Blogs on Here be dragons

Back when we started with a signed shim in Debian, the tooling was Windows-only and required me to do a reboot dance and it was all quite tedious.

Debian uses LDAP for storing information about users, hosts and other objects.

OpenSSH has this very nice setting, VerifyHostKeyDNS, which when enabled, will pull SSH host keys from DNS, and you no longer need to either trust on first use, or copy host keys around out of band.

I moved my blog around a bit and it appears that static pages are now in favour, so I switched to that, by way of Hugo.

I’ve had a half-broken temperature monitoring setup at home for quite some time.

Apparently, people care when you, as privileged person (white, male, long-time Debian Developer) throw in the towel because the amount of crap thrown your way just becomes too much.

I’m running a local unbound instance on my laptop to get working DNSSEC.

Dustin Kirkland recently wrote that “Fingerprints are usernames, not passwords”.

NSCA is a tool used to submit passive check results to nagios.

Recently, there’s been discussions on IRC and the debian-devel mailing list about how to notify users, typically from a cron script or a system daemon needing to tell the user their hard drive is about to expire.

Update: This isn’t actually that much better than letting them access the private key, since nothing is stopping the user from running their own SSH agent, which can be run under strace.

Over the last couple of weeks, I have been working on getting binary packages for Varnish modules built.

Michael Biebl and I are giving a talk on systemd in Debian at FOSDEM on Sunday morning at 10.

gitano is not entirely unlike the non-web, server side of github.

We recently switched from Buildbot to Jenkins at work, for building Varnish on various platforms.

At work, we have a rotation of who is on call at a given time.

Before I start, I’ll admit that I’m not a real RPM packager.

We use SugarCRM at work and I’ve complained about its not-very-RESTy REST interface.

Just this morning, I was setting up TLS on a LDAP host, but slapd refused to start afterwards with a bizarre error message: TLS init def ctx failed: -207 The key and certificate was freshly generated using openssl on my laptop (running wheezy, so OpenSSL…

It’s sometimes necessary to be able to access HTTP resources from inside VCL.

A while ago, we got another machine for hosting Alioth and so we started thinking about how to use that machine.

Every so often, we get bug reports about Varnish leaking memory.

Last night, I finally got my temperature sensors going, including a nice and shiny munin plugin giving me pretty graphs.

I recently got my hands on a Kenwood AT641, a fruit juicer attachment for the Chef/Major series of kitchen machines, and now I’ve had the pleasure of actually using it.

Ben Nevis is the tallest mountain on the British Isles and also the name of one of the beers that the Bridge of Allan brewery makes.

GNOME’s current sysadmin team is entirely volunteer-based, but as they are having problems finding enough (trusted) volunteers they are looking at hiring a part-time sysadmin.

Russell Coker recently reviewed the Yubikey.

I recently upgraded kemper.freedesktop.org to lenny.

Lucas asks about how free the N900 is, whether he can download and recompile and reflash.

I’ve been using an iphone since late 2007 as my primary phone and so I’ve gotten quite a few contacts and SMS conversations stored on it.

Collabora was kind enough to buy N900s for all its employees.

In my last post about the ekey, I complained about two things: memory leak in the server and missing reconnects if the client was disconnected for any reason.

As 3.0 format packages are now allowed into the archive, I am thinking about what I would like the workflow to look like and hoping one of them fits me.

Back at the Debian barbeque party at the end of August, I got myself an EntropyKey from the kind folks at Simtec.

Dear whoever runs the Telefonica APs in both Rio de Janeiro and Sao Paulo airports: Your DNS servers are returning SERVFAIL and has been doing so for quite a while.

A little while ago, I read robster’s post about librest, and it looked quite neat.

Currently, varnishlog does not support very advanced filtering.

It is sad to see how people complain about how packaging Ruby gems is painful.

qurzaw (0.0.0.0) Fri Nov 28 21:34:28 2008 Keys: Help Display mode Restart statistics Order of fields quit Last 60 pings 1. 10.125.123.1 ..................…

I tend to have a bunch of reference material stored in my home directory.

Part of my job nowadays is regular Linux consulting for various clients.

(when your wife/SO is not around) Finally get around to play with the PowerPC you have had standing besides your desk for about a month.

A little while ago, I discovered Emacs has D-Bus support now.

I finally got around to releasing eweouz 0.2 tonight.

I just released the first version of eweouz, the interface between emacs and evolution-data-server.

Today, I submitted my two first patches to the kernel.

Some years ago, when I hacked on a TDB backend for Evolution Data Server (EDS), I also wrote something about writing some command line tools for accessing my contacts and so on.

Various people have been posting about what to do when the zombies attack.

(This post is mostly as a reminder to myself on how I’ve set up my backup system.

15:58 [Canonical] -!