Opawesome
Members
-
Joined
-
Last visited
Everything posted by Opawesome
-
May I ask why you want to connect to SSH without password? Because there is always the possibility to login via RSA keys if you don't want to type passwords.
-
Interesting. I wonder what would be the reason behind.
-
I believe there is indeed a chance to lose all your data if the LUKS header becomes corrupt, although I understand that the chance of that happening is lower with LUKS2 than with LUKS1. I am by no means an expert. I just have just been doing some reading / testing on the subject during a week or so. My understanding is that the LUKS headers only change if you perform an operation like changing the password, or add a new key. So based on that understanding, my guess would be that you only need to backup LUKS headers if and when you do perform such an operation. Anyway, as long as you keep your previous backups, I see no harm in scheduling a recurrent backup.
-
Hi @Lee Kim Tatt, Your problem was exactly as mine (freezing when jumping around the video), except that the problem occurred on 6.8.3 for me. Would you mind sharing your hardware configuration (MB, CPU, etc.) ? Best, OP
-
-
+1
-
It seems that it is actually recommended to use the built-in command rather than the "dd" command: (abstract from https://gitlab.com/cryptsetup/cryptsetup/-/wikis/FrequentlyAskedQuestions#6-backup-and-data-recovery) I also figured that: (abstract from https://gitlab.com/cryptsetup/cryptsetup/-/wikis/FrequentlyAskedQuestions#10-luks2-questions) That means that @golli53's script, which only backups the first 2MB of each device, may not be compatible with LUKS2 (which is the version used by Unraid as of the date of this post). On the contrary, using "cryptsetup luksHeaderBackup" does create 16MB header backup files. I hope this helps. Best OP
-
Hi all, I was wondering what was the advantage of using the "dd" command (which is used in the script kindly shared by @golli53), rather than the built-in "cryptsetup luksHeaderBackup" command. With the built-in command one would just need to run: cryptsetup luksHeaderBackup /dev/sdbX --header-backup-file /path/to/luks-headers-backup/backed-up-header.bin to backup the LUKS header, and: cryptsetup luksHeaderRestore /dev/sdbX --header-backup-file /path/to/luks-headers-backup/backed-up-header.bin to restore the backed-up header. I also see less risk of messing something with the "dd" command which, as I understand it, can be very destructive if not used correctly (the wikipedia page says that "dd is sometimes humorously called 'Disk Destroyer', due to its drive-erasing capabilities"). The script would then look like: for i in {/dev/sd*,/dev/nvme*}; do if cryptsetup luksDump $i &>/dev/null; then cryptsetup luksHeaderBackup $i --header-backup-file `udevadm info --query=all --name=$i | sed -n 's/.*ID_SERIAL=//p'`.bin; fi; done What do you think ? Best, OP More on the dd command: https://opensource.com/article/18/7/how-use-dd-linux Interesting video on LUKS: https://youtu.be/5rlZtasM-Pk?t=598
-
+1 Indeed. I would love to add my Plex logs for example, as suggested below : https://chasewright.com/plex-logs-to-remote-syslog-server-with-rsyslog/ https://serverfault.com/questions/1046055/rsyslog-forward-log-with-space-in-path-or-name But you definitely need the imfile.so module to do so. Why is it missing in the first place ?
-
Hi ! I recently noticed that the Unraid main Docker page showed that "apply update" link was "unavailable" for the binhex-privoxyvpn Docker container (under the "version" column). If anyone is interested in how to fix it: click on the container icon, select "edit" on the "update container" page, activate the "advanced view" under "Docker Hub URL" field, change "https://registry.hub.docker.com/u/binhex/arch-privoxyvpn/" to "https://registry.hub.docker.com/r/binhex/arch-privoxyvpn/" (note the "/r" instead of the "/u") click apply on the main Unraid Docker page, enable the "advanced view" (once again) and refresh the page click on "force update" once finished, click on the "check for updates" button at the bottom of the Unraid main Docker page (the "unavailable" alert should be gone) I hope this helps. Best OP
-
Hi all, I would also like to know how to add new mount tags after creation of a VM. Adding them in the Unraid WebGUI editor does not seem to work on my system. Best, OP
-
