Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)H

Hercules

@ Hercules @lemmy.world

Posts
5
Comments
18
Joined
3 yr. ago

  • Trouble automounting a LUKS parition that is on a mdadm raid6

    Jump

  • Just to give you an update. The other keyslot was the key i added earlier for testing which i removed ... So its time for me to copy over a lot of data to another system en recreate the luks volume. Thanks for your help!

  • Trouble automounting a LUKS parition that is on a mdadm raid6

    Jump

  • :D while your steps were very clear i think i fked up.

    cryptsetup luksAddKey /dev/mapper/raid /etc/crypttab.d/keyfile-data.bin --new-key-slot 1 gave: Device /dev/mapper/raid is not a valid LUKS device.. I assume this is a typo from your end since /dev/md0 is my luks volume. But altering this gave me: slot is already in use kind of error.

    That can be explained since i tested something simular like you suggested earlier. Afterwhich i removed my key i generated and added to the volume. Then i did cryptsetup luksRemoveKey /dev/md0.

    Now when i try to add it i get No key available with this passphrase.

    I don't have enough knowledge about cryptsetup to know what excactly i did wrong.

    Do you by any change have an explaination?

    In case this is usefull:

     
        
[root@nfs-rocky-1 ~]# cryptsetup luksDump /dev/md0
LUKS header information
Version:       	2
Epoch:         	6
Metadata area: 	16384 [bytes]
Keyslots area: 	16744448 [bytes]
UUID:          	485df758-6cec-49e3-aceb-438aaaedc833
Label:         	(no label)
Subsystem:     	(no subsystem)
Flags:       	(no flags)

Data segments:
  0: crypt
	offset: 16777216 [bytes]
	length: (whole device)
	cipher: aes-xts-plain64
	sector: 4096 [bytes]

Keyslots:
  1: luks2
	Key:        512 bits
	Priority:   normal
	Cipher:     aes-xts-plain64
	Cipher key: 512 bits
	PBKDF:      argon2id
	Time cost:  4
	Memory:     1048576
	Threads:    4
	Salt:       17 c5 ff 7f b9 10 43 41 16 5a c8 28 44 b9 df 64
	            a8 1d 40 41 9f a1 70 85 34 06 52 8d ba 29 bd ef
	AF stripes: 4000
	AF hash:    sha256
	Area offset:290816 [bytes]
	Area length:258048 [bytes]
	Digest ID:  0
  2: luks2
	Key:        512 bits
	Priority:   normal
	Cipher:     aes-xts-plain64
	Cipher key: 512 bits
	PBKDF:      argon2id
	Time cost:  12
	Memory:     1048576
	Threads:    4
	Salt:       64 97 db 49 f1 18 b9 57 3b 02 53 37 b3 11 8e 44
	            71 d1 70 b2 b9 58 4c db e2 6b 36 95 7c dd d2 be
	AF stripes: 4000
	AF hash:    sha256
	Area offset:548864 [bytes]
	Area length:258048 [bytes]
	Digest ID:  0
Tokens:
Digests:
  0: pbkdf2
	Hash:       sha256
	Iterations: 105703
	Salt:       ae ac f1 9f df 47 27 9e 64 28 52 53 9a 9b cd 77
	            74 15 66 f6 8b 3c bd f4 29 dc f1 b1 c5 15 3b f6
	Digest:     07 5f 2f 6b d3 c5 bf b6 54 58 5e b4 44 df 8c b8
	            2b da fa 5c 40 a5 89 cc 0e 3b 70 69 57 d5 7c f5
[root@nfs-rocky-1 ~]#

  • Trouble automounting a LUKS parition that is on a mdadm raid6

    Jump

  • Is the /etc/crypttab.d path that you are using specificly chosen or can it be whatever? This path doesn't exists on my system and online i don't see any mentions of it.

  • Trouble automounting a LUKS parition that is on a mdadm raid6

    Jump

  • Thanks for your response!

    I will give it a try. Have a great rest of your day!

  • Selfhosted @lemmy.world
    Hercules @lemmy.world

    Trouble automounting a LUKS parition that is on a mdadm raid6

  • Openwrt how to block countries but allow a specific path using BanIp

    Jump

  • path is part of the http protocol. Most firewalls only parse the first couple layers (ethernet->ip->tcp/udp), not http as well, unless they do deep package inspection. Idk if openwrt/banip has functionality

    I don't think openwrt can do this. Im running k3s with nginx as ingress but the issue is it doesn't see the actual ip but rather the ip of the container so i can't use nginx to block countries.

  • Openwrt how to block countries but allow a specific path using BanIp

    Jump

  • That is what i currently have setup but cert-manager is giving me a headache and not working correctly so im looking into http instead since its easier to setup

  • Selfhosted @lemmy.world
    Hercules @lemmy.world

    Openwrt how to block countries but allow a specific path using BanIp

  • Realities of hosting a tor relay node at home

    Jump
    1. simply don't run an exit node (from home)
    2. run you relay no mether the type of a cheap vps that's tor friendly

  • [SOLVED] How to install psql extention (VectorChord) in bitnami/postgresql

    Jump

  • Oh alright, thanks a lot for your explanation. I learned a lot, im going with the operator route!

    Thank you for your help!

  • [SOLVED] How to install psql extention (VectorChord) in bitnami/postgresql

    Jump

  • Thanks for your response, could you explain what the advantages of an operator are in this example?

    And what is the matter with the licensing? I never heard this issue before.

    The link that you attached looks like it is for the pgvecto.rs extention instead of vectorchord.

  • Selfhosted @lemmy.world
    Hercules @lemmy.world
    SOLVED

    How to install psql extention (VectorChord) in bitnami/postgresql

  • Questions regarding k8s ingress

    Jump

  • Ceph is really cool, i also wanna use it in the future but i need way more disks for that :). Are those 25 worker nodes virtual machines? How did you attatch the disks to the ceph nodes?

  • Questions regarding k8s ingress

    Jump

  • Im not using any hypervisor (yet), but in the feature im probably going to look at proxmox.

    Never heard of cloudstack before but what i just read and what you described sounds really intresting!

    27 nodes in 12 minutes sounds insane :)

  • Questions regarding k8s ingress

    Jump

  • Other people also recommanded this to me, i will take a look at it! Thanks!!!

  • Questions regarding k8s ingress

    Jump

  • Oh alright, thanks for explaining!

  • Questions regarding k8s ingress

    Jump

  • And does this work for ingress? I searched a little bit around but as far as i understand metallb is for k8s services?

  • Questions regarding k8s ingress

    Jump

  • Thanks for your reply, i havent look into metallb before but i will try it out!

  • Questions regarding k8s ingress

    Jump

  • Currently I only will need to use it for k8s so kube-vip will do the job for now.

  • Questions regarding k8s ingress

    Jump

  • Thanks for your response!

    I haven't used keepalived or haproxy before, but i quickly took a look at it. Do you mean i should setup 2 new vms which run keepalived an ha proxy?

    While looking at keepalived i remembered reading about kube-vip https://kube-vip.io/. Couldnt this also help me with the issue? Since this also uses a vip and 1 node gets elected and its able to inform the network which node this is?

  • Selfhosted @lemmy.world
    Hercules @lemmy.world

    Questions regarding k8s ingress

  • Selfhosted @lemmy.world
    Hercules @lemmy.world

    Looking for a crossplatform backup solution over https