ciphermethod.com

Would you like to know the command that fixed the issue?

ChatGPT said:

Absolutely — I’d like to know!
What command fixed it for you?

You said:

grubby –update-kernel ALL –remove-args selinux

ChatGPT said:

Ahhh — that makes perfect sense.
grubby updates the kernel command line directly in each installed kernel’s entry, which GRUB rebuilds sometimes fail to do if multiple kernels or boot locations exist.

Your command:

grubby --update-kernel=ALL --remove-args=selinux

removes selinux=0 (and any other selinux= args) from all bootable kernels, not just the default one.

Why this works when GRUB edits don’t

RHEL systems often have:

• Multiple installed kernels
• Multiple GRUB menu entries
• A mismatch between /etc/default/grub and what the system is actually booting
• Separate GRUB configs under /boot/efi/EFI/BOOT/ as well as /boot/efi/EFI/redhat/

grubby bypasses all that and updates the per-kernel command lines where they are actually stored.

Great find — and a good tool to remember

grubby --info ALL
is also useful to inspect the effective boot args.

If you want, I can help confirm SELinux is now fully active and enforcing.

Service has been migrated to a new server. It may take a bit of time for Shoutcast to update to the new address.

# systemctl stop pihole-FTL

# rm /etc/pihole/pihole-FTL.db*

# systemctl start pihole-FTL

Message: “Your version of Windows has reached the end of service.” 

In order to Force Windows 11 24H2 Feature Update, follow the instructions below:

1. Open the Local Group Policy via the start menu, or run “gpedit.msc”.
2. Expand “Local Computer Policy -> Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> Manage updates offered from Windows Update”
3. Open “Select the target Feature Update version”
4. Set option to “Enabled”
5. Set the first field (Which Windows product version would you like to receive feature updates for), to “Windows 11”
6. Set the second field “Target Version for Feature Updates” to “24H2”.
7. Click Apply, click Ok, and then exit Group Policy Editor.
8. Run “gpupdate /force”, or reboot, to force the system to see the settings.
9. Check Windows Update for new updates, you should now see the update available.

If gpedit is not installed:

1. Use notepad to create a text file with the following and save to Desktop as gpedit-install.bat.
   • @echo off pushd "%~dp0"
   • dir /b %SystemRoot%\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientTools-Package~*.mum >gpedit-install.txt
   • dir /b %SystemRoot%\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientExtensions-Package~*.mum >>gpedit-install.txt
   • for /f %%i in ('findstr /i . gpedit-install.txt 2^>nul') do dism /online /norestart /add-package:"%SystemRoot%\servicing\Packages\%%i"
   • pause
2. Right click gpedit-install.bat on desktop and click “Runs as administrator” to install gpedit.
3. In search field type gpedit.msc and enter to run.

Synology VPN Server

Forward ports 500, 1701, 4500 to server

VPN Server: Enable L2TP/IPSec, confirm Authentication is MS-CHAP v2, and set pre-shared key, enable user permissions for L2TP

IPad/IPhone VPN Client: L2TP w/ secret

Windows VPN Client: L2TP/IPSec with pre-shared key

Windows VPN Adapter Options:

Set VPN adapter Security Tab to Layer 2 Tunneling Protocol with IPSec (L2TP/IPSec)

Set Requires encryption (disconnect if server declines)

Set “Allow these protocols” and enable Microsoft CHAP Version 2 (MS-CHAP v2)