diff --git a/content/code/2024-05-27-github-gpg-signing-key.md b/content/code/2024-05-27-github-gpg-signing-key.md new file mode 100644 index 0000000..78cf099 --- /dev/null +++ b/content/code/2024-05-27-github-gpg-signing-key.md @@ -0,0 +1,79 @@ +--- +title: Setting up GPG signing key for github +tags: gpg, github +--- + +I recently had to create a new GPG signing key and add it as a correct signature +for my github account. Here is how I did, for future reference. + +## Creating the key and exporting it + +I created the key in thunderbird, which I use for my mails. I did it directly +there to avoid having to import it then, but I could also have generated it on +the command line. + +I had some trouble finding how to export the key from thunderbird, you actually +have to open the OpenPGP key manager, select you key and then do "file/export", +which is kind of unintuitive. + +I realized afterhand that the code I entered here will be stored in my keyring +manager. Choose something unique ;-) + +## Importing it in the local keyring + +```bash +gpg --import /Volumes/o5avOD-1fyGp/Clés/Alexis\ Métaireau\ --redacted--@freedom.press-\(0xC65C7A89A8FFC56E\)-secret.asc +``` + +It should show up when using `gpg --list-keys`: + +```bash +gpg --list-keys +[keyboxd] +--------- +pub ed25519 2024-05-27 [SC] [expire : 2027-05-27] + 454294C6FF8B9716A5F641A9C65C7A89A8FFC56E +uid [ inconnue] Alexis Métaireau <--redacted--@freedom.press> +sub cv25519 2024-05-27 [E] [expire : 2027-05-27] +``` + +## Signing your commits + +There is [a comprehensive guide](https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits) +on how to do that, which basically tells you to: + + +```bash +git config --global commit.gpgsign true + +``` + +## Using multiple identities dependening the git repo + +Because I have multiple identities I commit with, I had to change the identity +used for a specific repository. + +The way to do that was to have a different `.gitconfig` loaded depending on the +repo being used. I put this in my `.gitconfig`: + +```ini +[includeIf "gitdir:~/dev/**/.git"] + path = .gitconfig-user + +[includeIf "gitdir:~/dev/fpf/**/.git"] + path = ~/.gitconfig-fpf +```` + +And the `~/.gitconfig-fpf` file to be like: + +```ini +[user] + name = Alexis Métaireau + email = --redacted--@freedom.press +``` + +## Exporting the public PGP keys + +At some point, I needed to give github the public key associated with my private +key. As I'm using Thunderbird to store the keys, I asked it to export the public +key. diff --git a/content/extra/keys/alexis@freedom.press.asc b/content/extra/keys/alexis@freedom.press.asc new file mode 100644 index 0000000..ad52530 --- /dev/null +++ b/content/extra/keys/alexis@freedom.press.asc @@ -0,0 +1,13 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +xjMEZlRXRhYJKwYBBAHaRw8BAQdAMU/SH0aZTDdnnfi0+Ra5Fza40nmUTXukyltb +zeE4EzzNKEFsZXhpcyBNw6l0YWlyZWF1IDxhbGV4aXNAZnJlZWRvbS5wcmVzcz7C +jwQTFggANxYhBEVClMb/i5cWpfZBqcZceomo/8VuBQJmVFdGBQkFo5qAAhsDBAsJ +CAcFFQgJCgsFFgIDAQAACgkQxlx6iaj/xW6jFQD/bP3/I7w8ZPWpI4YqZWlT3jMA +DXdlkLS88BUbGPFXYMQA/ROcFcKphO11urGfTa3xNA8PhW5D8MULB0xmLMS1dogG +zjgEZlRXRxIKKwYBBAGXVQEFAQEHQJXoNlN+8H7wnY+93EasUDk8rmBsStsijiCS +EXUcIs5cAwEIB8J+BBgWCAAmFiEERUKUxv+Llxal9kGpxlx6iaj/xW4FAmZUV0cF +CQWjmoACGwwACgkQxlx6iaj/xW5MTAD/aBv24vYSRbqm8APEAVj3yx8SEwTYZKdL +wa8uXdogLJ0BAPPqlaezTb1LKnrgAa11lDZDKVRN05/ZzqEPEY3y7xsL +=zV69 +-----END PGP