Overstretched IT support

Fri, 23 Feb 2024 00:00:00 +0000

The problem: Crash during boot

More than a year ago, a few weeks after receiving my new work computer, it failed to reboot after a system update and got stuck early in the boot process. I soon realised I could still start the computer using “safe mode”. Strangely, nothing seems to be wrong because when I manually exit safe mode at the end of the boot process, the computer works fine. Our IT department has tried to fix the problem many times without success. I even had to work without a computer for about 3 weeks while it was “under repair”. You probably know how much work you can get done without a computer: close to zero.My computer runs Cubbli 20.04.06LTS, an unofficial Ubuntu spin maintained by the University of Helsinki for internal use. Although you can do bioinformatics on a Windows or macOS computer, Linux is hands-down the first choice. Many bioinformatics developers don’t even bother to release their software for Windows. MacOS works mostly fine (since it is also UNIX-compliant OS), but I would have to pay twice the price for the same calculating power.The computer is a Lenovo P350 with an NVIDIA T1000 graphics card, which I use to address two screens. I mainly need the graphics card for 3D modelling, phylogenetics analysis and similar tasks. This graphics card may have caused the trouble. I initially did not want to buy this model, but since there was a shortage of graphic cards at the time, IT convinced me to swap out my original choice against the T1000.

Managing OpenVPN with Network Manger

Thu, 05 Nov 2015 00:00:00 +0000

I just switched back from MacOSX to Ubuntu for work. Mostly for financial reasons. We need more computers at work and a really good PC laptop is just half as expensive as a MacbookPro or iMac. Today I wanted to connect from home to the University’s VPN network and I had a look at the instructions provided by the university.As usually, documentation was virtually absent and what was available was wrong. And exclusively in Finnish ( http://www.helsinki.fi/helpdesk/ohjeet/tietoliikenne_ja_etakaytto/yhteydet_yliopiston_ulkopuolelta/vpn_ubuntu-asennus.html) . From the image (Hardy Heron) it is clear that this page has not been updated for about at least 6 years (Hardy Heron was realased in the beginning of 2008).So what do you do if you downloaded and extracted the hy-vpn-config.tar.gz file from https://ohjelmistojakelu.helsinki.fi?First you need to install a plugin for the Network Manager: sudo apt-get install network-manager-openvpn network-manager-openvon-gnome. Then you go to the Network Manager via the icon in the menu bar on the top right of your Desktop. Below all the available wireless networks, there is an entry “VPN Connections”. Follow “VPN Connections” -> “Configure VPN” -> “Add” -> “Import a saved VPN configuration” -> “Create”. Then select the “openvpn.conf” from the downloaded and extracted files. After that, fill in the rest of the dialog box: User name, Password. For the CA Certificate, select the “HY-vpn-CA.pem” file from the downloaded files (you should have put it first somewhere safe, e.g. to “/etc/openvpn”).One problem that people are complaining about is the fact that the import does not honor the “redirect-gateway def1” directive and as a consequence you won’t be able to connect anywhere (I guess this is due to the Network Manager using dnsmasq and dnsmasq is apparently not smart enough to realize that it should send the queries somewhere else now). That’s why people are complaining that Network Manager doesn’t work to route all traffic via the VPN network. The box that you need to uncheck for this to work is well hidden: It’s in the connection editor dialog under the IPv4 Settings tab -> Routes (at the bottom right) -> “Use this connection only for resources on its network”. Why on earth do they have to call it in a way that nobody understands its meaning? Why not to call it “Do not route all traffic through this VPN connection”? I also had to check the box that said “Ignore automatically obtained routes”, although I don’t know why…As usual, setting up the OpenVPN sucks and the important tunneling back of VPN traffic needed to be added manually on the OpenVPN server:iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADEI did it by making an additional file called openvpn2 in the /etc/network/if-up.d/ directory with the following content:#!/bin/shiptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADEOf course you can still start and stop the VPN via the command line. However, since systemd, the password entry is not straightforward. When you execute sudo systemctl start openvpn.service you need to execute (e.g. in another terminal) sudo systemd-tty-ask-password-agent and enter your password there. That’s clearly a kludge until they get a decent password agent…

Cubbli on Michael’s Domain

Overstretched IT support

Managing OpenVPN with Network Manger