Fix Duplicating Certificates in FreeIPA

While practicing with certificates reqeust using FreeIPA, I came across this duplicated certificates for the first time. This happened because I also practiced the same thing a few weeks ago. Here is how to re-produce this message: [root@client ~]# ipa-getcert request \ -f /etc/vsftpd/certs/cert.pem \ -k /etc/vsftpd/certs/cert.key \ -K ftp/client.lab.example.net \ -D client.lab.example.net Certificate at same location is already used by request with nickname "20201008131445". Because I’m still not familiar yet with FreeIPA on this certificate topic, I turned to Google search and found very useful information on this blog post: Dealing with Duplicate SSL certs from FreeIPA. ...

October 30, 2020 · 3 min · 450 words · kenno

BIOS Firmware for ThinkPad P1 Gen1 1.32

Lenovo just released a new BIOS firmware for its ThinkPad P1 Gen 1, v1.32. This version fixes a few issues, as well as update the CPU microcode. Here is the changes from Lenovo’s website. CHANGES IN THIS RELEASE Version 1.32 [Important updates] - Addresses CVE-2020-8696, CVE-2020-8698 - Addresses CVE-2020-8694, CVE-2020-8695 [New functions or enhancements] - Updated the CPU microcode. [Problem fixes] - Fixed an issue where system might hang up at POST when some KVM device was connected. - Fixed an issue where the screen might not be displayed on Thinkpad LCD when opened lid just before startup Windows. - Fixed an issue where system might not boot from network which is connected to ethernet of Thunderbolt3 WS Dock when boot mode is Legacy mode. - Fixed an issue where system might hang at POST when Thunderbolt3 WS Dock is attached. - Fixed an issue where BIOS might generate 0288 beep error. I haven’t had time to update this 1.32 on my machine yet, though I think the update would be just as smooth as previous release on Fedora 32 system. ...

October 25, 2020 · 1 min · 203 words · kenno

Firewalld, nftables, and libvirt on Gentoo

After many and many weeks, I finally got libvirt working on this Gentoo machine. Before revealing how I’ve fixed this problem, let’s go through what the issues were. On this Gentoo I run Firewalld with nftables as backend. An alternative to nftables is iptables, but since nftables is newer and is becoming the default backend for more and more distribution including Fedora, I think it’s a good thing to adobt it early. ...

October 17, 2020 · 4 min · 801 words · kenno

Tmux - Open Terminal Failed Can't Find Terminfo Database

Apart from being an aparent Linux user, I’m also a fan of FreeBSD. A few years ago I challenged myself to perform all work related tasks on a FreeBSD machine for 6 months. It turned out that FreeBSD’s been working out quite well as a general usage work desktop. Today, I’d like to share a quick solution to a small annoying issue that may or may not affect you when you’re using FreeBSD. Basically, when I ssh from my Linux machine, which uses Alacritty terminal, to the remote FreeBSD machine at work I am not able to resume my tmux session. ...

October 15, 2020 · 2 min · 267 words · kenno

Cleaning Up Systemd Journal Logs

“Bad boys, whatcha want. Watcha want, whatcha gonna do when the root is full?” Actually, what are you gonna do when the journald taking up lots of space? For example, during the operating system upgrade on my desktop, the free space on / is not sufficient. Error Summary ------------- Disk Requirements: At least 5643MB more space needed on the / filesystem. So, I check how much space the systemd-journald log was consuming: ...

October 10, 2020 · 1 min · 142 words · Kenno