101010.pl

2.5 Admins2.5 Admins 250: Better RAIDz?Google bypasses the usual channels to distrust two certificate authorities, Meta’s new escalation in the privacy arms race, Allan gives us the inside details of a new mixed-disk-size ZFS RAID feature, and moving from UniFi gear to TP-Link.<a href="https://2.5admins.com/2-5-admins-250/" rel="nofollow noopener" translate="no" target="_blank">https://2.5admins.com/2-5-admins-250/</a><a href="https://mastodon.social/tags/podcast" class="mention hashtag" rel="nofollow noopener" target="_blank">#podcast</a> <a href="https://mastodon.social/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a> <a href="https://mastodon.social/tags/zfs" class="mention hashtag" rel="nofollow noopener" target="_blank">#zfs</a>

Open Source JobHubLooking for a remote position in <a href="https://fosstodon.org/tags/OpenSource" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenSource</a>? Browse hundreds of jobs in technical and non-technical roles on <a href="https://fosstodon.org/tags/OSJH" class="mention hashtag" rel="nofollow noopener" target="_blank">#OSJH</a> <a href="https://opensourcejobhub.com/jobs/?q=remote&utm_source=mosjh" rel="nofollow noopener" translate="no" target="_blank">https://opensourcejobhub.com/jobs/?q=remote&utm_source=mosjh</a> <a href="https://fosstodon.org/tags/career" class="mention hashtag" rel="nofollow noopener" target="_blank">#career</a> <a href="https://fosstodon.org/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a> <a href="https://fosstodon.org/tags/engineer" class="mention hashtag" rel="nofollow noopener" target="_blank">#engineer</a> <a href="https://fosstodon.org/tags/sales" class="mention hashtag" rel="nofollow noopener" target="_blank">#sales</a> <a href="https://fosstodon.org/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://fosstodon.org/tags/marketing" class="mention hashtag" rel="nofollow noopener" target="_blank">#marketing</a> <a href="https://fosstodon.org/tags/developer" class="mention hashtag" rel="nofollow noopener" target="_blank">#developer</a> <a href="https://fosstodon.org/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevSecOps</a> <a href="https://fosstodon.org/tags/SRE" class="mention hashtag" rel="nofollow noopener" target="_blank">#SRE</a> <a href="https://fosstodon.org/tags/FOSS" class="mention hashtag" rel="nofollow noopener" target="_blank">#FOSS</a>

Stefano MarinelliEver heard of vibe coding? It’s when the code looks fine, tests pass, vibes are good - so it goes to production. Even if it’s wide open to SQL injection.I’ve seen it happen. AI wrote it. Devs trusted it. Management loved it. Nobody understood it.We’re trading skill for speed. And that’s how we lose our freedom.Vibe Coding Will Rob Us of Our Freedom: <a href="https://it-notes.dragas.net/2025/06/05/vibe-coding-will-rob-us-of-our-freedom/" rel="nofollow noopener" translate="no" target="_blank">https://it-notes.dragas.net/2025/06/05/vibe-coding-will-rob-us-of-our-freedom/</a>EDIT: Given the trends and the comments, I wrote something off the cuff about it: <a href="https://my-notes.dragas.net/2025/06/05/when-we-become-cheerleaders-for-our-own-demise/" rel="nofollow noopener" translate="no" target="_blank">https://my-notes.dragas.net/2025/06/05/when-we-become-cheerleaders-for-our-own-demise/</a><a href="https://mastodon.bsd.cafe/tags/ITNotes" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITNotes</a> <a href="https://mastodon.bsd.cafe/tags/ai" class="mention hashtag" rel="nofollow noopener" target="_blank">#ai</a> <a href="https://mastodon.bsd.cafe/tags/coding" class="mention hashtag" rel="nofollow noopener" target="_blank">#coding</a> <a href="https://mastodon.bsd.cafe/tags/data" class="mention hashtag" rel="nofollow noopener" target="_blank">#data</a> <a href="https://mastodon.bsd.cafe/tags/ownyourdata" class="mention hashtag" rel="nofollow noopener" target="_blank">#ownyourdata</a> <a href="https://mastodon.bsd.cafe/tags/programming" class="mention hashtag" rel="nofollow noopener" target="_blank">#programming</a> <a href="https://mastodon.bsd.cafe/tags/IT" class="mention hashtag" rel="nofollow noopener" target="_blank">#IT</a> <a href="https://mastodon.bsd.cafe/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SysAdmin</a>

