Musical Annual French cities festival and ridiculous thoughts

For the annuary musical amateur festival in all roads and cities of France, my prefered song :

Sorry for me music stops in April 5, 1994. Perhaps I have not enough searched on jamendo or independant scene. I don’t have ever found a music with all this primitive energy I can feel with Nirvana music. Maybe life should have stopped in the 90s, it would have been better considering all the shit that we can see, live, with all these media, this escalation in the presence on social networks. What would Kurt think living in 2022? I know this post is in that movement. I only ever wrote on this rag to share my bullshit, my feelings and hacks on free systems (BSD my love come here :-)) that I have been around since 1997.

Bind9 as master DNS server, NSD as backup with TSIG.

Perhaps it seems easy for you, but it was not for me at begining even if I am running bind9 master/bind9 slave already.

We will begin with TSIG key, on your master DNS server :

root@Sagitarius:~# tsig-keygen mykey > /etc/bind/keys/mykey.key
root@Sagitarius:~# cat /etc/bind/keys/mykey.key
key "mykey" {
        algorithm hmac-sha256;
        secret "+OyXk+FYgsnE6Lei59Qi2LPsctRHPaqcYRpftG4YXKk=";
};
root@Sagitarius:~# 

Now we will configure this on my “named.conf.local” file as :

root@Sagitarius:/etc/bind# cat named.conf.local 
[...]
//On indique la clé à utiliser et son algorithme de chiffrement
include "/etc/bind/keys/mykey.key";

//On indique l'adresse IP du serveur "Esclave"
server 192.168.1.81
{
        keys { mykey; };
};
[...]
zone "my-blah-zone.fr" {
       type master;
       file "/etc/bind/my-blah-zone.fr.zone";
       allow-transfer { 192.168.1.81; key mykey; };
       notify yes;
};
[...]

Ok. last command :

root@Sagitarius:~# rndc reload
root@Sagitarius:~#

Ok good, now let’s see how it is configured on NSD host.
It’s really easy :

clucas@slave:/etc/nsd$ cat /etc/nsd/nsd.conf.d/secondaries/my-blah-zone.fr.conf 
key:
  name: "mykey"
  algorithm: hmac-sha256
  secret: "+OyXk+FYgsnE6Lei59Qi2LPsctRHPaqcYRpftG4YXKk="


zone:
        # this server is secondary,  is master.
        name: my-blah-zone.fr
        allow-notify: 192.168.1.43 mykey
        request-xfr:  192.168.1.43 mykey

Now :

nsd-checkconf /etc/nsd/nsd.conf
nsd-control reload
nsd-control status

It seems easy, but I have take long time to see that all these items bellow must be identical :

  • name of the key
  • algorithm
  • secret

Easy as hell !

PS : All this can be controlled by Ansible, but it is another story.

IOS, IOS XE and configure … revert timer X

If you are familiar with IOS XR and JunOS, it lacks a rollback to IOS and IOS XE. You can do it with “archive” such as :

  1. Configure where your archive will be stored.
  2. Say to your OS to “archive” at a point
  3. Configure your router with a “revert timer”
  4. Confirm if it is ok for you

Here we go in details now :

  1. Configure where your archive will be stored.
Router# conf t
Router(conf)# archive
Router(conf-archive)# path bootflash:myconfig
Router(conf-archive)# maximum 10
Router(conf-archive)# end
Router# wr

2. Say to your OS to “archive” at a point

Router# archive config 
Router# 
Router# show archive
The maximum archive configurations allowed is 10.
There are currently 1 archive configurations saved.
The next archive file will be named bootflash:myconfig-<timestamp>-1
 Archive #  Name
   1        bootflash:myconfig-Jan--3-2022-08-34-34.348-CET-0 <- Most Recent
   2         
   3         
   4         
   5         
   6         
   7         
   8         
   9         
   10   
Router#     

3. Configure your router with a “revert timer”

Router# configure terminal revert timer 1
Router(conf)# Rollback Confirmed Change: Backing up current running config to bootflash:myconfig-Jan--3-2022-08-35-01.511-CET-1

Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#Rollback Confirmed Change: Rollback will begin in one minute.
Enter "configure confirm" if you wish to keep what you've configured

*Jan  3 2022 08:35:01.670 CET: %ARCHIVE_DIFF-5-ROLLBK_CNFMD_CHG_BACKUP: Backing up current running config to bootflash:myconfig-Jan--3-2022-08-35-01.511-CET-1
*Jan  3 2022 08:35:01.670 CET: %ARCHIVE_DIFF-5-ROLLBK_CNFMD_CHG_START_ABSTIMER: User: console(Priv: 15, View: 0): Scheduled to rollback to config bootflash:myconfig-Jan--3-2022-08-35-01.511-CET-1 in 1 minutes
*Jan  3 2022 08:35:01.670 CET: %ARCHIVE_DIFF-5-ROLLBK_CNFMD_CHG_WARNING_ABSTIMER: System will rollback to config bootflash:myconfig-Jan--3-2022-08-35-01.511-CET-1 in one minute. Enter "configure confirm" if you wish to keep what you've configured
Router(conf)# hostname BLAH
BLAH(conf)#
[................... WAITING FOR A MINUTE ........................]
Rollback Confirmed Change: rolling to:bootflash:myconfig-Jan--3-2022-08-35-01.511-CET-1

!Pass 1
!List of Rollback Commands:
no hostname BLAH
hostname Router
end


Total number of passes: 1
Rollback Done

*Jan  3 2022 08:36:01.669 CET: %ARCHIVE_DIFF-5-ROLLBK_CNFMD_CHG_ROLLBACK_START: Start rolling to: bootflash:myconfig-Jan--3-2022-08-35-01.511-CET-1
*Jan  3 07:36:01.722: Rollback:Acquired Configuration lock.


