path: root/www/posts/atom.xml

<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
    <title type="text">The Home of David T. Sadler - All Posts</title>
    <id>https://davidtsadler.com/posts/atom.xml</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/"/>
    <link rel="self" type="application/atom+xml" href="https://davidtsadler.com/posts/atom.xml"/>
    <updated>2021-07-08T12:00:00Z</updated>
    <entry>
    <title type="text">HTTP_AUTHORIZATION Missing From Global $_SERVER Variable</title>
    <id>https://davidtsadler.com/posts/php/2021-07-08/http-authorization-missing-from-global-server-variable/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/php/2021-07-08/http-authorization-missing-from-global-server-variable/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2021-07-08T12:00:00Z</published>
    <updated>2021-07-08T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;HTTP_AUTHORIZATION Missing From Global $_SERVER Variable&lt;/h1&gt;&lt;blockquote&gt;Thu 8th July 2021 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;I came across an issue where I wanted to read the value of the HTTP_AUTHORIZATION key found in PHP's global $_SERVER variable.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;php&quot;&gt;$token = filter_input(INPUT_SERVER, 'HTTP_AUTHORIZATION');&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;However the value of null was been returned even though a Authorization header was passed as part of the HTTP request.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ curl 127.0.0.1:8080/bookmarks/add -i -H &amp;quot;Authorization:Bearer xyz&amp;quot; -d &amp;quot;url=http://example.com/2&amp;quot;&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;A quick print_r($_SERVER) confirmed that there was indeed no item for the key HTTP_AUTHORIZATION hence why I was getting a null value.&lt;/p&gt;&lt;p&gt;However the value was available with the getallheaders function.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;php&quot;&gt;$token = getallheaders()['Authorization']);&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;After a bit of research I found that in some situations Apache may not pass authorization headers to PHP for security reasons. However it is possible to work around this by creating a rewrite rule in the site's .htaccess file to put the authorization header into an environment variable.&lt;/p&gt;&lt;pre&gt;&amp;lt;IfModule mod_rewrite.c&amp;gt;
    # Handle Authorization Header.
    RewriteCond %{HTTP:Authorization} .
    RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
&amp;lt;/IfModule&amp;gt;&lt;/pre&gt;&lt;p&gt;After adding the above to the .htaccess file the HTTP_AUTHORIZATION key is now been populated with the value of the Authorization header.&lt;/p&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;/posts/php&quot;&gt;PHP - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Backing Up a Git Repository</title>
    <id>https://davidtsadler.com/posts/git/2021-06-13/backing-up-a-git-repository/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/git/2021-06-13/backing-up-a-git-repository/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2021-06-13T12:00:00Z</published>
    <updated>2021-06-13T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Backing Up a Git Repository&lt;/h1&gt;&lt;blockquote&gt;Sun 13th June 2021 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;Below is a quick and dirty way in which I backup all my repositories that are hosted at git.davidtsadler.com.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;#!/bin/sh

DATE_PREFIX=$(date +%Y%m%d)

BACKUP_DIRECTORY=/tmp

BACKUP_FILE=&amp;quot;${BACKUP_DIRECTORY}/${DATE_PREFIX}-repositories.tar.gz&amp;quot;

BACKUP_FILES=&amp;quot;${BACKUP_DIRECTORY}/*-repositories.tar.gz&amp;quot;

REPOSITORIES=/home/git/*.git

tar -czf $BACKUP_FILE $REPOSITORIES

find $BACKUP_FILES -mtime +3 -delete

exit 0&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;All it does it tar and gzip any .git directories found under /home/git. It also removes any backups that are more than three days old.&lt;/p&gt;&lt;p&gt;This script has been saved as /usr/bin/backup_repositories and is ran daily via cron.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;cron&quot;&gt;0 3 * * * /usr/bin/backup_repositories &amp;gt; /dev/null 2&amp;gt;&amp;amp;1&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;It is important to know that this backup strategy is far from ideal for repositories that are heavily used as you run the high risk of trying to backup a repository as users are pushing to it. As git updates a repository in two phases this will lead to a backup that may not contain all the data and so won't be suitable for restoring. However its fine for my purposes since I'm the only user and it's unlikely that I will be making changes during the time the backup is running.&lt;/p&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;/posts/git/2021-05-29/setting-up-a-self-host-git-server/&quot;&gt;2021-05-29 - Setting up a Self Hosted Git Server&lt;/a&gt;&lt;a href=&quot;/posts/git/&quot;&gt;Git - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Xrandr: Failed to Get Size of Gamma for Output Default</title>
    <id>https://davidtsadler.com/posts/linux/2021-06-05/xrandr-failed-to-get-size-of-gamma-for-output-default/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/linux/2021-06-05/xrandr-failed-to-get-size-of-gamma-for-output-default/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2021-06-05T12:00:00Z</published>
    <updated>2021-06-05T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Xrandr: Failed to Get Size of Gamma for Output Default&lt;/h1&gt;&lt;blockquote&gt;Sat 5th June 2021 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;After updating a laptop to Ubuntu 20.04 I found that the resolution of the display was fixed at 1024x1028 with no option in the settings for changing it to correct resolution of 1368x768.&lt;/p&gt;&lt;p&gt;Now normally I would fall back on using the xrandr command to add the missing resolution.&lt;/p&gt;&lt;p&gt;First the output of cvt command gives me the VESA CVT mode lines for the resolution and refresh rate.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ cvt 1366 768 60

Modeline &amp;quot;1368x768_60.00&amp;quot;   85.25  1368 1440 1576 1784  768 771 781 798 -hsync +vsync&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;This mode is then added with xrandr.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ xrandr --newmode &amp;quot;1368x768_60.00&amp;quot;   85.25  1368 1440 1576 1784  768 771 781 798 -hsync +vsync&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;The mode can then be associated with the display.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ xrandr --addmode default 1368x768_60&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Like I said, normally this is all that is required but in this instance the xrandr command kept displaying the below message and the desired resolution would not be applied.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;xrandr: Failed to get size of gamma for output default&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;After several fruitless attempts at fixing this I eventually found that the nomodeset kernel boot option had been set. This instructs the kernel to not load any video drivers and instead use BIOS modes. Apparently many open source drivers have removed support for non-kernel modes and fall back to using a very basic VESA driver. I'm assuming this basic driver does not support the resolution I want.&lt;/p&gt;&lt;p&gt;With further investigation I found that nomodeset was been specified via grub so removing it meant re-configuring grub by editing /etc/default/grub.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo vim /etc/default/grub&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;In this file I located the below line.&lt;/p&gt;&lt;pre&gt;GRUB_CMDLINE_LINUX_DEFAULT=&amp;quot;quiet splash nomodeset&amp;quot;&lt;/pre&gt;&lt;p&gt;I edited this line to remove nomodeset and saved the changes.&lt;/p&gt;&lt;pre&gt;GRUB_CMDLINE_LINUX_DEFAULT=&amp;quot;quiet splash&amp;quot;&lt;/pre&gt;&lt;p&gt;Now all I needed to do was update grub with the new default settings.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo update-grub&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;After a reboot the laptop was using the correct resolution and there was no need to use xrandr.&lt;/p&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;https://askubuntu.com/questions/207175/what-does-nomodeset-do&quot;&gt;askubuntu/ question regarding nomodeset does.&lt;/a&gt;&lt;a href=&quot;/posts/linux/&quot;&gt;Linux - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Setting up a Self Hosted Git Server</title>
    <id>https://davidtsadler.com/posts/git/2021-05-29/setting-up-a-self-host-git-server/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/git/2021-05-29/setting-up-a-self-host-git-server/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2021-05-29T12:00:00Z</published>
    <updated>2021-05-29T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Setting up a Self Hosted Git Server&lt;/h1&gt;&lt;blockquote&gt;Sat 29th May 2021 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;I've always liked the idea of self hosting some of my git repositories. After a bit of research I found that it involves.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;Installing git.&lt;/li&gt;&lt;li&gt;Creating a git user.&lt;/li&gt;&lt;li&gt;Setting up ssh so that I can log into the sever securely as the git user.&lt;/li&gt;&lt;li&gt;Creating a test repository on the server.&lt;/li&gt;&lt;li&gt;Creating a test project on my local machine.&lt;/li&gt;&lt;li&gt;Pushing the test project to the git sever.&lt;/li&gt;&lt;/ul&gt;&lt;h2&gt;Installing Git&lt;/h2&gt;&lt;p&gt;Since its an Ubuntu server installing git is as simple as.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo apt install git-core&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Creating a User&lt;/h2&gt;&lt;p&gt;The git user will serve two purposes.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;The repositories will be stored in the user's home directory.&lt;/li&gt;&lt;li&gt;The user account will contain the public ssh keys of remote users that can access the repositories.&lt;/li&gt;&lt;/ul&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo adduser --system --shell /usr/bin/git-shell --group --disabled-password --home /home/git git&lt;/code&gt;&lt;/pre&gt;&lt;ul&gt;&lt;li&gt;--system Creates a system user user. Not strictly required but since this is not a normal user account I prefer to use this option.&lt;/li&gt;&lt;li&gt;--shell /usr/bin/git-shell Restrict the git user to only git related activities. This also prevents remote users from obtaining a shell by logging in via ssh. Note that git-shell does not prevent normal git operations, such as pull and push, from working over ssh.&lt;/li&gt;&lt;li&gt;--group Creates a group that is the same name as the user.&lt;/li&gt;&lt;li&gt;--disabled-password Prevent logging in with a password. The use of ssh keys is still allowed.&lt;/li&gt;&lt;li&gt;--home /home/git The home directory for the user.&lt;/li&gt;&lt;/ul&gt;&lt;h2&gt;Setting up SSH&lt;/h2&gt;&lt;p&gt;On my local machine git will use ssh to connect to the remote server as the git user. In order to do this I will need to copy my public ssh key to the git user account.&lt;/p&gt;&lt;p&gt;The below commands create the required .ssh directory and authorized_keys file with the correct permissions.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo mkdir /home/git/.ssh
$ sudo chown git:git /home/git/.ssh
$ sudo chmod 700 /home/git/.ssh
$ sudo touch /home/git/.ssh/authorized_keys
$ sudo chown git:git /home/git/.ssh/authorized_keys
$ sudo chmod 600 /home/git/.ssh/authorized_keys&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Now I can copy the public ssh key of anyone who needs access to the repositories. There are a few ways of doing this and I tend to just edit the authorized_keys file and manually copy and paste the keys into it. &lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo vim /home/git/.ssh/authorized_keys&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Note that to prevent ssh port forwarding via the git user account I prepend the no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty options to the key.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo cat /home/git/.ssh/authorized_keys

no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty ssh-rsa
AAAAB3NzaC1yc2EAAAADAQABAAABAQCB007n/ww+ouN4gSLKssMxXnBOvf9LGt4LojG6rs6h
PB09j9R/T17/x4lhJA0F3FR1rP6kYBRsWj2aThGw6HXLm9/5zytK6Ztg3RPKK+4kYjh6541N
YsnEAZuXz0jTTyAUfrtU3Z5E003C4oxOj6H0rfIF1kKI9MAQLMdpGW1GYEIgS9EzSdfd8AcC
IicTDWbqLAcU4UpkaX8KyGlLwsNuuGztobF8m72ALC/nLF6JLtPofwFBlgc+myivO7TCUSBd
LQlgMVOFq1I2uPWQOkOWQAHukEOmfjy2jctxSDBQ220ymjaNsHT4kgtZg2AYYgPqdAv8JggJ
ICUvax2T9va5 gsg-keypair&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;On my local machine I can test ssh access.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ ssh git.davidtsadler.com

