Getting filesystem quotas work inside of a LXC unprivileged container is relatively a big problem, because linux kernel and LXC currently play against us (= they do not support this yet). But, workaround exists !
Quick how-to for registering and unregistering partitions on LVM logical volume (yes, event that is possible ;).
As always with Oracle its pretty ‘easy‘ and ‘straightforward‘ – you have to convert the high_value to XML and then extract it using XPATH (omg!). Let me guess, it would cost a fortune to provide native function/view that could do that…
In PostgreSQL it’s quite easy to restrict access for user to some tables: create restrictive view grant usage on view schema grant select on view to restricted user done Really easy. And it’s not working when the restrictive view, is selecting from another view that is using function(s)!
I encountered this problem again, so let’s write it down to avoid googling it. Problem: PowerDNS fails to start with pdns.service: Failed at step ADDRESS_FAMILIES spawning /usr/sbin/pdns_server: Invalid argument Solution: edit /lib/systemd/system/pdns.service comment out RestrictAddressFamilies comment out ProtectSystem=full possibly kill systemd-resolved systemctl daemon-reload ask yourself again, why are you using debian with systemd on server […]
tinc is a great mesh Virtual Private Network daemon, with just one little glitch (and also some little crypto problems ;-). I find its configuration really tedious and complicated compared to OpenVPN and its possibility to centrally assign IP addresses and push options to clients. I know, that’s the tax for being mesh, but wouldn’t […]
Here is my solution for making Amlogic S812 based Beelink MXIII Plus Android TV Box work with Logitech Harmony universal remote. It’s based on solution described on this forum post, but modified to make it easier to use (if your Harmony remote is able to learn new IR commands).
Sometime it’s needed to selectively route specified IPs or networks via different interface – i.e. if you want to route private addresses over VPN (a.k.a split tunnel routing) or to route some public IPs over VPN to unblock some nationally restricted sites (Netflix). Here are simple scripts to achieve this.
Another fix for “The process android.process.media has stopped unexpectedly…” that can (also) appear after you upgrade to Lollipop (Android 5.0) from some lower Android version without doing factory reset. Try to uninstall “DRM Protected Content Storage” app via Settings -> Apps. In my case, this was a left-over of Android 4.3, and android.process.media had some […]
If you are trying to access site with self-signed certificate with Firefox 31 (or later) and get Issuer certificate is invalid error (sec_error_ca_cert_invalid), you have to disable new mozilla::pkix certificate verification. In about:config set security.use_mozillapkix_verification = false To find out more about mozilla::pkix and why your firefox just got so super secure and paranoid, that […]