reklama

Zobrazit příspěvky

Tato sekce Vám umožňuje zobrazit všechny příspěvky tohoto uživatele. Prosím uvědomte si, že můžete vidět příspěvky pouze z oblastí Vám přístupných.


Témata - tuxmartin

Stran: [1] 2 3 ... 7
1
Software / Nahrávání VNC do video souboru
« kdy: 27. 03. 2019, 17:27:26 »
Ahoj, potrebuju nahrat VNC do video souboru.

VNC bude pouze pro zobrazeni, bez ovladani. Nasel jsem par starych programu, napr. vncrec z roku 2006, ale je to vse moc stare a nefunguje mi to.

Naposledny jsem zkousel vnc2flv, ale ten se zase nepripoji k VNC.
VNC server je nejaky divny stroj, ktery tak zobrazuje ovladaci panel. V linuxu jsem zkousel asi 5 vnc klientu (mezi nima i novy realvnc) a pripoji se jen xtightvncviewer.
Ale to zkusim nejak vyresit.

Dulezite pro me je sehnat neco, co bude umet nahravat vnc nejlepe do mp4 videa. Idealne by to cele melo bezet bez X.

Mate na neco funkcniho tip?

2
Ahoj,

snazim se na Raspberry Pi s GUI Raspbianem nahrat video, na kterem bude videt obsah na monitoru.
Problem je, ze mi u toho hraje omxplayer a ten na vystupnim videu videt neni, jen prazdna pracovni plocha.
Zkousel jsem:
Kód: [Vybrat]
ffmpeg -y -f x11grab -i :0.0 -r 25 -s 1920x1080 -c:v h264_omx -b:v 4096k -bufsize 4096k /tmp/out.mp4
#Input #0, x11grab, from ':0.0':
# Duration: N/A, start: 1553691698.567273, bitrate: N/A
#    Stream #0:0: Video: rawvideo (BGR[0] / 0x524742), bgr0, 640x480, 29.97 fps, 29.97 tbr, 1000k tbn, 1000k tbc
#[h264_omx @ 0xd4a1d0] Using OMX.broadcom.video_encode


ffmpeg -y -f x11grab -i :0.0 -r 25 -s 1920x1080 -c:v h264_omx -b:v 4096k -bufsize 4096k /tmp/out.mp4
#Input #0, fbdev, from '/dev/fb0':
#  Duration: N/A, start: 1553691734.348188, bitrate: 1435852 kb/s
#    Stream #0:0: Video: rawvideo (BGRA / 0x41524742), bgra, 1824x984, 1435852 kb/s, 25 fps, 1000k tbr, 1000k tbn, #1000k tbc
#[h264_omx @ 0x2140600] Using OMX.broadcom.video_encode

V prvnim pripade bych to pochopil - zde se nahrava X display :0.0 a  omxplayer vyresluje primo na framebuffer.
Je videt pouze 640x480 - proc?

Ovsem druhy pripad nechapu. Zde se nahrava primo famebuffer /dev/fb0 a mam i specifikovane rozliseni. Prehravac videt neni, jenom plocha.

Jinak vystupni video je vzdy 1920x1090, ale je do nej roztazen stream - jednou 640x480 a podruhe 1824x984.
Co delam spatne? A jak mohu nahrat screencast video raspberry pi se spustenym omxplayerem?

3
Ahoj,
mam ctyri Raspberry Pi, ktere maji pripojenou kamerou a pres RTSP streamuji video:

Kód: [Vybrat]
raspivid -o - -t 0 -hf -w 960 -h 540 -fps 25 --rotation 180 -a 1028 -a "Stroj 1 (%Y-%m-%d %X)" | cvlc -vvv stream:///dev/stdin --sout '#rtp{sdp=rtsp://:8554}' :demux=h264
Pak mam 5. Raspberry Pi, ktere zobrazuje na monitoru videa ze 4 predchozich RPi (+ tam mam dodelanou detekci, kdyz to spadne, aby se zacalo po 15s znova prehravat):
Kód: [Vybrat]
screen -dmS stroj1 sh -c  \"omxplayer --live --timeout 60 --win '0 0 960 540'       'rtsp://10.20.30.1:8554/' \"";
screen -dmS stroj2 sh -c  \"omxplayer --live --timeout 60 --win '960 0 1920 540'    'rtsp://10.20.30.2:8554/' \"";
screen -dmS stroj3 sh -c  \"omxplayer --live --timeout 60 --win '0 540 960 1080'    'rtsp://10.20.30.3:8554/' \"";
screen -dmS stroj3 sh -c  \"omxplayer --live --timeout 60 --win '960 540 1920 1080' 'rtsp://10.20.30.4:8554/' \"";

Vse funguje skvele.
Mam to napocitane na FullHD/4, takze kazda kamera ma rozliseni pres 1/4 FullHD (960x540).

Nyni bych ale krome zobrazovani potreboval split-screen 4 videii nahravat.
Napada me poskladat videa pres FFmpeg, ale pak bych musel enkodovat vse do h264 a na to by bylo potreba hodne vykonu.
Mam k dispozici jen 5 kusu Raspberry Pi 3B a jeden Intel NUC s Celeron J3455, ve kterem je take velky disk, na ktery chci videa ukladat.

Pri nejhorsim budu ukladat 4 samostatne streamy do samostatnych souboru, ale moc rad bych jen jedno video.

Napada nekoho, jak to ukladat bez nutnosti prekodovani?
Vlastne chci funkci, kterou meli stare analogove bezpecnostni kamerove systemy :-)

4
Ahoj,


Tl;DR:

  • Da se pres USB-C pripojit dva digitalni FullHD monitory, nebo potrebuji Thunderbolt3?
  • Jaka nejlevnejsi dokovaci stanice (klidne z ciny), ma 2x digitalni FullHD vystup a 1x Gb ethernet a par USB?

poohlizim se po novem notebooku, kterym bych nahradil stary Lenovo ThinkPad X220.
K X220 mam tri dokovaci stanice a u kazde dva 24" (na jednom miste 2x 27") FullHD monitory. Nemuzu si to vynachvalit. Desktop nechci, abych nemusel resit synchronizaci dat. Ale Sandy Bridge uz je proste stary...

Idelane co nejmensi a nejlehci notebook. Vzhled a rozliseni me netrapi, 95% casu je notebook v dokovacich stanicich.

Vaham nejvic mezi:
  • Lenovo ThinkPad L480
  • Dell XPS 13

ale potreboval bych poradit s dokovaci stanici, bez ktere nechci/nedokazu fungovat.

Urcite chci USB-C Power Delivery, abych do notebooku pripojoval pouze jeden kabel i s napajenim.

Oba notebooky, o kterych uvazuji maji Thunderbolt 3, ale stale nevim, jestli je to pro me nutnost.

Za 250 Kc se da koupit adapter z USB-C na 1x USB3, 1X HDMI a 1x USB-C.
To je neskutecne levna cena.
Predpokladam, ze jen staci, aby notebook umel USB-C DisplayPort Alt Mode.
Casto se chlubi 4k, ale to je mi na nic. Ja potrebuju 2x digitalne 1920x1080.
Nebo sa daji dat dva tyto levne adaptery do serie? Pochybuji, tekzo by to slo.

Na USB-C se mi nepodarilo najit adpater na 2 digitalni monitory. Nektere drazsi maji HDMI, DVI-D a VGA. Ovsem vetsinou jde soucasne VGA a jeden digitalni. Nikdy vsak oba digitalni.

Takze chapu spravne, ze potrebuji Thunderbolt3 dokovaci stanici pro dva digitalni video vystupy?
Zadne moje monitory DipslayPort daisy-chain neumi.

Sice jsem nasel levne Thunderbolt3 dokovaci stanice, ale opet maji jen jeden (sice 4k, ale na co?) digitalni vystup na monitor.

stanice s podporou 2 digitalnich monitoru vyjde na 4 400 Kc. Coz je dost, kdyz chci tri dokovaci stanice...

  • Da se pres USB-C pripojit dva digitalni FullHD monitory, nebo potrebuji Thunderbolt3?
  • Jaka nejlevnejsi dokovaci stanice (klidne z ciny), ma 2x digitalni FullHD vystup a 1x Gb ethernet a par USB?


Dekuji za rady.

5
Ahoj,
mam tu dve tiskarny:
  • HP Color LaserJet Pro MFP M176n
  • HP Color LaserJet MFP M280nw
a potrebuju u nich hlidat zabbixem pocet vytisknutych stranek. Jde mi hlavne o sledovani zmeny v case.

Zde jsou kompletni vystupy snmpwalk: https://gist.github.com/tuxmartin/494770920a3ae9ca6e5ef328c308c593

Kdyz se ptam na iso.3.6.1.2.1.43.10.2, tak mi neco vrati jen novejsi tiskarna M280. Stara M176 nevraci vubec nic.

