All Questions(server)

I'm working with Ubuntu 24.04 Desktop and I created a VM connected to the default libvirt-NAT-Bridge and a second isolated network.

The bridged network is virbr0: 192.168.122.0/24 the host got 192.168.122.1 and the VM got static 192.168.122.128. The isolated network is 10.95.212.0/24.

I want to be able to ping/ssh into hosts in the isolated network that's why I set a static route (route add ...) on the host. It works, but it did not survive a reboot. I tried nmtui but the route vanishes on reboot.

I thought about virsh net-edit default, but I didn't found any documentation how to do it.

Where do I have to define the route that it survives the reboot?

I have to be missing something obvious, this task shouldn't be this hard! Thanks in advance if you can point it out to me without laughing too much. I'm writing a system survey script, to run on each computer in my domain on boot via GPO. Each time it runs it should add a row with all the info it gathers to a csv file on a shared drive. I can only get it to output in columns.

Code:

$loglocation = "C:\Temp"
$timestamp = Get-Date -UFormat "%Y-%m-%d %H:%M"
$ipaddress = Get-NetIPAddress | fl -Property ipaddress | Out-String -stream | 
Select-String 10.15

# Add info to hashtable
$computerinfohastable = [ordered]@{
Timestamp = $timestamp
Hostname = hostname
OSName = (Get-WmiObject Win32_OperatingSystem).Caption
OSVer = (Get-WmiObject Win32_OperatingSystem).Version
IPAddress = ($ipaddress -replace "ipaddress : ").Trim()
    }

# Convert to object
$computerinforows = $computerinfohastable.Keys | ForEach-Object {
[PSCustomObject]@{
    Property = $_
    Value = $computerinfohastable[$_]
}
}

# Output to csv
$computerinforows | Export-Csv -Path "$loglocation\testfile.csv" -
NoTypeInformation -Append

What I get:

Property    Value 
Timestamp   11/25/2024 14:23 
Hostname    ##### 
OSName      Microsoft Windows 11 Enterprise 
OSVer       10.0.26100 
IPAddress   nnn.nnn.nnn.nnn

What I want:

Timestamp          Hostname  OSName                             OSVer          IPAddress 
11/25/2024 14:23   #####     Microsoft Windows 11 Enterprise    10.0.26100     nnn.nnn.nnn.nnn

I have been hitting up the internet and tried several methods for transposing, no success. Appreciate any advice.

I've got following scenario: One Docker Host with several CMS projects and a Traefik up and running. I'd like to filter out the backend URL from Public IP addresses, since it should only be accessible from private IP Ranges.

publicly available: https://www.project.com/xyz https://www.project.com/abc

restricted to internal IP's only: https://www.project.com/backend

Can I realize that with an IP whitelist and e.g. 2 Routers - 1 for public access and 1 for backend access?

I've tried something like:

  # Backend Router (Restricted Access)
  - "traefik.http.routers.project-backend.rule=Host(`${DOMAINNAME}`) && PathPrefix(`/backend`)"
  - "traefik.http.routers.project-backend.entrypoints=https"
  - "traefik.http.routers.project-backend.tls=true"
  - "traefik.http.routers.project-backend.middlewares=backend-ipwhitelist"
  - "traefik.http.routers.project-backend.priority=100"

But the filter didn't work - could still access backend.

Any suggestions?

The problem is similar to this one, but there are 2 nuances.

1. If I switch to user with sudo -u testuser -i then load CPU using stress utility, CPUQuota doesn't take effect.

2. If I login via SSH as a testuser, run some intensive task and then it works as expected.

My CPUQuota config

/etc/systemd/system.control/user-1003.slice.d/50-CPUQuota.conf

[Slice]
CPUQuota=33%

systemctl show -p DefaultCPUAccounting

DefaultCPUAccounting=yes

Distribution: Debian 12 latest. Ubuntu 22.04 also affected by this.

How do I debug this issue to get any clues?

P.S. Issue posted on systemd GitHub repo

I am going through Security Command Center in Google Cloud and I have the following security finding:

• Name: ORG_POLICY_LOCATION_RESTRICTION
• Description: The resource is outside of the locations set on the Resource Location Restriction policy
• Resource display name: default
• Resource full name: //compute.googleapis.com/projects/MYPROJECT/regions/us-east5/subnetworks/default
• Resource type: google.compute.Subnetwork

Next steps

Please visit this Google Cloud Platform page that will help you to resolve the location violation that is affecting the google.compute.Subnetwork resource default.

Please delete this resource in order to resolve the resource violation associated with 'gcp.resourceLocations' organisation policy.

Deletion

When I go to VPC networks I see a lot of default networks, but they cannot be deleted.

How can I delete them?