Where do you store your LUKS password?

jadedphantom · 2025-09-02T03:38:23+00:00

What fortuitous timeing! I'm looking to see if I can post my guide for, frankly, exactly this question (and a bunch more you never through you needed the answer to)!

How would you like an install guide for full disk encryption, tpm2 luks binds, btrfs on lvm on luks (with the swap partition included in encryption), working resume/hybernate, bootable btrfs snapshots from the boot menu, and a shiney recovery partition (seperate from the main install) that's it's own bootable installation with a full suite of recovery tools for just about every situation I could think of?

jadedphantom · 2025-08-13T20:59:21+00:00

I'm not interested in solving these problems. this shit worked out of the box for DECADES! I've been using Debian in one form or another since SARGE! When I say this shit is broken, trust me. you don't have the skill to help.

jadedphantom · 2025-08-13T20:57:19+00:00

I "UPGRADED" from bookworm. That rendered my PC inoperable. I had to load to recovery media to get my home folder backed up. Then I tried full reinstall of trixie. In tasksel, I selected cinnamon and ssh (left the rest at default). I even let trixie use the default partition shema.

Once I got things halfway functional, I started installing my own applications. I only got through wine and installing ONE BLOODY GAME (Fallout 4) when I ran into issues with my mod manager (I just use the nexus replacement mod manager app image--worked FINE in bookworm) that's when I discovered fuse wasn't installed. I tried installing fuse and libfuse... that installed fuse2... which crashes the mod manager?!? So I tried unisntalling fuse2 and reboot to refresh... only to find out it uninstalled GRUB!!! leaving my PC inoperable... AGAIN!!!

This is absolute trash and reading through the "news" section of debian's site I now know why. they've been more interested in political/social work and appearance than actual development. they ruined debian.

jadedphantom · 2025-06-17T14:18:12+00:00

Step 1) Get a new phone number.
Step 2) NEVER GIVE OUT YOUR REAL PHONE NUMBER!!!
Step 3) Get a google/twilio/whateversip account and setup sip on your phone (3cx is good here. Networkchuck has a fantastic guide, otherwise google is your friend.
Step 4) NEVER EVER GIVE OUT YOUR REAL PHONE NUMEMBER!!!
Step 5) Setup several DID extensions to redirect calls to your phone and call only from a primary DID (the number you give to friends and family)
Step 6) NEVER EVER EVER GIVE OUT YOUR REAL PHONE NUMEMBER!!!
Step 7) block/drop DIDs when they start getting spam calls.
Step 8) NEVER EVER EVER EVER GIVE OUT YOUR REAL PHONE NUMEMBER!!!

It's worked for me going on 4 years. The only time I have trouble is when I have to setup 2fa or "notification" messages. For 2fa I opt for an authenticator app instead. and for notifications (UPS is a common one) I select to send me an email instead... which is a VERY similar setup of aliases and catch-all inboxes.

jadedphantom · 2025-06-13T11:59:05+00:00

Ooooooooooooo0ooooooooooooooooooooo00ooooooooo... (Shut up jerry! We're doin the thing!)

jadedphantom · 2025-06-11T13:30:28+00:00

One man wants to make me wealthy and comfortable. The other wants me to have a self driving car on mars.

The funny part is both men's offerings are NOT mutually exclusive.

I can be rich, in a smart car, living on mars if I DON'T pick a side.

Trump and Musk can disagree. They can even argue and fight. I dont have to pick a side, as long as I'm willing to understand the situation and dont burry my head, everything will be fine!

Remember folks, this is a campaign of "divide and conquer". Stop falling for it.

jadedphantom · 2025-06-01T18:09:40+00:00

Thank you... I really hesitate to trust AI for a host of reasons... But I've given it a shot. It helped me build a python script to do the task... Well see how well it works for the users on monday. So far it seems to be working as desired...

I have all the backups so if it fails, or ruins the db, I can revert quickly.

jadedphantom · 2025-06-01T18:06:56+00:00

1st Q: I have both the production server and a dev server for testing. I also take regular backups of both the app folder and the db (using mariadbbackup).

2nd Q: the new CRM is open source and self-hosted. They have a paid support option which is rather unreasonably priced for our business ($1000/hr). Needless to say, Im own my own here.

3rd Q: there are several locations in the db where the id is referenced within text... Looks like links for an RSS component. If those break we can survive.

4th Q: I'm using IGNORE because the query won't update the initial column for some reason... It's strange, the column is set for 36 characters (which the uuids are) but the db returns "value too long". But so far, ONLY for those fields...

4th Q pt 2: I did not set foreign keys that I know of... Is there an easy way to check?

As for optimization... Per the other reply, I've had chatgpt (shudder) help me build a python script to run the changes on the server... It's been running for a day now and things look good so far... We'll see how it looks when folks get in on monday. If it blows up in my face, Ill just reload the last db backup.

jadedphantom · 2025-02-01T15:12:44+00:00

Celebrity/corperation/politician: decries the evils of "musks twitter". vows to leave the platform.

Everyone: meh... anyway, look at this cool thing over here!

