You are currently browsing the System Administration category
Displaying 1 - 10 of 18 entries.

Inetutils: ftpd with extensive logging

  • Posted on December 2, 2018 at 13:58

By default this ftp-server does not log a lot by default.

To enable extensive logging to the default logger use the –debug option

Example systemd-script

Description=FTPD Daemon

ExecStart=/usr/bin/ftpd --daemon --debug
ExecStopPost=/usr/bin/rm -f /run/




Perl and macOS Mojave: Header files not found. Use Perlbrew!

  • Posted on November 29, 2018 at 23:15

Having trouble in CPAN, getting messages like: fatal error: ‘EXTERN.h’ file not found.
Use Perlbrew and all your worries are gone.

$ brew install perl

$ brew link –overwrite perl

After this Perl and CPAN are installed /usr/local/bin:

$ which perl cpan




LISA Prerequisites

  • Posted on January 1, 2016 at 15:34

Super Quick Start Guide II: LISA

# pacman -Sy perl-dbd-pg
# cpan
cpan> install lib::relative
cpan> install Filesys::Df
cpan> install Moose
cpan> install namespace::autoclean
cpan> install DBI
cpan> install SQL::Abstract
cpan> install xxHash
cpan> install Filesys::DiskFree
cpan> install Filesys::Path
cpan> install Config::Simple
cpan> install Email::Send::SMTP::TLS
cpan> install Email::Simple

File names:

  • Transponder:
    Call: ./transponder/ 3
  • Heartbeat Share Checker:
    Call: .heartbeat// –runmode=3 –interval=60
  • Acquire Storage Device: lisa-dn-acquire-storage-device-1.3.1pl
    Call: ./bootdisk/lisa-dn-acquire-storage-device-1.3.1pl 3
  • Acquire Computer:
    Call: ./bootdisk/ 3

Everything you really need in Arch

  • Posted on December 13, 2015 at 18:07

Creating a list of everything installed:

# pacman -Qe | awk '{print $1 " \\" }'


apache \
atril \
autoconf \
automake \
bash \
bind-tools \
binutils \
bison \
bzip2 \
caja-gksu \
caja-image-converter \
caja-open-terminal \
caja-sendto \
caja-share \
coreutils \
cryptsetup \
device-mapper \
dcfldd \
dhcpcd \
dialog \
diffutils \
e2fsprogs \
engrampa \
eom \
fakeroot \
file \
filesystem \
findutils \
flex \
foremost \
fping \
galculator-gtk2 \
gawk \
gcc \
gcc-libs \
gettext \
glibc \
grep \
groff \
grub \
gzip \
hfsprogs \
htop \
inetutils \
iproute2 \
iputils \
jfsutils \
less \
libtool \
licenses \
lightdm \
linux \
logrotate \
lsof \
lvm2 \
m4 \
make \
man-db \
man-pages \
marco \
mate-applets \
mate-backgrounds \
mate-control-center \
mate-icon-theme-faenza \
mate-media \
mate-netspeed \
mate-notification-daemon \
mate-power-manager \
mate-screensaver \
mate-sensors-applet \
mate-system-monitor \
mate-terminal \
mate-themes \
mate-user-guide \
mate-user-share \
mate-utils \
mc \
mdadm \
mlocate \
mozo \
mtools \
nano \
net-tools \
netctl \
nfs-utils \
nmap \
openssh \
os-prober \
p7zip \
php-apache \
php-gd \
pacman \
par2cmdline \
patch \
pciutils \
pcmciautils \
perl \
perl-dbd-pg \
pkg-config \
pluma \
postgresql \
procps-ng \
psmisc \
reiserfsprogs \
rsync \
s-nail \
screen \
sed \
shadow \
sleuthkit \
sshfs \
sudo \
sysfsutils \
tar \
testdisk \
texinfo \
tree \
unrar \
usbutils \
util-linux \
vi \
vim \
vimpager \
wget \
which \
xfsprogs \
zip \

And then CPAN:


Arch LAMP: Super quick start guide

  • Posted on October 7, 2015 at 19:14

Get your terminal ready…

Install necessary packages

# pacman -S --noconfirm apache
# pacman -S --noconfirm mysql

Set DocumentRoot in /etc/http/conf/httpd.conf

Afterwards continue install PHP stuff…

# pacman -S --noconfirm php-apache
# pacman -S --noconfirm php
# pacman -S --noconfirm php-gd

Uncomment some extensions (modules) in /etc/php/php.ini

Now it’s time to configure your Virtual Hosts in /etc/httpd/conf/extra/httpd-vhosts.conf
When all is done, check your configuration and make Apache en MySQL startup automatically from now on

# apachectl configtest
# systemctl enable httpd
# systemctl enable mysql

Done! Happy webserving!



Deduplicating: EWF vs Raw

  • Posted on August 4, 2015 at 14:24

Is ‘good old’ Expert Witness Format still the preferred choice?

In the recent years huge centralized storage has become pretty much a standard everywhere. And pretty much everywhere EWF has become standard for forensics imaging.
I wonder if this is still the most optimal combination from the perspective of storage-efficiency.

How does deduplicating perform on ewf-images compared to raw? In fact, my assumption is: The more raw images saved to a deduplicating volume, the more efficient duplicating will do its job.


Let’s bring them to the test!

After booting up with a Windows 7 machine, I imaged the boot disk using EnCase 6. (run 1)
Immediately after, I initiated a second acquisition using the same EnCase session (run 2)
All settings for acquisition are kept to default, using ‘Good compression’ and a split size of 640MB.

FTK Imager
After EnCase finished both acquisition sessions successfully, I started two acquisition sessions with FTK Imager using the same approach: Start one, When it runs, start session number two.

