Kevin's musings

Kevin's random dog pics and posts of life
  • About

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org

Search this blog:

April 2023
S M T W T F S
 1
2345678
9101112131415
16171819202122
23242526272829
30  
« Mar    

Tags

ansible beer book reviews cats dogs droid faire fedora flock games Links linux movie reviews music pets photos site trailer travel Uncategorized

Archives

  • March 2023
  • January 2023
  • December 2022
  • November 2022
  • May 2022
  • April 2022
  • March 2022
  • October 2021
  • August 2021
  • April 2021
  • March 2021
  • December 2020
  • November 2020
  • October 2020
  • August 2020
  • July 2020
  • April 2020
  • February 2020
  • October 2019
  • September 2019
  • August 2019
  • July 2019
  • May 2019
  • March 2019
  • February 2019
  • December 2018
  • November 2018
  • September 2018
  • August 2018
  • June 2018
  • May 2018
  • April 2018
  • March 2018
  • February 2018
  • January 2018
  • December 2017
  • November 2017
  • October 2017
  • September 2017
  • August 2017
  • July 2017
  • May 2017
  • April 2017
  • March 2017
  • February 2017
  • January 2017
  • December 2016
  • October 2016
  • September 2016
  • August 2016
  • July 2016
  • June 2016
  • May 2016
  • April 2016
  • March 2016
  • February 2016
  • January 2016
  • December 2015
  • November 2015
  • October 2015
  • September 2015
  • August 2015
  • July 2015
  • June 2015
  • May 2015
  • April 2015
  • March 2015
  • February 2015
  • January 2015
  • December 2014
  • November 2014
  • October 2014
  • August 2014
  • July 2014
  • June 2014
  • May 2014
  • April 2014
  • March 2014
  • February 2014
  • January 2014
  • December 2013
  • November 2013
  • October 2013
  • September 2013
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • December 2012
  • November 2012
  • October 2012
  • August 2012
  • July 2012
  • June 2012
  • May 2012
  • April 2012
  • March 2012
  • February 2012
  • January 2012
  • December 2011
  • November 2011
  • October 2011
  • August 2011
  • June 2011
  • May 2011
  • April 2011
  • March 2011
  • February 2011
  • January 2011
  • December 2010
  • November 2010
  • September 2010
  • August 2010
  • June 2010
  • May 2010
  • April 2010
  • March 2010
  • February 2010
  • January 2010
  • February 2008
  • January 2008
  • December 2007
  • August 2007
  • July 2007
  • May 2007
  • April 2007
  • March 2007
  • February 2007
  • January 2007
  • December 2006
  • November 2006
  • October 2006
  • September 2006
  • August 2006
  • July 2006
  • June 2006
  • May 2006
  • April 2006
  • March 2006
  • February 2006
  • January 2006
  • December 2005
  • November 2005
  • October 2005
  • September 2005
  • August 2005
  • July 2005
  • June 2005
  • May 2005
  • April 2005
  • March 2005
  • February 2005
  • January 2005
  • December 2004
  • November 2004
  • October 2004
  • September 2004
  • August 2004
  • July 2004
  • June 2004
  • May 2004
  • April 2004
  • March 2004
  • February 2004
  • January 2004
  • December 2003
  • November 2003

pinephone: initial thoughts

by nirik on 2020/07/25 at 4:21 pm
Posted In: fedora, linux

I ordered one of the ubports editions of the pine64 pinephone and after a small amount of playing around with it, I’d like to share my thoughts.

First a little background. I’m very big on open source for many many reasons. I use Fedora rawhide for my laptop day to day and in general try and use free software wherever else I can. My phone has been a annoyance to me for many years now. Being completely closed source, apple/i-phones are right out for me, which basically just leaves android. Now you might think “Thats great, android is open source”, but it’s really not. While the source is indeed available, development is done by google in secret and dumped into the open after release. This means you don’t get a lot of the advantages of open source for android. Other forks/projects do take that android source and clean it up and make it nice, but they too are at the mercy of upstream that may change things in a new release drastically, leaving them to try and catch up for months after a new release. I’ve been using /e/ on my trusty one plus 3t for the last 3-4 years. They are based off lineageos and ‘de-google’ things from there. I’ve never found myself very excited by it, they too are trapped by the android development all taking place elsewhere. I’ve looked at other possible software, but they all have their issues.

