welcome to the single unified handbook... monorepo for the win

2021-05-16 12:54:15 -05:00
parent 82701c1249
commit e6549eccbe
96 changed files with 5971 additions and 0 deletions
--- a/src/CIO/Systems/Admin-RandD/EngWorkstationBuildGuide.md
+++ b/src/CIO/Systems/Admin-RandD/EngWorkstationBuildGuide.md
@@ -0,0 +1,451 @@
+# TSYS Group - IT Documentation - R&D - Workstation Build Guide
+
+- [TSYS Group - IT Documentation - R&D - Workstation Build Guide](#tsys-group---it-documentation---rd---workstation-build-guide)
+  - [Introduction](#introduction)
+  - [Workstation details - RPI4 8Gb](#workstation-details---rpi4-8gb)
+    - [Out of box tweaks and basic setup](#out-of-box-tweaks-and-basic-setup)
+    - [Virtual Workspace Details](#virtual-workspace-details)
+    - [Non mainline software](#non-mainline-software)
+      - [Nodejs](#nodejs)
+      - [Rust](#rust)
+      - [go](#go)
+      - [mdbook](#mdbook)
+      - [Recoll (local search)](#recoll-local-search)
+      - [Bitwarden CLI](#bitwarden-cli)
+      - [Krita](#krita)
+      - [Docker](#docker)
+      - [RedNotebook (install from source, it just runs in place)](#rednotebook-install-from-source-it-just-runs-in-place)
+      - [OpenWebRx](#openwebrx)
+      - [csv2md](#csv2md)
+      - [helm](#helm)
+      - [kubectl / k3s](#kubectl--k3s)
+      - [docker](#docker-1)
+      - [docker-compose](#docker-compose)
+      - [metasploit](#metasploit)
+      - [scap workbench](#scap-workbench)
+      - [Bitscope](#bitscope)
+      - [docker based dev environment/pipeline](#docker-based-dev-environmentpipeline)
+      - [Misc items to setup/breakout into own section](#misc-items-to-setupbreakout-into-own-section)
+    - [Mainline Packages to install](#mainline-packages-to-install)
+      - [All the packages](#all-the-packages)
+      - [General packages for the modern knowledge worker who is tech/security savvy](#general-packages-for-the-modern-knowledge-worker-who-is-techsecurity-savvy)
+      - [R&d/creative workstation packages](#rdcreative-workstation-packages)
+      - [Full text search packages](#full-text-search-packages)
+      - [Document production packages](#document-production-packages)
+    - [chrome setup](#chrome-setup)
+    - [passwords/bitwarden](#passwordsbitwarden)
+    - [web apps](#web-apps)
+    - [zsh](#zsh)
+    - [konsole setup](#konsole-setup)
+    - [xfce tweaks](#xfce-tweaks)
+    - [bluetooth issues](#bluetooth-issues)
+    - [More advanced customization and configuration required](#more-advanced-customization-and-configuration-required)
+      - [VsCode](#vscode)
+    - [CTO Stuff](#cto-stuff)
+  - [Workstation details - x86-64 vm](#workstation-details---x86-64-vm)
+  - [Workstation details - iPAD](#workstation-details---ipad)
+
+## Introduction
+
+In 01/2021 , Charles purchased a Raspberry Pi 4 as his daily driver with the intent of evaluating it for use as the standard issue equipment for TSYS personnel. This document is the results of his experiments with it from 01/2021 to (as of time of writing) June 2021. The RPi4 has been approved as the standard/supported workstation for TSYS across all teams/products.
+
+Charles is the founder, CEO and acting CTO/CIO of TSYS Group. In his role, he does everything from business ops, to system administration to software/hardware engineering tasks. As such he was best positioned to evaluate the rPI for all workloads.
+
+The software mentioned in this document is a long list, reflecting the myriad of tasks/projects Charles may engage with on a daily basis.  Most likely, you'll only need a subset of these tools, don't despair! Feel free to install all of them or a subset as you wish.
