setup_notes

export DEBUGINFOD_URLS="http://foo.mynet.local/debuginfo https://debuginfod.elfutils.org/"
export DEBUGINFOD_IMA_CERT_PATH="/etc/certs"

apt install git wget uuid-runtime libncurses-dev dialog gnupg2 ntp rhash dosfstools btrfs-progs cryptsetup parted

cd /tmp
git clone https://github.com/oddlama/gentoo-install
cd gentoo-install
pkill ntp
./configure
./install

echo "root:1000000:1000000000" | tee -a /etc/subuid /etc/subgid

rc-service incus start
rc-update add incus default

incus launch images:debian/trixie/amd64 trixie-container-o1
incus launch images:debian/trixie/amd64 trixie-container-o2
incus launch images:debian/forky/amd64 forky-container-o1

/etc/portage/package.use/qemu:

app-emulation/qemu spice usbredir virtfs

systemd containers on OpenRC host:

/etc/rc.conf
rc_cgroup_mode="hybrid"

rc_cgroup_controllers="yes"
rc_controller_cgroups="yes"

/etc/init.d/incus
...
install -d /sys/fs/cgroup/systemd --group incus-admin --owner root
mount -t cgroup -o none,name=systemd systemd /sys/fs/cgroup/systemd
...

incus config set docker-www-1 security.nesting=true \
security.syscalls.intercept.mknod=true \
security.syscalls.intercept.setxattr=true

/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/iamobservable/open-webui-starter/main/install.sh)"


bash

echo "export PATH=\"\$HOME/bin:\$PATH\"" >> $HOME/.bashrc
source $HOME/.bashrc
zsh

echo "export PATH=\"\$HOME/bin:\$PATH\"" >> $HOME/.zshrc
source $HOME/.zshrc



sudo apt update
sudo apt install ca-certificates curl
sudo install -m 0755 -d /etc/apt/keyrings
sudo curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc
sudo chmod a+r /etc/apt/keyrings/docker.asc

# Add the repository to Apt sources:
sudo tee /etc/apt/sources.list.d/docker.sources <<EOF
Types: deb
URIs: https://download.docker.com/linux/debian
Suites: $(. /etc/os-release && echo "$VERSION_CODENAME")
Components: stable
Signed-By: /etc/apt/keyrings/docker.asc
EOF

sudo apt update

sudo apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

incus profile create proxy-80
incus profile create proxy-443
incus profile device add proxy-80 hostport80 proxy connect="tcp:127.0.0.1:80" listen="tcp:0.0.0.0:80"
incus profile device add proxy-443 hostport443 proxy connect="tcp:127.0.0.1:443" listen="tcp:0.0.0.0:443"
incus profile add container1 proxy-80
incus profile add container1 proxy-443


https://github.com/alexandregz/twofactor_gauthenticator