- Roundtable - muug.ca

Router / NAS
by Paul Sierks 22 Apr '14

22 Apr '14

Weird subject, I know. But this is only for personal residential use. I've been running Arch on a system with a number of disks in raid for all my shared storage needs. This system also doubles as a router / firewall with Wifi, and other little things such as pxe booting. We'll recently I've been wanting to use ZFS with it more and more. So I figured I'd get opinions. Arch does have packages for ZFS, which would provide most features, just not encryption. So would I be better to use pfSense or the like off a USB and add what I need for ZFS, nfs, etc to it, or to just use FreeBSD? or is there some other suggestions. Thanks, Paul

4 3

OpenSSL: patch it now!
by Trevor Cordes 11 Apr '14

11 Apr '14

Most people have probably heard about this already, but if not, *patch your OpenSSL now!* and restart your daemons. CVE-2014-0160 http://arstechnica.com/security/2014/04/critical-crypto-bug-in-openssl-open… For some reason you (sometimes) have to reload that page a few times before it actually loads. This is the worst bug I've seen in like 10 years, insofar as you may have been compromised already, but you don't (can't!) know it and they may be sitting there with your keys, waiting to actually make use of them at a later date. >From how I read it, the only way to be safe & sure is to make a new CSR and buy a new SSL cert? Or are the cert vendors going to offer a "redo" for free?

3 3

Opencart database tables
by Bradford C. Vokey 10 Apr '14

10 Apr '14

3 2

Visio stencils for cable connections?
by John Lange 04 Apr '14

04 Apr '14

I thought this would be an easy one but after several hours of googling I'm coming up empty. I need Visio stencils that show cable connection ends. USB, RJ45, HDMI, etc. etc. Something that would let me draw connection diagrams for end users that are clear and concise. Male USB-A plugs into the female USB-A connector on the faceplate beside the female RJ-45 port, etc. I see diagrams like the ones I want to draw, but can't find the stencils. A good example is here: http://www.blackbox.com/resource/files/applicationdiagrams/KV4161A_d8.gif Thanks if anyone has any suggestions. John

2 2

MUUG Meeting, April 8, 7:30pm -- OpenCart
by gedetil＠cs.umanitoba.ca 01 Apr '14

01 Apr '14

The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting on Tuesday, April 8. The meeting topic for this month is as follows: OpenCart Want to sell something on the net? This month Brad Vokey will be presenting on OpenCart -- a powerful open source shopping cart system that is feature rich and user friendly. OpenCart is a robust e-commerce solution for internet merchants to create their own online business and participate in e-commerce at minimal cost. It includes an intuitive admin interface that allows you to have complete control over your store. It also has thousands of high end themes available and integrates with hundreds of payment gateways and shipping integrations. There is also a thriving OpenCart extension market with over 12,000 extensions currently written for it (and more being added all the time). If there is something you need your store to do, there is probably an extension already written for it. If there isn't, or if you don't like the price someone is charging for their extension, you can simply add the code yourself, add it to the OpenCart store, and maybe make a little money selling your extension to others. For this month's RTFM, Michael Doob will talk about PDFtk -- A handy tool for manipulating PDF. The group holds its general meetings at 7:30pm on the second Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. ***************************************************************** Please note our *NEW* meeting location for this month: Room 1L08, Lockhart Hall, University of Winnipeg, entrance on Ellice Ave. between Spence St. and Balmoral St. Parking is available on the surrounding streets and in the lots on nearby streets. Look for signage once you're at the building, or ask a security guard. ***************************************************************** For more information about MUUG, and its monthly meetings, check out their Web server: http://www.muug.mb.ca/ Help us promote this month's meeting, by putting this poster up on your workplace bulletin board or other suitable public message board: http://www.muug.mb.ca/meetings/MUUGmeeting.pdf -- Gilbert E. Detillieux E-mail: <gedetil(a)muug.mb.ca> Manitoba UNIX User Group Web: http://www.muug.mb.ca/ PO Box 130 St-Boniface Phone: (204)474-8161 Winnipeg MB CANADA R2H 3B4 Fax: (204)474-7609

1 0

Low cost Colo in WInnipeg
by Gerald Brandt 25 Mar '14

25 Mar '14

Hi, I currently have a 3U server at Joe's Data Center in Kansas City for $50.00 USD a month. I'm looking to relocate my server to Winnipeg, and am looking for a good, low cost colo facility. les.net looks good, but with the nickle and dimeing (7.50 for an ethernet port, 7.50 for a 120 volt outlet...), it adds up. Is there anyone else in Winnipeg? Gerald

