Misc on Alwaldend

Android

Mon, 01 Jan 0001 00:00:00 +0000

Diagnostics

Android has some built-in tests for the display and other components in Settings -> System -> Device diagnostics

Bazel

Mon, 01 Jan 0001 00:00:00 +0000

Advantages

Hermetic builds
Dependency graph
Local build and test cache
Remote cache
Remote execution
Unified API for builds, tasks, and tests

Disadvantages

Additional layer of abstraction and complexity
Weird edge cases and occasional bugs
Lack of support, documentation, and information on the internet
The majority of advantages are irrelevant for the majority of codebases

.bazelrc has variables

%workspace%: Workspace directory

https://bazel.build/run/bazelrc

Local registry module is cached

If you changed a local registry module, but bazel still uses the old version, restart bazel: bazel shutdown

Glossary

Mon, 01 Jan 0001 00:00:00 +0000

Advanced Persistent Threat (APT)

An advanced persistent threat (APT) refers to an attack that continues, secretively, using innovative hacking methods to access a system and stay inside for a long period of time. Typical attackers are cyber criminals, like the Iranian group APT34, the Russian organization APT28, and others. Although they can come from all over the world, some of the most notable attackers come from Iran, other areas of the Middle East, and North Korea.

Gnome boxes

Mon, 01 Jan 0001 00:00:00 +0000

Gnome boxes is a hypervisor.

Cpu

The default cpu doesn’t have a lot of capabilities, so you might need to patch the config:

  <!-- https://www.qemu.org/docs/master/system/i386/cpu.html -->
  <cpu mode="host-model" />

Network

Default libvirt network interferes with gnome-boxes, you might need to disable it:

sudo systemctl disable --now libvirtd

Disk size

Just increasing the disk size is not enough, you need to increase the logical volume size:

sudo growpart /dev/vda 3
sudo lvextend -l +100%FREE /dev/fedora/root
sudo xfs_growfs /dev/fedora/root

Links:

Hugo

Mon, 01 Jan 0001 00:00:00 +0000

Hugo is a static site builder

Environment variables

Hugo has an allowlist of environment variables, and js_binary rules do not work because they need a BAZEL_BINDIR variable

Fix:

[security.exec]
osEnv = [
    '(?i)^((HTTPS?|NO)_PROXY|PATH(EXT)?|APPDATA|TE?MP|TERM|GO\w+|(XDG_CONFIG_)?HOME|USERPROFILE|SSH_AUTH_SOCK|DISPLAY|LANG|SYSTEMDRIVE|BAZEL.+)$',
]

Configuration reference: https://gohugo.io/configuration/security/

Mullvad

Mon, 01 Jan 0001 00:00:00 +0000

Device limit

Mullvad will invalidate a key If a host connects to many vpns with it at the same time

Pgp

Mon, 01 Jan 0001 00:00:00 +0000

Openpgp with Yubikey

https://support.yubico.com/s/article/Using-Your-YubiKey-with-OpenPGP

Advanced Yubikey with openpgp guide

https://github.com/drduh/YubiKey-Guide

Ping

Mon, 01 Jan 0001 00:00:00 +0000

`sendmsg: operation not permitted`

This problem can be caused by vpns with “kill-switch” enabled, so you might need to disable them.

Disable Mullvad VPN:

sudo systemctl disable --now mullvad-daemon

Qubes OS

Mon, 01 Jan 0001 00:00:00 +0000

Qube startup timeout

Run in dom0:

qmv-prefs <VM NAME> qrexec_timeout <seconds>

Repo

Mon, 01 Jan 0001 00:00:00 +0000

Setup

Install packages:

sudo dnf install \
  clang clang-tools-extra java-latest-openjdk-devel rust cargo mesa-libGL-devel \
  go Xvfb python3 gmp-devel patch podman git git-lfs fuse fuse-libs pcsc-lite pcsc-lite-devel \
  openssl gnutls-utils opensc openssl-pkcs11 libdnet qemu-kvm qemu-img

Install bazelisk: https://bazel.build/install/bazelisk

Symlink bazel:

ln -s ~/.local/bin/bazelisk ~/.local/bin/bazel

Install git hooks:
```
bazel run //:write_git_hooks
```
Install android tools:
```
ANDROID_HOME="${HOME}/Android/Sdk" \
  bazel run --config=agent \
    --repo_env=ANDROID_HOME= \
    //tools/android:install
```
The empty repository environment is required for the first installation so Bazel does not try to load the SDK before sdkmanager installs it. Afterwards, export ANDROID_HOME and ANDROID_NDK_HOME, or set both with --repo_env in the ignored user.bazelrc. The repository dotfiles export the expected paths.
Setup dotfiles (optional):
```
bazel run //projects/dotfiles:install
```
Install nvm: https://github.com/nvm-sh/nvm
Install node:
```
nvm install node
```
Qt is downloaded by Bazel; no host installation is required.

