Last time I was under 320 was 4 year ago around October of 2022, still a bit of the ways to go, before I was tracking regularly in a database.
Got a lot done today, but didn’t quite finish my list. Still got a few more things to do if I want to chill out Sunday doing little.
Going to power through.
Weight: 319.2
I may need it, if I can pack most of my chores tomorrow and Saturday I think I can relax Sunday because I got tomorrow off.
Maybe I can simply focus on simple desktop stuff.
Saturday is the end of the month, I really wanted to crack 320 at least by end of the month.
I think I can, may do an extensive workout Saturday morning to bring my weight down.
Weight: 321.0
Not sure why my body is sore all day, maybe not been sleeping right, I am not sure.
I feel like crawling into bed and sleeping all day.
Got couple things to do though, may just go to bed early again.
Weight: 321.2
Today as part of my work duties I went to school to offer mentorship to some students interested in tech.
The place we went to was called the Puget Sound Skills Center.
Kids there were interested in tech and one of them was interested in red team ethical hacking.
I can get behind that, I will provide them some things to play with.
Weight: 321.4
Making use of lab but it does not need to be on all the time.
So I figured out how to power on things, I can probably script it all, but I want to make sure things are started in the correct order and there is a timing issue.
I can do it relatively quickly, I think total it takes like 15 minutes to be completely up and maybe 20 minutes to be completely down.
At least it is relatively low thought and documented.
Also created an hta launcher for the lab to get me quickly to the utilities, apps, notes and files I need.
Weight: 322.6
Got a quick presentation tomorrow that requires a heck of a lot of preparation.
It is late, past 10:30PM and I got most stuff done, but got a bit more to go.
One hurdle is missing notes on how I managed to work linux stuff with Active Directory.
Another thing I documented was startup and shutdown procedure.
Also improved nagios monitoring.
Did a lot.
Weight: 321.8
Purchased this to remove pins last year, to assist in pin removals. It sucked!!! Got 1 pin removed with great difficulty
Maybe I did it wrong, I think may have been a knock off, but later paid twice that
Today the new pin removal tool came in and it worked.
Tool is called a Jready DAP-D173. Works really well.
I actually purchased it to repurpose a corsair PS modular cable for a Seasonic PS. ChatGPT said it was a bad idea. Didn’t fit anyway.
More work on the bathroom, today was the toilet. Ran out of time and energy. Got it in but one of the T bolts did not go in.
Long day and I am tired.
Weight: 321.2
Good new, had my last visit with my occupational therapist. He measure my grip strength, pinch and thumb press. It was clear improvement.
I did mention my back left shoulder hurts. He things it is just a muscle spasm.
Couple tasks this weekend, going to continue with bathroom.
Weight: 320.4
I got sysprep working at a minimal level the way I want. I now have a base windows 11 image I can use to rebuild a box relatively quickly.
After a reboot I rename it and add it to the domain.
From there ansible takes over. I am able to use a rocky 9.7 box to manage Windows Desktops via the domain through winrm
Here is how I got winrm working (not I just used a self signed cert)
Enable-PSRemoting -Force
$CertDnsName = "win11.example.com"
$Cert = New-SelfSignedCertificate `
-DnsName $CertDnsName `
-Provider "Microsoft RSA SChannel Cryptographic Provider" `
-KeyLength 2048 -NotAfter (Get-Date).AddYears(5) `
-CertStoreLocation Cert:\LocalMachine\My
$CertThumbprint = $Cert.Thumbprint
# Create Listener
New-Item -Path WSMan:\LocalHost\Listener -Transport HTTPS -Address * -HostName $CertDnsName -CertificateThumbPrint $CertThumbprint -Force
# Open Firewall
New-NetFirewallRule -DisplayName "Windows Remote Management (HTTPS-In)" -Direction Inbound -LocalPort 5986 -Protocol TCP -Action Allow
# Verify
winrm enumerate winrm/config/listener
On the Linux side I had to make sure I had the correct ansible packages
sudo dnf -y install ansible-core epel-release
sudo dnf -y install krb5-workstation krb5-devel python3-devel gcc python3-passlib apg
sudo dnf install -y python3-kerberos krb5-workstation
python3 -m pip install pywinrm requests
ansible-galaxy collection install community.general
ansible-galaxy collection install community.mysql
ansible-galaxy collection install ansible.posix
ansible-galaxy collection install ansible.windows:2.3.0
This got me working but my ansible.cfg needed to look like this
[defaults]
inventory = ./inventory
host_key_checking = False
retry_files_enabled = False
stdout_callback = default
timeout = 30
ansible_connection=winrm
# Optional but useful
interpreter_python = auto_silent
[connection]
pipelining = True
[winrm]
# Kerberos settings
transport = kerberos
scheme = https
port = 5986
server_cert_validation = ignore
kerberos_delegation = true
And finally some variables needed to be set in the inventory file
##### Sample inventory
[windows]
win11a.example.com
win11b.example.com
win11c.example.com
[windows:vars]
ansible_connection=winrm
ansible_port=5986
ansible_winrm_transport=kerberos
ansible_winrm_scheme=https
ansible_winrm_server_cert_validation=ignore
kilist
kdestroy
kinit Admin@EXAMPLE.COM
In other news, got a new Sony earbuds, RIP my old set.
Still need to get bathroom done
Got a new UPS to install this weekend.
Weight: 321.6
Spun up a couple of cloned Windows 11 VMs and used sysprep on them
Would like to streamline the sysprep process, so may work on creating a sysprep file.
That is later though, meanwhile I got 3 windows boxes I can mess with. I may clone them to make it easier to rebuild without sysprep.
Weight: 321.6
