[03:12] is there a way to install the ubuntu server installer on a flash drive with out installing software or having admin on a macbook? [03:13] I'm not sure diskutil will let you make changes / write to a raw device file without admin [03:13] ok [03:14] because I am going to have to reinstall [03:15] :( [03:23] well you can try launching diskutil / writing out the image to the raw usb device [03:23] with dd [03:23] I first have to nuke my server [03:25] why not write out the installer on your server [03:26] mybalzitch because it was compromized [03:26] yep [03:26] because I left a user with out a password [03:28] I thought I got all of the virus off but after I rebooted, there it was [03:34] did i miss you giving us information about this virus in scrollback [03:34] no I said talked about it [03:35] what did "there it was" involve? [03:35] some specific process (which one?) in the output of `ps`, or...? [03:36] no it reinstalled its self [03:36] yes, what did you see that leads you to believe that, is what i'm asking [03:37] dir.dir is the tell tale sign of this virus [03:38] ah [03:38] glad you're going the reinstallation route now [03:39] now I need to know how to install the installtion on a flash drive on a mac with out admin [03:40] i forget whether Disk Utility requires admin to write to USB. if not, https://ubuntu.com/tutorials/create-a-usb-stick-on-macos#3-prepare-the-usb-stick . if it does, i think those constraints don't work [03:40] since dd requires sudo and i think everything else that touches disks on the CLI does [03:40] ok [03:40] the macos channel on here (i think it's #macos? not sure) might know better [03:40] ok [03:41] oh, those instructions need Etcher, ugh [03:41] Yea [03:41] It is on my school computer [03:41] so I cannot install apps [03:41] no other computers in the house apart from your server and a locked-down mac? [03:42] not that I can access [03:42] right now I am kinda in quarantine because I was exposed and my mom is high risk [03:49] MIF, afaik, disk util needs admin rights, as the underlying tool _is_ dd [03:50] MIF: got an android phone? [03:50] no [03:51] hmm ask a neighbour to place a stick on their doormat for you to fetch [03:51] or on yours if you're quarantined [03:53] or maybe your mom can do one for you, or you can swap spots with her for a while, using her computer to do the stick [03:56] even if the server was compromised, it'd have to be some pretty advanced malware to modify the install image they copy over and write to the flash drive [03:56] im looking forward to the upcoming #ubuntu-server discussion on fomites [03:56] mybalzitch: yeah, you're angling down the route i'd take too, though it goes against "best practices" [04:09] ask a friend to make the USB stick and get it to you somehow... [04:09] I will find a way [04:09] also, if you have a router or NAS that you can log into which also has USB, that's an option too... [04:09] yes I do but I don't want to do anything to that [04:10] I mean, you could write the stick from that :) [04:10] ok === denningsrogue3 is now known as denningsrogue === StathisA_ is now known as StathisA [10:13] mmh [10:13] when c onnecting through ssh for the first time in x hours it takes very long to connect [10:13] why is this? [16:40] jancoow: could be any number of reasons. network lag, network access rules, Fail2ban, UseDNS is trying to rDNS your system and failing repeatedly, etc. [16:40] but "very long" is subjective so you'll need to be more specific [18:33] does the server installer have zfs support now? [19:39] how do curtin and cloud-init relate in terms of autoinstallations for servers? [19:39] I'm trying to mount a partition at the install stage so cloudinit can use it as a "file" debian repository (with offline packages) [19:39] it looks like cloudinit and curtin have different storage formats for this. [20:41] would curl still work [20:42] https://www.irccloud.com/pastebin/CbdEI9CR/ [20:42] what that firewall config? [20:42] and I know nothing can get in [20:59] "Pastebin deleted" [20:59] oh [20:59] https://www.irccloud.com/pastebin/Fm1K1SWp/ [20:59] try that [21:00] is that link working tomreyn? [21:04] MIF: yes, this link is working as says: sudo ufw enable; sudo ufw default deny incoming; sudo ufw reload [21:04] what is your question? [21:04] *AND says [21:04] Will I beable to use curl and wget? [21:04] outbound, yes, inbound no [21:04] so I cannot download files? [21:05] depends on where you loading from and to, i guess [21:05] github [21:05] and to install things [21:06] so - i'm guessing, for llack of details - you want to download something from github to this server, after running these commands on the server, which has a default ufw configuration. is this correct? [21:06] yes [21:06] I am working on a script to help me get my server reinstalled and that would be the first thing ran [21:06] so that should be working. does it not? [21:07] I have not tried it yet [21:07] well, you shoudl try. [21:07] if you want to see that script https://github.com/Sturtz-Network/server-setup/blob/master/install.sh [21:08] i think denying inbound traffic is the default policy [21:09] this is unsafe: curl -O http://software.virtualmin.com/gpl/scripts/install.sh; sudo chmod +x install.sh; sudo ./install.sh [21:09] it is? [21:10] how is it unsafe? [21:10] download from http, not https, code not verified, run [21:10] oh ok [21:10] how would I verify it? [21:11] against a cryptographic signature if one is provided. or a checksum [21:11] (what?) [21:11] the latter is just a rough check [21:11] and how would I do that? [21:12] the easiest option is robably to just use the HTTPS url, if you trust their webserver not to get compromised. it's not really enough, though. [21:13] you'll need to ask virtualmin folks how to verify the authenticity of their software downloads [21:13] ok, what else can I do? [21:13] ok [21:13] hmm, their installation guide is really bad https://www.virtualmin.com/download.html [21:13] ok [21:13] suggests doing exactly what you do [21:14] ok [21:15] apparently they provide gpg signed apt repositories http://software.virtualmin.com/vm/6/gpl/apt [21:15] they have apt? [21:16] why, did i write so? [21:17] oh yes, i did. then it could be so. [21:17] you could inspect the link and maybe find out for yourself. [21:17] I am [21:18] * MIF has to do it though way back because his school blocked https://virtualmin.com/ because of the forum [21:20] so how would I do that with apt then? [21:22] I will just have to go the https route === vlm_ is now known as vlm [21:30] hey [21:30] hi [21:30] can this do a filrsystem backup at install like linuxmint [21:31] thinking of using the same version mint based on [21:33] choosing carefully [21:45] MIF are you interested?