yannstatic/static/2024/08/30/EndeavourOS-Dell_Latitude_e6230-Chiffre.html

2886 lines
237 KiB
HTML
Raw Normal View History

2024-10-31 20:18:37 +01:00
<!DOCTYPE html><html lang="fr">
<head><meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no"><title>Dell Latitude e6230 - EndeavourOS XFCE chiffré - YannStatic</title>
<meta name="description" content="EndeavourOS est une distribution GNU/Linux basée sur Arch Linux">
<link rel="canonical" href="https://static.rnmkcy.eu/2024/08/30/EndeavourOS-Dell_Latitude_e6230-Chiffre.html"><link rel="alternate" type="application/rss+xml" title="YannStatic" href="/feed.xml">
<!-- - include head/favicon.html - -->
<link rel="shortcut icon" type="image/png" href="/assets/favicon/favicon.png"><link rel="stylesheet" href="/assets/css/main.css"><link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.0.13/css/all.css" ><!-- start custom head snippets --><link rel="stylesheet" href="/assets/css/expand.css">
<!-- end custom head snippets --><script>(function() {
window.isArray = function(val) {
return Object.prototype.toString.call(val) === '[object Array]';
};
window.isString = function(val) {
return typeof val === 'string';
};
window.hasEvent = function(event) {
return 'on'.concat(event) in window.document;
};
window.isOverallScroller = function(node) {
return node === document.documentElement || node === document.body || node === window;
};
window.isFormElement = function(node) {
var tagName = node.tagName;
return tagName === 'INPUT' || tagName === 'SELECT' || tagName === 'TEXTAREA';
};
window.pageLoad = (function () {
var loaded = false, cbs = [];
window.addEventListener('load', function () {
var i;
loaded = true;
if (cbs.length > 0) {
for (i = 0; i < cbs.length; i++) {
cbs[i]();
}
}
});
return {
then: function(cb) {
cb && (loaded ? cb() : (cbs.push(cb)));
}
};
})();
})();
(function() {
window.throttle = function(func, wait) {
var args, result, thisArg, timeoutId, lastCalled = 0;
function trailingCall() {
lastCalled = new Date;
timeoutId = null;
result = func.apply(thisArg, args);
}
return function() {
var now = new Date,
remaining = wait - (now - lastCalled);
args = arguments;
thisArg = this;
if (remaining <= 0) {
clearTimeout(timeoutId);
timeoutId = null;
lastCalled = now;
result = func.apply(thisArg, args);
} else if (!timeoutId) {
timeoutId = setTimeout(trailingCall, remaining);
}
return result;
};
};
})();
(function() {
var Set = (function() {
var add = function(item) {
var i, data = this._data;
for (i = 0; i < data.length; i++) {
if (data[i] === item) {
return;
}
}
this.size ++;
data.push(item);
return data;
};
var Set = function(data) {
this.size = 0;
this._data = [];
var i;
if (data.length > 0) {
for (i = 0; i < data.length; i++) {
add.call(this, data[i]);
}
}
};
Set.prototype.add = add;
Set.prototype.get = function(index) { return this._data[index]; };
Set.prototype.has = function(item) {
var i, data = this._data;
for (i = 0; i < data.length; i++) {
if (this.get(i) === item) {
return true;
}
}
return false;
};
Set.prototype.is = function(map) {
if (map._data.length !== this._data.length) { return false; }
var i, j, flag, tData = this._data, mData = map._data;
for (i = 0; i < tData.length; i++) {
for (flag = false, j = 0; j < mData.length; j++) {
if (tData[i] === mData[j]) {
flag = true;
break;
}
}
if (!flag) { return false; }
}
return true;
};
Set.prototype.values = function() {
return this._data;
};
return Set;
})();
window.Lazyload = (function(doc) {
var queue = {js: [], css: []}, sources = {js: {}, css: {}}, context = this;
var createNode = function(name, attrs) {
var node = doc.createElement(name), attr;
for (attr in attrs) {
if (attrs.hasOwnProperty(attr)) {
node.setAttribute(attr, attrs[attr]);
}
}
return node;
};
var end = function(type, url) {
var s, q, qi, cbs, i, j, cur, val, flag;
if (type === 'js' || type ==='css') {
s = sources[type], q = queue[type];
s[url] = true;
for (i = 0; i < q.length; i++) {
cur = q[i];
if (cur.urls.has(url)) {
qi = cur, val = qi.urls.values();
qi && (cbs = qi.callbacks);
for (flag = true, j = 0; j < val.length; j++) {
cur = val[j];
if (!s[cur]) {
flag = false;
}
}
if (flag && cbs && cbs.length > 0) {
for (j = 0; j < cbs.length; j++) {
cbs[j].call(context);
}
qi.load = true;
}
}
}
}
};
var load = function(type, urls, callback) {
var s, q, qi, node, i, cur,
_urls = typeof urls === 'string' ? new Set([urls]) : new Set(urls), val, url;
if (type === 'js' || type ==='css') {
s = sources[type], q = queue[type];
for (i = 0; i < q.length; i++) {
cur = q[i];
if (_urls.is(cur.urls)) {
qi = cur;
break;
}
}
val = _urls.values();
if (qi) {
callback && (qi.load || qi.callbacks.push(callback));
callback && (qi.load && callback());
} else {
q.push({
urls: _urls,
callbacks: callback ? [callback] : [],
load: false
});
for (i = 0; i < val.length; i++) {
node = null, url = val[i];
if (s[url] === undefined) {
(type === 'js' ) && (node = createNode('script', { src: url }));
(type === 'css') && (node = createNode('link', { rel: 'stylesheet', href: url }));
if (node) {
node.onload = (function(type, url) {
return function() {
end(type, url);
};
})(type, url);
(doc.head || doc.body).appendChild(node);
s[url] = false;
}
}
}
}
}
};
return {
js: function(url, callback) {
load('js', url, callback);
},
css: function(url, callback) {
load('css', url, callback);
}
};
})(this.document);
})();
</script><script>
(function() {
var TEXT_VARIABLES = {
version: '2.2.6',
sources: {
font_awesome: 'https://use.fontawesome.com/releases/v5.0.13/css/all.css',
jquery: '/assets/js/jquery.min.js',
leancloud_js_sdk: '//cdn.jsdelivr.net/npm/leancloud-storage@3.13.2/dist/av-min.js',
chart: 'https://cdn.bootcss.com/Chart.js/2.7.2/Chart.bundle.min.js',
gitalk: {
js: 'https://cdn.bootcss.com/gitalk/1.2.2/gitalk.min.js',
css: 'https://cdn.bootcss.com/gitalk/1.2.2/gitalk.min.css'
},
valine: 'https://unpkg.com/valine/dist/Valine.min.js'
},
site: {
toc: {
selectors: 'h1,h2,h3'
}
},
paths: {
search_js: '/assets/search.js'
}
};
window.TEXT_VARIABLES = TEXT_VARIABLES;
})();
</script>
</head>
<body>
<div class="root" data-is-touch="false">
<div class="layout--page js-page-root"><!----><div class="page__main js-page-main page__viewport hide-footer has-aside has-aside cell cell--auto">
<div class="page__main-inner"><div class="page__header d-print-none"><header class="header"><div class="main">
<div class="header__title">
<div class="header__brand"><svg id="svg" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="400" height="478.9473684210526" viewBox="0, 0, 400,478.9473684210526"><g id="svgg"><path id="path0" d="M308.400 56.805 C 306.970 56.966,303.280 57.385,300.200 57.738 C 290.906 58.803,278.299 59.676,269.200 59.887 L 260.600 60.085 259.400 61.171 C 258.010 62.428,256.198 63.600,255.645 63.600 C 255.070 63.600,252.887 65.897,252.598 66.806 C 252.460 67.243,252.206 67.600,252.034 67.600 C 251.397 67.600,247.206 71.509,247.202 72.107 C 247.201 72.275,246.390 73.190,245.400 74.138 C 243.961 75.517,243.598 76.137,243.592 77.231 C 243.579 79.293,241.785 83.966,240.470 85.364 C 239.176 86.740,238.522 88.365,237.991 91.521 C 237.631 93.665,236.114 97.200,235.554 97.200 C 234.938 97.200,232.737 102.354,232.450 104.472 C 232.158 106.625,230.879 109.226,229.535 110.400 C 228.933 110.926,228.171 113.162,226.434 119.500 C 226.178 120.435,225.795 121.200,225.584 121.200 C 225.373 121.200,225.200 121.476,225.200 121.813 C 225.200 122.149,224.885 122.541,224.500 122.683 C 223.606 123.013,223.214 123.593,223.204 124.600 C 223.183 126.555,220.763 132.911,219.410 134.562 C 218.443 135.742,217.876 136.956,217.599 138.440 C 217.041 141.424,215.177 146.434,214.532 146.681 C 214.240 146.794,214.000 147.055,214.000 147.261 C 214.000 147.467,213.550 148.086,213.000 148.636 C 212.450 149.186,212.000 149.893,212.000 150.208 C 212.000 151.386,208.441 154.450,207.597 153.998 C 206.319 153.315,204.913 150.379,204.633 147.811 C 204.365 145.357,202.848 142.147,201.759 141.729 C 200.967 141.425,199.200 137.451,199.200 135.974 C 199.200 134.629,198.435 133.224,196.660 131.311 C 195.363 129.913,194.572 128.123,193.870 125.000 C 193.623 123.900,193.236 122.793,193.010 122.540 C 190.863 120.133,190.147 118.880,188.978 115.481 C 188.100 112.928,187.151 111.003,186.254 109.955 C 185.358 108.908,184.518 107.204,183.847 105.073 C 183.280 103.273,182.497 101.329,182.108 100.753 C 181.719 100.177,180.904 98.997,180.298 98.131 C 179.693 97.265,178.939 95.576,178.624 94.378 C 178.041 92.159,177.125 90.326,175.023 87.168 C 174.375 86.196,173.619 84.539,173.342 83.486 C 172.800 81.429,171.529 79.567,170.131 78.785 C 169.654 78.517,168.697 77.511,168.006 76.549 C 167.316 75.587,166.594 74.800,166.402 74.800 C 166.210 74.800,164.869 73.633,163.421 72.206 C 160.103 68.936,161.107 69.109,146.550 69.301 C 133.437 69.474,128.581 70.162,126.618 72.124 C 126.248 72.495,125.462 72.904,124.872 73.033 C 124.282 73.163,123.088 73.536,122.219 73.863 C 121.349 74.191,119.028 74.638,117.061 74.858 C 113.514 75.254,109.970 76.350,108.782 77.419 C 107.652 78.436,100.146 80.400,97.388 80.400 C 95.775 80.400,93.167 81.360,91.200 82.679 C 90.430 83.195,89.113 83.804,88.274 84.031 C 85.875 84.681,78.799 90.910,74.400 96.243 L 73.400 97.456 73.455 106.028 C 73.526 117.055,74.527 121.238,77.820 124.263 C 78.919 125.273,80.400 127.902,80.400 128.842 C 80.400 129.202,81.075 130.256,81.900 131.186 C 83.563 133.059,85.497 136.346,86.039 138.216 C 86.233 138.886,87.203 140.207,88.196 141.153 C 89.188 142.098,90.000 143.104,90.000 143.388 C 90.000 144.337,92.129 148.594,92.869 149.123 C 93.271 149.410,93.600 149.831,93.600 150.059 C 93.600 150.286,93.932 150.771,94.337 151.136 C 94.743 151.501,95.598 153.004,96.237 154.475 C 96.877 155.947,97.760 157.351,98.200 157.596 C 98.640 157.841,99.900 159.943,101.000 162.267 C 102.207 164.817,103.327 166.644,103.825 166.876 C 104.278 167.087,105.065 168.101,105.573 169.130 C 107.658 173.348,108.097 174.093,110.006 176.647 C 111.103 178.114,112.000 179.725,112.000 180.227 C 112.000 181.048,113.425 183.163,114.678 184.200 C 115.295 184.711,117.396 188.733,117.720 190.022 C 117.855 190.562,118.603 191.633,119.381 192.402 C 120.160 193.171,121.496 195.258,122.351 197.039 C 123.206 198.820,124.167 200.378,124.487 200.501 C 124.807 200.624,125.953 202.496,127.034 204.662 C 128.114 206.828,129.676 209.299,130.505 210.153 C 131.333 211.007,132.124 212.177,132.262 212.753 C 132.618 214.239,134.291 217.048,136.288 219.5
" href="/">YannStatic</a></div><!--<button class="button button--secondary button--circle search-button js-search-toggle"><i class="fas fa-search"></i></button>--><!-- <li><button class="button button--secondary button--circle search-button js-search-toggle"><i class="fas fa-search"></i></button></li> -->
<!-- Champ de recherche -->
<div id="searchbox" class="search search--dark" style="visibility: visible">
<div class="main">
<div class="search__header"></div>
<div class="search-bar">
<div class="search-box js-search-box">
<div class="search-box__icon-search"><i class="fas fa-search"></i></div>
<input id="search-input" type="text" />
<!-- <div class="search-box__icon-clear js-icon-clear">
<a><i class="fas fa-times"></i></a>
</div> -->
</div>
</div>
</div>
</div>
<!-- Script pointing to search-script.js -->
<script>/*!
* Simple-Jekyll-Search
* Copyright 2015-2020, Christian Fei
* Licensed under the MIT License.
