iiinova — where your digital self keeps evolving

Larvitz :fedora:

@Larvitz.burningboard.net.ap.brid.gy

94 followers 0 following 1.3K posts

Linux by trade, BSD by conviction. Also: Ancient Domains of Mystery is the greatest video game of all time (and always will be), and I will not be taking questions […] 🌉 bridged from ⁂ burningboard.net/@Larvitz, follow @ap.brid.gy to interact

Posts Replies Media

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 01/10/2026

ansible-jailexec 2.0.3 is out: a security release for the Ansible connection plugin that runs tasks inside FreeBSD jails via jexec. Files pushed into a jail were staged in /tmp on the jail host with the source file's mode (often 0644), so other local users on the host could read them during the […]

burningboard.net

Original post on burningboard.net

000

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 28/09/2026

Your playbook failed. Management wants a root cause. You have 30 seconds. Introducing larvitz.bofh, an Ansible collection that returns Bastard Operator From Hell excuses: "Root cause: The mainframe tripped over an unhandled SIGSEGV in the automated […] [Original post on burningboard.net]

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 27/09/2026

„Wie alt ist eigentlich die Jugendorganisation eurer Partei?“ Union: „Unser Chef ist 34. Jung, dynamisch und bei den Erwachsenen darf er schon fast ohne Sitzkissen mit am Tisch sitzen.“ Wenn 34 bei euch noch als Nachwuchs gilt, versteht man zumindest plötzlich sehr viel. #JU #CDUCSU […]

burningboard.net

Original post on burningboard.net

000

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 27/09/2026

For almost a year, my Ansible connection plugin for FreeBSD jails had a jail escape. A symlink inside a jail, a root-owned mv on the host, and every file transfer could land wherever the jail wanted. Rejecting ".." didn't help at all. Now it's CVE-2026-55074. Here's the bug, the fix, and what […]

burningboard.net

Original post on burningboard.net

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 25/09/2026

Got the 2026H2 Anti-Virus Update successfully installed 💉 #vaccination #vaccine #health #covid #influenza #fsme

000

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 22/09/2026

Falls jemand mit der DKV Krankenversicherung telefonieren muss, und der "AI Telefon Bot" zu nervig ist: "HALLLOOOOO?" "Ist da der Hansi?" "Also die Susanne war am Sonntag... JETZT UNTERBRICH MICH DOCH NICHT DAUERND!" [piiep] Sie werden zu einem Sachbearbeiter verbunden... Man muss einfach nur […]

burningboard.net

Original post on burningboard.net

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 21/09/2026

Meine lieblings Jahreszeit? Ende Merz!

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 19/09/2026

$ ping -Q 0xDB -c 3 bahn.de PING bahn.de: 56 data bytes Request timeout: ICMP entfällt heute ersatzlos 64 bytes: icmp_seq=2 time=48h (Umgekehrte Wagenreihung: Payload vor IP-Header eingetroffen) Request timeout: Außerplanmäßiger Halt in Fulda (USB-Stick-Kurier sucht Bordbistro) --- bahn.de […]

burningboard.net

Original post on burningboard.net

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 17/09/2026

RHEL 10 on ARM64. No convenient native Proxmox Backup Client package. Obviously, I borrowed the client from an old server container, introduced it to SELinux, and pointed it at the host filesystem. 40.6 GiB processed in five minutes. Encrypted. Incremental. Mildly cursed. “No Proxmox Backup […]

burningboard.net

Original post on burningboard.net

Reposted by Larvitz :fedora:

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 13/09/2026

We had a big wave of automated Mastodon signups with very predictable usernames. I first tried the sledgehammer approach and blocked known VPN ranges at the firewall. It worked. It also blocked legitimate ProtonVPN users. 😬 So I replaced that with a tiny custom Mastodon validator that […]

burningboard.net

Original post on burningboard.net

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 13/09/2026

We had a big wave of automated Mastodon signups with very predictable usernames. I first tried the sledgehammer approach and blocked known VPN ranges at the firewall. It worked. It also blocked legitimate ProtonVPN users. 😬 So I replaced that with a tiny custom Mastodon validator that […]

