better buy a computer from ministry of freedom if you want to store your delicious cheese pizza *securely*

what else is linux good for anyway

making life harder

If Linux makes your life harder, don't use it ¯\_(ツ)_/¯

Was sarcasm, I actually like using it.

>you can't get rid of the ME

me_cleaner hours

and the t420 can do 16GB just not 16GB + eGPU

eGPU is a shit meme anyway

I was considering eGPU until I got an actual PC.

Then I was like

Why would I run around with a fucking ribbon cable coming out of my expresscard slot when I can just play shit on my desktop

me cleaner does not get rid of all proprietary blobs

therefore you cannot state that it gets rid of ME

but who I am, talking back to a /r/thinkpad mod who doesnt own a thinkpad

there is no such thing as shit meme

@JHWH it gets rid of most of the ME, getting rid of the whole flash region leaves the machine unable to boot as the hardware can't be initialized - it still gets rid of (most of) it and that's all that's possible on hardware above c2d era stuff.

also I dropped my mod position as the owner of the discord is a cunt

Any of you folks know where to get updated Win10 Enterprise installation media? Got the licensing bit covered, just want to install from something more recent than my pre-Ryzen stuff

from the same place you got your license key

Yeah, but it's a real bitch to find things if you don't already know the thread title there.

Figured it was worth a shot.

I have one public IP and one host computer, on this host computer, there are N VMs which have internal IPs (virtual network)

VM1 has the internal IP 10.10.10.1
VM2 has 10.10.10.2
etc etc

I have a domain with *.domain.tld having A and MX records on the host's IP

Now I want to configure it in a way, that all gets forwarded to the internal IPs depending on the hostname. Means, if I ssh into vm1.domain.tld, the host should forward it to 10.10.10.1, if I call vm1.domain.tld:80 via http, that should also be forwarded to VM1
is that possible and if yes, how?

or at least what's the term for doing so? I know that AWS does something similar

@timsandtoms just get evaluation version from their site

@porco you mean reverse proxying ?

yes I could solve the http thing with an nginx reverse proxy, but I'd like to do it with all services, specifically ssh, ftp, http, https

Squid ?

you can't exactly do it in the way you describe i think

if you open say, a ssh connection, i don't think it sends the hostname used

unlike http

but amazon does it on AWS

yeah but they probably do it on a DNS level then

on amazon, you can ssh using the hostname, but not using the IP, because other containers have the same IP

right that could be

so instead, the better way would probably be to let ssh run on a different port on every vm, and then just use ssh forwarding

ssh host:2201 => vm 1
ssh host:2202 => vm 2 etc etc

@Tervy Can I permanently activate that and use group policy?

maybe look at SRV records?

Let me look that up

@timsandtoms not 100% sure so i wont give you "yes" answer to that

No worries. I'm just trying to avoid that hour long trawl through the MDL forums that I always end up doing, I'll suck it up and stop being lazy.

@Goz3rr from what I understand, for using a srv record, the service would need to be discoverable already

which isn't if my IP is internal

I never used AWS so I'm not familiar with what they do, but on azure they just open up different ports

reading what AWS does now

I can't set 10.10.10.1 as a target

but it looks like they use a ssh server on the host as a proxy

oh I tried to find that out, too

you can uh

set up one ssh server as a gateway

that redirects based on key

because the protocol doesn't actually send the hostname

the key thing is a good idea though

http://quark.humbug.org.au/publications/ssh/ssh-tricks.html

the first paragraph here

that looks like what I want to do

I'll try that out

if it works I can make a nice script to deploy the keys and it's good to go

then there is always the overkill "traefik" setup

yes but that's also just http

alternatively most ssh clients support jumphosts

so you ssh in to your host, and then it runs the ssh command to ssh into the instance you want

jumphosts are what I am using now but I spend a few hours / week explaining people how to use jumphosts

really ? i always thought traefik can do almost anyhting on packets you want

ah

our girl @小機器豬 for example is hosted on one of such VMs

cant you specify what port goes to what port on vm on traefik ?

