Re: [Linux-users] Horse

[criggie]

From: Volker Kuhlmann 

On Wed 30 Aug 2017 19:36:01 NZST +1200, criggie wrote:


Not a problem - it sits there doing little.  My current home project
is to build more VMs and replace two elderly servers.

What do you use for VMs?

I use at home what I use at work, which is xenserver.
There are a pair of HP servers which run in hot-cold mode (for power 
saving reasons)
I bring the other one up only for patching, and at the end of that all 
the VMs are running on the other host.


I know there's no decent frontend system outside a windows binary, which 
is annoying but one of the servers had a 2008R2 licence sticker, so I 
virtualised that and it works okay.
A lot can be done at the command line too.  I've tried but disliked Xen 
Orchestra.


In the past I used KVM on my desktop, and that worked fairly well but 
having separation is a good thing.  It was also possible for the host to 
starve VMs of CPU when doing a lot of USB transfers, which was bad when 
one of my VMs was the home firewall !



Long term was going to redeploy one of the physical servers as a big NAS with 
all the freed up drives as a lower tier storage than the iscsi box.

I'm not a fan of bought NAS boxes. Rolling one's own, what network fs do
you use? Compatibility with certain other OSes is not required (they can
be compatible themselves for a change if they want).
Yeah - I have one HP server running FreeNAS and ZFS as a filesystem.  It 
works well as backend storage for VMs, but its not a proper redundant 
SAN.  I'm spoiled at work with some seriously-good gear.
My HP has 8x 1TB drives, and I'm only using ~200 GB of it at the 
moment.  Power draw is not small, ballparking several hundred watts 
continuous.   Was looking at a thecus, drobo or synology NAS instead 
because they run far lower power.


TBH I could get away perfectly well running my VMs on local storage, but 
migration time is much longer.


So storage backend is not redundant, and I only have a single switch so 
no redundancy there either.


If I was doing it all over again, I might look at ZFS under linux, or 
simply do software raid1 and use NFS or iSCSI to export the storage.



Finally have just bought some Ubiquiti APs - they'll be going in this weekend.  
The controller software looks good.

Have heard a few people rave about them, but they can't be configured
without proprietory software. How does that look in practice, and what
foundations does it need to run? Basically, I pay at most $00.00 for
hardware that needs otherOS, and I'm iffy about being required to run
wine etc for critical infrastructure. The argument "but you only need to
run it once when you configure it" is ... lacking.

Concur - but you don't need wine.
The controller software is written in debian / ubuntu and then 
ported/repackaged for windows and mac.  That makes me comfortable with 
this solution.


Without the controller software they run in an autonomous mode but 
reconfiguring and Captive Portal auth require the controller to be 
running.  I had a Cisco WLC for a while and it was very similar, but the 
hardware died.  Ubiquiti's solution looks great.


My main issue is many of their APs require funny POE.  I have proper 
802.3af switches, I don't want to use oddball injectors as well.




This list's been fairly quiet lately - what are other people doing in their 
networks ?

Played with ARM-based SBCs for small servers, but am unimpressed. They
may have wifi, HDMI, lalala, but not even non-USB Ethernet or a SATA
interface. Even if it's only internal I'd like timely security updates
for as long as I use the hardware. So, bottom line: HW is lacking, SW is
lacking...

Specifically Raspberry Pi or something else?


--
Criggie

http://criggie.org.nz/

___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

Re: [Linux-users] Horse

[Volker Kuhlmann]

On Wed 30 Aug 2017 19:36:01 NZST +1200, criggie wrote:

> Not a problem - it sits there doing little.  My current home project
> is to build more VMs and replace two elderly servers.

What do you use for VMs?

> Long term was going to redeploy one of the physical servers as a big
> NAS with all the freed up drives as a lower tier storage than the
> iscsi box.

I'm not a fan of bought NAS boxes. Rolling one's own, what network fs do
you use? Compatibility with certain other OSes is not required (they can
be compatible themselves for a change if they want).

> Finally have just bought some Ubiquiti APs - they'll be going in
> this weekend.  The controller software looks good.

Have heard a few people rave about them, but they can't be configured
without proprietory software. How does that look in practice, and what
foundations does it need to run? Basically, I pay at most $00.00 for
hardware that needs otherOS, and I'm iffy about being required to run
wine etc for critical infrastructure. The argument "but you only need to
run it once when you configure it" is ... lacking.

> This list's been fairly quiet lately - what are other people doing
> in their networks ?

Played with ARM-based SBCs for small servers, but am unimpressed. They
may have wifi, HDMI, lalala, but not even non-USB Ethernet or a SATA
interface. Even if it's only internal I'd like timely security updates
for as long as I use the hardware. So, bottom line: HW is lacking, SW is
lacking...

Volker

-- 
Volker Kuhlmann
http://volker.top.geek.nz/  Please do not CC list postings to me.
___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

Re: [Linux-users] Horse

[Ross Drummond]

I have a bash script installed on Horse that I sometimes need access to
when I am out and about.

