ohshit604

joined 1 year ago
[–] ohshit604@sh.itjust.works 3 points 1 day ago

VPN is the safest way for most, but if you do want to expose it to the internet just blacklist all IP’s and whitelist the known few, maybe slap Fail2Ban on it but honestly doesn’t make much of a difference.

Traefik’s DDNS Allowlist plugin works great for such a task.

[–] ohshit604@sh.itjust.works 10 points 4 days ago (21 children)

For folks who pirate games, how the hell are you confident malware isn’t being injected into the executable?

For one to pirate I would assume source code has to be available and recompiled without DRM, right? How can anyone be confident that nothing else is being added to fry or takeover folks systems?

[–] ohshit604@sh.itjust.works 10 points 5 days ago (1 children)

How’s HDMI-CEC support in Linux?

Pulled directly from KDE Plasma’s Bigscreen website.

Multiple Input Methods

Navigate with your TV remote via CEC, a game controller, a keyboard and mouse, or even your phone via KDE Connect.

https://plasma-bigscreen.org/

[–] ohshit604@sh.itjust.works 2 points 1 week ago* (last edited 1 week ago)

Wired, easy solution to the latency.

Just make sure the wire doesn’t get caught on a door handle.

[–] ohshit604@sh.itjust.works 1 points 2 weeks ago* (last edited 2 weeks ago)

kids set any other DNS, parents will never know

I mean, if you’re forcing them to use a specific DNS resolver I doubt they’ll have privileges to modify DNS on any computer.

On top of that, majority of kids don’t even know what a DNS even does.

[–] ohshit604@sh.itjust.works 37 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

Even the Chinese government struggles tracking people using VPN’s, Utah is in for a rude awakening.

[–] ohshit604@sh.itjust.works 2 points 2 weeks ago

How good is invidious?

The experience, at least in my case, has been the same. Invidious is very hit or miss due to YouTube’s methods of blocking connections, one day my instance will be working perfectly fine and the next will drop some obscure error. While my instance is technically public, it is only exposed to 1 country and even then hardly gets any hits off of my reverse proxy.

Thankfully they tend to update pretty frequently when YouTube starts acting up on a large scale.

[–] ohshit604@sh.itjust.works 3 points 3 weeks ago* (last edited 3 weeks ago)

So majority of distros you see are typically based off of another, as you’re already aware.

We have Debian based distros such as Linux Mint, Ubuntu, Kali Linux, PopOS and so on, then we have Arch based distros such as Arch Linux, Manjaro, EndeavourOS and so on, and then we got Fedora based distros such Fedora, Nobara, RisiOS.

You get the idea.

Now if Debian were to move a package from unstable to their stable repository all these derivatives will also pick it up however, they can prioritize their own packages from their own repositories over the ones supplied by Debian.

If you’re using Linux Mint cat /etc/apt/sources.list and also check out the files in /etc/apt/sources.list.d and you’ll see the repositories your system pulls from. You can add repo’s there if you want but you have to be cautious that the packages in the repo don’t conflict with the ones already installed, that means ensuring the versions are also supported on your distro.

I’m sure others can give more detail on Arch and Fedora based systems as I am not personally well familiar with those distros and how they store their sources files.

[–] ohshit604@sh.itjust.works 2 points 3 weeks ago

Probably could’ve saved the consumer $15-20 if they just used a typical type C charging port and not a proprietary connection.

[–] ohshit604@sh.itjust.works 1 points 3 weeks ago

I would assume standard inputs would be recognized however, anything custom like gyro is going to need its own driver.

[–] ohshit604@sh.itjust.works 1 points 3 weeks ago* (last edited 3 weeks ago)

Just throw your services in a docker-compose.yml file, create a docker bridge network, and assign the:

networks:
    - YourDockerNetwork

To the services in the yaml file, specify the ports it want’s to open with

ports:
    - 8080:8080

And let it start up. If you want to get more complicated suggest reading the man page which really isn’t that long of a read.

Networking really cannot be simplified, you have to view it in a logistical way of how is Point A communicating with Point B which where Docker bridge networks come into play, they make the communication easy, if all your containers are all on the same docker network all you have to do is specify http://ContainerName:Port for them to communicate back and forth internally.

 

My system is running Debian 13, and has been running Debian great for well over a year however, recently when I went to reboot my computer KDE Plasma (X11) froze and didn’t want to log in, I found it odd and rebooted as per usual but it repeated itself yet again.

I jump into another TTY and start checking the journal, nothing out of the ordinary, obviously annoyed I start reinstalling packages.

kde-full, kde-standard, kde-plasma-desktop, sddm, nvidia-driver, linux-generic-headers xorg and so on. No luck. I figured I would give Wayland a try even though a lot of my software still does not support it, and to my surprise loaded up instantly, so I got some hope my system isn’t borked, I tried X11 again but instead of rebooting or shutting down after it froze I just left it to see if anything at all changes and after a while it decided to load my desktop!

So after a few more days of trying to catch something in my journal I finally noticed this 3 minute gap in these entries of my journal.

