Posts published by: minus

Announcing sshign

Today, I'm annoucing the initial release of sshign, 0.1.0.

sshign uses your private SSH key to sign arbitrary chunks of data. The resulting signature can then be verified using your public SSH key.

Drew from SourceHut writes:

I often need to use secondary methods to verify the authenticity …

Writing man pages: What tool to use?

If whatever project or suite of projects you're writing a man page for, the answer is easy: stick to what's used already. For everyone else, here's a list of alternatives:

roff mdocml http://mandoc.bsd.lv/ pandoc asciidoc http://asciidoc.org/ pod2man ronn https://github.com/rtomayko/ronn scdoc https …

These aren't the packets I asked for

Since migrating a VM from qemu userspace networking to a dedicated IP and bridged networking I've been seeing abysmal throughput when downloading data from it. Instead of the usual 1.3MiB/s I get 30KiB/s tops. Taking a look with Wireshark a ton of retransmits of TCP segments appear …

VPN-in-a-box

Isolating the network interface provided by VPN software (like OpenVPN or tinc) may be a good idea if you intent to use it to isolate a program to that specific network.

This can somewhat be achieved using a separate user or group, iptables (to mark packets sent by that user …

Compositing on Xfce: VSync issues

Unfortuantely Xfce's compositor uses Xrender which does not support vertical synchronization. This seems to create a very constant tearing effect in vsynced OpenGL applications. Some drivers like Intel's open source driver or AMD or NVidia's binary blobs manage to force Xrender to vsync but the open source radeon driver doesn't …

OpenVPN as IPv6 Tunnel Broker

Long story short: add "server-ipv6 network/netmask" (for example a /80 of your server's /64) to your existing openvpn config and install npd6.

The modification of the OpenVPN config is trivial. It seems to be made primarily for the tun mode but works fine with tap (Layer 2 tunelling) as …

Monitor Brightness on the Desktop

Since I found the buttons on my monitor to be inconvenient, I decided to try to go for a commandline utility that could set the brightness. There are several ways this can be implemented:

  • the driver offers screen brightness setting through ACPI (via /sys/class/backlight, should work on most …

Firefox, remote commands and Xfce

I replaced the default browser in Xfce (Settings → Preferred Applications) with a custom Python script to do some additional URL handling. To open a link in Firefox you just have to run firefox -remote OpenURL(<url>) and you can even use it with multiple instances (add -P <profile>). Using the …