PiHole Extras
The: /etc/pihole/custom.list file is pretty cool to automate with.
Suricata 6.0.1 Release with PF_RING on Ubuntu 18.04
Installing Suricata 6.0.1 Release with pf_ring on Ubuntu 18.04 with customization, I will update this post with the specific set we are enabling, but so far IPS is not on the list. Features: nDPI 3.4, PF_Ring 7.8, Luijit, Redis, GeoIP, eBPF, Profiling, Debug In using pf_ring, we get access to a feature set that lowers…
R8168 over R8169
Now compile the code. This may fail if you don’t have kernel headers and other standard features of a build environment: make clean make modules make install Make sure modprobe knows not to use r8169, and that depmod doesn’t find the r8169 module: echo -e “\nblacklist r8169\n” >> /etc/modprobe.d/blacklist mv /lib/modules/$(uname -r)/kernel/drivers/net/r8169.ko{,.bak} Let the OS…
Gitlab Omnibus Migration
Using Ubuntu 18.04 via a Vagrant Virtualbox VM I migrated a back up from my VPS to a VM at home. This document was made using the guide available at: https://docs.gitlab.com/ee/raketasks/backup_restore.html#restore-for-omnibus-gitlab-installations You may want to check your git repo for issues (for more information see https://docs.gitlab.com/ee/administration/raketasks/check.html): sudo gitlab-rake gitlab:git:fscksudo gitlab-rake gitlab:artifacts:checksudo gitlab-rake gitlab:lfs:checksudo gitlab-rake gitlab:uploads:check…
CGroups and net_cls to assign specific IPTables rules
This one was a quick and dirty that I will do better with soon. This will take a kernel that is nearing the 4.5 version capabilities. First modprobe: modprobe cls_cgroup Then create a CGroup for your “task”: mkdir /sys/fs/cgroup/net_cls/mytask Then give it a classid: echo 0x100001 > /sys/fs/cgroup/net_cls/mytask/net_cls.classid Now you can assign PIDs to the…