Fork me on GitHub
#clojure-uk
<
2020-10-07
>
dharrigan05:10:16

Good Morning!

djm06:10:42

I spent all day yesterday fixing my work laptop... again. After some upgrade, it could no longer do the tpm + dm-crypt magic needed to decrypt my disks

seancorfield06:10:31

I'm on Windows Insider builds and 20226 caused "access denied" to ntuser.dat which basically means you can't login to your own account, so I feel for you @djm_uk

seancorfield06:10:54

(I rolled back to 20221 and have paused updates for 7 days for now)

djm06:10:43

After spending all day fighting it and failing, I restored from a backup, which worked... then re-upgraded to verify that that broke it again

seancorfield06:10:18

Masochist 🙂

djm06:10:19

Unfortunately I was on holiday last week, so it was a relatively large upgrade on Monday

djm06:10:14

Only two packages seem likely to be relevant, so I spend quite a while trying to find the old debs yesterday (since I didn't have them cached), but they didn't seem to be available anywhere online, and no cow-orkers had them either

seancorfield06:10:21

I've been on fast ring / dev insider builds for years and it's only bricked my laptop three or four times so I don't think that's too bad, but it's still annoying since it's a machine I used day-in, day-out.

djm06:10:42

I was also thrown because one cow-orker did have the newer versions installed, but he has a different laptop, and possibly isn't using the TPM stuff

seancorfield06:10:51

Glad to hear that Linux is afflicted by the same problems as Windows 😆

djm06:10:17

On the plus side, it did get me out of doing regression testing yesterday

djm06:10:30

This is some disk encryption that isn't supported by the version of linux mint that we're using, but that was manually backported by someone who has since left the company... and we can't upgrade to a new version that does not support it, because the file format changed

djm06:10:51

So it's far from a vanilla setup

seancorfield06:10:50

It's stuff like that which has always terrified me about disk encryption in particular and "privacy" and encryption in general.

djm06:10:44

A liveusb thing, the right incantation and the right password solve the issue... but due to various IT people leaving we don't have a lot of linux expertise in the company anymore (I know quite a bit, but switched to FreeBSD for personal stuff over a decade ago)

djm06:10:06

So I'm not sure what will happen if/when a developer who isn't me runs into an issue

dharrigan06:10:56

Today, apart from work ( 😞 ) I'm doing quite a bit of housekeeping and modularisation of my nvim config :)

dominicm07:10:35

How are you breaking it up? I went on a long journey with this 😀

dharrigan07:10:01

Taking my existing vim configuration and slowly teasing apart, into functions, filetypes (autogroups), colours, mappings, plugins and plugin configuration

dharrigan07:10:13

I suspect a lot of trial and error

dominicm07:10:46

Ah, that sort of thing :) I think ftplugins are a pretty great move from autogroups.

dharrigan06:10:00

I use FDE on all my desktop/laptop's (I run Arch with LUKs)

djm07:10:17

@dharrigan do you type a password in on boot?

djm07:10:35

We have magic with dm-crypt/luks, clavis and TPM, so it just decrypts automatically on boot (except when it doesn't)

djm07:10:59

But holding back shim and shim-signed appears to have fixed the issue this time