https://vninja.net/Recent content in vNinja.net on vNinja.net | VMware, VCF & HomelabHugo -- gohugo.ioen&copy; 2010 - 2026 <b>vNinja.net</b> <br/> <em>There is a thin line between agile and fragile</em>Mon, 20 Jul 2026 13:46:29 +0200https://vninja.net/2026/07/19/ghostty-ssh-terminfo-whats-actually-fixed/Sun, 19 Jul 2026 00:00:00 +0000https://vninja.net/2026/07/19/ghostty-ssh-terminfo-whats-actually-fixed/Ghostty shipped a partial fix for its SSH terminfo problem back in version 1.2.0, and a proper one is coming in 1.4.0. I went looking for why I was still running into trouble, and found the real story is more complicated than either release note lets on.https://vninja.net/2026/07/17/migrating-from-unifi-uxg-lite-to-express-7/Fri, 17 Jul 2026 00:00:00 +0000https://vninja.net/2026/07/17/migrating-from-unifi-uxg-lite-to-express-7/A UniFi restore that reports no errors, restarts cleanly, and lets you log in with your admin account, but somehow leaves you with an empty configuration, is a special kind of frustrating. That's the short version of what it took to move from a HostiFi-hosted controller to a local UniFi Express 7 (UX7). It should have been a cable swap and a restore. Instead it turned into a two-attempt debugging exercise, followed by a workaround involving a throwaway Docker controller and some direct MongoDB open-heart surgery.https://vninja.net/2026/07/03/esxi-mfa-gap-hardening-checklist/Fri, 03 Jul 2026 00:00:00 +0000https://vninja.net/2026/07/03/esxi-mfa-gap-hardening-checklist/ESXi supports no MFA, no SSO, and no identity federation, and vCenter's identity controls stop at the host boundary. Here's exactly where that gap is, and the concrete controls that actually close it.https://vninja.net/2026/05/18/closing-the-loop/Mon, 18 May 2026 01:01:00 +0000https://vninja.net/2026/05/18/closing-the-loop/What the ESX, vCenter, and identity relationship means as a complete operational model.https://vninja.net/2026/05/18/identity-is-the-real-attack-surface/Mon, 18 May 2026 01:00:00 +0000https://vninja.net/2026/05/18/identity-is-the-real-attack-surface/Why identity determines whether ESX and vCenter are reachable at all.https://vninja.net/2026/05/14/why-vcenter-is-usually-the-real-target/Thu, 14 May 2026 00:00:00 +0000https://vninja.net/2026/05/14/why-vcenter-is-usually-the-real-target/Why vCenter becomes the highest-impact system once compromise reaches the control plane.https://vninja.net/2026/05/12/esxi-security-advice-that-actually-matters-in-2026/Tue, 12 May 2026 09:00:00 +0000https://vninja.net/2026/05/12/esxi-security-advice-that-actually-matters-in-2026/ESX security in 2026 is driven less by hypervisor hardening and more by identity, reachability, and control-plane exposure, where vCenter access and visibility gaps ultimately determine real-world compromise paths.https://vninja.net/2026/05/12/vcf-security-reality-check/Tue, 12 May 2026 08:00:00 +0000https://vninja.net/2026/05/12/vcf-security-reality-check/Scope and assumptions for the VCF Security Reality Check series.https://vninja.net/2026/05/07/intel-arc-sr-iov-hardware-transcoding-with-plex-on-proxmox-ve/Thu, 07 May 2026 00:00:00 +0000https://vninja.net/2026/05/07/intel-arc-sr-iov-hardware-transcoding-with-plex-on-proxmox-ve/How to set up Intel Arc SR-IOV on Proxmox VE with three ASUS NUC 15 Pro units for Plex hardware transcoding, including notes on kernel compatibility and the required Plex beta release.https://vninja.net/2026/04/21/gl-inet-gl-mt5000-vpn-security-gateway/Tue, 21 Apr 2026 00:00:00 +0000https://vninja.net/2026/04/21/gl-inet-gl-mt5000-vpn-security-gateway/At the end of 2025 I received a GL-iNet Brume 3 (GL-MT5000) as part of a beta testing program, and it’s been quietly running in my home network ever since. I didn’t redesign my setup around it or do anything particularly fancy—simply dropped it into the network alongside my existing gateway to see how it would behave in a real-world environment.https://vninja.net/2026/04/08/when-synology-says-no-rsync-to-nfs/Wed, 08 Apr 2026 00:00:00 +0000https://vninja.net/2026/04/08/when-synology-says-no-rsync-to-nfs/There’s a special category of problems that only show up when everything looks like it should just work.https://vninja.net/2026/03/20/vmug-connect-2026-amsterdam-security-community-living-with-it/Fri, 20 Mar 2026 00:00:00 +0000https://vninja.net/2026/03/20/vmug-connect-2026-amsterdam-security-community-living-with-it/This past week I attended VMUG Connect 2026 Amsterdam at RAI Amsterdam.This was the first VMUG Connect event ever held in Europe, and that alone made it a notable milestone.https://vninja.net/2025/12/21/vmug-connect-2026-amsterdam-session/Sun, 21 Dec 2025 00:00:00 +0000https://vninja.net/2025/12/21/vmug-connect-2026-amsterdam-session/We’re thrilled to announce that mine and Stine’s joint session, **Hypervisor Horror: Root Access and Regulatory Rage**, has been selected for the first european VMUG Connect in Amsterdam **17th - 19th March 2026**!https://vninja.net/2025/11/24/vmug-connect-2026/Mon, 24 Nov 2025 00:00:00 +0000https://vninja.net/2025/11/24/vmug-connect-2026/After a successful launch in St. Louis this year, VMUG is bringing the experience to more communities. Next year, VMUG Connect will give members across these cities a chance to connect, learn, and collaborate in person.https://vninja.net/2025/09/18/vsphere-its-all-fun-and-games-until-someone-gets-root/Thu, 18 Sep 2025 00:00:00 +0000https://vninja.net/2025/09/18/vsphere-its-all-fun-and-games-until-someone-gets-root/At the VMUG UserCon UK 2025 I presented a session called *vSphere: It's All Fun and Games Until Someone Gets Root*. The premise of the talk was the havoc a malicious actor can wreck to an environment, if they gain root access to an ESXi host. Of course, once someone has gained root access, all bets are off anyway, but there are some interesting tecniques that can be utilized simply by using native commands. This is otherwise known as **Living off The Land (LOTL)**, where attackers use legitimate tools and features that are already present on a system.https://vninja.net/2025/09/15/gl-inet-opal-travel-router-experience/Mon, 15 Sep 2025 00:00:00 +0000https://vninja.net/2025/09/15/gl-inet-opal-travel-router-experience/In August 2024, I acquired a GL.iNet Opal (GL-SFT1200) Travel Router, and it has since become an indispensable companion for my multi-day travels. Its compact design and robust feature set have consistently met my connectivity needs on the road.https://vninja.net/2025/09/12/vsphere-moving-from-baselines-to-images/Fri, 12 Sep 2025 01:30:00 +0000https://vninja.net/2025/09/12/vsphere-moving-from-baselines-to-images/If you are using baselines to update your VMware clusters it is time to move to using images instead.https://vninja.net/2025/09/12/storage-in-hypervisor-and-kubernetes-environments/Fri, 12 Sep 2025 00:00:00 +0000https://vninja.net/2025/09/12/storage-in-hypervisor-and-kubernetes-environments/When talking about modern infrastructure, storage is as critical as compute and networking. Applications — whether traditional VMs or cloud-native containers — depend on reliable, performant, and consistent storage.https://vninja.net/2025/09/11/containers-in-your-hypervisor-or-vms-in-kubernetes/Thu, 11 Sep 2025 00:00:00 +0000https://vninja.net/2025/09/11/containers-in-your-hypervisor-or-vms-in-kubernetes/When talking about modern infrastructure, there are multiple ways to combine virtualization and Kubernetes. The architectures described below are general concepts and not specific to any single hypervisor. They illustrate common patterns for combining virtualization and Kubernetes, but exact implementations may vary depending on your infrastructure vendor and setup.https://vninja.net/2025/08/15/how-to-set-up-a-vsphere-native-key-provider/Fri, 15 Aug 2025 00:00:00 +0000https://vninja.net/2025/08/15/how-to-set-up-a-vsphere-native-key-provider/From VMware vSphere 7.0.2 you can configure a vSphere NKP to enable encryption-related functionality from your vCenter. The ESXi hosts do not require a TPM 2.0 chip to use NKP, but a TPM chip provides enhanced security.