Deus ex prompt
Gedanken zu AI
19 Posts
Admin
useradd defaults
Changing useradd defaults
Using BART
Basic audit reporting tool
Setting up NTP in Solaris 11
A question of time
Synchronous svcadm
Waiting for results
Time-based limits to SSH
Lockout after midnight
File auditing
Activate auditing for select files
Hashed
Directly setting a hashed password
System Attributes in your filesystem
More fun with attributes
Protecting files from accidental deletion
Additional protection against rm -rf *
pfedit for sensitive files
Keeping diffs out of the audit log
Auditing pfedit
Recording the change
Basics of pfedit
Delegate the edit
Filesystem latencies
From the perspective of the filesystem
ptime
What have you done ... in the past?
Disk latencies with iostat
Look, no Dtrace script ...
pam_fm_notify
Notification about faults at login.
Named routes
Where the streets have no^H^Ha name.
Post-mortem pfiles
Finding open files in a core dump
reflink
Faster copies through technology
1 Posts
Administration
Renewing certificates - a horrible hack
Automatic renewal of Let's Encrypt certificates without an public webserver
2 Posts
Backup
Almost RAIDless
My personal approach of protecting the data on my home NAS with replicas instead of RAID.
Lost trust
A dropped disk. Thoughts about trust in data persistency and the loss of this trust.
2 Posts
Bahn
3 Posts
Blog
Spring cleaning 2025
Spring is coming and my blog needed a cleanup
Umbau
At first a note to my reader in English language: In the future, only blog entries about Solaris and IT in general will be in English language. Everything e...
Cleanup
I’m just in the process to clean up the blog and updating some static pages. The cleanup was nescessary to be able to run the scripts to publish new blog ent...
31 Posts
Cycling
Berlin
Ich frage mich bis heute an vielen Stellen, wie mein Gehirn verschaltet ist. Okay, fragen sich wahrscheinlich mehr Menschen, die mich kennen. Vermutlich mit ...
Imperial Century - oder: Nach Fehmarn an einem Tag
Ich glaube jeder Mensch hat einen oder mehrere Sehnsuchtsorte. Orte, an denen sie oder er gerne sein mag. Orte zu denen man eine besondere Verbundenheit spür...
Mehr - oder: 60000
Dieser Text ist im Grundsatz schon etwas älter. Ich bin irgendwie nicht dazu gekommen, ihn ins Blog zu stellen. Er steht aber ein bisschen mit dem nächsten T...
Magie
Es war gestern endlich ein Tag, an dem der Finger nicht bei jeder Erschütterung schmerzte. Mag auch damit zusammenhängen, das ich diese blöde Schiene durch T...
Nass
Ich schrieb ja vor einigen Tagen, das ich auf der langen Fahrt gestürzt bin. Ich war gestern morgen noch mal beim Doc, nachdem der Finger keine Anstalten mac...
Hundertvierundfünfzig
Als ich gestern auf meinem Garmin die Fahrt beendet habe, habe ich für mich ganz persönlich erst einmal ein Mikrophon gedanklich fallen gelassen.Ja, um es kl...
Relikte
Bei mir hat sich für Samstag eine Idee festgesetzt für eine Strecke. Ich muss mal gucken ob ich das wirklich machen werde. Sonntag kann (naja, ehrlicherweis...
Nimmermehr
Auch heute war wieder eine Überquerung der A7 der Punkt an dem ich umgedreht bin. So irgendwie die Elbe östlich von Lauenburg ein gefühltes Hindernis ist, so...
Unentdeckt
Ich beginne ja mittlerweile meine Texte gerne mit Musik, also Gedanken zu Musik. Dieser Text startet auch wieder mit einem Lied, das ich seit vielen Jahren m...
Weit
Es war gestern einfach tolles Wetter zum Radfahren. Sonne, selbstredend Sonnenmilch, nachdem mich ein recht angenehmer Nachmittag am Hamburger Hafen leicht v...
Fern
Fährt man auf der niedersächsischen Seite beispielsweise von Bleckede nach Hamburg-Harburg, bietet es sich an, an der Elbe langzufahren. Ich finde die Gegend...
