I'm watching https://discord.com/channels/1072614816579063828/1074422586894712912/110605834877376924

I'm watching https://discord.com/channels/1072614816579063828/1074422586894712912/1106058348773769246 and... I feel I've got to help move the akmods forward

ASAP

Bbsherman I'm watching https://discord.com/channels/1072614816579063828/107442258689471291...

bshermanOP•5/11/23, 4:51 AM

we need those wireless xbox controllers!

akdev•5/11/23, 5:10 AM

@j0rge what do you mean by a terminal that talks to the podman api?

j0rge•5/11/23, 5:11 AM

https://docs.google.com/document/d/e/2PACX-1vR0UOf_ZycC6sHDQ8Ll1JmqRIz4oDTZLjoW5KJLTEcG5Q7B3aztvdR6SL4l2pXih5Z0dQq1LeOpH9ka/pub

j0rge•5/11/23, 5:11 AM

but going to bed for now.

akdev•5/11/23, 5:18 AM

Mm I had a plan for my toolbox runtime to expose an API

Jj0rge https://docs.google.com/document/d/e/2PACX-1vR0UOf_ZycC6sHDQ8Ll1JmqRIz4oDTZLjoW5...

pythoner6•5/11/23, 5:31 AM

The destiny references

akdev•5/11/23, 6:14 AM

“There’s people out there maintaining systems with millions going through them. They don’t trust anyone, they don’t even trust themselves.”

xyny•5/11/23, 1:32 PM

GH really shittin itself today...

Xxyny GH really shittin itself today...

bshermanOP•5/11/23, 1:40 PM

oh, i thought it was just me

bshermanOP•5/11/23, 1:40 PM

https://www.githubstatus.com/

xyny•5/11/23, 1:46 PM

everything is "degraded" (except packages)

xyny•5/11/23, 1:47 PM

they've been having incidents daily for three days...

np2•5/11/23, 1:48 PM

This is why all we need to move to federated Gitea/foregjo asap /s

xyny•5/11/23, 1:49 PM

I hope Gitea Actions gets some quick development...

Nnp2 This is why all we need to move to federated Gitea/foregjo asap /s

xyny•5/11/23, 1:49 PM

good /s there, almost caught me agreeing

np2•5/11/23, 1:51 PM

It sounds really fun in theory, but in practice, administrating your own git server + website + actions runner + whatever else gitea has doesn’t sound fun tbh

bshermanOP•5/11/23, 2:00 PM

gitea is great for a homelab, or even a small business, (I use for both) but even finding people committed to maintaining the gitea and related services is not the the biggest problem... its cost and availability of infrastructure...

Its been discussed in discord and other places before, but Jorge covered it pretty well in the Brodie "Tech over Tea" interview yesterday...

Goals for this include "running it responsibly", "like a real OSS project with governance", and being "about the automation before the fancy features". Also, if github has problems, much bigger customers (who are paying top dollar for the service) are having the same issues, with more significant impact to their bottom line and their own customers.

We have the benefit of using microsoft/github for free (nearly free) CI, code hosting, communications, registry downloads, asset downloads. It's pretty amazing really.

bshermanOP•5/11/23, 2:00 PM

And... I just saw "/s" and have to search what that means...

bshermanOP•5/11/23, 2:01 PM

"/s" is known as the sarcasm switch

Got it.

xyny•5/11/23, 2:01 PM

about the automation before the fancy features

mfw the automation is the fancy feature

bshermanOP•5/11/23, 2:02 PM

regardless, I'm still happy with what I wrote

j0rge•5/11/23, 7:30 PM

https://github.com/orgs/ublue-os/discussions/152

GitHub

Device Security · ublue-os · Discussion #152

I recently moved to a custom image based on silverblue-main. Before that, it was an official ISO installation of Fedora Silverblue 36 updated to 38 and all those time, I had some level of Device Se...

j0rge•5/11/23, 7:31 PM

not sure on this one if someone wants to take a look

pythoner6•5/11/23, 7:41 PM

I can't say I know much at all about that - but doing a quick check my now ublue laptop passes more of the security checks (if you copy the technical report from that dialog) compared to my plain fedora desktop (the desktop has been upgraded from fedora 35 or 36 compared to the fresh ublue install on my laptop, and the hardware is obviously different so not sure how much that affects thigns)

Bigpod•5/11/23, 7:45 PM

based on what i just read if you have nvidia drivers you cant pass kernel verification but i could be wrong(quite a lot wrong)

pythoner6•5/11/23, 7:47 PM

Also sigh building extra kernel modules in the container build is not as easy as I was hoping. Or well, the compiling is fine, but getting depmod updated seems to be problematic since it wants to use the kernel of the actual machine running the build (which is whatever kernel the github action is running on, currently some azure 5.15 kernel, very different from the kernel I'm actually trying to deal with in the image)

pythoner6•5/11/23, 7:47 PM

and you can't do the depmod update on boot since /lib/modules isn't writable (though having it be done in the image would be better anyway IMO)

