[2021-11-15T00:47:35Z] hey how am I exactly supposed to install kiss linux with cryptsetup? I know I will need to use tinyramfs but sadly I couldn’t find anything that documents that [2021-11-15T00:48:24Z] I mostly just followed what I do on arch [2021-11-15T00:48:29Z] and used dracut [2021-11-15T00:49:01Z] wait no, I did handroll one eventually I think [2021-11-15T00:49:03Z] lemme find it [2021-11-15T00:50:09Z] I should encrypt the drive and then start compiling everything on the pseudo drive right? [2021-11-15T00:50:42Z] well, you should install onto a encrypted drive, yes [2021-11-15T00:52:22Z] ok and thats the thing, I am not really sure how to do that because first I need to add the community repo which has cryptsetup and then I need to build cryptsetup but then how am I supposed to encrypt the drive [2021-11-15T00:53:39Z] I installed from an arch system, so I had everything I needed [2021-11-15T00:53:39Z] lol [2021-11-15T00:53:59Z] will cryptsetup handle that qhen I encrypt the drive? [2021-11-15T00:54:35Z] anyway, there's the important parts of my initramfs https://bpa.st/WQVA [2021-11-15T00:54:50Z] you just package it as the init and all the tools it uses and it's good [2021-11-15T00:55:05Z] * it uses into the initramfs and it's [2021-11-15T00:55:16Z] adwu: I didn't get it [2021-11-15T00:56:18Z] wtf [2021-11-15T00:57:35Z] weird anyway how can I package it as the init [2021-11-15T00:57:55Z] you can read up on how to make a initramfs [2021-11-15T00:59:28Z] tinyramfs has no documentation (at least in the github) [2021-11-15T00:59:32Z] e.g. here https://wiki.gentoo.org/wiki/Custom_Initramfs [2021-11-15T01:01:29Z] oh I get it, this is more minimal as well right? [2021-11-15T01:01:50Z] yeah [2021-11-15T01:01:55Z] initramfs is pretty simple [2021-11-15T01:02:07Z] just whatever is needed to mount your root [2021-11-15T01:02:23Z] I sometimes forget that gentoo wiki has everything [2021-11-15T01:03:41Z] thanks man [2021-11-15T01:03:56Z] theoretically you can just write a shell script that does the commands you would normally do to unlock and mount your disk and embed that in the kernel :v [2021-11-15T01:04:18Z] yep, what's what I'm doing [2021-11-15T01:04:28Z] kernel efistub [2021-11-15T01:04:54Z] oh that's what the wiki page is about! nice [2021-11-15T01:04:56Z] incredible [2021-11-15T01:05:08Z] slackware had a guide floating around for writing a small initramfs in C haha [2021-11-15T01:05:17Z] lol [2021-11-15T01:05:28Z] at that point just don't use a initramfs XD [2021-11-15T01:05:36Z] :v [2021-11-15T01:13:44Z] So, if I may ask... the old kisslinux repos are now active again [2021-11-15T01:13:57Z] Why still keep it split? [2021-11-15T01:14:16Z] I notice also that it's wayland vs x11 [2021-11-15T01:14:46Z] I saw a bit on the web about Dylan'a disappearance and I don't mean to pry [2021-11-15T01:14:57Z] That's not really what I'm asking [2021-11-15T01:27:32Z] there isn't a split [2021-11-15T01:28:03Z] kiss-community is now just maintaining a community repository which keeps to a similar style as the official repository [2021-11-15T01:28:19Z] it only keeps things which don't require X, libressl, etc. [2021-11-15T01:29:44Z] Hmm ok [2021-11-15T01:30:11Z] So you dudes ended up reconnecting with Dylan a bit? [2021-11-15T03:00:18Z] Hi [2021-11-15T03:01:08Z] Hi [2021-11-15T03:02:48Z] I just learned how to use macros in vim and it's so powerful [2021-11-15T03:05:41Z] Ah I've not looked into those yet [2021-11-15T03:06:04Z] basically it's just q [2021-11-15T03:06:09Z] do the shit you want [2021-11-15T03:06:13Z] press q again [2021-11-15T03:06:36Z] then whenever you hit \@ the macro will execute [2021-11-15T03:06:46Z] and