martes, 26 de marzo de 2024

Proxmox Backup Server find backup for specific chunk


 proxmox-backup-debug inspect chunk b531d3ffc9bd7c65748a61198c060678326a431db7eded874c327b7986e595e0 --reference-filter /path/in/a/datastore/directory


reference-filter  <- path to the Datastore


References:

Technical Overview — Proxmox Backup 3.1.4-1 documentation

Resize ZFS

 If iscsi -> rescan disk after the volume has been increase, for instance sdb

echo 1 >/sys/block/sdb/device/rescan


zpool online -e POOL /dev/sdb  <- Or other device, for instace scsi-... the volume displayed in the zpool list command

zpool list 

Verify status

zpool status POOL


martes, 20 de febrero de 2024

viernes, 9 de febrero de 2024

Disable IPv6 Windows - PowerShell

 View

Get-NetAdapterBinding | Where-Object ComponentID -EQ 'ms_tcpip6'


Disable one

Disable-NetAdapterBinding -Name 'Ethernet' -ComponentID 'ms_tcpip6'


Disable all

Disable-NetAdapterBinding -Name "*" -ComponentID ms_tcpip6

jueves, 28 de diciembre de 2023

Searching shutdown logs

Linux

grep -iva ': starting\|kernel: .*: Power Button\|watching system buttons\|Stopped Cleaning Up\|Started Crash recovery kernel' /var/log/messages /var/log/syslog /var/log/apcupsd* | grep -iw 'recover[a-z]*\|power[a-z]*\|shut[a-z ]*down\|rsyslogd\|ups'


Windows

Event IDDescription
41The system has rebooted without cleanly shutting down first.
1074The system has been shutdown properly by a user or process.
1076Follows after Event ID 6008 and means that the first user with shutdown privileges logged on to the server after an unexpected restart or shutdown and specified the cause.
6005The Event Log service was started. Indicates the system startup.
6006The Event Log service was stopped. Indicates the proper system shutdown.
6008The previous system shutdown was unexpected.
6009The operating system version detected at the system startup.
6013The system uptime in seconds.

PS C:\> Get-EventLog System -Newest 10000 | `
        Where EventId -in 41,1074,1076,6005,6006,6008,6009,6013 | `
        Format-Table TimeGenerated,EventId,UserName,Message -AutoSize -wrapdasd

References



jueves, 21 de diciembre de 2023

Remove credentials from SYSTEM context via credential manager

  1. Download PsExec and copy to %WINDIR%\system32
  2. run: rundll32 keymgr.dll,KRShowKeyMgr
Remove items.

Related to EventID 14 

Log Name:      System
Source:        Microsoft-Windows-Security-Kerberos
...
Event ID:      14
....
Description:
The password stored in Credential Manager is invalid. This might be caused by the user changing the password from this computer or a different computer. To resolve this error, open Credential Manager in Control Panel, and reenter the password for the credential Email removed for privacy.
...

Proxmox Backup Server find backup for specific chunk

  proxmox-backup-debug inspect chunk b531d3ffc9bd7c65748a61198c060678326a431db7eded874c327b7986e595e0 --reference-filter /path/in/a/dat...