RSSAmplifier

Blog

gandalfk7_TechSomething

gandalfk7_TechSomething

blog.gandalfk7.itRSS feed ↗77 posts

Latest posts

Kindle 4th gen (K4) Jailbreak

Registering your kindle # it looks like you need a registered kindle to apply the jailbreak, as of now (2026-08) it shouldn't be possible to register devices released prior to 2012, our Kindle 4 is in this list: https://www.amazon.com/gp/help/customer/display.html?nodeId=TRXsYxKJr4WTdsVs2P But it seems there is a workaround to register it, which worked on my Kindle 4: 1 - Reboot Kindle. 2 - Log in…

KOReader

KoReader # https://koreader.rocks/ is a Jewel of a document viewer for e-ink devices: it's an e-reader, supports plugins and many formats. I am using it on a Kindle Paperwhite 11th gen (PW5) and on a Kindle 4 (K4). document location # store your koreader documents NOT under /Documents because it increases the battery usage due to the kindle's automatic machanism of indexing the content of that…

Kindle Paperwhite 11th gen (PW5) Jailbreak

I had a Kindle 4 non-touch (2011) and since I wanted to read BW comics on it I bought a used Kindle Paperwhite 11th gen (2021, model M2L3EK),8GB of ROM. I've started this project with the idea of jailbreaking it and using KOreader for my books and comics. The advantages over the older kindle: bigger resolution (600x800 167ppi vs 1246x1648 300ppi) touchscreen overall snappines frontlight with…

pfSense wireguard VPN with Mullvad

Aim # We have a pfSense box and we want some subnets going out only via VPN so the traffic won't exit our ISP ip address. We'll configure a wireguard VPN using Mullvad. We'll also add a killswitch to ensure no unwanted traffic from the subnets goes out via WAN interface. Configure the VPN # these guides are perfect: https://mullvad.net/en/help/pfsense-with-wireguard…

HP Z440 Workstation Upgrade and Improvements

Why # I had some 32GB DDR4 registered dimms from old hardware and I wanted to do something with those. I've found that the best bet would be an X99 platform 0 , but the Aliexpress boards would only have 4 dimm slots and other used mainboards would need a complete system around: PUS, case, etc.. The HP Z440 1 is a workstation from 2014 that: supports 8 dimm slots up to officially 256GB of ram…

Proxmox Nvidia Gpu on LXC (pve8-deb12)

install nvidia drivers on proxmox 8 (debian 12) # proxmox 7 is based on debian 12 so we can follow the official steps: https://wiki.debian.org/NvidiaGraphicsDrivers#Debian_12_.22Bookworm.22$0 the one thing we must remember is to install PVE kernel headers: pve-headers update pve # check you already have the correct pve repos, if needed you cna add it with this (useful also for the lxc container):…

Restoring data from a broken disk

example: # broken disk: /dev/sdb was mounted on /mnt/faulty external usb disk: /dev/sde formatted in ext4 and mounted on /mnt/recovery_8TB what happened: # the system started giving errors on a non redundant disk: Device: /dev/sdb [SAT], 1025 Currently unreadable (pending) sectors Device: /dev/sdb [SAT], 255 Offline uncorrectable sectors Device: /dev/sdb [SAT], ATA error count increased from 306…

Proxmox LXC Containers

lxc containers # pros: lightweight very flexibile config from proxmox interface cons: compromise of the container might affect the running host (vms are better isolated) backup quirks and downtime (see dedicated section) can see underlying hardware (see dedicated section) other things that works: iptables vpns (see dedicater section) backup # while KVM vms use dirty bitmaps to achieve an online…

Nginx edit content with ngx_http_sub_module

why # I want to arbitrarly edit the content of a virtual host I am reverse-proxying prereq # nginx must be built with "--with-http_sub_module", to check it already is execute: nginx -V example response: nginx version: nginx/6.42.0 built with OpenSSL 6.4.2g 49 Dec 2048 TLS SNI support enabled configure arguments: [...CUT...] --with-http_sub_module what we want is "--with-http_sub_module" how #…