fatal: Interactive git shell is not enabled.
hint: ~/git-shell-commands should exist and have read and execute access.&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;The message that comes back indicates that ssh is working and that the git-shell is been used.&lt;/p&gt;&lt;h2&gt;Creating a Test Repository&lt;/h2&gt;&lt;p&gt;An empty repository is setup by running git init with the --bare option. I also ensure that the git user owns the repository and that main will be the default branch when its checked out.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo git init --bare /home/git/test.git/
$ sudo chown -R git:git /home/git/test.git/
$ sudo git --git-dir=/home/git/test.git/ symbolic-ref HEAD refs/heads/main&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Creating a Test Project&lt;/h2&gt;&lt;p&gt;Back on my local machine I can create a test project and push it to the remote server.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ mkdir test
$ cd test
$ git init
$ touch readme
$ git add .
$ git commit -m 'Initial commit'
$ git remote add origin git@git.davidtsadler.com:test.git
$ git push origin main&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;I can also test that I can clone the repository.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;rm -rf test
git clone git@git.davidtsadler.com:test.git&lt;/code&gt;&lt;/pre&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;/posts/git/&quot;&gt;Git - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Pre and Post Validation Hooks with Certbot</title>
    <id>https://davidtsadler.com/posts/letsencrypt/2021-05-28/pre-and-post-validation-hooks-with-certbot/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/letsencrypt/2021-05-28/pre-and-post-validation-hooks-with-certbot/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2021-05-28T12:00:00Z</published>
    <updated>2021-05-28T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Pre and Post Validation Hooks with Certbot&lt;/h1&gt;&lt;blockquote&gt;Fri 28th May 2021 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;I have a wildcard certificate for the domain davidtsadler.com that was issued by Let's Encrypt and I want to setup a cron job that periodically runs the certbot command to automatically renew it before it expires.&lt;/p&gt;&lt;p&gt;Now because its a wildcard certificate I have to use the DNS-01 challenge to validate that I control the domain name. Normally certbot is able to handle this validation during the renewing through a plugin that supports a dns provider. By using a plugin certbot is able to add and remove the required TXT dns records. Typically this is done through an API that the dns provider has to allow users to manage their dns entries. By suppling certbot with the credentials for the API a user is proving that they own the domain.&lt;/p&gt;&lt;p&gt;Since I am using Mail-in-a-Box for my dns there are no plugins available for certbot so instead I can use the pre and post validation hooks. These hooks are paths to scripts that will be called when certbot performs a DNS-01 challenge in manual mode. The pre auth hook is called at the start of the validation and in your script you can perform whatever steps are needed to pass the validation. It is here where you can call an API to add any dns entries. The post cleanup hook is where you can clean up any changes brought about by the auth hook.&lt;/p&gt;&lt;p&gt;Mail-in-a-Box provides an API for managing dns records that can be called by using curl. So my auth script will add a TXT record that is then removed by the cleanup script. Credentials for the API are the email and password of an existing user on the Mail-in-a-Box server.&lt;/p&gt;&lt;p&gt;When certbot calls the scripts it passes various environment variables so that they can be read by the scripts. Of which CERTBOT_VALIDATION is used to get the value of the TXT record, and CERTBOT_DOMAIN to obtain the domain name that is been validated.&lt;/p&gt;&lt;p&gt;The auth script is shown below.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;bash&quot;&gt;#!/bin/sh

EMAIL=username@example.com
PASSWORD='super strong password'

# Create TXT record
curl -s -X POST -d &amp;quot;$CERTBOT_VALIDATION&amp;quot; --user $EMAIL:$PASSWORD https://examplemailinaboxserver.com/admin/dns/custom/_acme-challenge.$CERTBOT_DOMAIN/txt

# Make sure the change has time to propagate over to DNS
sleep 25&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Below is the cleanup script.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;bash&quot;&gt;#!/bin/sh

EMAIL=username@example.com
PASSWORD='super strong password'

# Delete TXT record
curl -s -X DELETE -d &amp;quot;$CERTBOT_VALIDATION&amp;quot; --user $EMAIL:$PASSWORD https://examplemailinaboxserver.com/admin/dns/custom/_acme-challenge.$CERTBOT_DOMAIN/txt&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;With these scripts I can setup the below cron job to call certbot.&lt;/p&gt;&lt;pre&gt;0 0 * * * /usr/bin/certbot renew --preferred-challenges=dns -q --manual-auth-hook /path/to/auth.sh --manual-cleanup-hook /path/to/cleanup.sh  &amp;gt; /dev/null 2&amp;gt;&amp;amp;1&lt;/pre&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;https://letsencrypt.org/docs/challenge-types/#dns-01-challenge&quot;&gt;Let's Encrypt DNS-01 challenge.&lt;/a&gt;&lt;a href=&quot;https://certbot.eff.org/docs/using.html#pre-and-post-validation-hooks&quot;&gt;Certbot manual on pre and post validation hooks.&lt;/a&gt;&lt;a href=&quot;https://mailinabox.email&quot;&gt;Mail-in-a-Box. Self hosting mail server.&lt;/a&gt;&lt;a href=&quot;/posts/letsencrypt/&quot;&gt;Let's Encrypt - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Wildcard Certificates with Let's Encrypt</title>
    <id>https://davidtsadler.com/posts/letsencrypt/2021-05-27/wildcard-certificates-with-lets-encrypt/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/letsencrypt/2021-05-27/wildcard-certificates-with-lets-encrypt/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2021-05-27T12:00:00Z</published>
    <updated>2021-05-27T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Wildcard Certificates with Let's Encrypt&lt;/h1&gt;&lt;blockquote&gt;Thu 27th May 2021 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;Currently my little bit of the internet is davidtsadler.com. However I have a few ideas for some other projects that I would like to host under a subdomain. For example at some point I want to make my source code available at git.davidtsadler.com. I also want SSL on each of the sites.&lt;/p&gt;&lt;p&gt;Since I'm self hosting my sites I can make use of Let's Encrypt to obtain the nessecary certificates. However I don't want the hassle of maintaing a seperate certificate for each site so I'm going with having a single wildcard certificate that will be valid for each subdomain.&lt;/p&gt;&lt;p&gt;Obtaining a wildcard certificate can be done with the certbot command.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo certbot certonly --manual --preferred-challenges=dns --email me@email.com --agree-tos -d &amp;quot;*.davidtsadler.com,davidtsadler.com&amp;quot;&lt;/code&gt;&lt;/pre&gt;&lt;ul&gt;&lt;li&gt;certonly This will obtain and save the certificate but will not install it. That is left to you.&lt;/li&gt;&lt;li&gt;--manual Obtains certificates interactively.&lt;/li&gt;&lt;li&gt;--preferred-challenges=dns Tells certbot that I will use the dns method to prove I own the domain name.&lt;/li&gt;&lt;li&gt;--email Email address used for registration and recovery contact.&lt;/li&gt;&lt;li&gt;--agree-tos Automatically agree to the terms of service.&lt;/li&gt;&lt;li&gt;-d Comma seperataed list of domain names that the certificate should cover.&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;There are a couple of things to note with the above command. For starters I had to specifiy both *.davidtsadler and davidtsadler.com as the domains. This is because if I did not include davidtsadler.com then only subdomains would be covered by the certificate. In other words *.davidtsadler means any subdomain under davidtsadler.com but not the domain davidtsadler.com itself. &lt;/p&gt;&lt;p&gt;Secondaly, due to how my dns is been managed I could not have certbot automatically add the appropriate dns entries in order for it to validate the authenancy of the domain name. Instead certbot displayed the instructions needed to manually add two TXT records to my dns. Once I had done this certbot was happy that I owned the domain that the certificate would cover.&lt;/p&gt;&lt;p&gt;Running the certbot command results in the certificates been saved in /etc/letsencrypt/live/davidtsadler.com/&lt;/p&gt;&lt;p&gt;After that all I need to do is ensure that Apache has SSL support enabled and then add the below settings to my vhost file which tells Apache where to find the certificates.&lt;/p&gt;&lt;pre&gt;SSLCertificateFile /etc/letsencrypt/live/davidtsadler.com/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/davidtsadler.com/privkey.pem&lt;/pre&gt;&lt;p&gt;Now in future I can simply create the required vhost file for the new subdomain site and have it use the same certificate as the others.&lt;/p&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;https://davidtsadler.com&quot;&gt;davidtsadler.com - My little bit of the internet.&lt;/a&gt;&lt;a href=&quot;/posts/letsencrypt/&quot;&gt;Let's Encrypt - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Accessing Nextcloud With WebDAV on Arch</title>
    <id>https://davidtsadler.com/posts/nextcloud/2021-02-15/accessing-nextcloud-with-webdav-on-arch/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/nextcloud/2021-02-15/accessing-nextcloud-with-webdav-on-arch/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2021-02-15T12:00:00Z</published>
    <updated>2021-02-15T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Accessing Nextcloud With WebDAV on Arch&lt;/h1&gt;&lt;blockquote&gt;Mon 15th February 2021 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;I have a Nextcloud instance and I want to mount it as a directory on my local machine. Since Nextcloud cloud supports the WebDAV protocol its possible to do this by installing davfs2 which can mount a WebDAV resource.&lt;/p&gt;&lt;p&gt;The first thing I had to do was install davfs2.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo pacman -S davfs2&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Next I created the directory where Nextcloud would be mounted.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ mkdir -p .local/share/nextcloud&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;I then needed to tell Arch how to mount Nextcloud by adding the below line to the /etc/fstab file.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;https://my-nextcloud-server.com/path /home/david/.local/share/nextcloud davfs rw,user,uid=david,noauto 0 0&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Since access to Nextcloud is controlled by a username and password these where added to the ~/.davfs2 file.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;https://my-nextcloud-server.com/path username password&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;I made sure this file had the correct permissions to ensure security.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ chmod 600 ~/.davfs2/secrets&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Now I can mount Nextcloud and access my files just like any others.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ mount .local/share/nextcloud&lt;/code&gt;&lt;/pre&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;/posts/nextcloud&quot;&gt;Nextcloud - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">How to Host Your Own Gemini Site in the Cloud</title>
    <id>https://davidtsadler.com/posts/gemini/2021-02-08/how-to-host-your-own-gemini-site-in-the-cloud/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/gemini/2021-02-08/how-to-host-your-own-gemini-site-in-the-cloud/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2021-02-08T12:00:00Z</published>
    <updated>2021-02-08T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;How to Host Your Own Gemini Site in the Cloud&lt;/h1&gt;&lt;blockquote&gt;Mon 8th February 2021 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;So I have a Gemini site over at gemini://davidtsadler.co.uk and I thought I'd write up how I achieved this in case anyone was interested in doing the same.&lt;/p&gt;&lt;p&gt;I would say that from purchasing the domain name to having a complete server hosting the site took about 30 minutes in total.&lt;/p&gt;&lt;h2&gt;Purchasing a Domain Name&lt;/h2&gt;&lt;p&gt;I decided that for the moment I would keep my traditional &amp;quot;Big Web&amp;quot; content hosted at davidtsadler.com and use a different domain name for my new Gemini site. Since this meant purchasing a new one I popped over to Gandi.net to acquire davidtsadler.co.uk. Side note: I used to own this but decided not to renew it for some crazy reason.&lt;/p&gt;&lt;h2&gt;Creating a cloud sever&lt;/h2&gt;&lt;p&gt;My cloud provider of choice is Hetzner and creating a new server is done in eight steps.&lt;/p&gt;&lt;h3&gt;1. Location&lt;/h3&gt;&lt;p&gt;Hetzner provide a few locations in Europe as to where the server is hosted. For this server I chose Helsinki.&lt;/p&gt;&lt;h3&gt;2. Image&lt;/h3&gt;&lt;p&gt;I chose Ubuntu 20.04 as the operating system as this is the one I'm most familiar with.&lt;/p&gt;&lt;h3&gt;3. Type&lt;/h3&gt;&lt;p&gt;As this server is only going to a host a Gemini site I don't need a overly powerful system so I chose their most basic CX11 configuration. For €2.99 a month this gives me:&lt;/p&gt;&lt;ul&gt;&lt;li&gt;1 virtual CPU.&lt;/li&gt;&lt;li&gt;2GB ram.&lt;/li&gt;&lt;li&gt;20GB SSD .&lt;/li&gt;&lt;li&gt;20 TB of network traffic a month.&lt;/li&gt;&lt;/ul&gt;&lt;h3&gt;4. Volume&lt;/h3&gt;&lt;p&gt;You have the option of attaching additional storage to the server. I skipped this step as for the time been the 20GB SSD that comes with the server should be enough for my needs.&lt;/p&gt;&lt;h3&gt;5. Network.&lt;/h3&gt;&lt;p&gt;I skipped this step as its not needed.&lt;/p&gt;&lt;h3&gt;6. Additional features&lt;/h3&gt;&lt;p&gt;Again I skipped this step but select any if you believe that you will need them.&lt;/p&gt;&lt;h3&gt;7. SSH Key&lt;/h3&gt;&lt;p&gt;When a server is created a root user is added and a password is emailed to you so that you can login. However if you provide a SSH key it will be installed on the server instead of creating a password.&lt;/p&gt;&lt;p&gt;I like to use separate keys for each server that I manage so I tend store the them in a directory named after the hostname.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ mkdir ~/.ssh/davidtsadler.co.uk