Hi, I just want to point out two options which I believe are incorrectly set in the server configuration (2 errors are generated in the client log when connecting to the server): push "resolv-retry infinite" : resolve -retry is used on the client side before connecting to the vpn server, so it cannot be pushed to the client push "remote-gateway <IP>" : no such option seems to exist (see https://openvpn.net/community-resources/reference-manual-for-openvpn-2-4/). I believe the already existing "push "redirect-gateway def1"" option is what was meant. I commented out these 2 lines with a "#" and the errors no longer show up in the client log. Besides that, the plugin works fine on my side as of today (01/01/2021 on Unraid 6.8.3), so thank you very much to the author ;-). Besides, if I may suggest a new feature: it would be nice if one could more easily bypass the easy-rsa and certificate creation process. I already have my CA certificate and use another system to manage my servers/users certificates and keys and it was a bit difficult to make the plugin understand that they already existed. If one is interested : the trick is to not only put all your certs and key in the /mnt/user/appdata/openvpn-server (or whichever other folder you selected) but also to put a ca.cert and dh.pem file in /mnt/user/appdata/openvpn-server/easy-rsa/easyrsa3/pki in order to trick the plugin into thinking that the rsa key creation completed successfully on the machine. Best, OP
-
I would definitely enjoy such a feature @limetech
-
Hi, Same here. When I try to restart the Libvirt service I get the following error: Dec 21 23:45:51 MOZART root: /mnt/user/system/libvirt/libvirt.img is in-use, cannot mount ... which seems to be caused by many processes: root@MOZART:~# fuser -c /mnt/user/system/libvirt/libvirt.img /mnt/user/system/libvirt/libvirt.img: 328 329 374cm 406 512 542m 611m 667m 726m 3948 5304c 10517c 10555c 12015 12857 12916c 13025c 13929 14060 16265 16802c 17139 17540c 17582 18255 18271c 18278c 18312 18522c 18523c 18524c 18525c 18526c 18686 18822 19091 19232c 20250 20251 20252 20253 21427c 21678 21706 21707 22021c 22564c 22580c 22581c 22805 22812m 22870m 22871m 23030m 23501 23505 23509 23526 23527 23528 23529 23530 23546m 23557e 23559e 24224 24225 24226 24246 24247 24248 24249 25821 26019c 26908 27102 27344c 27861 28083c 29489m 29531c 29601 30878 30918 30919 30978cm 31046m 32746 I have the virt-manager Docker container installed but the issue occurred while it was stopped. I confirm that stopping the array and starting it again fixes the issue. Best, OP
-
Hi @DavejaVu, That seems very similar to what I have on my system indeed. A common denominator between us is the Supermicro X11SSH-series board. I am just pointing it out, I am not taking any conclusions. Also, as for me, I have fond anything in the syslog. I did not however has the Plex logging set to "debug" when the crashes occurred, so that would be mu next troubleshooting step when I will have the time/courage to give HW transcoding another shot (because non clean shutdown are a pain to deal with, mainly because you have the rebuild parity). I will be glad to share the result of my future tests with you in this thread. FYI, I was considering upgrading my CPU to exactly your model (Xeon E3-1275v6), hoping that could resolve my issue. Now I think maybe I should not . About the possibility that your crashes are caused by a lack of RAM, I think one can rule-out this cause if the transcoding is done eg. on the SSD cache drive (see my post above) rather than in RAM. How is your Plex /transcode directory setup ? Where is it mounted in your system ? Also, if crashes are caused by a lack of RAM, I believe the crashes should be "consistantly" appear when RAM gets filled up, not randomly. Am I wrong ? Best, OP (PS: Nice nickname )
-
Dear Mr. @Squid., Awesome. You always come with such simple and elegant solutions . Thank you very much. Best regards, OP
-
Hi all, Sorry for the dumb question but: I want to execute a script created with the "CA User Scripts" plugin not from the Unraid GUI but from the terminal (or from another script for that matter). What is the simplest way to do so? I indeed noticed that the "/tmp/user.scripts/tmpScripts" directory only contains scripts which were previously run from the Unraid GUI, and that in the "/boot/config/plugins/user.scripts/scripts" directory, the scripts permissions are set to 600 which make them not executable. Many thanks, Best OP
-
This is good to know. I will try this new method as soon as the 6.9 version is released as stable then. Best, OP
-
