champtar

In OpenWrt (Linux distro for routers that often don't have RTC) dnsmasq starts with `--dnssec-no-timecheck` until the ntp client gets a first sync (https://github.com/openwrt/openwrt/commit/5acfe55d7139a52941...)

The ssh public key might also be interesting, given the opsec failures, they might have used it for other accounts / at other providers

Bad DIMM is a thing, even more so on consumer HW that lack ECC. I recommend you run memtest

To make Jira faster ?

I agree that intra node encryption, if implemented by sidecars, is just wasting CPU cycles.

Small note, unless it has changed recently, containerd default capabilities list includes CAP_NET_RAW, so hostNetwork=true pods can sniff all traffic.

All binaries on a classic Linux distro are stripped (you can use 'file' to quickly check some), so your issues might be worth reporting

Number of DIMM is important, I know the standard BOM at my company has way more memory that we use just to have more bandwidth.

OVH (except for APAC data centers), I think Scaleway also has bandwidth included.

The mailing list announcement might be a better link https://lists.openwrt.org/pipermail/openwrt-devel/2024-Janua...

Just use a secret path, subdomain will always leak via DNS. You can also disable access logs on anything else than the secret path and cut the noise drastically.

I see that they already have the TCP MSS info but not sure it's part of the score, low MSS is a pretty obvious indicator. (Without VPN 1452, with Wireguard 1240)

I often join the daily standup meeting of the support and deployment team so I can 'watch' them and it has been really valuable. Sometimes giving them tips & tricks, sometimes just listening to newcomers questions to learn what is not simple enough, learning some awful workaround they come up with instead of asking/opening a ticket, and also learning their bad habits.

French NPP can vary their power output 80% up or down in 30 min (https://fr.m.wikipedia.org/wiki/Production_pilotable_d%27%C3...)

Yes they do, it's called Tchap, no idea how well it works https://tchap.beta.gouv.fr/

Edit: reading a bit more about it they will be able to use both Olvid and Tchap, to have a Tchap account you must be a public sector employee so Olvid will be a way to communicate with external contact I guess.

One thing that isn't going strong is the initially standardized framing for Ethernet, ie most traffic uses Ethernet II and not 802.2 LLC/SNAP.

https://en.wikipedia.org/wiki/Ethernet_frame#Types

The page mentions Ubuntu 13.04 and doesn't mention BBR, is the project still active ?

Just wait 25 years and you should be good

I don't know how often it's a problem, but I work for a company doing software video encoding, and we always fill up all the dimm slots on servers to have as much bandwidth as possible, even if we have only really use maybe 1/4 of the RAM.

I'm not sure any of the standard Linux tools can show you memory bandwidth usage easily (maybe perf), I know we use Intel PCM (https://github.com/intel/pcm) and AMDuProfPCM (https://www.amd.com/en/developer/uprof.html)

Having an Allowlist of ethertype (ARP/IPv4/IPv6) is an extremely good idea IMO, as Windows and Linux are extremely permissive in what they accept on L2: https://blog.champtar.fr/VLAN0_LLC_SNAP/

Do you have some links ? For me you can't sell without VAT if the person doesn't have a VAT number. In your exemple they don't seel a good but a service to order the good, VAT still need to be paid.

"OpenWrt 23.05 supports over 1750 devices" this makes it pretty much impossible to do anything unattended, you will always break something, don't think anyone wants to take the responsibility.

Now there is Attended Sysupgrade https://openwrt.org/docs/guide-user/installation/attended.sy... which makes it really easy to upgrade the whole system, but the user has to launch the process.

I got a Btrfs RAID1 corrupted 3 times, so I was loosing faith in Btrfs, then I ran memtest and found out I had a bad memory stick causing real data corruption, not a Btrfs bug.

OpenWrt packages repo accepts pretty much all open source packages, would love to see efforts directed there to improve the experience.

It's still alpha, but it's there https://kubernetes.io/docs/concepts/architecture/nodes/#swap...

This will collect 0 telemetry from CI builds, so some data will need to be taken with a big grain of salt. I don't have data to prove it, but I would bet most cross-compile happen in CI and not on the dev laptop.

Here a cheap reseller of Ubiquiti / Mikrotik / TPLink / ... based in Poland: https://www.ip-sa.com.pl (not affiliated, have been a customer since 2011)

Even if you don't buy from them it can give you an idea of what exists, some price ranges and availability. Some outdoor devices (small router + integrated antena + pole mount + weather proof) can be cheaper than a raspberry pi alone, example the TPLink CPE605 cost ~40€ without taxes.

Look for hardware that is supported by OpenWRT, so that all community firmware should work.

Python http.server doesn't handle concurrent requests, so it works pretty well until it doesn't. Example don't use it to serve an ISO to iLO/iDRAC, boot will fail.

I've had multiple time to factory reset Dell iDrac when some commands where failing with never seen before internal errors. Thankfully you can factory reset but keep network config, so no need for physical access.

Europe is many different countries with different electric code

100% agree, if it trip something need to be fixed, that's as simple as that.