viq<a href="https://social.hackerspace.pl/tags/Ansible" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ansible</a> has <a href="https://social.hackerspace.pl/tags/molecule" class="mention hashtag" rel="nofollow noopener" target="_blank">#molecule</a> for <a href="https://social.hackerspace.pl/tags/testing" class="mention hashtag" rel="nofollow noopener" target="_blank">#testing</a>. Is there something other than <a href="https://social.hackerspace.pl/tags/TestKitchen" class="mention hashtag" rel="nofollow noopener" target="_blank">#TestKitchen</a> for testing configuration management other than ansible? Or maybe a way to make molecule do it? <a href="https://social.hackerspace.pl/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SysAdmin</a> <a href="https://social.hackerspace.pl/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevOps</a> <a href="https://social.hackerspace.pl/tags/AskFedi" class="mention hashtag" rel="nofollow noopener" target="_blank">#AskFedi</a>

OKDMoin 🙂 ich bin <a href="https://social.tchncs.de/tags/neuhier" class="mention hashtag" rel="nofollow noopener" target="_blank">#neuhier</a>. M36 aus <a href="https://social.tchncs.de/tags/Karlsruhe" class="mention hashtag" rel="nofollow noopener" target="_blank">#Karlsruhe</a>, fahre gern <a href="https://social.tchncs.de/tags/Fahrrad" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fahrrad</a> und mache Fotos von Landschaften, bin <a href="https://social.tchncs.de/tags/Gamer" class="mention hashtag" rel="nofollow noopener" target="_blank">#Gamer</a> und <a href="https://social.tchncs.de/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> user und <a href="https://social.tchncs.de/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a> Letzte Woche habe ich zwei Touren von Karlsruhe nach Bad Wildbad im <a href="https://social.tchncs.de/tags/Schwarzwald" class="mention hashtag" rel="nofollow noopener" target="_blank">#Schwarzwald</a> und zurück mit 14kg Gepäck gemacht.Aktuell plane ich mit Komoot eine längere <a href="https://social.tchncs.de/tags/Radtour" class="mention hashtag" rel="nofollow noopener" target="_blank">#Radtour</a> nach NRW in meine alte Heimat und warte nur noch auf das passende Wetter 🙄 Bis dahin vertreibe ich mir die Zeit mit <a href="https://social.tchncs.de/tags/Games" class="mention hashtag" rel="nofollow noopener" target="_blank">#Games</a> wie <a href="https://social.tchncs.de/tags/TempestRising" class="mention hashtag" rel="nofollow noopener" target="_blank">#TempestRising</a> oder <a href="https://social.tchncs.de/tags/EldenRing" class="mention hashtag" rel="nofollow noopener" target="_blank">#EldenRing</a> ...und mit Mastodon :mastodon:

Jonathan MatthewsFolks who know "rsync -F" because they already use it -- am I right in thinking that it adds these behaviours to a sync:- recursively look for .rsync-filter files in every directory in the copy source, including the top-level- apply the filters they each contain to the directory and subdirectories rooted at the same level that each file was found- exclude those .rsync-filter files from being copied to the destination Is that right? <a href="https://fosstodon.org/tags/rsync" class="mention hashtag" rel="nofollow noopener" target="_blank">#rsync</a> <a href="https://fosstodon.org/tags/sync" class="mention hashtag" rel="nofollow noopener" target="_blank">#sync</a> <a href="https://fosstodon.org/tags/data" class="mention hashtag" rel="nofollow noopener" target="_blank">#data</a> <a href="https://fosstodon.org/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a> <a href="https://fosstodon.org/tags/filesystem" class="mention hashtag" rel="nofollow noopener" target="_blank">#filesystem</a> <a href="https://fosstodon.org/tags/filesystems" class="mention hashtag" rel="nofollow noopener" target="_blank">#filesystems</a>

Michael Lucas :flan_set_fire:Prepping <a href="https://io.mwl.io/tags/n4s2e" class="mention hashtag" rel="nofollow noopener" target="_blank">#n4s2e</a> for tech review.'What does the word “firewall” mean today? Like “computer” and “security” and “hope,” the word “firewall” means nothing. NOTHING.' <a href="https://io.mwl.io/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a>

