Deploy the Zscaler ZPA App Connector with Docker
A working docker run command for the Zscaler Private Access App Connector, what each flag does, and what to check before you put it into production.
-
-
Relay SMTP through Microsoft Graph with SMTP2Graph
Exchange Online is retiring Basic Authentication for SMTP AUTH. SMTP2Graph accepts mail locally and sends it through the Microsoft Graph API, with no user license needed.
-
Restrict SSH access to trusted networks with firewalld IPSets
Allow SSH only from a list of trusted networks with a firewalld IPSet and a rich rule, then remove the default rule that leaves SSH open to the whole internet.
-
Load balancing Exchange with HAProxy
During a migration to Exchange Online, our load balancer could not take the extra traffic without a costly upgrade. HAProxy on a small Debian VM did the job: the full configuration.
-
Build VPP Debian packages from source
The steps I use to build FD.io VPP from source into .deb packages on Debian 12, from cloning the repository to make pkg-deb.
-
Fix freezes in Proxmox VE 8.2
Some Proxmox VE 8.2 hosts freeze and may not even reboot. Two kernel parameters, pcie_port_pm=off and libata.force=noncq, stop it until a fixed kernel is out.
-
Configure SNMP on Proxmox VE
Install snmpd on a Proxmox host, give it a minimal read-only configuration limited to one monitoring server, and start it at boot.
-
Red Hat restricts access to the RHEL source code
In June 2023 Red Hat stopped publishing RHEL sources on git.centos.org. My take on what it means for Rocky Linux, AlmaLinux, Oracle Linux and open source.
-
Fix the "setlocale: LC_CTYPE: cannot change locale (UTF-8)" warning
Logging in over SSH from a Mac to a CentOS server prints a setlocale LC_CTYPE warning. Setting LC_CTYPE in /etc/environment and generating the locale fixes it.
-
What umask is and how it works
How Linux permissions are written, how umask removes permissions from new files and directories, and how to read a value such as 022 or 027.
-
Why I think Proxmox is the best hypervisor for small deployments
Proxmox VE is free, built on Debian, and covers clustering, high availability, Ceph storage and backups through one web interface. Why I recommend it over VMware and Hyper-V for small deployments, and where it falls short.
-
Generate an SSL certificate for the Proxmox web interface
Create a key and a SAN certificate request with OpenSSL, have it signed by your CA, and install the certificate in the Proxmox VE web interface.
-
Generate a SAN certificate with OpenSSL
Create a certificate request that covers several DNS names and IP addresses with an OpenSSL configuration file, then convert the signed certificate to PFX for Windows.
-
Change the keyboard layout of the Linux console
Set the console keyboard layout of a CentOS or other systemd-based Linux server with localectl, and list the keymaps you can choose from.
-
Missing dependency 'jq' when installing Microsoft Tunnel Gateway on CentOS 7
The Microsoft Tunnel readiness script stops with "jq: command not found" on CentOS 7. jq is in EPEL, so enable that repository and install it.
