Mike dot-mike

Ubuntu 22.04 Annoyances

Here are a few collected ways I like to customize Ubuntu 22.04 servers. I used to love Ubuntu, but I hate auto updates and snaps. They also put ads and other usless ads diguised as "news" in MOTD. ESM FUD is spread throughout the OS including simple apt functions. You do not need ESM and thus Ubuntu 22.04 has become super annoying. unattended-upgrade is an automatic installation of security (and other) upgrades without user intervention. Consider the ramifications of disabling this service.

Disable unattended upgrades

The Unattended Upgrades feature is enabled by default and it runs at system boot without the user's permission. The configuration is stored in /etc/apt/apt.conf.d/20auto-upgrades

Disable: sudo dpkg-reconfigure unattended-upgrades then a TUI will come up, select "No"

This will not permantently disable the function. After an update it will be enabled. In the file /etc/apt/apt.conf.d/20auto-upgrades change these values from 1 to 0. Even doing this it will

awesome-osu

contact me on my discord server will be updated soon!

Overview

PIV on Yubikey can be utilized for SSH authentication, Windows OS login authentication, NTFS Encrypted File System (EFS) support, Bitlocker and other use cases. The examples below are using self-signed certificates and keys generated on the Yubikey secure element, but can be customized for an enterprise environment with a root CA/intermediate CA and trusted certificate chains as needed. Note: While using a CA allows for easier scalable management, this also increases the required ring of trust, and thus can potentially decrease security if not managed properly.

Requires: Windows 10 Pro (20H2 used in the document, but will work on earlier versions of Pro), Yubikey 4 or 5 security token.

PIV References: NIST: https://csrc.nist.gov/publications/detail/sp/800-73/4/final Yubico PIV Setup: https://developers.yubico.com/PIV/Guides/Device_setup.html

Instructions

Linux essentials

sudo apt update && sudo apt-upgrade -y
sudo apt install wget curl vim -y

https://web.archive.org/web/20220308212352/https://www.microsoft.com/en-us/evalcenter/evaluate-windows-server-2016/

Windows 2012 R2 Essentials: http://download.microsoft.com/download/8/F/7/8F7024D2-AB2A-4BE2-8406-1E3AC49C5C1F/9600.16384.WINBLUE_RTM.130821-1623_X64FRE_SERVER_SOLUTION_EN-US-IRM_SSSO_X64FRE_EN-US_DV5.ISO

Windows 2012 R2: http://download.microsoft.com/download/6/2/A/62A76ABB-9990-4EFC-A4FE-C7D698DAEB96/9600.17050.WINBLUE_REFRESH.140317-1640_X64FRE_SERVER_EVAL_EN-US-IR3_SSS_X64FREE_EN-US_DV9.ISO

Windows 2016: https://software-download.microsoft.com/download/pr/Windows_Server_2016_Datacenter_EVAL_en-us_14393_refresh.ISO

Windows 2019 Essentials: https://software-download.microsoft.com/download/pr/17763.737.190906-2324.rs5_release_svc_refresh_SERVERESSENTIALS_OEM_x64FRE_en-us_1.iso

	#!/bin/bash

	# NOTE: This requires openssl to be installed via https://gist.github.com/alexgurrola/db0736378d565bab3b2e35a66e7d9e50 to provide the necessary sources to install nginx with the latest openssl
	# usage: wget https://gist.githubusercontent.com/alexgurrola/4f7fc9a317a68a3895858e24c83ea437/raw/install-nginx-1.25.2.sh && chmod +x install-nginx-1.25.2.sh && ./install-nginx-1.25.2.sh

	# display current version
	nginx -V

	# install prerequisites
	sudo apt update

	#!/bin/sh
	export DEBIAN_FRONTEND=noninteractive
	apt update \|\| exit 1
	apt -y install libnss-ldapd libpam-ldapd ldap-utils \|\| exit 1

	echo '
	uid nslcd
	gid nslcd
	uri ldap://[QNAP(LDAPサーバ)のIPアドレス]/
	base dc=some,dc=domain,dc=jp←QNAPの設定からコピー

	#include <stdio.h>
	#include <stdlib.h>
	#include <errno.h>
	#include <string.h>

	#include <wiringPi.h>
	#include <softPwm.h>

	#define PIN 10
	#define RANGE 100

	/**
	* Our default hide until search behaviour still performs an initial "cache" of markers, but the markers are not shown
	*
	* This really shows weakness at large data set handling (thousands) where the search will fail if the initial cache is not created
	*
	* This series of overrides will overcome this by only doing the first fetch when the search is performed
	*
	* It then re-runs the search after the fact, but only if it has not been done already
	*
	* This can be added in Maps > Settings > Custom Scripts > Custom JavaScript

	USERNAME="admin"
	PASSWORD="testAdmin"