| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 5 days | Revert "Do not serve linux repo by cgit" | Dmitry Ilvokhin | |
| This reverts commit 1fff990586c79f2c531d3e8d09555edce3e3354f. | |||
| 5 days | Add lld to dev | Dmitry Ilvokhin | |
| Enable building Linux kernel by LLVM toolset. | |||
| 2026-10-13 | Adjust perf_event_paranoid to allow kernel profiling | Dmitry Ilvokhin | |
| Linux kernel default [1] paranoia level is 2, which means unprivilage users can to profiler kernel. On my boxes only trusted users have an account (at least for now), so it is fine for them to be able to profile kernel, even if it creates security concerns. [1]: 0161028b7c8a ("perf/core: Change the default paranoia level to 2") | |||
| 2026-10-13 | Move debuginfod info into it is own role | Dmitry Ilvokhin | |
| In preparation to commit that moves perf to it own role. This will allow share same debuginfod role for both gdb and perf roles. | |||
| 2026-10-12 | Add pkgconf to dev role | Dmitry Ilvokhin | |
| Required to build perf tool. | |||
| 2026-10-12 | Add debuginfod to dev role | Dmitry Ilvokhin | |
| debuginfod required to properly resolve symbols for perf record. | |||
| 2026-10-08 | Make benchmarks repository public | Dmitry Ilvokhin | |
| 2026-09-26 | Add a user for Anastasiia Semenova at mountain | Dmitry Ilvokhin | |
| 2026-09-26 | Move public keys for d subdirectory | Dmitry Ilvokhin | |
| This makes pubkeys management a bit more generic to allow more users with pubkeys. | |||
| 2026-08-02 | Do not serve linux repo by cgit | Dmitry Ilvokhin | |
| AI crawlers are killing SSD on the git box. Serve them with 404 instead to keep the box alive. | |||
| 2026-07-29 | Hide Linux kernel repo | Dmitry Ilvokhin | |
| AI crawler bots are going crazy trying to crawl content of it and killing box that serves web requests. | |||
| 2026-07-25 | Add git mirror for Linux kernel | Dmitry Ilvokhin | |
| 2026-06-10 | Add Maze Hill rent URL to flatbot | Anastasiia Semenova | |
| [ ilvokhin: Fixed it up to match commit style ] | |||
| 2026-05-30 | Add virtme-ng to kerneldev role | Dmitry Ilvokhin | |
| 2026-05-30 | Add role for kernel development | Dmitry Ilvokhin | |
| 2026-05-09 | Add lkml role | Dmitry Ilvokhin | |
| Tools for Linux Kernel Mailing List (LKML). | |||
| 2026-05-03 | Add google benchmark and google test to dev role | Dmitry Ilvokhin | |
| 2026-03-30 | Specify Europe/London timezone for flatbot.timer | Dmitry Ilvokhin | |
| 2026-03-21 | Use override for tor.service | Dmitry Ilvokhin | |
| 2026-03-21 | Use override for git-daemon.service | Dmitry Ilvokhin | |
| Instead of modifying pacman owned file in place. | |||
| 2026-03-21 | Return ansible.builtin.systemd_service back | Dmitry Ilvokhin | |
| We need to do daemon reload for custom unit files. | |||
| 2026-03-21 | Move flatbot units away from /usr/lib/systemd/system | Dmitry Ilvokhin | |
| 2026-03-21 | Remove daemon_reload: true from certbot | Dmitry Ilvokhin | |
| 2026-03-21 | Move epgtrim units away from /usr/lib/systemd/system | Dmitry Ilvokhin | |
| /usr/lib/systemd/system is not a correct directory for ansible managed units, /etc/systemd/system is the right place to have them in. | |||
| 2026-03-21 | Remove custom certbot units | Dmitry Ilvokhin | |
| There is certbot-renew.timer file that comes out of the box. No need to maintain own copy. | |||
| 2026-02-13 | Remove curly braces from flatbot wrapper | Dmitry Ilvokhin | |
| 2026-02-11 | Configure git send mail | Dmitry Ilvokhin | |
| 2026-02-07 | Add run-flatbot wrapper script | Dmitry Ilvokhin | |
| Goal is to keep all URLs in one place (file), because I forget to modify multiple files, when make changes. | |||
| 2026-02-03 | Remove unused variables from flatbot.service | Dmitry Ilvokhin | |
| 2026-01-28 | Remove Hampstead, East Finchley and Highgate from flatbot | Dmitry Ilvokhin | |
| 2026-01-04 | Wait for /run/xtables.lock for wireguard rules | Dmitry Ilvokhin | |
| When box is restarted seems like there is a race to take iptables lock file and some units can not start because of that. In the log error looks like this. Can't lock /run/xtables.lock: Resource temporarily unavailable Another app is currently holding the xtables lock. Perhaps you want to use the -w option? Take iptables suggestion and wait for the xtables lock. Downside is if something is not going to release the lock, then we stall forever. | |||
| 2026-01-04 | Use systemd_service instead service | Dmitry Ilvokhin | |
| To make daemon_reload work. | |||
| 2026-01-04 | Rotate vault password | Dmitry Ilvokhin | |
| 2026-01-03 | Update telegram bot token | Dmitry Ilvokhin | |
| 2026-01-03 | Use daemon_reload: true instead of custom handler | Dmitry Ilvokhin | |
| 2026-01-03 | Add flatbot role | Dmitry Ilvokhin | |
| 2026-01-02 | Add playbook for epgtrim | Dmitry Ilvokhin | |
| 2026-01-02 | Role to serve packages.ilvokhin.com | Dmitry Ilvokhin | |
| 2026-01-02 | Fix spelling in packages repo descirption | Dmitry Ilvokhin | |
| 2025-12-19 | Add packages repository to cgit | Dmitry Ilvokhin | |
| 2025-12-19 | Run init-git-repo.sh only under git user | Dmitry Ilvokhin | |
| Otherwise file permissions are mess up. | |||
| 2025-12-18 | Add devtools and makepkgconfig | Dmitry Ilvokhin | |
| Required to build Arch Linux packages. | |||
| 2025-12-16 | Add misc repository to cgitrc | Dmitry Ilvokhin | |
| 2025-12-13 | Migrate dovecot from 2.3 to 2.4 | Dmitry Ilvokhin | |
| See [1] for the anouncement. Basically, all config options were renamed or altered in some way. Brilliant. Used [2] as a reference as official documentation lack side by side migration examples. [1]: https://archlinux.org/news/dovecot-24-requires-manual-intervention/ [2]: https://zunzuncito.oriole.systems/28/ | |||
| 2025-11-08 | Add nastya wireguard peer | Dmitry Ilvokhin | |
| 2025-10-12 | Disable session save/restore mechanism on macOS | Dmitry Ilvokhin | |
| 2025-08-24 | Add wireguard configuration to dotfiles role | Dmitry Ilvokhin | |
| This is a simple role that works only for one host. There are multiple complications that I should keep in mind in the future. * There is should be a way to install dotfiles on boxes without GPG key there. So, files with secrets in them should be gated. * Wireguard configuration should be per host. Each host should have it is own private key. | |||
| 2025-08-23 | Migrate away from earth to silver | Dmitry Ilvokhin | |
| 2025-08-17 | Add histogram tool repository to cgit config | Dmitry Ilvokhin | |
| 2025-08-10 | Add vitaly wireguard peer | Dmitry Ilvokhin | |