Recent content on kruyt.org
Abstract Large Language Models (LLMs) are reshaping software development by helping with everything from auto-completion to full-scale code generation. While these tools significantly boost productivity, they also introduce new security challenges. In this post, we explore how malicious modifications to an LLM can result in hidden backdoor code being injected into projects. Through…
PyPlexitas is a Python script that is designed to create an open-source alternative to Perplexity AI, a tool that provides users with detailed answers to their queries by searching the web, extracting relevant content, and using advanced language models to generate responses. The script operates by first taking a user’s query and using search engines like Bing or Google to find relevant web…
I still remember the day I got Command and Conquer Red Alert as a birthday gift. I’ve spent too many hours to count playing this game over the years. These days, I still enjoy it from time to time, teaming up with my son or work buddies for a match. Today, thanks to OpenRA, an open-source version of Red Alert is available, not to mention Dune and Tiberian Sun. We usually play these games…
Smart EV Charging with NodeRed
OpenSSL vulnerability don’t forget your containers
Building my own mechanical numpds
kscb is a sidecar container, that is based upon rclone with a crontab. The sidecar container in the pod has access to the PV mount and the data on it, Rclone can then easily copy/sync to a public/private storage provider
Kubernetes is deprecating Docker as a container runtime after v1.20. Don’t Panic 😱 Docker containers are still supported, but the dockershim/Docker, the layer between Kubernetes and containerd is deprecated and will be removed from version 1.22+. https://kubernetes.io/blog/2020/12/02/dont-panic-kubernetes-and-docker/" So if you are running docker you need to change to a supported container…
Running a web server in Kubernetes is easy, but a mail server is more challenging. Most of the challenges have to do with your IP infrastructure, ingress, and load balancer within Kubernetes. Here are things I learned when deploying a mail server based on Postfix on Kubernetes with MetalLB and NGINX ingress. If you have a different setup, things might or might not apply. Prevent mail loops on your…
This is a simple minimal but highly configurable Varnish caching service for Kubernetes. This should be placed between your ingress and your application service. simple setup It can be used in combination with multiple ingresses and application services at the same time. multiple ingress and services Setup Apply the following yaml file, replicas and environment variables can be adjusted to your…
To get metrics from your FortiGate in Grafana using Telegraf and InfluxDB. Enable SNMP on your FortiGate Put the following telegraf config in your /etc/telegraf/telegraf.d directory Edit the the agent IP and community string as appropriate # # Retrieves SNMP values from remote agents [[inputs.snmp]] agents = [ '192.168.1.1:161' ] timeout = '10s' retries = 3 version = 2 community = 'monitoring' #…
Today I passed the Red Hat RHCSA exam with the maximum 300/300 100% score! 😁 I had a good feeling during the exam, and after about an hour I got the following email from Red Hat. The results of your recent EX200 Red Hat Certified System Administrator Exam are reported below. Passing score: 210 Your score: 300 Result: PASS Congratulations -- you have earned the Red Hat Certified System…
I am a big fan of LXD and lot of my ‘home infra’ and VPS’s are all running LXD container. Also I am using LXD at work to create test setup for al sorts of Linux OS’s and applications. Most “free” Linux OS’s are already in the LXD image repository. But sometime’s I need a non free Linux OS. Such as SUSE Linux Enterprise Server, or SLES for short.…
In this post I will show how I use GitLab CICD with Ansible. I’ll show the pipelines and how the merge requests are handled for full control and auditing. GitLab flow The GitLab flow is as following, you have one or more dev/working branches. To push code to the staging environment you do this via an merge request in GitLab, en to get this code in to production. Again via a merge request…
A couple of weeks ago I gave myself a 3d print for a present. 😝 I opted for a Creality Ender 3 pro and order it from Ali Express. With the first print I was amazed how good the quality now is on these budget printers. My last experience with 3d printing was about 10 years ago and the quality was quite different then on budget printers. So I am quite happy with this printer.
In this post I show a few of my tip’s for using Varnish for caching and Ghost together. Don’t cache everything Caching is good, but we don’t want to cache everything in ghost, we don’t want to cache the admin and preview pages in ghost. Add the following in the sub vcl_recv part. # Did not cache the admin and preview pages if ( req.url ~ '/(admin|p|ghost)/' ) { return (…
In my previous post I showed how to install ZeroTier on the EdgeRouter, after installing we need to rename the ZeroTier interface to ethx interface to show up in EdgeOS. ZeroTier on a Ubiquiti EdgeRouter With the new EdgeOS version 2 firmware for the EdgeRouter it is now possible to install ZeroTier on this router. Dennis Kruyt Kruyt.org Now I adopted EdgeOS (which is basically VyOS/Vyatta running…
At my work in the past I needed to trouble shoot and tune MySQL installations. Here are some best practises I have used.
Some option in Linux that can be used for disk related performance tuning.
I’ve been trying to receive an email from Instagram, but it wasn’t coming through. Upon inspecting my mail logs, I encountered the following log message: Sep 13 03:50:51 mailserver postfix/smtpd[28105]: NOQUEUE: reject: RCPT from 66-220-155-156.mail-mail.facebook.com[66.220.155.156]: 550 5.7.1 <dennis@kruyt.org>: Recipient address rejected: Message rejected due to: domain owner…
With the new EdgeOS version 2 firmware for the EdgeRouter it is now possible to install ZeroTier on this router.
