niedziela, 10 października 2021

HP NC550SFP DualPort 10GbE aktualizacja firmware

Hewlett-Packard Company NC550SFP DualPort 10GbE Server Adapter
Emulex Corporation OneConnect OCe10100/OCe10102 Series 10 GbE (rev 02)
Firmware dla karty: https://support.hpe.com/ KOPIA
System: Ubuntu 20.04 LTS
mkdir ~/hp_update
cd ~/hp_update
wget https://downloads.hpe.com/pub/softlib2/software1/cd-generic/p674746231/v119278/UEFI_OneConnect-Flash-10.7.110.38-x64.iso
sudo mount UEFI_OneConnect-Flash-10.7.110.38-x64.iso /mnt
cp /mnt/initrd /mnt/UFI/oc10-4.9.416.15.ufi .
sudo umount /mnt
sudo mount initrd /mnt
cp /mnt/bin/flash .
Update firmware:
rmmod be2net
sudo ./flash -c -x -f oc10-4.9.416.15.ufi
Po aktualizacji trzeba zrobić "reboot". Testowane na:
HP EliteDesk 800 G2 TWR / Intel(R) Core(TM) i7-6700 CPU @ 3.40GHz / 32 GB RAM / wersja firmware 2.53
OptiPlex 7060 MT / Intel(R) Core(TM) i5-8500 CPU @ 3.00GHz / 32 GB RAM / wersja firmware 1.9.1
Uwagi:
  • Na OptiPlex 7060 konieczna była aktywacja opcji Enable Legacy OpROM
  • Na HP 800 G2 zadziałało tylko UEFI

niedziela, 11 kwietnia 2021

ssh batch execution

I always forget correct syntax for this:
ssh -o BatchMode=yes -o LogLevel=ERROR -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no user@host cmd

niedziela, 28 lutego 2021

Traefik wildcard TLS with Digital Ocean DNS provider

version: "3.5"

services:
  gateway:
    image: traefik:2.4
    restart: always
    environment:
     DO_AUTH_TOKEN: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
    command:
      - --providers.docker
      - --providers.docker.exposedbydefault=false
      - --entrypoints.http.address=:80
      - --entrypoints.https.address=:443
      - --certificatesresolvers.le.acme.httpchallenge=false
      - --certificatesresolvers.le.acme.httpchallenge.entryPoint=http
      - --certificatesresolvers.le.acme.dnschallenge=true
      - --certificatesresolvers.le.acme.dnschallenge.provider=digitalocean
      - --certificatesresolvers.le.acme.dnschallenge.delaybeforecheck=0"
      - --certificatesResolvers.le.acme.storage=/acme/acme.json
     #- "--certificatesResolvers.le.acme.caServer=https://acme-staging-v02.api.letsencrypt.org/directory"
    ports:
      - 80:80
      - 443:443
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - acme:/acme

  default:
    image: nginx:stable
    restart: always
    labels:
      - traefik.enable=true
      - traefik.http.middlewares.redirect.redirectscheme.scheme=https
      - traefik.http.routers.app-http.rule=HostRegexp(`{default:.*}`)
      - traefik.http.routers.app-http.entrypoints=http
      - traefik.http.routers.app-http.middlewares=redirect
      - traefik.http.routers.app-https.rule=HostRegexp(`{default:.*}`)
      - traefik.http.routers.app-https.entrypoints=https
      - traefik.http.routers.app-https.tls=true
      - traefik.http.routers.app-https.tls.certresolver=le
      - traefik.http.routers.app-https.tls.domains[0].main=test.example.com
      - traefik.http.routers.app-https.tls.domains[0].sans=*.test.example.com,other.example.pl,*.other.example.pl
    volumes:
      - ./:/usr/share/nginx/html

volumes:
  acme:
# vim: set tabstop=2 shiftwidth=2 expandtab autoindent indentexpr= nosmartindent :