8 10

Hey security guys!
by Kevin McGregor 24 Mar '14

24 Mar '14

We have a pile of Linux servers here at work. We'd like to set up the shared keys to simplify admin via SSH. Here's the thing (quoted from an email I received): We are thinking of putting public/private ssh keys on all of our Linux servers. The purpose of this is so that our central admin server can "do stuff' on all of our servers without needing a password. We are wondering how far to go for convenience. Below are restrictions that we can place on the key pair (there may be others, but these are the ones of which I'm aware). Have a look at each restriction and consider whether we should use the restriction or not. Basically it would be most convenient to have none of the restrictions. · We can create a password on the key pair o This would defeat the whole purpose of using the key pair to avoid passwords · We can limit which user can run things on the target machine o Most likely, we would install the public key for the user root (therefore things would run as user=root) · We can limit what commands can be run on the target machine o We would like to leave this wide open so we can run anything remotely · We can limit the source machine that can initiate remote commands (ie - commands can only come from the admin machine) o It would be nice to not have this limit as we could move the private key onto other machines (eg a VM on your desktop) to be able to run things remotely o The downside is that if anybody gets the private key, they can do anything Note that firewalls should prevent people from the internet trying to connect to ssh. [Comments, anyone? - Kevin]

6 6

glibc locking and elision
by Paul Sierks 20 Mar '14

20 Mar '14

Hey all, Is there anyone else that has a proc with HLE and is having issues with glibc? The newer Haswells have this and for a while now teamviewer has been refusing to launch on my system. Then more recently I installed pgAdmin3 and while it actually ran, there were actions that would set it off too. Turns out it was general protection fault, and a core dump seemed to show elision as the culprit. I've since rebuilt glibc x86_64 and the 32 bit libs without the enable-lock-elision flag which "fixes" the issue, but I'd like to know if anyone else has experienced this. -- Paul

3 2

Linux analogs to FreeNAS?
by Grigory Shamov 18 Mar '14

18 Mar '14

Hi All, It was very interesting to listen to FreeNAS talk. But, is there anything similar (free, easy to use on a whitebox hardware) for Linux (I know it is not as serious system as *BSD but it is the one with Infiniband drivers). Goodling brought me Openfiler (http://www.openfiler.com/) which seems to be not that free (replication, HA, iSCSI etc. costs some thousands of euros). Is there anything else? -- Grigory Shamov HPC Analyst, Westgrid/Compute Canada E2-588 EITC Building, University of Manitoba (204) 474-9625

2 1

Join Tim O'Reilly in a Live Q & A March 12
by Gilbert E. Detillieux 10 Mar '14

10 Mar '14

FYI, here's an O'Reilly posting about a live-streamed presentation you may enjoy... Gilbert --------------- View in browser <http://post.oreilly.com/rd/9z1ztnee54v1b9smj8tdfne4rjokrcqjbpholu6n5t0>. Forward this announcement to a friend <http://post.oreilly.com/f2f/9z1zbvvjaj154an92t9h2on182oehjohnn79h6t0f7o> O'Reilly User Group Newsletter Hello, Building a Solid World <http://post.oreilly.com/rd/9z1zg1vnufta8citc3bd2k5siavprjelm10cn6avjq8> Hereâ??s a great opportunity to hear a conversation with Tim O'Reilly on March 12. All the details are below, and we would like you to share this with your entire community. We also opened the Solid Startup Showcase <http://post.oreilly.com/rd/9z1zndm5q8dikdf8m513ebmeugch5384dqlf50h6e28> to submissions and are looking for candidates. If you are a possible candidate, or know one, please pass this along. Cheers, ---Marsee Henon and Jon Johns ------------------------------------------------------------------------ Live: Tim O'Reilly and Jim Stogdill Explore Software / Hardware / Everywhere Wed., March 12 - 11AM PT | 2PM ET Tim O'Reilly & Jim StogdillThe collision of hardware and software changes everything from products, industrial practices, and business models to appliances, automobiles, and job opportunities. Today's Internet of Everything is a classic market disruption, with immense unimagined opportunities and more than a few thorny challenges. Join *Tim O'Reilly* and *Jim Stogdill* in a free live-streamed conversation about the convergence of hardware and software, what this means beyond the Internet of Things, and a vision for the future. Register here to join this conversation. <http://post.oreilly.com/rd/9z1zsi9hpc3aerhc1fdcr2nf279lkgf89t19roajm18> If you have questions for Tim or Jim, you can submit them in advance via @OReillySolid <http://post.oreilly.com/rd/9z1z55t2sasg0bdpplm642rv07i8407u8g4q50l9548> or solid-newsletter(a)oreilly.com <mailto:solid-newsletter@oreilly.com?subject=Solid%20Newsletter%20-%20Questions%20for%20Tim%20and%20Jim>. ------------------------------------------------------------------------ Buy 1 Ebook, Get 1 Free with your user group discount code: DSUG50 <http://post.oreilly.com/rd/9z1z6fdnpfcs5fqnbkl6iv3if9dl4knl4vq633pv66o> Buy 1 Ebook, Get 1 Free with your user group discount code: *DSUG50* ------------------------------------------------------------------------ Looking for more? Visit oreilly.com <http://post.oreilly.com/rd/9z1zqrh3dc900fbgtgql7hd6df2jqitour34rg141sg>. Find more at oreilly.com You are receiving this email because you are a User Group contact with O'Reilly Media. If you would like to stop receiving these newsletters or announcements from O'Reilly, send an email to: usergroups(a)oreilly.com <mailto:usergroups@oreilly.com> O'Reilly Media, Inc. 1005 Gravenstein Highway North, Sebastopol, CA 95472 (707) 827-7000

1 0