Personal infra

• this works… but doesn't if setup.py is guarded with main
  

  import distutils.core as C; C.run_setup("setup.py", stop_after='config')
  

  could check for name == 'builtins'… but then would need to modify all files, and might not reliably work
  

• can't just copy setup.py outside, because it might need .git directory for scm_version thing
  fuuck.
  
• adding to easy_install.pth works.. but need to figure out what's the base pkg directory…
  
• ok, added a hacky script to infra repo
  

For a better PDF experience, you might want to try 'koreader'. The native PDF support on my Kobo Forma was so bad I was ready to return it, before finding this. It's an open source PDF/epub reader that you can install on Remarkable and other eInk readers. It's just an app - it doesn't replace or degrade any existing functionality.

https://github.com/frenck/awesome-home-assistant

apparently can't run without the default command?

podman-compose --file docker-compose.yml run --rm ghexport python3                                                                                                                                                     mc 12:02:53
Traceback (most recent call last):
  File "/home/karlicos/.local/bin/podman-compose", line 8, in <module>
    sys.exit(main())
  File "/home/karlicos/.local/lib/python3.8/site-packages/podman_compose.py", line 1093, in main
    podman_compose.run()
  File "/home/karlicos/.local/lib/python3.8/site-packages/podman_compose.py", line 624, in run
    cmd = self.commands[cmd_name]
TypeError: unhashable type: 'list'

here? https://github.com/containers/podman-compose/issues/24
can't see if they have a CI?

e.g. create empty node_modules

To start the service to run in the background you use docker-compose -f <FILE> up --detach but if you wanted to look inside the container using a terminal, you would run docker-compose run bash.

Simplified git version control only limited by your storage space.
Synchronization algorithm that can handle moved files and empty directories and files.
Your data does not need to be stored on the device you are currently using.
FUSE filesystem that feels like a normal sync folder.
No central server at all. Still, central architectures can be build with brig.
Gateway and Web based UI to share normal HTTP/S links with other users.
Auto-updating facility that will sync on any change.

GUI now available on Ubuntu and Manjaro
If you have Mycroft running on the latest (K)Ubuntu or Manjaro releases, you can now install the Alpha release of the Mycroft GUI powered by Qt and Kirigami. Simply use the same basic commands used to install mycroft-core.

Upgrading
    Pull the new version (setup step 1)
    Start the new version (setup step 7)

https://github.com/bb4242/sdnotify

https://alexolivier.me/posts/deploy-container-stateless-cheap-google-cloud-run-serverless

http://elasticlunr.com/
I think I'm using it in scrapyroo.. perhaps I should index all my git repos?

https://github.com/vinta/awesome-python

fuzzywuzzy - Fuzzy String Matching.

introspection is certainly way worse! dry run etc are amazing
how can we bring Python programming experience closer to this?

https://github.com/Friz-zy/awesome-linux-containers#readme

Sandboxes
    Firejail is a SUID sandbox program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces, seccomp-bpf and Linux capabilities.

https://unix.stackexchange.com/questions/72037/difference-between-xz-and-lzma-in-gnu-tar

This options control which external binary tar calls for compressing its data stream: lzma and xz respectively. While both of them uses the same compression algorithm by default, xz is considered more up-to-date and feature rich, with lzma being somewhat legacy tool. Modern version of xz-utils provides both commands, with lzma being an 'alias' for xz --format=lzma (man xz).

https://news.ycombinator.com/item?id=22607112

Not great, you can only officially export PDF, PNG, or SVG, though their cloud management does seem to work really well and as I understand, files are stored locally on each device once synced.
That said, it runs linux so you could conceivably backup the files yourself. You can ssh into your tablet, run sftp, w/e. But they are in some proprietary .lines format.
There's a wiki with more details (the file format stuff is further down): https://remarkablewiki.com/tech/filesystem
It may be possilbe you could hack it to run xournal, but I've no idea.

If you want fast builds, you want to rely on Docker’s layer caching. But by copying in the file before running pip install, all later layers are invalidated—this image will be rebuilt from scratch every time.

http://www.haskellforall.com/2020/01/why-dhall-advertises-absence-of-turing.html

Why Dhall advertises the absence of Turing-completeness

I use `chronic` in almost all of my cron jobs so that cron sends me an email with the output only if the command has a return code of != 0.

https://github.com/tmuxinator/tmuxinator

https://unix.stackexchange.com/questions/118883/basic-rsync-command-for-bit-identical-copies

So this is the basic command to make the destination identical to the source (absent hard links, ACLs and extended attributes):

rsync -a --delete SOURCE/ DESTINATION/

cool!
Zettelkasten!
in context

https://news.ycombinator.com/item?id=22778988

https://github.com/Canop/broot

https://news.ycombinator.com/item?id=22669968

NixOS: slop

https://github.com/hongkonggong/tldr-digital-security/blob/master/README.md

https://www.freedesktop.org/software/systemd/man/systemd.unit.html#

Note that systemctl reset-failed will cause the restart rate counter for a service to be flushed

https://github.com/LTD-Beget/sprutio
holy crap, that's elaborate!

https://github.com/huginn/huginn

https://stackoverflow.com/questions/28302178/how-can-i-add-a-volume-to-an-existing-docker-container

You can commit your existing container (that is create a new image from container’s changes) and then run it with your new mounts.

https://forum.syncthing.net/t/nested-folders/11793/10

Ildar Yusupov
ildary
Jul '18
I see use case of nested folders: one folder shared with first computer and nested folder shared with second and never both folders shared with the same computer - because first folder is enough.