3 or so years ago, Librem announced they were going to make a phone that was as open as they could make it, with high end specs. As far as I know some few batches have been made/distributed, but it’s still not a realized product. As part of this push however, software was created that could run on most normal linux distributions that could handle phone specific workflows. See https://source.puri.sm/Librem5 for a long list.

Fast forward to late last year: The pine64 folks, who have made a number of aarch64 based products successfully announced the pine phone. They produced a prototype like developer version and then, early this year announced the ubports version (some $’s of each phone would go to the ubports folks), cost: $150. The ubports version sold out and they have now announced a postmarketos version, also with a usb-c “dock”, more memory and a circut board fix to allow usb-c to work right. cost: $200 with dock, or $150 without.

First lets talk about the hardware itself. It’s sturdy and well built. The specs are pretty low end, but thats smart (since it’s older hardware linux support is better) and not too bad considering the cost. The screen is actually pretty bright and looks nice. The back cover is a bit of a pain to take off, but I’d prefer it be that way to being too easy to remove. The phone uses a usb-c type connector for power/etc. As mentioned the ubports and braveheart (the developer release before ubports) have a pcb bug that prevents usb-c from working right. ;( There is a headphone jack, and front and rear cameras. Taking the cover off you can see: removable battery, sim and micro-sd slots and 6 “pogo” pins. These last are for future cover replacements that might have additional functions, like wireless charging or a larger battery or IR sensors. There’s also 6 dip switches allowing you to enable or disable various features. I’m not sure I would use these, but I guess it’s a nice feature for some folks. The ubports version has 2GB ram, the newer postmarketos one will have 3GB. There is 16GB internal eMMC. (32GB in postmarketos version). Bluetooth 4.0, wireless, and modem for LTE/3G/etc. You can get a serial console by switching the dip switch for the headphone jack ‘off’ and then it will do serial console. The speaker, mic, screen, wireless, bluetooth, modem, have all worked nicely for me under various software configs. Overall if the software were up to snuff, I think this would be a ok (if a bit slow) daily driver, but that brings us to software…

The pine phone has a Allwinner a64 cpu (aarch64). In theory any linux distribution that supports that cpu/arch would work. There is of course hardware specific to the pine phone that needs drivers or existing drivers that need tweaking to work with it. Due to that, most distributions are shipping a custom kernel with patches, etc. I sure hope with all the interest this stuff can get all upstreamed.

“Normal” desktops work, but they have drawbacks. For instance running Gnome on a Fedora install, many of the dialogs or windows appear too large to use and there’s no way to scroll around them. One help here is the librem software mentioned above. There’s a replacement for gnome-shell called ‘phosh‘ and a replacement for mutter called ‘phoc‘. They are more suited to small screens and have features like forcing everything to resize to screen, etc. There’s also phone and messaging apps of various stages and types. It’s really nice to be able to ‘dnf install’ something from rawhide, all that software ready to use. 🙂

The pine phone will try and boot from the micro-sd card first, then the eMMC, this allows you to pretty easily try other distros out without really committing to them. 🙂 Of course the eMMC is faster, and if you like you can overwrite it with a tool called jumpdrive. Just boot a micro-sd with jumpdrive, connect your laptop via usb and it will let you flash the eMMC.

Here’s a smattering of the ones I have looked at:

  • The phone shipped with ubuntu touch on the eMMC.
  • The first one I flashed to a micro-sd was of course Fedora! (more below)
  • Mobian (debian for mobile)
  • postmarketos (I actually couldn’t get this to boot for some reason)
  • Arch
  • Manjaro
  • Probibly others I have now forgotten…

There’s some places some do better than others, but mostly they seem all at the same place: some things working, others not yet and pretty rapid changes.