*/
(function(){
'use strict'
var _$Templater_7 = {
compile: compile,
setOptions: setOptions
}
const options = {}
options.pattern = /\{(.*?)\}/g
options.template = ''
options.middleware = function () {}
function setOptions (_options) {
options.pattern = _options.pattern || options.pattern
options.template = _options.template || options.template
if (typeof _options.middleware === 'function') {
options.middleware = _options.middleware
}
}
function compile (data) {
return options.template.replace(options.pattern, function (match, prop) {
const value = options.middleware(prop, data[prop], options.template)
if (typeof value !== 'undefined') {
return value
}
return data[prop] || match
})
}
'use strict';
function fuzzysearch (needle, haystack) {
var tlen = haystack.length;
var qlen = needle.length;
if (qlen > tlen) {
return false;
}
if (qlen === tlen) {
return needle === haystack;
}
outer: for (var i = 0, j = 0; i < qlen; i++) {
var nch = needle.charCodeAt(i);
while (j < tlen) {
if (haystack.charCodeAt(j++) === nch) {
continue outer;
}
}
return false;
}
return true;
}
var _$fuzzysearch_1 = fuzzysearch;
'use strict'
/* removed: const _$fuzzysearch_1 = require('fuzzysearch') */;
var _$FuzzySearchStrategy_5 = new FuzzySearchStrategy()
function FuzzySearchStrategy () {
this.matches = function (string, crit) {
return _$fuzzysearch_1(crit.toLowerCase(), string.toLowerCase())
}
}
'use strict'
var _$LiteralSearchStrategy_6 = new LiteralSearchStrategy()
function LiteralSearchStrategy () {
this.matches = function (str, crit) {
if (!str) return false
str = str.trim().toLowerCase()
crit = crit.trim().toLowerCase()
return crit.split(' ').filter(function (word) {
return str.indexOf(word) >= 0
}).length === crit.split(' ').length
}
}
'use strict'
var _$Repository_4 = {
put: put,
clear: clear,
search: search,
setOptions: __setOptions_4
}
/* removed: const _$FuzzySearchStrategy_5 = require('./SearchStrategies/FuzzySearchStrategy') */;
/* removed: const _$LiteralSearchStrategy_6 = require('./SearchStrategies/LiteralSearchStrategy') */;
function NoSort () {
return 0
}
const data = []
let opt = {}
opt.fuzzy = false
opt.limit = 10
opt.searchStrategy = opt.fuzzy ? _$FuzzySearchStrategy_5 : _$LiteralSearchStrategy_6
opt.sort = NoSort
opt.exclude = []
function put (data) {
if (isObject(data)) {
return addObject(data)
}
if (isArray(data)) {
return addArray(data)
}
return undefined
}
function clear () {
data.length = 0
return data
}
function isObject (obj) {
return Boolean(obj) && Object.prototype.toString.call(obj) === '[object Object]'
}
function isArray (obj) {
return Boolean(obj) && Object.prototype.toString.call(obj) === '[object Array]'
}
function addObject (_data) {
data.push(_data)
return data
}
function addArray (_data) {
const added = []
clear()
for (let i = 0, len = _data.length; i < len; i++) {
if (isObject(_data[i])) {
added.push(addObject(_data[i]))
}
}
return added
}
function search (crit) {
if (!crit) {
return []
}
return findMatches(data, crit, opt.searchStrategy, opt).sort(opt.sort)
}
function __setOptions_4 (_opt) {
opt = _opt || {}
opt.fuzzy = _opt.fuzzy || false
opt.limit = _opt.limit || 10
opt.searchStrategy = _opt.fuzzy ? _$FuzzySearchStrategy_5 : _$LiteralSearchStrategy_6
opt.sort = _opt.sort || NoSort
opt.exclude = _opt.exclude || []
}
function findMatches (data, crit, strategy, opt) {
const matches = []
for (let i = 0; i < data.length && matches.length < opt.limit; i++) {
const match = findMatchesInObject(data[i], crit, strategy, opt)
if (match) {
matches.push(match)
}
}
return matches
}
function findMatchesInObject (obj, crit, strategy, opt) {
for (const key in obj) {
if (!isExcluded(obj[key], opt.exclude) && strategy.matches(obj[key], crit)) {
return obj
}
}
}
function isExcluded (term, excludedTerms) {
for (let i = 0, len = excludedTerms.length; i < len; i++) {
const excludedTerm = excludedTerms[i]
if (new RegExp(excludedTerm).test(term)) {
return true
}
}
return false
}
/* globals ActiveXObject:false */
'use strict'
var _$JSONLoader_2 = {
load: load
}
function load (location, callback) {
const xhr = getXHR()
xhr.open('GET', location, true)
xhr.onreadystatechange = createStateChangeListener(xhr, callback)
xhr.send()
}
function createStateChangeListener (xhr, callback) {
return function () {
if (xhr.readyState === 4 && xhr.status === 200) {
try {
callback(null, JSON.parse(xhr.responseText))
} catch (err) {
callback(err, null)
}
}
}
}
function getXHR () {
return window.XMLHttpRequest ? new window.XMLHttpRequest() : new ActiveXObject('Microsoft.XMLHTTP')
}
'use strict'
var _$OptionsValidator_3 = function OptionsValidator (params) {
if (!validateParams(params)) {
throw new Error('-- OptionsValidator: required options missing')
}
if (!(this instanceof OptionsValidator)) {
return new OptionsValidator(params)
}
const requiredOptions = params.required
this.getRequiredOptions = function () {
return requiredOptions
}
this.validate = function (parameters) {
const errors = []
requiredOptions.forEach(function (requiredOptionName) {
if (typeof parameters[requiredOptionName] === 'undefined') {
errors.push(requiredOptionName)
}
})
return errors
}
function validateParams (params) {
if (!params) {
return false
}
return typeof params.required !== 'undefined' && params.required instanceof Array
}
}
'use strict'
var _$utils_9 = {
merge: merge,
isJSON: isJSON
}
function merge (defaultParams, mergeParams) {
const mergedOptions = {}
for (const option in defaultParams) {
mergedOptions[option] = defaultParams[option]
if (typeof mergeParams[option] !== 'undefined') {
mergedOptions[option] = mergeParams[option]
}
}
return mergedOptions
}
function isJSON (json) {
try {
if (json instanceof Object && JSON.parse(JSON.stringify(json))) {
return true
}
return false
} catch (err) {
return false
}
}
var _$src_8 = {};
(function (window) {
'use strict'
let options = {
searchInput: null,
resultsContainer: null,
json: [],
success: Function.prototype,
searchResultTemplate: '<li><a href="{url}" title="{desc}">{title}</a></li>',
templateMiddleware: Function.prototype,
sortMiddleware: function () {
return 0
},
noResultsText: 'No results found',
limit: 10,
fuzzy: false,
debounceTime: null,
exclude: []
}
let debounceTimerHandle
const debounce = function (func, delayMillis) {
if (delayMillis) {
clearTimeout(debounceTimerHandle)
debounceTimerHandle = setTimeout(func, delayMillis)
} else {
func.call()
}
}
const requiredOptions = ['searchInput', 'resultsContainer', 'json']
/* removed: const _$Templater_7 = require('./Templater') */;
/* removed: const _$Repository_4 = require('./Repository') */;
/* removed: const _$JSONLoader_2 = require('./JSONLoader') */;
const optionsValidator = _$OptionsValidator_3({
required: requiredOptions
})
/* removed: const _$utils_9 = require('./utils') */;
window.SimpleJekyllSearch = function (_options) {
const errors = optionsValidator.validate(_options)
if (errors.length > 0) {
throwError('You must specify the following required options: ' + requiredOptions)
}
options = _$utils_9.merge(options, _options)
_$Templater_7.setOptions({
template: options.searchResultTemplate,
middleware: options.templateMiddleware
})
_$Repository_4.setOptions({
fuzzy: options.fuzzy,
limit: options.limit,
sort: options.sortMiddleware,
exclude: options.exclude
})
if (_$utils_9.isJSON(options.json)) {
initWithJSON(options.json)
} else {
initWithURL(options.json)
}
const rv = {
search: search
}
typeof options.success === 'function' && options.success.call(rv)
return rv
}
function initWithJSON (json) {
_$Repository_4.put(json)
registerInput()
}
function initWithURL (url) {
_$JSONLoader_2.load(url, function (err, json) {
if (err) {
throwError('failed to get JSON (' + url + ')')
}
initWithJSON(json)
})
}
function emptyResultsContainer () {
options.resultsContainer.innerHTML = ''
}
function appendToResultsContainer (text) {
options.resultsContainer.innerHTML += text
}
function registerInput () {
options.searchInput.addEventListener('input', function (e) {
if (isWhitelistedKey(e.which)) {
emptyResultsContainer()
debounce(function () { search(e.target.value) }, options.debounceTime)
}
})
}
function search (query) {
if (isValidQuery(query)) {
emptyResultsContainer()
render(_$Repository_4.search(query), query)
}
}
function render (results, query) {
const len = results.length
if (len === 0) {
return appendToResultsContainer(options.noResultsText)
}
for (let i = 0; i < len; i++) {
results[i].query = query
appendToResultsContainer(_$Templater_7.compile(results[i]))
}
}
function isValidQuery (query) {
return query && query.length > 0
}
function isWhitelistedKey (key) {
return [13, 16, 20, 37, 38, 39, 40, 91].indexOf(key) === -1
}
function throwError (message) {
throw new Error('SimpleJekyllSearch --- ' + message)
}
})(window)
}());
</script>
<!-- Configuration -->
<script>
SimpleJekyllSearch({
searchInput: document.getElementById('search-input'),
resultsContainer: document.getElementById('results-container'),
json: '/search.json',
//searchResultTemplate: '<li><a href="https://static.rnmkcy.eu{url}">{date}&nbsp;{title}</a></li>'
searchResultTemplate: '<li><a href="{url}">{date}&nbsp;{title}</a></li>'
})
</script>
<!-- Fin déclaration champ de recherche --></div><nav class="navigation">
<ul><li class="navigation__item"><a href="/archive.html">Etiquettes</a></li><li class="navigation__item"><a href="/htmldoc.html">Documents</a></li><li class="navigation__item"><a href="/liens_ttrss.html">Liens</a></li><li class="navigation__item"><a href="/aide-jekyll-text-theme.html">Aide</a></li></ul>
</nav></div>
</header>
</div><div class="page__content"><div class ="main"><div class="grid grid--reverse">
<div class="col-main cell cell--auto"><!-- start custom main top snippet --><div id="results-container" class="search-result js-search-result"></div><!-- end custom main top snippet -->
<article itemscope itemtype="http://schema.org/Article"><div class="article__header"><header><h1 style="color:Tomato;">Dell Latitude e6230 - EndeavourOS XFCE chiffré</h1></header></div><meta itemprop="headline" content="Dell Latitude e6230 - EndeavourOS XFCE chiffré"><div class="article__info clearfix"><ul class="left-col menu"><li>
<a class="button button--secondary button--pill button--sm"
href="/archive.html?tag=archlinux">archlinux</a>
</li><li>
<a class="button button--secondary button--pill button--sm"
href="/archive.html?tag=chiffrement">chiffrement</a>
</li><li>
<a class="button button--secondary button--pill button--sm"
href="/archive.html?tag=lvm">lvm</a>
</li></ul><ul class="right-col menu"><li>
<i class="far fa-calendar-alt"></i>&nbsp;<span title="Création" style="color:#FF00FF">30&nbsp;août&nbsp;&nbsp;2024</span>
<span title="Modification" style="color:#00FF7F">10&nbsp;sept.&nbsp;2024</span></li></ul></div><meta itemprop="datePublished" content="2024-09-10T00:00:00+02:00">
<meta itemprop="keywords" content="archlinux,chiffrement,lvm"><div class="js-article-content">
<div class="layout--article"><!-- start custom article top snippet -->
<style>
#myBtn {
display: none;
position: fixed;
bottom: 10px;
right: 10px;
z-index: 99;
font-size: 12px;
font-weight: bold;
border: none;
outline: none;
background-color: white;
color: black;
cursor: pointer;
padding: 5px;
border-radius: 4px;
}
#myBtn:hover {
background-color: #555;
}
</style>
<button onclick="topFunction()" id="myBtn" title="Haut de page">&#8679;</button>
<script>
//Get the button
var mybutton = document.getElementById("myBtn");
// When the user scrolls down 20px from the top of the document, show the button
window.onscroll = function() {scrollFunction()};
function scrollFunction() {
if (document.body.scrollTop > 20 || document.documentElement.scrollTop > 20) {
mybutton.style.display = "block";
} else {
mybutton.style.display = "none";
}
}
// When the user clicks on the button, scroll to the top of the document
function topFunction() {
document.body.scrollTop = 0;
document.documentElement.scrollTop = 0;
}
</script>
<!-- end custom article top snippet -->
<div class="article__content" itemprop="articleBody"><details>
<summary><b>Afficher/cacher Sommaire</b></summary>
<!-- affichage sommaire -->
<div class="toc-aside js-toc-root"></div>
</details><p><em>EndeavourOS est une distribution GNU/Linux basée sur Arch Linux</em></p>
<p><img src="/images/EndeavourOS_Logo.png" alt="" width="90" /> <img src="/images/dell-latitude-e6230.png" alt="Dell Latitude E6230" width="150" /><br />
<a href="/2022/12/22/Dell_Latitude_E6230_Caracteristiques_generales_Documentation_et_Bios.html">Portable Dell Latitude E6230 - matériel , documentation et bios</a></p>
<h2 id="endeavouros-xfce-chiffrée">EndeavourOS XFCE chiffrée</h2>
<h3 id="endeavouros-usb-live">EndeavourOS USB Live</h3>
<p><em>Création dune clé USB EndeavourOS bootable</em></p>
<p>Dans un terminal linux<br />
Télécharger le dernier fichier iSO : <a href="https://endeavouros.com/latest-release/">https://endeavouros.com/latest-release/</a><br />
<strong>EndeavourOS_Endeavour-2024.06.25.iso</strong></p>
<p>Vérifier checksum</p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sha512sum</span> <span class="nt">-c</span> EndeavourOS_Endeavour-2024.06.25.iso.sha512sum
</code></pre></div></div>
<p>Résultat de la commande ci dessus après quelques minutes<br />
