← Feed

Posts

• View post

  Your playbook failed. Management wants a root cause. You have 30 seconds. Introducing larvitz.bofh, an Ansible collection that returns Bastard Operator From Hell excuses: "Root cause: The mainframe tripped over an unhandled SIGSEGV in the automated espresso machine." Seedable, so each host keeps its story straight. Bonus category: Deutsche Bahn. https://codeberg.org/Larvitz/ansible-bofh #Ansible #BOFH #SysAdmin #DevOps #Codeberg #Humor #Linux

• View post

  @sinchens_@mastodon.social Bei der DKV fällt er einem exakt 3x in den Satz und dann gibt er auf und man kommt ins Callcenter (vermutliche ein accessibility fallback, falls jemand offensichtlich nicht mit dem Interface klar kommt) .. 😇

• View post

  Schwarz-Rot nennt es „Beitragssatzstabilität”. Übersetzt heißt das: - Pflegende Angehörige: bis zu 30 % weniger Rentenansprüche - Pflegegrade werden absichtlich schwerer zu bekommen - höhere Pflegebeiträge für Kinderlose - Medikamenten-Zuzahlung +50 % - beitragsfreie Mitversicherung für Ehepartner:innen fällt weg - Zahnersatz-Zuschuss gekürzt Die Lasten tragen Kranke, Pflegende, Geringverdiener:innen. Eine echte #Bürgerversicherung, die Beamte und Selbstständige einbezieht? Tabu. Das is...

• View post

  https://netzluege.netlify.app #humor #networking #ipv6 #verschwörung #netzwerk

• View post

  New toy for FreeBSD folks who run Ansible: a become plugin for mdo(1), the mac_do(4) counterpart to sudo/doas. The kernel decides whether the credential transition is allowed, so there is no password, no TTY, no doas.conf, and pipelining just works. Single file, BSD 2-Clause, tested against 15.1-RELEASE. https://github.com/chofstede/ansible-become-mdo Feedback welcome, especially from anyone already using mac_do in production. #FreeBSD #Ansible #RunBSD #DevOps #Automation

• View post

  Still one of the best explanations about SELinux, that I know: https://github.com/mairin/selinux-coloring-book/blob/master/PDF/en/selinux-coloring-book_A4-Stapled.pdf #linux #selinux #learning

• View post

  A bug in my Ansible connection plugin needed a real FreeBSD jail to reproduce. So I put three of them on an idle 512 MB free-tier VPS. With pkgbase, the base userland is just 33 MB. And persistent jails use zero idle processes. Here’s the build, the regression test, and the two sharp edges that cost me twenty minutes: https://blog.hofstede.it/three-test-jails-on-a-512-mb-free-tier-vps/ #FreeBSD #Ansible #pkgbase #SysAdmin #Devops

• View post

  Ansible is easy to install. A sane, reproducible development environment takes more thought. My downstream-first setup uses RHEL 10.2, Podman, VS Code Dev Containers, and Red Hat-packaged Ansible Development Tools, while keeping the boundaries between upstream projects, downstream products, development containers, and production Execution Environments explicit. https://blog.hofstede.it/sane-development-environments-for-ansible-automation-code/ #Ansible #RHEL #Podman #devop #linux

• View post

  AS201379, part 5: joined EVIX (an IXP whose fabric is VXLAN tunnels, so no port and no new machine), got IPv4 onto an IPv6-only network, and cleaned up four routers' worth of config drift. Fourteen BGP sessions, all FreeBSD, all still fitting on one Grafana screen. https://blog.hofstede.it/running-your-own-as-an-ixp-over-vxlan-ipv4-on-the-overlay-and-a-config-spring-clean/ #FreeBSD #BGP #IPv6 #Networking

• View post

  I really don’t need any more peers for my AS201379! (Okay, maybe a few more...) Started back in December 2025, and now this "little" infrastructure is running: 14 individual eBGP sessions 3 Internet Exchanges Multiple transit providers 110+ direct peers All 100% IPv6 (2a06:9801:1c::/48) because legacy IP belongs in the last century. Powered entirely by FreeBSD :freebsd: 4 routers on 15.1-RELEASE running FRR and PF. #BGP #IPv6 #FreeBSD #Routing #Networking #sysadmin

• View post

  From the engine room: Today, I updated our entire Mastodon infrastructure for burningboard.net to FreeBSD 15.1-RELEASE-p1 :freebsd: and applied all quarterly package updates. This included the Mastodon App-Server, the opensearch cluster and the Grafana monitoring stack. Also applied the Mastodon 4.6.4 update and did some cleanup (postgresql repack, removal of orphaned media files, search index rebuild, etc). All looking perfectly stable and healthy: https://status.burningboard.net :-) #masto...