Kód: [Vybrat]
martin@martin:~$ snmpwalk -v 1 -mALL -c public 10.67.1.7 iso.3.6.1.2.1.43.10.2 # HP_M176n
martin@martin:~$

martin@martin:~$ snmpwalk -v 1 -mALL -c public 10.67.1.16 iso.3.6.1.2.1.43.10.2 # HP_M280nw
Printer-MIB::prtMarkerMarkTech.1.1 = INTEGER: electrophotographicLaser(4)
Printer-MIB::prtMarkerCounterUnit.1.1 = INTEGER: impressions(7)
Printer-MIB::prtMarkerLifeCount.1.1 = Counter32: 6
Printer-MIB::prtMarkerPowerOnCount.1.1 = Counter32: 1
Printer-MIB::prtMarkerProcessColorants.1.1 = INTEGER: 1
Printer-MIB::prtMarkerSpotColorants.1.1 = INTEGER: 0
Printer-MIB::prtMarkerAddressabilityUnit.1.1 = INTEGER: tenThousandthsOfInches(3)
Printer-MIB::prtMarkerAddressabilityFeedDir.1.1 = INTEGER: 600
Printer-MIB::prtMarkerAddressabilityXFeedDir.1.1 = INTEGER: 600
Printer-MIB::prtMarkerNorthMargin.1.1 = INTEGER: 1667
Printer-MIB::prtMarkerSouthMargin.1.1 = INTEGER: 1667
Printer-MIB::prtMarkerWestMargin.1.1 = INTEGER: 1667
Printer-MIB::prtMarkerEastMargin.1.1 = INTEGER: 1667
Printer-MIB::prtMarkerStatus.1.1 = INTEGER: 0
martin@martin:~$


Pritom obe tiskarny mi ve webove adminsitrace na http://IP.AD.RE.SA/info_configuration.html zobrazuji pocty stran (obrazek v priloze).

Existuje nejaka moznost, jak nastavit tiskarnu, aby pres SNMP tyto informace poskytovala?
Nebo mam smulu a musim zkusit reseni typu curl+grep?

6
Sítě / IPsec server na Linuxu pro MikroTik klienty
« kdy: 19. 10. 2018, 22:20:03 »
Ahoj,
snazim se uz druhym dnem rozjet na Linuxu IPsec server. Do te doby jsem s IPsec nikdy nedelal.

Pouzil jsem strongSwan, ktery ma balicky v Debianu a Ubuntu.
Mam Ubuntu 18.04 a strongSwan 5.6.2.

Dalo mi dost prace rozchodit IKEv2 s databazi uzivatelu a IP poolem ve FreeRADIUSu, ale nakonec se podarilo (funkcni je sekce "conn ikev2-vpn").
Pro strongSwan pouzivam Let's Encrypt certifikat.
Bohuzel jak jsem zjistil, oficialni strongSwan app na Androidu funguje, ale MikroTik se k tomutu typu IPsec pripojit neumi (integrovany Android VPN klient ake ne).

Takze se snazim rozchodit strongSwan, aby byl IPsec serverem pro MikroTik (hAp lite) klienty.
Idealne bych se rad vyhnul klientskym certifikatum a pouzil jenom jmeno+heslo. Bylo by to mnohem snazsi na nastavovani MikroTiku.

Me snazeni je v sekci "conn xauth-ikev1-mikrotik". Jenze MikroTik se nedokaze pripojit, stale do logu sype tyto chyby:

Kód: [Vybrat]
       #  tail -F /var/log/syslog | grep "ipsec\|charon"
Oct 19 18:13:51 vpn charon: 02[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500]
Oct 19 18:13:51 vpn charon: 02[NET] waiting for data on sockets
Oct 19 18:13:51 vpn charon: 08[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500] (440 bytes)
Oct 19 18:13:51 vpn charon: 08[ENC] parsed IKE_SA_INIT request 0 [ N(NATD_D_IP) N(NATD_S_IP) No KE SA ]
Oct 19 18:13:51 vpn charon: 08[CFG] looking for an ike config for 6.7.8.9...1.2.3.4
Oct 19 18:13:51 vpn charon: 08[IKE] no IKE config found for 6.7.8.9...1.2.3.4, sending NO_PROPOSAL_CHOSEN
Oct 19 18:13:51 vpn charon: 08[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
Oct 19 18:13:51 vpn charon: 08[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500] (36 bytes)
Oct 19 18:13:51 vpn charon: 08[IKE] IKE_SA (unnamed)[1] state change: CREATED => DESTROYING
Oct 19 18:13:51 vpn charon: 03[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500]
Oct 19 18:14:02 vpn charon: 02[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500]
Oct 19 18:14:02 vpn charon: 02[NET] waiting for data on sockets
Oct 19 18:14:02 vpn charon: 06[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500] (440 bytes)
Oct 19 18:14:02 vpn charon: 06[ENC] parsed IKE_SA_INIT request 0 [ N(NATD_D_IP) N(NATD_S_IP) No KE SA ]
Oct 19 18:14:02 vpn charon: 06[CFG] looking for an ike config for 6.7.8.9...1.2.3.4
Oct 19 18:14:02 vpn charon: 06[IKE] no IKE config found for 6.7.8.9...1.2.3.4, sending NO_PROPOSAL_CHOSEN
Oct 19 18:14:02 vpn charon: 06[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
Oct 19 18:14:02 vpn charon: 06[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500] (36 bytes)
Oct 19 18:14:02 vpn charon: 06[IKE] IKE_SA (unnamed)[2] state change: CREATED => DESTROYING
Oct 19 18:14:02 vpn charon: 03[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500]
Oct 19 18:14:12 vpn charon: 02[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500]
Oct 19 18:14:12 vpn charon: 02[NET] waiting for data on sockets
Oct 19 18:14:12 vpn charon: 13[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500] (440 bytes)
Oct 19 18:14:12 vpn charon: 13[ENC] parsed IKE_SA_INIT request 0 [ N(NATD_D_IP) N(NATD_S_IP) No KE SA ]
Oct 19 18:14:12 vpn charon: 13[CFG] looking for an ike config for 6.7.8.9...1.2.3.4
Oct 19 18:14:12 vpn charon: 13[IKE] no IKE config found for 6.7.8.9...1.2.3.4, sending NO_PROPOSAL_CHOSEN
Oct 19 18:14:12 vpn charon: 13[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
Oct 19 18:14:12 vpn charon: 13[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500] (36 bytes)
Oct 19 18:14:12 vpn charon: 13[IKE] IKE_SA (unnamed)[3] state change: CREATED => DESTROYING
Oct 19 18:14:12 vpn charon: 03[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500]
Oct 19 18:14:23 vpn charon: 02[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500]
Oct 19 18:14:23 vpn charon: 02[NET] waiting for data on sockets
Oct 19 18:14:23 vpn charon: 04[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500] (440 bytes)
Oct 19 18:14:23 vpn charon: 04[ENC] parsed IKE_SA_INIT request 0 [ N(NATD_D_IP) N(NATD_S_IP) No KE SA ]
Oct 19 18:14:23 vpn charon: 04[CFG] looking for an ike config for 6.7.8.9...1.2.3.4
Oct 19 18:14:23 vpn charon: 04[IKE] no IKE config found for 6.7.8.9...1.2.3.4, sending NO_PROPOSAL_CHOSEN
Oct 19 18:14:23 vpn charon: 04[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
Oct 19 18:14:23 vpn charon: 04[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500] (36 bytes)
Oct 19 18:14:23 vpn charon: 04[IKE] IKE_SA (unnamed)[4] state change: CREATED => DESTROYING
Oct 19 18:14:23 vpn charon: 03[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500]
Oct 19 18:14:34 vpn charon: 02[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500]
Oct 19 18:14:34 vpn charon: 02[NET] waiting for data on sockets
Oct 19 18:14:44 vpn charon: 02[NET] waiting for data on sockets
Oct 19 18:14:44 vpn ipsec[30143]: 04[CFG]   sha256_96=no
Oct 19 18:14:44 vpn ipsec[30143]: 04[CFG]   mediation=no
Oct 19 18:14:44 vpn ipsec[30143]: 04[CFG]   keyexchange=ikev2
Oct 19 18:14:44 vpn ipsec[30143]: 04[CFG] algorithm 'saha256' not recognized
Oct 19 18:14:44 vpn ipsec[30143]: 04[CFG] skipped invalid proposal string: aes128-saha256-ecp256
Oct 19 18:14:44 vpn ipsec[30143]: 02[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500]
Oct 19 18:14:44 vpn ipsec[30143]: 02[NET] waiting for data on sockets
Oct 19 18:14:44 vpn ipsec[30143]: 08[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500] (440 bytes)
Oct 19 18:14:44 vpn ipsec[30143]: 08[ENC] parsed IKE_SA_INIT request 0 [ N(NATD_D_IP) N(NATD_S_IP) No KE SA ]
Oct 19 18:14:44 vpn ipsec[30143]: 08[CFG] looking for an ike config for 6.7.8.9...1.2.3.4
Oct 19 18:14:44 vpn ipsec[30143]: 08[IKE] no IKE config found for 6.7.8.9...1.2.3.4, sending NO_PROPOSAL_CHOSEN
Oct 19 18:14:44 vpn ipsec[30143]: 08[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
Oct 19 18:14:44 vpn ipsec[30143]: 08[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500] (36 bytes)
Oct 19 18:14:44 vpn ipsec[30143]: 08[IKE] IKE_SA (unnamed)[1] state change: CREATED => DESTROYING
Oct 19 18:14:44 vpn ipsec[30143]: 03[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500]
Oct 19 18:14:44 vpn ipsec[30143]: 02[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500]
Oct 19 18:14:44 vpn ipsec[30143]: 02[NET] waiting for data on sockets
Oct 19 18:14:44 vpn ipsec[30143]: 06[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500] (440 bytes)
Oct 19 18:14:44 vpn ipsec[30143]: 06[ENC] parsed IKE_SA_INIT request 0 [ N(NATD_D_IP) N(NATD_S_IP) No KE SA ]
Oct 19 18:14:44 vpn ipsec[30143]: 06[CFG] looking for an ike config for 6.7.8.9...1.2.3.4
Oct 19 18:14:44 vpn ipsec[30143]: 06[IKE] no IKE config found for 6.7.8.9...1.2.3.4, sending NO_PROPOSAL_CHOSEN
Oct 19 18:14:44 vpn ipsec[30143]: 06[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
Oct 19 18:14:44 vpn ipsec[30143]: 06[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500] (36 bytes)
Oct 19 18:14:44 vpn ipsec[30143]: 06[IKE] IKE_SA (unnamed)[2] state change: CREATED => DESTROYING
Oct 19 18:14:44 vpn ipsec[30143]: 03[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500]
Oct 19 18:14:44 vpn ipsec[30143]: 02[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500]
Oct 19 18:14:44 vpn ipsec[30143]: 02[NET] waiting for data on sockets
Oct 19 18:14:44 vpn ipsec[30143]: 13[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500] (440 bytes)
Oct 19 18:14:44 vpn ipsec[30143]: 13[ENC] parsed IKE_SA_INIT request 0 [ N(NATD_D_IP) N(NATD_S_IP) No KE SA ]
Oct 19 18:14:44 vpn ipsec[30143]: 13[CFG] looking for an ike config for 6.7.8.9...1.2.3.4
Oct 19 18:14:44 vpn ipsec[30143]: 13[IKE] no IKE config found for 6.7.8.9...1.2.3.4, sending NO_PROPOSAL_CHOSEN
Oct 19 18:14:44 vpn charon: 14[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500] (440 bytes)
Oct 19 18:14:44 vpn ipsec[30143]: 13[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
Oct 19 18:14:44 vpn ipsec[30143]: 13[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500] (36 bytes)
Oct 19 18:14:44 vpn ipsec[30143]: 13[IKE] IKE_SA (unnamed)[3] state change: CREATED => DESTROYING
Oct 19 18:14:44 vpn ipsec[30143]: 03[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500]
Oct 19 18:14:44 vpn ipsec[30143]: 02[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500]
Oct 19 18:14:44 vpn ipsec[30143]: 02[NET] waiting for data on sockets
Oct 19 18:14:44 vpn ipsec[30143]: 04[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500] (440 bytes)
Oct 19 18:14:44 vpn ipsec[30143]: 04[ENC] parsed IKE_SA_INIT request 0 [ N(NATD_D_IP) N(NATD_S_IP) No KE SA ]
Oct 19 18:14:44 vpn ipsec[30143]: 04[CFG] looking for an ike config for 6.7.8.9...1.2.3.4
Oct 19 18:14:44 vpn ipsec[30143]: 04[IKE] no IKE config found for 6.7.8.9...1.2.3.4, sending NO_PROPOSAL_CHOSEN
Oct 19 18:14:44 vpn ipsec[30143]: 04[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
Oct 19 18:14:44 vpn ipsec[30143]: 04[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500] (36 bytes)
Oct 19 18:14:44 vpn ipsec[30143]: 04[IKE] IKE_SA (unnamed)[4] state change: CREATED => DESTROYING
Oct 19 18:14:44 vpn ipsec[30143]: 03[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500]
Oct 19 18:14:44 vpn ipsec[30143]: 02[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500]
Oct 19 18:14:44 vpn ipsec[30143]: 02[NET] waiting for data on sockets
Oct 19 18:14:44 vpn ipsec[30143]: 04[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500] (440 bytes)
Oct 19 18:14:44 vpn ipsec[30143]: 04[ENC] parsed IKE_SA_INIT request 0 [ N(NATD_D_IP) N(NATD_S_IP) No KE SA ]
Oct 19 18:14:44 vpn ipsec[30143]: 04[CFG] looking for an ike config for 6.7.8.9...1.2.3.4
Oct 19 18:14:44 vpn ipsec[30143]: 04[IKE] no IKE config found for 6.7.8.9...1.2.3.4, sending NO_PROPOSAL_CHOSEN
Oct 19 18:14:44 vpn ipsec[30143]: 04[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
Oct 19 18:14:44 vpn ipsec[30143]: 04[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500] (36 bytes)
Oct 19 18:14:44 vpn ipsec[30143]: 04[IKE] IKE_SA (unnamed)[5] state change: CREATED => DESTROYING
Oct 19 18:14:44 vpn ipsec[30143]: 03[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500]
Oct 19 18:14:44 vpn ipsec[30143]: 02[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500]
Oct 19 18:14:44 vpn ipsec[30143]: 02[NET] waiting for data on sockets
Oct 19 18:14:44 vpn ipsec[30143]: 14[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500] (440 bytes)
Oct 19 18:14:44 vpn ipsec[30143]: 14[ENC] parsed IKE_SA_INIT request 0 [ N(NATD_D_IP) N(NATD_S_IP) No KE SA ]
Oct 19 18:14:44 vpn ipsec[30143]: 14[CFG] looking for an ike config for 6.7.8.9...1.2.3.4
Oct 19 18:14:44 vpn charon: 14[ENC] parsed IKE_SA_INIT request 0 [ N(NATD_D_IP) N(NATD_S_IP) No KE SA ]
Oct 19 18:14:44 vpn ipsec[30143]: 14[IKE] no IKE config found for 6.7.8.9...1.2.3.4, sending NO_PROPOSAL_CHOSEN
Oct 19 18:14:44 vpn charon: 14[CFG] looking for an ike config for 6.7.8.9...1.2.3.4
Oct 19 18:14:44 vpn charon: 14[IKE] no IKE config found for 6.7.8.9...1.2.3.4, sending NO_PROPOSAL_CHOSEN
Oct 19 18:14:44 vpn charon: 14[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
Oct 19 18:14:44 vpn charon: 14[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500] (36 bytes)
Oct 19 18:14:44 vpn charon: 14[IKE] IKE_SA (unnamed)[6] state change: CREATED => DESTROYING
Oct 19 18:14:44 vpn charon: 03[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500]
Oct 19 18:14:55 vpn charon: 02[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500]
Oct 19 18:14:55 vpn charon: 02[NET] waiting for data on sockets
Oct 19 18:14:55 vpn charon: 05[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500] (440 bytes)
Oct 19 18:14:55 vpn charon: 05[ENC] parsed IKE_SA_INIT request 0 [ N(NATD_D_IP) N(NATD_S_IP) No KE SA ]
Oct 19 18:14:55 vpn charon: 05[CFG] looking for an ike config for 6.7.8.9...1.2.3.4
Oct 19 18:14:55 vpn charon: 05[IKE] no IKE config found for 6.7.8.9...1.2.3.4, sending NO_PROPOSAL_CHOSEN
Oct 19 18:14:55 vpn charon: 05[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
Oct 19 18:14:55 vpn charon: 05[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500] (36 bytes)
Oct 19 18:14:55 vpn charon: 05[IKE] IKE_SA (unnamed)[7] state change: CREATED => DESTROYING
Oct 19 18:14:55 vpn charon: 03[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500]
Oct 19 18:15:05 vpn charon: 02[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500]
Oct 19 18:15:05 vpn charon: 02[NET] waiting for data on sockets
Oct 19 18:15:05 vpn charon: 12[NET] received packet: from 1.2.3.4[4500] to 6.7.8.9[4500] (440 bytes)
Oct 19 18:15:05 vpn charon: 12[ENC] parsed IKE_SA_INIT request 0 [ N(NATD_D_IP) N(NATD_S_IP) No KE SA ]
Oct 19 18:15:05 vpn charon: 12[CFG] looking for an ike config for 6.7.8.9...1.2.3.4
Oct 19 18:15:05 vpn charon: 12[IKE] no IKE config found for 6.7.8.9...1.2.3.4, sending NO_PROPOSAL_CHOSEN
Oct 19 18:15:05 vpn charon: 12[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
Oct 19 18:15:05 vpn charon: 12[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500] (36 bytes)
Oct 19 18:15:05 vpn charon: 12[IKE] IKE_SA (unnamed)[8] state change: CREATED => DESTROYING
Oct 19 18:15:05 vpn charon: 03[NET] sending packet: from 6.7.8.9[4500] to 1.2.3.4[4500]