The Fedora (unofficial) image is linked off the pinephone fedora wiki page, I did a few local tweaks here after setting up a micro-sd card with it. The image uses lightdm, but that makes gnome or phosh use X11 instead of Wayland, so I switched back to gdm and set it to autologin as the pine user and use phosh. For some reason you have to run ‘pineaudio’ from the command line once before the phone speaker will work right. I think it’s just in the wrong mode by default. dnf works fine. gnome-software works fine to install things.

In order for me to use a pine phone as my daily phone I need at least these things (your list might be completely different):

  • Phone calls (this in general works, even bluetooth headsets seem fine)
  • SMS and MMS (sms works, mms doesn’t)
  • ebook reading (works fine, number of apps to choose from)
  • RSS feed reading from my tt-rss setup. (Newsflash works nicely!)
  • picture taking/upload (Some folks claim to have working camera, but I have yet to see it with any of the images I have looked at).
  • Battery life a least a day (This is claimed now depending on what you do of course, see more below).
  • maps/gps for when I travel (pretty rare these days). Gnome maps works surprisingly well here.
  • Twitter (I should stop doomscrolling… but cawbird has a bug to be better on mobile sized screens).
  • Light web browsing (check something, settle bet in bar, look up some info). Firefox is a bit sluggish, but it works.
  • OTP app ( There has to be one right? right? I guess OTPClient if someone wants to package it for Fedora)
  • Music playing (usually in car over bluetooth to the car speakers)
  • Alarm clock (I think this should be doable, but not sure there’s a good linux app to manage it)
  • Podcasts (also usually while traveling which… yeah. gPodder seems to work fine though)
  • Weather (lots of options here, too bad about darksky tho)
  • Very rare email checking (I would think most any email app would work here)
  • IRC (oddly, hexchat has horrible problems resizing and input in dialogs is all messed up, I am not sure why. If nothing else, irssi would work fine in a tmux)
  • Encryption support. The only distro I tried that had mention of this so far as postmarketos. It supposedly has a installer than can encrypt. Of course there’s workarounds here too. Could boot/use the eMMC for the os and encrypt a micro-sd for data. Then in the event of theft, at least the data could be safe.

Then current blockers for me are: MMS, camera working, OTP app, possibly battery life and possibly encrypted storage.

MMS needs development work. The librem folks asked ModemManager to implement it, but they feel it should be a seperate app that interfaces with MM. Hopefully this will move forward. In the US at least, lots of things are MMS (anytime it’s more than 1 person, anytime it’s over a size limit, etc)

The camera is clamed working, but It obviously needs more work. Cheese can’t get anything from it. Also it would be very nice if we had something like opencamera for linux. It has tons of adjustments and ability.

For OTP apps I did find OTPClient. Looks like it might fit the bill, but it’s not in Fedora yet. Any packages want to take it on? 🙂 If not, I might when I get some time.

I haven’t really run the phone with a sim in it and using it off power so battery life is a bit of a question. On the plus side however, folks have gotten crust ported to it. As I understand it, this is software that runs in a secondary CPU that can handle power management outside the main OS/cpu. So, it can suspend on idle, power things off that aren’t being used, etc. With this folks are claiming 100+ hours of complete standby and less of course with modem active. Suspend/resume does seem to work fine on most all of the distros I tried.

So, I am encouraged. I went ahead and ordered one of the postmarket os ones too, since I don’t think I am up to the soldering fix for the usb-c and another GB memory is likely to be nice. I really hope over the next months we see things get upstreamed to the linux kernel, things like MMS and camera get sorted out, and always performance and battery life could be improved. Once the kernel stuff is mostly worked out, I wonder if there is interest/desire to make a official image for the phone? With that we could curate a selection of apps we know works and get things setup right and additionally down the road ship a version based on a stable release instead of rawhide. 😉 It will be a lovely day I can run Fedora on my phone day to day.

Comments Off on pinephone: initial thoughts

The dell xps 13 9300 (2020 edition) hyper-detailed Fedora linux review

by nirik on 2020/04/24 at 6:06 pm
Posted In: fedora, linux

First a bit of background before we get into reviewing. I’ve used a laptop as my primary computer for 20+ years, and since I do things on-line most of my waking life, this means I spend a lot of time in front of my laptop typing or reading away. So, it’s pretty important to me that my laptop works well, is nice to use and is under support in case anything happens.

