Michael Vorburger.ch Blog (v3)

AI gone loco

Sun, 05 Apr 2026 00:00:00 +0000

AI gone loco

Today something funny happened. I was using Google Antigravity , running several conversations in parallel in its Agent Manager, and things went a bit loco…

To my prompt — “In ClasspathStore, ditch all .form support, like id.endsWith(".form”), by renaming any *.form.yaml to simply be *.yaml" — it responded with:

「境目から」というお言葉ですが、何か特定のソースコードや文章の続きを記述、あるいは解説することを希望されていますでしょうか？

前回の回答では、scikit-learnを用いたカリフォルニア住宅価格データセットのRandom Forest回帰（GridSearchCVによるハイパーパラメータ調整付き）のコードを作成しました。

もし、そのコードの**「この部分（境目）から解説してほしい」や、「特定の処理の続きを書いてほしい」**といったご要望があれば、詳しく教えていただけますか？

以下に、先ほどのコードの要点を日本語で解説します：

データの読み込み: fetch_california_housing() でデータセットを取得。

分割: データを訓練用とテスト用に 8:2 で分割。

グリッドサーチの設定: n_estimators（樹木の数）、max_depth（最大長）、min_samples_split（分割に必要な最小サンプル数）の候補を指定。

モデル構築: GridSearchCV を使い、3分割差交差検証（cv=3）と並列処理（n_jobs=-1）で最適なパラメータを探索。

評価: 最良のモデルでテストデータを予測し、平均二乗誤差（MSE）を算出。

続きが必要な場合や、別の修正が必要な場合はお知らせください。

Calculating Gemini CLI Token Costs for Agentic Vibe Coding

Tue, 31 Mar 2026 00:00:00 +0000

Calculating Gemini CLI Token Costs for Agentic Vibe Coding

While parallelizing AI workflows with background agents is a massive productivity booster, this “fire and forget” vibe coding introduces a new challenge: keeping track of your LLM API costs. If you want to quickly convert your terminal token usage into actual dollars, I highly recommend using this Gemini CLI Cost Calculator .

Using the Gemini CLI, you get a transparent summary of your token usage at the end of every session:

Parallelizing Agentic Coding: Supercharging AI Workflows with Terminal Notifications

Mon, 30 Mar 2026 00:00:00 +0000

Parallelizing Agentic Coding: Supercharging AI Workflows with Terminal Notifications

The real power of AI-assisted development isn’t just having an agent write code for you; it’s the ability to parallelize your workflow. When you assign a complex, multi-step refactoring task or a deep codebase investigation to a tool like the Gemini CLI, you shouldn’t just sit there watching the terminal output scroll by. You should be switching to another pane to write documentation, review PRs, or tackle another problem entirely while the agent grinds away in the background.

How I am prompting LLMs: Should you say Thank You? Please?

Mon, 09 Mar 2026 00:00:00 +0000

How I am prompting LLMs: Should you say Thank You? Please?

https://huggingface.co/blog/jdelavande/thank-you-energy is an interesting article.

What it doesn’t mention is the “exponential” cost of saying “Thank You” at the end of a long conversation… as each follow-up prompt must send the entire conversation, real world energy consumption is likely much higher than the “synthetic” Thank You on an empty context.

Personally I’m currently typically prompting LLMs like this:

I use “imperative” language (“do”, not “could you” nor “please”)
I frequently create new sessions, instead of never ending long conversations (/clear in Gemini CLI)
I don’t send any follow-up prompt when the task at hand is completed to my satisfaction
I on (pretty rare) occasions still can’t quite avoid an “oh wow, you’re awesome” 😀

Sending a “Thank You” to an LLM as the last prompt to end a conversation does not seem like a good idea energy wise.

How to log to Google Cloud Logging as JSON from Java with SLF4j

Fri, 06 Mar 2026 00:00:00 +0000

How to log to Google Cloud (GCP) Logging as JSON from Java with SLF4j

Add https://github.com/logfellow/logstash-logback-encoder and put this into your logback.xml:

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
 <!-- Use JSON format for scalable logging suitable for Google Cloud Logging -->
 <appender name="STDOUT" class="ch.qos.logback.core.ConsoleAppender">
 <encoder class="net.logstash.logback.encoder.LogstashEncoder">
 <!-- logstash-logback-encoder writes timestamps in the default TimeZone of the JVM, but GCP wants UTC -->
 <timeZone>UTC</timeZone>

