--- Log opened Tue Nov 03 00:00:50 2020 03:10 -!- crashcartpro [uid29931@gateway/web/irccloud.com/x-skmxblsganabdezo] has quit [Quit: Connection closed for inactivity] 04:26 -!- rpifan [~rpifan@p200300d2670187003d22519405c0bd78.dip0.t-ipconnect.de] has joined #se2600 05:53 <@Dolemite> mr0ning, be0tches and h0ez! 05:56 * aestetix hugs Dolemite 07:04 <@Dolemite> Oh noez! https://www.bbc.com/news/world-europe-54782634 07:05 < PigBot> Vladimir Marugov murder: Russian 'Sausage King' killed in sauna with a crossbow - BBC News (at www.bbc.com) https://tinyurl.com/y676b3y6 07:08 <@Mirage> At least it wasn't the "Sausage Kinmg of Chicago" 07:15 <@Dolemite> Vladimir was a mere shadow of Abe Froman 07:23 <@Mirage> yeah...easy way to get all the commands that need to be added to a sudoers.d Cmnd_Alias for a user: 07:23 <@Mirage> cat /var/log/secure | grep COMMAND | awk -F "COMMAND=" {'print $2'} | sort -u | sed -r 's/^(\/.*)$/\1, \\/' 07:24 <@Mirage> ....and Dagmar, you can tell I wrote that because it has sed, awk, and grep in it!!! =P 07:25 <@Dolemite> lol 07:42 <@eryc> https://www.reddit.com/r/LeopardsAteMyFace/comments/jn357s/i_support_the_doesnt_give_a_shot_about_its/ 07:42 < PigBot> I support the doesn’t give a shot about its supporters party. : LeopardsAteMyFace (at www.reddit.com) https://tinyurl.com/y3ha693o 08:00 <@Evilpig> lol 08:04 <@Dolemite> Today is likely a great day to rewatch Idiocracy 08:05 <@Dolemite> I'm sure Pig has it on his Plex. I don't think I have it. 08:05 <@Dolemite> Yep, pig has it 08:06 <@Dolemite> ROFL, love the Regal Preroll, Pig 08:08 <@Evilpig> I haven't been to a theater in a year. :( 08:10 <@Dolemite> I think Rise of Skywalker was the last one I saw in the theater 08:53 <@Dolemite> I can't tell if I'm watching Idiocracy or highlights of FOX News from the past 4 years 08:57 -!- Imgur[m] [nebimgurma@gateway/shell/matrix.org/x-dmagusrrlfcoqcwd] has quit [Ping timeout: 244 seconds] 09:08 <@Evilpig> there's my new learned thing for the day. redhat brought back the rhel6 -> rhel7 upgrade assistant 09:31 -!- Imgur[m] [nebimgurma@gateway/shell/matrix.org/x-uasixuxiztbgihhm] has joined #se2600 09:33 -!- Dagmar [~dagmar@unaffiliated/dagmar] has quit [Ping timeout: 264 seconds] 09:34 -!- lastchild [~lastchild@c-67-187-104-215.hsd1.tn.comcast.net] has quit [Ping timeout: 260 seconds] 09:35 -!- lastchild [~lastchild@c-67-187-104-215.hsd1.tn.comcast.net] has joined #se2600 09:36 -!- mode/#se2600 [+o lastchild] by ChanServ 09:47 -!- Imgur[m] [nebimgurma@gateway/shell/matrix.org/x-uasixuxiztbgihhm] has quit [Quit: Bridge terminating on SIGTERM] 09:58 -!- Imgur[m] [nebimgurma@gateway/shell/matrix.org/x-kyawwvxordgzkdri] has joined #se2600 11:18 <@_NSAKEY> Evilpig: I learned that a few weeks ago from a conversation with a friend. Didn't they stop supporting in-place upgrades a few releases ago? 11:20 <@eryc> no they started supporting it 11:20 <@eryc> prior to rhel6 you had to wipe and reinstall or migrate 11:21 <@eryc> that was the official line 11:22 <@Mirage> I could have sworn there was a 5->6 path and 4->5 as well...the latter being used by anyone in their right mind 11:22 <@Mirage> er, NOT being used by.. 11:32 -!- Dagmar [~dagmar@c-69-247-146-235.hsd1.tn.comcast.net] has joined #se2600 11:32 -!- Dagmar [~dagmar@c-69-247-146-235.hsd1.tn.comcast.net] has quit [Changing host] 11:32 -!- Dagmar [~dagmar@unaffiliated/dagmar] has joined #se2600 11:33 -!- mode/#se2600 [+o Dagmar] by ChanServ 11:56 -!- rpifan_ [~rpifan@p200300d2671a2200e3d3fd467bb7390b.dip0.t-ipconnect.de] has joined #se2600 11:58 -!