<em>EndeavourOS_Endeavour-2024.06.25.iso: Réussi</em></p>
<p>Créer la clé bootable<br />
Pour savoir sur quel périphérique, connecter la clé sur un port USB dun ordinateur et lancer la commande <code class="language-plaintext highlighter-rouge">sudo dmesg</code> ou <code class="language-plaintext highlighter-rouge">lsblk</code><br />
Dans le cas présent , le périphérique USV est <strong>/dev/sdc</strong></p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sudo dd </span><span class="k">if</span><span class="o">=</span>EndeavourOS_Endeavour-2024.06.25.iso <span class="nv">of</span><span class="o">=</span>/dev/sdc <span class="nv">bs</span><span class="o">=</span>4M
</code></pre></div></div>
<h3 id="installer-endeavouros">Installer EndeavourOS</h3>
<p>Insérer la clé USB EndeavourOS, basculer en FR et lancer linstallation <br />
Utilisation de Calamarès<br />
Installation “en ligne”<br />
Choix XFCE4<br />
systemd-boot<br />
Chiffrer le disque<br />
Utilisateur yano<br />
Ordi e6230<br />
Mot passe utilisateur identique admin</p>
<p>A la fin de linstallation<br />
Valider “Redémarrer maintenant” et “Terminé”</p>
<h3 id="premier-démarrage">Premier démarrage</h3>
<p>Au message “Please enter passphrase for disk endeavouros…”, saisir la phrase mot de passe pour déchiffrer le disque<br />
Sur la page de connexion utilisateur yano, saisir le mot de passe</p>
<h3 id="utilisateur-droits-sudo">Utilisateur droits sudo</h3>
<p>Modifier sudoers pour accès sudo sans mot de passe à lutilisateur <strong>yano</strong></p>
<div class="language-shell highlighter-rouge"><div class="highlight"><pre class="highlight"><code>su <span class="c"># mot de passe root identique utilisateur</span>
<span class="nb">echo</span> <span class="s2">"yano ALL=(ALL) NOPASSWD: ALL"</span> <span class="o">&gt;&gt;</span> /etc/sudoers.d/20-yano
</code></pre></div></div>
<p><code class="language-plaintext warning highlighter-rouge">ATTENTION : Le clavier n'a pas de touche "&gt;", il faut saisir le code Unicode : Ctrl+Shift+u003E</code></p>
<h3 id="mise-à-jour-système">Mise à jour Système</h3>
<p>Mode terminal</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>yay -Syu
</code></pre></div></div>
<p>Mode graphique<br />
<img src="/images/plasma-kde01.png" alt="" /></p>
<p>Désactiver la veille écran <br />
Menu &gt; Paramètres &gt; Economiseur décran &gt; Onglet “Verrouiller lécran” , désactiver</p>
<h3 id="activation-ssh-avec-clés">Activation SSH avec clés</h3>
<h4 id="etablir-une-liaison-temporaire-ssh">Etablir une liaison temporaire SSH</h4>
<p>Pour un accès sur la machine via SSH depuis un poste distant</p>
<ol>
<li>Lancer et activer le service : <code class="language-plaintext highlighter-rouge">sudo systemctl enable sshd --now</code></li>
<li>Ouvrir le port 22 firewall: <code class="language-plaintext highlighter-rouge">sudo firewall-cmd --zone=public --add-port=22/tcp</code></li>
<li>Relever ladresse ip de la machine : <code class="language-plaintext highlighter-rouge">ip a</code> 192.168.0.21 dans notre cas</li>
</ol>
<p>Se connecter depuis un poste distant <code class="language-plaintext highlighter-rouge">ssh yano@192.168.0.21</code></p>
<h4 id="ssh-avec-clés">SSH avec clés</h4>
<p><strong>A - Poste appelant</strong><br />
Générer une paire de clé curve25519-sha256 (ECDH avec Curve25519 et SHA2) nommé <strong>e6230</strong> pour une liaison SSH avec le portable E6230.</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>ssh-keygen -t ed25519 -o -a 100 -f ~/.ssh/e6230
</code></pre></div></div>
<p>Envoyer les clés depuis le poste distant</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>ssh-copy-id -i ~/.ssh/e6230.pub yano@192.168.0.21
</code></pre></div></div>
<p>On se connecte sur la machine</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>ssh yano@192.168.0.21
</code></pre></div></div>
<p><strong>B - Dell Latitude e6230</strong><br />
Modification fichier configuration ssh sur le dell e6230 pour le port</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>sudo nano /etc/ssh/sshd_config
</code></pre></div></div>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>Port 56230
PasswordAuthentication no
</code></pre></div></div>
<p><code class="language-plaintext warning highlighter-rouge">IL FAUT ACTIVER LE PORT 56230 EN ZONE "PUBLIC" DU PAREFEU !</code></p>
<p>Ajouter le nouveau port à la zone configurée de firewalld (“public” par défaut).</p>
<div class="language-shell highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sudo </span>firewall-cmd <span class="nt">--zone</span><span class="o">=</span>public <span class="nt">--add-port</span><span class="o">=</span>56230/tcp <span class="nt">--permanent</span>
<span class="nb">sudo </span>systemctl restart firewalld
</code></pre></div></div>
<p>Redémarrer sshd</p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sudo </span>systemctl restart sshd
</code></pre></div></div>
<p>Se connecter depuis le poste appelant</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>ssh yano@192.168.0.21 -p 56230 -i /home/yann/.ssh/e6230
</code></pre></div></div>
<p>Ouvrir un terminal</p>
<h4 id="motd">Motd</h4>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sudo </span>nano /etc/motd
</code></pre></div></div>
<div class="language-text highlighter-rouge"><div class="highlight"><pre class="highlight"><code> ___ ___ _ _ _ _ _ _ _
| \ | __|| | | | | | __ _ | |_ (_)| |_ _ _ __| | ___
| |) || _| | |__ | |__ | |__ / _` || _|| || _|| || |/ _` |/ -_)
|___/ |___||____||____| |____|\__,_| \__||_| \__| \_,_|\__,_|\___|
__ ___ ____ __
___ / / |_ )|__ / / \
/ -_)/ _ \ / / |_ \| () |
\___|\___//___||___/ \__/
___ ___ ___ ___ _ _ __ ___ ___
| __|/ _ \ / __| | _ \| | __ _ ___ _ __ __ _ | |/ /| \ | __|
| _|| (_) |\__ \ | _/| |/ _` |(_-&lt;| ' \ / _` | | ' &lt; | |) || _|
|___|\___/ |___/ |_| |_|\__,_|/__/|_|_|_|\__,_| |_|\_\|___/ |___|
</code></pre></div></div>
<h3 id="réseau-wifi">Réseau wifi</h3>
<p><em>Le portable DELL est connecté sur le réseau filaire 192.168.0.0/24 pour linstallation</em></p>
<p>Paramétrage wifi pour une utilisation sur un autre réseau 192.168.10.0/24<br />
<img src="/images/eos009.png" alt="" width="400" /><br />
Adresse IP 192.168.10.90</p>
<h3 id="vnc">VNC</h3>
<p><em>Se connecter VNC via SSH sur IP 192.168.10.90</em></p>
<p><strong>Portable DELL Latitude e6230</strong></p>
<p>installer x11vnc</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>yay -S x11vnc
</code></pre></div></div>
<p>Générer un mot de passe dans le dossier root</p>
<div class="language-shell highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sudo</span> <span class="nt">-s</span>
x11vnc <span class="nt">-storepasswd</span> <span class="s2">"mot_de_passe"</span> /root/.vnc_passwd
<span class="nb">exit</span>
</code></pre></div></div>
<p><em>stored passwd in file: /root/.vnc_passwd</em></p>
<p>Ajouter le nouveau port 5900 à la zone configurée de firewalld (“public” par défaut).</p>
<div class="language-shell highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sudo </span>firewall-cmd <span class="nt">--zone</span><span class="o">=</span>public <span class="nt">--add-port</span><span class="o">=</span>5900/tcp <span class="nt">--permanent</span>
<span class="nb">sudo </span>systemctl restart firewalld
</code></pre></div></div>
<p>Lancement manuel en console et en session utilisateur pour valider et enregistrer le mot de passe VNC</p>
<div class="language-shell highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sudo </span>x11vnc <span class="nt">-xkb</span> <span class="nt">-noxrecord</span> <span class="nt">-noxfixes</span> <span class="nt">-noxdamage</span> <span class="nt">-display</span> :0 <span class="nt">-auth</span> /var/run/lightdm/root/:0 <span class="nt">-usepw</span>
</code></pre></div></div>
<p>Saisir le mot de passe VNC 2 fois ( la seconde pour vérification) et répondre <code class="language-plaintext highlighter-rouge">y</code> pour écriture</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>Enter VNC password:
Verify password:
Write password to /root/.vnc/passwd? [y]/n y
</code></pre></div></div>
<p>Résultat de la commande ci-dessus sur le terminal du portable DELL</p>
<div class="language-text highlighter-rouge"><div class="highlight"><pre class="highlight"><code>[...]
The VNC desktop is: e6230:0
PORT=5900
******************************************************************************
Have you tried the x11vnc '-ncache' VNC client-side pixel caching feature yet?
The scheme stores pixel data offscreen on the VNC viewer side for faster
retrieval. It should work with any VNC viewer. Try it by running:
x11vnc -ncache 10 ...
One can also add -ncache_cr for smooth 'copyrect' window motion.
More info: http://www.karlrunge.com/x11vnc/faq.html#faq-client-caching
</code></pre></div></div>
<p>Arrêt par Ctrl+C</p>
<p><strong>Poste Appelant</strong></p>
<p><u>Première fenêtre de terminal</u></p>
<p>Tunnel SSH<br />
Utilisez le drapeau <code class="language-plaintext highlighter-rouge">-localhost</code> avec <strong>x11vnc</strong> pour quil se lie à linterface locale.<br />
Une fois que cest fait, vous pouvez utiliser SSH pour tunneliser le port ; puis, connectez-vous à VNC via SSH.</p>
<div class="language-shell highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="c"># SSH avec clés</span>
ssh <span class="nt">-f</span> <span class="nt">-L</span> 5900:localhost:5900 <span class="nt">-p</span> 56230 <span class="nt">-i</span> ~/.ssh/e6230 yano@192.168.10.90 <span class="s1">'sudo x11vnc -xkb -noxrecord -noxfixes -noxdamage -display :0 -auth /var/run/lightdm/root/:0 -usepw'</span>
</code></pre></div></div>
<p><u>Seconde fenêtre de terminal</u><br />
Exécuter la commande suivante</p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code>vncviewer <span class="nt">-PreferredEncoding</span><span class="o">=</span>ZRLE localhost:0
</code></pre></div></div>
<p><img src="/images/vnc_login.png" alt="" width="200" /><br />
Saisir le mot de passe pour la connexion VNC</p>
<p><img src="/images/vnc-e6230-1a.png" alt="" width="600" /></p>
<p>Si le curseur est mal affiché, cest possible de mettre loption -cursor à la ligne de commande x11vnc
<code class="language-plaintext info highlighter-rouge">Le programme écoute sur le port 9500. Il faut penser à ouvrir le parefeu du Latitude e6230 sur ce port en TCP</code></p>
<p><u>Script - VNC via Tunnel SSH</u></p>
<ul>
<li>Ouverture distant et redirection du port 5900 via tunnel ssh, reprise de la main (nohup)</li>
<li>On mémorise le processus ssh (pidof)</li>
<li>Lancement de vncviewer</li>
<li>
<p>En sortie du viewer, on tue le processus ssh … avec kill</p>
<p>nano ~/scripts/vncdell.sh</p>
</li>
</ul>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="c">#!/bin/bash</span>
<span class="nb">nohup </span>ssh <span class="nt">-f</span> <span class="nt">-L</span> 5900:localhost:5900 <span class="nt">-p</span> 56230 <span class="nt">-i</span> ~/.ssh/e6230 yano@192.168.10.90 <span class="s1">'sudo x11vnc -xkb -noxrecord -noxfixes -noxdamage -display :0 -auth /var/run/lightdm/root/:0 -usepw'</span>
<span class="nv">p</span><span class="o">=</span><span class="si">$(</span>pidof <span class="nt">-s</span> ssh<span class="si">)</span>
<span class="c"># tempo</span>
<span class="nb">echo</span> <span class="s2">"Patienter 5 secondes..."</span>
<span class="nb">sleep </span>5
vncviewer <span class="nt">-PreferredEncoding</span><span class="o">=</span>ZRLE localhost:0
<span class="nb">kill</span> <span class="nv">$p</span>
<span class="nb">echo</span> <span class="s2">"FIN VNC"</span>
<span class="nb">exit </span>0
</code></pre></div></div>
<p>Droits en exécution</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>chmod +x ~/scripts/vncdell.sh
</code></pre></div></div>
<p>Au lancement du script</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>sh ~/scripts/vncdell.sh
</code></pre></div></div>
<p><img src="/images/vnc-e6230A.png" alt="" width="200" /><br />
Saisir le mot de passe VNC</p>
<h3 id="clé-matérielle-fido2">Clé matérielle FIDO2</h3>
<p><em>Le déverrouillage se fait par saisie dune phrase mot de passe, on peut ajouter des clés FIDO2 pour un déchiffrement sans mot de passe (<a href="https://forum.endeavouros.com/t/using-fido2-keys-to-unlock-luks-on-endeavouros/51111">Using FIDO2 keys to unlock LUKS on EndeavourOS</a>)</em></p>
<h4 id="prérequis">Prérequis</h4>
<p>Installer librairie libfido2 pour la prise en charge des clés Yubico et SoloKeys</p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sudo </span>pacman <span class="nt">-S</span> libfido2
</code></pre></div></div>
<p>Vérifier que le disque chiffré est /dev/sda2 : <code class="language-plaintext highlighter-rouge">lsblk</code></p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINTS
sda 8:0 0 447,1G 0 disk
├─sda1 8:1 0 1G 0 part /efi
└─sda2 8:2 0 446,1G 0 part
└─luks-d603c182-2d04-4a31-bde6-512ac2d18e7b 254:0 0 446,1G 0 crypt /
</code></pre></div></div>
<p>Vérifier que le chiffrement est luks2 : <code class="language-plaintext highlighter-rouge">sudo cryptsetup luksDump /dev/sda2</code></p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>LUKS header information
Version: 2
[...]