My Kamado’s This is where the magic happens. Smoked Pork belly Chicken Tandoor style in a Kamado Porchetta Vulcan bread Angus Uruguay Grain Fed Pichana
FortiADC is is a application delivery controllers (loadbalancer). The devices metrics are availalbe via SNMP. So it’s quite easy to collect those and display them in Grafana. Pre Install Make sure you have installed InfluxDB as the time-series database Telegraf as collector first. Optional you can also include the FortiADC logs when they are in elasticsearch. I use the Greylog sollution for…
I have at home a Ziggo cable internet connection. The modem that Ziggo provides is a Arris modem. I have this modem in bridge mode because I have my own router. But I like to get some DOCSIS statistics from this modem. The modem provide these via a kind of web snmp output, but this is not very useful. Ziggo Connect box To parse this output into something more readable I create a crude oneliner…
MOINK Balls? What is a MOINK? The name MOINK is a fusion of the sounds the animals (meat) from which these balls are made, Moo and Oink. Moo for the ground beef and Oink of the bacon of course. The original idea for this is from Larry of the BBQ-Brethren Forum . This is my twist on that. Ingredients • 750 gram of ground beef• 40 gram of Parmesan cheese • One Egg• A couple of garlic cloves• A tea…
At home and at work we are running Zabbix for monitoring, for alerting I use Pushover. There are some scripts that have Zabbix and Pushover integration on share.zabbix.com, but none of them have priority support and have inline image for Pushover. On my GitHub you can find a alertscript for Zabbix and Pushover. Pushover has also a dark theme, but the Zabbix graphs are still light. So there is an…
I have a Solis 5K-G Single Phase Inverter with a Ginlong LAN stick. This stick logs statistics of this inverter every 5 minutes to the Ginlong monitoring pages. Ginlong Solis Inverter I want use those statistics on the Ginlong site for my own analyses en domotica. To get those statistics to my own systems I created a python script that scrapes PV and inverter statistics from the Ginlong monitor…
Apple’s new macOS 10.14 codename Mojave has a nice dark theme, but to change it you need to go click trough multiple screens to change the theme. To switch fast and simple I created a Menu Bar App for this. It does exactly what you see below with a mouse click. To switch theme, click left, to exit click right on the moon/sun icon. The source code you can find on my GitHub page , the app it…
I am looking for a new not so expensive VPS provider. When I was looking arround for something that would suit my needs I came up with ScaleWay and Hetzner as possible candidates.
When I was looking at some Nginx caching settings to improve them on a load balanced static content farm. I noticed that the etag headers difference between servers for the same file when they should be the same. So first what is a etag header? From WikipediA The ETag or entity tag is part of HTTP, the protocol for the World Wide Web. It is one of several mechanisms that HTTP provides for web…
With Huawei Enterprise Access points you have different firmware versions for different deployment scenarios. A FIT version for when you have an Wireless Access Controller (AC). This AC will managed all your AP and you have metrics available from within the AC. Huawei also offers a FAT version of the firmware for the AP. This is an standalone verion and there is no central management and overview…
Recently I got my hands on a nice all flash storage from Huawei, the Dorado 5000. Off course I wanted to see if my Grafana dashboard I created for the Huawei Oceanstor series was also working on the Dorado, most is working, but some mibs are different and not all performance metrics that are availble on the Oceanstor are on the Dorado. So I adjusted the Telegraf and Grafana dashboard to work…
This plugin/script for Telegraf will collect the metrics from LizardFS and stores it into InfluxDB, then you can view your metrics in Grafana on a templated dashboard.
With hackers around every corner, governments wants to read your emails, now a days encryption is a necessity. Now most major sites are only available on https, and more and more IM are using encryption. But what about and old protocol email that is still very popular and we cant go without it any more. How can we increase security for this? Of course you can use S/MIME or PGP and have end to end…
After I logged into Snorby to check some events on our IDS. I notice that one of my sensors didn’t return any events any more into the database. I log in the sensors and I notice that Barnyard2 wasn’t running any more. Barnyard2 parses the Snort logs and inserts the min the database. So I started the service again and after a few minutes it stoped running again. Upon inspection of the…
I manage a couple of storages at work. I got a few Huawei OceanStor storages. v2 as wel v3 storages. There is some commercial tooling from Huawei available to gather metrics, but that didn’t fit my needs. I found out that all or almost all metrics that I need are available via SNMP. So it was not hard to setup a Grafana dashboard with all metrics. Pre install Make sure you have installed…
A couple of weeks ago I discover zswap . zswap is a Linux kernel feature that provides a compressed write-back cache for swapped pages, as a form of virtual memory compression. Instead of moving memory pages to a swap device when they are to be swapped out, zswap performs their compression and then stores them into a memory pool dynamically allocated in the system RAM. Later writeback to the…
Just for fun, try to play music with old floppy drives and an Arduino.
I created a Arduino controled led clock with 60 rgb led’s. This one is inspired by the Equinox Clock from Bram Knaapen. LED strip For the 60 RGB leds I use a string of RGB leds that I order directly from China, each of those leds has a LPD6803 IC. A arduino library for this string can be found at adafruit’s github . Time Keeping For time keeping I am using a a RTC DS1307 that is…
Found an old magnetic card reader. I hooked it up to an Arduino to read magnetic cards.
This is not working any more just for historical purpose. With the inlinefeed plugin you can display and embed RSS/ATOM feeds in your Wordpress posts and pages. You can use the following shortcode within Wordpress: [inlinefeed rss_feed_url="http://feed.xml"] NOTE: From version 2.0 you can only use the shortcode [inlinefeed] , the old style rss:[URL]; doesn’t work anymore! If you upgrade from a…
Flickramio is a Greasemonkey script that put 2 google earth map’s next to the photo if the image is geotagged, so Flickr looks a little more like Panoramio.