Categories
Container Docker Linux Network Ubuntu

Docker network problem

While creating new docker instances I recently often got the following error message: In the beginning it helped to prune old network configs: But now I’m at a point where this does no longer help. Maybe the number of subnets is limited? So I currently got 33 subnets configured for docker … sounds close enough […]

Categories
Dovecot Linux Mail Postfix Ubuntu

OAuth2 for dovecot and postfix?

Currently I’m using Nextcloud with snappymail as mail client. While this works nicely, I do have a “comfort problem” since I switched my Nextcloud authentication to SAML/SSO: I can no longer use the Nextcloud credentials to log into my mail account (as Nextcloud does not know about my password when using SSO). There’s two things […]

Categories
Encryption Linux OpenSSH SecureShell SSH Ubuntu

Using yubikey with ssh

While playing with passkeys I asked myself whether my Yubikey could also be used for SSH authentication using passkeys/FIDO2. And it seems for OpenSSH 8.2 and newer this is indeed possible. Its basic setup is described in detail by Yubico. However following that description didn’t work for me. I always got some “sign_and_send_pubkey” error: According […]

Categories
Apache Browser Keycloak Linux SSO Ubuntu Webserver

Keycloak theming with minimal effort

I’ve been using Keycloak for quite some time now, and I was looking forward to the new 26.4.0 release – now with official passkey support. Till now I was experimenting with edumfa (a clone of privacyIDEA) in order to get my Yubikey supported for multi factor authentication (MFA). This however required an extra connector (and […]

Categories
Artificial Intelligence Container Docker GPU Graphics Card Large Language Model (LLM) Linux Ubuntu

Running LLMS with llama.cpp using vulkan

Some time ago I tried to use my AMD iGPUs (not supported by AMDs ROCm) for LLMs. However I didn’t succeed. Now I read some benchmark for the newest AMD Strix Halo systems performing quite well in some LLM tasks using vulkan instead of ROCm. Building vulkan enabled llama.cpp (using docker) Building llama.cpp using docker […]

Categories
Artificial Intelligence HAproxy Large Language Model (LLM) Linux Network Proxy Ubuntu

Adding Bearer authentication with haproxy

Motivation I’m currently playing around with some LLMs for different projects. One project aims to add textual descriptions to a large image gallery. Those descriptions can be used both for better image organization or as alternative texts when publishing them on websites. My basic setup contains ollama for running the LLMs and some python code […]

Categories
Database Postgresql

Netbox: Running scripts on command line

It is possible to run scripts in netbox, both from the web GUI and also on the command line. However the usage is not very intuitive. so here’s a (very short) introduction. Basic knowledge First of all we need to know where to locate the scripts. That one is relatively easy: Place them into a […]

Categories
Database Postgresql

Convert postgres database dumps

Postgres can dump databases in 2 different formats: Both have their advantages and disadvantages. The later makes dumps better readable, so what can you do if your backup is using the first format? First let’s check the source format of our dump: Most online searches will result in: Restore the data to a new database […]

Categories
Container Docker Linux Network Ubuntu

Fixing Unifi network application insights error

This seems to apply to the docker version only, and maybe only to older ones that were installed some time ago. What happened Everytime I tried to access the “Insights” menu item on my docker hosted Unifi network application I got a short popup telling me “An error occured while trying to retreive logs” Further […]

Categories
Firewall Linux Network Ubuntu VPN Wireguard

Distributed fail2ban

Once you start to use fail2ban on more than one machine you’ll get to the point where you’d like to apply the IP blocking to machines other than the local one. While there are other (partially commercial) solutions to do that, I still decided to go with fail2ban. Please consider the following description as a […]