#openssl #xz #backdoor

🇬🇧 xz backdoor required glibc, which alpine famously doesn't use 😁
🇪🇸 la hackeada necesita glic que alpine linux no tiene 😅
🇷🇺 Бэкдор ZX требует glibc, который, как известно, Alpine не использует.

https://www.openwall.com/lists/oss-security/2024/03/29/4

#jq #cmd #unix #shell #command #line #parser

🇬🇧 lightweight flexible command-line JSON processor
🇪🇸 Procesador JSON de línea de comando flexible
🇷🇺 легкий гибкий процессор JSON командной строки

https://jqlang.github.io/jq/

Swfblag
Making GTK graphics offloading work

(I need to put that somewhere because people ask about it and having a little post to explain it is nice.)

What’s it about? GTK recently introduced the ability to offload graphics rendering, but it needs rather recent everything to work well for offloading video decoding.

So, what do you need to make sure this works?

First, you of course need a video to test. On a modern desktop computer, you want a 4k 60fps video or better to have something that pushes your CPU to the limits so you know when it doesn’t work. Of course, the recommendation has to be Big Buck Bunny at the highest of qualities – be aware that the most excellent 4000×2250 @ 60fps encoding is 850MB. On my Intel TigerLake, that occasionally drops frames when I play that with software decoding, and I can definitely hear the fan turn on.
When selecting a video file, keep in mind that the format matters.

Second, you need hardware decoding. That is provided by libva and can be queried using the "vainfo" tool (which comes in the `libva-utils` package in Fedora). If that prints a long list of formats (it’s about 40 for me), you’re good. If it doesn’t, you’ll need to go hunt for the drivers – due to the patent madness surrounding video formats that may be more complicated than you wish. For example, on my Intel laptop on Fedora, I need the "intel-media-driver" package which is hidden in the nonfree RPMFusion repository.
If you look at the list from "vainfo", the format names give some hints – usually VP9 and MPEG2 exist. H264 and HEVC aka H265 are the patent madness, and recent GPUs can sometimes do AV1. The Big Buck Bunny video from above is H264, so if you’re following along, make sure that works.

Now you need a working video player. I’ll be using "gtk4-demo" (which is in the "gtk4-devel-tools" package, but you already have that installed of course) and its video player example because I know it works there. A shoutout goes out to livi which was the first non-demo video player to have a release that supports graphics offloading. You need GTK 4.14 and GStreamer 1.24 for this to work. At the time of writing, this is only available in Fedora rawhide, but hopefully Fedora 40 will gain the packages soon.

If you installed new packages above, now is a good time to check if GStreamer picked up all the hardware decoders. "gst-inspect-1.0 va" will list all the elements with libva support. If it didn’t pick up decoders for all the formats it should have (there should be a "vah264dec" listed for H264 if you want to decode the video above), then the easiest way to get them is to delete GStreamer’s registry cache in "~/.cache/gstreamer-1.0".

If you want to make sure GStreamer does the right thing, you can run the video player with "GST_DEBUG=GST_ELEMENT_FACTORY:4". It will print out debug messages about all the elements it is creating for playback. If that includes a line for an element from the previous list (like `vah264dec` in our example) things are working. If it picks something else (like `avdec_h264` or `openh264dec`) then they are not.

Finally you need a compositor that supports YUV formats. Most compositors do – gnome-shell does since version 45 for example – but checking can’t hurt: If "wayland-info" (in the "wayland-utils" package in Fedora) lists the NV12 format, you’re good.

And now everything works.
If you have a 2nd monitor you can marvel at what goes on behind the scenes by running the video player with "GDK_DEBUG=dmabuf,offload" and GTK will tell you what it does for every frame, and you can see it dynamically switching between offloading or not as you fullscreen (or not), click on the controls (or not) and so on. Or you could have used it previously to see why things didn’t work.
You can also look at the "top" and "gputop" variant of your choice and you will see that the video player takes a bit of CPU to drive the video decoding engine and i[...]

nform the compositor about new frames and the compositor takes a bit of CPU telling the 3D engine to composite things and send them to the monitor. With the video above it’s around 10% on my laptop for the CPU usage each and about 20% GPU usage.

And before anyone starts complaining that this is way too complicated: If you read carefully, all of this should work out of the box in the near future. This post just lists the tools to troubleshoot what went wrong while developing a fast video player.