• View post

  @slowclap@social.smplfi.com "Huge" .. It's roughly of 200GB of ripped DVDs 😂

• View post

  I was ill last week and discovered something uncomfortable: a huge Jellyfin library isn't entertainment, it's homework. Every time I opened it, it asked "what do you want?" and I just scrolled. So I built a TV station instead. ErsatzTV turns a media library into real linear channels with schedules and logos. It ships for Linux, Windows and macOS. My server runs FreeBSD. Turns out the entire porting effort was one conditional. The code asked "is this Linux?" when it...

• View post

  My digital sovereignty stack in 2026: Laptop OS: Linux (Fedora 44) :fedora: Server OS: FreeBSD 15.1 :freebsd: Phone: Android 17 :android: E-Mail: Self hosted dovecot/opensmtpd server File storage/sync: Nextcloud (Selfhosted) Contacts/Calendar: DAVx5 (Nextcloud backend) Camera Roll/Photos: Immich (selfhosted) Document storage: Paperless NGX (selfhosted) Bookmark storage: Kollect (my own self-developed and self-hosted app) Browser: Vivaldi (Linux, Android) :vivaldi: Mail-Client: Thunderbird...

• View post

  Had some unused keyboard body laying arround here for a while. A Keychron K8 pro, that I used in the past. Did build a fresh keyboard out of it today: - Body: Keychrom K8 Pro ANSI - Switches: Akko Rosewood (Linear, lubed) - Keycaps: Cheap double-shot PBT set "Botanical" For a budget build, it's super comfortable to type on and the plastic body of the K8-Pro with the Rosewood switches gives it a nice deep "thocky" sound profile while overall being rather quiet. Definit...

• View post

  I wanted to build Kollect for Android without filling Fedora 44 with Java, Gradle, Android SDKs, emulators, and assorted development debris. So I put the entire mobile toolchain in an Ubuntu Distrobox. It builds APKs, deploys them via wireless ADB, and even runs the Android emulator. The app also enriches links locally using Gemini Nano through AICore on my Pixel 10 Pro. Private, fast, and effectively free. https://blog.hofstede.it/android-development-on-fedora-44-without-installing-an-androi...

• View post

  I've been using my iFixit precision bit kit for years to crack open phones, laptops, and random electronics that had no business being that hard to open. Today, completely out of nowhere, it finally clicked. The kits come in sets of 16, 32, or 64 bits. Not 15. Not 20. Not some "nice round number for humans." 16, 32, 64. As in literal computer bits. Well played, iFixit. Well played. 😅 #NerdHumor #iFixit #RightToRepair #TechJokes #ITookTooLongToGetThis

• View post

  Finally got around to helping a friend with a phone repair today: shattered back glass + new battery on an iPhone 15 Pro. Waterproofing + glue everywhere made getting inside an absolute nightmare. Removing the shattered back glass was the worst part. Tiny shards everywhere, so much tedious, careful work. 😩 Job's done, phone's fixed, but that was NOT a fun repair. Seriously though, why do manufacturers keep using brittle glass for the backs of $1000+ phones? Sturdy plastic would surviv...

• View post

  Carsten Linnemann wird Gesundheitsminister. Ausgerechnet der Mann, der seit Jahren vor allem dadurch auffällt, nach unten zu treten: Gegen Bürgergeldempfänger, gegen Geflüchtete und gegen die Cannabis-Legalisierungmit mit einer Politik, die soziale Probleme regelmäßig zu individuellen Fehlleistungen erklärt. Wer Gesundheit vor allem durch die Brille von Leistung, Disziplin und Sparzwang betrachtet, ist für dieses Amt keine gute Nachricht. Gesundheitspolitik braucht Solidarität, nicht neoliberal...

• View post

  New on the blog: my Home Assistant setup on FreeBSD. Home Assistant OS runs in a bhyve VM, but bhyve has no USB passthrough, so Zigbee2MQTT and Mosquitto live in a VNET jail with the ConBee II. Homematic comes in via a CCU3, and three IKEA Matter-over-Thread devices use my Nanoleaf Shapes controller as their border router. Three radio ecosystems, 474 entities, one dashboard. https://blog.hofstede.it/my-home-assistant-setup-bhyve-freebsd-jails-zigbee-homematic-and-matter-over-thread/ #FreeB...

