daily

Author: szepeviktor

CV-WordPress.md

@@ -44,7 +44,7 @@ Contact me: [email protected]
 Essentially keep every operation in memory!
 
 - Modern CPU, high *memory* bandwidth as WordPress is mainly memory copying,
-  sub-msec disk access time, use [UpCloud](https://www.upcloud.com/register/?promo=U29Q8S)
+  sub-msec disk access time, use [UpCloud](https://signup.upcloud.com/?promo=U29Q8S)
 - Thin virtualization layer, use UpCloud, stay away from popular, non-enterprise providers
 - Fast operating system: No systemd, Enough entropy, IRQ balance, Low memory usage
 - Block hammering attackers: Fail2ban, permanently block hostile networks

Onboarding.md

@@ -76,7 +76,7 @@ This section contains preparations for secure registration.
   [RDP on Windows](https://ci.freerdp.com/job/freerdp-nightly-windows/arch=win64,label=vs2013/)
   or [RDP on Mac](https://itunes.apple.com/us/app/microsoft-remote-desktop/id1295203466?mt=12)
 - Download [Palemoon browser](https://www.palemoon.org/download.php?mirror=eu&bits=64&type=installer)
-- Create UpCloud shortcut on the Desktop: `palemoon.exe "https://www.upcloud.com/register/?promo=U29Q8S"`
+- Create UpCloud shortcut on the Desktop: `palemoon.exe "https://signup.upcloud.com/?promo=U29Q8S"`
 - Create AWS shortcut: `"https://portal.aws.amazon.com/gp/aws/developer/registration/index.html"`
 - Download [`user.js`](https://github.com/szepeviktor/windows-workstation/blob/master/upcloud/user.js) to `%APPDATA%\Moonchild Productions\Basilisk\Profiles\`
 - Open On-Screen Keyboard for entering passwords

Onboarding2.md

@@ -81,7 +81,7 @@ Ebben a részben a biztonságos regisztrációkra készülünk fel.
   [RDP Windows PC-khez](https://ci.freerdp.com/job/freerdp-nightly-windows/arch=win64,label=vs2013/)
   vagy [RDP Mac gépekre](https://itunes.apple.com/us/app/microsoft-remote-desktop/id1295203466?mt=12)
 - [Palemoon böngésző](https://www.palemoon.org/download.php?mirror=eu&bits=64&type=installer) letöltése
-- UpCloud parancsikon kirakása az Asztalra: `basilisk.exe "https://www.upcloud.com/register/?promo=U29Q8S"`
+- UpCloud parancsikon kirakása az Asztalra: `palemoon.exe "https://signup.upcloud.com/?promo=U29Q8S"`
 - AWS parancsikon: `"https://portal.aws.amazon.com/gp/aws/developer/registration/index.html"`
 - [`user.js`](https://github.com/szepeviktor/windows-workstation/blob/master/upcloud/user.js)
   letöltése a `%APPDATA%\Moonchild Productions\Basilisk\Profiles\` mappába

debian-setup/debian-setup-functions.inc.sh

@@ -28,7 +28,7 @@ export -f Is_installed_regexp
 
 Pkg_install_quiet()
 {
-    DEBIAN_FRONTEND=noninteractive apt-get install -q -y "$@"
+    DEBIAN_FRONTEND=noninteractive NEEDRESTART_SUSPEND=1 apt-get install -q -y "$@"
 }
 export -f Pkg_install_quiet
 

debian-setup/packages/_package-python-pip

@@ -3,13 +3,15 @@
 set -e -x
 
 # Get pip
-Pkg_install_quiet python3-dev
-wget -nv "https://bootstrap.pypa.io/get-pip.py"
+Pkg_install_quiet python3-dev python3-pip
+
+##wget -nv "https://bootstrap.pypa.io/get-pip.py"
 
 # https://twitter.com/pear/status/1086634389465956352
 
-python3 get-pip.py
-rm get-pip.py
+##python3 get-pip.py --break-system-packages
+##rm get-pip.py
+##python3 -m pip uninstall --break-system-packages pip wheel
 
 # DEPRECATION: Python 2.7 reached the end of its life on January 1st, 2020.
 if [ "$(Data get-value package.python2.install-deprecated "False")" == True ]; then

debian-setup/packages/_resolv_conf

@@ -3,14 +3,14 @@
 declare -i RESOLVERS="0"
 # See resolv.conf(5)
 declare -i MAXNS="3"
-declare -r EXAMPLECOM_IP="93.184.215.14"
+declare -r EXAMPLECOM_NS="a.iana-servers.net."
 