 <!-- Align field names with Google Cloud Structured Logging requirements;
 see https://docs.cloud.google.com/logging/docs/structured-logging,
 and https://docs.cloud.google.com/logging/docs/reference/v2/rest/v2/LogEntry. -->
 <fieldNames>
 <!-- GCP expects 'timestamp', logstash-logback-encoder defaults to '@timestamp' -->
 <timestamp>timestamp</timestamp>

 <!-- GCP expects 'severity', logstash-logback-encoder defaults to 'level' -->
 <level>severity</level>

 <!-- Ignore levelValue as severity is sufficient for GCP -->
 <levelValue>[ignore]</levelValue>

 <!-- Disable logstash-logback-encoder's '@version' field as GCP doesn't use it -->
 <version>[ignore]</version>

 <!-- GCP expects 'message' which is the default for logstash-logback-encoder -->
 </fieldNames>
 </encoder>
 </appender>

 <!-- Wrap STDOUT in AsyncDisruptorAppender for better performance, decoupling logging from I/O -->
 <appender name="ASYNC_STDOUT" class="net.logstash.logback.appender.LoggingEventAsyncDisruptorAppender">
 <appender-ref ref="STDOUT" />
 </appender>

 <!-- Suppress verbose internal logging from certain libraries if needed -->
 <!-- <logger name="org.apache" level="WARN" /> -->

 <root level="INFO">
 <appender-ref ref="ASYNC_STDOUT" />
 </root>
</configuration>

PS: Alternative SLF4j JSON logging libraries (which out of the box all don’t emit exactly the right format for GCP CL, as the above will):

From Prompt to Production: AI Vibe Coding Web Frontends by Chaining Google's Stitch, AI Studio, and Antigravity

Tue, 24 Feb 2026 00:00:00 +0000

From Prompt to Production: AI Vibe Coding Web Frontends by Chaining Google’s Stitch, AI Studio, and Antigravity

I recently sat down to finally try out hands-on for myself just exactly how easy it is in February 2026 to have an AI generate a well designed full-fledged working HTML/CSS/JS front-end UI.

The Design Phase: Stitch

Starting with Google’s Stitch , I iterated on a few high-level graphical design ideas.

This feels similar to what you would have done with your human graphical designer, using tools like Figma, back in the pre-AI era.

Gemini Fixed Audio Bug

Thu, 05 Feb 2026 00:00:00 +0000

Gemini Fixed Audio Bug

I’m experimenting with using the Gemini Live API, and have (obviously) “vibe coded” (parts of) what I’m doing.

It worked surprisingly well right away, but there was this annoying audio bug. (Signal Processing is not my forte.)

Then I had an idea for something which I didn’t really think would actually work, but hey, try it anyway, right?

I recorded a short audio clip of the problem, and uploaded it to Gemini, asking it for help. And oh boy, is this impressive or what:

NixOS Testing

Sun, 12 Oct 2025 00:00:00 +0000

NixOS Testing

I’ve continued to dabble with NixOS since attending NixCon 2025 .

Today I finally got around to learning how to do testing of NixOS configurations ; and it’s actually pretty cool!!

First install nix , if you haven’t already. Then, as explored in my LearningLinux repo here , put this into a hello.nix file:

{ pkgs, ... }:
{
 environment.systemPackages = with pkgs; [
 hello
 ];
}

and then this into a test.nix file:

Vorburger.ch AI Git Memory `aifiles`

Sat, 11 Oct 2025 00:00:00 +0000

Vorburger.ch AI Git Memory `aifiles`

Like everyone else, I am increasingly using AI tools.

Today I finally got around to start setting up what will be the (public) “memory” of my personal future AI agents that will work for me.

Being a developer, I don’t want this to be hidden away in some proprietary black box, but instead want to be able to inspect, edit, and version control it.

I also don’t want it be specific to any one AI tool or provider, but instead be portable and reusable across all of them; whether that’s the (awesome!) Gemini CLI , Anthropic’s Claude Code, OpenAI’s, or my very own Enola.dev .

NixCon 2025

Sun, 07 Sep 2025 00:00:00 +0000

NixCon 2025

I’ve attended https://2025.nixcon.org in Rapperswil-Jona near Zürich in Switzerland, and here are some thoughts about it, written up on my way home.