Router(conf) # end

4. Confirm if it is ok for you

If between your “conf t revert time X” and t0+X, you are ok with the configuration you have made, so you can confirm your changes.

Router# configure confirm

That’s it ! Have fun.

It’s time to act

Si vous n’êtes pas insensibles au sujet du climat, merci de prendre 1 min pour ce post 💚
(le lien : https://www.eventbrite.fr/e/billets-time-for-the-planet-change-de-dimension-214694726707)

Big news : le 20 décembre, à 21h, l’aventure @time for the planet (dont je suis associé), change de dimension.

Il y a bientôt 2 ans, Time for the Planet prenait vie à partir de rien, autour d’une ambition un peu folle : 

créer un immense mouvement citoyen non lucratif pour rassembler progressivement 1 milliard d’euros afin de déployer 100 innovations majeures et open source partout dans le monde, capables de nous aider à décarboner massivement nos sociétés. 

« Puisque personne ne viendra nous sauver, on va se sauver nous-mêmes. » 
Parce que face au changement climatique, nous ne sommes pas résignés. 

Chaque petit geste pour la planète compte mais, tous ensemble, nous avons le pouvoir d’aller plus loin. 

Collectivement, nous nous sommes donc fixé un objectif : réussir à lancer officiellement les 3 premières boîtes Time for the Planet avant fin 2021.

Un pari relativement fou, sachant que nous n’avions aucune idée des chances de succès de ce projet titanesque. 

Et pourtant, depuis : 

– En nous regroupant à plus de 31 000 associé·es, nous avons réuni 6,2 millions d’euros. Sans argent et sans être très nombreux, nous ne pouvons rien faire (ni attirer des innovations majeures, ni faire venir des entrepreneurs de renom pour déployer les entreprises). Chaque nouvel associé·e compte. 

– Nous avons mis en place un processus de sélection basé sur plus de 4 000 évaluateurs, que nous avons formés, ainsi qu’un Comité scientifique d’experts reconnus et bénévoles qu’il a été possible de faire venir, entre autres, parce que nous étions nombreux et que nous avions fait du bruit tous ensemble. 

– Nous avons reçu plus de 600 innovations et challengé plusieurs centaines d’entre elles. 

– Nous avons organisé une communauté de plus de 3 000 associé·es actifs et bénévoles (🥰), préparé la suite pour être capables de lever plusieurs dizaines de millions d’euros auprès de grands investisseurs et préparé également l’internationalisation de Time for the Planet. 

Et, un beau jour, ce qui n’était qu’un projet collectif fou devient une réalité. 

Le 20 décembre à 21h, en plateau télé, nous présentons la version concrète de notre grande aventure collective : toutes les premières boîtes #timefortheplanet, en détails. 

 L’émission sera diffusée en live sur YouTube pour qu’un maximum de gens puisse y assister.

Je vous invite donc chaleureusement à vous inscrire à l’événement pour découvrir cette aventure et, je l’espère, nous rejoindre : https://www.eventbrite.fr/e/billets-time-for-the-planet-change-de-dimension-214694726707

Nous réussirons tous ensemble, ou nous échouerons. 
Rdv le 20 décembre, ce moment est le plus important depuis la naissance de Time for the Planet. 

#timefortheplanet 💚🌎 

Some bashblog tests.

For now I will not move from this blog motor, but I have tested bashblog because I have made some search of my really old blog post and it make me think about nanoblogger which is not ever maintained now. So I search only for curiosity if there is now this kind of project. Bashblog is this kind of work. Only some bash and a quick result.

It is simple, just configure EDITOR variable and let’s go :

clucas@eris:~/public_html/blog-test$ ./bb.sh list
1 Bashblog tests November 13, 2021
2 First post to test bashlog November 13, 2021
clucas@eris:~/public_html/blog-test$

To create a new blog post :

clucas@eris:~/public_html/blog-test$ ./bb.sh post

Really simple 🙂

You could check it here : http://eris.clucas.fr/~clucas/blog-test/

It make me think about my original post, when m blog posts was written with only “vi” in static HTML. It was in 2005

http://eris.clucas.fr/~clucas/blog_old/blog.html

A new more act for the planet !

Event though I make some little efforts as lot of humans for the planet, I am searching for a long time a way to do more and more efficient. I hope I have found this way. I have bought Time For The Planet‘s share company. The aim of it, it is found raising 1 billion euros and be able to invest in 100 companies. Ok you will tell me you have made capitallistic investment ?! No, it is where I found it awesome, these companies must and will create innovation in global warming reserach. AND these results will be publically share into Open Source fashion so that it wan be use by humanity. I am in this OpenSource manner from 1997, where I installed my first Slackware-3.3 (https://mirrors.slackware.com/slackware/slackware-3.3/). So I am really sensible to this way to share with others.

Do it now !