 Check_resolver()
 {
     local NS="$1"
 
-    host -v -t A example.com "$NS" \
-        | grep -E -x "example\\.com\\.\\s+[0-9]+\\s+IN\\s+A\\s+${EXAMPLECOM_IP//./\\.}" 1>&2
+    host -v -t NS example.com "$NS" \
+        | grep -E -x "example\\.com\\.\\s+[0-9]+\\s+IN\\s+NS\\s+${EXAMPLECOM_NS//./\\.}" 1>&2
 }
 
 set -e -x

debian-setup/packages/mariadb-server

@@ -6,6 +6,7 @@ Pkg_install_quiet mariadb-server mariadb-client mariadb-backup
 
 # Disable the binary log
 sed -i -e 's/^log_bin/#&/' /etc/mysql/mariadb.conf.d/50-server.cnf
+sed -i -e 's/^expire_logs_days/#&/' /etc/mysql/mariadb.conf.d/50-server.cnf
 
 Dinstall mysql/mysql-optimize.sh
 

debian-setup/packages/s3ql

@@ -1,46 +1,34 @@
 #!/bin/bash
 #
-# Install S3QL 5.2.0 on Python 3.9
+# Install S3QL in Python venv
 #
 
-export PYTHONPATH="/opt/s3ql/lib/python3.9/site-packages"
+S3QL_VERSION="5.2.3"
+S3QL_PATH="/opt/s3ql"
 
 set -e -x
 
-py_pip_install()
-{
-    pip3 install --no-cache-dir --ignore-installed --no-warn-script-location --prefix "/opt/s3ql/" "$@"
-}
+Pkg_install_quiet python3-venv \
+    python3-dev build-essential pkg-config libffi-dev libattr1-dev libsqlite3-dev libfuse3-dev fuse3 psmisc
 
-py_make_launcher()
+python3 -m venv "${S3QL_PATH}"
 {
-    local BIN_PATH="$1"
-    local LAUNCHER_PATH="/usr/local/bin/${BIN_PATH##*/}"
-
-    # Generate launcher
-    # shellcheck disable=SC2086
-    printf '#!/bin/bash\nPYTHONPATH="%s" exec %s "$@"\n' \
-        "${PYTHONPATH}" "${BIN_PATH}" \
-        >"${LAUNCHER_PATH}"
-    chmod a+x "${LAUNCHER_PATH}"
-}
+    # shellcheck disable=SC1091
+    source "${S3QL_PATH}/bin/activate"
 
-Pkg_install_quiet python3-dev build-essential pkg-config libffi-dev libattr1-dev libsqlite3-dev libfuse3-dev fuse3 psmisc
+    # S3QL needs pyfuse3, pip-distributed apsw contains sqlite3
+    pip3 install --no-cache-dir 'pyfuse3 >= 3.2.0, < 4.0' 'apsw >= 3.42.0'
+    pip3 install --no-cache-dir "https://github.com/s3ql/s3ql/releases/download/s3ql-${S3QL_VERSION}/s3ql-${S3QL_VERSION}.tar.gz"
 
-# S3QL needs pyfuse3, pip distributed apsw contains sqlite3
-py_pip_install 'pyfuse3 >= 3.2.0, < 4.0' 'apsw >= 3.42.0'
-py_pip_install 'https://github.com/s3ql/s3ql/releases/download/s3ql-5.2.0/s3ql-5.2.0.tar.gz'
+    # List packages
+    pip3 list
 
-# Link all S3QL commands
-for BIN_PATH in /opt/s3ql/bin/*s3ql*; do
-    py_make_launcher "${BIN_PATH}"
-done
+    # Link all S3QL commands
+    for BIN_PATH in "${S3QL_PATH}/bin"/*s3ql*; do
+        ln --symbolic "${BIN_PATH}" "/usr/local/bin/${BIN_PATH##*/}"
+    done
 
-# List packages
-pip3 list --no-cache-dir --path "${PYTHONPATH}"
+    deactivate
+}
 
 s3qlctrl --version
-
-# List outdated packages
-#     pip3 list --no-cache-dir --path "${PYTHONPATH}" --outdated
-# Upgrade: remove and reinstall

monitoring/monit/services/ntpdate

@@ -14,6 +14,6 @@
    group ntpdate
    include /etc/monit/templates/rootbin
 
- check file ntpdate_rc with path /etc/default/ntpdate
+ check file ntpdate_rc with path /etc/default/ntpsec-ntpdate
    group ntpdate
    include /etc/monit/templates/rootrc

monitoring/monit/services/ntpdate_script

@@ -26,7 +26,7 @@ export NTPSERVERS="${*:-0.europe.pool.ntp.org}"
 declare -i OFFSET_MSEC
 
 OFFSET="$(/usr/sbin/ntpdate-debian -q \
-    | sed -n -e '0,/^.*: \(adjust\|step\) time server [0-9a-f.:]\+ offset [+-]\?\([0-9.]\+\) sec$/ s//\2/p')"
+    | sed -n -e '0,/^.*) [+-]\([0-9.]\+\) +\/- [0-9.]\+ .*$/ s//\1/p')"
 
 if [ -z "$OFFSET" ]; then
     Error 1 "Failed to measure offset"