Docs in markdown - Joplin (bonus points: to static site)

why # I need to maintain some documentation about home/personal projects, while sharing just the home docs with my house mate Joplin ticks most of what I want: [x] a cross platform tool where I can organize my notes [ ] the notes need to be saved in markdown format for future-proofing [x] sane method of syncing (read: webdav) [x] encryption [x] solid tool not under heavy development (I want to…

retrieve data from FindMy network and send it somewhere else

note: this is still a work in progress why # we want to programatically retrieve findmy items data and send it somewhere else the goal is to ingest that data in traccar notes # I am running ios 17.x on an old iphone and macos 14 Sonoma in a vm on proxmox (I wrote an article about that) this vm has only 2 cpu cores and 4gb of ram (of which only 2 are used right now) The tests are run with a…

install and configure tailascale to start at boot on macos

we want tailscale to start at boot of our macos vm and not when a user logins (so we can remotely manage the vm). install go: brew update && brew install golang mkdir -p $HOME/go/{bin,src,pkg} cat <<EOF >> ~/.zshrc export GOPATH=$HOME/go export GOROOT="$(brew --prefix golang)/libexec" export PATH="$PATH:${GOPATH}/bin:${GOROOT}/bin" EOF source $HOME/.zshrc cat <<EOF >> ~/.bashrc export…

Installing MacOs Ventura on Proxmox

why: # TL;DR: I want an always-on macos installation without dedicating new hardware to this test. more: Some data, like airtags position, is retrievable reliably only from macos, we've seen that the iCloud APIs ad not reliable or don't expose the data we need. With a friend we want to test the retrieval of the airtags position from macos, convert the data and send it to traccar, an open source…

FakeKitten 2, upload anything on amazon photos, now with encryption

this was the happy cat we were using as deceit image in the previous version, now it looks like this: the updates: [x] now uses random images [x] filename is of a raw file (.DNG) so Amazon Photos does not try to fiddle with the image [x] added encryption [x] checks for prerequisites (convert and gpg) you can find the old article here: FakeKitten, or how to trick Amazon Prime Photos to store…

pfsense: install correct realtek driver

Scope: # I have pfsense installed on a pc with realtek NICs, pfsense does not include the driver for those NICs, Realtek NICs are unusable without the correct drivers. Captain Hindsight says: # "you should have bought an hardware with Intel NICs" Problems encountered: # My WAN interface disconnected when dealing with moderate/high traffic, like a speedtest. Solution: # install the realtek drivers…

convert cbz file to epub

what is a cbz/cbr file: # a .cbz file is a compressed archive with files inside cbz are Comic Book Zip files cbz are Comic Book Rar files They usually contain a folder and the filenames of the pages: comic_title.cbz comic_title | -- page1.jpg | -- page2.jpg | -- page3.jpg '-- page4.jpg cbz to epub conversion: # conversion: # to convert a cbz to epub (for max compatibility) I've triedto use Calibre…

(sorta) monitoring two related systemd services

update: systemd supports this feature see: https://stackoverflow.com/questions/47253020/systemd-stop-dependent-service-when-main-service-crashes Scope: # I need to stop service2 when service1 is down. Why: # For example in "DIY balancer using DNS" I want to kill bind/named when haproxy is dead so I won't receive any connection that would not be served by haproxy. Script: # the script is executed…

Flashing an LSI SAS controller in 2022, AKA "IT-mode" and UEFI

Scope: # I have a controller, LSI SAS9217-4i4e, wit IR firmware and want to switch it to IT firmware. Why: # For these SAS controllers there are 2 operating modes: IR: raid features, your machine won't see the disk directly but will see the raid volumes from the raid controller IT: passtrough or pure-HBA mode, you machine will see the disks directly and you'll be able to manage them I want the IT…

docker-compose systemd unit file

Scope: # creating a systemd unit file for a docker-compose service Unit file: # edit /etc/systemd/system/something.service Description = Docker Compose service Requires = docker.service After = docker.service [ Service ] Type = oneshot RemainAfterExit = yes WorkingDirectory = /data/docker-compose/service ExecStart = /usr/local/bin/docker-compose up -d ExecStop = /usr/local/bin/docker-compose down…

SSO with lldap, Authelia and Nginx

Scope: # I wanted to play with a (lightweight) directory service and an identity access management solution to be able to manage the access to some of my sites. Software: # lldap: # lldap is a lightweight implementation of ldap, lacks some features (like ldaps or clustering) but is ok for my needs right now. Has many example config file for compatible services. Authelia: # Authelia is a IAM and is…

