Project-Insanity

You've loaded an old revision of the document! If you save it, you will create a new version with this data.

===== ArchLinux =====
==== system ====
set extra capabilities for process
<code bash>
sudo setcap 'CAP_NET_BIND_SERVICE=+ep' /usr/bin/maddy
</code>
directory permissions
<code bash>
namei -l /mnt/external/audio
</code>
use acl to grant permission to files for specific user
<code bash>
setfacl -R -m u:maddy:rX /etc/ssl/example.org.crt /etc/ssl/example.org.key
</code>
pgrep get process pid by process name
<code bash>
$ pgrep sw3
30636
</code>
set system time
<code bash>
timedatectl set-time "2014-05-26 11:13:54"
</code>
==== packaging ====
git checkout aur package
<code bash>
git clone ssh://aur@aur.archlinux.org/pkgbase.git
</code>
=== commands ===
update checksums inplace
<code bash>
updpkgsums
</code>
building a package in a clean dev chroot, path for pacman conf ''/usr/share/devtools/pacman-extra.conf''
<code bash>
cd <package-patch>
ls PKGBUILD
extra-x86_64-build # -c for cleaning up chroot. ~/chroot/root is a btrfs subvolume and has to be removed with btrfs!
extra-x86_64-build -- -I ~/packages/foobar/foobar-2-1-any.pkg.tar.xz
</code>
advanced chroot with own packages preinstalled
<code bash>
mkdir ~/chroot
export CHROOT=$HOME/chroot
mkarchroot $CHROOT/root base-devel
arch-nspawn $CHROOT/root pacman -Syu # updating it
makechrootpkg -r $CHROOT -I package-1.0-1-i686.pkg.tar.xz # -c for clean chroot 
# repackage: makechrootpkg -r /home/onny/chroot -- -R
</code>
cheap python virtualenv
<code bash>
mkdir path
ln -s /usr/bin/python2 path/python
export PATH="$srcdir/path:$PATH"
</code>
abs deprecated, using asp
<code bash>
asp export linux
</code>
=== PKGBUILD ===
Installation von Lizenzdateien:
<code bash>
install -D "LICENSE.txt" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
</code>
Installation von Systemd-Units:
<code bash>
install -Dm644 "${srcdir}/btlive.service" "${pkgdir}/usr/lib/systemd/system/btlive.service"
</code>
Installation von Docs:
<code bash>
install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
</code>
Installation von Tmpfiles:
<code bash>
install -Dm644 "wallace/wallace.tmpfiles.d.conf" "${pkgdir}/usr/lib/tmpfiles.d/wallace.conf"
</code>
Installation von Libs:
<code bash>
install -m644 libdouble-conversion.so.0.0.0* "${pkgdir}/usr/lib/"
</code>
do not strip binary files
<code>
options=('!strip')
</code>
Installation von ausführbare Dateien:
<code bash>
install -Dm755 shareLinkCreator "${pkgdir}/usr/bin/sharelinkcreator"
</code>
Nginx/Apache Template-Dateien:
<code bash>
 if [[ -n $(which httpd 2> /dev/null) ]]; then
   backup=('etc/httpd/conf/extra/owncloud.conf')
 fi
 package(){
   # install apache .conf file if apache is installed
   if [[ -n $(which httpd 2> /dev/null) ]]; then
      install -d  $pkgdir/etc/httpd/conf/extra 
      install -m 644 $srcdir/owncloud.conf  $pkgdir/etc/httpd/conf/extra/ 
   fi
 }
</code>
Zielname der Quelldatei ändern:
<code bash>
source=("$pkgname-$pkgver.tar.gz::https://gitlab.com/gitlab-org/gitlab-ce/repository/archive?ref=v${pkgver}")
</code>
Architekturabhängige Build-Anweisung
<code bash>
 build() {
   cd "${srcdir}/oclHashcat"
   if [[ "$CARCH" = "x86_64" ]]; then
     make cudaHashcat64.bin
   else
     make cudaHashcat32.bin
   fi
   make nv_all
 }
</code>
pkgver git
<code bash>
 pkgver() {
   cd "mail"
   #git describe --long | sed 's/$[^-]*-g$/r\1/;s/-/./g'
   git log -1 --format=%cd.%h --date=short|tr -d -
 }
</code>
Common install file example
<code bash>
post_install() {
  mkdir /var/lib/zabbix
  getent group lool > /dev/null || groupadd -r lool > /dev/null
  getent passwd lool > /dev/null || useradd lool > /dev/null
  chown -R lool:lool /var/cache/loolwsd \
                     /opt/lool/child-roots
}

post_remove() {
   userdel -rf lool
   groupdel lool
}
</code>
in pkgbuild reference
<code bash>
install="libreoffice-online-bin.install"
</code>
=== aurutils ===
install packages into build container
<code bash>
arch-chroot /var/lib/aurbuild/x86_64/root pacman -S git
pacman --root=/var/lib/aurbuild/x86_64/root -S git
</code>
add gpg key into build container
<code bash>
sudo -u aur gpg --recv-keys EB774491D9FF06E2
</code>
rebuild prebuild package and add to custom AUR repo
<code bash>
fakepkg webkitgtk2
sudo -u aur repo-add /var/cache/pacman/aur/aur.db.tar /tmp/webkitgtk2-3:2.4.11-16-x86_64.pkg.tar.xz
cp /tmp/webkitgtk2-3:2.4.11-16-x86_64.pkg.tar.xz /var/cache/pacman/aur
</code>
==== bluetooth ====
Example session ''bluetoothctl''
<code bash>
# bluetoothctl 
[bluetooth]# default-agent 
[bluetooth]# scan on
[bluetooth]# pair 00:12:34:56:78:90
[bluetooth]# connect 00:12:34:56:78:90
</code>

==== usefull stuff ====
pipe stderr to stdout
<code bash>
command 2>&1 >/dev/null | grep 'something'
</code>
pipe stderr and stdout both to a file
<code bash>
command &> error_log
</code>
locate pacnew files
<code bash>
find /etc -regextype posix-extended -regex ".+\.pac(new|save)" 2> /dev/null
</code>
or search entire disk
<code bash>
find / -regextype posix-extended -regex ".+\.pac(new|save)" 2> /dev/null
</code>
=== swapfile on btrfs ===
<code bash>
swapfile=$(losetup -f) #free loop device
truncate -s 8G /swap   #create 8G sparse swap file
losetup $swapfile /swap #mount file to loop
mkswap  $swapfile
swapon  $swapfile
</code>
search library availability in system, print file paths
<code bash>
ldconfig -p | grep blas 
</code>

==== systemd nspawn (container) ====
<code bash>
pacman -S arch-install-scripts
btrfs subvol create /var/lib/container/archlinux-base
mkdir /etc/systemd/nspawn
pacstrap /var/lib/container/archlinux-base base base-devel
systemctl enable --now systemd-networkd systemd-resolved
systemd-nspawn --boot -nD /var/lib/machines/archlinux-nextcloudcli --template=/var/lib/container/archlinux-base
systemctl start systemd-nspawnd@archlinux-nextcloudcli
machinectl shell root@archlinux-nextcloudcli /bin/bash -c "systemctl enable --now systemd-networkd systemd-resolved" 
</code>
quit / exit / kill container: Hold ''Ctrl'' press '']'' three times

==== systemd service ====
set environment
<file - /etc/systemd/system/piradio.service>
[Unit]
Description=PiRadio
After=network-online.target
After=bluetooth.service

[Service]
Environment="XDG_RUNTIME_DIR=/run/user/1001"
Type=simple
User=piradio
WorkingDirectory=/usr/lib/piradio
ExecStartPre=/bin/sleep 5
ExecStart=/usr/lib/piradio/piradio
Restart=on-abort

[Install]
WantedBy=multi-user.target
WantedBy=network-online.target
</file>
===== kernel =====
grep kernel config running system
<code bahs>
zcat /proc/config.gz | grep VDSO
</code>
===== fish =====
unset history
<code>
fish --private
</code>
===== bash =====
lzma hado compression and extraction
<code bash>
tar -c --lzma -f my_archive.tar.lzma /some_directory
tar -x --lzma -f my_archive.tar.lzma
</code>
run script verbose
<code bash>
sh -x scripname.sh
</code>
cheap python virtualenv
<code bash>
mkdir path
ln -s /usr/bin/python2 path/python
export PATH="$srcdir/path:$PATH"
</code>
get process runtime by pid, where pid is 1234 in this example
<code bash>
ps -o etime= -p "1234" 
</code>
write command output to file and to stdout (python -u for unbuffered output)
<code bash>
python3 -u sperrmuell.py 2>&1 | tee sperrmuell_ka.csv
</code>
recurseviley rename string
<code bash>
find . -type f -print0 | xargs -0 sed -i 's/twentytwelve/projectinsanity/g'
</code>
overwrite LD_LIBRARY_PATH
<code bash>
LD_LIBRARY_PATH="/home/onny/projects/onlyoffice-documentserver/src/DocumentServer-ONLYOFFICE-DocumentServer-5.2.7/core/build/lib/linux_64/:$LD_LIBRARY_PATH" ./AllFontsGen
</code>
compare command line argument to string
<code bash>
#!/bin/bash
if [ "$1" = "-v" ]; then
	wf-recorder -g "$(slurp)" -f "$(xdg-user-dir PICTURES)/$(date +'%Y-%m-%d-%H%M%S_wf-recorder.mp4')"
else
	slurp | grim -g - - | wl-copy && wl-paste > "$(xdg-user-dir PICTURES)/$(date +'%Y-%m-%d-%H%M%S_grim.png')"
fi
</code>
file exists
<code bash>
if [ ! -f /tmp/foo.txt ]; then
    echo "File not found!"
fi
</code>
program exit
<code bash>
exit 0 # okay
exit 1 # fail
</code>
receive signal bash
<code bash>
trap_with_arg() {
    func="$1" ; shift
    for sig ; do
        trap "$func $sig" "$sig"
    done
}

func_trap() {
    echo "Trapped: $1"
}

trap_with_arg func_trap INT TERM EXIT

echo "Send signals to PID $$ and type [enter] when done."
read # Wait so the script doesn't exit.
</code>

check file checksum
<code bash>
echo "$SHA256SUM  $FILE" \
  | sha256sum -c

if [ $? != 0 ]; then
  echo 'checkra1n checksum is not valid'
  exit 1
fi
</code>

launcher or wrapper: pass arguments into script
<code bash>
FILE=/tmp/checkra1n-0.12.4-beta
chmod +x $FILE
$FILE "$@"
</code>
==== sed ====
Mit sed inplace eine Zeile zu einer Datei hinzufügen:
<code bash>
sed -i '9i#include <algorithm>' liboffsetfinder64/vmem.cpp
</code>
add to end of file 
<code bash>
sed -i -e '$aretry $@' retry.sh
</bash>
Comment out specific line matching a string
<code bash>
sudo sed -e '/pam_securetty.so/ s/^#*/#/' -i delugecontainer/etc/pam.d/login
</code>
comment out multiple lines / range
<code bash>
sed -i "28,33 s/# *//" autogen.sh
</code>
regex parse value of xml tags
<code bash>
sed -n 's/.*<id>$.*$<\/id>.*/\1/p' myfile.txt
</code>
delete multiple lines
<code bash>
sed -i '2,3d;5d;8d' file
</code>

insert line after match
<code bash>
sed  '/\[option\]/a Hello World' input
</code>
==== grep ====
regex match group
<code bash>
grep -Po "(?<=Version: )([0-9]|\.)*(?=\s|\$)" style.css
</code>

==== fd ====
search for all files with specific extension in directory /
<code bash>
fd --type f -e fm . /
</code>

zip all files with specific file extension
<code bash>
fd -t f -e fm . / | zip source -@
</code>

file creation timespan
<code bash>
fd --type f -e pdf --change-newer-than "2020-09-09" --changed-before "2020-10-01" .
</code>

==== rg ====

filter file type
<code bash>
rg GPIO_CFG_2MA -g '*.h'
</code>
==== curl ====
post data
<code bash>
curl --data "UserId=eb8c2ec5352843d3a16ca11c26d3551c&Name=lolorollo&api_key=a5dc4e***9c9e0a***3" "https://turbotux.de/Playlists?UserId=eb8c2ec5352843d3a16ca11c26d3551c&Name=lolorollo&api_key=a5***d***9e0***3"
</code>
download and extract archive
<code bash>
curl http://wordpress.org/latest.tar.gz | tar xvz
</code>
set host header
<code bash>
torify curl --header "Host: http.pi" blog.project-insanity.org
</code>
==== tcpdump ====
specific ports
<code bash>
tcpdump -i eth0 -q '(tcp port 80) or (tcp port 443)' -A
</code>
exclude specific host
<code bash>
tcpdump -i eth0 -q '(ip or ip6) and (tcp port 80) or (tcp port 443) and not host ifconfig.co' -A
</code>
==== patching ====
=== appling ===
<code bash>
diff -u original.c new.c > original.patch
patch < original.patch
# patch -p0 < original.patch
# patch -p1 -i packaging-fix.patch
</code>

=== creating patch ===
<code bash>
git commit -am "meine änderungen"
git format-patch "HEAD^"
</code>

===== rsync =====
custom ssh port
<code bash>
rsync -rvz -e 'ssh -p 2222' --progress --remove-sent-files ./dir user@host:/path
</code>
parallel, threaded
<code bash>
ls -1 | parallel rsync -a {} /destination/directory/
</code>
===== openssh =====
SSH public key deployen
<code bash>
ssh-copy-id alarm@10.0.0.2
</code>
local port forwarding to remote
<code bash>
ssh -R 0.0.0.0:8096:localhost:8096 onny@example.com
</code>
<file - /etc/ssh/sshd_config>
[...]
GatewayPorts yes
[...]
</file>
===== networking =====
netcat
<code bash>
netcat -l 4444
</code>
<code bash>
netcat playground.pi 4444
</code>
==== nftables ====
<code bash>
nft list ruleset
nft flush ruleset
nft -f ruleset.nft
</code>
display handles, insert rule at position
<code bash>
nft -a list ruleset
nft add rule inet filter input position 17 tcp dport "{http, https}" accept
nft delete rule inet filter input handle 23
</code>

==== sysctl ====
disable ipv6
<code bash>
sysctl net.ipv6.conf.all.disable_ipv6=1
sysctl net.ipv6.conf.default.disable_ipv6=1
sysctl net.ipv6.conf.lo.disable_ipv6=1
</code>

==== iptables ====
connection sharing. Iptables-Fu (internet0 ist das Interface, dass mit dem Internet verbunden ist):
<code bash>
sysctl net.ipv4.ip_forward=1
iptables -t nat -A POSTROUTING -o internet0 -j MASQUERADE
iptables -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i net0 -o internet0 -j ACCEPT
</code>
picloud network sharing & port forwarding openwrt
<code bash>
sysctl net.ipv4.ip_forward=1
iptables -t nat -A POSTROUTING -o wlan0 -j MASQUERADE
iptables -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i net0 -o wlan0 -j ACCEPT
iptables -I FORWARD -o br-lan -d 192.168.1.2 -j ACCEPT
iptables -t nat -I PREROUTING -p tcp --dport 8096 -j DNAT --to 192.168.1.2:8096
iptables -t nat -A OUTPUT -p tcp --dport 8096 -j DNAT --to 192.168.1.2:8096
iptables -t nat -I PREROUTING -p tcp --dport 2222 -j DNAT --to 192.168.1.2:22
iptables -t nat -A OUTPUT -p tcp --dport 2222 -j DNAT --to 192.168.1.2:22
</code>
</code>
==== ip ====
set address
<code bash>
ip address add dev usb0 172.16.42.1/24
ip link set usb0 up
</code>
route command example
<code bash>
ip route add 192.168.1.0/24 dev eth0
ip route add default via 192.168.1.1
</code>
flush addresses
<code bash>
ip addr flush dev enp8s0
</code>
remove interface
<code bash>
ip link delete br0
</code>
delete address
<code bash>
ip addr del 192.168.178.20/24 dev eth0
</code>
show only specific interface
<code bash>
ip a show wg0
</code>

change mtu
<code bash>
ip link set dev eth0 mtu 1400
</code>
==== dnsmasq ====
minimal hostapd and dnsmasq config
<file - /etc/dnsmasq/dnsmasq.conf>
interface=wlan0
listen-address=172.24.1.1
bind-interfaces
server=8.8.8.8 
#port=0 # disable dns
domain-needed
bogus-priv
dhcp-range=172.24.1.50,172.24.1.150,12h
</file>

<file - /etc/hostapd/hostapd.conf>
interface=wlan0
driver=nl80211
ssid=MyAP
hw_mode=g
channel=11
wpa=1
wpa_passphrase=MyPasswordHere
wpa_key_mgmt=WPA-PSK
wpa_pairwise=TKIP CCMP
wpa_ptk_rekey=600
</file>

==== ifupd ====
<file - /etc/ifplugd/ifplugd.action>
#!/bin/sh
ifname="$1"
action="$2"

case "$action.$ifname" in
up.enp0s10)
	systemctl restart systemd-networkd
	;;
down.enp0s10)
	;;
esac
</file>
<file - /etc/ifplugd/ifplugd.conf>
INTERFACES="enp0s10"
ARGS="-fwI -u0 -d10"
</file>
<code bash>
systemctl restart ifupd@enp0s25
systemctl enable ifupd@enp0s25
</code>
===== document manipulation =====
==== pdf document manipulation ====
compression
<code bash>
convert -density 200x200 -units PixelsPerInch -compress jpeg -quality 70 in.pdf out.pdf
</code>
lossless merge
<code bash>
pdfunite in-1.pdf in-2.pdf in-n.pdf out.pdf
</code>
extract page range
<code bash>
pdftk campus_italia.pdf cat 1-280 output campus_italia_a1a2.pdf
</code>
insert into pdf
<code bash>
pdftk A=bigpdf.pdf B=insert.pdf cat A1-180 B A181-end output output.pdf
</code>
imagemagick picture to equal size pdf
<code bash>
i=300; convert a.png b.png -compress jpeg -quality 100 \
      -density ${i}x${i} -units PixelsPerInch \
      -resize $((i*827/100))x$((i*1169/100)) \
      -gravity center \
      -extent $((i*827/100))x$((i*1169/100)) multipage.pdf
</code>
<code>convert a.jpeg b.pdf -compress jpeg -quality 70 -density 300x300 -units PixelsPerInch -resize 2481x3507 -gravity center -extent 2481x3507 multipage.pdf</code>
scale pdf pages to specific size (a4)
<code bash>
cpdf -scale-to-fit "210mm 297mm" Scheine\ Germanistik\ 3.pdf -o Scheine\ Germanistik\ 4.pdf
</code>
==== ffmpeg ====
Constant quality AV1.  The CRF value can be from 0–63. Lower values mean better quality.
<code bash>
ffmpeg -i input.mp4 -c:v libaom-av1 -crf 30 -strict experimental av1_test.mp4
</code>
Burn subtitles, fast video conversion
<code bash>
ffmpeg -i Kawamata\ -\ La\ passage\ des\ chaises.mkv -vf subtitles=Kawamata\ -\ La\ passage\ des\ chaises.mkv -acodec copy -preset:v ultrafast Kawamata\ -\ La\ passage\ des\ chaises.mp4
</code>
==== batch convert images ====
<code bash>
for i in *.jpeg; convert -resize 30% $i (string replace jpeg jpg $i); end
</code>
==== lossless mp3 merge ====
<code bash>
ffmpeg -f concat -i <(printf "file '%s'\n" ./*.mp3) -c copy output.mp3
</code>

==== lossless audio extraction ====
<code bash>
ffmpeg -i videofile.mp4 -vn -acodec copy audiofile.mp3
</code>
extract from mkv
<code bash>
n=`mkvinfo ${base}.mkv |grep "Track type" |grep -n "audio" |cut -d":" -f1`
audTrack=`echo "${n} - 1" |bc`
mkvextract tracks ${base}.mkv ${audTrack}:${base}.ac3
</code>
===== security =====

==== lynis ====
<code bash>
lynis audit system --quick
</code>

==== subbrute ====
check for subdomains
<code bash>
torify subbrute leel.de
</code>
  * or via https://github.com/UnaPibaGeek/ctfr (Abusing Certificate Transparency logs for getting HTTPS websites subdomains)
  * https://github.com/caffix/amass
==== wfuzz ====
<code bash>
torify wfuzz -c --hc 404 -w /opt/wfuzz/wordlist/general/megabeast.txt http://www.leeel.de/FUZZ
torify wfuzz -c --hc 404,403 -w /opt/wfuzz/wordlist/general/admin-panels.txt -w /opt/wfuzz/wordlist/general/extensions_common.txt http://www.leeel.de/FUZZFUZ2Z
</code>
Preparing data for LFI scan
<code bash>
cat /var/cache/pkgfile/* | grep -a ".*/.*\.conf$" | sort | uniq > lfi
</code>
==== exploit kits ====
  * whatcms https://github.com/HA71/WhatCMS
  * ssh-auditor ssh vuln scan, pw bruteforce https://github.com/ncsa/ssh-auditor
  * https://sploitus.com/?query=openssh#exploits
  * hate_crack: hashcat wrapper
  * https://www.shodan.io/host/5.9.99.52
  * web scanner
    * https://github.com/maurosoria/dirsearch
  * wifite wifi auditing tool

===== chromium / chrome =====
disable gpu blacklist, enable nouveau hardware acceleration
<code bash>
chromium --ignore-gpu-blacklist
</code>
===== docker =====
Short example
<code bash>
 sudo systemctl start docker
 gpasswd -a onny docker
 docker run -d -p 80:80 rootlogin/nextcloud
 docker run -v /home/onny/projects/nextcloud-app-radio:/opt/nextcloud/apps/radio -d --name nextcloud -p 80:80 rootlogin/nextcloud
</code>
Debugging it
<code bash>
 docker run -i -t e326cbb922aa /bin/bash # exec shell of image
 docker exec -i -t e326cbb922aa /bin/bash # exec new shell running container 
</code>
Pull from repository
<code>
 docker pull eugeneware/docker-wordpress-nginx
 docker run -p 80:80 -d docker-wordpress-nginx
 docker ps
 docker commit e5a70884ac44 eugeneware/docker-wordpress-nginx:aenderungen1
 # docker stop / run
 docker run -t -i -v /home/onny/projects/web-whackspace:/usr/share/nginx/www/wp-content/themes/whackspace -p 80:80 -d e326cbb922aa
 docker run -i -t e326cbb922aa /bin/bash
</code>
Pull specific tagged image
<code bash>
docker pull rootlogin/nextcloud:develop
</code>
Build from Dockerfile
<code>
 cd  ~/projects/docker-invoiceplane-nginx
 sudo docker build -t="docker-invoiceplane-nginx" .
 sudo docker run -p 80:80 -d docker-invoiceplane-nginx
</code>
Build from URL
<code bash>
docker build -t nextcloud-testing github.com/onny/docker-nextcloud
</code>
Delete image
<code bash>
docker rmi <image name / id>
</code>
Export and load image
<code bash>
docker save myimage > myimage.tar
docker load < myimage.tar
</code>
Remove all images and containers
<code>
docker system prune -a
</code>
docker stop all container
<code bash>
docker stop (docker ps -a -q)
</code>
prevent from auto start
<code bash>
docker update --restart=no client-iaro_db_1
</code>
docker commit container and rerun
<code bash>
$ docker ps  -a
CONTAINER ID        IMAGE                 COMMAND                  CREATED              STATUS                          PORTS               NAMES
    5a8f89adeead        ubuntu:14.04          "/bin/bash"              About a minute ago   Exited (0) About a minute ago                       agitated_newton
$ docker commit 5a8f89adeead newimagename
$ docker run -ti -v "$PWD/dir1":/dir1 -v "$PWD/dir2":/dir2 newimagename /bin/bash
</code>

Run emulated multiarch images
<code bash>
docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
docker run --rm -t arm32v7/alpine uname -m
docker run -it --rm arm32v7/alpine ash
# keep it running
docker run -d -it --name alpine-armv7 --platform linux/arm/v7 arm32v7/alpine /bin/sh
</code>

==== wordpress docker image ====
<file yml docker-compose.yml>
version: '3'

services:
   db:
     image: mysql:5.7
     volumes:
       - db_data:/var/lib/mysql
     restart: always
     environment:
       MYSQL_ROOT_PASSWORD: somewordpress
       MYSQL_DATABASE: wordpress
       MYSQL_USER: wordpress
       MYSQL_PASSWORD: wordpress

wordpress:
     depends_on:
       - db
     image: wordpress:latest
     volumes:
       - .:/var/www/html/wp-content/themes/ausstellung-virtuell        
     ports:
       - "8000:80"
     restart: always
     environment:
       WORDPRESS_DB_HOST: db:3306
       WORDPRESS_DB_USER: wordpress
       WORDPRESS_DB_PASSWORD: wordpress
volumes:
    db_data:
</file>
Note the mount instruction in the volumes section, providing the local theme to the wordpress container.
<code bash>
docker-compose up -d
</code>
Visit 127.0.0.1:8000

===== eigenes system setup =====
==== signatures ====
<code bash>
gpg --keyserver pool.sks-keyservers.net --recv-keys 0x4E2C6E8793298290 # tor-browser-en aur packet
</code>

===== ansible =====
Run single command
<code bash>
ansible playground.pi -i hosts -m shell -a "whoami"
</code>
Limit playbook to specific host from group
<code bash>
ansible-playbook -i hosts archlinux-syssetup.yml -l playground.pi --ask-become-pass
</code>
Running single ansible role
<file - picloud.yml>
  roles:
     - { role: nsupdate, tags: nsupdate }
</file>
<code bash>
 ansible-playbook -i hosts --ask-become-pass picloud.yml --tags 'nsupdate'
</code>
Directly define server without inventory file
<code bash>
ansible-playbook -i "192.168.1.23," wgnas.yml --ask-become-pass
</code>
Skip specific role by tag
<code bash>
ansible-playbook --inventory-file=.vagrant/provisioners/ansible/inventory -v picloud.yml --skip-tags mount
</code>
==== playbook ====
Include distribution specific vars, e.g. ''vars/Archlinux.yml'' or ''vars/Debian.yml''
<file - tasks/main.yml>
- name: Include OS-specific variables.
  include_vars: "{{ ansible_os_family }}.yml"
</file>
use encrypted vars with vault
<code bash>
ansible-vault encrypt_string --vault-password-file ~/.ansible_vault_pw my_secret
</code>
<file - vars/auth.yml>
notsecret: myvalue
mysecret: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          66386439653236336462626566653063336164663966303231363934653561363964363833313662
          6431626536303530376336343832656537303632313433360a626438346336353331386135323734
          62656361653630373231613662633962316233633936396165386439616533353965373339616234
          3430613539666330390a313736323265656432366236633330313963326365653937323833366536
          34623731376664623134383463316265643436343438623266623965636363326136
other_plain_text: othervalue
</file>
<code bash>
ansible-playbook -i hosts -v piradio.yml --ask-become-pass --vault-password-file ~/.ansible_vault_pw
</code>
conditions
<code yml>
- name: Enable ufw service
  service:
    name: ufw
    enabled: yes
  when: ufw_state == "enabled"
</code>

===== podcasts =====
kolhacampus archiv
^ sendung        ^ genre       ^ url                                       ^
| PLUG-IN        | drum&base   | http://www.icast.co.il/Rss.aspx?ID=515483 |
<code>
https://onny.project-insanity.org/laboumdeluxe/feed.xml # FM4 La Boum de Luxe, Music EDM Techno Radio
https://onny.project-insanity.org/bounce/feed.xml # SRF Virus Bounce, Music Hip Hop Radio
</code>
===== vs code =====
==== plugins ====
  * vetur (vuejs highlighting)

===== firejail =====
Running app without networking
<code bash>
firejail --net=none vlc
</code>
Running app in private mode (fresh home folder)
<code bash>
firefox --private firefox
</code>
Persistent user specific configuration
<code bash>
cat ~/.config/firejail/vlc.profile
include /etc/firejail/vlc.profile
net none
</code>

===== nextcloud =====
Sync only a specific folder with nextcloud
<code bash>
nextcloudcmd pictures https://nextcloud.project-insanity.org/remote.php/webdav/pictures
</code>

===== developement =====
==== gcc ====
<code>
-Werror=implicit-fallthrough=
</code>
<code>
-Wno-implicit-fallthrough
</code>
==== git ====
show remote origin
<code bash>
git remote show origin
</code>
change remote origin
<code bash>
git remote set-url origin gitlab@http-new.pi:onny/web-wikidict.git
</code>
tagging
<code bash>
git tag -a v0.1 -m 'whackspace wordpress theme init'
</code>
merge commits from a remote repository
<code bash>
git fetch https://github.com/rfc2822/davdroid.git master
git branch -r
git merge FETCH_HEAD
"force pull", overwrite local changes
git fetch --all
git reset --hard origin/master
git branch
git branch firefox45
git checkout firefox45
</code>
new branch
<code bash>
git branch iss53
git checkout iss53
</code>

delete remote branch (onny is the remote shortname)
<code bash>
git push onny --delete samsung-treltexx
</code>

git show all tags
<code>
git log --no-walk --tags --pretty="%h %d %s"
</code>
delete last commit
<code bash>
git reset --hard HEAD~1
</code>
remove sensitive files from repo
<code>
git filter-branch --force --index-filter \
'git rm --cached --ignore-unmatch PATH-TO-YOUR-FILE-WITH-SENSITIVE-DATA' \
--prune-empty --tag-name-filter cat -- --all
git push origin --force --all
git push origin --force --tags
</code>
rebase upstream
<code bash>
git clone git@github.com:croaky/dotfiles.git
cd dotfiles
git remote add upstream git@github.com:thoughtbot/dotfiles.git
git fetch upstream
git rebase upstream/master
</code>
git cherry pick commit for specific files
<code bash>
git checkout 13243f2eafc4292917178051fe1bb5aab2774dca -p include/mmc.h drivers/mmc/mmc.c arch/arm/include/asm/arch-exynos/mmc.h drivers/mmc/s5p_sdhci.c common/cmd_mmc.c common/cmd_mmc_spi.c common/env_mmc.c include/sdhci.h
</code>
delete branch
<code bash>
git branch # list
git branch -d swaybar
</code>
rebase
<code bash>
git remote add upstream https://github.com/whoever/whatever.git
git fetch upstream
git checkout master
git rebase upstream/master
git push -f origin master
</code>

rebase, force overwrite upstream changes
<code bash>
git rebase -X theirs master
</code>

rebase branch
<code bash>
git checkout fragments
git rebase upstream/master
</code>
squash commits
<code bash>
git rebase -i upstream/master
# < choose squash for all of your commits, except the first one >
# < Edit the commit message to make sense, and describe all your changes >
git push origin omgpull -f
</code>
alternatively
<code bash>
git rebase -i HEAD~3
</code>
alternatively
<code bash>
git merge --squash apple-a9
</code>
rerun tests with empty commit
<code bash>
git commit --allow-empty -m 'run tests again'
git push --set-upstream USERNAME mynewbranch
</code>
change message of last git commit
<code bash>
git commit --amend
</code>
force push, remove latest commit of remote repository (origin)
<code bash>
git reset HEAD^
git push origin +HEAD
</code>

integrate changes into last commit
<code bash>
git commit --amend --no-edit
</code>

overwrite branch with other branch
<code bash>
git checkout maddy
git reset --hard maddytest
git push onny maddy -f
</code>

delete remote branch
<code bash>
git push -d onny cups
</code>
===== yum =====
<code bash>
yum install rpm-build
rpmbuild --rebuild aiccu-2007.01.15-7.el6.src.rpm
cd /root/rpmbuild/RPMS/x86_64
rpm -i aiccu-2007.01.15-7.el7.centos.x86_64.rpm
</code>

===== tmux =====
copy all scrollback buffer into a file. Press keys: "Prefix + :"
<code>
capture-pane -S -3000
save-buffer filename.txt
</code>

===== wine =====
installing msi
<code bash>
wine msiexec /i xyz.msi
</code>

===== scanning =====
wireshark: filter only http traffic
<code>http</code>
arp-scan
<code bash>
arp-scan --interface=wlp3s0 --localnet
</code>
nmap use nse script
<code bash>
nmap -p 80 192.168.188.0/24 -n --open --script /usr/share/nmap/scripts/http-title.nse
</code>
===== debian =====
which package provides file XY
<code bash>
apt-file update
apt-file search netstat
</code>
extract deb package
<code bash>
ar x *.deb
</code>
===== Makefile =====
define variables with preset which can be overwritten
<code>
DOCUMENT_ROOT ?= /var/www/onlyoffice/documentserver
LOG_DIR ?= /var/log/onlyoffice/documentserver
DATA_DIR ?= /var/lib/onlyoffice/documentserver/App_Data
CONFIG_DIR ?= /etc/onlyoffice/documentserver
CREATE_USER ?= TRUE
</code>
conditions
<code>
ifeq ($(CREATE_USER),TRUE)
	adduser --quiet --home ${DESTDIR}${DOCUMENT_ROOT} --system --group onlyoffice
	chown onlyoffice:onlyoffice -R ${DESTDIR}$(dirname {DOCUMENT_ROOT})
	chown onlyoffice:onlyoffice -R ${DESTDIR}$(dirname {LOG_DIR})
	chown onlyoffice:onlyoffice -R ${DESTDIR}$(dirname $(dirname {DATA_DIR}))
endif
</code>
condition if directory exists
<code>
.PHONY: all
all:
ifneq ($(wildcard tileserver/*),)
    cd tileserver
    git pull
    cd ..
else
    git clone https://github.com/maptiler/tileserver-php.git tileserver
endif
</code>
===== mail =====
echo mail server
<code>
echo@univie.ac.at
</code>
  * check spamminess of email server: https://www.mail-tester.com/
  * manual imap login
openssl imaps login
<code>
openssl s_client -connect mail.sexypump.de:993 -crlf
A login cypherpunk cypherpunk
</code>
get quota
<code>
a GETQUOTAROOT INBOX
</code>
get msg count of folder
<code>
a LIST INBOX *
* LIST (\HasChildren) "." INBOX
* LIST (\HasNoChildren \UnMarked) "." "INBOX.Deleted Messages"
* LIST (\HasNoChildren \UnMarked) "." "INBOX.Sent Messages"
* LIST (\HasNoChildren \UnMarked \Trash) "." INBOX.Trash
* LIST (\HasNoChildren \UnMarked \Sent) "." INBOX.Sent
* LIST (\HasNoChildren \UnMarked) "." INBOX.Notes
* LIST (\HasNoChildren \UnMarked \Junk) "." INBOX.Junk
* LIST (\HasNoChildren \UnMarked \Drafts) "." INBOX.Drafts
* LIST (\HasNoChildren \UnMarked) "." INBOX.AntiSpam
a OK List completed (0.001 + 0.000 secs).
a SELECT INBOX
</code>
send smtp mail
<code>
echo -n "username" | base64
# dXNlcm5hbWU=
echo -n "password" | base64
# cGFzc3dvcmQ=
openssl s_client -connect mail.agenturserver.de:465
AUTH LOGIN
ZGRkZGRkZGRk
enp6enp6enp6eno=
RCPT TO: <admin@example.local>
Subject: I have some questions!
Question 1: ...
DONE
</code>
===== Android =====
installed apps
<code>
antennapod davx5 dbnavigator fdroid fennec icsx5 jellyfin keepassdx libreoffice vlc nextcloud quicklyric radiodroid signal soundhound spotify tasks documentviewer fdroid-privilegedextension
</code>
configurations
  * antennpod subscriptions
  * fdroid pi repo
  * davx calendar & contacts
  * jellyfin config
  * nextcloud config
  * signal backup
  * radiodroid station list
  * spotify config
flash recovery
<code bash>
heimdall flash --RECOVERY twrp-3.2.1-1-serranoltexx.img
</code>
anbox
<code bash>
pacman -S anbox-git anbox-image anbox-modules-dkms-git
modprobe binder_linux ashmem_linux
systemctl restart anbox-container-manager
systemctl --user restart anbox-session-manager
anbox launch --package=org.anbox.appmgr --component=org.anbox.appmgr.AppViewActivity
wget "https://f-droid.org/FDroid.apk"
adb install FDroid.apk
</code>
====== davdroid ======
<code>
https://nextcloud.project-insanity.org/remote.php/dav
</code>
In case of 2FA requires device specific password

===== vim =====
comment multiple lines
<code>
CTRL + V # visual block mode
after selecting
Shift + I # insert mode
type #
ESC
</code>

===== onlyoffice =====
zitieren
<code>
Anführungszeichen öffnend: [Alt Gr] + [V]
Anführungszeichen schließend: [Alt Gr] + [B]
</code>

===== wayland =====
run x apps with root
<code bash>
xhost +SI:localuser:root
sudo gparted
</code>
===== gpg =====
<code bash>
==> Verifying source file signatures with gpg...
    aurutils-1.5.3.tar.gz ... FAILED (unknown public key 6BC26A17B9B7018A)
==> ERROR: One or more PGP signatures could not be verified!
==> ERROR: Could not download sources.
onny@http ~ % sudo -u aur gpg --recv-keys 6BC26A17B9B7018A    
</code>
decrypt symmetric
<code bash>
gpg doc.gpg
</code>
===== tools =====
  * etcher: create windows, mac and linux usb flash installation sticks
    * github.com/slacka/WoeUSB
  * browsh: graphical terminal browser
  * meld compare folders
  * cpod github
  * flutter sdk
  * deezloader remix
  * scrcpy: access android screen via adb and control ist
<code bash>
ngrep -q -W byline "^(GET|POST) .*"
ngrep -q -W byline "search" host www.google.com and port 80
</code>
  * sec
    * https://mitmproxy.org/
    * **tiger** - system sec scanner
    * sub domain evaluation
      * https://github.com/kpcyrd/sn0int
      * https://github.com/OWASP/Amass
      * subfinder (passive, external sources)
    * vhost scanning
      * https://github.com/codingo/VHostScan
    * bettercap - wifi network
    * iodine dns tunnel https://code.kryo.se/iodine/
    * command searchsploit in exploitdb
  * sys
    * **usbtop**
    * **gotty** share terminal via web
  * privacy
    * **mat2** remove metadata from files https://0xacab.org/jvoisin/mat2
  * andoird
    * **anbox** android "emulator" linux systems
    * **scrcpy** access android phones with broken display via adb
  * piracy
    * **smloadr**
  * office
    * spice-up simple presentations
  * media
    * r128gain
    * https://github.com/Moonbase59/loudgain
  * https://github.com/marcelklehr/floccus
  * https://f-droid.org/en/packages/org.kde.kdeconnect_tp/
  * https://tsl0922.github.io/ttyd/
  * [[Network hacking]]
===== pages =====
  * unpaywall hack
<code>
https://outline.com/zeit.de/2011/26/Nationalsozialismus-Tagebuecher/komplettansicht
</code>

===== openwrt =====
udate all packages
<code bash>
opkg update
opkg list-upgradable | cut -f 1 -d ' ' | xargs opkg upgrade 
</code>