yes but only for http services

should that just clear your headache with ssh etc

```@tbouvet as mentioned in the README, Traefik is an http (only) reverse proxy, then the answer is no. We want to add TCP support in the future, you can follow this issue #10.```

https://github.com/containous/traefik/issues/1611

really traefik is just http

TIL

so ? https://docs.nginx.com/nginx/admin-guide/load-balancer/tcp-udp-load-balancer/

to help ?

actualy im quite suprised there is no "easy to use" tool for this

let me check that out, nginx is actually quite easy to use

a reverse proxy is 5 lines of configuration but I though it's also just http

maybe I can actually abuse nginx load balancer for that

@Droidbot why are you lecturing me about it? I know all of this. I still stand by my conviction that "getting rid of most of it != getting rid of it"

ergo, coreboot does not get rid of ME

why are australian underagers like this??? always pretending to know-it-all

this is dapple all over again

I'm just saying, no need to get your titties in a tangle

tell him @JHWH

http://i.4cdn.org/wsg/1544304805110.webm

@porco hows the website going?

what do you guys use to encrypt your animes? vera, luks, dm etc

LUKS in hidden containers

why

it's an open secret that when the democrats return to power they intend to criminalize all anime posession

@porco can you achieve plausible deniability with LUKS?

encryption .. you mean ctrl-delete

encrypted hidden vera volume on a microsd card superglued onto the back of a casio f91w with false hidden contact pads revealing

@Stims you don't

it's a meme that doesn't work

@porco afaik this is not really possible

but if you have an ipv6 range available, you might want to use that

just bind it to different addresses

I wish I had ipv6 but my backward country has way too much IPv4 space allocated so nobody cares about v6

no clue how AWS can achieve something similar without modding the client

AWS uses forwarding based on public keys

ah

can openssh do that?

Which is what I'm doing as well now

oh nice

sounds good

Well I have to explain to 27 idiots how to use public keys

Only 3 of them do, others use password auth

why not just use different ports in that case

Most of them are too dumb to remember their port

I really got a lot of support issues on any thing that I tried

All because I'm too stingy to spend 400 Eur on another IP subnet

ISP offered me 128 IPs for 400 Eur / month but it's all nonprofit so... No

The price itself is a good price for 128 IPs

if they are part of continous block sure

Yes they are

but if they are 1 from everywhere in adress space kind of deal

then thats really shit deal :D

They explicitly offered me a /25

So they have to be all in the same space

there's also sslh but it doesn't really help you when the services you share are all the same

But I'm giving free VPS to the refugees I'm teaching to webdev. It both looks good on my cv and it pisses off webdevs. But I'm doing it for free so I don't want to spend money on it

:DDDD

why not get some of those City-support moneys

I'm trying but it will take months

I told them I need more infrastructure

Economic migrants you mean

Yes fine middle Eastern gentlemen

remember not to use master/slave terminology :P

owo *notices masters bulge*

daddy, why wont any of my bluetooth accessories connect to my Linux computer?

cause you didnt turn your bluetooth devices on

https://www.reddit.com/r/Amd/comments/a5w9lf/how_to_repaste_like_a_boss/ @Tervy was this you??

what in the fuck

tho i do use this shit

best product i have seen so far for thermal grease

i just use a dot

https://www.youtube.com/watch?v=TRytGgmdeQM

currently use kyronaut tho which has a nice spreading thing

best thermal paste you can buy appreantly

saying that

he makes it look 1000000x easier than it is

i bought the ZM one when i was pc-building noob

in practise it's much harder to use than whatever as it's so much thicker

and fell in love with the thing

yeah artic includes that spoon too these days

ofc professionals use only thermal interface tape