Hi @Zonediver! Yes, and Plex is is capable of HW transcoding on my system. The issue is that my system hangs from time to time when I do it . Unless you were pointing out to a specific post in that thread which covers my problem, in which case I missed it. Hi @Hoopster! Thank you very much for taking the time to answer in such great details. I really think those drivers are not stable. See for yourself the following Google search results: https://www.google.com/search?q=intel+i915+kernel+crash. But I am glad that they are not on your (and other's) system ! Hmmm. OK. My understanding was that it is because the drivers are blacklisted in 6.9 (and 6.8.3 too I think) that you need to manually load the drivers with modprobe, and that it is because of instability that they were blacklisted. This is something I have not investigated indeed. However in my config, the /transcode folder in the Plex docker container already points to the /mnt/cache/user/Plex/Transcodes folder on my 1TB SSD (and I also really don't use that much RAM anyway) so I'd rather not get too excited. Thank you again guys. I will keep you posted Best, OP
-
I underestimated myself because I actually managed to get Unraid use the Docker container OpenVPN tunnel. Below is how I did it, in case it can help someone. Please let me know if so. Best, OP ==================== We will assume that: you already have a running OpenVPN server on your remote network you already have a working .ovpn profile to connect to that server you already managed to get the dperson/openvpn-client Docker container up and running with this .ovpn profile the local network is 192.168.100.0/24 the remote network is 192.168.200.0/24. 1. Create a new docker network, eg (in the Unraid terminal console): docker network create --subnet=172.19.0.0/16 openvpntunnel 2. Set the dperson/openvpn-client Docker container's "Network Type" to: "custom : openvpntunnel" 3. Set the dperson/openvpn-client Docker container's Fixed IP address to: "172.19.0.100" 4. Add a "route" Post Argument to the dperson/openvpn-client Docker container profile, pointing to the local network on which the Unraid machine is: -r 192.168.100.0/24 Note that you need to turn on the "advanced view" in the Docker container configuration page in order to set a Post Argument (seems no longer required) 5. Add a route to the Unraid Routing Table (in network settings) to access your remote network through the OpenVPN tunnel: set "192.168.200.0/24" as the "IPv4:nn route" set "172.19.0.100" as the "Gateway address" set "1" as the "Metric" You can now open a terminal in Unraid and try to ping a machine on the remote network (eg: 192.168.200.21) to see if the link is alive. 6. Once you checked that everything works, make the route persistent across reboots by running the following script upon each start of your array (this can easily be done with the excellent "userscripts" plugin by Andrew Zawadzki (@Squid) for example) : #!/bin/bash sleep 5 ip route add 192.168.200.0/24 via 172.19.0.100
-
Hi all, I wonder if it is possible to create an OpenVPN tunnel that could be used by Unraid, and not only by Docker containers. Indeed, I am currently using SSH to let Unraid connect to my remote backup server, but would like to do that through an OpenVPN tunnel, for security purposes (I don't like having an SSH port opened to the internet on my remote backup server). I tried the dperson/openvpn-client Docker container (https://hub.docker.com/r/dperson/openvpn-client), which succeeds in establishing the tunnel, but it seems it only allows other Docker containers to access the OpenVPN tunnel, whereas in my case I need Unraid to be able to use SSH through the tunnel. Unfortunately, the router on the remote backup server's network has no OpenVPN capabilites, so a router-to-router OpenVPN tunnel is not an option. Any ideas ? I would greatly appreciate it. Many thanks. Best OP
-
Hi, I noticed that SMART attribute 22 is reported as "Unknown attribute" on recent WDC_WD120EDAZ hard drives (Western Digital): smartctl -a /dev/sdl smartctl 7.1 2019-12-30 r5022 [x86_64-linux-4.19.107-Unraid] (local build) Copyright (C) 2002-19, Bruce Allen, Christian Franke, www.smartmontools.org === START OF INFORMATION SECTION === Device Model: WDC WD120EDAZ-11F3RA0 Serial Number: REDACTED LU WWN Device Id: 5 000cca REDACTED Firmware Version: 81.00A81 User Capacity: 12,000,138,625,024 bytes [12.0 TB] Sector Sizes: 512 bytes logical, 4096 bytes physical Rotation Rate: 5400 rpm Form Factor: 3.5 inches Device is: Not in smartctl database [for details use: -P showall] ATA Version is: ACS-2, ATA8-ACS T13/1699-D revision 4 SATA Version is: SATA 3.2, 6.0 Gb/s (current: 6.0 Gb/s) Local Time is: Fri Dec 11 11:25:34 2020 CET SMART support is: Available - device has SMART capability. SMART support is: Enabled === START OF READ SMART DATA SECTION === SMART overall-health self-assessment test result: PASSED General SMART Values: Offline data collection status: (0x82) Offline data collection activity was completed without error. Auto Offline Data Collection: Enabled. Self-test