StrongSwan mam vcetne vsech radius pluginu:
Kód: [Vybrat]
apt-get install strongswan libstrongswan-standard-plugins libstrongswan-extra-plugins

Zde jsou me configy:

Kód: [Vybrat]
           # cat /etc/ipsec.conf

config setup
    charondebug="cfg 2, dmn 2, ike 2, net 2"

    uniqueids=no
    # allow multiple connections from a given user

conn xauth-ikev1-mikrotik
    auto=add
    compress=no
    type=tunnel
    keyexchange=ikev1

    rekey=no
    left=%any
    leftid=muj.vpn.server.cz
    leftauth=psk

    leftcert=/etc/strongswan_certs/cert.pem
    leftsendcert=always
    leftsubnet=0.0.0.0/0
    right=%any
    rightid=%any
 
    rightauth=psk
    rightauth2=xauth-radius
    xauth=server
    authby=xauthpsk

    rightsourceip=%radius
    rightdns=8.8.8.8,8.8.4.4
    rightsendcert=never

    eap_identity=%identity


    ike=aes128-saha256-ecp256,aes256-sha384-ecp384,aes128-sha256-modp2048,aes128-sha1-modp2048,aes256-sha384-modp4096,aes256-sha256-modp4096,aes256-sha1-modp4096,aes128-sha256-modp1536,aes128-sha1-modp1536,aes256-sha384-modp2048,aes256-sha256-modp2048,aes256-sha1-modp2048,aes128-sha256-modp1024,aes128-sha1-modp1024,aes256-sha384-modp1536,aes256-sha256-modp1536,aes256-sha1-modp1536,aes256-sha384-modp1024,aes256-sha256-modp1024,aes256-sha1-modp1024!
    esp=aes128gcm16-ecp256,aes256gcm16-ecp384,aes128-sha256-ecp256,aes256-sha384-ecp384,aes128-sha256-modp2048,aes128-sha1-modp2048,aes256-sha384-modp4096,aes256-sha256-modp4096,aes256-sha1-modp4096,aes128-sha256-modp1536,aes128-sha1-modp1536,aes256-sha384-modp2048,aes256-sha256-modp2048,aes256-sha1-modp2048,aes128-sha256-modp1024,aes128-sha1-modp1024,aes256-sha384-modp1536,aes256-sha256-modp1536,aes256-sha1-modp1536,aes256-sha384-modp1024,aes256-sha256-modp1024,aes256-sha1-modp1024,aes128gcm16,aes256gcm16,aes128-sha256,aes128-sha1,aes256-sha384,aes256-sha256,aes256-sha1!


conn ikev2-vpn
    auto=add
    # On strongSwan startup, load this connection and then wait for clients to connect to it (auto=add)

    compress=no
    type=tunnel
    keyexchange=ikev2
    fragmentation=yes
    forceencaps=yes

    dpdaction=clear
    dpddelay=300s
    dpdtimeout=1800s
    # Enable Dead Peer Detection (DPD), which periodically checks that the
    # client is still responding and if it's not then the IKEv2 session and the IPsec tunnel are cleared.

    ike=aes256-aes192-aes128-sha384-sha256-sha1-modp3072-modp2048-modp1536-modp1024!
    # List our acceptable encryption and message-integrity algorithms, for the authentication and key exchange process.

    rekey=no
    left=%any
    leftid=muj.vpn.server.cz
    leftauth=pubkey

    leftcert=/etc/strongswan_certs/cert.pem
    # Must only contain our public key, not the complete certificate chain!

    leftsendcert=always
    leftsubnet=0.0.0.0/0
    right=%any
    rightid=%any
    rightauth=eap-radius
    rightsourceip=%radius
   
    #rightsourceip=10.10.10.1-10.10.10.150   
    # rightsourceip=192.0.2.0/25,2001:db8::/96
    # Assign each client dynamic addresses from an IPv4 and an IPv6 pool.
    # The first and last addresses in each subnet will not be use
    rightdns=8.8.8.8,8.8.4.4
    rightsendcert=never

    eap_identity=%identity
    # Allow any defined user to connect (provided they're present in ipsec.secrets).


# static IPs are not excluded from the pool you configured in ikev2-vpn !!!!!!!!
#
#  And if this static config selection works will also depend on the client.
#  If the IKE identity is not the same as the EAP-Identity a match on rightid won't
#  be possible (our Android app sets both to the same value, but e.g. the Windows
#  IKEv2 client does not)
conn static_ip___staticuserX
    also=ikev2-vpn
    #the parameters of that section are inherited by the current section
    rightid=staticuserX
    rightsourceip=10.10.10.200/32
    auto=add


Kód: [Vybrat]
                  # cat /etc/ipsec.secrets
: RSA "/etc/strongswan_certs/key.pem"
: PSK : "secret123"


Kód: [Vybrat]
        # cat /etc/strongswan.d/charon.conf
charon {
  plugins {
    eap-radius {
      servers {
        primary {
          address = 127.0.0.1
          secret = testing123
          nas_identifer = ipsec-gateway
          sockets = 20
          preference = 99
        }
      }
    }
    xauth-eap {
      backend = radius
    }
  }
}

Kód: [Vybrat]
            # cat /etc/freeradius/3.0/users
DEFAULT Pool-Name := main_pool
Fall-Through = Yes

"testuser" Cleartext-Password := "123456789"

"teststatic" Cleartext-Password := "123456789"
Framed-IP-Address := 10.10.10.199,
Framed-IP-Netmask := 255.255.255.0

V MikroTiku jsem se snazil nastavit VPN pomoci:
Kód: [Vybrat]
/ip ipsec peer> add address=6.7.8.9/32 auth-method=pre-shared-key-xauth secret=secret123 xauth-login=testuser xauth-password=123456789

Dokazal by mi nekdo poradit, jak nastavit StrongSwan, aby fungoval, jako IPsec VPN server pro MikroTik klienty?
Rad bych se vyhnul certifikatum, ale jenom spolecne PSK heslo pro vsechny se mi nelibi.

Neni nejaky kompromis, jako PSK + jmeno a heslo k tomu? V MikroTiku mozna secret + xauth-login + xauth-password?
Neco podobneho jsem videl v Android VPN klientovi "IPsec Xauth PSK" - mimochodem take se nepripoji.

Staci mi L3 VPN, proto se mi zda zbytecne pouzivat L2TP/IPsec.
VPN bude slouzit primarne pro VoIP (SIP), takze kazda vrstva, ktera nebude je dobra. VoIP bude mit dalsi zabezpeceni, proto bych se uplne nebal ani Xauth IKEv1, od ktereho jsem byl tak zrazovan .
A VPN musi byt kvuli VoIP UDP - jinak bych pouzil OpenVPN, se kterou mam vyborne zkusenosti - ale MikroTik ji umi jen v TCP rezimu :-(




7
Ahoj,
potrebuji prehravat soucasne 4x H.264 video streamy a to FullHD, pripadne kdyby to neslo, tak staci i HD.
Video se bude zobrazovat pres pripojeny HDMI monitor.

Je realne, ze by to dokazal prehravat Intel NUC s Celeron N3060, nebo Celeron J4005?
https://www.czc.cz/intel-nuc-kit-7cjyh/237517/produkt
https://www.czc.cz/intel-nuc-5cpyh/175170/produkt

Mam trochu obavu o integrovanou grafiku. Sice umi hardwarove dekodovat H.264, ale nevim, jestli to neplati jen pro jeden stream.

Jak to resi treba cinske prehravace bezpecnostnich kamer? Maji na to specialni hardware?
Ale nic takoveho stejne pouzit nemuzu.

Takze je realne, ze bude stacit obycejny Intel NUC kolem 3 000 Kc? Pripadne jaky rozumne levny PC to zvladne?

Diky.

8
Software / Poraďte e-mail ticket systém
« kdy: 30. 07. 2018, 15:28:30 »
Ahoj,
shanim aplikace na spravu vetsiho mnozstvi emailu. Budou mi tam z 99% chodit generovane maily ze serveru a ruznych sluzeb. Odpovidat na maily budu minimalne.

