Amar Wiki - User contributions [en]

Main Page

2025-10-07T03:38:58Z

Lax: Amar Micro default page

== [[Amar:Amar Micro Inc|Amar Micro Inc]]. Presents ==

* [[Notepad:Notepad|Notepad]][[Image:New.gif]]

* [[Pillgram::Audio|Audio]]

* [[Programming:GPIO|GPIO]]

* [[Programming:Snippets|Snippets]]

* [[Programming:Javascript|Javascript]]

* [[3DPrinter:Resins|3D Printer Resins]]

All the <big>big</big> projects that I am working on.
* [[Solar:Main Page|Solar Project]]

* [[FamileMan:Main Page|FamileMan.com Social Networking Site]]

* [[AmarCommerce:Main Page|Commerce Shopping Site]]

* [[EmailServer:Mail Page|Email Server Page]]

* [[Misc:Main Page|Misc. Other projects]]

* [[CAMG:Leads|CAMG Leads Documentation]]

* [[Nurse:Install|Nurse Install Packages]]

* [[Caltex:New Server|Caltex New Server Packages]]

* [[Caltex:Navahang|Caltex Old App]]

== Mediawiki standard messages ==

<big>'''MediaWiki has been successfully installed.'''</big>

Consult the [https://meta.wikimedia.org/wiki/Help:Contents User's Guide] for information on using the wiki software.

ROFL:LOL:ROFL
|
L /------^-----
O === [] \
L \ \
\____________\
| |
----------/

== Getting started ==
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Configuration_settings Configuration settings list]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:FAQ MediaWiki FAQ]
* [https://lists.wikimedia.org/postorius/lists/mediawiki-announce.lists.wikimedia.org/ MediaWiki release mailing list]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Localisation#Translation_resources Localise MediaWiki for your language]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Combating_spam Learn how to combat spam on your wiki]

Main Page

2025-10-07T02:02:04Z

Lax:

<strong>MediaWiki has been installed and can be updated.</strong>

Consult the [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents User's Guide] for information on using the wiki software.

== Getting started ==
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Configuration_settings Configuration settings list]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:FAQ MediaWiki FAQ]
* [https://lists.wikimedia.org/postorius/lists/mediawiki-announce.lists.wikimedia.org/ MediaWiki release mailing list]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Localisation#Translation_resources Localise MediaWiki for your language]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Combating_spam Learn how to combat spam on your wiki]

Notepad:Zimbra Zimbra Let's encrypt

2025-03-08T21:38:34Z

Lax: /* *=*=* NEW *=*=* */ Getting correct ROOT X1 pem

= Zimbra renew let'sencrypt =

From : [https://gist.github.com/ugurerkan/6e9e3addf9a574ad0c57039164570e6f Zimbra Letsencrypt SSL Renew]

su zimbra
zmproxyctl stop
zmmailboxdctl stop

Then return root user and renew Letsencrypt certificate

exit
certbot renew

Change directory to Zimbra Letsecnrpyt SSL folder

cd /opt/zimbra/ssl/letsencrypt/

Copy new SSL files to Zimbra Letsencrypt folder then change owner to Zimbra.

At this point change {YourSSLDomain} to your domain which is we are working on.

cp /etc/letsencrypt/live/{YourSSLDomain}/* .
chown zimbra:zimbra /opt/zimbra/ssl/letsencrypt/*

=*=*=* NEW *=*=*=
'''2025'''

You have to add the isrgrootx1.pem to chain.

https://letsencrypt.org/certs/isrgrootx1.pem

Have a copy called ```chain.pem.working``` that should be used (copy to ```chain.pem```)