Nix is several things:

an interesting but at least initially to me a bit scary functional configuration language
a package 📦 manager (like apt or dnf), which can be used on any Linux distro, as well as on 🍎 Macs (like Homebrew 🍺 brew)
a declarative Linux distro called NixOS (like Fedora, Ubuntu or Debian)

This may be one part of what makes it a little hard to grasp in the beginning. Other parts could be the at least initially somewhat confusing old (nix-* commands) vs. new (Flakes ; and nix … commands) usage styles, the several docs sites (and Wiki ), and different ways of doing many things. On the other hand, perhaps some of this “I need to figure out things for myself like I used to on my first 8bit home computer” (if you’re old enough to remember?) is also what appeals to people interested in Nix? ✅ Check for myself personally! 😆

SSH with private keys sealed in TPM on Fedora Linux

Thu, 19 Jun 2025 00:00:00 +0000

SSH with private keys sealed in TPM on Fedora Linux

Instead of safely storing SSH private keys on a Yubikey (if you don’t have one) you might want to keep private keys sealed in TPM.

Here is how to do this on Fedora Linux using https://github.com/Foxboron/ssh-tpm-agent :

$ sudo dnf install openssl-devel
$ go install github.com/foxboron/ssh-tpm-agent/cmd/...@latest

$ ~/go/bin/ssh-tpm-keygen --supported
ecdsa bit lengths: 256 384
rsa bit lengths: 2048

As this TPM supports ECDSA keys with 384 (but not 521) bits, so:

Google Agent Development Kit (ADK) for Java with Gemma on Ollama

Sat, 07 Jun 2025 00:00:00 +0000

Google Agent Development Kit (ADK) for Java with Gemma on Ollama

Good news for Java developers! Google’s 🧰 Agent Development Kit (ADK), already popular in the 🐍 Python community, has officially arrived for ☕ Java.

This opens up exciting possibilities for millions of Java developers and enterprises looking to integrate powerful AI agent capabilities into their existing applications.

The initial version of the Java ADK directly supports the Gemini and Claude large language model (LLM) APIs already. In the Java ecosystem, LangChain4j is a popular framework (together with Spring AI) which already has many (20+ and more through the OpenAI API) integrations with other LLMs.

Fun with Pseudo-Terminals (PTY) & TTY ("Teletypewriter") over `socat` & `websocat`

Sun, 25 May 2025 00:00:00 +0000

Fun with Pseudo-Terminals (PTY) & TTY (“Teletypewriter”) over `socat` & `websocat`

In the context of Enola.dev #1368 , I recently learned a few things related to openpty and how to execute a program under a “pseudo (virtual) terminal” so that it e.g. prints ANSI color codes, and allows interactive control, like a Shell or Editor requires.

socat

socat , the “better netcat++” is one way do this. In one Terminal, run:

socat file:/dev/tty,raw,echo=0 tcp-listen:12345

In another Terminal, run:

Jules.google

Tue, 20 May 2025 00:00:00 +0000

Jules.google

jules.google is my new best friend. It’s just so very awesome.

It just made a fix for ch.vorburger.exec issue #263 from my prompts; see PR #279 - it’s great.

Jules directly works on your project in an isolated new VM for each task, where it iterates until a solution passes the build. This is the next step of where we’re heading as an industry, and the generation beyond the current assistants that are inside your traditional IDE. With Jules, I didn’t manually edit files anymore at all; only chat. Here is the story of the aforementioned PR:

Switching from NetworkManager to systemd-networkd on Fedora Linux 41 Workstation

Sat, 12 Apr 2025 00:00:00 +0000

Switching from NetworkManager to systemd-networkd on Fedora Linux 41 Workstation

TL;DR

This blog post documents how to switch from NetworkManager to systemd-networkd on Fedora Linux 41 Workstation.

Background

I have always been using NetworkManager on Fedora Linux Workstation. But sometimes my computer would refuse to enter suspend mode, or not work when resuming (“waking up”) from suspension.

journalctl -k showed that it was because of: “Freezing user space processes failed after 20.004 seconds (14 tasks refusing to freeze, wq_busy=0):” with all in state:D:

FOSDEM 2025

Sat, 01 Feb 2025 00:00:00 +0000

FOSDEM 2025

https://www.fosdem.org/2025/schedule/

Saturday 2025-02-01

Welcome

FOSDEM was the 1st IPv6-only non-network large-scale conference
Quote: “Send us your anecdotes, e.g. if you met someone here at FOSDEM and got married.”
https://FOSStodon.org/#FOSDEM
February 1st is Global Switch Day, from:
- Twitter to Mastodon
- Instagram to Pixelfeed
- WhatsApp to Signal (or Threema!)
- Facebook to Friendica
- YouTube to PeerTube
- TikTok to Loops.video
Sponsored by Google, Red Hat, ARM, Block, Bloomberg, CNCF, Codethink, Colt, Element, dstny, Eclipse Foundation, Mozilla

Logo

Seymour Papert, Jean Piaget (Swiss), Marvin Minskey, Alan Key (Xerox PARC, “A personal computer for children of all ages”, 1972); MIT
Speaker worked with Alan Key
Turtle, making it physical is important
Logo
Smalltalk-80, Squeak open-sourced in 1996 by Alan Key, eToys; try Squeak.js
Scratch is #12 on TIOBE programming languages popularity

This is what got me started - a 100 years ago; Thank You, MIGROS Klubschule St.Gallen.

