Vitor Araujo Boufleur vboufleur

Setup Docker on Amazon Linux 2023

The following guide is for setting up Docker with docker-compose v2 on Amazon Linux 2023. The steps are intendend for AL2023 on EC2 but should mostly work for the AL2023 VMs running on other hypervisors.

Install and configure Docker on Amazon Linux 2023

Install Base OS Packages

Install the following packages, which are good to have installed:

How to fix the "Failed to close file descriptor for child process (Operation not permitted)" in your docker ci build

Disclaimer

First off, I'm not a docker expert by any means. I just wanted my CI pipeline to work and went down the habbit hole. The solution I present can cause some security implications, be aware.

Cause

The problem is caused by a seccomp policy and a glibc >= 2.34 update that returns an EPERM (operation not permitted) insted of ENOSYS (function not implemented).

Solution/Workaround

Open dbeaver:

Help > install new software > Click Add

Name: DevStyle Theme

Location**: https://www.genuitec.com/updates/devstyle/ci/

Check

DevStyle Features

Create SSH Key on Mac for Xcode

The docs for GitHub show a command to create a key with the ed25519 encryption method which is not allowed by Xcode. Even if you are not using the Source Control features in Xcode you will often need to use an account with GitHub when you are consuming Swift packages which are pulled from GitHub.

For SSH keys there are 4 algorithms.

🚨 DSA: This is an older algorithm which is no longer supported and is superceded with more modern algorithms.
⚠️ RSA: This algorithm was an improvement but it is now outdated and a more modern method should be used.
👀 ECDSA: Another improvement which is dependent on your computer's ability to generate random numbers.
✅ Ed25519: The most recommended public-key algorithm today which you should use with GitHub.

Hi!

You should be able to install GNOME DE on Qubes OS dom0 with.

sudo qubes-dom0-update gnome-shell

Install extensions according to instructions here.

Enable window borders

ExtRoot & Swap on OpenWrt

Following Quick Start for Adding a USB drive but installing some packages that will be needed right after. Also see Using storage devices.

SSH into the router.
Install required packages...

opkg update
opkg install block-mount e2fsprogs kmod-fs-ext4 kmod-usb-ohci kmod-usb-storage kmod-usb-uhci kmod-usb2 kmod-usb3 usbutils nano

	#!/bin/sh

	argc() { argc=$#; }

	if [ "$#" -ne 1 ]; then
	echo "Usage: Enter your AQL preference as 'latency', 'balanced', 'bandwidth', or an integer value for aql_txq_limit." >&2
	exit 1
	fi

	aql_txqs=$(find /sys/ -name 'aql_txq_limit')

	Install Fedora

	Apply all the updates

	sudo dnf -y update
	sudo reboot

	Install Waydroid

	sudo dnf -y install waydroid

	Copyright 2022 Renato Byrro

	Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

	1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.

	2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

	3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.

	#!/bin/bash

	# From Victor (zoph) Grenu from zoph.io - https://zoph.io
	# Twitter: @zoph

	TARGET_ROLE_NAME="AdministratorAccess"

	## Get list of AWS accounts using SSO
	AWS_ACCESS_TOKEN=$(cat $(ls -1d ~/.aws/sso/cache/* \| grep -v botocore) \| jq -r "{accessToken} \| .[]")
	ACCOUNTS_IDS=($(aws sso list-accounts --access-token $AWS_ACCESS_TOKEN \| jq -r '.accountList[] \| .accountId'))