burningboard.net

Original post on burningboard.net

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 12/09/2026

sudo sed -i -E 's/^#?port = [0-9]+/port = 3306/' /etc/postgresql/*/main/postgresql.conf sudo sed -i -E 's/^#?port\s*=\s*[0-9]+/port = 5432/' /etc/mysql/mariadb.conf.d/50-server.cnf sudo systemctl restart postgresql mariadb My colleagues will hate me, but I couldn't resist 😈 #Linux #SysAdmin […]

burningboard.net

Original post on burningboard.net

000

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 12/09/2026

I had a perfectly respectable Red Hat Ansible Automation Platform. So naturally, I built an Arch Linux Execution Environment, taught pacman to answer to microdnf, and used it to patch RHEL systems. Surprisingly, it worked. This is evidence, not a recommendation […]

burningboard.net

Original post on burningboard.net

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 10/09/2026

Entire house felt like it moved. Small earthquake in southwest Germany 😳 #germany #earthquake

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 10/09/2026

Finally got my LPIC-1 Linux Certification renewed :-) www.credly.com/badges/3129bfad-404b… #linux #certification #lpi #learning

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 08/09/2026

Musste ein bisschen Schmunzeln 😆 #depol #deutschland #witzig #flachwitz

000

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 06/09/2026

[depol Sachsen Anhang] Die Hochrechnung macht traufig 😢 #depol #sachsen_Anhalt #wahl #noafd

000

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 05/09/2026

Today marks our 5th wedding anniversary. ❤️ And somehow, it doesn’t feel like five years at all. It feels like yesterday, and at the same time, I can hardly remember what life was like without her by my side. Eternally grateful for the incredible gift of […] [Original post on burningboard.net]

000

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 05/09/2026

Bespoke is a programming language in which mutation requires an apology and deadlock is an Exemplary Stalemate of Mutual Deference. The compiler is not angry. It is disappointed. Source files end in .charming. Progress is subject to etiquette […]

burningboard.net

Original post on burningboard.net

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 03/09/2026

Citrix Workspace is one of those applications I need, but do not want to adopt. So I put its official Debian package in a disposable rootless Podman container on Fedora. X11, PipeWire, GPU and webcam support go in. Citrix-shaped filesystem clutter stays out. It is a packaging boundary, not a […]

burningboard.net

Original post on burningboard.net

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 02/09/2026

Smoking area. If I'm allowed to walk through there, when I'm not wearing a smoking? 🤵🏻‍♂️ #nowträwelling #travel #joke

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 30/08/2026

#nowträwelling ICE772 von Mannheim Hbf nach Hannover Hbf 🚅 #travel #reisen #bahn #db

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 29/08/2026

[loss, grief] Tomorrow, I’ll travel across half the country, northward. Normally, the thought of a long journey fills me with anticipation. I love travelling. The movement, the distance, the changing landscape, the feeling of being on my way somewhere. Tomorrow feels different. I’m […]

burningboard.net

Original post on burningboard.net

000

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 29/08/2026

I opened a €1,400 network switch. Inside: one circuit board and some blinking lights. No conveyor belts. No sorting bins. Not a single packet. The packet lie goes deeper than you think: netlie.netlify.app #SysAdmin #Networking #IPv6 #TechHumor

netlie.netlify.app

🚨 THE PACKET LIE 🚨 — Wake Up, Sysadmin!

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 29/08/2026

At 10:15 I added a gently condescending toast for IPv4-only visitors. It called ipify, which felt inappropriate for someone running an ASN. By 13:27 I had built a Rust/Axum IP service, put it behind Caddy, added MaxMind, three DNS names, trusted-proxy handling, an rc.d service, and a dedicated […]

burningboard.net

Original post on burningboard.net

000

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 29/08/2026

It started as a gag: a tiny popup telling IPv4 visitors that their provider hasn't yet discovered 1998. To do that honestly I needed something to echo the client address. Using ipify felt wrong when you run your own AS. So now it's a service. 🙃 curl ip.hofstede.it curl v6.ip.hofstede.it/json […]

burningboard.net

Original post on burningboard.net

000

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 29/08/2026

It’s 2026. At some point we have to stop pretending IPv4 is still a perfectly normal lifestyle choice. 😇 My website now politely informs visitors when their ISP is still delivering the Internet using technology from 1981. “IPv6 has only been a standard […] [Original post on burningboard.net]

Screenshot of a dark-themed personal website titled “What I’m Running”. Several cards describe the infrastructure behind the site, including AS201379, DN42, self-hosting, Red Hat, networking, and code automation. In the bottom-right corner, a red-accented notification says “Legacy IP detected” and explains that the visitor reached the site over IPv4, a protocol from 1981, while IPv6 has been a standard since 1998. The visitor’s IPv4 address is shown below the message.