</code></pre></div></div>
<h4 id="enroler-clé-usb-fido2-yubikey-5-nfc">Enroler clé USB FIDO2 YubiKey 5 NFC</h4>
<p><img src="/images/yubikey5nfc.png" alt="" height="100" /></p>
<p>Vérifier que la YubiKey est insérée dans un port USB</p>
<p>Lister la yubikey</p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sudo </span>systemd-cryptenroll <span class="nt">--fido2-device</span><span class="o">=</span>list
</code></pre></div></div>
<div class="language-text highlighter-rouge"><div class="highlight"><pre class="highlight"><code>PATH MANUFACTURER PRODUCT
/dev/hidraw4 Yubico YubiKey OTP+FIDO+CCID
</code></pre></div></div>
<p>Clé yubikey “24 554 586” pour le déverrouillage du disque chiffré /dev/sda2**</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>sudo systemd-cryptenroll --fido2-device=auto /dev/sda2
</code></pre></div></div>
<p>Résulat de la commande précédente</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>🔐 Please enter current passphrase for disk /dev/sda2: *********************
Requested to lock with PIN, but FIDO2 device /dev/hidraw4 does not support it, disabling.
Initializing FIDO2 credential on security token.
👆 (Hint: This might require confirmation of user presence on security token.)
Generating secret key on FIDO2 security token.
👆 In order to allow secret key generation, please confirm presence on security token.
New FIDO2 token enrolled as key slot 1.
</code></pre></div></div>
<p class="info">Le <strong>Y</strong> de la clé se met à clignoter , il suffit de poser son doigt sur lemplacement du <strong>Y</strong> pour le déverrouillage</p>
<p>Si vous avez plusieurs clés répéter lopération <strong>Enroler clé USB FIDO2 YubiKey 5 NFC</strong></p>
<p>Nous avons ajouté 3 clés yubikey FIDO2</p>
<ol>
<li>yubikey “24 554 586”</li>
<li>yubikey “29 085 988”</li>
<li>yubikey “24 554 581”</li>
</ol>
<h4 id="prise-en-charge-fido2-crypttab">Prise en charge FIDO2 (crypttab)</h4>
<p>Le fichier <code class="language-plaintext highlighter-rouge">/etc/crypttab</code> contient la liste des périphériques à déverrouiller automatiquement.<br />
Chaque ligne du fichier crypttab est de la forme :<br />
<code class="language-plaintext highlighter-rouge">&lt;target name&gt; &lt;source device&gt; &lt;key file&gt; &lt;options&gt;</code></p>
<ul>
<li><code class="language-plaintext highlighter-rouge">&lt;target name&gt;</code> : Nom à donner au mappage (/dev/mapper/name), dans le cas présent “secret”</li>
<li><code class="language-plaintext highlighter-rouge">&lt;source device&gt;</code> : lidentifiant du container luks, sous la forme UUID=</li>
<li><code class="language-plaintext highlighter-rouge">&lt;key file&gt;</code> : chemin absolu vers le ficher de phrase de passe. Si le déverrouillage doit seffectuer par saisie dun mot de passe, indiquer “none”</li>
<li><code class="language-plaintext highlighter-rouge">&lt;options&gt;</code> : liste doptions séparées par des virgules, par exemple luks, discard pour un chiffrage luks et autoriser lutilisation de la commane fstrim ou discard au niveau du container. Loption keyscript= donne la possibilité dexécuter un script ou une commande avec le chemin vers le fichier de passe de phrase (paramètre password précédent) fourni comme argument.</li>
</ul>
<p><code class="language-plaintext highlighter-rouge">/etc/crypttab</code> avant modification</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code># &lt;name&gt; &lt;device&gt; &lt;password&gt; &lt;options&gt;
luks-c3f9cc28-3bb6-4c96-a86b-22a659c37ecc UUID=c3f9cc28-3bb6-4c96-a86b-22a659c37ecc none luks
</code></pre></div></div>
<p>Modifier <code class="language-plaintext highlighter-rouge">/etc/crypttab</code> pour la prise en chrrge FIDO2 en ajoutant <code class="language-plaintext highlighter-rouge">fido2-device=auto</code></p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sudo </span>nano /etc/crypttab
</code></pre></div></div>
<p>La quatrième colonne <strong>luks</strong> est remplacée par <strong>luks,fido2-device=auto</strong></p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code># &lt;name&gt; &lt;device&gt; &lt;password&gt; &lt;options&gt;
luks-c3f9cc28-3bb6-4c96-a86b-22a659c37ecc UUID=c3f9cc28-3bb6-4c96-a86b-22a659c37ecc none luks,fido2-device=auto
</code></pre></div></div>
<p>Sauvegarder et quitter.</p>
<p>Réinitialiser le noyau</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>sudo reinstall-kernels
</code></pre></div></div>
<p><code class="language-plaintext info highlighter-rouge">Redémarrer la machine</code></p>
<h4 id="outil-systemd-cryptenroll">Outil systemd-cryptenroll</h4>
<p><strong><a href="https://wiki.archlinux.org/title/Systemd-cryptenroll">systemd-cryptenroll</a></strong><br />
systemd-cryptenroll est un outil permettant denregistrer des jetons de sécurité matériels et des périphériques dans un volume crypté LUKS2, qui peuvent ensuite être utilisés pour déverrouiller le volume pendant le démarrage.<br />
systemd-cryptenroll permet denregistrer des cartes à puce, des jetons FIDO2 et des puces de sécurité Trusted Platform Module dans des périphériques LUKS, ainsi que des phrases de passe ordinaires. Ces périphériques sont ensuite déverrouillés par <code class="language-plaintext highlighter-rouge">systemd-cryptsetup@.service</code> à laide des jetons enregistrés.</p>
<p>systemd-cryptenroll peut lister les keyslots dun périphérique LUKS, de manière similaire à <code class="language-plaintext highlighter-rouge">cryptsetup luksDump</code>, mais dans un format plus convivial.</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>sudo systemd-cryptenroll /dev/sda2
</code></pre></div></div>
<p>Résultat pour disque déchiffrable avec une phrase et 3 clés FIDO2</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>SLOT TYPE
0 password
1 fido2 yubikey "24 554 586"
2 fido2 yubikey "29 085 988"
3 fido2 yubikey "24 554 581"
</code></pre></div></div>
<h4 id="clé-usb-solokeys-fido2-option">Clé USB SoloKeys FIDO2 (OPTION)</h4>
<p><img src="/images/solokeys.png" alt="" height="100" /></p>
<p>Lister la clé</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>systemd-cryptenroll --fido2-device=list
</code></pre></div></div>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>PATH MANUFACTURER PRODUCT
/dev/hidraw1 SoloKeys Solo 4.1.5
</code></pre></div></div>
<p>Ajout de la solokeys</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>sudo systemd-cryptenroll --fido2-device=auto /dev/sda2
</code></pre></div></div>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>🔐 Please enter current passphrase for disk /dev/sda2: ***********
Requested to lock with PIN, but FIDO2 device /dev/hidraw1 does not support it, disabling.
Initializing FIDO2 credential on security token.
👆 (Hint: This might require confirmation of user presence on security token.)
Generating secret key on FIDO2 security token.
👆 In order to allow secret key generation, please confirm presence on security token.
New FIDO2 token enrolled as key slot 3.
</code></pre></div></div>
<p class="info">Lors du boot , le <strong>S</strong> de la SoloKeys passe au ROUGE et il suffit dappuyer sur le voyant pour quil repasse au vert afin de lancer le processus de déchiffrement et finir le démarrage</p>
<h3 id="passphrase-de-recouvrement-option">Passphrase de recouvrement (OPTION)</h3>
<p>Les jetons et puces de sécurité FIDO2, PKCS#11 et TPM2 sassocient bien avec les clés de recouvrement : puisque vous navez plus besoin de taper votre mot de passe tous les jours, il est logique de vous en débarrasser et denregistrer à la place une clé de recouvrement à forte entropie que vous imprimez ou scannez hors écran et conservez dans un endroit physique sûr.<br />
Voici comment procéder :</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>sudo systemd-cryptenroll --recovery-key /dev/sda2
</code></pre></div></div>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>🔐 Please enter current passphrase for disk /dev/nvme0n1p2: ***********
A secret recovery key has been generated for this volume:
🔐 vbcrnbjn-vkrkihte-rctbufne-nlihihjl-tegudteu-rkjthcgd-hvhuvgik-rugeregh
Please save this secret recovery key at a secure location. It may be used to
regain access to the volume if the other configured access credentials have
been lost or forgotten. The recovery key may be entered in place of a password
whenever authentication is requested.
New recovery key enrolled as key slot 3.
</code></pre></div></div>
<p>Cette opération génère une clé, lenregistre dans le volume LUKS2, laffiche à lécran et génère un code QR que vous pouvez scanner en dehors de lécran si vous le souhaitez.<br />
La clé possède la plus grande entropie et peut être saisie partout où vous pouvez saisir une phrase dauthentification.<br />
Cest pourquoi il nest pas nécessaire de modifier le fichier /etc/crypttab pour que la clé de récupération fonctionne.</p>
<h3 id="historique-ligne-de-commande">Historique ligne de commande</h3>
<p>Ajoutez la recherche dhistorique de la ligne de commande au terminal<br />
Se connecter en utilisateur<br />
Tapez un début de commande précédent, puis utilisez shift + up (flèche haut) pour rechercher lhistorique filtré avec le début de la commande.</p>
<div class="language-shell highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="c"># Global, tout utilisateur</span>
<span class="nb">echo</span> <span class="s1">'"\e[1;2A": history-search-backward'</span> | <span class="nb">sudo tee</span> <span class="nt">-a</span> /etc/inputrc
<span class="nb">echo</span> <span class="s1">'"\e[1;2B": history-search-forward'</span> | <span class="nb">sudo tee</span> <span class="nt">-a</span> /etc/inputrc
</code></pre></div></div>
<h3 id="créer-les-dossiers-utilisateur">Créer les dossiers “utilisateur”</h3>
<p>Créer les dossiers <code class="language-plaintext highlighter-rouge">.keepassx</code> , <code class="language-plaintext highlighter-rouge">Notes</code> , <code class="language-plaintext highlighter-rouge">scripts</code> <code class="language-plaintext highlighter-rouge">statique/images</code> et <code class="language-plaintext highlighter-rouge">statique/_posts</code></p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">mkdir</span> <span class="nt">-p</span> ~/<span class="o">{</span>.ssh,.keepassx,scripts,media<span class="o">}</span>
<span class="nb">mkdir</span> <span class="nt">-p</span> ~/media/statique/<span class="o">{</span>images,_posts<span class="o">}</span>
<span class="nb">mkdir</span> <span class="nt">-p</span> ~/media/Documents/Dossiers-Locaux-Thunderbird
<span class="nb">mkdir</span> <span class="nt">-p</span> ~/media/Notes
<span class="c"># Lien pour affichage des images avec éditeur Retext</span>
<span class="nb">sudo ln</span> <span class="nt">-s</span> /home/yano/media/statique/images /images
<span class="c"># Lien /srv/media</span>
<span class="nb">sudo chown</span> <span class="nv">$USER</span>:<span class="nv">$USER</span> /srv
<span class="nb">sudo ln</span> <span class="nt">-s</span> <span class="nv">$HOME</span>/media /srv/media
</code></pre></div></div>
<h3 id="partages-réseau-sshfs">Partages réseau SSHFS</h3>
<p><em>On utiliser SSHFS le portable DELL nest pas toujours sur le réseau local</em></p>
<p><strong>SSHFS</strong><br />
<img src="/images/sshfs-logo.png" alt="" width="50" /><br />
<em>SSHFS sert à monter sur son système de fichier, un autre système de fichier distant, à travers une connexion SSH, le tout avec des droits utilisateur.</em></p>
<p>Créer une connexion ssh entre la machine portable DELL Latitude e6230 et le serveur Lenovo rnmkcy.eu</p>
<p>Créer le jeu de clés sur le portable DELL</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>ssh-keygen -t ed25519 -o -a 100 -f ~/.ssh/rnmkcy.eu_key
</code></pre></div></div>
<p>Ajouter le contenu de la clé publique <code class="language-plaintext highlighter-rouge">~/.ssh/rnmkcy.eu_key.pub</code> au fichier <code class="language-plaintext highlighter-rouge">authorized_keys</code> du serveur lenovo (82.64.18.243)</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEiemrIIJdJSGJt9Kn46UgRuOFo4DVllfA1EW+9vudFL yano@e6230
</code></pre></div></div>
<p>Tester la connexion SSH depuis le portable DELL port 55215</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>ssh -p 55215 -i ~/.ssh/rnmkcy.eu_key leno@rnmkcy.eu
</code></pre></div></div>
<p>Installer sshfs sur le portable DELL</p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sudo </span>pacman <span class="nt">-S</span> sshfs <span class="c"># archlinux</span>
</code></pre></div></div>
<p>Exemple de montage manuel<br />
<code class="language-plaintext highlighter-rouge">sshfs -oIdentityFile=&lt;clé privée&gt; utilisateur@domaine.tld:&lt;dossier distant&gt; &lt;dossier local&gt; -C -p &lt;port si dfférent de 22&gt;</code></p>
<p>Partage du dossier /sharenfs serveur Lenovo avec ~/sharenfs machine DELL<br />
Créer le point de montage local</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>mkdir ~/sharenfs
</code></pre></div></div>
<p><u>Accès utilisateur sécurisé</u><br />
Lors du montage automatique via fstab, le système de fichiers sera généralement monté par root. Par défaut, cela produit des résultats indésirables si vous souhaitez accéder en tant quutilisateur ordinaire et limiter laccès aux autres utilisateurs.Ajouter la ligne suivante au fichier <code class="language-plaintext highlighter-rouge">/etc/fstab</code></p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>leno@rnmkcy.eu:/sharenfs /home/yano/sharenfs fuse.sshfs _netdev,user,idmap=user,follow_symlinks,identityfile=/home/yano/.ssh/rnmkcy.eu_key,port=55215,allow_other,default_permissions,uid=1000,gid=1000 0 0
</code></pre></div></div>
<p>Recharger les daemons</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>sudo systemctl daemon-reload
</code></pre></div></div>
<p>Si vous voulez quils soient montés uniquement lors de laccès, vous devrez utiliser les paramètres <code class="language-plaintext highlighter-rouge">noauto,x-systemd.automount</code><br />
De plus, vous pouvez utiliser loption x-systemd.mount-timeout= pour spécifier combien de temps systemd doit attendre la fin de la commande de montage. Enfin, loption _netdev garantit que systemd comprend que le montage dépend du réseau et le commande une fois que le réseau est en ligne.<br />
<code class="language-plaintext highlighter-rouge">noauto,x-systemd.automount,x-systemd.mount-timeout=30,_netdev</code></p>
<p>Lancer le montage en mode vue pour valider la clé SSH<br />
ATTENTION : les paramètres <strong>noauto,x-systemd.automount</strong> ne doivent pas être utilisés pour cette opération</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>sudo mount -av
</code></pre></div></div>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>/efi  : déjà monté
/  : ignoré
/tmp  : déjà monté
The authenticity of host '[rnmkcy.eu]:55215 ([82.64.18.243]:55215)' can't be established.