(funfact those pads insulate usualy more than conduct depending on size)

nth1 is cheeper and better

I prefer that, too. Much easier and less messy to apply @Tervy

Grizzly actually fixed most of my throttling issues I have with this shitty thonkpad

fucking expensive shit though

A gram of that paste retails for around $15 in Canada

what shitty thonkpad

yeah pretty muc

@porco idk just putting a small dot down is quicker and cleaner

I use those spreader things

yes but then my autism always makes me think that the dot might either have been too much or not enough

and I continue questioning myself

a tape is much nicer

you see the whole CPU is covered and you don´t have to think about it any further, instead you just go on with your life

@Hiruzen T420

>1366x768

it's 1600x900

that's not so much better but still better

Better than 1366x768.

tfw IPS panel on x220 still at 720p

It's an IPS panel as well, doesn't look too bad.

I've seen better.

can you mod it to 1080p?

I think so

what's the point on something as small as an x220

even my 11.6" chink laptop that I bought for 90 $ in Taiwan has 1080p

netbooks are amazing

I'd never get something larger than 12 "

Netbooks are pretty nice, except for the small keyboard

11.6" is perfect

T420 is 14"

Even the pixel density of this display isn't enough for me

I'll look into modding it

wqhd

t420

the keyboard of my chink 11.6" laptop is about the same size of keys as my gf's 13" MacBook Pro keys, just less space between the keys

There's WQHD displays for a T420?

jesus christ gimme.

WQHD I doubt, the GPU of it would never handle it, much less the battery

maybe 1080p?

Probably not

What's worse is that I think the NVS 4200M in this is dead

no WQHD

Every time I use it it just crashes.

I've been using HD 3000.

how long have you used this t420blazeit meme

Nearly three years.

Back last year, when I didn't have a proper gaming machine

I nearly killed this thing trying to play CSGO

a workstation version of a GT 520M isn't good for gaming

This damn thing still hits 75C when building.

https://world.taobao.com/item/43779473864.htm

noname chink netbook

fish

yes well that was the best decision of my life

username: fish on every device

ok

what works for u friend

Not a bad netbook

fhd, celeron

good for sysadmin

that's the only laptop that I actively use, my other laptops are just catching dust

200hr battery life

yep

I've used it all the time without ever sleeping on a 17 hour flight

and when I landed, it still had about 15 % battery left

does it vidya @ 1080p?

>celeron

it doesn't even minecraft

vidya like anime

Lubuntu 18.10

Because I'm too stupid 90% of the time.

to launch minecraft, I have to set the resolution to 800 x 480 and set minecraft to lowest settings

i only use linux mint

cinnamon is the ultimate comfy

I fell for the manjaro meme because of this server but AUR is broken and useless

>aur
>working as intended

most obscure packages are outdated on AUR and haven't been touched in years

apt is greatest

on the other hand ubuntu's PPA are clearly versioned

so you know before trying if it will work or not

It's why I use ubuntu a lot more

because pajeet use ubuntu and they have a lot of time

What chinkbook is it?

But I do away with gnome 3 because it's cancer.

I am using both Manjaro / Arch on the laptop and Ubuntu on the desktop and I have to genuinely say Ubuntu works better

@Raikon noname from Taiwanese street market, a non-international ASUS

it was released to Taiwan only

but rebranded

doesn't have "ASUS" on the case

LXQt is lightweight, but ugly. Budgie seems to run great on this, and looks okay.

but it is made by ASUS

Huh, interesting.

surfbook

ASUS sells a lot of off-roadmap whitelabeled devices to local Taiwanese chains

so that bigger supermarkets etc can market their ""own"" devices

and this is such a device

64 GB eMMC
1 x 4 GB Single Channel DDR4 <:kms:327934280619655179>
Intel Celeron N4000
1 x Mini PCIE (WiFi + Bluetooth)
1 x M.2 2242 (empty, but my NVMe SSD doesn't work)

oof.

and I paid 90 $