Jakob Borg
calmh
Syncthing Maintainer
Jul '18
Yeah, and you can do that, and it should work fine.

gdbus introspect -r --session --dest org.freedesktop.systemd1 --object-path /org/freedesktop/systemd1

It's hard to take Dhall seriously because it seems like its authors don't take it seriously, and work on it for entertainment. They went through the trouble of creating bindings for five (!!) different languages, and the most popular of them, by a pretty wide margin, is Ruby. I assume Fortran, Delphi, and Idris are next on their list.

3.6. Case studies
The above may sound rather theoretical and nitpicking, so let’s illustrate with a few examples.

some good examples of systemd gotchas

https://github.com/syncthing/syncthing/issues/1776
so, they decided not to follow symlinks.

https://medium.com/faun/set-current-host-user-for-docker-container-4e521cef9ffc

https://blog.sleeplessbeastie.eu/2015/11/16/how-to-mount-encrypted-lvm-logical-volume/

http://blog.jorgenschaefer.de/2014/07/why-systemd.html

https://github.com/dropmeaword/kobo-aura-remote

• couldn't set up html colors rendering
  

– apparently, no automatic filtering and folders

I guess I'm better off setting retention policy for thunderbird

https://pypi.org/project/python-daemon/

• [2020-07-31] ok, Zulip is clearly really good, I think I should use it
  

https://dev.to/sobolevn/9-best-open-source-findings-november-2019-gi0

lazydocker
Minimalistic TUI to work with docker. Supports mouse.

https://askubuntu.com/questions/1023186/cron-anacron-vs-systemd

Systemd timers have some overhead to learn and setup, but provide a number of benefits. There some packages like systemd-cron and systemd-cron-next that allow you to have cron entries converted to systemd-timers, to try to provide a best-of-both-worlds solution

https://www.freedesktop.org/software/systemd/man/systemd.service.html

Type=oneshot is the implied default if neither Type= nor ExecStart= are specified.

https://dataswamp.org/~solene/2020-02-18-offline-laptop-v2.html

https://security.stackexchange.com/questions/152978/is-it-possible-to-escalate-privileges-and-escaping-from-a-docker-container/153016#153016

A user on a Docker host who has access to the docker group or privileges to sudo docker commands is effectively root (as you can do things like use docker to run a privilieged container or mount the root filesystem inside a container), which is why it's very important to control that right.

My tip: don't use nix-env to install packages like it's Aptitude or Pacman, use `nix run` if you need a package temporarily, home-manager if you need a user-level package permanently, or just straight up change the configuration.nix to include the package as a system-wide one.
If you use nix-env you're just polluting your environment in an imperative way and that is pretty much going against Nix' declarative nature.

I've been trying to use the PinePhone as a daily driver and it simply isn't there yet: camera is slow to the point of unusable and sometimes it hard crashes when making calls.
Here's hoping that Purism has done a good job of cleaning up some of the issues in Phosh.

https://www.thekobonotes.com/faq

https://www.mobileread.com/forums/showthread.php?t=286085

KoboLauncher has UsbNet tool (+new dropbear + new sftp-server from openssh)
P.S. Works with latest FW

https://www.mobileread.com/forums/showthread.php?t=286085

The first way does not work with FW 4.6.9995 (or any other FW from May on). I tried it and had to do a firmware reset after it.
The 2nd way seems to be no better as the author states himself.
The reason seems to be that the inittab way doesn't seem to work anymore.
Does anyone have a KoboRoot.tgz or start script for (k)filemon stat starts dropbear along with WiFi?

https://github.com/robbinch/kobo-utils

https://www.linuxuprising.com/2019/11/chkservice-is-systemd-units-manager.html

https://xyne.archlinux.ca/projects/serman/

huh this is interesting… like hugginn but can write JS?

docker commit $CONTAINER_ID user/test_image

ugh. add a script for it?

ugh, very annoying that there is no way to setup something…

E.g. dashboard for token refreshing that stores then in files

video (50m) fosdem talk Guix: Unifying provisioning, deployment, and package management in the age of containers

• [2021-01-24] hmm so it has --container mode, nice
  

scheck, dangling etc

the quicker you notice, the better because conflict resolution sucks

http://joshmontague.com/

The Setup
My version of The Setup, a post about how I get things done.

http://maniacanshul.com/proDigitalPrivacy/Alternatives.html

http://aesadde.xyz/posts/2019/2019-08-13-filesystem.html

Find a way to simplify and make it more effecient.

