François M. francoism90

VSCode + Dev Containers and Toolbx/Distrobox setup for Fedora Silverblue

PLEASE NOTE:

I personally don't use Flatpak VSCode anymore, since I switched from Fedora Silverblue to Universal Blue's project Bluefin-DX. I'll leave the instructions here for those who want them, but be aware that Flatpak VSCode instructions won't be maintained anymore.

Steps

If you prefer VSCode Flatpak

Install VSCode Flatpak from Flathub:

Decrypt LUKS volumes with a TPM on Fedora Linux

This guide allows you to use the TPM on your computer to decrypt your LUKS encrypted volumes. If you are worried about a cold boot attack on your hardware please DO NOT use this guide with your root volume!

Preflight Checks

Verify that you have a TPM in your computer:

# systemd-cryptenroll --tpm2-device=list
PATH DEVICE DRIVER

Using VSCode Flatpak to launch Podman-Remote containers for DevContainers

Overview

References

Adjusting child processes for PHP-FPM (Nginx)

When setting these options consider the following:

How long is your average request?
What is the maximum number of simultaneous visitors the site(s) get?
How much memory on average does each child process consume?

Determine if the max_children limit has been reached.

sudo grep max_children /var/log/php?.?-fpm.log.1 /var/log/php?.?-fpm.log

	<?php
	# app/Http/Controllers/CaddyController.php

	namespace App\Http\Controllers;

	use App\Store;
	use Illuminate\Http\Request;

	class CaddyController extends Controller
	{

	# __DIR.'/docker'
	FROM fedora:30

	RUN useradd -ms /bin/bash -u 1337 vessel
	WORKDIR /var/www/html

	ENV TZ=UTC
	RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone
	RUN echo "fastestmirror=true" >> /etc/dnf/dnf.conf

	<?php

	use PhpCsFixer\Config;
	use PhpCsFixer\Finder;

	$rules = [
	'array_indentation' => true,
	'array_syntax' => ['syntax' => 'short'],
	'binary_operator_spaces' => [
	'default' => 'single_space',

	FROM nginx:alpine AS builder

	# nginx:alpine contains NGINX_VERSION environment variable, like so:
	# ENV NGINX_VERSION 1.15.0

	# Our NCHAN version
	ENV NCHAN_VERSION 1.1.15

	# Download sources
	RUN wget "http://nginx.org/download/nginx-${NGINX_VERSION}.tar.gz" -O nginx.tar.gz && \

	@servers(['web' => $user.'@'.$host,'localhost' => '127.0.0.1'])

	@setup
	// Sanity checks
	if (empty($host)) {
	exit('ERROR: $host var empty or not defined');
	}
	if (empty($user)) {
	exit('ERROR: $user var empty or not defined');
	}

	### KERNEL TUNING ###

	# Increase size of file handles and inode cache
	fs.file-max = 2097152

	# Do less swapping
	vm.swappiness = 10
	vm.dirty_ratio = 60
	vm.dirty_background_ratio = 2