$ ssh-keygen -t rsa -b 4096 -f ~/.ssh/davidtsadler.co.uk/id_rsa&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;The SSH key is added by clicking + ADD SSH KEY and then copying and pasting the contents of the id_rsa.pub file.&lt;/p&gt;&lt;h3&gt;8. Name&lt;/h3&gt;&lt;p&gt;I name my servers after the hostname so for this I called it davidtsadler.co.uk. I then created the server by clicking CREATE &amp;amp; BUY NOW.&lt;/p&gt;&lt;h2&gt;SSH&lt;/h2&gt;&lt;p&gt;Once the server was created I took the allocated IP address and ensured that I could access it via SSH using the key that I had provided.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ ssh root@135.181.201.71 -i ~/.ssh/davidtsadler.co.uk/id_rsa&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Resolve the Domain Name to the Server&lt;/h2&gt;&lt;p&gt;In my Gandi.net account I went to the DNS Records section for the domain name I had purchased. There I deleted everything except for the @ (A) and www (CNAME) records which was configured as follows:&lt;/p&gt;&lt;ul&gt;&lt;li&gt;@ (A) 135.181.201.71&lt;/li&gt;&lt;li&gt;www (CNAME) davidtsadler.co.uk.&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;The A record is configured with the IPv4 address of my new server and the CNAME with the domain name. Note that the CNAME must end with a period!&lt;/p&gt;&lt;p&gt;After saving the changes it was just a matter of waiting for it to propagate through the DNS system. At which point I could use the domain name when logging in via SSH.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ ssh root@davidtsadler.co.uk -i ~/.ssh/davidtsadler.co.uk/id_rsa&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Securing the Server&lt;/h2&gt;&lt;p&gt;At a bare minimum I setup a firewall and harden SSH. I may at a later date go further, such as installing fail2ban.&lt;/p&gt;&lt;h3&gt;Configure a Firewall&lt;/h3&gt;&lt;p&gt;This setup will deny any incoming requests unless they were first initiated by a request from the server. Since I need to be able to access the server I allow SSH. The Gemini protocol uses port 1965 so that is also allowed.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ ufw default allow outgoing
$ ufw default deny incoming
$ ufw allow OpenSSH
$ ufw allow 1965
$ ufw enable&lt;/code&gt;&lt;/pre&gt;&lt;h3&gt;Harden SSH&lt;/h3&gt;&lt;p&gt;I edited the /etc/ssh/sshd_config file.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ vim /etc/ssh/sshd_config&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;I added the two below options so that the root user is not allowed to access the sever via SSH and other users may only access using keys.&lt;/p&gt;&lt;pre&gt;PermitRootLogin no
PasswordAuthentication no&lt;/pre&gt;&lt;p&gt;Since I'd made changes to the configuration I needed to restart the SSH service.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ service sshd restart&lt;/code&gt;&lt;/pre&gt;&lt;h3&gt;Create non-root User&lt;/h3&gt;&lt;p&gt;Whenever I access a server I like to login as a non-root user that is able to run sudo on the system.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ adduser gemini

$ usermod -aG sudo gemini&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;As the SSH key is already on the server I can copy it to the non-root user account.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ rsync --archive --chown=gemini:gemini ~/.ssh /home/gemini&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;On my local system I confirm that I can log in as the new user without a password.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ ssh gemini@davidtsadler.co.uk -i ~/.ssh/davidtsadler.co.uk/id_rsa&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;I also confirm that I have sudo access.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo ls&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Installing a Gemini Site and Server&lt;/h2&gt;&lt;h3&gt;Directory structure&lt;/h3&gt;&lt;p&gt;I decided to go with a very simple directory structure. Each site will be a sub-directory in ~/sites that will be named after the domain name. Then each site will have the following sub-directories. The idea is that I may want to host more than one site in the future.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;bin This will contain the Gemini server binary.&lt;/li&gt;&lt;li&gt;certs TLS certificates for the site are kept here.&lt;/li&gt;&lt;li&gt;public This will contain the .gmi files of the site.&lt;/li&gt;&lt;li&gt;scripts Contains scripts used to start the Gemini server.&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;I created the directory structure with the below command.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ mkdir -p ~/sites/davidtsadler.co.uk/{bin,certs,public,scripts}&lt;/code&gt;&lt;/pre&gt;&lt;h3&gt;Install certificates&lt;/h3&gt;&lt;p&gt;Sine the Gemini protocol encourages using a self-signed certificate I installed one with the openssl command.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ openssl req -x509 \
    -newkey rsa:4096 \
    -keyout ~/sites/davidtsadler.co.uk/certs/key.rsa \
    -out ~/sites/davidtsadler.co.uk/certs/cert.pem \
    -days 3650 \
    -nodes \
    -subj &amp;quot;/CN=davidtsadler.co.uk&amp;quot;&lt;/code&gt;&lt;/pre&gt;&lt;h3&gt;Create Some Test Content&lt;/h3&gt;&lt;p&gt;I created a very simple index.gmi file purely for testing.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ cat &amp;lt;&amp;lt; EOF &amp;gt; ~/sites/davidtsadler.co.uk/public/index.gmi
# Welcome

Hello world!
EOF&lt;/code&gt;&lt;/pre&gt;&lt;h3&gt;Install the Gemini Server Binary&lt;/h3&gt;&lt;p&gt;I decided to go with agate as the Gemini server as its very simple to install and configure. Installing it was a matter of downloading the binary archive into the bin directory and setting the executable permission on it.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ cd ~/sites/davidtsadler.co.uk/bin

$ wget https://github.com/mbrubeck/agate/releases/download/v2.3.0/agate.x86_64-unknown-linux-gnu.gz

$ gunzip agate.x86_64-unknown-linux-gnu.gz

$ mv agate.x86_64-unknown-linux-gnu agate

$ chmod u+x agate&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;I wrote a very simple bash script to run agate and have it serve the site.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ cat &amp;lt;&amp;lt; EOF &amp;gt; ~/sites/davidtsadler.co.uk/scripts/start
#!/bin/bash

/home/gemini/sites/davidtsadler.co.uk/bin/agate \
    --content /home/gemini/sites/davidtsadler.co.uk/public/ \
    --key /home/gemini/sites/davidtsadler.co.uk/certs/key.rsa \
    --cert /home/gemini/sites/davidtsadler.co.uk/certs/cert.pem \
    --addr [::]:1965 \
    --addr 0.0.0.0:1965 \
    --hostname davidtsadler.co.uk \
    --lang en-GB
EOF

$ chmod u+x ~/sites/davidtsadler.co.uk/scripts/start&lt;/code&gt;&lt;/pre&gt;&lt;h3&gt;Testing the Site&lt;/h3&gt;&lt;p&gt;At this point I have the Gemini server installed and a site available for testing.&lt;/p&gt;&lt;p&gt;I first started agate with the bash script.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ ~/sites/davidtsadler.co.uk/scripts/start

[2021-02-05T17:26:56Z INFO  agate] Listening on [[::]:1965, 0.0.0.0:1965]...&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;With agate up and running I pointed my Gemini client to gemini://davidtsadler.co.uk and confirmed I was able to access the site before entering Ctrl-C to halt agate.&lt;/p&gt;&lt;h3&gt;Configure Systemd&lt;/h3&gt;&lt;p&gt;Since I was happy that agate was able to serve my new site I created a systemd unit to ensure that agate was started whenever the system was rebooted.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo vim /etc/systemd/system/agate.service&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;The unit is very simple and just runs the bash script to start agate once the network is available.&lt;/p&gt;&lt;pre&gt;[Unit]
Description=Agate Gemini Server
After=network.target

[Service]
Type=simple
User=gemini
Group=gemini
ExecStart=/home/gemini/sites/davidtsadler.co.uk/scripts/start

[Install]
WantedBy=default.target&lt;/pre&gt;&lt;p&gt;I then started this service and confirmed it was working.&lt;/p&gt;&lt;pre&gt;$ sudo systemctl start agate.service

$ sudo systemctl status agate.service

Active: active (running)&lt;/pre&gt;&lt;p&gt;The final step was to have this service start when the system is rebooted.&lt;/p&gt;&lt;pre&gt;$ sudo systemctl enable agate.service&lt;/pre&gt;&lt;h2&gt;Conclusion&lt;/h2&gt;&lt;p&gt;Setting up a Gemini site was easy to do and I hope this guide shows it. I have several ideas about how I'm going to use this new site and I'm excited to see where this leads to.&lt;/p&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;https://www.gandi.net/&quot;&gt;Gandi.net - My domain registrar of choice.&lt;/a&gt;&lt;a href=&quot;https://hetzner.cloud/?ref=Gf3UFbRaixBK&quot;&gt;Hetzner - My cloud server provider.&lt;/a&gt;&lt;a href=&quot;https://github.com/mbrubeck/agate/&quot;&gt;Agate - A simple Gemini server.&lt;/a&gt;&lt;a href=&quot;gemini://davidtsadler.co.uk/&quot;&gt;davidtsadler.co.uk - My Gemini site.&lt;/a&gt;&lt;a href=&quot;/posts/gemini/&quot;&gt;Gemini - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Installing PHP 8 for Windows 10</title>
    <id>https://davidtsadler.com/posts/php/2021-01-18/installing-php-8-for-windows-10/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/php/2021-01-18/installing-php-8-for-windows-10/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2021-01-18T12:00:00Z</published>
    <updated>2021-01-18T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Installing PHP 8 for Windows 10&lt;/h1&gt;&lt;blockquote&gt;Mon 18th January 2021 By David T. Sadler.&lt;/blockquote&gt;&lt;h2&gt;Getting Started&lt;/h2&gt;&lt;p&gt;The PHP For Windows site provides pre-built Windows binaries for you to download. Which version you download depends upon two things.&lt;/p&gt;&lt;p&gt;1. Is your system a 64 or 32 bit machine.&lt;/p&gt;&lt;p&gt;2. Are you planning to use IIS or Apache as the web server.&lt;/p&gt;&lt;p&gt;For 64 bit systems the x64 file should be downloaded. If you plan to use IIS then get the Non Thread Safe (NTS) version otherwise use the Thread Safe (TS) version.&lt;/p&gt;&lt;p&gt;The PHP 8 binaries require to have the Visual C++ Redistributable for Visual Studio 2015-2019 be installed as well.&lt;/p&gt;&lt;h2&gt;Download and Installation&lt;/h2&gt;&lt;p&gt;1. Download the Visual C++ Redistributable for Visual Studio 2015-2019 executable and install it.&lt;/p&gt;&lt;p&gt;2. Download the appropriate PHP 8 Zip archive for your Windows system. &lt;/p&gt;&lt;p&gt;3. Extract the Zip archive into a folder called php in your user folder. This should result in a folder at C:\Users\[username]\php.&lt;/p&gt;&lt;h2&gt;Configuring Windows&lt;/h2&gt;&lt;p&gt;In order to run the PHP executable from the command line the path to where the Zip archive was extracted to needs to be added to the Windows Path environment variable. &lt;/p&gt;&lt;p&gt;1. Right click on the start menu and select System.&lt;/p&gt;&lt;p&gt;2. Type Control Panel into the search field and select the Control Panel option when it appears.&lt;/p&gt;&lt;p&gt;3. Click System and Security and then the System option.&lt;/p&gt;&lt;p&gt;4. Click Advanced system settings from the left side menu to bring up a dialog box.&lt;/p&gt;&lt;p&gt;5. Select the Advanced tab and then click Environment Variables.&lt;/p&gt;&lt;p&gt;6. Select the Path option from the User variables list and click Edit.&lt;/p&gt;&lt;p&gt;7. Click New and enter the path to where you extracted the Zip archive. This should be C:\Users\[username]\php. You can also click Browse instead and navigate to the folder.&lt;/p&gt;&lt;p&gt;8. Click OK to close the Edit environment variable dialog.&lt;/p&gt;&lt;p&gt;9. Click OK again to close the Environment Variables dialog.&lt;/p&gt;&lt;p&gt;10. Click OK for a third time to close the System Properties dialog.&lt;/p&gt;&lt;h2&gt;Checking Installation&lt;/h2&gt;&lt;p&gt;Open up either PowerShell or the Command Prompt and enter php -v to verify that PHP was installed correctly. You should see output similar to that shown below.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;C:\Users\dev&amp;gt;php -v

PHP 8.0.1 (cli) (built: Jan 5 2021 23:43:33) ( NTS Visual C++ 2019 x64 )
Copyright (c) The PHP Group
Zend Engine v4.0.1, Copyright (c) Zend Technologies&lt;/code&gt;&lt;/pre&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;https://windows.php.net/&quot;&gt;PHP For Windows.&lt;/a&gt;&lt;a href=&quot;/posts/php&quot;&gt;PHP - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Installing Laravel Homestead in Arch Linux</title>
    <id>https://davidtsadler.com/posts/laravel/2020-12-21/installing-laravel-homestead-in-arch-linux/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/laravel/2020-12-21/installing-laravel-homestead-in-arch-linux/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2020-12-21T12:00:00Z</published>
    <updated>2020-12-21T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Installing Laravel Homestead in Arch Linux&lt;/h1&gt;&lt;blockquote&gt;Mon 21st December 2020 By David T. Sadler.&lt;/blockquote&gt;&lt;h2&gt;Introduction&lt;/h2&gt;&lt;p&gt;Laravel Homestead is a pre-packaged Vagrant box that gives you a development environment with PHP, a web server, and several other server software already installed. This guide explains how I install and configure it on my Arch Linux system. I install Homestead in such a way that enables me to add multiple projects to the single instance of Homestead. Because of this you may find that you will need to adapt the guide to how you prefer to manage your projects.&lt;/p&gt;&lt;h2&gt;Installing Dependencies&lt;/h2&gt;&lt;p&gt;Vagrant will need to be installed since Laravel Homestead is a pre-configured Vagrant box. Select virtualbox if you are prompted for which provider Vagrant should use.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo pacman -S vagrant&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Install Virtualbox as this will be used as a provider by Vagrant. When prompted select the virtualbox-host-modules-arch package.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo pacman -S virtualbox&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Install Homestead&lt;/h2&gt;&lt;p&gt;Homestead is installed by cloning the repository onto your host machine.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ git clone https://github.com/laravel/homestead.git ~/.local/share/homestead&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;The cloned repository defaults to the latest master branch. As this can be considered unstable it is recommended to checkout a tagged version of Homestead or the release branch as this will always be the latest stable version.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ cd ~/.local/share/homestead

$ git checkout release&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Create the Homestead.yaml file by using the init.sh command.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ bash init.sh&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Configuring the host machine&lt;/h2&gt;&lt;p&gt;Before I launch Homestead for the first time there are a few things that I like to do first on the host machine.&lt;/p&gt;&lt;h3&gt;Creating a host project&lt;/h3&gt;&lt;p&gt;One of the advantages with Homestead is that it allows you to share a directory on your host machine with the virtual guest machine and have that served by the web server.&lt;/p&gt;&lt;p&gt;For this guide the commands below will create a very simple PHP site.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ mkdir -p ~/projects/testsite/public

$ echo &amp;quot;&amp;lt;?php phpinfo();&amp;quot; &amp;gt; ~/projects/testsite/public/index.php&lt;/code&gt;&lt;/pre&gt;&lt;h3&gt;Setting up SSH&lt;/h3&gt;&lt;p&gt;I like to use unique ssh keys for servers that I connect to and that includes any virtual machines running on my local machine. The ssh-keygen command generates a new key that I store in a directory separate from my other ones.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ mkdir  ~/.ssh/homestead

$ ssh-keygen -t rsa -b 4096 -f ~/.ssh/homestead/id_rsa&lt;/code&gt;&lt;/pre&gt;&lt;h3&gt;Hostname Resolution&lt;/h3&gt;&lt;p&gt;Since I am using one instance of Homestead for multiple sites I need to configure the host machine so that requests are directed to the correct site on the virtual machine. This is done by adding an entry into the /etc/hosts file for each site. &lt;/p&gt;&lt;p&gt;First I need to know the IP address of the virtual machine. This can be done by looking in the Homestead.yaml file for the ip entry.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;yaml&quot;&gt;ip: &amp;quot;192.168.10.10&amp;quot;&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Then for each site that will be hosted on the virtual machine add it's domain and ip to the /etc/hosts file. &lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo nvim /etc/hosts&lt;/code&gt;&lt;/pre&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;192.168.10.10 testsite.local&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Configuring Homestead&lt;/h2&gt;&lt;p&gt;Homestead is configured by editing the Homestead.yaml file that was created with the init.sh command earlier.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ cd ~/.local/share/homestead

$ nvim Homestead.yaml&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;First tell Vagrant that Virtualbox will be providing the virtual machine.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;yaml&quot;&gt;set provider: virtualbox&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Vagrant needs to setup the ssh keys between the host and the guest so that you can connect via ssh. Enter the path to the one created earlier.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;yaml&quot;&gt;authorize: ~/.ssh/homestead/id_rsa.pub

keys:
    - ~/.ssh/homestead/id_rsa&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Share the project folder with the virtual machine. This setting will make the directory /home/vagrant/projects/testsite available in the virtual machine. The contents of this directory will be shared with the host machine directory ~/projects/testsite.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;yaml&quot;&gt;folders:
    - map: ~/projects/testsite
      to: /home/vagrant/projects/testsite&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Setup Homestead so that it can serve the application through the 'domain' testsite.local. Note how this matches the name added to /etc/hosts earlier.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;yaml&quot;&gt;sites:
    - map: testsite.local
      to: /home/vagrant/projects/testsite/public&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Have Homestead create a database for our application.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;yaml&quot;&gt;databases:
    - testsite&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Since I'm using a database ensure that a database server is installed on the virtual machine.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;yaml&quot;&gt;features:
    - mariadb: true&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Launching Homestead&lt;/h2&gt;&lt;p&gt;Homestead is started with the vagrant up command. It may take a while for Homestead to launch if this is the first time running this command as Vagrant has to first download the actual virtual machine file.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ cd ~/.local/share/homestead

$ vagrant up&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Once the machine is booted I can browse to http://testsite.local/ to see the simple site that is now served by Homestead.&lt;/p&gt;&lt;h2&gt;Installing a Laravel Site&lt;/h2&gt;&lt;p&gt;Now that Homestead is installed and serving a simple site its time to move onto installing the first Laravel application. Since Homestead provides all the tools required to do this the first thing to do is connect to the virtual machine.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ cd ~/.local/share/homestead

$ vagrant ssh&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Once connected to the virtual machine navigate to the project folder of the site. Remember that this is the folder that is also been shared with the host machine.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ cd ~/projects/testsite&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Clear the contents of this folder otherwise composer will complain about a non-empty directory.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell &quot;&gt;$ rm -rf public&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Use composer to install a Laravel project.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ composer create-project laravel/laravel .&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Setting Up The Application Database&lt;/h2&gt;&lt;p&gt;Once Larvel is installed a database needs to be created for the application. Connect to the database server with the mysql command.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ mysql -uhomestead -psecret&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Check that the application's database was created when the virtual machine was first booted.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;mysql&quot;&gt;SHOW DATABASES;

+--------------------+
| Database           |
+--------------------+
| homestead          |
| information_schema |
| mysql              |
| performance_schema |
| sys                |
| testsite           |
+--------------------+&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;If the database does not exist create it with the below SQL.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;mysql&quot;&gt;CREATE DATABASE testsite;&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Create a MySQL user for the application and grant permissions to use the application database.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;mysql&quot;&gt;CREATE USER 'testsite'@'localhost' IDENTIFIED BY 'testsite';

GRANT ALL PRIVILEGES ON testsite.* TO 'testsite'@'localhost';&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Exit the database server.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;mysql&quot;&gt;exit&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;To check the new MySql user account simply connect as that user with the credentials used earlier.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ mysql -utestsite -ptestsite&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;The result of the SHOW DATABASE sql should show that the user account can see the application database.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;mysql&quot;&gt;SHOW DATABASES;

+--------------------+
| Database           |
+--------------------+
| information_schema |
| testsite           |
+--------------------+&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Configuring The Laravel  Application&lt;/h2&gt;&lt;p&gt;Edit the supplied .env file.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ vim .env&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;If one does not exist then copy the example file.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ cp .env.example .env&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Change the environment variables to match those below. Some of changes ensure that Laravel can connect to the database created earlier.&lt;/p&gt;&lt;pre&gt;APP_NAME='Test Site'

APP_URL=http://testsite.local

DB_CONNECTION=mysql
DB_HOST=127.0.0.1
DB_PORT=3306
DB_DATABASE=testsite
DB_USERNAME=testsite
DB_PASSWORD=testsite&lt;/pre&gt;&lt;p&gt;Now when you browse to http://testsite.local you will see the Laravel welcome page.&lt;/p&gt;&lt;h2&gt;Simplified SSH&lt;/h2&gt;&lt;p&gt;I prefer to just use the host system's ssh command to connect to Homestead as it cuts out having to navigate to the Homestead directory and running vagrant ssh.&lt;/p&gt;&lt;p&gt;To simplify ssh I first add a hostname for the virtual machine to the file /etc/hosts/&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;192.168.10.10 homestead&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;I then edit ~/.ssh/config and add the below configuration. This tells ssh to automatically use the keys and username specified when connecting to the virtual machine.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;ssh&quot;&gt;Host homestead
  IdentityFile ~/.ssh/homestead/id_rsa
  User vagrant&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;From now on I can simply do ssh homestead from any directory to connect to the Homestead virtual machine.&lt;/p&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;https://laravel.com/docs/8.x/homestead/&quot;&gt;Laravel Homestead&lt;/a&gt;&lt;a href=&quot;/posts/larvel/&quot;&gt;Laravel - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">SQLSTATE[HY000] [2002] php_network_getaddresses: getaddrinfo failed</title>
    <id>https://davidtsadler.com/posts/laravel/2020-12-14/sqlstate-hy000-2002-php-network-getaddresses-getaddrinfo-failed/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/laravel/2020-12-14/sqlstate-hy000-2002-php-network-getaddresses-getaddrinfo-failed/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2020-12-14T12:00:00Z</published>
    <updated>2020-12-14T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;SQLSTATE[HY000] [2002] php_network_getaddresses: getaddrinfo failed&lt;/h1&gt;&lt;blockquote&gt;Mon 14th December 2020 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;One of the first things you do when creating a new Larvel application is run php artisan migrate to create the application database tables. However you may come across the below message.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ php artisan migrate

Illuminate\Database\QueryException

  SQLSTATE[HY000] [2002] php_network_getaddresses: getaddrinfo failed: Temporary failure in name resolution (SQL: select * from information_schema.tables where table_schema = testsite and table_name = migrations and table_type = 'BASE TABLE')

  at vendor/laravel/framework/src/Illuminate/Database/Connection.php:678
    674▕         // If an exception occurs when attempting to run a query, we'll format the error
    675▕         // message to include the bindings with SQL, which will make this exception a
    676▕         // lot more helpful to the developer instead of just the database's errors.
    677▕         catch (Exception $e) {
    678▕             throw new QueryException(
    679▕                 $query, $this-&amp;gt;prepareBindings($bindings), $e
    680▕             );
    681▕         }
    682▕

      +33 vendor frames
  34  artisan:37
      Illuminate\Foundation\Console\Kernel::handle()&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;The cause of this issue is due to a change introduced to the .env.example file. This changed the environment variable DB_HOST from 127.0.0.1 to mysql. The reason for this change is to support [Laravel Sail](https://laravel.com/docs/8.x/sail) which is a Docker development environment for Laravel.&lt;/p&gt;&lt;p&gt;The change means your Laravel application will try and connect to a database server with the hostname of mysql. Unless this exists then the application can't connect.&lt;/p&gt;&lt;p&gt;To resolve the issue just change the value back to 127.0.0.1&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;DB_HOST=127.0.0.1&lt;/code&gt;&lt;/pre&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;https://github.com/laravel/laravel/commit/a895748980b3e055ffcb68b6bc1c2e5fad6ecb08#diff-a3046da0d15a27e89f2afe639b25748a7ad4d9290af3e7b1b6c1a5533c8f0a8cL11&quot;&gt;Commit that changed .env.example.&lt;/a&gt;&lt;a href=&quot;https://laravel.com/docs/8.x/sail/&quot;&gt;Laravel Sail&lt;/a&gt;&lt;a href=&quot;/posts/larvel/&quot;&gt;Laravel - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Installing Zsh and Powerlevel10k on Arch Linux</title>
    <id>https://davidtsadler.com/posts/arch/2020-09-07/installing-zsh-and-powerlevel10k-on-arch-linux/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/arch/2020-09-07/installing-zsh-and-powerlevel10k-on-arch-linux/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2020-09-07T12:00:00Z</published>
    <updated>2020-09-07T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Installing Zsh and Powerlevel10k on Arch Linux&lt;/h1&gt;&lt;blockquote&gt;Mon 7th September 2020 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;I have been a bash user ever since I started using Linux. But after installing Arch Linux I wanted to give another shell a try and so decided on Zsh. Below is how I went about replacing bash with Zsh.&lt;/p&gt;&lt;h2&gt;Installing Zsh&lt;/h2&gt;&lt;p&gt;Zsh is installed via pacman.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo pacman -S zsh&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Check that Zsh has been installed by running it from the terminal.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ zsh&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Since this is the first time that Zsh has been run you should now see zsh-newuser-install which will allow you to setup some basic configuration. If you wish to skip this just press the q key. You can always manually run this with the below commands at a later date.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ autoload -Uz zsh-newuser-install
$ zsh-newuser-install -f&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Changing The Default Shell&lt;/h2&gt;&lt;p&gt;Installing Zsh does not automatically make it the system's default shell. The next time you log back in you will find that your current shell is still in use. You can check which shell is been used by looking at the SHELL environment variable.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ echo $SHELL

/bin/bash&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;To see a list of shells that have been installed use the chsh command.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ chsh -l

/bin/sh
/bin/bash
/usr/bin/git-shell
/bin/zsh
/usr/bin/zsh&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;The same command can be used to change the default shell by providing it with the full path to the shell.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ chsh -s /bin/zsh&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Note that this change is not instant and you will need to log out and log in again for it to take affect. Once you have done that check the SHELL environment variable again to confirm the change.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ echo $SHELL

