Werner changed the topic of #armbian to: armbian - Linux for ARM development boards | www.armbian.com | Github: github.com/armbian | Commits: #armbian-commits | Forums Feed: #armbian-rss | Type 'help' for help | This channel is logged -> irc.armbian.com
xecuter has joined #armbian
xecuter has quit [Remote host closed the connection]
xecuter has joined #armbian
ChriChri_ has joined #armbian
ChriChri has quit [Ping timeout: 256 seconds]
ChriChri_ is now known as ChriChri
xecuter has quit [Remote host closed the connection]
dddddd has quit [Ping timeout: 260 seconds]
xecuter has joined #armbian
epsilonKNOT has quit [Ping timeout: 240 seconds]
epsilonKNOT_ has joined #armbian
epsilonKNOT_ has quit [Remote host closed the connection]
epsilonKNOT has joined #armbian
<lanefu>
hi!
plntyk has quit [Read error: Connection reset by peer]
Cruft has joined #armbian
<Werner>
Good morning
sassinak-work has quit [Ping timeout: 244 seconds]
sassinak-work has joined #armbian
indy has quit [Ping timeout: 265 seconds]
kolla has quit [Quit: %fog relay%]
indy has joined #armbian
kolla has joined #armbian
macc24 has joined #armbian
<IgorPec>
good morning
<Werner>
IgorPec, any changes worth mentioning for 20.05.4 besides the initramfs followup?
<lanefu>
IgorPec: for secrets, the sanest solution I've come up with is. Encrypt the gpg and ssh keys with ccrypt and store on host, store the ccrypt keyword in github secrets and then decrypt with ccat at runtime when needed
<Cruft>
...
plntyk has joined #armbian
rdorsch`away is now known as rdorsch
Cruft has quit [Quit: Leaving]
rdorsch is now known as rdorsch`away
rdorsch`away is now known as rdorsch
dddddd has joined #armbian
rdorsch is now known as rdorsch`away
<chewitt>
nekomancer[m] it seems moving vrtc to /dev/rtc1 is as simple as setting an alias in dts
<nekomancer[m]>
Nice!
macc24 has quit [Quit: WeeChat 2.8]
indy has quit [Read error: Connection reset by peer]
macc24 has joined #armbian
indy has joined #armbian
<ArmbianTwitter>
@SwiftPeru (Swift Peru): @LukaszErecinsk1 @thepine64 I've done the same as described in that tutorial, I guess my question was what image are they using for Ubuntu 20.04 (aarch64) with Panfrost? Last time I tried Ubuntu it had no OpenGL support. Also there is an Armbian version and the one on the Wiki. (3s ago)
chewitt has quit [Quit: Adios!]
xecuter has quit [Remote host closed the connection]
xecuter has joined #armbian
<IgorPec>
Werner: on images? Nothing special. Otherwise enabling GH actions but Jiras need to be sorted out.
<IgorPec>
lanefu: ok, better than leaving them in a plain sight. but this will probably brought up some refactoring. if we just decrypt keys at the start, we didn't acieve noting
<lanefu>
IgorPec: idea is the keys are always in encrypted on the filesystem... on decrypted durrign CI session.. adn values are just like empited into environment vars for CI to use
<IgorPec>
so you mean the actual key gets stored to a ENV variable?
<lanefu>
thats' what i was thinking, but i guess that won't really work for ssh-keys and gpg
<IgorPec>
isn't there any known practice for this'
<lanefu>
well so that pattern works for teh more commo CI cases.. which are usually like passwords and etc.. ex: database.. the app just reads it in that way.. but if we're using tools where the secret needs to be exposed on teh fielsystem its a little different
<lanefu>
let me talk to my infosec buddy some more
<IgorPec>
yeah. but in case this script is on push only, people with push access can do something, right?
<lanefu>
right, so only people with master branch access can get access to teh github secret and actually view it
<lanefu>
idea of having the secrets encrypted on the disk of the runners, is to minimize risk there if runner is compromised.....
<IgorPec>
yes, that too. i am just thinking how to get keys down if one wants them
<IgorPec>
or store keys on GH and place them to the runner right before start?
