Linux
Securing SSH with FIDO U2F (YubiKey) on Debian
FIDO devices are supported by the public key types „ecdsa-sk“ and „ed25519-sk“, along with corresponding certificate types. This is supported in OpenSSH from version 8.2. Debian Buster (stable) delivers version 7.9, so we need to install a newer version via Debian Buster Backports. If you use Debian unstable or read this when Debian Bullseye is […]
Ubuntu Yubikey U2F Auth
Yubikey is a hardware security device. You can use it for two-factor authentication. Here is an example setup for two-factor login for Ubuntu Linux. I recommend to use at least two Yubikeys. One primary and the second one as a backup device. I used mostly the official HowTo for this: https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F 1. Setup First add […]
Installing Galera Cluster with MariaDB
Galera give you some nice cluster features. Like true Multi-Master configuration, synchronous replication, conflict detection and impromes the maintenance of your MariaDB servers with automatic provisioning, node isolation and rolling upgrades. You need a Linux or Unix Operating System. I used Debian for this tutorial. Multiple nodes with an odd number of nodes. Three nodes […]
Docker on Debian 10 managed with Cockpit
With Cockpit, you can also manage docker containers. Here is a small example setup: Install Docker apt install apt-transport-https ca-certificates curl gnupg2 software-properties-common curl -fsSL https://download.docker.com/linux/debian/gpg | apt-key add – add-apt-repository „deb [arch=amd64] https://download.docker.com/linux/debian $(lsb_release -cs) stable“ apt update apt-cache policy docker-ce apt install docker-ce Make sure that docker is running: systemctl status docker Output: […]
Servermanagement with Cockpit on Debian 10
Cockpit is an easy and simple remote management software for Linux servers. It is now included in Debian 10 Buster.It runs on several Linux distributions, including Debian, Ubuntu, Fedora, CentOS, RHEL and Arch Linux.With Cockpit, you can manage multiple Linux servers via your web browser. Here is an simple setup to get started with Cockpit. […]
Your own search engine with Apache Nutch 1.16 on Debian 10
In 2016, I wrote an article for the Linux Magazine about an personal search engine: * Suchmaschinenserver im Eigenbau (Ausgabe 02/2016)* Go Find It (Issue #186 / May 2016) A lot has changed in the past few years. New Nutch versions, new Solr versions and of course new OS versions. Here is a little updated […]
Setup Windows 10/Server 2016 RDP to work with Guacamole 1.1.0 (Part 2)
Currently Guacamole 1.1.0 is not compatible with the default encryption of Windows. If you disable NLA it should work. Open Registry editor ‚regedit‘ and make the following settings: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp] Change “SecurityLayer” value to dword:00000001 Verify “UserAuthentication” value is dword:0x00000000 This should work without reboot. Or use NLA If you want to use NLA you […]
Install Guacamole 1.1.0 on Debian 10 with DB authentication (Part 1)
I started with a fresh Debian 10.3.0 with latest patches. I just installed vim and open-vm-tools because my server runs on an VMWare cluster 1. Install Tomcat 9 apt install tomcat9 tomcat9-admin tomcat9-common tomcat9-user If you now open http://<YOUR_SERVER>:8080 you should get an „It works !“ website. 2. Install Guacamole Server 2.1 Install required packages […]
Apache Nutch with Solr on Debian 9 or Ubuntu 17.04
About one year ago I wrote an article for Linux Magazin about a personal search engine: * Suchmaschinenserver im Eigenbau (Ausgabe 02/2016) * Go Find It (Issue #186 / May 2016) In this article I used Ubuntu 14.04 and Nutch 1.9. Now Nutch 1.13 is available. Time for a short update. First the bad news. […]
Fixing broken Thecus N8800PRO NAS or install Linux on Thecus N8880PRO NAS
A few days ago one of my old Thecus N8800PRO NAS storages stopped working. Instead of throwing it away i decided to take a closer look at it. First i discovered the missing VGA Port on the system. So no way for more debugging. But if open the NAS and take a closer look to […]