Changing WordPress Header-text

  • Posted on September 3, 2014 at 18:38

Status change

Up until about a year ago I thought of myself as an IT-guy lacking ambition. You may have read about it.
But things can change! People can change. Your status can change…

But what if you have your status listed as an under-title in your WordPress-blog?
You would update, you say?
Yes, but how in the world can you do that in WordPress?



To cut a long story short; I didn’t really find an easy way on changing the layout of what WorPress calls the Header-text. Of course, changing the text is not a problem. But specifically changing the layout or making it an hyperlink. That’s where it gets troubling.

Finding the header-text in the database was doable:

MySQL Query: Header text

Updating using SQL was also a peace of cake. But inserting HTML-code appeared to be ‘impossible’.
WordPress, or Apache, or PHP, whoever you want to blame, just renders the HTML to unformatted text. And that is not cool!



I just edited the header.php file, and added raw HTML.
File: [apacheroot]/wordpress/wp-content/themes/purple-pastels/header.php

VIM Screenshot of header.php

This is particularly a solution that I am not proud of. But I am proud of the result!

Just have to keep in mind that an update of the theme my so beloved updated header-text will be gone.
Therefor I documented all this.

GRUB: Change Splash-screen

  • Posted on July 26, 2014 at 02:37


  • Make sure you make it with GIMP Creating with Photoshop and saving (in different formats) never worked for me. Even opening the Photoshop-image with GIMP and saving it afterwards was not good enough for GRUB.
  • You can place the image everywhere. If you want to place it with the original grub-splashes, this is a good place: /usr/share/images/desktop-base.
  •  Then edit /etc/default/grub. Add the line:
  • Update GRUB
# update-grub2



  •  Create a file called /boot/grub/custom.cfg and add the lines:
set color_normal=light-black/black
set color_highlight=white/black



Maybe you would like to change the menu entries:
Edit /etc/grub.d/10_linux
(You can find them starting with title=. I added LISA for this example)

linux_entry ()
  if ${recovery} ; then
    title="$(gettext_quoted "LISA %s, with Linux %s (recovery mode)")"
    title="$(gettext_quoted "LISA %s, with Linux %s")"


And then when you reboot things may look like this:
(If you’re lucky)






Clone Debian over SSH using Rsync

  • Posted on January 5, 2014 at 03:11

A simple walk-through

On the target machine:

  • Net-install the same Debian-distro with Graphical User-Environment and SSH-Server
  • Boot that the new installed Debian OS
  • Install some tools:
    # apt-get install rsync parted htop xfsprogs
  • If you feel like it: Make a separate /home – partition, mount it, and add it to you /etc/fstab
  • Secure your fstab:
    # cp /etc/fstab /boot/_etc_fstab
  • Start the SSH-Server:
    # /etc/init.d/ssh start
  • Get the target IP:
    # ifconfig -a eth0


On the original machine:

  • Go cloning:
    # rsync -aAXv --delete --progress --exclude={/boot/*,/dev/*,/mnt/*,/proc/*,/sys/*,/tmp/*,/run/*,/media/*,/lost+found} --rsh='ssh -p22' /* root@ip-target-machine:/


Go back to your target machine and copy back your fstab and reboot:

  • Restore your fstab:
    # cp -f /boot/_etc_fstab /etc/fstab
  • Reboot:
    # shutdown -r now

Have fun with your fresh Debian install!
Well fresh… “Your already configured Debian install”.

Don’t forget to re-install your VMware-Tools! Your GRUB may needs updating for some extra kernel-parameters.


ZFS: Deduplicating is not a myth!

  • Posted on February 9, 2013 at 20:44

Long time no see!

After having it put away for, I guess almost 2 years, I took a look at ZFS again.
In ‘the early days’ ZFS only had a Linux-implementation using FUSE. An implementation which I liked from a Nerdish point-of-view, but not so much as a serious replacement for XFS on my operational Linux machines.

Since SSD is commonly available now, and all my operational servers have at least 16 cores, it was time to reevaluate the possibilities of ZFS on Linux again.

I was not disappointed! My oh my…


The ZFSonLinux Gentoo 64bit Walk-through:
(Using VMware Fusion 5)

  • Create a Gentoo Linux 64bit VM, add 4GB RAM at least, and the disks:
  • 1 Boot disk, 80GB
  • 4 Data disks, each 2TB. Single file, Do not Preallocate diskspace! Important!
  • 1 Cache disk, 20GB. Preallocating is advised. Not necessary.
  • Install Gentoo
  • Install sys-fs/zfs sys-fs/zfs-kmod
  • add ‘modules_3_6=”zfs”‘ to /etc/conf.d/modules
  • insmod /lib64/modules/3.6.11-gentoo/addon/zfs/zfs/zfs.ko
  • zpool create deduptestvol raidz -f /dev/sdf /dev/sdg /dev/sdh /dev/sdi
  • zpool add -f deduptestvol cache /dev/sdj
  • zfs set atime=off deduptestvol
  • zfs set dedup=on deduptestvol

The ZFS-volume, named deduptestvol, should be up and running right now. Typically it is mounted automatically under /.
Let’s check:


Testing the dedup-capabilities

  • I made one volume, with the same size, also RAIDZ
  • Created one file of exactly 1000MegaBytes
    (# dd if=/dev/random of=/data bs=100M count=10)
  • Copied that file over for 32 times
  • Then I copied that whole directory to the volume with deduplicating switched on.
  • On my host machine, I took a look a the disk space consuming.

Some proofs

Some recursive MD5’s over both volumes:



For saving 32Gigabyte of data in traditional RAID5:

The ‘normal’ ZFS-Volume consumed 44G of virtual disk-space.
The Deduplicated ZFS-Volume consumed 3.6G of virtual disk-space.

“ZFS is the shit!”