Jarkko Sakkinen
Posts
4383Following
315Followers
462Entrepreneur at Siltakatu Solutions Oy
OpenPGP: 3AB05486C7752FE1
@vbabka Off-topic (a bit): in some cases I need to explicitly delete .gnupg/private-keys-v1.d when I switch Yubikey. Otherwise pinentry keeps asking for the old one.
Right and one more thing: https://codeberg.org/jarkko/skeleton/src/branch/main/.gnupg
Maybe it is better to check and compare (e.g., I have separate config for scdaemon).
Right and one more thing: https://codeberg.org/jarkko/skeleton/src/branch/main/.gnupg
Maybe it is better to check and compare (e.g., I have separate config for scdaemon).
1
0
1
Jarkko Sakkinen
jarkko
@vbabka hmm...
Check first taht you have both of these installed:
1. pcscd (system service check also systemctl)
2. scdaemon (user service)
I've never dared to change my bootstrap script. It's shitty and does stuff that is not probably necessary but seems to always do the trick:
GPG_AGENT_SOCKETS=(gpg-agent-ssh.socket
gpg-agent-browser.socket
gpg-agent-extra.socket
gpg-agent-ssh.socket
gpg-agent.socket)
systemctl --user disable --now "${GPG_AGENT_SOCKETS[@]}"
gpgconf --kill gpg-agent
sudo systemctl disable --now pcscd.socket
systemctl --user enable --now gpg-agent.socket gpg-agent-ssh.socket
sudo systemctl enable --now pcscd.socket
Check first taht you have both of these installed:
1. pcscd (system service check also systemctl)
2. scdaemon (user service)
I've never dared to change my bootstrap script. It's shitty and does stuff that is not probably necessary but seems to always do the trick:
GPG_AGENT_SOCKETS=(gpg-agent-ssh.socket
gpg-agent-browser.socket
gpg-agent-extra.socket
gpg-agent-ssh.socket
gpg-agent.socket)
systemctl --user disable --now "${GPG_AGENT_SOCKETS[@]}"
gpgconf --kill gpg-agent
sudo systemctl disable --now pcscd.socket
systemctl --user enable --now gpg-agent.socket gpg-agent-ssh.socket
sudo systemctl enable --now pcscd.socket
1
0
1
Jarkko Sakkinen
jarkko
Edited 1 month ago
my #build #container framework:
sudo unshare \
--fork \
--mount \
--uts \
sh -c "
mkdir -p $ROOTFS/proc
mkdir -p $ROOTFS/sys
mkdir -p $ROOTFS/dev
mount -t sysfs /sys $ROOTFS/sys
mount -t proc /proc $ROOTFS/proc
mount --rbind /dev $ROOTFS/dev
hostname $MACHINE
su $USER
export PUAVO_CACHE_PROXY=$PUAVO_CACHE_PROXY
sudo unshare --root $ROOTFS $CMDLINE
"
Jarkko Sakkinen
jarkko
Edited 1 month ago
I wonder if I could apply for Nobel for this one:
https://bsky.app/profile/jarkk0.bsky.social/post/3lmkaiqxdb22o
https://bsky.app/profile/jarkk0.bsky.social/post/3lmkaiqxdb22o
0
0
1
Jarkko Sakkinen
jarkko
Time for yet another LSM upstream meeting :-) My favorite meeting of the month.
0
0
1
Jarkko Sakkinen
jarkko
I think the bright side in the current times is that the relationship towards both Sweden and Estonia has been tightened up, and I can feel that there is more mutual respect towards each other :-)
🇪🇪 🇸🇪 🇫🇮
🇪🇪 🇸🇪 🇫🇮
0
0
2
Jarkko Sakkinen
jarkko
I dared to apply this to my -next:
https://lore.kernel.org/keyrings/Z_e9CVsmiXD3QYkg@kernel.org/
It's a good timing, given that we are at -rc1. key_put() is exactly type of code where:
1. You need to be extremely conservative.
2. Still there's a chance for breakage.
3. struct key is widely accessed kernel object in various context's. Thus, it is practically impossible to consider every possible use case.
I'll put this to my v6.16 PR if it turns out to not cause too much devastation :-)
#linux #kernel #keyring
https://lore.kernel.org/keyrings/Z_e9CVsmiXD3QYkg@kernel.org/
It's a good timing, given that we are at -rc1. key_put() is exactly type of code where:
1. You need to be extremely conservative.
2. Still there's a chance for breakage.
3. struct key is widely accessed kernel object in various context's. Thus, it is practically impossible to consider every possible use case.
I'll put this to my v6.16 PR if it turns out to not cause too much devastation :-)
#linux #kernel #keyring
0
0
0
Jarkko Sakkinen
jarkko
Flying to Berlin in near future to meet up friends from Tallinn :-) It's cheaper than train + boat.
0
0
1
Jarkko Sakkinen
jarkko
"marvel's mignight suns" is a cool game but why they have to talk so much, and why i need to hang out.
i don't hang out IRL either 🤷
i don't hang out IRL either 🤷
0
0
0