December 01, 2021

Veeam Backup Copies not encrypted


Problem: Some Veeam Backup Copies are not encrypted even though encryption is assigned.


Solution: Manually trigger “Active Full” Backup Copy.

Details:
 - Ensure Encryption is enabled in a Backup Copy job.



 - Trigger Active Full for the Backup Copy job.

 - Upon finish, validate finished “Disk (Copy)” objects are encrypted via icon.

good luck! send me crypto 🙏‍

SEO:
veeam copy job not encrypted
some veeam jobs not encrypted
veeam copies not encrypted
veeam disk copy not encrypted
veeam disk copies not encrypted
veeam copies not encrypted



Please consider crypto tipping:
  

October 11, 2021

XFCE 4.16+ open save dialog revert buttons to bottom

Problem:
XFCE 4.16 and above moved the save/cancel and open/cancel buttons on the dialogs.

yuck:


Solution:
CLI to revert to original position:
xfconf-query -c xsettings -p /Gtk/DialogsUseHeader -s false

yay:


good luck!

Written with StackEdit.

SEO:
xfce 4 xfrce4 4.16 save open close dialog buttons top bottom revert


Please consider crypto tipping:
  

October 05, 2021

set default gcc, cpp, clang versions in Debian 11, Debian 12 Linux

edit: updated this for Debian 12 / gcc 12, but essentially same solution(s).
see also: https://apt.llvm.org/

Problem: cpp-10 is default in Debian 11

Need: cpp-9 or gcc-9 as default

Solution:


sudo apt install build-essential cpp-12 cpp-11 cpp-10 cpp-9 gcc-12 gcc-11 gcc-10 gcc-9 

sudo update-alternatives --install /usr/bin/cpp cpp /usr/bin/cpp-9 10
sudo update-alternatives --install /usr/bin/cpp cpp /usr/bin/cpp-10 20
sudo update-alternatives --install /usr/bin/cpp cpp /usr/bin/cpp-11 30
sudo update-alternatives --install /usr/bin/cpp cpp /usr/bin/cpp-12 40

update-alternatives --query cpp
sudo update-alternatives --config cpp

sudo update-alternatives --install /usr/bin/gcc gcc /usr/bin/gcc-9 10
sudo update-alternatives --install /usr/bin/gcc gcc /usr/bin/gcc-10 20
sudo update-alternatives --install /usr/bin/gcc gcc /usr/bin/gcc-11 30
sudo update-alternatives --install /usr/bin/gcc gcc /usr/bin/gcc-12 40

update-alternatives --query gcc
sudo update-alternatives --config gcc

Resource: https://stackoverflow.com/questions/7832892/how-to-change-the-default-gcc-compiler-in-ubuntu

Potential problems:
If you get something like update-alternatives: error: cannot stat file '/usr/bin/cpp': Too many levels of symbolic links, then sudo rm /etc/alternatives/cpp. BUT be sure to reinstall cpp-* to get the /user/bin links recreated.




And you may do similarly with Clang/Clang++

sudo apt install clang-14 clang-13 clang-12 clang-11

sudo update-alternatives --install /usr/bin/clang clang /usr/bin/clang-11 10
sudo update-alternatives --install /usr/bin/clang clang /usr/bin/clang-12 20
sudo update-alternatives --install /usr/bin/clang clang /usr/bin/clang-13 30
sudo update-alternatives --install /usr/bin/clang clang /usr/bin/clang-14 40

sudo update-alternatives --config clang

sudo update-alternatives --install /usr/bin/clang++ clang++ /usr/bin/clang++-11 10
sudo update-alternatives --install /usr/bin/clang++ clang++ /usr/bin/clang++-12 20
sudo update-alternatives --install /usr/bin/clang++ clang++ /usr/bin/clang++-13 30
sudo update-alternatives --install /usr/bin/clang++ clang++ /usr/bin/clang++-14 40

sudo update-alternatives --config clang++


If you prefer non-interactive config, then you may

sudo update-alternatives --set clang /usr/bin/clang-12
sudo update-alternatives --set clang++ /usr/bin/clang++-12
and do so silimarly for any other alternatives







~~
good luck!

Written with StackEdit.

SEO:
cpp gcc 9 10 default Debian Linux Ubuntu RHEL CentOS Fedora Arch Mint


Please consider crypto tipping:
  

September 21, 2021

YouTube search sort newest first

Problem:
Youtube search sorts by relevance, whereas one often prefers sorting by newest results.

Solution:
Firefox or Chrome extension prerequisite: “Redirector” by Einar Eglisson.
Note: It required browser restart to function properly.
Settings:


example:
 https://www.youtube.com/results?search_query=test

include pattern:
 https://www.youtube.com/results?search_query=*

redirect to:
 https://www.youtube.com/results?sp=CAI%253D&search_query=$1

pattern type:
 wildcard

SEO: youtube search latest first youtube search latest on top youtube search newest first youtube search newest on top youtube search by date youtube search by upload date

Written with StackEdit.


Please consider crypto tipping:
  

August 10, 2021

Xubuntu XFCE Display brightness Fn keys not working not changing brightness

 Problem:

Fn Brightness not changing backlight on XFCE.


Tentative Solution:
Power Manager>General>Handle display brightness keys>Enable.



SEO:
XFCE XFCE4 backlight brightness Fn function key not working failing does nothing does not change brightness

Please consider crypto tipping:
  

July 23, 2021

FireFox Youtube Buffering Sucks

Problem

  • Firefox Youtube buffering endlessly / never starts playing

Potential Solution

Use about:config to:

  • Disable source server control:
    • media.mediasource.enabled = false
    • media.mediasource.vp9.enabled = false
  • Buffer more:
    • media.cache_readahead_limit = 9999 (or 99999)
    • media.cache_resume_threshold = 9999 (or 99999)

Written with StackEdit.


