Linux - The Next GenerationWhile playing with passkeys I asked myself whether my Yubikey could also be used for SSH authentication using passkeys/FIDO2. And it seems for OpenSSH 8.2 and newer this is indeed possible. Its basic setup is described in detail by Yubico. However following that description didn’t work for me. I always got some “sign_and_send_pubkey” error: According […]
I’ve been using Keycloak for quite some time now, and I was looking forward to the new 26.4.0 release – now with official passkey support. Till now I was experimenting with edumfa (a clone of privacyIDEA) in order to get my Yubikey supported for multi factor authentication (MFA). This however required an extra connector (and […]
Some time ago I tried to use my AMD iGPUs (not supported by AMDs ROCm) for LLMs. However I didn’t succeed. Now I read some benchmark for the newest AMD Strix Halo systems performing quite well in some LLM tasks using vulkan instead of ROCm. Building vulkan enabled llama.cpp (using docker) Building llama.cpp using docker […]
Motivation I’m currently playing around with some LLMs for different projects. One project aims to add textual descriptions to a large image gallery. Those descriptions can be used both for better image organization or as alternative texts when publishing them on websites. My basic setup contains ollama for running the LLMs and some python code […]
It is possible to run scripts in netbox, both from the web GUI and also on the command line. However the usage is not very intuitive. so here’s a (very short) introduction. Basic knowledge First of all we need to know where to locate the scripts. That one is relatively easy: Place them into a […]
Postgres can dump databases in 2 different formats: Both have their advantages and disadvantages. The later makes dumps better readable, so what can you do if your backup is using the first format? First let’s check the source format of our dump: Most online searches will result in: Restore the data to a new database […]
This seems to apply to the docker version only, and maybe only to older ones that were installed some time ago. What happened Everytime I tried to access the “Insights” menu item on my docker hosted Unifi network application I got a short popup telling me “An error occured while trying to retreive logs” Further […]
Once you start to use fail2ban on more than one machine you’ll get to the point where you’d like to apply the IP blocking to machines other than the local one. While there are other (partially commercial) solutions to do that, I still decided to go with fail2ban. Please consider the following description as a […]
As usual the first step is to find the right tools to start the debugging. For systemd systems (like my Ubuntu LTS 24.04) on helper is resolvectl: Hint: older systems may use systemd-resolve –status instead. Some words about my environment: Some of the settings listed above can be modified here: Quite naively I was expecting […]
Skipping through my log files I found some concerning entries that were not covered by the existing fail2ban config. While trying to figure the correct regular expressions (regexp) to match these entries I had to take a close look at the things fail2ban provides to make things easier. Basic configuration As usual my test are […]