Random Ramblings

I made another minor release with several enhancements: handling non-Debian origin vulnerabilities, improving data caching, and sharing the cache between the debvulns CLI and the exporter.

Following up on my previous post, I am releasing debvulns-exporter, a Prometheus exporter for tracking Debian system vulnerabilities.

Following up on my previous post, I have released the debvulns CLI.

I finally carved out some time today to prepare and release debsecan-mcp v0.1.2 to PyPI.

The Shift in Software Consumption Historically, I have been a "distribution-first" user.

What led to this experiment?

Since Generative AI is currently the most popular topic, I wanted to get my hands dirty and learn something new.

I haven't been blogging as much as I used to.

In my previous post on enabling SecureBoot, I mentioned that one pending improvement was signing the systemd-boot EFI binary with my keys on every upgrade.

In my previous post, I mentioned that Lockdown mode is activated when Secure Boot is enabled.

Note This post is a continuation of my previous article on enabling the Unified Kernel Image (UKI) on Debian.

Note These steps may not work on your system if you are using the default Debian installation.

Recently, I got a new laptop and had to set it up so I could start using it.

I use a LUKS-encrypted USB stick to store my GPG and SSH keys, which acts as a backup and portable key setup when working on different laptops.

After holding the domain copyninja.info for almost 15 years, I finally let it expire and bought a new domain, copyninja.in.

Introduction The ZRAM module in the Linux kernel creates a memory-backed block device that stores its content in a compressed format.

I had bought a Thinkpad E470 laptop back in 2018 which was lying unused for quite some time.

These 2 are the use cases I came across for expanding root file system.

In my previous post I talked about SPAKE2 protocol and Ed25519 Curve group.

In my previous post I talked about finite field and how it helps in Elliptic Curve Cryptography.

In my previous post I talked about elliptic curve basics and how the operations are done on elliptic curves, including the algebraic representation which is needed for computers.

TLDR; this post is going to be too long and mostly theoretical.

This or the series of SPAKE2 related posts are inspired from Jonathan Lange's series on SPAKE2 when he ported it to Haskell, which is also the reference I used for my implementation in Golang.

I was recently experimenting with hosting a private registry on an internal LAN network for publishing docker private images.

When you have a distributed team working on a project, you need to make sure that every one uses similar development environment.

IRC is a communication mode (technically a communication protocol) used by many Free Software projects for communication and collaboration.

I've been using personal email setup for quite long and have not documented it anywhere.

I had to write a small Python application to listen for some broadcast message and process the message.

I recently raised a pull request on zfec for converting its python packaging from pure setup.py to pbr based.

In my previous post I talked about using subprocess crate to extract beginning and ending year from git repository for generating debian/copyright file.

In my previous post I used Exec::shell function from subprocess crate and passed it string generated by interpolating --author argument.

I had to extract copyright information from the git repository of the crate upstream.

Fuzzing is method of producing random malformed inputs for a software and observe the software behavior.

It's been a long time I did not write any new blog posts, and finally I got something which is interesting enough for a new post and so here it is.

After a long ~5 years (from 2011) journey with approx I finally wanted to switch to something new like apt-cacher-ng.

I was reviewing changes for indic-trans as part of GSoC 2016.

I've been using bridge networking and tap networking for containers and virtual machines on my system.

In my previous post on systemd-nspawn I mentioned, I was unclear on how to persist resource control options for a container.

In the previous post I had mentioned that I didn't figure out how to add dependency on mount points so as to achieve correct ordering of mount points.

Just to give a brief recap of why I'm writing this post, I've to describe a brief encounter I had with systemd which rendered my system unbootable.

Problem I've lxc container running distcc daemon and I would like to forward the distcc traffic coming to my host system to container.

I've been trying to run containers using systemd-nspawn for quite some time.

Now a days I'm more and more attracted towards Plan9, an Operating System meant to be the successor of UNIX and created by same people who created original UNIX.

LXC - Linux Containers allows us to run multiple isolated Linux system under same control host.

Recently I had to reinstall a system at office with Debian Wheezy and I thought I should use this opportunity to experiment with LVM.

I use a laptop with Atheros wifi card with ath9k driver.

The heading might be ambiguous, but I couldn't figure out better heading so let me start by explaining what I'm trying to solve here.

After reading Julien Danjou's I found out WSME (Web Service Made Easy) a Python framework which allows us to easily create Web Services in Python.

Recently I've been seeing lot of posts about DNSSEC on Internet and I thought I should configure my domain to be secured by DNSSEC. copyninja.info domain is now secured with DNSSEC you can verify this by DNSSEC analyzer by Verisign and DNSViz online tool…

url_for is normally used to avoid hard coding of URL in Flask based webapps.