Sysadmin

This magazine is not receiving updates (last activity 2 day(s) ago).

catloaf , in Would love some feedback on this UniFi setup

Have you done a site survey? How big is the place, and what are the walls made of? If it's easy to cover, you might just get a cheapo Netgear, and set it and forget it.

I'd also look at mesh equipment (but NOT just repeaters). They're pretty good these days.

I hear Unifi equipment being recommended a lot less these days. And I imagine that you want something that's not going to take management and supervision, preferring something that will Just Work, especially if you're not nearby to fix it when it breaks.

Randelung OP ,

You're probably right. The setup they have now is an old netgear nighthawk with an AP to cover the second story. It works fine if it works, but it needs to be restarted when the prepaid internet shuts off and comes back. My dad rewired the AP and then wondered why it didn't work anymore.

There's the option of cameras where they can't make up their mind. If cameras I'd like an integrated system for everything, which is why I was looking for a modular approach. But if I use a Dream Router that's not even the case anymore, either.

I guess I have to tell them - once again - that we have to sit down and make up their minds about what they want. Then I can make up mine about what debugging options I want.

Cheers.

kevin2107 , in r/sysadmin and the size of this community

Good. I can't stand the insane communities on Reddit. It's full of clickbait and grifters. There's small communities are what the Internet is about. We should be happy.

possiblylinux127 OP ,
@possiblylinux127@lemmy.zip avatar

I agree that most of Reddit is like that. However, r/sysadmin is pretty good in my experience.

Kiernian ,

Except for the -sysadmin IRC channel. Gibby's always shilling his "fart in a jar" NFT.

IsThisAnAI , in r/sysadmin and the size of this community

Please for the love of God do not become the Internet door to door preacher trying to convert. It's obnoxious and a lost cause.

While this place is run by tankies and filled with 30 Linux thigh high photos you will never have a large community here.

Railing5132 , in r/sysadmin and the size of this community

The absolute only thing I go back to reddit for is the patch Tuesday megathread. I do dearly wish that info was here so I could cut ties completely.

possiblylinux127 OP ,
@possiblylinux127@lemmy.zip avatar

I'm down to setup a bot

Railing5132 ,

We'd just need to lure a few suckers testers on the order of Taco to expose all the gotchas.

Brkdncr , in r/sysadmin and the size of this community

I disagree. Merge with techsupport or even technology. Critical mass needs to be natural.

RootBeerGuy ,
@RootBeerGuy@discuss.tchncs.de avatar

Fully agree. I see this sentiment so often, "we gotta tell people from reddit how great it is here!"
This might work with something like a meme community, but once it becomes a bit less mainstream you need people to make that decision themselves. It will look needy and annoying to try and "educate" them about how supposedly great it is here.

Alice ,
@Alice@hilariouschaos.com avatar

Removed

Jarvis2323 ,

I agree with your disagreement. One of the biggest mistakes was folks trying to create 1:1 analogs of every subreddit. A single big community can have a lot of varied interesting discussions. If it gets too big, folks can get together and start a separate sub topic community for whatever topic warrants it.

moonpiedumplings ,

I agree with this.

Sometimes I've seen people complain about people using asklemmy for not askreddit style questions, but I actually think that's ok and I'm in favor of that as it means more discussion, content, and visibility.

Eventually asklemmy will reach "critical mass", and split into more niche communities.

whoisearth ,
@whoisearth@lemmy.ca avatar

Yup I've thought about this recently and I think the big problem is people expect Reddit when Reddit evolved over time. Here you have hundreds of subs existing where the user base doesnt match the need for it.

Use Canada as an example. I'm sure on Reddit Canada started first then as it grew the need for provinces and cities. Here we have Canada and I'm sure provinces and cities. Everyone should just be in Canada. When the user base grows it will naturally splinter to smaller like minded communities.

We are trying to rebuild the wheel when the wheel is not needed.

Alice , in New Samba community
@Alice@hilariouschaos.com avatar

Is your name Samuel?

sambaheaven OP ,

Is yours?

faebudo , in VMware security advisories are now non public (from Reddit)

This makes only sense, given that they have a dedicated investors.broadcom.com page but no security.broadcom.com you can see where their focus is.

