RZ-Amper Wiki - Benutzerbeiträge [de]

Quick & Dirty -- Fedora 35

2022-03-17T18:23:20Z

WikiSysop: Die Seite wurde neu angelegt: „/etc/fstab \\thor.rz-amper.de\container_1 /Container_1 cifs rw,suid,username=affe,password=affe,dir_mode=0777,file_mode=0777 0 0 \\thor.rz…“

/etc/fstab
\\thor.rz-amper.de\container_1 /Container_1 cifs rw,suid,username=affe,password=affe,dir_mode=0777,file_mode=0777 0 0
\\thor.rz-amper.de\container_2 /Container_2 cifs rw,suid,username=affe,password=affe,dir_mode=0777,file_mode=0777 0 0
\\thor.rz-amper.de\container_3 /Container_3 cifs rw,suid,username=affe,password=affe,dir_mode=0777,file_mode=0777 0 0

Stream URL

2021-07-13T20:59:30Z

WikiSysop:

== Internet TV ==
===== ZDF =====
https://zdf-hls-15.akamaized.net/hls/live/2016498/de/high/master.m3u8
===== ZDF info =====
https://zdf-hls-17.akamaized.net/hls/live/2016500/de/high/master.m3u8
===== ZDF neo =====
https://zdf-hls-16.akamaized.net/hls/live/2016499/de/high/master.m3u8
===== ARD =====
https://mcdn.daserste.de/daserste/de/master.m3u8

== Internet Radio ==
===== Bayern 2 Nord =====
https://br-br2-nord.cast.addradio.de/br/br2/nord/mp3/mid

===== Bayern 2 Sued =====
https://br-br2-sued.cast.addradio.de/br/br2/sued/mp3/mid

===== B5 aktuell =====
B5 aktuell gibt es nicht mehr. Heisst jetzt BR24. 
https://streams.br.de/b5aktuell_2.m3u

===== BR24 =====
https://br-br24-live.cast.addradio.de/br/br24/live/mp3/mid

===== BR24live =====
https://br-br24live-live.cast.addradio.de/br/br24live/live/mp3/mid

Stream URL

2021-07-13T20:58:53Z

WikiSysop:

== Internet TV ==
===== ZDF =====
https://zdf-hls-15.akamaized.net/hls/live/2016498/de/high/master.m3u8
===== ZDF info =====
https://zdf-hls-17.akamaized.net/hls/live/2016500/de/high/master.m3u8
===== ZDF neo =====
https://zdf-hls-16.akamaized.net/hls/live/2016499/de/high/master.m3u8
===== ARD =====
https://mcdn.daserste.de/daserste/de/master.m3u8

== Internet Radio ==
===== Bayern 2 Nord =====
https://br-br2-nord.cast.addradio.de/br/br2/nord/mp3/mid

===== Bayern 2 Sued =====
https://br-br2-sued.cast.addradio.de/br/br2/sued/mp3/mid

===== B5 aktuell =====
B5 aktuell gibt es nicht mehr. Heisst jetzt BR24.

https://streams.br.de/b5aktuell_2.m3u

===== BR24 =====
https://br-br24-live.cast.addradio.de/br/br24/live/mp3/mid

===== BR24live =====
https://br-br24live-live.cast.addradio.de/br/br24live/live/mp3/mid

Stream URL

2021-07-13T20:58:29Z

WikiSysop:

== Internet TV ==
===== ZDF =====
https://zdf-hls-15.akamaized.net/hls/live/2016498/de/high/master.m3u8
===== ZDF info =====
https://zdf-hls-17.akamaized.net/hls/live/2016500/de/high/master.m3u8
===== ZDF neo =====
https://zdf-hls-16.akamaized.net/hls/live/2016499/de/high/master.m3u8
===== ARD =====
https://mcdn.daserste.de/daserste/de/master.m3u8

== Internet Radio ==
===== Bayern 2 Nord =====
https://br-br2-nord.cast.addradio.de/br/br2/nord/mp3/mid

===== Bayern 2 Sued =====
https://br-br2-sued.cast.addradio.de/br/br2/sued/mp3/mid

===== B5 aktuell =====
B5 aktuell gibt es nicht mehr. Heisst jetzt BR24.
https://streams.br.de/b5aktuell_2.m3u

===== BR24 =====
https://br-br24-live.cast.addradio.de/br/br24/live/mp3/mid

===== BR24live =====
https://br-br24live-live.cast.addradio.de/br/br24live/live/mp3/mid

Stream URL

2021-07-13T20:58:07Z

WikiSysop:

== Internet TV ==
===== ZDF =====
https://zdf-hls-15.akamaized.net/hls/live/2016498/de/high/master.m3u8
===== ZDF info =====
https://zdf-hls-17.akamaized.net/hls/live/2016500/de/high/master.m3u8
===== ZDF neo =====
https://zdf-hls-16.akamaized.net/hls/live/2016499/de/high/master.m3u8
===== ARD =====
https://mcdn.daserste.de/daserste/de/master.m3u8

== Internet Radio ==
===== Bayern 2 Nord =====
https://br-br2-nord.cast.addradio.de/br/br2/nord/mp3/mid

===== Bayern 2 Sued =====
https://br-br2-sued.cast.addradio.de/br/br2/sued/mp3/mid

===== B5 aktuell =====
B5 aktuell gibt es nicht mehr. Heisst jetzt BR24
https://streams.br.de/b5aktuell_2.m3u

===== BR24 =====
https://br-br24-live.cast.addradio.de/br/br24/live/mp3/mid

===== BR24live =====
https://br-br24live-live.cast.addradio.de/br/br24live/live/mp3/mid

Handy One-Liners

2021-04-24T11:04:06Z

WikiSysop:

Stripp of HTML Tags
sed -e 's#<[^>]*>##g'

Extract Page Title
wget www.web.de -q -O - | grep -i "<title>" | /usr/local/bin/sed -n 's/.*<title>$.*$<\/title>.*/\1/ip;T;q

Find String in Files
find ./ -type f -exec grep -l searchstring {} \;

Using Rsync
rsync -av -e ssh source user@target:dest

Using Rsync on LAN
rsync -avW -e ssh source user@target:dest

AWK, pint first row
tail -1000 file.log | grep -i "irgendwas" | awk -F"Delimeter" '{print $1, $2}'

Grep for "schreischachtl" in apache access log file, grep for "POST", get ip address and count wich ip address accessed how often.
grep "schreischachtl" access_log | grep "POST" | awk -F"-" '{print $1}' | uniq -c

Create bootable USB flash drive
sudo dd bs=4M if=path/to/input.iso of=/dev/sd<?> conv=fdatasync status=progress

Quick & Dirty -- youtube-dl

2021-04-16T15:19:05Z

WikiSysop:

== Download Audio from Youtube ==
First get a list of available formats and streams
youtube-dl -F https://www.youtube.com/watch?v=FQG_PC3Y5Kk&ab_channel=Monof%C3%BCrAlle%21-Topic
This will give you a list
249 webm audio only tiny 50k , webm_dash container, opus @ 50k (48000Hz), 1.69MiB
250 webm audio only tiny 66k , webm_dash container, opus @ 66k (48000Hz), 2.23MiB
140 m4a audio only tiny 129k , m4a_dash container, mp4a.40.2@129k (44100Hz), 4.35MiB
251 webm audio only tiny 131k , webm_dash container, opus @131k (48000Hz), 4.41MiB
160 mp4 144x144 144p 7k , mp4_dash container, avc1.4d400b@ 7k, 25fps, video only, 250.11KiB
278 webm 144x144 144p 13k , webm_dash container, vp9@ 13k, 25fps, video only, 478.95KiB
133 mp4 240x240 240p 9k , mp4_dash container, avc1.4d400c@ 9k, 25fps, video only, 330.00KiB
242 webm 240x240 240p 23k , webm_dash container, vp9@ 23k, 25fps, video only, 798.88KiB
134 mp4 360x360 360p 11k , mp4_dash container, avc1.4d4015@ 11k, 25fps, video only, 403.53KiB
243 webm 360x360 360p 33k , webm_dash container, vp9@ 33k, 25fps, video only, 1.14MiB
135 mp4 480x480 480p 17k , mp4_dash container, avc1.4d401e@ 17k, 25fps, video only, 604.41KiB
244 webm 480x480 480p 54k , webm_dash container, vp9@ 54k, 25fps, video only, 1.82MiB
136 mp4 720x720 720p 29k , mp4_dash container, avc1.4d401f@ 29k, 25fps, video only, 1002.25KiB
247 webm 720x720 720p 102k , webm_dash container, vp9@ 102k, 25fps, video only, 3.44MiB
137 mp4 1080x1080 1080p 77k , mp4_dash container, avc1.640020@ 77k, 25fps, video only, 2.60MiB
248 webm 1080x1080 1080p 179k , webm_dash container, vp9@ 179k, 25fps, video only, 6.04MiB
18 mp4 360x360 360p 139k , avc1.42001E, 25fps, mp4a.40.2 (44100Hz), 4.70MiB (best)
Now choose the desired audio format.
youtube-dl -f 251 https://www.youtube.com/watch?v=FQG_PC3Y5Kk&ab_channel=Monof%C3%BCrAlle%21-Topic
[youtube] WUknBnpiF1U: Downloading webpage
[download] Destination: Hallo Verfassungsschutz (Live)-WUknBnpiF1U.webm
[download] 100% of 4.41MiB in 00:23
You may use the following command if you don't want to select best audio manually.
youtube-dl -f bestaudio https://www.youtube.com/blablablaal

Quick & Dirty -- youtube-dl

2021-04-16T15:12:11Z

WikiSysop: Die Seite wurde neu angelegt: „== Download Audio from Youtube == First get a list of available formats and streams youtube-dl -F https://www.youtube.com/watch?v=FQG_PC3Y5Kk&ab_channel=Mono…“

== Download Audio from Youtube ==
First get a list of available formats and streams
youtube-dl -F https://www.youtube.com/watch?v=FQG_PC3Y5Kk&ab_channel=Monof%C3%BCrAlle%21-Topic

Quick & Dirty -- ffmpeg

2021-03-04T15:25:57Z

WikiSysop: Die Seite wurde neu angelegt: „ffmpeg is a very fast video and audio converter that can also grab from a live audio/video source. It can also convert between arbitrary sample rates and resiz…“

ffmpeg is a very fast video and audio converter that can also grab from a live audio/video source. It can also convert between arbitrary sample rates and resize video on the fly with a high quality polyphase filter.

ffmpeg reads from an arbitrary number of input "files" (which can be regular files, pipes, network streams, grabbing devices, etc.), specified by the -i option, and writes to an arbitrary number of output "files", which are specified by a plain output url. Anything found on the command line which cannot be interpreted as an option is considered to be an output url.

Each input or output url can, in principle, contain any number of streams of different types (video/audio/subtitle/attachment/data). The allowed number and/or types of streams may be limited by the container format. Selecting which streams from which inputs will go into which output is either done automatically or with the -map option (see the Stream selection chapter).

To refer to input files in options, you must use their indices (0-based). E.g. the first input file is 0, the second is 1, etc. Similarly, streams within a file are referred to by their indices. E.g. 2:3 refers to the fourth stream in the third input file. Also see the Stream specifiers chapter.

As a general rule, options are applied to the next specified file. Therefore, order is important, and you can have the same option on the command line multiple times. Each occurrence is then applied to the next input or output file. Exceptions from this rule are the global options (e.g. verbosity level), which should be specified first.

Do not mix input and output files – first specify all input files, then all output files. Also do not mix options which belong to different files. All options apply ONLY to the next input or output file and are reset between files.

To set the video bitrate of the output file to 64 kbit/s:
ffmpeg -i input.avi -b:v 64k -bufsize 64k output.avi
To force the frame rate of the output file to 24 fps:
ffmpeg -i input.avi -r 24 output.avi
To force the frame rate of the input file (valid for raw formats only) to 1 fps and the frame rate of the output file to 24 fps:
ffmpeg -r 1 -i input.m2v -r 24 output.avi
==Extract Opus from WEBM==
This will extract the Opus stream from the Webm container without recoding.
ffmpeg -i "input-filename.webm" -acodec copy "output-filename.webm"

==Convert wav to flac==
This will encode to a 176kHz 24-bit sample, stored as 32-bits.
ffmpeg -i "input-filename.webm" -af aformat=s32:176000 "output-filename.flac"

This will encode to 16-bit and 44.1 kHz.
ffmpeg -i "input-filename.webm" -af aformat=s16:44100 "output-filename.flac"

OpenSSL -- Advanced PKI

2020-10-31T11:08:13Z

WikiSysop:

The Advanced PKI consists of a root CA and a layer of subordinate CAs. We assume a company named '''Rechenzentrum Amper''', controlling the domain '''rz-amper.de'''. The company runs a two-pronged PKI to serve its security needs. To implement the PKI, we first create the Rechenzentrum Amper Root CA Authority and its CA certificate. We then use the root CA to create the three signing CAs: Rechenzentrum Amper Email CA and Rechenzentrum Amper TLS CA. The CAs in place we proceed to show them in operation, issuing user certificates for email-protection and TLS-authentication.
== Root Certification Authority ==
All commands are ready to be copy/pasted into a terminal session. When you have reached the end of this page, you will have built a PKI with multiple signing CAs and issued 4 different types of user certificates.
=== Directories ===
Just follow these commands to setup needed directories.
mkdir -p /usr/local/etc/PKI
cd /usr/local/etc/PKI
mkdir -p ca/root-ca/private ca/root-ca/db
mkdir -p ca/email-ca/private ca/email-ca/db
mkdir -p ca/tls-ca/private ca/tls-ca/db
mkdir crl certs etc
chown -R root:root /usr/local/etc/PKI
chmod -R 0700 /usr/local/etc/PKI

=== Serial Database ===
Create files to keep track of serial numbers. The files must exist before the openssl ca command can be used.
cp /dev/null ca/root-ca/db/root-ca.db
cp /dev/null ca/root-ca/db/root-ca.db.attr
cp /dev/null ca/email-ca/db/email-ca.db
cp /dev/null ca/email-ca/db/email-ca.db.attr
cp /dev/null ca/tls-ca/db/tls-ca.db
cp /dev/null ca/tls-ca/db/tls-ca.db.attr
echo '100001' > ca/root-ca/db/root-ca.crt.srl
echo '100001' > ca/root-ca/db/root-ca.crl.srl
echo '100001' > ca/email-ca/db/email-ca.crt.srl
echo '100001' > ca/email-ca/db/email-ca.crl.srl
echo '100001' > ca/tls-ca/db/tls-ca.crt.srl
echo '100001' > ca/tls-ca/db/tls-ca.crl.srl
touch certindex.txt

=== Config File for SSL ===
Create the files using vi text editor and call them described. Here are the basics needed for this exercise (edit as needed): 
We use one configuration file per CA:
* [[OpenSSL -- Root CA Configuration File]] --> /usr/local/etc/PKI/etc/root-ca.conf
* [[OpenSSL -- eMail CA Configuration File]] --> /usr/local/etc/PKI/etc/email-ca.conf
* [[OpenSSL -- TLS CA Configuration File]] --> /usr/local/etc/PKI/etc/tls-ca.conf
And one configuration file per CSR type:
* [[OpenSSL -- Email Certificate Request Configuration File]] --> /usr/local/etc/PKI/etc/email.conf
* [[OpenSSL -- TLS Server Certificate Request Configuration File]] --> /usr/local/etc/PKI/etc/server.conf
* [[OpenSSL -- TLS Client Certificate Request Configuration File]] --> /usr/local/etc/PKI/etc/client.conf

=== Create CA Request ===
With the openssl req -new command we create a private key and a CSR for the root CA. The configuration is taken from the [req] section of the [[OpenSSL -- Root CA Configuration File|Root CA configuration file]].
openssl req -new -config etc/root-ca.conf -out ca/root-ca.csr -keyout ca/root-ca/private/root-ca.key
openssl req -new -config etc/email-ca.conf -out ca/email-ca.csr -keyout ca/email-ca/private/email-ca.key
openssl req -new -config etc/tls-ca.conf -out ca/tls-ca.csr -keyout ca/tls-ca/private/tls-ca.key

=== Create CA Certificate ===
With the openssl ca command we create a self-signed root certificate from the CSR. The configuration is taken from the [ca] section of the root CA configuration file. Note that we specify an end date based on the key length. 2048-bit RSA keys are deemed safe until 2030 ([http://www.rsa.com/rsalabs/node.asp?id=2004 RSA Labs]).
openssl ca -selfsign -config etc/root-ca.conf -in ca/root-ca.csr -out ca/root-ca.crt -extensions root_ca_ext -enddate 20491231235959Z
openssl ca -config etc/root-ca.conf -in ca/email-ca.csr -out ca/email-ca.crt -extensions signing_ca_ext -enddate 20491231235959Z
openssl ca -config etc/root-ca.conf -in ca/tls-ca.csr -out ca/tls-ca.crt -extensions signing_ca_ext -enddate 20491231235959Z

=== Create initial CRL ===
With the openssl ca -gencrl command we generate an initial (empty) CRL.
openssl ca -gencrl -config etc/root-ca.conf -out crl/root-ca.crl
openssl ca -gencrl -config etc/email-ca.conf -out crl/email-ca.crl
openssl ca -gencrl -config etc/tls-ca.conf -out crl/tls-ca.crl

=== Create PEM bundle ===
We create a certificate chain file from the email CA and root CA certificates. It will come handly later as input for the openssl pkcs12 command.
cat ca/email-ca.crt ca/root-ca.crt > ca/email-ca-chain.pem
cat ca/tls-ca.crt ca/root-ca.crt > ca/tls-ca-chain.pem

== Operate Email CA ==
=== Create email request ===
We create the private key and CSR for an email-protection certificate using a request configuration file. When prompted enter these DN components: C=NO, O=Green AS, CN=Fred Flintstone, emailAddress=fred@green.no. Leave other fields empty.
openssl req -new -config etc/email.conf -out certs/fred.csr -keyout certs/fred.key
=== Create email certificate ===
We use the email CA to issue Fred’s email-protection certificate. A copy of the certificate is saved in the certificate archive under the name ca/email-ca/01.pem (01 being the certificate serial number in hex.)
openssl ca -config etc/email-ca.conf -in certs/fred.csr -out certs/fred.crt -extensions email_ext
=== Create PKCS#12 bundle ===
We pack the private key, the certificate, and the CA chain into a PKCS#12 bundle. This format (often with a .pfx extension) is used to distribute keys and certificates to end users. The friendly names help identify individual certificates within the bundle.
openssl pkcs12 -export -name "Fred Flintstone (Email Security)" -caname "Green Email CA" -caname "Green Root CA" -inkey certs/fred.key -in certs/fred.crt -certfile ca/email-ca-chain.pem -out certs/fred.p12
=== Revoke certificate ===
When Fred’s laptop goes missing, we revoke his certificate.
openssl ca -config etc/email-ca.conf -revoke ca/email-ca/01.pem -crl_reason keyCompromise
=== Create CRL ===
The next CRL contains the revoked certificate.
openssl ca -gencrl -config etc/email-ca.conf -out crl/email-ca.crl

== Operate TLS CA ==
=== Create TLS server request ===
We create the private key and CSR for a TLS-server certificate using the appropriate request configuration file. When prompted enter these DN components: C=NO, O=Green AS, CN=www.green.no. The subjectAltName cannot be prompted for and must be specified as environment variable.
SAN=DNS:rz-amper.de,DNS:www.rz-amper.de \
openssl req -new -config etc/server.conf -out certs/rz-amper.de.csr -keyout certs/rz-amper.de.key
=== Create TLS server certificate ===
We use the TLS CA to issue the server certificate.
openssl ca -config etc/tls-ca.conf -in certs/rz-amper.de.csr -out certs/rz-amper.de.crt -extensions server_ext -enddate 20491231235959Z
=== Create PKCS#12 bundle ===
We pack the private key, the certificate, and the CA chain into a PKCS#12 bundle for distribution.
openssl pkcs12 -export -name "RZ-Amper (Network Component)" -caname "RZ-Amper TLS CA" -caname "RZ-Amper Root CA" \
-inkey certs/rz-amper.de.key -in certs/rz-amper.de.crt -certfile ca/tls-ca-chain.pem -out certs/rz-amper.de.p12

== The Most Common OpenSSL Commands ==
=== Checking Using OpenSSL ===
If you need to check the information within a Certificate, CSR or Private Key, use these commands. You can also check CSRs and check certificates using our online tools.

Check a Certificate Signing Request (CSR)
openssl req -text -noout -verify -in CSR.csr

Check a private key
openssl rsa -in privateKey.key -check

Check a certificate
openssl x509 -in certificate.crt -text -noout

Check a PKCS#12 file (.pfx or .p12)
openssl pkcs12 -info -in keyStore.p12

Connect to TCP port using openssl
openssl s_client -connect server.tld:443

=== Debugging Using OpenSSL ===
If you are receiving an error that the private doesn't match the certificate or that a certificate that you installed to a site is not trusted, try one of these commands. If you are trying to verify that an SSL certificate is installed correctly, be sure to check out the SSL Checker.

Check an MD5 hash of the public key to ensure that it matches with what is in a CSR or private key
openssl x509 -noout -modulus -in certificate.crt | openssl md5
openssl rsa -noout -modulus -in privateKey.key | openssl md5
openssl req -noout -modulus -in CSR.csr | openssl md5

Check an SSL connection. All the certificates (including Intermediates) should be displayed
openssl s_client -connect www.paypal.com:443

=== Converting Using OpenSSL ===
These commands allow you to convert certificates and keys to different formats to make them compatible with specific types of servers or software. For example, you can convert a normal PEM file that would work with Apache to a PFX (PKCS#12) file and use it with Tomcat or IIS. Use our SSL Converter to convert certificates without messing with OpenSSL.

