Pontus Jensen Karlsson wolfhechel

Not happy with Docker modifying your precious firewall rules?

Docker inserts iptables rules when it's started by default
buster uses nftables by default
let's make Docker use nftables instead
PROFIT

Prerequisites

Install Docker CE and nftables:

Tuning Intel Skylake and beyond for optimal performance and feature level support on Linux:

Note that on Skylake, Kabylake (and the now cancelled "Broxton") SKUs, functionality such as power saving, GPU scheduling and HDMI audio have been moved onto binary-only firmware, and as such, the GuC and the HuC blobs must be loaded at run-time to access this functionality.

Enabling GuC and HuC on Skylake and above requires a few extra parameters be passed to the kernel before boot.

Instructions provided for both Fedora and Ubuntu (including Debian):

Note that the firmware for these GPUs is often packaged by your distributor, and as such, you can confirm the firmware blob's availability by running:

	# Set Intel(R) Speed Shift Technology to Enabled
	setup_var 0x4BC 0x1
	# Set CFG Lock to Disabled
	setup_var 0x4ED 0x0
	# Set Above 4GB MMIO BIOS assignment to Enabled
	# setup_var 0x79A 0x1

	# Set EHCI Hand-off to Disabled
	# setup_var 0x2 0x0
	# Set XHCI Hand-off to Disabled

	#!/bin/bash

	# ---------------------------------------------------------
	# Customizable Settings
	# ---------------------------------------------------------

	MOUNT_POINT="${CASE_SAFE_MOUNT_POINT:-${HOME}/casesafe}"
	VOLUME_PATH="${CASE_SAFE_VOLUME_PATH:-${HOME}/.casesafe.dmg.sparseimage}"
	VOLUME_NAME="${CASE_SAFE_VOLUME_NAME:-casesafe}"
	VOLUME_SIZE="${CASE_SAFE_VOLUME_SIZE:-60g}"

	#!/bin/bash
	# Modified Pi-hole script to generate a generic hosts file
	# for use with dnsmasq's addn-hosts configuration
	# original : https://github.com/jacobsalmela/pi-hole/blob/master/gravity-adv.sh

	# The Pi-hole now blocks over 120,000 ad domains
	# Address to send ads to (the RPi)
	piholeIP="192.168.1.1"

	outlist='./final_blocklist.txt'

	<?xml version="1.0" encoding="UTF-8"?>
	<DIDL-Lite xmlns="urn:schemas-upnp-org:metadata-1-0/DIDL-Lite/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:sec="http://www.sec.co.kr/" xmlns:upnp="urn:schemas-upnp-org:metadata-1-0/upnp/">
	<item id="f-0" parentID="0" restricted="0">
	<dc:title>Video</dc:title>
	<dc:creator>vGet</dc:creator>
	<upnp:class>object.item.videoItem</upnp:class>
	<res protocolInfo="http-get:*:video/mp4:DLNA.ORG_OP=01;DLNA.ORG_CI=0;DLNA.ORG_FLAGS=01700000000000000000000000000000" sec:URIType="public">$URI</res>
	</item>
	</DIDL-Lite>

	#define _XOPEN_SOURCE 700
	#include <signal.h>
	#include <unistd.h>

	int main()
	{
	sigset_t set;
	int status;

	if (getpid() != 1) return 1;

	# to generate your dhparam.pem file, run in the terminal
	openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048