Jarkko Sakkinen
jarkko
This how I backup now with Restic.
I have restic-env:
# vim:ft=sh
export AWS_SECRET_ACCESS_KEY=$(pass net/mega.nz/s4/secret)
export AWS_ACCESS_KEY_ID=$(pass net/mega.nz/s4/access)
export RESTIC_PASSWORD_COMMAND="pass net/mega.nz/restic/$1"
export RESTIC_REPOSITORY="s3:s3.eu-amsterdam-2.megas4.com/$1"
Then for each system I have own bucket, which I manage as follows:
- Backup:
restic backup --files-from ~/MEGA/Restic/jarkko-kan-01.local.txt - Restore:
restic --target / 4de0c63f.
Note that restore is done relative to the system root i.e., they are full system backups.
I use these more like long-term preserved content, audio plugin presets and stuff like that rather than e.g., config files (for those I rather use Git).
1
1
0
Jarkko Sakkinen
jarkko
Truecolor vim9 colorschemes that come with Vim 9.2:
- retrobox
- habamax
- lunaperche
- quiet
- sorbet
- zaibatsu
- wildcharm.
I have these written down as I've started with any possible dev tool to pick themes from the built-in, and I've stopped downloding 3rd party themes.
The quantitative gain is the reduced risk to become a victim of a supply chain attack.
I would like note also that limitations accelerate creativity and brain likes variation I woud like to think :-)
#infosec #theme #vim
- retrobox
- habamax
- lunaperche
- quiet
- sorbet
- zaibatsu
- wildcharm.
I have these written down as I've started with any possible dev tool to pick themes from the built-in, and I've stopped downloding 3rd party themes.
The quantitative gain is the reduced risk to become a victim of a supply chain attack.
I would like note also that limitations accelerate creativity and brain likes variation I woud like to think :-)
#infosec #theme #vim
0
1
0
Jarkko Sakkinen
jarkko
I've noticed that Vscodium is nice to use from time to time in order to get another perspective than the tmux angle. And Vim emulation seems to be sleek.
Never really gotten into using any IDE up until lately (OK, Tubo Pascal IDE I've used in the past).
Never really gotten into using any IDE up until lately (OK, Tubo Pascal IDE I've used in the past).
0
0
0
Jarkko Sakkinen
jarkkoI was looking for smal MIDI keyboard and then I found this mint (almot untouched) used - it vibrates year 2002 😎 And for bargain 70 euro price.
0
0
2
Jarkko Sakkinen
jarkko
"Google - (Google - AI)"
This is what OpenAI and Anthropic are as a business :-)
This is what OpenAI and Anthropic are as a business :-)
0
0
0
Jarkko Sakkinen
jarkko
Edited 28 days ago
My first thing with C++ after 16 years:
https://gitlab.com/puu-os/installer
I've pretty much committed to Google's style guide because my favorite coding style is any documented coding style.
I've enjoyed programming with C++ more than programming overall for some time. Using C++ in the modern days has tought me that my brain works best in the C-versum. It was immediate "I want to do this more again" :-)
Landstrip has C++ conversion in progress, which will also migrate to LGPL 3.0+ given FSF's claims about Apache 2.
https://gitlab.com/puu-os/installer
I've pretty much committed to Google's style guide because my favorite coding style is any documented coding style.
I've enjoyed programming with C++ more than programming overall for some time. Using C++ in the modern days has tought me that my brain works best in the C-versum. It was immediate "I want to do this more again" :-)
Landstrip has C++ conversion in progress, which will also migrate to LGPL 3.0+ given FSF's claims about Apache 2.
0
0
2
Jarkko Sakkinen
jarkko
Promises given, promises kept. I had couple of calls last Fall w/ Oracle about Trenchboot series and carved rough plan what they need to do.
Given cutoffs across the board in bigtech suddenly Oracle was not a stakeholder in this anymor,e and the whole situation has been drilling me since in the background. What a relief.
Since we got here, and I feel much more relaxed I'm also motivated to proactively help with the beef of the patch series via reviews/feedback.
Given cutoffs across the board in bigtech suddenly Oracle was not a stakeholder in this anymor,e and the whole situation has been drilling me since in the background. What a relief.
Since we got here, and I feel much more relaxed I'm also motivated to proactively help with the beef of the patch series via reviews/feedback.
0
0
1
Jarkko Sakkinen
jarkko
Hoo-ray:
https://lore.kernel.org/linux-integrity/178793933115.2708560.2385527122662363073.pr-tracker-bot@kernel.org/
We got the dissociative TPM patches wiped off from the head of the Trenchboot series.
I.e., the next iteration of the patch series will be a scoped set of x86 patches.
🥳
#linu
https://lore.kernel.org/linux-integrity/178793933115.2708560.2385527122662363073.pr-tracker-bot@kernel.org/
We got the dissociative TPM patches wiped off from the head of the Trenchboot series.
I.e., the next iteration of the patch series will be a scoped set of x86 patches.
🥳
#linu
0
0
1
Jarkko Sakkinen
jarkko
I've started to regularly buy Qt Group stock it gou underevaluated heavily thanks to AI.
0
0
1
Jarkko Sakkinen
jarkko
Tonight I'm going to install Windows 11 Pro to real hardware 🚀 to my old x390 with i7-8865, 16 GiB and 512 MiB SSD.
I also found from Github Gists a cool PowerShell script that enables WSL2 port forwarding. I wrote it some years ago to deal with Windows so might come handy again.