ED25519 key fingerprint is SHA256:UXJCYtFENT8AKvmNe5TugLM1mXDdIcSOQ3o3oeAxd5I.
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '[rnmkcy.eu]:55215' (ED25519) to the list of known hosts.
/home/yano/sharenfs : successfully mounted
</code></pre></div></div>
<p>Le fichier <code class="language-plaintext highlighter-rouge">/etc/fstab</code> après validation de la clé</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>leno@rnmkcy.eu:/sharenfs /home/yano/sharenfs fuse.sshfs noauto,x-systemd.automount,_netdev,user,idmap=user,follow_symlinks,identityfile=/home/yano/.ssh/rnmkcy.eu_key,port=55215,allow_other,default_permissions,uid=1000,gid=1000 0 0
</code></pre></div></div>
<h3 id="plymouth">Plymouth</h3>
<p><em><a href="/2023/10/14/Plymouth_Processus_de_demarrage_graphique.html">Plymouth - Processus de démarrage graphique</a></em></p>
<p>Installation</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>yay -S plymouth plymouth-theme-endeavouros
</code></pre></div></div>
<p>Modifier image du thème endeavouros</p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sudo cp</span> /usr/share/plymouth/themes/endeavouros/wallpaper.png /usr/share/plymouth/themes/endeavouros/wallpaper_sav.png
<span class="nb">sudo cp </span>sharenfs/e6230/Fonds/wallpaper.png /usr/share/plymouth/themes/endeavouros/
</code></pre></div></div>
<p>Ajout splash au fichier <code class="language-plaintext highlighter-rouge">/etc/kernel/cmdline</code></p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>nvme_load=YES nowatchdog splash rw rd.luks.uuid=c3f9cc28-3bb6...
</code></pre></div></div>
<p>Prise en compte</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>sudo reinstall-kernels
</code></pre></div></div>
<h3 id="paramètres-xfce">Paramètres XFCE</h3>
<p>On déplace le <strong>tableau de bord</strong> du bas vers le haut de lécran</p>
<ul>
<li>Affichage date et heure<br />
<img src="/images/eos001.png" alt="" /><br />
ou <strong>format personnalisé</strong> dans <strong>Horloge</strong> : <code class="language-plaintext highlighter-rouge">%e %b %Y %R</code></li>
<li>Gestionnaire dalimentation (Batterie et Branché)</li>
<li>Paramètres &gt; Gestionnaire de paramètres &gt; Gestionnaire dalimentation<br />
<img src="/images/eos002.png" alt="" width="400" /><br />
<img src="/images/eos002a.png" alt="" width="400" /><br />
<img src="/images/eos002b.png" alt="" width="400" /></li>
<li>Economiseur décran de Xfce<br />
<img src="/images/eos007.png" alt="" width="400" /></li>
</ul>
<h3 id="ecran-bureau-et-connexion">Ecran bureau et connexion</h3>
<h4 id="ecran-bureau">Ecran bureau</h4>
<p>Les fonds décran (1366x768) &gt;
<code class="language-plaintext highlighter-rouge">/usr/share/endeavouros/backgrounds/</code></p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>sudo cp sharenfs/e6230/Fonds/earth_planet_eclipse_yano_1366x768.jpg /usr/share/endeavouros/backgrounds/
</code></pre></div></div>
<p>Clic droit sur le bureau <br />
<img src="/images/param-bureau01.png" alt="" height="200" /><br />
<img src="/images/param-bureau02.png" alt="" width="400" /></p>
<p><img src="/images/param-bureau03.png" alt="" width="600" /></p>
<h4 id="ecran-de-connexion">Ecran de connexion</h4>
<p>Utilise <code class="language-plaintext highlighter-rouge">lightdm-slick-greeter</code> Un greeter basé sur GTK plus axé sur lapparence que <code class="language-plaintext highlighter-rouge">lightdm-gtk-greeter</code></p>
<p>Nouvelle image</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>sudo cp sharenfs/e6230/Fonds/wallpaper_sav.png /usr/share/endeavouros/backgrounds/endeavouros-wallpaper.png
</code></pre></div></div>
<p>Les paramètres sont dans le fichier <code class="language-plaintext highlighter-rouge">/etc/lightdm/slick-greeter.conf</code></p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>[Greeter]
background=/usr/share/endeavouros/backgrounds/endeavouros-wallpaper.png
draw-user-backgrounds=false
draw-grid=true
theme-name=Arc-Dark
icon-theme-name=Qogir
cursor-theme-name=Qogir
cursor-theme-size=16
show-a11y=false
show-power=false
background-color=#000000
</code></pre></div></div>
<p>Si vous changez limage de fond, il désactiver draw-grid</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>draw-grid=false
</code></pre></div></div>
<p>Page de connexion<br />
<img src="/images/param-bureau04.png" alt="" width="600" /></p>
<h2 id="bluetooth">Bluetooth</h2>
<p><img src="/images/bluetooth-logoa.png" alt="" height="50" /></p>
<h3 id="activer-bluetooth">Activer Bluetooth</h3>
<p>Bluetooth nest pas actif par défaut, en raison de plusieurs risques de sécurité et pour éviter une consommation dénergie inutile.</p>
<p>Les packages nécessaires sont installés par défaut, mais ils sont dans leur état désactivé par défaut.</p>
<p>Pour pouvoir utiliser Bluetooth, vous devez démarrer le service ou lactiver si vous avez besoin que Bluetooth soit exécuté à chaque démarrage :</p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sudo </span>systemctl start bluetooth <span class="c"># pour le démarrer pour la session restera désactivé après le redémarrage.</span>
<span class="nb">sudo </span>systemctl <span class="nb">enable </span>bluetooth <span class="nt">--now</span> <span class="c"># à activer par défaut, s'exécutera après chaque démarrage.</span>
</code></pre></div></div>
<h3 id="souris-bluetooth-pebble">Souris Bluetooth Pebble</h3>
<p><strong>Souris Bluetooth Pebble Mouse 2 M350s</strong><br />
Basculez entre 3 de vos dispositifs dune simple pression sur le bouton Easy-Switch.<br />
Position 1 pour le portable DELL latitude e6230<br />
<img src="/images/Peeble-MouseA.png" alt="" height="400" /><br />
<em>Pour effacer une configuration existante de la souris bluetooth , garder enfoncer le bouton Easy-Switch jusquau clignotement rapide de la led</em></p>
<p>Pour ajouter la souris bluetooth au portable DELL, clic droit sur licône bluetooth de la barre des tâches, Périphériques puis Rechercher et lorsque lappareil est détecté , il faut lappairer<br />
<img src="/images/eos006a.png" alt="" width="300" /> <br />
<img src="/images/eos006b.png" alt="" width="300" /></p>
<h3 id="ecouteurs-bluetooth">Ecouteurs bluetooth</h3>
<p><img src="/images/soundcore-liberty-air.png" alt="" /><br />
Soundcore Liberty Air 2<br />
<a href="https://www.cnetfrance.fr/produits/test-anker-soundcore-liberty-air-2-39895873.htm">Test des Anker Soundcore Liberty Air 2</a></p>
<p>Utiliser le gestionnaire bluetooth et la recherche<br />
<img src="/images/bluetooth04.png" alt="" width="400" /></p>
<p>Lorsque le périphérique est détecté, il faut lappairer, clic-droit &gt; Appairer<br />
Après appairage<br />
<img src="/images/bluetooth05.png" alt="" width="400" /></p>
<p><code class="language-plaintext info highlighter-rouge">Pour que le périphèrique fonctionne correctement, il est IMPERATIF de redémarrer la machine</code></p>
<p>Après redémarrage, il faut séléctionner le profil audio<br />
<img src="/images/bluetooth06.png" alt="" width="500" /></p>
<h2 id="applications">Applications</h2>
<h3 id="client-nextcloud">Client Nextcloud</h3>
<p><img src="/images/nextcloud-logo-a.png" alt="" width="80" /></p>
<p>Installation client nextcloud</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>yay -S nextcloud-client libgnome-keyring gnome-keyring
</code></pre></div></div>
<p>Démarrer le client nextcloud , après avoir renseigné lurl <a href="https://cloud.rnmkcy.eu">https://cloud.rnmkcy.eu</a> ,login et mot de passe pour la connexion</p>
<p>Trousseau de clé avec mot de passe idem connexion utilisateur</p>
<p>Paramétrage</p>
<ul>
<li>Menu → Lancer <strong>Client de synchronisation nextcloud</strong></li>
<li>Adresse du serveur : <a href="https://cloud.xoyaz.xyz">https://cloud.xoyaz.xyz</a><br />
Se connecter avec un <strong>mot de passe application nextcloud “Synchro DELL e6230”</strong></li>
<li>Nom dutilisateur : yann</li>
<li>Mot de passe : xxxxx<br />
<img src="/images/nextcloud_xfce02.png" alt="" width="300" /><br />
Puis saisir ladresse : https://cloud.rnmkcy.eu<br />
Le nagigateur souvre sur ladresse saisie <br />
<img src="/images/nextcloud_xfce02a.png" alt="" width="500" /><br />
<img src="/images/nextcloud_xfce02b.png" alt="" width="500" /><br />
<img src="/images/nextcloud_xfce02c.png" alt="" width="500" /></li>
<li>Sauter les dossiers à synchroniser, Ignorer la configuration des dossiers
<img src="/images/nextcloud_xfce03.png" alt="" width="400" /></li>
<li>Trousseau de clés = mot de passe connexion utilisateur<br />
<img src="/images/nextcloud_xfce05.png" alt="" width="400" /></li>
<li>Paramètres nextcloud<br />
<img src="/images/e6230-nextcloud-a.png" alt="" width="400" /></li>
</ul>
<p>Saisir les différents dossiers à synhroniser<br />
<img src="/images/e6230-nextcloud.png" alt="" width="400" /></p>
<p>Au prochain redémarrage, il faudra confirmer le mot de passe du trousseau <br />
<img src="/images/nextcloud_xfce05a.png" alt="" width="400" /></p>
<p><strong>Pour modifier le mot de passe du trousseau (OPTION)</strong><br />
Installer seahorse : <code class="language-plaintext highlighter-rouge">yay -S seahorse</code><br />
Lancer “Mots de passe et clés”, faites un clic droit sur votre trousseau de clés par défaut et choisissez Changer de mot de passe.<br />
<img src="/images/eos005.png" alt="" width="300" /><br />
Vous devrez dabord saisir votre ancien mot de passe. Ensuite, vous devrez saisir deux fois votre nouveau mot de passe et valider.</p>
<h3 id="mot-de-passe-keepassxc">Mot de passe (KeePassXC)</h3>
<p><img src="/images/keepassxc_logo.png" alt="" height="50" /><br />
<em>On utilise une clé matérielle pour déverrouiller la base de mot de passe</em></p>
<p><code class="language-plaintext success highlighter-rouge">La clé matériel utilisée pour la connexion doit être insérée</code></p>
<p>Installer le gestionnaire de mot de passe <strong>keepassxc</strong></p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code>yay <span class="nt">-S</span> keepassxc
</code></pre></div></div>
<p>Ouvrir “KeePassXC” &gt; Affichage<br />
<strong>Affichage → Thème</strong> : Sombre<br />
<strong>Affichage → Mode compact</strong> , un redémarrage de lapplication est nécessaire</p>
<p>Ajouter aux favoris “KeePassXC” et ouvrir lapplication<br />
<img src="/images/e6230-keepassxc01.png" alt="" width="400" /><br />
Base de données &gt; Ouvrir une base de données (afficher les fichiers cachés) : <strong>~/.keepassx/yannick_xc.kdbx</strong> &gt; Ouvrir<br />
<img src="/images/eos008.png" alt="" width="400" /></p>
<h3 id="double-commander">Double Commander</h3>
<p><img src="/images/doublecmd-logo.png" alt="" height="50" /><br />
<em>Double Commander est un gestionnaire de fichiers open source multiplateforme avec deux panneaux côte à côte. Il sinspire de Total Commander</em></p>
<p>Application GTK</p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code>yay <span class="nt">-S</span> doublecmd-gtk2
</code></pre></div></div>
<p>Ajouter lapplication aux favoris<br />
Les paramètres sont stockés dans le dossier <code class="language-plaintext highlighter-rouge">~/.config/doublecmd/</code></p>
<h3 id="minicom">Minicom</h3>
<p>Installation</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>yay -S minicom
</code></pre></div></div>
<p>Paramétrage de lapplication terminale <strong>minicom</strong></p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>sudo minicom -s
</code></pre></div></div>
<blockquote>
<p>Seul les paramètres à modifier sont cités</p>
</blockquote>
<p>Configuration du port série<br />
<img src="/images/minicom01.png" alt="" /><br />
A - Port série : <strong>/dev/ttyUSB0</strong><br />
F - Contrôle de flux matériel : <strong>Non</strong><br />
<img src="/images/minicom02.png" alt="" /><br />
Echap<br />
Enregistrer config. sous dfl<br />
<img src="/images/minicom03.png" alt="" /><br />
Sortir de Minicom</p>