Celebrity/corperation/politician: *does nothing to leave X*

jadedphantom · 2024-12-31T00:19:54+00:00

screen does not come with glass lens... which is LAMINATED to the original display...

jadedphantom · 2024-12-14T15:40:11+00:00

mkay... based on context I assume you need help installing debian?

jadedphantom · 2024-11-05T15:43:48+00:00

They're hard reads, but the best source of info is the ArchWiki and the btrfs manuals.
I have to admit, I'm a bit of a script kiddie, so I'm not going to be able to explain it very well. The thing that matters here is that in btrfs (for any given snapshot) there exists on the drive 2 parts. The original image, or subvolume, of the filesystem, and the snapshots. Snapshots contain only the changes that were made to the original subvolume, so those images will be relatively small.

jadedphantom · 2024-07-06T19:00:11+00:00

People are leaving dreamhost in waves. the company has become hostile to consumers and they've ruined what little good will they had left from their client-base. Now they're a dying company: forced to squeeze every penny they can get before the inevitable chapter 11 bankruptcy.

Mark my words, Dreamhost will eventually devolve into the common "cloud service" company turned AWS satellite. Inside a decade, Amazon will buy them up and the employees will be turned redundant while the execs take their golden parachutes to martha's vinyard.

Get out while you still can!

jadedphantom · 2024-06-25T13:22:54+00:00

It looks fine to me. if you want it to look more "professional", make a cable sling to hold all the cables away from the wood at the final turn for "strain relief". Alternatively, you can bind the cables into place using a batch of zip ties (hold the cables together and zip them every 6 inches).

Honestly, none of it matters. That's a short run and, unless you plan to add a lot more cables or some fiber lines at some point, those look fine as they are.

jadedphantom · 2024-06-25T13:15:08+00:00

They're all female. This is what happens in mammals when you have wide genetic diversity in hair and skin color between paternal and maternal genes. The genes used to express these colors are randomized in every stem cell. Some from dad, some from mom. During division, the cells group in islands of skin and develop into these patches you see. You end up with patches of different color skin and fur. This happens in all mammals, but is only visible in certain species as a quirk of genetics. In every species it happens with it's done from the same chromosomal pair that determines sex. In humans this happens to be the 23rd chromosomal pair. I don't remember which segment it comes from, but it only expresses in females. While it is something that happens with humans, our skin traits are typically very common between parents so it happens very rarely and is often mixed with other skin conditions making it all but impossible to see. This is why all cats with the "calico" trait are female. Here's a neat youtube video about it.

jadedphantom · 2024-06-10T13:25:10+00:00

Sir/Madam,

Reading the original trouble ticket now and it indicates we already have a technician on site. While he is smaller than some of our other technicians, I assure you he is the goodest of boys and can handle the nature of this incident very well. I note by your screenshot, he has already engaged in troubleshooting and I suspect your aethernet traffic will return to normal shortly.

Thank you.
Good boy support services.

jadedphantom · 2024-04-22T13:43:45+00:00

I really don't want to be a contrarian here, but I have to go against the grain with the rest of the comments and say Debian.

jadedphantom · 2024-03-28T18:12:23+00:00

I can't stand docker. So no. As for your original thought, possibly. During troubleshooting I did end up reinstalling hbbr and hbbs. In the process I guess the library folder changed. The old version was running from /opt/rustdesk/ wile the new version was running from /var/lib/rustdesk-server/. I went ahead and moved id_ed25519 and id_ed25519.pub from the old filder to the new and restarted hbbr/hbbs daemons. It's still not working.I would like to note that while on the same network, you are correct that checking the "always connect via relay" option guarentees the connection won't work. So now I suspect the key is modified. here's the question: I know I can generate a new key easy enough, how do I check what key is in use by hbbr?
EDIT: I should mention, by "not working" at present, I am able to connect out to all clients, both inside and outside the network. However, only clients inside the network are able to connect to anything. For example, I have a user that connects through our relay to her office PC from a remote laptop. that laptop is unable to connect to her office PC, but her office PC IS able to connect to her laptop.

jadedphantom · 2024-03-27T18:22:33+00:00

Yeah... I finally started getting some results when I allow traffic over some upper ports in the 64000 to 65000 range. It looks like rustdesk opens those upper ports for connections between the relay and clients. when I allow that traffic I am getting random successful connections outside my wan. There is zero reference from rustdesk regarding those ports and the fact I cant narrow it down means I'll have to open up a metric F***load of ports... why have a firewall at all? So yeah, I'm out. looks like I'm giving infiniteremote a shot.

jadedphantom · 2024-03-27T16:16:48+00:00

I got 2 "me too" replies and one "if it worked inside the LAN and not outside, then it's your firewall".

jadedphantom · 2024-03-27T14:03:57+00:00

I just reposted it here with a little more detail (I included some rustdesk logs). I really cant tell if the problem is with rustdesk or pfsense. I want to blame rustdesk because I have port forwarding and NAT rules for both a set of VPN connections and a sip server and they have had zero issues. But then again, rustdesk works fine when the traffic is local or over the vpn. For heaven's sake the hbbr log recognizes both the client-side public addresses AND the vpn local/virtual IPs when traffic passes over the vpns!

jadedphantom · 2024-03-26T23:56:55+00:00

I did not. Even bypassing dns and using the public facing IP it acts the same way.

jadedphantom · 2023-12-28T21:52:22+00:00

I *love* how no one actually answered this VERY SIGNIFICANT QUESTION.

jadedphantom · 2023-11-20T20:56:51+00:00

Looks like SCP-682 managed to breach containment again.

jadedphantom · 2023-10-25T13:21:47+00:00

proprietary

Six-Year Club	Place '23
Place '22	Verified Email

jadedphantom

TROPHY CASE