<lanefu>
well then people with access to master have direct access to the keys
<lanefu>
the idea to have the keys locally encrypted on disk, and decryption key in github is to further obfuscate that
<lanefu>
so that only via the actual CI session are teh keys available
<IgorPec>
yeah, this way would probably suffice ... just how to implement
<lanefu>
i've got it mostly figured out.. just need to iron out this last detail
<IgorPec>
ok
<lanefu>
okay.. still waiting on feedback from by buddy.. but here's the missing piece i think.. decrypt files to /dev/shm.... and have traps in bash script for cleanup.... then on normal scenarious and failures, bash removes them, but if the system is restarted or something, files disappear anyway beacuse /dev/shm
<lanefu>
which /dev/shm methoid is a common practice. you'll see k8s and nomad use that for secrets
<Werner>
IgorPec, okay. I think it makes more sense to announce it once it is fully functional. Until then I leave just the initramfs fix for 20.05.4 in the changelog
<IgorPec>
agree
<Werner>
I added IPv4 as option to connect to a bouncer. So for clients it is no longer restricted to IPv6 only.
gediz539 has quit [Remote host closed the connection]
IgorPec has quit [Remote host closed the connection]
drobo_00 has joined #armbian
IgorPec has joined #armbian
drobo_00 has quit [Ping timeout: 260 seconds]
macc24 has quit [*.net *.split]
sunshavi has quit [*.net *.split]
JuniorJPDJ has quit [*.net *.split]
torv has quit [*.net *.split]
oida has quit [*.net *.split]
macc24 has joined #armbian
sunshavi has joined #armbian
torv has joined #armbian
oida has joined #armbian
archetech has joined #armbian
agates[m] has quit [Ping timeout: 244 seconds]
solderfumes[m] has quit [Ping timeout: 246 seconds]
hyperreal has quit [Ping timeout: 246 seconds]
nekomancer[m] has quit [Ping timeout: 260 seconds]
jwb_ is now known as gymnodemi
xecuter has quit [Remote host closed the connection]
xecuter has joined #armbian
rdorsch`away is now known as rdorsch
LanDi has joined #armbian
<lanefu>
aha! you can use a env var as a file in bash with something like `ssh -i <(echo $MY_SSH_KEY)`
<lanefu>
and even more inline.. ssh -i <(ccat private.key.enc -k ${github.secret.keyword})
<lanefu>
omicronian 12:49 PM
ChanServ has quit [shutting down]
macc24 has quit [Quit: WeeChat 2.8]
xecuter has quit [Ping timeout: 244 seconds]
rdorsch is now known as rdorsch`away
ChanServ has joined #armbian
xecuter has joined #armbian
solderfumes[m] has joined #armbian
phantomse[m] has joined #armbian
JuniorJPDJ1 has joined #armbian
agates[m] has joined #armbian
psydruid has joined #armbian
hyperreal has joined #armbian
nekomancer[m] has joined #armbian
macc24 has joined #armbian
LanDi has quit [Remote host closed the connection]
Jacki has joined #armbian
<Jacki>
hi
<Jacki>
does recording from mic works on OP4 ?
psydruid has quit [Remote host closed the connection]
<Jacki>
???
<Jacki>
(I use runit)
<Jacki>
ops wrong channel!
<Jacki>
btw
<Jacki>
i use artix
<Jacki>
does recording from mic works on OP4 ?
<Werner>
Not sure. I dont have this board.
PPA has joined #armbian
xecuter has quit [Remote host closed the connection]
xecuter has joined #armbian
rdorsch`away is now known as rdorsch
archetech has quit [Quit: Konversation terminated!]
<Jacki>
does recording from mic works on OP4 ?
<IgorPec>
never tested that
IgorPec has quit [Remote host closed the connection]
<nekomancer[m]>
chewitt: did they accepted your patch?
toketin has joined #armbian
Strykar has quit [Quit: /quit]
Strykar has joined #armbian
<PPA>
Speaking of the OP4, how is it (compared to other RK3399 boards)?
<PPA>
The layout makes attaching a heatsink more awkward than if the SoC was on the bottom, that's obvious
<PPA>
but I read here and there about power supply/voltage, which the Rock Pi 4 seems to have fully covered
<PPA>
while other boards may struggle to power a lot of attached USB devices (drives etc.)?
Joe22 has joined #armbian
drobo_00 has joined #armbian
rdorsch is now known as rdorsch`away
<Joe22>
Hi, I'm trying to verify the download and signature for the RockPRO64 focal current desktop image, but the .xz is for 5.4.46 and the .asc and .sha files are for 5.4.43
<Joe22>
Nevermind, found the correct signature/hash files in the /archive directory
xecuter has quit [Remote host closed the connection]
xecuter has joined #armbian
Joe22 has left #armbian [#armbian]
drobo_00 has quit [Ping timeout: 240 seconds]
sassinak-work has quit [Ping timeout: 244 seconds]
sassinak-work has joined #armbian
Jacki has quit [Quit: Leaving]
macc24 has quit [Ping timeout: 240 seconds]
Elpaulo has quit [Read error: Connection reset by peer]