At the moment MYSQL only goes up to 8.0.36 on AlmaLinux 8 and I needed to install 8.0.40 – grabbing the official rpms and doing it manually was the only way that worked. Install net-tools, grab the rpms, install, start the server again and enable it at startup – note that your /etc/my.cnf will probably […]

Uptime Kuma is an excellent free server monitoring system. I needed it running on EC2 – a fairly straightforward install from source as long as you have all the right pieces of the puzzle – which include the process manager for nodejs: cd ~ec2-usersudo dnf install -y gitsudo dnf install nodejsgit clone https://github.com/louislam/uptime-kuma.gitcd uptime-kumanpm run […]

To install in Alpine Linux you need a specific installer that doesn’t need glibc so download that from your MeshCentral server (replace meshcentral-server.com with your server url): # wget –no-check-certificate https://meshcentral-server.com:446/meshagents?id=33 If it has downloaded and included the query string in the filename then remove it # mv meshagents\?id=33 meshagents And set that file to […]

This is an update to the previous CentOS installation of OSSEC 3.6 ( here https://cheesefather.com/2020/06/install-ossim-ossec-agent-centos-7/), updating it to 3.7. You need one more library installed before OSSEC can update: dnf -y install systemd-develwget https://github.com/ossec/ossec-hids/archive/3.7.0.tar.gztar xzf 3.7.0.tar.gzcd ossec-hids-3.7.0/./install.sh Or to install from scratch, just change the first command and add the other requirements: dnf -y install […]

This is surprisingly simple if you don’t want to mess around with multiple versions and just switch to 7.4. Run as root: # dnf -y module reset php# dnf -y module install php:7.4 Then in my installation a few pecl modules needed to be reinstalled (zip needs the extra step below): # pecl uninstall imagick […]

I recently needed to have a look at moving some services to a different VPS provider for redundancy so I decided to benchmark my options to compare them. The plan selected was whichever had 16GB of RAM (though Google is 15GB). The selected datacenter was always London (Azure only says UK South). The fastest storage […]

Fail2ban hasn’t been working for me, I still have people running brute force attacks on my Postfix server, so I though I’d rig up something myself. This consists of a bash script that identifies multiple failures and bans them, run on cron every 10 minutes. It checks for both smtp and pop/imap login failures. #!/bin/sh […]

dmraid is a software raid/fakeraid/onboard raid tool. As far as I can tell, the only error reporting that dmraid does is by hooking into logwatch – which emails me a very long file I don’t often read and I would like to know immediately if my raid array is degraded. This works for me on […]