https://mricher.fr/ Recent content on Maximilien Richer Hugo -- gohugo.io Sun, 12 Dec 2021 17:34:15 +0100 https://mricher.fr/post/amd-memory-encryption/ Sun, 12 Dec 2021 17:34:15 +0100 https://mricher.fr/post/amd-memory-encryption/ There is a saying in security that it is difficult to secure a system if the attacker is able to tinker with hardware itself. On the server side, most of those issues have been put away by locking down said hardware in reasonably secured locations. But on the client side, those solutions are not possible. Phones vs. PCs Phones, as tightly integrated pieces of equipment with SoC and soldered components, were the first to benefit, by default, from storage encryption and integrated secure platforms. https://mricher.fr/post/ipv6-the-summary/ Sat, 12 Dec 2020 08:52:55 +0200 https://mricher.fr/post/ipv6-the-summary/ Here we go. I tried to make it short, but obviously failed. IPv6 is a complicated topic, and this article was for me a memory dump, and the end result ended up not being really a content suitable for beginner. But if you have a minimal background you should be able to make it up using the links. DISCLAIMER This is how I wished somebody had explained IPv6 to my younger self. https://mricher.fr/post/2020-pc-workstation/ Sun, 06 Dec 2020 13:25:15 +0100 https://mricher.fr/post/2020-pc-workstation/ Just a snapshot of this year hardware changes. After 8 years of good service, I replaced my workstation this winter. Previous workstation (2012) Motherboard: Asus P8Z77-V CPU: Intel i5-3570K (4c4t, 3.5Ghz o.c. to 4.3Ghz) CPU Cooler: Noctua NH-U12S tower radiator RAM: 8GB (2x4GB) DDR3 @ 1600Mhz GPU: AMD HD7870 (Asus, death by artifacts) Case: Antec P280 (large tower) Storage: 120GB SSD and 2TB HDD PSU: 650W 80+ Gold from Corsair with 10y warranty Screen: Two Samsung 1200p, 24" PLS panels. https://mricher.fr/post/terraform-as-fast-as-possible/ Fri, 13 Nov 2020 19:28:40 +0100 https://mricher.fr/post/terraform-as-fast-as-possible/ Terraform is a cloud infrastructure management tools from Hashicorp that can help you manage: IaaS VMs on hypervisors or cloud providers, as well as virtual networks PaaS think Heroku-like deployement solutions, docker… SaaS to some extend, like creating a repository in a VCS Terraform is separated into 3 products: Terraform CLI the actual tool Terraform Enterprise a licensed packaged edition with all you need to operate as a Terraform Terraform Cloud a SaaS offering of TF Enterprise We will focus on the CLI tool. https://mricher.fr/post/freebsd-opnsense-grow-partition/ Sat, 03 Oct 2020 21:45:11 +0200 https://mricher.fr/post/freebsd-opnsense-grow-partition/ I was playing with a small OPNsense VM when, during a major upgrade, the disk was suddenly full. If you ever create a OPNsense VM, here are the spec you should set : 2 vCPU 1GB RAM 5GB disk Boot is BIOS/MBR, in my case the disk was emulated SCSI. The network interface can use virtio. Commands brief Resize the disk on the hypervisor side, then reboot the VM or use camcontrol rescan all to refresh the SCSI bus (untested). https://mricher.fr/about/ Sun, 14 Jun 2020 23:33:05 +0100 https://mricher.fr/about/ To be written https://mricher.fr/post/move-files-while-keeping-attributes/ Sat, 13 Jun 2020 20:16:58 +0200 https://mricher.fr/post/move-files-while-keeping-attributes/ This afternoon I wanted to move some files between two folders, on two different filesystems. You can read a lot of thing about mv and attributes preservation, and people seems to imply that mv can change them upon action. But (at least in my case on a desktop Fedora), it does seems to preserve attributes (owner, group, permissions, creation time and modification time) in any cases (it may not be if you use some kind of reduced flavor like busybox or an other Unix like BSD). https://mricher.fr/post/boot-from-an-efi-shell/ Fri, 22 May 2020 23:43:30 +0200 https://mricher.fr/post/boot-from-an-efi-shell/ Today, as I was booting up some old VMs on my PVE cluster, this occurred: The error reads BdsDxe: failed to load Boot0001 "UEFI QEMU QEMU HARDDISK" from PciRoot(0x0/Pci(0x1E,0x0)/Pci(0x1,0x0)/Pci(0x5,0x0)/Scsi(0x0,0x0): Not Found. The VM then proceed to try to boot using PXE, fails, and eventually drop into an EFI shell: This particular VM is configured to boot using a VirtIO SCSI controller. The error was likely prompted by a change in the PCI bus or storage (virtual) card topology (1). https://mricher.fr/post/fedora32-wireguard-switch-to-kernel-module/ Wed, 20 May 2020 09:53:28 +0200 https://mricher.fr/post/fedora32-wireguard-switch-to-kernel-module/ In last December (2019), wireguard was finally merged in the kernel 5.6.x branch. Now 5.6 is live on Fedora 32 and it is finally time to ditch the DKMS module and COPR repository to switch to the in-kernel implementation. dnf remove wireguard-dkms rm /etc/yum.repos.d/_copr_jdoss-wireguard.repo dnf update --refresh dnf distro-sync wireguard-tools # if it was installed dnf install wireguard-tools # otherwise Largely inspired by Chris Siebenmann’s post. Go read his blog! https://mricher.fr/post/fedora32-wallpaper-accepted/ Sun, 17 May 2020 23:19:33 +0200 https://mricher.fr/post/fedora32-wallpaper-accepted/ My submission - a picture I took in Japan in 2017 named “Old Wood” - ranked 16th in the fedora 2020 wallpaper election. Apparently I made it, just above the cut. You can browse all of this year submissions here. As I’m more of a technical than a creative person, I kind of strikes me that my first contribution to my daily-driver distro is a wallpaper and not some kind of patch! https://mricher.fr/post/scaleway-kapsule-howto-ingress-nginx-cert-manager/ Mon, 04 May 2020 22:08:12 +0200 https://mricher.fr/post/scaleway-kapsule-howto-ingress-nginx-cert-manager/ Still a bit unfinished, waiting for review Ingress Nginx An ingress implementation build over Nginx. Documentation Cert Manager A native Kubernetes certificate management controller. Documentation HowTo Prerequisites A Kapsule Kubernetes cluster deployed with ingress-nginx. Alternatively a vanilla kubernetes cluster with public IPs nodes. You can check if your nodes IPs with kubectl get nodes -o wide: % kc get nodes -o wide NAME VERSION INTERNAL-IP EXTERNAL-IP scw-k8s-clever-wright-234d10 1.18.2 10. https://mricher.fr/post/scaleway-kapsule-overview/ Mon, 04 May 2020 20:05:30 +0200 https://mricher.fr/post/scaleway-kapsule-overview/ Kapsule is the Managed Kubernetes distribution of Scaleway (formerly Online Labs), a french cloud provider akin to Digital Ocean. This article is an architecture review of the technical and design choice that were made. It goes fast and try to shred some light on the major intresting points skipping the basic stuff. TLDR; If you are only intrested by the technical part, jump to the end Provisionning Cluster are provisionned though the Scaleway web console or api. https://mricher.fr/post/virtualization-guest-agent/ Mon, 06 Apr 2020 22:22:40 +0200 https://mricher.fr/post/virtualization-guest-agent/ This is just a quick memo to list plateform gest addtitions and the way to get them installed. What are guest-additions? Guest Additions are helper daemon running on virtualized guests, enabling extra features such as: information exchange between the host and the guest (eg. IP addresses, filesytem space) allow the host to execute some command in the guest (clean-non-ACPI shutdown, IO freeze for backup, request to swap to free host memory) improved hardware support, usually with better graphic/storage/network drivers for virtualized hardware Packages (in apt and yum) for some hypervisor hosts and Linux guest Hypervisor Guest package Reference VMware vSphere/ESXi open-vm-tools