Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

[Show LET] Idlers porn

2»

Comments

  • jimaekjimaek Veteran

    With that many VMs you could get to number 4 of top contributors among all LET users overnight https://globalpi.ng/let

    But you might make @sh97 angry

    Thanked by 3oloke sh97 cainyxues
  • sh97sh97 Member, Host Rep

    @jimaek said: But you might make @sh97 angry

    confirm it @beanman109

  • forestforest Member

    @jimaek said:
    With that many VMs you could get to number 4 of top contributors among all LET users overnight https://globalpi.ng/let

    But you might make @sh97 angry

    That's neat. How do I join that leaderboard? I have ~30 probes running at the moment.

  • jimaekjimaek Veteran

    @forest its managed by @sh97

    But you need to ensure that you have made your user tag public in the dashboard settings

    Thanked by 3oloke sh97 Decicus
  • sh97sh97 Member, Host Rep

    @forest said:

    @jimaek said:
    With that many VMs you could get to number 4 of top contributors among all LET users overnight https://globalpi.ng/let

    But you might make @sh97 angry

    That's neat. How do I join that leaderboard? I have ~30 probes running at the moment.

    send me a DM, will hook it up

    Thanked by 3forest oloke Decicus
  • emperoremperor Veteran

    @sh97 How much bw does needs for this ? I'm considering also to add mine 24, but most of them are with 1tb/m bw

  • sh97sh97 Member, Host Rep

    @emperor said:
    @sh97 How much bw does needs for this ? I'm considering also to add mine 24, but most of them are with 1tb/m bw

    You add your probes to GlobalPing, and enable public profile and it will automatically pull into the leaderboard.

    I think usage is extremely low it's basically just ping and mtrs which happen. Probably less than 10GB per month, but maybe @jimaek can share more accurate stats.

    Thanked by 2emperor oloke
  • emperoremperor Veteran

    @sh97 said:

    @emperor said:
    @sh97 How much bw does needs for this ? I'm considering also to add mine 24, but most of them are with 1tb/m bw

    You add your probes to GlobalPing, and enable public profile and it will automatically pull into the leaderboard.

    I think usage is extremely low it's basically just ping and mtrs which happen. Probably less than 10GB per month, but maybe @jimaek can share more accurate stats.

    Thanks, will start the setup at once :) Cheers

    Thanked by 1sh97
  • jimaekjimaek Veteran

    Unless you have an extremely popular location it will be under a 1GB. The largest test is essentially a few KB of HTTP headers

    Thanked by 3sh97 emperor forest
  • @jimaek said:
    With that many VMs you could get to number 4 of top contributors among all LET users overnight https://globalpi.ng/let

    But you might make @sh97 angry

    There is no shiny color for that rank.

  • @sh97 said:

    @forest said:

    @jimaek said:
    With that many VMs you could get to number 4 of top contributors among all LET users overnight https://globalpi.ng/let

    But you might make @sh97 angry

    That's neat. How do I join that leaderboard? I have ~30 probes running at the moment.

    send me a DM, will hook it up

    I've been added, thank you!

    Thanked by 2oloke sh97
  • forestforest Member
    edited January 10

    Btw, in case anyone is uncomfortable about running it as root in the container, this works well for me using Podman and is a cheap little hack to get the utilities to run unprivileged using the following script which sets up the probe as a service. It:

    1. Creates a simple preloaded library that tricks mtr into thinking that it is running as root so that it does not give an error when sub-one second intervals are selected
    2. Creates a file to contain the persistent UUID outside of the container
    3. Creates a Podman-specific unprivileged system user
    4. Creates a sandboxed systemd service file that starts Podman at boot with special parameters that override its auto-update mechanism (updates are instead provided by checking for and pulling the new container when the service starts) and bind-mounts the library and UUID file

