comments/iuh5lj/how_can_i_slow_down_a_scrub_on_purpose_to_leave/

checksum error

zpool clean tank
zpool clean tank usb-SanDisk_SDSSDA-1T00_0123456789CA-0:0

https://dan.langille.org/2019/10/15/creating-a-mirror-from-your-zroot/

meta data

Only OpenZFS 2.0 or later!

https://forum.level1techs.com/t/zfs-metadata-special-device-z/159954

re-import disc-by-id

disc by id

zpool export tank
zpool import -d /dev/disk/by-id/ tank

https://plantroon.com/changing-disk-identifiers-in-zpool/

Zfs Snapshot Size

Mon, 01 Jan 2024 12:56:16 +0100

zfs list -r -t filesystem -o name,used,usedbydataset,usedbychildren,usedbysnapshots,usedbyrefreservation

zfs snapshot sort by size

zfs list -o name,usedbysnapshots | sort -r -k2

example output

root@nas[~]# zfs list -o name,usedbysnapshots | sort -r -k2
NAME                                     USEDSNAP
tank/mailstore                              56.3M
tank/docker/audiobookshelf                   326M
tank/docker/warpgate                         320K
tank/docker/gitea                           26.1M
tank/store                                   261M
tank/docker/lychee                          2.51M
tank/docker                                 2.38M
tank/docker/proxy                           1.96M
tank/root                                    140K
tank/docker/drei                            1.16M
tank/nas/Hoerbuecher/Die-3-Fragezeichen        0B

From the above list, it is then easy to figure out slowtank/backups/restic/restic_data_servers uses the most snapshot space (1.66TB). Snapshots can then be listed for that filesystem by using a command like:

zfs list -t snapshot -r <zfs filesystem>

example 2

zfs list -o name,usedbysnapshots | grep -v " 0B"