wget https://docs.broadcom.com/docs-and-downloads/raid-controllers/raid-controllers-common-files/8-07-14_MegaCLI.zipunzip 8-07-14_MegaCLI.zip| version: '3.7' | |
| services: | |
| nginx: | |
| image: nginx:alpine | |
| restart: always | |
| ports: | |
| - 8080:80 | |
| volumes: | |
| - ./joomla:/var/www/html |
| #!/usr/bin/env python | |
| # encoding: utf-8 | |
| # Setup introductions: | |
| # Open Namecheap website, select a domain (e.g. abc.com) then go to Advanced DNS | |
| # (Accounts > Domain List > Advanced DNS) | |
| # Insert an "A + Dynamic DNS Record", with hostname (e.g. my) and type whatnever IP address. | |
| # Edit scripts for proper HOSTNAME (e.g. my.abc.com) and APIKEY (Dynamic DNS Password). | |
| # Run and have fun! |
This guide provides instructions for an Arch Linux installation featuring full-disk encryption via LVM on LUKS and an encrypted boot partition (GRUB) for UEFI systems.
Following the main installation are further instructions to harden against Evil Maid attacks via UEFI Secure Boot custom key enrollment and self-signed kernel and bootloader.
You will find most of this information pulled from the Arch Wiki and other resources linked thereof.
Note: The system was installed on an NVMe SSD, substitute /dev/nvme0nX with /dev/sdX or your device as needed.
| AXIS_UP ignore | |
| AXIS_DOWN ignore | |
| AXIS_LEFT ignore | |
| AXIS_RIGHT ignore | |
| MOUSE_BTN3 add volume 5 | |
| MOUSE_BTN4 add volume -5 | |
| MOUSE_BTN5 seek -5 | |
| MOUSE_BTN6 seek 5 |
First, install the necesssary packages:
% apt-get install libpam-oath oathtool
Generate a key and write it to /etc/users.oath (NB the key will be in hexadecimal; if you are using Authy you will want to convert it to BASE32):
% KEY=$( head -c 1024 /dev/urandom | openssl sha1 | awk '{ print $2 }' )
% echo "HOTP/T30/6 andrewlkho - ${KEY}" >> /etc/security/users.oath
% chmod 600 /etc/users.oath
| # OBJECTIVE: Install Arch Linux with encrypted root and swap filesystems and boot from UEFI. | |
| # Note this encrypted installation method, while perfectly correct and highly secure, CANNOT support encrypted /boot and | |
| # also CANNOT be subsequently converted to support an encrypted /boot!!! A CLEAN INSTALL will be required! | |
| # Therefore, if you want to have an encrypted /boot or will want an encrypted /boot system at some point in the future, | |
| # please ONLY follow my encrypted /boot installation guide, which lives here: |
| make | |
| ./configure --prefix=/home/<yourhome>/ --with-x-toolkit=no --with-xpm=no --with-jpeg=no --with-png=no --with-gif=no --with-tiff=no | |
| make install |