Artemis
Seit längerer Zeit bin ich heute mal wieder mit dem Rad durch die Lüneburger Innenstadt gefahren. Sozusagen als Abschluss einer Tour, die mich an Lauenburg ...
Too much analysis alert
Wie gross ist eigentlich der Unterschied zwischen EBike-Fahren und Rennradfahren. Erstaunlich gering wie ich finde. Ich habe mit deutlich mehr gerechnet. Ich...
Von Mohnblumen
Verdammt noch mal, es ist Mitte Juni. Nur hat dieses Jahr das noch nicht bemerkt. Eigentlich sollte es warm sein. Zumindestens ein bisschen. Handbekleidung ...
Von Holzwegen und Schiessscharten
Ich bin heute das erste mal seit längerer Zeit wieder mit Musik auf den Ohren gefahren. Ich habe eine Sonnenbrille, die gleichzeitig ein Bluetooth-Kopfhörer ...
Durch die Göhrde
Ich habe durch die ersten Blogeinträge hier einiges über das neue Theme gelernt. Die Bilder, die sich über die gesamte Breite des Browserfenster ziehen, woll...
Von Beinahekatastrophen und der Freude, Glück gehabt zu haben
Meine Gemüt will momentan einfach raus. Das Wetter ist entgegen meiner Erwartung einfach viel zu gut, um Indoor zu fahren. Auch wenn es wahrscheinlich nicht ...
Von Erinnerungsorten und Waldwegen
Fenster auf, die Sonne scheint. Naja, ein kleines bisschen. Ich will raus. Liege ohnehin schon zu lange wach rum. I can get no sleep. Wie seit vielen, viele...
T minus 83 Tage - oder: Neuer Termin steht
Ich arbeite seit gestern wieder. Ich habe ja meinen Urlaub abgebrochen, weil ich den für den neuen Anlauf brauche. Urlaubstage sind halt eine sehr endliche R...
T minus 86 Tage - oder: Verschoben
Gestern war irgendwie ein blöder Tag. Und das schmeichelt dem Tag doch sehr. Ich schrieb in meinem letzten Artikel ja, das mein Knie gehalten hat. Nein, hat ...
Wieder T minus 2 Tage - oder: Patchen
Eigentlich wollte ich heute schon unterwegs sein. Die ersten 60 Kilometer unterwegs sein. Eigentlich. Aber ich habe eine grosse Dummheit begangen, von der ic...
T minus 1 Tag - oder: Von Nervösität und elektrischen Elefanten
Ich war in meinem Leben nicht wenig unterwegs. Aufgeregt bin ich trotzdem. War ich immer. Je weiter, desto aufgeregter. Morgen gehts los. Das was da morgen b...
T minus 2 Tage - oder: Vorbereitungen
Ich liege wieder früh wach. Es sind noch zwei Tage. Gestern habe ich es endlich geschafft, das Schutzblech ans Rad zu montieren. Ich muss an einer Stelle he...
T minus 3 Tage - oder: Unterhosen auf der Waage
Fahrräder - und die Teile aus denen sie bestehen - haben einen Auslegungsparameter, der sich Systemgewicht nennt. Systemgewicht heisst so viel : „Die Teile ...
T minus 4 Tage - oder: Schutzbleche
Schutzbleche mögen vor Wasser und Schlamm schützen, sie mögen vielleicht den Rahmen vor kleinen Steinchen schützen, die vom Reifen weggeschleudert werden. Si...
T minus 5 Tage - oder: In ein paar Tagen ...
Die Wiederinbetriebnahme des Workflows, um etwas in dieses Blog zu bringen, hat gleich als erstes mal wieder dazu geführt, das ich den ersten Entwurf dieses ...
Motivation
It’s well before 06:00 AM. I’m sitting on my indoor bike. Somewhat motivated by the last visit to my scale a day before. Thinking that a longer distance ride...
A few days ago ... 50001 km
A few days ago. This is the number of kilometers i ran or cycled since 2019. I tried to exactly hit 50000 … didn’t work. Hope that i will reach 6000 km th...
From cycling to computer systems performance – Part 1
This is my first longer blog entry after getting back to a more frequent blogging schedule. It will be a two part blog entry. It may start with cycling, howe...
500000
I wasn’t able to exactly hit the number, but yay …. half a million kilocalories. The screenshots shows calories, but the tool is doing the same error like mo...