<h3 id="flameshot-copie-écran">Flameshot (copie écran)</h3>
<p><strong>Copie écran (flameshot)</strong><br />
<a href="https://github.com/lupoDharkael/flameshot"><strong>Flameshot</strong></a> cest un peu THE TOOL pour faire des captures décrans</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>yay -S flameshot
</code></pre></div></div>
<p>Lancer lapplication XFCE Flameshot et licône est visible dans la barre des tâches<br />
<img src="/images/flameshot_e6230-1a.png" alt="" width="300" /></p>
<p>Paramétrage de flameshot, clic droit sur icône , Configuration<br />
<img src="/images/eos003.png" alt="" width="300" /><br />
Paramétrage de flameshot<br />
<img src="/images/flameshot01.png" alt="" width="400" />
<img src="/images/eos003a.png" alt="" width="400" /></p>
<h3 id="scrpy-émulation-android">scrpy émulation android</h3>
<p>Utilise adb et le port USB</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>yay -S scrcpy
</code></pre></div></div>
<p><em>Les icônes pour lancer lapplication sont générés à linstallation</em></p>
<p><img src="/images/eos004.png" alt="" width="300" /></p>
<h3 id="paquets-supplémentaires">Paquets supplémentaires</h3>
<p>Lancer la commande</p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code>yay <span class="nt">-S</span> gimp libreoffice-fresh-fr jq figlet p7zip tmux calibre retext bluefish terminator filezilla zenity borg android-tools yt-dlp xclip nmap tigervnc xournalpp
<span class="c"># qrencode zbar qbittorrent gedit </span>
</code></pre></div></div>
<h3 id="borgbackup">BorgBackup</h3>
<p><img src="/images/borg-logo-b.png" alt="" height="60" /><br />
<a href="/2023/10/31/BorgBackup_vers-Boite_de_stockage.html#borg---laptop-dell-e6230">Borg - Laptop Dell e6230</a></p>
<p>Résumé des opérations</p>
<ol>
<li>Créer une clé SSH pour lauthentification borg</li>
<li>Ajouter clé publique <code class="language-plaintext highlighter-rouge">/root/.ssh/id_borg_ed25519.pub</code> au fichier authorized_keys de la boîte de stockage</li>
<li>Tester la connexion ssh à la boite de stockage</li>
<li>Créer le bash <code class="language-plaintext highlighter-rouge">/root/.borg/borg-backup.sh</code> et le rendre exécutable <code class="language-plaintext highlighter-rouge">chmod +x</code></li>
<li>Exécution script au boot après 3 min <code class="language-plaintext highlighter-rouge">/etc/systemd/system/run-script-with-delay.service</code> et <code class="language-plaintext highlighter-rouge">/etc/systemd/system/run-script-with-delay.timer</code></li>
</ol>
<p>Passphrase et dépôt (en mode su)</p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">mkdir</span> <span class="nt">-p</span> /root/.borg
<span class="c"># ajout phrase</span>
<span class="nb">cat</span> /home/yano/sharenfs/pc1/.borg/e6230.passphrase <span class="o">&gt;</span> /root/.borg/e6230.passphrase
<span class="c"># ajout dépôt</span>
<span class="nb">cat</span> /home/yano/sharenfs/pc1/.borg/e6230.repository <span class="o">&gt;</span> /root/.borg/e6230.repository
</code></pre></div></div>
<p>Initialisation dépôt distant</p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">export </span><span class="nv">BORG_PASSPHRASE</span><span class="o">=</span><span class="s2">"</span><span class="si">$(</span><span class="nb">cat</span> /root/.borg/e6230.passphrase<span class="si">)</span><span class="s2">"</span>
<span class="nb">export </span><span class="nv">BORG_RSH</span><span class="o">=</span><span class="s1">'ssh -i /root/.ssh/id_borg_ed25519'</span>
<span class="nv">BORG_REPOSITORY</span><span class="o">=</span><span class="s2">"</span><span class="si">$(</span><span class="nb">cat</span> /root/.borg/e6230.repository<span class="si">)</span><span class="s2">"</span>
borg init <span class="nt">--encryption</span><span class="o">=</span>repokey <span class="nv">$BORG_REPOSITORY</span>
</code></pre></div></div>
<p>Le résultat de la commande</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>IMPORTANT: you will need both KEY AND PASSPHRASE to access this repo!
Key storage location depends on the mode:
- repokey modes: key is stored in the repository directory.
- keyfile modes: key is stored in the home directory of this user.
For any mode, you should:
1. Export the borg key and store the result at a safe place:
borg key export REPOSITORY encrypted-key-backup
borg key export --paper REPOSITORY encrypted-key-backup.txt
borg key export --qr-html REPOSITORY encrypted-key-backup.html
2. Write down the borg key passphrase and store it at safe place.
</code></pre></div></div>
<p>Le fichier dexclusion <code class="language-plaintext highlighter-rouge">/root/.borg/exclusions</code></p>
<div class="language-text highlighter-rouge"><div class="highlight"><pre class="highlight"><code>/proc
/sys
/dev
/media
/mnt
/cdrom
/tmp
/run
/var/tmp
/var/run
/var/cache
lost+found
/home/yano/.cache
/home/yano/.keepassx
/home/yano/Téléchargements
/home/yano/Musique
/home/yano/Vidéos
/home/yano/media
/home/yano/scripts
/home/yano/sharenfs
</code></pre></div></div>
<p>Lancer la première sauvegarde (en mode su), lancer <code class="language-plaintext highlighter-rouge">tmux</code></p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code># exécuter script borgbackup
/root/.borg/borg-backup.sh
# sortie tmux : ctrl+b puis d
# retour tmux : tmux a
</code></pre></div></div>
<p>Lister les sauvegardes borgbackup <code class="language-plaintext highlighter-rouge">~/borg-e6230.sh</code></p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="c">#!/bin/bash</span>
<span class="nb">echo</span> <span class="s2">"Liste des sauvegardes borgbackup"</span>
<span class="nb">export </span><span class="nv">BORG_RSH</span><span class="o">=</span><span class="s1">'ssh -i /home/yano/sharenfs/pc1/.borg/e6230.borgssh'</span>
<span class="nb">export </span><span class="nv">BORG_PASSPHRASE</span><span class="o">=</span><span class="sb">`</span><span class="o">(</span><span class="nb">cat</span> /home/yano/sharenfs/pc1/.borg/e6230.passphrase<span class="o">)</span><span class="sb">`</span>
<span class="nb">export </span><span class="nv">BORG_RELOCATED_REPO_ACCESS_IS_OK</span><span class="o">=</span><span class="nb">yes
echo</span> <span class="s2">"borg list --short </span><span class="sb">`</span><span class="o">(</span><span class="nb">cat</span> /home/yano/sharenfs/pc1/.borg/e6230.repository<span class="o">)</span><span class="sb">`</span><span class="s2">"</span>
<span class="nb">echo</span> <span class="s2">"Veuillez patitenter quelques instants..."</span>
borg list <span class="nt">--short</span> <span class="sb">`</span><span class="o">(</span><span class="nb">cat</span> /home/yano/sharenfs/pc1/.borg/e6230.repository<span class="o">)</span><span class="sb">`</span>
</code></pre></div></div>
<p>Le rendre exécutable: <code class="language-plaintext highlighter-rouge">chmod +x ~/borg-e6230.sh</code> puis exécution <code class="language-plaintext highlighter-rouge">./borg-e6230.sh</code><br />
Résultat</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>Liste des sauvegardes borgbackup
borg list --short ssh://u326239@u326239.your-storagebox.de:23/./backup/borg/e6230
Veuillez patitenter quelques instants...
2024-09-09-14h58
2024-09-10-15h28
</code></pre></div></div>
<h2 id="maintenance">Maintenance</h2>
<h3 id="lecteur-carte-à-puce--nfc">Lecteur carte à puce + NFC</h3>
<p><em>comment configurer votre système pour utiliser un lecteur de carte à puce</em></p>
<p>Installez ccid et opensc à partir des référentiels officiels</p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sudo </span>pacman <span class="nt">-S</span> ccid opensc
</code></pre></div></div>
<p>Si le lecteur de carte ne dispose pas dun clavier NIP, définissez <code class="language-plaintext highlighter-rouge">enable_pinpad = false</code> dans le fichier de configuration opensc <strong>/etc/opensc.conf</strong></p>
<p>Démarrer le service pcscd.service</p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sudo </span>systemctl start pcscd.service <span class="c"># démarrer</span>
</code></pre></div></div>
<blockquote>
<p><strong>Conseil</strong>: Si vous obtenez le <code class="language-plaintext highlighter-rouge">Failed to start pcscd.service: Unit pcscd.socket not found</code>. erreur <code class="language-plaintext highlighter-rouge">Failed to start pcscd.service: Unit pcscd.socket not found</code>. , rechargez simplement les unités systemd avec cette commande <code class="language-plaintext highlighter-rouge">systemctl daemon-reload</code></p>
</blockquote>
<p>Status</p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sudo </span>systemctl status pcscd.service
</code></pre></div></div>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>● pcscd.service - PC/SC Smart Card Daemon
Loaded: loaded (/usr/lib/systemd/system/pcscd.service; indirect; preset: disabled)
Active: active (running) since Fri 2023-05-12 18:24:39 CEST; 10s ago
TriggeredBy: ● pcscd.socket
Docs: man:pcscd(8)
Main PID: 2386 (pcscd)
Tasks: 6 (limit: 19046)
Memory: 1.4M
CPU: 61ms
CGroup: /system.slice/pcscd.service
└─2386 /usr/bin/pcscd --foreground --auto-exit
mai 12 18:24:39 e6230 systemd[1]: Started PC/SC Smart Card Daemon.
</code></pre></div></div>
<p>lecteur de carte <code class="language-plaintext highlighter-rouge">pcsc-tools</code></p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sudo </span>pacman <span class="nt">-S</span> pcsc-tools
</code></pre></div></div>
<p>et lancez lutilitaire <code class="language-plaintext highlighter-rouge">pcsc_scan</code> , puis (connectez le lecteur de carte à puce si non interne) insérez une carte. Si vous voyez une sortie comme celle-ci, le lecteur de carte à puce ainsi que la carte ont été reconnus avec succès.</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>Mon Jul 29 14:43:50 2019
Reader 0: Broadcom Corp 5880 [Contacted SmartCard] (0123456789ABCD) 00 00
Event number: 2
Card state: Card inserted,
ATR: 3B DA 18 FF 81 B1 FE 75 1F 03 00 31 C5 73 C0 01 40 00 90 00 0C
[...]
Possibly identified card (using /usr/share/pcsc/smartcard_list.txt):
3B DA 18 FF 81 B1 FE 75 1F 03 00 31 C5 73 C0 01 40 00 90 00 0C
OpenPGP Card V2
</code></pre></div></div>
<p>Activer le service pcscd.service</p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">sudo </span>systemctl <span class="nb">enable </span>pcscd.service <span class="c"># activer</span>
</code></pre></div></div>
<p>Vérifier également la lecture NFC</p>
<h3 id="outils-chiffrage-luks">Outils Chiffrage LUKS</h3>
<p><strong>Ouvrir un disque chiffré LUKS2</strong><br />
Installer les outils archlinux</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>pacman -S arch-install-scripts
</code></pre></div></div>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>cryptsetup luksOpen /dev/sda2 crypt
mount /dev/mapper/vg0-lvroot /mnt
mkdir -p /mnt/home
mount /dev/mapper/vg0-lvhome /mnt/home
mkdir -p /mnt/efi
mount /dev/sda1 /mnt/efi
</code></pre></div></div>
<p><strong>Liste des clés et mots de passe LUKS2</strong></p>
<p>Le déchiffrement du disque dur /dev/sda2 peut être réalisé de plusieurs manière</p>
<ul>
<li>Phrase mot de passe</li>
<li>Clés FIDO2 (Solokeys et Yubico)</li>
<li>Phrase de recouvrement</li>
</ul>
<p>Chacune des possibilités est stockée dans un “SLOT” (8 max, de 0 à 7)<br />
Lister les “SLOT” : <code class="language-plaintext highlighter-rouge">sudo cryptsetup luksDump /dev/sda2</code></p>
<p>Il y a 5 slots utilisés</p>
<ul>
<li>slot 0 : Phrase de passe</li>
<li>slot 1 : Phrase de recouvrement</li>
<li>slot 2 : Yubikeys Fido2 24 554 586</li>
<li>slot 3 : Yubikeys Fido2 24 554 581</li>
<li>slot 4 : Solokeys</li>
</ul>
<p>Tester les différentes clés enregistrées</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code># Phrase de passe
sudo cryptsetup --verbose open --token-id=0 --test-passphrase /dev/sda2
Le jeton 0 a besoin d'une ressource supplémentaire qui est manquante.