PUBLIC KEY BLOCK----- diff --git a/content/extra/keys/alexis@notmyidea.org.asc b/content/extra/keys/alexis@notmyidea.org.asc new file mode 100644 index 0000000..4695387 --- /dev/null +++ b/content/extra/keys/alexis@notmyidea.org.asc @@ -0,0 +1,13 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +xjMEZUO7NRYJKwYBBAHaRw8BAQdA1S59xYb0n4zS68BdOmKihh76Sd3fQwvRea5S +btJjfBjNKEFsZXhpcyBNw6l0YWlyZWF1IDxhbGV4aXNAbm90bXlpZGVhLm9yZz7C +jwQTFggANxYhBOpaZSe6UpTNpvWHahwhuHaCjl/yBQJlQ7s1BQkFo5qAAhsDBAsJ +CAcFFQgJCgsFFgIDAQAACgkQHCG4doKOX/LNzQD/YzJ7nLzyLu0P1KMLZrulVlgu +DiYaAaOSpgDOIgr5284BANgtHSY0HNOMnipgDtCck7Yi3k7fbaREEUqFrv5qafwJ +zjgEZUO7NRIKKwYBBAGXVQEFAQEHQHMvNh0F6VXmagKGT5WK2MJAla3pCUeyxEqT +p5KP9wMxAwEIB8J+BBgWCAAmFiEE6lplJ7pSlM2m9YdqHCG4doKOX/IFAmVDuzUF +CQWjmoACGwwACgkQHCG4doKOX/JFZAEAzjTYQEPVe8nVq7nM8Le3OSUCtuZ+uRY2 +g7tsyLuu27UBAMwWb13239Ybs6pXkBHeyLm2LuDGRGJiYYZ6qEn7a0QO +=8ZnQ +-----END PGP PUBLIC KEY BLOCK----- diff --git a/content/pages/worklog/dangerzone.md b/content/pages/worklog/dangerzone.md new file mode 100644 index 0000000..9c2d99f --- /dev/null +++ b/content/pages/worklog/dangerzone.md @@ -0,0 +1,50 @@ +--- +title: dangerzone +save_as: dangerzone/index.html +template: worklog-en +--- + +## Lundi 27 Mai 2024 () + +- Created PGP keys for `alexis@freedom.press` and setup github to work with it. + +## Vendredi 24 Mai 2024 (5h, 5/5) + +- Completed the Sexual Harassment NYC training, and forms. I was pretty surprised by the (good) quality of it, actually. +- Reviewed alex.p PR on the gVisor design document. +- Read the currently opened pull requests. +- build: bumped the minimum python version to 3.9 (in a PR) + +## Jeudi 23 Mai 2024 (8h, 5/5) + +- Read on how Dangerzone is currently being integrated in the tails docs, yay! +- Synced this morning with Alex, and discussed about how containerization works, and what's the difference between OSes. +- Split my "small changes" pull request in two parts, with minor changes on one side, and changes on how test fixtures are run on the other side. +- Spent some time with Alex understanding why the tests weren't working anymore, and we found that the current tests weren't using the proper fixtures. That was fun and instructive: I'm happy to have a better understanding of how the test suite works, and interacts with QT apps. +- Read the gVisor documentation Alex wrote. Learned about secomp filters. +- Started using the devscripts to install the different environments locally, and started to install a X11 server on OSX to have the application show up... to be continued tomorrow. + +## Mercredi 22 Mai 2024 (8h, 5/5) + +What I did today (a lot of reading, some meetings): + +- Read a bunch of issues to better understand the packaging status of dangerzone. Notes for myself: + - [Debian discussion](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986856#29), how it works [on arch](), the goal to [have a small image for tails](https://github.com/freedomofpress/dangerzone/issues/669) (and in general, I guess) + - The [Python Packaging User Guide](https://packaging.python.org), I was looking for resources on how to package on different targets, but didn't encounter this. +- Read the documentation of [PyMuPDF](https://pymupdf.readthedocs.io/en/latest/installation.html), and [the presentation](https://github.com/freedomofpress/dangerzone/files/13821818/Considering.PyMuPDF-1.pdf) that was made for DangerZone (found out about [dangerzone-test-set](https://github.com/freedomofpress/dangerzone-test-set)) +- Read on the difference between podman and Docker, I'm still lagging on this front, as I'm not a user myself. +- Read the different Pull Requests on the repository to get a grasp of what is currently going on. (I learned about MacOS [entitlements](https://developer.apple.com/documentation/bundleresources/entitlements) and more specifically [App Sandbox](https://developer.apple.com/documentation/security/app_sandbox)) +- Read the [security audit](https://freedom.press/news/dangerzone-receives-favorable-audit/) for dangerzone (and the OWASP [Docker security cheatsheet](https://cheatsheetseries.owasp.org/cheatsheets/Docker_Security_Cheat_Sheet.html) that was linked there) +- Looked at the dangerzone redesign documents from superbloom, both for the application and for the website. Nice work :-) +- Read the current code and made [a PR with minor changes](https://github.com/freedomofpress/dangerzone/pull/811), and currently trying to setup my machine to work the same way Circle CI does. +- Did the security 101 presentation with Davis and David +- Welcome meeting with Erik, Harris and Alex.p + + +## Mardi 21 Mai 2024 (9h, 5/5) + +- I'm looking at the current codebase and current infrastructure. I'm installing a development environment locally (using `uv`) +- I'm discovering how everything is structured. I find out about [yum-tools-prod](https://github.com/freedomofpress/yum-tools-prod) and [apt-tools-prod](https://github.com/freedomofpress/apt-tools-prod) +- I'm reading the [Code of Conduct](https://github.com/freedomofpress/.github/blob/main/CODE_OF_CONDUCT.md). It's nice to see this is though of, and well phrased. +- I'm reading the [meeting notes](https://github.com/freedomofpress/dangerzone/wiki/Meeting-Notes) and clicked on some issues to see what's worked-on at the moment ([Explore how to Simplify Save Options · Issue #427 · freedomofpress/dangerzone · GitHub](https://github.com/freedomofpress/dangerzone/issues/427)) +- diff --git a/content/weeknotes/30.md b/content/weeknotes/30.md index 223952c..3082ce1 100644 --- a/content/weeknotes/30.md +++ b/content/weeknotes/30.md @@ -11,14 +11,14 @@ Une semaine concentré sur uMap, ou j'ai pu aller quasiment au bout du travail e **[uMap](https://umap-project.org)** 🗺️ *uMap est un outil libre pour faire des cartes personnalisées* -: Une présentation de mes avancées sur la synchro, et une discussion sur les points liés. C'est -: Je fais passer la suite de tests actuelle et j'en écris de nouveaux pour m'assurer que tout fonctionne bien comme prévu. Le serveur de websockets tourne durant les tests, ça fonctionne ! Et ça me permet de trouver quelques problèmes au passage :-) -: Une discussion sur la manière d'avoir nos discussions. +- Une présentation de mes avancées sur la synchro, et une discussion sur les points liés. +- Je fais passer la suite de tests actuelle et j'en écris de nouveaux pour m'assurer que tout fonctionne bien comme prévu. Le serveur de websockets tourne durant les tests, ça fonctionne ! Et ça me permet de trouver quelques problèmes au passage :-) +- Une discussion sur la manière d'avoir nos discussions. **[Danger Zone](https://dangerzone.rocks/)** ⚠️ *DangerZone permet de consulter des documents de sources inconnues en minimisant la prise de risque, entre autres pour les journalistes* -: J'ai