Bookmeat , in VMware security advisories are now non public (from Reddit)

Half the industry, if not more, is already seeking alternatives to vcenter, esxi, director, and the rest of the gang. Watch the install base shrinking going forward.

possiblylinux127 OP ,
@possiblylinux127@lemmy.zip avatar

I think it is more than half

plasticcheese ,

We are. Where I am, the money men are (rightly) scared and we're looking at our options. I'm currently assessing Kubernetes as an alternative. The benefits to containerization are too great to ignore, but if we go that route, the workload to migrate our services is definitely going to sting for the next few months. Thanks Broadcom....

iturnedintoanewt ,
@iturnedintoanewt@lemm.ee avatar

How about Proxmox? It allows containers and VMs. Containers via LXC, but you could set your own VM to run docker/kubernetes etc.
Haven't had many chances to try Kuberbetes myself, so not sure the difference of advantages.

plasticcheese ,

Yeah, I use Proxmox at home and however much I love the product, it's not really enterprise ready. There are too many missing features and 3rd party integrations that come as standard with vSphere. Our future is probably in microservices. The cost saving benefits of auto scaling, while also being vendor agnostic are very attractive.

cyberpunk007 ,

Ye ol "free" hyper-v as well. Would probably be the next one I consider in a corporate environment after VMware just blew it's brains out. Containers are great, I run kubernetes at one on truenas scale but obviously it's Linux containers which may have some implications if the idea is to move everything off VMware to containers. Like if there are windows vms.

Nollij ,

Hyper-V is discontinued, at least as a standalone hypervisor. It's only available as an additional role on a full OS.

IOW, it's a replacement for VMware Workstation, not ESXi, and certainly not vcenter.

cyberpunk007 ,

I'm not sure what you're talking about. That's how hyperv has always been deployed. Install Microsoft server, install hyperv role. It's a hypervisor. Does all the fancy things like clustering as well, through the fail over cluster manager where you can view all your hosts, move vms from host to host, configure your witnesses etc. It absolutely is a competitor in the esxi space, never had quite all the bells and whistles but it was good enough for most applications.

Nollij ,

The standalone Hyper-V Server was last released for server 2019. Not only was this leaner than Server 2019 w/ the Hyper V role, it was available for free.

cyberpunk007 ,

Ok I'm not sure what your point is then. VMware clustering isn't free either.

plasticcheese ,

Just a quick FYI, Kubernetes is not just LXC. It can run just about any container type you throw at it. It seems like a superb platform :)

cyberpunk007 ,

Correct, it's not really accurate to compare kubernetes to lxc. It's a container orchestration tool.

mbirth , in VMware security advisories are now non public (from Reddit)

Makes sense, now that ESXi isn't free anymore and you technically need an account with now-Broadcom anyways?

vk6flab , in I had to migrate from Samba AD to Windows Server AD and I'm sad (RIP Samba)
@vk6flab@lemmy.radio avatar

Why did you need a bare metal anything?

I realise that with the enshitification of VMware, there's one less viable option for virtualisation, but it's not the only one around.

slazer2au ,

If you are using LDAP auth for your hypervisor (vsphere as an example) how do you auth after a kaboom event and your AD server VMs have not auto started.

I remember reading somewhere (prob /r/Sysadmin) that having one bare metal AD server just incase everything goes offline.

vk6flab ,
@vk6flab@lemmy.radio avatar

In the same way as if your Windows Server on bare metal doesn't start after an update, via the console.

slazer2au ,

I recall that ESXi doesn't let you do crap from the console. Just configure management. Be interesting to hear what options Prox and Hyper-V may have.

computergeek125 ,

You use console to turn on embedded shell then Ctrl+Alt+Fn over to it (I forget whether it's on f1 or f2), then you can use esxcli and all the rest of that to fix it up.

Once you get enough networking/storage pieces sorted out you can get back into the management HTML UI and SSH

Then when you're done fixing, turn shell and SSH back off.

IHawkMike ,

You connect directly to the ESXi host with root. Because you're going to have to boot up vCenter in addition to the DC anyway when you're using SSO. I would use DRS rules to prefer host1 for vCenter and the PDCe for that reason.