Add X3 root certificate to our chain.pem

nano /opt/zimbra/ssl/letsencrypt/chain.pem

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Newer One
-----BEGIN CERTIFICATE-----
MIIFFjCCAv6gAwIBAgIRAJErCErPDBinU/bWLiWnX1owDQYJKoZIhvcNAQELBQAw
TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjAwOTA0MDAwMDAw
WhcNMjUwOTE1MTYwMDAwWjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg
RW5jcnlwdDELMAkGA1UEAxMCUjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7AhUozPaglNMPEuyNVZLD+ILxmaZ6QoinXSaqtSu5xUyxr45r+XXIo9cP
R5QUVTVXjJ6oojkZ9YI8QqlObvU7wy7bjcCwXPNZOOftz2nwWgsbvsCUJCWH+jdx
sxPnHKzhm+/b5DtFUkWWqcFTzjTIUu61ru2P3mBw4qVUq7ZtDpelQDRrK9O8Zutm
NHz6a4uPVymZ+DAXXbpyb/uBxa3Shlg9F8fnCbvxK/eG3MHacV3URuPMrSXBiLxg
Z3Vms/EY96Jc5lP/Ooi2R6X/ExjqmAl3P51T+c8B5fWmcBcUr2Ok/5mzk53cU6cG
/kiFHaFpriV1uxPMUgP17VGhi9sVAgMBAAGjggEIMIIBBDAOBgNVHQ8BAf8EBAMC
AYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBIGA1UdEwEB/wQIMAYB
Af8CAQAwHQYDVR0OBBYEFBQusxe3WFbLrlAJQOYfr52LFMLGMB8GA1UdIwQYMBaA
FHm0WeZ7tuXkAXOACIjIGlj26ZtuMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcw
AoYWaHR0cDovL3gxLmkubGVuY3Iub3JnLzAnBgNVHR8EIDAeMBygGqAYhhZodHRw
Oi8veDEuYy5sZW5jci5vcmcvMCIGA1UdIAQbMBkwCAYGZ4EMAQIBMA0GCysGAQQB
gt8TAQEBMA0GCSqGSIb3DQEBCwUAA4ICAQCFyk5HPqP3hUSFvNVneLKYY611TR6W
PTNlclQtgaDqw+34IL9fzLdwALduO/ZelN7kIJ+m74uyA+eitRY8kc607TkC53wl
ikfmZW4/RvTZ8M6UK+5UzhK8jCdLuMGYL6KvzXGRSgi3yLgjewQtCPkIVz6D2QQz
CkcheAmCJ8MqyJu5zlzyZMjAvnnAT45tRAxekrsu94sQ4egdRCnbWSDtY7kh+BIm
lJNXoB1lBMEKIq4QDUOXoRgffuDghje1WrG9ML+Hbisq/yFOGwXD9RiX8F6sw6W4
avAuvDszue5L3sz85K+EC4Y/wFVDNvZo4TYXao6Z0f+lQKc0t8DQYzk1OXVu8rp2
yJMC6alLbBfODALZvYH7n7do1AZls4I9d1P4jnkDrQoxB3UqQ9hVl3LEKQ73xF1O
yK5GhDDX8oVfGKF5u+decIsH4YaTw7mP3GFxJSqv3+0lUFJoi5Lc5da149p90Ids
hCExroL1+7mryIkXPeFM5TgO9r0rvZaBFOvV2z0gp35Z0+L4WPlbuEjN/lxPFin+
HlUjr8gRsI3qfJOQFy/9rKIJR0Y/8Omwt/8oTWgy1mdeHmmjk7j1nYsvC9JSQ6Zv
MldlTTKB3zhThV1+XWYp6rjd5JW1zbVWEkLNxE7GJThEUG3szgBVGP7pSWTUTsqX
nLRbwHOoq7hHwg==
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Now let's check our certificates are verified via Zimbra certificate manager

/opt/zimbra/bin/zmcertmgr verifycrt comm privkey.pem cert.pem chain.pem

If you see done message in your console, first make a backup of course...

cp -a /opt/zimbra/ssl/zimbra /opt/zimbra/ssl/zimbra.$(date "+%Y%m%d")

cp /opt/zimbra/ssl/letsencrypt/privkey.pem /opt/zimbra/ssl/zimbra/commercial/commercial.key

Soooo, we are ready to deploy new certificates, run deploycrt command via zmcertmgr.