+
+We hope this document is useful to everyone at TSYS who wants to maximize their productivity. TSYS fully supports Debian/Ubuntu GNU Linux for workstation use, both on rPI4 and x86 virtual/physical systems. We do occasionally test Mac OSX and Windows 10, but they aren't officially supported.  Ou experiments and daily use show that 85% or more of TSYS daily driver/workstation use (email/coding/research/browsing/document creation/discord/media editing/etc) can be done on an rPI4. The gaps (if any) can be done via an RDP session to an x86 vm for the few things that have x86 dependencies or need 64bit os (64bit on pi isn't yet fully ready in our opinion as of June 2021).
+
+## Workstation details - RPI4 8Gb
+
+- Operating System: RaspberryPi Os
+- Hardware:
+  - Raspberry Pi 4 with 8gb RAM
+  - Accessories :
+    - Case : Argone One case <https://www.argon40.com/argon-one-m-2-case-for-raspberry-pi-4.html>
+    - Monitors: Dual Dell 24" monitors (IPS) <https://www.dell.com/support/home/en-us/product-support/product/dell-st2421l/overview>0
+    - Chair: Ikea MARKUS Office Chair: <https://www.ikea.com/us/en/p/markus-office-chair-vissle-dark-gray-90289172/>
+    - Keyboard: Matias Backlight Keyboard <https://www.matias.ca/aluminum/backlit/>
+    - Mouse: Apple Magic Mouse 2 Black
+    - Tablet: iPad Mini 5th Gen (see iPAD section for more)
+    - Headphones: JBL Over Ear (<https://www.jbl.com.au/TUNE750BTNC.html>)
+    - Tp-link 7 port USB 3.0 Powered Hub (for plugging in thumb drives, data acquisition devices / other random usb bits) <https://www.tp-link.com/us/home-networking/usb-hub/uh700/>
+    - IOGear card reader <https://www.iogear.com/product/GFR281/>
+    - Security Dongle: Yubikey 4 OTP+U2F+CCID
+
+
+| Program              | Used By            | Link                                                                     | Product Scope                                     |
+| -------------------- | ------------------ | ------------------------------------------------------------------------ | ------------------------------------------------- |
+
+### Out of box tweaks and basic setup
+
+1) Put Rasberry Pi 4 into Argone One Case (running it without case will cause it to overheat quickly)
+2) Flash latest stable Raspbian 32bit to SD card and boot pi
+3) connect usb keyboard and mouse
+4) Run through first boot setup wizard
+5) Setup pin+yubi long string for password for the pi user
+6) Connect to wifi
+5) Pair and trust Matias Backlight Keyboard
+6) Pair and trust Apple Magic Mouse
+7) fix date/time via ntpdate (ntpdate 10.251.37.5)
+8) apt-get update ; apt-get -y full-upgrade
+9) add vi mode to /etc/profile (heathens by default!)
+10) clone dotfiles repo
+11) enable i2c access via raspi-config
+12) setup fan daemon <https://gitlab.com/DarkElvenAngel/argononed.git>
+15) (coming soon) run curl htp://dl.turnsys.net/buildFullWorkstation.sh
+
+### Virtual Workspace Details
+
+- Desktop 1: Browsing/Editing/Shell (chrome / VsCode / Konsole / Remmina )
+- Desktop 2: Comms (discourse/discord/irc etc/thunderbird/mutt)
+- Desktop 3: Long Running: (calibre/recol/etc)
+
+### Non mainline software
+
+Repositories to add and things that aren't deployed with apt-get.
