.pQd

Thales CipherTrust Manager – setting up KMS access

by .pQd
this is reminder, mostly for myself, how to issue certificates that later can be used with PostgreSQL, MySQL to access Key Management Service [KMS] via Key Management Interoperability Protocol [KMIP] to store & retrieve encryption keys used in Table Data Encryption [TDE]. whenever i refer to PostgreSQL or MySQL in this post – i actually ... Read More

PyKMIP + PostgreSQL with pg_tde, Percona Server for MySQL

by .pQd
i wanted to try applying transparent data encryption in PostgreSQL 17, MySQL 8.4 with key obtained via KMIP from KMS. i’ve used PyKMIP as Key Management System. i could not find any detailed step by step guide, even Percona’s own documents were pretty minimal. below – is what i’ve done step by step. my setup ... Read More

Diassembling Xiaomi Robot Vacuum C1

by .pQd
Vids: Vacuum motor: 1118MJT 20N704R500 in my case it was enough to remove the dust from the motor and filters for it, but i expect it’ll die in a few months; so i’m ordering a new one – just in case.

decoder for MySQL 8.4 row-level binlogs

by .pQd
i’ve run into a problem – i had mysql 8.4 binlogs in row format generated with binlog_rows_query_log_events =OFF; i needed to see how exactly certain rows looked like before / after particular updates. problem was – those rows contained blobs and output from mysqlbinlog -v was a mess: i needed to find a way to ... Read More

kiszone buraki

by .pQd
z ~3kg burakow wychodzi ~5 sloikow 1L. sloiki schowac do ciemnego miejsca z teperatura pokojowa. ja trzymam je w duzym garku, w szafie – moze z nich cieknac. po 1-2 tygodniach otworzyc, zebrac ewentualna plesn z gory i wlozyc do lodowki. sa gotowe do jedzenia / picia.

using vector.dev to get haproxy, nginx logs into ClickHouse

by .pQd
at work we have few reverse proxies exposing some APIs. ClickHouse turned out to be great tool for analyzing logs, running ad-hoc research or gathering stats cyclically. below – configs that allow me to get HTTP requests passing via those proxies, including POST bodies, into ClickHouse. i’m using vector.dev to fetch, transform and ship logs. ... Read More

forcing rewrite of one of mdadm raid1 disks

by .pQd
on not so important server i got an alert about SMART errors and failing weekly surface test [ smartctl -d sat -t long /dev/sdb ]. i wanted to force the drive to re-allocate bad sectors; i could not read it anymore – cat /dev/sdb > /dev/null would fail with read errors. i remember reading somewhere ... Read More

rsync to/from synology failing

by .pQd
i was asked to copy some data from a Linux server to Synology NAS. SSH keys have been exchanged, i was able to ssh root@ipOfSynology. but trying to ssh something to it was failing: i’ve googled and i’ve found https://community.synology.com/enu/forum/1/post/121078 – i had to go to Synology’s admin page > Control Panel > Users & ... Read More

using transparent compression in btrfs

by .pQd
to compress any newly added file/directory – mount the file system with option compression=algorithm:compressionLevel e.g.: to compress individual file or folder, without compressing everything else stored on given file system: to check compression ratio: to check compression property for an existing folder: for more details – see https://btrfs.readthedocs.io/en/latest/Compression.html

ideas: TLS-aware firewall for outgoing traffic

by .pQd
i’d love to have linux-based strict firewall for outgoing traffic. one that can allow for traffic to specific domain name [behind CDN], rather than fixed IP addresses. i did not find yet something that would tick all my check boxes, nevertheless – few links to related projects and discussions:

matching sshd’s log ‘Accepted publickey for’ to specific public key

by .pQd
journalctl -f or tail -f /var/log/auth.log shows on successful login something like this: that GDF…….somehash………………k is a fingerprint of publish ssh key and matches one of the entries in authorized_keys. which one? will show you fingerprints for all of the existing authorized keys, now you can match it with the log trace of successful login.

logging from ipad/linux or windows to windows PC which has local account associated with hotmail.com or outlook.com

by .pQd
task: get remote desktop to work from ipad or linux. connection is done to windows 10/11 pro pc which has local account associated with hotmail or outlook and uses pin to log in. i’ve found a solution at https://superuser.com/questions/1618530/rdp-to-home-pc-with-windows-hello-pin and had to: then use rdp client and log in with login: MicrosoftAccount\something@hotmail.com, as password – ... Read More

Oracle cloud

by .pQd
Oracle is has quite generous Always Free Tier, so i’ve registered and set up a VM there. so i ended up on VM.Standard.E2.1.Micro with AMD CPU underneath i could not get ARM instance – looks like ‘Out of capacity for shape VM.Standard.A1.Flex in availability domain AD-1. Create the instance in a different availability domain or ... Read More

audiobooki i sluchowiska ktore lubi moja corka

by .pQd
corka od wieku ~5 lat korzysta z glosnika odtwarzajacego mp3’jki – byl to strzal w dziesiatke. mam nadzieje ze jeszcze dlugo wytrzyma bez ‘migajacego ekranu’. co jej przypadlo do gustu w wieku 5-7 lat? biblioteki publiczne ftw – znalazlem tam mase ksiazek nie obarczonych DRM’em, na youtube tez mozna duzo znalezc, przydaje sie yt-dlp.

training for frontline drone operators

by .pQd
we ware on 3 day training led by a guy who spent 1 year on Ukrainian front lines operating reconnaissance and kamikaze drones. brain dump of some of the tidbits i’ve learned: interviews with the trainer: what we’ve heard about the reality of drone war is very close to what you can learn e.g. from ... Read More