Le Blog Utux

HTTP 200 GET /

SELinux: playing with podman + syncthing

Rédigé par uTux Aucun commentaire

For some reasons I use syncthing inside a container with a volume that is located in my home directory. While it's designed to run on Docker, it also works fine with podman which is rootless.

Until SELinux kicks in.

In this post I will try to explained how I managed to make syncthing work inside a podman container on a host where SELinux is present and enforced.

Major warning: I'm not an SELinux expert, and I noticed that policies generated by udica are quite permissive. This is a quick & dirty & easy solution for those who don't want to turn off SELinux.

Lire la suite de SELinux: playing with podman + syncthing

AlmaLinux 9 KDE: remove unwanted packages

Rédigé par uTux Aucun commentaire

AlmaLinux provides some "Live" images with various desktop environments. I installed the KDE "spin" and found out that there is a crap load of useless / unwanted packages. Here are my notes to disable them.

Packages that I don't need:

$ sudo dnf remove kmines kmahjongg kolourpaint kruler akregator kmail konversation dragon juk kamoso kaddressbook korganizer plasma-discover flatpak* sssd* java-11-openjdk-headless oddjob

You may want to keep sssd and oddjob if your workstation has membership to an Active Directory. You may also want to keep plasma-discover if you want a GUI to search for packages and have software updates notifications.

Softwares that can be a security issue on a workstation (they may listen for connections or allow unwanted remote access):

$ sudo dnf remove cockpit* krfb krdc hyperv* mariadb* open-vm-tools qemu-guest-agent spice-vdagent tcpdump openssh-server

It's a shame that AlmaLinux and RockyLinux do not provide a "minimal" KDE Live image, or a clear documentation to install a minimal set of packages. Let's hope that KDE gets more attention from Red Hat for the next major release!

My experiments with rnnoise (an alternative to NVIDIA Broadcast)

Rédigé par uTux Aucun commentaire

I've been using NVIDIA Broadcast for years, a magic tool that helps me to record my voice by removing static / white / ambient noise and even nullifying the reverberation in my room. This software requires of course Microsoft Windows AND an NVIDIA card.

The result was quite impressive but I needed an alternative since I don't use Windows any longer neither an NVIDIA card. That's when I found out rnnoise which is a free software compatible with Linux.

Note: I will explaine how use rnnoise to convert a raw or wav file. I don't know how to use it to filter out audio on a live stream. I assume it's possible since rnnoise is a library that can be used as a plugin for obs-studio or pipewire but I just didn't try that part.

Lire la suite de My experiments with rnnoise (an alternative to NVIDIA Broadcast)

Mon désintérêt du gaming depuis bientôt 10 ans

Rédigé par uTux Aucun commentaire

Attention, cet article purement subjectif sera agrémenté d'une touche de "c'était mieux avant".

Mon profil : bientôt quarantenaire, j'ai commencé le gaming dans les années 90 sous DOS, j'ai connu la transition de la 2D vers la 3D, les LAN party, l'avènement du dématérialisé, la disparition des supports physiques. Je suis un pur gamer solo et le multijoueurs en ligne ne m'intéresse pas du tout. Autant dire qu'en 2024 je fais partie de la minorité de joueurs qui ne rapporte pas d'argent aux éditeurs.

Lire la suite de Mon désintérêt du gaming depuis bientôt 10 ans

Monitor your Zabbix proxies!

Rédigé par uTux Aucun commentaire

We had that crazy situation where a Zabbix Proxy was down (VM stopped) and we had no idea about it.

That was quite the surprise because "Well, we should have had a crapload of 'No data' alerts from every host that report to that proxy". Spoiler alert: No, we didn't. We lost monitoring over hundreds of hosts for 24+ hours and everything was fine in Zabbix UI. In fact I realized that situation when the network engineer asked me why his Zabbix dashboards were empty.

Lire la suite de Monitor your Zabbix proxies!

Fil RSS des articles