Convert a DER file (.crt .cer .der) to PEM
openssl x509 -inform der -in certificate.cer -out certificate.pem

Convert a PEM file to DER
openssl x509 -outform der -in certificate.pem -out certificate.der

Convert a PKCS#12 file (.pfx .p12) containing a private key and certificates to PEM
openssl pkcs12 -in keyStore.pfx -out keyStore.pem -nodes
You can add -nocerts to only output the private key or add -nokeys to only output the certificates.

Convert a PEM certificate file and a private key to PKCS#12 (.pfx .p12)
openssl pkcs12 -export -out certificate.pfx -inkey privateKey.key -in certificate.crt -certfile CACert.crt

CentOS 8.x from Scratch

2020-10-24T14:31:34Z

WikiSysop:

This page targets primarily the setup of minimal CentOS 8.x installation.

== Software and Applications ==
The installation and setup of the following software and applications will described.
* Minimal install of CentOS 7.x
* Xorg
* dwm windows manager
* dmenu
* st terminal

== Installation ==
A simple way to set your screen resolution and color depth for most Live Linux distro's is via the use of the vga=parameter boot option. For example at boot you might type: Live vga=795. This would set your system to boot using the Live label with a screen resolution to 24bit 1280X1024. Here are some more examples of common vga boot values.

{| class="wikitable"
|-
! Depth !! 800x600 !! 1024x786 !! 1152x864 !! 1280x1024 !! 1600x1200
|-
| 8 bit || vga=771 || vga=773 || vga=353 || vga=775 || vga=796
|-
| 16 bit || vga=788 || vga=791 || vga=355 || vga=794 || vga=798
|-
| 24 bit || vga=789 || vga=792 || || vga=795 || vga=799
|}

Since this page targets the setup of a minimal CentOS 8 installation you should stick with the default minimal software selection during graphical installation of CentOS 8. Please keep in mind that with this minimal set of software you will not be able to join wireless networks. In order to automatically connect to the wireless network, which you have configured and used during the graphical installation process of CentOS 8, you have to have the following packages installed.
* NetworkManager.x86_64
* NetworkManager-libnm.x86_64
* NetworkManager-team.x86_64
* NetworkManager-tui.x86_64
* NetworkManager-wifi.x86_64
But usually the minimal install of CentOS 8 doesn't come with NetworkManager-wifi installed, which is not cool ... specially on my DELL Latitude E6510. So how do you get this package installed without wireless network connection. You don't wanna mess with cables at the end. Simplest way to go is to mount your installation medium, which is probably still hooked up, change to the repository directory and install the package manually. As root do the following to mount the installation medium and to install the missing package. The following example aims at CentOS 7.6 1804. Other versions may vary.
mkdir -p /mnt/usb1
mount /dev/sdb1 /mnt/usb1
cd /mnt/usb1/BaseOS/Packages
dnf install -y wpa_supplicant*
dnf install -y NetworkManger-wifi*
dnf install -y NetworkManager-libnm*
At this point you should be able to use Wifi after rebooting and you may do the following to get NetworkManager upgraded
dnf install -y NetworkManager
But much better would be to update the whole system.
dnf update -y

== Post Installation ==
Disable graphical Boot
plymouth-set-default-theme details
dracut -f

Stream URL

2020-10-06T20:01:04Z

WikiSysop:

Stream URL

2020-10-06T19:48:24Z

WikiSysop: Die Seite wurde neu angelegt: „== Internet TV == ===== ZDF ===== https://zdf-hls-15.akamaized.net/hls/live/2016498/de/high/master.m3u8 == Internet Radio ==“

== Internet TV ==
===== ZDF =====
https://zdf-hls-15.akamaized.net/hls/live/2016498/de/high/master.m3u8

== Internet Radio ==

IPCam - SV3C 1080 HD

2020-09-16T18:14:07Z

WikiSysop: Die Seite wurde neu angelegt: „{| class="wikitable" |- ! Type !! Protocol !! URL !! Audio |- | JPG || http:// || http://cam1.rz-amper.de/tmpfs/auto.jpg || No |- | FFMPEG || rtsp:// || rtsp:/…“

{| class="wikitable"
|-
! Type !! Protocol !! URL !! Audio
|-
| JPG || http:// || http://cam1.rz-amper.de/tmpfs/auto.jpg || No
|-
| FFMPEG || rtsp:// || rtsp://cam1.rz-amper.de:554/1 || No
|-
| FFMPEG || rtsp:// || rtsp://cam1.rz-amper.de:554/1/mpeg4 || No
|-
| FFMPEG || rtsp:// || rtsp://cam1.rz-amper.de:554/2 || No
|-
| FFMPEG || rtsp:// || rtsp://cam1.rz-amper.de:554/2/mpeg4 || No
|-
|}

SDR -- Cheat Sheet

2020-08-13T14:14:12Z

WikiSysop:

== Frequenzen ==
Ein paar Frequenzen die ich interessant finde.

=== Flugfunk ===
* 130.474.900
* 126.950.000 Muenchen Radar

=== PMR446 ===
==== Analoge Frequenznutzung ====
Der Frequenzbereich ist in 16 Kanäle im 12,5-kHz-Raster unterteilt. Zur Vermeidung von Nachbarkanalstörungen direkt unterhalb von 446,0 MHz wurde das Kanalraster gegenüber der normalen Anordnung, bei der der erste Kanal genau die Frequenz 446,00000 MHz erhalten hätte, um 6,25 kHz und damit um eine halbe Kanalbreite angehoben (also auf 446,00625 MHz). Aufgrund des für quarzgesteuerte Geräte besonderen Rasters von 6,25 kHz erschwerte man gleichzeitig die Einsatzmöglichkeit von nicht zugelassenen Geräten, wie z. B. Amateurfunkgeräten mit erheblich größerer Sendeleistung als den zugelassenen 0,5 Watt. Inzwischen beherrschen jedoch Amateurfunkgeräte mit digitaler Frequenzabstimmung das hier verwendete 6,25-kHz-Raster.

{| class="wikitable" style="text-align:center"
|- class="hintergrundfarbe5"
|- style="vertical-align:top"
! style="width:7em" |Kanal FM
!Mittenfrequenz in MHz
!Kanalbreite/Kanalraster in kHz
|-
|1 || 446,00625
|12,5
|-
|2 || 446,01875
|12,5
|-
|3 || 446,03125
|12,5
|-
|4 || 446,04375
|12,5
|-
|5 || 446,05625
|12,5
|-
|6 || 446,06875
|12,5
|-
|7 || 446,08125
|12,5
|-
|8 || 446,09375
|12,5
|-
|9 || 446,10625
|12,5
|-
|10 || 446,11875
|12,5
|-
|11 || 446,13125
|12,5
|-
|12 || 446,14375
|12,5
|-
|13 || 446,15625
|12,5
|-
|14 || 446,16875
|12,5
|-
|15 || 446,18125
|12,5
|-
|16 || 446,19375
|12,5
|}

==== Digitale Frequenznutzung ====
{| class="wikitable" style="text-align:center"
|- style="vertical-align:top"
! style="width:7em" |Kanal TDMA
DMR Tier I
!Mittenfrequenz in MHz
!Kanalbreite/Kanalraster in kHz
|-
|1
|446,00625
|12,5
|-
|2
|446,01875
|12,5
|-
|3
|446,03125
|12,5
|-
|4
|446,04375
|12,5
|-
|5
|446,05625
|12,5
|-
|6
|446,06875
|12,5
|-
|7
|446,08125
|12,5
|-
|8
|446,09375
|12,5
|-
|9
|446,10625
|12,5
|-
|10
|446,11875
|12,5
|-
|11
|446,13125
|12,5
|-
|12
|446,14375
|12,5
|-
|13
|446,15625
|12,5
|-
|14
|446,16875
|12,5
|-
|15
|446,18125
|12,5
|-
|16
|446,19375
|12,5
|}

{| class="wikitable" style="text-align:center"
|- style="vertical-align:top"
! style="width:7em" | Kanal FDMA dPMR
!Mittenfrequenz in MHz
!Kanalbreite/Kanalraster in kHz
|-
|1
|446,003125
|6,25
|-
|2
|446,009375
|6,25
|-
|3
|446,015625
|6,25
|-
|4
|446,021875
|6,25
|-
|5
|446,028125
|6,25
|-
|6
|446,034375
|6,25
|-
|7
|446,040625
|6,25
|-
|8
|446,046875
|6,25
|-
|9
|446,053125
|6,25
|-
|10
|446,059375
|6,25
|-
|11
|446,065625
|6,25
|-
|12
|446,071875
|6,25
|-
|13
|446,078125
|6,25
|-
|14
|446,084375
|6,25
|-
|15
|446,090625
|6,25
|-
|16
|446,096875
|6,25
|-
|17
|446,103125
|6,25
|-
|18
|446,109375
|6,25
|-
|19
|446,115625
|6,25
|-
|20
|446,121875
|6,25
|-
|21
|446,128125
|6,25
|-
|22
|446,134375
|6,25
|-
|23
|446,140625
|6,25
|-
|24
|446,146875
|6,25
|-
|25
|446,153125
|6,25
|-
|26
|446,159375
|6,25
|-
|27
|446,165625
|6,25
|-
|28
|446,171875
|6,25
|-
|29
|446,178125
|6,25
|-
|30
|446,184375
|6,25
|-
|31
|446,190625
|6,25
|-
|32
|446,196875
|6,25
|}
== URLs ==
* http://der-bastelbunker.blogspot.com/2010/11/eigenbaugroundplane-fur-70cm-band.html 70cm Ground Plane - Homemade-Antenne für das UHF Amateurfunkband
* https://frequenzsuche.br.de/ Frequenzsuche Bayerischer Rundfunk
* https://www.basictables.com/amateur-radio/antenna/ground-plane-antenna Ground Plane Antenna Calculator
* https://m0ukd.com/calculators/quarter-wave-ground-plane-antenna-calculator/ 1/4 Wave Ground Plane Antenna Calculator
* https://www.wireantennas.co.uk/groundplane-calculator 1/4 Wave Ground Plane Antenna Calculator
* http://www.66pacific.com/calculators/coil-shortened-vertical-antenna-calculator.aspx Coil-Shortened Vertical Antenna Calculator
* https://sites.google.com/site/13ct1371/funk/schottische-groundplane-antenne-selber-bauen Schottische Lambda 1/4 2-Meter-Band-Groundplane mit Modifikation nach DBX133

SDR -- Cheat Sheet

2020-08-06T10:10:45Z

WikiSysop: /* URLs */

SDR -- Cheat Sheet

2020-07-28T19:28:53Z

WikiSysop:

SDR -- Cheat Sheet

2020-07-28T18:48:30Z

WikiSysop: /* Analoge Frequenznutzung */

SDR -- Cheat Sheet

2020-07-28T18:48:06Z

WikiSysop:

== Frequenzen ==
Ein paar Frequenzen die ich interessant finde.

=== Flugfunk ===
* 130.474.900
* 126.950.000 Muenchen Radar

=== PMR446 ===
==== Analoge Frequenznutzung ====
Der Frequenzbereich ist in 16 Kanäle im 12,5-kHz-Raster unterteilt.<ref name="Vfg 42 / 2016" /> Zur Vermeidung von Nachbarkanalstörungen direkt unterhalb von 446,0 MHz wurde das Kanalraster gegenüber der normalen Anordnung, bei der der erste Kanal genau die Frequenz 446,00000 MHz erhalten hätte, um 6,25 kHz und damit um eine halbe Kanalbreite angehoben (also auf 446,00625 MHz). Aufgrund des für quarzgesteuerte Geräte besonderen Rasters von 6,25 kHz erschwerte man gleichzeitig die Einsatzmöglichkeit von nicht zugelassenen Geräten, wie z. B. Amateurfunkgeräten mit erheblich größerer Sendeleistung als den zugelassenen 0,5 Watt. Inzwischen beherrschen jedoch Amateurfunkgeräte mit digitaler Frequenzabstimmung das hier verwendete 6,25-kHz-Raster.

{| class="wikitable" style="text-align:center"
|- class="hintergrundfarbe5"
|- style="vertical-align:top"
! style="width:7em" |Kanal FM
!Mittenfrequenz in MHz
!Kanalbreite/Kanalraster in kHz
|-
|1 || 446,00625
|12,5
|-
|2 || 446,01875
|12,5
|-
|3 || 446,03125
|12,5
|-
|4 || 446,04375
|12,5
|-
|5 || 446,05625
|12,5
|-
|6 || 446,06875
|12,5
|-
|7 || 446,08125
|12,5
|-
|8 || 446,09375
|12,5
|-
|9 || 446,10625
|12,5
|-
|10 || 446,11875
|12,5
|-
|11 || 446,13125
|12,5
|-
|12 || 446,14375
|12,5
|-
|13 || 446,15625
|12,5
|-
|14 || 446,16875
|12,5
|-
|15 || 446,18125
|12,5
|-
|16 || 446,19375
|12,5
|}

==== Digitale Frequenznutzung ====
{| class="wikitable" style="text-align:center"
|- style="vertical-align:top"
! style="width:7em" |Kanal TDMA
DMR Tier I
!Mittenfrequenz in MHz
!Kanalbreite/Kanalraster in kHz
|-
|1
|446,00625
|12,5
|-
|2
|446,01875
|12,5
|-
|3
|446,03125
|12,5
|-
|4
|446,04375
|12,5
|-
|5
|446,05625
|12,5
|-
|6
|446,06875
|12,5
|-
|7
|446,08125
|12,5
|-
|8
|446,09375
|12,5
|-
|9
|446,10625
|12,5
|-
|10
|446,11875
|12,5
|-
|11
|446,13125
|12,5
|-
|12
|446,14375
|12,5
|-
|13
|446,15625
|12,5
|-
|14
|446,16875
|12,5
|-
|15
|446,18125
|12,5
|-
|16
|446,19375
|12,5
|}

{| class="wikitable" style="text-align:center"
|- style="vertical-align:top"
! style="width:7em" | Kanal FDMA dPMR
!Mittenfrequenz in MHz
!Kanalbreite/Kanalraster in kHz
|-
|1
|446,003125
|6,25
|-
|2
|446,009375
|6,25
|-
|3
|446,015625
|6,25
|-
|4
|446,021875
|6,25
|-
|5
|446,028125
|6,25
|-
|6
|446,034375
|6,25
|-
|7
|446,040625
|6,25
|-
|8
|446,046875
|6,25
|-
|9
|446,053125
|6,25
|-
|10
|446,059375
|6,25
|-
|11
|446,065625
|6,25
|-
|12
|446,071875
|6,25
|-
|13
|446,078125
|6,25
|-
|14
|446,084375
|6,25
|-
|15
|446,090625
|6,25
|-
|16
|446,096875
|6,25
|-
|17
|446,103125
|6,25
|-
|18
|446,109375
|6,25
|-
|19
|446,115625
|6,25
|-
|20
|446,121875
|6,25
|-
|21
|446,128125
|6,25
|-
|22
|446,134375
|6,25
|-
|23
|446,140625
|6,25
|-
|24
|446,146875
|6,25
|-
|25
|446,153125
|6,25
|-
|26
|446,159375
|6,25
|-
|27
|446,165625
|6,25
|-
|28
|446,171875
|6,25
|-
|29
|446,178125
|6,25
|-
|30
|446,184375
|6,25
|-
|31
|446,190625
|6,25
|-
|32
|446,196875
|6,25
|}
== URLs ==
* http://der-bastelbunker.blogspot.com/2010/11/eigenbaugroundplane-fur-70cm-band.html 70cm Ground Plane - Homemade-Antenne für das UHF Amateurfunkband

SDR -- Cheat Sheet

2020-07-28T18:46:42Z

WikiSysop:

== Frequenzen ==
Ein paar Frequenzen die ich interessant finde.

=== Flugfunk ===
* 130.474.900
* 126.950.000 Muenchen Radar

=== PMR446 ===
==== Analoge Frequenznutzung ====
Der Frequenzbereich ist in 16 Kanäle im 12,5-kHz-Raster unterteilt.<ref name="Vfg 42 / 2016" /> Zur Vermeidung von Nachbarkanalstörungen direkt unterhalb von 446,0 MHz wurde das Kanalraster gegenüber der normalen Anordnung, bei der der erste Kanal genau die Frequenz 446,00000 MHz erhalten hätte, um 6,25 kHz und damit um eine halbe Kanalbreite angehoben (also auf 446,00625 MHz). Aufgrund des für quarzgesteuerte Geräte besonderen Rasters von 6,25 kHz erschwerte man gleichzeitig die Einsatzmöglichkeit von nicht zugelassenen Geräten, wie z. B. Amateurfunkgeräten mit erheblich größerer Sendeleistung als den zugelassenen 0,5 Watt. Inzwischen beherrschen jedoch Amateurfunkgeräte mit digitaler Frequenzabstimmung das hier verwendete 6,25-kHz-Raster.

{| class="wikitable" style="text-align:center"
|- class="hintergrundfarbe5"
|- style="vertical-align:top"
! style="width:7em" |Kanal FM
!Mittenfrequenz in MHz
!Kanalbreite/Kanalraster in kHz
|-
|1 || 446,00625
|12,5
|-
|2 || 446,01875
|12,5
|-
|3 || 446,03125
|12,5
|-
|4 || 446,04375
|12,5
|-
|5 || 446,05625
|12,5
|-
|6 || 446,06875
|12,5
|-
|7 || 446,08125
|12,5
|-
|8 || 446,09375
|12,5
|-
|9 || 446,10625
|12,5
|-
|10 || 446,11875
|12,5
|-
|11 || 446,13125
|12,5
|-
|12 || 446,14375
|12,5
|-
|13 || 446,15625
|12,5
|-
|14 || 446,16875
|12,5
|-
|15 || 446,18125
|12,5
|-
|16 || 446,19375
|12,5
|}

==== Digitale Frequenznutzung ====
{| class="wikitable" style="text-align:center"
|- style="vertical-align:top"
! style="width:7em" |Kanal TDMA
DMR Tier I
!Mittenfrequenz in MHz
!Kanalbreite/Kanalraster in kHz
|-
|1
|446,00625
|12,5
|-
|2
|446,01875
|12,5
|-
|3
|446,03125
|12,5
|-
|4
|446,04375
|12,5
|-
|5
|446,05625
|12,5
|-
|6
|446,06875
|12,5
|-
|7
|446,08125
|12,5
|-
|8
|446,09375
|12,5
|-
|9
|446,10625
|12,5
|-
|10
|446,11875
|12,5
|-
|11
|446,13125
|12,5
|-
|12
|446,14375
|12,5
|-
|13
|446,15625
|12,5
|-
|14
|446,16875
|12,5
|-
|15
|446,18125
|12,5
|-
|16
|446,19375
|12,5
|}

{| class="wikitable" style="text-align:center"
|- style="vertical-align:top"
! style="width:7em" dPMR
!Mittenfrequenz in MHz
!Kanalbreite/Kanalraster in kHz
|-
|1
|446,003125
|6,25
|-
|2
|446,009375
|6,25
|-
|3
|446,015625
|6,25
|-
|4
|446,021875
|6,25
|-
|5
|446,028125
|6,25
|-
|6
|446,034375
|6,25
|-
|7
|446,040625
|6,25
|-
|8
|446,046875
|6,25
|-
|9
|446,053125
|6,25
|-
|10
|446,059375
|6,25
|-
|11
|446,065625
|6,25
|-
|12
|446,071875
|6,25
|-
|13
|446,078125
|6,25
|-
|14
|446,084375
|6,25
|-
|15
|446,090625
|6,25
|-
|16
|446,096875
|6,25
|-
|17
|446,103125
|6,25
|-
|18
|446,109375
|6,25
|-
|19
|446,115625
|6,25
|-
|20
|446,121875
|6,25
|-
|21
|446,128125
|6,25
|-
|22
|446,134375
|6,25
|-
|23
|446,140625
|6,25
|-
|24
|446,146875
|6,25
|-
|25
|446,153125
|6,25
|-
|26
|446,159375
|6,25
|-
|27
|446,165625
|6,25
|-
|28
|446,171875
|6,25
|-
|29
|446,178125
|6,25
|-
|30
|446,184375
|6,25
|-
|31
|446,190625
|6,25
|-
|32
|446,196875
|6,25
|}
== URLs ==
* http://der-bastelbunker.blogspot.com/2010/11/eigenbaugroundplane-fur-70cm-band.html 70cm Ground Plane - Homemade-Antenne für das UHF Amateurfunkband

SDR -- Cheat Sheet

2020-07-28T18:43:21Z

WikiSysop:

== Frequenzen ==
Ein paar Frequenzen die ich interessant finde.

=== Flugfunk ===
* 130.474.900
* 126.950.000 Muenchen Radar

=== PMR446 ===
==== Analoge Frequenznutzung ====
Der [[Frequenzband|Frequenzbereich]] ist in 16 Kanäle im 12,5-kHz-[[Kanalraster|Raster]] unterteilt.<ref name="Vfg 42 / 2016" /> Zur Vermeidung von Nachbarkanalstörungen direkt unterhalb von 446,0 MHz wurde das Kanalraster gegenüber der normalen Anordnung, bei der der erste Kanal genau die Frequenz 446,00000 MHz erhalten hätte, um 6,25 kHz und damit um eine halbe Kanalbreite angehoben (also auf 446,00625 MHz). Aufgrund des für quarzgesteuerte Geräte besonderen Rasters von 6,25 kHz erschwerte man gleichzeitig die Einsatzmöglichkeit von nicht zugelassenen Geräten, wie z. B. Amateurfunkgeräten mit erheblich größerer Sendeleistung als den zugelassenen 0,5 Watt. Inzwischen beherrschen jedoch Amateurfunkgeräte mit digitaler Frequenzabstimmung das hier verwendete 6,25-kHz-Raster.