Cup•5/11/23, 7:58 PM

Ppythoner6 Also *sigh* building extra kernel modules in the container build is not as easy ...

pythoner6•5/11/23, 7:59 PM

Oh, may have figured it out. Maybe

pythoner6•5/11/23, 8:08 PM

Ah ok, yeah got the kernel modules working probably. Now just the issue of the xone firmware downloader which wants to write firmware to /lib/firmware which is obviously read only

j0rge•5/11/23, 8:25 PM

can you just extract the firmware and plop it in there?

pythoner6•5/11/23, 8:32 PM

Well it would be possible to grab the firmware during image build - which is what I'd like to do in an ideal world - but I'm guessing that the firmware isn't necessarily redistributable as far as licensing goes; I'm assuming that's why xone is distributed with a script to fetch the firmware from MS.

pythoner6•5/11/23, 8:33 PM

Current solution that I think is working: create a symlink from /lib/firmware/xow_dongle.bin to /usr/local/lib/firmware/xow_dongle.bin during image build, and then modify the download script to put the firmware in the latter location

pythoner6•5/11/23, 8:38 PM

Ok, yep, elite controller on dongle is working! Haven't added the download script changes to my image yet but that should be easy

pythoner6•5/11/23, 9:00 PM

@j0rge in case you're interested, my proof of concept of building xone as part of the image build is here: https://github.com/Pythoner6/ublue-custom/commit/705cdf5bc44aaefbc42464246e5dee52de30439e

pythoner6•5/11/23, 9:00 PM

Probably a bit hacky and missing some things (like perhaps a better way of consuming the xone source code, or at least doing checksums on it etc). But functional at least for now.

pythoner6•5/11/23, 9:02 PM

Being able to do this IMO is a huge selling point of ublue for me. Now I don't have to worry about setting that up on any new machines, yay!

Ppythoner6 Ah ok, yeah got the kernel modules working probably. Now just the issue of the x...

bshermanOP•5/11/23, 9:19 PM

Have you seen https://github.com/bsherman/ublue-kmods

GitHub

GitHub - bsherman/ublue-kmods: Vanilla Fedora immutable images with...

Vanilla Fedora immutable images with Nvidia and xbox drivers added - GitHub - bsherman/ublue-kmods: Vanilla Fedora immutable images with Nvidia and xbox drivers added

bshermanOP•5/11/23, 9:20 PM

We ( ublue-os org ) also have an akmods repo that is prepped to start adding akmods builds.

bshermanOP•5/11/23, 9:22 PM

I’m definitely interested in other approaches and perspectives though.

Actually the pending changes in ublue-os/akmods aren’t by me but I expect to be working on it in next few days

Ppythoner6 @j0rge in case you're interested, my proof of concept of building xone as part o...

bshermanOP•5/11/23, 9:24 PM

The main feedback I have for you with respect to getting that added into ublue-main, we definitely want the akmod rpms rather than files added in ad hoc.

There was even some great work done to push our own ad hoc config files into rpm. Much clearer downstream to know where files come in the base images from when owned by rpm

Bbsherman The main feedback I have for you with respect to getting that added into ublue-m...

Arcitec•5/11/23, 9:41 PM

There is literally a flag for it:

So there is no reason to bring individual files in manually. Just telll it to build module X for kernel Y, and to put the RPMs in the output directory. Then install those RPMs with rpm-ostree.

As long as all kernels are installed in the chroot build environment I think it will work.

Also for anyone curious "why not just call instead?", because is just a wrapper around which attempts to build and then INSTALL the RPMs which won't work on rpm-ostree. So do to read how runs the build tool, and then install the RPMs manually with

rpm-ostree install

rpm-ostree install

Arcitec•5/11/23, 9:42 PM

@pythoner6

AArcitec There is literally a flag for it: ```sh akmodsbuild -k <kernels> -o <folder> ...

bshermanOP•5/11/23, 9:44 PM

Right. Part of the issue is the linked change set doesn’t use akmods unless I overlooked it.

Bbsherman Right. Part of the issue is the linked change set doesn’t use akmods unless I ov...

Arcitec•5/11/23, 9:45 PM

Yea if you mean pythoner's link, it was grabbing final files from some other repository instead of building them with akmods locally.

bshermanOP•5/11/23, 9:45 PM

Yeah. I’m mobile. Harder to interact on phone.

pythoner6•5/11/23, 9:45 PM

Yes - totally understand that the way I'm doing it is perhaps not right for ublue proper. However I have some thoughts on why I wanted to do it the way I am, but about to head out, will try to put down my thoughts later

bshermanOP•5/11/23, 9:45 PM

Trying to hotspot. But for some reason discord won’t load messages while on my hotspot

AArcitec Yea if you mean pythoner's link, it was grabbing final files from some other rep...

pythoner6•5/11/23, 9:46 PM

No I am compiling from source, just using the source directly instead of going through the extra layer of akmods