- rpifan [~rpifan@p200300d2670187003d22519405c0bd78.dip0.t-ipconnect.de] has quit [Ping timeout: 268 seconds] 12:01 -!- rpifan [~rpifan@p54ac54ea.dip0.t-ipconnect.de] has joined #se2600 12:03 -!- rpifan_ [~rpifan@p200300d2671a2200e3d3fd467bb7390b.dip0.t-ipconnect.de] has quit [Ping timeout: 260 seconds] 12:29 <@Evilpig> _NSAKEY: it's supported again as of 7.9 12:30 <@Evilpig> https://www.dropbox.com/s/diooy0i6lif47op/Screen%20Shot%202020-11-03%20at%2012.30.14%20PM.png?dl=0 12:30 < PigBot> Dropbox - Screen Shot 2020-11-03 at 12.30.14 PM.png - Simplify your life (at www.dropbox.com) https://tinyurl.com/yxmw9mvk 12:30 <@Evilpig> https://access.redhat.com/solutions/637583 12:30 < PigBot> How do I upgrade from Red Hat Enterprise Linux 6 to Red Hat Enterprise Linux 7? - Red Hat Customer Portal (at access.redhat.com) 12:31 <@Evilpig> https://access.redhat.com/articles/4263361 12:31 < PigBot> Supported in-place upgrade paths for Red Hat Enterprise Linux - Red Hat Customer Portal (at access.redhat.com) https://tinyurl.com/y4dwe4lo 12:31 <@Evilpig> "updated 4 hours ago" 12:32 <@Evilpig> this came about because one of our internal customers asked about updating some rhel6 boxes to 7 because 8 isn't supported yet. and I immediately dismissed it since i knew that upgrade tool was gone 12:40 -!- crashcartpro [uid29931@gateway/web/irccloud.com/x-dkczyiommdxhcfty] has joined #se2600 13:12 <@Dolemite> Well I have been surprised by my FB feed, today. Several folks from up here in East TN that I would normally consider red voters have claimed to have voted for Biden. 13:16 <@Evilpig> they're setting the stage to not be attacked when the cheetoh calls for the pround boys to stand up 13:16 <@Evilpig> I'm ready for this day to be over and see what the initial outcomes are as of midnight tonight 13:17 <@Dolemite> Well I already stocked up on ammo several months, ago. Plus I live at the top of a fairly steep hill, so I'm not worth their time. 13:28 -!- rpifan_ [~rpifan@p54ac505b.dip0.t-ipconnect.de] has joined #se2600 13:30 -!- rpifan [~rpifan@p54ac54ea.dip0.t-ipconnect.de] has quit [Ping timeout: 264 seconds] 13:43 -!- rpifan_ is now known as rpifan 14:01 <@eryc> https://youtu.be/wWLj2-a6FLI 14:02 < PigBot> Sportswriter Rick Reilly Describes How Trump Cheated at Golf | NowThis - YouTube (at youtu.be) https://tinyurl.com/y4d4smcl 14:05 <@Mirage> in case anyone cares, this is a bit of scripting I've been working on. https://pastebin.pl/view/c10d2e71 14:05 < PigBot> /usr/local/sbin/config_host - Pastebin (at pastebin.pl) 14:07 <@Mirage> It's a menu driven host configuration script for the updated centos8-base images that I've been trying to get fully baked and ready for deployment by anyone who can read english. 14:11 <@eryc> you could do the same thing in like 30 lines of ansible 14:12 <@Evilpig> Mirage: chad said your script looks alot like some of our ansible playbooks. 14:13 <@Mirage> you could do it in a lot fewer for what it does if you took away all the logic. originally it started out as using getopts and prompting for information as it was needed. this is muych nicer 14:15 <@Dagmar> Do we need to have a talk about not hardcoding ANSI codes? 14:15 <@Dagmar> Use tput, boy 14:16 <@Dagmar> ...so if someone's on a terminal that doesn't do ANSI their screen isn't filled with blinking, bracket-laden bullshit 14:16 <@Mirage> Evilpig: yeah, if only ansible was a via option for this. But, the reality is that the image that this is baked into for doing initial configuration would likely be taking on the role of an ansible server, auth server, jump server, syslog, file, etc, etc. All the role stuff is next to get added into it. The image will have all the required software already installed and just needing to be configured and enabled, no internet connection required. 