gslav

Problems/Fixes

1. power drain in sleep mode

Potential sleep issues that may require BIOS updates.

Solution 1

s2idle sucks, but you can make it suck less if you do the kernel param acpi.ec_no_wakeup=1 (on the P14s Gen 5 AMD, at least). This results in a normal-ish power drain in sleep mode and the laptop no longer gets hot. I haven't got a hard number to give you, but it doesn't self-drain in several hours. Comment link: https://www.reddit.com/r/thinkpad/comments/1ex38yg/which_thinkpad_is_best_for_linux_t14s_gen_4_vs/

Solution 2

https://bbs.archlinux.org/viewtopic.php?pid=2195411#p2195411

Initial setup guide:

https://steamcommunity.com/sharedfiles/filedetails/?id=680514371

Follow this first to get the basic manual session working.

I decided to take it one step further, and execute the whole thing from Systemd automatically on my server. This did require a bit of tweaking.

NOTE: In my usage, I named the user steam (not steamuser), it's in the group users, and its home directory is /var/home/steam; adjust any paths, etc. below to suit your actual details.

security and hardening options for systemd service units

A common and reliable pattern in service unit files is thus:

NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict

Synology/wg

To avoid some bugs in wg-quick and/or iptables on my Synology:

I set up the wireguard device manually.
I used network namespaces to create an explicit tunnel namespace. I then specified DNS for this namespace only.

Credit where credit is due. I got this idea from the Wireguard website. https://www.wireguard.com/netns/#the-new-namespace-solution

True Color (24-bit) and italics with alacritty + tmux + vim (neovim)

This should make True Color (24-bit) and italics work in your tmux session and vim/neovim when using Alacritty (and should be compatible with any other terminal emulator, including Kitty).

Testing colors

Running this script should look the same in tmux as without.

curl -s https://gist.githubusercontent.com/lifepillar/09a44b8cf0f9397465614e622979107f/raw/24-bit-color.sh >24-bit-color.sh

Arch Linux ARM 64 on Raspberry Pi 3 B+ With Full Disk Encryption And SSH Unlock: 2018 Edition

There are multiple ways to get a full disk encrypted arch linux system on raspberry. In this tutorial, we will install a 64-bit arch linux armv8 system, using dropbear as ssh server for remote pre-boot unlocking of the root filesystem. However, it will still be possible to unlock and use the pi as usual, with a keyboard and monitor. We will also create an unencrypted partition in the installation process, usable as a rescue system.

Differences to the 32-bit arch linux arm version:

probably better performance
can run 64-bit software
comes without the proprietary video-driver blobs

A non-exhaustive list of WebGL and WebGPU frameworks and libraries. It is mostly for learning purposes as some of the libraries listed are wip/outdated/not maintained anymore.

Engines and libraries ⚙️

Name	Stars	Last Commit	Description
three.js	![GitH

	#!/usr/bin/bash

	# configuration matches the wg-quick specifications

	# manual invocation:
	# $ sudo wg-netns vpn-1
	# via systemd:
	# $ sudo systemctl start wg-netns@vpn-1.service

	# examples:

	#!/bin/sh

	# https://martin.elwin.com/blog/2008/05/backups-with-squashfs-and-luks/

	set -e

	SQUASHFS_IMG="$1"
	LUKS_IMG="$2"
	CRYPTNAME=mkcrypt-$RANDOM
	CRYPTDEV="/dev/mapper/$CRYPTNAME"

	#!/bin/bash

	# Bash script to install SiS Mirage 3+ graphics drivers on Linux
	# Supports 671/672MX graphics cards
	#
	# Created in March 2019
	#
	# Tested on:
	# - Lubuntu 18.04 (32-bit) with X.Org v1.19
	# - Xubuntu 18.04 (64-bit) with X.Org v1.20