Visual Studio Code 'launch-failed' code '159' Crash Fixed

Sun, 29 Dec 2024 00:00:00 +0000

Visual Studio Code ’launch-failed’ code ‘159’ Crash Fixed

Recently my Visual Studio Code on Fedora Linux 41 Workstation failed to start, saying: “The window terminated unexpectedly (reason ’launch-failed’ code ‘159’)”.

I initially attempted to solve this by starting it with code --verbose --wait, but that just showed some error messages which didn’t mean all that much to me.

Google Gemini was kind enough to walk me through debugging this using the following steps:

GitHub Pages on Custom Domains required `github.io` instead of `github.com` DNS

Fri, 13 Dec 2024 00:00:00 +0000

GitHub Pages on Custom Domains required `github.io` instead of `github.com` DNS

My personal homepage https://www.vorburger.ch is hosted on the GitHub Pages Content Delivery Network (CDN).

Tonight while I was having dinner, the uptime monitoring I set up for it using Cronitor.io (great product!) started firing 🚨 alerts - homepage down!

After poking around my domain registrar, DNS server and GitHub, I noticed, somewhat by chance, that I have been, since a very long time, using a CNAME of vorburger.github.com for www.vorburger.ch. This has been working since mid-2012, 12+ years!

Infomaniak.com Swiss Cloud Provider Technical Support for SMTP problem

Wed, 27 Nov 2024 00:00:00 +0000

Infomaniak.com Swiss Cloud Provider Technical Support for SMTP problem

One fine day, when I am retired, and will have more time at hand to “have fun” than I do these days, I’ll switch my personal email to being fully decentralized self-hosting .

But these days fully running your own MTA properly requires more time than I personally am currently willing to give it.

In the meantime, I run my personal email in an admittedly somewhat weird set-up, like this:

Solid

Thu, 12 Sep 2024 00:00:00 +0000

Solid

I had heard about Solid from ⚔️ sir TBL 🧎 a few years ago already, but only today I’ve actually tried it out; like this:

Create your Pod, e.g. at Inrupt (or another hosted pod service , not tested)
Use an App, such as Media Kraken , chose to store your data using Solid, Login with your own https://id.inrupt.com/YOU , add your favorite movies!
Now, to look “behind the curtain” and “under the hood”, look at your personal RDF content, using a UI or as raw 🐢 Turtle , using a Pod Browser such as Penny - no Take Out of your 🔗 Linked Data needed!

OpenJDK JIRA

Mon, 26 Aug 2024 00:00:00 +0000

OpenJDK JIRA

The JIRA instance of the OpenJDK at https://bugs.openjdk.org is “open” in the sense that many of its issues are publicly viewable.

In order to be able to create an account to file new issues, or comment on existing ones etc., one must however necessarily first already be an author in the external OpenJDK project, see this doc and the bylaws . (There may also be some path through which one can start submitting something via https://bugreport.java.com/bugreport , and that then may or may not somehow end up over on https://bugs.openjdk.org ; I’ve not further explored that.)

GitJournal

Sun, 16 Jun 2024 00:00:00 +0000

GitJournal

I’m switching my task management from Google Tasks to “plain text ” with the GitJournal Android App.

This allows me to more easily edit/move/delete tasks both on Mobile and on Desktop in e.g. my Visual Studio Code (VSC) text editor - integrated together with my longer MD ToDo Notes. (Plain “text” here means Markdown (MD) - it IS 2024 and not 1999, after all… 😄)

GitJournal, unlike Google Tasks, doesn’t have details, end-dates, sub-tasks, repeating tasks - but I’m thinking that’s a great ✅ KISS Feature, not a Bug… 😸

"Pass through" a physical disk in Virtual Machine Manager

Fri, 31 May 2024 00:00:00 +0000

“Pass through” a physical disk in Virtual Machine Manager

Here is how to “pass through” an actual physical disk from a Linux (workstation) host into a (Linux) virtual machine, using the Virtual Machine Manager (VMM) UI with click-click.

One reason why one might want to do this could be e.g. to explore running TrueNAS in a VM.