14:18 <@Evilpig> the good part of ansible is it can do stuff via ssh so as long as you have that stuff set up you'd be good to go. what you have for getting stuff on the ground in a variable environment is likely optimal already 14:18 <@Dagmar> OTher than that, this isn't so bad 14:18 <@Dagmar> You might run away screaming if I showed you the idsprinkler 14:18 <@Dagmar> It does some unwholesome things with dialog 14:21 <@Mirage> Evilpig: we're going to be providing the image to "the factory" to have pre-deployed in the management stack of new converged infra systems. The intention is that there is no guarantee of any connectivity other than a console on a freshly installed ESXi host. In that instance this image would be configured as the jump host for installing/configuring vCenter and everything else required in the management stack. 14:21 <@Dagmar> Lemme suggest that places where you've got the same filename repeated over and over and over again that you replace that with a variable 14:22 <@Dagmar> ...particularly with respect to chrony, if you ever have to change that it's going to be a damn mess 14:22 <@Mirage> Dagmar: you referring to the nasty cut/hack regex? 14:24 <@Dagmar> No, the fact that "~/chrony.conf" ends almost every line in commit_ntp() like some kind of demented slave-ship drumbeat 14:24 <@Mirage> Dagmar: how so w/ chrony? keep in mind this is intended to be a one-time use script to get a host configured to fulfill a role quickly. It's set in profile.d to automatically pop-up for a temporary account w/ no password that gets automagically deleted after the configuration is done and the server reboots 14:24 <@Dagmar> That you've got large, complicated regular expressions in play without so much as a half hint to suggest what they're meant to be doing is between you and your gods. 14:25 <@Dagmar> It's a 3NF thing 14:25 <@Dagmar> If you replace "~/chrony.conf" with a variable and just assign that variable at the properl time, if you ever have to change it you only have to change it in the ONE place 14:26 <@Dagmar> ...and it becomes relatively impossible to need to say "oops I missed one" 14:26 <@Mirage> Dagmar: the files that are being edited in the user's local directory are being done so because I want that account'd access to be as limited as possible 14:27 <@Dagmar> All these places where you're using echo statements incolving your colors... those can definitely stand to be replaced with funcitons 14:27 <@Dagmar> I've usually got logError and logImportant and so on defined by the time a script has hit 50 lines 14:28 <@Mirage> Dagmar: yeah, some things get really angry when you go too far with using variables...then you start having to do work-arounds with exec, eval, source, etc which defeat the purpose 14:28 <@Dagmar> ...so I don't haev to give a shit about typing ${RED} ever again. I just call the atomic function and it deals with the playing dress-up 14:28 <@Mirage> Dagmar: don't care about logging errors 14:29 <@Dagmar> Or whether or not you need to pass -e to echo, apparently 14:29 <@Mirage> Other than dumping all the array items that were set during config at the end for later reference...kind of like RHEL/Centos and the /root/anaconda-ks.cfg file 14:30 <@Dagmar> Ya'll probably should get on board with using firewalld by the way 14:30 * Evilpig spits on firewall-duh 14:30 <@Dagmar> The result it less eye-scorching than `iptables -L` and