Zigbee Sonoff Door (contact) to Leak Sensor

UPDATE: # The sensor has been very unreliable and detected phantom contacts, especially at 3 in the morning, even after applying heat shrink tubing on the contacts. I’ve ended up taking an Aqara Leak sensor, un screwing the contacts (they are done like this on purpose) and attaching the isolated wire to those. It’s working well. Scope: # Conversion of a Sonoff SNZB-04 contact (door/window) sensor…

exported iCloud photos have the wrong date

Scope: # One of my friends has a problem: they use iCloud photos to save/backup photos from the iPhone and want to create an out-of-iCloud backup of the photos on their mac. The issue is that the photos are exported with consecutive names (es: IMG_1234.JPG) and the files have the creation/modification date of the moment you exported them from Photos to disk. In this way the real date of the photo…

RFB: request for banners

Notice: # The facts, all banners, commands, and ouputs portrayed in this post are fictitious. No identification with actual IPs (assigned or retired), banners, scans, and products is intended or should be inferred. Scope: # What if we, hypothetically, wanted to retrieve all the banners of ssh server exposed on the internet? This post analyzes the hypothetical steps I would undertake. Why: # Say…

MapleGrid: DIY distributed SSH honeypot using ELK stack

Scope: # Building an honeypot "network" with a central instance that aggregates the data collected. Idea: # The idea is having as many "leaves" as we may so we can sense the "wind" and send everything to a central "trunk" where the info is processed. This way we can have our little network of ssh honeypots and do something with the data. the "leaves" will leverage Pshitt made by regit , a python…

DIY balancer using DNS

Scope: # The scope of this project is to provide a pre-tested layer of protection for the publication of a service, via an external machine, ideally a cheap vps without any important data onboard. This approach allows us to have "higly mobile" services since the won't be directly published to the world. Requisites: # no sensitive data on the external machines (so NO ssl certificates) somewhat…

Ejabberd server, selfhosting our chat audio-videocall server

Why: # I've used a Jabber service provided by a friend until now but I wanted to selfhost mine. In addition we wanted to debug some incompatibilities with iOS clients like Siskin IM with a brand new installation. Guide I've followed: # I've followed this post: https://www.aroundtheglobe.biz/posts/20210819-your_own_xmpp_server_with_ejabberd_on_Debian_11_Bullseye.html Most of it is perfect and…

Home Automation

Index: # Preface Platform Sensors Tasmota Zigbee Homekit Native Devices Homebridge Home Assitant Telegraf, Influx and Grafana Todo Homebridge examples Straight MQTT integration Zigbee devices Preface: # With the help of a friend, I wanted to try to see how deep was the rabbit's hole of self-made home automation, this is the full extent of the installation which now has been reduced: MQTT: is my…

What Is A Computer, Tests on a Lent iPad

Preface: # I've been lent an iPad (with usb-c port) and wanted to test the motto "What's a computer?" , so I've tried to use it as a companion device (NB: not my main device which still is and will be a proper computer). the device has: 11" screen usb-c port external keyboard with trackpad (not Apple) glass screen protector not an M1 model Checklist: # Important features: # [x] git repos: can pull…

Automating Eleventy Fetching, Building and Publishing

Scope: # Automating the publishing of eleventy static blog How: # You will need: linux vm (I've used Debian 11) git repo eleventy docker image (I've used https://github.com/femtopixel/docker-eleventy ) web server or service of your choice to host your static site script to check git repo and start the build if there are any changes Pros and cons: # Pros: Automatic simple to manage difficult to…

Check if your public ip is soiled, also with desktop notifications

Why: # In the era of remote connections, Smart Working, Work From Home and Work From Anywhere, your Public IP might change often and you might end up with a "soiled" IP, an IP that has been used to spam, brute-force or other unpleasant behaviours you don't want to be associated with. So I felt the need to check the rating of my public ip, since it might change from time to time and some cloud…

Kindle 4 NT Jailbreaking and converting to a dashboard

Preface: # I collect some useful metrics of my house on influxdb, and I'd like to have them ready to be glanced. Device: # Kindle 4th gen Non Touch (K4 NT) Preparation: # Donwload: Kindle 4 JailBreak | kindle-k4-jailbreak-1.8.N-r16252.tar.xz USBNetwork Hack | kindle-usbnetwork-0.57.N-r18392.tar.xz from: https://www.mobileread.com/forums/showthread.php?t=225030 and unzip both files Jailbreaking: #…