/opt/zimbra/bin/zmcertmgr deploycrt comm cert.pem chain.pem

at last, here is a happy restart.

su zimbra
zmcontrol restart

Notepad:Zimbra Zimbra Let's encrypt

2025-03-08T21:36:30Z

Lax: /* *=*=* NEW *=*=* */

= Zimbra renew let'sencrypt =

From : [https://gist.github.com/ugurerkan/6e9e3addf9a574ad0c57039164570e6f Zimbra Letsencrypt SSL Renew]

su zimbra
zmproxyctl stop
zmmailboxdctl stop

Then return root user and renew Letsencrypt certificate

exit
certbot renew

Change directory to Zimbra Letsecnrpyt SSL folder

cd /opt/zimbra/ssl/letsencrypt/

Copy new SSL files to Zimbra Letsencrypt folder then change owner to Zimbra.

At this point change {YourSSLDomain} to your domain which is we are working on.

cp /etc/letsencrypt/live/{YourSSLDomain}/* .
chown zimbra:zimbra /opt/zimbra/ssl/letsencrypt/*

=*=*=* NEW *=*=*=
'''2025'''

You have to add the isrgrootx1.pem to chain.

Have a copy called ```chain.pem.working``` that should be used (copy to ```chain.pem```)

Add X3 root certificate to our chain.pem

nano /opt/zimbra/ssl/letsencrypt/chain.pem

-----BEGIN CERTIFICATE-----
MIIDSjCCAjKgAwIBAgIQRK+wgNajJ7qJMDmGLvhAazANBgkqhkiG9w0BAQUFADA/
MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT
DkRTVCBSb290IENBIFgzMB4XDTAwMDkzMDIxMTIxOVoXDTIxMDkzMDE0MDExNVow
PzEkMCIGA1UEChMbRGlnaXRhbCBTaWduYXR1cmUgVHJ1c3QgQ28uMRcwFQYDVQQD
Ew5EU1QgUm9vdCBDQSBYMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AN+v6ZdQCINXtMxiZfaQguzH0yxrMMpb7NnDfcdAwRgUi+DoM3ZJKuM/IUmTrE4O
rz5Iy2Xu/NMhD2XSKtkyj4zl93ewEnu1lcCJo6m67XMuegwGMoOifooUMM0RoOEq
OLl5CjH9UL2AZd+3UWODyOKIYepLYYHsUmu5ouJLGiifSKOeDNoJjj4XLh7dIN9b
xiqKqy69cK3FCxolkHRyxXtqqzTWMIn/5WgTe1QLyNau7Fqckh49ZLOMxt+/yUFw
7BZy1SbsOFU5Q9D8/RhcQPGX69Wam40dutolucbY38EVAjqr2m7xPi71XAicPNaD
aeQQmxkqtilX4+U9m5/wAl0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFMSnsaR7LHH62+FLkHX/xBVghYkQMA0GCSqG
SIb3DQEBBQUAA4IBAQCjGiybFwBcqR7uKGY3Or+Dxz9LwwmglSBd49lZRNI+DT69
ikugdB/OEIKcdBodfpga3csTS7MgROSR6cz8faXbauX+5v3gTt23ADq1cEmv8uXr
AvHRAosZy5Q6XkjEGB5YGV8eAlrwDPGxrancWYaLbumR9YbK+rlmM6pZW87ipxZz
R8srzJmwN0jP41ZL9c8PDHIyh8bwRLtTcm1D9SZImlJnt1ir/md2cXjbDaJWFBM5
JDGFoqgCWjBH4d1QB7wCCZAA62RjYJsWvIjJEubSfZGL+T0yjWW06XyxV3bqxbYo
Ob8VZRzI9neWagqNdwvYkQsEjgfbKbYK7p2CNTUQ
-----END CERTIFICATE-----