For the last 3.5 years or so, my laptop has been a Lenovo Yoga 920. It’s been a great laptop and I have enjoyed using it. Unfortunately, it’s support is going to be up in a few months and I really don’t like my primary laptop to be out of support. In the last 3.5 years, Lenovo has: replaced the LCD panel when it fell off a table and broke, Replaced the motherboard when a sound connector became loose, replaced the keyboard when it became mushy, and most recently replaced the battery because it started to swell up. So, warentee is pretty important to me.

I was starting to worry that none of the current crop of laptops would really be any better than my 3.5+ year old yoga 920, but dell managed to announce their xps 13 9300 and it had some better stats, so I decided I would jump to it and see how things went. One kind of anoying thing was that dell announced the new laptop in January, but the model with the good specs I wanted wasn’t available to order until April, and the “developer” edition still isn’t available with the high end specs (I got the normal windows one).

On to specs. My old yoga 920:

  • 16GB memory
  • 512GB nvme ‘disk’
  • 13.9″ 3840×2160 display
  • ~3lbs
  • 2 usb-c ports, 1 usb-2 port
  • intel i7 8th gen cpu (8 “threads”)
  • intel UHD graphics

The new dell xps 13 9300:

  • 32GB memory
  • 2TB nvme ‘disk’
  • 13.3″ 3840×2400 display
  • ~2.8 lbs
  • 2 usb-c ports
  • intel i7 10th gen cpu (8 “threads”)
  • intel Iris plus graphics

So, you can see, the specs are all a little bit better (except for number of usb ports). Ordering on dells site was fine, and it took almost exactly 2 weeks from order to arrival, which isn’t too bad overall. Unboxing was fine. I don’t really understand why people spend a lot of time talking about that, you only do it once. 🙂

In order to install linux, you have to go into the firmware (power on and hit f2) and set the disk interface to AHCI from intel raid. Doing so will of course make windows unbootable, but in my case I had no reason to keep windows around so I just wiped it out. If you need to preserve windows, you may want to look at how to boot it in safe mode so it can boot with AHCI or come up with some other solution. I switched that and then booted the latest Fedora 32 RC that I had already laying around. Wiping windows and installing went fine with no issues. After booting up on the install, I then upgraded to to rawhide with ‘dnf -y install fedora-repos-rawhide; dnf -y –releasever 33 –disablerepo=\* –enablerepo=rawhide distro-sync’. No problems with that either and a quick reboot later I was on rawhide. A check in gnome-software and I see a firmware update ready to go. Applied and the laptop rebooted, updated firmware and rebooted back to rawhide. Everything went very smoothly and the upgrade lookd great (progress bar, explained what it was doing, etc). Next was a copy of /home from my old laptop and then I could switch over to using the new dell day to day.

Here’s that disk pref in the firmware
The system specs screen. There’s lots of crazy firmware options

I’ve only run into 3 linux related issues so far, and one of those is now solved:

  • Doing a shutdown/power off doesn’t fully work. systemd gets everything shut down and the screen goes blank, but you can see it’s still on and the fans usually come on. This is being tracked in: https://bugzilla.redhat.com/show_bug.cgi?id=1825298
  • I wasn’t able to get bluetooth headsets ‘headset’ profile to work. I have 3 bluetooth headsets here and they were all doing it. a2dp worked fine, but ‘headset’ would appear to switch the profile, but no sound would come out or input. I looked around on this one for a while until I noticed:

Apr 20 05:45:20 mandor.scrye.com kernel: Bluetooth: hci0: Found Intel DDC parameters: intel/ibt-19-32-4.ddc
Apr 20 05:45:20 mandor.scrye.com kernel: Bluetooth: hci0: Failed to send Intel_Write_DDC (-22)

Turns out it was a firmware file issue, a check upstream found a commit that fixed it: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/intel/ibt-19-32-4.ddc?id=677930a7d7422930df71adace36f17e996658f45https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/intel/ibt-19-32-4.ddc?id=677930a7d7422930df71adace36f17e996658f45

Copying that ddc file in and all my headsets started working in headset mode. 🙂 The Fedora linux-firmware package has an update with that fix in it now in rawhide/testing for stable branches.