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 27/08/2026

There is something deeply satisfying about true data sovereignty. No rate limits, no third-party APIs snooping on prompts, and zero cloud lock-in. Just raw self-hosted inference pulling 154 tok/s with an absurd 0.11s TTFT on local silicon. Running Qwen […] [Original post on burningboard.net]

Screenshot of a Linux terminal session on hostname token-dispenser.

The top section displays the nvidia-smi output showing an NVIDIA RTX PRO 6000 Blackwell GPU utilizing ~87.6 GB of VRAM, running at 44°C and 354W power draw with processes python3 and sglang::scheduler.

The bottom section shows the output of a prompt script asking for a haiku about a GPU shortage, followed by performance metrics: 154.0 tok/s, 837 tokens generated in 5.44 seconds, TTFT 0.11s, reasoning on, using the qwen38-uncensored model with DFlash2 speculative decoding and NVFP4 on Blackwell architecture.

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 27/08/2026

Update from the engine room: Burningboard.net just finished updating to Mastodon 4.7.0. Everything looking stable and functional. #mastodon #mastoadmin #burningboard

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 27/08/2026

Back home after spending a week in beautiful Spain. Wonderful scenery, lots of hiking and amazing food. What a beautiful place 🇪🇸 #spain #travelphotography #travel #photography

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 27/08/2026

bhyve inside a jail sounds like a stunt. It isn’t. FreeBSD has supported it since 12.0, and it turns the hypervisor into one more manageable jail: delegated ZFS, VNET, vm-bhyve, devfs rules and all. Here is my complete production setup, including the security caveats […]

burningboard.net

Original post on burningboard.net

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 24/08/2026

So many beautiful corners to discover in Palma's historic center. Absolutely loving these winding alleys! 🌴🏛️ #Spain #travelphotography #wanderlust #urbanexploration #travelling

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 20/08/2026

Quiet afternoon in the Sierra de Tramuntana and Port de Sóller #soller #mallorca #travelling

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 18/08/2026

On vacation for a couple of days. My Mastodon account as well as my blog will be considerably quieter for the forseeable future 🙂🏖️ (And II have proper IPv6 on the roaming network here!) #holliday #travelling #vacation #roaming #ipv6

Screenshot of ModemManager GUI showing a Movistar LTE connection registered as a roaming network, with 70% signal strength. The location section says both 3GPP and GPS location are “Not supported.” A desktop panel with network and system icons is visible at the bottom.

000

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 16/08/2026

In my last blog post I said I really don’t need any more peers for AS201379. Then @reulnl showed up with: “Hey, want a connection to Piter-IX?” Obviously, the correct sysadmin response was: yes. So here we are: 10 peers now. Including one via LowPing.nl […] [Original post on burningboard.net]

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 16/08/2026

For a few months I have been building a terminal roguelike in Rust, in the spirit of ADOM and NetHack. New article on the technical groundwork: Why ratatui and legion instead of a game engine, four map generators behind one trait (rooms, cellular-automata caverns, hand-drawn ASCII prefabs, and […]

burningboard.net

Original post on burningboard.net

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 12/08/2026

Git is great at storing dotfiles. It is less good at knowing where they belong, which permissions they need, or why a work laptop and a home server should differ. Here is how I use chezmoi plus Git to manage fish, Neovim, SSH, GnuPG, Atuin and more. Including the “oops, I edited the live file” […]

burningboard.net

Original post on burningboard.net

100

Reposted by Larvitz :fedora:

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 04/08/2026

A bug in my Ansible connection plugin needed a real FreeBSD jail to reproduce. So I put three of them on an idle 512 MB free-tier VPS. With pkgbase, the base userland is just 33 MB. And persistent jails use zero idle processes. Here’s the build, the regression test, and the two sharp edges that […]

burningboard.net

Original post on burningboard.net

Reposted by Larvitz :fedora:

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 09/08/2026

netzluege.netlify.app #humor #networking #ipv6 #verschwörung #netzwerk

netzluege.netlify.app

🚨 DIE PAKET-LÜGE 🚨 — Wache auf, Sysadmin!

