Kyshman

Arch Linux on LUKS

Mostly follows the Arch Linux install guide, but with tips from these for the encryption setup:

• https://gist.github.com/binaerbaum/535884a7f5b8a8697557
• https://gist.github.com/OdinsPlasmaRifle/e16700b83624ff44316f87d9cdbb5c94
• https://wiki.archlinux.org/index.php/Systemd-boot#Standard_root_installations
• Uses an unencrypted /boot with LUKS on LVM for / (formated as btrfs)
• Uses UEFI so make sure system is booted in UEFI efivar --list or ls /sys/firmware/efi/efivars if there's output for the former or the directory exists for the laater system has booted in UEFI

Network

Use iwctl after booting with Arch ISO

Kyshman

https://www.haproxy.com/blog/howto-transparent-proxying-and-binding-with-haproxy-and-aloha-load-balancer/

https://www.zenetys.com/en/transparent-proxy-with-haproxy-using-firewalld/

sudo firewall-cmd --permanent --direct --add-chain ipv4 mangle DIVERT

sudo firewall-cmd --permanent --direct --add-rule ipv4 mangle PREROUTING 0 -p tcp -m socket -j DIVERT

Kyshman

Setup: UEFI, LVM + LUKS encrypted drive
Bootloader: Grub
Links:
 - https://wiki.manjaro.org/index.php/Restore_the_GRUB_Bootloader
 - 
 
Restore GRUB (boot into live env):

# get the encrypted partition (crypto_LUKS)
lsblk -f

Kyshman

function transfer ($filename)
{
    $file = Get-Item $filename;
    invoke-webrequest -method put -infile $file.FullName https://transfer.sh
}

"Test" | Set-Content .\test.txt
transfer(".\test.txt")

Kyshman

#!/bin/bash

#### This script is published by Philipp Klaus <philipp.l.klaus@web.de>
#### on <http://blog.philippklaus.de/2011/05/ipv6-6in4-tunnel-via-hurricane-electric-tunnelbroker-net-automatic-ip-update-on-mac-os-x/>
#### It is originally by freese60 and modified by limemonkey.
#### Found on <http://www.tunnelbroker.net/forums/index.php?topic=287.0>

### Uncomment this line to debug the script:
#set -x

Kyshman

openpgp4fpr:C75E5171524765A2C4D8A4113A73F55BE2FDDE73

Kyshman

Script that will trigger a local to remote sync when any changes below your local Google Drive folder occur - but at max. every 10 minutes - and a remote to local sync every x (e.g. 30 minutes) via a cron job.

0. Install rclone and configure it for Google Drive
1. Create files listed below
2. Configure rclone_watch_local.sh to be run on startup (e.g. using a systemd service unit)
3. Add a cron job that runs rclone_remote2local.sh every x (e.g. 30) minutes

----------------------
rclone_local2remote.sh
----------------------

Kyshman

Adding Static Wi-Fi IP address on Ubuntu/Debian and derivaties

• Begin by Hex encoding your wifi details

sudo wpa_passphrase "Your Wifi Network SSID"  "Your Wifi WPA/WPA2 password"

Output:

network={

Kyshman

shrink + compress virtual disk image in Qemu/KVM

originally from Martin Kopta's blog

Tue Apr 22 10:41:10 UTC 2014

In order to shrink virtual disk of your virtual machine (process called disk space reclamation) in Qemu/KVM, you can go with following. In your running virtual machine, fill all remaining empty space with zeroes. Then, shut down virtual machine and convert the disk image from original format to the same format (esentially doing nothing). In the process of conversion, Qemu will skip the zeroes and save you some space. You can even add some compression to save even more space.

root@vm# dd if=/dev/zero of=/file
root@vm# rm /file

Kyshman

#!/usr/bin/env bash

# To fix the " gpg: WARNING: unsafe permissions on homedir '/home/path/to/user/.gnupg' " error
# Make sure that the .gnupg directory and its contents is accessibile by your user.
chown -R $(whoami) ~/.gnupg/

# Also correct the permissions and access rights on the directory
chmod 600 ~/.gnupg/*
chmod 700 ~/.gnupg