Clojurians Log v2

Morning

Good Morning!

¡månmån!

I spent all day yesterday fixing my work laptop... again. After some upgrade, it could no longer do the tpm + dm-crypt magic needed to decrypt my disks

I'm on Windows Insider builds and 20226 caused "access denied" to ntuser.dat which basically means you can't login to your own account, so I feel for you @djm_uk

(I rolled back to 20221 and have paused updates for 7 days for now)

After spending all day fighting it and failing, I restored from a backup, which worked... then re-upgraded to verify that that broke it again

Masochist 🙂

Unfortunately I was on holiday last week, so it was a relatively large upgrade on Monday

Only two packages seem likely to be relevant, so I spend quite a while trying to find the old debs yesterday (since I didn't have them cached), but they didn't seem to be available anywhere online, and no cow-orkers had them either

I've been on fast ring / dev insider builds for years and it's only bricked my laptop three or four times so I don't think that's too bad, but it's still annoying since it's a machine I used day-in, day-out.

I was also thrown because one cow-orker did have the newer versions installed, but he has a different laptop, and possibly isn't using the TPM stuff

Glad to hear that Linux is afflicted by the same problems as Windows 😆

On the plus side, it did get me out of doing regression testing yesterday

This is some disk encryption that isn't supported by the version of linux mint that we're using, but that was manually backported by someone who has since left the company... and we can't upgrade to a new version that does not support it, because the file format changed

So it's far from a vanilla setup

It's stuff like that which has always terrified me about disk encryption in particular and "privacy" and encryption in general.

A liveusb thing, the right incantation and the right password solve the issue... but due to various IT people leaving we don't have a lot of linux expertise in the company anymore (I know quite a bit, but switched to FreeBSD for personal stuff over a decade ago)

So I'm not sure what will happen if/when a developer who isn't me runs into an issue

Today, apart from work ( 😞 ) I'm doing quite a bit of housekeeping and modularisation of my nvim config :)

I use FDE on all my desktop/laptop's (I run Arch with LUKs)

@dharrigan do you type a password in on boot?

I do

We have magic with dm-crypt/luks, clavis and TPM, so it just decrypts automatically on boot (except when it doesn't)

But holding back shim and shim-signed appears to have fixed the issue this time

Morning

morning

moin moin