+
+#### Nodejs
+
+```console
+curl -sL https://deb.nodesource.com/setup_15.x | sudo -E bash -
+curl -sL https://dl.yarnpkg.com/debian/pubkey.gpg | gpg --dearmor | sudo tee /usr/share/keyrings/yarnkey.gpg >/dev/null
+echo "deb [signed-by=/usr/share/keyrings/yarnkey.gpg] https://dl.yarnpkg.com/debian stable main" | sudo tee /etc/apt/sources.list.d/yarn.list
+sud apt-get -y install nodejs
+sudo apt-get update && sudo apt-get install yarn
+```
+
+#### Rust
+
+```console
+curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
+```
+
+#### go
+
+<https://pimylifeup.com/raspberry-pi-golang/>
+
+#### mdbook
+
+```console
+cargo install mdbook
+```
+
+#### Recoll (local search)
+
+```console
+cat recoll-rbuster.list 
+deb [signed-by=/usr/share/keyrings/lesbonscomptes.gpg] http://www.lesbonscomptes.com/recoll/raspbian/ buster main
+deb-src [signed-by=/usr/share/keyrings/lesbonscomptes.gpg] http://www.lesbonscomptes.com/recoll/raspbian/ buster main
+```
+
+#### Bitwarden CLI
+
+```console
+sudo npm install -g @bitwarden/cli
+```
+
+#### Krita
+
+```console
+sudo flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo
+sudo flatpak -y install flathub org.kde.krita
+```
+
+#### Docker
+
+```console
+ curl -sSL https://get.docker.com | sh
+```
+
+#### RedNotebook (install from source, it just runs in place)
+
+<https://rednotebook.sourceforge.io/downloads.html>
+<https://www.linuxlinks.com/raspberry-pi-4-chronicling-desktop-experience-dear-diary/>
+
+#### OpenWebRx
+
+wget -O - <https://repo.openwebrx.de/debian/key.gpg.txt> | apt-key add
+echo "deb <https://repo.openwebrx.de/debian/> buster main" > /etc/apt/sources.list.d/openwebrx.list
+apt-get update
+apt-get install openwebrx
+
+#### csv2md
+
+```console
+npm install -g csv2md
+```
+
+#### helm
+
+```console
+sudo snap install helm --classic
+```
+
+#### kubectl / k3s
+
+```console
+    curl -sfL https://get.k3s.io | sh -
+```
+
+#### docker
+
+```console
+curl -sSL https://get.docker.com | sh
+```
+
+#### docker-compose
+
+#### metasploit
+
+```console
+git clone https://github.com/rapid7/metasploit-framework.git
+cd metasploit-framework
+sudo gem install wirble sqlite3 bundler nokogiri bundle
+bundle install
+```
+
+#### scap workbench
+
+Follow the readme
+
+#### Bitscope
+
+```console
+wget http://bitscope.com/download/files/bitscope-dso_2.8.FE22H_armhf.deb
+wget http://bitscope.com/download/files/bitscope-logic_1.2.FC20C_armhf.deb
+wget http://bitscope.com/download/files/bitscope-meter_2.0.FK22G_armhf.deb
+wget http://bitscope.com/download/files/bitscope-chart_2.0.FK22M_armhf.deb
+wget http://bitscope.com/download/files/bitscope-proto_0.9.FG13B_armhf.deb
+wget http://bitscope.com/download/files/bitscope-console_1.0.FK29A_armhf.deb
+wget http://bitscope.com/download/files/bitscope-display_1.0.EC17A_armhf.deb
+wget http://bitscope.com/download/files/bitscope-server_1.0.FK26A_armhf.deb
+
+sudo dpkg -i *.deb
+sudo apt-get -y -f install
+
+```
+
+#### docker based dev environment/pipeline
+
+Todo
+
+- local k3s (for gitops testing)
+- (container) local docker reg
+- (container) local jenkins
+
+#### Misc items to setup/breakout into own section
+
+Todo
+
+- Make magic mouse 2 scrolling work on pi
+- activitywatch
+- switch mail from (just) thunderbird to thunderbird/(neo)mutt/notmuch/task warrior
+- TurboVNC (3d accelerated) on rpi as client
+- kleopatra
+  - yubikey ssh key
+  - yubikey gpg key
+- xca (build from source)
+- Select an Investigative notebook
+  - <https://github.com/kpcyrd/sn0int>
+  - <https://www.spiderfoot.net/>
+  - <https://github.com/smicallef/spiderfoot?ref=d>
+  - modelio <https://www.modelio.org/>
+  - <https://gephi.org/>
+- Research source material organization
+  - zotero
+  - docear <https://opensource.com/life/16/8/organize-your-scholarly-research-docear>
+- Get photo processing workflow setup
+  - currently exploring kphotoablbum  
+  - Browser based Sharing / browsing via Photoprism (or perhaps piwgio ultimately, with photoprism as part of a processing work flow)?
