Famille

NTP on Alpine Linux

Hi guys and girls, I am so sorry for this long time. It was really awesome how Alpine Linux is. I have tried in my home lab to make some different ntp server on my different vm on different proxmox hypervisors. I have tried OpenNTPd. Unfortunately I was not able to make it works. My Cisco switches cry with :

.Apr 16 21:56:47.016: NTP: rcv packet from 10.20.0.3 to 10.20.0.252 on Vlan200:
.Apr 16 21:56:47.016:  leap 3, mode 2, version 3, stratum 2, ppoll 64
.Apr 16 21:56:47.016:  rtdel 0328 (12.329), rtdsp 0000 (0.000), refid 5242284F (82.66.40.79)
.Apr 16 21:56:47.016:  ref EBAA89A0.323EAFFF (21:55:12.196 CET Wed Apr 16 2025)
.Apr 16 21:56:47.016:  org EBAA89FF.049EF92D (21:56:47.018 CET Wed Apr 16 2025)
.Apr 16 21:56:47.016:  rec EBAA89FD.D3E977FF (21:56:45.827 CET Wed Apr 16 2025)
.Apr 16 21:56:47.016:  xmt EBAA89FD.D3E9C7FF (21:56:45.827 CET Wed Apr 16 2025)
.Apr 16 21:56:47.016:  inp EBAA89FF.056B27F5 (21:56:47.021 CET Wed Apr 16 2025)
.Apr 16 21:56:47.016: NTP: packet from 10.20.0.3 failed validity tests 20
.Apr 16 21:56:47.016: Peer/Server Clock unsynchronized

And :

Wordpress behing OpnSense and hosted on FreeBSD-14.0-p6

1. To be able to correct “Too many redirection” 

Add this code to the backend pool. Services -> HAProxy -> Settings -> Virtual Service -> Backend Pools -> your backend pool -> Edit -> Advanced Mode -> Option pass-through:

#force SSL redirect redirect scheme https if !{ ssl_fc } # close open connections option http-server-close # add X-FORWARDED-FOR option forwardfor # add X-Forwarded-Proto http-request set-header X-Forwarded-Proto https if { ssl_fc }

OpnSense & ACME & NSUpdate (bind9 journal problem)

If you need to use ACME plugin to register certificate (by using nsupdate (RFC2136)), you could be faced on the problem below

Nov  6 07:58:24 Sagitarius named[121]: client @0x7f68640c70d0 10.20.3.1#50544/key opnsense: signer "opnsense" approved
Nov  6 07:58:24 Sagitarius named[121]: client @0x7f68640c70d0 10.20.3.1#50544/key opnsense: updating zone 'clucas.fr/IN': adding an RR at '_acme-challenge.cloud-home.clucas.fr' TXT "-_UEEMEIYvUxwoHWhBbdxiSzil62dgNoHCBfZJCzIiE"
Nov  6 07:58:24 Sagitarius named[121]: /etc/bind/clucas.fr.zone.jnl: create: permission denied
Nov  6 07:58:24 Sagitarius named[121]: client @0x7f68640c70d0 10.20.3.1#50544/key opnsense: updating zone 'clucas.fr/IN': error: journal open failed: unexpected error

You can try to ’touch’ this file, here “clucas.fr.zone.jnl”. Even if you change owner, permission (even 777), you will not ble able to make it work. You will be face this time on :

It’s time to act

Si vous n’êtes pas insensibles au sujet du climat, merci de prendre 1 min pour ce post 💚
(le lien : https://www.eventbrite.fr/e/billets-time-for-the-planet-change-de-dimension-214694726707)

Big news : le 20 décembre, à 21h, l’aventure @time for the planet (dont je suis associé), change de dimension.

Il y a bientôt 2 ans, Time for the Planet prenait vie à partir de rien, autour d’une ambition un peu folle : 

créer un immense mouvement citoyen non lucratif pour rassembler progressivement 1 milliard d’euros afin de déployer 100 innovations majeures et open source partout dans le monde, capables de nous aider à décarboner massivement nos sociétés. 

Some bashblog tests.

For now I will not move from this blog motor, but I have tested bashblog because I have made some search of my really old blog post and it make me think about nanoblogger which is not ever maintained now. So I search only for curiosity if there is now this kind of project. Bashblog is this kind of work. Only some bash and a quick result.

It is simple, just configure EDITOR variable and let’s go :

Blog, bsd, apache2, certbot and fun

It was long time ago I used a FreeBSD system. I was really impressed by the way it great evolved. It is easy to add package due to “pkg” tool and “portsnap”.

After :

pkg install apache24 mysql57-server mod_php73 php73-mysqli php73-xml php73-hash php73-gd php73-curl php73-tokenizer php73-zlib php73-zip

I have a really fast install of an HTTP server as I can do with “apt-get”.

I have needed to load some modules by editiing /usr/local/etc/apache24/httpd.conf such as : 

06/06/19 - D-Day

In memory of all the soldiers who paid with their life the cost to peace and democracy in Europe. Please read these words and keep it in mind.

https://www.youtube.com/watch?v=9-9SFHdaRVM

https://lyricstranslate.com/en/n%C3%A9-en-17-%C3%A0-leidenstadt-born-1917-leidenstadt.html

If I 'd been born in 1917 in Leidenstadt
On top of ruins, in a battlefield
Would I have behaved better of worse than those people
If I'd been German?
 
Born into humiliation, hatred and ignorance
Fed on dreams of revenge
Would I have been one of those unlikely beings with a conscience
Like some teardrops in the midst of a flood?
 
If I'd grown up in the docklands of Belfast
Soldier of a faith, of a class
Would I have had the strength to withstand and fight against my Own kind: to betray, to hold out a hand in friendship?
 
If I'd been born white and rich in Johannesburg
Between the power and the fear
Would I have heard the cries carried by the wind?
Nothing will be like it was before.
 
One never knows what one really has in one's guts,
Hidden behind our appearances
The soul of a brave man, an accomplice, an executioner?
The worst or the best?
Would we be one of those who resist or just those who follow like sheep
If it was a question of more than just words?
 
(Refrain)
If I 'd been born in 1917 in Leidenstadt
On top of ruins in a battlefield
Would I have behaved better of worse than those
If I'd been German?