About:

Morten Linderud is an Open-Source developer in Oslo, interested in software and security, with hobbies like travel and photography.

Website:

Specializations:

Interests:

Software development System hardening Supply chain security Distribution security

Outgoing Links:

Eric Chiang
Subscribe to RSS:
The author discusses their experience migrating domain registration from Gandi to Porkbun due to high prices and dissatisfaction with Cloudflare's DNS services. They outline their journey to self-host authoritative DNS servers, em...
The post details the author's efforts to modernize and secure their Arch Linux boot process using systemd-cryptenroll and hardware keys for encrypted partitions.
The author shares their decade-long experience in streamlining personal infrastructure through self-hosting various services, overcoming ISP challenges, and utilizing tools like Incus and Terraform.
The author purchased an OpenWrt One router to replace an old Asus router and decided to write their own terraform provider as there were none available. They wrote a thin wrapper around the JSON-RPC API and implemented resources f...

0My FOSS work update

2022-12-31

...
The text discusses the implementation of an SSH certificate authority using TPMs for device and identity attestation. It explains the process of issuing SSH certificates by providing an identity claim and performing device attesta...
The author clarifies that NixOS is not reproducible according to the Reproducible Builds definition, despite common misconceptions. They explain the definition of reproducible builds and the confusion surrounding the term. The aut...
The text explains how to stream video or music to a TV from multiple devices using Chromecast. It provides a detailed guide on how to use VLC and bash scripts to stream towards the Chromecast. It also explains how to find availabl...
The text discusses the process of storing SSH keys inside the TPM using the ssh-tpm-agent. It explains the benefits of using TPM keys to prevent SSH keys from being stolen or brute-forced and how to generate sealed public/private ...
The author has been learning about the Trusted Platform Module (TPM) and has written a TPM plugin for age, a file encryption tool. The plugin uses the google/go-tpm library and allows the TPM to store key material. It also support...
The text discusses the use of the Trusted Platform Module (TPM) for key creation and secure secret storage. It also explores the development of a plugin, age-plugin-tpm, capable of utilizing the TPM to create and store RSA 2048 bi...
The text discusses the use of coredumpctl, delve, and debug packages for Go. It explains how to use coredumpctl to simplify dealing with core dumps and how to debug with delve. The author also mentions the public debuginfod server...
The text discusses the concept of Transparency Logs and their importance in software supply-chain security, particularly in the context of kernel.org. It explains the process of monitoring the kernel.org Transparency Log and the i...
The text discusses the process of streaming the gamemode on the Steam Deck to OBS. It provides a detailed guide on setting up an RTMP server locally and configuring the Steam Deck to stream towards it. The author explores the use ...
The text is about mkinitcpio v31 and UEFI stubs. It explains how to create UEFI executables utilizing the systemd stub, the boot process, securing the boot chain, UEFI Stubs, and mkinitcpio.
The author discusses their recent activities in April 2021, including a weekend project, their master thesis, and various patches and updates they have submitted. They also mention a report on the University of Minnesota fiasco an...
The text is a status update on FOSS activities in March 2021. It includes updates on the removal of python2 packages, support for debug in Arch Linux, new RFC process, and the re-election of Richard Stallman to the board of the FS...
The author talks about their activities in February 2021, including their participation in FOSDEM, the release of sbctl 0.1, the Go 1.16 release, and the release of new packages. They also discuss the challenges and improvements i...
The text discusses the activities in the FOSS community in January 2021, including packaging updates, security vulnerabilities, and progress on different projects. It also mentions the author's personal activities and upcoming eve...
The post discusses the author's activities in December 2020, including the acceptance of Remi Gacogne as Trusted User, the implementation of the debuginfod system, and the planning of a website to document secure boot tools. The a...
The text discusses the recent addition of Kubernetes to the Arch Linux community repository and the testing that was done to set up a one-node 'cluster' and test basic functionality. It details the process of setting up Kubernetes...
The post discusses various activities in the FOSS community in November 2020, including sponsored Trusted User application, discussion on debug packages, Python rebuilds, packaging of Kubernetes into [community], and other updates...
The text discusses a vulnerability in the PAM authentication system in Arch Linux, which allowed invalid users to authenticate due to a change in the shadow file. The vulnerability was exploited to send spam emails from servers. T...
The text is a monthly report of FOSS activities in October 2020. It includes updates on various software packages, security advisories, and participation in various events and meetings related to open-source software and security....