Category Archives: Misc

Follow up on the home datacenter hardware

Posted on by
1

It’s time for a small update – the previous post is available here: https://blog.thomasmarcussen.com/new-lab-home-datacenter/

The datacenter has been running for about a week now – quite good…. but…..

I’ve been using the Samsung USB as OS drive – Samsung USB 3.0 Flash Drive FIT 32GB
It does have fast read, and a not that slow write, according to Samsung: Up to 130 MB/s

The week passed with setting up and installing VMs – using the actual VMs etc.
But when installing Windows Updates on the Hyper-V host, installing Features/Roles or anykind of configuration, it seems to slow down to useless/freeze.

Running a full Windows Update took about 2 days to reach fully patched level.
During that time it was useless as in no respondig.

I ran a WinSat drive test on the Samsung USB Flash Drive:

Random 16.0 Read: 8.87 MB/s
Random 16.0 Write: 5.45 MB/S

Random reads and writes seems pretty low.

The sequential seems a bit better:

Sequential 64.0 Read: 76.89 MB/s
Sequential 64.0 Write: 86.95 MB/s

The Commands used with winsat:
Winsat disk -drive C: -ran -write (Random 16.0 Write)
Winsat disk -drive C: -ran -read (Random 16.0 Read)
Winsat disk -drive C: -seq -write (Sequential 64.0 Read)
Winsat disk -drive C: -seq -read (Sequential 64.0 Write)

So I decided to replace to Samsung USB 3.0 Flash Drive FIT as a OS Drive.

The new hardware choosen ended up being:

1 x StarTech.com USB 3.0 to M.2 SATA External SSD Enclosure with UASP
1 x Samsung 850 EVO M.2 2280 SSD – 250GB

SM2NGFFMBU33 - StarTech.com USB 3.0 to M.2 SATA External SSD Enclosure with UASPMZ-N5E250BW - Samsung 850 EVO M.2 2280 SSD - 250GB
NOTE: the StarTech.com enclosure does not support NVMe, so did choose a m.2 SSD.

I know that StarTech also have USB 3.1, but i really do want to keep the USB 3.1 port free for an additional RAID enclosure when/if needed. Properly a StarTech enscloure but not sure yet.. (USB 3.1 (10Gbps) External Enclosure for Dual 2.5″ SATA Drives) still looking for a nice USB 3.1 enclosure that supports m.2 NVMe…

Samsung states the specs for the new disk as:

  • Up to 500MB/s Sequential Write
  • Up to 540/s Sequential Read

The actual performance test on the Samsung 850 EVO M.2 2280 SSD:

Random 16.0 Read: 276.51 MB/s
Random 16.0 Write: 271.37 MB/S

Sequential 64.0 Read: 388.85 MB/s
Sequential 64.0 Write: 383.71 MB/s

So in any case it’s quite a performance boost for the OS disk.

 

The new LAB and home datacenter

Posted on by
1

Finally i managed to setup the new lab and home-datacenter.

Due to several home limitations (cost of power, space and noise)

The decision was clear:

1 x Intel NUC Skull Canyon NUC6i7KYK

2 x G.Skill Ripjaws4 SO DDR4-2133 DC – 16GB

1 x USB 3.0 to Dual Port Gigabit Ethernet Adapter NIC w/ USB Port

2 x Samsung NVMe SSD 960 EVO 1 TB

1 x Samsung USB 3.0 Flash Drive FIT 32GB

The NUC can run RAID 0 and 1 on the internal NVMe drives, i’m going for RAID 0 (Stripe)
This is where it gets a bit interesting.. Mostly i’m going to run VM’s within Hyper-V.
Hyper-V and deduplication that is… of course.

I needed to move the OS to another disk, for maximum storage.
Keep in mind, deduplication will not run on OS/System disk.

This is where the USB Flash Drives comes in handy, Windows Server 2016 can run directly on that, leaving me with 2 full NVMe drives in RAID 0 and deduplication – YAY!

that’s the hardware part 🙂

 

 

 

The follow up post is here: https://blog.thomasmarcussen.com/follow-up-on-the-home-datacenter-hardware/

Protect Yourself Against Petya Ransomware

Posted on by
Reply

The malware requires administrator rights to the local computer. Standard users should not have this in permission. Consider restricting who has local admin rights to prevent execution of exploit code within organisations. Home users should also consider using a Standard User Account for day-to-day operations.

Access Director can help you by removing permanent local admins.

Recommendations for Enterprises

  • Deploy the latest Microsoft patches, including MS17-010 which patches the SMB vulnerability.
  • Consider disabling SMBv1 to prevent spreading of malware.
  • Educate end-users to remain vigilant when opening attachments or clicking on links from senders they do not know.
  • Ensure you have the latest updates installed for your anti-virus software.
  • Ensure you have backup copies of your files stored on local disks. Generally, user files on local drives are replicated from a network share
  • Prevent users from writing data outside of designated areas on the local hard disk to prevent data loss if attack occurs.
  • Operate a least privileged access model with employees. Restrict who has local administration access.

Petya does not encrypt files. it encrypts the Master File Table, which is the index of where all the files are stored on a hard disk drive.

“Petya uses the NSA Eternalblue exploit but also spreads in internal networks with WMIC and PSEXEC. That’s why patched systems can get hit.”
Mikko Hypponen confirms, Chief Research Officer at F-Secure.

PT Security, a UK-based cyber security company and Amit Serper from Cybereason, have discovered a Kill-Switch for Petya ransomware. According to a tweet, company has advised users to create a file i.e. “C:\Windows\perfc” to prevent ransomware infection.

