jdoss

Decrypt LUKS volumes with a TPM on Fedora 35+

This guide allows you to use the TPM on your computer to decrypt your LUKS encrypted volumes. If you are worried about a cold boot attack on your hardware please DO NOT use this guide with your root volume!

Preflight Checks

Verify that you have a TPM in your computer:

# systemd-cryptenroll --tpm2-device=list
PATH DEVICE DRIVER

elisboa

#!/usr/bin/env bash
# ---
#!/bin/bash -x

echo -e "### WELCOME TO $0\n"

if [[ -z ${DEST_DIR} ]]
then
    TIMESTAMP=$(date +%s)
    echo -e "Setting destination dir as ${TIMESTAMP}"

jaysonsantos

# based on https://github.com/junegunn/fzf/wiki/Examples#autojump

function _fzf_autojump() {
    fzf --height 40% --reverse --inline-info
}

function _fzf_cleanup() {
    awk '$1 ~ /[0-9]:/ && $2 ~ /^\// { for (i=2; i<=NF; i++) { print $(i) } }'
}

jaysonsantos

function gclone() {
    local organization
    local repositories
    organization="$1"
    repositories="$(gh repo list -L 1000 "$organization" | fzf --multi --cycle | awk '{print $1}')"
    for repository in $repositories; do
        echo "Cloning $repository"
        gh repo clone "$repository"
    done
}

jaysonsantos

# On linux side you need iptables
# On windows side you need sudo which can be installed with scoop

$CidrBlocks = "10.0.0.0/16", "10.1.0.0/16", "10.70.0.0/16", "10.3.0.0/16"
$WslIP = "$(wsl -- ip addr show dev eth0 | Select-String -Pattern 'inet ')"
$WslIP = $WslIP.Split(' ').Where{ $_.Length }[1].Split('/')[0]

function BuildIptablesRoute {
    param (
        [Parameter(Mandatory = $true)]

yanniszark

import goyaml "github.com/go-yaml/yaml"

func SplitYAML(resources []byte) ([][]byte, error) {

	dec := goyaml.NewDecoder(bytes.NewReader(resources))

	var res [][]byte
	for {
		var value interface{}
		err := dec.Decode(&value)

bernardomig

How to setup nvidia-container-runtime and podman/runc

Podman is such a cool project! However, there is no easy way to setup the nvidia-container-runtime and podman so that we can run unprivileged container in a gpu host. This is specially interesting in environments with multiple people accessing the same host (strong isolation between containers!!!).

Steps to setup the whole system

1. Install podman and friends (buildah and skopeo)

Ubuntu: add-apt-repository -y ppa:projectatomic/ppa && apt install podman buildah skopeo

akhenakh

        readinessProbe:
          exec:
            command: ["/root/grpc_health_probe", "-addr=:6666"]
          initialDelaySeconds: 1
        livenessProbe:
          exec:
            command: ["/root/grpc_health_probe", "-addr=:6666"]
          initialDelaySeconds: 2
        imagePullPolicy: IfNotPresent

kannangce

import java.io.File;
import java.io.FileInputStream;
import java.io.FileNotFoundException;
import java.io.IOException;
import java.security.AccessController;
import java.security.KeyManagementException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;

roadrunner2

Introduction

This is about documenting getting Linux running on the late 2016 and mid 2017 MPB's; the focus is mostly on the MacBookPro13,3 and MacBookPro14,3 (15inch models), but I try to make it relevant and provide information for MacBookPro13,1, MacBookPro13,2, MacBookPro14,1, and MacBookPro14,2 (13inch models) too. I'm currently using Fedora 27, but most the things should be valid for other recent distros even if the details differ. The kernel version is 4.14.x (after latest update).

The state of linux on the MBP (with particular focus on MacBookPro13,2) is also being tracked on https://github.com/Dunedan/mbp-2016-linux . And for Ubuntu users there are a couple tutorials (here and here) focused on that distro and the MacBook.

Note: For those who have followed these instructions ealier, and in particular for those who have had problems with the custom DSDT, modifying the DSDT is not necessary anymore - se