Debian APT keys: Keyrings and other stuff

Debian APT key management A short story in 4 steps: motivation: apt-key is/is being deprecated. question: How to install keys for other repos - for example, mkusb being the case, but incl. other Ubuntu PPAs - in a organized, manageable and easy-to-reverse manner? solution: StackOverflow example: export GNUPGHOME="$(mktemp -d)" gpg --recv-keys --keyserver keyserver.ubuntu.com 54B8C8AC gpg --export 54B8C8AC | sudo tee /etc/apt/trusted.gpg.d/mkusb-archive-keyring.gpg cat <<-SOURCE | sudo tee /etc/apt/sources.list.d/mkusb.list deb [signed-by=/etc/apt/trusted.gpg.d/mkusb-archive-keyring.gpg] http://ppa.launchpad.net/mkusb/ppa/ubuntu focal main SOURCE downsides: MySQL can, and will overwrite your apt list file. ...

2022-03-09 · 1 min · EK

Arch instalation, the Every Possibile Way (TM) (MBR-BIOS / GPT-EFI)

Took me a while, but I made it, once. Took few hours to test and reinstall a few times, just to be sure that it - in fact - really works. Common loadkeys slovene # EFI check: if OK (list exists), boot == EFI. ls /sys/firmware/efi/efivars dhcpcd ip addr list timedatectl set-ntp true MBR, BIOS cfdisk # MBR # /dev/vda1: 9G - type Linux, BOOTABLE # /dev/vda2: 1023M - type Linux Swap mkfs.ext4 /dev/vda1 mkswap /dev/vda2 swapon /dev/vda2 mount /dev/vda1 /mnt EFI, GPT cfdisk # GPT # /dev/vda1: 512M - type EFI System # /dev/vda2: 8G - type Linux Root (X86-64) # /dev/vda2: 1.5G - type Linux Swap mkfs.ext4 /dev/vda2 mkswap /dev/vda3 swapon /dev/vda3 mount /dev/vda2 /mnt Common pacman -Sy pacman -S archlinux-keyring pacstrap /mnt base linux linux-firmware genfstab -U /mnt >> /mnt/etc/fstab arch-chroot /mnt pacman -S vim curl htop wget tmux dhcpcd grub lolcat cowsay neofetch zsh zsh-completions ln -sf /usr/share/zoneinfo/Europe/Ljubljana /etc/localtime hwclock --systohc sed -i '/^#sl_SI.UTF-8/s/^#//' /etc/locale.gen sed -i '/^#en_US.UTF-8/s/^#//' /etc/locale.gen locale-gen vim /etc/locale.conf LANG=en_US.UTF-8 LC_ALL=en_US.UTF-8 LANGUAGE=en_US.UTF-8 :wq echo "KEYMAP=slovene" > /etc/vconsole.conf echo "cassandra" > /etc/hostname vim /etc/hosts 127.0.0.1 localhost ::1 localhost 127.0.1.1 cassandra.localdomain cassandra :wq systemctl enable dhcpcd MBR grub-install /dev/vda grub-mkconfig -o /boot/grub/grub.cfg EFI pacman -Sy efibootmgr grub-install --target=x86_64-efi --efi-directory /efi/ --bootloader-id=GRUB grub-mkconfig -o /boot/grub/grub.cfg Common passwd useradd -m user -s /usr/bin/zsh passwd user exit umount -R /mnt reboot All credits due: the Arch Wiki Allmighty(TM) ...

2020-06-13 · 2 min · EK

KVM VM console access

Access guest console from host via virsh console <domain-name> Run this on guest (debian, ubuntu) systemctl enable [email protected] systemctl start [email protected] The exit keystroke is ctrl+5.

2020-01-05 · 1 min · EK

RouterOS self-signed HTTPS certificate

Enable WWW-SSL on Mikrotik RouterOS ssh 172.30.10.1 /certificate add name=SSL common-name=SSL key-size=2048 /certificate create-certificate-request template=SSL key-passphrase=CertPassword123 /quit sftp 172.30.10.1 lmkdir mikrotik-certs lcd mikrotik-certs get certificate* exit cd mikrotik-certs openssl rsa -in certificate-request_key.pem -text > certificate-request2.pem openssl x509 -req -days 99999 -in certificate-request.pem -signkey certificate-request2.pem -out mikrotik_ssl.crt sftp 172.30.10.1 lcd mikrotik-certs put mikrotik_ssl.crt put certificate-request2.pem exit ssh 172.30.10.1 /certificate import file-name=mikrotik_ssl.crt /certificate import file-name=certificate-request2.pem /certificate print /ip service enable www-ssl /ip service set www-ssl certificate=mikrotik_ssl_.crt_0 /quit exit

2019-12-27 · 1 min · EK

Baikal DAV

http://sabre.io/baikal/install/ wget https://github.com/sabre-io/Baikal/releases/download/0.6.0/baikal-0.6.0.zip unzip baikal-0.6.0.zip mv baikal /var/www/html cd /var/www/html chown -fR www-data:www-data baikal apt-get install nginx php7.3 php7.3-sqlite php-sabre-dav NginX vhost: server { listen 80; server_name default_server; root /var/www/html/baikal; index index.php; rewrite ^/.well-known/caldav /dav.php redirect; rewrite ^/.well-known/carddav /dav.php redirect; charset utf-8; location ~ /(\.ht|Core|Specific) { deny all; return 404; } location ~ ^(.+\.php)(.*)$ { try_files $fastcgi_script_name =404; include /etc/nginx/fastcgi_params; fastcgi_split_path_info ^(.+\.php)(.*)$; fastcgi_pass unix:/var/run/php/php7.3-fpm.sock; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_param PATH_INFO $fastcgi_path_info; } } Nginx proxy with configured upstream: ...

2019-09-03 · 1 min · EK