From ecf34f59f82abf8d3e3a0d2086898bd965fc0b2e Mon Sep 17 00:00:00 2001 From: Robert Pufky Date: Wed, 22 Sep 2021 13:31:23 -0700 Subject: [PATCH] Cutting 2021-09-22.0 Release. Remove Saltstack; add Ansible. Added: * Add Movie Studio encoding templates. * Add fix for failed to run vncproxy on pve. * Add note about fc-cache now generating .uuid files. * Add GPG agent forwarding for WSL2 and Linux machines. * Add CLI static DHCP configuration. * Add apt auto selection to docs. * Add 7 days to die administrative commands link. * Add git commands for creating repository tracked hooks. * Add disable for Asus Armoury Crate. * Add additional git merge instructions for backing out and generating log. * Add firefly baremetal setup instructions. * Add git stash notes. * Add crashplan LXC/KVM/Baremetal instructions. * Add Instructions for GPU passthru to LXC containers. * Add pve subscription removal service. * Add gitea troubleshooting information for timeouts and duplicate keys. * Add dropbear service. * Add ZFS sync send/recv commands with automation. * Add installing older game versions on Steam. * Add SSH blocked through wireguard network resolution. * Add wireguard-initramfs instructions. * Add PFX RSA public/private, certificate extraction instructions. * Add wireguard kernel debugging configuration. * Add ansible notes. * Add ansible auto-decrypt vault with security key scripts. * Add Movie Studio encoding templates. * Add fix for failed to run vncproxy on pve. * Add note about fc-cache now generating .uuid files. * Add GPG agent forwarding for WSL2 and Linux machines. * Add CLI static DHCP configuration. * Add apt auto selection to docs. Changed: * Correct links and formatting for gpg/ansible docs as well. * Update ZFS manaul disk replacement instructions. * Update for automatic partitioning, manual swap, locating devices/ZFS GUID. * Update PFX RSA cert extraction to single commands. * Update ZFS instructions with Encryption and dataset usage. * Update proxmox instructions for version 7. * Update PVE with GPU passthru instructions. Removed: * Remove saltstack configuration notes, add ansible configuration notes. Fixed: * Update pygments to 2.7.4 addressing CVE-2021-27291 * Update jinja, urllibs based on security advisories. --- RELEASE.md | 52 + .../zfs_incremental_snapshot | 139 + .../gpg-agent.conf | 13 + .../b6776082685e0b7b36237247aad145c3/gpg.conf | 61 + docs/apps/authy.html | 420 +- docs/apps/bash.html | 420 +- docs/apps/chrome.html | 420 +- docs/apps/git.html | 543 +- docs/apps/gpg/index.html | 422 +- .../apps/gpg/key-setup/export-to-yubikey.html | 420 +- docs/apps/gpg/key-setup/gpg-backup.html | 420 +- docs/apps/gpg/key-setup/gpg-cleanup.html | 420 +- docs/apps/gpg/key-setup/gpg-import.html | 420 +- docs/apps/gpg/key-setup/gpg-master.html | 428 +- docs/apps/gpg/key-setup/gpg-subkeys.html | 444 +- docs/apps/gpg/key-setup/index.html | 420 +- docs/apps/gpg/pre-requisites/index.html | 420 +- .../apps/gpg/pre-requisites/prep-ironkey.html | 420 +- .../gpg/pre-requisites/prep-live-usb.html | 420 +- .../apps/gpg/pre-requisites/prep-yubikey.html | 486 +- docs/apps/gpg/troubleshooting.html | 428 +- docs/apps/gpg/usage/debian.html | 2255 ++++++ docs/apps/gpg/usage/index.html | 424 +- docs/apps/gpg/usage/operations.html | 2181 ++++++ docs/apps/gpg/usage/windows-forward-gpg.html | 2266 ++++++ docs/apps/gpg/usage/windows.html | 490 +- docs/apps/movie-studio.html | 4775 +++++++++++++ docs/apps/mutt.html | 424 +- docs/apps/putty.html | 420 +- docs/apps/python-venv.html | 420 +- docs/apps/sublime-text/index.html | 420 +- docs/apps/taskwarrior.html | 420 +- docs/apps/vim.html | 424 +- .../ansible/commands.html | 2104 ++++++ .../ansible/gpg-vault.html | 2139 ++++++ .../ansible/index.html | 2104 ++++++ docs/containerization/docker/index.html | 420 +- docs/game/7days/index.html | 437 +- docs/game/conan/configuration.html | 420 +- docs/game/conan/index.html | 420 +- docs/game/conan/setup.html | 447 +- docs/game/conan/troubleshooting.html | 420 +- docs/glossary.html | 420 +- docs/icon-explanation.html | 420 +- docs/index.html | 420 +- docs/networking/netplan.html | 424 +- docs/networking/ubiquiti/edge-os.html | 479 +- .../example-vlan-network/core-switch.html | 420 +- .../example-vlan-network/edgerouter-vlan.html | 420 +- .../example-network-diagram.html | 420 +- .../ubiquiti/example-vlan-network/index.html | 420 +- .../migrate-controller-to-docker.html | 420 +- .../network-overview.html | 516 +- .../example-vlan-network/server-switch.html | 420 +- .../example-vlan-network/unifi-ap.html | 420 +- .../unifi-controller-vlan.html | 420 +- .../unifi-controller-wifi.html | 420 +- .../unifi-device-troubleshooting.html | 420 +- .../example-vlan-network/vlan-101.html | 424 +- .../example-vlan-network/wired-switch.html | 420 +- .../ubuntu/1804-server-base-install.html | 427 +- .../ubuntu/additional-fixes.html | 440 +- .../ubuntu/apt-auto-selections.html | 2148 ++++++ docs/operating-systems/ubuntu/index.html | 420 +- .../ubuntu/preseed/build-custom-iso.html | 424 +- .../ubuntu/preseed/create-preseed-file.html | 420 +- .../preseed/fully-automated-install.html | 420 +- .../ubuntu/preseed/grub-efi-boot-menu.html | 420 +- .../preseed/grub-non-efi-boot-menu.html | 420 +- .../ubuntu/preseed/index.html | 420 +- .../ubuntu/threadripper-2990wx.html | 472 +- .../ubuntu/vm-specific-configuration.html | 420 +- .../windows/10/1903/disable-account-sync.html | 639 +- .../windows/10/1903/disable-biometrics.html | 607 +- .../10/1903/disable-cortana-search.html | 1672 +++-- .../1903/disable-delivery-optimization.html | 633 +- .../10/1903/disable-error-reporting.html | 617 +- .../windows/10/1903/disable-explorer-ads.html | 745 +- .../10/1903/disable-game-broadcasting.html | 754 +- .../windows/10/1903/disable-onedrive.html | 688 +- .../windows/10/1903/disable-paging.html | 742 +- .../10/1903/disable-resource-exhaustion.html | 569 +- .../10/1903/disable-restore-points.html | 987 ++- .../windows/10/1903/disable-services.html | 505 +- .../windows/10/1903/disable-spotlight.html | 1302 ++-- .../windows/10/1903/disable-telemetry.html | 1509 ++-- .../10/1903/disable-update-notifications.html | 538 +- .../windows/10/1903/disable-wifi-sharing.html | 553 +- .../10/1903/disable-windows-defender.html | 2202 ++++-- .../disable-windows-store-promotions.html | 951 ++- .../windows/10/1903/index.html | 424 +- .../10/1903/meltdown-and-spectre-patch.html | 495 +- .../windows/10/1903/privacy/account-info.html | 716 +- .../10/1903/privacy/activity-history.html | 801 ++- .../10/1903/privacy/app-diagnostics.html | 700 +- .../windows/10/1903/privacy/app-list.html | 492 +- .../10/1903/privacy/background-apps.html | 1098 ++- .../windows/10/1903/privacy/calendar.html | 702 +- .../windows/10/1903/privacy/call-history.html | 716 +- .../windows/10/1903/privacy/camera.html | 767 +- .../windows/10/1903/privacy/contacts.html | 702 +- .../10/1903/privacy/diagnostics-feedback.html | 1439 ++-- .../windows/10/1903/privacy/documents.html | 564 +- .../windows/10/1903/privacy/email.html | 716 +- .../windows/10/1903/privacy/eye-tracker.html | 500 +- .../windows/10/1903/privacy/file-system.html | 564 +- .../windows/10/1903/privacy/general.html | 881 ++- .../windows/10/1903/privacy/index.html | 420 +- .../ink-and-typing-personalization.html | 522 +- .../windows/10/1903/privacy/location.html | 956 ++- .../windows/10/1903/privacy/manual.html | 420 +- .../windows/10/1903/privacy/messaging.html | 836 ++- .../windows/10/1903/privacy/microphone.html | 929 ++- .../windows/10/1903/privacy/motion.html | 566 +- .../10/1903/privacy/notifications.html | 772 +- .../10/1903/privacy/other-devices.html | 718 +- .../windows/10/1903/privacy/phone-calls.html | 639 +- .../windows/10/1903/privacy/pictures.html | 562 +- .../windows/10/1903/privacy/radios.html | 714 +- .../windows/10/1903/privacy/speech.html | 676 +- .../windows/10/1903/privacy/tasks.html | 709 +- .../windows/10/1903/privacy/videos.html | 566 +- .../10/1903/privacy/voice-activation.html | 714 +- .../windows/10/20H2/index.html | 432 +- .../10/20H2/security/account-protection.html | 422 +- .../app-and-browser-control/index.html | 436 +- .../reputation-based-protection-settings.html | 2571 +++++++ .../windows/10/20H2/security/index.html | 438 +- .../virus-and-threat-protection/index.html | 426 +- .../virus-and-threat-protection-settings.html | 1342 ++-- .../10/20H2/settings/accounts/index.html | 420 +- .../settings/accounts/sign-in-options.html | 816 ++- .../20H2/settings/apps/apps-and-features.html | 555 +- .../windows/10/20H2/settings/apps/index.html | 420 +- .../10/20H2/settings/apps/offline-maps.html | 606 +- .../10/20H2/settings/gaming/game-mode.html | 513 +- .../10/20H2/settings/gaming/index.html | 420 +- .../20H2/settings/gaming/xbox-game-bar.html | 755 +- .../windows/10/20H2/settings/index.html | 420 +- .../settings/network-and-internet/index.html | 420 +- .../settings/network-and-internet/wi-fi.html | 488 +- .../20H2/settings/personalization/index.html | 420 +- .../settings/personalization/lock-screen.html | 499 +- .../20H2/settings/personalization/start.html | 866 ++- .../settings/personalization/taskbar.html | 1714 +++-- .../20H2/settings/personalization/themes.html | 551 +- .../windows/10/20H2/settings/phone/index.html | 420 +- .../windows/10/20H2/settings/phone/phone.html | 538 +- .../20H2/settings/privacy/account-info.html | 700 +- .../settings/privacy/activity-history.html | 664 +- .../settings/privacy/app-diagnostics.html | 702 +- .../privacy/automatic-file-downloads.html | 420 +- .../settings/privacy/background-apps.html | 555 +- .../10/20H2/settings/privacy/calendar.html | 702 +- .../20H2/settings/privacy/call-history.html | 698 +- .../10/20H2/settings/privacy/camera.html | 826 ++- .../10/20H2/settings/privacy/contacts.html | 704 +- .../privacy/diagnostics-and-feedback.html | 1595 +++-- .../10/20H2/settings/privacy/documents.html | 556 +- .../10/20H2/settings/privacy/email.html | 700 +- .../10/20H2/settings/privacy/eye-tracker.html | 496 +- .../10/20H2/settings/privacy/file-system.html | 556 +- .../10/20H2/settings/privacy/general.html | 929 ++- .../10/20H2/settings/privacy/index.html | 420 +- .../ink-and-typing-personalization.html | 629 +- .../10/20H2/settings/privacy/location.html | 758 +- .../10/20H2/settings/privacy/manual.html | 420 +- .../10/20H2/settings/privacy/messaging.html | 702 +- .../10/20H2/settings/privacy/microphone.html | 627 +- .../10/20H2/settings/privacy/motion.html | 557 +- .../20H2/settings/privacy/notifications.html | 753 +- .../20H2/settings/privacy/other-devices.html | 707 +- .../10/20H2/settings/privacy/phone-calls.html | 698 +- .../10/20H2/settings/privacy/pictures.html | 556 +- .../10/20H2/settings/privacy/radios.html | 702 +- .../10/20H2/settings/privacy/speech.html | 538 +- .../10/20H2/settings/privacy/tasks.html | 698 +- .../10/20H2/settings/privacy/videos.html | 556 +- .../settings/privacy/voice-activation.html | 770 +- .../10/20H2/settings/search/index.html | 420 +- .../search/permissions-and-history.html | 711 +- .../settings/search/searching-windows.html | 556 +- .../10/20H2/settings/system/clipboard.html | 666 +- .../10/20H2/settings/system/focus-assist.html | 479 +- .../10/20H2/settings/system/index.html | 420 +- .../10/20H2/settings/system/multitasking.html | 685 +- .../system/notifications-and-actions.html | 1271 ++-- .../20H2/settings/system/remote-desktop.html | 675 +- .../settings/system/shared-experiences.html | 732 +- .../delivery-optimization.html | 555 +- .../update-and-security/find-my-device.html | 542 +- .../settings/update-and-security/index.html | 420 +- .../update-and-security/troubleshoot.html | 488 +- .../update-and-security/windows-security.html | 422 +- .../10/20H2/standalone/account-sync.html | 638 +- .../10/20H2/standalone/biometrics.html | 601 +- .../20H2/standalone/cortana-and-search.html | 1645 +++-- .../10/20H2/standalone/error-reporting.html | 612 +- .../10/20H2/standalone/explorer-ads.html | 765 +- .../windows/10/20H2/standalone/index.html | 420 +- .../windows/10/20H2/standalone/location.html | 607 +- .../meltdown-and-spectre-patch.html | 495 +- .../windows/10/20H2/standalone/messaging.html | 542 +- .../20H2/standalone/microsoft-defender.html | 1865 +++-- .../windows/10/20H2/standalone/onedrive.html | 690 +- .../windows/10/20H2/standalone/paging.html | 726 +- .../20H2/standalone/resource-exhaustion.html | 573 +- .../10/20H2/standalone/restore-points.html | 991 ++- .../windows/10/20H2/standalone/services.html | 807 ++- .../windows/10/20H2/standalone/speech.html | 542 +- .../windows/10/20H2/standalone/spotlight.html | 1123 +-- .../windows/10/20H2/standalone/telemetry.html | 1095 +-- .../20H2/standalone/update-notifications.html | 539 +- .../standalone/windows-store-promotions.html | 770 +- .../base/advanced/determining-app-list.html | 510 +- .../windows/10/base/advanced/index.html | 420 +- .../advanced/remove-optional-features.html | 420 +- .../remove-preinstalled-packages.html | 420 +- .../base/advanced/remove-startup-items.html | 560 +- .../10/base/advanced/run-windows-on-usb.html | 420 +- .../scheduled-tasks-inconsistencies.html | 1319 ++-- .../base/advanced/specific-windows-fixes.html | 1748 +++-- .../windows-subsystem-for-linux-wsl.html | 504 +- .../windows/10/base/execution-policy.html | 420 +- .../windows/10/base/force-upgrade.html | 420 +- .../windows/10/base/index.html | 424 +- .../windows/10/base/install-config.html | 420 +- .../windows/10/base/reinstall-checklist.html | 420 +- .../10/base/troubleshooting-pc-issues.html | 420 +- docs/scripts/bulk-downloader-for-reddit.html | 441 +- docs/scripts/copying-data.html | 420 +- docs/scripts/scripts.html | 424 +- docs/scripts/steam-older-game-versions.html | 2135 ++++++ docs/scripts/video-editing-conversion.html | 434 +- docs/scripts/wiping-data.html | 420 +- docs/scripts/youtube.html | 420 +- docs/search.html | 420 +- docs/searchindex.js | 2 +- docs/services/airsonic/index.html | 420 +- docs/services/beets/index.html | 420 +- .../certificate-revocation-lists.html | 420 +- .../client-certificates.html | 420 +- .../exporting-certificates.html | 436 +- .../services/certificate-authority/index.html | 420 +- .../machine-certificates.html | 420 +- .../server-certificates.html | 422 +- .../setup-intermediate.html | 420 +- .../certificate-authority/setup-root.html | 420 +- .../services/certificate-authority/setup.html | 420 +- docs/services/crashplan/adoption.html | 2115 ++++++ docs/services/crashplan/docker.html | 2420 +++++++ docs/services/crashplan/index.html | 778 +-- docs/services/crashplan/lxc.html | 2628 +++++++ docs/services/crashplan/troubleshooting.html | 2116 ++++++ docs/services/dashmachine/index.html | 424 +- docs/services/deluge/index.html | 420 +- docs/services/digikam/index.html | 424 +- docs/services/dropbear/index.html | 2191 ++++++ docs/services/email/index.html | 424 +- docs/services/email/mta/configuration.html | 460 +- docs/services/email/mta/index.html | 420 +- docs/services/email/mta/setup.html | 423 +- docs/services/email/mta/testing.html | 437 +- docs/services/email/mua/setup.html | 420 +- docs/services/fail2ban/common-commands.html | 420 +- docs/services/fail2ban/index.html | 439 +- docs/services/fail2ban/setup-docker.html | 424 +- docs/services/fail2ban/setup-system.html | 420 +- docs/services/fail2ban/troubleshooting.html | 420 +- docs/services/firefly/docker.html | 2499 +++++++ docs/services/firefly/index.html | 828 +-- docs/services/firefly/lxc.html | 2473 +++++++ docs/services/git-webhook-receiver/index.html | 420 +- docs/services/gitea/index.html | 475 +- docs/services/imapsync/index.html | 420 +- docs/services/letsencrypt/index.html | 420 +- docs/services/lidarr/basic-configuration.html | 553 +- docs/services/lidarr/index.html | 420 +- docs/services/lidarr/setup.html | 420 +- docs/services/mariadb/index.html | 