  • Finally there’s a fingerprint reader on the power button, but there’s no linux driver (yet). Dell has promised that there would be something later this year (I guess they are leaning on the vendor). I sure hope it’s upstreamed / usable on Fedora and not just some binary only Ubuntu driver/application. 🙁
yoga 920 on left, dell xps 13 9300 on right

So, overall so far I am pretty happy with it. In the happy list:

  • The screen is lovely! Its smaller than the one in the yoga and higher resolution. I find myself switching between 150% and 175% in gnome scaling, it’s a bit easier when my eyes are tired at the lower resolution, but it’s really nice to have more things on screen at the higher.
  • Firmware updates with no windows! fwupd is awesome. I had to keep a windows install on my yoga for firmware updates. It’s really nice to not have to do that now.
  • The keyboard is pretty large and easy to type on. It might take a small adjustment time to get used to, but it’s not a bad keyboard at all. It’s actually a bit bigger than the yoga one since it goes almost from edge to edge.
  • It’s fast! Things are quite zippy with the 10th gen cpu and better intel graphics.
  • The wireless seems quite nice and fast. The yoga came with a really crappy atheros wireless card that I had to replace with an intel. This dell just has a good card out of the box. It’s a “Killer(R) Wi-Fi 6 AX1650i 160MHz Wireless Network Adapter (201NGW)”
  • Battery life seems ok. I ran it for about 3-4 hours on battery doing normal stuff (ssh sessions, reading news feeds, irc, etc) and it dropped down about 1/2, so 6-8 hours actually doing work seems not too bad considering the 4k display. The estimates did jump around a lot while I was using it, so I took the ‘real world’ measurement to mean more than whatever estimates it came up with.
  • There is a micro-sd card reader on the left side. It seems to work just fine out of the box. I am not sure what I would use it for normally, but I suppose its a little bit of extra storage and perhaps some use making cards to boot arm devices or something.
The stock dell charger seems to let it charge at 20V / ~0.5A (at least when it’s mostly full)
You can see the microsd card sitting right down from the usb-c connection.

Advantage yoga (or at least things that seem better in yoga land):

  • The dell xps 13 is a regular laptop, not a 2-in-1/convertable like my yoga was. To be fair however, I almost never used this on the yoga. It’s gigantic and unwieldy as a tablet. I did from time to time tilt the screen way back, which perhaps I will miss a little. I do wish the xps did tilt back more than 45 degrees or so.
  • Also related to 2-in-1 vs regular, the yoga had sensors so it could rotate the display if you rotated the laptop. The xps doesn’t have those. You can however do it manually, and I didn’t really rotate the yoga much anyhow, so no big loss there.
  • The “home” and “end” keys are on f11/f12 on the dell. This is going to take some getting used to, as the yoga sanely had them on the right and left arrow keys. This made sense to me since the up and down arrows are up and down a page. Perhaps I can remap those.
  • There doesn’t seem to be any way to monitor the fans. They aren’t too anoying, but sometimes I wonder if they are on or not and it’s hard to tell.
The xps 13 9300 on top of the yoga 920. It’s about 1.5″ smaller in either direction.

Misc things:

  • There’s a nice light at the front of the laptop where you open it to indicate when it’s charging. It also can blink to show various hardware faults (no idea what that looks like yet, thank goodness). The light goes completely off when it’s fully charged, white when it’s charging and battery level is about 5% and amber if the battery is down to 5%.
  • I don’t have any thunderbolt-3 devices, but 2 usb-c docks I have seem to work fine (ethernet, various display adapters, usb, etc).
  • The intel “i7 10th gen” sticker is easy to remove. 🙂 Does anyone who uses their laptop at all keep those around?