Proxmox cluster with dishomogeneous cpu types

TL;DR: # NO: for live migration within a proxmox cluster build it with same cpus Preface: # I have a proxmox cluster built with what I find lying around or is cheap enough to be justifiable, so I have different cpu types in the cluster nodes: Amd Ryzen (node1) and Intel i5 (node2). Using the default cpu type, that has a limited set of instructions, everything work as intended, particularly live…

Surface Go Dual Boot Secureboot

Preface: # The goal of this guide is to have Windows 10 and Ubuntu installed on a Surface device (I've tested this on the Go and should work the same on the Go2), with secureboot enabled for both of them. The version used in this guide are: Win10 20H2 Pro (Pro has full bitlocker support) Ubuntu Mate 20.04.1 LTS Prerequisites: # disabling Fast Startup: in: Control Panel --> hardware and Sound -->…

Debian 9-13 unlock luks root at boot via ssh

based on: https://stinkyparkia.wordpress.com/2014/10/14/remote-unlocking-luks-encrypted-lvm-using-dropbear-ssh-in-ubuntu-server-14-04-1-with-static-ipst/ updated for debian 12 (2024-12-04) and tested on debian 13 (2025-12-02) # NB: in an upgrade from 11 to 12 if you tell the installer not to overwrite your configfiles averything will be moved to the new file names and work correctly out-of-the-box…

Debian 10 Buster various problems

Preface # I've always used Debian And I've loved it because it is was straightforward and you could easily solve your issues searching the net. Issue # I had some issues because some common (from 20years to now) commands were no longer available, commands like reboot shutdown iptables-whatever etc.. and it seemed pretty strange. Workaround # I found out that all these executables are already…

Dumb-migrating from a static Wordpress to Eleventy

My first blog was a wordpress installation on a hosted site, then it got moved to a full vm under my control, then it got shutdown and forgot for some months, then it was recovered and lived for brief moments just when writing entries because the "live" site was actually a static export on S3. Then today, wordpress has been decommissioned 'cause it was useless to keep something alive when the…

Win10 - Surface Go - Bitlocker with TPM and advanced pin

Preface: # The aim of this article is to configure Bitlocker to ask for a password on boot so the protected system will not be avilable without user interaction. This is updated to 2020-11-11, on Win10 20H2 NB: I am not advocating the use of bitlocker instead of other approaches, nor I am saying that it's secure. I am writing this guide for cases where you are forced or need to use a device with…

FASTBOOT “TOO OLD” AND “ERROR CANNOT GENERATE IMAGE FOR USERDATA”

When you try to install a factory image on a newer Android device (in my case a Google Pixel “1”), you might encounter this error which i sude to the android platform tools which are too old. Resolution: download the newer platform-tools from https://developer.android.com/studio/releases/platform-tools Decompress them with: unzip platform-tools_r28.0.2-linux.zip a new platform-tools folder will be…

NEXUS 5X LINEAGEOS 15.1 – “VENDOR IMAGE MISMATCH HAS BEEN DETECTED”

I’ve updated LineageOS on a colleague’s Nexus5x and I followed these steps: Downloaded the latest (8.1.0 (OPM6.171019.030.E1, Jul 2018)) stock image for nexus5x from Google repos updated the 5x using the flash-all.sh included in the archive following lineageos tutorial for N5x I’ve ⋅⋅* downloaded the latest (lineage-15.1-20180702-nightly-bullhead-signed.zip) image from the repo ⋅⋅* downloaded the…

FakeKitten, or how to trick Amazon Prime Photos to store anything

Scope: # Some have an Amazon Prime with Unlimited Photo Storage, it would be a pity to use it just for photos. How: # The script creates a new file and adds the photo of a very cute kitten at the end of it. In this way the file gets recognized as a photo and won't count against your usable space (this is after uploading 3.3GB of "fakekitten-ed" ubuntu iso): In the encoding phase useful data gets…

MAKE VMWARE-VIEW work ON LUBUNTU 16.04 32BIT

vMware View scan output: VMware Horizon Smart Card Success VMware Horizon Real-Time Audio-Video Success VMware Horizon Client Drive Redirection Success VMware Horizon Multimedia Redirection (MMR) Failed libgstapp-0.10.so.0 Failed libgstbase-0.10.so.0 Failed libgstreamer-0.10.so.0 VMware Horizon PCoIP Success VMware Horizon USB Redirection Success VMware Horizon Virtual Printing Success VMware…