Smartbike
This summer wasn’t that good in regard of cycling. It wasn’t good at all. First half of the summer felt like a never-ending row of rainy days. Then a lot of...
1 Posts
DTrace
fileops DTrace provider
DTracing file operations.
2 Posts
Docker
My content deployment process with Gitea
How I automated my multi-stage publication workflow with Gitea and Jekyll.
Jekyll and Gitea
How i automated the publication workflow of my Jekyll based blog with Gitea.
1 Posts
Elbe
Fern
Fährt man auf der niedersächsischen Seite beispielsweise von Bleckede nach Hamburg-Harburg, bietet es sich an, an der Elbe langzufahren. Ich finde die Gegend...
2 Posts
Geschaeftsreise
1 Posts
Geschichte
Von Mohnblumen
Verdammt noch mal, es ist Mitte Juni. Nur hat dieses Jahr das noch nicht bemerkt. Eigentlich sollte es warm sein. Zumindestens ein bisschen. Handbekleidung ...
1 Posts
Hamburg
Fern
Fährt man auf der niedersächsischen Seite beispielsweise von Bleckede nach Hamburg-Harburg, bietet es sich an, an der Elbe langzufahren. Ich finde die Gegend...
7 Posts
Homelab
My content deployment process with Gitea
How I automated my multi-stage publication workflow with Gitea and Jekyll.
Double negative
Who keeps my disk up? Who? Who? Who?
Almost RAIDless
My personal approach of protecting the data on my home NAS with replicas instead of RAID.
Lost trust
A dropped disk. Thoughts about trust in data persistency and the loss of this trust.
Backup
About the first toughts and first steps to backup my new fileserver.
Jekyll and Gitea
How i automated the publication workflow of my Jekyll based blog with Gitea.
New fileserver
A warm welcome to tachikoma. Using a UGREEN NAsync 2800 with TrueNAS Scale and tips to get started with it.
17 Posts
IT
Optimierende Prokrastination
Prokrastination mal anders ....
Deus ex prompt
Gedanken zu AI
A WLAN tunneled
From time to time it’s quite useful to appear to be an internet user for example from the US instead of Germany. Or in the UK. Of course there are services f...
Migrating from Ubiquiti USG to UCG
I gave myself a christmas present this year. I’m using a Ubiquiti Unifi Security Gateway (short USG) for quite some time now and i thought it would be a good...
Beware of assumed simplicity
I’m currently sitting at my desk looking to an heap of cables. Display cables. You don’t think too much about display cables. At least i did not think too mu...
Probably just an overengineered small keyboard
(This is a test blog entry (based on a text I started a while ago) for the new Jekyll workflow) Sometimes you see a device which results in a “Must-have” re...
From cycling to computer systems performance – Part 1
This is my first longer blog entry after getting back to a more frequent blogging schedule. It will be a two part blog entry. It may start with cycling, howe...
Thoughts about PoE security cameras (and outdoor ethernet cables in general)
I’m currently trying to buy a security camera, because i have the suspicion that people are using my property as a shortcut. I had just one thought: There ar...
Changing Unifi inform URL via SSH
My house has four Ubiquti Unifi AP-AC-LR access points. Out of whatever reason, the construction of the house seems to attenuate WIFI signals significantly f...
Cable management
Today i was quite occupied by a search mission: As absence of a proof is not the proof of absence, I was searching for things and I had no proof to myself th...
Suspiciously new
I wrote this morning that my house has currently no VDSL internet, just cable internet. I’m just back from the street in front of my home. Roughly 50m away t...
Redundant
The street in front of my house gets a new cycleway on the inbound side of the street. While this is a really great idea because the old one was in an abysma...
Docking
I wanted to get rid of a significant set of cables when I set up my new desk, there were a gazillion of cables flying around on my desk and I wanted to bring...
Workarounds - revisited
The example with the heating system is a better example than I thought. I learned some additional things over the course of the day. There are workarounds, ...
Workarounds
Sometimes you may think that IT is the only business where workarounds are used. Today i was reminded that other businesses do the same and some even make pr...
Keyboards
It’s roughly 20 years ago that I’ve switched to use notebooks for work. Before my time at Sun i was able to convince my manager that i really needed the Powe...