{| class="wikitable" style="text-align:center"
|- class="hintergrundfarbe5"
|- style="vertical-align:top"
! style="width:7em" |Kanal [[Frequenzmodulation|FM]]
!Mittenfrequenz in MHz
!Kanalbreite/Kanalraster in kHz
|-
|1 || 446,00625
|12,5
|-
|2 || 446,01875
|12,5
|-
|3 || 446,03125
|12,5
|-
|4 || 446,04375
|12,5
|-
|5 || 446,05625
|12,5
|-
|6 || 446,06875
|12,5
|-
|7 || 446,08125
|12,5
|-
|8 || 446,09375
|12,5
|-
|9 || 446,10625
|12,5
|-
|10 || 446,11875
|12,5
|-
|11 || 446,13125
|12,5
|-
|12 || 446,14375
|12,5
|-
|13 || 446,15625
|12,5
|-
|14 || 446,16875
|12,5
|-
|15 || 446,18125
|12,5
|-
|16 || 446,19375
|12,5
|}

==== Digitale Frequenznutzung ====
{| class="wikitable" style="text-align:center"
|- style="vertical-align:top"
! style="width:7em" |Kanal TDMA
[[Digital Mobile Radio|DMR Tier I]]
!Mittenfrequenz in MHz
!Kanalbreite/Kanalraster in kHz
|-
|1
|446,00625
|12,5
|-
|2
|446,01875
|12,5
|-
|3
|446,03125
|12,5
|-
|4
|446,04375
|12,5
|-
|5
|446,05625
|12,5
|-
|6
|446,06875
|12,5
|-
|7
|446,08125
|12,5
|-
|8
|446,09375
|12,5
|-
|9
|446,10625
|12,5
|-
|10
|446,11875
|12,5
|-
|11
|446,13125
|12,5
|-
|12
|446,14375
|12,5
|-
|13
|446,15625
|12,5
|-
|14
|446,16875
|12,5
|-
|15
|446,18125
|12,5
|-
|16
|446,19375
|12,5
|}

{| class="wikitable" style="text-align:center"
|- style="vertical-align:top"
! style="width:7em" |Kanal FDMA [[dPMR]]
!Mittenfrequenz in MHz
!Kanalbreite/Kanalraster in kHz
|-
|1
|446,003125
|6,25
|-
|2
|446,009375
|6,25
|-
|3
|446,015625
|6,25
|-
|4
|446,021875
|6,25
|-
|5
|446,028125
|6,25
|-
|6
|446,034375
|6,25
|-
|7
|446,040625
|6,25
|-
|8
|446,046875
|6,25
|-
|9
|446,053125
|6,25
|-
|10
|446,059375
|6,25
|-
|11
|446,065625
|6,25
|-
|12
|446,071875
|6,25
|-
|13
|446,078125
|6,25
|-
|14
|446,084375
|6,25
|-
|15
|446,090625
|6,25
|-
|16
|446,096875
|6,25
|-
|17
|446,103125
|6,25
|-
|18
|446,109375
|6,25
|-
|19
|446,115625
|6,25
|-
|20
|446,121875
|6,25
|-
|21
|446,128125
|6,25
|-
|22
|446,134375
|6,25
|-
|23
|446,140625
|6,25
|-
|24
|446,146875
|6,25
|-
|25
|446,153125
|6,25
|-
|26
|446,159375
|6,25
|-
|27
|446,165625
|6,25
|-
|28
|446,171875
|6,25
|-
|29
|446,178125
|6,25
|-
|30
|446,184375
|6,25
|-
|31
|446,190625
|6,25
|-
|32
|446,196875
|6,25
|}
== URLs ==
* http://der-bastelbunker.blogspot.com/2010/11/eigenbaugroundplane-fur-70cm-band.html 70cm Ground Plane - Homemade-Antenne für das UHF Amateurfunkband

SDR -- Cheat Sheet

2020-07-28T18:40:49Z

WikiSysop:

== Frequenzen ==
Ein paar Frequenzen die ich interessant finde.

=== Flugfunk ===
* 130.474.900
* 126.950.000 Muenchen Radar

=== PMR446 ===
{| class="wikitable" style="text-align:center"
|- class="hintergrundfarbe5"
|- style="vertical-align:top"
! style="width:7em" |Kanal [[Frequenzmodulation|FM]]
!Mittenfrequenz in MHz
!Kanalbreite/Kanalraster in kHz
|-
|1 || 446,00625
|12,5
|-
|2 || 446,01875
|12,5
|-
|3 || 446,03125
|12,5
|-
|4 || 446,04375
|12,5
|-
|5 || 446,05625
|12,5
|-
|6 || 446,06875
|12,5
|-
|7 || 446,08125
|12,5
|-
|8 || 446,09375
|12,5
|-
|9 || 446,10625
|12,5
|-
|10 || 446,11875
|12,5
|-
|11 || 446,13125
|12,5
|-
|12 || 446,14375
|12,5
|-
|13 || 446,15625
|12,5
|-
|14 || 446,16875
|12,5
|-
|15 || 446,18125
|12,5
|-
|16 || 446,19375
|12,5
|}

== URLs ==
* http://der-bastelbunker.blogspot.com/2010/11/eigenbaugroundplane-fur-70cm-band.html 70cm Ground Plane - Homemade-Antenne für das UHF Amateurfunkband

SDR -- Cheat Sheet

2020-07-24T22:02:20Z

WikiSysop:

== Frequenzen ==
Ein paar Frequenzen die ich interessant finde.

=== Flugfunk ===
* 130.474.900
* 126.950.000 Muenchen Radar

== URLs ==
* http://der-bastelbunker.blogspot.com/2010/11/eigenbaugroundplane-fur-70cm-band.html 70cm Ground Plane - Homemade-Antenne für das UHF Amateurfunkband

SDR -- Cheat Sheet

2020-07-24T22:01:16Z

WikiSysop: Die Seite wurde neu angelegt: „== Frequenzen == Ein paar Frequenzen die ich interessant finde. === Flugfunk === 130.474.900 126.950.000 Muenchen Radar == URLs == http://der-bastelbunker.bl…“

== Frequenzen ==
Ein paar Frequenzen die ich interessant finde.

=== Flugfunk ===
130.474.900
126.950.000 Muenchen Radar

== URLs ==
http://der-bastelbunker.blogspot.com/2010/11/eigenbaugroundplane-fur-70cm-band.html

MediaWiki:Sidebar

2020-06-10T21:54:44Z

WikiSysop:

* navigation
** mainpage|Wiki Hauptseite
** http://www.rz-amper.de|Offizielle Website
** Special:Allpages|Alle Artikel
** Special:Imagelist|Alle Bilder

MediaWiki:Sidebar

2020-06-10T21:52:34Z

WikiSysop:

MediaWiki:Mainpage

2020-06-10T21:50:51Z

WikiSysop: Die Seite wurde neu angelegt: „Rechenzentrum Amper“

Rechenzentrum Amper

OpenSSL -- Advanced PKI

2020-06-10T21:45:42Z

WikiSysop: Die Seite wurde neu angelegt: „The Advanced PKI consists of a root CA and a layer of subordinate CAs. We assume a company named '''Rechenzentrum Amper''', controlling the domain '''rz-amper.…“

The Advanced PKI consists of a root CA and a layer of subordinate CAs. We assume a company named '''Rechenzentrum Amper''', controlling the domain '''rz-amper.de'''. The company runs a two-pronged PKI to serve its security needs. To implement the PKI, we first create the Rechenzentrum Amper Root CA Authority and its CA certificate. We then use the root CA to create the three signing CAs: Rechenzentrum Amper Email CA and Rechenzentrum Amper TLS CA. The CAs in place we proceed to show them in operation, issuing user certificates for email-protection and TLS-authentication.
== Root Certification Authority ==
All commands are ready to be copy/pasted into a terminal session. When you have reached the end of this page, you will have built a PKI with multiple signing CAs and issued 4 different types of user certificates.
=== Directories ===
Just follow these commands to setup needed directories.
mkdir -p /usr/local/etc/PKI
cd /usr/local/etc/PKI
mkdir -p ca/root-ca/private ca/root-ca/db
mkdir -p ca/email-ca/private ca/email-ca/db
mkdir -p ca/tls-ca/private ca/tls-ca/db
mkdir crl certs etc
chown -R root:root /usr/local/etc/PKI
chmod -R 0700 /usr/local/etc/PKI

=== Serial Database ===
Create files to keep track of serial numbers. The files must exist before the openssl ca command can be used.
cp /dev/null ca/root-ca/db/root-ca.db
cp /dev/null ca/root-ca/db/root-ca.db.attr
cp /dev/null ca/email-ca/db/email-ca.db
cp /dev/null ca/email-ca/db/email-ca.db.attr
cp /dev/null ca/tls-ca/db/tls-ca.db
cp /dev/null ca/tls-ca/db/tls-ca.db.attr
echo '100001' > ca/root-ca/db/root-ca.crt.srl
echo '100001' > ca/root-ca/db/root-ca.crl.srl
echo '100001' > ca/email-ca/db/email-ca.crt.srl
echo '100001' > ca/email-ca/db/email-ca.crl.srl
echo '100001' > ca/tls-ca/db/tls-ca.crt.srl
echo '100001' > ca/tls-ca/db/tls-ca.crl.srl
touch certindex.txt

=== Config File for SSL ===
Create the files using vi text editor and call them described. Here are the basics needed for this exercise (edit as needed): 
We use one configuration file per CA:
* [[OpenSSL -- Root CA Configuration File]] --> /usr/local/etc/PKI/etc/root-ca.conf
* [[OpenSSL -- eMail CA Configuration File]] --> /usr/local/etc/PKI/etc/email-ca.conf
* [[OpenSSL -- TLS CA Configuration File]] --> /usr/local/etc/PKI/etc/tls-ca.conf
And one configuration file per CSR type:
* [[OpenSSL -- Email Certificate Request Configuration File]] --> /usr/local/etc/PKI/etc/email.conf
* [[OpenSSL -- TLS Server Certificate Request Configuration File]] --> /usr/local/etc/PKI/etc/server.conf
* [[OpenSSL -- TLS Client Certificate Request Configuration File]] --> /usr/local/etc/PKI/etc/client.conf

=== Create CA Request ===
With the openssl req -new command we create a private key and a CSR for the root CA. The configuration is taken from the [req] section of the [[OpenSSL -- Root CA Configuration File|Root CA configuration file]].
openssl req -new -config etc/root-ca.conf -out ca/root-ca.csr -keyout ca/root-ca/private/root-ca.key
openssl req -new -config etc/email-ca.conf -out ca/email-ca.csr -keyout ca/email-ca/private/email-ca.key
openssl req -new -config etc/tls-ca.conf -out ca/tls-ca.csr -keyout ca/tls-ca/private/tls-ca.key

=== Create CA Certificate ===
With the openssl ca command we create a self-signed root certificate from the CSR. The configuration is taken from the [ca] section of the root CA configuration file. Note that we specify an end date based on the key length. 2048-bit RSA keys are deemed safe until 2030 ([http://www.rsa.com/rsalabs/node.asp?id=2004 RSA Labs]).
openssl ca -selfsign -config etc/root-ca.conf -in ca/root-ca.csr -out ca/root-ca.crt -extensions root_ca_ext -enddate 20491231235959Z
openssl ca -config etc/root-ca.conf -in ca/email-ca.csr -out ca/email-ca.crt -extensions signing_ca_ext -enddate 20491231235959Z
openssl ca -config etc/root-ca.conf -in ca/tls-ca.csr -out ca/tls-ca.crt -extensions signing_ca_ext -enddate 20491231235959Z

=== Create initial CRL ===
With the openssl ca -gencrl command we generate an initial (empty) CRL.
openssl ca -gencrl -config etc/root-ca.conf -out crl/root-ca.crl
openssl ca -gencrl -config etc/email-ca.conf -out crl/email-ca.crl
openssl ca -gencrl -config etc/tls-ca.conf -out crl/tls-ca.crl

=== Create PEM bundle ===
We create a certificate chain file from the email CA and root CA certificates. It will come handly later as input for the openssl pkcs12 command.
cat ca/email-ca.crt ca/root-ca.crt > ca/email-ca-chain.pem
cat ca/tls-ca.crt ca/root-ca.crt > ca/tls-ca-chain.pem

== Operate Email CA ==
=== Create email request ===
We create the private key and CSR for an email-protection certificate using a request configuration file. When prompted enter these DN components: C=NO, O=Green AS, CN=Fred Flintstone, emailAddress=fred@green.no. Leave other fields empty.
openssl req -new -config etc/email.conf -out certs/fred.csr -keyout certs/fred.key
=== Create email certificate ===
We use the email CA to issue Fred’s email-protection certificate. A copy of the certificate is saved in the certificate archive under the name ca/email-ca/01.pem (01 being the certificate serial number in hex.)
openssl ca -config etc/email-ca.conf -in certs/fred.csr -out certs/fred.crt -extensions email_ext
=== Create PKCS#12 bundle ===
We pack the private key, the certificate, and the CA chain into a PKCS#12 bundle. This format (often with a .pfx extension) is used to distribute keys and certificates to end users. The friendly names help identify individual certificates within the bundle.
openssl pkcs12 -export -name "Fred Flintstone (Email Security)" -caname "Green Email CA" -caname "Green Root CA" -inkey certs/fred.key -in certs/fred.crt -certfile ca/email-ca-chain.pem -out certs/fred.p12
=== Revoke certificate ===
When Fred’s laptop goes missing, we revoke his certificate.
openssl ca -config etc/email-ca.conf -revoke ca/email-ca/01.pem -crl_reason keyCompromise
=== Create CRL ===
The next CRL contains the revoked certificate.
openssl ca -gencrl -config etc/email-ca.conf -out crl/email-ca.crl

== Operate TLS CA ==
=== Create TLS server request ===
We create the private key and CSR for a TLS-server certificate using the appropriate request configuration file. When prompted enter these DN components: C=NO, O=Green AS, CN=www.green.no. The subjectAltName cannot be prompted for and must be specified as environment variable.
SAN=DNS:rz-amper.de,DNS:www.rz-amper.de \
openssl req -new -config etc/server.conf -out certs/rz-amper.de.csr -keyout certs/rz-amper.de.key
=== Create TLS server certificate ===
We use the TLS CA to issue the server certificate.
openssl ca -config etc/tls-ca.conf -in certs/rz-amper.de.csr -out certs/rz-amper.de.crt -extensions server_ext -enddate 20491231235959Z
=== Create PKCS#12 bundle ===
We pack the private key, the certificate, and the CA chain into a PKCS#12 bundle for distribution.
openssl pkcs12 -export -name "RZ-Amper (Network Component)" -caname "RZ-Amper TLS CA" -caname "RZ-Amper Root CA" \
-inkey certs/rz-amper.de.key -in certs/rz-amper.de.crt -certfile ca/tls-ca-chain.pem -out certs/rz-amper.de.p12

== The Most Common OpenSSL Commands ==
=== Checking Using OpenSSL ===
If you need to check the information within a Certificate, CSR or Private Key, use these commands. You can also check CSRs and check certificates using our online tools.

Check a Certificate Signing Request (CSR)
openssl req -text -noout -verify -in CSR.csr

Check a private key
openssl rsa -in privateKey.key -check

Check a certificate
openssl x509 -in certificate.crt -text -noout

Check a PKCS#12 file (.pfx or .p12)
openssl pkcs12 -info -in keyStore.p12

=== Debugging Using OpenSSL ===
If you are receiving an error that the private doesn't match the certificate or that a certificate that you installed to a site is not trusted, try one of these commands. If you are trying to verify that an SSL certificate is installed correctly, be sure to check out the SSL Checker.

Check an MD5 hash of the public key to ensure that it matches with what is in a CSR or private key
openssl x509 -noout -modulus -in certificate.crt | openssl md5
openssl rsa -noout -modulus -in privateKey.key | openssl md5
openssl req -noout -modulus -in CSR.csr | openssl md5

Check an SSL connection. All the certificates (including Intermediates) should be displayed
openssl s_client -connect www.paypal.com:443

=== Converting Using OpenSSL ===
These commands allow you to convert certificates and keys to different formats to make them compatible with specific types of servers or software. For example, you can convert a normal PEM file that would work with Apache to a PFX (PKCS#12) file and use it with Tomcat or IIS. Use our SSL Converter to convert certificates without messing with OpenSSL.

Convert a DER file (.crt .cer .der) to PEM
openssl x509 -inform der -in certificate.cer -out certificate.pem

Convert a PEM file to DER
openssl x509 -outform der -in certificate.pem -out certificate.der

Convert a PKCS#12 file (.pfx .p12) containing a private key and certificates to PEM
openssl pkcs12 -in keyStore.pfx -out keyStore.pem -nodes
You can add -nocerts to only output the private key or add -nokeys to only output the certificates.

Convert a PEM certificate file and a private key to PKCS#12 (.pfx .p12)
openssl pkcs12 -export -out certificate.pfx -inkey privateKey.key -in certificate.crt -certfile CACert.crt

OpenSSL -- eMail CA Configuration File

2020-06-10T21:43:58Z

WikiSysop: Die Seite wurde neu angelegt: „Create the file using vi text editor. Here are the basics needed for this exercise (edit as needed): /usr/local/etc/PKI/etc/email-ca.conf # RZ-Amper…“

Create the file using vi text editor. Here are the basics needed for this exercise (edit as needed): 
/usr/local/etc/PKI/etc/email-ca.conf

# RZ-Amper Email CA

[ default ]
ca = email-ca # CA name
dir = . # Top dir
base_url = http://www.rz-amper.de/trust-center # CA base URL
aia_url = $base_url/index.php?stage=dl_emailcer # CA certificate URL
crl_url = $base_url/index.php?stage=dl_emailcrl # CRL distribution point
name_opt = multiline,-esc_msb,utf8 # Display UTF-8 characters

# CA certificate request
[ req ]
default_bits = 8192 # RSA key size
encrypt_key = yes # Protect private key
default_md = sha256 # MD to use
utf8 = yes # Input is UTF-8
string_mask = utf8only # Emit UTF-8 strings
prompt = no # Don't prompt for DN
distinguished_name = ca_dn # DN section
req_extensions = ca_reqext # Desired extensions

[ ca_dn ]
countryName = "DE"
organizationName = "Rechenzentrum Amper"
organizationalUnitName = "EDV-Programm Entwicklungs Abteilung"
commonName = "Rechenzentrum Amper eMail Certificate Authority"

[ ca_reqext ]
keyUsage = critical,keyCertSign,cRLSign
basicConstraints = critical,CA:true,pathlen:0
subjectKeyIdentifier = hash

# CA operational settings
[ ca ]
default_ca = email_ca # The default CA section

[ email_ca ]
certificate = $dir/ca/$ca.crt # The CA cert
private_key = $dir/ca/$ca/private/$ca.key # CA private key
new_certs_dir = $dir/ca/$ca # Certificate archive
serial = $dir/ca/$ca/db/$ca.crt.srl # Serial number file
crlnumber = $dir/ca/$ca/db/$ca.crl.srl # CRL number file
database = $dir/ca/$ca/db/$ca.db # Index file
unique_subject = no # Require unique subject
default_days = 3652 # How long to certify for
default_md = sha256 # MD to use
policy = match_pol # Default naming policy
email_in_dn = no # Add email to cert DN
preserve = no # Keep passed DN ordering
name_opt = $name_opt # Subject DN display options
cert_opt = ca_default # Certificate display options
copy_extensions = copy # Copy extensions from CSR
x509_extensions = email_ext # Default cert extensions
default_crl_days = 1 # How long before next CRL
crl_extensions = crl_ext # CRL extensions

[ match_pol ]
countryName = optional # May match 'DE'
stateOrProvinceName = optional # Included if present
localityName = optional # Included if present
organizationName = optional # May match 'Rechenzentrum Amper'
organizationalUnitName = optional # Included if present
commonName = supplied # Must be present

[ any_pol ]
domainComponent = optional
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = optional
emailAddress = optional

# Extensions
[ email_ext ]
keyUsage = critical,digitalSignature,keyEncipherment
basicConstraints = CA:false
extendedKeyUsage = emailProtection,clientAuth,anyExtendedKeyUsage
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always
authorityInfoAccess = @issuer_info
crlDistributionPoints = @crl_info

[ crl_ext ]
authorityKeyIdentifier = keyid:always
authorityInfoAccess = @issuer_info

[ issuer_info ]
caIssuers;URI.0 = $aia_url

[ crl_info ]
URI.0 = $crl_url

OpenSSL -- TLS Server Certificate Request Configuration File

2020-06-10T21:43:23Z

WikiSysop: Die Seite wurde neu angelegt: „ # TLS server certificate request [ default ] SAN = DNS:yourdomain.tld # Default value [ req ] default_bits = 8192…“

# TLS server certificate request

[ default ]
SAN = DNS:yourdomain.tld # Default value

[ req ]
default_bits = 8192 # RSA key size
encrypt_key = no # Protect private key
default_md = sha256 # MD to use
utf8 = yes # Input is UTF-8
string_mask = utf8only # Emit UTF-8 strings
prompt = yes # Prompt for DN
distinguished_name = server_dn # DN template
req_extensions = server_reqext # Desired extensions

[ server_dn ]
countryName = "1. Country Name (2 letters) (eg, US) "
countryName_max = 2
stateOrProvinceName = "2. State or Province Name (eg, region) "
localityName = "3. Locality Name (eg, city) "
organizationName = "4. Organization Name (eg, company) "
organizationalUnitName = "5. Organizational Unit Name (eg, section) "
commonName = "6. Common Name (eg, FQDN) "
commonName_max = 64

