gdamjan

Archlinux install

Base install

fdisk /dev/nvme0n1
# 1gb efi, 32gb swap, 150gb root, rest home

cryptsetup luksFormat /dev/nvme0n1p3
cryptsetup luksFormat /dev/nvme0n1p4
systemd-cryptsetup attach root /dev/nvme0n1p3

gdamjan

#define _GNU_SOURCE
#include <libmount/libmount.h>
#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <errno.h>

/*
 * gcc -o remount-rw remount.c `pkgconf --libs mount`
 */

gdamjan

#!/usr/bin/env -S uv run
# /// script
# requires-python = ">=3.12"
# dependencies = [
#     "aiohttp",
#     "aiohttp-socks",
# ]
# ///
from aiohttp_socks import ProxyType, ProxyConnector, ChainProxyConnector
import aiohttp

gdamjan

table ip myservice
delete table ip myservice

table ip myservice {
  chain incoming {
    type filter hook input priority filter; policy accept;

    # `level 5` must match the number of levels of directories in the cgroup
    socket cgroupv2 level 5 "user.slice/user-1000.slice/[email protected]/app.slice/[email protected]" counter
    socket cgroupv2 level 5 "user.slice/user-1000.slice/[email protected]/app.slice/[email protected]" drop

gdamjan

[tool.ruff]
line-length = 120

[tool.ruff.lint]
extend-select = ["I"]

[tool.pyright]
venvPath = "."
venv = ".venv"
include = ["src"]

gdamjan

FROM alpine:3.20

RUN apk add --no-cache uwsgi-cgi uwsgi-ugreen
COPY cgi-server.ini /etc/uwsgi/cgi-server.ini

VOLUME /cgi-bin
EXPOSE 8000

ENV HTTP_PORT=8000
ENV UWSGI_UID=nobody

gdamjan

FROM nixos/nix:latest

RUN echo "experimental-features = nix-command flakes" >> /etc/nix/nix.conf

gdamjan

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:02:48:fa:33:a2:04:36:4e:0a:bd:f8:86:6c:87:39:76:06:78:60
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: O=sigstore.dev, CN=sigstore-intermediate
        Validity
            Not Before: Mar 30 23:02:02 2024 GMT
            Not After : Mar 30 23:12:02 2024 GMT

gdamjan

Starting state

# br1.netdev 
[NetDev]
Kind=bridge
Name=br1

# br1.network 
[Match]

gdamjan

Network topology

[Router] === wifi nework domain 1 === [VM server] === bridge0, network domain 2 === VM1, VM2, Container1, Container2

• VM Server is Archlinux with systemd networkd
• Router is Edgerouter X with Openwrt

TODO:

• mDNS with Avahi Reflector