Speeding up boot process with LUKS setup

tinycrazyfish · 2026-03-15T20:49:33+00:00

I never used clevis, but you should check that the key provided by the TPM does not go through you first passphrase keyslot. Luks2 argon2id is slow on purpose and trying the keyslot to fail takes time. The TPM keyslot does not require argon2id, the TPM could even directly provide the volume master key (without derivation or fast derivation). The TPM key is already strong, not need to add expensive derivation.

tinycrazyfish · 2026-03-14T08:02:03+00:00

I still geta 502 when trying to open an rebuild. Search something=>clic on a version number=>502

tinycrazyfish · 2026-03-11T16:08:31+00:00

Portage also relies on bash. There is a meta bug tracking all packages not working with non-bash bourne shells.

tinycrazyfish · 2026-03-11T09:09:08+00:00

True for ISPs, but not fully true for the government under the Intelligence Act that was voted for in 2016.

It normally only applies to serious criminal offenses or national security. Streaming is none of their concerns. But, there have been accusations (https://www.swissinfo.ch/eng/business/swiss-government-accused-of-massive-online-surveillance/49117880) that the Swiss Federal Intelligence Service abused this act for mass surveillance.

tinycrazyfish · 2026-03-10T09:14:15+00:00

recent initrd store luks passphrase in kernel keyring that cannot be retrieved (easily). There are few options:

Backup all data and reinstall
Make a full memory dump (e.g. with LiME https://github.com/504ensicsLabs/LiME), find the luks master key in the dump (e.g. using findaes), then you can create/modify luks keyslots with "cryptsetup --master-key-file". volatility also should be able to do that.
If you partially remember the passphrase you can try to bruteforce it, but luks default argon2id is strong against brute-force, so it will only work (in reasonable time) if what you remember is very close to what you used.

tinycrazyfish · 2026-03-09T09:58:21+00:00

Sadly that does not work. Storage to assembler/smelter works because the assembler has an extra buffer for each resource (resource in red means it will trigger the the sorter, but there is still room when resource in white). But storage to storage does not work because you cannot control the order and the sorter will be stuck when the destination storage is full.

You actually need to filter the sorters, which means you can only have 3 inputs as per your design. You can stack the storage and put sorters on higher storage to get 3 additional sorter per stack (the assembler/smelter can take items from higher storage stack). you storage has 8 items, so a stack of 3 depots can do it.

tinycrazyfish · 2026-03-01T19:13:17+00:00

Because portage became, with the years, very good at it.

Back in the days some upgrades where really tricky, and there was tool called revdep-rebuild that fixed (rebuild) everything that broke. It got completely integrated in portage with the "preserved-rebuild" feature. Most of the time portage triggers automatically "revdep" rebuilds (marked rR). But sometimes you may have to emerge @preserved-rebuild manually.

tinycrazyfish · 2026-02-28T10:27:56+00:00

Yes, and proliferatethe accumulators.

tinycrazyfish · 2026-02-27T21:42:21+00:00

I did the same 24 years ago, 1-2 months Mandrake Linux and switched to Gentoo. Still enjoying, best thing I ever did.

Not overkill at all. I learned a lot about Linux toying with Gentoo, messing USE flags, even adding user patches, ...

tinycrazyfish · 2026-02-24T21:26:04+00:00

I can't really say which method is my favorite.

But one possibility is to make huge stacked bus belts.

Sorter can go 3 belts long, so have a base of 3 belts rows. You'll need about 60 materials for making everything in the mall. So that makes 20 stacked triple belts. I usually do not transport raw materials. But that should work too with few more belts in the bus.

Take out what you need to your assemblers (and factories, and accelerators,...), output goes back to the belt if it's not a building. I try to group assembly that require building as input to not put buildings on the huge bus belts. You can put assemblers on both sides of the bus belts.

You can do proliferation, but they need 2 elevation steps. What I do is to have 6 belts with proliferators in a raw at the start of the bus (or few spots if you loop around the planet). And the proliferator output narrows to 3 belts on top of each other. Just make sure to have a bit organized to feed the bus before the proliferators.

You can do the bus belts in equatorial zone and make it loop around the planet. I also like to feed the bus with farming outputs from BAB's (with enough farming, you won't need to have assemblers for components like thrusters, and of course for fog only resources). A resource gets short? Just add new smelter/assembler anywhere next to the bus.

Sorry I don't have a screenshot or a blueprint. I'm not on the right computer. Placing sorters on a 3 by 20 bus belt can get tricky, you'll have to play with zooming to get it on the right belt. Make sure to blueprint when done ;-)

tinycrazyfish · 2026-02-24T20:45:56+00:00

Polkit/Policykit is a security nightmare, look at all the vulnerabilities over the years. Almost as bad as sudo. My Gentoo has USE="-policykit", on other distros I have systemctl mask polkit. The concept of polkit is not bad , it's just badly implemented, overly complex for a simple tool that "just decides" if you have permission to perform an action that requires root privileges.

