Posts
-
Offline domain join - djoin.exe
-
Attach a physical disk to a QEMU VM
-
RHCSA: Pass!
-
Managing password aging with /etc/login.defs, passwd, and chage
-
Determining which filesystems are present on mounted or unmounted volumes
-
Setting default file permissions with umask
-
NTP - chrony and timedatectl
-
Archival/compression utilities on Linux
-
Working with SELinux (RHCSA-level)
-
Working with journald
-
Links and inodes!
-
RHCSA/EL10 - bootloader, initramfs, kernel arguments, resetting the root password, oh my
-
Linux md RAID benchmarks on 4 Kioxia PM5s
-
Linux md RAID layouts
-
AZ-104: Pass!
-
An Active Directory security checklist
-
Intro to Azure Functions
-
Configuring the cloud Kerberos trust - Kerberos SSO to domain resources with WHfB for Entra-joined clients
-
Creating a cloud-init VM template for AlmaLinux 10 on Proxmox VE
-
Regenerating HTTP certs in an Elasticsearch cluster
-
Performing a partial or full restore of an Elasticsearch cluster from a snapshot
-
Building out a test 3-node Elasticsearch 9 cluster on AlmaLinux 9
-
Migrating Libvirt VMs to Proxmox VE by importing qcow2 disks to Ceph
-
PVE/Ceph hyperconverged cluster build/Ceph performance tuning
-
Failing to build a Proxmox + LINSTOR (DRBD) HCI cluster (ft. RDMA and ewaste!)
-
Flash Mellanox ConnectX-3 Pro firmware (CX314A-BCCT to CX354A-FCCT)
-
Using Fluent Bit on Windows to ship event logs to VictoriaLogs
-
1, 10, 25, 40 gig NIC shopping list
-
IBM V7000 Expansion Module 2076-224 24SFF SAS2 disk shelves (Xyratex EB-2425-E6EBD)
-
Windows Encrypted File System basics
-
accurately generate SELinux policy with audit2allow
-
smartd > {eml,ntfy} on Alma 9 & 10, PVE 9
-
systemd-journal-upload on AlmaLinux
-
basic Postfix config
-
NixOS root on (mirrored) ZFS
-
NixOS root on (natively encrypted) ZFS
-
NixOS root on (plain) XFS
-
Point PVE system at a custom loopback interface to allow dynamic IPs without dependencies
-
Migrating guests between incompatible versions of QEMU
-
Proxying the Proxmox VE & Backup Server web UIs with NGINX
-
Proxmox VE & Backup Server built-in ACME cert renewal
-
Renaming a standalone Proxmox node with guests
-
Install a root certificate on Proxmox VE, BS, DM
-
ipmitool
-
Testing and stressing spinning drives
-
USB-C laptop docks
-
Azure Container Instances fundamentals & quick lab
-
Registering Azure resource providers
-
Notes on adding Trusted Locations via registry/rant about M365 Business
-
Quick thoughts on M3 15" Mac Air
-
Custom Google Search string to not show AI overview
-
Mellanox SX6036 basics (setup, licensing, noise, power, VPI)
-
Sending mail with Python via the Microsoft Graph API
-
Azure Application Gateway (HTTP load balancer) lab
-
PowerShell Core (Microsoft Graph and Az) in a toolbox container on your Linux box
-
Microsoft MD-102 (Endpoint Administrator): Pass!
-
Configuring silent OneDrive sign-in and Known Folders sync
-
Onboarding Microsoft Defender for Endpoint with Intune
-
Microsoft Intune Assignment Filters
-
Notes on managing Android devices with Microsoft Intune
-
Deploying Windows LAPS for client PCs with Microsoft Intune
-
Configuring Firefox via policy (registry)
-
Hardening and customizing Google Chrome via policy (registry)
-
Setting up Cockpit with Certbot and a private CA with an ACME endpoint
-
Building out a signing certificate authority that supports ACME with step-ca and an OpenSSL root
-
Using OpenSSL to generate a root certificate (using OpenSSL on a Linux server as a root certificate authority)
-
Why doesn't Windows support modern cryptography?