Xodus
A while ago i left X (the website formerly known as Twitter). I assume out of the same set of reason why most people i know left Twitter. I really loved it...
4 Posts
Jahresrueckblick
2024
Über ein schwieriges Jahr 2024 und sich vor einem Rückblick drücken.
2023
Peter Gabriel hat dieses Jahr wieder ein Album herausgebracht. Ich hatte eigentlich schon die Hoffnung verloren, das “I/O” je herauskommen würde. Denn Herr G...
2022
Hier sitze ich wieder auf meinem Sofa und sinniere über das letzte Jahr. Das Fernsehprogramm ist noch schlechter als sonst. Hinzu kommt, dass am heutigen Tag...
2021
Ich sitze hier gerade an meinem Schreibtisch und wundere mich, das selbst in einem Jahr, in dem es eigentlich empfohlen ist, zuhause zu bleiben, es lediglic...
2 Posts
Jekyll
My content deployment process with Gitea
How I automated my multi-stage publication workflow with Gitea and Jekyll.
Jekyll and Gitea
How i automated the publication workflow of my Jekyll based blog with Gitea.
1 Posts
Kultur
Deus ex prompt
Gedanken zu AI
6 Posts
Linux
My content deployment process with Gitea
How I automated my multi-stage publication workflow with Gitea and Jekyll.
Double negative
Who keeps my disk up? Who? Who? Who?
Backup
About the first toughts and first steps to backup my new fileserver.
Jekyll and Gitea
How i automated the publication workflow of my Jekyll based blog with Gitea.
New fileserver
A warm welcome to tachikoma. Using a UGREEN NAsync 2800 with TrueNAS Scale and tips to get started with it.
Renewing certificates - a horrible hack
Automatic renewal of Let's Encrypt certificates without an public webserver
2 Posts
NAS
Almost RAIDless
My personal approach of protecting the data on my home NAS with replicas instead of RAID.
Lost trust
A dropped disk. Thoughts about trust in data persistency and the loss of this trust.
1 Posts
Network
Named routes
Where the streets have no^H^Ha name.
6 Posts
Networking
A WLAN tunneled
From time to time it’s quite useful to appear to be an internet user for example from the US instead of Germany. Or in the UK. Of course there are services f...
Migrating from Ubiquiti USG to UCG
I gave myself a christmas present this year. I’m using a Ubiquiti Unifi Security Gateway (short USG) for quite some time now and i thought it would be a good...
Thoughts about PoE security cameras (and outdoor ethernet cables in general)
I’m currently trying to buy a security camera, because i have the suspicion that people are using my property as a shortcut. I had just one thought: There ar...
Changing Unifi inform URL via SSH
My house has four Ubiquti Unifi AP-AC-LR access points. Out of whatever reason, the construction of the house seems to attenuate WIFI signals significantly f...
Suspiciously new
I wrote this morning that my house has currently no VDSL internet, just cable internet. I’m just back from the street in front of my home. Roughly 50m away t...
Redundant
The street in front of my house gets a new cycleway on the inbound side of the street. While this is a really great idea because the old one was in an abysma...
2 Posts
Personal
Optimierende Prokrastination
Prokrastination mal anders ....
Unentdeckt
Ich beginne ja mittlerweile meine Texte gerne mit Musik, also Gedanken zu Musik. Dieser Text startet auch wieder mit einem Lied, das ich seit vielen Jahren m...
1 Posts
Politik
Mein erstes Mal
Über Bleistifte, Wahlen und meinen Erfahrungen aus einem Tag Ehrenamt als Wahlhelfer.
1 Posts
Proxmox
Backup
About the first toughts and first steps to backup my new fileserver.
1 Posts
SMF
Solaris 11.4 SRU 72: Core OS user integrity check
Checking for changes of core OS users.
9 Posts
Security
Using BART
Basic audit reporting tool
Time-based limits to SSH
Lockout after midnight
pfedit for sensitive files
Keeping diffs out of the audit log
Auditing pfedit
Recording the change
Basics of pfedit
Delegate the edit
Session annotations
Give me a reason
Signed binaries
Sign the name accross the binary ...
