What is ReBAR and Why Do I Want It Resizable BAR is a PCIe setting that allows the device (in this case GPU) to negotiate Base Address Register size (in this case access the whole frame buffer at once rather than in 256MB chunks). Some games make better use of this than others, and older
Read More »
Given LastPass has once more been compromised, and this time it has been confirmed that password vaults have been accessed by the attacker, now is a very good time to transition away from it. Personally I feel that Bitwarden is a very strong option for a password manager to transition to. It is open source,
Read More »
Create /etc/systemd/system/step-ca.service Fill it with this, make sure your directories are correct in the ExecStart line: [Unit] Description=step-ca After=syslog.target network.target [Service] User=step Group=step ExecStart=/bin/sh -c '/bin/step-ca /home/step/.step/config/ca.json --password-file=/home/step/.step/pwd >> /var/log/step-ca/output.log 2>&1' Type=simple Restart=on-failure RestartSec=10 [Install] WantedBy=multi-user.target Next, populate the pwd file with the plaintext intermediate CA password. I put mine in /home/step/.step/pwd Next, configure the
Read More »
Step-CA is a decent CA management program but it has one issue, its annoying to set the algorithm on the CA and intermediate CA. So I spent the day figuring it out. Here are the results. Choosing the Right Key Type There are 3 supported key types : EC (elliptic curve), OKP (octet for “Ed25519”
Read More »
#edit /etc/ssl/openssl.cnf Find [ ca ] and make sure this matches: #################################################################### [ ca ] default_ca = CA_default #default ca section #################################################################### [ CA_default ] dir = /etc/ssl # Where everything is kept certs = $dir/certs # Where the issued certs are kept crl_dir = $dir/crl # Where the issued crl are kept database =
Read More »
This will be a guide on advanced tuning for a VFIO gaming VM. If you’re starting from scratch, read through the Arch Wiki guide on PCI passtrhough via OVMF. It is a great starting point and covers all of the basics. I’d recommend using libvirt instead of straight QEMU. Host hardware configuration Before we begin,
Read More »
oVirt is a great product, and it’s hosted engine is a great concept. It is a mostly automated deploy of a VM containing the oVirt Hosted Engine and the initial setup of your first host. This is similar to how VMware and XCP-ng/XenServer does it, however the default install method of the hosted engine tries
Read More »
In the previous article I went over how to setup Grafana and InfluxDB. In this one, I’ll be going over how to make use of them to have a dashboard that show metrics from a pfSense firewall. Going forward I will assume that you have Grafana and InfluxDB configured as described in the previous article,
Read More »
Grafana is a platform used to visualize and analyze data from your network. It also has the ability to send alerts when certain conditions are met, and can import data from many of the popular ways to store it. I’ve recently been dedicating quite a bit of time to getting better at using it and
Read More »
Each distro needs different packages to compile the code there are pre-made binaries available, Build Dependencies Each distro needs different packages to compile the code Install the appropriate packages for you distro. I’ll update them as I discover them Ubuntu 16-18 apt install -y unzip build-essential zlib1g-dev libsqlite3-dev libpcre2-dev wget unzip make gcc php php-cli
Read More »