Lenovo released the firmeware v1.33 for ThinkPad P1 Gen1 recently which addressed many CVEs. CHANGES IN THIS RELEASE Version 1.33 [Important updates] - Update includes a security fix. - Addresses CVE-2020-0587, CVE-2020-0588, CVE-2020-0590, CVE-2020-0591, CVE-2020-0592, and CVE-2020-0593. (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0587) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0588) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0590) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0591) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0592) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0593) [New functions or enhancements] - Updated the Diagnostics module to version 04.15.000. [Problem fixes] - Nothing It’s worth noting that this 1.33 version is not yet available via fwupdmgr. So to update it, just download the firmeware zip file from Lenovo website. Then, manually install it. There are 2 files in the zip, and I only need to install 1 of them. ...

CockroachDB has been on my to-check-out list for a very long time. So during this break, I want to spend sometimes to get familiar with it. Who know, maybe it be also be used at work. I’m checking it out their Rust sample program. In that program, the user’s credential used to connect to the database is done with certificate. So, I need to know how to do generate a user (or also known as client) certificate and key. ...

As of today, there is no official build for Hugo extended for Linux ARM. Therefore, we need to build it ourselves. Prerequisite: build-essential package go1.15.3.linux-arm64 compiler export VERSION=0.79.1 curl -O -L https://github.com/gohugoio/hugo/archive/v$VERSION.tar.gz tar -xzf v$VERSION.tar.gz cd hugo-$VERSION go build --tags extended sudo cp hugo /usr/local/bin Hugo Static Site Generator v0.79.1/extended linux/arm64 BuildDate: unknown I built Hugo on Odroid C2, and it took over 10 minutes. I think a better way is to cross build Hugo on an x64 machine; but I haven’t tried it yet. ...

This upgrade applies to the self-hosted engine of oVirt Manager. We need to first put the oVirt environment to the global maintenance mode. [root@trex ~]# hosted-engine --set-maintenance --mode=global To check the availability of oVirt Manager, run engine-upgrade-check command on the oVirt Manager machine. [root@ovirtm ~]# engine-upgrade-check ...omitted... VERB: Queue package ovirt-engine-setup for update VERB: Building transaction VERB: Transaction built VERB: Transaction Summary: VERB: install : ovirt-engine-setup-plugin-cinderlib-4.4.4.5-1.el8.noarch VERB: install : ovirt-engine-setup-base-4.4.4.5-1.el8.noarch VERB: install : ovirt-engine-setup-4.4.4.5-1.el8.noarch VERB: install : ovirt-engine-setup-plugin-websocket-proxy-4.4.4.5-1.el8.noarch VERB: install : ovirt-engine-setup-plugin-vmconsole-proxy-helper-4.4.4.5-1.el8.noarch VERB: install : ovirt-engine-setup-plugin-ovirt-engine-common-4.4.4.5-1.el8.noarch VERB: install : ovirt-engine-setup-plugin-ovirt-engine-4.4.4.5-1.el8.noarch VERB: install : python3-ovirt-engine-lib-4.4.4.5-1.el8.noarch VERB: install : ovirt-engine-setup-plugin-imageio-4.4.4.5-1.el8.noarch VERB: remove : python3-ovirt-engine-lib-4.4.3.12-1.el8.noarch VERB: remove : ovirt-engine-setup-4.4.3.12-1.el8.noarch VERB: remove : ovirt-engine-setup-base-4.4.3.12-1.el8.noarch VERB: remove : ovirt-engine-setup-plugin-cinderlib-4.4.3.12-1.el8.noarch VERB: remove : ovirt-engine-setup-plugin-imageio-4.4.3.12-1.el8.noarch VERB: remove : ovirt-engine-setup-plugin-ovirt-engine-4.4.3.12-1.el8.noarch VERB: remove : ovirt-engine-setup-plugin-ovirt-engine-common-4.4.3.12-1.el8.noarch VERB: remove : ovirt-engine-setup-plugin-vmconsole-proxy-helper-4.4.3.12-1.el8.noarch VERB: remove : ovirt-engine-setup-plugin-websocket-proxy-4.4.3.12-1.el8.noarch VERB: Closing transaction with commit Upgrade available. To update the setup packages, issue the dnf update ovirt*setup* command. ...

This is quick note on how to configure an oVirt Manager or RHV Manager to use the FreeIPA to provide user external authentication. Here’s my servers’ information: IPA server: ipa.angkorian.io (CentOS 8.3.2011) oVirt Hosted-Engine: ovirtm.angkorian.io (CentOS 8.3.2011) IPA user: ovirtadmin First, open SSH connection to ovirtm as root and ensure that ovirt-engine-extension-aaa-ldap-setup package is installed. Here is a tip to figure out the name of this package - I’d search for ovirt*ldap. ...