I like things. I like new things. I like learning about these new things.
For about the past month now or so, I've been using bubblewrap to jail the launching of applications on my Linux box. By itself, bubblewrap is very plain and kind of weird to configure, but with a little massaging it can actually end up being very nice to use. I have it configured to create private directories for each application that launches under bubblewrap, and I have aliased many applications in my environment. Some require a bit of extra special care, but most launch painlessly. It's pretty neat, but still can't do some of the things that firejail used to do.
One of the things that I bubblewrapped as an excercise in configuring the system was Lollypop which is basically one of my favorite applications ever. Its just so good at its job. It launches a file portal to work with flatpak, but for some reason, it never played quite nice on my system, so I had to work around it with some scripting voodoo. But its still awesome, and its one of the few applications on my machine that is always open, along with Firefox, and Android Studio (and Steam but shh).
The last nugget I have for today is this thing called paprefs which is a preference frontend for PulseAudio (which I'm sure most all of you are using). It has this neat little checkbox for "Simultaneous Output" which will allow you to play the same application audio stream to all the things at once. I use it to play audio to a pair of headphones as well as a speaker so that I can have directional audio, but the other people with me will still be able to hear. It's neat, check it out.
Now to figure out JACK server and how to use MIDI, and then figure out VGA passthrough - or SPICE - depending on if I will ever be able to buy another graphics card.
Keep on keeping on.
========================
Follow pyamsoft around the Web for updates and announcements about the newest applications!
Like what I do?
Send me an email at: pyam.soft@gmail.com
Or find me online at: https://pyamsoft.blogspot.com
Follow my FaceBook Page
Follow my Google+ Page
=========================
Saturday, January 13, 2018
ipwaiter
I made a thing.
The ipwaiter is a script which is meant to help client machines (not really for servers, but it can work) handle the accepting and blocking of packets on specific ports.
ipwaiter is like an extremely simplified firewalld, if firewalld was written by a single person in a couple of hours using only shell script with the only goal of serving the author's specific use cases. Yeah.
ipwaiter handles the firewall as if it were a collection of services - or in keeping with our restaurant related theme - orders. Orders are simple configuration files that use iptables syntax - but do not include the chain name - and can do anything that iptables can do. The difference is that these orders are injected into three special chains - input_orders, forward_orders, and output_orders. The ipwaiter can dynamically add and remove orders from these chains, meaning that you can - for example - only support SSH connections when you are ready to launch an SSH server, or only accept KDEConnect connections when you are on specific wifi networks.
Of course, since the tool is currently extremely KISS, you would have to script many of these situations on your own. But please, feel free to contribute new orders if you think they are neat or helpful for a client machine.
The tool is very hands off, meaning it will not add these new order chains to your iptables rules anywhere, you are welcome to incorporate them wherever you want to in your packet rules. The only caveat, is that the ipwaiter expects it has exclusive control over these order chains, and will not hesistate to completely remove all rules in them when told to.
For some inspiration, I currently use the script to open up input ports for Steam to host local games when I have a game client open, and then automatically close up these ports when the game closes. I launch the KDEconnect services only when I am connected to my home wifi, and remove the order once I leave or drop connection.
I think it's neat, and maybe you will too.
GitHub
AUR package
========================
Follow pyamsoft around the Web for updates and announcements about the newest applications!
Like what I do?
Send me an email at: pyam.soft@gmail.com
Or find me online at: https://pyamsoft.blogspot.com
Follow my FaceBook Page
Follow my Google+ Page
=========================
The ipwaiter is a script which is meant to help client machines (not really for servers, but it can work) handle the accepting and blocking of packets on specific ports.
ipwaiter is like an extremely simplified firewalld, if firewalld was written by a single person in a couple of hours using only shell script with the only goal of serving the author's specific use cases. Yeah.
ipwaiter handles the firewall as if it were a collection of services - or in keeping with our restaurant related theme - orders. Orders are simple configuration files that use iptables syntax - but do not include the chain name - and can do anything that iptables can do. The difference is that these orders are injected into three special chains - input_orders, forward_orders, and output_orders. The ipwaiter can dynamically add and remove orders from these chains, meaning that you can - for example - only support SSH connections when you are ready to launch an SSH server, or only accept KDEConnect connections when you are on specific wifi networks.
Of course, since the tool is currently extremely KISS, you would have to script many of these situations on your own. But please, feel free to contribute new orders if you think they are neat or helpful for a client machine.
The tool is very hands off, meaning it will not add these new order chains to your iptables rules anywhere, you are welcome to incorporate them wherever you want to in your packet rules. The only caveat, is that the ipwaiter expects it has exclusive control over these order chains, and will not hesistate to completely remove all rules in them when told to.
For some inspiration, I currently use the script to open up input ports for Steam to host local games when I have a game client open, and then automatically close up these ports when the game closes. I launch the KDEconnect services only when I am connected to my home wifi, and remove the order once I leave or drop connection.
I think it's neat, and maybe you will too.
GitHub
AUR package
========================
Follow pyamsoft around the Web for updates and announcements about the newest applications!
Like what I do?
Send me an email at: pyam.soft@gmail.com
Or find me online at: https://pyamsoft.blogspot.com
Follow my FaceBook Page
Follow my Google+ Page
=========================
Whats up
Buncha cruncha stuff.
Everything uses ConstraintLayout now since it's the new hotness.
Better shadows, better perception of depth and liveliness on views and all that good stuff.
Screenie is a new screenshot cropping tool I'm working on. It's ugly currently, but it works to take cropped screenshots and then save, share, whatever them.
PadLock bugfixes, ZapTorch bugfixes, better support when in the smallest flavor of multi-window mode, all that good stuff.
Hoping for later this week or next week, we'll see. Stay tuned.
========================
Follow pyamsoft around the Web for updates and announcements about the newest applications!
Like what I do?
Send me an email at: pyam.soft@gmail.com
Or find me online at: https://pyamsoft.blogspot.com
Follow my FaceBook Page
Follow my Google+ Page
=========================
Everything uses ConstraintLayout now since it's the new hotness.
Better shadows, better perception of depth and liveliness on views and all that good stuff.
Screenie is a new screenshot cropping tool I'm working on. It's ugly currently, but it works to take cropped screenshots and then save, share, whatever them.
PadLock bugfixes, ZapTorch bugfixes, better support when in the smallest flavor of multi-window mode, all that good stuff.
Hoping for later this week or next week, we'll see. Stay tuned.
========================
Follow pyamsoft around the Web for updates and announcements about the newest applications!
Like what I do?
Send me an email at: pyam.soft@gmail.com
Or find me online at: https://pyamsoft.blogspot.com
Follow my FaceBook Page
Follow my Google+ Page
=========================
Subscribe to:
Posts (Atom)