https://github. https://mricher.fr/post/all-php-modules-for-alpine/ Sat, 14 Mar 2020 10:34:15 +0100 https://mricher.fr/post/all-php-modules-for-alpine/ If for some reason you need the list of all PHP modules available on Alpine linux (because a nasty application isn’t clear about what it want for example). apk update && apk add php7-bcmath php7-bz2 php7-calendar php7-cgi php7-common php7-ctype php7-curl php7-dba php7-dbg php7-dev php7-doc php7-dom php7-embed php7-enchant php7-exif php7-fileinfo php7-fpm php7-ftp php7-gd php7-gettext php7-gmp php7-iconv php7-imap php7-intl php7-json php7-ldap php7-litespeed php7-mbstring php7-mysqli php7-mysqlnd php7-odbc php7-opcache php7-openssl php7-pcntl php7-pdo php7-pdo_dblib php7-pdo_mysql php7-pdo_odbc php7-pdo_pgsql php7-pdo_sqlite php7-pear php7-pgsql php7-phar php7-phpdbg php7-posix php7-pspell php7-recode php7-session php7-shmop php7-simplexml php7-snmp php7-soap php7-sockets php7-sodium php7-sqlite3 php7-static php7-sysvmsg php7-sysvsem php7-sysvshm php7-tidy php7-tokenizer php7-wddx php7-xml php7-xmlreader php7-xmlrpc php7-xmlwriter php7-xsl php7-zip php7-pecl-xhprof php7-pecl-xhprof-assets php7-pecl-uuid php7-pecl-protobuf php7-pecl-xdebug php7-pecl-memcached php7-pecl-oauth php7-pecl-ssh2 php7-pecl-imagick php7-pecl-imagick-dev php7-pecl-vips php7-pecl-ast php7-pecl-event php7-pecl-redis php7-phalcon php7-pecl-apcu php7-pecl-timezonedb php7-pecl-mcrypt php7-pecl-mailparse php7-pecl-msgpack php7-pecl-yaml php7-pecl-zmq php7-brotli php7-pecl-amqp php7-pecl-couchbase php7-pecl-gmagick php7-pecl-igbinary php7-pecl-lzf You can get details and look for specific versions on the Alpine packages website. https://mricher.fr/post/fedora32-wallpaper-contest/ Fri, 13 Mar 2020 22:54:38 +0100 https://mricher.fr/post/fedora32-wallpaper-contest/ Here’s my submission for the supplemental wallpapers of Fedora 32: Old Wood (Kyoto Gion district, 2017) High-resolution (3840x2400, 4K) available here. You can fetch last Fedora versions wallpapers with sudo dnf install f31-backgrounds-extras-gnome, and browse election results here. Edit: my submission got accepted, you can get it with sudo dnf install f32-backgrounds-extras-gnome https://mricher.fr/post/hugo-multilingual-mod/ Sat, 23 Nov 2019 20:36:01 +0100 https://mricher.fr/post/hugo-multilingual-mod/ After a quite long pause, I’ve took a second chance at writing here. I wasn’t quite satisfied with the old setup, so I refreshed the theme, now using Hugo Cactus, and the multilingual mode to split english and french. This apparently broke a lot of things, like tags and the RSS feed. I’ll try to fix them later. I really like the layout of Vincent Bernat’s blog (use the Hyde python framework), I’ll try to push Hugo into something similar. https://mricher.fr/post/move-to-ssd/ Tue, 03 May 2016 12:57:58 +0200 https://mricher.fr/post/move-to-ssd/ Context: Almost 3 years ago, I bought a Latitude E7440 laptop from Dell to replace my old eeePC. As shipped, it featured a 500Go HDD and an empty mSATA port that I quickly filled with a SSD. Back in the time, to avoid EFI issues, I dedicated the full SSD to Windows. But now that I almost only use Fedora, I looked into how to migrate my linux partition from the HDD to the SSD. https://mricher.fr/post/hugo-flow/ Tue, 29 Mar 2016 10:57:34 +0200 https://mricher.fr/post/hugo-flow/ This one will be in english, french translation will come later This log is supported by Hugo, a free and open-source static site generator similar to Jekyll. Hugo is pretty straightforward to use: $ hugo 0 of 1 draft rendered 0 future content 2 pages created 1 paginator pages created 0 tags created 0 categories created in 27 ms …and well-documented. Basically to publish things you need to edit the markdown files on the content folder on the server and run hugo to refresh the public folder served by nginx.