Renewing certificates - a horrible hack
Automatic renewal of Let's Encrypt certificates without an public webserver
Thoughts about PoE security cameras (and outdoor ethernet cables in general)
I’m currently trying to buy a security camera, because i have the suspicion that people are using my property as a shortcut. I had just one thought: There ar...
100 Posts
Solaris
useradd defaults
Changing useradd defaults
Using BART
Basic audit reporting tool
Setting up NTP in Solaris 11
A question of time
Synchronous svcadm
Waiting for results
Time-based limits to SSH
Lockout after midnight
ZFS File retention: No way back - and other topics
Things you should know about ZFS file retention
Prevent the destruction of a ZFS filesystem dataset
Limit your appetite for destruction
ZFS file retention
Configuring file retention in ZFS
File auditing
Activate auditing for select files
Hashed
Directly setting a hashed password
System Attributes in your filesystem
More fun with attributes
Protecting files from accidental deletion
Additional protection against rm -rf *
pfedit for sensitive files
Keeping diffs out of the audit log
Auditing pfedit
Recording the change
Basics of pfedit
Delegate the edit
Filesystem latencies
From the perspective of the filesystem
ptime
What have you done ... in the past?
Session annotations
Give me a reason
Signed binaries
Sign the name accross the binary ...
Disk latencies with iostat
Look, no Dtrace script ...
Scheduled scrubs
Automatic scrubs in ZFS
pam_fm_notify
Notification about faults at login.
Named routes
Where the streets have no^H^Ha name.
Post-mortem pfiles
Finding open files in a core dump
reflink
Faster copies through technology
useradm
New tool to manage users in Solaris 11.4
Solaris 11.4 SRU 72: Core OS user integrity check
Checking for changes of core OS users.
ZFS read and write bandwith limits
Smothering noisy neighbours.
fileops DTrace provider
DTracing file operations.
Creating your own goal service in Solaris 11.4
More goals.
Using the goal service in Solaris 11.4
Tell me about your goals.
Sandbox without networking
Network is a privilege.
Re-publishing
From the archives ...
Solaris 11.4 SRU 75: Creating a clone in .clone
Send in the clones with mkdir
Solaris 11.4 SRU 75: Recursive mount/umount
(Un-)mounting (almost) everything - with a little bit more control
Solaris 11.4 SRU 78: Wildcards for iostat
Filtering down the output of iostat
Solaris 11.4 SRU 75: NFSv3 support in helper tools
A few NFS tools in Solaris 11 still used NFSv1. This has been changed.
Solaris 11 SRU 75: New options for pgrep/pkill
Two small additions to the pgrep/kill commands to limit the scope of both commands.
Solaris 11: Network Condition Simulator
How to simulate bad network conditions ... up to TCP/IP over avian carriers
Solaris 10/11: Account locking and passwordless SSH
How to prevent locking for accounts used for passwordless authentication
Solaris 11.4 SRU 60: Sample separation in iostat
As i had quite a fight with a larger IKEA PAX closet for my bedroom, i hadn’t quite the time to complete the ZFS retention article so far. Thus today a small...
Solaris 11.4 SRU 66: Precision of logfile timestamps
Another rather small change that was introduces to Solaris 11 in SRU 66. Up to SRU65 the precision of the timestamps in the logfile was seconds. Jul 5 06:1...
Solaris 11.4 SRU 57: Why did you reboot the system?
Yet another small addition to Solaris 11.4. This one was released with SRU 57. reboot, shutdown and poweroff got a new option. With -c you can now specify a...
Solaris 11.4 SRU 60: admhist shows SMF audit records
Yet another small feature. I’m working on a blog entry about ZFS retention in the evenings, but it will take some time to complete it. So a blog entry about ...
Solaris 11.4 SRU 63: Disabling reboots (temporarily)
I’m not allowed to watch games of the national team of Germany. Currently Germany is playing against Spain. Friends and family have forbidden me to watch the...
Solaris 11.4 SRU 69: Including file fragments in ssh configuration
While the last blog entries were about cycling, I would like to start with Solaris centric blog entries as well. My plan is to write without a planned schedu...
Solaris 11.4 support available until at least 2037
There is an important note in footnote 7 on page 40 of the “Oracle and Sun System Software and Operating Systems - Oracle Lifetime Support Policy”: “As a res...