[ server_reqext ]
keyUsage = critical,digitalSignature,keyEncipherment
extendedKeyUsage = serverAuth,clientAuth
subjectKeyIdentifier = hash
subjectAltName = $ENV::SAN

OpenSSL -- TLS Client Certificate Request Configuration File

2020-06-10T21:42:48Z

WikiSysop: Die Seite wurde neu angelegt: „ # TLS client certificate request [ req ] default_bits = 8192 # RSA key size encrypt_key = yes…“

# TLS client certificate request

[ req ]
default_bits = 8192 # RSA key size
encrypt_key = yes # Protect private key
default_md = sha256 # MD to use
utf8 = yes # Input is UTF-8
string_mask = utf8only # Emit UTF-8 strings
prompt = yes # Prompt for DN
distinguished_name = client_dn # DN template
req_extensions = client_reqext # Desired extensions

[ client_dn ]
countryName = "1. Country Name (2 letters) (eg, US) "
countryName_max = 2
stateOrProvinceName = "2. State or Province Name (eg, region) "
localityName = "3. Locality Name (eg, city) "
organizationName = "4. Organization Name (eg, company) "
organizationalUnitName = "5. Organizational Unit Name (eg, section) "
commonName = "6. Common Name (eg, full name)"
commonName_max = 64
emailAddress = "7. Email Address (eg, name@fqdn)"
emailAddress_max = 40

[ client_reqext ]
keyUsage = critical,digitalSignature
extendedKeyUsage = clientAuth
subjectKeyIdentifier = hash
subjectAltName = email:move

OpenSSL -- TLS CA Configuration File

2020-06-10T21:36:14Z

WikiSysop: Die Seite wurde neu angelegt: „Create the file using vi text editor. Here are the basics needed for this exercise (edit as needed): /usr/local/etc/PKI/etc/tls-ca.conf # RZ-Amper TL…“

Create the file using vi text editor. Here are the basics needed for this exercise (edit as needed): 
/usr/local/etc/PKI/etc/tls-ca.conf

# RZ-Amper TLS CA

[ default ]
ca = tls-ca # CA name
dir = . # Top dir
base_url = http://www.rz-amper.de/trust-center # CA base URL
aia_url = $base_url/index.php?stage=dl_tlscer # CA certificate URL
crl_url = $base_url/index.php?stage=dl_tlscrl # CRL distribution point
name_opt = multiline,-esc_msb,utf8 # Display UTF-8 characters

# CA certificate request
[ req ]
default_bits = 8192 # RSA key size
encrypt_key = yes # Protect private key
default_md = sha256 # MD to use
utf8 = yes # Input is UTF-8
string_mask = utf8only # Emit UTF-8 strings
prompt = no # Don't prompt for DN
distinguished_name = ca_dn # DN section
req_extensions = ca_reqext # Desired extensions

[ ca_dn ]
countryName = "DE"
organizationName = "Rechenzentrum Amper"
organizationalUnitName = "EDV-Programm Entwicklungs Abteilung"
commonName = "Rechenzentrum Amper TLS Certificate Authority"

[ ca_reqext ]
keyUsage = critical,keyCertSign,cRLSign
basicConstraints = critical,CA:true,pathlen:0
subjectKeyIdentifier = hash

# CA operational settings
[ ca ]
default_ca = tls_ca # The default CA section

[ tls_ca ]
certificate = $dir/ca/$ca.crt # The CA cert
private_key = $dir/ca/$ca/private/$ca.key # CA private key
new_certs_dir = $dir/ca/$ca # Certificate archive
serial = $dir/ca/$ca/db/$ca.crt.srl # Serial number file
crlnumber = $dir/ca/$ca/db/$ca.crl.srl # CRL number file
database = $dir/ca/$ca/db/$ca.db # Index file
unique_subject = no # Require unique subject
default_days = 3652 # How long to certify for
default_md = sha256 # MD to use
policy = match_pol # Default naming policy
email_in_dn = no # Add email to cert DN
preserve = no # Keep passed DN ordering
name_opt = $name_opt # Subject DN display options
cert_opt = ca_default # Certificate display options
copy_extensions = copy # Copy extensions from CSR
x509_extensions = server_ext # Default cert extensions
default_crl_days = 1 # How long before next CRL
crl_extensions = crl_ext # CRL extensions

[ match_pol ]
countryName = optional # May match 'DE'
stateOrProvinceName = optional # Included if present
localityName = optional # Included if present
organizationName = optional # May match 'Rechenzentrum Amper'
organizationalUnitName = optional # Included if present
commonName = supplied # Must be present

[ extern_pol ]
countryName = supplied # Must be present
stateOrProvinceName = optional # Included if present
localityName = optional # Included if present
organizationName = supplied # Must be present
organizationalUnitName = optional # Included if present
commonName = supplied # Must be present

[ any_pol ]
domainComponent = optional
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = optional
emailAddress = optional

# Extensions
[ server_ext ]
keyUsage = critical,digitalSignature,keyEncipherment
basicConstraints = CA:false
extendedKeyUsage = serverAuth,clientAuth
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always
authorityInfoAccess = @issuer_info
crlDistributionPoints = @crl_info

[ client_ext ]
keyUsage = critical,digitalSignature
basicConstraints = CA:false
extendedKeyUsage = clientAuth
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always
authorityInfoAccess = @issuer_info
crlDistributionPoints = @crl_info

[ crl_ext ]
authorityKeyIdentifier = keyid:always
authorityInfoAccess = @issuer_info

[ issuer_info ]
caIssuers;URI.0 = $aia_url

[ crl_info ]
URI.0 = $crl_url

OpenSSL -- Software CA Configuration File

2020-06-10T21:35:19Z

Create the file using vi text editor. Here are the basics needed for this exercise (edit as needed): 
/usr/local/etc/PKI/etc/tls-ca.conf

# RZ-Amper Software CA

[ default ]
ca = software-ca # CA name
dir = . # Top dir
base_url = http://www.rz-amper.de/trust-center # CA base URL
aia_url = $base_url/index.php?stage=dl_tlscer # CA certificate URL
crl_url = $base_url/index.php?stage=dl_tlscrl # CRL distribution point
name_opt = multiline,-esc_msb,utf8 # Display UTF-8 characters

# CA certificate request
[ req ]
default_bits = 2048 # RSA key size
encrypt_key = yes # Protect private key
default_md = sha1 # MD to use
utf8 = yes # Input is UTF-8
string_mask = utf8only # Emit UTF-8 strings
prompt = no # Don't prompt for DN
distinguished_name = ca_dn # DN section
req_extensions = ca_reqext # Desired extensions

[ ca_dn ]
countryName = "NO"
organizationName = "Green AS"
organizationalUnitName = "Green Certificate Authority"
commonName = "Green Software CA"

[ ca_reqext ]
keyUsage = critical,keyCertSign,cRLSign
basicConstraints = critical,CA:true,pathlen:0
subjectKeyIdentifier = hash

# CA operational settings
[ ca ]
default_ca = software_ca # The default CA section

[ software_ca ]
certificate = $dir/ca/$ca.crt # The CA cert
private_key = $dir/ca/$ca/private/$ca.key # CA private key
new_certs_dir = $dir/ca/$ca # Certificate archive
serial = $dir/ca/$ca/db/$ca.crt.srl # Serial number file
crlnumber = $dir/ca/$ca/db/$ca.crl.srl # CRL number file
database = $dir/ca/$ca/db/$ca.db # Index file
unique_subject = no # Require unique subject
default_days = 1826 # How long to certify for
default_md = sha1 # MD to use
policy = match_pol # Default naming policy
email_in_dn = no # Add email to cert DN
preserve = no # Keep passed DN ordering
name_opt = $name_opt # Subject DN display options
cert_opt = ca_default # Certificate display options
copy_extensions = copy # Copy extensions from CSR
x509_extensions = codesign_ext # Default cert extensions
default_crl_days = 30 # How long before next CRL
crl_extensions = crl_ext # CRL extensions

[ match_pol ]
countryName = match # Must match 'NO'
stateOrProvinceName = optional # Included if present
localityName = optional # Included if present
organizationName = match # Must match 'Green AS'
organizationalUnitName = optional # Included if present
commonName = supplied # Must be present

[ any_pol ]
domainComponent = optional
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = optional
emailAddress = optional

# Extensions
[ codesign_ext ]
keyUsage = critical,digitalSignature
basicConstraints = CA:false
extendedKeyUsage = critical,codeSigning
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always
authorityInfoAccess = @issuer_info
crlDistributionPoints = @crl_info

[ crl_ext ]
authorityKeyIdentifier = keyid:always
authorityInfoAccess = @issuer_info

[ issuer_info ]
caIssuers;URI.0 = $aia_url

[ crl_info ]
URI.0 = $crl_url

OpenSSL -- Root CA Configuration File

2020-06-10T21:34:27Z

WikiSysop: Die Seite wurde neu angelegt: „Create the file using vi text editor. Here are the basics needed for this exercise (edit as needed): /usr/local/etc/PKI/etc/root-ca.conf # RZ-Amper R…“

Create the file using vi text editor. Here are the basics needed for this exercise (edit as needed): 
/usr/local/etc/PKI/etc/root-ca.conf

# RZ-Amper Root CA

[ default ]
ca = root-ca # CA name
dir = . # Top dir
base_url = http://www.rz-amper.de/trust-center # CA base URL
aia_url = $base_url/index.php?stage=dl_rootcer # CA certificate URL
crl_url = $base_url/index.php?stage=dl_rootcrl # CRL distribution point
name_opt = multiline,-esc_msb,utf8 # Display UTF-8 characters

# CA certificate request
[ req ]
default_bits = 8192 # RSA key size
encrypt_key = yes # Protect private key
default_md = sha256 # MD to use
utf8 = yes # Input is UTF-8
string_mask = utf8only # Emit UTF-8 strings
prompt = no # Don't prompt for DN
distinguished_name = ca_dn # DN section
req_extensions = ca_reqext # Desired extensions

[ ca_dn ]
countryName = "DE"
organizationName = "Rechenzentrum Amper"
organizationalUnitName = "EDV-Programm Entwicklungs Abteilung"
commonName = "Rechenzentrum Amper Root Certificate Authority"

[ ca_reqext ]
keyUsage = critical,keyCertSign,cRLSign
basicConstraints = critical,CA:true
subjectKeyIdentifier = hash

# CA operational settings
[ ca ]
default_ca = root_ca # The default CA section

[ root_ca ]
certificate = $dir/ca/$ca.crt # The CA cert
private_key = $dir/ca/$ca/private/$ca.key # CA private key
new_certs_dir = $dir/ca/$ca # Certificate archive
serial = $dir/ca/$ca/db/$ca.crt.srl # Serial number file
crlnumber = $dir/ca/$ca/db/$ca.crl.srl # CRL number file
database = $dir/ca/$ca/db/$ca.db # Index file
unique_subject = no # Require unique subject
default_days = 3652 # How long to certify for
default_md = sha256 # MD to use
policy = match_pol # Default naming policy
email_in_dn = no # Add email to cert DN
preserve = no # Keep passed DN ordering
name_opt = $name_opt # Subject DN display options
cert_opt = ca_default # Certificate display options
copy_extensions = none # Copy extensions from CSR
x509_extensions = signing_ca_ext # Default cert extensions
default_crl_days = 365 # How long before next CRL
crl_extensions = crl_ext # CRL extensions

[ match_pol ]
countryName = optional # May match 'DE'
stateOrProvinceName = optional # Included if present
localityName = optional # Included if present
organizationName = optional # May match 'Rechenzentrum Amper'
organizationalUnitName = optional # Included if present
commonName = supplied # Must be present

[ any_pol ]
domainComponent = optional
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = optional
emailAddress = optional

# Extensions
[ root_ca_ext ]
keyUsage = critical,keyCertSign,cRLSign
basicConstraints = critical,CA:true
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always

[ signing_ca_ext ]
keyUsage = critical,keyCertSign,cRLSign
basicConstraints = critical,CA:true,pathlen:0
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always
authorityInfoAccess = @issuer_info
crlDistributionPoints = @crl_info

[ crl_ext ]
authorityKeyIdentifier = keyid:always
authorityInfoAccess = @issuer_info

[ issuer_info ]
caIssuers;URI.0 = $aia_url

[ crl_info ]
URI.0 = $crl_url

OpenSSL -- PKI

2020-06-10T21:33:58Z

The Advanced PKI consists of a root CA and a layer of subordinate CAs. We assume a company named '''Rechenzentrum Amper''', controlling the domain '''rz-amper.de'''. The company runs a two-pronged PKI to serve its security needs. To implement the PKI, we first create the Rechenzentrum Amper Root CA Authority and its CA certificate. We then use the root CA to create the three signing CAs: Rechenzentrum Amper Email CA and Rechenzentrum Amper TLS CA. The CAs in place we proceed to show them in operation, issuing user certificates for email-protection and TLS-authentication.
== Root Certification Authority ==
All commands are ready to be copy/pasted into a terminal session. When you have reached the end of this page, you will have built a PKI with multiple signing CAs and issued 4 different types of user certificates.
=== Directories ===
Just follow these commands to setup needed directories.
mkdir -p /usr/local/etc/PKI
cd /usr/local/etc/PKI
mkdir -p ca/root-ca/private ca/root-ca/db
mkdir -p ca/email-ca/private ca/email-ca/db
mkdir -p ca/tls-ca/private ca/tls-ca/db
mkdir crl certs etc
chown -R root:root /usr/local/etc/PKI
chmod -R 0700 /usr/local/etc/PKI

=== Serial Database ===
Create files to keep track of serial numbers. The files must exist before the openssl ca command can be used.
cp /dev/null ca/root-ca/db/root-ca.db
cp /dev/null ca/root-ca/db/root-ca.db.attr
cp /dev/null ca/email-ca/db/email-ca.db
cp /dev/null ca/email-ca/db/email-ca.db.attr
cp /dev/null ca/tls-ca/db/tls-ca.db
cp /dev/null ca/tls-ca/db/tls-ca.db.attr
echo '100001' > ca/root-ca/db/root-ca.crt.srl
echo '100001' > ca/root-ca/db/root-ca.crl.srl
echo '100001' > ca/email-ca/db/email-ca.crt.srl
echo '100001' > ca/email-ca/db/email-ca.crl.srl
echo '100001' > ca/tls-ca/db/tls-ca.crt.srl
echo '100001' > ca/tls-ca/db/tls-ca.crl.srl
touch certindex.txt

=== Config File for SSL ===
Create the files using vi text editor and call them described. Here are the basics needed for this exercise (edit as needed): 
We use one configuration file per CA:
* [[OpenSSL -- Root CA Configuration File]] --> /usr/local/etc/PKI/etc/root-ca.conf
* [[OpenSSL -- eMail CA Configuration File]] --> /usr/local/etc/PKI/etc/email-ca.conf
* [[OpenSSL -- TLS CA Configuration File]] --> /usr/local/etc/PKI/etc/tls-ca.conf
* [[OpenSSL -- Software CA Configuration File]] --> /usr/local/etc/PKI/etc/software-ca.conf
And one configuration file per CSR type:
* [[OpenSSL -- Email Certificate Request Configuration File]] --> /usr/local/etc/PKI/etc/email.conf
* [[OpenSSL -- TLS Server Certificate Request Configuration File]] --> /usr/local/etc/PKI/etc/server.conf
* [[OpenSSL -- TLS Client Certificate Request Configuration File]] --> /usr/local/etc/PKI/etc/client.conf
* [[OpenSSL -- Code-Signing Certificate Request Configuration File]] --> /usr/local/etc/PKI/etc/software.conf

=== Create CA Request ===
With the openssl req -new command we create a private key and a CSR for the root CA. The configuration is taken from the [req] section of the [[OpenSSL -- Root CA Configuration File|Root CA configuration file]].
openssl req -new -config etc/root-ca.conf -out ca/root-ca.csr -keyout ca/root-ca/private/root-ca.key
openssl req -new -config etc/email-ca.conf -out ca/email-ca.csr -keyout ca/email-ca/private/email-ca.key
openssl req -new -config etc/tls-ca.conf -out ca/tls-ca.csr -keyout ca/tls-ca/private/tls-ca.key

=== Create CA Certificate ===
With the openssl ca command we create a self-signed root certificate from the CSR. The configuration is taken from the [ca] section of the root CA configuration file. Note that we specify an end date based on the key length. 2048-bit RSA keys are deemed safe until 2030 ([http://www.rsa.com/rsalabs/node.asp?id=2004 RSA Labs]).
openssl ca -selfsign -config etc/root-ca.conf -in ca/root-ca.csr -out ca/root-ca.crt -extensions root_ca_ext -enddate 20491231235959Z
openssl ca -config etc/root-ca.conf -in ca/email-ca.csr -out ca/email-ca.crt -extensions signing_ca_ext
openssl ca -config etc/root-ca.conf -in ca/tls-ca.csr -out ca/tls-ca.crt -extensions signing_ca_ext

=== Create initial CRL ===
With the openssl ca -gencrl command we generate an initial (empty) CRL.
openssl ca -gencrl -config etc/root-ca.conf -out crl/root-ca.crl
openssl ca -gencrl -config etc/email-ca.conf -out crl/email-ca.crl
openssl ca -gencrl -config etc/tls-ca.conf -out crl/tls-ca.crl

=== Create PEM bundle ===
We create a certificate chain file from the email CA and root CA certificates. It will come handly later as input for the openssl pkcs12 command.
cat ca/email-ca.crt ca/root-ca.crt > ca/email-ca-chain.pem
cat ca/tls-ca.crt ca/root-ca.crt > ca/tls-ca-chain.pem

== Operate Email CA ==
=== Create email request ===
We create the private key and CSR for an email-protection certificate using a request configuration file. When prompted enter these DN components: C=NO, O=Green AS, CN=Fred Flintstone, emailAddress=fred@green.no. Leave other fields empty.
openssl req -new -config etc/email.conf -out certs/fred.csr -keyout certs/fred.key
=== Create email certificate ===
We use the email CA to issue Fred’s email-protection certificate. A copy of the certificate is saved in the certificate archive under the name ca/email-ca/01.pem (01 being the certificate serial number in hex.)
openssl ca -config etc/email-ca.conf -in certs/fred.csr -out certs/fred.crt -extensions email_ext
=== Create PKCS#12 bundle ===
We pack the private key, the certificate, and the CA chain into a PKCS#12 bundle. This format (often with a .pfx extension) is used to distribute keys and certificates to end users. The friendly names help identify individual certificates within the bundle.
openssl pkcs12 -export -name "Fred Flintstone (Email Security)" -caname "Green Email CA" -caname "Green Root CA" -inkey certs/fred.key -in certs/fred.crt -certfile ca/email-ca-chain.pem -out certs/fred.p12
=== Revoke certificate ===
When Fred’s laptop goes missing, we revoke his certificate.
openssl ca -config etc/email-ca.conf -revoke ca/email-ca/01.pem -crl_reason keyCompromise
=== Create CRL ===
The next CRL contains the revoked certificate.
openssl ca -gencrl -config etc/email-ca.conf -out crl/email-ca.crl

== Operate TLS CA ==
=== Create TLS server request ===
We create the private key and CSR for a TLS-server certificate using the appropriate request configuration file. When prompted enter these DN components: C=NO, O=Green AS, CN=www.green.no. The subjectAltName cannot be prompted for and must be specified as environment variable.
SAN=DNS:rz-amper.de,DNS:www.rz-amper.de \
openssl req -new -config etc/server.conf -out certs/rz-amper.de.csr -keyout certs/rz-amper.de.key
=== Create TLS server certificate ===
We use the TLS CA to issue the server certificate.
openssl ca -config etc/tls-ca.conf -in certs/rz-amper.de.csr -out certs/rz-amper.de.crt -extensions server_ext
=== Create PKCS#12 bundle ===
We pack the private key, the certificate, and the CA chain into a PKCS#12 bundle for distribution.
openssl pkcs12 -export -name "RZ-Amper (Network Component)" -caname "RZ-Amper TLS CA" -caname "RZ-Amper Root CA" \
-inkey certs/rz-amper.de.key -in certs/rz-amper.de.crt -certfile ca/tls-ca-chain.pem -out certs/rz-amper.de.p12

== Links ==
http://pki-tutorial.readthedocs.org/en/latest/advanced/ Probably the best documentation to get. 
https://www.madboa.com/geek/openssl/ 
https://www.seccommerce.de/en/faqs-en/28-secpki/36-certificate-generation-using-openssl.html 
http://www.akadia.com/services/ssh_test_certificate.html 
http://www.sans.org/reading-room/whitepapers/certificates/building-managing-pki-solution-small-medium-size-business-34445 
http://www.pki.iam.metu.edu.tr/yazi-makale/ospki.pdf 
http://hexeract.wordpress.com/2009/04/17/useful-openssl-one-liners/

OpenSSL -- Email Certificate Request Configuration File

2020-06-10T21:32:27Z

WikiSysop: Die Seite wurde neu angelegt: „ # Email certificate request [ req ] default_bits = 8192 # RSA key size encrypt_key = yes # Prot…“

# Email certificate request

[ req ]
default_bits = 8192 # RSA key size
encrypt_key = yes # Protect private key
default_md = sha256 # MD to use
utf8 = yes # Input is UTF-8
string_mask = utf8only # Emit UTF-8 strings
prompt = yes # Prompt for DN
distinguished_name = email_dn # DN template
req_extensions = email_reqext # Desired extensions

[ email_dn ]
countryName = "1. Country Name (2 letters) (eg, US) "
countryName_max = 2
stateOrProvinceName = "2. State or Province Name (eg, region) "
localityName = "3. Locality Name (eg, city) "
organizationName = "4. Organization Name (eg, company) "
organizationalUnitName = "5. Organizational Unit Name (eg, section) "
commonName = "6. Common Name (eg, full name)"
commonName_max = 64
emailAddress = "7. Email Address (eg, name@fqdn)"
emailAddress_max = 40

[ email_reqext ]
keyUsage = critical,digitalSignature,keyEncipherment
extendedKeyUsage = emailProtection,clientAuth
subjectKeyIdentifier = hash
subjectAltName = email:move

OpenSSL -- Code-Signing Certificate Request Configuration File

2020-06-10T21:31:53Z

WikiSysop: Die Seite wurde neu angelegt: „ # Code-signing certificate request [ req ] default_bits = 2048 # RSA key size encrypt_key = yes…“

# Code-signing certificate request

[ req ]
default_bits = 2048 # RSA key size
encrypt_key = yes # Protect private key
default_md = sha1 # MD to use
utf8 = yes # Input is UTF-8
string_mask = utf8only # Emit UTF-8 strings
prompt = yes # Prompt for DN
distinguished_name = codesign_dn # DN template
req_extensions = codesign_reqext # Desired extensions

[ codesign_dn ]
countryName = "1. Country Name (2 letters) (eg, US) "
countryName_max = 2
stateOrProvinceName = "2. State or Province Name (eg, region) "
localityName = "3. Locality Name (eg, city) "
organizationName = "4. Organization Name (eg, company) "
organizationalUnitName = "5. Organizational Unit Name (eg, section) "
commonName = "6. Common Name (eg, full name)"
commonName_max = 64

[ codesign_reqext ]
keyUsage = critical,digitalSignature
extendedKeyUsage = critical,codeSigning
subjectKeyIdentifier = hash

Linux -- Setup

2020-06-10T21:30:55Z

WikiSysop: Die Seite wurde neu angelegt: „This page targets the customazition of CentOS 6.5/7 systems. == Installation == A simple way to set your screen resolution and color depth for most Live Linux…“

This page targets the customazition of CentOS 6.5/7 systems.

