Greg / is on Nostr

Annoying SysAdmin.
I like books, Linux, FreeBSD, networking, etc.
And Coffee. I love coffee.

One of my hobbies is cursing on microsoft tools. I HATE them.
I believe excel should be nuked from the orbit.
So-called 'ai' makes me sick

:x!

---

Last Notes

2025-03-02 00:22:08

- reply

@nprofile…5k2y
Most of resolvers I've tried respond with SERVFAIL
1.1.1.1 sometimes responds with something - maybe they have it still in cache.
$ dig cancer.gov +rrcomments +multiline +trace
; <<>> DiG 9.20.6 <<>> cancer.gov +rrcomments +multiline +trace
;; global options: +cmd
. 246 IN NS b.root-servers.net.
. 246 IN NS c.root-servers.net.
. 246 IN NS j.root-servers.net.
. 246 IN NS i.root-servers.net.
. 246 IN NS m.root-servers.net.
. 246 IN NS h.root-servers.net.
. 246 IN NS l.root-servers.net.
. 246 IN NS k.root-servers.net.
. 246 IN NS f.root-servers.net.
. 246 IN NS d.root-servers.net.
. 246 IN NS e.root-servers.net.
. 246 IN NS a.root-servers.net.
. 246 IN NS g.root-servers.net.
. 246 IN RRSIG NS 8 0 518400 (
20250313220000 20250228210000 26470 .
evPNgQwrjlaoz5D1EKya3E6Ap0JxxPCkGs2ibHy+WgBB
XZCTMNYP79XwRcft9Q4Evt8vZUZzZnBVOB85aPfslipW
I5Wi/2Y+vYuPnJH2Hr1hMmPUwm9unTQrbNCMt1vqthHj
+vqEVypF3Uo+swFfszJfMI/CLV5OsWTgaD76tMPD7wzW
Mp4+wagbkW374bAetgIAR4G2PmObrlOp9bKkBoiGeX7L
GUlJmxHtI5vLIcuri9PK9zPLNvjZiol+OBUcH3dz7bfT
SJ+kCcCSrfHd//DlINssoadn/o6qNYWOMTHHQ9VHXAiU
oPvCweilz+0HbSgMtxcJUVZWH42FzRJE4Q== )
;; Received 525 bytes from 127.0.0.53#53(127.0.0.53) in 2 ms
gov. 172800 IN NS a.ns.gov.
gov. 172800 IN NS b.ns.gov.
gov. 172800 IN NS c.ns.gov.
gov. 172800 IN NS d.ns.gov.
gov. 86400 IN DS 2536 13 2 (
0BAF26B7BBF313A859046FD3B1EE49DDFBA33934CFB3
E717C21E2A2935C2F259 )
gov. 86400 IN RRSIG DS 8 1 86400 (
20250314170000 20250301160000 26470 .
kOftVq94jRvBv5VEF3wS74IL8ZyUReOfMKfoiEu7tsUZ
ot26RAQLL6VIHZVN/MwBBK4C3qopiIFLMHQCy+OkPy75
hxVCdMX0mizlkEpj80h63/3meGI2oWptspc91mhz73Dq
lRZvoNY4KO0tpft5SCBu16P4QElCsR8eICS/acTsZZcS
0NP4A8FWdHgvi78RjMPR5X3vf5xwyqnc/zeQ6zfpmSZj
9AoyrCOVAEMZUIp8SsVKEPYBqe6Uj3hyUEm1FyKb4Fwb
9fSVzAanECb0DwtfdUYLgyJuNo1P0Pngy8CpjxF7k9ad
/xDpKPWkIv13fVciEPXtfYN5kaX9FMJhqA== )
;; Received 617 bytes from 2001:500:2f::f#53(f.root-servers.net) in 14 ms
cancer.gov. 10800 IN NS ns.nih.gov.
cancer.gov. 10800 IN NS ns2.nih.gov.
cancer.gov. 10800 IN NS ns3.nih.gov.
cancer.gov. 3600 IN DS 40045 8 2 (
2C71722D8BA07044DC1C2FC424CDE6B3CAB023B2065B
214CAFDDD305F8716511 )
cancer.gov. 3600 IN RRSIG DS 13 2 3600 (
20250303011558 20250228231558 35496 gov.
94/t6KRQh+NT4HIv8buNTcARh8VUuP9BnbAHSsRbzZGG
8HPsye5gY3RqNHd3lv8dxssNkivwZ5qhlOUo3NAqog== )
couldn't get address for 'ns2.nih.gov': not found
couldn't get address for 'ns3.nih.gov': not found
;; Received 291 bytes from 199.33.233.1#53(d.ns.gov) in 13 ms
;; communications error to 128.231.128.251#53: timed out
;; communications error to 128.231.128.251#53: timed out
;; communications error to 128.231.128.251#53: timed out
;; no servers could be reached

2025-03-01 23:12:58

Huh, running my cheap* Mellanox ConnectX-3 (infiniband) in eth mode on #FreeBSD was easier than I thougt.
Just add
mlx4en_load="YES"
to /boot/loader.conf,
# Mellanox
sys.device.mlx4_core0.mlx4_port1=eth
sys.device.mlx4_core0.mlx4_port2=eth
to /etc/sysctl.conf, and that's it, it works, 10Gb connectivity.
Important thing is, that if you use breakout cable (like I do, because it was less than half the price of QSFP-to-SFP+ transceiver, literally just 50 PLN/12 Euro)), only one transceiver is working (in my case they were marked, number '1' is working).
less than 50 Euro

2024-11-15 18:29:01

- reply

@nprofile…vdjy I believe that newer(newest?) versions of GPG can, in specific condition, use AEAD.
Not that it makes a lot of difference in real world, looking at how many many Linux distros are still using old versions... or people are using 10+ years old keys.