Using Rufus to make bootable USB thumb drives

Rufus is one my favorite utilities to use to take an ISO and make it into a bootable thumb drive.  However, once in a while, usually with HP SPP's (Service Pack for Proliant), the machine will not boot and give an error message saying it cannot find vesamenu.c32

Here's what you need to the USB drive created by Rufus to work:

Edit \syslinux.cfg on the root of the USB

Replace its content with:

DEFAULT loadconfig

LABEL loadconfig

  CONFIG /system/isolinux.cfg

  APPEND /system/

The problem is there are multiple isolinux/syslinux on the ISO (one in usb/ the other n system/) and of course Rufus has to try to guess which one is the right one. Unfortunately, it's the one in system/, whereas Rufus picks the one in usb/ by default.

Rubrik Node Swap

 Had the "fun" of swapping out a failed Rubrik R6410 node, here are a few notes:

https://rubrik.docebosaas.com/customers/learn/course/405/play/1612/physical-replacement-r6xxx-live-demo?hash=3637a3a6fceb9dc03d7076cdf1c771ab2b26d60b&generated_by=58301

R6410 Rubrik nodes (120tb raw storage) twelve 10tb drives, apx 75tb useable

-If the node is still "functioning" remove the node from the cluster (logically), else it will have to be forcefully removed from the cluster

-Turn on UID

-Power off the node

-pull out the node

-To unlock the node from the chassis, the right pull tap ear, needs a slight downward movement to unlock it, then gripping both pull tabs pull.

-The encryption module (TPM) must be swapped, from the existing (defective node) to the replacement node.

-The SSD drive may also need to be swapped, verify the amount of ram and the NVMe SSD drive 

-The TPM module is circled in yellow.  To get to it the SSD drive tray must be unscrewed from the node and set off to the side.  The screws (which are different lengths) are pointed out in red.

-The TPM module pulls straight up.  Notice that that on the TPM module itself there is one hole for the pins that blocked out, this is so it only goes in one way and cannot be plugged in backwards.

-Once things have been cabled up, go to the front of the rack, pull off the vanity cover.  There are four sets of LED’s and buttons, one set for each node.  One set of those will be off, that will be for the node you just swapped.  Press the power button.

-Put the defective node back in the box, seal up, apply the shipping label that came with the package, and get it to the respective delivery service.  Please hold on to the defective node for at least one day before sending back, so I can be sure all is well with the swap.  

Random notes on doing a restore to a Physical computer from Rubrik v5.x

High level instructions for restoring a physical machine from a Rubrik CDM v5.x  I had some difficulties so here are my notes:

I took much of my instructions from here:

https://www.it-muscle.com/windows-bare-metal-recover-on-rubriks-andes-5-0/

Rubrik instructions on how to make their boot ISO

https://support.rubrik.com/s/article/000001905

Rubrik instructions to do the restore

https://support.rubrik.com/s/article/000002677

Create an a WindowsPE Boot ISO using the info from the above links.  When creating the boot ISO, one will need both the ADK for Windows AND the Windows PE Add-On and also the Rubrik Recovery Tool Install kit.  When installing the ADK check all of the features.   

Boot the machine from that ISO.  Once there make note of the IP, if there is no IP address, assign one.

In Rubrik, find the server to be restored, choose a snapshot to "Mount", choose "No Host" , leave domain, usernames, and AD groups blank, I did put the IP's of a management station and the IP of the WinPE machine.

In Rubrik, go to the "Live Mounts" section, the "Windows Volumes", one should see the server we are working with mounted.  Make note of the "Restore Script Path".  What Rubrik has done is present a CIFS share that contains a PowerShell script and a VHDX (Hyper-V virtual hard drive).  Test this by browsing to the share (make note of the security limitations that were set during the presenting of the snapshot.  IE if the snapshot was limited to certain IP's, test the share from a machine having a matching IP.

On the machine to be restored, map the Z-drive to share off of the Rubrik, far as I can tell this is for authentication purposes.  Use: "administrator" and no password.  

net use z: \\<IP  of Rubrik>\<sharename> /user:<winpe_client_ip>\administrator *

On the machine to be restored, the next step is to launch the power shell script that will take the contents of the VHDX and dump it to the hard drive.  

