Yubikey suddenly stopped working on Ubuntu

Mike — Wed, 24 Apr 2024 10:17:32 +0000

If you are on ubuntu and/or your web browser is installed via snap and you use yubikey or any other physical 2fa device, there is a chance that the key suddenly stops working. It might not be broken as there seems to be a bug in snapd v2.62.

I went to report it but someone has already done that (https://bugs.launchpad.net/snapd/+bug/2062148)

The solution is to downgrade your snapd (at least at the moment).

Check what versions you currently have installed:

$ snap --version

If you are not currently using snapd 2.62, then you might want to stop and investigate the issue further (or downgrade nevertheless to eliminate snapd as culprit)

List available ones

$ snap list --all snapd
Name   Version  Rev    Tracking       Publisher   Notes
snapd  2.62     21465  latest/stable  canonical✓  snapd,disabled
snapd  2.61.2   21184  latest/stable  canonical✓  snapd

Note the revision numbers, in this case we want to use 2.61.2 with revision number 21184. Yours might differ.

Downgrade

$ sudo snap refresh snapd --revision=21184

You might have to (however in my case it was not necessary) relaunch the affected web browser for this change to take effect.

Hope this helps!

php root namespace functions list

Mike — Wed, 23 Aug 2023 10:40:22 +0000

Below is a list of functions in php which benefit from being prefixed with a root namespace, for example \in_array()

array_slice
assert
boolval
call_user_func
call_user_func_array
chr
count
defined
doubleval
floatval
func_get_args
func_num_args
get_called_class
get_class
gettype
in_array
intval
is_array
is_bool
is_double
is_float
is_int
is_integer
is_long
is_null
is_object
is_real
is_resource
is_string
ord
strlen
strval

Source:
https://github.com/php/php-src/blob/f2db305fa4e9bd7d04d567822687ec714aedcdb5/Zend/zend_compile.c#L3872

Self-hosted Taiga.io on Scaleway

Mike — Sun, 28 Nov 2021 20:57:11 +0000

There may come a time in one’s life where long term project planning is needed. I’m a big fan of Taiga for project management and I’ve been using both free and paid plans on their saas platform. Check it out before you decide to follow in my footsteps as their free offering is positively good.

The Task

Deploy dockerised taiga.io
Host it on the cheap (single instance, no external db), but ensure full, encrypted off-site backup.

Infrastructure

Taiga is open source, what is more unlike a lot of open source saas the team behind Taiga offers a dockerised version, which you can config and run on the server. Pick whatever provider you like, I chose Scaleway and used one of their guides for backups. Scaleway offers an s3 compatible api for object storage, so you can use s3cmd if you like it. They also have a s3 glacier equivalent, which is nice. In any case, first 75GB of storage is free, and you are unlikely to hit that unless you store a lot of media with your tasks.

Setup

At this point in time we only care about getting a running setup, upgrades may come in the future. There is a new version of Taiga coming in 2022, so depending on the upgrade path, I will probably write a new post :)

Assuming you already have access to your instance, follow the
Install Taiga in Production guide. I've had a bit of a problem with email setup (gmail most likely will work for you, but before I figured out what the issue was I have already setup a free account on SendGrid), so here are my env vars:

EMAIL_BACKEND: "django.core.mail.backends.smtp.EmailBackend"
DEFAULT_FROM_EMAIL: "no-reply@mycompany.com"
EMAIL_USE_TLS: "True"
#EMAIL_USE_SSL: "False"
EMAIL_HOST: "smtp.sendgrid.net"
EMAIL_PORT: 587
EMAIL_HOST_USER: "apikey"
EMAIL_HOST_PASSWORD: "YOUR_KEY_HERE"

Note the commented out EMAIL_USE_SSL.

Configuring Nginx

Install certbot on your server and obtain the certificate for your domain.
Update nginx config file in 'taiga-gateway' dir. I might publish my setup, but it's unlikely given how much I would need to change or strip out to remove secrets from the base Taiga one. Just make sure you set up TLS properly and add your domain.

Backups

I'm hoping that by now you have Taiga up and running, so let's move onto setting up backups. These are handled by duplicity.

The steps are as follows:

Install duplicity
Create GPG keys
Manual test
Add shell scripts to cron to automate the process

I have followed this guide from Scaleway, however, if like me you install the newer version of duplicity, then you will need to adjust the shell scripts as params have changed. I've installed 0.8.21 and if you look into my repo you will be able to find all the updated scripts.

DB backup

This is a simple script that outputs a .pgdata file which contains snapshot of our taiga DB.

#!/bin/bash

if [ $# -lt 4 ]; then
  echo -e "Usage $0 <container_name> <db_user_name> <db_name> <backup_file_path>"
  echo -e "Exemple:"
  echo -e "$ $0 taiga_taiga-db_1 taiga taiga /backups/db/db.pgdata ## based on defaults from Taiga docker repo
  ";
  exit;
fi

CONTAINER_NAME=$1
DB_USER=$2
DB_NAME=$3
BACKUP_FILE_PATH=$4

docker exec -i "$CONTAINER_NAME" /bin/bash -lc "pg_dump --username \"$DB_USER\"  --format custom \"$DB_NAME\"" > "$BACKUP_FILE_PATH"

Media backup

Another simple script that copies contents of taiga media container. Note that I take a simple copy, without stopping of containers nor any data verification, which does not guarantee data integrity. In my case, with the backups scheduled at night, there is very low risk that there could be an issue. Your mileage may vary.

#!/bin/bash

# This script is quite pointless at the moment.
if [ $# -lt 2 ]; then
  echo -e "Usage $0 <source_dir_path> <backup_dir_path>"
  echo -e "Exemple:"
  echo -e "$ $0 /var/lib/docker/volumes/taiga_taiga-media-data/_data /backups/media ## based on defaults from Taiga docker repo
  ";
  exit;
fi

SOURCE_DIR_PATH=$1
BACKUP_FILE_PATH=$2

cp -R "$SOURCE_DIR_PATH" "$BACKUP_FILE_PATH"

Cron

Set up cron to your liking, mine is similar to the one below. Note that I'm restarting gateway daily, to ensure certificate swap when certbot updates the ssl certificate. (I'm aware there are hooks I could use, but at this point this is good enough for me.)

0 0 * * * /bin/db-backup.sh <container_name> <db_user_name> <db_name> <backup_file_path> >> /var/log/taiga-cron.log 2>&1
0 0 * * * /bin/media-backup.sh <source_dir_path> <backup_dir_path> >> /var/log/taiga-cron.log 2>&1
0 3 * * * /bin/upload-backup.sh <config_dir_path> >> /var/log/taiga-cron.log 2>&1
0 4 * * * cd /var/www/taiga && /usr/local/bin/docker-compose restart taiga-gateway >> /var/log/taiga-cron.log 2>&1

If you have reached the end then you should now have a fully working self-hosted instance of Taiga with an encrypted backup to whatever off-site storage you chose to use.

In the next part (if time allows), I will write about pulling the backup onto your local machine and importing it to a blank instance of Taiga. With that said, the relevant scripts to fetch the data from storage and to import the DB are in the repo on github.

DEV Community: Mike