420 +- docs/services/mumble/index.html | 420 +- .../nginx/cert-based-authentication.html | 422 +- .../nginx/configuration-patterns.html | 420 +- docs/services/nginx/custom-error-pages.html | 420 +- docs/services/nginx/index.html | 420 +- docs/services/nginx/reverse-proxies.html | 420 +- docs/services/nginx/setup.html | 420 +- docs/services/nginx/troubleshooting.html | 420 +- docs/services/nzbget/index.html | 420 +- docs/services/pihole/configuration.html | 420 +- docs/services/pihole/https-admin.html | 420 +- docs/services/pihole/index.html | 420 +- docs/services/pihole/setup.html | 420 +- docs/services/pihole/troubleshooting.html | 420 +- docs/services/play-on/index.html | 453 +- docs/services/plex/index.html | 420 +- docs/services/plex/setup.html | 420 +- docs/services/plex/troubleshooting.html | 420 +- docs/services/postgres/index.html | 420 +- docs/services/radarr/basic-configuration.html | 555 +- docs/services/radarr/index.html | 420 +- docs/services/radarr/setup.html | 420 +- docs/services/service-template.html | 424 +- docs/services/signal/index.html | 420 +- docs/services/sonarr/basic-configuration.html | 553 +- docs/services/sonarr/index.html | 420 +- docs/services/sonarr/setup.html | 420 +- docs/services/ssh/configuration.html | 420 +- .../ssh/creating-ssh-certificates.html | 420 +- .../ssh/docker/basic-configuration.html | 420 +- docs/services/ssh/docker/index.html | 420 +- docs/services/ssh/docker/setup.html | 420 +- docs/services/ssh/index.html | 420 +- docs/services/ssh/linux-setup.html | 420 +- docs/services/ssh/troubleshooting.html | 420 +- docs/services/ssh/windows-setup.html | 517 +- docs/services/unifi/index.html | 427 +- docs/services/wireguard/configuration.html | 467 +- docs/services/wireguard/index.html | 427 +- docs/services/wireguard/initramfs.html | 2190 ++++++ docs/services/wireguard/linux-setup.html | 422 +- docs/services/wireguard/windows-setup.html | 422 +- docs/services/zfs/encryption.html | 2200 ++++++ docs/services/zfs/index.html | 568 +- docs/services/zfs/install.html | 2168 ++++++ docs/services/zfs/operations.html | 2160 ++++++ docs/services/zfs/replacing-disks.html | 2317 ++++++ docs/services/zfs/sync-backup.html | 2320 ++++++ docs/sphinx-build.html | 420 +- docs/sphinx-style-guide.html | 420 +- .../virtualization/hypervisors/kvm/index.html | 420 +- .../hypervisors/pve/gpu-passthru.html | 2266 ++++++ .../virtualization/hypervisors/pve/index.html | 4916 +------------ .../hypervisors/pve/install.html | 6196 +++++++++++++++++ .../hypervisors/pve/migration.html | 2420 +++++++ .../hypervisors/pve/troubleshooting.html | 2169 ++++++ .../hypervisors/xenserver-xcpng/index.html | 424 +- 337 files changed, 161939 insertions(+), 83633 deletions(-) create mode 100644 docs/_downloads/175e30fb142d93c182878f94e1190d5f/zfs_incremental_snapshot create mode 100644 docs/_downloads/56d718151ad63cb015401870f925b21b/gpg-agent.conf create mode 100644 docs/_downloads/b6776082685e0b7b36237247aad145c3/gpg.conf create mode 100644 docs/apps/gpg/usage/debian.html create mode 100644 docs/apps/gpg/usage/operations.html create mode 100644 docs/apps/gpg/usage/windows-forward-gpg.html create mode 100644 docs/apps/movie-studio.html create mode 100644 docs/configuration-management/ansible/commands.html create mode 100644 docs/configuration-management/ansible/gpg-vault.html create mode 100644 docs/configuration-management/ansible/index.html create mode 100644 docs/operating-systems/ubuntu/apt-auto-selections.html create mode 100644 docs/operating-systems/windows/10/20H2/security/app-and-browser-control/reputation-based-protection-settings.html create mode 100644 docs/scripts/steam-older-game-versions.html create mode 100644 docs/services/crashplan/adoption.html create mode 100644 docs/services/crashplan/docker.html create mode 100644 docs/services/crashplan/lxc.html create mode 100644 docs/services/crashplan/troubleshooting.html create mode 100644 docs/services/dropbear/index.html create