Stefano MarinelliServer delivered - another successful migration from Linux to FreeBSD.<a href="https://mastodon.bsd.cafe/tags/RunBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#RunBSD</a> <a href="https://mastodon.bsd.cafe/tags/FreeBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeBSD</a> <a href="https://mastodon.bsd.cafe/tags/IT" class="mention hashtag" rel="nofollow noopener" target="_blank">#IT</a> <a href="https://mastodon.bsd.cafe/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SysAdmin</a> <a href="https://mastodon.bsd.cafe/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a>

PheonixOkay, so I wanted to share a little incident from a few months back that really hammered home the power of knowing your Linux internals when things go sideways. I got a frantic call, "something weird is going on with our build server, it's acting sluggish and our monitoring is throwing odd network alerts." No fancy EDR on this particular box, just the usual ssh and bash. My heart always sinks a little when it's a Linux box with vague symptoms, because you know it's time to get your hands dirty.First thing I did, even before reaching for any specific logs, was to get a quick snapshot of the network. Instead of netstat, which honestly feels a bit dated now, I immediately hit ss -tunap. That p is crucial cause it shows you the process and user ID for each connection. What immediately jumped out was an outbound TCP connection on a high port to a sketchy-looking IP, and it was tied to a process that definitely shouldn't have been making external calls. My gut tightened. I quickly followed up with lsof -i just to be super sure no deleted binaries were clinging on to network connections.With that IP and PID in hand, I moved to process investigation. pstree -ap was my next stop. It showed the suspicious process, and more importantly, its parent. It wasn't a child of systemd or a normal service. It was spawned by a build script that shouldn't have been executing anything like this. That hierarchical view was key. Then, to really understand what this thing was doing, I dared to strace -p <PID>. Watching the system calls unfurl was like watching a movie of its malicious intent: it was reading from /etc/passwd, making connect() calls, and trying to write to some odd /tmp directories. Simultaneously, I checked ls -l /proc/<PID>/exe to confirm the actual binary path (it was indeed in /tmp) and /proc/<PID>/cwd to see its working directory. No doubt, this was a rogue process.Knowing it was a fresh infection, I immediately shifted to the filesystem. My go-to is always find / -type f -newermt '2 days ago' -print0 | xargs -0 ls -latr. This quickly pulls up any files modified in the last 48 hours, sorted by modification time. It's often where you find dropped payloads, modified configuration files, or suspicious scripts. Sure enough, there were a few more binaries in /tmp and even a suspicious .sh script in a developer's home directory. I also scanned for SUID/SGID binaries with find / -perm /6000 just in case they'd dropped something for privilege escalation. And while stat's timestamps can be tampered with, I always glance at atime, mtime, and ctime on suspicious files; sometimes, a subtle mismatch offers a tiny clue if the attacker wasn't meticulous.The final piece of the puzzle, and often the trickiest, is persistence. I checked the usual suspects: crontab -l for root and every other user account I could find. Then I cast a wider net with grep -r "suspect_domain_or_ip" /etc/cron.* /etc/systemd/system/ /etc/rc.d/ and similar common boot directories. Sure enough, a new systemd timer unit had been added that was scheduled to execute the /tmp binary periodically. Finally, I didn't forget the user dotfiles (~/.bashrc, ~/.profile, etc.). It’s surprising how often an attacker will drop a malicious alias or command in there, assuming you won't dig deep into a developer's setup.Long story short, we quickly identified the ingress vector, isolated the compromise, and cleaned up the persistence. But what really stuck with me is how quickly you can triage and understand an incident if you're comfortable with these fundamental Linux commands. There's no substitute for getting your hands dirty and really understanding what strace is showing you or why ss is superior to netstat in a high-pressure situation. These tools are your best friends in a firefight.<a href="https://infosec.exchange/tags/linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#linux</a> <a href="https://infosec.exchange/tags/incidentresponse" class="mention hashtag" rel="nofollow noopener" target="_blank">#incidentresponse</a> <a href="https://infosec.exchange/tags/blueteam" class="mention hashtag" rel="nofollow noopener" target="_blank">#blueteam</a> <a href="https://infosec.exchange/tags/forensics" class="mention hashtag" rel="nofollow noopener" target="_blank">#forensics</a> <a href="https://infosec.exchange/tags/shell" class="mention hashtag" rel="nofollow noopener" target="_blank">#shell</a> <a href="https://infosec.exchange/tags/bash" class="mention hashtag" rel="nofollow noopener" target="_blank">#bash</a> <a href="https://infosec.exchange/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/threathunting" class="mention hashtag" rel="nofollow noopener" target="_blank">#threathunting</a> <a href="https://infosec.exchange/tags/lessonslearned" class="mention hashtag" rel="nofollow noopener" target="_blank">#lessonslearned</a>