== Installation ==
A simple way to set your screen resolution and color depth for most Live Linux distro's is via the use of the vga=parameter boot option. For example at boot you might type: Live vga=795. This would set your system to boot using the Live label with a screen resolution to 24bit 1280X1024. Here are some more examples of common vga boot values.

{| class="wikitable"
|-
! Depth !! 800x600 !! 1024x786 !! 1152x864 !! 1280x1024 !! 1600x1200
|-
| 8 bit || vga=771 || vga=773 || vga=353 || vga=775 || vga=796
|-
| 16 bit || vga=788 || vga=791 || vga=355 || vga=794 || vga=798
|-
| 24 bit || vga=789 || vga=792 || || vga=795 || vga=799
|}
== Environment ==
Without usable command line you'll be fucked. Replace your ~/.baschrc with the following.
# .bashrc

PS1='\h\w\$ '
export EDITOR=vi
export TERM=dtterm

PATH=/usr/lib64/qt-3.3/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin

# User specific aliases and functions
alias vi='/usr/local/bin/vim -X'
alias l='/bin/ls --group-directories-first -lah | more'
alias cp='/bin/cp -r'

First get the minimum of packets to be able to compile simple stuff.
yum groupinstall -y "Development tools" "System administration tools"

== Enable Proxy for yum ==
echo "proxy=http://proxy.bla.com:8080" >> /etc/yum.conf

== Enable XDMCP ==
If you have installed the X Window System and would like to log in to your Red Hat Enterprise Linux system using a graphical login manager, enable the X Display Manager Control Protocol (XDMCP). This protocol allows users to remotely log in to a desktop environment from any X Window System compatible client (such as a network-connected workstation or X terminal). To enable remote login using XDMCP, edit the following line in the /etc/gdm/custom.conf file on the Red Hat Enterprise Linux system with a text editor such as vi or nano:
# GDM configuration storage
[daemon]
User=gdm
Group=gdm

[security]
DisallowTCP=false
AllowRemoteRoot=true

[xdmcp]
Enable=true
DisplayPerHost=10
HonorIndirect=false
MaxPending=4
MaxSessions=32
MaxWait=30
MaxWaitIndirect=30
Port=177

[greeter]
IncludeAll=true

[chooser]
Multicast=false

[debug]
Enable=false

== Additional Repos ==
CentOS 6.5 Extra Packages for Enterprise Linux (EPEL) und REMI
yum install epel-release
wget http://rpms.famillecollet.com/enterprise/remi-release-6.rpm
sudo rpm -Uvh remi-release-6*.rpm

CentOS 7 Extra Packages for Enterprise Linux (EPEL) und REMI
yum install epel-release
wget http://rpms.famillecollet.com/enterprise/remi-release-7.rpm
wget http://pkgs.repoforge.org/rpmforge-release/rpmforge-release-0.5.3-1.el6.rf.x86_64.rpm
sudo rpm -Uvh remi-release-7*.rpm
rpm --import http://apt.sw.be/RPM-GPG-KEY.dag.txt
rpm -i rpmforge-release-0.5.3-1.el6.rf.*.rpm

The Remi repository is disabled by default. 
To use the Remi repository only when you know you need it, use the --enablerepo=remi option when installing a package. For example:
sudo yum --enablerepo=remi install php-tcpdf
If you want to permanently enable the Remi repository, you need to edit the yum configuration file for Remi. 
Open the repository configuration file by using a text editor of your choice:
sudo nano /etc/yum.repos.d/remi.repo
Edit the [remi] portion of the file to set the enabled option to 1. This action enables the Remi repository by default.
name=Les RPM de remi pour Enterprise Linux $releasever - $basearch
#baseurl=http://rpms.famillecollet.com/enterprise/$releasever/remi/$basearch/
mirrorlist=http://rpms.famillecollet.com/enterprise/$releasever/remi/mirror
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi
failovermethod=priority

You can see if the repositories that you need are installed and enabled by running the following command:
yum repolist
Some repositories, like Remi, are disabled by default. To list disabled repositories, run the following command:
yum repolist disabled

== Enable or Disable SELinux ==
From the command line, you can edit the '''/etc/sysconfig/selinux''' file. This file is a symlink to '''/etc/selinux/config'''. The configuration file is self-explanatory. Changing the value of SELINUX or SELINUXTYPE changes the state of SELinux and the name of the policy to be used the next time the system boots. 
Choose between '''Disabled, Enforcing''' or '''Permissive'''
[root@host2a ~]# cat /etc/sysconfig/selinux
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - SELinux is fully disabled.
SELINUX=permissive
# SELINUXTYPE= type of policy in use. Possible values are:
# targeted - Only targeted network daemons are protected.
# strict - Full SELinux protection.
SELINUXTYPE=targeted

# SETLOCALDEFS= Check local definition changes
SETLOCALDEFS=0

== PHP ==
Install PHP and needed set of tools with the following command
yum install -y php.x86_64 php-bcmath.x86_64 php-cli.x86_64 php-common.x86_64 php-gd.x86_64 php-imap.x86_64 php-intl.x86_64 php-mbstring.x86_64 php-mcrypt.x86_64 php-mysql.x86_64 php-pdo.x86_64 php-pear.noarch php-process.x86_64 php-snmp.x86_64 php-xcache.x86_64 php-xml.x86_64 php-xmlrpc.x86_64

== Perl ==
Install Perl and needed set of tools with the following command.
yum install -y perl.x86_64 perl-CGI.x86_64 perl-Compress-Raw-Zlib.x86_64 perl-Compress-Zlib.x86_64 perl-DBD-MySQL.x86_64 perl-DBI.x86_64 perl-Error.noarch perl-ExtUtils-MakeMaker.x86_64 perl-ExtUtils-ParseXS.x86_64 perl-Git.noarch perl-HTML-Parser.x86_64 perl-HTML-Tagset.noarch perl-IO-Compress-Base.x86_64 perl-IO-Compress-Zlib.x86_64 perl-Module-Pluggable.x86_64 perl-Pod-Escapes.x86_64 perl-Pod-Simple.x86_64 perl-Test-Harness.x86_64 perl-Test-Simple.x86_64 perl-Time-HiRes.x86_64 perl-URI.noarch perl-WWW-Curl.x86_64 perl-XML-Parser.x86_64 perl-devel.x86_64 perl-libs.x86_64 perl-libwww-perl.noarch perl-rrdtool.x86_64 perl-version.x86_64

== Symantec Backup Exec Agent ==
You got to backup your linux servers to tape. The windows-centric environment you live in uses symantec backupexec (BUE) and it works really well for windows servers. You got a spiffy Fedora 14 box with some CORAID storage attached to it and you need to make it backup to BUE. The linux install package fails, symantec support only recognize RHEL and SUSE as worthy linux distributions (although they used to also recognize Ubuntu), what do you do?

Fear not, I got the solution for you below as that just happened to me recently. Just to be clear, I am talking about the infamous ELF error you see like the code snippet that follows:
./installralus: ../perl/Linux/bin/perl: /lib/ld-linux.so.2: bad ELF interpreter: No such file or directory
This error happens because the perl installer that ships with BUE is linked against 32-bit libstdc++. This is actually not the only problem you will face, as further down the installation, the RALUS64 package will require libstdc++.so.5. We might as well address this now with the following command:
yum install -y compat-libstdc++-33 glibc.i686

== Dovecot ==
Download latest version from [http://www.dovecot.org/download.html www.dovecot.org] 
Install the following set of tools.
yum install -y pam.x86_64 pam-devel.x86_64 pam_abl.x86_64 pam_afs_session.x86_64 pam_fprint.x86_64 pam_krb5.x86_64 pam_ldap.x86_64 pam_mapi.x86_64 pam_mysql.x86_64 pam_oath.x86_64 pam_passwdqc.x86_64 pam_pkcs11.x86_64 pam_radius.x86_64 pam_script.x86_64 pam_shield.x86_64 pam_ssh.x86_64 pam_ssh_agent_auth.x86_64 pam_url.x86_64 pam_yubico.x86_64 paml.x86_64 paml-data.x86_64 pamtester.x86_64 zlib zlib-devel bzip2 bzip2-libs bzip2-devel lzma lzma-devel lzma-libs lz4 lz4-devel

Use the following configure options.
./configure --prefix=/usr/local --with-nss --with-pam --with-shadow --with-zlib --with-bzlib --with-lzma --with-lz4 --with-ssl=openssl --with-mysql

== Drive Mapping ==
This is a simple shell script to mount CIFS shares.
#!/bin/sh

sudo mount -t cifs //eufil201.domain.com/group /EDC/group -o user=username,password=affe,uid=1000,gid=1000
sudo mount -t cifs //eufil216.de.domain.com/software$ /EDC/software -o user=username,password=affe,uid=1000,gid=1000
sudo mount -t cifs //eufil214.de.domain.com/shared /EDC/shared -o user=username,password=affe,uid=1000,gid=1000
sudo mount -t cifs //eufil003.de.domain.com/wschroeer$ /EDC/wschroeer -o user=username,password=affe,uid=1000,gid=1000

== Disable Firewall ==
Firewalld is a complete firewall solution that has been made available by default on all CentOS 7 servers, including Liquid Web Core Managed CentOS 7, and Liquid Web Self Managed CentOS 7. On occasion, perhaps for testing, disabling or stopping firewalld may be necessary. Follow the instructions below to disable firewalld and stop firewalld.

To disable firewalld, run the following command as root:
systemctl disable firewalld

To stop firewalld, run the following command as root:
systemctl stop firewalld

And finally, to check the status of firewalld, run the following command as root:
systemctl status firewalld

Dwm on CentOS

2020-06-10T21:28:09Z

WikiSysop:

This article is not about '''dmw''' only but about setting up a simple Linux Workstation based on CentOS 7.
== Packages ==
First things first. You need the following to get packages installed.
yum install -y ncurses-term epel-release xterm ftp libX11-devel libXinerama-devel
If you want to get gnome-terminal version 3.6.2 running you will have to install the following packages.
yum install -y glib2-devel gtk2-devel gtk3-devel GConf2-devel vte3-devel gsettings-desktop-schemas-devel libSM-devel itstool
If you want to use feh (image viewer) you need the followig packages to get it compiled.
yum install -y imlib2-devel libcurl-devel libXt libXt-devel libXft libXft-devel

== Personalization ==
=== Bash and VI ===
~/.bashrc
# .bashrc
PS1='\h\w\$ '
export EDITOR=vi
export TERM=dtterm
PATH=/usr/lib64/qt-3.3/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin
# User specific aliases and functions
alias vi='/usr/bin/vim -X'
alias l='/bin/ls --group-directories-first -lah | more'

~/.vim
syntax on
filetype indent plugin off
filetype indent off

"set number "show line numbers
set nowrap "dont wrap lines
"set linebreak "wrap lines at convenient points
set t_Co=256 "tell the term has 256 colors

"vertical/horizontal scroll off settings
set scrolloff=3
set sidescrolloff=7
set sidescroll=1

"mouse support
"set mouse=a
"set ttymouse=xterm2

"default indent settings
set tabstop=4
set shiftwidth=4
set softtabstop=4
set expandtab
"set autoindent

set backspace=2
set incsearch "find the next match as we type the search
set nohlsearch "no hilight of search string
set ruler

== XDMCP ==
It seems that XDMCP is working on CentOS 6/6.5 but does not work on CentOS 7 anymore. However, a configuration similar to the following should do the trick. 
/etc/gdm/custom.conf
# GDM configuration storage

[daemon]
User=gdm
Group=gdm

[security]
DisallowTCP=false
AllowRemoteRoot=true

[xdmcp]
Enable=true
DisplayPerHost=10
HonorIndirect=false
MaxPending=4
MaxSessions=32
MaxWait=30
MaxWaitIndirect=30
Port=177

[greeter]
IncludeAll=true

[chooser]
Multicast=false

[debug]
Enable=false

== dwm Configuration ==
=== config.h ===
Keep in mind to get patches installed first.
/* See LICENSE file for copyright and license details. */

/* appearance */
// static const char font[] = "-*-courier-*-*-*--14-*-*-*-*-*-*-*";

static const char font[] = "-*-xbmicons-medium-r-*-*-12-*-*-*-*-*-*-*" ","
"-*-terminus-medium-r-*-*-12-*-*-*-*-*-*-*";

#define NUMCOLORS 12
static const char colors[NUMCOLORS][ColLast][9] = {
// border foreground background
{ "#282a2e", "#999999", "#1d1f21" }, // 1 = normal (grey on black)
{ "#f0c674", "#ffffff", "#1d1f21" }, // 2 = selected (white on black)
{ "#dc322f", "#1d1f21", "#f0c674" }, // 3 = urgent (black on yellow)
{ "#282a2e", "#282a2e", "#1d1f21" }, // 4 = darkgrey on black (for glyphs)
{ "#282a2e", "#1d1f21", "#282a2e" }, // 5 = black on darkgrey (for glyphs)
{ "#282a2e", "#cc6666", "#1d1f21" }, // 6 = red on black
{ "#282a2e", "#b5bd68", "#1d1f21" }, // 7 = green on black
{ "#282a2e", "#de935f", "#1d1f21" }, // 8 = orange on black
{ "#282a2e", "#f0c674", "#282a2e" }, // 9 = yellow on darkgrey
{ "#282a2e", "#81a2be", "#282a2e" }, // A = blue on darkgrey
{ "#282a2e", "#b294bb", "#282a2e" }, // B = magenta on darkgrey
{ "#282a2e", "#8abeb7", "#282a2e" }, // C = cyan on darkgrey
};
// border foreground background
// { "#282a2e", "#373b41", "#1d1f21" }, // 1 = normal (grey on black)
// { "#f0c674", "#c5c8c6", "#1d1f21" }, // 2 = selected (white on black)
// { "#dc322f", "#1d1f21", "#f0c674" }, // 3 = urgent (black on yellow)
// { "#282a2e", "#282a2e", "#1d1f21" }, // 4 = darkgrey on black (for glyphs)
// { "#282a2e", "#1d1f21", "#282a2e" }, // 5 = black on darkgrey (for glyphs)
// { "#282a2e", "#cc6666", "#1d1f21" }, // 6 = red on black
// { "#282a2e", "#b5bd68", "#1d1f21" }, // 7 = green on black
// { "#282a2e", "#de935f", "#1d1f21" }, // 8 = orange on black
// { "#282a2e", "#f0c674", "#282a2e" }, // 9 = yellow on darkgrey
// { "#282a2e", "#81a2be", "#282a2e" }, // A = blue on darkgrey
// { "#282a2e", "#b294bb", "#282a2e" }, // B = magenta on darkgrey
// { "#282a2e", "#8abeb7", "#282a2e" }, // C = cyan on darkgrey
// };
//

// static const char normbordercolor[] = "#bbbbbb";
// static const char normbgcolor[] = "#222222";
// static const char normfgcolor[] = "#999999";
// static const char selbordercolor[] = "#005577";
// static const char selbgcolor[] = "#005577";
// static const char selfgcolor[] = "#ffffff";
static const char normbordercolor[] = "#073642";
static const char normbgcolor[] = "#002b36";
static const char normfgcolor[] = "#fdf6e3";
static const char selbordercolor[] = "#586e75";
static const char selbgcolor[] = "#073642";
static const char selfgcolor[] = "#fdf6e3";
static const unsigned int borderpx = 0; /* border pixel of windows */
static const unsigned int snap = 5; /* snap pixel */
static const Bool showbar = True; /* False means no bar */
static const Bool topbar = True; /* False means bottom bar */

/* tagging */
static const char *tags[] = { "Geile Terminals", "2", "3", "4", "RDP", "Windows", "Citrix", "Mail", "Web" };

static const Rule rules[] = {
/* class instance title tags mask isfloating monitor */
{ "Gimp", NULL, NULL, 0, True, -1 },
{ "Xfce4-terminal", NULL, NULL, 0, False, -1 },
{ "VirtualBox", "VirtualBox", NULL, 0, True, -1 },
{ "Firefox", "Navigator", NULL, 1 << 8, False, -1 },
{ "Firefox", "Browser", "Firefox Preferences", 1 << 8, True, -1 },
{ "Thunderbird", NULL, NULL, 1 << 7, False, -1 },
{ "Thunderbird", "Msgcompose", NULL, 1 << 7, True, -1 },
{ "Wfica", NULL, NULL, 1 << 6, True, -1 },
{ "xfreerdp", NULL, NULL, 1 << 4, True, -1 },
};

/* layout(s) */
static const float mfact = 0.55; /* factor of master area size [0.05..0.95] */
static const int nmaster = 1; /* number of clients in master area */
static const Bool resizehints = True; /* True means respect size hints in tiled resizals */

#include "bstack.c"
#include "bstackhoriz.c"

static const Layout layouts[] = {
/* symbol arrange function */
{ "[]=", tile }, /* first entry is default */
{ "><>", NULL }, /* no layout function means floating behavior */
{ "[M]", monocle },
};

/* key definitions */
#define MODKEY Mod1Mask
#define TAGKEYS(KEY,TAG) \
{ MODKEY, KEY, view, {.ui = 1 << TAG} }, \
{ MODKEY|ControlMask, KEY, toggleview, {.ui = 1 << TAG} }, \
{ MODKEY|ShiftMask, KEY, tag, {.ui = 1 << TAG} }, \
{ MODKEY|ControlMask|ShiftMask, KEY, toggletag, {.ui = 1 << TAG} },

/* helper for spawning shell commands in the pre dwm-5.0 fashion */
#define SHCMD(cmd) { .v = (const char*[]){ "/bin/sh", "-c", cmd, NULL } }

/* commands */
static const char *dmenucmd[] = { "dmenu_run", "-fn", font, "-nb", normbgcolor, "-nf", normfgcolor, "-sb", selbgcolor, "-sf", selfgcolor, NULL };
static const char *termcmd[] = { "gnome-terminal", NULL };

static Key keys[] = {
/* modifier key function argument */
{ MODKEY, XK_p, spawn, {.v = dmenucmd } },
{ MODKEY|ShiftMask, XK_Return, spawn, {.v = termcmd } },
{ MODKEY, XK_b, togglebar, {0} },
{ MODKEY, XK_j, focusstack, {.i = +1 } },
{ MODKEY, XK_k, focusstack, {.i = -1 } },
{ MODKEY, XK_i, incnmaster, {.i = +1 } },
{ MODKEY, XK_d, incnmaster, {.i = -1 } },
{ MODKEY, XK_h, setmfact, {.f = -0.05} },
{ MODKEY, XK_l, setmfact, {.f = +0.05} },
{ MODKEY, XK_Return, zoom, {0} },
{ MODKEY, XK_Tab, view, {0} },
{ MODKEY, XK_q, killclient, {0} },
{ MODKEY, XK_t, setlayout, {.v = &layouts[0]} },
{ MODKEY, XK_f, setlayout, {.v = &layouts[1]} },
{ MODKEY, XK_m, setlayout, {.v = &layouts[2]} },
{ MODKEY, XK_space, setlayout, {0} },
{ MODKEY|ShiftMask, XK_space, togglefloating, {0} },
{ MODKEY, XK_0, view, {.ui = ~0 } },
{ MODKEY|ShiftMask, XK_0, tag, {.ui = ~0 } },
{ MODKEY, XK_comma, focusmon, {.i = -1 } },
{ MODKEY, XK_period, focusmon, {.i = +1 } },
{ MODKEY|ShiftMask, XK_comma, tagmon, {.i = -1 } },
{ MODKEY|ShiftMask, XK_period, tagmon, {.i = +1 } },
TAGKEYS( XK_1, 0)
TAGKEYS( XK_2, 1)
TAGKEYS( XK_3, 2)
TAGKEYS( XK_4, 3)
TAGKEYS( XK_5, 4)
TAGKEYS( XK_6, 5)
TAGKEYS( XK_7, 6)
TAGKEYS( XK_8, 7)
TAGKEYS( XK_9, 8)
{ MODKEY|ShiftMask, XK_q, quit, {0} },
};