mode 100644 docs/services/firefly/docker.html create mode 100644 docs/services/firefly/lxc.html create mode 100644 docs/services/wireguard/initramfs.html create mode 100644 docs/services/zfs/encryption.html create mode 100644 docs/services/zfs/install.html create mode 100644 docs/services/zfs/operations.html create mode 100644 docs/services/zfs/replacing-disks.html create mode 100644 docs/services/zfs/sync-backup.html create mode 100644 docs/virtualization/hypervisors/pve/gpu-passthru.html create mode 100644 docs/virtualization/hypervisors/pve/install.html create mode 100644 docs/virtualization/hypervisors/pve/migration.html create mode 100644 docs/virtualization/hypervisors/pve/troubleshooting.html diff --git a/RELEASE.md b/RELEASE.md index c63ac5f6..d3f41151 100644 --- a/RELEASE.md +++ b/RELEASE.md @@ -1,5 +1,57 @@ # [Changelog][3g] +## 2021-09-22.0 +Remove Saltstack; add Ansible. + +Added: +* Add Movie Studio encoding templates. +* Add fix for failed to run vncproxy on pve. +* Add note about fc-cache now generating .uuid files. +* Add GPG agent forwarding for WSL2 and Linux machines. +* Add CLI static DHCP configuration. +* Add apt auto selection to docs. +* Add 7 days to die administrative commands link. +* Add git commands for creating repository tracked hooks. +* Add disable for Asus Armoury Crate. +* Add additional git merge instructions for backing out and generating log. +* Add firefly baremetal setup instructions. +* Add git stash notes. +* Add crashplan LXC/KVM/Baremetal instructions. +* Add Instructions for GPU passthru to LXC containers. +* Add pve subscription removal service. +* Add gitea troubleshooting information for timeouts and duplicate keys. +* Add dropbear service. +* Add ZFS sync send/recv commands with automation. +* Add installing older game versions on Steam. +* Add SSH blocked through wireguard network resolution. +* Add wireguard-initramfs instructions. +* Add PFX RSA public/private, certificate extraction instructions. +* Add wireguard kernel debugging configuration. +* Add ansible notes. +* Add ansible auto-decrypt vault with security key scripts. +* Add Movie Studio encoding templates. +* Add fix for failed to run vncproxy on pve. +* Add note about fc-cache now generating .uuid files. +* Add GPG agent forwarding for WSL2 and Linux machines. +* Add CLI static DHCP configuration. +* Add apt auto selection to docs. + +Changed: +* Correct links and formatting for gpg/ansible docs as well. +* Update ZFS manaul disk replacement instructions. +* Update for automatic partitioning, manual swap, locating devices/ZFS GUID. +* Update PFX RSA cert extraction to single commands. +* Update ZFS instructions with Encryption and dataset usage. +* Update proxmox instructions for version 7. +* Update PVE with GPU passthru instructions. + +Removed: +* Remove saltstack configuration notes, add ansible configuration notes. + +Fixed: +* Update pygments to 2.7.4 addressing CVE-2021-27291 +* Update jinja, urllibs based on security advisories. + ## 2021-02-28.0 Finish sphinx CT directive migration. diff --git a/docs/_downloads/175e30fb142d93c182878f94e1190d5f/zfs_incremental_snapshot b/docs/_downloads/175e30fb142d93c182878f94e1190d5f/zfs_incremental_snapshot new file mode 100644 index 00000000..9d7d349e --- /dev/null +++ b/docs/_downloads/175e30fb142d93c182878f94e1190d5f/zfs_incremental_snapshot @@ -0,0 +1,139 @@ +#!