bazel run //tools/vault -- login --method=userpass username="${USER}"

Setup .bzlenv

. "$(bazel run //tools/bzlenv)"

Compile commands

Build compile_commands.json:

Shell

Mon, 01 Jan 0001 00:00:00 +0000

Deactivate venv in subshell

A subshell doesn’t have the deactivate function, so you have to use a workaround:

. .venv/bin/activate
(
    echo "subshell, still in venv: $(which python)" && \
    . "$(dirname "$(which python)")/activate" && \
    deactivate && \
    echo "subshell, out of venv: $(which python)"
)

A subshell `()` is different from a subprocess

https://unix.stackexchange.com/a/138498

A subshell starts out as an almost identical copy of the original shell process. Under the hood, the shell calls the fork system call1, which creates a new process whose code and memory are copies2. When the subshell is created, there are very few differences between it and its parent. In particular, they have the same variables. Even the $$ special variable keeps the same value in subshells: it’s the original shell’s process ID. Similarly $PPID is the PID of the parent of the original shell.

Ssh

Mon, 01 Jan 0001 00:00:00 +0000

Store ssh key on Yubikey

General: https://developers.yubico.com/SSH/
Fido: https://developers.yubico.com/SSH/Securing_SSH_with_FIDO2.html

Ssl

Mon, 01 Jan 0001 00:00:00 +0000

How to create your own CA: https://arminreiter.com/2022/01/create-your-own-certificate-authority-ca-using-openssl/
Vault PKI: https://developer.hashicorp.com/vault/tutorials/pki/pki-engine

Todo

Mon, 01 Jan 0001 00:00:00 +0000

Setup proper issue tracking

Setup API docs for python, go, lua

Codify build restrictions

//projects builds should not depend on //tools, etc

Maybe wth aspects, aspect hints? Or check deps using genquery?

Fix infinitime build in //projects/infinitime

Add missing code for //projects/nexus_security_plugin and //projects/ci_platform

Setup java language server

Setup a script that adds bazel tools to `${PATH}`

Write firefox extension for //projects/leetcode_downloader

Write tool to sync remote repos with local FS

Rewrite python checkers to aspects

Add prettier checks

Vault

Mon, 01 Jan 0001 00:00:00 +0000

Manual certificate creation

https://arminreiter.com/2022/01/create-your-own-certificate-authority-ca-using-openssl/

Unseal process

Get the encrypted unseal key
Unencrypt it: cat unseal.txt | base64 --decode | gpg -dq
Run vault operator unseal

Waydroid

Mon, 01 Jan 0001 00:00:00 +0000

Shared folder and copying files

chmod 777 file
sudo cp file ~/.local/share/waydroid/data/media/0/Download/

Docs: https://docs.waydro.id/faq/setting-up-a-shared-folder

Misc on Alwaldend

Android

Diagnostics

Bazel

Advantages

Disadvantages

.bazelrc has variables

Local registry module is cached

Glossary

Advanced Persistent Threat (APT)

Gnome boxes

Cpu

Network

Disk size

Hugo

Environment variables

Mullvad

Device limit

Pgp

Openpgp with Yubikey

Advanced Yubikey with openpgp guide

Ping

sendmsg: operation not permitted

Qubes OS

Links

Qube startup timeout

Repo

Setup

Vault login

Setup .bzlenv

Compile commands

Shell

Deactivate venv in subshell

A subshell () is different from a subprocess

Ssh

Store ssh key on Yubikey

Ssl

Todo

Setup proper issue tracking

Setup API docs for python, go, lua

Codify build restrictions

Fix infinitime build in //projects/infinitime

Add missing code for //projects/nexus_security_plugin and //projects/ci_platform

Setup java language server

Setup a script that adds bazel tools to ${PATH}

Write firefox extension for //projects/leetcode_downloader

Write tool to sync remote repos with local FS

Rewrite python checkers to aspects

Add prettier checks

Vault

Manual certificate creation

Unseal process

Waydroid

Links

Shared folder and copying files

`sendmsg: operation not permitted`

A subshell `()` is different from a subprocess

Setup a script that adds bazel tools to `${PATH}`