Craig Hesling linux4life798

https://docs.portainer.io/start/install-ce/server/docker/linux

sudo apt install docker.io
sudo docker volume create portainer_data
sudo docker run -d -p 8000:8000 -p 9443:9443 --name portainer --restart=always -v /var/run/docker.sock:/var/run/docker.sock -v portainer_data:/data portainer/portainer-ce:latest
sudo tailscale serve --bg https+insecure://localhost:9443

Checkout https://docs.portainer.io/start/install-ce/server/swarm/linux for info about setup using a Docker swarm.

Channel: unix + org.qemu.guest_agent.0

It doesn't need to be the QEMU agent type. Both the unix and QEMU vdagent channels have "clipboard" support, but neither seem to work. Clipboard support of the spicevmc does seem to work.

You need the following package to enable this channel, but it is usually automatically installed during debian installer:

sudo apt install qemu-guest-agent

Setup

Very unfortunatley, there is not a reasonable way to get Debian's default initramfs-tools to unlock LUKS volumes using tokens, like FIDO2 or TPM2. The best attempt to make this work using initramfs-tools is https://github.com/bertogg/fido2luks.

The most common way to handle unlocking these LUKS volumes is to use dracut to generate an initram filesystems. I'm not saying that dracut is great, but it will allow you to easily use systemd-cryptenroll tokenized luks unlock methods.

Setup `dracut` on Debian

https://wiki.archlinux.org/title/Dracut

On Debian the /usr/lib/tmpfiles.d/systemd-pstore.conf file can modified to enable pstore log saving on panic and shutdown.

w- /sys/module/printk/parameters/always_kmsg_dump - - - - Y
w- /sys/module/kernel/parameters/crash_kexec_post_notifiers - - - - Y

The systemd-pstore service is already configured to read from /sys/fs/pstore on the next boot and add these log fragment to the journal log and directly copy to /var/lib/systemd/pstore/.

https://manpages.debian.org/testing/systemd/systemd-pstore.service.8.en.html

BTRFS Notes

Packages

btrfs-progs
duperemove

Suggested BTRFS subvol as / layout for Snapper

https://wiki.archlinux.org/title/Snapper#Suggested_filesystem_layout

Here is the cheatsheet for block size tuning of NVME drives, LUKS encryption, filesystem, and partitions.

Manually Fix WIFI 6E Issue

sudo dpkg-divert --rename --add /usr/lib/firmware/mediatek/WIFI_MT7922_patch_mcu_1_1_hdr.bin
sudo dpkg-divert --rename --add /usr/lib/firmware/mediatek/WIFI_RAM_CODE_MT7922_1.bin
dpkg-divert --list

#pushd ~/src/linux-firmware/mediatek

Functions

ssd_show_data() {
	local location="${1:-0}" # In bytes

	sudo dd if=/dev/nvme0n1 bs=1 count=9000 skip="${location}" status=none | hd
}

# ssd_write_data <data_message> [location]

	# Date formatting for file name purposes.
	# You can lock in one timezone by setting the TZ environment variable.

	# 2024-05-26_04:55:50PM_PDT
	TZ='America/Los_Angeles' date "+%Y-%m-%d_%I:%M:%S%p_%Z"

	# 2024-05-26_07:59:06PM_EDT
	TZ='America/New_York' date "+%Y-%m-%d_%I:%M:%S%p_%Z"

	# You need the following entry in the control file:
	XS-Go-Import-Path: github.com/linux4life798/cmpconflash