Newer One
-----BEGIN CERTIFICATE-----
MIIFFjCCAv6gAwIBAgIRAJErCErPDBinU/bWLiWnX1owDQYJKoZIhvcNAQELBQAw
TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjAwOTA0MDAwMDAw
WhcNMjUwOTE1MTYwMDAwWjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg
RW5jcnlwdDELMAkGA1UEAxMCUjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7AhUozPaglNMPEuyNVZLD+ILxmaZ6QoinXSaqtSu5xUyxr45r+XXIo9cP
R5QUVTVXjJ6oojkZ9YI8QqlObvU7wy7bjcCwXPNZOOftz2nwWgsbvsCUJCWH+jdx
sxPnHKzhm+/b5DtFUkWWqcFTzjTIUu61ru2P3mBw4qVUq7ZtDpelQDRrK9O8Zutm
NHz6a4uPVymZ+DAXXbpyb/uBxa3Shlg9F8fnCbvxK/eG3MHacV3URuPMrSXBiLxg
Z3Vms/EY96Jc5lP/Ooi2R6X/ExjqmAl3P51T+c8B5fWmcBcUr2Ok/5mzk53cU6cG
/kiFHaFpriV1uxPMUgP17VGhi9sVAgMBAAGjggEIMIIBBDAOBgNVHQ8BAf8EBAMC
AYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBIGA1UdEwEB/wQIMAYB
Af8CAQAwHQYDVR0OBBYEFBQusxe3WFbLrlAJQOYfr52LFMLGMB8GA1UdIwQYMBaA
FHm0WeZ7tuXkAXOACIjIGlj26ZtuMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcw
AoYWaHR0cDovL3gxLmkubGVuY3Iub3JnLzAnBgNVHR8EIDAeMBygGqAYhhZodHRw
Oi8veDEuYy5sZW5jci5vcmcvMCIGA1UdIAQbMBkwCAYGZ4EMAQIBMA0GCysGAQQB
gt8TAQEBMA0GCSqGSIb3DQEBCwUAA4ICAQCFyk5HPqP3hUSFvNVneLKYY611TR6W
PTNlclQtgaDqw+34IL9fzLdwALduO/ZelN7kIJ+m74uyA+eitRY8kc607TkC53wl
ikfmZW4/RvTZ8M6UK+5UzhK8jCdLuMGYL6KvzXGRSgi3yLgjewQtCPkIVz6D2QQz
CkcheAmCJ8MqyJu5zlzyZMjAvnnAT45tRAxekrsu94sQ4egdRCnbWSDtY7kh+BIm
lJNXoB1lBMEKIq4QDUOXoRgffuDghje1WrG9ML+Hbisq/yFOGwXD9RiX8F6sw6W4
avAuvDszue5L3sz85K+EC4Y/wFVDNvZo4TYXao6Z0f+lQKc0t8DQYzk1OXVu8rp2
yJMC6alLbBfODALZvYH7n7do1AZls4I9d1P4jnkDrQoxB3UqQ9hVl3LEKQ73xF1O
yK5GhDDX8oVfGKF5u+decIsH4YaTw7mP3GFxJSqv3+0lUFJoi5Lc5da149p90Ids
hCExroL1+7mryIkXPeFM5TgO9r0rvZaBFOvV2z0gp35Z0+L4WPlbuEjN/lxPFin+
HlUjr8gRsI3qfJOQFy/9rKIJR0Y/8Omwt/8oTWgy1mdeHmmjk7j1nYsvC9JSQ6Zv
MldlTTKB3zhThV1+XWYp6rjd5JW1zbVWEkLNxE7GJThEUG3szgBVGP7pSWTUTsqX
nLRbwHOoq7hHwg==
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Now let's check our certificates are verified via Zimbra certificate manager

/opt/zimbra/bin/zmcertmgr verifycrt comm privkey.pem cert.pem chain.pem

If you see done message in your console, first make a backup of course...

cp -a /opt/zimbra/ssl/zimbra /opt/zimbra/ssl/zimbra.$(date "+%Y%m%d")

cp /opt/zimbra/ssl/letsencrypt/privkey.pem /opt/zimbra/ssl/zimbra/commercial/commercial.key

Soooo, we are ready to deploy new certificates, run deploycrt command via zmcertmgr.

