Morten Linderud

This is just a short note on my blog that I have resigned from Arch Linux a package maintainer, developer and security team.

For my personal home infrastructure I’ve been using step-ca to have an internal ACME server for issuing TLS certificates for my .home.arpa domain.

While starting this post I realized I have been maintaining personal infrastructure for over a decade!

After Gandi was bought up and started taking extortion level prices for their domains I’ve been looking for an excuse to migrate registrar.

April is usualy tax season for most people in Norway, and as I got some “money back on the skætt” I wound up purchasing an OpenWrt One to replace my 13-14 year old Asus router.

The past year I have been hacking around on tools utilizing TPMs, and one of the features I have been interested to learn more about is the device attestation features.

Okay, sorry for the clickbait.

Chromecast is one of those devices I just generally use a lot.

After writing age-plugin-tpm a friend of mine at the hackerspace was super excited to finally have easy file encryption with TPM sealed keys, all without having to rely on gnupg.

The past year I have been trying to learn more about the Trusted Platform Module (TPM).

I have lately been trying to learn more about the Trusted Platform Module (TPM) as they are capable of key creation and sealing secrets in a secure manner.

I stopped writing monthly status updates in April 2021, so I thought it was time for a summary of stuff I have been working on.

I have spent a fair amount of time hacking on debug packages the past two years.

Lets prefix this with: I really love Transparency Logs!

Valve was kind enough to send Steam Deck devkits to Arch Linux maintainers and developers which gave us an opportunity to mess around with the device.

A few months ago I wrote up some code for mkinitcpio which teaches it how to create UEFI executables utilizing the systemd stub.

Yo!

Yoooo!

One of the few things I have been excited about the past year is usable cryptography.

Yo!

And January is over!

End of the year and third blog post!

Arch Linux got kubernetes packaged into the [community] repository the past week with the hard work of David Runge.

Second month of doing these posts.

The Problem Someone enters an IRC support channel and proclaims their dovecot server has been hacked and a non existing user sends spam email from their server.

I wanted to start writing these for myself as I have been reading quite a few monthly resports from Chris Lamb and other Debian contributors.

Secure boot tooling is terrible, can we do better?

With the release of 3.20, LXD was included into the community repository of Arch Linux in January, and has currently been sitting there happily for the past months.

Arch Linux has been involved with the reproducible builds efforts since 2016.

What is Mailpile?

So, with the recent hipster attitude of posting a “State of *” every year, I thought i’d try and do it for something I have been contributing to for the past 6 months, Hy.