Libilo by se mi neco jako:
- TeamWork Desk (https://www.teamwork.com/desk)
- HelpScout (https://www.helpscout.net/)

Melo by to umet vice uzivatelu a prirazovani mailu mezi nimi, dale nejake API.

Idealne abych to mohl provozovat na svem serveru. Dulezita je pro me cena. Nechce se mi platit mesicni poplatky za pocet uzivatelu.
Hlavne musi jit napojit vetsi mnozstvi mailovych schranek a snadno mezi nimi rozlisovat - ne mit vsechny maily pohromade.
Nejlepe webove rozhranni. Desktop aplikaci nechci.

Zatim jsem zkousel osTicket (http://osticket.com/) a ve srovnani s TeamWork Desk a HelpScout je to nepouzitelne.
Prave se chystam zkouset OTRS (https://otrs.com/).

Znate nejaky dobry program, ktery by splnoval me pozadavky?

9
Vývoj / GPG: ověření podpisu v proměnných místo souboru
« kdy: 12. 05. 2018, 15:48:39 »
Ahoj,

potrebuju periodicky stahovat skript a spoustet ho v bashi. Abych mel jistotu, ze ho nikdo neupravil, rad bych overoval gpg podpis.
Verejny GPG klic si na pc, kde se bude stahovat nahraju rucne a navic ho nechci importovat, ale overovat primo ze souboru:

Kód: [Vybrat]
martin@martin:~/test$ cat test.sh
#!/bin/bash
echo "ok"
martin@martin:~/test$ gpg -u 1D9883AE -a --sign --detach-sig --output test.sh.asc test.sh
martin@martin:~/test$
martin@martin:~/test$ gpg --no-default-keyring --keyring ./x.gpg --verify test.sh.asc test.sh 2>/dev/null && bash test.sh || echo "gpg_verify_error"
ok
martin@martin:~/test$

            # PO ZMENE SOUBORU SE NESPUSTI:

martin@martin:~/test$ sed -i 's/ok/OK/g' test.sh
martin@martin:~/test$ cat test.sh
#!/bin/bash
echo "OK"
martin@martin:~/test$ gpg --no-default-keyring --keyring ./x.gpg --verify test.sh.asc test.sh 2>/dev/null && bash test.sh || echo "gpg_verify_error"
gpg_verify_error
martin@martin:~/test$

Tohle krasne funguje.

Jenze ja nechci soubory ukladat na disk (budou se stahovat casto), ale mit je v promennych. Zkousel jsem:
Kód: [Vybrat]
martin@martin:~/test$ python -m SimpleHTTPServer 8080 &
martin@martin:~/test$
martin@martin:~/test$ curl http://localhost:8080/test.sh
#!/bin/bash
echo "ok"
martin@martin:~/test$ curl http://localhost:8080/test.sh.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAABAgAGBQJa9uxCAAoJEBD8Q3R7umFHW/EQALRXXnrJ+aTyVo2zmvA6ayMc
...
martin@martin:~/test$
martin@martin:~/test$ script=$(curl -s http://localhost:8080/test.sh); sign=$(curl -s http://localhost:8080/test.sh.asc);
martin@martin:~/test$ echo $script
#!/bin/bash echo "ok"
martin@martin:~/test$ echo -e $script
#!/bin/bash echo "ok"
martin@martin:~/test$ script=$(curl -s http://localhost:8080/test.sh); sign=$(curl -s http://localhost:8080/test.sh.asc); gpg --no-default-keyring --keyring ./x.gpg --verify $sign $script 2>/dev/null && echo $script | bash || echo "gpg_verify_error"
gpg_verify_error
martin@martin:~/test$

Cilem tedy je:
Kód: [Vybrat]
# script=$(curl -s http://localhost:8080/test.sh); sign=$(curl -s http://localhost:8080/test.sh.asc); gpg --no-default-keyring --keyring ./x.gpg --verify $sign $script 2>/dev/null && echo $script | bash || echo "gpg_verify_error"
Prvni problem - kdyz si pres echo vypisu promennou, zalomeni radku jsou pryc.
Druhy problem - umi gpg overovat z promennych, jako to mam na ukazce?

Zkousim to vic, nez hodinu, ale stale jsem na nic neprisel :-(



10
Server / FreeIPA - bezpečnost otevření portu do internetu
« kdy: 25. 02. 2018, 22:46:06 »
Ahoj, potrebuju zajistit centralni prihlasovani nekolika uzivatelu na velke mnoszvi serveru.
Aktualne zkousim FreeIPA a dost se mi libi. Nejsem si vsak jisty bezpecnosti - instalator chce otevrit nasledujici porty:
Kód: [Vybrat]
Setup complete
Next steps:
        1. You must make sure these network ports are open:
                TCP Ports:
                  * 80, 443: HTTP/HTTPS
                  * 389, 636: LDAP/LDAPS
                  * 88, 464: kerberos
                  * 53: bind
                UDP Ports:
                  * 88, 464: kerberos
                  * 53: bind
                  * 123: ntp
Na testovani jsem otevrel do internetu vsechny pozadovane porty, krome 53 (bind) a 123 (ntp) a vse funguje, klienti se pripoji.
Nejde mi o lokalni sit. Naopak servery jsou po celem svete.

Jak moc je bezpecne vsechny porty otevrit do internetu a je to opravdu nutne?
Minimalne nesifrovany ldap se mi nelibi.

Pouzivate nekdo FreeIPA? A jake s ni mate zkusenosti? Co se vam libi, nebo naopak nelibi a na co si dat pozor?
Pripadne pouzivate neco jineho/lepsiho?

11
Ahoj,
dorazil mi z ciny levny GPRS modem A6.
Rad bycho ho pouzil jako zalozni pripojeni k Orange Pi, ktere mi resi domaci automatizaci. Je mi jasne, ze rychlost bude spatna (GPRS Class10 up 85.6 kbps (upstream) & 42.8kbps (downlink)), ale me to na vyjimecne pouziti staci.

AT prikazy: http://www.alselectro.com/files/A6-AT-Commands.pdf

Zkousel jsem hodne navodu, wvdial mi stale nejde, asi ho neumim nastavit.

Aktualne mi funguje spojeni pomoci pppd:

/etc/ppp/peers/o2
Kód: [Vybrat]
connect "/usr/sbin/chat -v -f /etc/chatscripts/a6"
/dev/ttyUSB0
9600
noipdefault
usepeerdns
defaultroute
persist
noauth
nocrtscts
local

   /etc/chatscripts/a6
Kód: [Vybrat]
ABORT BUSY
ABORT VOICE
ABORT "NO CARRIER"
ABORT "NO DIALTONE"
ABORT "NO DIAL TONE"
ABORT "NO ANSWER"
ABORT "DELAYED"
ABORT "ERROR"

ABORT "+CGATT: 0"

"" AT
TIMEOUT 12
OK ATH
OK ATE1

#OK "AT+CPIN=1234"
#OK AT+IPR=115200
OK              AT+CGDCONT=1,"IP","internet"
OK ATD*99#
TIMEOUT 22
CONNECT ""

Pripojeni:
Kód: [Vybrat]
# pon o2

Jan 28 18:05:36 martin pppd[13012]: pppd 2.4.7 started by root, uid 0
Jan 28 18:05:36 martin pppd[13012]: Serial connection established.
Jan 28 18:05:36 martin pppd[13012]: Using interface ppp0
Jan 28 18:05:36 martin pppd[13012]: Connect: ppp0 <--> /dev/ttyUSB0
Jan 28 18:05:44 martin pppd[13012]: not replacing default route to enp0s25 [10.123.1.254]
Jan 28 18:05:44 martin pppd[13012]: local  IP address 100.72.248.158
Jan 28 18:05:44 martin pppd[13012]: remote IP address 192.200.1.21
Jan 28 18:05:44 martin pppd[13012]: primary   DNS address 160.218.161.60
Jan 28 18:05:46 martin ntpd[2307]: Listen normally on 223 ppp0 100.72.248.158:123

# ip a
86: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN group default qlen 3
    link/ppp
    inet 100.72.248.158 peer 192.200.1.21/32 scope global ppp0
       valid_lft forever preferred_lft forever

Odpojeni:

Kód: [Vybrat]
# poff o2

Jan 28 18:07:31 martin pppd[13012]: Terminating on signal 15
Jan 28 18:07:31 martin pppd[13012]: Connect time 1.8 minutes.
Jan 28 18:07:31 martin pppd[13012]: Sent 1288 bytes, received 40 bytes.
Jan 28 18:07:31 martin pppd[13012]: Connection terminated.
Jan 28 18:07:31 martin pppd[13012]: Exit.
Jan 28 18:07:32 martin ntpd[2307]: Deleting interface #223 ppp0, 100.72.248.158#123, interface stats: received=0, sent=0, dropped=0, active_time=106 secs


Modem podporuje i vyssi rychlosti:
Kód: [Vybrat]
AT
OK
ATIE+CIMI;E1I+COPS?
Ai Thinker Co.LTD
A6
V03.03.20160921015H03

230021200272977

Ai Thinker Co.LTD
A6
V03.03.20160921015H03

+COPS: 0,2,"23002"

OK
AT+IPR=?
(2400,4800,9600,14400,19200,28800,33600,38400,57600,115200,230400,460800,921600)

OK
AT+IPR=115200
OK

Zmena rychlosti pres putty/screen funguje. Jak to vsak dostat do chatscriptu? Kdyz odkomentuju radek OK AT+IPR=115200, modem se nespoji.
A jak se spravne nastavuji rychlosti? V "/etc/ppp/peers/o2" bych mel mit baudrate, ktery je nastaveny z vyroby a az v chatscriptu se prepnout na vyssi rychlost? A jak pote, kdyz treba spojeni spadne vyresim nove pripojeni? pppd a chat prece nebude vedet, jakou rychlost ma modem aktualne nastavenou? Nebo zkusi vic rychlosti?