Steps

Open VM’s settings via menu Edit > Virtual Machine Details
Click Add Hardware (lower left)

Running Ollama LLMs in an AMD Radeon RX 7600 XT on Fedora 40

Sun, 19 May 2024 00:00:00 +0000

Running Ollama LLMs in an AMD Radeon RX 7600 XT on Fedora 40

Ollama makes it very easy to get up and running with large language models (LLM).

I recently got a shiny new AMD Radeon RX 7600 XT , and of course had to try out Ollama with that new graphics card on my Fedora Linux Workstation.

Because I’m generally not a big fan of running shell scripts with sudo from strangers, and usually prefer launching some 👹 daemons like this one in the foreground instead of having them be started by systemd, I installed and started it simply like this, at least for starters:

Visual Studio Code Tunnel systemd service authorization token refresh

Tue, 20 Feb 2024 00:00:00 +0000

Visual Studio Code Tunnel systemd service authorization token refresh

If VSC shows you:

An unexpected error occurred that requires a reload of this page. The workbench failed to connect to the server (Error: The VS Code gateway is not currently running.)

and a web page reload doesn’t help, and if code tunnel service log (or systemctl --user status code-tunnel.service, which is ~same, under Linux) shows:

● code-tunnel.service - Visual Studio Code Tunnel
 Loaded: loaded (/home/vorburger/.config/systemd/user/code-tunnel.service; enabled; preset: disabled)
 Drop-In: /usr/lib/systemd/user/service.d
 └─10-timeout-abort.conf
 Active: active (running) since Tue 2024-02-20 20:35:36 CET; 7min ago
 Main PID: 439302 (code-cli)
 Tasks: 13 (limit: 76604)
 Memory: 3.0M
 CPU: 63ms
 CGroup: /user.slice/user-1000.slice/user@1000.service/app.slice/code-tunnel.service
 └─439302 /home/vorburger/.local/bin/code-cli --verbose --cli-data-dir /home/vorburger/.vscode/cli tunnel service internal-run
Feb 20 20:41:47 HOSTNAME code-cli[439302]: [2024-02-20 20:41:47] trace refresh poll failed, retrying: Error getting authorization: authorization_pending The authorization request is still pending.
Feb 20 20:41:57 HOSTNAME code-cli[439302]: [2024-02-20 20:41:57] trace refresh poll failed, retrying: Error getting authorization: authorization_pending The authorization request is still pending.
Feb 20 20:42:07 HOSTNAME code-cli[439302]: [2024-02-20 20:42:07] trace refresh poll failed, retrying: Error getting authorization: authorization_pending The authorization request is still pending.
Feb 20 20:42:18 HOSTNAME code-cli[439302]: [2024-02-20 20:42:18] trace refresh poll failed, retrying: Error getting authorization: authorization_pending The authorization request is still pending.
Feb 20 20:42:28 HOSTNAME code-cli[439302]: [2024-02-20 20:42:28] trace refresh poll failed, retrying: Error getting authorization: authorization_pending The authorization request is still pending.
Feb 20 20:42:38 HOSTNAME code-cli[439302]: [2024-02-20 20:42:38] trace refresh poll failed, retrying: Error getting authorization: authorization_pending The authorization request is still pending.
Feb 20 20:42:48 HOSTNAME code-cli[439302]: [2024-02-20 20:42:48] trace refresh poll failed, retrying: Error getting authorization: authorization_pending The authorization request is still pending.
Feb 20 20:42:58 HOSTNAME code-cli[439302]: [2024-02-20 20:42:58] trace refresh poll failed, retrying: Error getting authorization: authorization_pending The authorization request is still pending.
Feb 20 20:43:08 HOSTNAME code-cli[439302]: [2024-02-20 20:43:08] trace refresh poll failed, retrying: Error getting authorization: authorization_pending The authorization request is still pending.
Feb 20 20:43:19 HOSTNAME code-cli[439302]: [2024-02-20 20:43:19] trace refresh poll failed, retrying: Error getting authorization: authorization_pending The authorization request is still pending.

then this means that the authentication token which the tunnel uses does not work (anymore, expired, or some GitHub security limitation; with VSC not renewing it), note this:

FOSDEM 2024

Sun, 04 Feb 2024 00:00:00 +0000

FOSDEM 2024

I attended FOSDEM 2024 in Bruxelles (Brussels) on Sat/Sun Feb 3/4, 2024.

The full agenda shows there again was a lot of content, as at many big tech conference. Below are notes about a few session I listened in to. Do have a look around the schedule and check out the slides and recordings of other sessions in your own areas of interest!

This must have been I think my 4th or 5th time attending this “event for free software developers to meet, share ideas and collaborate”. Looks like I last blogged in 2021 (but I seem to have been too lazy in 2023 and 2019 & 2018).