Please consider crypto tipping:
  

July 01, 2021

Dear FireFox 89+, I hate your new Proton UI, especially tabs look/feel.

EDIT 2021-Aug-11:  FireFox 91 changed something, this no longer works 😠😡😠😡😠😡.  Please see https://support.mozilla.org/en-US/questions/1339768#answer-1434053


Problem: new Firefox tabs look horrible and do not stand out as visible tabs.



about:config > browser.proton.enabled > false  (no longer works in FF-91)

Fixed.




NEW SOLUTION:
1) Create a new folder/file in your user profile as chrome/userChrome.css
and fill it with contents (generated from your selected preferences) from this link: https://www.userchrome.org/firefox-89-styling-proton-ui.html#tabstyler
2) set toolkit.legacyUserProfileCustomizations.stylesheets as true via about:config .
3) restart FireFox.

example result: (https://sharetext.me/heyafkro)



SEO:
Fix FireFox 89, 90, 91 Tabs Look
Fix FireFox 89, 90, 91 Tabs Look and Feel
Fix Firefox Tabs
Fix FireFox Proton Tabs
Revert Firefox Tabs



Please consider crypto tipping:
  

April 22, 2021

PlasmaTree PID-Analyzer must be an integer, when a scalar

Problem:
line 1054, in histogramdd raise TypeError( TypeError: bins[1] must be an integer, when a scalar

Solution:
Use Smeat's fork for updated numpy prerequisite: https://github.com/Smeat/PID-Analyzer
Please consider crypto tipping:
  

February 11, 2021

Disable TLS 1.0 and 1.1 on ESXi 6.5, et. al. (Enable TLS 1.2)

Problem:

TLS Version 1.0 and 1.1 Protocol Detection (Nessus Plugins #104743 and #157288) on ESXi hosts.


Solution:

To mitigate this, we disable TLS 1.0 and 1.1 on our cluster(s) via SSH shell on our VCSA as well as SSH shell on the ESXi host(s). We ultimately put ESXi hosts into Maintenance mode and reboot. Please see the detailed step below. if for some reason you do not use clusters, then please reference the sources i’v elisted below and be sure to correct the command-line path location whcih has changed in 6.5+; otherwise the commands should work.

Sources:

I’ve used the following resources to enable SSH as well as disable TLS. I am not the originator, and the resources may be slightly stale, but still a very good reference froom which i solved my issues.

Steps:

  1. Enable SSH and BASH on VCSA (vCenter Server Appliance)




  2. Disable TLS 1.0 in vCenter. Use the reconfigureESX command to enable only TLS 1.1 and TLS 1.2.
    (alternatively, only TLS 1.2, if inclined to do so.)

    a) ssh into your vCenter and launch the bash shell


  3. b) Execute the command: (note to remove the 1.1 if inclined)
    /usr/lib/vmware-TlsReconfigurator/EsxTlsReconfigurator/reconfigureEsx vCenterCluster -c 'MY-CLUSTER' -u 'ADMIN-USER' -p TLSv1.1 TLSv1.2` , where the cluster is your cluster name and your administrative user is your privileged AD (Active Directory) account or administrator@vsphere.local account.

  • For security reasons, revert SSH and BASH to disabled state on vCenter.



  • Enable SSH on ESXi hosts and per sources listed above.

  • Disable TLS 1.0 and TLS1.1 on ESXi host(s) via SSH shell: (alternatively only TLS1.0, edit appropriately)
    a) backup existing watchdog config: cp -p /etc/sfcb/sfcb.cfg /etc/sfcb/sfcb.bak
    b) stop watchdog: /etc/init.d/sfcbd-watchdog stop
    c) disable protocols and set ciphers in sfcb.cfg with new settings:

  • echo -e "enableSSLv3: false" >> /etc/sfcb/sfcb.cfg
    echo -e "enableTLSv1: false" >> /etc/sfcb/sfcb.cfg
    echo -e "enableTLSv1_1: false" >> /etc/sfcb/sfcb.cfg
    echo -e "enableTLSv1_2: true" >> /etc/sfcb/sfcb.cfg
    echo -e "sslCipherList:ECDHE-RSA-AES256-GCM-SHA384:HIGH:!AECDH-AES256-SHA:!AECDH-DES-CBC3-SHA:!AECDH-AES128-SHA:!AES128-SHA:!AES128-SHA256:!AES128-GCM-SHA256:!AES256-SHA:!AES256-SHA256:!AES256-GCM-SHA384:!AECDH-AES256-SHA:!CAMELLIA128-SHA:!CAMELLIA256-SHA" >> /etc/sfcb/sfcb.cfg

    d) start watchdog: /etc/init.d/sfcbd-watchdog start

    e) backup existing httppproxy config: cp -p /etc/vmware/rhttpproxy/config.xml /etc/vmware/rhttpproxy/config.bak

    f) set ciphers with: sed -i '/following node to disable SSL -->/a\ <cipherList>ECDHE-RSA-AES256-GCM-SHA384:!aNULL:!AES128-SHA:!AES128-SHA256:!AES128-GCM-SHA256:!AES256-SHA:!AES256-SHA256:!AES256-GCM-SHA384<\/cipherList>' /etc/vmware/rhttpproxy/config.xml

    g) restart httpproxy: /etc/init.d/rhttpproxy restart


  • For security reasons, disable SSH again for each ESXi host as per sources listed above.

  • For Each ESXi host, but only one at a time, enter maintenance-mode, then reboot.




  • Re-running Nessus scans should now produce clean results for TLS 1.0 (and alternatively TLS 1.1).

    ~~~
    good luck!


  • Please consider crypto tipping: