* - grimoire - dark wiki & knowledge base
(HTM) git clone git@git.drkhsh.at/codex.git
(DIR) Log
(DIR) Files
(DIR) Refs
(DIR) README
(DIR) LICENSE
---
(DIR) commit 7f8d9971ec89df9cbeff7d76e4ca0bf2717ef0c0
(DIR) parent 010e52a01e9f038dfe657827d5542fc65d6ff90b
(HTM) Author: drkhsh <me@drkhsh.at>
Date: Sat, 26 Jul 2025 01:26:34 +0200
*
Diffstat:
M src/database/lexicon.ndtl | 96 ++++++++++++++++---------------
1 file changed, 50 insertions(+), 46 deletions(-)
---
(DIR) diff --git a/src/database/lexicon.ndtl b/src/database/lexicon.ndtl
@@ -173,9 +173,9 @@ PROXMOX
## Move from LVM to ZFS
- - vm -> online migration works
- - ct -> thorugh cli - move to same storage format on target
- - then move storage to zfs
+ + vm -> online migration works
+ + ct -> thorugh cli - move to same storage format on target
+ + then move storage to zfs
## Fulldisk encryption with Proxmox and ZFS native encryption
@@ -255,9 +255,9 @@ PROXMOX
## Reinstall nodes
- - ssh host keys should be kept, especially with same node name
- - ssh keys and authorized_keys in `/root/.ssh`
- - re-create qdevice afterwards!
+ + ssh host keys should be kept, especially with same node name
+ + ssh keys and authorized_keys in `/root/.ssh`
+ + re-create qdevice afterwards!
## Generic PBS backup script
@@ -471,15 +471,15 @@ GENTOO
## kernel hardening
- - https://wiki.gentoo.org/wiki/Security_Handbook/Kernel_security
- - https://wiki.gentoo.org/wiki/User:Pietinger/Tutorials/Kernel_Hardening_with_KSPP
- - https://wiki.gentoo.org/wiki/User:JM01085758/lockdown
- - https://wiki.gentoo.org/wiki/User:JM01085758/kspp
+ + https://wiki.gentoo.org/wiki/Security_Handbook/Kernel_security
+ + https://wiki.gentoo.org/wiki/User:Pietinger/Tutorials/Kernel_Hardening_with_KSPP
+ + https://wiki.gentoo.org/wiki/User:JM01085758/lockdown
+ + https://wiki.gentoo.org/wiki/User:JM01085758/kspp
## openrc tweaks
- - https://wiki.gentoo.org/wiki/OpenRC/supervise-daemon
- - https://wiki.gentoo.org/wiki/OpenRC/openrc-init
+ + https://wiki.gentoo.org/wiki/OpenRC/supervise-daemon
+ + https://wiki.gentoo.org/wiki/OpenRC/openrc-init
## binhost
@@ -525,39 +525,39 @@ PLAN9
## Text manipulation
- - "Terminal" can be freely edited
- - No clear, just remove
- - No double quotes, see below
- - Only single and backslash for escaping
- - Use copy-paste
- - /dev/text contains terminal contents
- - cat /dev/text > transcript - `script` in unix
- - > /dev/text - clear
- - grep '^; ' /dev/text - history (with `;` as shell prompt)
- - /dev/snarf contains clipboard
- - /dev/cons can write to console
+ + "Terminal" can be freely edited
+ + No clear, just remove
+ + No double quotes, see below
+ + Only single and backslash for escaping
+ + Use copy-paste
+ + /dev/text contains terminal contents
+ + cat /dev/text > transcript - `script` in unix
+ + > /dev/text - clear
+ + grep '^; ' /dev/text - history (with `;` as shell prompt)
+ + /dev/snarf contains clipboard
+ + /dev/cons can write to console
## History
- - `""` to repeat previous command
- - `"` to print previous command
+ + `""` to repeat previous command
+ + `"` to print previous command
## ACME
- - *Dump* saves window arrangement
- - acme -l acme.dump restores
- - Left and middle-click to Cut
- - Left and right-click to Paste
- - Left and middle-click, then right-click to Snarf, or Copy.
- - "Look" to search
- - Right-click for next result
- - "Zerox" will duplicate window
- - "Sort" sorts columns by name
- - "Get" opens dir
- - Search and replace with "Edit" - Sam/ed syntax
- - Right-click to plumb
- - Blue square to resize/move windows/columns
- - Middle click on scrollbar to jump
+ + *Dump* saves window arrangement
+ + acme -l acme.dump restores
+ + Left and middle-click to Cut
+ + Left and right-click to Paste
+ + Left and middle-click, then right-click to Snarf, or Copy.
+ + "Look" to search
+ + Right-click for next result
+ + "Zerox" will duplicate window
+ + "Sort" sorts columns by name
+ + "Get" opens dir
+ + Search and replace with "Edit" - Sam/ed syntax
+ + Right-click to plumb
+ + Blue square to resize/move windows/columns
+ + Middle click on scrollbar to jump
You can also right-click on the dark blue window square, to hide all the
column windows except that one, left-click on it to bring the windows back.
@@ -593,24 +593,31 @@ PLAN9
# add user to the file server
+ ```
; echo newuser bob >> /srv/hjfs.cmd
; echo newuser upas +bob >> /srv/hjfs.cmd
; echo newuser adm +bob >> /srv/hjfs.cmd
; echo newuser sys +bob >> /srv/hjfs.cmd
+ ```
# add user to the auth server
+ ```
; auth/keyfs
; auth/changeuser bob
; auth/enable bob
+ ```
## Add own face to faces
+ ```
jpg -c myface.jpg | iconv -c m8 | resample -x 48 -y 48 > myface.1
jpg -c myface.jpg | resample -x 100 | crop -b 255 255 255 -i -30 | mug > face.1
/lib/faces/48x48x8/a/abc.1
/lib/faces/48x48x8/.dict
/lib/faces/.host...
+ ```
+
man face, man faces
## Email setup
@@ -626,9 +633,6 @@ PLAN9
user=user !password=☠' >/mnt/factotum/ctl
```
- ....
- TODO
-
## create new user
```
@@ -1226,8 +1230,8 @@ RSPAMD
## useful resources
- - [rspamd-slac-2024 slides](https://github.com/spamd-slac-2024)
- - [tuning rspamd](https://smyck.net/2024/10/27/tuning-rspamd/)
+ + {https://github.com/spamd-slac-2024 rspamd-slac-2024}
+ + {https://smyck.net/2024/10/27/tuning-rspamd/ tuning rspamd}
THTTPD
HOST : network
BREF : notes about thttpd
@@ -1378,8 +1382,8 @@ DNSSEC
### More information
- - https://www.22decembre.eu/en/2017/11/01/ldnscripts/
- - https://doc.huc.fr.eu.org/en/post/openbsd-nsd-dnssec-tlsa/
+ + https://www.22decembre.eu/en/2017/11/01/ldnscripts/
+ + https://doc.huc.fr.eu.org/en/post/openbsd-nsd-dnssec-tlsa/
NETFLOW
HOST : network
BREF : netflow stuff