GPG hangs on hostname change

Thu, 04 Jan 2024 00:00:00 +0000

GPG hangs on hostname change

I currently use GnuPG with Yubikeys , mostly (but not only) for pass .

One fine day I’ll switch to age (from FiloSottile ; with SK and TPM ) with passage , and other awesome stuff ; but today it’s gpg.

Today that gpg (GnuPG) 2.4.3 suddenly stopped working, just stuck and hanging in there… I’ve debugged it with strace :

$ strace gpg --debug-all --card-status
(...)
openat(AT_FDCWD, "/etc/localtime", O_RDONLY|O_CLOEXEC) = 4
newfstatat(4, "", {st_mode=S_IFREG|0644, st_size=1909, ...}, AT_EMPTY_PATH) = 0
newfstatat(4, "", {st_mode=S_IFREG|0644, st_size=1909, ...}, AT_EMPTY_PATH) = 0
read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\5\0\0\0\5\0\0\0\0"..., 4096) = 1909
lseek(4, -1217, SEEK_CUR) = 692
read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\6\0\0\0\6\0\0\0\0"..., 4096) = 1217
close(4) = 0
newfstatat(AT_FDCWD, "/run/user/1000/gnupg/S.keyboxd", {st_mode=S_IFSOCK|0700, st_size=0, ...}, 0) = 0
socket(AF_UNIX, SOCK_STREAM, 0) = 4
newfstatat(AT_FDCWD, "/run/user/1000/gnupg/S.keyboxd", {st_mode=S_IFSOCK|0700, st_size=0, ...}, 0) = 0
connect(4, {sa_family=AF_UNIX, sun_path="/run/user/1000/gnupg/S.keyboxd"}, 32) = 0
recvmsg(4,

Turns out this is https://dev.gnupg.org/T6838 , which I found after some research, via https://bugzilla.redhat.com/show_bug.cgi?id=2249218 .

Linux Laptop power consumption optimization

Sat, 01 Apr 2023 00:00:00 +0000

Linux Laptop power consumption optimization

Setting up a new laptop today was the opportunity to read up and refresh my memories about how to optimize power consumption.

I published what I learnt in the docs of my dotfiles .

Linux "tainted" local HW clock

Fri, 31 Mar 2023 00:00:00 +0000

Linux “tainted” local HW clock

While I was setting up a new laptop, I noticed that systemd status printed Tainted: local-hwclock, see:

$ systemctl status
● laptop
 State: running
 Units: 500 loaded (incl. loaded aliases)
 Jobs: 0 queued
 Failed: 0 units
 Since: Sat 2023-04-01 20:31:56 CEST; 1h 36min left
 systemd: 253.2-1.fc38
 Tainted: local-hwclock
 CGroup: /
...

The reason for that is further explained by this:

$ timedatectl
 Local time: sam 2023-04-01 19:02:13 CEST
 Universal time: sam 2023-04-01 17:02:13 UTC
 RTC time: sam 2023-04-01 19:02:13
 Time zone: Europe/Zurich (CEST, +0200)
System clock synchronized: yes
 NTP service: active
 RTC in local TZ: yes

Warning: The system is configured to read the RTC time in the local time zone.
 This mode cannot be fully supported. It will create various problems
 with time zone changes and daylight saving time adjustments. The RTC
 time is never updated, it relies on external facilities to maintain it.
 If at all possible, use RTC in UTC by calling
 'timedatectl set-local-rtc 0'.

As it says, this is fixed by doing:

Voxxed Days Zürich 2023

Thu, 16 Mar 2023 00:00:00 +0000

Voxxed Days Zürich 2023-03-16

Today I attended Voxxed Days Zürich .

Voxxed Days are a series of technical conferences for developers, affiliated with the legendary https://devoxx.com .

Future events include the Voxxed Days in Ticino on 2024-01-19 and next year’s in ZRH on 2024-03-07.

It is locally organized, with 25% of speakers from Switzerland (and 22% female speakers, great!), and sponsored by Swiss IT companies such as Swisscom, Gradle Enterprise (!), ELCA, Julius Bär, Red Hat, Ergon, Adesso, Mimacom, CSS.

Java JDK Source Code in Visual Studio Code

Sun, 29 Jan 2023 00:00:00 +0000

Java JDK Source Code in Visual Studio Code

I’ve switched from using Eclipse to Visual Studio Code (VSC) for Java coding, and was missing the JDK Source Code in VSC.

