Jefferson Pires jeffersfp

Macbook Arch Guide

Installation
General Setup
System Time
Display
Keyboard
Touchpad
Sound
Bluetooth

Arch Linux Install

GUID Partition Table
Encrypted root and swap partitions with dm-crypt
Btrfs filesystem with support to snapshots
bspwm + polybar

Download the install ISO image at https://archlinux.org/download/

Burn the ISO to a USB drive and boot from it.

Keybase proof

I hereby claim:

I am jeffersfp on github.
I am jeffersfp (https://keybase.io/jeffersfp) on keybase.
I have a public key ASCkH8T1PmlISYHIPsIJMEPP7hcnPz_MVDH735B19PC1qwo

To claim this, I am signing this object:

Every so often I have to restore my gpg keys and I'm never sure how best to do it. So, I've spent some time playing around with the various ways to export/import (backup/restore) keys.

Method 1

Backup the public and secret keyrings and trust database

cp ~/.gnupg/pubring.gpg /path/to/backups/
cp ~/.gnupg/secring.gpg /path/to/backups/
cp ~/.gnupg/trustdb.gpg /path/to/backups/

or, instead of backing up trustdb...

brew install postgresql openssl
echo 'export PATH="/usr/local/Cellar/postgresql/bin:$PATH"' > ~/.zshrc
env LDFLAGS="-I/usr/local/opt/openssl/include -L/usr/local/opt/openssl/lib" pip --no-cache install psycopg2

SwitchResX Settings for LG 21:9 UltraWide

SwitchResX is a utility that allows users to override the default resolution settings in OSX. For more information, including download links, vist http://www.madrau.com/ .

Disabling System Integrity Protection (SIP)

If you are running OSX 10.11 or higher, SIP must be disabled. To disable SIP do the following:

Boot into the recovery partition by pressing CMD + R when starting up your Mac.
Once in recovery mode, open a terminal window.
Type the command csrutil disable

Sign VirtualBox Kernel Modules - Ubuntu

Follow the steps below if you have EFI Secure Boot enabled and need to sign VirtuaBox Kernel Modules.

Install the virtualbox package

sudo apt install virtualbox

Create a personal public/private RSA key pair which will be used to sign kernel modules

Securing traffic to upstream servers with client certificates

Info: https://www.nginx.com/resources/admin-guide/nginx-https-upstreams/

Creating and Signing Your Certs

Source: http://nategood.com/client-side-certificate-authentication-in-ngi

This is SSL, so you'll need an cert-key pair for you/the server, the api users/the client and a CA pair. You will be the CA in this case (usually a role played by VeriSign, thawte, GoDaddy, etc.), signing your client's certs. There are plenty of tutorials out there on creating and signing certificates, so I'll leave the details on this to someone else and just quickly show a sample here to give a complete tutorial. NOTE: This is just a quick sample of creating certs and not intended for production.

	#!/bin/bash

	TOPICS=$(kafka-topics --zookeeper [ZK_IP]:2181/kafka --list )

	for T in $TOPICS
	do
	if [ "$T" != "__consumer_offsets" ]; then
	kafka-topics --zookeeper [ZK_IP]:2181/kafka --delete --topic $T
	fi
	done

	[DEFAULT]
	; Operation mode
	; This is a global value for all sections
	mode = master

	[server]

	; Connection lifetime
	timeout = 3600