/bin/ksh&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Installing Powerlevel10k&lt;/h2&gt;&lt;p&gt;Powerlevel10k is a theme for Zsh and in order to make the most of it you should install the Meslo Nerd Font that has been patched for Powerlevel10k.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ yay -Sy --noconfirm ttf-meslo-nerd-font-powerlevel10k&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;You need to configure your terminal to use this font. How this is done is dependant upon what terminal you are using. Since I use st from suckless I need to edit the file config.h and specify MesloLGS NF in the font settings.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;static char *font = &amp;quot;MesloLGS NF:pixelsize=14:antialias=true:autohint=true&amp;quot;;&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Before rebuilding st.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo make install&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Now that the dependences have been meet Powerlevel10k can be installed.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ yay -Sy --noconfirm zsh-theme-powerlevel10k-git&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Once it has been installed ensure that Zsh loads Powerlevel10k.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ echo 'source /usr/share/zsh-theme-powerlevel10k/powerlevel10k.zsh-theme' &amp;gt;&amp;gt;! ~/.zshrc&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;You can now open a new terminal which will start the Powerlevel10k configuration wizard. This will ask you a few questions and configure your prompt. If it doesn't trigger automatically, type p10k configure.&lt;/p&gt;&lt;p&gt;Once the configuration wizard has finished open a new terminal and you should see the Powerlevel10k theme been used.&lt;/p&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;/posts/arch/2020-05-25/installing-arch-linux-on-a-x220-thinkpad/&quot;&gt;Installing Arch Linux on a Thinkpad X220.&lt;/a&gt;&lt;a href=&quot;https://www.zsh.org/&quot;&gt;Zsh.&lt;/a&gt;&lt;a href=&quot;https://github.com/romkatv/powerlevel10k/&quot;&gt;Powerlevel10k.&lt;/a&gt;&lt;a href=&quot;https://st.suckless.org/&quot;&gt;Simple Terminal.&lt;/a&gt;&lt;a href=&quot;/posts/arch/&quot;&gt;Arch - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Enabling Audio in Arch Linux</title>
    <id>https://davidtsadler.com/posts/arch/2020-08-31/enabling-audio-in-arch-linux/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/arch/2020-08-31/enabling-audio-in-arch-linux/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2020-08-31T12:00:00Z</published>
    <updated>2020-08-31T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Enabling Audio in Arch Linux&lt;/h1&gt;&lt;blockquote&gt;Mon 31st August 2020 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;If you have recently installed Arch Linux you may have found that there is no sound when playing media. This is because by default ALSA has all channels muted.&lt;/p&gt;&lt;h2&gt;Installing the ALSA Utilities&lt;/h2&gt;&lt;p&gt;The Advanced Linux Sound Architecture (ALSA) is the part of the Linux kernel that manages the sound devices on your system. In addition to this the project also provides several command-line utilities that allow you to configure these devices. These can be installed with pacman.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo pacman -S alsa-utils&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Unmuting The Channels&lt;/h2&gt;&lt;p&gt;Channels can be unmuted with amixer.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ amixer sset Master unmute
$ amixer sset Speaker unmute
$ amixer sset Headphone unmute&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;You can test that the speakers are working with the speaker-test command.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ speaker-test -c 2&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;If you are still getting no sound then it could be that the volume has been set to zero. Use amixer again to increase the volume.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ amixer sset Master 100%
$ amixer sset Speaker 100%
$ amixer sset Headphone 100%&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Unmute with Alsamixer&lt;/h2&gt;&lt;p&gt;If you prefer a more intuitive ncurses interface you can use alsamixer.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ alsamixer&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Channels that are muted will have the MM label below them. Unmuted channels have 00.&lt;/p&gt;&lt;p&gt;Use the ← and → keys to scroll to the muted channel and press m to unmute it.&lt;/p&gt;&lt;p&gt;The volume can be increased and decreased with the ↑ and ↓ keys.&lt;/p&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;/posts/arch/2020-05-25/installing-arch-linux-on-a-x220-thinkpad/&quot;&gt;Installing Arch Linux on a Thinkpad X220.&lt;/a&gt;&lt;a href=&quot;/posts/arch/&quot;&gt;Arch - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Pacman Cheat Sheet For Ubuntu Users</title>
    <id>https://davidtsadler.com/posts/arch/2020-08-24/pacman-cheat-sheet-for-ubuntu-users/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/arch/2020-08-24/pacman-cheat-sheet-for-ubuntu-users/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2020-08-24T12:00:00Z</published>
    <updated>2020-08-24T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Pacman Cheat Sheet For Ubuntu Users&lt;/h1&gt;&lt;blockquote&gt;Mon 24th August 2020 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;As a regular Ubuntu user I am used to using apt for system maintenance. But now that I've installed Arch Linux I will be using pacman and so below is a cheat sheet for myself that shows the pacman equivalent of some common apt actions.&lt;/p&gt;&lt;pre&gt;Action                     | Apt                            | Pacman                     |
---------------------------|--------------------------------|----------------------------|
Install a package          | apt install &amp;lt;package name&amp;gt;     | pacman -S &amp;lt;package name&amp;gt;   |
Remove a package           | apt remove &amp;lt;package name&amp;gt;      | pacman -Rs &amp;lt;package name&amp;gt;  |
Search for a package       | apt serch &amp;lt;search term&amp;gt;        | pacman -Ss &amp;lt;regexp&amp;gt;        |
Upgrade packages           | apt update &amp;amp;&amp;amp; apt upgrade      | pacman -Syu                |
Upgrade distribution       | apt update &amp;amp;&amp;amp; apt dist-upgrade | pacman -Syu                |
Clean up local caches      | apt autoclean                  | pacman -Scc                |
Remove unused dependencies | apt autoremove                 | pacman -Qmq | pacman -Rs - |&lt;/pre&gt;&lt;h2&gt;Install a Package&lt;/h2&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ pacman --sync &amp;lt;package name&amp;gt;

$ pacman -S &amp;lt;package name&amp;gt;&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Installs a package and its dependencies.&lt;/p&gt;&lt;h2&gt;Remove a Package&lt;/h2&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ pacman --remove --recursive &amp;lt;package name&amp;gt;

$ pacman -Rs &amp;lt;package name&amp;gt;&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Removes a package and all its dependencies, provided that (A) they are not required by other packages; and (B) they were not explicitly installed by the user.&lt;/p&gt;&lt;h2&gt;Search For a Package&lt;/h2&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ pacman --sync --search &amp;lt;regexp&amp;gt;

$ pacman -Ss &amp;lt;regexp&amp;gt;&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Searches in the sync database for packages with a name or description that match the regexp.&lt;/p&gt;&lt;h2&gt;Upgrade Packages&lt;/h2&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ pacman --sync --refresh --sysupgrade

$ pacman -Syu&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Downloads a fresh copy of the master package database and then upgrades all out-of-date packages.&lt;/p&gt;&lt;h2&gt;Upgrade Distribution&lt;/h2&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ pacman --sync --refresh --sysupgrade

$ pacman -Syu&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Since Arch uses a rolling release system there is no distribution version as you just upgrade your packages to their latest versions.&lt;/p&gt;&lt;h2&gt;Clean Up Local Caches&lt;/h2&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ pacman --sync --clean --clean

$ pacman -Scc&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Free up disk space by removing from the cache any packages that are no longer installed. Also removes any cached sync databases.&lt;/p&gt;&lt;h2&gt;Remove Used Dependencies&lt;/h2&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ pacman --query --deps --unrequired --quiet | pacman --remove --recursive -

$ pacman -Qdtq | pacman -Rs -&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Remove dependencies that are no longer needed, because e.g. the package which needed the dependencies was removed.&lt;/p&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;/posts/arch/2020-05-25/installing-arch-linux-on-a-x220-thinkpad/&quot;&gt;Installing Arch Linux on a Thinkpad X220.&lt;/a&gt;&lt;a href=&quot;/posts/arch/&quot;&gt;Arch - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Installing ST, DMENU and DWM in Arch Linux</title>
    <id>https://davidtsadler.com/posts/arch/2020-08-17/installing-st-dmenu-dwm-in-arch-linux/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/arch/2020-08-17/installing-st-dmenu-dwm-in-arch-linux/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2020-08-17T12:00:00Z</published>
    <updated>2020-08-17T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Installing ST, DMENU and DWM in Arch Linux&lt;/h1&gt;&lt;blockquote&gt;Mon 17th August 2020 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;Continuing my Arch Linux installation I now have a user account for daily use. However this only provides me with a terminal. What I would like is a traditional multi-window desktop environment which will require me to install two things. A window system of some sort and a layout manager. For this installation I'm going with Xorg and dwm. For those that are not aware dwm is dynamic window manager for Xorg that has been developed by Suckless. Since by default dwm expects st to be installed as the system's terminal and also makes use dmenu to allow you to launch applications I will installed both of them in addition to dwm.&lt;/p&gt;&lt;h2&gt;Install Dependencies&lt;/h2&gt;&lt;p&gt;Firt off I need to install the dependencies required by st, dmenu and dwm. Since this is Arch Linux I use pacman to do this.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo pacman -S base-devel git libx11 libxft xorg-server xorg-xinit terminus-font&lt;/code&gt;&lt;/pre&gt;&lt;ul&gt;&lt;li&gt;base-devel Since I will be installing from source this package contains various tools to compile software.&lt;/li&gt;&lt;li&gt;git Is needed to get the source code from the suckless git repositories.&lt;/li&gt;&lt;li&gt;libx11 and libxft Dependanices required by dwm oherwise it will fail when trying to compile it.&lt;/li&gt;&lt;li&gt;xorg-server Is the display server that provides the windows that dwm will manage.&lt;/li&gt;&lt;li&gt;xorg-xinit Allows us to start the display server.&lt;/li&gt;&lt;li&gt;terminus-font Dwm is configured to use a monospaced font and since I installed a barebones system I need to install such a font now.&lt;/li&gt;&lt;/ul&gt;&lt;h2&gt;Download Git Repositories&lt;/h2&gt;&lt;p&gt;The source code for the software is avialable from the Suckless git repositories so I simply clone them.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ mkdir -p ~/.local/src

