David Papp pigri

SolidRun LX2160A (HoneyComb LX2K) UEFI Firmware Modernization

Summary

This project modernized the entire firmware stack for the SolidRun HoneyComb LX2K (LX2160A CEx7) from a stale 2021-era codebase to current upstream releases, bringing the existing OP-TEE/StandaloneMm Secure Boot support forward from OP-TEE 3.14.0 to 4.9.0. It is kept current with each EDK2 stable tag; the latest rebase is onto edk2-stable202608 (September 2026).

Result: A fully modern, Secure Boot-enabled firmware booting Ubuntu (24.04 and 26.04 tested) via shim → GRUB → signed kernel.

Component	Before	After

Kubernetes DNS at scale

It seems that is a common practice in HPC and AI/ML environments that use MPI applications to populate a hosts files with all the nodes on the cluster and copy it over all the nodes, ref https://help.ubuntu.com/community/MpichCluster

It is my observation that in Kubernetes, Headless Services are used to implement this Service Discovery This is very handy because it allows to reference a pod by hostname without having to copy over a generace /etc/hosts.

There must also be an A record of the following form for each ready endpoint with hostname of and IPv4 address . If there are multiple IPv4 addresses for a given hostname, then there must be one such A record returned for each IP.

Distro	kernel	glibc
CentOS 7	3.10	2.17
Debian 9	4.9.30	2.24
Debian 10	4.19.37	2.28
Debian 11	5.10.84	2.31
Debian 12	6.1.27	2.36
Debian 13	6.12.38	2.41
RHEL 7	3.10	2.17
RHEL 8	4.18	2.28

Risk Assessment of GitHub Copilot

0xabad1dea, July 2021

this is a rough draft and may be updated with more examples

GitHub was kind enough to grant me swift access to the Copilot test phase despite me @'ing them several hundred times about ICE. I would like to examine it not in terms of productivity, but security. How risky is it to allow an AI to write some or all of your code?

Ultimately, a human being must take responsibility for every line of code that is committed. AI should not be used for "responsibility washing." However, Copilot is a tool, and workers need their tools to be reliable. A carpenter doesn't have to

This TRIGGER function calls PosgreSQL's NOTIFY command with a JSON payload. You can listen for these calls and then send the JSON payload to a message queue (like AMQP/RabbitMQ) or trigger other actions.

Create the trigger with notify_trigger.sql.

When declaring the trigger, supply the column names you want the JSON payload to contain as arguments to the function (see create_triggers.sql)

The payload returns a JSON object:

	-- Suricata Advanced Detection with Lua Scripts
	-- Location: /etc/suricata/lua/http-anomaly.lua
	-- Purpose: Complex HTTP anomaly detection using Lua scripting

	-- ============================================================================
	-- HTTP Anomaly Detection Script
	-- ============================================================================

	function init(args)
	local needs = {}

	/**
	* This magically uses batchexecute protocol. It's not documented, but it works.
	*
	* Licensed under: MIT License
	*
	* Copyright (c) 2024 Ruslan Gainutdinov
	*
	* Permission is hereby granted, free of charge, to any person obtaining a copy
	* of this software and associated documentation files (the "Software"), to deal
	* in the Software without restriction, including without limitation the rights

	/*
	* MIT License
	*
	* Copyright (c) 2023-2024 Fabio Lima
	*
	* Permission is hereby granted, free of charge, to any person obtaining a copy
	* of this software and associated documentation files (the "Software"), to deal
	* in the Software without restriction, including without limitation the rights
	* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
	* copies of the Software, and to permit persons to whom the Software is

	#cloud-config

	package_update: true
	package_upgrade: true
	package_reboot_if_required: true

	disable_root: 1
	ssh_pwauth: 0

	manage-resolv-conf: true

	#!/usr/bin/env python3
	# -- coding: utf-8 --
	""" List On-calls """

	## Configuration ##

	#secrets.json
	#{
	# "pagerduty": {
	# "key": "apikey"