Grafcube

I wanted to automatically make boot options for snapper snapshots and ended up making these

https://codeberg.org/grafcube/uki-efi-boot
https://codeberg.org/grafcube/uki-snapper

uki-efi-boot automatically scans directories in your esp for efi executables and adds entries to your UEFI boot options while uki-snapper automatically creates boot entries/UKIs for snapper snapshots.

It has been working flawlessly so far. I use secure boot so I have to configure uki-snapper to build new images for each snapshot so I configured it to generate no more than 2 to fit in my esp. It also only works on arch right now since it depends on mkinitcpio but contributions to expand support are very welcome.

I hope someone finds these scripts useful ​:ChikaHappy:​
They're available on the AUR as well.

@[email protected] #linux #uefi #uki #bootloader #btrfs #boot #snapper #opensource

will you peer with me uwu 🥺👉👈

#dn42

I just spent 3 days trying to debug an issue with my self hosted wireguard vpn and I just wanna make this post so that anyone trying to do the same thing doesn't go through the suffering I did.

So I have a server at home and I wanted to be able to connect to it via vpn. I set up wireguard on it and then on my phone and laptop. The phone worked fine but the laptop didn't. Why?

I started debugging it 3 days ago and tried everything. tcpdump didn't show any packets leaving my laptop, I flushed nftables and made sure ufw was disabled and tried everything.

Eventually I got to an even lower level and encountered ebpf, which I'm aware of but never used before. Seeing this a neuron activated and I remembered that opensnitch used ebpf. So I turned it off and lo and behold, vpn works.

There were no signs early on that opensnitch was doing something. I'd completely forgotten it was running.

Call me stupid or whatever for having a weird setup, I'm just tired. ima go eat something now.

I ended up allowing traffic from the wireguard port but if anyone knows a better rule for opensnitch lmk

#wireguard #opensnitch #vpn #selfhosted #networking #ebpf

I just finished setting up soju on my home server. It was pretty fun. I ran into some issues but learnt more about irc in the process

#irc #soju #selfhosted

I have a server in my house that I use to self host random stuff. The thing is, I'm behind CGNAT and only ipv6 is publicly accessible, which shouldn't be a problem, except it's a huge problem. I ran into trouble with fmd and my friends on different ISPs couldn't reach to my server.

I hate cgnat...

#selfhosted #ipv6 #cgnat

In case anyone was wondering, yes my project Wordforge is effectively abandoned. I graduated and got a job last year and haven't had the time to work on it. It's a shame really since I really wanted to see something like this on the fediverse, but such is life.

If anyone wants to take over, feel free.

https://codeberg.org/grafcube/wordforge

#wordforge #opensource #foss #fediverse #activitypub #rust #leptos

Your choice of browser matters — Google's Web DRM and the open internet

https://grafcube.codeberg.page/blog/2023/08/06/web-drm-api.html

I wrote this blog post to inform the people I know who aren't as tech savvy or otherwise don't put any thought into their choice of browser. Another goal is to help get enough awareness on the topic and make sure it fails.

@opensource @privacy #webintegrityapi #WEI #google #mozilla #chrome #firefox #chromium #foss #opensource #OpenWeb #privacy #drm #nodrm #drmfree #freesoftware #browser