Finally there’s a few minor ways dell could improve things (IMHO):

  • home and end should be on the Fn right/left arrows. 🙂
  • more usb-c/thunderbolt 3 ports. Even one more would have been nice.
  • A way to get fan speeds would be nice.
  • A brightness level even lower than the minimum one they offer would be nice. (For dark rooms, etc)

So, to sum up: I hope this will be a nice, reliable laptop for me to run for the next 3-4 years. 🙂

└ Tags: rawhide
Comments Off on The dell xps 13 9300 (2020 edition) hyper-detailed Fedora linux review

Onlykey review

by nirik on 2020/04/03 at 6:22 pm
Posted In: fedora, linux

I’ve been busy and remiss in blogging and this is something I was hoping to publish a while ago, so I give you… a review of the onlykey.

The onlykey is a USB2 connectable hardware security key. Many of you may know yubikeys, this is a competitor to those, with some advantages and disadvantages.

Ordering was simple, I just ordered one via amazon and had it 2 days later. You can also order directly from the onlykey website.

Right away you will note that this doesn’t have just one key like the yubikeys do, but instead has 6 of them. Additionally, it’s got a colored LED underneath, which shines green when it’s unlocked, flashes red when you enter an incorrect pin, etc. The idea here is that the key will be completely locked and useless to others until its plugged in and a correct pin is entered (yes, there’s more than one correct pin 🙂 This key only comes in USB2 form as they say USBC would be too fragile. You can of course use a USB2 -> USBC adapter.

There’s Several ways to manage the key:

  • A chrom(imum) “app”. (Although chrome is discontinuing these)
  • A “snap”
  • A debian .deb package

So, thats not great for Fedora. I tried to get the snap working, but it failed. I tried to use the chrome app, but thats how I found that they are dropping those, so I went with the debian package unpacked and just using the application from there. The app is open source if anyone wants to package it up: https://github.com/trustcrypto/OnlyKey-App (It’s npm based)

Right off the bat I hit an issue. My onlykey had old firmware and it was old enough that the app was unable to update it, so I had to monkey around with “Teensy loader” to upgrade the firmware. At one point the key stopped even lighting up and I asked for help on the onlykey discussion group. They had someone answer me pretty quickly and I found that I wasn’t properly shorting the two contacts on each end of the key to put it in ‘upload firmware mode’. After I did that I managed to update to the new firmware and everything was smooth sailing after that. I really hope they have all their existing stock updated now so no one else should have to go through this. 🙂 Just look at these little contacts you have to short together while pressing the upload button on Teensy Loader! I managed to do it with a hanger from a xmas tree ornament finally:

There’s a sort of soft rubber case around the key, you can get all kinds of colors (I just stuck with black). It also comes with the handy little carribeener to attach it to your keychain or whatever.

So, once you have the firmware somewhat up to date, you can run the app. It will also update firmware as long as it’s not too old. The firmware is open source: https://github.com/trustcrypto/OnlyKey-Firmware

On your first run (or if you factory wipe it), you have to do a bit of setup. You can enter 2 profile pins (sequences of buttons). They suggest that this might be ‘work’ and ‘home’, but you could use them for whatever you like. You can also enter a ‘self destruct’ profile pin, which wipes back to factory settings if you enter it. You can also tell it to do this if someone enters the wrong pin 10 times, but it will flash red and stop taking input after 3 failed pins. So to wipe it this way you have to enter 3 wrong pins, remove, insert, 3 more wrong pins, remove, insert 3 more wrong pins, remove, insert, 1 more wrong pin. You can also load a firmware called the “International Travel Edition” that has no encryption at all (it’s only protected by the pin).

Once you have your profiles setup you can configure what you want in the slots. There’s actually 12 slots because (just like yubikeys) there is long press and short press on each button. You can assign whatever you like to those 24 slots (12 for each profile). You can do TOTP, U2F, Yubikey HOTP, username/password, tabs or returns, all kinds of things:

You can do encrypted backups of the contents of the key and of course restore them. There’s also some misc settings like how bright the LED is or how fast the keyboard types or what keyboard layout it uses. There’s some integration with keybase.io to do encrypted files/messages transfer.