makes it easier for the new-hires to not fuck everything up 14:31 <@eryc> ya firewalld is pretty cool 14:31 <@Dagmar> For simple usage, yes 14:31 <@Dagmar> Their docs and well, entire approach towards masquerading/nat is still presently somewhat crap 14:31 <@Evilpig> we've got templates for our firewall configs so new hires can't fuck things up easily 14:32 <@Mirage> Dagmar: I'll use it when I have to...same with !sendmail, !uw-imap, !apache, etc. Until I don't have the option to use the old stuff that I know works and does what I want, I'm gonna keep using it. 14:32 <@Evilpig> nftables does take some getting used to for rhel8 too 14:32 <@Dagmar> yeah that's where by using firewalld you don't have to really give a shit what the backend is 14:32 <@Mirage> What I want is a pf port to linux. 14:33 <@Dagmar> Being that much of it is still in flux, I'm rather hoping to avoid having any of that change after I learn it by just letting firewalld deal with the trivia 14:33 <@Evilpig> we could use iptables in rhel8 but a vote was taken and I lost. so we updated with what rhel seems to think of the road forward 14:35 <@Dagmar> These underscores are also nasty 14:35 <@Dagmar> UNless someone sources that script, they won't survive after the execution, so you're trying to avoid a naming collision that's never going to happen 14:36 <@Dagmar> ...and cargo culting in about a million curly-braces 14:36 <@eryc> i think you guys missed the point Mirage was trying to make 14:36 <@eryc> that his code is awesome and perfect 14:37 <@Dagmar> pfft. That's not what he was doing 14:37 <@Dolemite> Or at least, good enough for his needs. 14:37 <@Dagmar> I think he needs to have to hastily fix more things at 2am 14:37 <@Dagmar> ...then he'd take the commenting and code-transparency a lot more seriously. 14:37 <@Dagmar> :) 14:38 <@Dagmar> This bit tho 14:38 <@Dagmar> kill -9 `ps -ef | grep setup | grep bash | grep -v grep | awk {'print $2'}` 14:38 <@Dagmar> What the fuck 14:38 <@Dagmar> What the absolute fuck 14:38 <@eryc> pkill -9 -f setup 14:39 <@Dagmar> Heck there's even a way to get ps to do all that filtering _for you_ 14:39 <@eryc> pkill -9 -f bash.*setup 14:39 <@Mirage> That immediately kicks out the 'setup' user, which is the temporary user that only exists for running this script in the event that they log back in after reboot and before the account gets whacked by the watchdog 14:40 <@eryc> ya and now you know how to use pkill 14:40 <@Mirage> Dagmar: I never claimed to have the most elegant scripting/code in the world...just that it gets what i want done 14:40 <@Dagmar> ..and you can make ps list processes owned by a specific user, so you don't accidentally shoot an innocent process in the face 14:40 <@eryc> pkill -9 -u setup 14:40 <@Evilpig> heh, I look at stuff i've done alot and ask wtf I was thinking 14:41 <@Dagmar> Yeah, after blowing my own feet off starting around the knees more than a few times, I get _picky_ about what I am telling the system to do 14:41 <@Mirage> eryc I tried 4-5 different methods in testing, most of which declined to work since they were being used on and by the currently logged in user 14:42 <@Dagmar> Also, holy shit but you know can actually get openssl to just _give you_ a password encrypted just like the system would od 14:42 <@eryc> ok try pkill -9 -u `whoami` 14:42 <@eryc> see what happens 14:43 <@Mirage> Dagmar: the person logged in as 'setup' logs in w/o a password via console. when the random password is set in the background and not communicated to them, it's because I wanna make damn sure they get locked out. 14:44 <@Mirage> Doing that anywhere else in the script while doing it's job, setting a password breaks sudo 14:47 <@Dagmar> Just use passwd -l 14:47 <@Dagmar> WAY less Rube Goldberg 14:48 <@eryc> yea passwd -l 14:48 <@Mirage> -l, --lock lock the password for the named account (root only) 14:48 <@Mirage> ROOT ONLY 14:48 <@Dagmar> obviously 14:48 <@eryc> sudo passwd -l 14:48 <@Mirage> !runas user 'setup' 14:49 <@Dagmar> If someone's actually having to type "setup" into the username field at the console, you should probbaly just be binding this script to that console 14:50 <@Dagmar> f**k sticking /bin/login on it 14:51 <@Dagmar> If there's no password and there's only teh one user then the whole idea of a login session becomes pretty moot 14:53 <@Dagmar> read -l "PRESS ENTER TO REAP THE WHIRLWIND" 14:53 <@Mirage> Here's the other bit. Runs under crontab to not only whack the setup account when no longer needed, but also updated /etc/issue so that the IPs on the VM are shown in the vCenter console, which makes life soooo much nicer/quicker/easier...esp if open-vm-tools is being a bitch 14:53 <@Mirage> https://pastebin.pl/view/0bc0b85c 14:53 < PigBot> /usr/local/sbin/host_info - Pastebin (at pastebin.pl) 14:53 <@eryc> i see you're not trapping any signals 14:54 <@eryc> i can just ctrl+c out of this thing 14:54 <@Mirage> eryc: yeah, i know. at this point, because it's not fully complete, i like being able to ctrl+c when shit is broken 14:56 <@Mirage> Be glad I didn't post it w/ all the debug crap still in it. I probably trimmed 75-100 lines of feedback and a function with multiple sets of pre-set arrays so I didn't have to keep filling in everything all the time 15:26 -!- ChanServ [ChanServ@services.] has quit [shutting down] 15:32 -!- ChanServ [ChanServ@services.] has joined #se2600 15:32 -!- ServerMode/#se2600 [+o ChanServ] by adams.freenode.net 16:26 -!- rpifan [~rpifan@p54ac505b.dip0.t-ipconnect.de] has quit [Quit: Leaving] 17:11 <@Dagmar> Listening to this election coverage and hearing these guys talk on and on... 17:11 <@Dagmar> ...all I can think is "LET'S EAT HIM ALREADY" 19:31 <@_NSAKEY> Dagmar: I saw a good joke on reddit this morning. The poster mentioned the idea of buying up MAGA hats, and said that if antique roadshow taught them anything, nazi memorabilia is worth $$$ after a few decades. 19:40 -!- Synx_hm [~Synx_hm@unaffiliated/synx-hm/x-1623004] has quit [Quit: Ping timeout (120 seconds)] 19:41 -!- Synx_hm [~Synx_hm@unaffiliated/synx-hm/x-1623004] has joined #se2600 20:47 <@Dagmar> Jumping juggle fuck jesus 20:47 <@Dagmar> _NSAKEY: Man that's horrible 20:48 <@Dagmar> Someone just cold-called me to try and sell me a vacation package for a company apparently HERE IN NASHVILLE 20:48 <@Dagmar> Like, a complete violation of the Do Not Call list and he had the balls to tell me he was local 20:48 <@Dagmar> I blew up at him 20:49 <@Dagmar> I asked rather loudly umm... things like 20:49 <@Dagmar> "Are you out of your fucking mind?" 20:49 <@Dagmar> "You tell me where you are, and then try to fraud me into a vacation package, and what's to stop me from coming down there and skinning you alive?" 20:50 <@Dagmar> I told him it was a flagrant violation of the do not call and might have suggested I may eat him 20:50 <@Dagmar> I dunno 20:50 <@Dagmar> But like, the sheer cheek 20:50 <@Dagmar> Like, no shit, claimed he was in the LNC building on Church Street 20:51 <@Dagmar> If the election coverage didn't have me drinking I would already be in the car to personally yell nightmares into someone 20:52 <@Dagmar> I don't have *any* problem at all delivering a formal "Do not call me" request, repeatedly, at over 100 decibels 20:52 <@Dagmar> In person 21:02 <@dasunt> Do it. 21:05 <@Dagmar> They can't possibly actually be there 21:05 <@Dagmar> Noone would be that mad 21:05 <@Dagmar> Like, I would literally stand there and yell at people until someone showed me my number being deleted from a database 21:06 <@Dagmar> ...and yell loud enough to scare small children and animals. 