Rust, Arch, Linux, Gnome.
Proton Pass as 1Password alternative? In the days before Christmas 1Password had a pretty stupid issue which broke syntax highlighting on all sites using PrismJS. As my 1Password subscription also runs out soon, this nudged me to look at alternatives. I'd love to use a European provider, or perhaps even self-host my own solution, and I can't help but think that that 1Password issue is a symptom of…
forgejo-runner image with mkosi Codeberg doesn't have much CI capacity so I bring my own action runners to run workflows in my Codeberg repositories. I use mkosi to build a generic system image containing the runner as well as all dependencies I need for CI, which I can then deploy on any system (e.g. spare laptops at home, hosted cloud VMs, etc.) that uses systemd. This post shows the image…
Build Arch packages with git sources on OBS After the infamous xz backdoor incident there's been a general move towards building packages directly from Git sources for the sake of transparency, instead of using upstream provided tarballs. Now, I like to build my Arch packages on the public openSUSE Build service (OBS) generously sponsored by SUSE, but building packages from Git sources poses a bit…
Notes on building Arch packages on openSUSE Build Service I use openSUSE Build Service (OBS) to build most of my packages for Archlinux , sourced from AUR or written by myself, except for a few proprietary packages which OBS does not permit to be built on its infrastructure. There are some caveats, tho, and this post keeps a few notes to work around these. Set PACKAGER ¶ OBS uses a generated…
Simple Secure Boot in Fedora Fedora doesn't use a proper secure boot setup: It doesn't use unified kernel images and still leaves unsigned initrd files around. Generally, it still seems to consider secure boot support just as means to boot and install on secure-boot locked machines with Microsoft's keys, instead of a proper security tool a user should make use of to really own their own machines.…
Arch Linux rescue image with mkosi In this post we'll build a small single-file Arch Linux rescue image for EFI systems. We will end up with a single EFI executable of about 400 MiB (further optimization can get it down to about 200MiB) which embeds a fully-fledged Arch Linux system. We can then put this image on the EFI partition and sign it for secure boot, which gives us a rescue single-file…
Build Arch Linux packages on OBS Suse generously sponsors a public build service for packages at https://build.opensuse.org/ . Let's try to use it to build Arch packages into a personal repository. Install osc ¶ The build service works best with a local command line tool called osc . Conveniently, the build service itself offers an Arch repository with binary packages for osc which we can just add…
Install Arch with Secure boot, TPM2-based LUKS encryption, and systemd-homed Update: I no longer use dracut , and the corresponding part of this blog post no longer reflects my setup. This article describes my Arch Linux setup which combines Secure Boot with custom keys, TPM2-based full disk encryption and systemd-homed into a fully encrypted and authenticated, yet convenient Linux system. This…
Compose emojis On Linux you can define custom sequences for the Compose key. You just need to create a ~/.XCompose file and can start to define new sequences for e.g. emojis: include "%S/en_US.UTF-8/Compose" <Multi_key> <period> <p> <r> <a> <y> : "🙏" <Multi_key> <period> <less> <3> <parenright> : "😍" <Multi_key> <period> <less> <3> <period> : "❤️" <Multi_key> <period> <less> <3> <asterisk> :…
The mysterious disapperance of Docker images A node hosts a Gitlab runner and a small k3s cluster which runs a few services as regular kubernetes deployments. A CI job pinned to that runner builds Docker images for these services services, updates the image of the corresponding deployments, and starts a few system and acceptance tests. The CI job does not push those images to the in-house…