+  - need something to sync to "cloud" with auto capture from phone
+  - reference material:
+    - <https://photoprism.app/>
+    - <https://kn100.me/declouding-replacing-google-photos-part-1/>
+    - <https://willem.com/blog/2020-08-31_free-from-the-icloud-escaping-apple-photos/>
+
+### Mainline Packages to install
+
+First run apt-get update to ensure you are using packages from the above repositories and not the stock packages. Do any needed gpg key imports.
+
+#### All the packages
+
+```console
+apt-get -y install \
+kicad librecad freecad gimp blender shellcheck \
+ruby-full offlineimap zsh vim thunderbird enigmail \
+kleopatra zsh-autosuggestions zsh-syntax-highlighting screen \
+mtr rpi-imager cifs-utils grass cubicsdr arduino jupyter-notebook \
+dia basket vym code wings3d flatpak wireguard gnuplot \
+pandoc python3-blockdiag  texlive-fonts-extra \
+spice-client-gtk spice-html5 virt-viewer gnome-system-monitor \
+glances htop dstat apt-file kleopatra konsole telnet \
+ripgrep recoll poppler-utils  abiword wv antiword  unrtf  \
+libimage-exiftool-perl xsltproc davmail kphotoalbum opensc \
+yubikey-manager yubikey-personalization yubikey-personalization-gui \
+openshot kdenlive pitivi inkscape scribus scdaemon seafile-gui qgis \
+octave nodejs gpx2shp libreoffice calligra netbeans sigrok \
+nodejs audacity wireshark nmap tcpdump zenmap etherape ghostscript \
+geda ngspice graphicsmagick codeblocks scilab calibre paraview \
+gnuradio build-essential libimobiledevice-utils libimobiledevice-dev \
+libgpod-dev python3-numpy python3-pandas python3-matplotlib \
+curl git make binutils bison gcc build-essential openjdk-11-jre-headless \
+debootstrap cutecom minicom ser2net conman xsane gocr  tesseract-ocr \
+fonts-powerline build-essential zlib1g zlib1g-dev libxml2 libxml2-dev \
+libxslt-dev locate libreadline6-dev libcurl4-openssl-dev git-core libssl-dev \
+libyaml-dev openssl autoconf libtool ncurses-dev bison curl wget postgresql \
+postgresql-contrib libpq-dev libapr1 libaprutil1 libsvn1 libpcap-dev ruby-dev \
+openvas git-core postgresql curl nmap gem libsqlite3-dev cmake ninja-build libopenscap-dev \
+qt5-default libqt5widgets5 libqt5widgets5 libqwt-headers libqt5xmlpatterns5-dev asciidoc \
+lmms virt-manager gqrx-sdr multimon-ng rtl-sdr fldigi grads cdo zygrib zygrib-maps \
+openwebrx xscreensaver
+```
+
+#### General packages for the modern knowledge worker who is tech/security savvy
+
+```console
+apt-get -y install \
+ruby-full offlineimap zsh vim thunderbird kleopatra zsh-autosuggestions \
+zsh-syntax-highlighting screen mtr rpi-imager cifs-utils dia basket \
+vym davmail kphotoalbum libreoffice calligra\
+enigmail opensc scdaemon nodejs calibre wireguardi \
+libimobiledevice-utils libimobiledevice-dev libgpod-dev \
+yubikey-manager yubikey-personalization yubikey-personalization-gui 
+```
+
+#### R&d/creative workstation packages
+
+```console
+apt-get -y install \
+kicad librecad freecad qgis audacity gpsbabel arduino \
+sigrok netbeans scilab blender gimp grass \
+openshot kdenlive pitivi inkscape scribus build-essential \
+geda ngspice gnuradio cubicsdr flatpak\
+shellcheck code codeblocks scilab paraview wings3d \
+python3-numpy python3-pandas python3-matplotlib \
+jupyter-notebook
+```
+
+#### Full text search packages
+