    Requires: podman, gcc, systemd

    #!/bin/bash
    
    set -e
    
    # Globalping adoption token (put yours here if desired)
    TOKEN=
    
    mkdir /var/lib/globalping-probe
    touch /var/lib/globalping-probe/uuid
    adduser --system --group globalping
    GP_UID=$(id -u globalping)
    GP_GID=$(id -g globalping)
    
    gcc -x c -o /var/lib/globalping-probe/libfakeroot-mtr.so -O2 -march=native -shared -fPIC - << EOF
    #include <linux/prctl.h>
    #include <sys/prctl.h>
    #include <sys/syscall.h>
    #include <stdbool.h>
    #include <unistd.h>
    #include <string.h>
    
    #define NEW_GET(type, name)                             \
    type get ## name (void)                                 \
    {                                                       \
            return is_mtr() ? 0 : syscall(SYS_get ## name); \
    }
    
    #define NEW_GETRES(type, name)                                                \
    int getres ## name (type *r ## name, type *e ## name, type *s ## name)        \
    {                                                                             \
            if (syscall(SYS_getres ## name, r ## name, e ## name, s ## name) < 0) \
                    return -1;                                                    \
            if (is_mtr())                                                         \
                    *r ## name = *e ## name = 0;                                  \
            return 0;                                                             \
    }
    
    static bool is_mtr(void)
    {
            char name[16];
            if (prctl(PR_GET_NAME, name) < 0)
                    return false;
            return strcmp(name, "mtr") == 0;
    }
    
    NEW_GET(uid_t, uid)
    NEW_GET(gid_t, gid)
    NEW_GET(uid_t, euid)
    NEW_GET(gid_t, egid)
    NEW_GETRES(uid_t, uid)
    NEW_GETRES(gid_t, gid)
    EOF
    
    strip /var/lib/globalping-probe/libfakeroot-mtr.so
    
    cat > /etc/systemd/system/globalping-probe.service << EOF
    [Unit]
    Description=Globalping probe
    Wants=network-online.target
    After=network-online.target
    
    [Service]
    Environment=PODMAN_SYSTEMD_UNIT=%n
    Restart=always
    TimeoutStopSec=15
    ExecStartPre=/usr/bin/podman pull docker.io/globalping/globalping-probe
    ExecStart=/usr/bin/podman run -d --pidfile /run/globalping-probe.pid -u ${GP_UID}:${GP_GID} -v /var/lib/globalping-probe/uuid:/.globalping-probe-uuid -v /var/lib/globalping-probe/libfakeroot-mtr.so:/libfakeroot-mtr.so -e LD_PRELOAD=/libfakeroot-mtr.so -e GP_ADOPTION_TOKEN=${TOKEN} --cap-drop ALL --cap-add NET_RAW --network host --rm --replace --name globalping-probe globalping/globalping-probe node /app/dist/index.js
    ExecStop=/usr/bin/podman stop -t 10 globalping-probe
    PIDFile=/run/globalping-probe.pid
    Type=forking
    RuntimeDirectory=containers
    CacheDirectory=containers
    KeyringMode=private
    LockPersonality=yes
    DevicePolicy=closed
    ProtectClock=yes
    ProtectHome=yes
    ProtectKernelLogs=yes
    ProtectKernelModules=yes
    ProtectKernelTunables=yes
    ProtectSystem=strict
    RestrictRealtime=yes
    RemoveIPC=yes
    PrivateTmp=yes
    ReadWritePaths=/var/lib/globalping-probe /var/lib/containers /var/cache/containers /run/containers
    RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX AF_NETLINK
    SystemCallArchitectures=native
    SystemCallFilter=@system-service @mount bpf sethostname
    SystemCallFilter=~kcmp splice tee userfaultfd vmsplice
    
    [Install]
    WantedBy=default.target
    EOF
    
    systemctl daemon-reload
    systemctl enable --now globalping-probe.service
    
    Thanked by 2Wolf oloke
Sign In or Register to comment.