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 09/08/2026

netzluege.netlify.app #humor #networking #ipv6 #verschwörung #netzwerk

netzluege.netlify.app

🚨 DIE PAKET-LÜGE 🚨 — Wache auf, Sysadmin!

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 08/08/2026

New toy for FreeBSD folks who run Ansible: a become plugin for mdo(1), the mac_do(4) counterpart to sudo/doas. The kernel decides whether the credential transition is allowed, so there is no password, no TTY, no doas.conf, and pipelining just works. Single file, BSD 2-Clause, tested against 15 […]

burningboard.net

Original post on burningboard.net

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 08/08/2026

Still one of the best explanations about SELinux, that I know: github.com/mairin/selinux-coloring-… #linux #selinux #learning

selinux-coloring-book/PDF/en/selinux-coloring-book_A4-Stapled.pdf at master · mairin/selinux-coloring-book

A coloring book to help folks understand how SELinux works. - mairin/selinux-coloring-book

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 07/08/2026

BGP security stack complete for AS201379: ASPA records published for upstream authorization, backed by valid RPKI ROAs and IRR objects. #AS201379 #BGP #RPKI #ASPA #IPv6 #RoutingSecurity #NetOps

Reposted by Larvitz :fedora:

Truhe @truhe.chaos.social.ap.brid.gy · 06/08/2026

Das ist ja fantastisch: bleibzuhause.com "bleibZuhause bewertet jede DB-Verbindung mit einem Score von 0 bis 100. Je höher, desto mehr spricht dafür, gar nicht erst loszufahren. In die Bewertung fließen Live-Verspätungen, Umstiege & Anschlussrisiko, Zugart, Auslastung, Reisedauer, Preis […]

Original post on chaos.social

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 05/08/2026

Freshly updated: my AS201379 page. IPv6-only, FreeBSD + FRR, 2a06:9801:1c::/48. Now with an at-a-glance table (ASN, AS-SET, contacts), full upstream list and new EVIX alongside LocIX Düsseldorf and FogIXP. Peering policy is open. If we share a presence at any of those three, I'd love to peer […]

burningboard.net

Original post on burningboard.net

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 05/08/2026

Nice! Our Mastodon instance burningboard.net has almost 60% of total using the current generation of the Internet Protocol (IPv6) and only arround 40% still using the legacy-protocol from the 1980s (IPv4). Measured on the PF firewall of our Mastodon […] [Original post on burningboard.net]

Terminal screenshot running a shell command pipeline (pfctl -si | awk) that calculates IPv4 vs IPv6 network traffic on a server. The terminal output displays IPv4 traffic at 160.68 GiB (41.1%) and IPv6 traffic at 230.46 GiB (58.9%).

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 04/08/2026

A bug in my Ansible connection plugin needed a real FreeBSD jail to reproduce. So I put three of them on an idle 512 MB free-tier VPS. With pkgbase, the base userland is just 33 MB. And persistent jails use zero idle processes. Here’s the build, the regression test, and the two sharp edges that […]

burningboard.net

Original post on burningboard.net

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 03/08/2026

Ansible is easy to install. A sane, reproducible development environment takes more thought. My downstream-first setup uses RHEL 10.2, Podman, VS Code Dev Containers, and Red Hat-packaged Ansible Development Tools, while keeping the boundaries between upstream projects, downstream products […]

burningboard.net

Original post on burningboard.net

000

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 02/08/2026

Rice is not anonymous white ballast for transporting sauce. Jasmine, basmati, brown, parboiled, Arborio, Carnaroli. They all have different jobs. And yes, the way you cook them matters. A short argument against the German Kochbeutel, plus my rice-cooker method for fluffy, chopstick-friendly […]

burningboard.net

Original post on burningboard.net

Larvitz :fedora: @larvitz.burningboard.net.ap.brid.gy · 30/07/2026

AS201379, part 5: joined EVIX (an IXP whose fabric is VXLAN tunnels, so no port and no new machine), got IPv4 onto an IPv6-only network, and cleaned up four routers' worth of config drift. Fourteen BGP sessions, all FreeBSD, all still fitting on one Grafana screen […]

burningboard.net

Original post on burningboard.net