 

Installing PHP for IIS Using Microsoft Web Platform Installer Offline

Posted on by
Reply

You may need to install PHP for IIS using the offline installer

  1.  Download and install the Microsoft Web Platform Installer to a computer that has Internet access and to the server where PHP is to be installed. from http://php.iis.net
  2. Create a local folder for the WebInstallerCache
  3. WebPICMD.exe /List /ListOption:All >C:\TEMP\WebPIOffline\Products.txt
  4. Review the Products.txt for needed products to install.
    I needed PHP54, PHPManager and SQLDriverPHP54IIS
  5. Run the following commands from the computer with internet access
    1. WebPICMD.exe /Offline /Products:PHP54 /Path:C:\TEMP\WebPIOffline
    2. WebPICMD.exe /Offline /Products:PHP54 /Path:C:\TEMP\WebPIOffline
    3. WebPICMD.exe /Offline /Products:PHP54 /Path:C:\TEMP\WebPIOffline
  6. Copy the WebPIOffline folder to the server without internet access
  7. Run the following commands from the computer without internet access to install the products
    1. WebPiCmd.exe /Install /Products:PHP54 /XML:C:\WebPIOffline\feeds\latest\webproductlist.xml
    2. WebPiCmd.exe /Install /Products:PHPManager /XML:C:\WebPIOffline\feeds\latest\webproductlist.xml
    3. WebPiCmd.exe /Install /Products:SQLDriverPHP54IIS /XML:C:\WebPIOffline\feeds\latest\webproductlist.xml

Products should now be installed and you can continue with your configuration

Install Spotify for Kodi (Krypton Jarvis)

Posted on by
Reply

I prefer to use Kodi on my Raspberry pi, its simple and running very well.
Unfortunately there is no native support for Spotify – Marcel van der Veldt to the rescue.

Marcel put up a nice music add-on for Spotify, it even works very will with Spotify Connect/Streaming devices.

  1. Download and copy the Marcelveldt Repository zip file to your Kodi box
  2. Open Kodi -> System -> Add-ons – > Install from zip file (if you copyed to another folder then the repository folder, the use “browse in root file system”)
  3. Install and wait for add-on enabled notification
  4. Go to install add-on from repository and select Marcelveldt’s Beta Repository.
  5. Select Music Add-ons
  6. Select Spotify
  7. Select Install
  8. Wait for add-on enabled notification
  9. Select Spotify
  10. Select Configure
  11. Add your Spotify username and Password
  12. Reboot

..And you’re done! 🙂

You can access your Spotify playlists from music add-ons.
Your device will also be visible for streaming to/from – I tested it from my iPhone 7, works great! 🙂

 

 

 

Multiple subdomains with LetsEncrypt? YES!

Posted on by
Reply

Need to add multiple subdomains with LetsEncrypt?
maybe Certificate for WWW and non-WWW?

do a dry run, to test it

./certbot-auto certonly -d originaldomain.com -d www.originaldomain.com -d new.originaldomain.com -d new2.originaldomain.com -d new3.originaldomain.com –dry-run

I tested it with apache2 works great!

Windows 10 hangs after patches May/17 (Windows Defender & Trend Micro)

Posted on by
Reply

There seems to be an issue with Trend Micro and Windows Defender after Windows/ Defender patches has been applied.

The quick workaround is to deploy are registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
The dword value should be 1: DisableAntiSpyware


In case it does not exist, go ahead and create it.
Restart and you should see things start working again.

If you have the issue, you should be able to deploy it using Group Policy Preferences.

NOTE: You can also enter safe mode and create the needed key.

Reference links:

https://technet.microsoft.com/en-us/library/cc749126(v=ws.10).aspx

https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-antivirus/deploy-manage-report-windows-defender-antivirus

https://support.microsoft.com/en-us/help/12376/windows-10-start-your-pc-in-safe-mode

 

Powering multiple USB devices

Posted on by
Reply

Powering devices trough USB is getting more and more common.
If you, like me, have multiple devices like Raspberry PI, Thinker Board, mfi etc etc.

You might want to use one single device to power them all, but what to use?
I’ve tried a few now, some of the devices not delivering the needed effect to the devices, unfortunately.

I ended up with a 50W 10 Ports USB Power supply.

Specifications:

Output: 5.0v-10A (each 2,4 max)
Input: 100-240VV -1.4A 50Hz-60Hz)
Model: XBX09L

its most commonly referred to as a traveling adapter, but works like a charm in your home “datacenter” or for charging multiple devices in your household.

My Setup:

I’m powering 5 Raspberry Pi’s (RPI3), 1 Tinker Board and 1 mFi Port.
For now its been running for 2 months with no issues or power cycles needed.

The Device:

The OEM model is £10 off ebay.

Also available on Amazon

Plug: EU/UK/US/AU
Color: Black/White

 

MCT Program Update: Office365

Posted on by
Reply

We are super excited to announce that MCT Software & Services subscription now includes a non-trial version of Office 365 Enterprise Developer. Many of you have been waiting for this for a long time and we have made it happen for you. Office 365 is no longer a one year free trial version. This is effective immediately.

Office 365 Enterprise Developer includes:
• Exchange Online
• Flow for Office 365
• Microsoft Planner, Microsoft Teams
• Mobile Device Management for Office 365
• Office 365 ProPlus
• Office Online for Developer
• PowerApps for Office 365
• SharePoint Online for Developer
• Skype for Business Online