signé le contrat avec [Freedom of the Press Foundation](https://freedom.press/), je commence le 21 Mai pour une période de 6 mois. +- J'ai signé le contrat avec [Freedom of the Press Foundation](https://freedom.press/), je commence le 21 Mai pour une période de 6 mois. ## Des joies 🤗 - Me sentir inspiré suite à des discussions avec l'équipe de FPF qui me donnent beaucoup d'énergie à chaque fois. C'est inspirant de voir la manière dont iels accueillent. @@ -37,7 +37,7 @@ Une semaine concentré sur uMap, ou j'ai pu aller quasiment au bout du travail e ## Vu, Lu, etc - 🎧 [Inventer une thérapie féministe](https://www.arteradio.com/son/61686022/inventer_une_therapie_feministe) de « un podcast à soi ». -- 📘 J'ai terminé ma lecture (en français cette fois ci, c'est plus simple !) de « la volonté de changer » de bell hooks. +- 📘 J'ai terminé ma lecture (en français cette fois ci, c'est plus simple !) de « la volonté de changer » de bell hooks. Notes à venir :-) - 📖 J'ai commencé et bien avancé le livre de l'université du nous [Réinventons le faire ensemble](https://universite-du-nous.org/re-inventons-le-faire-ensemble) qui parle et précise plusieurs techniques dont j'ai entendu parler, ou que j'ai pu pratiquer. - ⏯ [Peut-on encore défendre les insoumis](https://www.youtube.com/watch?v=VXycYC2xqrE) de Rhinoceros, chez Blast. Intéressant de voir l'accueil médiatique qui est fait, y compris sur certains médias publics. - ⏯ [Transphobie, la nouvelle panique des médias de l'extrème droite](https://www.youtube.com/watch?v=ObdXww-PX1A). Content de voir une vidéo d'analyse sur le sujet, et… malheureusement j'ai été assez déçu par le manque de fond proposé, au delà du « regardez, elles font tous les plateaux d'extrème-droite ». Au vu de la thématique, et de l'équipe de Rhinoceros, je m'attendais à mieux, surtout au vu du sujet qui le mérite. @@ -77,7 +77,5 @@ Une semaine concentré sur uMap, ou j'ai pu aller quasiment au bout du travail e #### Objectifs > There are two framings I find useful when a goal presents itself. The first is to ask, what do you expect will be different when that goal is achieved? How will you _change_ in becoming the person who can reach that goal? (And you _will_ change, count on it.) **Who do you expect to _be_ when you get to the end of this road?** Those questions (and others like them) can help you work out _why_ this goal is the one you want to point yourself at; **they can, at the same time, reveal to you if the goal you are contemplating is what _you_ really want or is perhaps something you may have unconsciously adopted from others** (your colleagues, or your boss, your parents, partner, friends, etc.). - -## Ailleurs… - -Chez [Benjamin](https://blog.benj.me/2024/05/14/notes-hebdo-4/), [Julie](https://juliebrillet.fr/notes/2024_05_13_notes/), [Fabien](https://frica.github.io/blog/notes-12-fr.html) +> +> — [Farfetching](https://everythingchanges.us/blog/farfetching/) diff --git a/mnmlist/templates/article.html b/mnmlist/templates/article.html index 14f9fe1..e9f6450 100644 --- a/mnmlist/templates/article.html +++ b/mnmlist/templates/article.html @@ -18,7 +18,7 @@ {% if article.prev_article %}
  • ← Précédent + title="{{ article.prev_article.title | striptags }}">← Précédent
  • {% endif %}
  • @@ -27,7 +27,7 @@ {% if article.next_article %}
  • Suivant → + title="{{ article.next_article.title | striptags }}">Suivant →
  • {% endif %}