/opt/zimbra/bin/zmcertmgr deploycrt comm cert.pem chain.pem

at last, here is a happy restart.

su zimbra
zmcontrol restart

Pillgram::Audio

2025-01-30T21:18:04Z

Lax: /* TLV320AIC3110 */ add wiki

= TLV320AIC3110 =
== Schematics ==
[[File:Tlv320aic3110-schematics-copyright.png|thumb]]

== Device Tree ==
<syntaxhighlight>
/dts-v1/;
/plugin/;

/ {
compatible = "brcm,bcm2712", "brcm,bcm2711", "brcm,bcm2835";
// compatible = "brcm,bcm2835";

fragment@0 {
target = <&i2s_clk_consumer>;
__overlay__ {
status = "okay";
#sound-dai-cells = <0>;
brcm,tx-channels = <2>;
brcm,rx-channels = <1>;
};
};

fragment@1 {
target-path = "/";
__overlay__ {
status = "okay";

codec_1v8_reg: codec-1v8-reg {
compatible = "regulator-fixed";
regulator-name = "tlv320aic3104_1v8";
regulator-min-microvolt = <1800000>;
regulator-max-microvolt = <1800000>;
regulator-always-on;
status = "okay";
};
};
};

fragment@2 {
target = <&i2c1>;
__overlay__ {
#address-cells = <1>; /* Single cell for I2C address */
#size-cells = <0>; /* No size cells for I2C devices */
status = "okay";

tlv320aic3110: tlv320aic3110@18 {
compatible = "ti-pg,tlv320aic3110", "ti,tlv320aic3110", "ti,tlv320aic311x";
reg = <0x18>;
#sound-dai-cells = <0>;
// system-clock-frequency = <12288000>; // Codec clock config
// system-clock-direction-out; // Codec as master
status = "okay";

HPVDD-supply = <&vdd_3v3_reg>;
SPRVDD-supply = <&vdd_5v0_reg>;
SPLVDD-supply = <&vdd_5v0_reg>;
AVDD-supply = <&vdd_3v3_reg>;
IOVDD-supply = <&vdd_3v3_reg>;
DVDD-supply = <&codec_1v8_reg>;

clocks = <&mclk_external>;
clock-names = "mclk";
// system-clk-frequency = <12288000>;
mclk-frequency = <12288000>;
// gpio-controller;

reset-gpios = <&gpio 13 1>; // GPIO 13 as active low reset
reset-delay-us = <10000>; /* 10ms delay */

// Debug properties (must precede subnodes)
debug;
linux,debug;

};
};
};

fragment@3 {
target = <&sound>;
__overlay__ {
compatible = "simple-audio-card";
i2s-controller = <&i2s_clk_consumer>;
simple-audio-card,name = "TLV320AIC3110";
simple-audio-card,format = "i2s";
simple-audio-card,convert-rate = <48000>;
simple-audio-card,mclk-fs = <256>;

simple-audio-card,bitclock-master = <&snd_codec>;
simple-audio-card,frame-master = <&snd_codec>;

simple-audio-card,widgets =
"Microphone", "Mic Jack",
"Speaker", "External Speaker";
simple-audio-card,routing =
"External Speaker", "SPL",
"External Speaker", "SPR",
"MIC1LP", "Mic Jack",
"MIC1LM", "Mic Jack";

status = "okay";

dailink0_master: simple-audio-card,cpu {
sound-dai = <&i2s_clk_consumer>;
dai-tdm-slot-num = <2>;
dai-tdm-slot-width = <32>;
};

snd_codec: simple-audio-card,codec {
sound-dai = <&tlv320aic3110>;
clocks = <&mclk_external>;
system-clock-direction-out = "out";
system-clock-frequency = <12288000>; //*** added LAX
mclk-fs = <256>; //*** added LAX
};
};
};

fragment@4 {
target-path = "/";
__overlay__ {
mclk_external: mclk_external {
compatible = "fixed-clock";
#clock-cells = <0>;
clock-frequency = <12288000>; // 12.288 MHz
clock-output-names = "mclk";
};
};
};
};
</syntaxhighlight>

== Explanation ==
After carefully reading the source code, I finally found the culprit of my issues. Even if the datasheet suggest I can bypass the PLL if use a proper frequency for MCLK (I chose 12.288Mhz and 11.2896Mhz which divided by 256 gives 48Khz and 41.1Khz), the device driver does not support any arbitrary frequency! They have a bunch of lookup tables for clock rates and playback and if your choice is not present, the driver will fail.

