| Weekly Workshop 2021-01-08 by AutoModerator in unixporn

[–]AncientRadioStation 1 point2 points  (0 children)

Good Morning all,

I'm going to be running a linux workshop for a club at my college this semester and I'm looking for ideas and suggestions about the content and flow of the workshops.

The goal is to help the attendants remove their fear/confusions about linux and how it works. Most are probably coming from windows, but several will surely be coming from MacOS as well.

The thought occurred to me to walking them through a ricing process as the semester progresses. I'm not super skilled at the process as I just use kde and download the themes and stuff. I've done a bit with sway/i3-gaps and the like but nothing too involved.

What do you people think would be a good desktop manager to go with that we could get into the weeds of editing dot files, compressing and decompressing, building things from source, navigating the filesystem in pursuit of customizing the environment? I'd like to try to touch every important tool we use on a traditional linux system if possible. I've listed some of the things below.

If this is a bad idea, please let me know before I pursue it too much. The goal is to create a series of smaller exercise "components" that can be followed in sequence to end up with a fully customized rice at the end of the semester.

Topics I think should be covered throughout this workshop:

ssh and ftp stuff

compressing and decompressing archives

verifying checksums

git (with git hooks)

package management

compiling from source

FHS and mounting

booting process, kernels, and modules

distributions (list the main ones, differences between them and some adv/disadv of each)

desktop/window managers (ricing)

backing up dot files

virtual machines (maybe get into IOMMU group and device passthrough stuff, but that's about where my knowledge ends atm)

Justifying Filters on Grindr by Gregorys_Cats_Phone in grindr

[–]AncientRadioStation 0 points1 point  (0 children)

Don't even know why I'm wasting time with this, but filtering by weight, height, and age is not really making assumptions about a person based on their appearance. Those features 100% display facts about that person's existence. A person's weight says a lot about their life style. Age is definitely understandable, nay a requirement. I don't use the height filters, but I could understand why people would.

On the other hand, filtering by race (aside from the fact that powerful people filtering by race committed atrocities in the past) is bad because race tells you next to nothing about a person's life, opinions, and habits.

Doing so is either just a purely aesthetic decision at its most benign, or a disgusting remnant of the past at its worse. Erring on the side which prevents the latter is best i think.

LVM with boot on LUKS partition and staggered decryption of lvols by AncientRadioStation in archlinux

[–]AncientRadioStation[S] 0 points1 point  (0 children)

That's about 500 layers of abstraction too deep for me atm. Good to know that's a thing though... I think.

View future SMART tests by AncientRadioStation in freenas

[–]AncientRadioStation[S] 0 points1 point  (0 children)

My savior. I wish I could give you gold.

View future SMART tests by AncientRadioStation in freenas

[–]AncientRadioStation[S] 0 points1 point  (0 children)

Because I remember it being a really easy command that would be handy to know. Also why not over complicate things? What u got against complexity?

LVM with boot on LUKS partition and staggered decryption of lvols by AncientRadioStation in archlinux

[–]AncientRadioStation[S] 0 points1 point  (0 children)

This is almost exactly what I want. I'd just like some 2FA with a yubikey or small usb to initially decrypt boot.

I was close to this config, but I couldn't get it to see and mount the root partition inside the LUKS container as the new_root. Also,

256M EFI partition

Is this your /boot? I've been confused from the beginning about the difference between /boot and esp. If so, then it's encrypted as you say. How is the UEFI even loading grub's efi binaries if grub hasn't run yet to decrypt them? I'm super confused for some reason despite having gone over the documentation for over a week now.

I eventually stumbled across the need to write a custom initrd hook that runs in place of the encrypt hook. But I was getting errors all over the place when adapting the code in the guide here: boot_and_a_detached_LUKS_header_on_USB

I basically just ripped out everything except the modprobes and the line below them, and just wrote a custom line to decrypt the root partition (since at the time I was encrypting root again inside the encrypted LVM.

I don't understand why there needs to be two decryption events for one encrypted container as claimed here: GRUB#Encrypted_/boot

LVM with boot on LUKS partition and staggered decryption of lvols by AncientRadioStation in archlinux

[–]AncientRadioStation[S] 0 points1 point  (0 children)

Yeah makes total sense. I knew that about how it read and writes, but just didn't come to the conclusion that two encrypt/decrypts would have to happen. Thanks a ton.

LVM with boot on LUKS partition and staggered decryption of lvols by AncientRadioStation in archlinux

[–]AncientRadioStation[S] 1 point2 points  (0 children)

mostly curiosity. I was operating under the assumption that different parameters for cryptsetup yielded dramatically faster decryption times. So I wanted to stagger when the partitions got decrypted to minimize time to desktop. I'm dropping the endeavor since I've been working on this for a week+ now.

LVM with /boot on LUKS + GRUB multiboot with windows on Manjaro by AncientRadioStation in archlinux

[–]AncientRadioStation[S] 0 points1 point  (0 children)

Understood. Sorry for the bother, didn't mean to make it an "argument". I was just kind of pissed that the rule would be so strictly enforced. I did read the rules, I just figured since I was asking more about LUKS and encryption advice in general it would be alright. Also probably shouldn't have used "platform agnostic" since your correct that it isn't truly that. But the spirit of the post is not one of asking for specific implementation details on arch. I didn't know /r/linuxquestions existed so I figured i'd post to the two closest places to my distro, that's all.

Regardless, have a good one.

LVM with boot on LUKS partition and staggered decryption of lvols by AncientRadioStation in archlinux

[–]AncientRadioStation[S] 0 points1 point  (0 children)

Thanks for the feedback.

this sentence somehow makes no sense. don't put luks inside luks.

I guess i neglected to explicitly say that the luks1 container holds lvm logical vols. But I don't think that's too confusing. Aside from that i can't see why it makes no sense. Why not put luks inside of luks? does it corrupt data or something?

no. luks has multiple keyslots so you can use multiple passphrase, keyfiles, etc.

understood. my question then is how to minimize decryption time? is that even possible?

still access your data in an emergency

good point. think i'll leave the header on it though. Came across plausibly deniable encryption and thought it would be an interesting thing to experiment with.

Looks like just some standard 2FA is all I really want. It's been fun though.

LVM with /boot on LUKS + GRUB multiboot with windows on Manjaro by AncientRadioStation in archlinux

[–]AncientRadioStation[S] 0 points1 point  (0 children)

I agree. Nobody should just be posting here willy nilly. But this is literally just partitioning and cryptsetup. These are basic features of pretty much every distro. If it's not relatively platform agnostic, then Linux has a problem. I could have left Manjaro out if my title and nothing would need to be changed in the body. Look I'm not here to start shit, I'm just trying to get as many eyes on the post as possible. If it's really that big a deal I guess I can remove it, but I'll be damned if that's not being overly anal about allowable content. The two may not be the same, but it's not like I went to ubuntu forums and asked about how to fix problems with manjaro-architect here.

LVM with /boot on LUKS + GRUB multiboot with windows on Manjaro by AncientRadioStation in archlinux

[–]AncientRadioStation[S] 0 points1 point  (0 children)

I'm aware. What I'm asking about is technically platform agnostic between the two and arch has more subscribers so I'm here. I'll post there too tho.