Rest in peace, Joerg Schilling
Just saw the notification that Joerg Schilling, the creator of the cdrtools and Schillix (and many other tools), passed away this Sunday. He was one of the w...
Additional information for your zone configuration.
Sometimes it’s useful to enrich your zone configuration with some additional data, so someone can look into the zone config and know for example who is respo...
Changing passwords - re-revisited
There was an interesting question on Twitter after i published my blog entry about assigning the authorization to change passwords to regular users: “Can you...
Changing passwords - revisited
You are an quite busy admin. The systems are well kept. Everything is working fine. However many people work on your system and inevitably some people forget...
Changing passwords - revisited
You are an quite busy admin. The systems are well kept. Everything is working fine. However many people work on your system and inevitably some people forget...
Changing passwords
This is a blog entry from the category “Just because you can do it this way, you should not nescessarily do it this way” albeit the biggest problem with usi...
S11.4CS: General Administration - Packaging
Oracle Solaris 11.4 General Administration Packaging Install a package called diagnostic/wireshark: # pkg install diagnostic/wireshark Install a gr...
S11.4CS: General Administration - Boot Environments
Oracle Solaris 11.4 General Administration Boot Environments Boot Environments are individual bootable instances of the operating system that take advantage ...
S11.4CS: General Administration - Locales, timezone and keyboard
Oracle Solaris 11.4 General Administration Locales, Timezone and Keyboard Get current configuration # nlsadm get-console-keymap # nlsadm get-system-lo...
Solaris 11.4 Cheatsheet
Starting today i’m beginning the next part of my brain dump project. I will port the Solaris 11.3 Cheat Sheet which i wrote to some extend some years ago int...
Tiered storage with ZFS
This is another blog entry in regard of ZFS and about what you have to keep in mind about it, when working with ZFS. It’s nothing really astonishing, you jus...
vmstat without history
Historic values are sometimes quite useful to have an overview what’s happened in the past on your system, but quite often it’s only something you have to re...
Authorizations for Zone Console access - Part 3
Okay, there is one remaining obvious question. What if you have an admin that is responsible for all the systems and you want to give her access to all the z...
Authorizations for Zone Console access - Part 2
As i wrote yesterday, there is an alternate way to configure zone console access. Let’s assume we want to give the user junior the authorization to access th...
Authorizations for Zone Console access - Part 1
When you wanted to access the zone console on Solaris system as a normal user in the past, you needed an authorization. You may remember from a very old c0t0...
ptree with service names
A nice tool to get some understanding of the dependencies of processes is ptree tool. With the -c option the contract id (the contract filesystem is one of t...
newtask easier to use in scripts
newtask is an important tool when you start applications in a different project context, for example for resource control purposes. May be you may remember m...
Enterprise Health Check
(This blog entry was in the publication queue for a while, so Chris Beal overtook me with his great blog entry) For a very long time there are some security...
More precise timestamps for DTrace
Sometimes the timestamps delivered by %Y are not precise enough for debugging purposes. # dtrace \ -n 'syscall::read:entry {printf("%Y", walltimestamp);}'...
How you have grown ... sxadm
I remember i have first talked at a Solaris day in the Vienna Urania about sxadm for security extension administration. At that time we had one security exte...
Improved debugging in LDAP tools and nscd
Some of this improvements are not really new. They were in Solaris for years, however they were not really documented and while many people knew about them t...
Lock it up
This is a quite useful tool. Let’s assume you are working with colleagues on a system on their desktop. They are working on their shells as unprivileged user...
Just the processing please
One of the many enhancements to well known tools like truss was the introduction of the option -G to said command. When you truss for a command with -E it sh...
truss - just the interesting part ...
Most of the time when trussing a process you are not interested in all the system calls that are working perfectly and which are scrolling by in high speed. ...
Servicename in ps
Yesterday i wrote in “prstat -x” about the addition of a feature to show the FMRI of the service which the process is part of. ps got a similar enhancement. ...
prstat -x
When looking with processes on your system, sometimes you ask your self “Who the heck started this process? Often it’s a process started by SMF as part of a ...
