Contemporary Linux Networking
Many folks and organizations are running their own Certificate Authority (CA) internally, to manage certificates for internal services and (infrastructure) devices, which won t ever be exposed to regular users. Some manage those CAs manually, e.g., via OpenSSL directly, or via tools like easyrsa, cfssl, etc. In the Freifunk Hochstift infrastructure, we use an internal CA Continue reading Help, my…
After I upgraded my IRC-host to the next Debian release, I rebooted the box, restarted the IRC and mail client to get things back up again, and wanted to log into my mailbox again. I pasted the password from the password store into mutt (running inside screen) as I had always done and got login Continue reading Bracketed-paste or why does my mutt-in-screen-IMAP-login not work anymore?
Many, many years ago, I was introduced to Hammerfall, and especially their album Crimson Thunder, with the song of the same name. At that time, we did a lot Freifunk installations and crimped a lot of cables. On the way back from one of those installations, I heard said album, and it struck me: They Continue reading Crimpson Thunder
With WireGuard having found its way into the Linux kernel and all major distributions out there, we ve got a pretty powerful new card into our decks, that we can play when we re in need of a VPN solution. The website emphasizes the aim for performance, simplicity, and avoiding headaches, which reality seems to mostly agree Continue reading WireGuard and VRFs
Linux has been a first class networking citizen for quite a long time now. Every system running a Linux kernel out of the box has at least three routing tables and is supporting multiple mechanisms for advanced routing features from policy based routing (PBR), to VRFs(-lite), and network namespaces (NetNS). Each of these provide different Continue reading Advanced Linux Routing – VRFs
Linux has been a first class networking citizen for quite a long time now. Every system running a Linux kernel out of the box has at least three routing tables and is supporting multiple mechanisms for advanced routing features from policy based routing (PBR), to VRFs(-lite), and network namespaces (NetNS). Each of these provide different Continue reading Advanced Linux Routing Policy-based…
Linux has been a first class networking citizen for quite a long time now. Every system running a Linux kernel out of the box has at least three routing tables and is supporting multiple mechanisms for advanced routing features from policy based routing (PBR), to VRFs(-lite), and network namespaces (NetNS). Each of these provide different levels Continue reading Linux Routing Fundamentals
If you are like me and have some systems with fully encrypted disks, where you can t or don t want to be physically present for a system (re)boot, or which don t have OOBM/KVM/CIMC access, this might be for you! Having a look at how the generic disk decryption works on Debian-based systems, but likely also on Continue reading Unlocking your LUKS encrypted disks via SSH
Although NetBox has a pretty nice data model and a lot of things found in common environments can be modelled pretty well, it sometimes reaches its limits. In such situations, you re faced with multiple options to go forward Introduce (a number of) custom field(s) to extend the data model Write a plugin to extend the Continue reading Semantic Tags in NetBox
Recently I wrote a script which aids in provisioning things inside our network, which will do some sanity checks and if all is good set up a number of things (prefixes, IPs, sub-interfaces, IPs on them, etc.). The reason to do this inside a script is to do this in an atomic operation, so either Continue reading NetBox scripts now with clean error handling