Sam Morris yrro

LLM Wiki

A pattern for building personal knowledge bases using LLMs.

This is an idea file, it is designed to be copy pasted to your own LLM Agent (e.g. OpenAI Codex, Claude Code, OpenCode / Pi, or etc.). Its goal is to communicate the high level idea, but your agent will build out the specifics in collaboration with you.

The core idea

Most people's experience with LLMs and documents looks like RAG: you upload a collection of files, the LLM retrieves relevant chunks at query time, and generates an answer. This works, but the LLM is rediscovering knowledge from scratch on every question. There's no accumulation. Ask a subtle question that requires synthesizing five documents, and the LLM has to find and piece together the relevant fragments every time. Nothing is built up. NotebookLM, ChatGPT file uploads, and most RAG systems work this way.

This is part of a blog post I wrote: https://debugging.works/blog/tpm-explained/

How to use a TPM on Linux

Prerequisites

I use it on Arch Linux (systemd 257.3-1)
Install dependency: yay tpm2-tools (5.7-1)

Do I have a TPM 2.0?

Error

journalctl --boot --unit wpa_supplicant.service --follow

wpa_supplicant[888]: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:protocol version

wpa_supplicant[888]: OpenSSL: openssl_handshake - SSL_connect error:0A000102:SSL routines::unsupported protocol

That may indicate that the network you're trying to connect to, requires some very old protocols.

PostgreSQL is Enough

See the new site: https://postgresisenough.dev

🐘 Postgres Standalone

Why?

Localize your database into one single folder of your choosing.
No sudo / root requirement.
Run multiple Postgres at the same time on the same machine- Full bare metal performance.
Postgres is a great starter before moving to "slow single machine but horizontal scale": CockroachDB, ScyllaDB, etc.

Compile

NetBox with AzureAD SSO using OAuth

This is an example setup with NetBox using AzureAD for authentication. It uses the Python Social Auth library.

Most of this was taken from this gist: https://gist.github.com/leoluk/16d91ec22d833945c7ac7ed2b3b05a27

This is written to support NetBox v2.10 to v3.0. I'll try to note differences for 2.9 or earlier.

NOTE: NetBox v3.1 added basic support for using social_auth so most of this is no longer required and can be placed in the configuration.py file.

AzureAD Setup

OCP4 Explicit Manual Upgrades with CLI

Identify the pull image for the release. For example, for the latest OCP 4.4.x the release.txt for the corresponding release. For example here: https://mirror.openshift.com/pub/openshift-v4/clients/ocp/latest-4.4/release.txt

In this example, the latest 4.4.x it is 4.4.3 and it has this entry:

Pull From: quay.io/openshift-release-dev/ocp-release@sha256:039a4ef7c128a049ccf916a1d68ce93e8f5494b44d5a75df60c85e9e7191dacc

Validate your current version is in the list of upgrade path for the desired release. For 4.4.3 these are the possible upgrade paths:

	# Mitigation for CVE-2026-31431 ("Copy Fail") — algif_aead LPE
	# https://xint.io/blog/copy-fail-linux-distributions
	# Apply: ansible-playbook playbooks/cve-2026-31431.yml
	#
	# One mitigation per OS family, plus a cleanup pass for hosts that received
	# the (now-abandoned) systemd seccomp drop-ins in earlier runs.
	#
	# Tags:
	# cve-kernel RHEL/Alma 9, 10: add initcall_blacklist=algif_aead_init
	# to GRUB. No reboot — the arg becomes active on the

	ARG MICRODIR=/microdir
	ARG PACKAGES_TO_INSTALL="java-17-openjdk-devel"

	FROM registry.access.redhat.com/ubi8-micro@sha256:eb4245271537034f69ee336a4a2b31d3fbae4048ec1db53ff89de749c35cf537 AS BASE

	FROM registry.access.redhat.com/ubi8@sha256:83c0e63f5efb64cba26be647e93bf036b8d88b774f0726936c1b956424b1abf6 AS BUILD
	ARG MICRODIR
	ARG PACKAGES_TO_INSTALL
	RUN mkdir ${MICRODIR}
	COPY --from=BASE / ${MICRODIR}

	#!/usr/bin/bash -xe

	cat <<EOF > "${HOME}/.config/systemd/user/zoom.slice"
	[Slice]
	AllowedCPUs=0-4
	MemoryHigh=6G
	EOF

	cat /usr/share/applications/Zoom.desktop \| sed -E 's#^(Exec=).*$#Exec=/usr/bin/systemd-run --user --slice=zoom.slice /opt/zoom/ZoomLauncher#' > "${HOME}/.local/share/applications/Zoom.desktop"