+```console
+apt-get -y install \
+ripgrep recoll poppler-utils  abiword wv antiword  \
+unrtf libimage-exiftool-perl xsltproc  
+```
+
+#### Document production packages
+
+```console
+apt-get -y install \
+pandoc python3-blockdiag  texlive-fonts-extra 
+```
+
+### chrome setup
+
+1) launch chrome
+2) change language to english
+3) enable dark mode (<https://www.pocket-lint.com/apps/news/google/149866-how-to-enable-dark-mode-for-google-chrome>)
+4) login to pwvault.turnsys.com and obtain google account creds
+5) login to google account and enable sync
+6) (optional at this time) setup any extension configuration needed that results from logging in to google account/turning on sync
+7) ensure the following extensions are installed:
+   1) vimium
+   2) bitwarden
+   3) pushover
+
+### passwords/bitwarden
+
+1) disable chrome password saving/autofill (actually this is done via settings sync by google login) (so only need to set it if not already set in your settings)
+2) set bitwarden extension to use pwvault.turnsys.com
+3) login to bitwarden via extension
+4) set vault to not lock ever (balance security/convenience (with locked workstation and using pin+yubi to unlock workstation)
+5) set match selection to host
+6) set auto fill on page load
+
+### web apps
+
+1) login to discord.com
+2) login to office.com
+
+### zsh
+
+- Use oh-my-zsh
+- Use powerlevel10k
+
+### konsole setup
+
+- settings -> edit current profile ->
+  - apperance (set to dark pastels)
+  - font (set to noto mono)
+  - mouse  
+    - copy/paste
+      - copy on select
+      - paste from clipboard (default is paste from selection)
+      - un-set copy text as html
+
+- settings - configure shortcuts
+  - next tab ctrl+tab
+  - previous ctrl+shift+tab
+
+### xfce tweaks
+
+- Set focus follows mouse (settings/window manager/focus)
+- (dark mode)? (only works for gtk apps)
+- need to set other apps individually to dark mode
+
+### bluetooth issues
+
+run rpi-update or the keyboard will repeat (key stick) frequently
+
+### More advanced customization and configuration required
+
+#### VsCode
+
+fenix appears to include it in the default image, but it doesn't launch from the menu and shell says code not found. Search for code and it will pull up an entry with VsCode logo labeled as Text Editor. Use that.
+
+to see how I set it up VsCode for a myriad of tasks, see the VsCode guide for tsys at:
+
+<https://git.turnsys.com/TSGTechops/docs-techops/src/branch/master/src/Systems/Admin-RandD/TSYS-DevEnv-VsCode.md>
+
+### CTO Stuff
+
+- openwrt
+- openmct
+- raspi
+- arduino
+- freedombox
+- serval
+- genode
+- jupyter
+
+## Workstation details - x86-64 vm
+
+- Operating System: Ubuntu Server 20.04 with xfce/xrdp
+- Hardware: KVM 4gb ram
+- Applications (limited, things that don't (easily) run on the rpi):
+  - mbed studio
+  - eclipse
+  - android studio
+  - dbeaver
+  - postman
+  - sweethome3d
+
+## Workstation details - iPAD
+
+- Operating System: iPAD OS
+- Hardware: iPAD Mini 5th Generation
+- Accessories:
+  - Lightining to USB3
+  - Lightining to HDMI
+  - I use same KB/Mouse that I do with the rPI
+- Key Applications
+  - Working Copy
+  - Buffer Text Editor
+  - Blink.sh
+  - Jump remote Desktop
+  - GitJournal
+  - Microsoft Todo
+  - Neat
+  - Discourse
+  - FreeScout
+  - ErpNext