I modified the source code and added the proper lookups for my custom frequencies

Code: Select all

/* ADC dividers can be disabled by configuring them to 0 */
static const struct aic31xx_rate_divs aic31xx_divs[] = {
...
/* 11.2896 MHz (11289600 Hz) */
{ 11289600, 44100, 1, 7, 6800, 128, 8, 2, 128, 8, 2},
/* 12.288 MHz (12288000 Hz) */
{ 12288000, 44100, 1, 7, 5264, 128, 8, 2, 128, 8, 2},
/* 11.2896 MHz (11289600 Hz) */
{ 11289600, 48000, 1, 7, 6800, 128, 8, 2, 128, 8, 2},
/* 12.288 MHz (12288000 Hz) */
{ 12288000, 48000, 1, 8, 1920, 128, 8, 2, 128, 8, 2},

After a fun fight with Ubuntu to compile this, lo and behold, everything plays!

Now for my project which involves an Iot device, I don't want to have to include an unsigned device driver that will need DKMS to install with every kernel update, I will redo my PCB hardware oscillator to use a natively supported frequency. I leave as an exercise to the people at TI to write a function that dynamically creates a lookup entry for a random frequency MCLK and playback combo!

{{Wiki}}

Template:Wiki

Lax: /* KVM */

From: [https://wiki.centos.org/HowTos/KVM HowTos | KVM ]

= KVM =
== Networking - brctl ==
[https://wiki.archlinux.org/index.php/Systemd-networkd#Bridge_interface systemd-networkd]

== Start/Start libvirtd ==
== Virtual Shell virsh ==
[https://libvirt.org/sources/virshcmdref/html-single/ virsh man]

== Transfer Running Machines ==
* Windows [http://www.johnwillis.com/2014/05/p2v-windows-2008r2-to-kvm.html Transfer a running Windows]
* Linux [http://manuel.kiessling.net/2013/03/19/converting-a-running-physical-machine-to-a-kvm-virtual-machine/ Transfer a running Linux]

== Expand the size of QCOW2 disk ==
[http://www.naturalborncoder.com/virtualization/2014/12/05/increasing-the-size-of-a-qcow2-image-under-kvm/ Expand the size of a QCOW2 disk image ]

== Shrink a QCOW2 disk ==
Clear the empty space
sudo dd if=/dev/zero of=/zerofile bs=1M
sudo rm -f /zerofile
or
sdelete.exe -z C:

Then change the size
qemu-img convert -O qcow2 -c input.qcow2 output.qcow2

=== Copy a Sparse File ===

From [https://serverfault.com/questions/665335/what-is-fastest-way-to-copy-a-sparse-file-what-method-results-in-the-smallest-f Fastest way to copy a sprse file] the end result was :

* cp --sparse=always srcFile dstFile
* dd if=srcFile of=dstFile iflag=direct oflag=direct bs=4M conv=sparse
* rsync --ignore-existing -aS srcFile dstFile
* virt-sparsify srcFile dstFile

{{notepad}}

2023-12-11T19:46:52Z

Lax: /* General */ Force Sleep

= General =
* Fix UFI Partition Error
<syntaxhighlight lang="bash">
fsck_msdos disk0s1
</syntaxhighlight>
* [https://github.com/CloverHackyColor/CloverBootloader/releases Clover Releases]
* [https://github.com/jerw84/Z87-D3H Switch from Clover to OpenCore]
* [https://www.howtogeek.com/302942/how-to-figure-out-whats-preventing-your-mac-from-sleeping/ How to tell what's preventing sleep]
pmset -g assertions
* [https://www.google.com/search?client=firefox-b-1-d&q=clover+5122+to+5126 Clover 5122 to 5126]
These are the steps
# replacing the drivers > UEFI > AptioMemoryFix.efi with OpenRuntime.efi
# Also, add OcQuirk.efi (More Info: https://github.com/ReddestDream/OcQuirks)
# select: config.plist/Quirks > DisableIoMapper
= XQuartz Menu Change =
defaults write org.xquartz.X11 apps_menu '(
(
Terminal,
xterm,
n
),
(
xman,
xman,
""
),
(
xlogo,
xlogo,
""
)
)'