Local account recipe of any year for Windows is always to install without network (at least past 10 years) , Shift-10 when first boot crap starts to emerge and
the safeword of the year.
The safeword of 2026 is "start ms-cxh:localonly" ;-)
I could be in 2027 that won't work but only thing that'll change is the safeword.
I also found from Github Gists a cool PowerShell script that enables WSL2 port forwarding. I wrote it some years ago to deal with Windows so might come handy again.
Local account recipe of any year for Windows is always to install without network (at least past 10 years) , Shift-10 when first boot crap starts to emerge and
the safeword of the year.
The safeword of 2026 is "start ms-cxh:localonly" ;-)
I could be in 2027 that won't work but only thing that'll change is the safeword.
0
0
0
Jarkko Sakkinen
repeated
repeated
Jarkko Sakkinen
jarkko
Edited 29 days ago
I've packaged Linux binaries for NPM distribution as static (musl) binaries so far.
As the next step, I'll package Linux executables as AppImage bundles :-) It essentially wipes away three quarters of my build scripts.
I think NPM is actually really good fit for the AppImage overall, and in addition resistant to possible (probable?) supply chain attacks as AppImage already is self-contained.
As the next step, I'll package Linux executables as AppImage bundles :-) It essentially wipes away three quarters of my build scripts.
I think NPM is actually really good fit for the AppImage overall, and in addition resistant to possible (probable?) supply chain attacks as AppImage already is self-contained.
0
0
1
Jarkko Sakkinen
jarkko
Edited 29 days ago
Making public Git repository for Puu OS some time today. It's a container native lean bootc OS centered around Buildroot build orchestration, and off-the-shelf K3s/vLLM service provider.
Copyright for this project is owned by Opinsys Oy i.e., it is for my day job.
We do school IT fully based onLinux and open source with full hardware/software leasing supply chain from student laptops to info screens. We possess 40% marketshare in Finland, and we steadily growing market share in Germany :-) Hardware is used/recycled from our leasing partners, and we refurbish it to a pristine condition. We also take broken hardware, and collect the spare parts, which maitenance service uses for the repairs. In other words, this is also quite green business.
All this with less than 30 employee staff is amazing, and the business is fully self-funded and profit making. There are no outside investors.
Copyright for this project is owned by Opinsys Oy i.e., it is for my day job.
We do school IT fully based onLinux and open source with full hardware/software leasing supply chain from student laptops to info screens. We possess 40% marketshare in Finland, and we steadily growing market share in Germany :-) Hardware is used/recycled from our leasing partners, and we refurbish it to a pristine condition. We also take broken hardware, and collect the spare parts, which maitenance service uses for the repairs. In other words, this is also quite green business.
All this with less than 30 employee staff is amazing, and the business is fully self-funded and profit making. There are no outside investors.
1
0
2
Jarkko Sakkinen
jarkko
Edited 29 days ago
For the time being I will disable io_uring in Landstrip, as I'm not yet sure if/how io_uring_setup() ought to be managed securely with seccomp for behalf of the agent.
Workaround will be that I synthesize appropriate errnos so that any sane software knows how to fall back to other ways of doing file I/O.
I have some actual fix ideas in my mind but what I don't see yet is what is the "full closure" of this topic. Will be revisited in future.
What a relieft that I caught such a big fish myself and can do a precautious fix.
I'll release 1.0 once I believe that there's nothing I can do except being the SRE for other peoples lemmings. Up until that it will be minor and patch versions (i.e. 0.y.z's), and Landstrip is labeled as insecure :-)
Workaround will be that I synthesize appropriate errnos so that any sane software knows how to fall back to other ways of doing file I/O.
I have some actual fix ideas in my mind but what I don't see yet is what is the "full closure" of this topic. Will be revisited in future.
What a relieft that I caught such a big fish myself and can do a precautious fix.
I'll release 1.0 once I believe that there's nothing I can do except being the SRE for other peoples lemmings. Up until that it will be minor and patch versions (i.e. 0.y.z's), and Landstrip is labeled as insecure :-)
1
0
0
Jarkko Sakkinen
jarkko
Edited 29 days ago
If a bug is at plain sight, it should be always piggybacked with an example:
https://lore.kernel.org/keyrings/apEWZUFe8NmwgPDb@kernel.org/
I at least start to otherwise look for blind spot in my own thinking.
#linux #kernel
https://lore.kernel.org/keyrings/apEWZUFe8NmwgPDb@kernel.org/
I at least start to otherwise look for blind spot in my own thinking.
#linux #kernel
0
0
0
Jarkko Sakkinen
jarkko
why in hell this tool has TWO names? https://github.com/containers/toolbox
super confusing and annoying.
super confusing and annoying.
2
0
1
Jarkko Sakkinen
jarkko
After many years I've finally root caused why Microfreak has so low volume. It turns out I've had a blind spot for Utility/Preset/Preset Volume (usually set to zero) :-)
0
0
0
Jarkko Sakkinen
jarkko
Edited 29 days ago
This was a difficult cover letter to make:
https://lore.kernel.org/linux-integrity/apCluywYWo97vyYr@kernel.org/
I think this is the right call because the pre-existing Trenchboot series has been shown to be confusing to review for everyone given the inherent asymmetry in it.
#linux #kernel #tpm #x86
https://lore.kernel.org/linux-integrity/apCluywYWo97vyYr@kernel.org/
I think this is the right call because the pre-existing Trenchboot series has been shown to be confusing to review for everyone given the inherent asymmetry in it.
#linux #kernel #tpm #x86
0
0
0