21:07 <@_NSAKEY> Dagmar: You should just do what I've started doing... Play wet fart compilation clips from youtube. 21:07 <@_NSAKEY> I actually make them get a human on the phone, then do that. 21:07 <@Dagmar> Sweeet crap 21:07 <@_NSAKEY> My favorite was some random car warranty scammer. 21:07 <@Dagmar> So, somehting blew away the filesystem on my parent's computr 21:07 <@_NSAKEY> My old go to was to be all "cao ni ma" which, with the tones, means "fuck your mother" in mandarin 21:07 <@Dagmar> I am down to running photorec on it 21:08 <@_NSAKEY> Then I got a mandarin speaker who understood that... and it was interesting. 21:08 <@_NSAKEY> Figure I can't ever top that response, so I had to find a new way to mess with them. 21:08 <@Dagmar> _NSAKEY: you can ask Audra if you doubt, but I've used my magic mutant superpower in front of her 21:08 <@Dagmar> Drove a man to cussing at me by just saying "Your mother speaks Farsi." 21:08 <@_NSAKEY> Hahaha. 21:11 <@Dagmar> I would pretty much be in the _nightmares_ of everyone in that office in short order 21:12 <@Dagmar> https://imgur.com/a/g3niWOG 21:12 < PigBot> My god... it's full of files... - Album on Imgur (at imgur.com) https://tinyurl.com/y6qjgqud 21:12 <@Dagmar> >95,000 png files identified 21:13 <@Dagmar> fuuuuu-uuuu 21:14 <@Dagmar> 10% remaining on the smart self-test, but I don't expect it will find any problems 21:14 <@Dagmar> Dad called me up Sunday night and said their computer wouldn't boot 21:15 <@Dagmar> I got there and found basically... and empty vfat partition 21:15 <@Dagmar> So... It's a dual-Pentium 2.7Ghz machine with 6Gb of RAM 21:15 <@Dagmar> No. 21:15 <@Dagmar> Just... no. 21:16 <@Dagmar> I ordered a new case, and I'm going to get a Win10 licence and set them back up with my old motherboard. 21:16 <@Dagmar> The 16Gb AMD 3.9Ghz quad-core 21:16 <@Dagmar> If they give me any more guff about it I'll spend another $45 on a 250 Gb SSD 21:17 <@Dagmar> The next time my mom clicks on god-only-knows-what Dad can just factory reset the damn thing 21:30 <@Dagmar> Looks like folks are on the streets sort of preparing 21:47 <@dasunt> Howso? 21:48 <@Dagmar> Well, in addition to a lot of places boarding up, there's crowds gathering 21:48 <@Dagmar> Like, in multiple cities 21:48 <@Dagmar> Might explain why CNN is being super-cagey right now heh 21:49 <@Dagmar> They've been showing title cards showing like, 58% Biden, 28% Trump, 4% of the votes remaining to be counted, still "Too Early To Call" 21:49 <@Dagmar> Are they expecting a cache of negative votes to show up? 21:50 <@Dagmar> All you'd really have to do is suggest that gerrymandering and the electorial college are going to give Trump the win regardless of any massive differences in the popular vote and it'll be "game on" for a lot of folks 21:51 <@Dagmar> Sorry, NBC, not CNN 22:01 <@dasunt> Really? 22:01 <@dasunt> I should check MPLS. 22:02 <@dasunt> But I'm a tad blaise about riots. 22:02 <@dasunt> 1 out of 5 stars: Not enough police precints burnt. 23:24 <@Dagmar> Folks are already circulating bogus images showing lists of cities where "Antifa & BLM" have "planned Nov 4th riots" --- Log closed Wed Nov 04 00:00:52 2020