execution status: ( 0) The previous self-test routine completed without error or no self-test has ever been run. Total time to complete Offline data collection: ( 87) seconds. Offline data collection capabilities: (0x5b) SMART execute Offline immediate. Auto Offline data collection on/off support. Suspend Offline collection upon new command. Offline surface scan supported. Self-test supported. No Conveyance Self-test supported. Selective Self-test supported. SMART capabilities: (0x0003) Saves SMART data before entering power-saving mode. Supports SMART auto save timer. Error logging capability: (0x01) Error logging supported. General Purpose Logging supported. Short self-test routine recommended polling time: ( 2) minutes. Extended self-test routine recommended polling time: (1251) minutes. SCT capabilities: (0x003d) SCT Status supported. SCT Error Recovery Control supported. SCT Feature Control supported. SCT Data Table supported. SMART Attributes Data Structure revision number: 16 Vendor Specific SMART Attributes with Thresholds: ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE 1 Raw_Read_Error_Rate 0x000b 100 100 016 Pre-fail Always - 0 2 Throughput_Performance 0x0004 127 127 054 Old_age Offline - 112 3 Spin_Up_Time 0x0007 100 100 024 Pre-fail Always - 0 4 Start_Stop_Count 0x0012 100 100 000 Old_age Always - 6 5 Reallocated_Sector_Ct 0x0033 100 100 005 Pre-fail Always - 0 7 Seek_Error_Rate 0x000a 100 100 067 Old_age Always - 0 8 Seek_Time_Performance 0x0004 140 140 020 Old_age Offline - 15 9 Power_On_Hours 0x0012 100 100 000 Old_age Always - 64 10 Spin_Retry_Count 0x0012 100 100 060 Old_age Always - 0 12 Power_Cycle_Count 0x0032 100 100 000 Old_age Always - 5 22 Unknown_Attribute 0x0023 100 100 025 Pre-fail Always - 100 192 Power-Off_Retract_Count 0x0032 100 100 000 Old_age Always - 11 193 Load_Cycle_Count 0x0012 100 100 000 Old_age Always - 11 194 Temperature_Celsius 0x0002 180 180 000 Old_age Always - 36 (Min/Max 21/39) 196 Reallocated_Event_Count 0x0032 100 100 000 Old_age Always - 0 197 Current_Pending_Sector 0x0022 100 100 000 Old_age Always - 0 198 Offline_Uncorrectable 0x0008 100 100 000 Old_age Offline - 0 199 UDMA_CRC_Error_Count 0x000a 200 200 000 Old_age Always - 0 SMART Error Log Version: 1 No Errors Logged SMART Self-test log structure revision number 1 Num Test_Description Status Remaining LifeTime(hours) LBA_of_first_error # 1 Short offline Completed without error 00% 0 - SMART Selective self-test log data structure revision number 1 SPAN MIN_LBA MAX_LBA CURRENT_TEST_STATUS 1 0 0 Not_testing 2 0 0 Not_testing 3 0 0 Not_testing 4 0 0 Not_testing 5 0 0 Not_testing Selective self-test flags (0x0): After scanning selected spans, do NOT read-scan remainder of disk. If Selective self-test is pending on power-up, resume after 0 minute delay. This attribute is supposed to be "Helium level". It is showing up properly on my older WDC_WD80EMAZ hard drives. I created a ticket on smartmontools.org in parallel: https://www.smartmontools.org/ticket/1409#ticket Best, OP
-
Hi all, I have an Intel Pentium G4560 CPU (LGA 1151 socket) on a Supermicro X11SSH-LN4-F motherboard. This CPU has an iGPU (Intel® HD Graphics 610 / QuickSync), which works under linux via the i915 drivers. When I modprobe and pass-through this iGPU to my LinuxServer/Plex docker, hardware transcoding works for so long before the entire system hangs (I can only connect to IPMI and force shutdown the server). When you Google for "i915 drivers linux crash", you find dozens of articles/posts reporting crashing issues with the Intel i915 driver, on linux kernels from 4.18 up to the latest 5.x (currently). By digging a bit, you can even read that this driver is blacklisted by Unraid: https://unraid.net/blog/unraid-6-9-beta35 I believe Unraid 6.8.3 uses kernel 4.19 and that the new Unraid 6.9 will use kernel 5.9 (or 5.8). I am therefore a bit concerned. Will I ever be able to use my intel iGPU to do Plex transcodes ? What are your thoughts ? Are you aware of any workaround ? Many thanks. Best, OP
-
Quelle coïncidence ! J'ai découvert cette chaîne hier par hasard ! #SBOKINOEL OP
-
Thank you @jbartlett. This plugin looks amazing. I uploaded a picture of, and info relating to, my 1TB Intel 660p NVME SSD to the database. For some reason, my 16GB thumb drive stick shows as a 15GB thumb drive: 100 Series/C230 Series Chipset Family USB 3.0 xHCI Controller Super Micro Computer Inc (Intel Corporation) USB controller Drive ID: sda (flash) Vendor: SanDisk' Model: Cruzer Fit Serial Number: XXXXXXXXXXXXXXXXXXXX Revision: 0 Capacity: 15GB Logical/Physical Sector Size: 512/512 Any idea why ? Not that this is an issue, I am just curious. Best, OP