If set to simple (the default if ExecStart= is specified but neither Type= nor BusName= are),

sandGorgon 6 months ago [-]
There is also Dry - https://moncho.github.io/dry/
The best part about dry is using it through docker itself.
PikachuEXE 6 months ago [-]
Oh thanks for sharing! I found this one more "mature"

The default way would be to install the package unattendedupgrade which will install security updates on your system every day.

- docker stats (htop equivalent for docker containers)

https://beepb00p.xyz/myinfra.html

generally 'big directories with binaries/object files'?

Koreader is probably the best thing to happen to e-ink devices since sliced bread. It replaces the need to use any cables with an e-reader; since newer versions have a nice SSH server, and can also update itself.

2) Another is to use a filesync service like Syncthing/Dropbox (no server), and append all transactions to a log file or directory. Then sync and recreate the db from these transaction logs

systemd.daemon.notify('READY=1')

launchd frontend?

Guix is definitely a cleaner implementation (coherent cli tooling, way better manual, not a custom, oddball language, ...).
But:
* if Nix is already very niche, Guix is the niche of a niche. The ecosystem is tiny in comparison.
* The Nix interpreter isn't exactly fast, but Guix (with it's scheme) was significantly worse for me, even in relatively small tests
* The hard stance on open source requirements is understandable, given the projects origin, but it will severely hinder adoption. No, I don't want to package every commercial app I need myself. nixpkgs has almost everything.

tried running

docker run --rm --user 1000:1000 -it nixos/nix /bin/sh

but then it can't find nix-env. ugh – fuckitfuckitfuckit

tool to install packages on remarkable

ok, really good guide

• update remarkable
  
• ssh onto it
  
• follow toltec install https://github.com/toltec-dev/toltec#install-it
  
• opkg install rm2fb
  
• opkg install remux # launcher
  systemctl enable –now remux
  swipe up (on the right edge!), should show the menu
  
• opkg install koreader
  

• Create a file home/root.config/draft/02-koreader with the following contents
  not sure if really that necessary?
  

  name=koreader
  desc=Ebook reader
  call=/opt/koreader/koreader.sh
  term=;
  

• congratulations, you are done!
  

Note that when a ReMarkable system update occurs you will likely need to re-run the systemctl enable --now remux command. I think this should be the only command needed to re-run, but I don’t have a system update to install to validate that.

HOW DO I RENAME/MOVE A SYNCED FOLDER?An alternative way is to shut down Syncthing, move the folder on disk (including the .stfolder marker), edit the path directly in config.xml in the configuration folder (see config) and then start Syncthing again.

ok this works great

sudo apt install iperf
iperf -s on server
iperf -c ip on client

iwlist wlp3s0 scanning | less

https://github.com/b0o/surfingkeys-conf

You have probably tried it in 4.0 days. Plasma 5 is nowadays actually one of the lightweight ones and it is very fast. Especially when you consider how many features/flexibility it has compared to other lightweight desktops.

• [2021-05-08] ok it actually is surprisingly snappy even with all the animations etc
  

It does not support [0] (i.e. loses) extended attributes even between systems that share support for them, which in the case of macOS means no support for Finder tags, custom icons, legacy Mac fonts and countless other Mac features, maybe niche to most, but still important to those that make use of them. AFAIK it is not even in the roadmap.

I can't recommend Jellyfin enough. It works remarkably well!
https://jellyfin.org

for crontab it contains some non-printable characters as well. also for dconf and gconf there are no config files even, they are all binary
so overall easier to have a virtual 'view' onto these configs

Ansible is a great system, with a terrible DSL.
YAML is not a programming language, and deployment is not a toy task. You need power.
The result is that ansible has pushed a markup language to its limit, then pushed the templating engine used in it to its limit too. Then used a bunch of duck tape + conventions to glue everything and ended up with 10% of an unclean verbose unexpressive real programming language with ridiculous limited tooling, testability and had to document + support it.
As with most DSL.
For what? For the quest of having something "declarative", and that any language could read.
Well you can have declarative API written in any language, and nobody except ansible ever read playbooks.
In the end, it's just a big weight at the ankle. I never ever used it and though, "damn, what a pleasant tech choice, I'm happy they didn't directly expose the API through Python".
It's the same reason I use "nox" and not "tox", or "doit" and not "make". DSL really seem like a great idea, but they fail most of the time. There is a reason only few of them - like SQL, CSS or regex patterns - became a success. 99% of the time, what you need is a good lib, with a well designed API. For the 0.9% of the time you do need multi-language communication, you may implement RPC. Then, only for the 0.01% case should you really consider a DSL.
But we geek love to create DSL. They are fun to write! They are so elegant in tutorials!