/* button definitions */
/* click can be ClkLtSymbol, ClkStatusText, ClkWinTitle, ClkClientWin, or ClkRootWin */
static Button buttons[] = {
/* click event mask button function argument */
{ ClkLtSymbol, 0, Button1, setlayout, {0} },
{ ClkLtSymbol, 0, Button3, setlayout, {.v = &layouts[2]} },
{ ClkWinTitle, 0, Button2, zoom, {0} },
{ ClkStatusText, 0, Button2, spawn, {.v = termcmd } },
{ ClkClientWin, MODKEY, Button1, movemouse, {0} },
{ ClkClientWin, MODKEY, Button2, togglefloating, {0} },
{ ClkClientWin, MODKEY, Button3, resizemouse, {0} },
{ ClkTagBar, 0, Button1, view, {0} },
{ ClkTagBar, 0, Button3, toggleview, {0} },
{ ClkTagBar, MODKEY, Button1, tag, {0} },
{ ClkTagBar, MODKEY, Button3, toggletag, {0} },
};

=== X Session ===
Create a .desktop file so you can choose '''dwm''' from the gdm greeter.
/usr/share/xsessions/dwm.desktop
[Desktop Entry]
Name=dwm
Comment=The dwm tiling window manager
Exec=/usr/local/bin/dwm-wrapper
# no icon yet, only the top three are currently used
Icon=
Type=Application

=== dwm-wrapper ===
The .desktop file will call the dwm-wrapper, which sets the top menu bar.
/usr/local/bin/dwm-wrapper
#! /bin/sh
# setxkbmap -option terminate:ctrl_alt_bksp
# feh --bg-scale /home/shaun/img/arch.png
# conky -x 0 -y 0 -d
# Colour codes from dwm/config.h
colour_gry="\x01" # grey on black
colour_wht="\x02" # white on black
colour_dgry="\x04" # darkgrey on black
colour_blk="\x05" # black on darkgrey
colour_red="\x06" # colour_red on black
colour_grn="\x07" # green on black
colour_dylw="\x08" # orange on black
colour_ylw="\x09" # yellow on black
colour_blu="\x0A" # colour_blue on darkgrey
colour_mag="\x0B" # colour_magenta on darkgrey
colour_cyn="\x0C" # cyan on darkgrey

# Icon glyphs from font xbmicons.pcf
glyph_msc="\uE00E"
glyph_cpu="\uE00F"
glyph_mem="\uE010"
glyph_dl="\uE011"
glyph_ul="\uE012"
glyph_com="\uE013"
glyph_eml="\uE014"
glyph_vol="\uE015"
glyph_tim="\uE016"
glyph_tor="\uE017"
sep_solid="\uE01A"
sep_line="\uE01B"
sep_bar="\uE020"

print_mem_used() {
mem_used="$(free -m | awk 'NR==3 {print $3}')"
echo -ne "${sep_line} ${glyph_mem} ${mem_used}M "
}

print_volume() {
volume="$(amixer get IEC958 | tail -n1 | sed -r 's/.*\[(.*)%\].*/\1/')"
echo -ne "${colour_dgry}${sep_solid}${colour_mag} ${glyph_vol} ${volume}% "
}

print_datetime() {
datetimeloc="$(date "+%A %d.%m.%Y %Z=%H:%M")"
datetimeusc="$(TZ=US/Central date "+%Z=%H:%M")"
datetime="$(date "+%a %d %b ${sep_line} %H:%M")"
echo -ne "${colour_blk}${sep_solid}${colour_wht} ${glyph_tim} ${datetimeloc} ${datetimeusc}"
}

rx_old=$(cat /sys/class/net/em1/statistics/rx_bytes)
tx_old=$(cat /sys/class/net/em1/statistics/tx_bytes)

while true; do
# get new cpu idle and total usage
eval $(awk '/^cpu /{print "cpu_idle_now=" $5 "; cpu_total_now=" $2+$3+$4+$5 }' /proc/stat)
cpu_interval=$((cpu_total_now-${cpu_total_old:-0}))

# calculate cpu usage (%)
let cpu_used="100 * ($cpu_interval - ($cpu_idle_now-${cpu_idle_old:-0})) / $cpu_interval"

# get new rx/tx counts
rx_now=$(cat /sys/class/net/em1/statistics/rx_bytes)
tx_now=$(cat /sys/class/net/em1/statistics/tx_bytes)

# calculate the rate (K) and total (M)
let rx_rate=($rx_now-$rx_old)/1024
let tx_rate=($tx_now-$tx_old)/1024
# let rx_total=$rx_now/1048576
# let tx_total=$tx_now/1048576

# output vars
print_cpu_used() {
printf "%-14b" "${colour_dgry}${sep_solid}${colour_blu} ${glyph_cpu} ${cpu_used}%"
}
print_rx_rate() {
printf "%-15b" "${colour_blk}${sep_solid}${colour_grn} ${glyph_dl} ${rx_rate}K"
}
print_tx_rate() {
printf "%-14b" "${colour_gry}${sep_line}${colour_red} ${glyph_ul} ${tx_rate}K"
}

# Pipe to status bar, not indented due to printing extra spaces/tabs
xsetroot -name "$(print_cpu_used)$(print_mem_used)\
$(print_rx_rate)$(print_tx_rate)\
$(print_volume)\
$(print_datetime)"

# reset old rates
rx_old=$rx_now
tx_old=$tx_now
cpu_idle_old=$cpu_idle_now
cpu_total_old=$cpu_total_now

# loop stats every 1 second
sleep 1s
done &

/bin/xset fp+ /usr/share/fonts/terminus &
/bin/xset fp+ /usr/share/fonts/terminus2 &
/bin/xset fp+ /usr/share/fonts/xbmicons_pcf &
/bin/xset fp rehash &
/usr/local/bin/feh --bg-scale /usr/share/backgrounds/funeral.jpg &
/bin/sleep 1; /bin/xset dpms force off &
/bin/xrandr --output DP2 --rotate left

exec /usr/local/bin/dwm

=== .Xresources ===
In my .Xresources, I'm setting the UXTerm color to white on black, as well as fixing a bug with the Alt key in SSH sessions. The last line is to set the window URGENT flag when the window uses the system bell.
UXTerm*eightBitInput: false
UXTerm*metaSendsEscape: true
UXTerm*reverseVideo: true
UXTerm*bellIsUrgent: true

=== Tweaking dwm ===
==== Rules ====
What does ‘rules’ do?

The rules array allows to treat certain applications (clients) in a special way. A rule has a matching and an action part. When a new client appears (sends a maprequest), it is matched against the rules based on its class, instance (WM_CLASS) and title (WM_NAME) properties and then the given tag and floating mode setting actions are performed. The default tag mask is 0, which means the currently viewed tags, and the default mode is tiled so isfloating is False. Example from the default config:
static Rule rules[] = {
/* class instance title tags mask isfloating monitor */
{ "Gimp", NULL, NULL, 0, True, -1 },
{ "Firefox", NULL, NULL, 1 << 8, True, -1 },
};
These rules make every Gimp and Firefox window floating and makes Firefox windows appear on tag 9 instead of the currently viewed tags.
==== How does the matching work? ====
A client is matched if its properties contain the given strings as substrings (case-sensitively) or NULL is given (which means anything is matched there).
More than one rule can be applied to a client, the rules are matched in order.
==== How to check these properties of a client? ====
The xprop utility can be used to get this information: WM_CLASS is (instance, class) WM_NAME (or _NET_WM_NAME) is the title.
For example this shell script prints the relevant properties of the selected client (if the properties does not contain ‘=’ or ‘,’):
xprop |awk '
/^WM_CLASS/{sub(/.* =/, "instance:"); sub(/,/, "\nclass:"); print}
/^WM_NAME/{sub(/.* =/, "title:"); print}'

== Hints and Tips ==
Battery status
upower -i /org/freedesktop/UPower/devices/battery_BAT0 | grep 'percentage' | sed -r 's/^\s*percentage:\s*([0-9]*)\.?.*$/bat: \1%/'
upower -i /org/freedesktop/UPower/devices/battery_BAT0 | grep 'state' | awk '{print $2}'

== Links to usefull web sites ==
* [https://wiki.archlinux.org/index.php/Dwm#Customizing_config.h|dwm -ArchWiki]
* [https://wiki.archlinux.org/index.php/Display_Power_Management_Signaling|Display Power Management Signaling]
* [http://http://ptspts.blogspot.be/2009/10/screen-blanking-dpms-screen-saver.html|Screen blanking, DPMS, screen saver control and timeout settings on X11]
* [https://github.com/chjj/dwm/blob/master/dwm-status|dwm status bar]
https://github.com/chjj/dwm/blob/master/dwm-status

Dwm on CentOS

2020-06-10T21:25:35Z

WikiSysop: Die Seite wurde neu angelegt: „{{lowercase}} This article is not about '''dmw''' only but about setting up a simple Linux Workstation based on CentOS 7. == Packages == First things first. Yo…“

{{lowercase}}
This article is not about '''dmw''' only but about setting up a simple Linux Workstation based on CentOS 7.
== Packages ==
First things first. You need the following to get packages installed.
yum install -y ncurses-term epel-release xterm ftp libX11-devel libXinerama-devel
If you want to get gnome-terminal version 3.6.2 running you will have to install the following packages.
yum install -y glib2-devel gtk2-devel gtk3-devel GConf2-devel vte3-devel gsettings-desktop-schemas-devel libSM-devel itstool
If you want to use feh (image viewer) you need the followig packages to get it compiled.
yum install -y imlib2-devel libcurl-devel libXt libXt-devel libXft libXft-devel

== Personalization ==
=== Bash and VI ===
~/.bashrc
# .bashrc
PS1='\h\w\$ '
export EDITOR=vi
export TERM=dtterm
PATH=/usr/lib64/qt-3.3/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin
# User specific aliases and functions
alias vi='/usr/bin/vim -X'
alias l='/bin/ls --group-directories-first -lah | more'

~/.vim
syntax on
filetype indent plugin off
filetype indent off

"set number "show line numbers
set nowrap "dont wrap lines
"set linebreak "wrap lines at convenient points
set t_Co=256 "tell the term has 256 colors

"vertical/horizontal scroll off settings
set scrolloff=3
set sidescrolloff=7
set sidescroll=1

"mouse support
"set mouse=a
"set ttymouse=xterm2

"default indent settings
set tabstop=4
set shiftwidth=4
set softtabstop=4
set expandtab
"set autoindent

set backspace=2
set incsearch "find the next match as we type the search
set nohlsearch "no hilight of search string
set ruler

== XDMCP ==
It seems that XDMCP is working on CentOS 6/6.5 but does not work on CentOS 7 anymore. However, a configuration similar to the following should do the trick. 
/etc/gdm/custom.conf
# GDM configuration storage

[daemon]
User=gdm
Group=gdm

[security]
DisallowTCP=false
AllowRemoteRoot=true

[xdmcp]
Enable=true
DisplayPerHost=10
HonorIndirect=false
MaxPending=4
MaxSessions=32
MaxWait=30
MaxWaitIndirect=30
Port=177

[greeter]
IncludeAll=true

[chooser]
Multicast=false

[debug]
Enable=false

== dwm Configuration ==
=== config.h ===
Keep in mind to get patches installed first.
/* See LICENSE file for copyright and license details. */

/* appearance */
// static const char font[] = "-*-courier-*-*-*--14-*-*-*-*-*-*-*";

static const char font[] = "-*-xbmicons-medium-r-*-*-12-*-*-*-*-*-*-*" ","
"-*-terminus-medium-r-*-*-12-*-*-*-*-*-*-*";

#define NUMCOLORS 12
static const char colors[NUMCOLORS][ColLast][9] = {
// border foreground background
{ "#282a2e", "#999999", "#1d1f21" }, // 1 = normal (grey on black)
{ "#f0c674", "#ffffff", "#1d1f21" }, // 2 = selected (white on black)
{ "#dc322f", "#1d1f21", "#f0c674" }, // 3 = urgent (black on yellow)
{ "#282a2e", "#282a2e", "#1d1f21" }, // 4 = darkgrey on black (for glyphs)
{ "#282a2e", "#1d1f21", "#282a2e" }, // 5 = black on darkgrey (for glyphs)
{ "#282a2e", "#cc6666", "#1d1f21" }, // 6 = red on black
{ "#282a2e", "#b5bd68", "#1d1f21" }, // 7 = green on black
{ "#282a2e", "#de935f", "#1d1f21" }, // 8 = orange on black
{ "#282a2e", "#f0c674", "#282a2e" }, // 9 = yellow on darkgrey
{ "#282a2e", "#81a2be", "#282a2e" }, // A = blue on darkgrey
{ "#282a2e", "#b294bb", "#282a2e" }, // B = magenta on darkgrey
{ "#282a2e", "#8abeb7", "#282a2e" }, // C = cyan on darkgrey
};
// border foreground background
// { "#282a2e", "#373b41", "#1d1f21" }, // 1 = normal (grey on black)
// { "#f0c674", "#c5c8c6", "#1d1f21" }, // 2 = selected (white on black)
// { "#dc322f", "#1d1f21", "#f0c674" }, // 3 = urgent (black on yellow)
// { "#282a2e", "#282a2e", "#1d1f21" }, // 4 = darkgrey on black (for glyphs)
// { "#282a2e", "#1d1f21", "#282a2e" }, // 5 = black on darkgrey (for glyphs)
// { "#282a2e", "#cc6666", "#1d1f21" }, // 6 = red on black
// { "#282a2e", "#b5bd68", "#1d1f21" }, // 7 = green on black
// { "#282a2e", "#de935f", "#1d1f21" }, // 8 = orange on black
// { "#282a2e", "#f0c674", "#282a2e" }, // 9 = yellow on darkgrey
// { "#282a2e", "#81a2be", "#282a2e" }, // A = blue on darkgrey
// { "#282a2e", "#b294bb", "#282a2e" }, // B = magenta on darkgrey
// { "#282a2e", "#8abeb7", "#282a2e" }, // C = cyan on darkgrey
// };
//

// static const char normbordercolor[] = "#bbbbbb";
// static const char normbgcolor[] = "#222222";
// static const char normfgcolor[] = "#999999";
// static const char selbordercolor[] = "#005577";
// static const char selbgcolor[] = "#005577";
// static const char selfgcolor[] = "#ffffff";
static const char normbordercolor[] = "#073642";
static const char normbgcolor[] = "#002b36";
static const char normfgcolor[] = "#fdf6e3";
static const char selbordercolor[] = "#586e75";
static const char selbgcolor[] = "#073642";
static const char selfgcolor[] = "#fdf6e3";
static const unsigned int borderpx = 0; /* border pixel of windows */
static const unsigned int snap = 5; /* snap pixel */
static const Bool showbar = True; /* False means no bar */
static const Bool topbar = True; /* False means bottom bar */

/* tagging */
static const char *tags[] = { "Geile Terminals", "2", "3", "4", "RDP", "Windows", "Citrix", "Mail", "Web" };

static const Rule rules[] = {
/* class instance title tags mask isfloating monitor */
{ "Gimp", NULL, NULL, 0, True, -1 },
{ "Xfce4-terminal", NULL, NULL, 0, False, -1 },
{ "VirtualBox", "VirtualBox", NULL, 0, True, -1 },
{ "Firefox", "Navigator", NULL, 1 << 8, False, -1 },
{ "Firefox", "Browser", "Firefox Preferences", 1 << 8, True, -1 },
{ "Thunderbird", NULL, NULL, 1 << 7, False, -1 },
{ "Thunderbird", "Msgcompose", NULL, 1 << 7, True, -1 },
{ "Wfica", NULL, NULL, 1 << 6, True, -1 },
{ "xfreerdp", NULL, NULL, 1 << 4, True, -1 },
};

/* layout(s) */
static const float mfact = 0.55; /* factor of master area size [0.05..0.95] */
static const int nmaster = 1; /* number of clients in master area */
static const Bool resizehints = True; /* True means respect size hints in tiled resizals */

#include "bstack.c"
#include "bstackhoriz.c"

static const Layout layouts[] = {
/* symbol arrange function */
{ "[]=", tile }, /* first entry is default */
{ "><>", NULL }, /* no layout function means floating behavior */
{ "[M]", monocle },
};

/* key definitions */
#define MODKEY Mod1Mask
#define TAGKEYS(KEY,TAG) \
{ MODKEY, KEY, view, {.ui = 1 << TAG} }, \
{ MODKEY|ControlMask, KEY, toggleview, {.ui = 1 << TAG} }, \
{ MODKEY|ShiftMask, KEY, tag, {.ui = 1 << TAG} }, \
{ MODKEY|ControlMask|ShiftMask, KEY, toggletag, {.ui = 1 << TAG} },

/* helper for spawning shell commands in the pre dwm-5.0 fashion */
#define SHCMD(cmd) { .v = (const char*[]){ "/bin/sh", "-c", cmd, NULL } }

/* commands */
static const char *dmenucmd[] = { "dmenu_run", "-fn", font, "-nb", normbgcolor, "-nf", normfgcolor, "-sb", selbgcolor, "-sf", selfgcolor, NULL };
static const char *termcmd[] = { "gnome-terminal", NULL };

static Key keys[] = {
/* modifier key function argument */
{ MODKEY, XK_p, spawn, {.v = dmenucmd } },
{ MODKEY|ShiftMask, XK_Return, spawn, {.v = termcmd } },
{ MODKEY, XK_b, togglebar, {0} },
{ MODKEY, XK_j, focusstack, {.i = +1 } },
{ MODKEY, XK_k, focusstack, {.i = -1 } },
{ MODKEY, XK_i, incnmaster, {.i = +1 } },
{ MODKEY, XK_d, incnmaster, {.i = -1 } },
{ MODKEY, XK_h, setmfact, {.f = -0.05} },
{ MODKEY, XK_l, setmfact, {.f = +0.05} },
{ MODKEY, XK_Return, zoom, {0} },
{ MODKEY, XK_Tab, view, {0} },
{ MODKEY, XK_q, killclient, {0} },
{ MODKEY, XK_t, setlayout, {.v = &layouts[0]} },
{ MODKEY, XK_f, setlayout, {.v = &layouts[1]} },
{ MODKEY, XK_m, setlayout, {.v = &layouts[2]} },
{ MODKEY, XK_space, setlayout, {0} },
{ MODKEY|ShiftMask, XK_space, togglefloating, {0} },
{ MODKEY, XK_0, view, {.ui = ~0 } },
{ MODKEY|ShiftMask, XK_0, tag, {.ui = ~0 } },
{ MODKEY, XK_comma, focusmon, {.i = -1 } },
{ MODKEY, XK_period, focusmon, {.i = +1 } },
{ MODKEY|ShiftMask, XK_comma, tagmon, {.i = -1 } },
{ MODKEY|ShiftMask, XK_period, tagmon, {.i = +1 } },
TAGKEYS( XK_1, 0)
TAGKEYS( XK_2, 1)
TAGKEYS( XK_3, 2)
TAGKEYS( XK_4, 3)
TAGKEYS( XK_5, 4)
TAGKEYS( XK_6, 5)
TAGKEYS( XK_7, 6)
TAGKEYS( XK_8, 7)
TAGKEYS( XK_9, 8)
{ MODKEY|ShiftMask, XK_q, quit, {0} },
};

/* button definitions */
/* click can be ClkLtSymbol, ClkStatusText, ClkWinTitle, ClkClientWin, or ClkRootWin */
static Button buttons[] = {
/* click event mask button function argument */
{ ClkLtSymbol, 0, Button1, setlayout, {0} },
{ ClkLtSymbol, 0, Button3, setlayout, {.v = &layouts[2]} },
{ ClkWinTitle, 0, Button2, zoom, {0} },
{ ClkStatusText, 0, Button2, spawn, {.v = termcmd } },
{ ClkClientWin, MODKEY, Button1, movemouse, {0} },
{ ClkClientWin, MODKEY, Button2, togglefloating, {0} },
{ ClkClientWin, MODKEY, Button3, resizemouse, {0} },
{ ClkTagBar, 0, Button1, view, {0} },
{ ClkTagBar, 0, Button3, toggleview, {0} },
{ ClkTagBar, MODKEY, Button1, tag, {0} },
{ ClkTagBar, MODKEY, Button3, toggletag, {0} },
};

=== X Session ===
Create a .desktop file so you can choose '''dwm''' from the gdm greeter.
/usr/share/xsessions/dwm.desktop
[Desktop Entry]
Name=dwm
Comment=The dwm tiling window manager
Exec=/usr/local/bin/dwm-wrapper
# no icon yet, only the top three are currently used
Icon=
Type=Application

=== dwm-wrapper ===
The .desktop file will call the dwm-wrapper, which sets the top menu bar.
/usr/local/bin/dwm-wrapper
#! /bin/sh
# setxkbmap -option terminate:ctrl_alt_bksp
# feh --bg-scale /home/shaun/img/arch.png
# conky -x 0 -y 0 -d
# Colour codes from dwm/config.h
colour_gry="\x01" # grey on black
colour_wht="\x02" # white on black
colour_dgry="\x04" # darkgrey on black
colour_blk="\x05" # black on darkgrey
colour_red="\x06" # colour_red on black
colour_grn="\x07" # green on black
colour_dylw="\x08" # orange on black
colour_ylw="\x09" # yellow on black
colour_blu="\x0A" # colour_blue on darkgrey
colour_mag="\x0B" # colour_magenta on darkgrey
colour_cyn="\x0C" # cyan on darkgrey