Oracle Solaris 11.4 SRU 31
SRU 31 of Oracle Solaris 11.4 has been published today. You will find more information about the changes here.
fsstat
The command fsstat (somehow a command relatively unknown when talking with customers) got a slight enhancement in an Solaris 11.4 SRU. Before this enhancemen...
Clean up after yourself
This is a rather small change in one of the Solaris 11.4 SRUs. SMF had so far three methods. You could have a start method, which is as the name says meant t...
Even more new options for svcbundle
Another addition to svcbundle was the addition to set user group privileges to directly create manifests for SMF that didn’t need manual editing to ...
Homedirectories
Even such venerable tools like useradd could use some extra features. In a recent SRU an option was added to set a default how the home directory is created....
iostat and microseconds
Solaris 11.4 got a small extension to the iostat command. In a time when storage storage gets faster and faster, you may end in a sitation where the wsvc_t a...
gcore with less impact
This isn’t a everyday tool, however for diagnosing problems gcore is one of the important tools in your toolbox. With gcore you can create a core image of ea...
ps
Today i won’t write a blog entry explaining a feature. I would just like to guide your attention to an article at “Teaching an old ps command new tricks” wri...
Jitter and delay for svcbundle generated SMF manifests
Another extenstion to the svcbundle tool is the introduction of -s delay= and -s jitter= for periodic SMF services services. If you have something to start i...
svcbundle extended
svcbundle is an really useful tool to create SMF manifestes without having to hassle too much with XML. Most often you don’t have to work with XML at all , b...
Which SRU to get those new features?
Short anwser: The newest one you can get on the day you are reading this. The long answer: All the features i’m writing about in the last few days didn’t ap...
New -s option for zpool status
With SRU 30 of Solaris 11.4, the zpool command got a new option for the status command. You can now get some additional information about the devices. This b...
ZFS allocation units
This feature introduced in Solaris 11 SRU 30 is really an interesting one. It’s nothing you should really need often because usually ZFS will do the right th...
You have been warned: Upgrading rpool
In the past customers painted themself into a corner, when they did a rather large jump with their OS versions, upgraded their app as well, upgraded the zpoo...
Solaris scales
This is a nifty small feature . Tools like ps,df,du, ls,ps,size,prstat and swap have now the option --scale. This makes the output of those tools much more ...
Limits revisited
There were more limits changed in regard of open files has been changed with as well. The change took place in SRU27. rlim_fd_cur has been increased from ...
Small changes : New open files default.
In a relatively recent Solaris 11.4 SRU a limit was increased in it’s default setting. In 11.4 (no SRU) the limit of of open file for a user was 256. root@s...
Solaris 11.4 and user_reserve_hint_pct
A long time ago, i wrote about the /etc/system-parameter user_reserve_hint_pct. It limits the size of the ZFS ARC cache by proxy by essentially limiting the ...
Homebridge and Tasmota at my cellar
And Darmok and jalad at Tanagra. As i integrated them into Homekit via Homebridge, i had the problem with the Delock sockets with their custom firmware that...
vHBA and AIO
In Oracle Solaris 11.4 SRU30 there was an important change with LDOMS you should be aware of as you probably have to do an administrative step to get best pe...
Piped sandboxes
I got one question via Twitter: “What if there were a convenient way to run typical Unix commands in a sandbox? E.g. grep, awk, sed, etc. Could they work a...
Nested netgroups for fun and profit
Imagine you have several hundred systems to manage. The systems are for separate projects and each project has different teams of admins and only assigned ad...
Setting up LDAP for Solaris 11
Some time ago i was asked to provide a walktrough for the configuration of LDAP in Solaris 11. It’s a walkthrough how to set up LDAP name services for Solari...
Out of ID
Recently a customer observed on one of their systems, that the number n of databases started quite nicely on a system. However when they tried to start data...
Virtualbox via IPS .p5p
Darren Moffat just pointed to this in his Twitter feed about an package for Solaris that would make installation of this great tool really comfortable. Virtu...
IPMP and additional IP addresses
Recently i had a customer with a problem: The customer configured an IPMP group with a number of additional IPs. They had a number of application servers run...
Common Criteria certification for Oracle Solaris 11.4
Darren Moffat just wrote in the Solaris blog on blog.oracle.com about an important news for Oracle Solaris 11.4: Solaris just got its Common Criteria cerfica...