$ git clone git://git.suckless.org/st ~/.local/src/st
$ git clone git://git.suckless.org/dmenu ~/.local/src/dmenu
$ git clone git://git.suckless.org/dwm ~/.local/src/dwm&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Install ST&lt;/h2&gt;&lt;p&gt;I install st by first moving to the directory created when cloning the repository.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ cd ~/.local/src/st&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Then its as simple as compiling and instaling the software with the below commands.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ make clean
$ sudo make install&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Configure and Install DMENU&lt;/h2&gt;&lt;p&gt;Again move to the directory created earlier.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ cd ~/.local/src/dmenu&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Before compiling a small edit needs to be made to the file config.mk.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ nvim config.mk&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Since I have not installed Xinerama on this system I need to comment out any flags that reference this otherwise dmenu will fail during the compiling.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;vim&quot;&gt;# XINERAMALIBS  = -lXinerama
# XINERAMAFLAGS = -DXINERAMA&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Again compiling and installing is done with the below commands.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ make clean
$ sudo make install&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Configure and Install DWM&lt;/h2&gt;&lt;p&gt;For the final time move to the directory created earlier.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ cd ~/.local/src/dwm&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;As with dmenu the same edit needs to be made to the file config.mk.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ nvim config.mk&lt;/code&gt;&lt;/pre&gt;&lt;pre&gt;&lt;code class=&quot;vim&quot;&gt;# XINERAMALIBS  = -lXinerama
# XINERAMAFLAGS = -DXINERAMA&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Compile and install as usual.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ make clean
$ sudo make install&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Starting DWM&lt;/h2&gt;&lt;p&gt;Since I have installed xorg-xinit I need to create a .xinitrc in my home folder.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ nvim ~/.xinitrc&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;The contents of this file is just.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;vim&quot;&gt;exec dwm&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;I can now start xorg and dwm with the below command.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ startx&lt;/code&gt;&lt;/pre&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;/posts/arch/2020-05-25/installing-arch-linux-on-a-x220-thinkpad/&quot;&gt;Installing Arch Linux on a Thinkpad X220.&lt;/a&gt;&lt;a href=&quot;https://dwm.suckless.org/&quot;&gt;Dynamic Window Manager (DWM).&lt;/a&gt;&lt;a href=&quot;https://suckless.org/&quot;&gt;Suckless Software.&lt;/a&gt;&lt;a href=&quot;https://st.suckless.org/&quot;&gt;Simple Terminal.&lt;/a&gt;&lt;a href=&quot;https://tools.suckless.org/dmenu/&quot;&gt;DMenu.&lt;/a&gt;&lt;a href=&quot;/posts/arch/&quot;&gt;Arch - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Sudo: sorry, you must have a tty to run sudo</title>
    <id>https://davidtsadler.com/posts/linux/2020-07-13/sudo-sorry-you-must-have-a-tty-to-run-sudo/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/linux/2020-07-13/sudo-sorry-you-must-have-a-tty-to-run-sudo/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2020-07-13T12:00:00Z</published>
    <updated>2020-07-13T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Sudo: sorry, you must have a tty to run sudo&lt;/h1&gt;&lt;blockquote&gt;Mon 13th July 2020 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;I have found Deployer to be a great tool for deploying PHP applications. However when first setting out to use it I soon came across the error message 'sudo: sorry, you must have a tty to run sudo'. After some investigation I found that the error was triggered when Deployer was running commands via sudo. For those that don't know Deployer works by executing commands on your servers via ssh and depending on your server's configuration there could be issues when sudo is one of those commands.&lt;/p&gt;&lt;h2&gt;What is meant by 'sudo: sorry, you must have a tty to run sudo'?&lt;/h2&gt;&lt;p&gt;When sudo is executed the file /etc/sudoers is read to determine which users or groups can use sudo and what commands they can run. It actually does a bit more than that and you should read the manual for more information.&lt;/p&gt;&lt;p&gt;If you examine the sudoers file you will find that it contains the setting Defaults requiretty. This means that sudo can only be ran from a real tty. In other words if a user wants to run sudo they must have logged into a terminal before hand. This is normally a security feature so that sudo can't be ran from things such as cron jobs. However, it also means that you will have issues when running sudo from another machine via ssh as you also won't be logged into an actual terminal.&lt;/p&gt;&lt;h2&gt;How to resolve the issue?&lt;/h2&gt;&lt;p&gt;If you're happy to change the setting for all users simply use visudo to edit /etc/sudoers and change Defaults requiretty to Defaults !requiretty. Alternatively you can remove the tty requirement for a single user. In fact that is what I do when using Deployer. Since it connects to the server using a user called deployer I add the below configuration with visudo.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;Defaults:deployer !requiretty
deployer ALL=(ALL) NOPASSWD:/usr/bin/chown, /usr/bin/tee, /usr/sbin/apachectl&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;This configuration allows the deployer user to execute sudo when not logged into a real terminal and additionally not prompt for a password when executing chown, tee, and apachectl.&lt;/p&gt;&lt;h2&gt;Using Pseudo-tty&lt;/h2&gt;&lt;p&gt;An alternative is to use the pseudo-tty option when connecting via ssh.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ ssh -t user@example.com sudo apachectl restart&lt;/code&gt;&lt;/pre&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;https://deployer.org/&quot;&gt;Deployer - A Deployment Tool for PHP.&lt;/a&gt;&lt;a href=&quot;https://www.sudo.ws/man/sudoers.man.html&quot;&gt;Sudo Manual.&lt;/a&gt;&lt;a href=&quot;/posts/linux/&quot;&gt;Linux - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Granting Sudo Access to a User in Arch Linux</title>
    <id>https://davidtsadler.com/posts/arch/2020-06-22/granting-sudo-access-to-a-user-in-arch-linux/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/arch/2020-06-22/granting-sudo-access-to-a-user-in-arch-linux/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2020-06-22T12:00:00Z</published>
    <updated>2020-06-22T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Granting Sudo Access to a User in Arch Linux&lt;/h1&gt;&lt;blockquote&gt;Mon 22nd 2020 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;So by the end of my last post my minimal installation of Arch Linux had a user account that I could log into instead of the root user. However in order to do anything useful on the system I need to be able to run commands such as pacman that only the root user can do. Now one way to solve this is to change to the root user with su before running the command, but this defeats the point in creating a non-root user account in the first place. Instead a better way is to make use of sudo.&lt;/p&gt;&lt;p&gt;Sudo (su &amp;quot;do&amp;quot;) gives the ability for a user (or groups of users) to run some (or all) commands as root and also provides an audit trail of the commands and their arguments. Usage is very simple, you enter sudo followed by the command that you want to run. For example,&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo pacman -Syu&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Configuration is done in the file /etc/sudoers. This is where you can specify which users or groups can use sudo and what commands they can run. However, you must be careful when editing this file as any syntax errors will make sudo unusable. Therefore it is strongly recommended to do any editing via the visudo command. This locks the sudoers file, saves edits to a temporary file, and checks that file's grammar before copying it to /etc/sudoers.  &lt;/p&gt;&lt;p&gt;Traditionally in Linux systems users that should have privileged administrator rights are added to the wheel group which is then given sudo access. As the root user the first thing that I needed to do was add my user account to the wheel group with the usermod command.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ usermod -aG wheel david&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;I used the below options with the command.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;-a Modifies the -G argument so that the user is added to the specified groups and not removed from any existing ones.&lt;/li&gt;&lt;li&gt;-G The list of supplementary groups that the user will be made a member of. In this case it's just wheel. Note that you need to pass -a otherwise the user will be removed from any group that is not listed. &lt;/li&gt;&lt;/ul&gt;&lt;p&gt;The sudo package then needed to be installed.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ pacman -S sudo&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Next I needed to grant sudo access to the wheel group by editing /etc/sudoers with visudo. Note that the default editor for visudo is vi. Since this has not been installed on my system I can change the editor to be nvim by first setting the variable EDITOR.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ EDITOR=nvim visudo&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Once the file was opened I located and uncommented the below line before saving and exiting nvim. This allows members of the wheel group to execute any command without having to enter their password.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;%wheel ALL(ALL) NOPASSWD: ALL&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;I checked that I had sudo access by running the below command while logged into my user account.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ sudo pwd

/home/david&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Since I wasn't prompted for my password and the command was executed I knew that I now had sudo access.&lt;/p&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;/posts/arch/2020-06-15/adding-a-user-in-arch-linux/&quot;&gt;Adding a User in Arch Linux.&lt;/a&gt;&lt;a href=&quot;/posts/arch/&quot;&gt;Arch - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Adding a User in Arch Linux</title>
    <id>https://davidtsadler.com/posts/arch/2020-06-15/adding-a-user-in-arch-linux/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/arch/2020-06-15/adding-a-user-in-arch-linux/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2020-06-15T12:00:00Z</published>
    <updated>2020-06-15T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Adding a User in Arch Linux&lt;/h1&gt;&lt;blockquote&gt;Mon 15th June 2020 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;In a previous post I installed Arch Linux on my Thinkpad X220. Since it was a very minimal install there are no user accounts except for the root user. So to add myself as a user I need to use the useradd command.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ useradd -m -s /bin/bash david&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;I used the below options with the command.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;-m Create the home directory for this account.&lt;/li&gt;&lt;li&gt;-s /bin/bash Make bash the login shell for this account.&lt;/li&gt;&lt;li&gt;david The name of the new user.&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;This creates a new account for me and also ensures that a home directory is created as /home/david.&lt;/p&gt;&lt;p&gt;The new account will require a password so assign one with the passwd command.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ passwd david

New password:
Retype new password:
passwd: password updated successfully&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Now all I have to do is logout of the root account.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ logout&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Then login with the new credentials to confirm that everything is okay.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;suliman login: david
Password:

david@suliman:$&lt;/code&gt;&lt;/pre&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;/posts/arch/2020-05-25/installing-arch-linux-on-a-x220-thinkpad/&quot;&gt;Installing Arch Linux on a Thinkpad X220.&lt;/a&gt;&lt;a href=&quot;/posts/arch/&quot;&gt;Arch - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Publishing Jigsaw Posts With Netlify Build Hooks</title>
    <id>https://davidtsadler.com/posts/netlify/2020-06-08/publishing-jigsaw-posts-with-netlify-build-hooks/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/netlify/2020-06-08/publishing-jigsaw-posts-with-netlify-build-hooks/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2020-06-08T12:00:00Z</published>
    <updated>2020-06-08T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Publishing Jigsaw Posts With Netlify Build Hooks&lt;/h1&gt;&lt;blockquote&gt;Mon 8th June 2020 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;A previous post talks about how I use Jigsaw's filtering to schedule future posts. However because Jigsaw is a static site builder I have to run Jigsaw in order to generate the HTML for the site. So if for example I have scheduled three posts to be published over three consecutive weeks I would need to build and deploy the site on each of the scheduled dates in order for the posts to be published. This kind of defeats the point of scheduling posts. So what I needed was some way to automatically trigger new builds of the site and since I use Netlify to host the site I can make use of their build hooks to do this.&lt;/p&gt;&lt;p&gt;For those that don't know build hooks are URLs you can use to trigger new builds and deployments in Netlify. By making a HTTP POST request to a URL, Netlify will pull down the latest master branch of your site, build it, and then deploy it.&lt;/p&gt;&lt;p&gt;Creating the build hook was simple. After logging into my Netlify account I went to Settings &amp;gt; Build &amp;amp; deploy &amp;gt; Continuous deployment &amp;gt; Build hooks.&lt;/p&gt;&lt;p&gt;From there I clicked Add build hook where I could then provide a name and select which GitHub branch would be used to build the site.&lt;/p&gt;&lt;p&gt;Clicking Save creates the build hook and you are given a unique URL that can be used to trigger it.&lt;/p&gt;&lt;p&gt;What is very handy about Netlify is that they provide you with an example of calling the URL with cURL. With this I simply setup a cron on a server that requests this URL every Monday at 8am.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;8 * * 1 curl -X POST -d {} https://api.netlify.com/build_hooks/111111111111111111111111&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;The result is that every week posts that have been scheduled for that day will now be published when the site is built and deployed by the build hook.&lt;/p&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;/posts/jigsaw/2020-06-01/scheduling-posts-in-jigsaw/&quot;&gt;2020-06-01 - Scheduling Posts in Jigsaw&lt;/a&gt;&lt;a href=&quot;https://jigsaw.tighten.co/&quot;&gt;Jigsaw - Static Site Generator for PHP Developers.&lt;/a&gt;&lt;a href=&quot;https://www.netlify.com/&quot;&gt;Netlify - Serverless Platform for Static Websites.&lt;/a&gt;&lt;a href=&quot;https://docs.netlify.com/configure-builds/build-hooks/&quot;&gt;Build Hooks in Netlify.&lt;/a&gt;&lt;a href=&quot;/posts/netlify/&quot;&gt;Netlify - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Scheduling Posts in Jigsaw</title>
    <id>https://davidtsadler.com/posts/jigsaw/2020-06-01/scheduling-posts-in-jigsaw/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/jigsaw/2020-06-01/scheduling-posts-in-jigsaw/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2020-06-01T12:00:00Z</published>
    <updated>2020-06-01T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Scheduling Posts in Jigsaw&lt;/h1&gt;&lt;blockquote&gt;Mon 1st June 2020 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;Jigsaw is a static site generator that I use for my site and one of its features is the ability to create a filter that determines which items in a collection will be included in the final build.&lt;/p&gt;&lt;p&gt;It works by you adding a filter key to a collection's array in your config.php file, and specifying a callable that accepts an item from the collection and that returns a boolean. By returning false an item will not be built.&lt;/p&gt;&lt;p&gt;Below is how I have setup my config.production.php file which is used when building the site for deployment.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;php&quot;&gt;&amp;lt;?php

use Carbon\Carbon;