SheldonMy favorite kind of mass email to send is the kind that tells people to not reply to the email if they don’t have any changes. Predictably, half the people will flood my inbox with “looks good to me!”<a href="https://sfba.social/tags/today" class="mention hashtag" rel="nofollow noopener" target="_blank">#today</a> <a href="https://sfba.social/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a> <a href="https://sfba.social/tags/devlife" class="mention hashtag" rel="nofollow noopener" target="_blank">#devlife</a>

LouisCloudflare or not Cloudflare? I have to confess I've been using it for a while, and while I do enjoy its multiple benefits (proxy, WAF, DNS management, security rules, automatic email obfuscation...), I dont like the idea of transmitting all the data through a 3rd party, especially based in the USA.Mastodon tech people, I summon you!What are your thoughts? Do you use Cloudflare? Or is it a non negociable no to you? Have you tried European based solutions like Bunny.net? Do you just live without such tools?I'm interested in hearing your thoughts! Boosts appreciated :boost_request:<a href="https://piaille.fr/tags/cloudflare" class="mention hashtag" rel="nofollow noopener" target="_blank">#cloudflare</a> <a href="https://piaille.fr/tags/dataprivacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#dataprivacy</a> <a href="https://piaille.fr/tags/proxy" class="mention hashtag" rel="nofollow noopener" target="_blank">#proxy</a> <a href="https://piaille.fr/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a> <a href="https://piaille.fr/tags/bunny" class="mention hashtag" rel="nofollow noopener" target="_blank">#bunny</a>

Jonathan MatthewsHow are folks managing <a href="https://fosstodon.org/tags/FreeBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeBSD</a> systems at scale? As in: from just after you've been given access as root, and then ongoing system management operations as needed - across a large estate of non-homogenous machines. <a href="https://fosstodon.org/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a> <a href="https://fosstodon.org/tags/configmanagement" class="mention hashtag" rel="nofollow noopener" target="_blank">#configmanagement</a> <a href="https://fosstodon.org/tags/devops" class="mention hashtag" rel="nofollow noopener" target="_blank">#devops</a>

dan_nanniIf I had to pick a personal favorite among lesser-known Linux commands, it would be lsof. It’s my go-to tool for discovering which files are open and which processes are using them. Since everything in Linux is treated as a file, lsof proves to be surprisingly powerful and endlessly usefulHere are lsof command examples 😎👇 <a href="https://mastodon.social/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a> <a href="https://mastodon.social/tags/opensource" class="mention hashtag" rel="nofollow noopener" target="_blank">#opensource</a>Find pdf books with all my <a href="https://mastodon.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> related infographics at <a href="https://study-notes.org" rel="nofollow noopener" translate="no" target="_blank">https://study-notes.org</a>

DevOps WeeklyWe built a list of 100+ SaaS tools that actually support SAML, OIDC, or SCIM<a href="https://ssojet.com/b2b-sso-directory/" rel="nofollow noopener" translate="no" target="_blank">https://ssojet.com/b2b-sso-directory/</a>Discussions: <a href="https://discu.eu/q/https://ssojet.com/b2b-sso-directory/" rel="nofollow noopener" translate="no" target="_blank">https://discu.eu/q/https://ssojet.com/b2b-sso-directory/</a><a href="https://mastodon.social/tags/devops" class="mention hashtag" rel="nofollow noopener" target="_blank">#devops</a> <a href="https://mastodon.social/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a>

Michael Lucas :flan_set_fire:The sponsorships on "Networking for System Administrators, 2nd ed" close TOMORROW.Get your name in the book, in either epub or print. Print sponsors will get a challenge coin. (Possibly the final coin, depending on tariffs.) <a href="https://io.mwl.io/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a> <a href="https://io.mwl.io/tags/n4sa2e" class="mention hashtag" rel="nofollow noopener" target="_blank">#n4sa2e</a> <a href="https://www.tiltedwindmillpress.com/product/n4sa2e-sponsor/" rel="nofollow noopener" translate="no" target="_blank">https://www.tiltedwindmillpress.com/product/n4sa2e-sponsor/</a>