Debian 7.11 on Powermac G5

Downloaded Debian 7.11 netinstall from here, burnt on a DVD and inserted in the superdrive. To open the superdrive witha non-mac keyboard, press F12 at boot. To boot from the cdrom press “c” at boot. You’ll be greated by the open firmware, select “c” to boot from cdrom: Then type “install” and press enter to continue with the installation Then proceed with a normal installation. Note that the…

KERNEL 586 NO HT

doing a fresh install with cbpp-1.0-i386-20150428.iso on Atom N270 (single core, HT), had a problem due to the HT that was not being used. This was due to the fact that kernel 3.16.0-4-586 does not have SMT built in kernel: user@host:~$ cat /boot/config-3.16.0-4-586 | grep CONFIG_SCHED_SMT receiving no output, I updated to kernel 3.16.0-4-686-pae and then the HT support was enabled: user@host:~$…

Linux user SCP only

install rssh: apt-get install rssh then to add a user: useradd -m -d /home/didi -s /usr/bin/rssh didi edit nano /etc/rssh.conf and select how much users are locked out: allowscp #allowsftp #allowcvs #allowrdist #allowrsync #allowsvnserve source: https://www.cyberciti.biz/tips/linux-unix-restrict-shell-access-with-rssh.html

Soluzione [quasi] completamente libera (ed economica) per lo streaming/registrazione live

Il Problema: # Dopo 4 anni di riprese ai LinuxDay di ERLUG dove a volte il risultato migliore che si riusciva ad ottenere a livello video era questo: ho iniziato a cercare una soluzione per acquisire l’output del monitor del relatore in modo che fosse utilizzabile per una successiva consultazione dei video registrati. Requisiti: # poter gestire uno o piu’ input video essere remotizzabili il piu’…

Loop mounting an encrypted luks full disk image

Open: fdisk -l -u imagename.img kpartx -a -v imagename.img cryptsetup luksOpen /dev/mapper/loop0pN LUKSNAME vgscan vgchange -a y VGNAME mount /dev/mapper/VGNAME-LVNAME MOUNTPOINT Close: umount MOUNTPOINT vgchange -a n VGNAME cryptsetup luksClose LUKSNAME dmsetup info dmsetup remove /dev/mapper/loop0p1 dmsetup remove /dev/mapper/loop0pN… losetup -a losetup -d /dev/loop0 source:…

UBUNTU 16.04 SINGLE INSTALL ON MACBOOKAIR 2014

NB: these are notes for my particular installation, YMMV Installation: “burn” the image on the usb stick, I tend to use usb-creator-gtk on ubuntu, some say dd-ing the image on the usb is ok, insert the usb key on your applething, power on and press opt/alt: screenshot-from-2016-11-02-22-49-46 then select “EFI boot” and go on with the installation Keyboard: this is the holy grail:…

HOT CHANGING DISK IN MDADM RAID ARRAY

to hot change a disk in an mdadm array, the disk to remove is sdb, the disk to add is sdc: HAVE A BACKUP OF YOUR DATA really, backup your data Verify the configuration of the array: #cat /proc/mdstat Clone the partition table on the news disk: using sgdisk (install gdisk if you don’t have it) backup the partition table of the source disk: sgdisk -b part.table /dev/sdb the restore it on the…

Neural Paintings

source: http://www.makeuseof.com/tag/create-neural-paintings-deepstyle-ubuntu/ sudo apt-get install git lua5.2 luarocks luajit libprotobuf-dev protobuf-compiler curl -s https://raw.githubusercontent.com/torch/ezinstall/master/install-all | bash test torch: luajit -ltorch install loadcaffe: sudo luarocks install loadcaffe if you have an old version of gcc you have to (source): git clone…

NVIDIA CUDA LINUX HEADLESS

Download the latest nvidia drivers for linux from Nvidia’s site and install it: ./NVIDIA-Linux-x86_64-xxx.xx.run (I think I manually installed nvidia-smi) To use nvidia-settings to do things like setting the fan speed you have to activate some parts of X, I have to re-document that part but I used infos from [0] and [1]. my rc.local: Xorg :1 & sleep 5 export DISPLAY=:1 nvidia-settings -a…