3/23/26 9:44 PM systemd systemd-timedated.service: Deactivated successfully. 3/23/26 9:45 PM systemd-timesyncd Timed out waiting for reply from 84.16.67.12:123 (2.debian.pool.ntp.org). 3/23/26 9:45 PM systemd-timesyncd Contacted time server 217.147.208.1:123 (2.debian.pool.ntp.org). 3/23/26 9:48 PM systemd Reload requested from client PID 2681 ('startplasma-x11')... 3/23/26 9:48 PM systemd Reloading...

I don’t have much to work off of but I’m guess this is what is kicking my system back in order, is there a way I could reduce the timeout of the above systemd request?


Update

So i manage to capture the time it takes for me to reboot and land back at my desktop, it's roughly ~30 seconds to reboot and land at sddm but another whopping 5-6 minutes to actually load the X11 desktop.

I captured the logs within this time frame to hopefully weed out the issue I'm encountering.

Log File (via CopyParty)

 

I want to make use of PiHoles blocklist while I’m outside my network, my WireGuard server which is hosted via my ASUS WRT Merlin router does not appear to respect the DNS = flag on configuration files and just sends all queries through the routers default DNS provider (aka my ISP).

I’ve been trying to troubleshoot this on-and-off for the last year now and have now considered reverse proxying port :53 (hell port forwarding is also on my mind), curious to see if people has done this before and what their experience has been?

Example WireGuard config:

 

This kinda stems from this issue I asked about a while back, Pipewire an PulseAudio have caused me quite a bit of confusion lately as I recently started experiencing crackling/static sounds from my Bluetooth speaker when playing audio.

After days of digging and thinking that I’ve fixed the issue by editing /usr/share/piperwire.conf and /usr/share/pipewire-pulse.conf and following guides like this one (I know the link is for EndeavorOS) I have seem to come to the conclusion that Pipewire-ALSA is the issue to the crackling/static sounds I’m hearing.

I stumbled upon qpwgraph which appears to visualize the flow and when I disconnect Pipewire-ALSA from the flow the cracking sounds stop, now from my understanding Pipewire and PulseAudio cannot coexist which is causing my confusion because Pipewire-ALSA also appears to connect to a bunch of PulseAudio Volume Controllers.

Edit; I failed to mention my distro or hardware:

-------------
OS: Debian GNU/Linux 13 (trixie) x86_64
Kernel: Linux 6.12.48+deb13-amd64
Uptime: 2 hours, 19 mins
Packages: 4836 (dpkg), 50 (flatpak), 5 (snap)
Shell: bash 5.2.37
Display (VG249Q3A): 1920x1080 @ 165 Hz in 24" [External] *
Display (ASUS VG24V): 1920x1080 @ 120 Hz in 23" [External]
DE: KDE Plasma 6.3.6
WM: KWin (X11)
WM Theme: Nothing
Theme: Breeze (Nothing) [Qt], Breeze-Dark [GTK2], Breeze [GTK3]
Icons: breeze-dark [Qt], breeze-dark [GTK2/3/4]
Font: Noto Sans (10pt) [Qt], Noto Sans (10pt) [GTK2/3/4]
Cursor: WhiteSur (24px)
Terminal: konsole 25.4.2
CPU: Intel(R) Core(TM) i7-8700 (12) @ 4.60 GHz
GPU: NVIDIA GeForce RTX 3060 Ti [Discrete]
Memory: 9.36 GiB / 15.54 GiB (60%)
Swap: 1.26 GiB / 6.91 GiB (18%)
Disk (/): 172.66 GiB / 232.24 GiB (74%) - ext4
Disk (/media/user/Barracuda): 1.58 TiB / 1.78 TiB (89%) - ext4
Local IP (enp4s0): 192.168.1.17/24
Locale: en_US.UTF-8
 

Morning y’all

Since I switched from windows a couple years back I have yet to find a useful macro application that can handle both mouse and keyboard inputs that also doesn’t need a lot of scripting knowledge.

Back on Windows the Logitech GHub was the perfect application for making macros. Record the macro, edit the key press down & up, delay and change whether or not the macro was a toggle or of the key needed to be held was really easy to do but ever since I switched to Linux/Debian I’ve tried numerous different applications that all seem to need a bunch of scripting knowledge that I honestly don’t have the time nor energy to learn.

I’ve tried:

 

cross-posted from: https://sh.itjust.works/post/44380955

Previously on Debian 12 I followed a guide to install the AAC audio codec for my Air Pods yet after upgrading to Debian 13 I seem to have lost the codec as I can no longer select them in KDE sound settings leaving only A2DP/SBC and A2DP/SBC-XQ, now I’m a bit at a lost as I remember all I had to do was put a aac.so file into /usr/lib/x86\_64-linux-gnu/spa-0.2/bluez5/

Bluez5 directory list:

  • libspa-codec-bluez5-sbc.so
  • libspa-codec-bluez5-opus-g.so
  • libspa-codec-bluez5-opus.so
  • libspa-codec-bluez5-ldac.so
  • libspa-codec-bluez5-lc3.so
  • libspa-codec-bluez5-g722.so
  • libspa-codec-bluez5-faststream.so
  • libspa-codec-bluez5-aptx.so
  • libspa-codec-bluez5-aac.so
  • libspa-bluez5.so

Anyone here by chance know a solution to this?

 

Going from Windows to Linux then back to windows sucks.