you can do n\@ to do it n times [2021-11-15T03:07:03Z] so I prepended text to every other line across a thousand lines in less than two seconds. was nice [2021-11-15T03:07:29Z] That's pretty cool [2021-11-15T03:08:10Z] probably the most important feature that's missing in vi [2021-11-15T03:08:32Z] You mean original vi? [2021-11-15T03:08:40Z] Or busybox vi? [2021-11-15T03:08:41Z] unfortunately all my text manipulation work lead to a single, missing :. somewhere in over a thousand lines of text [2021-11-15T03:08:42Z] smdh [2021-11-15T03:08:58Z] Ouch. [2021-11-15T03:09:10Z] i think any vi [2021-11-15T03:09:16Z] Ah [2021-11-15T03:09:26Z] just have to find the line that isn't green but it hurts my eyes lmao [2021-11-15T03:10:17Z] Is there anything you can query for that comes to mind? [2021-11-15T03:11:36Z] wdym query for? [2021-11-15T03:12:03Z] In vim [2021-11-15T03:12:06Z] Press / [2021-11-15T03:12:13Z] Then type text to search [2021-11-15T03:12:38Z] oh, you were responding to dilyn [2021-11-15T03:12:40Z] query/search, whichever :) [2021-11-15T03:12:43Z] yeah [2021-11-15T03:12:50Z] no :\ [2021-11-15T03:13:00Z] Hrm [2021-11-15T03:13:01Z] every other line ends in :, every other other line doesn't. lol [2021-11-15T03:16:37Z] Search for three consecutive lines not ending with :. [2021-11-15T03:17:01Z] that was certainly an option [2021-11-15T03:17:10Z] I opted for nuking the section and redoing the work [2021-11-15T03:17:15Z] with a macro, took five seconds [2021-11-15T03:17:17Z] incredible [2021-11-15T03:17:32Z] took 5 seconds to execute the macro? [2021-11-15T03:17:43Z] or to set it up and then execute it? [2021-11-15T03:17:44Z] took four seconds to record the macro [2021-11-15T03:17:56Z] Heh coffee? [2021-11-15T03:18:18Z] was gonna say, 5 seconds is suspiciously slow... [2021-11-15T03:18:21Z] it's late and I'm prepping for a presentation the morning and I need to collect this data >=| should've made coffee... [2021-11-15T03:18:35Z] :> [2021-11-15T03:18:52Z] powerpoint? [2021-11-15T03:18:58Z] security related stuff [2021-11-15T03:18:59Z] Nooooo [2021-11-15T03:19:06Z] That doesn't exist anymore [2021-11-15T03:19:28Z] Neither PowerPoint nor security xD [2021-11-15T03:19:41Z] there are some scripts that probe some information I have to make use of, but it's hard to get the scripts to run because of how locked down the system is (RO filesystem); that fact alone isn't evidence enough that the system is secure, soooo here I am /shrug [2021-11-15T03:20:01Z] O [2021-11-15T03:20:21Z] What, squashfs / ? [2021-11-15T03:20:26Z] mmhmm [2021-11-15T03:20:39Z] Neat [2021-11-15T03:21:10Z] Is tmpfs + overlayfs permitted? [2021-11-15T03:21:15Z] so I have to add the contents of these files to a writeable space, and then bind-mount that writeable space over the read only section [2021-11-15T03:21:17Z] in this case yes [2021-11-15T03:21:52Z] Like, you can tmpfs, mount bind to lowerdir, mount overlayfs, chroot and run script [2021-11-15T03:22:13Z] yeah but I need to show it's feasible given the constraints of the system (snaps) [2021-11-15T03:22:26Z] snap eh [2021-11-15T03:22:59Z] yeah. in some ways (like this case), they're a prime example of choosing security so much it's inconvenient [2021-11-15T03:23:10Z] Heh [2021-11-15T03:23:14Z] i'm trying to prove it's secure and the only way to do that is abuse holes in security I made xD [2021-11-15T03:23:15Z] Well [2021-11-15T03:23:41Z] what does "proving it's secure" entail? [2021-11-15T03:24:06Z] showing that it checks a "large-enough" number of boxes under a CIS Benchmark audit [2021-11-15T03:24:35Z] ah, so basically as rigorous as a mathematical proof [2021-11-15T03:24:43Z] You mean