12
Ahoj, mam tu USB LTE modem Huawei E3372. Ma na sobe logo T-Mobile, ale mam v nem O2 SIM.

At delam, co delam, stale se mi na nedari pomoci wvdial pripojit k internetu.

Kdyz pouziiju na naklikani spojeni graficky Network Manager, tak spojeni bez problemu funguje. Vygeneruje si nasledujici nastaveni:
Kód: [Vybrat]
# cat /etc/NetworkManager/system-connections/O2\ Výchozí\ 1
[connection]
id=O2 Výchozí 1
uuid=5b17e6c8-ae29-4fb2-b988-2760e0454d7f
type=gsm
autoconnect=false
permissions=user:martin:;
secondaries=

[gsm]
apn=internet
number=*99#
password-flags=1

[ipv4]
dns-search=
method=auto

[ipv6]
addr-gen-mode=stable-privacy
dns-search=
ip6-privacy=0
method=auto

Jenze se mi nedari pripojit pres wvdial.

Modem se detekuje:
Kód: [Vybrat]
# wvdialconf
Editing `/etc/wvdial.conf'.

Scanning your serial ports for a modem.

ttyUSB0<*1>: ATQ0 V1 E1 -- OK
ttyUSB0<*1>: ATQ0 V1 E1 Z -- OK
ttyUSB0<*1>: ATQ0 V1 E1 S0=0 -- OK
ttyUSB0<*1>: ATQ0 V1 E1 S0=0 &C1 -- +CME ERROR: 50
ttyUSB0<*1>: ATQ0 V1 E1 S0=0 &D2 -- +CME ERROR: 50
ttyUSB0<*1>: ATQ0 V1 E1 S0=0 +FCLASS=0 -- +CME ERROR: 50
ttyUSB0<*1>: Modem Identifier: ATI -- Manufacturer: huawei
ttyUSB0<*1>: Speed 9600: AT -- OK
ttyUSB0<*1>: Max speed is 9600; that should be safe.
ttyUSB0<*1>: ATQ0 V1 E1 S0=0 -- OK
ttyUSB1<*1>: ATQ0 V1 E1 -- OK
ttyUSB1<*1>: ATQ0 V1 E1 Z -- OK
ttyUSB1<*1>: ATQ0 V1 E1 S0=0 -- OK
ttyUSB1<*1>: ATQ0 V1 E1 S0=0 &C1 -- +CME ERROR: 50
ttyUSB1<*1>: ATQ0 V1 E1 S0=0 &D2 -- +CME ERROR: 50
ttyUSB1<*1>: ATQ0 V1 E1 S0=0 +FCLASS=0 -- +CME ERROR: 50
ttyUSB1<*1>: Modem Identifier: ATI -- Manufacturer: huawei
ttyUSB1<*1>: Speed 9600: AT -- OK
ttyUSB1<*1>: Max speed is 9600; that should be safe.
ttyUSB1<*1>: ATQ0 V1 E1 S0=0 -- OK

Found a modem on /dev/ttyUSB0.
Modem configuration written to /etc/wvdial.conf.
ttyUSB0<Info>: Speed 9600; init "ATQ0 V1 E1 S0=0"
ttyUSB1<Info>: Speed 9600; init "ATQ0 V1 E1 S0=0"

a vygeneruje nastaveni:
# cat /etc/wvdial.conf

Kód: [Vybrat]
[Dialer Defaults]
Init2 = ATQ0 V1 E1 S0=0
Modem Type = Analog Modem
; Phone = <Target Phone Number>
ISDN = 0
; Username = <Your Login Name>
Init1 = ATZ
; Password = <Your Password>
Modem = /dev/ttyUSB0
Baud = 9600

Zkousel jesem vsechny mozne kombinace podle toho, co jsem vygooglil, ale nic nejde. Napriklad:
Kód: [Vybrat]
[Dialer Defaults]
Init1 = ATZ
;Init2 = ATQ0 V1 E1 S0=0 &C1 &D2 +FCLASS=0
Init2 = At+CGDCONT=1,"IP","internet"
Dial Command = ATD
Modem Type = USB Modem
Phone = *99#
Stupid Mode = on
ISDN = 0
Password = ''
New PPPD = yes
Username = ''
Modem = /dev/ttyUSB0
Baud = 115200

Kód: [Vybrat]
# wvdial
--> WvDial: Internet dialer version 1.61
--> Initializing modem.
--> Sending: ATZ
ATZ
OK
--> Sending: At+CGDCONT=1,"IP","internet"
At+CGDCONT=1,"IP","internet"
OK
--> Modem initialized.
--> Sending: ATD*99#
--> Waiting for carrier.
ATD*99#
CONNECT
--> Carrier detected.  Starting PPP immediately.
--> Starting pppd at Tue Jan 23 15:02:16 2018
--> Pid of pppd: 1816
--> Using interface ppp0
--> pppd: 8%�[01]�'�[01]
--> pppd: 8%�[01]�'�[01]
--> pppd: 8%�[01]�'�[01]
--> pppd: 8%�[01]�'�[01]
--> pppd: 8%�[01]�'�[01]
--> Disconnecting at Tue Jan 23 15:02:47 2018
--> The PPP daemon has died: A modem hung up the phone (exit code = 16)
--> man pppd explains pppd error codes in more detail.
--> Try again and look into /var/log/messages and the wvdial and pppd man pages for more information.
--> Auto Reconnect will be attempted in 5 seconds
--> Initializing modem.
--> Sending: ATZ
--> Sending: ATQ0
--> Re-Sending: ATZ
--> Modem not responding.
--> Initializing modem.
--> Sending: ATZ
--> Sending: ATQ0
--> Re-Sending: ATZ
--> Modem not responding.
--> Disconnecting at Tue Jan 23 15:03:08 2018

Kód: [Vybrat]
[Dialer Defaults]
Init1 = ATZ
Init2 = ATQ0 V1 E1 S0=0 &C1 &D2 +FCLASS=0
Init3 = ATE0V1&D2&C1S0=0+IFC=2,2
Init4 = at+cgdcont=1,"ip","internet"
Phone = *99#
Modem Type = USB Modem
Stupid Mode = 1
Baud = 115200
New PPPD = yes
Dial Command = ATD
Modem = /dev/ttyUSB0
ISDN = 0
Username = ''
Password = ''

Kód: [Vybrat]
# wvdial
--> WvDial: Internet dialer version 1.61
--> Initializing modem.
--> Sending: ATZ
--> Sending: ATQ0
--> Re-Sending: ATZ
--> Modem not responding.

Modem mam samozrejmne pres usbmodeswitch spravne prepnuty.

13
Ahoj,
rad bych si zkusil nabootovat Alpine linux v ARM verzi v qemu. Dokonce proto mam i prakticke vyuziti.

Podarilo se mi takto spustit OpenWrt na Raspberry Pi 3. Dost me prekvapila rychlost, cekal jsem, ze to bude nepouzitelne pomale - bylo to jen pomale :-)
Jenze v OpenWrt  je malo aplikaci, ktere chci zkusit.