Edit; Going through the comments it seems it doesn’t matter so long as IT supports the operating system, which is fair, in my scenario I’m not involved with our systems-management/IT/developers unless it’s an update to the software we use.

My desktop at work is still Windows 10 and while it works, kinda, my keyboard shortcuts are almost entirely different, I’ve encountered numerous moments where switching tab either by alt-tabbing or by the taskbar not working at all forcing me to minimize everything till I find that tab, couple times it wouldn’t even boot.

I started unplugging the Ethernet cable when I leave for work so IT can’t do any behind the scenes when I’m away.

I dredd the day they force a win 11 desktop on me.

30
submitted 9 months ago* (last edited 9 months ago) by ohshit604@sh.itjust.works to c/selfhosted@lemmy.world
 

Afternoon y’all -

I just spent the last few days fiddling with Prometheus under the impression I could visualize Traefik’s access logs with Perses however, after finally getting these three to communicate with one another it seems that Prometheus lacks the capability to query access logs.

I don’t host my own html/php, I typically find docker images like Invidious or Redlib spin them up in a compose/yaml file and reverse proxy them, my knowledge towards html/php is very minimal so when I read about adding files to the root path of my domain it may seem straight forward for some people but makes no sense to me, apologies if that comes off as ignorant.

I digress, I stumbled upon GoAccess and gave it a shot but from what I’m reading it seems that it needs access to the html that these application use to display reporting in a web-browser which I genuinely got no idea on how to do, Traefik currently spits access logs in a .log file which I assume would be enough to visualize from?


I want to thank everyone for their responses, I’ve been so busy that I couldn’t respond right away but I got GoAccess running and reverse proxied!

I was trying to stay away from Grafana and their associating applications as I’m under the impression they’re moving more towards close-sourced software and seem to be partnering with Google which lead to concerns in regard to data collection.

 

I’ve been working on adding security headers to my reverse proxy and so far I believe to have gotten most of them except for Content Security Policies, I honestly can’t find a simplified way to apply a CSP to 20+ docker applications and hope folks of Lemmy know the best way to go about this.

I want to note that I never worked with headers in the past, I tried interpreting the Traefik documentation and Mozilla documentation as well as a bunch of random YT videos but can’t seem to get it right.

    headers:
      headers:
        customRequestHeaders:
          X-Forwarded-Proto: https
        accessControlAllowMethods:
          - GET
          - OPTIONS
          - PUT
        accessControlMaxAge: 100
        hostsProxyHeaders:
          - "X-Forwarded-Host"
        stsSeconds: 31536000
        stsIncludeSubdomains: true
        stsPreload: true
        forceSTSHeader: true # This is a good thing but it can be tricky. Enable after everything works.
        customFrameOptionsValue: SAMEORIGIN # https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
        contentTypeNosniff: true
        browserXssFilter: true
        contentSecurityPolicy: ""
        referrerPolicy: "same-origin"
        permissionsPolicy: "camera=(), microphone=(), geolocation=(), usb=()"
        customResponseHeaders:
          X-Robots-Tag: "none,noarchive,nosnippet,notranslate,noimageindex," # disable search engines from indexing home server
          server: "traefik" 
 

Hey y'all

I've been running into this issue on my home's server, the host OS is Proxmox while i have a Debian 12 VM running within it as a VM i have two external HDD's (1tb, 5tb) running in a drive bay which are randomly disconnecting from the server and i can't seem to make heads or tails of the error in my journalctl, i don't think there is corruption on the drives but i'm hesitant to run any checks as i cannot back these up given how full they are.

The drives typically get recogniced under a different device name/ID right away. for example, /dev/sdb1 will now be /dev/sdd1, and that cycle just repeats every time they disconnect

This is kinda frustrating having to re-mount and re-add these to the VM, is there any way i could simply automate the re-mount of these drives and have the VM pick it up right away?

