Robert Kreuzer rkrzr

Transparent Git Encryption

This document has been modified from its [original format][m1], which was written by Ning Shang ([email protected]). It has been updated and reformatted into a [Markdown][m2] document by [Woody Gilk][m3] and [republished][m4].

Description

When working with a remote git repository which is hosted on a third-party storage server, data confidentiality sometimes becomes

Requirements

Encrypt everthing including /boot and /root
Enter password once
Support UEFI

Installation media setup

Download NixOS minimal iso and copy to USB stick. For example on Mac OSX

$ diskutil list
$ diskutil unmountDisk /dev/disk1 # Make sure you got right device

These are instructions for booting from an Ubuntu liveCD and installing NixOS on a machine. I needed to do this because the NixOS liveCD doesn't work on my machine (NixOS/nixpkgs#5829), so I'm just using the Ubuntu installation media as something to boot into.

Much of this is from discussion at NixOS/nixpkgs#14680.

Get the Ubuntu ISO: http://releases.ubuntu.com/16.04.1/ubuntu-16.04.1-desktop-amd64.iso

Write it to a USB drive with unetbootin

Installation of NixOS with encrypted root

These are my notes on instaling NixOS 16.03 on a Lenovo ThinkPad X1 Carbon (4th generation) with an encrypted root file system using UEFI.

Most of this is scrambled from the following pages:

December 13, 2016 - This gist has been moved to a dedicated github repo, https://github.com/vrillusions/ubuntu-kickstart, no more updates will be posted to this gist.

Searching Git commit history

This should be one of the core features of Git, but for some reason it's impossible to figure out how to search for a string in your commit history and see the diffs that that string is in. Here's the best I've come up with:

To find which commits and which files a string was added or removed in:

git log -S'search string' --oneline --name-status

To see the diff of that

	# Use systemd for managing NVIDIA driver suspend in drivers ====>>> PRIOR to version 470 <<<=====
	# https://download.nvidia.com/XFree86/Linux-x86_64/450.66/README/powermanagement.html
	# https://forums.developer.nvidia.com/t/unable-to-set-nvidia-kernel-module-parameters/161306
	# Please note: In Fedora Linux you may need to just install the xorg-x11-drv-nvidia-power pakage
	# as sugested by @goombah88 in the comments below.

	TMP_PATH=/var/tmp
	TMPL_PATH=/usr/share/doc/nvidia-driver-460/

	echo "options nvidia NVreg_PreserveVideoMemoryAllocations=1 NVreg_TemporaryFilePath=${TMP_PATH}" \| sudo tee /etc/modprobe.d/nvidia-power-management.conf

	#!/bin/bash
	# Copy files from and to Google Compute Engine instances
	# Automatically looks up the correct zone and uses ~/.ssh/id_rsa
	# Usage
	# gscp ./some.file some-instance-name:some-directory
	# gscp some-instance-name:some-directory ./some.file

	for project in $(gcloud projects list \| grep -v PROJECT_ID \| cut -d' ' -f 1); do
	PROJECT=$project

	{-# LANGUAGE DataKinds, PolyKinds, TypeOperators #-}
	{-# LANGUAGE TypeFamilies, FlexibleInstances, ScopedTypeVariables #-}
	{-# LANGUAGE InstanceSigs #-}

	module TinyServant where

	import Control.Applicative
	import GHC.TypeLits
	import Text.Read
	import Data.Time

	pip install ndg-httpsclient==0.3.2 pyasn1==0.1.7 pyOpenSSL==0.13.1 requests==2.2.1

	# with a cert.pem file in the same directory as ssl_server.py
	python ssl_server.py

	# in another terminal with same virtualenv
	python ssl_client.py