huntrar

Arch Linux Full-Disk Encryption Installation Guide

This guide provides instructions for an Arch Linux installation featuring full-disk encryption via LVM on LUKS and an encrypted boot partition (GRUB) for UEFI systems.

Following the main installation are further instructions to harden against Evil Maid attacks via UEFI Secure Boot custom key enrollment and self-signed kernel and bootloader.

Preface

You will find most of this information pulled from the Arch Wiki and other resources linked thereof.

Note: The system was installed on an NVMe SSD, substitute /dev/nvme0nX with /dev/sdX or your device as needed.

ArtyomFR

<domain xmlns:qemu="http://libvirt.org/schemas/domain/qemu/1.0" type="kvm">
  <name>win10</name>
  <uuid>1eeb0012-8e79-496f-bf5f-afe235246017</uuid>
  <metadata>
    <libosinfo:libosinfo xmlns:libosinfo="http://libosinfo.org/xmlns/libvirt/domain/1.0">
      <libosinfo:os id="http://microsoft.com/win/10"/>
    </libosinfo:libosinfo>
  </metadata>
  <memory unit="KiB">4194304</memory>
  <currentMemory unit="KiB">4194304</currentMemory>

numinit

Support gnif's work

https://forum.level1techs.com/t/vega-10-and-12-reset-application/145666

int128

GitLab SAML SSO with Keycloak

Keycloak

1. Open your Keycloak realm.
2. Import keycloak-gitlab.json.
3. Fix URLs of the client.

GitLab

dllud

Public XMPP servers with Tor Hidden Service

This is a tentative list of public XMPP (Jabber) servers that provide a Tor Hidden Service (.onion address) for connections from within Tor network. By public I mean, servers that are free for everyone to use and place no barriers on registration.

Clearnet domain	Tor Hidden Service	In-Band registration	XEP compliance	IM Observatory grade
5222.de	jtovcabr2vhflcqg.onion	disabled	Excellent	A
bommboo.de	ujvdniabz53upqfx.onion	disabled	Excellent	A
[ch

dllud

Tips for a full dark desktop interface

GTK+ based desktop environments

On GNOME, Unity, Cinnamon, MATE, Xfce, LXDE and all other GTK+ based desktop environments choose a deep-dark theme such as Dorian. If you already run GTK+ 3.20 check out Cloak 3.20 or the darkest variant of Candra 3.20.

These are full-featured themes by killhellokitty that include modifications for Google Chrome (Chromium), Firefox and Thunderbird.

Web browsing

Firefishy

#!/bin/bash
set -e

JAVA_HOME=${1-text}
[ $# -eq 0 ] && { echo "Usage: sudo $0 \$(/usr/libexec/java_home -v '1.8*')" ; exit 1; }

KEYSTORE=$JAVA_HOME/jre/lib/security/cacerts

wget https://letsencrypt.org/certs/letsencryptauthorityx1.der
wget https://letsencrypt.org/certs/letsencryptauthorityx2.der

hedefalk

#!/bin/bash

JAVA_HOME=${1-text}
[ $# -eq 0 ] && { echo "Usage: sudo $0 \$(/usr/libexec/java_home -v '1.8*')" ; exit 1; }

KEYSTORE=$JAVA_HOME/jre/lib/security/cacerts

wget https://letsencrypt.org/certs/isrgrootx1.pem
wget https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.der
wget https://letsencrypt.org/certs/lets-encrypt-x4-cross-signed.der

dllud

How to backup and restore an encrypted CyanogenMod Android

The easiest way to backup a CynogenMod (CM) based Android, such as Replicant, is to enter ClockworkMod Recovery (CWMR) and use the backup/restore feature. However that won't work in a device with Full Device Encryption (FDE) because the /data directory is encrypted and therefore unaccessible in CWMR.

Thus we'll have to use backup apps that work within CM, when /data is accessible. The following procedures can be used to backup and restore all your apps, data and settings, using only free software.

Backup

1. Install oandbackup. Go to preferences > cryptography, enable encryption and set up your OpenPGP email. Back in preferences enable copy own apk and special backups.
2. Use oandbackup to backup data+apk for all your user apps. Tip: use batch backup with sort and filter.

bbx10

/*
 * ESP8266 Web server with Web Socket to control an LED.
 *
 * The web server keeps all clients' LED status up to date and any client may
 * turn the LED on or off.
 *
 * For example, clientA connects and turns the LED on. This changes the word
 * "LED" on the web page to the color red. When clientB connects, the word
 * "LED" will be red since the server knows the LED is on.  When clientB turns
 * the LED off, the word LED changes color to black on clientA and clientB web