VirtualTam's bookmarks

1. oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise 2024-03-31

   tags: compression/lzma, compression/xz, linux, programming/c, programming/shell/bash, security, security/backdoor

   [ permalink ]

   • XZ Utils backdoor
   • xz/liblzma: Bash-stage Obfuscation Explained
   • /r/Linux - XZ Utils backdoor
   • Debian Bug report logs - #1068024 revert to version that does not contain changes by bad actor
   • FAQ on the xz-utils backdoor
   • LWN - A backdoor in xz
   • Everything I Know About the Xz Backdoor
2. Debian Package Repository - Instructions to connect to a third-party repository (with Ansible) 2024-01-06

   tags: configuration-management/ansible, cryptography/pgp, cryptography/pgp/gnupg, linux/debian, linux/ubuntu, packaging

   [ permalink ]

   • apt_key deprecated in Debian/Ubuntu - how to fix in Ansible
   • ansible.builtin.deb822_repository - Add and remove deb822 formatted repositories
   • ansible/ansible#78063 - ansible.builtin.apt_key adds keys to a deprecated location
   • Example usages of the new deb822_repository Ansible module
   • Ubuntu [Spec] APT deb822 sources by default
3. Sequoia-PGP - OpenPGP Implementation in Rust 2023-11-09

   tags: command-line, cryptography/encryption, cryptography/pgp, cryptography/pgp/gnupg, linux/debian, linux/fedora, programming/rust, security

   [ permalink ]

   • Talk about OpenPGP interop testing at the IETF 110
   • sequoia-pgp/sequoia - APIs for dealing with OpenPGP data
   • sequoia-pgp/sequoia-sq - the Sequoia-PGP command line tool
   • RpmSequoia
4. It's official: Raspberry Pi OS goes 64-bit | Jeff Geerling 2022-08-21

   tags: arm, embedded, linux/debian, raspberry-pi

   [ permalink ]

   • https://www.raspberrypi.com/software/operating-systems/
   • https://developer.arm.com/Architectures/A64%20Instruction%20Set%20Architecture
   • https://www.phoronix.com/review/raspberrypi-32bit-64bit
   • https://matteocroce.medium.com/why-you-should-run-a-64-bit-os-on-your-raspberry-pi4-bd5290d48947
5. The JSON License 2022-03-23

   tags: license, linux, programming/c, programming/json

   [ permalink ]

   The Software shall be used for Good, not Evil.

   • https://wonko.com/post/jsmin-isnt-welcome-on-google-code
   • https://wiki.debian.org/qa.debian.org/jsonevil
   • https://www.gnu.org/licenses/license-list.html#JSON
   • https://bugzilla.redhat.com/show_bug.cgi?id=455507
   • https://en.wikipedia.org/wiki/Douglas_Crockford#.22Good.2C_not_Evil.22
6. X11 / XKB custom keyboard layout definition 2020-08-15

   tags: keyboard, layout, linux, user-interface, x11

   [ permalink ]

   • https://web.archive.org/web/20170825051821/http://madduck.net:80/docs/extending-xkb/
   • https://web.archive.org/web/20170720005456/http://pascal.tsu.ru/en/xkb/
   • https://web.archive.org/web/20170709093947/https://wiki.debian.org/XStrikeForce/InputHotplugGuide
   • https://help.ubuntu.com/community/Custom%20keyboard%20layout%20definitions
   • http://linux.lsdev.sil.org/wiki/index.php/Building_an_XKB_Keyboard
   • https://rlog.rgtti.com/2014/05/01/how-to-modify-a-keyboard-layout-in-linux/
   • https://www.freedesktop.org/wiki/Software/XKeyboardConfig/
   • https://askubuntu.com/questions/482678/how-to-add-a-new-keyboard-layout-custom-keyboard-layout-definition
   • https://wiki.archlinux.org/index.php/X_keyboard_extension
7. dh-virtualenv - Combine Debian packaging with self-contained Python software deployment in a pre-built virtualenv 2020-01-07

   tags: linux, linux/debian, packaging, programming/python, programming/python/virtualenv

   [ permalink ]

   • https://github.com/spotify/dh-virtualenv
   • https://labs.spotify.com/2013/10/10/packaging-in-your-packaging-dh-virtualenv/
8. Own mail server based on Dovecot, Postfix, MySQL, Rspamd and Debian 9 Stretch 2019-10-21

   tags: email, email/dovecot, email/postfix, email/rspamd, email/spam, linux, linux/debian, network/dns, self-hosting

   [ permalink ]
9. AWS | Enable Enhanced Networking with Elastic Network Adapters for vintage OS AMIs 2019-09-17

   tags: chroot, cloud/aws, linux, linux/debian, linux/kernel, virtualization, xen

   [ permalink ]

   Paravirtual (PV) to Hardware Virtual Machine (HVM):

   • https://stackoverflow.com/questions/24330721/amazon-ec2-how-to-convert-an-existing-pv-ami-to-hvm

   ENA support:

   • https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/enhanced-networking-ena.html
   • https://forums.aws.amazon.com/thread.jspa?threadID=166135
   • https://aws.amazon.com/premiumsupport/knowledge-center/boot-error-linux-m5-c5/
   • https://bugs.centos.org/view.php?id=14107
   • https://ygrene.tech/how-to-enable-ena-support-for-aws-amis-in-5-steps-and-make-your-bamboo-remote-jobs-really-fast-f2a4254a9955

