Tutorial

I used to think AMD’s ROCm was a nightmare to get working. I was wrong. I managed to get ROCm running in less than a day with minimal effort just by poking around on Google. Like NVIDIA, it is distribution-agnostic, even if it lacks maturity. Then I met Intel’s AI stack. My definition of “nightmare” has been officially updated. It took almost a week to get llama.cpp’s OpenVINO working on Gentoo. The software suffers from a severe case of “Ubuntunitis”—the delusional belief that Ubuntu is the only distribution in existence. This is the hallmark of companies with zero real Linux strategy. They treat Linux like Windows, showing a complete lack of willingness to learn how professional software development for the Linux actually works. ...

After my attempts to make a binhost resulted in a overcomplex mess that myself could not maintain, time for a more simplified approach: just let the hosts use emerge as usual, but delegate the heavy lifting to a more powerful machine. Enter distcc. It might be a bit slower than a perfectly tuned binhost, but it is much easier to set up. In this guide, we will walk through setting up a Gentoo client and server using OpenRC and IPv6. Please, for the love of all saints and martys, learn IPv6, let IPv4 die in peace. ...

In the previous guide, we built a dedicated binhost to compile your stuff. Time to setup your servers to consume these packages. In this follow-up guide, we will configure your servers. By pointing their Portage installations to your binhost, these machines will be able to install and update packages in minutes rather than a whole day. Prerequisites & Assumptions Shared Storage: We assume each server has access to a remote folder (via NFS, SMB, or a mounted cloud drive) at a specific mount point we will refer to as <path>. Another layer of complexity by setting in maintaining a side channel for distribution, like rsync thru ssh, is a hassle. Folder Structure: On that path, the binhost has populated <path>/<host>/binpkgs with compiled packages from the last guide and <path>/gentoo with the Portage repository tree. No Local Syncs: Because the repository is shared, these client machines are no longer supposed to run emerge --sync. They will always read the repository state managed by the binhost. The Public Key: Ensure the binhost-public.asc file (generated in Part 1) has been copied to your client server’s current working directory. All that needs to be done only once. ...

Maintaining a fleet of Gentoo systems, or struggling to compile packages on an underpowered server, can be an incredibly tedious process. Waiting hours for a single package to compile can quickly add up, and eventually you may try to burn down your home lab. Unless you rich, your home servers are likely stuff of 10 years ago made of mismatch stuff lying around. A partial solution is simple do not touching the portage flags at all and use the Gentoo provided binhost. But this presents two issues: not everything available on portage exist as binary package at their binhost mirrors, and the second is that you give away customization of the packages that you do use. ...

One of the most hidden features, and perhaps the most useful one for turning your tablet into a proper tool for serious work — at least if you work in IT — is the Linux Terminal in Android 16. Still in beta, this terminal invokes a Debian virtual machine making use of the Android Virtualization Framework. The great advantage compared to Termux is that we are talking about a full Linux distribution, aarch64, running inside a virtual machine. Termux, on the other hand, is a Unix environment similar enough to Linux to run applications on top of Android with Bionic libc, not unlike what Cygwin does on Windows. Therefore, Termux will always have many compatibility issues, and far fewer packages than a real Linux distribution running on top of GNU libc and a standard Linux kernel. ...

If you arrived here, it’s because you are tired of script kiddies attempting to brute force your server with sshd and polluting its logs. The good news is that NetBSD has preinstalled a solution to deal with such situations that is more convenient than the famous fail2ban: the blocklistd. The blocklistd is a deamon that has only one life purpose: monitor the number of failed connection attempt with some system service. After a defined threshold of failures, it will block the connection for a predefined time, for example, 6 hours. ...

Supposing you want to host a static pages site or your blog generated with Hugo on bozotic, but need a certificate for HTTPS, given that HTTP is almost dead and buried, here a tutorial on how to do it on NetBSD. First, install acmesh with pkgin: pkgin install acmesh After that, the command acme.sh will be available. Do all of the following as root (su root). Subscribe to Let’s Encrypt using the client, only a email is necessary: ...

If do you use applications like mdnds on NetBSD on a simple OrangePi Zero, soon will take notice that it will fill the RAM, even if not used for anything. One solution is to activate the good and old swap, who is disabled by default on a OrangePi Zero NetBSD image. As root, do the following commands to create a swapfile with 2Gb. Febronia# dd if=/dev/zero of=/swapfile bs=1m count=2048 Febronia# chmod 600 /swapfile Febronia# swapctl -a -p 0 /swapfile Febronia# echo "/swapfile none swap sw,priority=0 0 0" >> /etc/fstab And that’s it. I should already show on “top” and on /proc/meminfo.

Do you have a dynamic IP connection and your domain service has DDNS? Possible, it also accept DDClient to update your A or AAAA records with your dynamic IP. Unfortunately, of the time of this article, the DDClint at NetBSD repositories only accept IPv4. Thus if you need IPv6, you got a problem. Below, there’s the procedure to install the current version from GitHub on a NetBSD system. First, supposing that you still don’t have installed pkgin to make use of binary packages on NetBSD beyond pkgsrc, who is a overkill just to install a single small application, configure it: ...

Do you know that NetBSD has a simple web server pre-installed called Bozotic? It is very simple, so simple that it can be configured with just a single command line, and quite useful to serve file lists or static web pages. Like this blog. Supposing that you has a valid domain certificate, be using let’s encrypt of something else, who creating and validating is beyond the scope of this tutorial, all that needs to be done is: ...