• 0 Posts
  • 24 Comments
Joined 1 year ago
cake
Cake day: June 13th, 2023

help-circle










  • UID_Zero@infosec.pubtoLinux@lemmy.mlxfsdump questions
    link
    fedilink
    English
    arrow-up
    2
    ·
    5 months ago

    I read the man page, but I didn’t see the answer to your question in there.

    I am assuming that it would only dump the root filesystem in your example. Other mounted filesystems like /home or /media, if they’re separate filesystems, probably aren’t included. You’d have to run a separate dump for each one.

    Best option to find out is to try it and see what happens. No better way to learn than by doing.




  • The OOB management port let’s you access the console of the hardware via the network, rather than having to physically attach a mouse and keyboard. That’s the short version.

    It is a separate IP address, in any business setting it will be on a separate network. In any decently secured environment, it will not be accessible directly from the Internet. It would normally be accessible only via a VPN or by being on-site.

    So, OOB network is a different network used for management in case the production network goes down. It needs to be accessed from the internet, as well as the production network of course.

    It doesn’t have to be a separate network. OOB management is more about being able to manage the hardware if the operating system has failed. So if you have to hard reboot a server, or otherwise see the console, but you don’t have to physically be in front of the machine.

    Does that mean that two different edge devices need to be placed in the network, with two public IP addresses? (Firewall + Router) ?

    No, it can have a different IP on the same network, though in business settings it’s generally a separate network.

    Let’s say I have 5 servers running Linux or Windows Server, no virtual machines, will I be able to remotely access the server from the iDRAC interface? is it only through SSH or like RDP?

    The iDRAC interface is like using a KVM remotely. It’s a remote keyboard and monitor for the server. You’re not connecting to the server from the iDRAC, the iDRAC Iis just ask alternate access method for the server in question.

    Does the Dell server have to be like a hypervisor with VMs within, from me to manage them?

    No. Again, it’s like you’re sitting in front of the server with a keyboard and monitor.

    To access the management interface from the internet from a web browser I need port forwarding from public IP to the local management network correct?

    DO NOT EVER EXPOSE IDRAC/OOB INTERFACES TO THE INTERNET. You clearly aren’t familiar with this, and exposing iDRACs to the Internet is a huge security issue. They are NOT well secured, and they give practically full access to the server. They say physical access is total access…iDRAC access isn’t far off from that.

    Apart from the edge devices, do I need a routing device between the production and management network to access the production servers?

    If they’re on different networks, yes.



  • It’s not that it’s deleted automatically. If you define deleting as “not being referenced by the file system,” then it’s deleted as soon as it’s unlinked.

    Fun story - create a big file, and hold it open in an application. Unlink the file. Then compare the output of du and df for the mount point the file was on. It will differ until the app closes and the inode of the file is finally freed.


  • This is the way.

    I started by just eating less. I cut portions and started counting calories. I did the math and started staying under my number, and the pounds just melted off.

    A couple months later, I added biking and walking. I’m trying to walk at least 30 minutes daily, which is just a nice break from everything.

    I’m down 120 pounds. I want to drop more, but I’ve been pretty stationary for the past 3 months or so. I’m already a new man, and my doctor says I’m fine where I am. I’d like to drop another 10 just to be solidly below 200 for the first time in decades.

    I went to a personal trainer for some ideas on exercises, and I need to fit those workouts into my schedule. I haven’t done that yet, but I need to.



  • UID_Zero@infosec.pubtoPrivacy@lemmy.mlGoogle has a VPN service now
    link
    fedilink
    English
    arrow-up
    14
    arrow-down
    1
    ·
    10 months ago

    I’m iffy about giving more days to Google, but I use their VPN when I’m on any kind of questionable WiFi. I’d rather give the data to Google than to whatever random place is getting it from my hotels or whatever.

    I also have a VPN server setup at home, but generally routing everything through home is too slow (for now, I might be getting significantly increased upload speed soon).