Only in the very early days of virtualization (2008-2012) did I recommend keeping a physical server around. I know a lot more now than I did then.

But anymore, I don't recommend using SSO for hypervisors or backup infrastructure. It's better to add another wall in front of an attacker trying to laterally move onto these critical platforms for ransom, data exfiltration, etc.

And in reality, these "kaboom events" aren't terribly common unless you've neglected some other part of your infrastructure.

PlasticExistence , in I had to migrate from Samba AD to Windows Server AD and I'm sad (RIP Samba)

I'm sorry for your loss. I've done administration of both, and I loathe working with Windows.

Alice ,
@Alice@hilariouschaos.com avatar

Would you ever date a Linux user ?

PlasticExistence ,

Do they use snaps?

Trainguyrom , in How to learn Windows?

From an admin perspective one of the best things to lab out is setting up a standard SMB server stack, which is 2x domain controllers, 2x DHCP servers, a file server, and a couple of desktop VMs, then practice setting it up to be nicely locked down like in a standard corporate environment. For example:

  • redirect user directories to the file server and set permissions so only the user, admins and departmental managers can access files
  • setup departmental directories on the share with departmental and managerial permissions
  • setup group policies to lock down the desktops so that users just get a standard experience

But also make sure to set this up both in Windows Server with the full "Desktop Experience" as well as on Windows Server Core, and try to do so while following best practices with redundancy, network segmentation, etc. you could even get fancy and setup a remote site with redundant servers and replication to the remote site as well to experiment with how that works.

Then of course, once you have your virtual SMB network setup, try to break it. Fill up some of the VMs so it's out of disk space, corrupt one of the VMs and try to recover it, power off the servers when you shouldn't, cut some important virtual Ethernet connections and leave them severed for a while, or degrade the virtual ethernet connection and see what happens, delete the only domain controller and see what the best path to business continuity is, etc.

This covers a lot of the tickets and critical failures you'll see on a standard SMB network and will give you a good amount of exposure to a lot of what you'll work with in the "real world"

REdOG , in How to learn Windows?
@REdOG@lemmy.world avatar

How to learn Windows? Years of pain and torture of course.

What to learn? Powershell, learn powershell.

Then as you follow along any guides or howtos for administrative tasks, try to search how to accomplish the same things in powershell. Take notes on your own powershell learnings. I keep all my windows administrative powershell one liners, scripts, and notes in the same digital notebook for quick reference and updating.

If you're already experienced with bash, like I was, learning powershell might be tough. As it was for me, I had trouble understanding why PS cmdlets seemed to hide data when piped... Format-table(ft) and Format-List(fl) help tremendously

Powershell remoting is still a pain in my ass in most places, I rarely use it.

There's a windows admins discord group that's pretty savvy I asked and learned a lot along the way there.
https://discord.com/invite/winadmins

YouTube! Don't necessarily look for YouTube powershell windows videos. Just the necessary tasks through the GUI will give you the correct direction to begin converting a process to PS. Learn how other Admins process tasks by watching them. Especially if it's an often repeated task try converting some or all of what they do in the video into PS equivalent.

With all of that said knowing powershell doesn't really help recovering from disasters. Knowing how to install windows and recover data from borked systems is a task best learned through battles. So, absolutely set up VMs and installed all manner of versions you'll be working with...that way you'll have familiarity with when things go wrong in them. I've yet to install windows 11 in a VM but I did try to install a copy onto a surface tablet only to learn the hard way that do ing so leaves the tablet without the drivers necessary for using the keyboard and touchscreen...weird need a custom built image or recovery image, great fun.

Sharp312 , in New Windows driver blocks software from changing default web browser

Oh my god its literally called "user choice protection driver" eat my fucking ass microsoft 🤣

shalafi , in Suggestions for cheap enterprise grade hardware to run linux headless.

Bought many on my last job:

https://www.ebay.com/sch/i.html?_ssn=savemyserver&store_name=savemyserver&_oac=1

These guys are the bomb.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • [email protected]
  • kbinchat
  • All magazines