New answers tagged

0

There are a couple of things I would change in your virt-install command: First, I would add --machine q35 rather than allowing the default machine type, which emulates the hardware of a very ancient (Windows 95-era) PC. Note that you also need to add a virtio-scsi controller, with --controller scsi,model=virtio-scsi. Second, I would set the disk type of ...


0

This appears to be dependency-related issue with Shadowsocks-Qt5. Per the author, I don't think the logs were from this application. Could it be from Qt? Are you using the official Qt rpms or your own compiled version? Resources https://github.com/shadowsocks/shadowsocks-qt5/issues/728


2

$ which sendmail doesn't return anything. sendmail IS NOT installed in non privileged users' PATH => you observer expected/normal result. sendmail is expected to be executed by other programs like mail which use full/absolute path. can not write to queue directory /var/spool/mqueue-client/ (RunAsGid=115, required=0): Permission denied fix /var/spool/...


1

You're trying to use the obsolete interface alias format (eth0:x) with IPv6, and that doesn't work. These are not actually separate interfaces, and never have been. It has also been recommended not to use them for more than a decade. You should not do so. (And you should ignore the long obsolete warning in the Debian wiki about this method.) The correct ...


0

Have you tried stopping and starting the service? Since you disconnected, there might be a zombie process hanging around. If it can't stop, you could attempt a kill or even a kill -9.


0

Does it work if you run this: echo "Subject: sendmail test" | sudo sendmail /usr/sbin/sendmail -v me@address.com The distinction being that you are running echo as root, but not sendmail. Thus the message: "(RunAsGid=115, required=0): Permission denied" The "115" is the Group Id of your user, and it is expecting "0" (which is roots)


1

On the windows box have you tried disabling your antivirus software? You can also see what you come up with using wireshark. But it sounds like something from both the linux box and the windows box are not seeing eye to eye this might sound kinda dumb but see what happens when you boot into safe mode with networking on the windows box and see if you can ...


0

The package libssl1.0.0 on Debian (or Ubuntu) would refer to version 1.0.x of the Openssl library. In terms of connectivity, I would hope that MSSQL uses TLS 1.2 (or better, but I guess if they use Openssl 1.0 that means TLS 1.2 is the best available protocol version). Regarding the MSSQL packages, are there even packages for Debian? From what I can see ...


2

You are just missing the signing keys; the packages in the new release are signed using new keys. You can get the keys from a key server and save them as new files in /etc/apt/trusted.gpg.d/: $ sudo gpg --no-default-keyring --keyring gnupg-ring:/etc/apt/trusted.gpg.d/debian-archive-buster-automatic.gpg --keyserver keyserver.ubuntu.com --recv ...


1

To receive mail, you don't need a PTR record. However, to send mail you do need a pointer record Receiving mail on a dynamic IP address risks incoming messages getting lost when the IP address changes. If you have I dynamic IP address, I recommend using a relay server for outgoing mail. You could use your VPS server as an incoming and outgoing relay. ...


2

You are on Debian 10 (buster), but the link you showed is for Debian 9 (stretch). OpenJDK is on version 11 for Buster and OpenJDK 8 is not available. https://packages.debian.org/buster/openjdk-11-jdk If you need this, use a docker image based on Stretch.


1

Dropbear uses a binary format for storing the key and has no second file for storing the public key, especially not in a human-readable form. The program dropbearkey is responsible for key generation but will also display the public key for the binary key file. The -y switch is important for reading the file, not writing it! $ sudo dropbearkey -y -f /etc/...


0

OK, finally have found a problem. It was my laptop poor performance. I have tested it now on intel core i7 client and achieved 285Mbit/s. It coud be more but i7 still is bottleneck: speed: 285Mbit/s client side cpu usage 95% server side cpu usage 14% Greetrings. Kris


0

Thanks to @Zoredache, the following works for me: root@debian:~# apt-get remove mesa-va-drivers va-driver-all va-driver-all:i386 Reading package lists... Done Building dependency tree Reading state information... Done Package 'mesa-va-drivers' is not installed, so not removed The following packages were automatically installed and are no longer required: ...