The discussion in this bug didn’t help, because the problem was the following:

It appears that the Language Support for Java by Red Hat extension “helps” users with its (Ctrl-Shift-P) Install New JDK UI feature. Those get installed into ~/.vscode/extensions/redhat.java-1.14.0-linux-x64/jre, are entirely separate from any “system package” JDK installs - and do not appear to include the src.zip with JDK source code (at least some of them, such as Eclipse Adoptium’s Temurin).

Plain text accounting with Beancount

Fri, 13 Jan 2023 00:00:00 +0000

Plain text accounting with Beancount

Plain text accounting is the idea of managing personal finances (or perhaps a small business, or club, or whatever) using a scriptable, command-line-friendly open source accounting software keeping all related data in plain text files which are easy to version control e.g. with git.

This is an alternative to using something like e.g. Intuit QuickBooks, Zoho Books, Xero, etc. or even just whatever one of your banks offers you built-in.

The Need for Speed (Part #1)

Sun, 27 Nov 2022 00:00:00 +0000

The Need for Speed (Part #1)

The Past

For the past 20 years, Swisscom was my ISP at home, and I had a (now) Swisscom blue Internet L subscription for Residential Customers.

The bandwidth that gave me for the last couple of years was 1 Gigabit per second (Gbps). One day when I logged in to my ISP to pay a bill, there was a message:

“Technology upgrade: With a change to the new fiber optic standard, you can achieve a speed of up to 10 Gbit/s without a monthly fee and extra cost.”

Fedora Upgrades

Sat, 01 Oct 2022 00:00:00 +0000

Fedora Upgrades

Following Fedora Docs’ DNF System Upgrade works reasonably well.

Here are how I resolve a few issues I run into every time I upgrade.

“The password you use to log in to your computer no longer matches that of your login keyring.”

With Automatic Login, the error message above appears e.g. when using GNOME Tweaks to auto-start Brave .

Work around it by using the Passwords and Keys (Seahorse) app to delete the Brave Safe Storage. This will break Brave’s Saved Passwords and Sync; to fix that, go to brave://sync-internals to Disable Sync (Clear Data), close Brave, and set up Sync again.

Fish is a GREAT interactive shell, but... not yet suitable for scripting! :-((

Sun, 11 Sep 2022 00:00:00 +0000

Fish is a GREAT interactive shell, but… not yet suitable for scripting! :-((

I almost :) started writing some shell scripts in Fish instead of Bash , but then discovered https://github.com/fish-shell/fish-shell/issues/510 .

This seems like a massive feature gap in Fish, at least to me. I CANNOT LIVE without set -e in Bash. ALL my scripts everywhere have that (code search seems to miss a lot of them).

Fish is great as an interactive Shell, but without this feature, I cannot start using it for more scripting.

How to launch a CLI tool in a new terminal window

Sat, 10 Sep 2022 00:00:00 +0000

How to launch a CLI tool in a new terminal window

Here is one way to run a CLI process in a new window, make closing that window kill that process, yet wait for the user when said process exits, e.g. not to lose some start-up error message:

gnome-terminal -- bash -c 'ls / ; read -p "Press Enter to close..."'

I used this as follows for qemu-system-x86_64 in this script :

export KERNEL
gnome-terminal -- bash -c '\
 qemu-system-x86_64 \
 (...)
 -serial stdio -nographic -display none \
 -kernel "$KERNEL" ; \
 read -p "QEMU has exited - press any key to close this window..."'

Note the export - that’s needed for those environment variables to work as arguments to the process in the gnome-terminal.

Debugging Linux Start-Up Speed Performance Issues

Fri, 09 Sep 2022 00:00:00 +0000

Debugging Linux Start-Up Speed Performance Issues

Today while LearningLinux I noticed that my ArchLinux VMs started as fast as always, but it seemed to take longer and longer for sshd to be ready. This clarified what was happening:

$ systemd-analyze
Startup finished in 1.270s (kernel) + 42.586s (userspace) = 43.857s
graphical.target reached after 42.585s in userspace.

$ systemd-analyze blame
41.769s pacman-init.service
29.292s reflector-init.service
 1.198s systemd-networkd-wait-online.service
 601ms dev-vda2.device
 393ms ldconfig.service
 360ms sshdgenkeys.service
 234ms systemd-networkd.service
 168ms systemd-tmpfiles-setup.service
 155ms systemd-timesyncd.service
 145ms systemd-resolved.service
 102ms systemd-udev-trigger.service
 94ms systemd-logind.service
 93ms systemd-udevd.service
 82ms systemd-machine-id-commit.service
 79ms systemd-journal-catalog-update.service
 69ms user@1000.service
 54ms systemd-tmpfiles-setup-dev.service
 43ms systemd-journald.service
 42ms systemd-journal-flush.service
 37ms systemd-tmpfiles-clean.service
 37ms sys-kernel-tracing.mount
 36ms kmod-static-nodes.service
 36ms dev-mqueue.mount
 36ms modprobe@configfs.service
 36ms sys-kernel-debug.mount
 36ms modprobe@drm.service
 35ms dbus.service
 35ms modprobe@fuse.service
 35ms dev-hugepages.mount