# Icon glyphs from font xbmicons.pcf
glyph_msc="\uE00E"
glyph_cpu="\uE00F"
glyph_mem="\uE010"
glyph_dl="\uE011"
glyph_ul="\uE012"
glyph_com="\uE013"
glyph_eml="\uE014"
glyph_vol="\uE015"
glyph_tim="\uE016"
glyph_tor="\uE017"
sep_solid="\uE01A"
sep_line="\uE01B"
sep_bar="\uE020"

print_mem_used() {
mem_used="$(free -m | awk 'NR==3 {print $3}')"
echo -ne "${sep_line} ${glyph_mem} ${mem_used}M "
}

print_volume() {
volume="$(amixer get IEC958 | tail -n1 | sed -r 's/.*\[(.*)%\].*/\1/')"
echo -ne "${colour_dgry}${sep_solid}${colour_mag} ${glyph_vol} ${volume}% "
}

print_datetime() {
datetimeloc="$(date "+%A %d.%m.%Y %Z=%H:%M")"
datetimeusc="$(TZ=US/Central date "+%Z=%H:%M")"
datetime="$(date "+%a %d %b ${sep_line} %H:%M")"
echo -ne "${colour_blk}${sep_solid}${colour_wht} ${glyph_tim} ${datetimeloc} ${datetimeusc}"
}

rx_old=$(cat /sys/class/net/em1/statistics/rx_bytes)
tx_old=$(cat /sys/class/net/em1/statistics/tx_bytes)

while true; do
# get new cpu idle and total usage
eval $(awk '/^cpu /{print "cpu_idle_now=" $5 "; cpu_total_now=" $2+$3+$4+$5 }' /proc/stat)
cpu_interval=$((cpu_total_now-${cpu_total_old:-0}))

# calculate cpu usage (%)
let cpu_used="100 * ($cpu_interval - ($cpu_idle_now-${cpu_idle_old:-0})) / $cpu_interval"

# get new rx/tx counts
rx_now=$(cat /sys/class/net/em1/statistics/rx_bytes)
tx_now=$(cat /sys/class/net/em1/statistics/tx_bytes)

# calculate the rate (K) and total (M)
let rx_rate=($rx_now-$rx_old)/1024
let tx_rate=($tx_now-$tx_old)/1024
# let rx_total=$rx_now/1048576
# let tx_total=$tx_now/1048576

# output vars
print_cpu_used() {
printf "%-14b" "${colour_dgry}${sep_solid}${colour_blu} ${glyph_cpu} ${cpu_used}%"
}
print_rx_rate() {
printf "%-15b" "${colour_blk}${sep_solid}${colour_grn} ${glyph_dl} ${rx_rate}K"
}
print_tx_rate() {
printf "%-14b" "${colour_gry}${sep_line}${colour_red} ${glyph_ul} ${tx_rate}K"
}

# Pipe to status bar, not indented due to printing extra spaces/tabs
xsetroot -name "$(print_cpu_used)$(print_mem_used)\
$(print_rx_rate)$(print_tx_rate)\
$(print_volume)\
$(print_datetime)"

# reset old rates
rx_old=$rx_now
tx_old=$tx_now
cpu_idle_old=$cpu_idle_now
cpu_total_old=$cpu_total_now

# loop stats every 1 second
sleep 1s
done &

/bin/xset fp+ /usr/share/fonts/terminus &
/bin/xset fp+ /usr/share/fonts/terminus2 &
/bin/xset fp+ /usr/share/fonts/xbmicons_pcf &
/bin/xset fp rehash &
/usr/local/bin/feh --bg-scale /usr/share/backgrounds/funeral.jpg &
/bin/sleep 1; /bin/xset dpms force off &
/bin/xrandr --output DP2 --rotate left

exec /usr/local/bin/dwm

=== .Xresources ===
In my .Xresources, I'm setting the UXTerm color to white on black, as well as fixing a bug with the Alt key in SSH sessions. The last line is to set the window URGENT flag when the window uses the system bell.
UXTerm*eightBitInput: false
UXTerm*metaSendsEscape: true
UXTerm*reverseVideo: true
UXTerm*bellIsUrgent: true

=== Tweaking dwm ===
==== Rules ====
What does ‘rules’ do?

The rules array allows to treat certain applications (clients) in a special way. A rule has a matching and an action part. When a new client appears (sends a maprequest), it is matched against the rules based on its class, instance (WM_CLASS) and title (WM_NAME) properties and then the given tag and floating mode setting actions are performed. The default tag mask is 0, which means the currently viewed tags, and the default mode is tiled so isfloating is False. Example from the default config:
static Rule rules[] = {
/* class instance title tags mask isfloating monitor */
{ "Gimp", NULL, NULL, 0, True, -1 },
{ "Firefox", NULL, NULL, 1 << 8, True, -1 },
};
These rules make every Gimp and Firefox window floating and makes Firefox windows appear on tag 9 instead of the currently viewed tags.
==== How does the matching work? ====
A client is matched if its properties contain the given strings as substrings (case-sensitively) or NULL is given (which means anything is matched there).
More than one rule can be applied to a client, the rules are matched in order.
==== How to check these properties of a client? ====
The xprop utility can be used to get this information: WM_CLASS is (instance, class) WM_NAME (or _NET_WM_NAME) is the title.
For example this shell script prints the relevant properties of the selected client (if the properties does not contain ‘=’ or ‘,’):
xprop |awk '
/^WM_CLASS/{sub(/.* =/, "instance:"); sub(/,/, "\nclass:"); print}
/^WM_NAME/{sub(/.* =/, "title:"); print}'

== Hints and Tips ==
Battery status
upower -i /org/freedesktop/UPower/devices/battery_BAT0 | grep 'percentage' | sed -r 's/^\s*percentage:\s*([0-9]*)\.?.*$/bat: \1%/'
upower -i /org/freedesktop/UPower/devices/battery_BAT0 | grep 'state' | awk '{print $2}'

== Links to usefull web sites ==
* [https://wiki.archlinux.org/index.php/Dwm#Customizing_config.h|dwm -ArchWiki]
* [https://wiki.archlinux.org/index.php/Display_Power_Management_Signaling|Display Power Management Signaling]
* [http://http://ptspts.blogspot.be/2009/10/screen-blanking-dpms-screen-saver.html|Screen blanking, DPMS, screen saver control and timeout settings on X11]
* [https://github.com/chjj/dwm/blob/master/dwm-status|dwm status bar]
https://github.com/chjj/dwm/blob/master/dwm-status

CentOS 7.x from Scratch

2020-06-10T21:21:55Z

WikiSysop: Die Seite wurde neu angelegt: „This page targets primarily the setup of minimal CentOS 7.x installation. == Software and Applications == The installation and setup of the following software…“

This page targets primarily the setup of minimal CentOS 7.x installation.

== Software and Applications ==
The installation and setup of the following software and applications will described.
* Minimal install of CentOS 7.x
* Xorg
* dwm windows manager
* dmenu
* st terminal

== Installation ==
A simple way to set your screen resolution and color depth for most Live Linux distro's is via the use of the vga=parameter boot option. For example at boot you might type: Live vga=795. This would set your system to boot using the Live label with a screen resolution to 24bit 1280X1024. Here are some more examples of common vga boot values.

{| class="wikitable"
|-
! Depth !! 800x600 !! 1024x786 !! 1152x864 !! 1280x1024 !! 1600x1200
|-
| 8 bit || vga=771 || vga=773 || vga=353 || vga=775 || vga=796
|-
| 16 bit || vga=788 || vga=791 || vga=355 || vga=794 || vga=798
|-
| 24 bit || vga=789 || vga=792 || || vga=795 || vga=799
|}

Since this page targets the setup of a minimal CentOS 7 installation you should stick with the default minimal software selection during graphical installation of CentOS 7. Please keep in mind that with this minimal set of software you will not be able to join wireless networks. In order to automatically connect to the wireless network, which you have configured and used during the graphical installation process of CentOS 7, you have to have the following packages installed.
* NetworkManager.x86_64
* NetworkManager-libnm.x86_64
* NetworkManager-team.x86_64
* NetworkManager-tui.x86_64
* NetworkManager-wifi.x86_64
But usually the minimal install of CentOS 7 doesn't come with NetworkManager-wifi installed, which is not cool ... specially on my DELL Latitude E6510. So how do you get this package installed without wireless network connection. You don't wanna mess with cables at the end. Simplest way to go is to mount your installation medium, which is probably still hooked up, change to the repository directory and install the package manually. As root do the following to mount the installation medium and to install the missing package. The following example aims at CentOS 7.6 1804. Other versions may vary.
mkdir -p /mnt/usb1
mount /dev/sdb1 /mnt/usb1
cd /mnt/usb1/Packages
yum install -y NetworkManger-wifi-1.10.2-13.el7.x86_64.rpm
reboot

== Environment ==
Without usable command line you'll be screwed. Replace your ~/.baschrc with the following or even better just clone [https://github.com/WieWaldi/.dotfiles this repo] and follow the installation instructions.
# .bashrc
PS1='\h\w\$ '
export EDITOR=vi
export TERM=dtterm
export PATH=/usr/lib64/qt-3.3/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin
alias vi='/usr/local/bin/vim -X'
alias l='/bin/ls --group-directories-first -lah | more'
alias cp='/bin/cp -r'

cd ~
git clone https://github.com/WieWaldi/.dotfiles
.dotfiles/setup.sh

To be able to get the [http://suckless.org suckless.org] tools compiled you need to get these packages installed.
yum install -y vim git wget ftp make automake gcc gcc-c++ kernel-devel patch net-tools bind-utils

yum install -y xorg-x11-xinit xorg-x11-apps xorg-x11-bitmaps xorg-x11-utils
yum install -y xorg-x11-drv-evdev xorg-x11-fonts-misc.noarch libXrandr-devel libX11-devel libXft-devel
yum install -y libXinerama-devel xterm imsettings ncurses-term ncurses-devel webkitgtk4-devel
yum install -y glib2-devel gcr-devel mesa-libegl mesa-libgl mesa-dri-drivers dbus-x11

yum install -y webkitgtk4-devel glib2-devel gcr-devel mesa-libegl mesa-libgl mesa-dri-drivers xorg-x11-utils libconfig-devel
yum install -y "gstreamer*"

== VirtualBox ==
VirtualBox installation really sucks since they only tell what to do and not how to do.
From [https://unix.stackexchange.com/questions/232147/your-kernel-headers-for-kernel-3-10-0-229-el7-x86-64-cannot-be-found this site]
sudo yum install "kernel-devel-uname-r == $(uname -r)"

CentOS 8.x from Scratch

2020-06-10T21:20:55Z

WikiSysop: Die Seite wurde neu angelegt: „This page targets primarily the setup of minimal CentOS 8.x installation. == Software and Applications == The installation and setup of the following software…“

This page targets primarily the setup of minimal CentOS 8.x installation.

== Software and Applications ==
The installation and setup of the following software and applications will described.
* Minimal install of CentOS 7.x
* Xorg
* dwm windows manager
* dmenu
* st terminal

== Installation ==
A simple way to set your screen resolution and color depth for most Live Linux distro's is via the use of the vga=parameter boot option. For example at boot you might type: Live vga=795. This would set your system to boot using the Live label with a screen resolution to 24bit 1280X1024. Here are some more examples of common vga boot values.

{| class="wikitable"
|-
! Depth !! 800x600 !! 1024x786 !! 1152x864 !! 1280x1024 !! 1600x1200
|-
| 8 bit || vga=771 || vga=773 || vga=353 || vga=775 || vga=796
|-
| 16 bit || vga=788 || vga=791 || vga=355 || vga=794 || vga=798
|-
| 24 bit || vga=789 || vga=792 || || vga=795 || vga=799
|}

Since this page targets the setup of a minimal CentOS 8 installation you should stick with the default minimal software selection during graphical installation of CentOS 8. Please keep in mind that with this minimal set of software you will not be able to join wireless networks. In order to automatically connect to the wireless network, which you have configured and used during the graphical installation process of CentOS 8, you have to have the following packages installed.
* NetworkManager.x86_64
* NetworkManager-libnm.x86_64
* NetworkManager-team.x86_64
* NetworkManager-tui.x86_64
* NetworkManager-wifi.x86_64
But usually the minimal install of CentOS 8 doesn't come with NetworkManager-wifi installed, which is not cool ... specially on my DELL Latitude E6510. So how do you get this package installed without wireless network connection. You don't wanna mess with cables at the end. Simplest way to go is to mount your installation medium, which is probably still hooked up, change to the repository directory and install the package manually. As root do the following to mount the installation medium and to install the missing package. The following example aims at CentOS 7.6 1804. Other versions may vary.
mkdir -p /mnt/usb1
mount /dev/sdb1 /mnt/usb1
cd /mnt/usb1/Packages
yum install -y NetworkManger-wifi-1.10.2-13.el7.x86_64.rpm
reboot

== Post Installation ==
Disable graphical Boot
plymouth-set-default-theme details
dracut -f

Solaris -- Network Aggregation with Cisco 3750

2020-06-10T21:18:58Z

WikiSysop: Die Seite wurde neu angelegt: „Auf der Solaris 10 Buechse ein Agregat mit folgendem Befehl erstellen. Eine Beschreibung der Optionen liegt hier dladm crea…“

Auf der Solaris 10 Buechse ein Agregat mit folgendem Befehl erstellen.
Eine Beschreibung der Optionen liegt [[Solaris -- Network Aggregation|hier]]
dladm create-aggr -d bge0 -d bge1 -d bge2 -d bge3 -l active -P L4 1

Auf dem Cisco 3750er einen EtherChannel erstellen
SW1# configure terminal
SW1(config)# interface range fastethernet0/0 -2
SW1(config-if-range)# switchport mode access
SW1(config-if-range)# switchport access vlan 10
SW1(config-if-range)# channel-protocol lacp
SW1(config-if-range)# channel-group 1 mode passive
Creating a port-channel interface Port-channel 1

SW1(config-if-range)# end

Wiki Konfiguration

2020-06-10T21:17:59Z

WikiSysop: Die Seite wurde neu angelegt: „<big>'''MediaWiki has been successfully installed.'''</big> Consult the [http://meta.wikimedia.org/wiki/Help:Contents User's Guide] for information on using t…“

<big>'''MediaWiki has been successfully installed.'''</big>

Consult the [http://meta.wikimedia.org/wiki/Help:Contents User's Guide] for information on using the wiki software.

== Getting started ==

* [http://www.mediawiki.org/wiki/Help:Configuration_settings Configuration settings list]
* [http://www.mediawiki.org/wiki/Help:FAQ MediaWiki FAQ]
* [http://mail.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]

== Config Pages for WikiAmper ==

* [http://www.rz-amper.de/wiki/index.php/mediawiki:mainpage Configure the Main Page]
* [http://www.rz-amper.de/wiki/index.php/mediawiki:sidebar Configure the Sidebar]

* [[MediaWiki:Mainpage]]
* [[MediaWiki:Sidebar]]
* [[MediaWiki:Common.css]]

Vi Referenz

2020-06-10T21:17:03Z

WikiSysop: Die Seite wurde neu angelegt: „... means that something needs to be specified before or after the command, as appropriate. This is normally a cursor movement keys (h,j,k,l,w,b, etc.) or a li…“

... means that something needs to be specified before or after the command, as appropriate. This is normally a cursor movement keys (h,j,k,l,w,b, etc.) or a line number.

<pre>
# (where # is a number) following command n times...
: go to ex-mode
) next sentence
( previous sentence
} next paragraph
{ previous paragraph
]] next section
[[ previous section
0 beginning of line
$ end of line
^ first non-whitespace character
+ first character of next line
- first character of previous line
(spacebar) next character
(return) next line
/ search forward
? search backward
% find match of current parenthesis, brace, or bracket
, reverse direction of last f, F, t, or T
; repeat last f, F, t, or T
. repeat last command
` goto mark
' goto beginning of line with mark
`` return to previous mark or location before a search
'' go to start of line of previous mark or location before search
~ switch case of current character
" store in register
!! repeat last shell command
! send next to command, replace output (eg !}fmt passes the current
paragraph to the command fmt, and replaces the output with
whatever fmt returns.)
>> shift paragraph one shiftwidth to the right
<< shift paragraph one shiftwidth to the left
>% shift until matching (, [, or { to the right
<% shift until matching (, [, or { to the left
a append after the current location
A append at the end of the line
^a unused
b beginning of previous word
B beginning of previous word, ignore punctuation
^b scroll back one screen
c change until...
C change to end of line
^c ends insert mode, unused in command mode
d delete until...
D delete to end of line
^d scroll down half a window, moves to previous shiftwidth in insert
mode
e end of word
E end of word, ignore punctuation
^e scroll screen down one line
f find...
F find backward...
^f scroll forward one screen
g unused
G ...Goto [defaults to end of file]
^g show status line
h left
H first line on screen
^h backspace in insert mode, left in command mode
i insert before current location
I insert before first non-whitespace character on line
^i tab in insert, unused in command
j down
J join next line with current line
^j down in command, create newline in insert
k up
K unused
^k unused
l right
L last line on screen
^l redraw screen
m mark position into register
M middle of screen
^m carriage return
n repeat last search
N repeat last search, reverse direction
^n down in command
o open line below current
O open line above current
^o unused
p put below current line
P put above current line
^p up in command
q unused
Q quit and run ex
^q unused
r replace current character
R replace characters until insert mode is left
^r redraw screen in command mode
s substitute
S substitute entire line
^s unused
t to...
T backward to...
^t moves to next shiftwidth.
u undo last change
U undo changes to current line
^u scroll up half a window
v unused
V unused
^v unused
w beginning of next word
W beginning of next word, ignore punctuation
^w unused in command, in insert move back to beginning of previous
word
x delete current character
X delete previous character
^x unused
y yank...
Y yank current line
^y scroll screen up one line
z reposition screen around line (Return to top of screen, . to
middle, - to bottom)
ZZ write and quit
^z unused
</pre>

==6.1 - Command mode input options ( : commands)==

(Note: this is not a canonical list, just some of the more important
ones.)
<pre>
:r <file> read <file> into current text
:r !<command> read output from command <command> into current text
:nr <file> read in at line number
:!<file> run command, return
:sh goto shell
:so <file> read and execute commands from <file>

:x write and quit
:wq write and quit
:l1,l2w <file> write between lines l1 and l2 to <file>. If <file>
is not specified, assume current. If l1,l2 not
specified, assume entire file (making it :w)
:w >&g;t <file> append to <file>. May use line numbers
:w! overwrite current file
:q quit
:q! quit, forget changes
:e <file> edit <file> without leaving vi
:e! forget changes since last write
:n edit next file
:e +n <file> edit <file> at line n, if no end, assume end of file
:n <files> specify <files> as new list of files to edit
:e# edit alternate file (if :e <file> is used, alternate is
the original file)
:args show files to be edited
:rew rewind life of files to top
:map m n create a macro (make m do n)
:map! m n create an insert mode macro (make m do n)
:unmap m destroy macro m
:unmap! m destroy insert mode macro m
:ab <1> <2> abbreviate - replace <1> with <2> whenever typed as
a word
:unab <1> unabbreviate <1>
:set <option> set <option>...

</pre>

==6.2 - set options==

The abbreviations in parenthesis may be used. Syntax:<dl>

<dd>:set <option> <param> (If <param> is expected)
Multiple options may be specified on one line.
<dd>:set <option>? displays the value of the <option>
<dd>:set all displays the value of all the options. </dl>

For options without a value, set no<option> turns it off.

<pre>
Option: Default: What it does:

autoindent (ai) noai Makes new lines automatically
indent to the position as the
line above or below
autoprint (ap) ap Display changes after each
command
autowrite (aw) noaw Automatically save file
before :n, :!
beautify (bf) nobf Ignore all control characters
during input (except tab,
newline, formfeed)
directory= (dir=) /tmp Name of the directory to store
buffer
edcompatible noedcompatible Use ed-like features on
substitute
errorbells (eb) errorbells Sound bell on error
exrc (ex) noexrc Allow .exrc files outside home
dir
hardtabs= (ht=) 8 Set boundary for hardware tabs
ignore case (ic) noic Ignore case in regex expressions
lisp nolisp Turn on lisp mode
list nolist Display all tabs, end of lines
magic magic Enable more regex expressions
mesg mesg Allows mesgs to be sent to
terminal
number (nu) nonumber Displays line numbers in file
open open Allows open and visual
optimize (opt) optimize Optimizes throughput of text by
not sending carriage returns
when printing text
paragraphs= (para=) IPLPPPQPPLIbp Sets the delimiters for { & }
prompt prompt Command mode input gives : prompt
readonly (ro) noro Cannot write unless ! is given
redraw noredraw Redraw screen when edits are made
remap remap Allows macros that point to other
macros
report= 5 Report changes if they effect > x
lines
scroll 1/2 window Amount of screen to scroll when
scroll down is received in
command mode. Also, number of
lines printer by z. (z prints
2*scroll)
sections= SHNHH HU Defines end of section for [[
and ]]
shell= (sh=) /bin/sh Default shell. Uses SHELL
environment, if set
shiftwidth= (sw=) 8 Characters to shift when using
shift commands
showmatch (sm) nosm Show matching {, }, (, ), [, or ]
showmode noshowmode Shows which mode you are in.
slowopen (slow) Do not update display
immediately after insert
tabstop= (ts=) 8 Sets tabstop length
taglength= (tl=) 0 Number of characters significant
for tags (0 means all
characters)
tags= tag, /usr/lib/tags Define pathname of files
containing tags.
term= Set the terminal type
terse noterse Display shorter error messages
timeout (to) timeout Keyboard maps timeout after one
second
ttytype= Set the terminal type
warn warn Display "No write since last
change" messages
window= (w=) Number of lines in window in visual
mode
wrapmargin= (wm=) 0 Set the right margin. Greater
than 0 will word wrap n spaces
from the edge of the screen
wrapscan (ws) ws Searches wrap around end of file
writeany (wa) nowa Allow saving to any file
</pre>

Solaris -- Network Aggregation

2020-06-10T21:15:23Z

WikiSysop: Die Seite wurde neu angelegt: „Zuerst sehen wir uns mal die Netzwerk-Schnittstellen an. Die Befehle ''''dladm show-link -s'''' und ''''dladm show-dev'''' bringen dazu brauchbare Ausgaben.…“

Zuerst sehen wir uns mal die Netzwerk-Schnittstellen an. Die Befehle ''''dladm show-link -s'''' und ''''dladm show-dev'''' bringen dazu brauchbare Ausgaben.
ismine~# dladm show-link -s
ipackets rbytes ierrors opackets obytes oerrors
bge0 0 0 0 0 0 0
bge1 0 0 0 0 0 0
qfe0 4784 1211673 0 3787 1341922 0
qfe1 0 0 0 0 0 0
qfe2 0 0 0 0 0 0
qfe3 0 0 0 0 0 0
bge2 0 0 0 0 0 0
bge3 0 0 0 0 0 0
ismine~# dladm show-dev
bge0 link: unknown speed: 0 Mbps duplex: unknown
bge1 link: unknown speed: 0 Mbps duplex: unknown
qfe0 link: up speed: 100 Mbps duplex: full
qfe1 link: down speed: 0 Mbps duplex: unknown
qfe2 link: down speed: 0 Mbps duplex: unknown
qfe3 link: down speed: 0 Mbps duplex: unknown
bge2 link: unknown speed: 0 Mbps duplex: unknown
bge3 link: unknown speed: 0 Mbps duplex: unknown

Link der Netzwerk-Schnittstelle ueberpruefen.
ismine~# ndd -get /dev/bge0 link_status
0
ismine~# ndd -get /dev/bge1 link_status
0

Das Agregat mit ''''dladmin'''' erstellen.
dladm create-aggr -d bge0 -d bge1 -d bge2 -d bge3 -l off -P L2 1
-d Es koennen soviele Schnittstellen hinzugefuegt werden wie noetig. 
-P Policy; Die Richtlinie, die das Load Balancing beschreibt: L2 fuer MAC, L3 fuer IP, L4 fuer src/dest IP 
-l off/active/passive bechreibt die Art wie LCAP arbeitet.