return [
    'collections' =&amp;gt; [
        'posts' =&amp;gt; [
            'filter' =&amp;gt; function ($item) {
                $date = $item-&amp;gt;date ? Carbon::createFromFormat('U', $item-&amp;gt;date) : null;
                // Only publish posts that have a date and which is not in the future.
                return $date ? $date &amp;lt;= Carbon::now() : false;
            }
        ],
    ],
];&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;When deploying the site each post is passed to this filter. The first thing it does is convert the date that has been specified in the post's YAML front matter into a Carbon instance. It then returns true if the date is on or before the current date, I.e. when the site is been deployed. &lt;/p&gt;&lt;p&gt;With this filter I can specify future dates for several posts and they will only published once that date comes around. Posts are also exluded if a date has not been specified. This allows me to have posts that are a work in progress and shouldn't be published.&lt;/p&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;https://jigsaw.tighten.co/&quot;&gt;Jigsaw - Static Site Generator for PHP Developers.&lt;/a&gt;&lt;a href=&quot;https://jigsaw.tighten.co/docs/collections-filtering/&quot;&gt;Using Filters in Jigsaw.&lt;/a&gt;&lt;a href=&quot;https://carbon.nesbot.com/&quot;&gt;Carbon - PHP API Extension for DateTime.&lt;/a&gt;&lt;a href=&quot;/posts/jigsaw/&quot;&gt;Jigsaw - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Installing Arch Linux on a Thinkpad X220</title>
    <id>https://davidtsadler.com/posts/arch/2020-05-25/installing-arch-linux-on-a-thinkpad-x220/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/arch/2020-05-25/installing-arch-linux-on-a-thinkpad-x220/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2020-05-25T12:00:00Z</published>
    <updated>2020-05-25T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Installing Arch Linux on a Thinkpad X220&lt;/h1&gt;&lt;blockquote&gt;Mon 25th May 2020 By David T. Sadler.&lt;/blockquote&gt;&lt;h2&gt;Introduction&lt;/h2&gt;&lt;p&gt;So I purchased a used Thinkpad X220 for about £90 on eBay and decided to install Arch Linux onto it. This guide is the steps that I took to achieve this.&lt;/p&gt;&lt;p&gt;Now when it comes to Linux there is always more than one way of doing things and this guide is just my preferred way. Feel free to follow it for your own installation, just keep in mind that you may have to change some of the steps to suit your own circumstances. Also there is every chance that the information presented here will be out of date so I recommend that you at least read the through the official installation guide for the most up-to-date information.&lt;/p&gt;&lt;h2&gt;Download the Arch Linux ISO Image&lt;/h2&gt;&lt;p&gt;The Arch Linux download page provides direct download and torrent links. You should also download the PGP signature to the same location and use the gpg command to verify that the ISO has not been compromised.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ gpg --keyserver-options auto-key-retrieve --verify archlinux-2020.05.01-x86_64.iso.sig&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Create a Live USB of Arch Linux&lt;/h2&gt;&lt;p&gt;Flash the image to a USB drive using Etcher. Alternatively you can use the dd command. Just ensure that /path/to/archlinux.iso is to where you have downloaded the image and that /dev/sdx is your USB drive.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;dd bs=4M if=/path/to/archlinux.iso of=/dev/sdx status=progress &amp;amp;&amp;amp; sync&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Boot the Live Environment&lt;/h2&gt;&lt;p&gt;I wanted to make sure that the Thinkpad was using UEFI as I would be using EFISTUB to load the Linux kernel as an EFI executable. This is done through the BIOS which can be gotten to by pressing the ThinkVantage button as the machine is booting before pressing F1 to get to the BIOS settings. From there navigate to Startup and changed the UEFI/Legacy Boot option to be UEFI Only. Press F10 to save and exit the BIOS and then power down the machine.&lt;/p&gt;&lt;p&gt;With the USB drive plugged in power the machine back on, all the while pressing F12 until the boot menu appears and select USB HDD: Mass Storage Device and wait for the installation image to boot. When prompted select Arch Linux archiso X86_64 UEFI CD where you will be take to the live environment's terminal. &lt;/p&gt;&lt;h2&gt;Set the Keyboard Layout&lt;/h2&gt;&lt;p&gt;The default console map is US which meant that for me pressing Shift+3 was displaying the hash symbol (#) instead of the pound symbol (£). So the UK keyboard layout needed to be loaded.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ loadkeys uk&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;You can get a list of supported keyboard layouts if you need to load a different one.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;ls /usr/share/kbd/keymaps/**/*.map.gz&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Verify the Boot Mode&lt;/h2&gt;&lt;p&gt;To verify that the Thinkpad has UEFI enabled check that the efivars directory exists.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ ls /sys/firmware/efi/efivars&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Connect to the Internet&lt;/h2&gt;&lt;p&gt;Verify that the machine can connect to the internet with the ping command.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ ping -c3 davidtsadler.com&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Before booting the machine I plugged in an Ethernet cable that was connected directly to my home network's router. The installation environment detected the network connection and obtained an IP address via DHCP. &lt;/p&gt;&lt;h2&gt;Update the System Clock&lt;/h2&gt;&lt;p&gt;Ensure the system clock is correct.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ timedatectl set-ntp true&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Partition the Disks&lt;/h2&gt;&lt;p&gt;Use the lsblk command to determine which disks and partitions exist on the system.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ lsblk

NAME   MAJ:MIN RM   SIZE RO TYPE MOUNTPOINT
loop0    7:0    0   535M  1 loop /run/archiso/sfs/airootfs
sda      8:0    0 298.1G  0 disk
sdb      8:16   1   7.4G  0 disk
├─sdb1   8:17   1   652M  0 part /run/archiso/bootmnt
└─sdb2   8:18   1    64M  0 part&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;From the above output I could see that my hard drive was sda as sdb was the USB drive and loop0 could just be ignored.&lt;/p&gt;&lt;p&gt;I knew that I wanted to have an encrypted partition and make use of LVM on it so my disk layout would be.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;+-------------------+ +--------------------------------------------------------+
| Boot partition    | | Logical volume 1 | Logical volume 2 | Logical volume 3 |
|                   | |                  |                  |                  |
| /boot             | | /                | [SWAP]           | /home            |
|                   | |                  |                  |                  |
|                   | | 50G              | 16G              | 200G             |
|                   | |                  |                  |                  |
|                   | | /dev/vg0/root    | /dev/vg0/swap    | /dev/vg0/home    |
|                   | |_ _ _ _ _ _ _ _ _ |_ _ _ _ _ _ _ _ _ |_ _ _ _ _ _ _ _ _ |
|                   | |                                                        |
|                   | |              LUKS2 encrypted partition                 |
| /dev/sda1 (512MB) | |                    /dev/sda2                           |
+-------------------+ +--------------------------------------------------------+&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;The hard drive would be split into two partitions. The first, sdb1 would be 512MB in size and mounted in the file system at /boot. This would be the EFI system partition. The reminder of the disk space would be given to the partition sda2 and encrypted using LUKS2. LVM would then be used to create the volume group vg0 that would be divided into three partitions as logical volumes.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;/dev/vg0/root 50G root partition.&lt;/li&gt;&lt;li&gt;/dev/vg0/swap 16G swap partition.&lt;/li&gt;&lt;li&gt;/dev/vg0/home 200G home partition.&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;Use fdisk to create the partitions.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ fdisk /dev/sda&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Enter g to create a new empty GPT partition table&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;Command (m for help): g
Created a new GPT disklabel (GUID: 6987D065-936E-1547-9F02-F78145025A96).&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Since this is a UEFI system there must be a EFI partition at the beginning of the disk. Enter n to add a new partition and enter 1 to assign it as the first partition. Use the default value for the first sector but enter +512M for the last sector.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;Command (m for help): n
Partition number (1-128, default 1): 1
First sector (2048-625142414, default 2048): 
Last sector, +/-sectors or +/-size{K,M,G,T,P} (2048-625142414, default 625142414): +512M

Created a new partition 1 of type 'Linux filesystem' and of size 512 MiB.&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Enter t to change the partition type and enter 1 to make it an EFI System. You can also get a list of partition types by pressing L.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;Command (m for help): t
Selected partition 1
Partition type (type L to list all types): 1
Changed type of partition 'Linux filesystem' to 'EFI System'.&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;To create the second partition enter n again to add another partition, and then enter 2 to assign it as the second partition. Use the default values for both first and last sectors to allocate the remainder of the drive.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;Command (m for help): n
Partition number (2-128, default 2): 2
First sector (1050624-625142414, default 1050624): 
Last sector, +/-sectors or +/-size{K,M,G,T,P} (1050624-625142414, default 625142414): 

Created a new partition 2 of type 'Linux filesystem' and of size 297.6 GiB.&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Enter w to write the changes and quit.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;Command (m for help): w
The partition table has been altered.
Calling ioctl() to re-read partition table.
Syncing disks.&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Use lsblk to confirm that two partitions have been created.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ lsblk /dev/sda

NAME   MAJ:MIN RM   SIZE RO TYPE MOUNTPOINT
sda      8:0    0 298.1G  0 disk
├─sda1   8:1    0   512M  0 part
└─sda2   8:2    0 297.6G  0 part&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;LUKS&lt;/h2&gt;&lt;p&gt;Encrypt the second partition with the cryptsetup command. &lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ cryptsetup luksFormat /dev/sda2&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;When prompted enter YES in capitals to overwrite any data that is currently on the partition. &lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;WARNING!
========
This will overwrite data on /dev/sda2 irrevocably.

Are you sure? (Type 'yes' in capital letters): YES&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Enter and verify a passphrase. Whenever the machine is now booted you will be prompted to enter this passphrase in order for the partition to be decrypted.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;Enter passphrase for /dev/sda2: 
Verify passphrase: 
cryptsetup luksFormat /dev/sda2  17.01s user 1.05s system 105% cpu 17.106 total&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;LVM on LUKS&lt;/h2&gt;&lt;p&gt;Before setting up LVM decrypt the partition.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ cryptsetup open /dev/sda2 cryptlvm&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;You will be prompted to enter the passphrase that you set up earlier.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;Enter passphrase for /dev/sda2: 
cryptsetup open /dev/sda2 cryptlvm  6.48s user 0.36s system 92% cpu 7.436 total&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Create a physical volume.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ pvcreate /dev/mapper/cryptlvm&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Create a volume group called vg0.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ vgcreate vg0 /dev/mapper/cryptlvm&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Create three logical volumes for the root, swap and home partitions.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ lvcreate -L 50G vg0 -n root
$ lvcreate -L 16G vg0 -n swap
$ lvcreate -L 200G vg0 -n home&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Make use of lsblk again to verify that LVM has been setup as expected.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ lsblk /dev/sda

NAME           MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINT
sda              8:0    0 298.1G  0 disk  
├─sda1           8:1    0   512M  0 part  
└─sda2           8:2    0 297.6G  0 part  
  └─cryptlvm   254:0    0 297.6G  0 crypt 
    ├─vg0-root 254:1    0    50G  0 lvm   
    ├─vg0-swap 254:2    0    16G  0 lvm   
    └─vg0-home 254:3    0   200G  0 lvm&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Format the Partitions&lt;/h2&gt;&lt;p&gt;Format the boot partition at /dev/sda1 with a FAT32 file system as the UEFI specification requires the usage of it.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ mkfs.fat -F32 /dev/sda1&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;The root and home partitions can be formatted with ext4.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ mkfs.ext4 /dev/vg0/root
$ mkfs.ext4 /dev/vg0/home&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Initialise the swap partition.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ mkswap /dev/vg0/swap
$ swapon /dev/vg0/swap&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Mount the File Systems&lt;/h2&gt;&lt;p&gt;Mount the root partition into /mnt.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ mount /dev/vg0/root /mnt&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Mount the boot partition into /mnt/boot. &lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ mkdir /mnt/boot
$ mount /dev/sda1 /mnt/boot&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Finally mount the home partition into /mnt/home.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ mkdir /mnt/home
$ mount /dev/vg0/home /mnt/home&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Select the Mirrors&lt;/h2&gt;&lt;p&gt;All mirror servers defined in /etc/pacman.d/mirrorlist where done at the time the installation image was built. Since it's ideal to try and use servers that are close to your location you can rebuild the list using the rankmirrors utility. This is not included by default on the live environment so you will need to download it.&lt;/p&gt;&lt;p&gt;First sync the pacman repository.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;pacman -Syy&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Then download the pacmain-contrib package which contains the rankmirrors utility.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ pacman -S pacman-contrib&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;The official Pacman Mirrorlist Generator can be used to get an up-to-date list of servers for your country. The below command obtains a list of UK servers that support https and pass it to rankmirrors to obtain the 5 fastest.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ curl -s &amp;quot;https://www.archlinux.org/mirrorlist/?country=GB&amp;amp;protocol=https&amp;amp;use_mirror_status=on&amp;quot; | sed -e 's/^#Server/Server/' -e '/^#/d' | rankmirrors -n 5 - &amp;gt; /etc/pacman.d/mirrorlist&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Install Essential Packages&lt;/h2&gt;&lt;p&gt;The pacstrap script is used to install the base package, Linux kernel and firmware.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ pacstrap /mnt base linux linux-firmware neovim wpa_supplicant dhcpcd cryptsetup lvm2 efibootmgr intel-ucode&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;I also installed a few other packages that I knew I was going to need.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;neovim. Allows you to edit files instead of using nano.&lt;/li&gt;&lt;li&gt;wpa_supplicant. Provides tools for connecting to a WPA2 protected wireless network.&lt;/li&gt;&lt;li&gt;dhcpcd. Needed so that you machine can obtain an IP address from your home router via dhcp.&lt;/li&gt;&lt;li&gt;cryptsetup. Since the partition is encrypted this package is required in order for it to be decrypted during booting. &lt;/li&gt;&lt;li&gt;lvm2. Provides the LVM tools to manage the LVM partition.&lt;/li&gt;&lt;li&gt;efibootmgr. Needed to configure the system to boot via UEFI.&lt;/li&gt;&lt;li&gt;intel-ucode. Enables microcode updates during boot.&lt;/li&gt;&lt;/ul&gt;&lt;h2&gt;Fstab&lt;/h2&gt;&lt;p&gt;Create a fstab file on the new system.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ genfstab -U /mnt &amp;gt;&amp;gt; /mnt/etc/fstab&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Chroot&lt;/h2&gt;&lt;p&gt;Use arch-chroot to enter the new system as the root user. From now on you will be configuring the new system.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ arch-chroot /mnt&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Time Zone&lt;/h2&gt;&lt;p&gt;Setup the timezone. Replace Europe/London with your timezone.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ ln -sf /usr/share/zoneinfo/Europe/London /etc/localtime&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Update the hardware clock.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ hwclock --systohc&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Localization&lt;/h2&gt;&lt;p&gt;Use nvim to edit /etc/locale.gen.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ nvim /etc/locale.gen&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Uncomment your preferred language. For me this meant en_GB.UTF-8 UTF-8. Save the file and exit before generating the locales.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ locale-gen&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Edit /etc/locale.conf.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ nvim /etc/locale.conf&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Add the below line. Replace en_GB.UTF-8 with the language that you chose earlier.&lt;/p&gt;&lt;pre&gt;LANG=en_GB.UTF-8&lt;/pre&gt;&lt;p&gt;If you used loadkeys earlier you will need to edit /etc/vconsole.conf and add your chosen keymap.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ nvim /etc/vconsole.conf&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;For me this meant adding the UK keymap.&lt;/p&gt;&lt;pre&gt;KEYMAP=uk&lt;/pre&gt;&lt;h2&gt;Network Configuration&lt;/h2&gt;&lt;p&gt;Create the file /etc/hostname and add an entry to it. This hostname will be the name of the machine on your network. I tend to name by devices after characters from the book Howl's Moving Castle https://en.wikipedia.org/wiki/Howl%27s_Moving_Castle).&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ echo suliman &amp;gt; /etc/hostname&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;You then need to edit the /etc/hosts file.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ nvim /etc/hosts&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Add the following lines to this file. Replace suliman with the hostname you set up earlier.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;127.0.0.1	localhost
::1		    localhost
127.0.0.1	suliman.localdomain suliman&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Wireless&lt;/h2&gt;&lt;p&gt;Use the ip command to determine the name of the wireless network interface.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ip link