Jul 30 21:00:53 proxmox kernel:  sdb: sdb1
Jul 30 21:00:53 proxmox kernel:  sdc: sdc1
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:1: [sdc] Optimal transfer size 33553920 bytes not a multiple of preferred minimum block size (4096 bytes)
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:1: [sdc] Preferred minimum I/O size 4096 bytes
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:0: [sdb] Optimal transfer size 33553920 bytes not a multiple of preferred minimum block size (4096 bytes)
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:0: [sdb] Preferred minimum I/O size 4096 bytes
Jul 30 21:00:53 proxmox kernel: xhci_hcd 0000:00:0d.0: bad transfer trb length 112 in event trb
Jul 30 21:00:53 proxmox kernel: xhci_hcd 0000:00:0d.0: bad transfer trb length 112 in event trb
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:1: [sdc] Write cache: enabled, read cache: enabled, supports DPO and FUA
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:0: [sdb] Write cache: enabled, read cache: enabled, supports DPO and FUA
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:1: [sdc] Mode Sense: 67 00 10 08
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:1: [sdc] Write Protect is off
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:1: [sdc] 1953525168 512-byte logical blocks: (1.00 TB/932 GiB)
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:0: [sdb] Mode Sense: 67 00 10 08
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:0: [sdb] Write Protect is off
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:0: [sdb] 9767541168 512-byte logical blocks: (5.00 TB/4.55 TiB)
Jul 30 21:00:53 proxmox kernel: scsi 3:0:0:1: Attached scsi generic sg2 type 0
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:0: Attached scsi generic sg1 type 0
Jul 30 21:00:53 proxmox kernel: scsi 3:0:0:1: Direct-Access     WDC WD10 EZEX-21WN4A0     0009 PQ: 0 ANSI: 6
Jul 30 21:00:53 proxmox kernel: scsi 3:0:0:0: Direct-Access     ST5000DM 000-1FK178       0009 PQ: 0 ANSI: 6
Jul 30 21:00:53 proxmox kernel: scsi host3: uas
Jul 30 21:00:53 proxmox kernel: usb 4-1: SerialNumber: RANDOM__1CC4CDBF833E
Jul 30 21:00:53 proxmox kernel: usb 4-1: Manufacturer: JMicron
Jul 30 21:00:53 proxmox kernel: usb 4-1: Product: JMS56x Series
Jul 30 21:00:53 proxmox kernel: usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5
Jul 30 21:00:53 proxmox kernel: usb 4-1: New USB device found, idVendor=152d, idProduct=0565, bcdDevice= 0.09
Jul 30 21:00:53 proxmox kernel: usb 4-1: new SuperSpeed USB device number 8 using xhci_hcd
Jul 30 21:00:53 proxmox systemd[1]: Unmounted root-mnt-1tb\x2dhdd.mount - /root/mnt/1tb-hdd.
Jul 30 21:00:53 proxmox systemd[1]: root-mnt-1tb\x2dhdd.mount: Deactivated successfully.
Jul 30 21:00:53 proxmox systemd[1]: Unmounting root-mnt-1tb\x2dhdd.mount - /root/mnt/1tb-hdd...
Jul 30 21:00:53 proxmox systemd[1]: Unmounted root-mnt-5tb\x2dhdd.mount - /root/mnt/5tb-hdd.
Jul 30 21:00:53 proxmox systemd[1]: root-mnt-5tb\x2dhdd.mount: Deactivated successfully.
Jul 30 21:00:53 proxmox systemd[1]: Unmounting root-mnt-5tb\x2dhdd.mount - /root/mnt/5tb-hdd...
Jul 30 21:00:53 proxmox pvestatd[1165]: status update time (17.646 seconds)
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:1: [sde] Synchronize Cache(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:1: [sde] Synchronizing SCSI cache
Jul 30 21:00:53 proxmox kernel: EXT4-fs (sde1): unmounting filesystem 181f4235-7fbf-4e0a-8ad1-fd4813367644.
Jul 30 21:00:53 proxmox kernel: JBD2: I/O error when updating journal superblock for sde1-8.
Jul 30 21:00:53 proxmox kernel: Buffer I/O error on dev sde1, logical block 121667584, lost sync page write
Jul 30 21:00:53 proxmox kernel: JBD2: previous I/O error detected for journal superblock update for sde1-8.
Jul 30 21:00:53 proxmox kernel: Aborting journal on device sde1-8.
Jul 30 21:00:53 proxmox kernel: EXT4-fs (sde1): shut down requested (2)
Jul 30 21:00:53 proxmox kernel: Buffer I/O error on dev sde1, logical block 121667584, lost async page write
Jul 30 21:00:53 proxmox kernel: Buffer I/O error on dev sde1, logical block 121667584, lost async page write
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: [sdd] Synchronize Cache(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
Jul 30 21:00:53 proxmox kernel: Buffer I/O error on dev sde1, logical block 121667584, lost async page write
Jul 30 21:00:53 proxmox kernel: Buffer I/O error on dev sde1, logical block 121667584, lost async page write
Jul 30 21:00:53 proxmox kernel: Buffer I/O error on dev sde1, logical block 121667584, lost async page write
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: [sdd] Synchronizing SCSI cache
Jul 30 21:00:53 proxmox kernel: EXT4-fs (sdd1): unmounting filesystem f966a59f-db1a-433c-9977-040037e7d69e.
