debian - Sysorchestra

Sysorchestra

Sign in Subscribe

debian

A collection of 16 posts

Hetzner SX62 dedicated server with Software-RAID-5 and encrypted LVM on Debian 10

Hetzner SX62 dedicated server with Software-RAID-5 and encrypted LVM on Debian 10

A little over 2 years ago, we introduced a new Backup server for our PostgreSQL data. Check out my post on that here. Now 2 years later, the disks got too small for our growing size of our PostgreSQL data which urged us to move on to a larger server.

Setup Soundcard and Microphone on Lenovo Thinkpad X1 Carbon 7th Gen with Linux Mint 19.3

Setup Soundcard and Microphone on Lenovo Thinkpad X1 Carbon 7th Gen with Linux Mint 19.3

Recently I switched my work device from my very old MacBook Pro Mid-2012 Non-Retina to a brand new Lenovo Thinkpad X1 Carbon 7th Gen - or X1C7 for short - with Linux Mint 19.3 Tricia. From scratch, Linux Mint 19.3 comes with an Ubuntu 18.04 LTS Kernel

Enabling U2F Hardware token in Linux

Enabling U2F Hardware token in Linux

I recently switched from MacOS to Linux for my work computer and found out that using a hardware U2F USB token is not so easy as on MacOS. I'm using a Yubikey and several self-made Tomu-based U2F tokens and now i wanted to also use them on Linux.

Online capacity expansion of a Dell Hardware RAID 1 with larger disks and a LVM

Online capacity expansion of a Dell Hardware RAID 1 with larger disks and a LVM

This post is about a simple topic, but finding information about it was not so easy due to the specific circumstances it includes. Here i will show you how you can accomplish the task of upgrading a simple 2-disk Hardware RAID 1 on a Dell PowerEdge RAID Controller - or

Proxmox / Linux - Live-Update Network Configuration with Zero-Downtime

Proxmox / Linux - Live-Update Network Configuration with Zero-Downtime

In this smaller post i want to show you how easy it is to do a live config update of your network without network restarts or machine reboots. I did this just recently on production Proxmox machines (Debian 8 and 9 or Proxmox 4.x and 5.x respectively) without

Site-to-Site IPSec VPN between Sophos UTM and Debian using StrongSwan with RSA-Pubkeys

Site-to-Site IPSec VPN between Sophos UTM and Debian using StrongSwan with RSA-Pubkeys

Introduction This guide will show you, how you can establish a Site-to-Site IPSec VPN between a Sophos UTM Firewall and a Debian 9 "Stretch" based Server using StrongSwan with RSA Public-Key based authorization. Normally we would use a simple Road-Warrior VPN for single Clients but I wanted to

Hetzner Root-Server with dual Hardware RAID-1 and encrypted LVM on Debian 9

Hetzner Root-Server with dual Hardware RAID-1 and encrypted LVM on Debian 9

Introduction This guide will explain the steps it takes to install a secure headless Hetzner Root-Server with some special pitfalls like LUKS on Hardware-RAIDs and SSH-based remote decryption at boot time for more than one encrypted volume that we want to use for our new PostgreSQL Backup-Server. But some back

Add Two-Factor-Authentication to SSH on Debian Wheezy to Stretch

Introduction This guide shows you, how you can add 2FA to your OpenSSH on Debian Wheezy, Jessie and Stretch using Google Authenticator. We assume that your SSH already uses Pubkey-Authentication while PasswordAuthentication is disabled. Also this guide should also work on Debian's derivates and maybe other distros. Limitations

Proxmox 5 on Hetzner Root-Server with Dual-Stack IPv4/IPv6 for Host and Guests

Introduction In an earlier blog post i wrote about a standard Debian installation with KVM, IPv4 and IPv6 for both the host and it's guests. This time we will setup Proxmox 5.x on a Hetzner Root-Server also using Debian and IPv4 and IPv6 for the Host and

Migrating Proxmox LVM-Thin Volumes to another Proxmox Host

Introduction In an earlier post, i've discribed how to migrate VMWare ESXi Virtual Machines (or mostly their disks) to a new Proxmox KVM machine. This time i had to move a Proxmox VM to another Proxmox host. Both hosts using LVM-Thin Logical Volumes to store guest data instead

Proxmox 4Gbit/s HA Networking with two Dual-Port NICs and VLAN-enabled Bonding to distinct Switches

Lately we've setup a new Proxmox 4.4 Server. For this we upgraded our former ESXi 5.5 Host with more RAM, a RAID-10 Array (from RAID-1 w. Hot-Spare) and two Dual-Port 1Gbit/s NICs (therefore 4x 1Gbit/s in 2 PCIe Cards with Intel I350 Chipset) from

Run a NTP server for the pool.ntp.org project with Debian

Update 2: I've changed the 5 source servers to 3 other's that are on the same continent as our NTP Server so the offset and jitter are much better. This helped this server to be more "stable". The server now uses clock.isc.org,

User Story: Migrating Debian Squeeze from a Dell PowerEdge R310 to R320

...or how to get new hardware working on the old system by only using a linux live-cd, chroot and a new kernel. Introduction Some weeks ago, i had to change a complete Debian Squeeze System which ran on a [Dell PowerEdge R310](https://www.amazon.de/gp/search?ie=UTF8&

Hetzner Root-Server with Debian/KVM IPv4 and IPv6 Networking

Introduction Since the IPv4 address space is almost completely used up, the future protocol is IPv6 which has been around for lots of years already and it is highly recommended to at least enable it for your machines and use it in dual-stack mode - so your service or website

Encrypted iRedmail Backups on Hetzner Backup-Space with SSHFS/EncFS

Introduction You may know that you get 100GB of free Backup-Space from Hetzner when ordering a Root- or Managed-Server. If you have other offers like Webspace or vServers you can also order the Backup-Space for a small fee. The nice thing about this Backup-Space is, that you don't

Debian/Ubuntu 2TB+ GPT-HDD, RAID & encrypted LVM

Introduction Not just as a reminder for myself but for everyone having troubles setting up a crypted LVM on top of a Linux Software-RAID ON TOP of two or more 2TB+ Hard-Disks. The tricky part here is the hard disks which need to have a GPT Partition Table. Another issue