This is a more recent update from setupcloudflarewarplinuxarch Warp’s a free VPN offered by Cloudflare – see Cloudflare Clients are currently available for Android, IOS, OSX, Windows and now Linux Warp Here’s how to set it up on linux from the command line Scripted Solution 1 2 3 4 5 6 7 8 9 #! /bin/bash yay -S cloudflare-warp-bin sudo systemctl start warp-svc sleep 5 warp-cli register warp-cli status warp-cli connect sleep 5 curl https://www.

Update Available There’s an updated version of this post SetupCloudFlareWarpLinuxArch_Update Original Content Warp’s a free VPN offered by Cloudflare – see Cloudflare Clients are currently available for Android and IOS, with OSX and Windows in beta Warp Beta Here’s how to set it up on linux from the command line Setup Wireguard and the Cloudflare configuration tool If you don’t use arch linux, go to wireguard installation 1 2 sudo pacman -S wireguard-tools yay -S wgcf You’ll need to keep the wireguard-tools installed, but wgcf is a onetime use

Symptom: Macbook (2011) won’t boot. Blue screen with lines instead of black. Stuck in a fail to boot loop Solution (tested High Sierra Update 6) Boot into Single User Mode - CMD-S held down on boot. When you see the terminal, hit enter a couple of times to get the prompt. Then run: 1 2 sudo nvram fa4ce28d-b62f-4c99-9cc3-6815686e30f9:gpu-power-prefs=%01%00%00%00 reboot Boot into Recovery Mode - CMD-R held down on boot.

Intro Here’s the setup: you have two different gateways, one accessing the internet via a VPN, and one straight out of your home router. You’d like some processes to only use the VPN gateway, and some to just access the internet via your standard router. Solution: create a new network namespace with a default gateway that uses the VPN. Start any processes that should use the VPN in that network namespace.

Intro This combines a couple of tricks; running a java gui inside a docker container, in wayland sway. Dockerfile Most of this came from github, with a few tweaks… 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 # Alpine 3.

Intro With a floating IPV4 address, the traffic comes into the droplet via the anchor ip address. This is a private IP address in the 10.0.0.0 network. Docker options setup IPV4 and IPV6 neatly, then the default route needs adjusting, otherwise traffic is routed out via the droplets IP address Docker configuration Depending on your linux variant, you’ll need to set some DOCKER_OPTS options. 1. Determine the anchor IP address 2.

Setup Docker build area 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 FROM base/archlinux RUN pacman -Sy && \ pacman -S go \ sudo \ vim \ ca-certificates \ libcap \ git --noconfirm RUN useradd -m -G wheel -s /bin/bash build && \ echo "%wheel ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers USER build CMD ["/bin/bash"] Build and run…

IPFire - enforcing timed access Timed Access Issues The IPTables rules in IP Fire have one limitation for enforcing timed access. >ATTENTION: Rules which have Time constraints configured are only for new connections. Example: if you are blocking Internet connections from 20:00 to 6:00, and you already have a connection established at 19:57, this connection will be allowed until it is closed. Any new connection after 20:00 will be dropped.

vim and conda conda 1 wget -S https://repo.continuum.io/miniconda/Miniconda3-latest-Linux-x86_64.sh and run but DON’T allow it to add miniconda to the PATH (yet) note you’ll replace /dev/shm with your choice location 1 2 3 alias sa='source /dev/shm/miniconda3/bin/activate' alias sd='source /dev/shm/miniconda3/bin/deactivate' alias conda='/dev/shm/miniconda3/bin/conda' compile vim note you’ll replace /dev/shm with your choice location 1 2 3 4 git clone https://github.com/vim/vim.git make uninstall && make clean && make distclean && \ .

Arch Linux - rootfs in ram / boot to ram Arch comes with some simple scripts for booting root fs into ram. liveroot takes only some simple configuration First, install the package 1 yaourt -S liveroot This puts the required hooks into /usr/lib/initcpio An example mkinitcpio.conf is placed into /usr/share/liveroot I modified the MODULES line as follows 1 MODULES="zram ext2 btrfs overlay" And to the HOOKS line I added encrypt and oroot - mine ends up looking like this

Get rid of standard jaggy fonts Edit /etc/fonts/local.conf 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 <fontconfig> <match target="font"> <edit mode="assign" name="rgba"> <const>rgb</const> </edit> </match> <match target="font"> <edit mode="assign" name="hinting"> <bool>true</bool> </edit> </match> <match target="font"> <edit mode="assign" name="hintstyle"> <const>hintslight</const> </edit> </match> <match target="font"> <edit mode="assign" name="antialias"> <bool>true</bool> </edit> </match> <match target="font"> <edit mode="assign" name="lcdfilter"> <const>lcddefault</const> </edit> </match> <match target="font"> <edit name="embeddedbitmap" mode="assign"> <bool>false</bool> </edit> </match> </fontconfig>

Disk Formatting Three partitions for this example - EFI, swap and then a single BTRFS for everything else One consequence is that you can’t snapshot /boot (as it’s formatted to FAT32)… 1 2 3 4 Create GPT Partition Table disk EFI partition, FAT32 format, 512M (will mount on /boot ) e.g. /dev/sda1 swap e.g. /dev/sda2 BTRFS filesystem for root,var,home etc e.g. /dev/sda3 Install Arch mkswapfs / swapon etc