unknown

backupNAS.md

@@ -53,3 +53,9 @@ dar -c /mnt/backup/etc_initial --compression=lzo -s 50M -M -R /etc --hash sha1 -
 Nextcloud
 --täglich Datenbank Dump und cloud_data
 -verschlüsselt 
+
+## duplicati backend
+
+### client
+the data source aka client holds a local database to be fast. this db does not get copied to the remote target. the remote target only contains `dlist.zip.aes`, `dindex.zip.aes` and `dblock.zip.aes` files.
+`duplicati-cli repair {filepath}`

gnuk.md

@@ -3,6 +3,11 @@ keywords:
   - IT
   - Security
 ---
+## gpg usage
+```bash
+add to gpg.conf: keyserver hkps://keys.openpgp.org
+gpg --refresh-keys
+```
 ## Gnuk
 Passport-opensc:[ https://javacardos.com/tools/passport]( https://javacardos.com/tools/passport)
 Black pill pin : https://user-images.githubusercontent.com/13839872/43411278-5f35afd8-9432-11e8-9385-cdd8d3db298d.png

linux_hardening.md

@@ -10,11 +10,14 @@ Most of the distributions are delievered with a microsoft-signed SHIM bootloader
  - mokutil --enable-validation
 
 ## ubuntu
-ubuntu provides a update-secureboot-policy script to generate and enroll a secureboot mok, but this needs an already active secureboot.
+ubuntu provides a update-secureboot-policy script to generate and enroll a secureboot mok, but this needs an already active secureboot with MS keys and this needs to be active through booting the installer
 # cryptsetup luks
 crypsetup luksDump /dev/sdaX
 cryptsetup luksChangeKey /dev/sdaX
 cryptsetup luksErase
 
 ressource:
-http://jk.ozlabs.org/docs/sbkeysync-maintaing-uefi-key-databases/
+http://jk.ozlabs.org/docs/sbkeysync-maintaing-uefi-key-databases/
+
+##  lkrg - linux kernel runtime guard
+archlinux can build with AUR, debian/ubuntu can use the *.deb precompiled package. It should be available for x64, arm64 and arm