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:1: rejecting I/O to offline device
Jul 30 21:00:53 proxmox kernel: JBD2: I/O error when updating journal superblock for sdd1-8.
Jul 30 21:00:53 proxmox kernel: Buffer I/O error on dev sdd1, logical block 610304000, lost sync page write
Jul 30 21:00:53 proxmox kernel: Aborting journal on device sdd1-8.
Jul 30 21:00:53 proxmox kernel: EXT4-fs (sdd1): shut down requested (2)
Jul 30 21:00:53 proxmox kernel: device offline error, dev sdd, sector 2002831328 op 0x0:(READ) flags 0xa00000 phys_seg 1 prio class 0
Jul 30 21:00:53 proxmox kernel: usb 4-1: USB disconnect, device number 7
Jul 30 21:00:53 proxmox kernel: I/O error, dev sdd, sector 2002831328 op 0x0:(READ) flags 0xa00000 phys_seg 1 prio class 0
Jul 30 21:00:53 proxmox kernel: I/O error, dev sdd, sector 9159739392 op 0x0:(READ) flags 0x200000 phys_seg 8 prio class 0
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: rejecting I/O to offline device
Jul 30 21:00:53 proxmox kernel: I/O error, dev sdd, sector 6653857768 op 0x0:(READ) flags 0xa00000 phys_seg 1 prio class 0
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: [sdd] tag#9 CDB: Read(16) 88 00 00 00 00 01 8c 99 cf e8 00 00 00 08 00 00
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: [sdd] tag#9 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=52s
Jul 30 21:00:53 proxmox kernel: I/O error, dev sdd, sector 6438292752 op 0x0:(READ) flags 0xa00000 phys_seg 1 prio class 0
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: [sdd] tag#10 CDB: Read(16) 88 00 00 00 00 01 7f c0 8d 10 00 00 00 08 00 00
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: [sdd] tag#10 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=52s
Jul 30 21:00:53 proxmox kernel: I/O error, dev sde, sector 822151464 op 0x0:(READ) flags 0xa00000 phys_seg 1 prio class 0
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:1: [sde] tag#8 CDB: Read(10) 28 00 31 01 09 28 00 00 08 00
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:1: [sde] tag#8 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=52s
Jul 30 21:00:53 proxmox kernel: I/O error, dev sde, sector 973345232 op 0x1:(WRITE) flags 0x808800 phys_seg 3 prio class 0
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:1: [sde] tag#11 CDB: Write(10) 2a 00 3a 04 11 d0 00 00 18 00
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:1: [sde] tag#11 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=47s
Jul 30 21:00:53 proxmox kernel: I/O error, dev sdd, sector 9155874912 op 0x0:(READ) flags 0x200000 phys_seg 64 prio class 0
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:0: [sdb] Optimal transfer size 33553920 bytes not a multiple of preferred minimum block size (4096 bytes)
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:0: [sdb] Preferred minimum I/O size 4096 bytes
Jul 30 21:00:53 proxmox kernel: xhci_hcd 0000:00:0d.0: bad transfer trb length 112 in event trb
Jul 30 21:00:53 proxmox kernel: xhci_hcd 0000:00:0d.0: bad transfer trb length 112 in event trb
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:1: [sdc] Write cache: enabled, read cache: enabled, supports DPO and FUA
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:0: [sdb] Write cache: enabled, read cache: enabled, supports DPO and FUA
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:1: [sdc] Mode Sense: 67 00 10 08
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:1: [sdc] Write Protect is off
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:1: [sdc] 1953525168 512-byte logical blocks: (1.00 TB/932 GiB)
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:0: [sdb] Mode Sense: 67 00 10 08
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:0: [sdb] Write Protect is off
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:0: [sdb] 9767541168 512-byte logical blocks: (5.00 TB/4.55 TiB)
Jul 30 21:00:53 proxmox kernel: scsi 3:0:0:1: Attached scsi generic sg2 type 0
Jul 30 21:00:53 proxmox kernel: sd 3:0:0:0: Attached scsi generic sg1 type 0
Jul 30 21:00:53 proxmox kernel: scsi 3:0:0:1: Direct-Access     WDC WD10 EZEX-21WN4A0     0009 PQ: 0 ANSI: 6
Jul 30 21:00:53 proxmox kernel: scsi 3:0:0:0: Direct-Access     ST5000DM 000-1FK178       0009 PQ: 0 ANSI: 6
Jul 30 21:00:53 proxmox kernel: scsi host3: uas
Jul 30 21:00:53 proxmox kernel: usb 4-1: SerialNumber: RANDOM__1CC4CDBF833E
Jul 30 21:00:53 proxmox kernel: usb 4-1: Manufacturer: JMicron
Jul 30 21:00:53 proxmox kernel: usb 4-1: Product: JMS56x Series
Jul 30 21:00:53 proxmox kernel: usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5
Jul 30 21:00:53 proxmox kernel: usb 4-1: New USB device found, idVendor=152d, idProduct=0565, bcdDevice= 0.09
Jul 30 21:00:53 proxmox kernel: usb 4-1: new SuperSpeed USB device number 8 using xhci_hcd