   Build Debian AMIs from scratch:

   • https://bootstrap-vz.readthedocs.io/en/master/
   • https://github.com/andsens/bootstrap-vz
   • https://www.slideshare.net/JamesBromberger/debian-cloud-building-the-debian-amis
   • https://blog.james.rcpt.to/2012/12/06/official-debian-images-on-amazon-web-services-ec2/

   Squeeze:

   • https://lists.debian.org/debian-cloud/2013/02/msg00023.html

   Wheezy:

   • https://lists.debian.org/debian-cloud/2014/10/msg00009.html
   • https://lists.debian.org/debian-cloud/2014/11/msg00000.html

   Boot to chroot:

   • https://unix.stackexchange.com/questions/85714/boot-into-a-chroot
   • https://wiki.debian.org/chroot
   • https://wiki.debian.org/Debootstrap
   • https://superuser.com/questions/384437/booting-linux-system-from-chroot-is-there-a-better-way-to-do-this/384457#384457
   • https://github.com/lemonsqueeze/boot-chroot
10. ISPmail tutorials – workaround.org 2019-02-07

    tags: email, email/dkim, email/dmarc, email/dovecot, email/postfix, email/spam, email/spf, linux/debian

    [ permalink ]

    • https://workaround.org/ispmail/stretch
    • https://workaround.org/ispmail/stretch/big-picture
11. Run adduser non-interactively - Ask Ubuntu 2018-12-21

    tags: linux, linux/debian, linux/ubuntu, programming/shell, script, user

    [ permalink ]
12. Unable to docker build on Linux kernel 4.19 · Issue #480 · docker/for-linux · GitHub 2018-12-10

    tags: filesystem, linux, linux/container/docker, linux/debian, linux/kernel

    [ permalink ]
13. Find packages installed from a certain repository with aptitude - Super User 2018-11-12

    tags: linux/debian, linux/ubuntu, package, repository

    [ permalink ]

    • https://askubuntu.com/questions/342434/find-what-packages-are-installed-from-a-repository
    • https://serverfault.com/questions/252333/list-all-packages-from-a-repository-in-ubuntu-debian
14. The Best MOTD - How to Customize Your MOTD - Linux 2018-09-21

    tags: linux, linux/debian, motd, prompt

    [ permalink ]
15. Minideb - a small image based on Debian designed for use in containers 2018-07-30

    tags: linux/container/docker, linux/debian

    [ permalink ]

    • https://github.com/bitnami/minideb
    • https://wiki.debian.org/Debootstrap
    • https://dzone.com/articles/minideb-a-minimalist-debian-based-docker-image
16. Creating a custom Nginx build for Ubuntu/Debian - JGuru 2018-07-13

    tags: linux, linux/debian, linux/ubuntu, network/http, network/http-server/nginx, package

    [ permalink ]

    • https://www.debian.org/doc/manuals/maint-guide/build.en.html
    • https://salsa.debian.org/nginx-team/nginx
    • https://www.debian.org/doc/debian-policy/#document-ch-controlfields
    • https://www.debian.org/doc/debian-policy/#document-ch-relationships
    • https://unix.stackexchange.com/questions/333603/debian-control-file-provides-does-not-satisfy-dependency
    • https://github.com/JayH5/nginx-modules
17. OpenVPN-install: Set up your own OpenVPN server on Debian, Ubuntu, Fedora CentOS, and Arch Linux 2018-05-24

    tags: linux, network, network/vpn, security

    [ permalink ]

    • https://angristan.fr/installer-facilement-serveur-openvpn-debian-ubuntu-centos/
    • https://github.com/Nyr/openvpn-install
18. OpenVPN Community Software 2018-05-24

    tags: cryptography/public-key-infrastructure, cryptography/rsa, linux, network, network/transport-layer-security, network/vpn, security

    [ permalink ]

    • https://openvpn.net/index.php/open-source/documentation/miscellaneous/78-static-key-mini-howto.html
    • https://openvpn.net/index.php/open-source/documentation/howto.html
    • https://openvpn.net/index.php/open-source/documentation/miscellaneous/76-ethernet-bridging.html
    • https://wiki.archlinux.org/index.php/OpenVPN
    • https://wiki.archlinux.org/index.php/Easy-RSA
    • https://wiki.debian.org/OpenVPN
19. The Pyra | Official Pyra and Pandora Site 2018-05-18

    tags: console, device, hardware, linux, linux/debian, portable

    [ permalink ]
20. Proxmox: Networking, Firewall, Security 2018-05-15

    tags: linux, linux/debian, network, network/firewall, network/router, security, virtualization/proxmox

    [ permalink ]

    • https://pve.proxmox.com/wiki/Network_Configuration
    • https://pve.proxmox.com/wiki/Firewall
    • https://pve.proxmox.com/wiki/Fail2ban
    • https://forum.proxmox.com/threads/how-to-implement-fail2ban-on-host.3583/
    • https://forum.proxmox.com/forums/proxmox-ve-networking-and-firewall.17/
    • https://myatus.com/p/guide-firewall-and-router-with-proxmox-extending-its-us/
    • https://www.kiloroot.com/secure-proxmox-install-sudo-firewall-with-ipv6-and-more-how-to-configure-from-start-to-finish/
    • https://blog.waccabac.com/gestion-du-pare-feu-de-proxmox-ve-4/