!coeAONBrWyDJnYMbMi:nixos.org

NixOS System Operations

593 Members
About system administration for running NixOS systems in production. Declaratively manage your operations. | Room recommendations: #networking:nixos.org163 Servers

Load older messages


SenderMessageTime
28 May 2024
@rvdp:infosec.exchangeRamses 🇵🇸You don't need to wipe the disks, you can do an installation as usual, but instead of creating new partitions, you do the conversion, and then continue with the installation as usual17:58:05
@rvdp:infosec.exchangeRamses 🇵🇸I'd still take a backup beforehand just in case though17:58:20
@netpleb:matrix.org@netpleb:matrix.org
In reply to @rvdp:infosec.exchange
You don't need to wipe the disks, you can do an installation as usual, but instead of creating new partitions, you do the conversion, and then continue with the installation as usual
what about doing the whole thing over ssh? too risky?
18:01:23
@rvdp:infosec.exchangeRamses 🇵🇸If you're comfortable with kexec'ing into an image in memory, then it's doable. If you've never done that before, then I'd make sure that you're able to get to the machine in case you mess up18:03:13
@k900:0upti.meK900 ⚡️I would generally not do anything but routine updates over SSH with no backup plan18:04:40
@netpleb:matrix.org@netpleb:matrix.org
In reply to @rvdp:infosec.exchange
If you're comfortable with kexec'ing into an image in memory, then it's doable. If you've never done that before, then I'd make sure that you're able to get to the machine in case you mess up
I have never done that before, but it sounds like that is what I would like to do. I can get to the machine physically if I mess up. Is kexec'ing better than, say, this: https://lord.re/en/posts/58-pivot_root-unmount-son-root/ ?
18:05:02
@k900:0upti.meK900 ⚡️Honestly18:05:25
@k900:0upti.meK900 ⚡️If you can get physical access to the machine18:05:29
@k900:0upti.meK900 ⚡️And it doesn't require, like, driving to a data center18:05:35
@k900:0upti.meK900 ⚡️Just reinstall18:05:36
@k900:0upti.meK900 ⚡️It's not worth the trouble18:05:39
@rvdp:infosec.exchangeRamses 🇵🇸Unless you do it for educational purposes, I agree18:06:14
@netpleb:matrix.org@netpleb:matrix.org
In reply to @k900:0upti.me
If you can get physical access to the machine
Yeah, but this is practice for when such physical access is too much of a pain.
18:06:32
@k900:0upti.meK900 ⚡️Uhh18:06:41
@k900:0upti.meK900 ⚡️If you actually have a production system you have to attempt this on18:06:53
@k900:0upti.meK900 ⚡️You have a MUCH bigger problem18:06:57
@k900:0upti.meK900 ⚡️ btrfs convert is something you do as a joke 18:07:15
@k900:0upti.meK900 ⚡️Not something you do to systems you care about18:07:24
@netpleb:matrix.org@netpleb:matrix.org
In reply to @k900:0upti.me
If you actually have a production system you have to attempt this on
Sorry, I should have clarified. It is "in production" but even the production instance is just mostly for education purposes. If I mess it up I will only be mad at myself (and nobody else will be mad at me).
18:08:46
@k900:0upti.meK900 ⚡️What I'm saying is, this is not a thing you should be practicing18:09:01
@k900:0upti.meK900 ⚡️If anything, the thing you should be practicing is never getting into a situation where you need to do this18:09:18
@netpleb:matrix.org@netpleb:matrix.org
In reply to @k900:0upti.me
What I'm saying is, this is not a thing you should be practicing
Yeah, you are probably right. Maybe better for me to figure out how to more automate a reinstall which uses btrfs and disko instead.
18:10:05
@k900:0upti.meK900 ⚡️What you're saying right now is "I'm going to practice building a campfire while being attacked by 30-50 feral hogs"18:10:20
@k900:0upti.meK900 ⚡️Like18:10:24
@k900:0upti.meK900 ⚡️Your problem isn't the campfire18:10:27
@k900:0upti.meK900 ⚡️If you're in that situation18:10:32
@k900:0upti.meK900 ⚡️You can probably figure out a campfire if you get rid of the feral hogs18:10:47
@netpleb:matrix.org@netpleb:matrix.org
In reply to @k900:0upti.me
What you're saying right now is "I'm going to practice building a campfire while being attacked by 30-50 feral hogs"
ha, I almost did refer to it as "trial by fire" in my earlier description -- should have ;)
18:10:58
@netpleb:matrix.org@netpleb:matrix.org
In reply to @k900:0upti.me
What you're saying right now is "I'm going to practice building a campfire while being attacked by 30-50 feral hogs"
* ha, I almost did refer to it as "trial by fire" in my earlier description -- should have
18:11:23
@netpleb:matrix.org@netpleb:matrix.org
In reply to @rvdp:infosec.exchange
If you're comfortable with kexec'ing into an image in memory, then it's doable. If you've never done that before, then I'd make sure that you're able to get to the machine in case you mess up
do you have a good reference for how I might do the kexec'ing into an image in memory part? I am trying to understand how that is different than the "unmount root without reboot" link above. Will kexecing into an image possibly give me the full effect of as if I had booted into a live thumbdrive?
18:24:57

Show newer messages


Back to Room ListRoom Version: 10