#iso #creation #tool #makeiso

🇬🇧 Create alpine isos with just two commands
🇻🇪 Crea isos de #alpine con solo dos comandos
🇷🇺 Создавайте alpine iso всего двумя командами

https://codeberg.org/venenux/venenux-teaiso/src/branch/venenux-teaiso/doc/Manual-of-usage.md

#auth #api

🇬🇧 easy to implement, adaptable authentication and authorization platform
🇻🇪 facil de implementar plataforma de autenticacion t autorizacion

https://t.me/latam_programadores/7883

#alpine #redis #valkey #license

🇬🇧Due to the relicensing of Redis to RSALv2+SSPLv1, a non-free license model, the BSD-3-Clause licensed fork called VALKEY has replaced Redis in the main package repository with package named valkey-compat .. unfortunaTELLY redict IS NOT PACKAGED
🇷🇺 В связи с перелицензированием Redis на RSALv2+SSPLv1, несвободную модель лицензирования, лицензионный форк BSD-3-Clause под названием VALKEY заменил Redis в основном репозитории пакетов пакетом с именем valkey-compat
https://redict.io/

#Alpine 3.20 were #released on May.. do you know that? …

1️⃣ Mayor feature: 64bit RISC-V support started
2️⃣ Significan changes:
* Grub still has problems on upgrades, you should manually check before upgrade, cos older version (to be upgrade) doe snot suppor new feature
* Redis changed license and valkey-compat is the alpine focus, unfortunatelly is the worse opction, please use redict package from community
* KDE and QT goin to version 6 .. more stuff that users dont wanted 😄
* Most of the desktops are still uncomplete and LXDE is always missing

https://alpinelinux.org/posts/Alpine-3.20.0-released.html

Alpine linux bug, package index in edge is not valid, check thread at https://t.me/alpine_linux_pycckuu/8622 from https://t.me/alpine_linux_pycckuu/8608 .. package telegram-desktop already present in https://pkgs.alpinelinux.org/packages?name=telegram*&branch=edge&repo=&arch=&maintainer=

#performance #bypass #saltar #spectre #linux

1️⃣ disable Spectre v2 mitigations : nospectre_v2
2️⃣ disable Spectre v4 migt! : nospec_store_bypass_disable
3️⃣ disable Spectre v1 mitigations : nospectre_v1
4️⃣ disable Spectre v1 mitigations : nospectre_v1
☑️ disable all know mitigations mitigations=off

https://t.me/vegnuli

#wiki #markdown #doc

markdown based database less wiki

https://github.com/Zavy86/WikiDocs

McKAY brothers, multimedia emulation and support
Unable to negotiate : no matching host key type found

This is a problem with older devices.. and some host (here you will find solution and why happened): Unable to negotiate with 192.168.8.109 port 22: no matching host key type found. Their offer: ssh-dssThe problem is that such algoritm was deprecated becouse nowadays the current computers are enought powerfully to breack such encription.. so developers deprecated and eliminated in flavoour

Ленивый администратор не хочет выполнять работу, умный администратор автоматизирует работу, но давайте не будем путать невежественного и ленивого человека, который хочет, чтобы кто-то другой выполнял работу, которую он должен делать, с кем-то умным, который автоматизирует и знает, что он делает. ...сегодня есть много идиотов, которые считают себя экспертами благодаря этой хрени под названием SHITstemd 👍

A lazy administrator does not want to do the work, an intelligent administrator automates the work, but let's not confuse an ignorant and lazy being who wants someone else to do the work he should do with someone intelligent who automates and knows what he is doing... today there are many idiots who think they are experts thanks to that crap named SHITstemd

🇬🇧 Jobs, Hacks and Bounties: for Alpine Linux hackers

🇪🇨 Trabajos, hacks y recompensas: Alpine linux hackers !

🇷🇺 Работа, взлом и награды: Alpine linux хакеры!

https://ungleich.ch/u/projects/jobs-hacks-bounties/

#ipv6 #ibookmark #remote #bounties #hacking

Desktop of yomayu 👌

#cheatsheet #guia #guide #fs #comands
🇪🇸 Guía rápida de Comandos Básicos Linux
🇺🇸 Linux Cheatsheet for Engineers.
▶️ https://t.me/open_tecnologies

#glibc #alpine #package #layer #builds

🇬🇧 custom built glibc binary based on the vanilla glibc source
🇻🇪 Binario glibc personalizado basado en la fuente Vanilla glibc
🇷🇺 специально созданный двоичный файл glibc на основе исходного кода vanilla glibc

https://github.com/sgerrand/alpine-pkg-glibc

Performance through optimization is not the same as performance through cutting functionalities.

1️⃣ alpine linux uses muslc means any external binaries will offers some problems (there are reports simple programs works good)
2️⃣ alpine linux cutoff features in flavor of simplicity and minimalist, means no so much features will be found if you dont install original packages or compiled from sources

For the rest is equal as any other Linux