Po hodne dlouhem testovani jsem se dohrabal k tomuto temer funkcnimu postupu:
Kód: [Vybrat]
wget http://dl-cdn.alpinelinux.org/alpine/v3.7/releases/armhf/alpine-uboot-3.7.0-armhf.tar.gz
wget http://dl-cdn.alpinelinux.org/alpine/v3.7/releases/armhf/alpine-minirootfs-3.7.0-armhf.tar.gz

qemu-img create -f raw sd.img 512M

sudo losetup /dev/loop0 sd.img
sudo kpartx -av /dev/loop0
lsblk
sudo mkfs.ext3 /dev/mapper/loop0p1   # *musi byt ext3, s ext4 alpine nebootoval*
sudo mount -t ext3 /dev/mapper/loop0p1 /mnt

sudo cp alpine-minirootfs-3.7.0-armhf.tar.gz /mnt/
sudo cp alpine-uboot-3.7.0-armhf.tar.gz /mnt
cd /mnt/
sudo tar xzvf alpine-minirootfs-3.7.0-armhf.tar.gz
sudo tar xzvf alpine-uboot-3.7.0-armhf.tar.gz
sudo rm alpine-minirootfs-3.7.0-armhf.tar.gz
sudo rm alpine-uboot-3.7.0-armhf.tar.gz
cd ..
sudo umount /mnt
sudo kpartx -dv /dev/loop0
sudo losetup -d /dev/loop0

file sd.img
  #sd.img: DOS/MBR boot sector; partition 1 : ID=0x83, start-CHS (0x10,0,1), end-CHS (0x3ff,3,32), startsector 2048, 1046528 sectors

tar xzf alpine-uboot-3.7.0-armhf.tar.gz
cp {boot/dtbs/vexpress-v2p-ca9.dtb,boot/vmlinuz-hardened,boot/initramfs-hardened} .
rm alpine-*
ls
  #initramfs-hardened  sd.img  vexpress-v2p-ca9.dtb  vmlinuz-hardened

qemu-system-arm -sd sd.img -m 256 -M vexpress-a9 -dtb vexpress-v2p-ca9.dtb -kernel vmlinuz-hardened -initrd initramfs-hardened -append "modules=loop,squashfs,sd-mod,usb-storage,ext4 modloop=/boot/modloop-hardened root=/dev/mmcblk0p1 console=ttyAMA0" -net nic,vlan=0 -net nic,vlan=1 -net user,vlan=1 -localtime -nographic

Vytvorim si image, na ktery rozbalim uboot a alpine minirootfs. Cele to pak Qemu dam mistoSD karty.
Qemu bootuje, ale nakonec skonci na can't run '/sbin/openrc': No such file or directory.
openrc opravdu v alpine minirootfs neni. Jenze jiny alpine rootfs jsem nenasel. A ubuntu rootfs se mi zda zbytecny velky. Chtel bych alpine.

Takhle mi to bootuje podle prikazu vyse:
Kód: [Vybrat]
$ qemu-system-arm -sd sd.img -m 256 -M vexpress-a9 -dtb vexpress-v2p-ca9.dtb -kernel vmlinuz-hardened -initrd initramfs-hardened -append "modules=loop,squashfs,sd-mod,usb-storage,ext4 modloop=/boot/modloop-hardened root=/dev/mmcblk0p1 console=ttyAMA0" -net nic,vlan=0 -net nic,vlan=1 -net user,vlan=1 -localtime -nographic
WARNING: Image format was not specified for 'sd.img' and probing guessed raw.
         Automatically detecting the format is dangerous for raw images, write operations on block 0 will be restricted.
         Specify the 'raw' format explicitly to remove the restrictions.
pulseaudio: set_sink_input_volume() failed
pulseaudio: Reason: Invalid argument
pulseaudio: set_sink_input_mute() failed
pulseaudio: Reason: Invalid argument
Warning: hub port hub1port0 has no peer
Warning: vlan 1 with no nics
Warning: vlan 0 is not connected to host network
Warning: netdev hub1port0 has no peer
Warning: requested NIC (anonymous, model unspecified) was not created (not supported by this machine?)
[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.9.65-1-hardened (buildozer@build-3-7-armhf) (gcc version 6.4.0 (Alpine 6.4.0) ) #2-Alpine SMP Mon Nov 27 15:37:20 GMT 2017
[    0.000000] CPU: ARMv7 Processor [410fc090] revision 0 (ARMv7), cr=10c5387d
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT nonaliasing instruction cache
[    0.000000] OF: fdt:Machine model: V2P-CA9
[    0.000000] efi: Getting EFI parameters from FDT:
[    0.000000] efi: UEFI not found.
[    0.000000] Memory policy: Data cache writeback
[    0.000000] CPU: All CPU(s) started in SVC mode.
[    0.000000] percpu: Embedded 13 pages/cpu @8fd7a000 s23180 r8192 d21876 u53248
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 64960
[    0.000000] Kernel command line: modules=loop,squashfs,sd-mod,usb-storage,ext4 modloop=/boot/modloop-hardened root=/dev/mmcblk0p1 console=ttyAMA0
[    0.000000] log_buf_len individual max cpu contribution: 4096 bytes
[    0.000000] log_buf_len total cpu_extra contributions: 12288 bytes
[    0.000000] log_buf_len min size: 16384 bytes
[    0.000000] log_buf_len: 32768 bytes
[    0.000000] early log buf free: 14824(90%)
[    0.000000] PID hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Memory: 246072K/262144K available (4213K kernel code, 484K rwdata, 1828K rodata, 684K init, 349K bss, 16072K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0x90800000 - 0xff800000   (1776 MB)
[    0.000000]     lowmem  : 0x80000000 - 0x90000000   ( 256 MB)
[    0.000000]     pkmap   : 0x7fe00000 - 0x80000000   (   2 MB)
[    0.000000]     modules : 0x7f000000 - 0x7fe00000   (  14 MB)
[    0.000000]       .text : 0x80208000 - 0x80625694   (4214 kB)
[    0.000000]       .init : 0x80819000 - 0x808c4000   ( 684 kB)
[    0.000000]       .data : 0x808c4000 - 0x8093d360   ( 485 kB)
[    0.000000]        .bss : 0x8093d360 - 0x80994b48   ( 350 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] Build-time adjustment of leaf fanout to 32.
[    0.000000] NR_IRQS:16 nr_irqs:16 16
[    0.000000] GIC CPU mask not found - kernel will fail to boot.
[    0.000000] GIC CPU mask not found - kernel will fail to boot.
[    0.000000] L2C: platform modifies aux control register: 0x02020000 -> 0x02420000
[    0.000000] L2C: DT/platform modifies aux control register: 0x02020000 -> 0x02420000
[    0.000000] L2C-310 erratum 769419 enabled
[    0.000000] L2C-310 enabling early BRESP for Cortex-A9
[    0.000000] L2C-310 full line of zeros enabled for Cortex-A9
[    0.000000] L2C-310 dynamic clock gating disabled, standby mode disabled
[    0.000000] L2C-310 cache controller enabled, 8 ways, 128 kB
[    0.000000] L2C-310: CACHE_ID 0x410000c8, AUX_CTRL 0x46420001
[    0.000000] smp_twd: clock not found -2
[    0.000227] sched_clock: 32 bits at 24MHz, resolution 41ns, wraps every 89478484971ns
[    0.003212] clocksource: arm,sp804: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275 ns
[    0.003864] Failed to initialize '/smb@04000000/motherboard/iofpga@7,00000000/timer@12000': -22
[    0.010946] Console: colour dummy device 80x30
[    0.011478] Calibrating local timer... 99.85MHz.
[    0.038517] Calibrating delay loop... 557.87 BogoMIPS (lpj=1394688)
[    0.108468] pid_max: default: 32768 minimum: 501
[    0.110221] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110280] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.122390] CPU: Testing write buffer coherency: ok
[    0.134004] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[    0.134376] Setting up static identity map for 0x60208280 - 0x602082d8
[    0.146439] EFI services will not be available.
[    0.160708] Brought up 1 CPUs
[    0.160814] SMP: Total of 1 processors activated (557.87 BogoMIPS).
[    0.160884] CPU: All CPU(s) started in SVC mode.
[    0.169873] devtmpfs: initialized
[    0.187565] VFP support v0.3: implementor 41 architecture 3 part 30 variant 9 rev 0
[    0.206146] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 9556302231375000 ns
[    0.207067] futex hash table entries: 1024 (order: 4, 65536 bytes)
[    0.211785] pinctrl core: initialized pinctrl subsystem
[    0.238600] NET: Registered protocol family 16
[    0.241186] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.337150] cpuidle: using governor ladder
[    0.337514] cpuidle: using governor menu
[    0.341187] hw-breakpoint: debug architecture 0x4 unsupported.
[    0.348661] Serial: AMBA PL011 UART driver
[    0.370051] OF: amba_device_add() failed (-19) for /memory-controller@100e0000
[    0.372104] OF: amba_device_add() failed (-19) for /memory-controller@100e1000
[    0.373673] OF: amba_device_add() failed (-19) for /watchdog@100e5000
[    0.378764] irq: type mismatch, failed to map hwirq-75 for /interrupt-controller@1e001000!
[    0.409782] 10009000.uart: ttyAMA0 at MMIO 0x10009000 (irq = 38, base_baud = 0) is a PL011 rev1
[    0.434354] console [ttyAMA0] enabled
[    0.438964] 1000a000.uart: ttyAMA1 at MMIO 0x1000a000 (irq = 39, base_baud = 0) is a PL011 rev1
[    0.443405] 1000b000.uart: ttyAMA2 at MMIO 0x1000b000 (irq = 40, base_baud = 0) is a PL011 rev1
[    0.448839] 1000c000.uart: ttyAMA3 at MMIO 0x1000c000 (irq = 41, base_baud = 0) is a PL011 rev1
[    0.452569] OF: amba_device_add() failed (-19) for /smb@04000000/motherboard/iofpga@7,00000000/wdt@0f000
[    0.500530] vgaarb: loaded
[    0.502428] pps_core: LinuxPPS API ver. 1 registered
[    0.502847] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.503182] PTP clock support registered
[    0.519778] clocksource: Switched to clocksource arm,sp804
[    0.522082] VFS: Disk quotas dquot_6.6.0
[    0.525203] VFS: Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
[    0.580731] NET: Registered protocol family 2
[    0.587827] TCP established hash table entries: 2048 (order: 1, 8192 bytes)
[    0.588216] TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
[    0.588491] TCP: Hash tables configured (established 2048 bind 2048)
[    0.589505] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.589773] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.592578] NET: Registered protocol family 1
[    0.605647] Trying to unpack rootfs image as initramfs...
[    1.571713] Freeing initrd memory: 5468K
[    1.574860] hw perfevents: enabled with armv7_cortex_a9 PMU driver, 1 counters available
[    1.588898] workingset: timestamp_bits=14 max_order=16 bucket_order=2
[    1.608414] Key type asymmetric registered
[    1.609835] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249)
[    1.610136] io scheduler noop registered
[    1.611135] io scheduler cfq registered (default)
[    1.630581] pci_hotplug: PCI Hot Plug PCI Core version: 0.5
[    1.630887] pciehp: PCI Express Hot Plug Controller Driver version: 0.4
[    1.639833] Serial: 8250/16550 driver, 4 ports, IRQ sharing disabled
[    1.646757] Serial: AMBA driver
[    1.650294] msm_serial: driver initialized
[    1.722237] brd: module loaded
[    1.725422] libphy: Fixed MDIO Bus: probed
[    1.735060] gre: GRE over IPv4 demultiplexor driver
[    1.736055] Key type dns_resolver registered
[    1.736443] ThumbEE CPU extension supported.
[    1.736649] Registering SWP/SWPB emulation handler
[    1.739734] registered taskstats version 1
[    1.741538] hctosys: unable to open rtc device (rtc0)
[    1.747603] uart-pl011 10009000.uart: no DMA platform data
[    1.763216] Freeing unused kernel memory: 684K
[    1.763706] This architecture does not have kernel memory protection.
Alpine Init 3.2.0-r0
 * Loading boot drivers: [    2.560176] loop: module loaded
[    2.571496] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.593130] SCSI subsystem initialized
[    2.624983] usbcore: registered new interface driver usbfs
[    2.625959] usbcore: registered new interface driver hub
[    2.628141] usbcore: registered new device driver usb
[    2.638821] usbcore: registered new interface driver usb-storage
ok.
 * Mounting root: [    4.796710] clcd-pl11x 10020000.clcd: PL111 designer 41 rev2 at 0x10020000
[    4.809537] clcd-pl11x 10020000.clcd: /clcd@10020000 hardware, 1024x768@59 display
[    4.820240] clcd-pl11x 1001f000.clcd: PL111 designer 41 rev2 at 0x1001f000
[    4.822244] clcd-pl11x 1001f000.clcd: /smb@04000000/motherboard/iofpga@7,00000000/clcd@1f000 hardware, 640x480@59 display
[    4.891303] mmci-pl18x 10005000.mmci: Got CD GPIO
[    4.891632] mmci-pl18x 10005000.mmci: Got WP GPIO
[    4.893618] mmci-pl18x 10005000.mmci: mmc0: PL181 manf 41 rev0 at 0x10005000 irq 34,35 (pio)
[    4.894548] mmci-pl18x 10005000.mmci: DMA channels RX none, TX none
[    4.981191] mmc0: new SD card at address 4567
[    5.050007] mmcblk0: mmc0:4567 QEMU! 512 MiB
[    5.060632]  mmcblk0: p1
[   14.077287] Console: switching to mono frame buffer device 128x48
[   14.457299] random: fast init done
[   14.807981] random: crng init done
[   15.141032] EXT4-fs (mmcblk0p1): mounting ext3 file system using the ext4 subsystem
[   15.190897] EXT4-fs (mmcblk0p1): mounted filesystem with ordered data mode. Opts: (null)
ok.
can't run '/sbin/openrc': No such file or directory
can't run '/sbin/openrc': No such file or directory
can't run '/sbin/openrc': No such file or directory