===== dbus =====
dbus system monitor with filter
<code bash>
busctl --match "path=/net/connman/iwd" monitor
</code>
list tree
<code bash>
busctl tree net.connman.iwd
</code>
introspect available properties
<code bash>
busctl introspect net.connman.iwd /net/connman/iwd/636166652d6d6174732d67617374_psk
</code>
===== systemd =====
service hardening
<code>
PrivateTmp=true
ProtectHome=true
# Mounts the /usr, /boot, and /etc directories read-only for processes invoked by this unit.
ProtectSystem=full
# Ensures that the service process and all its children can never gain new privileges
NoNewPrivileges=true
# Sets up a new /dev namespace for the executed processes and only adds API pseudo devices
# such as /dev/null, /dev/zero or /dev/random (as well as the pseudo TTY subsystem) to it,
# but no physical devices such as /dev/sda.
PrivateDevices=true
# Explicit module loading will be denied. This allows to turn off module load and unload
# operations on modular kernels. It is recommended to turn this on for most services that
# do not need special file systems or extra kernel modules to work.
ProtectKernelModules=true
# Kernel variables accessible through /proc/sys, /sys, /proc/sysrq-trigger, /proc/latency_stats,
# /proc/acpi, /proc/timer_stats, /proc/fs and /proc/irq will be made read-only to all processes
# of the unit. Usually, tunable kernel variables should only be written at boot-time, with the
# sysctl.d(5) mechanism. Almost no services need to write to these at runtime; it is hence
# recommended to turn this on for most services.
ProtectKernelTunables=true
# The Linux Control Groups (cgroups(7)) hierarchies accessible through /sys/fs/cgroup will be
# made read-only to all processes of the unit. Except for container managers no services should
# require write access to the control groups hierarchies; it is hence recommended to turn this on
# for most services
ProtectControlGroups=true
# Restricts the set of socket address families accessible to the processes of this unit.
# Protects against vulnerabilities such as CVE-2016-8655
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
# Takes away the ability to create or manage any kind of namespace
RestrictNamespaces=true
</code>
===== nixos =====
apply changes to system
<code bash>
nixos-rebuild switch
</code>
update channel, rebuild and switch
<code bash>
nixos-rebuild switch --upgrade
</code>
search package
<code bash>
nix search gedit
</code>
nixos testing environement
<code bash>
nix-shell -p toilet
</code>
install unstable package
<code bash>
nix-channel --add https://nixos.org/channels/nixos-unstable unstable
nix-channel --update unstable
nix-env -iA unstable.pdfarranger
</code>
custom local repository, list packages
<code bash>
nix-env -f /etc/nixos/apps -qaP '*'
</code>
install package from local repo
<code bash>
nix-env -f /etc/nixos/apps -iA xerox6000-6010
</code>
package shell script
<code>
  # Here we but a shell script into path, which lets us start sway.service (after importing the environment of the login shell).
  environment.systemPackages = with pkgs; [
    (
      pkgs.writeTextFile {
        name = "startsway";
        destination = "/bin/startsway";
        executable = true;
        text = ''
          #! ${pkgs.bash}/bin/bash

# first import environment variables from the login manager
          systemctl --user import-environment
          # then start the service
          exec systemctl --user start sway.service
        '';
      }
    )
  ];
</code>
garbade collector
<code bash>
nix-collect-garbage -d
</code>
list package files
<code bash>
find $(nix eval -f /etc/nixos/apps --raw xerox6000-6010.outPath)
</code>
install package
<code bash>
nix-env -i icecat
</code>
remove package
<code bash>
nix-env -e icecat
</code>

or

<code bash>
sudo nix-store --delete --ignore-liveness /nix/store/1hnbdgz5yy9agnbnix2d8cvxj2d6hlc5-system-path
</code>

list installed packages
<code bash>
# installed via configuration.nix
nixos-option environment.systemPackages | head -2 | tail -1 | sed -e 's/ /\n/g' | cut -d- -f2- | sort | uniq
# + dependencies
nix-store --query --requisites /run/current-system
nix-store --query --requisites /run/current-system | cut -d- -f2- | sort | uniq
# list user packages
nix-env --query
</code>
python virtualenv
<code bash>
nix-shell -p python3Packages.virtualenv
python -m venv venv
source venv/bin/activate
pip install -r requirements.txt
</code>
local repository (nixpkgs clone) as systemwide channel 
<code bash>
$ nix-build nixos/release.nix -A channel --arg nixpkgs  '{ outPath = ./. ; revCount = "'$(git rev-list HEAD | wc -l)'"; shortRev = "'$(git rev-parse --short HEAD)'"; }'
...
/nix/store/hash-name/
$ sudo nix-channel --remove nixos
$ sudo nix-channel --add file:///nix/store/hash-name/tarballs/thetarball.tar.xz nixos
$ sudo nix-channel --update
</code>
test packages git pull request
<code>
let
[...]
  nixpkgs-tars = "https://github.com/NixOS/nixpkgs/archive/";

# FIXME iwd networks option
  pr75800 = import (fetchTarball
    "${nixpkgs-tars}ba0baf53e24a123a45861cf5fa08e4b3e1377db0.tar.gz")
    { config = config.nixpkgs.config; };
  # FIXME nftables + docker
  pr81172 = import (fetchTarball 
    "${nixpkgs-tars}0b4e135d8e9c76a43346ae24e33572e627951203.tar.gz") 
    { config = config.nixpkgs.config; };
[...]
in
[...]
  nixpkgs.overlays = [
    (self: super:
      {
        # FIXME: add iwd networks option
        inherit (pr75800) iwd;
      }
      )];
</code>
retrieve hash
<code bash>
curl -sL https://github.com/NixOS/nixpkgs/pull/64977.patch \
                | head -n 1 | grep -o -E -e "[0-9a-f]{40}"
</code>
allow unfree package installation nix-env
<code bash>
env NIXPKGS_ALLOW_UNFREE=1 nix-env -f /home/onny/projects/nur-packages -iA ocenaudio
</code>
build local package
<code bash>
nix-build -E 'with import <nixpkgs> { }; callPackage ./default.nix { nodejs = pkgs."nodejs-10_x"; }'
</code>
rebuilding with progress indication	 
<code bash>	 
nix build '(with import <nixpkgs/nixos> { }; system)'	 
nixos-rebuild -I nixpkgs=/home/onny/projects/nixpkgs switch --max-jobs 1	 
</code>
quick launch program
<code bash>
nix run nixpkgs.electrum --command electrum
</code>
review repository
<code bash>
git clone https://github.com/NixOS/nixpkgs.git
cd nixpkgs
nixpkgs-review pr 98044
</code>
setup python virtualenv, working pip
<code>
15.17.3.6. How to consume python modules using pip in a virtual environment like I am used to on other Operating Systems?
https://nixos.org/manual/nixpkgs/stable/#python
</code>

which package provides certain file
<code>
command-not-found telnet
</code>

use module from unstable
<code>
let

# FIXME
  unstableTarball =
    fetchTarball
      https://github.com/NixOS/nixpkgs/archive/nixos-unstable.tar.gz;

in
{

# FIXME
  imports = [
    "${fetchTarball "https://github.com/NixOS/nixpkgs/archive/nixos-unstable.tar.gz"}/nixos/modules/services/security/opensnitch.nix"
  ];
  nixpkgs.config.packageOverrides = pkgs: rec {
    unstable = import unstableTarball { };
    opensnitch = unstable.opensnitch;
  };
  #services.opensnitch.enable = true;
</code>

overlay: use / overwrite package from custom repo or fork:
<code>
  nixpkgs.overlays = [
    (self: super: {
      foo2zjs = (import (builtins.fetchTarball {
        url =
          "https://github.com/onny/nixpkgs/archive/foo2zjs.tar.gz";
        sha256 = "1jp98jhc4mw9bipdiq7qdrzn3lslk4mi7prqfh2v43isgsvpd6bg";
      }) { config = { allowUnfree = true; }; }).foo2zjs;
    })
  ];
</code>

python environment with gobject introspection etc
<code bash>
nix-shell -p 'python3.withPackages (p: [p.pygobject3])' -p libnotify -p gobjectIntrospection
</code>

package overlay and override attributes
<code>
  nixpkgs.overlays = [
    (self: super: {
      foo2zjs = (import (builtins.fetchTarball {
        url =
          "https://github.com/onny/nixpkgs/archive/foo2zjs.tar.gz";
        sha256 = "0dsix1vp4canialzj4rp51i35lhdk28yndnnj62i0brzlng7jdrk";
      }) {} ).foo2zjs;
      wordpress = super.wordpress.overrideAttrs (oldAttrs: rec {
        # Remove default plugins and themes
        installPhase = oldAttrs.installPhase + ''
          rm -r $out/share/wordpress/wp-content/plugins/*
          rm -r $out/share/wordpress/wp-content/themes/*
        '';
      });
    })
  ];
</code>

fetchpatch

<code>
  patches = [
    ./no-hardcode-fw.diff

# Support HBPL1 printers https://www.dechifro.org/hbpl/
    ./hbpl1.patch

# Fix "Unimplemented paper code" error for hbpl1 printers
    # https://github.com/mikerr/foo2zjs/pull/2
    (fetchpatch {
      url = "https://patch-diff.githubusercontent.com/raw/mikerr/foo2zjs/pull/2.patch";
      sha256 = "0lvbryw6ymh0ahwkhqsgmjimg5saa8b1xnxmyyjxrbi3l3a6fbvy";
    })

