After the CentOS fiasco (good job Redhat/IBM) and since we are more or less in lockdown I decided to invest a couple of days to migrate my home infra from CentOS 7 to Debian 10. One of my physical machines, which was also CentOS 7 based, is used as ISCSI target. Debian 10 - Server A.K.A. Target Install the required packages: $ sudo apt-get install tgt dkms Create a device backstore: …

OpenWRT is a free open source Linux based operating system aimed at networking hardware. Every time the system is upgraded to a newer version using the so called Sysupgrade BIN image every package the user manually installed gets lost; this makes the upgrade process very tedious especially if one does not properly write down all the customization he has made. I don’t use many custom packages but QoS, DNS-over-HTTPS, USB support and vnstat are must have. …

Last year I blogged on how to remotely unlock a full disk encrypted Fedora/CentOS server. The software I used, dracut-crypt-ssh, is not supported anymore and stopped working for me on Fedora 32 and 33. A quick DDG search pointed me in the right direction and made me find a similar software that accomplishes the same task: dracut-sshd. $ sudo dnf install dracut dracut-network openssh libblkid-devel gcc $ git clone https://github.com/gsauthof/dracut-sshd.git $ cd dracut-sshd $ sudo cp -ri 46sshd /usr/lib/dracut/modules.d After compiling and installing dracut-crypt-ssh configure grub to instruct dracut to add networking to initramfs: …

A few weeks ago Siemens released a very much needed upgrade of the IOT2000 platform; the newcomer is called IOT2050 and is a huge step forward compared to the very very underpowered IOT2040. I have had one for a few days laying on my desk but I just found the time to play with it today. Other than the new hardware, the officially supported operating system also changed from Yocto Linux to Debian Buster (kudos for dropping Yocto). …

Ejabberd has supported STUN/TURN for quite some time now, this in conjunction with client support can be used to implement one on one audio and video calls. Since version 2.8.0 Conversations Android client added audio and video call functionality by leveraging on STUN/TURN and XEP-0215. The rest of the XMPP world is following the route opened by them, so I expect to see IOS and regular computer XMPP clients to finally implement these new features too in the upcoming months. Enabling audio and video calls in Ejabberd is actually pretty simple. Provided you have installed the latest release (version 20.04), edit ejabberd.yml: …

Since the whole COVID19 pandemic hoax started a couple of months ago, working from home has become the new hip thing every company brags about on every social media known to humankind. The first step to be able to call yourself a proper COVID19 ready(tm) company is the ability to bother every employees with just a few mouse clicks. So here we are, with Microsoft Teams(tm) and a lot of other not very secure and massively bloated software elected as the center of the office life. Coffee break? XYZ software chatroom. Kick-off meeting? XYZ software chatroom. And so on. Because of my special snowflake syndrome and my deep hatred for all things Microsoft and especially Windows I always end up making my life a bit harder. After having used Teams in a Windows 10 VM (after all I paid for a license when I got my latest Thinkpad) for a few weeks, I decided it was time to finally try to make it work on my main OS: Fedora 31. The catch was also that I wanted to do that more or less without installing any third party non free software. The OS I use is Fedora 31, which comes with pipewire and xgd-desktop-portal both installed and configured out of the box. Since using the official closed source Electron crapware client was out of the question, the obvious choice was to make Microsoft Teams work in a regular WEB browser. The situation is the following: …

Here at nagg.eu we are strong believers in internet anonymity and privacy, for this reason we are proudly announcing the launch of nagg.eu onion mirror. Onion mirror version of the website is still work in progress and still contains links to third party clearnet domains. Use with caution.

Apparently Microsoft is not alone when it comes to utterly retarded design decisions. A few years ago when signing up for a Microsoft account I discovered that for some reason they enforce a maximum password lenght of 16 characters or something around that. Well, InfluxDB not only does the same thing but also silently fails to create the user account when the password is considered too long. Took me at least half an hour to figure out why this piece of trash kept vomiting {"error":"authorization failed"}. Double checked my docker-compose file, curl parameters, read InfluxDB useless documentation which, of course, makes no mention of password lenght limits. …

This is gonna be a very unusual post, in some way it is still about technology even if it is not about the usual IT stuff I write of. I have a Weihrauch HW 77 K spring air rifle I mostly use to shoot in my backyard or terrace. When it comes to air guns I always have troubles finding proper reviews and comparisons online, so I figure it might be worth sharing my findings here. …

Since I apparently got recurring readers (no, for real, I do) I suspect someone might actually have noticed how the look of the blog changed drastically a few weeks ago. To explain what happened a bit of backstory is required; this blog is built using a static website generator called Gohugo, the way it works is basically the following: choose or build a theme from scratch. Write some articles in Markdown or some other memetic markup language. Customize the theme and look of the website by editing a yaml configuration file. Feed everything to the Gohugo binary which will produce some sleek plain HTML, CSS and maybe JS files. rsync the files to a webserver. ?? Profit!! Couple of months ago Gohugo developers introduced a few changes in the site builder engine that broke backward compatibility with every existing theme, unfortunately the developer of the one I was using still has to make it compatible. So here is how nagg.eu got a nice solarized look.