Type: 

"powershell" then "set-executionPoloicy unrestricted" then "\\<IP of Rubrik>\<sharename>\with_layout\RubrikBMR.ps1

Random notes on Vmware Vcenter v6.5 & 7.0

• Clearing out the VMware Update Manager before an upgrade will cut down on the time required to update, as by default the VCenter upgrade will drag all that data with.   Also during the migration one might see an error message saying it needs an export location because the root partition is only 4gb.  

https://www.stephenwagner.com/2020/07/22/vcsa-vcenter-upgrade-7-enter-new-export-directory-source-machine/

1. Log in to your vCSA source appliance via SSH or console
2. Run the applicable steps as defined in the VMware KB 2147284 to reset VUM (WARNING: commands are version specific). In my case on vCSA 6.5 I ran the following commands:
   1. shell
   2. service-control --stop vmware-updatemgr
   3. /usr/lib/vmware-updatemgr/bin/updatemgr-util reset-db
   4. rm -rf /storage/updatemgr/patch-store/*
   5. service-control --start vmware-updatemgr
3. Open your web broswer and navigate to https://new-vcsa-IP:5480 and resume the migration. You will now notice a significant space reduction and won’t need to specify a new mount point

•  Forgot the administrator@vsphere.local password?  SSH into the VCenter, start the shell, and type: /usr/lib/vmware-vmdir/bin/vdcadmintool

http://www.virtubytes.com/2017/10/25/reset-vcenter-sso-password-vsphere-6-5/

• Need to adjust DNS settings, like the FQDN?  

https://www.virtualvmx.com/2018/05/changing-fqdn-of-vcenter-appliance.html

1. Access the VCSA from console or from Putty session.
2. Login with root permission
3. Use above command in the command prompt of VCSA : /opt/vmware/share/vami/vami_config_net
4. Opt for option 3 (Hostname)
5. Change the hostname to new name
6. Reboot the VCSA appliance.

• If there is any change to the naming of the vCenter, logon issues with using Active Directory may occur.  In my case one could logon using @vsphere.local, and clicking the check box to use local credentials worked.  However one could not type their credentials in, regardless of UPN format.  The fix for us what find the AD record of the vCenter server, go to the Attribute Editor, and change the "dNSHostName" entry.  FWIW in one instance the vCenter was using the internet name, which is different than the Active Directory name. 
• When using the built in backup feature to backup the VCSA, when using FTP the destination folder must be empty.
• https://www.altaro.com/vmware/backing-up-vcsa-6-5-natively-using-ftps/
• https://sfitpro.blogspot.com/2016/11/configuring-vcsa-65-backup-lessons.html
  
• When using the built in backup feature to backup the VCSA, all of the services need to be running, including ones for unused features.  Again from the shell "service-control --start --all"
• When doing the in place upgrade, use the hostname of an ESXi server for the source of the existing vCenter server and the destination.  Things get wonky if one tries to deploy a vCenter Server on top of the old on.
• DNS is super important (duh), my home lab kept having weird DNS lookup failures, one can use the IP addresses for the upgrade process.
• If you have plug-ins that don't work after the upgrade and seems to uninstall them, look into using JXplorer; think of it as a regedit for vCenter. The plugins will be in the "ServiceRegistrations" section.

Random Desktop Stuffs (Linux Mint, Android OS, USB Sound Cards)

I was given a HP G60-447cl notebook with the intention of giving it to my nieces to use for schooling and what not.  I upgraded the CPU to a Intel Core2Duo T7500 CPU at 2.2ghz, to replace the 1.8ghz CPU, upgraded it to 4gb DDR2 RAM, threw out the 5400rpm 250gb hard drive in favor of a 80gb SSD hard drive.  Still to slow to run Windows 10, while it would run Windows 7 just fine, I can't in good conscious install that since Microsoft isn't doing security updates.  So I put Linux Mint on it.  Surprisingly it saw all of the hardware, including the Webcam, WiFi, sound card.  It cruses the web just fine, and even does Zoom video confrencing!

I also had a couple of HP Thin Clients, T520's.  Well they didn't fit the bill to add a additional NIC and make them into a PF Sense firewalls, and the market for old thin clients is basically non-existent.  So I tried out is Android OS export.  This one was called Prime OS.  I choose one of the forks for older CPU's since this was an AMD GX-212jc 2-core, 1.2ghz (6 watt tdp, CPUmark 570), had 4gb DDR3 RAM, and 8gb M.2 SSD drive.  The install saw all of the hardware, and worked quite well.  Performance was OK, a bit on the slow side, not sure if it is the CPU speed or the OS that is holding it back.  It does work just like a tablet or phone.  

Lastly I have a HP t630+ Thin Client.  It has a decent CPU AMD GX-420CA (4core, 4-thread, 25 watt TDP, CPUmark 1549).  The 64gb M.2 SSD drive which is enough to install Windows 10 on but, with updates it would be tight.  This machine has internal USB port on it, I put a thumb drive in it, and interestingly Windows 10 sees the internal USB thumb drive as as if it was a physical SATA drive, VS. and external removable storage device. I had a difficulty getting the sound card to work.  Despite trying several iterations of drivers, both from HP and generic, I gave up and purchased a USB Sound Card. 

 

Servers and electrical efficiency

I ran across this a while ago and thought it worth a share.  In summary running a higher wattage power supply might be costing you a bit of extra money!  Aside from the higher purchase price, it turns out that power supplies have a range where they are more efficient.  I haven't done a back to back measuring.  I am sure using HP ILO's and my Kill-A-Watt the differences are within statistical noise.