1

According to: https://www.linuxquestions.org/questions/debian-26/how-to-check-why-%27checkinstall%27-is-no-longer-available-in-%27testing%27-424319/ and https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878487 there is some issue with the package and it will/should be released for Debian Buster soon. Package availability can be view here: https://...


1

There is no such package named nginx-extras in the official nginx apt repository, which you have chosen to use. That name is a Debian name only, and refers to Debian's custom build of nginx with a variety of third party modules included. The official nginx repo contains only nginx, which contains most nginx modules, and some separate module packages nginx-...


0

I found what the problem was, the original sources.list is as follows: # # deb cdrom:[Debian GNU/Linux 10.0.0 _Buster_ - Official amd64 DVD Binary-1 20190706-10:24]/ buster contrib main deb cdrom:[Debian GNU/Linux 10.0.0 _Buster_ - Official amd64 DVD Binary-1 20190706-10:24]/ buster contrib main deb http://security.debian.org/debian-security buster/...


1

this seems to be a common problem with upgrading to buster, sudo systemctl restart sshd (or just reboot)


1

If you only added the plain URL, then your /etc/apt/sources.list is invalid. An example sources.list for buster with the main, contrib and non-free repositories would be: deb http://deb.debian.org/debian buster main contrib non-free deb http://deb.debian.org/debian-security/ buster/updates main contrib non-free deb http://deb.debian.org/debian buster-...


1

I'm not sure what you mean by locking down to a folder, but I think you're talking about permissions here. Here is a great piece describing permissions in Linux and how to manage them. You can add a new user using this command: adduser username Once the user has been added, you can assign the relevant permissions.


0

In /etc/ssh/sshd_config file add this: Match user myuser PasswordAuthentication yes ChrootDirectory /home/myuser/serverfolder X11Forwarding no AllowTcpForwarding no ForceCommand internal-sftp Note that you also have change this: Subsystem sftp /usr/lib/openssh/sftp-server to this Subsystem sftp internal-sftp in the same /etc/ssh/sshd_config ...


0

Apparently, it was TOO barebones. Setting static hostname and putting it in hosts with valid IP address did the trick. I found this out by executing rpcinfo -p status, and getting back status: RPC: Unknown host, which implies that the hostname of the server has no match in DNS entries.


1

Use the LocationMatch directive, which allows specifying a regular expression as a location, like this: <VirtualHost *:80> ServerName your.server.name (...) <LocationMatch "^/[^/]*"> Require all denied </LocationMatch> </VirtualHost> This will block all access which begins with a /, but does not contain any / ...


1

There are several ways to limit the access to a certain path, but here's one example: Make use of the <Location> tag. For example: <VirtualHost "*:80"> DocumentRoot "/path/to/blah" ServerName blah.blah.blah <Location "/somepath"> Require all denied </Location> </VirtualHost> You could also use the ...


0

you may want to check if there is an environment file. in Debian based systems this would be found in /etc/default/$file (not sure what actual file name is) on CentOS/RHEL based systems it would be found in /etc/sysconfig/httpd... I'm *adding this answer since I had this issue and a format is not an option... So for whoever may stumble across this I had ...


0

Your configuration deviates from what is common and expected by mail clients: You are offering STARTTLS on all smtpd ports. Your mail client simply quits (I suspect because it was not configured for this setup). Typically, you would offer clean TLS on Port 465 - while expecting clients to first say STARTTLS on port 25 and 587. Any modern mail clients would ...


-1

Here, netnomada maybe point the solution: https://www.cyberciti.biz/open-source/tip-how-to-use-when-openvpn-systemd-based-server-start-to-refuse-on-boot/


0

Problem partially solved by allowing encrypted password transmission on server-side thanks to this tutorial Dovecot Wiki.