Saisissez la phrase secrète pour /dev/sda2 :
Emplacement de clé 0 déverrouillé.
Commande réussie.
# Yubico 24 554 586
sudo cryptsetup --verbose open --test-passphrase /dev/sda2
Asking FIDO2 token for authentication.
👆 Please confirm presence on security token to unlock.
Emplacement de clé 2 déverrouillé.
Commande réussie.
# Yubico 24 554 581
sudo cryptsetup --verbose open --test-passphrase /dev/sda2
Asking FIDO2 token for authentication.
👆 Please confirm presence on security token to unlock.
Emplacement de clé 3 déverrouillé.
Commande réussie.
# Solokeys
sudo cryptsetup --verbose open --test-passphrase /dev/sda2
Asking FIDO2 token for authentication.
👆 Please confirm presence on security token to unlock.
Emplacement de clé 4 déverrouillé.
Commande réussie.
</code></pre></div></div>
<p><strong>Procédure de vérification</strong></p>
<p>Désactiver lhistorique</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>set +o history
</code></pre></div></div>
<p>Vérifier la phrase mot de passe</p>
<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">printf</span> <span class="s2">"anycurrentpassphrase"</span> | <span class="se">\</span>
<span class="nb">sudo </span>cryptsetup luksOpen <span class="nt">--test-passphrase</span> /dev/sda2 <span class="o">&amp;&amp;</span> <span class="se">\</span>
<span class="nb">echo</span> <span class="s2">"Il y a une clé disponible avec ce passphrase."</span>
</code></pre></div></div>
<p>Réactiver lhistorique</p>
<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>set -o history
</code></pre></div></div>
</div>
<div class="d-print-none"><footer class="article__footer"><meta itemprop="dateModified" content="2024-08-30T00:00:00+02:00"><!-- start custom article footer snippet -->
<!-- end custom article footer snippet -->
<!--
<div align="right"><a type="application/rss+xml" href="/feed.xml" title="S'abonner"><i class="fa fa-rss fa-2x"></i></a>
&emsp;</div>
-->
</footer>
<div class="article__section-navigator clearfix"><div class="previous"><span>PRÉCÉDENT</span><a href="/2024/08/28/API_OVH.html">Python venv OVH API</a></div><div class="next"><span>SUIVANT</span><a href="/2024/09/02/KVM-EndeavourOS-Chiffrement-LUKS-LVM.html">KVM EndeavourOS avec chiffrement complet du disque LVM sur LUKS2 (Eos-LVM-LUKS)</a></div></div></div>
</div>
<script>(function() {
var SOURCES = window.TEXT_VARIABLES.sources;
window.Lazyload.js(SOURCES.jquery, function() {
$(function() {
var $this ,$scroll;
var $articleContent = $('.js-article-content');
var hasSidebar = $('.js-page-root').hasClass('layout--page--sidebar');
var scroll = hasSidebar ? '.js-page-main' : 'html, body';
$scroll = $(scroll);
$articleContent.find('.highlight').each(function() {
$this = $(this);
$this.attr('data-lang', $this.find('code').attr('data-lang'));
});
$articleContent.find('h1[id], h2[id], h3[id], h4[id], h5[id], h6[id]').each(function() {
$this = $(this);
$this.append($('<a class="anchor d-print-none" aria-hidden="true"></a>').html('<i class="fas fa-anchor"></i>'));
});
$articleContent.on('click', '.anchor', function() {
$scroll.scrollToAnchor('#' + $(this).parent().attr('id'), 400);
});
});
});
})();
</script>
</div><section class="page__comments d-print-none"></section></article><!-- start custom main bottom snippet -->
<!-- end custom main bottom snippet -->
</div>
</div></div></div></div>
</div><script>(function() {
var SOURCES = window.TEXT_VARIABLES.sources;
window.Lazyload.js(SOURCES.jquery, function() {
var $body = $('body'), $window = $(window);
var $pageRoot = $('.js-page-root'), $pageMain = $('.js-page-main');
var activeCount = 0;
function modal(options) {
var $root = this, visible, onChange, hideWhenWindowScroll = false;
var scrollTop;
function setOptions(options) {
var _options = options || {};
visible = _options.initialVisible === undefined ? false : show;
onChange = _options.onChange;
hideWhenWindowScroll = _options.hideWhenWindowScroll;
}
function init() {
setState(visible);
}
function setState(isShow) {
if (isShow === visible) {
return;
}
visible = isShow;
if (visible) {
activeCount++;
scrollTop = $(window).scrollTop() || $pageMain.scrollTop();
$root.addClass('modal--show');
$pageMain.scrollTop(scrollTop);
activeCount === 1 && ($pageRoot.addClass('show-modal'), $body.addClass('of-hidden'));
hideWhenWindowScroll && window.hasEvent('touchstart') && $window.on('scroll', hide);
$window.on('keyup', handleKeyup);
} else {
activeCount > 0 && activeCount--;
$root.removeClass('modal--show');
$window.scrollTop(scrollTop);
activeCount === 0 && ($pageRoot.removeClass('show-modal'), $body.removeClass('of-hidden'));
hideWhenWindowScroll && window.hasEvent('touchstart') && $window.off('scroll', hide);
$window.off('keyup', handleKeyup);
}
onChange && onChange(visible);
}
function show() {
setState(true);
}
function hide() {
setState(false);
}
function handleKeyup(e) {
// Char Code: 27 ESC
if (e.which === 27) {
hide();
}
}
setOptions(options);
init();
return {
show: show,
hide: hide,
$el: $root
};
}
$.fn.modal = modal;
});
})();
</script><div class="modal modal--overflow page__search-modal d-print-none js-page-search-modal"><script>
(function () {
var SOURCES = window.TEXT_VARIABLES.sources;
window.Lazyload.js(SOURCES.jquery, function() {
// search panel
var search = (window.search || (window.search = {}));
var useDefaultSearchBox = window.useDefaultSearchBox === undefined ?
true : window.useDefaultSearchBox ;
var $searchModal = $('.js-page-search-modal');
var $searchToggle = $('.js-search-toggle');
var searchModal = $searchModal.modal({ onChange: handleModalChange, hideWhenWindowScroll: true });
var modalVisible = false;
search.searchModal = searchModal;
var $searchBox = null;
var $searchInput = null;
var $searchClear = null;
function getModalVisible() {
return modalVisible;
}
search.getModalVisible = getModalVisible;
function handleModalChange(visible) {
modalVisible = visible;
if (visible) {
search.onShow && search.onShow();
useDefaultSearchBox && $searchInput[0] && $searchInput[0].focus();
} else {
search.onShow && search.onHide();
useDefaultSearchBox && $searchInput[0] && $searchInput[0].blur();
setTimeout(function() {
useDefaultSearchBox && ($searchInput.val(''), $searchBox.removeClass('not-empty'));
search.clear && search.clear();
window.pageAsideAffix && window.pageAsideAffix.refresh();
}, 400);
}
}
$searchToggle.on('click', function() {
modalVisible ? searchModal.hide() : searchModal.show();
});
// Char Code: 83 S, 191 /
$(window).on('keyup', function(e) {
if (!modalVisible && !window.isFormElement(e.target || e.srcElement) && (e.which === 83 || e.which === 191)) {
modalVisible || searchModal.show();
}
});
if (useDefaultSearchBox) {
$searchBox = $('.js-search-box');
$searchInput = $searchBox.children('input');
$searchClear = $searchBox.children('.js-icon-clear');
search.getSearchInput = function() {
return $searchInput.get(0);
};
search.getVal = function() {
return $searchInput.val();
};
search.setVal = function(val) {
$searchInput.val(val);
};
$searchInput.on('focus', function() {
$(this).addClass('focus');
});
$searchInput.on('blur', function() {
$(this).removeClass('focus');
});
$searchInput.on('input', window.throttle(function() {
var val = $(this).val();
if (val === '' || typeof val !== 'string') {
search.clear && search.clear();
} else {
$searchBox.addClass('not-empty');
search.onInputNotEmpty && search.onInputNotEmpty(val);
}
}, 400));
$searchClear.on('click', function() {
$searchInput.val(''); $searchBox.removeClass('not-empty');
search.clear && search.clear();
});
}
});
})();
</script><div class="search search--dark">
<div class="main">
<div class="search__header">Recherche</div>
<div class="search-bar">
<div class="search-box js-search-box">
<div class="search-box__icon-search"><i class="fas fa-search"></i></div>
<input id="search-input" type="text" />
<div class="search-box__icon-clear js-icon-clear">
<a><i class="fas fa-times"></i></a>
</div>
</div>
<button class="button button--theme-dark button--pill search__cancel js-search-toggle">
Annuler</button>
</div>
<div id="results-container" class="search-result js-search-result"></div>
</div>
</div>
<!-- Script pointing to search-script.js -->
<script>/*!
* Simple-Jekyll-Search
* Copyright 2015-2020, Christian Fei
* Licensed under the MIT License.
*/
(function(){
'use strict'
var _$Templater_7 = {
compile: compile,
setOptions: setOptions
}
const options = {}
options.pattern = /\{(.*?)\}/g
options.template = ''
options.middleware = function () {}
function setOptions (_options) {
options.pattern = _options.pattern || options.pattern
options.template = _options.template || options.template
if (typeof _options.middleware === 'function') {
options.middleware = _options.middleware
}
}
function compile (data) {
return options.template.replace(options.pattern, function (match, prop) {
const value = options.middleware(prop, data[prop], options.template)
if (typeof value !== 'undefined') {
return value
}
return data[prop] || match
})
}
'use strict';
function fuzzysearch (needle, haystack) {
var tlen = haystack.length;
var qlen = needle.length;
if (qlen > tlen) {
return false;
}
if (qlen === tlen) {
return needle === haystack;
}
outer: for (var i = 0, j = 0; i < qlen; i++) {
var nch = needle.charCodeAt(i);
while (j < tlen) {
if (haystack.charCodeAt(j++) === nch) {
continue outer;
}
}
return false;
}
return true;
}
var _$fuzzysearch_1 = fuzzysearch;
'use strict'
/* removed: const _$fuzzysearch_1 = require('fuzzysearch') */;
var _$FuzzySearchStrategy_5 = new FuzzySearchStrategy()
function FuzzySearchStrategy () {
this.matches = function (string, crit) {
return _$fuzzysearch_1(crit.toLowerCase(), string.toLowerCase())
}
}
'use strict'
var _$LiteralSearchStrategy_6 = new LiteralSearchStrategy()
function LiteralSearchStrategy () {
this.matches = function (str, crit) {
if (!str) return false
str = str.trim().toLowerCase()
crit = crit.trim().toLowerCase()
return crit.split(' ').filter(function (word) {
return str.indexOf(word) >= 0
}).length === crit.split(' ').length
}
}
'use strict'
var _$Repository_4 = {
put: put,
clear: clear,
search: search,
setOptions: __setOptions_4
}
/* removed: const _$FuzzySearchStrategy_5 = require('./SearchStrategies/FuzzySearchStrategy') */;
/* removed: const _$LiteralSearchStrategy_6 = require('./SearchStrategies/LiteralSearchStrategy') */;
function NoSort () {
return 0
}
const data = []
let opt = {}
opt.fuzzy = false
opt.limit = 10
opt.searchStrategy = opt.fuzzy ? _$FuzzySearchStrategy_5 : _$LiteralSearchStrategy_6
opt.sort = NoSort
opt.exclude = []
function put (data) {
if (isObject(data)) {
return addObject(data)
}
if (isArray(data)) {
return addArray(data)
}
return undefined
}
function clear () {
data.length = 0
return data
}
function isObject (obj) {
return Boolean(obj) && Object.prototype.toString.call(obj) === '[object Object]'
}
function isArray (obj) {
return Boolean(obj) && Object.prototype.toString.call(obj) === '[object Array]'
}
function addObject (_data) {
data.push(_data)
return data
}
function addArray (_data) {
const added = []
clear()
for (let i = 0, len = _data.length; i < len; i++) {
if (isObject(_data[i])) {
added.push(addObject(_data[i]))
}
}
return added
}
function search (crit) {
if (!crit) {
return []
}
return findMatches(data, crit, opt.searchStrategy, opt).sort(opt.sort)
}
function __setOptions_4 (_opt) {
opt = _opt || {}
opt.fuzzy = _opt.fuzzy || false
opt.limit = _opt.limit || 10
opt.searchStrategy = _opt.fuzzy ? _$FuzzySearchStrategy_5 : _$LiteralSearchStrategy_6
opt.sort = _opt.sort || NoSort
opt.exclude = _opt.exclude || []
}
function findMatches (data, crit, strategy, opt) {
const matches = []
for (let i = 0; i < data.length && matches.length < opt.limit; i++) {
const match = findMatchesInObject(data[i], crit, strategy, opt)
if (match) {
matches.push(match)
}
}
return matches
}
function findMatchesInObject (obj, crit, strategy, opt) {
for (const key in obj) {
if (!isExcluded(obj[key], opt.exclude) && strategy.matches(obj[key], crit)) {
return obj
}
}
}
function isExcluded (term, excludedTerms) {
for (let i = 0, len = excludedTerms.length; i < len; i++) {
const excludedTerm = excludedTerms[i]
if (new RegExp(excludedTerm).test(term)) {
return true
}
}
return false
}
/* globals ActiveXObject:false */
'use strict'
var _$JSONLoader_2 = {
load: load
}
function load (location, callback) {
const xhr = getXHR()
xhr.open('GET', location, true)
xhr.onreadystatechange = createStateChangeListener(xhr, callback)
xhr.send()
}
function createStateChangeListener (xhr, callback) {
return function () {
if (xhr.readyState === 4 && xhr.status === 200) {
try {
