shawngmc

Goals:

• Run as root with a full bash env
• Notify on failure via SNS email
• Make this a good boilerplate

Sources:

• https://www.blunix.com/blog/ultimate-tutorial-about-systemd-timers.html

shawngmc

Test 2: EC2

• Run on EC2: m7i.xlarge ~$0.20/hr
• 4 cores/16 GB RAM
• Tested with Rocky 10.0 AMI ami-090c28a056c3e1fd1
  • Not from rockylinux.org Download page
  • Acct 792107900819 listed in forums https://forums.rockylinux.org/t/looking-for-a-rocky-10-ami/18989

Instructions

# Install packages

shawngmc

I'm getting interested in optimized compiling.

C/C++

• Flags
  • Gentoo's Safe CFLAGS might be a great starting point!
  • march:
    • ZNVER4/x86_64v4 looks interesting.
    • ZNVER4 will cause tuning (-mtune), x86_64v4 will not.
• Gentoo's Safe CFLAGS might be a great starting point

shawngmc

Roku OS has betrayed me too many times.

Status

• Steaming Services
  • Disney+: Needs tested, possibly via addon? https://www.wirelesshack.org/how-to-install-disney-plus-kodi-addon.html
  • Dropout: Issues via SendtoKodi
  • Twitch: OK via Addon
  • Youtube: Working via Sendtokodi
• Video Redirecting
• Cast: Doesn't exist

shawngmc

Setup on Cachy OS w/KDE

CachyOS

• Auto-Login
  • During CachyOS Install
• Sleep/Auto-Lock
  • KDE Settings
    • Screen Locking: Lock Screen Automatically -> Never, Apply
    • Power Management, Display and Brightness, Turn Off Screen -> Never, Apply
• Install Sunshine
  • Install package pacman -S sunshine

shawngmc

GNOME Settings

Power

• General > Show Battery Percentage: On

Appearance

• Style: Dark
• Accent: Green
• BG: Static, row 1, col 3

shawngmc

# Install brew
/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"

brew install bitwarden
brew install visual-studio-code
brew install google-chrome
brew install firefox

shawngmc

#!/bin/bash


# Based on: https://dev.to/christianpaez/simplifying-path-management-with-bash-4870
# Install via:
# sudo curl -o /usr/bin/add-path -L https://gist.githubusercontent.com/shawngmc/954ef4ccee03a26f1774c5b922e27777/raw/add-path
# sudo chmod 755 /usr/bin/add-path
unset dir_to_add
unset force_add
unset do_add

shawngmc

Foreword

OK, so I love the idea of SELinux. I like the idea of process permissions and quasi-sandboxing. What I hate about SELinux is:

• The lack of good, straightforward documentation
• The awful UI/UX
• The inconsistency and community split between AppArmor and SELinux

Let's see if I can help myself (and maybe you!) understand it a bit better.

Mode of Operation (How It Works)

Security context/label

shawngmc

homeassistant  | s6-rc: info: service s6rc-oneshot-runner: starting
homeassistant  | s6-rc: info: service s6rc-oneshot-runner successfully started
homeassistant  | s6-rc: info: service fix-attrs: starting
homeassistant  | s6-rc: info: service fix-attrs successfully started
homeassistant  | s6-rc: info: service legacy-cont-init: starting
homeassistant  | s6-rc: info: service legacy-cont-init successfully started
homeassistant  | s6-rc: info: service legacy-services: starting
homeassistant  | services-up: info: copying legacy longrun home-assistant (no readiness notification)
homeassistant  | s6-rc: info: service legacy-services successfully started
homeassistant  | 2023-01-03 17:03:52.653 WARNING (SyncWorker_1) [homeassistant.loader] We found a custom integration pyscript which has not been tested by Home Assistant. This component might cause stability problems, be sure to disable it if you experience issues with Home Assistant