Peter N. M. HansteenIn a little more than a week, people like me will be heading to <a href="https://mastodon.social/tags/Ottawa" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ottawa</a> for <a href="https://mastodon.social/tags/bsdcan" class="mention hashtag" rel="nofollow noopener" target="_blank">#bsdcan</a>. You can still register for the conference at <a href="https://www.bsdcan.org/2025/registration.html" rel="nofollow noopener" translate="no" target="_blank">https://www.bsdcan.org/2025/registration.html</a>, and browse <a href="https://www.bsdcan.org/" rel="nofollow noopener" translate="no" target="_blank">https://www.bsdcan.org/</a> for info. <a href="https://mastodon.social/tags/openbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#openbsd</a> <a href="https://mastodon.social/tags/netbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#netbsd</a> <a href="https://mastodon.social/tags/freebsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#freebsd</a> <a href="https://mastodon.social/tags/unix" class="mention hashtag" rel="nofollow noopener" target="_blank">#unix</a> <a href="https://mastodon.social/tags/development" class="mention hashtag" rel="nofollow noopener" target="_blank">#development</a> <a href="https://mastodon.social/tags/networking" class="mention hashtag" rel="nofollow noopener" target="_blank">#networking</a> <a href="https://mastodon.social/tags/devops" class="mention hashtag" rel="nofollow noopener" target="_blank">#devops</a> <a href="https://mastodon.social/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a> <a href="https://mastodon.social/tags/experience" class="mention hashtag" rel="nofollow noopener" target="_blank">#experience</a> <a href="https://mastodon.social/tags/conference" class="mention hashtag" rel="nofollow noopener" target="_blank">#conference</a>

anarcatTraffic meter per ASN without logs <a href="https://anarc.at/blog/2025-05-30-asncounter" rel="nofollow noopener" translate="no" target="_blank">https://anarc.at/blog/2025-05-30-asncounter</a> <a href="https://kolektiva.social/tags/debian" class="mention hashtag" rel="nofollow noopener" target="_blank">#debian</a>-planet <a href="https://kolektiva.social/tags/python" class="mention hashtag" rel="nofollow noopener" target="_blank">#python</a>-planet <a href="https://kolektiva.social/tags/software" class="mention hashtag" rel="nofollow noopener" target="_blank">#software</a> <a href="https://kolektiva.social/tags/network" class="mention hashtag" rel="nofollow noopener" target="_blank">#network</a> <a href="https://kolektiva.social/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a> <a href="https://kolektiva.social/tags/tor" class="mention hashtag" rel="nofollow noopener" target="_blank">#tor</a> <a href="https://kolektiva.social/tags/censorship" class="mention hashtag" rel="nofollow noopener" target="_blank">#censorship</a> <a href="https://kolektiva.social/tags/python" class="mention hashtag" rel="nofollow noopener" target="_blank">#python</a>

Larvitz :fedora: :redhat:Okay, sometimes my brain tricks me, when it's tired :facepalm: I reinstalled my web-server with Red Hat Enterprise Linux (RHEL) 10, a week ago. It was previously running on CentOS Stream 9.Now I tried to connect the system to my Red Hat Satellite instance, to include it into my centralized patch-management. But no matter, what I tried, the repositories "BaseOS" and "Appstream" always showed "Disabled" in the Satellite UI and on the server they didn't show up in /etc/yum.repos.d and in dnf repolist ...Long story short: # lscpu | grep -i arch Architecture: aarch64Of course, it's an ARM server, duh! And my Satellite/Foreman server only has the repositories for x86_64 synced.This relaly should not have taken me *that* long to figure out :facepalm: <a href="https://burningboard.net/tags/linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#linux</a> <a href="https://burningboard.net/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a> <a href="https://burningboard.net/tags/rhel" class="mention hashtag" rel="nofollow noopener" target="_blank">#rhel</a> <a href="https://burningboard.net/tags/redhat" class="mention hashtag" rel="nofollow noopener" target="_blank">#redhat</a> <a href="https://burningboard.net/tags/devops" class="mention hashtag" rel="nofollow noopener" target="_blank">#devops</a>

Roni LaukkarinenStory of my life.<a href="https://mementomori.social/tags/Servers" class="mention hashtag" rel="nofollow noopener" target="_blank">#Servers</a> <a href="https://mementomori.social/tags/Sysops" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sysops</a> <a href="https://mementomori.social/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SysAdmin</a>

C-richIT job market / depressing

Recent searches

Search options

Administered by:

Server stats:

#sysadmin