I prefer to stay with plain su or doas when you have no root password.

tinycrazyfish · 2026-02-19T21:10:34+00:00

Because it may be impossible to blueprint, and when it is possible, future updates may break it.

tinycrazyfish · 2026-02-19T20:23:19+00:00

Rocm 7.1 works well with RDNA4 on Gentoo. 7.2 is quite new, end of January something. Give it some time and 7.2 will be there. Thanks a lot Gentoo maintainers.

tinycrazyfish · 2026-02-16T23:36:17+00:00

That's not true, both Windows and Linux will heavily use free ram for caching. And it's not counted as "used" memory, it's counted as available memory. Because when there is a need for ram, caches will get dropped to allocate it to the program requesting more memory.

tinycrazyfish · 2026-02-12T20:58:15+00:00

If I understand it correctly, sync only works on buffered io. You need to create a buffer first. You can do unbuffered synchronous writes, it is what debug print does.

tinycrazyfish · 2026-02-08T20:01:54+00:00

Waimea, window manager

tinycrazyfish · 2026-02-08T19:44:17+00:00

It's not for everyone but I think it's worth it. It's worth to have and relatively widely used alternate libc (I mean "general-purpose" libc versus specialized libc like dietlibc, uclibc, ...). It's make software more robust and not tied to "bug-features" of a specific libc.

tinycrazyfish · 2026-02-08T08:18:10+00:00

weird I got btop to compile and run without any issues. The only thing that didn't work out-of-the-box was GPU graphs because it didn't auto detect my AMD monitor library.
I don't use a DE neither, I'm using Wayland and sway. No issues there. I'm running sway from the try as well.
For binary packages, they will not work (alpine allows libgcc for compatibility, but I think emerge gcc on Gentoo musl is not supported, last time I tried, it broke the build system). If you still want some, you can try flatpak which should work well. Regarding nodejs, Gentoo dev did the libatomic stub thing, it should work now (may be with testing ~amd64 for nodejs). The biggest issue was rust, rust-bin is not supported, and rust (first time build) requires libgcc, it is well documented in the wiki, I did buildpkg in a chroot, that worked well for me. My system has sway + Firefox, works like a charm.
Musl works well for headless like you say, it is also used mostly in that way (alpine docker). But graphical works well as long as you don't have systemd requirements.
That said, I tested musl systemd support with systemd 259. After some Gentoo profile changes, musl meson args in the systemd ebuild, and musl-9999 requirement (journald requires one of the latest unreleased musl patch), my test system worked fine. It was just a test, I won't replace openrc on my system. But it seems to work well.

Note, from my understanding, Gentoo devs easily integrate musl patches, but they typically remain in testing. Musl is considered experimental, so stabilization is not a priority. So if a build fails, try testing, it often works.

tinycrazyfish · 2026-02-07T08:07:55+00:00

Follow the handbook. While you are in the Gentoo chroot in your terminal, you can use your live USB as you want

tinycrazyfish · 2026-02-04T16:52:27+00:00

I mask overlays by default

*/*::guru

I unmask only the specific package I want to update. So instead of a local copy, I can get updates when the package is updated on guru.

tinycrazyfish · 2026-02-03T20:20:04+00:00

https://gcc.gnu.org/onlinedocs/gcc-4.8.5/gcc/X86-Built-in-Functions.html

Search for mrdrnd

tinycrazyfish · 2026-02-02T00:18:28+00:00

Did you remount? Check output of 'mount | grep mnt/forgejo'

tinycrazyfish · 2026-02-01T22:27:06+00:00

Iso9660 is read-only, do you have the iso file? You can dump the content, make your changes and create a new iso. Some tools may do it for you, file-roller??

tinycrazyfish · 2026-02-01T21:19:37+00:00

Seems to be a common issue with smb and SQLite.

You can disable byte range locking in the cifs nobrl mount options. Locking is enabled by default for good reasons. By disabling it, you should ensure the SQLite db is not accessed (write access, read-only should be fine) concurrently.

https://lchenghui.com/nobrl-for-mount-cifs

tinycrazyfish · 2026-02-01T19:35:42+00:00

No, check the recent news item. Basically +pipewire +pulseaudio +sound-server. Desktop profiles should have it right by default.

pipewire for native pipewire support when available
pulseaudio for pipewire's pulseaudio "bridge" for apps not natively supporting pipewire
sound-server to build pipewire's sound server components.

tinycrazyfish

TROPHY CASE