Also useful in testing which ports are open on your world network
interface.

Cheers Ross Drummond

 On Wed, 30 Aug 2017 11:09:23 +1200 Robert Fisher
 wrote:

> I have been cleaning up my password database and found horse.
> I was pleasantly surprised that I could still log into it.
> Thanks Craig.
> ___
> Linux-users mailing list
> Linux-users@lists.canterbury.ac.nz
> http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

Re: [Linux-users] Horse

[Jim Cheetham]

On Wed, Aug 30, 2017 at 7:36 PM, criggie  wrote:
> This list's been fairly quiet lately - what are other people doing in their
> networks ?

Separating IoT devices into their own SSIDs/LANs and monitoring the
connections they make.

I lost my local fileserver to a dead mobo and haven't brought it back,
which is a problem I think. However until I get more power into the
garage the server doesn't really have a proper place to live anyway
since I moved house (2 years ago, lol).

Considering adding a device to restrict access to various sites by
category, usually that's non-Open-Source solutions (Sophos have a
free-for-home-use firewall that does that) which will be handy for
teenagers who don't have a mobile data package (or that have to pay
for it themselves!) ... but I think it might be a losing battle.

-jim
___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

Re: [Linux-users] Horse

[yuri]

On 7 August 2016 at 17:21, csawtell wrote:
> I have a few files the Horse is looking after. I would appreciate it if they
> didn't meat a sticky end.

No doubt you know this and would probably tell me the same:
I hope those files on Horse aren't your only copy.

Yuri de Groot
___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

Re: [Linux-users] Horse

[csawtell]

I have a few files the Horse is looking after. I would appreciate it if they 
didn't meat a sticky end.  Sent from my Samsung Galaxy smartphone. - Original 
message - From: chris  Date: 07/08/2016 13:09 (GMT+12:00) 
Date:07/08/2016 13:09 (GMT+12:00) To: Canterbury Linux Users Group 
 Cc: Subject: Re: [Linux-users] HorseOn 
06/08/16 21:09, criggie wrote:
> I'm migrating it to new hardware at this time, but it looks like noone
> has logged in for a very long time.
>
> Straw poll - do we still need this box?
>
>
Yes please Criggie

-- 
Please close the toilet lid. Water attracts frogs, and frogs attract 
snakes.
___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users
___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

Re: [Linux-users] Horse

[chris]

On 06/08/16 21:09, criggie wrote:

I'm migrating it to new hardware at this time, but it looks like noone
has logged in for a very long time.

Straw poll - do we still need this box?



Yes please Criggie

--
Please close the toilet lid. Water attracts frogs, and frogs attract 
snakes.

___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

Re: [Linux-users] Horse

[Nick Rout]

I haven't used it for ages because I am too embarrassed to ask you for the
400th time to reset my forgotten password...

On Sun, Aug 7, 2016 at 12:09 PM, criggie  wrote:

> On 07/08/16 12:00, linux-users-requ...@lists.canterbury.ac.nz wrote:
> > Straw poll - do we still need this box?
>
> Someone still uses it, so it can stay.
>
> Anyone needing access please send me a public SSH key (not the private
> bit as my coworkers are known to do!)   and I'll sort it out.
>
>
> --
> Criggie
>
> http://criggie.org.nz/
> ___
> Linux-users mailing list
> Linux-users@lists.canterbury.ac.nz
> http://lists.canterbury.ac.nz/mailman/listinfo/linux-users
>
___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

Re: [Linux-users] Horse

[criggie]

On 07/08/16 12:00, linux-users-requ...@lists.canterbury.ac.nz wrote:
> Straw poll - do we still need this box?

Someone still uses it, so it can stay.

Anyone needing access please send me a public SSH key (not the private
bit as my coworkers are known to do!)   and I'll sort it out.


-- 
Criggie

http://criggie.org.nz/
___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

Re: [Linux-users] Horse

[Robert Fisher]

I seldom used it but thanks for the service.

Robert Fisher

On 6 Aug 2016 9:09 p.m., "criggie"  wrote:

> I'm migrating it to new hardware at this time, but it looks like noone
> has logged in for a very long time.
>
> Straw poll - do we still need this box?
>
>
> --
> Criggie
>
> http://criggie.org.nz/
> ___
> Linux-users mailing list
> Linux-users@lists.canterbury.ac.nz
> http://lists.canterbury.ac.nz/mailman/listinfo/linux-users
>
___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

Re: [Linux-users] Horse

[Ross Drummond]

I use horse occasionally to run a script. Horse is the only publicly
accessible  ssh server I can connect to. Bonus I can connect over IPV6.

I have been in the process of porting the script over to Windows
PowerShell. This will prompt me to get a move on.