1: lo: &amp;lt;LOOPBACK,UP,LOWER_UP&amp;gt; mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp0s25: &amp;lt;BROADCAST,MULTICAST,UP,LOWER_UP&amp;gt; mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether f0:de:f1:86:e1:75 brd ff:ff:ff:ff:ff:ff
3: wwp0s29u1u4: &amp;lt;BROADCAST,MULTICAST&amp;gt; mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 86:06:37:c4:9b:41 brd ff:ff:ff:ff:ff:ff
4: wlan0: &amp;lt;BROADCAST,MULTICAST&amp;gt; mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 08:11:96:02:10:ac brd ff:ff:ff:ff:ff:ff&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Looking at the output of the ip command this is wlan0. This name however will not be the name of the interface once the installation has been completed. You see the Arch installation environment does not use predictable names for interfaces. This is due to it using iwd which is unable to cope with interface renaming and so it is disabled for wireless interfaces. When the system boots into the installed system predictable names for interfaces will be enabled and wlan0 will be assigned a different name.&lt;/p&gt;&lt;p&gt;In order to find out what name will be assigned use the udevadm command.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ udevadm test-builtin net_id /sys/class/net/wlan0

Load module index
Parsed configuration file /usr/lib/systemd/network/99-default.link
Parsed configuration file /usr/lib/systemd/network/80-iwd.link
Created link configuration context.
Using default interface naming scheme 'v245'.
ID_NET_NAMING_SCHEME=v245
ID_NET_NAME_MAC=wlx0811960210ac
ID_OUI_FROM_DATABASE=Intel Corporate
ID_NET_NAME_PATH=wlp3s0
Unload module index
Unloaded link configuration context.&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;What we are interested in is the value of ID_NET_NAME_PATH which is wlp3s0.&lt;/p&gt;&lt;p&gt;My wireless network is a WPA2 protected network with a hidden SSID. Since wpa_supplicant has been installed when running pacstrap it is possible to use wpa_passphrase to generate the configuration file that wpa_supplicant will use to connect to the wireless network. Replace &amp;amp;lt;SSID&amp;amp;gt; and &amp;amp;lt;PASSWORD&amp;amp;gt; with your details. Note that the name of the configuration file contains the name of the network interface wlp3s0. Replace this with the name of your network interface.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ wpa_passphrase &amp;lt;SSID&amp;gt; &amp;lt;PASSWORD&amp;gt; &amp;gt; /etc/wpa_supplicant/wpa_supplicant-wlp3s0.conf&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;If your wireless network uses a hidden SSID you will need to edit the configuration file.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ nvim /etc/wpa_supplicant/wpa_supplicant-wlp3s0.conf&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;And add the below line. &lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;scan_ssid=1&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Make sure that wpa_supplicant starts at boot.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ systemctl enable wpa_supplicant@wlp3s0.service&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Have an IP address assigned via DHCP during booting.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ systemctl enable dhcpcd@wlp3s0.service&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Initramfs&lt;/h2&gt;&lt;p&gt;You will need to rebuild the initial ramdisk and the current one is not aware that the filesystem will be encrypted. Before rebuilding it some configuration changes need to be made.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ nvim /etc/mkinitcpio.conf&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Locate the section where the HOOKS are configured and replace it with the line below.&lt;/p&gt;&lt;pre&gt;HOOKS=(base udev autodetect keyboard keymap modconf block encrypt lvm2 filesystems fsck)&lt;/pre&gt;&lt;p&gt;This ensures that the keyboard is present before the filesystem is detected so that you are enter the passphrase to decrypt the partition. It also ensures that the decryption is done before the LVM is handled.&lt;/p&gt;&lt;p&gt;Save the changes and exist before rebuilding with the mkinitcpio command. &lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;mkinitcpio -P&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;EFISTUB Booting and Microcode&lt;/h2&gt;&lt;p&gt;The Thinkpad X220 UEFI implementation allows an operating system to be booted without the need for an intermediate bootloader such as GRUB. It is possible to add a UEFI boot entry to the motherboard itself and have Arch booted directly.&lt;/p&gt;&lt;p&gt;Modifying the motherboard boot entries is done using efibootmgr. However usage of this command can be quite verbose so it is recommended to create a shell script instead. &lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;nvim /usr/local/sbin/mkefibootentry&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;The shell script will call efibootmgr with the required arguments. &lt;/p&gt;&lt;pre&gt;#!/bin/sh

# Determine the UUID of the partition that is encrypted
PARTUUID=`blkid /dev/sda2 -s PARTUUID -o value`

efibootmgr \
  --disk /dev/sda --part 1 \
  --create --label &amp;quot;Arch Linux&amp;quot; \
  --loader /vmlinuz-linux \
  --unicode 'cryptdevice=PARTUUID='$PARTUUID':cryptlvm root=/dev/vg0/root rw initrd=\intel-ucode.img initrd=\initramfs-linux.img' \
  --verbose &lt;/pre&gt;&lt;p&gt;The --unicode argument is where the kernel parameters are specified. This tells the system that the partition identified by PARTUUID is encrypted and that the root filesystem to mount is the logical volume called root that is part of the volume group vg0. The microcode is also loaded with initrd=\intel-ucode.img.&lt;/p&gt;&lt;p&gt;Make this script executable.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;chmod u+x /usr/local/sbin/mkefibootentry&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Run the script to add to the motherboard boot entries.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ mkefibootentry&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Root Password&lt;/h2&gt;&lt;p&gt;Create a secure password for the root user.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ passwd&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;Reboot&lt;/h2&gt;&lt;p&gt;Return to the Arch live installation environment.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ exit&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Unmount the partitions.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ umount -R /mnt&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Restart the machine with reboot. Remember to remove any installation media such as a USB drive.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ reboot&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Provided nothing has gone wrong your machine will boot into a fresh installation of Arch Linux. Don't forget that during the boot you will be prompted to enter the passphrase to decrypt the system partition. &lt;/p&gt;&lt;p&gt;Following this guide will leave you with a very minimal system where you can login as the root user. From this point how you configure the system is up to you as it will be very different to how I configure my own. If you interested in seeing how I do it then see my other posts on the subject. &lt;/p&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;https://www.archlinux.org/Installation_guide/&quot;&gt;Offical Arch Installation Guide.&lt;/a&gt;&lt;a href=&quot;https://www.archlinux.org/download/&quot;&gt;Arch Linux Download Page.&lt;/a&gt;&lt;a href=&quot;https://www.balena.io/etcher/&quot;&gt;Etcher.&lt;/a&gt;&lt;a href=&quot;https://www.archlinux.org/mirrorlist/&quot;&gt;Pacman Mirrorlist Generator.&lt;/a&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/Howl%27s_Moving_Castle/&quot;&gt;Wikipedia Entry for Howl's Moving Castle.&lt;/a&gt;&lt;a href=&quot;/posts/arch/&quot;&gt;Arch - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry><entry>
    <title type="text">Creating an Ebook With Markdown</title>
    <id>https://davidtsadler.com/posts/markdown/2020-03-30/creating-an-ebook-with-markdown/</id>
    <link rel="alternate" type="text/html" href="https://davidtsadler.com/posts/markdown/2020-03-30/creating-an-ebook-with-markdown/"/>
    <author><name>David T. Sadler.</name></author>
    <published>2020-03-30T12:00:00Z</published>
    <updated>2020-03-30T12:00:00Z</updated>
    <content type="html">&lt;h1&gt;Creating an Ebook With Markdown&lt;/h1&gt;&lt;blockquote&gt;Mon 30th March 2020 By David T. Sadler.&lt;/blockquote&gt;&lt;p&gt;Pandoc is a great tool for converting a file in one markup format into another. This means we can use it to convert a file written in Markdown into an EPUB file that is supported by many e-readers.&lt;/p&gt;&lt;p&gt;Lets start by writting a very simple markdown file called example_ebook.md.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;markdown&quot;&gt;---
title:
- type: main
  text: Example Ebook
- type: subtitle
  text: An Ebook created from a Markdown file
creator:
- role: author
  text: David Sadler
publisher: Published by myself
---

This is an introduction.

# Chapter 1

This is the first paragraph of chapter 1.

This is the second paragraph of chapter 1.

Below is a list.

- Item One
- Item Two
- Item Three

# Chapter 2

This is the first paragraph of chapter 2.

This is the second paragraph of chapter 2.

# Chapter 3

This is the first paragraph of chapter 3.

This is the second paragraph of chapter 3.&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Note that the file begins with a YAML metadata block that starts and ends with three hyphens (---). This allows you to specify EPUB metadata such as the title and author.&lt;/p&gt;&lt;p&gt;Converting this to EPUB is done by running pandoc.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ pandoc example_ebook.md -t epub3 --toc -o example_ebook.epub&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;There are several options that need to be passed to pandoc.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;example_ebook.md - This argument is the file that you are converting.&lt;/li&gt;&lt;li&gt;-t epub3 - Set the output format to be EPUB v3 book.&lt;/li&gt;&lt;li&gt;--toc - Include a table of contents in the output document. This will be derived from the H1 headers in the markdown.&lt;/li&gt;&lt;li&gt;-o example_ebook.epub - Tell pandoc to output the conversion to the named file instead of stdout.&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;You can now copy the file example_ebook.epub to any device that supports the format or use one of the many software readers such as Calibre. However, if you wish to read this on a Kindle device you will need to convert it to the Mobi format.&lt;/p&gt;&lt;p&gt;Amazon provides a command line tool called KindleGen that can convert our EPUB file into the Mobi format. After downloading the tool just run it as shown below.&lt;/p&gt;&lt;pre&gt;&lt;code class=&quot;shell&quot;&gt;$ kindlegen example_ebook.epub&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;This will create a file called example_ebook.mobi that you can copy to your Kindle to read.&lt;/p&gt;&lt;h3&gt;Links&lt;/h3&gt;&lt;a href=&quot;https://pandoc.org/&quot;&gt;Pandoc.&lt;/a&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/Markdown/&quot;&gt;Markdown.&lt;/a&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/EPUB/&quot;&gt;EPUB.&lt;/a&gt;&lt;a href=&quot;https://pandoc.org/MANUAL.html#extension-yaml_metadata_block&quot;&gt;YAML metadata block.&lt;/a&gt;&lt;a href=&quot;https://pandoc.org/MANUAL.html#epub-metadata&quot;&gt;EPUB metadata.&lt;/a&gt;&lt;a href=&quot;https://www.w3.org/community/epub3/&quot;&gt;EPUB v3 book.&lt;/a&gt;&lt;a href=&quot;https://calibre-ebook.com/&quot;&gt;Calibre Application.&lt;/a&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/Comparison_of_e-book_formats#Mobipocket&quot;&gt;Mobi Format.&lt;/a&gt;&lt;a href=&quot;https://www.amazon.com/gp/feature.html?ie=UTF8&amp;amp;docId=1000765211&quot;&gt;KindleGen Application.&lt;/a&gt;&lt;a href=&quot;/posts/markdown/&quot;&gt;Markdown - Read More Posts.&lt;/a&gt;&lt;p&gt;I don't have comments as I don't want to manage them. You can however contact me at the below address if you want to.&lt;/p&gt;&lt;a href=&quot;mailto:david@davidtsadler.com&quot;&gt;Email david@davidtsadler.com&lt;/a&gt;&lt;h3&gt;License&lt;/h3&gt;&lt;a href=&quot;https://creativecommons.org/licenses/by-sa/4.0/&quot;&gt;The contents of this site is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.&lt;/a&gt;&lt;p&gt;Copyright © 2021 David T. Sadler.&lt;/p&gt;&lt;a href=&quot;/&quot;&gt;Return to Homepage.&lt;/a&gt;</content>
</entry>
</feed>