https://snapcraft.io/ ? [2021-11-15T03:24:52Z] yes those snaps bujeddhazeus [2021-11-15T03:24:58Z] Ok [2021-11-15T03:25:10Z] I'm still old school... qemu [2021-11-15T03:25:12Z] noocsharp: less rigorous than maths but in a sense [2021-11-15T03:25:29Z] i was joking [2021-11-15T03:26:04Z] lmao [2021-11-15T03:26:13Z] CIS Benchmarks are literally just a PDF. for ubuntu, it's over 500 pages [2021-11-15T03:26:16Z] fucking absurd [2021-11-15T03:26:33Z] 100% CIS is basically an airgapped box that no user can access because no users exist [2021-11-15T03:27:59Z] Heh [2021-11-15T03:31:15Z] did you check that the software you're using to read the pdf doesn't have any vulnerabilities [2021-11-15T03:33:04Z] It's also a snap [2021-11-15T03:33:19Z] Perhaps [2021-11-15T03:33:48Z] xD [2021-11-15T03:34:07Z] my eyes are quite vulnerable so I'm using some *professional tools* (read: bash scripts) to do the testing [2021-11-15T03:36:07Z] should port them to sh [2021-11-15T03:38:42Z] in this case... probably wouldn't be too hard [2021-11-15T03:38:58Z] Heh [2021-11-15T03:39:24Z] `export -f` is bad mkay? [2021-11-15T03:48:58Z] `OpenSCAP Error: subtype 2 not supported` grrr [2021-11-15T05:36:47Z] building go projects is surprisingly difficult when you don't write go everyday :-/ [2021-11-15T05:41:41Z] or don't have internet [2021-11-15T05:44:58Z] ah, aur is my friend [2021-11-15T05:45:18Z] tleydxdy[m]: yeah, I can imagine. Everything seems to try to hit the internet [2021-11-15T05:54:41Z] actually seems quite tricky to make it install this thing and not download anything other than what's in `sources` [2021-11-15T06:24:20Z] huh, looks like most people who distribute any go packages of any complexity on kiss just distribute binaries. [2021-11-15T06:26:35Z] I don't think it's possible to drop the network requirement easily [2021-11-15T06:26:46Z] U need to vendor everything imto a folder [2021-11-15T06:26:54Z] Then make go use that [2021-11-15T06:27:10Z] But "modern" projects pull in tons of shit [2021-11-15T06:27:14Z] Like 50-100 deps [2021-11-15T06:28:06Z] Check the dnscrypt-proxy package, it's dependences come bundled in the Tarball only [2021-11-15T06:29:11Z] yeah.. I was going to pull in this colour version of `cat` called ccat. And it pulls in like 6 dependencies for a thing that's just some simple syntax highlighting. So now I'm thinking about just going with an old gnu program called source-highlight that does the same thing that was written in C (C++?) [2021-11-15T06:29:16Z] so much simpler [2021-11-15T06:31:15Z] I just pipe stuff into my text editor [2021-11-15T06:31:23Z] does the same thing [2021-11-15T06:31:43Z] And will have searching capabilities too [2021-11-15T06:34:09Z] oh that's smart [2021-11-15T06:36:07Z] ls [2021-11-15T06:52:27Z] cd /var/db/kiss/community/community/ [2021-11-15T06:52:35Z] grr. gotta stop doing that [2021-11-15T06:53:18Z] lol, my irc client even tab completed that for me for some reason [2021-11-15T06:53:56Z] Yep :> [2021-11-15T06:54:16Z] irssi does that [2021-11-15T06:54:54Z] I guess that could be useful if I was asking about a path or something [2021-11-15T06:55:23Z] Yep. Dangerous too [2021-11-15T06:55:44Z] Never irc in your work vm [2021-11-15T06:56:09Z] true enough. Don't think I ever have, but now I'll be careful not to start [2021-11-15T06:56:16Z] Actually, nowadays I don't even directly use linux for irc... [2021-11-15T06:56:37Z] do you just use a web browser or something? [2021-11-15T06:56:47Z] Phone [2021-11-15T06:57:03Z] Hence the capital letters [2021-11-15T06:57:03Z] ah interesting. Never even thought about using it on my phone [2021-11-15T06:57:23Z] Well actually I'm bridged onto libera via