• View post

  Little bit of urban photography from my neighborhood. #photography #urbamism #neighborhood

• View post

  New on the blog: Hosting DokuWiki on FreeBSD with Bastille, nginx, and Caddy. A deliberately small, database-free wiki: one application jail, central Caddy ingress, PHP-FPM over a Unix socket, and explicit nginx rules protecting DokuWiki’s private data. The interesting part isn’t getting a page to render. It’s drawing clean security and backup boundaries. https://blog.hofstede.it/hosting-dokuwiki-on-freebsd-with-bastille-nginx-and-caddy/ #FreeBSD #DokuWiki #BastilleBSD #SelfHosting #Caddy

• View post

  #pastpuzzle 507 🟩🟩🟥🟥 (-11) 🟩🟩🟥🟥 (+11) 🟩🟩🟩🟥 (+5) 🟩🟩🟩🟥 (+4) x/4 🟥 https://www.pastpuzzle.de

• View post

  CDU "Mittelstandsunion" fordert Ende der Brandmauer zur AchFickDich, hat sogar einen Antrag dazu geschrieben. Haben die wieder eine Lieferung Lack erhalten? Mit Faschisten redet man nicht, da kann man nur verlieren. Der allgemeine Diskurs wurde bereits viel zu weit nach rechts verschoben. https://www.focus.de/politik/deutschland/mittelstandsunion-brandenburg-stimmt-ab-erstmals-fordert-ein-cdu-antrag-das-ende-der-brandmauer_21c2a87e-bc9d-4124-80e3-5bfbe7750254.html #fckafd #niewieder...

• View post

  #pastpuzzle 506 🟩🟩🟩🟩 (0) ▪️▪️▪️▪️ ▪️▪️▪️▪️ ▪️▪️▪️▪️ 1/4 🥇 https://www.pastpuzzle.de #pastpuzzle #luck #lucky #geraten

• View post

  AU ab Tag 1? Klar, Praxen sind ja bekanntlich leer und Ärzte haben zeit für sowas. Telefonische Krankschreibung weg? Super, dann holt man sich zur Erkältung im Wartezimmer noch die Grippe dazu. Minijobs stärker besteuern, Handwerkerbonus kürzen, Renten „reformieren“, Pflege und Gesundheit weiter kaputtsparen... Und als Trost eine Steuersenkung, die kaum über das verfassungsrechtlich Nötigste hinausgeht. Dazu Wohnraum-Vergesellschaftung blockieren, nachdem Berlin Demokratie gewagt hat. Das ist...

• View post

  My Roguelike game starts feeling better and better :-) So much fun building it out further and further every weekend 🙂 Implemented better save-state handling, combat machenics including weapons and armor, cavernous levels and much more this weekend. YAY. #gamedev #roguelike #rust #development

• View post

  New on the blog: patching FreeBSD machines inside DN42 without giving them a clearnet route. A small dual-homed VM lazily caches pkg.freebsd.org, update.freebsd.org and ftp.freebsd.org with nginx proxy_store, chases CDN redirects server-side, and serves it all over IPv6 into the mesh. pf default-denies both directions, and clients keep verifying signatures against the official FreeBSD keys. It is also a public DN42 service: point freebsd-update, pkg or bastille at bsdmirror.chofstede.dn42 and...

• View post

  FreeBSD 15.1-RELEASE is out. In my new guide, I walk through the official upgrade paths: • distribution sets with freebsd-update • packaged base with pkg • boot-environment rollback • .pkgnew merges • boot-loader checks for UEFI/BIOS https://blog.hofstede.it/upgrading-freebsd-150-release-to-151-release-the-official-paths/ #FreeBSD #BSD #Sysadmin #ZFS

• View post

  Wie gut funktioniert #KI im Support wirklich? Eine Bekannte aus dem eCommerce-Mittelstand hat gerade den perfekten Usecase geliefert. Nach der Einführung einer 80.000€ teuren custom-trainierten KI ür den Support-Chat fiel ihr Net-Promoter-Score von guten 8 auf magere 3. Die Quote der direkt gelösten Fälle (1. Kontakt) brach von 64% auf unter 25% ein. Das Management so: "Lass mal 1/3 der menschlichen Agents entlassen!" Der Rest der Abteilung darf nun per Anordnung 5 Überstunden pro W...