Jul 30 21:00:53 proxmox systemd[1]: Unmounted root-mnt-1tb\x2dhdd.mount - /root/mnt/1tb-hdd.
Jul 30 21:00:53 proxmox systemd[1]: root-mnt-1tb\x2dhdd.mount: Deactivated successfully.
Jul 30 21:00:53 proxmox systemd[1]: Unmounting root-mnt-1tb\x2dhdd.mount - /root/mnt/1tb-hdd...
Jul 30 21:00:53 proxmox systemd[1]: Unmounted root-mnt-5tb\x2dhdd.mount - /root/mnt/5tb-hdd.
Jul 30 21:00:53 proxmox systemd[1]: root-mnt-5tb\x2dhdd.mount: Deactivated successfully.
Jul 30 21:00:53 proxmox systemd[1]: Unmounting root-mnt-5tb\x2dhdd.mount - /root/mnt/5tb-hdd...
Jul 30 21:00:53 proxmox pvestatd[1165]: status update time (17.646 seconds)
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:1: [sde] Synchronize Cache(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:1: [sde] Synchronizing SCSI cache
Jul 30 21:00:53 proxmox kernel: EXT4-fs (sde1): unmounting filesystem 181f4235-7fbf-4e0a-8ad1-fd4813367644.
Jul 30 21:00:53 proxmox kernel: JBD2: I/O error when updating journal superblock for sde1-8.
Jul 30 21:00:53 proxmox kernel: Buffer I/O error on dev sde1, logical block 121667584, lost sync page write
Jul 30 21:00:53 proxmox kernel: JBD2: previous I/O error detected for journal superblock update for sde1-8.
Jul 30 21:00:53 proxmox kernel: Aborting journal on device sde1-8.
Jul 30 21:00:53 proxmox kernel: EXT4-fs (sde1): shut down requested (2)
Jul 30 21:00:53 proxmox kernel: Buffer I/O error on dev sde1, logical block 121667584, lost async page write
Jul 30 21:00:53 proxmox kernel: Buffer I/O error on dev sde1, logical block 121667584, lost async page write
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: [sdd] Synchronize Cache(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
Jul 30 21:00:53 proxmox kernel: Buffer I/O error on dev sde1, logical block 121667584, lost async page write
Jul 30 21:00:53 proxmox kernel: Buffer I/O error on dev sde1, logical block 121667584, lost async page write
Jul 30 21:00:53 proxmox kernel: Buffer I/O error on dev sde1, logical block 121667584, lost async page write
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: [sdd] Synchronizing SCSI cache
Jul 30 21:00:53 proxmox kernel: EXT4-fs (sdd1): unmounting filesystem f966a59f-db1a-433c-9977-040037e7d69e.
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:1: rejecting I/O to offline device
Jul 30 21:00:53 proxmox kernel: JBD2: I/O error when updating journal superblock for sdd1-8.
Jul 30 21:00:53 proxmox kernel: Buffer I/O error on dev sdd1, logical block 610304000, lost sync page write
Jul 30 21:00:53 proxmox kernel: Aborting journal on device sdd1-8.
Jul 30 21:00:53 proxmox kernel: EXT4-fs (sdd1): shut down requested (2)
Jul 30 21:00:53 proxmox kernel: device offline error, dev sdd, sector 2002831328 op 0x0:(READ) flags 0xa00000 phys_seg 1 prio class 0
Jul 30 21:00:53 proxmox kernel: usb 4-1: USB disconnect, device number 7
Jul 30 21:00:53 proxmox kernel: I/O error, dev sdd, sector 2002831328 op 0x0:(READ) flags 0xa00000 phys_seg 1 prio class 0
Jul 30 21:00:53 proxmox kernel: I/O error, dev sdd, sector 9159739392 op 0x0:(READ) flags 0x200000 phys_seg 8 prio class 0
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: rejecting I/O to offline device
Jul 30 21:00:53 proxmox kernel: I/O error, dev sdd, sector 6653857768 op 0x0:(READ) flags 0xa00000 phys_seg 1 prio class 0
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: [sdd] tag#9 CDB: Read(16) 88 00 00 00 00 01 8c 99 cf e8 00 00 00 08 00 00
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: [sdd] tag#9 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=52s
Jul 30 21:00:53 proxmox kernel: I/O error, dev sdd, sector 6438292752 op 0x0:(READ) flags 0xa00000 phys_seg 1 prio class 0
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: [sdd] tag#10 CDB: Read(16) 88 00 00 00 00 01 7f c0 8d 10 00 00 00 08 00 00
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: [sdd] tag#10 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=52s
Jul 30 21:00:53 proxmox kernel: I/O error, dev sde, sector 822151464 op 0x0:(READ) flags 0xa00000 phys_seg 1 prio class 0
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:1: [sde] tag#8 CDB: Read(10) 28 00 31 01 09 28 00 00 08 00
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:1: [sde] tag#8 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=52s
Jul 30 21:00:53 proxmox kernel: I/O error, dev sde, sector 973345232 op 0x1:(WRITE) flags 0x808800 phys_seg 3 prio class 0
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:1: [sde] tag#11 CDB: Write(10) 2a 00 3a 04 11 d0 00 00 18 00
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:1: [sde] tag#11 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=47s
Jul 30 21:00:53 proxmox kernel: I/O error, dev sdd, sector 9155874912 op 0x0:(READ) flags 0x200000 phys_seg 64 prio class 0