];
</code>

locate / search file belongs to which package
<code>
nix-locate -w libnss3.so
</code>

list package content
<code>
tree (nix-instantiate --eval -E 'with import <nixpkgs> {}; glibcLocales.outPath' | xargs)
</code>

nixos-shell usage
<code bash>
QEMU_NET_OPTS="hostfwd=tcp::8080-:80" NIX_PATH=nixpkgs=/home/onny/projects/nixpkgs nixos-shell vm-invoiceplane.nix
</code>
==== packaging ====

fetchurl
<code>
{ fetchurl, }:

let
  pname = "librewolf-bin";
  version = "85.0.2-1";
  name = "${pname}-${version}";

src = fetchurl {
    url = "https://gitlab.com/librewolf-community/browser/linux/uploads/b87285386bed26dc6d6d4cf252ca7adf/LibreWolf-${version}.x86_64.AppImage";
    sha256 = "0sapm4g4qs63sm640kxcjrngxnix524ms6mxnn0xz6p0xr8dz27r";
  };

</code>

build package
<code bash>
cd /path/to/nixpkgs
nix-build -A nodePackages.<new-or-updated-package>
nix-build -E 'with import /home/onny/projects/nixpkgs { }; python3Packages.callPackage ./pkgs/development/python-modules/pyasn {}'
</code>

get checksum
<code bash>
nix-prefetch-url 'http://i3wm.org/downloads/i3-4.5.1.tar.bz2'
</code>

running tests
<code bash>
echo "$PR_DIFF" | xargs editorconfig-checker -disable-indent-size
</code>

reviewing uncommited changes
<code bash>
nixpkgs-review wip
</code>

tempalte fetchFromGitLab + cmake qt application
<code>
{ lib
, mkDerivation
, fetchFromGitLab
, cmake
, pkg-config
, qtbase
, qttools
, qpdf
, podofo
}:

mkDerivation rec {
  pname = "pdfmixtool";
  version = "1.0.2";

src = fetchFromGitLab {
    owner = "scarpetta";
    repo = pname;
    rev = "v${version}";
    sha256 = "066ap1w05gj8n0kvilyhlr1fzwrmlczx3lax7mbw0rfid9qh3467";
  };

nativeBuildInputs = [
    cmake
    pkg-config
  ];

buildInputs = [
    qtbase
    qttools
    qpdf
    podofo
  ];

meta = with lib; {
    description = "An application to split, merge, rotate and mix PDF files";
    homepage = "https://gitlab.com/scarpetta/pdfmixtool";
    license = licenses.gpl3Only;
    maintainers = with maintainers; [ onny ];
  };

}
</code>

run test locally
<code bash>
nix-build nixos/tests/dokuwiki.nix
</code>

test changes to a modul
<code bash>
nixos-rebuild --upgrade switch -I nixpkgs=/home/onny/projects/nixpkgs
</code>

wrapProgram add binary to path
<code>
 nativeBuildInputs = [
    makeWrapper
  ];

[...]

postInstall = ''
    wrapProgram $out/bin/wihotspot-gui \
      --prefix PATH : ${lib.makeBinPath [ iw ]}
  '';
</code>

wrapProgram add specific arguments
<code bash>
{ lib, stdenv, fetchurl, makeWrapper, adoptopenjdk-bin, jre }:

[...]
  nativeBuildInputs = [ makeWrapper ];

installPhase = ''
    mkdir -p $out/share/java $out/bin
    cp $src $out/share/java/tla2tools.jar
    makeWrapper ${jre}/bin/java $out/bin/tlc \
      --add-flags "-XX:+UseParallelGC -cp $out/share/java/tla2tools.jar tlc2.TLC"
  '';

</code>

install and modify systemd service
<code>
  postInstall = ''
    mkdir -p $out/lib/systemd/system
    substitute dist/systemd/maddy.service $out/lib/systemd/system/maddy.service \
      --replace "/usr/bin/maddy" "$out/bin/maddy" \
      --replace "/bin/kill" "${coreutils}/bin/kill"
    substitute dist/systemd/maddy@.service $out/lib/systemd/system/maddy@.service \
      --replace "/usr/bin/maddy" "$out/bin/maddy" \
      --replace "/bin/kill" "${coreutils}/bin/kill"
  '';
</code>

build rust package
<code>
{ lib
, fetchFromGitHub
, rustPlatform
, pkg-config
, openssl
, dbus
, sqlite
, file
, gzip
, makeWrapper
}:

rustPlatform.buildRustPackage rec {
  pname = "krankerl";
  version = "0.13.0";

src = fetchFromGitHub {
    owner = "ChristophWurst";
    repo = "krankerl";
    rev = "v${version}";
    sha256 = "1gp8b2m8kcz2f16zv9xwv4n1zki6imvz9z31kixh6amdj6fif3d1";
  };

cargoSha256 = "sha256:01hcxs14wwhhvr08x816wa3jcm4zvm6g7vais793cgijipyv00rc";

nativeBuildInputs = [
    pkg-config
    gzip
    makeWrapper
  ];

buildInputs = [
    openssl
    dbus
    sqlite
  ];

checkInputs = [
    file
  ];

meta = with lib; {
    description = "A CLI helper to manage, package and publish Nextcloud apps";
    homepage = "https://github.com/ChristophWurst/krankerl";
    license = licenses.gpl3Only;
    platforms = platforms.linux;
    maintainers = with maintainers; [ onny ];
  };
}
</code>

packaging scheme unstable git
<code>
unstable-2018-05-15
</code>

package binary deb
<code>
{ stdenv
, lib
, fetchurl
, autoPatchelfHook
, dpkg
, qt5
, libjack2
, alsa-lib
, bzip2
, libpulseaudio }:

stdenv.mkDerivation rec {
  pname = "ocenaudio";
  version = "3.10.6";

src = fetchurl {
    url = "https://www.ocenaudio.com/downloads/index.php/ocenaudio_debian9_64.deb?version=${version}";
    sha256 = "0fgvm1xw2kgrqj3w6slpfxbb3pw9k8i0dz16q9d5d8gyyvr2mh8g";
  };

nativeBuildInputs = [
    autoPatchelfHook
    qt5.qtbase
    qt5.wrapQtAppsHook
    libjack2
    libpulseaudio
    bzip2
    alsa-lib
  ];

buildInputs = [ dpkg ];

dontUnpack = true;
  dontBuild = true;
  dontStrip = true;

installPhase = ''
    mkdir -p $out
    dpkg -x $src $out
    cp -av $out/opt/ocenaudio/* $out
    rm -rf $out/opt
    # Create symlink bzip2 library
    ln -s ${bzip2.out}/lib/libbz2.so.1 $out/libbz2.so.1.0
  '';

meta = with lib; {
    description = "Cross-platform, easy to use, fast and functional audio editor";
    homepage = "https://www.ocenaudio.com";
    license = licenses.unfree;
    platforms = platforms.linux;
    maintainers = with maintainers; [ onny ];
  };
}
</code>

package appimage program
<code>
{ lib
, fetchurl
, appimageTools
}:

let
  pname = "sonixd";
  version = "0.14.0";
  name = "sonixd-${version}";

src = fetchurl {
    url = "https://github.com/jeffvli/sonixd/releases/download/v${version}/Sonixd-${version}-linux-x86_64.AppImage";
    sha256 = "sha256-q+26Ut5wN9gFDBdqirR+he/ppu/b1wiqq23WkcRAQd4=";
  };

in
appimageTools.wrapType2 {
  inherit name src;

extraInstallCommands = ''
    mv $out/bin/${name} $out/bin/${pname}
  '';

meta = with lib; {
    description = "Full-featured Subsonic/Jellyfin compatible desktop music player";
    homepage = "https://github.com/jeffvli/sonixd";
    license = licenses.gpl3Only;
    maintainers = with maintainers; [ onny ];
    platforms = [ "x86_64-linux" ];
  };
}
</code>
==== nixops ====

setup
<file - /etc/nixos/configuration.nix>
virtualisation.libvirtd.enable = true;
users.extraUsers.myuser.extraGroups = [ "libvirtd" ];
</file>