{| class="wikitable" border="1"
|-
! LCAP Mode
! Description
|-
| Passive
| The switch does not initiate the channel, but does understand incoming LACP packets. The peer (in active state) initiates negotiation (by sending out an LACP packet) which we receive and reply to, eventually forming the aggregation channel with the peer. This is similar to the auto mode in PAgP.
|-
| Active
| We are willing to form an aggregate link, and initiate the negotiation. The link aggregate will be formed if the other end is running in LACP active or passive mode. This is similar to the desirable mode of PAgP.
|-
| On
| The link aggregation is forced to be formed without any LACP negotiation .In other words, the switch will neither send the LACP packet nor process any incoming LACP packet. This is similar to the on state for PAgP.
|}

Mit ''''dladm show-link -s'''' sehen wir uns noch mal die Netzwerk-Schnittstellen an und sehen, dass die Schnittstelle ''''aggr'''' hinzugekommen ist.
ismine~# dladm show-link -s
ipackets rbytes ierrors opackets obytes oerrors
bge0 0 0 0 0 0 0
bge1 0 0 0 0 0 0
qfe0 6456 1439028 0 4936 1584411 0
qfe1 0 0 0 0 0 0
qfe2 0 0 0 0 0 0
qfe3 0 0 0 0 0 0
bge2 0 0 0 0 0 0
bge3 0 0 0 0 0 0
aggr1 0 0 0 0 0 0

Nun kann die Schnittstelle eingebunden und eine IP Adresse hinzugefuegt werden.
ismine~# ifconfig aggr1 plumb
ismine~# ifconfig aggr1 192.168.2.30 netmask 255.255.255.0 up
ismine~# ifconfig -a
lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
qfe0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
inet 192.168.2.12 netmask ffffff00 broadcast 192.168.2.255
ether 8:0:20:c8:54:5
aggr1: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 4
inet 192.168.2.30 netmask ffffff00 broadcast 192.168.2.255
ether 0:3:ba:58:20:d

Das war es auch schon. Das Agregat ist erstellt und arbeitet.
ismine~# dladm show-aggr
key: 1 (0x0001) policy: L2 address: 0:3:ba:58:20:d (auto)
device address speed duplex link state
bge0 0:3:ba:58:20:d 100 Mbps full up attached
bge1 0:3:ba:58:20:e 100 Mbps full up attached
bge2 0:3:ba:58:20:f 100 Mbps full up attached
bge3 0:3:ba:58:20:10 100 Mbps full up attached

Solaris -- Serial Terminal Access

2020-06-10T21:12:27Z

WikiSysop: Die Seite wurde neu angelegt: „The tip command can be used to allow one Unix workstation to act as a serial terminal for another Unix system. The following must be in place to allow this to…“

The tip command can be used to allow one Unix workstation to act as a serial terminal for another Unix system. The following must be in place to allow this to work between two Sun systems:

* The system to be observed should be halted. If a keyboard needs to be removed from the system, the system should be powered off. (Some older models will blow a keyboard fuse if the keyboard is removed while the system is powered up.)
* The /etc/remote file on the observing machine needs to have the hardwire line pointing to the correct serial port.
** By default, the file points at port b. In this case, the line should look like: :dv=/dev/term/b:br#9600:el=^C^S^Q^U^D:ie=%$:oe=^D:
** If serial port a is to be used, change the line to look like: :dv=/dev/term/a:br#9600:el=^C^S^Q^U^D:ie=%$:oe=^D:
* A null modem cable should be run between serial port a on the system that is under observation and the serial port configured in the /etc/remote file's hardwire line on the observing system. (A null modem cable interchanges wires 2 and 3 on one end.)

On the observer system type "tip hardwire" in a window. (It is best to use a windowed environment so that control of the system can be regained in case of a session hang.) A "connected" message should be echoed to the window. If not, use admintool or another utility to see if the serial port is already in use.

A tip session should not be closed by killing the process, the shell, or rebooting the observer machine. In these cases a /var/spool/locks/LCK file may not be cleaned up properly, which may prevent further tip sessions.

Some common tip commands are:
* ~. (end session)
* ~# (break--same as STOP-A)
* ~? (list all tip commands)
(Other commands may be found on the tip man page.)

The system to be observed/controlled can be powered up. If the diag-switch? PROM environment variable is set to true, hardware diagnostic data will be displayed to the tip window. (See the Hardware Diagnostics page for further information.)

Solaris -- iSCSI

2020-06-10T21:11:31Z

WikiSysop: Die Seite wurde neu angelegt: „{{DISPLAYTITLE:Solaris iSCSI}} == Setting Up Your Solaris iSCSI Target Devices == The basic process is as follows: *Identify the backing store directory – F…“

{{DISPLAYTITLE:Solaris iSCSI}}

== Setting Up Your Solaris iSCSI Target Devices ==
The basic process is as follows:
*Identify the backing store directory – For each target and logical unit that is created, the iSCSI daemon needs to store some information. By default, the backing store for this device is also located in the base directory. So, if the host system has a large ZFS pool to use, it might be easiest to allow the daemon to store everything in that location. If the backing store needs to be spread out, it's possible to specify the backing store location during the creation of each logical unit.
*Create the iSCSI target – By default, the CLI assumes that the requested device type is an LBA of logical unit 0. If a pass through mode is desired for character devices, the -raw option must be used. After the creation of the first LUN, other LUNs might be created for the same iSCSI target by specifying -lun number.

The daemon starts a background task that initializes the LUN to zeros. If, during that initialization, the underlying file system becomes 100 percent full, the daemon removes the target. During this initialization, the LUN is marked as being offline and cannot be used by an initiator. During this time, however, it is possible to have an initiator discover this LUN. The Solaris initiator waits until it receives an Inventory Change notification and then automatically brings the device online.

This procedure assumes that you are logged in to the local system that contains the iSCSI targets.

1. Become superuser.

2. Identify the base directory. The base directory is used to store the iSCSI target configuration data, and needs to be defined prior to using the iSCSI target for the first time.
vidar/# mkdir -p /var/iscsi1/volume1
vidar/# iscsitadm modify admin -d /var/iscsi1/volume1

3. Create a backing store. The backing store contains the physical data storage that is exported as a target. The Solaris target supports several types of backing stores:
*Flat files
*Physical devices
*SVM meta devices
*ZFS volumes
To create a backingstore from a ZFS volume, the zfs utility can be run with the create subcommand, the create zvol option ("-V"), the size of the zvol to create, and the name to associate with the zvol.
vidar/var# zfs create -V 4G iscsi1/volume1
vidar/var# zfs list
NAME USED AVAIL REFER MOUNTPOINT
iscsi1 4.13G 716M 34.9K /iscsi1
iscsi1/volume1 4.13G 4.83G 26.6K -

4. Once a backing store has been created, it can be exported as an iSCSI target with the iscsitadm "create" command, the "target" subcommand, and by specifying the backing store type to use.
vidar/# iscsitadm create target -b /dev/zvol/dsk/iscsi1/volume1 vidar-volume1

5. To get a list of all targets you have to issue the following command. The option -v will show you the LUN ID, which is needed to delete a target.
vidar/# iscsitadm list target -v
6. To delete the target you have to issue the following command.
vidar/# iscsitadm delete target -u 0 ismine-volume01

Solaris -- ZFS

2020-06-10T21:10:43Z

WikiSysop: Die Seite wurde neu angelegt: „'''ZFS''' ist ein von Sun Microsystems entwickeltes transaktionales Dateisystem, welches zahlreiche Erweiterungen für die Verwendung im Server- und Rechenzent…“

'''ZFS''' ist ein von Sun Microsystems entwickeltes transaktionales Dateisystem, welches zahlreiche Erweiterungen für die Verwendung im Server- und Rechenzentrumsbereich enthält. Hierzu zählen die enorme maximale Dateisystemgröße, eine einfache Verwaltung selbst komplexer Konfigurationen, die integrierten RAID-Funktionalitäten, das Volume-Management sowie der prüfsummenbasierte Schutz vor Datenübertragungsfehlern. Der Name ZFS stand ursprünglich für ''Zettabyte File System'', ist aber inzwischen ein Pseudo-Akronym, wodurch die Langform nicht mehr gebräuchlich ist.vgl. [http://blogs.oracle.com/bonwick/en_US/entry/you_say_zeta_i_say''You say zeta, I say zetta'']

{{Infobox Dateisystem
|name= ZFS
|developer= Sun Microsystems
|full_name= Zettabyte File System (veraltet)
|introduction_date= Juni 2006
|introduction_os= Solaris 10
|partition_id=
|directory_struct=
|file_struct=
|bad_blocks_struct=
|max_file_size= 16 [[Binärpräfix|EiB]]
|max_files_no= 248
|max_filename_size=
|max_volume_size= 16 EiB
|filename_character_set=
|dates_recorded=
|date_range=
|forks_streams=
|attributes=
|file_system_permissions= [[POSIX]], [[Access Control List|ACLs]]
|compression= ja ([[Lempel-Ziv-Jeff-Bonwick-Algorithmus|LZJB]] und [[gzip]])
|encryption= ja (Einführung mit Oracle Solaris 11 Express 2010.11)<ref>http://www.oracle.com/technetwork/server-storage/solaris11/documentation/solaris-express-whatsnew-201011-175308.pdf</ref>
|OS= [[Solaris (Betriebssystem)|Solaris]], [[FreeBSD]]
}}

== Creating and manipulating zpools (zfs) ==
For pooling devices, zpools can be:
* a mirror
* a RAIDz with single or double parity
* a concatenated/striped storage

First we will try to look up the disks accessible by our system:
vidar/# format
Searching for disks...done

AVAILABLE DISK SELECTIONS:
0. c1t0d0 <DEFAULT cyl 10440 alt 2 hd 255 sec 63>
/pci@0,0/pci15ad,1976@10/sd@0,0
1. c1t1d0 <DEFAULT cyl 10440 alt 2 hd 255 sec 63>
/pci@0,0/pci15ad,1976@10/sd@1,0
2. c2t0d0 <VMware,-VMware Virtual S-1.0-1.00GB>
/pci@0,0/pci15ad,790@11/pci15ad,1976@2/sd@0,0
3. c2t1d0 <VMware,-VMware Virtual S-1.0-1.00GB>
/pci@0,0/pci15ad,790@11/pci15ad,1976@2/sd@1,0
4. c2t2d0 <VMware,-VMware Virtual S-1.0-1.00GB>
/pci@0,0/pci15ad,790@11/pci15ad,1976@2/sd@2,0
5. c2t3d0 <VMware,-VMware Virtual S-1.0-1.00GB>
/pci@0,0/pci15ad,790@11/pci15ad,1976@2/sd@3,0
6. c2t4d0 <VMware,-VMware Virtual S-1.0-1.00GB>
/pci@0,0/pci15ad,790@11/pci15ad,1976@2/sd@4,0
7. c2t5d0 <VMware,-VMware Virtual S-1.0-1.00GB>
/pci@0,0/pci15ad,790@11/pci15ad,1976@2/sd@5,0
Specify disk (enter its number): ^C
Type CTRL-C to quit "format".

If your disks do not show up, use 'devfsadm'.

Let's create our first pool by simply putting together all three disks (c1t0d0 is our root partition and c1t1d0 our '/var' directory which is not usable for our example)
vidar/# zpool create iscsi1 raidz c2t0d0 c2t1d0 c2t2d0 c2t3d0 c2t4d0 c2t5d0

That's it. You have just created a zpool named "iscsi1" containing all three disks. Your available space will be just the sum of all six disks.
vidar/# zpool list
NAME SIZE ALLOC FREE CAP HEALTH ALTROOT
iscsi1 5.91G 167K 5.91G 0% ONLINE -

Use "zpool status" to get detailed status information of the components of your zpool.
vidar/# zpool list
NAME SIZE ALLOC FREE CAP HEALTH ALTROOT
iscsi1 5.91G 167K 5.91G 0% ONLINE -
vidar/# zpool status
pool: iscsi1
state: ONLINE
scrub: none requested
config:

NAME STATE READ WRITE CKSUM
iscsi1 ONLINE 0 0 0
raidz1-0 ONLINE 0 0 0
c2t0d0 ONLINE 0 0 0
c2t1d0 ONLINE 0 0 0
c2t2d0 ONLINE 0 0 0
c2t3d0 ONLINE 0 0 0
c2t4d0 ONLINE 0 0 0
c2t5d0 ONLINE 0 0 0

errors: No known data errors

To destroy a pool, use "zpool destroy":
vidar/# zpool destroy zfstest

== Using zfs (basics) ==
This zpool "iscsi1" also has one incorporated zfs filesystem on it. To manipulate zfs there is the "zfs" command. So keep in mind: zpool manipulates pool storage, zfs manipulates zfs generation and options.
vidar/# zfs list
NAME USED AVAIL REFER MOUNTPOINT
iscsi1 107K 4.83G 34.9K /iscsi1

As you can see, the pool "iscsi1" also has a filesystem on it, mounted automatically at mountpoint /zfstest.
You may create a new filesystem by using "zfs create".
vidar/# zfs create iscsi1/affe
vidar/# zfs list
NAME USED AVAIL REFER MOUNTPOINT
iscsi1 157K 4.83G 34.9K /iscsi1
iscsi1/affe 34.9K 4.83G 34.9K /iscsi1/affe

New filesystems within a pool are always named "poolname/filesystemname". Without any additional options, it will also mount automatically on "/poolname/filesystemname".
vidar/# zfs create iscsi1/elefant
vidar/# zfs list
NAME USED AVAIL REFER MOUNTPOINT
iscsi1 201K 4.83G 36.5K /iscsi1
iscsi1/affe 34.9K 4.83G 34.9K /iscsi1/affe
iscsi1/elefant 34.9K 4.83G 34.9K /iscsi1/elefant

We see some differences between old-fashioned filesystems and zfs: Usable storage is shared among all filesystems in a pool. "iscsi1/affe" has 4.83G available, "iscsi1/elefant" also, as does the master pool filesystem "iscsi1". So why create filesystems then? Couldn't we just use subdirectories in our master pool filesystem "iscsi1" (mounted on /iscsi1)? The "trick" about zfs filesystems is the possibility to assign options to them, so they can be treated differently. We will see that later. First, let's push some senseless data on our newly created filesystem.
vidar/iscsi1/affe# mkfile 1g /iscsi1/affe/randomfile

This command creates a file "randomfile" in directory /iscsi1/affe, consisting of 1GB. That's big enough for our purpose. "zfs list" reads:
vidar/# zfs list
NAME USED AVAIL REFER MOUNTPOINT
iscsi1 1023M 3.83G 38.2K /iscsi1
iscsi1/affe 1023M 3.83G 1023M /iscsi1/affe
iscsi1/elefant 34.9K 3.83G 34.9K /iscsi1/elefant
1023 megabytes are used from filesystem iscsi1/affe, as expected. Notice also that now every other filesystem on that pool only can allocate 3.83G, as 1023M are taken (compare with 4.83G above, before creating that big file).

You CAN look up free space in your zfs filesystems also doing a "df -k", but I wouldn't recommend it: You won't see snapshots and the numbers can be very big.
vidar/# df -h
Filesystem size used avail capacity Mounted on
/dev/dsk/c1t0d0s0 77G 6.6G 69G 9% /
/devices 0K 0K 0K 0% /devices
ctfs 0K 0K 0K 0% /system/contract
proc 0K 0K 0K 0% /proc
mnttab 0K 0K 0K 0% /etc/mnttab
swap 2.0G 980K 2.0G 1% /etc/svc/volatile
objfs 0K 0K 0K 0% /system/object
sharefs 0K 0K 0K 0% /etc/dfs/sharetab
fd 0K 0K 0K 0% /dev/fd
/dev/dsk/c1t1d0s7 79G 3.7G 74G 5% /var
swap 2.0G 8K 2.0G 1% /tmp
swap 2.0G 32K 2.0G 1% /var/run
/vol/dev/dsk/c0t0d0/sol_10_910_sparc
2.1G 2.1G 0K 100% /cdrom/sol_10_910_sparc
/hgfs 16G 4.0M 16G 1% /hgfs
iscsi1 4.8G 38K 3.8G 1% /iscsi1
iscsi1/affe 4.8G 1023M 3.8G 21% /iscsi1/affe
iscsi1/elefant 4.8G 35K 3.8G 1% /iscsi1/elefant

So let's try out first option: "quota". As you can imagine, "quota" limits storage. You know that as nearly every mailbox provider do impose a quota on your storage, as do file space providers. First: To set and get options, you need to use "zfs set" and "zfs get", respectively. So here we define a quota on 'iscsi1/elefant'
vidar/# zfs set quota=1G iscsi1/elefant
vidar/# zfs list
NAME USED AVAIL REFER MOUNTPOINT
iscsi1 1023M 3.83G 38.2K /iscsi1
iscsi1/affe 1023M 3.83G 1023M /iscsi1/affe
iscsi1/elefant 34.9K 1024M 34.9K /iscsi1/elefant
Only 1G left to use at mountpoint /iscsi1/elefant. Note, that you may still gobble up 3.83G in /iscsi1/affe, making it impossible then to put 1G in /iscsi1/elefant. So a quota does not guarantee any storage, it only limits it.
To guarantee a certain amount of storage, use the option "reservation":
vidar/# zfs set reservation=1G iscsi1/elefant
vidar/# zfs list
NAME USED AVAIL REFER MOUNTPOINT
iscsi1 2.00G 2.83G 38.2K /iscsi1
iscsi1/affe 1023M 2.83G 1023M /iscsi1/affe
iscsi1/elefant 34.9K 1024M 34.9K /iscsi1/elefant
Now we simulated a classical "partition" - we reserved the same amount of storage as the quota implies, 1G. The other filesystems only have 2.83G left, as 1 G are really reserved for iscsi1/elefant.

Now, let's try another nice option: compression
Perhaps now you are thinking about compression nightmares on windows systems, like doublespace, stacker and all these other parasital programs which killed performance, not storage. Forget them! zfs compression IS reliable and - fast!
With todays' CPU power the effect of compressing and decompressing objects is a charm and won't harm significantly your overall performance - it can boost performance as you will need less i/o due to compression.
As with many other zfs options, changing the compression only affects newly written files/sectors. Uncompressed blocks still can be read. It's transparent to the application. fseek() et.al. do not even notice that files are compressed.
vidar/# set compression=on iscsi1/elefant

== Logical Volumes ==
A logical volume exported as a raw or block device. This type of dataset should only be used under special cir-cumstances. File systems are typically used in most environments. The volume is exported as a block device in /dev/zvol/{dsk,rdsk}/path, where path is the name of the volume in the ZFS namespace. The size represents the logical size as exported by the device. By default, a reservation of equal size is created. Size is automatically rounded up to the nearest 128 KB to ensure that the volume has an integral number of blocks regardless of blocksize.
vidar/dev# zfs create -V 4G iscsi1/volume1
vidar/dev# zfs list
NAME USED AVAIL REFER MOUNTPOINT
iscsi1 4.13G 716M 34.9K /iscsi1
iscsi1/volume1 4.13G 4.83G 26.6K -

== enable iSCSI ==
Enabling iSCSI on a zfs volume is pretty easy.
vidar/# zfs shareiscsi=on iscsi/affe
If you set 'shareiscsi=on' to 'iscsi1' then all volumes beyond will be available as iSCSI targets.

Redewendungen

2020-06-10T21:05:14Z

WikiSysop: Die Seite wurde neu angelegt: „Dunkel ist Deiner Rede Sinn. Oder anders ausgedrückt: Hä? Sachkunde kann eine lebhafte Diskussion nur behindern. ct,“

Dunkel ist Deiner Rede Sinn. Oder anders ausgedrückt: Hä?

Sachkunde kann eine lebhafte Diskussion nur behindern.

ct,