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: [sdd] tag#13 CDB: Read(16) 88 00 00 00 00 02 21 bb 90 60 00 00 02 00 00 00
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: [sdd] tag#13 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=41s
Jul 30 21:00:53 proxmox kernel: I/O error, dev sdd, sector 9159851824 op 0x0:(READ) flags 0x200000 phys_seg 5 prio class 0
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: [sdd] tag#14 CDB: Read(16) 88 00 00 00 00 02 21 f8 3f 30 00 00 00 28 00 00
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: [sdd] tag#14 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=41s
Jul 30 21:00:53 proxmox kernel: I/O error, dev sdd, sector 6438525440 op 0x0:(READ) flags 0xa00000 phys_seg 1 prio class 0
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: [sdd] tag#15 CDB: Read(16) 88 00 00 00 00 01 7f c4 1a 00 00 00 00 08 00 00
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: [sdd] tag#15 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=30s
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: Device offlined - not ready after error recovery
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: Device offlined - not ready after error recovery
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:1: Device offlined - not ready after error recovery
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:1: Device offlined - not ready after error recovery
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: Device offlined - not ready after error recovery
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: Device offlined - not ready after error recovery
Jul 30 21:00:53 proxmox kernel: sd 4:0:0:0: Device offlined - not ready after error recovery
Jul 30 21:00:53 proxmox kernel: scsi host4: uas_eh_device_reset_handler FAILED to get lock err -19
Jul 30 21:00:53 proxmox kernel: scsi host4: uas_eh_device_reset_handler FAILED err -19
Jul 30 21:00:52 proxmox kernel: usb 4-1: device firmware changed
Jul 30 21:00:52 proxmox kernel: usb 4-1: reset SuperSpeed USB device number 7 using xhci_hcd
Jul 30 21:00:52 proxmox kernel: scsi host4: uas_eh_device_reset_handler start
Jul 30 21:00:52 proxmox kernel: sd 4:0:0:0: [sdd] tag#15 CDB: Read(16) 88 00 00 00 00 01 7f c4 1a 00 00 00 00 08 00 00
Jul 30 21:00:52 proxmox kernel: sd 4:0:0:0: [sdd] tag#15 uas_eh_abort_handler 0 uas-tag 7 inflight: CMD IN 
Jul 30 21:00:41 proxmox kernel: sd 4:0:0:0: [sdd] tag#14 CDB: Read(16) 88 00 00 00 00 02 21 f8 3f 30 00 00 00 28 00 00
Jul 30 21:00:41 proxmox kernel: sd 4:0:0:0: [sdd] tag#14 uas_eh_abort_handler 0 uas-tag 6 inflight: CMD IN 
Jul 30 21:00:41 proxmox kernel: sd 4:0:0:0: [sdd] tag#13 CDB: Read(16) 88 00 00 00 00 02 21 bb 90 60 00 00 02 00 00 00
Jul 30 21:00:41 proxmox kernel: sd 4:0:0:0: [sdd] tag#13 uas_eh_abort_handler 0 uas-tag 5 inflight: CMD IN 
Jul 30 21:00:35 proxmox kernel: sd 4:0:0:1: [sde] tag#11 CDB: Write(10) 2a 00 3a 04 11 d0 00 00 18 00
Jul 30 21:00:35 proxmox kernel: sd 4:0:0:1: [sde] tag#11 uas_eh_abort_handler 0 uas-tag 4 inflight: CMD OUT 
Jul 30 21:00:30 proxmox kernel: sd 4:0:0:1: [sde] tag#8 CDB: Read(10) 28 00 31 01 09 28 00 00 08 00
Jul 30 21:00:30 proxmox kernel: sd 4:0:0:1: [sde] tag#8 uas_eh_abort_handler 0 uas-tag 2 inflight: CMD IN 
Jul 30 21:00:30 proxmox kernel: sd 4:0:0:0: [sdd] tag#10 CDB: Read(16) 88 00 00 00 00 01 7f c0 8d 10 00 00 00 08 00 00
Jul 30 21:00:30 proxmox kernel: sd 4:0:0:0: [sdd] tag#10 uas_eh_abort_handler 0 uas-tag 3 inflight: CMD IN 
Jul 30 21:00:30 proxmox kernel: sd 4:0:0:0: [sdd] tag#9 CDB: Read(16) 88 00 00 00 00 01 8c 99 cf e8 00 00 00 08 00 00
Jul 30 21:00:30 proxmox kernel: sd 4:0:0:0: [sdd] tag#9 uas_eh_abort_handler 0 uas-tag 1 inflight: CMD IN 
Jul 30 20:59:59 proxmox kernel: critical medium error, dev sdd, sector 6653857080 op 0x0:(READ) flags 0x4000 phys_seg 128 prio class 0
Jul 30 20:59:59 proxmox kernel: blk_print_req_error: 47 callbacks suppressed
Jul 30 20:59:59 proxmox kernel: sd 4:0:0:0: [sdd] tag#9 CDB: Read(16) 88 00 00 00 00 01 8c 99 cd 38 00 00 04 00 00 00
Jul 30 20:59:59 proxmox kernel: sd 4:0:0:0: [sdd] tag#9 Add. Sense: Unrecovered read error
Jul 30 20:59:59 proxmox kernel: sd 4:0:0:0: [sdd] tag#9 Sense Key : Medium Error [current] 
Jul 30 20:59:59 proxmox kernel: sd 4:0:0:0: [sdd] tag#9 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
Jul 30 20:56:01 proxmox postfix/smtp[3945942]: 2F670200A1A: to=<proxmox.snowcap946@passmail.net>, relay=mx2.simplelogin.co[176.119.200.136]:25, delay=330448, delays=330369/0.01/79/0, dsn=4.4.2, status=deferred (l>
Jul 30 20:55:42 proxmox postfix/smtp[3945942]: 2F670200A1A: lost connection with mx2.simplelogin.co[185.205.70.136] while receiving the initial server greeting
 

