Skip to content

Instantly share code, notes, and snippets.

View kylemanna's full-sized avatar

Kyle Manna kylemanna

View GitHub Profile
kylemanna / podman-compose.yaml
Last active March 17, 2024 22:02
Podman Compose File that runs Windows in KVM + QEMU
# Podman Compose File that runs Windows in KVM + QEMU
# Upstream:
# Note: Can't run this rootless as the netardvark proxy doesn't create a host
# network interface for communication with the container which is what's
# expected for the iptables NAT port forwarding rule to work for port 3389.
# Instead it arrives appearing to be from the same interface and skips the nat
# redirect and fails.
#!/usr/bin/env python
"""Prefix wrapper for wireguard-vanity-address
* Improve performance for generating keys with common prefixes.
* Extract prefixes delimited by a '+' or '/'.
* Exit at least on match for each prefix.
$ ex{1,2,3}
Searching for ['ex1/', 'ex1+', 'ex2/', 'ex2+', 'ex3/', 'ex3+'] with ['wireguard-vanity-address', '--in', '2', 'ex']
kylemanna /
Created November 1, 2023 23:28
Simple network speedtest in Docker container


Run a quick network test.

docker run --rm -it --workdir=/tmp alpine sh -c 'apk add -u bash grep; wget -qO- | su -s /bin/bash nobody'

kylemanna / 0001-release-linuxptp-4.1.patch
Created October 1, 2023 06:56
Arch Linux AUR linuxptp v4.1
From 27869268409c6bb7247d5fff51f80b31792825c0 Mon Sep 17 00:00:00 2001
From: Kyle Manna <>
Date: Sun, 1 Oct 2023 01:56:26 -0500
Subject: [PATCH] release: linuxptp 4.1
* Many changes!
.SRCINFO | 6 +++---
PKGBUILD | 7 +++----
2 files changed, 6 insertions(+), 7 deletions(-)
kylemanna /
Last active May 8, 2023 05:37
Tailscale Per Host Default Router Disabler
#!/usr/bin/env python3
""" Tailscale Per Host Default Router Disabler
Tailscale allows a single tailnet wide "Override local DNS" setting that works
great for mobile and random cloud machines I have. However, my more elaborate
setups require the ability to turn this off and use local DNS as the default
Unfortuantely with Tailscale as of v1.40.0 there's only two options:
1. Tailnet wide "local DNS override" (Turns out tailscale's internal resolver
kylemanna /
Last active March 29, 2023 01:43
Bug notes for gluetun multiple networks issue.



The gluetun container doesn't work correctly with multiple networks attached.

This is an example of a working and broken config with only minor differences.

Expected Output

kylemanna / ingress.nft
Last active February 4, 2023 09:21
ATT UVerse Disable Drop DHCP for temproary address on BGW320 and block Bogons/DDoS packets using nftables
#!/usr/sbin/nft -f
# Can't block DHCP like a normal service beacuse it use raw sockets and bypasses nftables filter chains. Instead use and ingress chain.
flush table netdev filter
table netdev filter {
# Earliest filtering chain
chain ingress {
type filter hook ingress device wan0 priority -500;
kylemanna /
Last active October 21, 2022 06:02 — forked from zengxinhui/
Replace Oracle Cloud Linux with Arch Linux remotely
kylemanna /
Last active September 11, 2023 12:24
FriendlyElec NanoPi R5S Linux PTP Support

Build Notes


Use systemd-nspawn on Arch Linux with debootstrap:

sudo debootstrap --include=systemd-container --components=main,universe jammy ubuntu22.04-rk3568