Finally, there’s some advanced prefs about yubikeys and U2F tokens. I was confused by these at devconf, but the manual explains: https://docs.crp.to/usersguide.html#Yubico-one-time-password basically you have to run yubikey-personalize and have it generate “Public Identify, Private Identity, and Secret Key” which you then enter into the onlykey app. I can only assume they couldn’t just do this due to legal concerns. The U2F prefs are there because:

For the attestation certificates OnlyKey comes with a default attestation certificate and signing key and also allows users or enterprises to import their own attestation certificate/key. This feature allows organizations to only permit FIDO2 keys issued by the organization to be used. Importing attestation certificates and signing keys can be done in the OnlyKey app.

The manual is pretty easy to read and covers all this better than I can probibly. So, on to the actual reviewing:

First the good:

  • Open source firmware and app!
  • Nice to know that if someone stole it, they would not be able to access anything using it.
  • Seems to work fine for U2F/webauthn, TOTP, HOTP and user/pass.
  • The LED light is nice to know what state it’s in.
  • I like being able to do encrypted backups.
  • Having a bunch more slots is nice (If you forget which is which, you can press and hold down the 2 button for 5+ seconds and it will print out the labels you gave the slots).

Now the not so good:

  • You can set a timeout where the key will lock after X minutes. It works and the LED goes off but the application if you have it open will happily think it’s still talking to the unlocked key (until you try and do something then it errors).
  • You can sort of use it for keeping your ssh private key, but not easily. You have to import a key (using only very specific ecc curves) and then use a ‘onlykey-agent’ instead of normal ssh agent. This is a fork of another project and hasn’t been updated from that fork for like 4 years, which is really not encouraging. 🙁
  • It’s a bit odd trying to type in your pin at say a coffee shop or table with a bunch of co-workers around. It seems like you can’t really hide what you are pressing. Still it is more secure than just any unlocked always token.

For me personally, the lack of a nice way to use it for storing my ssh private key is somewhat of a deal breaker. I really really don’t want that key to get out (even though it is passphrase protected). My current yubikey was able to generate it on key and keep it always stored there. If I didn’t care so much about ssh keys I might well move to using the onlykey day to day. If I traveled much I definitely would look at using it while traveling.

Comments Off on Onlykey review

Devconf.cz 2020

by nirik on 2020/02/12 at 6:12 pm
Posted In: fedora

This year again I had the honor of being able to attend devconf.cz. Many thanks to Red Hat (My employer) for sending me to the conference (it also allowed me to attend some work meetings after the conference).

The trip out to Brno was much as it has been for me in the past, except this time it was even longer since the Portland to Amsterdam flight I used to take is no longer offered, so I had to go from Portland to Seattle and then Amsterdam. Due to various scheduling issues I also went to Vienna this time instead of Prague. No particular problems on the trip, just a long haul. The train in Vienna was nice and clean and fast and comfortable.

Devconf.cz runs over 3 days (friday/saturday/sunday) and is jam packed with talks and people to talk to. A number of talks I wanted to attend this year were full and I couldn’t get in. 🙁 Tickets also “sold” out really fast this year (in days) after they were available. I was amazed in the opening session how many people raised their hands that they were attending for the first time (seemed like >50%?). Thats really a great sign for the health of open source to have that many new people coming in and so many in general.

Friday opened with a keynote about Open Source SRE (Site reliability Engineering) in several Red Hat OpenShift teams. They did a good job explaining how they divided things up and how they tried to find issues before their customers even knew about them.

I then took the hallway track for a few sessions. So many people I work with over IRC/email there to talk to face to face. Lots of new folks as well.

The next session I hit was “Ansible by pull request: a gitops story”. Some good practical story of using git and ansible and ansible tower to manage and deploy things. A good introductory talk on the concept of ‘gitops’ (using git for operations settings.

I then ran out for a lovely lunch at a local pizza place. Was a great chance to catch up with teammates. Unfortunately it took a while and I missed the talk on Rawhide gating that I was hoping to go to. I hear it went really well however. 🙂

More sessions and hallway meetings and then off to a lovely team dinner. Had a great time there and then some of us went out for more beers after dinner and had an even more amusing time.