matrix [2021-11-15T06:57:24Z] And here I thought you were just a stickler for grammar [2021-11-15T06:57:32Z] Haha [2021-11-15T06:57:35Z] Both [2021-11-15T06:57:52Z] I can respect that. [2021-11-15T06:58:34Z] Although, forget capitals on irc when typing [2021-11-15T06:58:52Z] Too much of a waste of time [2021-11-15T06:59:47Z] I tend to too. But only the first letter of a line for some reason. Not sure how I picked up that habit [2021-11-15T07:00:39Z] Heh [2021-11-15T07:01:42Z] Probably best to practice for if ever I feel like it would be worth writing a novel or whatever [2021-11-15T07:03:28Z] I'm betting you could write a regex to fix that right up. Don't worry too much [2021-11-15T07:03:47Z] True [2021-11-15T07:04:08Z] After all, it would be written in vim [2021-11-15T07:04:54Z] Or if, one day, you feel really brave: vis. [2021-11-15T07:05:47Z] busybox vi if you're braver [2021-11-15T07:06:19Z] Has anyone used it ? It doesn't even redraw properly [2021-11-15T07:06:21Z] I've been using that for a few days as I play with kiss. Close to biting the bullet for vim though [2021-11-15T07:06:34Z] been fine for me, but it's only been quick edits [2021-11-15T07:06:36Z] Heh plan9 eh. Is haiku shipping with vis? [2021-11-15T07:06:50Z] testuser: I do [2021-11-15T07:06:54Z] Sometimes [2021-11-15T07:07:37Z] I haven't actually used vis. I've only read about it. But it seems interesting [2021-11-15T07:08:10Z] Heh [2021-11-15T07:08:10Z] used to be an Emacs guy [2021-11-15T07:09:36Z] Oh wait. Haiku is based on BE os [2021-11-15T07:10:27Z] yeah, vis I think is for your modern standard os's. But it's a combination of vim and sam from plan9 [2021-11-15T07:11:16Z] *OSes [2021-11-15T07:11:20Z] Ah I see [2021-11-15T11:34:13Z] I've been using vis for a while, instead of vim. It's nice. [2021-11-15T14:37:12Z] testuser[m]: busybox vi isn't that bad tbh [2021-11-15T14:37:38Z] But then again, I don't mainly use vi [2021-11-15T14:38:34Z] I prefer neatvi out of all the vi implementations I've used, and neatvi's biggest problem is that it never redraws automatically [2021-11-15T14:39:41Z] You have to do it manually when you spawn a new window in a tiling wm or something like that [2021-11-15T14:40:35Z] couldn't that be fixed trivially [2021-11-15T14:41:27Z] Probably, but since I use it for very trivial purposes, I don't mind it that much [2021-11-15T14:42:01Z] Pressing Ctrl+L every once in a while is easier than editing its source code [2021-11-15T14:43:35Z] Also, I don't think neatvi has a window event loop that catches things like resizes [2021-11-15T14:46:15Z] how else would it poll input then, without loop [2021-11-15T14:46:24Z] kyx0r's fork seems to have it , atleast [2021-11-15T14:47:32Z] I think it loops for input rather than window events [2021-11-15T14:47:50Z] I'll check kyx0r's fork [2021-11-15T14:48:37Z] yeah i mean that only [2021-11-15T14:48:47Z] it could have a signal handler that just sets a variable [2021-11-15T14:48:50Z] and the loop checks that [2021-11-15T14:49:03Z] why a build.sh instead of Makefile [2021-11-15T14:49:07Z] * cem shakes head [2021-11-15T14:50:06Z] yeah, it doesn't have the same issue with upstream [2021-11-15T14:50:09Z] neat! [2021-11-15T14:51:20Z] Ah, it seems upstream also fixed this issue [2021-11-15T14:51:29Z] It's just not released yet [2021-11-15T20:17:12Z] yay with git 2.34, commits can now be signed with OpenSSH! [2021-11-15T20:17:20Z] always happy to see less dependence on GNU [2021-11-15T21:40:49Z] signify when [2021-11-15T22:01:11Z] cem: the build.sh was to keep to POSIX while getting the #defines right across *nixes [2021-11-15T22:03:06Z] personally i'd have used an #ifdef BSD in the code but idk