4 Posts
TrueNAS Scale
Double negative
Who keeps my disk up? Who? Who? Who?
Almost RAIDless
My personal approach of protecting the data on my home NAS with replicas instead of RAID.
Backup
About the first toughts and first steps to backup my new fileserver.
New fileserver
A warm welcome to tachikoma. Using a UGREEN NAsync 2800 with TrueNAS Scale and tips to get started with it.
3 Posts
Unifi
A WLAN tunneled
From time to time it’s quite useful to appear to be an internet user for example from the US instead of Germany. Or in the UK. Of course there are services f...
Migrating from Ubiquiti USG to UCG
I gave myself a christmas present this year. I’m using a Ubiquiti Unifi Security Gateway (short USG) for quite some time now and i thought it would be a good...
Changing Unifi inform URL via SSH
My house has four Ubiquti Unifi AP-AC-LR access points. Out of whatever reason, the construction of the house seems to attenuate WIFI signals significantly f...
1 Posts
Vortraege
Frankfurt
Als die Maske fiel - ein Reisebericht über die Fahrt mit der Bahn nach Frankfurt für einen Vortrag.
1 Posts
Wahlen
Mein erstes Mal
Über Bleistifte, Wahlen und meinen Erfahrungen aus einem Tag Ehrenamt als Wahlhelfer.
5 Posts
ZFS
ZFS File retention: No way back - and other topics
Things you should know about ZFS file retention
Prevent the destruction of a ZFS filesystem dataset
Limit your appetite for destruction
ZFS file retention
Configuring file retention in ZFS
Scheduled scrubs
Automatic scrubs in ZFS
ZFS read and write bandwith limits
Smothering noisy neighbours.
1 Posts
admin
useradm
New tool to manage users in Solaris 11.4
5 Posts
personal
Von Holzwegen und Schiessscharten
Ich bin heute das erste mal seit längerer Zeit wieder mit Musik auf den Ohren gefahren. Ich habe eine Sonnenbrille, die gleichzeitig ein Bluetooth-Kopfhörer ...
Durch die Göhrde
Ich habe durch die ersten Blogeinträge hier einiges über das neue Theme gelernt. Die Bilder, die sich über die gesamte Breite des Browserfenster ziehen, woll...
Von Beinahekatastrophen und der Freude, Glück gehabt zu haben
Meine Gemüt will momentan einfach raus. Das Wetter ist entgegen meiner Erwartung einfach viel zu gut, um Indoor zu fahren. Auch wenn es wahrscheinlich nicht ...
Von Erinnerungsorten und Waldwegen
Fenster auf, die Sonne scheint. Naja, ein kleines bisschen. Ich will raus. Liege ohnehin schon zu lange wach rum. I can get no sleep. Wie seit vielen, viele...
Umbau
At first a note to my reader in English language: In the future, only blog entries about Solaris and IT in general will be in English language. Everything e...
27 Posts
republished
useradd defaults
Changing useradd defaults
Using BART
Basic audit reporting tool
Setting up NTP in Solaris 11
A question of time
Synchronous svcadm
Waiting for results
Time-based limits to SSH
Lockout after midnight
File auditing
Activate auditing for select files
Hashed
Directly setting a hashed password
Protecting files from accidental deletion
Additional protection against rm -rf *
Auditing pfedit
Recording the change
Basics of pfedit
Delegate the edit
Filesystem latencies
From the perspective of the filesystem
ptime
What have you done ... in the past?
Session annotations
Give me a reason
Signed binaries
Sign the name accross the binary ...
Disk latencies with iostat
Look, no Dtrace script ...
Scheduled scrubs
Automatic scrubs in ZFS
pam_fm_notify
Notification about faults at login.
Named routes
Where the streets have no^H^Ha name.
Post-mortem pfiles
Finding open files in a core dump
reflink
Faster copies through technology
useradm
New tool to manage users in Solaris 11.4
ZFS read and write bandwith limits
Smothering noisy neighbours.
fileops DTrace provider
DTracing file operations.
Creating your own goal service in Solaris 11.4
More goals.
Using the goal service in Solaris 11.4
Tell me about your goals.
Sandbox without networking
Network is a privilege.
Re-publishing
From the archives ...