giulio lsd-cat

Qubes OS 4.3.1 on Proxmox (nested KVM)

Host: Proxmox 9, AMD Zen4, kvm_amd nested=1.

Steps

Download Qubes-R4.3.1-x86_64.iso to /var/lib/vz/template/iso.
Create the VM:
- q35 machine
- SeaBIOS

Gogs 0.13 (sqlite) to Gitea 1.0.2 (and upper)

Quoting the Gitea docs:

Upgrading from Gogs 0.12.x and above will be increasingly more difficult as the projects diverge further apart in configuration and schema.

Since gogs has now multiple unfixed RCEs and has for a while, it is imperative to either turn it off or migrate. The problem is, what to do if running a version > 0.11.x?

	#!/usr/bin/env python3

	# ctor -> arti onion service discovery key conversion script
	# Usage: ./hss_ctor_to_arti.py <base32 secret> > /path/to/arti/keystore/client/<hsid>/ks_hsc_desc_enc.x25519_private
	# <base32 secret> is the last part in the ctor client auth file
	# <hsid> is the Onion Service hostname without .onion
	# Any extra trailing space or newline at the end of the file will break the format
	# <hsid> folder must be chmod 700
	# ks_hsc_desc_enc.x25519_private must be chmod 600