# Linux Tips

**URL:** <https://forums.plex.tv/t/linux-tips/276247>\
**Category:** Tips, Tricks & How-Tos\
**Tags:** server-linux-tips, server-linux, tipstricks\
**Created:** [June 26, 2018, 5:11pm UTC](https://forums.plex.tv/t/linux-tips/276247 "2018-06-26T17:11:57Z")\
**Posts on this page:** 3\
**Page:** 2

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [June 2, 2022, 11:32pm UTC](https://forums.plex.tv/t/linux-tips/276247/24 "2022-06-02T23:32:09Z")

</div>

## Transcoding and tone mapping with JasperLake / ElkhartLake CPUs

#### This tip / How-To is entirely NOT-SUPPORTED by Plex.

#### You, as the system’s owner/admin assume all risk/liability for the kernel integrity

It may work for you and it may not. There are no guarantees.  
There has been success with for some users. Your results may vary.

This How-To is written for Ubuntu/Debian distributions but should be applicable to others.

1. Replace `inte-media-va-driver` with `intel-media-va-driver-non-free`

2. As root:

```auto
echo "options i915 enable_guc=2" >> /etc/modprobe.d/i915.conf
update-initramfs -u

```

1. Restart the host to make active

Forum Reference: [Can Jasper Lake N6005 use hardware transcoding?](https://forums.plex.tv/t/can-jasper-lake-n6005-use-hardware-transcoding/758158)

### [Back to top](https://forums.plex.tv/t/linux-tips/276247)

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [April 5, 2023, 1:53am UTC](https://forums.plex.tv/t/linux-tips/276247/25 "2023-04-05T01:53:43Z")

</div>

### OpenSSL v3.0.0 and PMS.

For those using their own domains and certificates with PMS ,

PMS 1.32.0.6865 and above updates OpenSSL from v1.1.1 to v3.0.0 .  
(changed the numbering scheme in the process)

The consequence of this is OpenSSL v3 removed several “less secure” encryption methods.

The impact on you, if you’re using an older distributions where openssl v3 is not the default, if not already doing so, you will need pay special attention to how your certificates are generated

As example, upgrade (specify) a better encryption

#### PREVIOUS

```auto
# Generate p12 (Acme LE is valid until 2025)
openssl pkcs12 -export -out my-fdqn-tld.p12 \
	-inkey my-fqdn-tld.key -in my-fqdn-tld.crt \
	-certfile CertAuth.crt \
	-password pass:PASSWORD_HERE

```

#### IMPROVED

```auto
# Generate new p12 (Acme LE is valid until 2025)
openssl pkcs12 -export -out my-fdqn-tld.p12 \
	-certpbe AES-256-CBC -keypbe AES-256-CBC -macalg SHA256 \
	-inkey my-fqdn-tld.key -in my-fqdn-tld.crt \
	-certfile CertAuth.crt \
	-password pass:PASSWORD_HERE

```

The key change is to select a better encryption:

> -certpbe AES-256-CBC -keypbe AES-256-CBC -macalg SHA256 \

### To implement

1. Update certificate creation scripting to include AES-256 (or better) as shown above.
2. Regenerate P12 file and store where PMS expects it
3. Restart PMS after updated cert installation ( PMS loads certs at startup only)

### The reason for this change is the inevitability of the current libraries being EOL.

Observe:

 ![Screenshot from 2023-04-05 16-15-59](https://global.discourse-cdn.com/plex/original/4X/4/6/1/46195836df68ddb513dd09109977402ebcfde2f4.png)

REF:

> **[OpenSSL](https://en.wikipedia.org/wiki/OpenSSL)**
>
> OpenSSL is a software library for applications that provide secure communications over computer networks against eavesdropping, and identify the party at the other end. It is widely used by Internet servers, including the majority of HTTPS websites.
> OpenSSL contains an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements basic cryptographic functions and provides various utility functions. Wrappers allowing the use of the...

### [Back to top](https://forums.plex.tv/t/linux-tips/276247)

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [April 9, 2023, 10:25pm UTC](https://forums.plex.tv/t/linux-tips/276247/26 "2023-04-09T22:25:34Z")

</div>

### Selectively changing directory and file permissions.

PMS 1.31.1 and above monitor your media for file permission changes in addition to media content changes.

This was provided so PMS knows when your media acquisition processes (DVR/other tasks) complete and the media is now ready for PMS to use.

Unfortunately, a number of our users have a “sledgehammer” 🔨 approach where they just change all permissions for all media.

PMS is now sensitive to ALL permission changes (even for media already matched).

This results in the scanner activating.

The solutions here are:

1. Have your post-processing task apply permissions correctly to the item(s) you’re adding **as you add them**

2. Should you need to apply bulk changes, (which should be rarely), below is how to change only those files and directories which don’t match the desired permissions.

The two ‘find’ commands below scan for files whose permissions do not match the mode given and then performs a targeted `-exec` on that single file or directory to set to the appropriate value.

(Change the permissions below to be appropriate for your usage.)

```auto
find /directory-top -type d \! -perm 0755 -exec chmod 755 {} \; 
find /directory-top -type f \! -perm 0644 -exec chmod 644 {} \; 

```

### [Back to top](https://forums.plex.tv/t/linux-tips/276247)

[Previous page](https://forums.plex.tv/t/linux-tips/276247.md?page=1)