-
Installing Wiki.js (PostgreSQL, NGINX) on AlmaLinux 10
-
Fixing duplicate artist names in local FLAC files played by Spotify
-
Using Grafana Alloy on Windows to export (push) metrics (from Prometheus) and logs (from Loki)
-
Passing a function to a PowerShell subprocess (without making a terrible, terrible mess)
-
Enumerating user profiles on a device with PowerShell
-
Quick thoughts on & power consumption of Supermicro 6028 with X10DRU-TR4T+
-
Using the Dell Command | Update CLI to update drivers from PowerShell
-
Dell Latitude 7320 Detachable (PC tablet) review - hardware, Windows 11, Fedora 42
-
Removing lingering VMware PowerShell modules
-
Changing a Linux username
-
Performing an in-place upgrade from Alma 9 to Alma 10 with LEAPP and ELevate
-
Updating the osinfo database on a Linux hypervisor
-
SSH agent forwarding
-
Listing and removing RPM GPG (PGP) keys
-
Configuring a Server 2008 R2 domain
-
Setting up a Windows 7 box in mid 2025
-
Lazy PowerShell ssh-copy-id for Windows with SSH keys stored in 1Password
-
Configuring LACP bonds & VLAN bridges with nmcli
-
Installing Ninja Remote (NinjaRMM remote session utility) on Linux with Wine
-
Poking at the Intel Management Engine (vPro Enterprise, AMT) for IPMI-like remote access on a M920q
-
Quick and dirty - install KB5002623 fix for Office 2016 crashing after KB5002700 installation via executable patch
-
Cleaning up ghost Saved-Critical Hyper-V VMs after nuking all their files
-
Maxxing out my P1 Gen 4 with an RTX A5000 16gb and an i9-11950H (for science)
-
Looking at filesystem types on disks from Linux
-
The setuid, setgid, and sticky special file permissions bits
-
Adventures with secedit.exe and PowerShell, pt. 1
-
Writing something like free in PowerShell
-
ReFS sucks and you shouldn't use it, but here's how you can configure ReFS deduplication and compression (if you really want to do this to yourself)
-
Updating multiple M365 mailboxes' autoreply settings
-
Resolving ESXi 8.0 esxcli software profile MemoryError with hostupdate depot
-
vCenter Server Appliance - regen certs, recover PWs, other tips and tricks
-
Changing vCenter Server DHCP address
-
Updating standalone VMware ESXi hosts from the online hostupdate depot with esxcli
-
Cisco 3850 ignoring startup-config on boot, config-register stuck at 0x142
-
Revisited: Working with Hyper-V NAT switches
-
Snippet: branch and merge a detached head with main
-
Getting started with Cloud-init on Hyper-V
-
Enabling Hyper-V in Windows Home editions
-
JNCIA lab: simple route redistribution in Junos
-
Windows Hello fingerprint 'too similar to one that's already registered' with no fingerprints registered
-
The Bitlocker Script
-
Snippet: unlock a SSH key for use with Ansible
-
Hide 'sign into all apps' pop-up in Microsoft apps
-
Snippet: one-liners to install all RSAT utilities
-
Requiring multiple, different factors for Windows Hello console authentication
-
Snippet: Disable max vCPUs eq phys. threads restriction in Proxmox VE 8.3
-
Snippet: enabling forwarding between Hyper-V NAT vSwitches (WSL & int. NAT)
-
Snippet: using Winget from system context (NinjaRMM scripts)
-
Renaming domain member detaches Computer Object
-
Snippet: setting up nested virt for Juniper (GNS3)
-
PowerShell: some commands for working with disks, volumes, VGs
-
Create a vSwitch and a NetNat object to avoid Default Switch DHCP
-
POST an Intune app registration to the Microsoft Graph API
-
Updating ESXi 8 hosts from a depot file
-
T14s Gen 1 AMD + Windows 11
-
Removing ghost SipAddress and SipAddressProxy values from M365 user accounts
-
Disabling systemd-resolved and letting NetworkManager control /etc/resolv.conf on Fedora 40
-
Configuring SSH clients for use with IOS 15.0(2)SE11 on a Cisco 3750x
-
Deleting messages org-wide with Exchange Online PowerShell
-
Setting up Vagrant with libvirt (Fedora 40)
-
Windows DRIVE$ shares
-
ESXi 8 - ignoring a TSC mismatch PSOD
-
CCNA Complete!
-
Fedora 39 + T14 Gen 2 AMD
-
Brief Look at CLNS & CLNP
-
Power Consumption
-
CompTIA Net+ Retrospective