Cheers Ross Drummond

On Sat, 06 Aug 2016 21:09:12 +1200 criggie
 wrote:

> I'm migrating it to new hardware at this time, but it looks like noone
> has logged in for a very long time.
> 
> Straw poll - do we still need this box?
> 
> 

___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

Re: [Linux-users] Horse

[Chris Hellyar]

I've not used it in quite a while.

I did think about it a couple of months back and try to log in but
couldn't remember what password / ssh key I used. :-)

I'd have thought that most folks who would have a need for a shell
account 'out there' would have access to a box or two by now?  Gone are
the days when it was hard to get access to VPS's etc...

Thanks for running it all these years though, how long has it been?  15
years?

On 6/08/16 21:09, criggie wrote:
> I'm migrating it to new hardware at this time, but it looks like noone
> has logged in for a very long time.
>
> Straw poll - do we still need this box?
>
>

___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

Re: [Linux-users] Horse

[Volker Kuhlmann]

On Sat 06 Aug 2016 21:09:12 NZST +1200, criggie wrote:

> I'm migrating it to new hardware at this time, but it looks like noone
> has logged in for a very long time.
> 
> Straw poll - do we still need this box?

I do occasionally use it for testing something from the outside in, like
ports. When I do, an alternative is not really available. I would miss
it, but can understand if you no longer want to maintain it.

A big thank you for having provided this testing option to us so far!

Volker

-- 
Volker Kuhlmann
http://volker.top.geek.nz/  Please do not CC list postings to me.
___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

Re: [Linux-users] Horse - ssh keys setup

[C. Falconer]

Christopher Sawtell wrote, On 12/10/2011 10:18 AM:

On 10 December 2011 09:50, Volker Kuhlmann
 Access is by ssh key only (no password) so you'll have to 
also arrange with Craig how to get going on that.





erm.
tane@isolde ~ $ ssh ch...@shell.clug.org.nz 
mailto:ch...@shell.clug.org.nz

Password:
Linux horse 3.0.0-1-amd64 #1 SMP Sat Aug 27 16:21:11 UTC 2011 x86_64
[ ... ]
Last login: Sun Nov 20 17:52:15 2011 from 
203-97-115-119.cable.telstraclear.net 
http://203-97-115-119.cable.telstraclear.net

chris@horse:~$



I'm planning to move to SSH keys only, but only a few have been provided or 
installed.  The key is tested before password is offered.

When at least half the accounts have ssh keys installed then I will turn off 
password auth.

Any questions please ask.


--
Craig Falconer


___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

Re: [Linux-users] Horse

[Barry]

On 10/12/11 10:18, Christopher Sawtell wrote:
 On 10 December 2011 09:50, Volker Kuhlmann

   Access is by ssh key only (no password) so you'll have to also arrange
 with Craig how to get going on that.


 erm.

 tane@isolde ~ $ ssh ch...@shell.clug.org.nz
 Password:
 Linux horse 3.0.0-1-amd64 #1 SMP Sat Aug 27 16:21:11 UTC 2011 x86_64

 [ ... ]

Also works very nicely with dolphin. Use 2 panes, point 1 at horse, 
login when requested, then drag n drop between the 2 panes.

Barry


___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

Re: [Linux-users] Horse

[Volker Kuhlmann]

On Sat 10 Dec 2011 09:43:30 NZDT +1300, Robert Fisher wrote:

 Can someone please enlighten me?

Contact Craig Falconer (you can get his email from a post a few days
ago). I'm not sure it's wise to publish the name, Craig will tell you
anyway. Access is by ssh key only (no password) so you'll have to also
arrange with Craig how to get going on that.

Volker

-- 
Volker Kuhlmann
http://volker.dnsalias.net/ Please do not CC list postings to me.

___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

Re: [Linux-users] Horse

[Christopher Sawtell]

On 10 December 2011 09:50, Volker Kuhlmann

 Access is by ssh key only (no password) so you'll have to also arrange
 with Craig how to get going on that.


erm.

tane@isolde ~ $ ssh ch...@shell.clug.org.nz
Password:
Linux horse 3.0.0-1-amd64 #1 SMP Sat Aug 27 16:21:11 UTC 2011 x86_64

[ ... ]

Last login: Sun Nov 20 17:52:15 2011 from
203-97-115-119.cable.telstraclear.net
chris@horse:~$



-- 
Sincerely,
Christopher Sawtell
___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

Re: [Linux-users] horse is happy again

[C. Falconer]

Christopher Sawtell wrote, On 11/28/2011 12:48 PM:
On 27 November 2011 23:16, C. Falconer cfalco...@totalteam.co.nz 
mailto:cfalco...@totalteam.co.nz wrote:


I've found that horse had been a bit too enthusiastic adding IPs to
/etc/hosts.deny and it was 135k lines long.


It would be nice too if you could set up a text browser such as lynx 
or links2


done - lynx, links, links2, elinks, w3m, wget, curl, telnet and netcat 
are all installed now.



--
Craig Falconer


___
Linux-users mailing list
Linux-users@lists.canterbury.ac.nz
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users