Uz mi dosly vsechny napady :-(

A nereste prosim, jestli to ma vubec smysl, proste to chci zkusit.
Na tohle zlata x86. Tam bych dal "qemu -hda disk.img" a vse by fungovalo.

A k tomu jeste druha otazka: kdyz chci zkusit na ARM desce (treba raspberry, nebo orange) emulaci pomoci qemu, je lepsi emulovat na armu arm, nebo na armu emulovat x86? Nebo to je rychlostne jedno?
Osobne tipuji na armu arm, ale nemam proto zadny podlozeny duvod.

14
Server / Kopírování pouze nových souborů do S3 ze skriptu
« kdy: 19. 01. 2018, 17:11:58 »
Ahoj,
resim problem se zalohovanim fotek do S3.

Co potrebuju: do jednoho adresare na serveru obcas nakopiruju nove fotky, stare nemazu. Zaroven chci tento adresar kopirovat do Amazon S3 (z cronu). Ale pouze kopirovat nove fotky, to znamena jednosmerna synchronizace mujServer -> S3.
Nikdy nechci mazat fotky z S3, nebo z S3 stahovat na svuj server.
Naopak bych rad IAM uzivateli povolil jen pridavat nove soubory a stare nemazat (treba jako ochrana pred zasifrovanim disku ransomwarem).

Stale se mi nedari nijak jednoduse vyresit kopirovani.
Program typu duply/duplicity resi plne a rozdilove zalohy, to ja nechci.

Vetsinou na vse pouzivam awscli, jenze tady mi to nejde.

aws s3 sync synchronizuje oba lokalni adresar i s3 - tedy stahne soubory z s3, ktere nemam lokalne. To nechci (maly disk), i kdyz by to mozna vadilo nejmene.

aws s3 cp kopiruje vsechny lokalni soubory do S3, ze uz treba 99% souboru v S3 je neresi. Proste je nahraje znova a prepise.

Napadlo me pouzit find a kopirovat jen nove soubory (ne starsi, nez 1 den). Jenze to taky nejde. Nove soubory nepridavam presne kazdy den, takze by mi mohli chybet. Pokud totiz nakopiruju do lokalniho adresare na serveru soubory se starsim datem vytvoreni, find je bude ignorovat.

Kód: [Vybrat]
#!/bin/bash
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
export AWS_ACCESS_KEY_ID=AAAAAAAAAAAAAAAAAAAAAAA
export AWS_SECRET_ACCESS_KEY=BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
export AWS_DEFAULT_REGION=eu-west-1

time find /data/fotky -type f -mtime -1 -print0 | xargs -0 -I {} aws s3 cp "{}" "s3://mojefotky/fotky/" --storage-class STANDARD_IA

awscli to zda se opravdu neumi.

Napada nekoho, jak skript upravit, pripadne jaky nastroj pouzit, aby se do S3 prenesly pouze soubory, ktere jsou lokalne a v S3 ne?


15
Bazar / Sháním desku a CPU z notebooku na domácí server
« kdy: 31. 10. 2017, 22:05:18 »
Ahoj,

uz mi vykonostne nedostacuje domaci server postaveny na desce s Atomem (Intel DN2800MT) a rad bych ji nahradil necim vykonnejsim.

Idealne rozumne levnym a s malou spotrebou. Nehraju si na kazdy 1W, ktery se mi vrati za 10 let.

Protoze jsem nenasel zadnou desktop desku s rozumnou spotrebou, rad bych to postavil na notebooku.

Shanim tedy zakladni desku s cpu ze starsiho notebooku. Intel 4. generace a novejsi. 3. generace mela TDP 35W, od 4. to je jen 15W. Merenim levnym wattmetrem se mi opravdu potvrdil velky rozdil ve spotrebe.

Zaroven potrebuju, aby notebook mel pripojeni na vypalovacku - potrebuji 2x SATA na disky, takze 1x misto 2,5" disku a 1x misto vypalovacky.


Krasne by byly 2 sloty na RAMku.

Idealne Core i3 a lepsi, 4. generace a novejsi.

Moje predstava je neco typu: "spadnul mi notebook ze schodu, rozbity displej, polamane plasty, ale deska je ok".

Nereste prosim nevhodnost pouziti desky z notebooku na domaci server. Je to spise na hrani :-)

Stran: [1] 2 3 ... 7

reklama