<code bash>
nix-env -iA nixos-unstable.nixopsUnstable
sudo mkdir /var/lib/libvirt/images
sudo chgrp libvirtd /var/lib/libvirt/images
sudo chmod g+w /var/lib/libvirt/images
sudo virsh pool-define-as default dir --target /var/lib/libvirt/images
sudo virsh pool-autostart default
sudo virsh pool-start default
nixops create -d example-libvirtd examples/trivial-virtd.nix
nixops deploy -d example-libvirtd
nixops list
</code>

connect to instance (deployment name: example-libvirtd, machine name: machine)
<code bash>
nixops ssh -d example-libvirtd machine
</code>

delete deployment, delete machine
<code bash>
nixops delete -d example-libvirtd

nixops destroy --include nix-http
</code>

start, stop destroy machine foo
<code bash>
nixops start --include foo
nixops stop --include foo
nixops destroy --include foo
</code>

list machines
<code bash>
nixops info
</code>
===== filesystem =====
==== partitioning ====
reset flash drive
<code bash>
dd if=/dev/zero of=/dev/sdX bs=2M count=32
</code>
change label (vfat etc)
<code bash>
fatlabel /dev/sdb1 "mystick"
</code>
resize extX partition
<code bash>
sfdisk -l /dev/sdb
# Disk /dev/sdb: 55.9 GiB, 60022480896 bytes, 117231408 sectors
# Disk model: CR60GB External 
# Units: sectors of 1 * 512 = 512 bytes
# Sector size (logical/physical): 512 bytes / 512 bytes
# I/O size (minimum/optimal): 512 bytes / 512 bytes
# Disklabel type: dos
# Disk identifier: 0x2486e7f7
#
# Device     Boot Start       End   Sectors  Size Id Type
# /dev/sdb1        2048 117231407 117229360 55.9G 83 Linux

e2fsck -f /dev/sdb1
resize2fs /dev/sdb1 50G
# resize2fs 1.45.5 (07-Jan-2020)
# Resizing the filesystem on /dev/sdb1 to 13107200 (4k) blocks.
# The filesystem on /dev/sdb1 is now 13107200 (4k) blocks long.
fdisk /dev/sdb
# 1. (d) delete partition
# 2. (n) create new partition
# 3. (p) primary
# 4. (1) partition number
# 5. (2048) start block, same as above
# 6. (+52428800K) last sector partition (13107200k*4k)
# 7. (a) partition is bootable flag
# 8. (w) write changes
</code>

recover gpt partition
<code bash>
sgdisk -e /dev/sda
</code>
==== lvm ====
restore snapshot
<code bash>
lvconvert --merge /dev/vg0/playground_snap
</code>
==== dd ====
<code bash>
isoinfo -d -i /dev/cdrom | grep -i -E 'block size|volume size' 
dd if=/dev/cdrom of=test.iso bs=<block size from above> count=<volume size from above> status=progress
</code>

==== mount ====
mount with offset
<code bash>
# find offset in testdisk, multiplay start sector with sector-bytes
mount -o loop,offset=1048576 /dev/sdb /mnt
</code>

mount webdav
<code bash>
mount.davfs https://bwsyncandshare.kit.edu/remote.php/dav/files/7bac0379-52e8-42e4-xxxx@bwidm.scc.kit.edu/ remote
</code>
===== mixxx =====
  * Theme: LateNight
  * Set Microphone Output to default Pulseaudio
<code bash>
./sync.sh
./generate_playlist.sh
</code>
<code bash>
env QT_QPA_PLATFORM=xcb mixxx
</code>

===== samba =====
<file - /etc/samba/smb.conf>
[global]
workgroup = WORKGROUP
server role = standalone server
security = user
map to guest = Bad Password

[public]
path = /mnt
writeable = no
browsable = yes
guest ok = yes
</file>
<code bash>
systemctl restart smb nmb
</code>

===== avahi =====
discover local services
<code bash>
avahi-browse --all --ignore-local --resolve --terminate
</code>
===== curlftpfs =====
<code bash>
curlftpfs ftp.example.com /mnt/ftp/ -o user=username:password,allow_other
</code>

===== pnpm =====
<code bash>
pnpm init
pnpm install jquery@3.5.1 --save # see npmjs.com
</code>
update packages
<code bash>
pnpm outdated
</code>
===== gitlab-ci =====
Test gitlab-ci.yml, change into root dir, then:
<code bash>
gitlab-runner exec docker packaging
</code>
Where ''packaging'' is the name of the job.

===== lrzip =====

Compress/decompress files and directories multithreaded
<code bash>
lrztar directory
lrzuntar directory.tar.lrz
lrzip filename
lrunzip filename.lrz
</code>

===== postmarketOS =====

general chroot management
<code bash>
pmbootstrap pull
pmbootstrap shutdown
</code>

install package into chroot
<code bash>
pmbootstrap chroot --suffix native -- apk add paxmark
</code>

emulated chroot
<code bash>
pmbootstrap chroot -b=armv7
</code>

update package index
<code bash>
pmbootstrap update
</code>

edit kernel config
<code bash>
pmbootstrap kconfig edit htc-pyramid
</code>

apk commands
<code bash>
pmbootstrap chroot
$ apk update
$ apk add paxmark
$ apk add paxmark-0.12-r0.apk
</code>

working with git
<code bash>
cd .local/var/pmbootstrap/cache_git/pmaports
git checkout htcpyramix
git pull master
git rebase master
</code>

cleanup chroot(s)
<code bash>
pmbootstrap zap
</code>

flash or boot kernel directly
<code bash>
pmbootstrap flasher flash_kernel
pmbootstrap flasher boot
</code>

prepare kernel image for odin
<code bash>
pmbootstrap export
cd /tmp/postmarketOS-export
cp boot.img-samsung-i8150 recovery.img
tar -cf recovery.tar recovery.img
md5sum -t recovery.tar >> recovery.tar
mv recovery.tar recovery.tar.md5
</code>
===== parted =====

list
<code bash>
parted /dev/sda
$ print
</code>

resize partition (default unit size MB)
<code bash>
parted /dev/sda
$ resizepartition
Partition number? 1
End?  [10.0GB]? 15000MB
</code>

change unit
<code bash>
unit GB
</code>

===== wireshark =====

capture usb traffic

<code bash>
modprobe usbmon
tshark -D
tshark -i usbmon0
</code>

===== binaries and libraries =====

read symbols of library
<code bash>
readelf -Ws /usr/lib/libusb-1.0.so.0
</code>

===== wf-recorder =====

record system video + audio

<code bash>
pactl list sources short
wf-recorder -aalsa_output.pci-0000_00_1b.0.analog-stereo.monitor --file=recording_with_audio.mp4
</code>

note there's a bug in wf-recorder, devicename directly after -a without space

encoded
<code bash>
wf-recorder -d /dev/dri/renderD128 -c h264_vaapi --bframes 0 -p crf=20 -aalsa_output.pci-0000_00_1b.0.analog-stereo.monitor --file=recording_encoded.mp4
</code>

===== cups =====

list printers
<code>
$ lpstat -p -d
printer Dell_1250c is idle.  enabled since Tue 28 Dec 2021 09:44:59 AM UTC
printer Dell_1250c_USB is idle.  enabled since Tue 28 Dec 2021 09:44:59 AM UTC
</code>

print file
<code>
lp -d Dell_1250c_USB -o fit-to-page -o media=A4 scared_cat.png
</code>

list jobs
<code>
$ lpstat
Dell_1250c_USB-2        root            340992   Tue 28 Dec 2021 09:57:08 AM UTC
</code>

cancel job
<code>
cancel 1
</code>

===== qemu =====

booting armv7 alpinelinux
<code bash>
# download kernel and stuff from here http://dl-cdn.alpinelinux.org/alpine/edge/releases/armv7/netboot/
qemu-system-arm -M virt -m 512M -cpu cortex-a15 -kernel vmlinuz-lts -initrd initramfs-lts -append "console=ttyAMA0 ip=dhcp alpine_repo=http://dl-cdn.alpinelinux.org/alpine/edge/main/" -nographic
</code>

Edit summary

Note: By editing this page you agree to license your content under the following license: CC Attribution-Noncommercial-Share Alike 4.0 International

Project-Insanity

Site Tools

Page Tools