Μερλιν's home - notes

Data Security Principles and Guidelines

Anonymous (anonymous@undisclosed.example.com) — 2024-06-19T12:35:02+00:00

Data Security Principles and Guidelines Backups It's often said “RAID is not a backup”. But without further discussion, it's not totally clear why. The real reason, these technologies are, generally, designed to solve different kinds of disasters, and, generally, backup is more important.

HAProxy and Exchange

Anonymous (anonymous@undisclosed.example.com) — 2023-07-21T06:04:27+00:00

HAProxy and Exchange * HAProxy configuration for Windows Exchange Server 2016/2019 * Load Balancer for Exchange 2019, 2016 and 2013 with HAProxy * Exchange 2013/2016: Switching from Zen Load Balancer to HAProxy * Load Balancing Microsoft Exchange 2016 * Exchange Client Access services * Load Balancing in Exchange 2016 * Microsoft Exchange 2013 Load Balancing with HAProxy

Kickstart and network install

Anonymous (anonymous@undisclosed.example.com) — 2023-07-17T11:18:44+00:00

Kickstart and network install Means to automatically install RHEL-based Linux distros, and Fedora * RHEL7 Kickstart Syntax Reference * RHEL7 Boot Options * PyKickstart documentation (RHEL8 commands) * OL8 Creating a Network Installation Setup

Linux Automatic Network Install

Anonymous (anonymous@undisclosed.example.com) — 2024-05-15T09:53:26+00:00

Linux Automatic Network Install Purpose: to install Linux automatically unattended, without any manual user input during the process. This can be used in further automation using tool like Ansible. It should create a VM and obtain its MAC address from the virtualization environment, or reach the BMC and obtain a MAC address of the physical server. Then, knowing this info, it can generate all the boot configuration and installation scripts and wait for the

Linux crypto boot

Anonymous (anonymous@undisclosed.example.com) — 2026-01-23T10:11:26+00:00

Linux crypto boot * Clevis is a pluggable framework for automated decryption. It can be used to provide automated decryption of data or even automated unlocking of LUKS volumes. * Tang is a server for binding data to network presence. * Mandos is a system for allowing servers with encrypted root file systems to reboot unattended and/or remotely.

Math

Anonymous (anonymous@undisclosed.example.com) — 2023-07-19T10:00:28+00:00

Math * Stability_theory * Lorenz_system * Banach_fixed-point_theorem * Differential Equations — Fixed Points and Stability * Chapter 2: Transport phenomena in fluid dynamics * Math 24 * The size of Mandelbrot bulbs

Oracle Database 12c Release 2

Anonymous (anonymous@undisclosed.example.com) — 2023-07-17T11:44:42+00:00

Oracle Database 12c Release 2 * Documentation index * Release notes * Administrator's Reference for Linux and UNIX-Based Operating Systems * Installation Guide for Linux * 2 Day DBA — getting started * Oracle Database 12c Release 1 (12.1) Installation On Oracle Linux 8 (OL8) — some hints about what isn't written in the official documentation. In particular, there is no oracle-database-preinstall-12c package available, and this guide suggests to use

Password managers

Anonymous (anonymous@undisclosed.example.com) — 2024-04-04T08:15:35+00:00

Password managers For teams Tried * :!: syspass — PHP, MySQL; installable (Docker, standalone); questionable security model (shared master password which needs to be told to every user); extensive initial setup (there are no default policies and so on);

Proxmox virtualization cluster

Anonymous (anonymous@undisclosed.example.com) — 2024-06-26T06:33:46+00:00

Proxmox virtualization cluster * LXC images collection: Storage Network structure System configuration Bootloader Console redirection, VSP, IPMI SoL At least when installation was done using serial console, the Proxmox installer configures system in a very useful manner, so that bootloader and the kernel appear both on the serial and the VGA console:

Random

Anonymous (anonymous@undisclosed.example.com) — 2025-09-08T11:39:37+00:00

Random * Packages * HP-UX porting & archiving centre — The 100 latest packages * Linux static i386 binaries * Software * pass, the ultimate unix password manager * Barrier, the Synergy successor * m23, the Open Source Network Deployment for Linux * RustDesk, the FOSS remote assistance system * Articles * Why Cyrus IMAP and Cypht * How to validate server SSH key through DNSSEC? * Mapping local users to Kerberos principals with SSSD (also [results of my own expe…

Notes

Anonymous (anonymous@undisclosed.example.com) — 2024-06-12T07:19:26+00:00

Notes * Password managers * Kickstart and network install * Oracle Database 12c Release 2 * Math * Random * Linux crypto boot * HAProxy and Exchange * X509 PKI * Рукоделие * Proxmox virtualization cluster * Linux Automatic Network Install * Data Security Principles and Guidelines

Notes

Anonymous (anonymous@undisclosed.example.com) — 2024-06-12T07:19:13+00:00

X509 PKI

Anonymous (anonymous@undisclosed.example.com) — 2023-08-06T18:38:12+00:00

X509 PKI subjectAlternativeName * GoLinuxCloud * Steps to generate CSR for SAN certificate with openssl * Things to consider when creating CSR with OpenSSL * Provide subjectAltName to openssl directly on the command line * Subject Alternative Name OIDs and ASN1 * What is an Object Identifier (OID) in PKI? How do you obtain an OID? * OID Repository * Is there reserved OID space for internal enterprise CAs? * Inserting Custom OIDs into OpenSSL — contains error or outdat…