Jitdor Tech Tips

JTT: Random collection of random things

  • Upgrading VMware ESXi via ESXCLI

    Upgrading VMware ESXi via ESXCLI

    We can upgrade our existing ESXi host using the command line. I would recommend doing it over SSH since it would allow better cut-and-paste operations, but the web prompt would work equally well. The latest version at the time of writing is 8.0U1a, which is identified by the image name ESXi-8.0U1a-21813344. The commands to upgrade…

  • Fix: NO_PUBKEY error when installing ookla/speedtest-cli on Debian 11

    Fix: NO_PUBKEY error when installing ookla/speedtest-cli on Debian 11

    You’re here probably because you tried to use install the official Ookla Speedtest client in Linux, and failed. When you do an apt update you will be presented with the following error: This happens because, unfortunately, the installation script did not put the public cert that is used to verify the signature of the repository…

  • CoinTickr Setup Guide

    CoinTickr Setup Guide

    Finally received my Kickstarter-backed CoinTickr, onlyt to realize it doesn’t come with a user manual, even though the packaging clearly states otherwise. The QR code teleports you to the cointickr.io site, with no sight of setup instructions besides a ton of marketing stuff on its Indiegogo campaign right now, which is lame. Fortunately, for someone…

  • HEVC Video Extensions for Windows 11, free from Microsoft Store

    HEVC Video Extensions for Windows 11, free from Microsoft Store

    If you have installed a fresh copy of Windows and attempted to play an H.265-encoded 4K UHD movie file, chances are you will be prompted to purchase this HEVC extension for S$1.50. However, there is actually a free version of this extension that is not searchable from the Microsoft Store. You’re welcome.

  • Setting up Cloudflared, the DNS-over-HTTPS client, the correct way

    Setting up Cloudflared, the DNS-over-HTTPS client, the correct way

    DNS over HTTPS (DoH) is a protocol for performing remote Domain Name System (DNS) resolution via the HTTPS protocol, which prevents eavesdropping and manipulation of DNS data by man-in-the-middle attacks by employing HTTPS encryptions between the DoH client and the DoH-based DNS resolver. At the time of writing, the official guide at Cloudflare is broken,…

  • Building the latest Windows 10 Enterprise VL USB installer from scratch

    Building the latest Windows 10 Enterprise VL USB installer from scratch

    If you are a Microsoft Volume License customer, the usual channel for obtaining creating a bootable USB for OS installation is to obtain the ISO images via the Volume License Service Center (VLSC) or Microsoft Business Center (MBC), and then using tools such as Rufus or the good old Windows USB/DVD Download Tool to write…

  • Safely upgrade from Debian 9 to Debian 10

    Safely upgrade from Debian 9 to Debian 10

    It is jarring when you come across VPS providers in mid-2020 and they only provide up to Debian 9 (or Debian 8) for the OS image. Fortunately, it can be easily upgraded via a few commands, as depicted in this article.

  • HAProxy as a TCP reverse proxy with DDNS target discovery and load balancing

    HAProxy as a TCP reverse proxy with DDNS target discovery and load balancing

    HAProxy is an excellent tool for forwarding or load-balancing TCP traffic. It is far more memory-efficient than socat and offers a persistent configuration between reboots, but without requiring net.ipv4.ip_forward to be enabled. Compared to NGINX, HAProxy offers a more comprehensive and user-friendly status page with far more metrics, which can be easily integrated with third-party…

  • A Cloudflare DDNS script that uses an API Token instead of your Global API Key

    A Cloudflare DDNS script that uses an API Token instead of your Global API Key

    I have been using this simple bash script for a while for my DDNS needs. It is simple enough for quick deployment, and gets the job done. That is until Caddy2’s Cloudflare DNS provider moves away from Global API Key to API Token for the API access. This prompted me to rethink the security implications…

  • Get Caddy 2.0 now with Cloudflare DNS Provider module for automatic TLS

    Get Caddy 2.0 now with Cloudflare DNS Provider module for automatic TLS

    Caddy 2.0 has finally entered GA since about a day ago, after three Release Candidates which I didn’t use. So now is high time to upgrade all our production servers to the latest and greatest version, because those 1.0.4 installation works really well and life is too boring when everything just works, we need to…

Got any book recommendations?