25
submitted 11 months ago* (last edited 10 months ago) by ohshit604@sh.itjust.works to c/selfhosted@lemmy.world
 

Evening y’all

I’ll try to keep it brief, I need to move my reverse proxy (traefik) to another machine and I’m opting to utilize Docker Swarm for the first time this way I’m not exposing a bunch of ports on my main server over my network, so ideally I’d like to have almost everything listening on local host while traefik does it’s thing in the background

Now I gotta ask, is Docker Swarm the best way to go about this? I know very little about Kubernetes and from what I’ve read/watched it seems like Swarm was designed for this very purpose however, I could be entirely wrong here.

What are some key changes that differ typical Compose files from Swarm?

Snippet of my current compose file:

services:
  homepage:
    image: ghcr.io/gethomepage/homepage
    hostname: homepage
    container_name: homepage
    networks:
      main:
        ipv4_address: 172.18.0.2
    environment:
      PUID: 0 # optional, your user id
      PGID: 0 # optional, your group id
      HOMEPAGE_ALLOWED_HOSTS: MY.DOMAIN,*
    ports:
      - '127.0.0.1:80:3000'
    volumes:
      - ./config/homepage:/app/config # Make sure your local config directory exists
      - /var/run/docker.sock:/var/run/docker.sock #:ro # optional, for docker integrations
      - /home/user/Pictures:/app/public/icons
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.homepage.rule=Host(`MY.DOMAIN`)"
      - "traefik.http.routers.homepage.entrypoints=https"
      - "traefik.http.routers.homepage.tls=true"
      - "traefik.http.services.homepage.loadbalancer.server.port=3000"
      - "traefik.http.routers.homepage.middlewares=fail2ban@file"
  traefik:
    image: traefik:v3.2
    container_name: traefik
    hostname: traefik
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    networks:
      main:
        ipv4_address: 172.18.0.26
    ports:
      # Listen on port 80, default for HTTP, necessary to redirect to HTTPS
      - target: 80
        published: 55262
        mode: host
      # Listen on port 443, default for HTTPS
      - target: 443
        published: 57442
        mode: host
    environment:
      CF_DNS_API_TOKEN_FILE: /run/secrets/cf_api_token # note using _FILE for docker secrets
      # CF_DNS_API_TOKEN: ${CF_DNS_API_TOKEN} # if using .env
      TRAEFIK_DASHBOARD_CREDENTIALS: ${TRAEFIK_DASHBOARD_CREDENTIALS}
    secrets:
      - cf_api_token
    env_file: .env # use .env
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./config/traefik/traefik.yml:/traefik.yml:ro
      - ./config/traefik/acme.json:/acme.json
      # - ./opt:/opt
      #- ./config/traefik/config.yml:/config.yml:ro
      - ./config/traefik/custom-yml:/custom
      # - ./config/traefik/homebridge.yml:/homebridge.yml:ro
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.traefik.entrypoints=http"
      - "traefik.http.routers.traefik.rule=Host(`traefik.MY.DOMAIN`)"
      #- "traefik.http.middlewares.traefik-ipallowlist.ipallowlist.sourcerange=127.0.0.1/32, 192.168.1.0/24, 208.118.140.130, 172.18.0.0/16"
      #- "traefik.http.middlewares.traefik-auth.basicauth.users=${TRAEFIK_DASHBOARD_CREDENTIALS}"
      - "traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme=https"
      - "traefik.http.middlewares.sslheader.headers.customrequestheaders.X-Forwarded-Proto=https"
      - "traefik.http.routers.traefik.middlewares=traefik-https-redirect"
      - "traefik.http.routers.traefik-secure.entrypoints=https"
      - "traefik.http.routers.traefik-secure.rule=Host(`traefik.MY.DOMAIN`)"
      #- "traefik.http.routers.traefik-secure.middlewares=traefik-auth"
      - "traefik.http.routers.traefik-secure.tls=true"
      - "traefik.http.routers.traefik-secure.tls.certresolver=cloudflare"
      - "traefik.http.routers.traefik-secure.tls.domains[0].main=MY.DOMAIN"
      - "traefik.http.routers.traefik-secure.tls.domains[0].sans=*.MY.DOMAIN"
      - "traefik.http.routers.traefik-secure.service=api@internal"
      - "traefik.http.routers.traefik.middlewares=fail2ban@file"

networks:
  main:
    external: true
    ipam:
     config:
       - subnet: 172.18.0.0/16
         gateway: 172.18.0.1

I censored out my actual domain with MY.DOMAIN so if that confuses people i apologize.


Update:

So, I’ve came across an application called Traefik-Kop which essentially allows for swarm like communication between traefik and two docker engines.

This isn’t full-proof as I do have to expose ports over the main server however, this was the simplest way of achieving what I was going for.

I want to say thank you to everyone who has commented I haven’t had much time to respond to comments here but I have read them all, y’all’s insight is much appreciated!

Update 2:

People here suggest Pangolin however, I just spent the last 3 hours trying to integrate pangolin with the Traefik instance that I already have setup, it was not fun, i couldn’t figure out how Pangolin is able to communicate with Traefik if it doesn’t expose any ports or define docker labels, once I figured out Pangolins web-ui runs on 3002:3002 I was able to reverse proxy it however, when attempting to login I kept running into 404 errors.

I’ll give it another go when I’m no longer frustrated with it as it does seem like the best route for me to take.

14
submitted 1 year ago* (last edited 1 year ago) by ohshit604@sh.itjust.works to c/linux@lemmy.ml
 

So recently I just come across Earlyoom and it has completely resolved my desktop crashing and better handles my memory, I was wondering if there is any other software that I’m missing that could potentially improve my systems resource handling?

Distro = Debian 12, KDE Plasma 5

view more: next ›