noslin005

https://www.freeipa.org/page/V4/FreeIPA-on-FIPS#:~:text=FreeIPA%20only%20supports%20fresh%20FIPS%20installs.%20Current,found%20in%20the%20official%20RHEL%20Security%20Guide. https://floblanc.wordpress.com/2023/08/23/interoperability-of-rhel-7-8-9-idm-server-and-rhel-7-8-9-idm-client/ https://oneuptime.com/blog/post/2026-03-04-samba-freeipa-compatibility-fips-mode-rhel-9/view#:~:text=Install%20FreeIPA%20Server%20in%20FIPS,Bash%20Copy https://sambaxp.org/fileadmin/user_upload/sambaxp2023-Slides/Bokovoy_sXP23_FIPS_140_3.pdf https://linuxguideandhints.com/el/freeipa/#el8-to-el9

noslin005

Create a Bootable Raw Disk

Attach Virtual Disk

sudo kpartx -avs test.img

Create Partition

sudo parted /dev/loop0 mktable msdos
sudo parted /dev/loop0 mkpart primary ext4 1 100%

sudo parted /dev/loop0 set 1 boot on

noslin005

Remove LUKS Encryption from a Encrypted Rocky Linux 9

DISCLAIMER: USE AT YOUR OWN RISK

This procedure converts a LUKS2 container to LUKS1 and then decrypts it in place using cryptsetup reencrypt --decrypt.

Warning

noslin005

#!/bin/bash
set -euo pipefail

# --- Settings ---
IMG="rocky_installer.img"
VMDK="rocky_installer.vmdk"
SIZE="20G"
LABEL="ROCKY_INSTALLER"
ISO="/VMs/isos/Rocky-9.5-x86_64-dvd.iso"
MNT_ISO="/mnt/iso"

noslin005

Socat

Receiver

socat -d -d UDP-RECV:9000,ip-add-membership=239.0.0.1:0.0.0.0,interface=eth0,reuseaddr FILE:/dev/ttyS1,raw,echo=0
socat -d -d UDP-RECV:9000,ip-add-membership=239.0.0.1:0.0.0.0,interface=eth0,reuseaddr PTY,raw,echo=0,link=/tmp/virtual-tty
socat -d -d UDP-RECV:9000,ip-add-membership=239.0.0.1:0.0.0.0,reuseaddr SYSTEM:'tee /dev/ttyS1 > /tmp/mirror'

noslin005

" Show line numbers
set number

" Allow normal pasting
set paste

" Set NPC analogues for set list
set listchars=eol:¬,tab:>-,trail:█,extends:>,precedes:<

noslin005

VXLAN+VLAN+BRIDGE+LINUX

• Both Host A and Host B are running Linux with identical VXLAN and VLAN aware bridge configurations.
• They communicate through a VXLAN overlay (ID 100) carried over multicast (239.1.1.1) on UDP port 4789.
• VLANs are extended across the VXLAN tunnel.
• Subinterfaces br0.10 and br0.20 provide access to specific VLAN networks (10 and 20).
• Devices on the same VLAN across hosts can directly communicate as if they are on the same Layer 2 segment.

Use iproute2 tools (testing)

noslin005

unbind C-b
set-option -g prefix C-a
bind-key C-a send-prefix

bind | split-window -h
bind - split-window -v
unbind '"'
unbind %

bind -n F5 setw synchronize-panes

noslin005

Firewall

# INTERNAL ZONE
firewall-cmd --set-default-zone=internal
firewall-cmd --zone=internal --add-interface=bond0 --permanent
firewall-cmd --zone=internal --add-service={dhcp,tftp,http,https,dns,nfs,mountd,rpc-bind} --permanent

DHCP

noslin005

[:b1dcc9dd-5262-4d8d-a863-c897e6d979b9]
background-color='rgb(23,20,33)'
font='Cascadia Code 16'
foreground-color='rgb(208,207,204)'
palette=['rgb(0,0,0)', 'rgb(205,0,0)', 'rgb(0,205,0)', 'rgb(205,205,0)', 'rgb(0,0,238)', 'rgb(205,0,205)', 'rgb(0,205,205)', 'rgb(229,229,229)', 'rgb(127,127,127)', 'rgb(255,0,0)', 'rgb(0,255,0)', 'rgb(255,255,0)', 'rgb(92,92,255)', 'rgb(255,0,255)', 'rgb(0,255,255)', 'rgb(255,255,255)']
use-system-font=false
use-theme-colors=true