# Introduction I have a lot of photos that I have been carrying since a long time, this is certainly my oldest files that I was able to not lost over 20 years. It has been stored as a hierarchy since then, and it had very poor metadata information, and poor ability to be browsed. It was time to improve on this. My goal was to fix metadata on my pictures, but also put geolocation metadata on them…
# Introduction I really like containers, but they are something that is currently very bad from a security point of view: distribution We download container images from container registries, whether it is docker.io, quay.io or ghcr.io, but the upstream project do not sign them, so we can not verify a CI pipeline or the container registry did not mess with the image. There are actually a few…
# Introduction Since I started using Tailscale (using my own headscale server), I've been enjoying it a lot. The file transfer feature is particularly useful with other devices. This blog post explains my small setup to enhance the user experience. # Quick introduction Tailscale is a network service that allows to enroll devices into a mesh VPN based on WireGuard, this mean every peer connects to…
# Introduction When using a not end-to-end encrypted cloud storage, you may want to store your file encrypted so if the cloud provider (that could be you if you self host a nextcloud or seafile) get hacked, your data will be available to the hacker, this is not great. While there are some encryption software like age or gpg, they are not usable for working transparently with files. A specific…
# Introduction In a recent change within fish shell, the shortcut to delete last words were replaced by "delete last big chunk" (I don't know exactly how it is called in this case) which is usually the default behavior on Mac OS "command" key vs "alt" key and I guess it is why it was changed like this on fish. Unfortunately, this broke everyone's habit and a standard keyboard do not even offer the…
# Introduction When you have to deal with containers on Linux, there are often two things making you wonder how to deal with effectively: how to keep your containers up to date, and how to easily maintain the configuration of everything running. It turns out podman is offering systemd unit templates to declaratively manage containers, this comes with the fact that podman can run in user mode. This…
# Introduction In addition to my regular computer mouse, by the end of 2024 I bought a Logitech Lift, a wireless ergonomic vertical mouse. This was the first time I used such mouse, although I am regularly using a track ball, the experience is really different. => https://www.logitech.com/en-gb/shop/p/lift-vertical-ergonomic-mouse.910-006475 Logitech.com : Lift product I wanted to write this…
# Preamble This article was first published as a community guide on Qubes OS forum. Both are kept in sync. => https://forum.qubes-os.org/t/url-filtering-https-proxy/35846 # Introduction This guide is meant to users who want to allow a qube to reach some websites but not all the Internet, but facing the issue that using the firewall does not work well for DNS names using often changing IPs. ⚠️ This…
# Introduction Qubes OS can appear as something weird and hard to figure for people that never used it. By this article, I would like to help other understanding what it is, and when it is useful. => https://www.qubes-os.org/ Qubes OS official project page Two years ago, I wrote something that was mostly a list of Qubes OS features, but this was not really helping readers to understand what is…
# Introduction After thinking about BusKill product that triggers a command once the USB cord disconnects, I have been thinking at a simple alternative. => https://www.buskill.in BusKill official project website When using a laptop connected to power most of the time, you may want it to power off once it gets disconnected, this can be really useful if you use it in a public area like a bar or a…