Also there is gains to be had in running a single vs. dual power supply; however the savings might not be worth the single point of failure.  In my quick testing I did not see any difference on my Kill-A-Watt.

hmmmm.....interesting WIFI setup at the hotel....

random network cabeling.....

These are garbage!  Who thought it would be a good idea to have a proprietary patch panel?  So instead of using normal network cables that can be purchased almost anywhere one has to source these goofy cables.  The patch panel from the rear is normal punch downs...but the front have these really wide connectors that are almost 3x as wide as a RJ45 connector.  I have learned that they are called Krone HighBand.

It's a bad day when one's marching orders are to install some 10gb Ethernet stuff and the twin-x cable shipped looks like this!  DOH!  It is a good thing Amazon and Amazon lockers!

Used Computers for sale

I am now offering a few refurbished computers:

Standard Package: $150 (details and specifics very with changing inventory)
-Desktop or mini tower form factor
-Intel i3 or i5 processor
-8gb ram
-500gb 7200rpm SATA hard drive
-wired and wireless networking
-legal copy of Windows 10 (Windows 7 & XP also available)
-keyboard and mouse included
-shipping to the Continental United States (FYI shipping is about $70 of the total price!)
-monitor NOT included

Right now the standard machine is a HP Pro 4300 with Intel i3-3220 CPU @ 3.3ghz OR a HP Pro 6305
AMD A6-5400b CPU @ 3.6ghz with AMD Radeon

Here is what to know:

These machines come from businesses that have retired them.  Many businesses will discard perfectly working machines for several reasons (but limited to...):

1. Warranty has expired
2. The operating system is being phased out and it is easier to replace the machine vs. upgrade (aka Windows 7 being replaced by Windows 10)
3. Accounting, the fixed asset has been depreciated

Often times these machines still have plenty of life yet to give.  When I get computers that I deem worthy to live another life; the data from the previous user is securely wiped clean with no chance of previous data being recovered.  Then install the operating system that the machine is licensed for by hand, install necessary drivers, and updates.  Doing these tedious steps gives the machine a good work out and any hardware issues will be reviled. So at the time of refurbishing, I can in good conscious give them a clean bill of health. 

These machines do NOT have 3rd party Anti Virus software nor Microsoft office, or any other licensed software.  I cannot legally install these, even if the computer used to have such software on them.  Microsoft Office for instance costs something like $300!   One needs to provide your own software.  If money is a concern, there are several free anti-virus programs out there like AVG.  I also recommend Open Office as a free alternative to Microsoft; it has a similar look and feel and has 95% of the same capability.

These are not intended gaming machines.  They might work find for a game you have in mind.  We are talking about roughly 3~6 year old machines with usually built-in/on-board video cards.  While they work just fine to play most games, don't buy one thing they will play the latest VR shoot-em-up game that requires a really high frame rate.

I am not a computer business!  I sell a few machines here and there as a hobby.  I am not making money at this, if the goal was make money, I'd be better off getting a 2nd job flipping burgers. I'd rather see these perfectly good machines be put to work than recycled; and save people a few bucks at the same time.  That being said, I cannot be your tech support. 

Monitor is NOT included!!!!  The picture shows a sample machined hooked up to a 32" LED TV.

As seen on the Clarey Podast

Less than desirable network cabeling

I have been working from home recently and decided that for several mental/psychological reasons it was better to turn the empty bedroom into a makeshift office versus using my main home machine.  Just to provide some separation of work and non-work.  Since there is no end insight for working at home,I thought it better to run a "hard wire" to my work machine vs. using wireless, in order to a connection with potentially higher speed and more reliable. 

The previous owner of this house had wired this place up to be a small call center.  The downstairs living room has something like eight RJ11 jacks.  The bedroom with my office has four.  There is even a "58-block" (aka a punch down block for RJ11 wiring) in the furnace room.  The cable used is a CAT3, 6 pair.   Well RJ45 is four pair....hmmm....I am not proud of it, but over the years I have converted these RJ11 jacks to RJ45, and just wrap the unused pairs around the outside of cable.  Yes, I know this violates all sorts of best practices, it really bothers my inner OCD, and I am even embarrassed by it.  However, it works, and works fairly well.  I had a chance this week to benchmark the differences.

First benchmark is the of the office machine connected via WiFi, the WAP is a 5ghz "N" that advertises up to 300Mbps, it is physically located in the next room over.  

Second benchmark is using the ghetto Cat3 cabling.

Last benchmark is using a proper Cat6 cable plugged directly into my switch.

The Loss section of the benchmark can for the most part be ignored, as it is an instance reading vs. a running average.  Although just from watching it, the loss did seem to be a bit higher on the Cat3 vs Cat6.  It would seem that at least in this test the cabling makes little difference.  That being said my servers are all directly plugged into the switch using at least Cat5e if not Cat6.