= Networking =
List all network hardware
networksetup -listallhardwareports
= 10Gbe Aquantia Fixes =
* [https://github.com/CaseySJ/Aquantia-macOS-Patches CaseyJ 10Gbe pacthes -> working!]
* 10GbE Support [https://www.insanelymac.com/forum/topic/330614-marvell-aquantia-10-gb-ethernet-support-thread/ Marvel Aquantia 10GBE patch ]
Kext to patch
com.apple.driver.AppleEthernetAquantiaAqtion

Find
41C70424 00000000 E9

Replace
41C70424 01000000 E9

comment
Marvell AQC107 10GBE Patch

* Monterey 10GBE Patch by Mieze [https://www.insanelymac.com/forum/topic/330614-marvell-aquantia-10-gb-ethernet-support-thread/page/15/?tab=comments#comment-2760408 Monterey Patch by Mieze]
We've got to modify the patch.
You need to find
41 c7 45 00 00 00 00 00 e9

and replace it with
41 c7 45 00 01 00 00 00 e9

== Sleep ==
From : [https://www.tonymacx86.com/threads/asus-z690-proart-creator-wifi-thunderbolt-4-i7-12700k-amd-rx-6800-xt.318311/ z690 OC]

<code>sudo pmset -a hibernatemode 0 standby 0 autopoweroff 0</code>{{notepad}}

2023-06-19T23:58:00Z

Lax: /* IoT */ mkpasswd

= Linux Tips and Tricks =
Linux stuff I often have to lookup. Just my personal list of things.

* [[Notepad:NFS unload| NFS unload filesystem]]
* [[Notepad:mysql slave skip error| mysql slave skip error]]
* [[Notepad:GRUB install| GRUB install]]
* [http://www.enterux.com/en/resources/yahoo-domainkeys-howto-debian Domain Keys]
* [[Notepad:Change Timezone| Change Timezone]]
* [http://datatag.web.cern.ch/datatag/howto/tcp.html Gigabit Network]
* [[Notepad:Syncookie| Syncookie]]
* [[Notepad:Local Mount| Local Mount]]
* [[Notepad:SWAP| SWAP]]
* [[Notepad:depmod| depmod]]
* [[Notepad:Chain of IP addresses| Chain of IP addresses]]
* [[Notepad:Xterm startup|Xterm startup]] with different colors and font sizes
* [[Notepad:RPM - YUM Platform]]
* [http://fedoraproject.org/wiki/YumUpgradeFaq In place upgrade of Fedora Core by yum]
* [http://www.cyberciti.biz/tips/rhel-centos-fedora-linux-iscsi-howto.html CentOS / Red Hat Linux: Install and manage iSCSI Volume]
* [https://www.certdepot.net/rhel7-configure-ldap-directory-service-user-connection/ Configure a LDAP directory service ]
* [[Notepad:NetworkManager Configuration| NetworkManager Configuration]]
* [http://bobpeers.com/technical/telnet_imap Accessing IMAP email accounts using telnet.]
* Enable service syslog to have /var/log/messages populated
* Force a disk check on reboot
shutdown -rF now
* [http://www.rootninja.com/create-a-network-bridge-for-virtual-machines/ Create a network bridge for Virtual Machines]
* [http://www.rfxn.com/upgrade-centos-4-to-5/ Upgrade CentOS 4 to 5]
* [[Notepad:SSL CRT generation | Create a CRT for an SSL certificate]]
* [[Notepad:Samba | Properly configure Samba on Linux]]
* [[Notepad:Postfix | Postfix config]]
* [[Notepad:wget | Use wget to download full website]]
* [http://manuel.kiessling.net/2013/03/19/converting-a-running-physical-machine-to-a-kvm-virtual-machine/ Converting a running physical machine to a kvm virtual machine]
* Generate XAUTH on a new host
xauth add `hostname`/unix:0 . `openssl rand -hex 32`
* yum versionlock - allows to lock an rpm
* install faster random for dns etc.
<syntaxhighlight lang='bash' line>
yum install haveged;
systemctl enable haveged;
systemctl start haveged
</syntaxhighlight>
* [https://askubuntu.com/questions/73864/how-to-modify-an-invalid-etc-sudoers-file How to modify an invalud sudoers file]
sudo visudo -f /mnt/etc/sudoers
* [http://manuel.kiessling.net/2013/03/19/converting-a-running-physical-machine-to-a-kvm-virtual-machine/ Converting a running physical machine into a KVM virtual machine]
* Which Process is listening on a port
netstat -tulpn
* [https://www.unixarena.com/2018/05/how-to-recover-grub-on-rhel-7-centos-7.html/ Recover GRUB 2]
* Install all package from another machine
xargs yum -y install < file
* Create Default Home Directory
mkhomedir_helper username
* [[Notepad:crontab | Schedule crontab with lock]]
* [https://hackernoon.com/how-to-shutdown-your-servers-in-case-of-power-failure-ups-nut-co-34d22a08e92 Configure UPS shutdown frmo Linux with nut]
* [[Notepad:mc | Midnight Commander]]
* [[Notepad:nagios | Nagios]]
* [https://wiki.archlinux.org/index.php/Google_Authenticator Google Authenticator Setup]
* [https://www.svennd.be/software-raid-1-on-centos-7-eufi-running-system/ Boot from Centos 7 RAID 1 EUFI]
* [https://serverfault.com/questions/779634/create-a-directory-under-var-run-at-boot Create a directory under var at boot or startup]
use tmpfiles.d and have your package create at startup or boot a file or directory /usr/lib/tmpfiles.d/mydaemon.conf :
man tmpfiles.d