/usr/bin/env bash +# +# Incremental ZFS send/recv backup script +# Original: https://github.com/bahamas10/zincrsend +# This Version: https://github.com/r-pufky/zincrsend +# +# Exit codes: +# 0: success. +# 1: local snapshot creation failed. +# 2: latest remote snapshot does not exist locally (manual intervention +# required). +# 3: ZFS send/recv failed. + + +################################################################################ +# Configuration options +################################################################################ +# Recursive datasets to send. (-R) will remove snapshots that have been deleted +# locally on the remote end as well. Dataset does *NOT* need to have children. +datasets=( + tank/example +) + +# Remote server connection settings. +remote_server='172.31.255.254' +remote_user='example_user' +remote_port='22' +remote_pool='backup_tank' +remote_command_prefix='sudo' +remote_ssh_opts=(-i example_user.key) + +# prefix to use for snapshots created by this script +snapshot_prefix='' +# Number of snapshots to retain after successful sync. 0 disables. +snapshot_retention=2 +# snapshot options: https://openzfs.github.io/openzfs-docs/man/8/zfs-snapshot.8.html +snapshot_opts=(-r) +# send options: https://openzfs.github.io/openzfs-docs/man/8/zfs-send.8.html +send_opts=(-R -w) +################################################################################ + +SSH() { + echo "ssh ${remote_ssh_opts[*]} ${remote_server} ${remote_command_prefix} $*" + ssh \ + "${remote_ssh_opts[@]}" \ + -l "${remote_user}" \ + -p "${remote_port}" \ + "${remote_server}" \ + "${remote_command_prefix}" \ + "${@}" +} + +process() { + local ds=${1} + + echo '' + echo "processing dataset: ${ds}" + echo '' + + # Step 1 - snapshot locally + local now=$(date +%s) + local snap=${ds}@${snapshot_prefix}${now} + echo "creating snapshot locally: ${snap}" + if ! sudo /usr/sbin/zfs snapshot "${snapshot_opts[@]}" "${snap}"; then + echo "[ERROR] failed to snapshot ${ds}" >&2 + exit 1 + fi + + # Step 2 - find the latest remote snapshot + local rds=$remote_pool/${ds#*/} + local inc_snap= + local inc_opts=() + echo "fetching latest remote snapshot for dataset: ${rds}" + local rsnap=$(SSH /usr/sbin/zfs list -H -o name,creation -p -t snapshot -r "${rds}" | \ + grep "^${rds}@" | \ + sort -n -k 2 | \ + tail -1 | \ + awk '{ print $1 }') + + if [[ -n ${rsnap} ]]; then + echo "latest remote snapshot: ${rsnap}" + inc_snap=${rsnap#*@} + # assert that ${inc_snap} exists locally + if ! sudo /usr/sbin/zfs list -t snapshot "${ds}@${inc_snap}" &>/dev/null; then + echo "[ERROR] could not find ${rsnap} locally (${ds}@${inc_snap} not found)" >&2 + exit 2 + fi + inc_opts+=(-I "@${inc_snap}") + else + echo "no snapshot found for ${ds} - doing full send/recv" + fi + + # Step 3: send from latest remote to newly created or do a full send + if [[ -n ${inc_snap} ]]; then + echo "zfs sending (incremental) @${inc_snap} -> ${snap} to ${rds}" + else + echo "zfs sending ${snap} to ${rds}" + fi + # Receive options: Always use snapshot as base (remote changes on after + # snapshot will cause recieve to fail otherwise); recieving pool receieves + # filesystem unmounted to prevent mount collisions. + if ! sudo /usr/sbin/zfs send "${send_opts[@]}" "${inc_opts[@]}" "${snap}" | SSH /usr/sbin/zfs recv -Fuv "${rds}"; then + echo "[ERROR] failed to send $snap to ${remote_server} ${rds}" >&2 + exit 3 + fi + + # Step 4: After successful sync, trim the last X snapshots (sync'ed on next run). + if [[ ${snapshot_retention} -gt 0 ]]; then + echo "retainng the last ${snapshot_retention} snapshots for ${ds}" + # Identify the latest X snapshots for a given dataset (creation, newest to oldest) + zfs_latest=`/usr/sbin/zfs list -H -t snapshot -o name -S creation | grep ^${ds}@ | head -${snapshot_retention}` + # Identify ALL snapshots for a given dataset (creation, newest to oldest) + zfs_delete=`/usr/sbin/zfs list -H -t snapshot -o name -S creation | grep ^${ds}@` + + echo "all snapshots: $(echo ${zfs_delete[@]})" + echo "retained snapshots: $(echo ${zfs_latest[@]})" + # Remove latest snapshots from all set. + for keep_snap in ${zfs_latest[@]}; do + zfs_delete=( "${zfs_delete[@]/${keep_snap}}" ); + done + + echo "snapshots to remove: $(echo ${zfs_delete[@]})" + # Destroy old snapshots + for snap in ${zfs_delete[@]}; do + /usr/sbin/zfs destroy ${snap} + done + else + echo "zfs snapshot rentention management disabled" + fi +} + +echo "starting on $(date)" + +code=0 +for ds in "${datasets[@]}"; do + process "${ds}" +done +echo +echo "script ran for ~$((SECONDS / 60)) minutes (${SECONDS} seconds)" diff --git a/docs/_downloads/56d718151ad63cb015401870f925b21b/gpg-agent.conf b/docs/_downloads/56d718151ad63cb015401870f925b21b/gpg-agent.conf new file mode 100644 index 00000000..1bcfa102 --- /dev/null +++ b/docs/_downloads/56d718151ad63cb015401870f925b21b/gpg-agent.conf @@ -0,0 +1,13 @@ +# https://github.com/drduh/config/blob/master/gpg-agent.conf +# https://www.gnupg.org/documentation/manuals/gnupg/Agent-Options.html +enable-ssh-support +ttyname $GPG_TTY +default-cache-ttl 60 +max-cache-ttl 120 +pinentry-program /usr/bin/pinentry-curses +#pinentry-program /usr/bin/pinentry-tty +#pinentry-program /usr/bin/pinentry-gtk-2 +#pinentry-program /usr/bin/pinentry-x11 +#pinentry-program /usr/bin/pinentry-gnome3 +#pinentry-program /usr/local/bin/pinentry-curses +#pinentry-program /usr/local/bin/pinentry-mac diff --git a/docs/_downloads/b6776082685e0b7b36237247aad145c3/gpg.conf b/docs/_downloads/b6776082685e0b7b36237247aad145c3/gpg.conf new file mode 100644 index 00000000..9d5f2828 --- /dev/null +++ b/docs/_downloads/b6776082685e0b7b36237247aad145c3/gpg.conf @@ -0,0 +1,61 @@ +# https://github.com/drduh/config/blob/master/gpg.conf +# https://www.gnupg.org/documentation/manuals/gnupg/GPG-Configuration-Options.html +# https://www.gnupg.org/documentation/manuals/gnupg/GPG-Esoteric-Options.html +# Use AES256, 192, or 128 as cipher +personal-cipher-preferences AES256 AES192 AES +# Use SHA512, 384, or 256 as digest +personal-digest-preferences SHA512 SHA384 SHA256 +# Use ZLIB, BZIP2, ZIP, or no compression +personal-compress-preferences ZLIB BZIP2 ZIP Uncompressed +# Default preferences for new keys +default-preference-list SHA512 SHA384 SHA256 AES256 AES192 AES ZLIB BZIP2 ZIP Uncompressed +# SHA512 as digest to sign keys +cert-digest-algo SHA512 +# SHA512 as digest for symmetric ops +s2k-digest-algo SHA512 +# AES256 as cipher for symmetric ops +s2k-cipher-algo AES256 +# UTF-8 support for compatibility +charset utf-8 +# Show Unix timestamps +fixed-list-mode +# No comments in signature +no-comments +# No version in output +no-emit-version +# Disable banner +no-greeting +# Long hexidecimal key format +keyid-format 0xlong +# Display UID validity +list-options show-uid-validity +verify-options show-uid-validity +# Display all keys and their fingerprints +with-fingerprint +# Display key origins and updates +#with-key-origin +# Cross-certify subkeys are present and valid +require-cross-certification +# Disable caching of passphrase for symmetrical ops +no-symkey-cache +# Enable smartcard +use-agent +# Disable recipient key ID in messages +throw-keyids +# Default/trusted key ID to use (helpful with throw-keyids) +#default-key 0xFF3E7D88647EBCDB +#trusted-key 0xFF3E7D88647EBCDB +# Group recipient keys (preferred ID last) +#group keygroup = 0xFF00000000000001 0xFF00000000000002 0xFF3E7D88647EBCDB +# Keyserver URL +#keyserver hkps://keys.openpgp.org +#keyserver hkps://keyserver.ubuntu.com:443 +#keyserver hkps://hkps.pool.sks-keyservers.net +#keyserver hkps://pgp.ocf.berkeley.edu +# Proxy to use for keyservers +#keyserver-options http-proxy=http://127.0.0.1:8118 +#keyserver-options http-proxy=socks5-hostname://127.0.0.1:9050 +# Verbose output +#verbose +# Show expired subkeys +#list-options show-unusable-subkeys diff --git a/docs/apps/authy.html b/docs/apps/authy.html index 166240a0..969c5087 100644 --- a/docs/apps/authy.html +++ b/docs/apps/authy.html @@ -15,8 +15,8 @@ - + @@ -126,6 +126,8 @@
  • Create Worktree
  • Merge Worktree
  • Removing Worktree
    • +
  • Migrate git stash to another machine
    • +
  • Repo git hooks
  • List All Respositories for An Organization/User
  • Pull Latest Tarball Release from Github
    • @@ -201,20 +203,38 @@
  • Forward GPG Agent Through Multiple Servers
    • -
  • Ubuntu GPG Yubikey
    • +
  • Movie Studio +
  • Mutt Maildir Setup @@ -291,115 +315,12 @@

    Configuration Management