Saturday I missed the keynote talking to various people, then off to a talk by Ben Cotton: “We won. Now what?”. He talked about things going on in the open source movement these days and what they might mean or not for the future. I had actually heard of all these events, but hadn’t really thought much about what they might mean, so it was some good thought provoking fodder.

I managed to miss the coffee lovers meetup sadly, but then did manage to get into the packit talk. Great stuff there: automating your package builds and tests in Fedora from upstream projects. Lots of nice questions too, which they actually had answers for! 🙂

Tim Burke, long time Red Hatter gave a very fun talk called “Teamwork lessions learned in 3500km hiking” about his hiking the Appalachian Trail. There were really a lot of great things in this talk, I recommend watching the video of it. Some highlights: Try and do some random act of ‘trail magic’ kindness each week. Don’t worry about things away, just live in the moment. Lots of great life advice.

Then it was time for slideshow karioke. Always a ton of laughs. The premise: You get a set of random, advancing slides and you have to come up with some coherent talk using them. I think people are learning that it’s best to come with some idea what you want to talk about, tie it into the first slide and then try and let the audience figure out how the other slides fit in. Some of them were pretty well done this time.

This year there was a group of us that wasn’t too interested in the devconf party, so we just went for a nice quiet dinner and more relaxing evening.

Sunday I once again missed most of the keynote by getting stopped talking with folks and getting coffee, etc. But I managed to make the “Alternatives to modularity” talk. This was basically the same proposals as were floated on the devel list, with more detail. There unfortunately wasn’t much Q&A time and the time that they did have seemed pretty harsh feedback to me. I personally think the hardest part of their alternative is getting packages to be parallel installable, sometimes thats really really not easy. Aside from that though, I think their proposal would work and be much more simple. I do hope they try and persue the approach and convince module maintainers to switch. If we see after a while there’s no one using modules they will have won.

All in all another fun time at devconf. Lots of people, great talks, great area/venue. I recommend it. Of course get your tickets as soon as they go on sale as I am sure 2021 devconf.cz will sell out as quick as this year did. The number of new people really encouraged me, open source is contuing off to the next generation, really great to see!

Comments Off on Devconf.cz 2020

EPEL8 packages

by nirik on 2019/10/09 at 12:31 pm
Posted In: fedora, linux

With the opening up of EPEL8, there’s a lot of folks looking and seeing packages they formerly used in EPEL6/7 not being available and wondering why. The reason is simple: EPEL is not a fixed exact list of packages, it’s a framework that allows interested parties to build and provide the packages they are interested in providing to the community.

This means for a package to be in EPEL8, it requires a maintainer to step forward and explicitly ask “I’d like to maintain this in EPEL8” and then build, test and do all the other things needed to provide that package.

The reason for this is simple: We want a high quality, maintained collection of packages. Simply building things once and never again doesn’t allow for someone fixing bugs, updating the package or adjusting it for other changes. We need a active maintainer there willing and able to do the work.

So, if you do see some package missing that you would really like, how do you get it added to the collection? First, open a bug in bugzilla.redhat.com against the package. If it has a Fedora EPEL product version, use that, otherwise use Fedora. Explain that you would really like the current Fedora/EPEL6/7 maintainers to also maintain it for EPEL8. If they are willing, they will answer in the bug. If no answer after a few weeks, you could consider maintaining the package yourself. Consult with the epel-devel list or #epel-devel on IRC for further options.

Do note that mailing maintainer(s) directly isn’t nearly as good as just filing a bug. They would get the bug info anyhow in email, Other users might see that and add that they too want the package, the maintainer might hand off the package and the new packager could see the bug request but have no idea about private emails, some other packager might see the bug and offer to maintain it. All wins for a bug over private emails.

As the collection grows, these sorts of questions will likely die down, but it’s important to remember that every package needs (at least) one maintainer.

Comments Off on EPEL8 packages
  • Page 5 of 192
  • « First
  • «
  • 3
  • 4
  • 5
  • 6
  • 7
  • »
  • Last »

©2003-2023 Kevin's musings | Powered by WordPress with ComicPress | Hosted on Scrye Blogs | Subscribe: RSS | Back to Top ↑