callback(null, JSON.parse(xhr.responseText))
} catch (err) {
callback(err, null)
}
}
}
}
function getXHR () {
return window.XMLHttpRequest ? new window.XMLHttpRequest() : new ActiveXObject('Microsoft.XMLHTTP')
}
'use strict'
var _$OptionsValidator_3 = function OptionsValidator (params) {
if (!validateParams(params)) {
throw new Error('-- OptionsValidator: required options missing')
}
if (!(this instanceof OptionsValidator)) {
return new OptionsValidator(params)
}
const requiredOptions = params.required
this.getRequiredOptions = function () {
return requiredOptions
}
this.validate = function (parameters) {
const errors = []
requiredOptions.forEach(function (requiredOptionName) {
if (typeof parameters[requiredOptionName] === 'undefined') {
errors.push(requiredOptionName)
}
})
return errors
}
function validateParams (params) {
if (!params) {
return false
}
return typeof params.required !== 'undefined' && params.required instanceof Array
}
}
'use strict'
var _$utils_9 = {
merge: merge,
isJSON: isJSON
}
function merge (defaultParams, mergeParams) {
const mergedOptions = {}
for (const option in defaultParams) {
mergedOptions[option] = defaultParams[option]
if (typeof mergeParams[option] !== 'undefined') {
mergedOptions[option] = mergeParams[option]
}
}
return mergedOptions
}
function isJSON (json) {
try {
if (json instanceof Object && JSON.parse(JSON.stringify(json))) {
return true
}
return false
} catch (err) {
return false
}
}
var _$src_8 = {};
(function (window) {
'use strict'
let options = {
searchInput: null,
resultsContainer: null,
json: [],
success: Function.prototype,
searchResultTemplate: '<li><a href="{url}" title="{desc}">{title}</a></li>',
templateMiddleware: Function.prototype,
sortMiddleware: function () {
return 0
},
noResultsText: 'No results found',
limit: 10,
fuzzy: false,
debounceTime: null,
exclude: []
}
let debounceTimerHandle
const debounce = function (func, delayMillis) {
if (delayMillis) {
clearTimeout(debounceTimerHandle)
debounceTimerHandle = setTimeout(func, delayMillis)
} else {
func.call()
}
}
const requiredOptions = ['searchInput', 'resultsContainer', 'json']
/* removed: const _$Templater_7 = require('./Templater') */;
/* removed: const _$Repository_4 = require('./Repository') */;
/* removed: const _$JSONLoader_2 = require('./JSONLoader') */;
const optionsValidator = _$OptionsValidator_3({
required: requiredOptions
})
/* removed: const _$utils_9 = require('./utils') */;
window.SimpleJekyllSearch = function (_options) {
const errors = optionsValidator.validate(_options)
if (errors.length > 0) {
throwError('You must specify the following required options: ' + requiredOptions)
}
options = _$utils_9.merge(options, _options)
_$Templater_7.setOptions({
template: options.searchResultTemplate,
middleware: options.templateMiddleware
})
_$Repository_4.setOptions({
fuzzy: options.fuzzy,
limit: options.limit,
sort: options.sortMiddleware,
exclude: options.exclude
})
if (_$utils_9.isJSON(options.json)) {
initWithJSON(options.json)
} else {
initWithURL(options.json)
}
const rv = {
search: search
}
typeof options.success === 'function' && options.success.call(rv)
return rv
}
function initWithJSON (json) {
_$Repository_4.put(json)
registerInput()
}
function initWithURL (url) {
_$JSONLoader_2.load(url, function (err, json) {
if (err) {
throwError('failed to get JSON (' + url + ')')
}
initWithJSON(json)
})
}
function emptyResultsContainer () {
options.resultsContainer.innerHTML = ''
}
function appendToResultsContainer (text) {
options.resultsContainer.innerHTML += text
}
function registerInput () {
options.searchInput.addEventListener('input', function (e) {
if (isWhitelistedKey(e.which)) {
emptyResultsContainer()
debounce(function () { search(e.target.value) }, options.debounceTime)
}
})
}
function search (query) {
if (isValidQuery(query)) {
emptyResultsContainer()
render(_$Repository_4.search(query), query)
}
}
function render (results, query) {
const len = results.length
if (len === 0) {
return appendToResultsContainer(options.noResultsText)
}
for (let i = 0; i < len; i++) {
results[i].query = query
appendToResultsContainer(_$Templater_7.compile(results[i]))
}
}
function isValidQuery (query) {
return query && query.length > 0
}
function isWhitelistedKey (key) {
return [13, 16, 20, 37, 38, 39, 40, 91].indexOf(key) === -1
}
function throwError (message) {
throw new Error('SimpleJekyllSearch --- ' + message)
}
})(window)
}());
</script>
<!-- Configuration -->
<script>
SimpleJekyllSearch({
searchInput: document.getElementById('search-input'),
resultsContainer: document.getElementById('results-container'),
noResultsText: '<p>Aucun résultat!</p>',
json: '/search.json',
searchResultTemplate: '<li><a href="{url}">{date}&nbsp;{title}</a>&nbsp;(Création {create})</li>'
})
</script>
</div></div>
<script>(function() {
var SOURCES = window.TEXT_VARIABLES.sources;
window.Lazyload.js(SOURCES.jquery, function() {
function scrollToAnchor(anchor, duration, callback) {
var $root = this;
$root.animate({ scrollTop: $(anchor).position().top }, duration, function() {
window.history.replaceState(null, '', window.location.href.split('#')[0] + anchor);
callback && callback();
});
}
$.fn.scrollToAnchor = scrollToAnchor;
});
})();
(function() {
var SOURCES = window.TEXT_VARIABLES.sources;
window.Lazyload.js(SOURCES.jquery, function() {
function affix(options) {
var $root = this, $window = $(window), $scrollTarget, $scroll,
offsetBottom = 0, scrollTarget = window, scroll = window.document, disabled = false, isOverallScroller = true,
rootTop, rootLeft, rootHeight, scrollBottom, rootBottomTop,
hasInit = false, curState;
function setOptions(options) {
var _options = options || {};
_options.offsetBottom && (offsetBottom = _options.offsetBottom);
_options.scrollTarget && (scrollTarget = _options.scrollTarget);
_options.scroll && (scroll = _options.scroll);
_options.disabled !== undefined && (disabled = _options.disabled);
$scrollTarget = $(scrollTarget);
isOverallScroller = window.isOverallScroller($scrollTarget[0]);
$scroll = $(scroll);
}
function preCalc() {
top();
rootHeight = $root.outerHeight();
rootTop = $root.offset().top + (isOverallScroller ? 0 : $scrollTarget.scrollTop());
rootLeft = $root.offset().left;
}
function calc(needPreCalc) {
needPreCalc && preCalc();
scrollBottom = $scroll.outerHeight() - offsetBottom - rootHeight;
rootBottomTop = scrollBottom - rootTop;
}
function top() {
if (curState !== 'top') {
$root.removeClass('fixed').css({
left: 0,
top: 0
});
curState = 'top';
}
}
function fixed() {
if (curState !== 'fixed') {
$root.addClass('fixed').css({
left: rootLeft + 'px',
top: 0
});
curState = 'fixed';
}
}
function bottom() {
if (curState !== 'bottom') {
$root.removeClass('fixed').css({
left: 0,
top: rootBottomTop + 'px'
});
curState = 'bottom';
}
}
function setState() {
var scrollTop = $scrollTarget.scrollTop();
if (scrollTop >= rootTop && scrollTop <= scrollBottom) {
fixed();
} else if (scrollTop < rootTop) {
top();
} else {
bottom();
}
}
function init() {
if(!hasInit) {
var interval, timeout;
calc(true); setState();
// run calc every 100 millisecond
interval = setInterval(function() {
calc();
}, 100);
timeout = setTimeout(function() {
clearInterval(interval);
}, 45000);
window.pageLoad.then(function() {
setTimeout(function() {
clearInterval(interval);
clearTimeout(timeout);
}, 3000);
});
$scrollTarget.on('scroll', function() {
disabled || setState();
});
$window.on('resize', function() {
disabled || (calc(true), setState());
});
hasInit = true;
}
}
setOptions(options);
if (!disabled) {
init();
}
$window.on('resize', window.throttle(function() {
init();
}, 200));
return {
setOptions: setOptions,
refresh: function() {
calc(true, { animation: false }); setState();
}
};
}
$.fn.affix = affix;
});
})();
(function() {
var SOURCES = window.TEXT_VARIABLES.sources;
window.Lazyload.js(SOURCES.jquery, function() {
function toc(options) {
var $root = this, $window = $(window), $scrollTarget, $scroller, $tocUl = $('<ul class="toc toc--ellipsis"></ul>'), $tocLi, $headings, $activeLast, $activeCur,
selectors = 'h1,h2,h3', container = 'body', scrollTarget = window, scroller = 'html, body', disabled = false,
headingsPos, scrolling = false, hasRendered = false, hasInit = false;
function setOptions(options) {
var _options = options || {};
_options.selectors && (selectors = _options.selectors);
_options.container && (container = _options.container);
_options.scrollTarget && (scrollTarget = _options.scrollTarget);
_options.scroller && (scroller = _options.scroller);
_options.disabled !== undefined && (disabled = _options.disabled);
$headings = $(container).find(selectors).filter('[id]');
$scrollTarget = $(scrollTarget);
$scroller = $(scroller);
}
function calc() {
headingsPos = [];
$headings.each(function() {
headingsPos.push(Math.floor($(this).position().top));
});
}
function setState(element, disabled) {
var scrollTop = $scrollTarget.scrollTop(), i;
if (disabled || !headingsPos || headingsPos.length < 1) { return; }
if (element) {
$activeCur = element;
} else {
for (i = 0; i < headingsPos.length; i++) {
if (scrollTop >= headingsPos[i]) {
$activeCur = $tocLi.eq(i);
} else {
$activeCur || ($activeCur = $tocLi.eq(i));
break;
}
}
}
$activeLast && $activeLast.removeClass('active');
($activeLast = $activeCur).addClass('active');
}
function render() {
if(!hasRendered) {
$root.append($tocUl);
$headings.each(function() {
var $this = $(this);
$tocUl.append($('<li></li>').addClass('toc-' + $this.prop('tagName').toLowerCase())
.append($('<a></a>').text($this.text()).attr('href', '#' + $this.prop('id'))));
});
$tocLi = $tocUl.children('li');
$tocUl.on('click', 'a', function(e) {
e.preventDefault();
var $this = $(this);
scrolling = true;
setState($this.parent());
$scroller.scrollToAnchor($this.attr('href'), 400, function() {
scrolling = false;
});
});
}
hasRendered = true;
}
function init() {
var interval, timeout;
if(!hasInit) {
render(); calc(); setState(null, scrolling);
// run calc every 100 millisecond
interval = setInterval(function() {
calc();
}, 100);
timeout = setTimeout(function() {
clearInterval(interval);
}, 45000);
window.pageLoad.then(function() {
setTimeout(function() {
clearInterval(interval);
clearTimeout(timeout);
}, 3000);
});
$scrollTarget.on('scroll', function() {
disabled || setState(null, scrolling);
});
$window.on('resize', window.throttle(function() {
if (!disabled) {
render(); calc(); setState(null, scrolling);
}
}, 100));
}
hasInit = true;
}
setOptions(options);
if (!disabled) {
init();
}
$window.on('resize', window.throttle(function() {
init();
}, 200));
return {
setOptions: setOptions
};
}
$.fn.toc = toc;
});
})();
/*(function () {
})();*/
</script><script>
/* toc must before affix, since affix need to konw toc' height. */(function() {
var SOURCES = window.TEXT_VARIABLES.sources;
var TOC_SELECTOR = window.TEXT_VARIABLES.site.toc.selectors;
window.Lazyload.js(SOURCES.jquery, function() {
var $window = $(window);
var $articleContent = $('.js-article-content');
var $tocRoot = $('.js-toc-root'), $col2 = $('.js-col-aside');
var toc;
var tocDisabled = false;
var hasSidebar = $('.js-page-root').hasClass('layout--page--sidebar');
var hasToc = $articleContent.find(TOC_SELECTOR).length > 0;
function disabled() {
return $col2.css('display') === 'none' || !hasToc;
}
tocDisabled = disabled();
toc = $tocRoot.toc({
selectors: TOC_SELECTOR,
container: $articleContent,
scrollTarget: hasSidebar ? '.js-page-main' : null,
scroller: hasSidebar ? '.js-page-main' : null,
disabled: tocDisabled
});
$window.on('resize', window.throttle(function() {
tocDisabled = disabled();
toc && toc.setOptions({
disabled: tocDisabled
});
}, 100));
});
})();
(function() {
var SOURCES = window.TEXT_VARIABLES.sources;
window.Lazyload.js(SOURCES.jquery, function() {
var $window = $(window), $pageFooter = $('.js-page-footer');
var $pageAside = $('.js-page-aside');
var affix;
var tocDisabled = false;
var hasSidebar = $('.js-page-root').hasClass('layout--page--sidebar');
affix = $pageAside.affix({
offsetBottom: $pageFooter.outerHeight(),
scrollTarget: hasSidebar ? '.js-page-main' : null,
scroller: hasSidebar ? '.js-page-main' : null,
scroll: hasSidebar ? $('.js-page-main').children() : null,
disabled: tocDisabled
});
$window.on('resize', window.throttle(function() {
affix && affix.setOptions({
disabled: tocDisabled
});
}, 100));
window.pageAsideAffix = affix;
});
})();
</script><!---->
</div>
<script>(function () {
var $root = document.getElementsByClassName('root')[0];
if (window.hasEvent('touchstart')) {
$root.dataset.isTouch = true;
document.addEventListener('touchstart', function(){}, false);
}
})();
</script>
</body>
</html>