I like to use a custom debian container image, that has some tools installed and a non root user setup. I then dump and export the rootfs as container template.
To keep this template updated, I wrote this script.
This script works for all distribitions, you just have to update the variables:
#!/bin/bash
I always had the problem that synology doesn't let us auto update 3rd party packages such as the ones from SynoCommunity, so I wrote a shell script to auto update SynoCommunity Packages:
#! /bin/bash -e
PATH="/bin:/usr/syno/bin:${PATH}"
SYSTEM_PKGS=$(synopkg checkupdateall)
ONLY do this if you understand what this script does and when you are sure that this method is applicable to your card!!!
I'm not responsible for your doings! You are flashing the firmware of your ethernet card, in the worst case you endup with a soft- or even hardbricked card! Also this might void your warrenty.
Having said this, if you are uncertain if this will work for your card be sure to dump the ROM with a RPI, RPI Pico or 3.3v moded SPI-Flash Programmer:
I had trouble getting my i7-8700 65W to work in my m720q with a 65W PSU. It was working fine in Windows, but was throttling down first to 20 Watt, then to 15, 10, and finally to 7 Watt, which resulted in a maximum clock speed of 800 MHz.
The main problem seems to be a mix of crappy firmware settings from Lenovo/Intel (Reddit Post) and the weak power supply.
To fix this problem, we have to install some tools, and for them to work, you have to make sure that secure boot is OFF; otherwise, the kernel doesn't allow you to set the CPU power limits. The easiest way is to install in legacy mode; therefore, you need to disable secure boot and enable CSM in the BIOS, select legacy boot preferred.
| #!/usr/bin/env bash | |
| help () { | |
| echo "usage: ./bump-version version_number [major/minor/bug]" | |
| } | |
| # Check input remove prepending 'v' | |
| if grep -q -c -E '^v?[[:digit:]]{1,3}\.[[:digit:]]{1,3}\.[[:digit:]]{1,3}$' <<< ${1}; then | |
| version=$(sed 's/^.\{1\}//g' <<< ${1}) | |
| else |
If you want to use Touch ID have a look at: How to use use Bitwarden CLI with macOS Touch ID
Wirtten and tested on macOS Ventura
Before you can use Bitwarden CLI for your SSH private keys you have to add them to your Bitwarden account. Just create a normal login. The name, username and URI fields doesn't matter for my functions.
If you want to use Bitwarden CLI for ssh have a look at: How to use use Bitwarden CLI for SSH-Keys in macOS
Wirtten and tested on macOS Ventura
To allow Touch ID on your Mac to authenticate you for sudo access instead of a password you need to do the following.
| #!/bin/bash -xe | |
| NEW_PUB_KEY="$HOME/.ssh/id_ed25519.pub" | |
| OLD_PUB_KEY="$HOME/.ssh/id_rsa.pub" | |
| NEW_PUB_KEY_STR=$(cat ${NEW_PUB_KEY}) | |
| OLD_PUB_KEY_STR=$(cat ${OLD_PUB_KEY} | cut -d' ' -f2) | |
| for IP in $(cat ip-list-ssh.txt); do | |
| # Backup authorized_keys | |
| ssh ${USER}@${IP} "cp ~/.ssh/authorized_keys{,.bak}" | |
| # Add new key to authorized_keys |
| #!/bin/bash | |
| OLD_PUBLIC_KEY=$(uci get network.mullvad.private_key | wg pubkey) | |
| logger -p notice -t "Changing Wireguard Publickey" "Old Publickey=$OLD_PUBLIC_KEY" | |
| logger -p notice -t "Changing Wireguard Publickey" "Old Privatekey=$(uci get network.mullvad.private_key)" | |
| logger -p notice -t "Changing Wireguard Publickey" "Old IPs=$(uci get network.mullvad.addresses)" | |
| PRIVATE_KEY=$(wg genkey) | |
| logger -p notice -t "Changing Wireguard Publickey" "New Privatekey=$PRIVATE_KEY" | |
| PUBLIC_KEY=$(echo "$PRIVATE_KEY" | wg pubkey) | |
| logger -p notice -t "Changing Wireguard Publickey" "New Publickey=$PUBLIC_KEY" |
| server: | |
| # If no logfile is specified, syslog is used | |
| # logfile: "/var/log/unbound/unbound.log" | |
| verbosity: 0 | |
| interface: 127.0.0.1 | |
| port: 5335 | |
| do-ip4: yes | |
| do-udp: yes | |
| do-tcp: yes |