#Type Path Mode UID GID Age Argument
d /run/mydaemon 0755 myuser myuser - -

* [https://wiki.archlinux.org/index.php/Lm_sensors lm_sensors]
* [https://unix.stackexchange.com/questions/227017/how-to-change-systemd-service-timeout-value Change systemd Timeout]
* [https://jumpcloud.com/blog/sharing-google-authenticator-secret-keys-across-servers/ Google Authenticator Across Servers]
* Yum install with missing deps
rpm -Uvh --nodeps $(repoquery --location <module>)

* [https://www.linuxquestions.org/questions/slackware-14/how-to-configure-iptables-for-router-with-2-public-ip-addresses-4175618196/ Example routing iptables firewall]
* [[Notepad:Disable IPv6 | Disable IPv6]]
* [https://serverfault.com/questions/620019/smartctl-megaraid-how-to-find-the-right-device-node-for-an-adapter find the right device for smartctl]
* ssh into a machine without a terminal '''<nowiki>-T</nowiki>'''
* [https://unix.stackexchange.com/questions/620427/how-to-detect-and-clean-up-junk-journal-files Clean Out Journal]
sudo journalctl --vacuum-time=3weeks
* [https://www.jamescoyle.net/how-to/323-reclaim-disk-space-from-a-sparse-image-file-qcow2-vmdk Reclaim disk space from a sparse image file (qcow2/ vmdk)]
* [https://medium.com/swlh/make-your-raspberry-pi-file-system-read-only-raspbian-buster-c558694de79 Make your Raspberry Pi file system read-only]
* [https://unix.stackexchange.com/questions/87990/linux-as-router-with-multiple-internet-providers Linux Multiple Interface NAT]
* Get Ethernet Address of network (Exclude lo, virtual and ethernet)
ip -br l | awk '$1 !~ "lo|vir|eth" { print $3 }'

== IoT ==

* [https://raspberrypi.stackexchange.com/questions/139093/change-netplan-wifi-encrypted-password Generate Encoded Password for Netplan / network-config - use psk]
wpa_passphrase <ssid> [passphrase]
* [https://stackoverflow.com/questions/73397110/how-to-stop-ubuntu-pop-up-daemons-using-outdated-libraries-when-using-apt-to-i Ubuntu stop pop-up for daemons for apt]
Change the restart command in ```/etc/needrestart/needrestart.conf``` to 'i'
sed "/#\$nrconf{restart} = 'i';/s/.*/\$nrconf{restart} = 'a';/" /etc/needrestart/needrestart.conf
* Create a user password hash to automatically add
mkpasswd -m sha-512 PASSWORD [SALT]

== LVM ==
=== LVM Expand ===
Expand the physical size
gparted
Expand the logical volume
lvextend -l +100%FREE /dev/vg.../lv....
Resize the file system
resize2fs /dev/vg.../lv...
=== [[Notepad:LVM Snapshot| LVM Snapshot]] ===

{{notepad}}