Markus Geiger blurayne

Customize Grml LiveCD (remaster)

This little bash script helps you to build your own customized grml.iso

Features

Include your .ssh/*.pub files into authorized_keys
Inject Grml Cheats
Auto download all necessary files (the ISO and grml2usb)

security and hardening options for systemd service units

A common and reliable pattern in service unit files is thus:

NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict

Tuning Intel Skylake and beyond for optimal performance and feature level support on Linux:

Note that on Skylake, Kabylake (and the now cancelled "Broxton") SKUs, functionality such as power saving, GPU scheduling and HDMI audio have been moved onto binary-only firmware, and as such, the GuC and the HuC blobs must be loaded at run-time to access this functionality.

Enabling GuC and HuC on Skylake and above requires a few extra parameters be passed to the kernel before boot.

Instructions provided for both Fedora and Ubuntu (including Debian):

Note that the firmware for these GPUs is often packaged by your distributor, and as such, you can confirm the firmware blob's availability by running:

LD_PRELOAD this as a library to output a binary's output from syslog() on stderr as well as any syslog daemon that's listening (useful for Docker, if you want all log output to be collected by Docker's standard output handling.) Beware though, if the program changes its stderr file descriptor (closes it, points it at /dev/null, pipes it out to a socket), this can have surprising results. For example, when I tried this with cyrus-imapd, I was getting syslog output sent to remote clients because stderr and stdout were remapped that way (not maintaing the original fd that Docker set up.)

Example Docker implementation

COPY syslog2stderr.c /build
RUN gcc -fPIC -shared /build/syslog2stderr.c -o /usr/local/lib/syslog2stderr.so
RUN echo /usr/local/lib/syslog2stderr.so &gt;&gt; /etc/ld.so.preload

	Name: Create home directory during login
	Default: yes
	Priority: 0
	Session-Interactive-Only: yes
	Session-Type: Additional
	Session-Final:
	required pam_mkhomedir.so skel=/etc/skel umask=0022

	#
	# refind.conf
	# Configuration file for the rEFInd boot menu
	#

	# Timeout in seconds for the main menu screen. Setting the timeout to 0
	# disables automatic booting (i.e., no timeout). Setting it to -1 causes
	# an immediate boot to the default OS UNLESS a keypress is in the buffer
	# when rEFInd launches, in which case that keypress is interpreted as a
	# shortcut key. If no matching shortcut is found, rEFInd displays its

	#!/bin/bash

	# This script connects the computer to a vpn server using openconnect without pain

	prog_name=$(basename $0)

	# CHANGE YOUR_VPN_SERVER_DOMAIN to the VPN server you know like example.com
	domain=YOUR_VPN_SERVER_DOMAIN

	function help {

	#!/bin/bash

	# Calculates network and broadcast based on supplied ip address and netmask

	# Usage: broadcast_calc.sh 192.168.0.1 255.255.255.0
	# Usage: broadcast_calc.sh 192.168.0.1/24


	tonum() {
	if [[ $1 =~ ([[:digit:]]+)\.([[:digit:]]+)\.([[:digit:]]+)\.([[:digit:]]+) ]]; then

	#!/bin/sh

	# This script creates a user-mode linux machine based on Ubuntu.
	# Created by Clay Smith, May 2017
	#
	# based on: https://gist.github.com/aputs/6247216
	# and https://gist.github.com/AVGP/5410903

	set -x