0

To get accurate times for "recent" entries in dmesg, you could convert the dmesg timestamps to real time with some hacking of the output. By "recent", I mean times after the last suspend/resume, since (as others already pointed out) suspend times are not counted in the dmesg timestamp. But if you need it often, like on a notebook, you could put something ...


5

Try to create systemd file for nifi, below is example please change path/user/group accordingly. $ sudo vi /etc/systemd/system/nifi.service [Unit] Description=Apache NiFi After=network.target [Service] Type=forking User=nifi Group=nifi ExecStart=/opt/nifi-latest/bin/nifi.sh start ExecStop=/opt/nifi-latest/bin/nifi.sh stop ExecRestart=/opt/nifi-latest/bin/...


1

Debian 10 uses the systemd. Just use systemctl enable nifi.service command to enable autorun of service. Also the systemd has series of articles - Systemd for administrators. Highly recommend to read it.


1

Please add more details like how you are trying to execute. take a look on below example which check if file contain up or not. This is generic way. vrrp_script <name> { script "ping -c1 google.com" interval 2 weight 0 } track_script { <name> #Call the name } For more reference please check ...


0

<VirtualHost *:80> ServerName sale.com Include /etc/apache2/sites-available/sale.com-domainlist.txt Include /etc/apache2/sites-available/sale.com-domainlistwww.txt DocumentRoot /var/www/sale.com <Directory /var/www/sale.com> Options -Indexes +FollowSymLinks AllowOverride All </Directory> </VirtualHost> The above configuration works ...


0

To give a user (e.g. bob) read-permission for all folder in the /tmp/myfiles-directory: 1.) install acl: sudo apt-get install acl (after running apt-get update) 2.) give the user "bob" read-permission for eveything in (and including) the /tmp/myfiles-directory: setfacl -m user:bob:r -R /tmp/myfiles 3.) view the permissions on /tmp/myfiles with: getfacl ...


1

Well in the end I solved it myself, I don't know how it's related but in case anyone else faces the same issue. I changed my fstab from: /dev/vda1 / ext4 defaults 1 1 to: /dev/vda1 / ext4 defaults 0 1 And for some reason that solved the issue. I found it by trying a public KVM template from ...


0

Just to mention to anyone who have this error, or other on apache with https have to add Listen 443 on my apache conf


2

Please refer to the following article: https://access.redhat.com/solutions/4122011 The short answer is that it's related to the last kernel update. They suspect the following commit to be related to the LACP issue: https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=ea53abfab960909d622ca37bcfb8e1c5378d21cc Until the solution will ...


0

Installing ifupdown2 reduced the network time to ~6 seconds. 5.974s networking.service 1.904s smb.mount 773ms nftables.service 552ms systemd-logind.service 208ms systemd-journald.service 205ms dev-nvme0n1p2.device 96ms systemd-udev-trigger.service 90ms lvm2-monitor....


1

Did you check if systemd-networkd-wait-online.service is disabled? """systemd-networkd-wait-online is a oneshot system service (see systemd.service(5)), that waits for the network to be configured. By default, it will wait for all links it is aware of and which are managed by systemd-networkd.service(8) to be fully configured or failed, and for at least ...


0

You don't need up vconfig... statements in the enp2s0f1 section of the interfaces file. Vlan interfaces will be created at bring up corresponded interfaces automatically. For better control use ACCEPT/DROP all instead DROP/ACCEPT all. In your case the rules will be look like: # allow replies and port forwarding iptables -A FORWARD -m conntrack --ctstate ...


1

SPF / DKIM / DMARC won't necessarily solve this problem, perhaps better to find a way of adding a header (tag) to the freshdesk emails that you can use header checks to validate if the email is genuine. i.e. email delivered via sendgrid and tagged with the secret freshdesk tag is genuine, email sent via sendgrid without the tag is not and can be binned....


Top 50 recent answers are included