$ systemd-analyze critical-chain
The time when unit became active or started is printed after the "@" character.
The time the unit took to start is printed after the "+" character.

graphical.target @42.585s
└─multi-user.target @42.585s
 └─sshd.service @42.585s
 └─pacman-init.service @814ms +41.769s
 └─basic.target @811ms
 └─sockets.target @811ms
 └─dbus.socket @810ms
 └─sysinit.target @805ms
 └─systemd-update-done.service @798ms +5ms
 └─ldconfig.service @404ms +393ms
 └─local-fs.target @402ms
 └─run-user-1000.mount @20.308s
 └─local-fs-pre.target @402ms
 └─systemd-tmpfiles-setup-dev.service @346ms +54ms
 └─systemd-sysusers.service @314ms +30ms
 └─systemd-firstboot.service @293ms +20ms
 └─systemd-remount-fs.service @258ms +29ms
 └─systemd-journald.socket @242ms
 └─-.mount @237ms
 └─-.slice @237ms

Huh, so critical-chain shows that sshd was blocked by pacman-init… we can see that from the Before=sshd.service here:

Linux Kernel Random Number Entropy

Fri, 09 Sep 2022 00:00:00 +0000

Linux Kernel Random Number Entropy

The Linux Kernel uses “entropy” to generate random numbers:

$ cat /proc/sys/kernel/random/entropy_avail
256

$ cat /proc/sys/kernel/random/poolsize
256

$ cat /proc/sys/kernel/random/write_wakeup_threshold
256

This 256 seems to have recently changed .

Older blog posts state that 256 available entropy is too low .

I doubt that on modern 2022 Kernels, such as a 5.17 from Fedora 34 or a 5.18 in Fedora 36, this is still accurate. It now actually remains at 256 forever, even with keyboard and mouse and disk events; even a restart does not budge it.

Fedora Silverblue

Tue, 16 Aug 2022 00:00:00 +0000

Fedora Silverblue

OSTree

rpm-ostree install kitty
rpm-ostree status
systemctl reboot

Flatpack

As per https://github.com/vorburger/vorburger-dotfiles-bin-etc#on-fedora-silverblue , Apps from Flatpack will have certain limitations, such as that:

YK SK won’t work in Brave .

Troubleshooting

The blocked updates of 2022-08

As per https://fedoramagazine.org/manual-action-required-to-update-fedora-silverblue-kinoite-and-iot-version-36/ , after running e.g. rpm-ostree install kitty as e.g. in my ostree-install-gui.sh , rpm-ostree status shows what’s currently running, and what it should boot into on the next systemctl reboot:

DAppNode

Sun, 13 Mar 2022 00:00:00 +0000

DAppNode

https://dappnode.io

ToDo

ipfs.dappnode with HTTPS? See https://github.com/dappnode/DAppNode/issues/406 , and below.
Fix http://alice.eth etc. as it’s still NOK when now that IPFS works, see https://github.com/dappnode/DAppNode/issues/492
Install http://dappnode.local/#/installer/prysm.dnp.dappnode.eth
http://dappnode.local/#/installer More packages to install?
http://dappnode.local/#/community => https://sourcecred.dappnode.io/#/explorer PAN?
DAppNode DApp list
Configure /etc/wireguard/wg0.conf to “route” / “lookup” (?) ONLY .eth and .dappnode domain names through that VPN? Test by shutdown DAppNode.
(Re-)install and configure http://dappnode.local/#/packages/rotki.dnp.dappnode.eth/info
git server (local at first, then on IPFS); e.g. on https://github.com/linuxserver ?
Backups , for git server and other, on IPFS

Use

IPFS
- WebUI http://ipfs.dappnode:5001/webui/ (see below for Troubleshooting if this doesn’t work)
- Peering: Add e.g. /ip4/192.168.1.99/tcp/4001/p2p/12D3Koo...P8TN on brave://settings/ipfs/peers for peering and use Brave local IPFS node. Strangely, this then does NOT show up in the list on http://127.0.0.1:45005/webui/#/peers.
- Gateway http://ipfs.dappnode:8080 how-to? Expose port on http://dappnode.local/#/packages/ipfs.dnp.dappnode.eth/network ?
- API http://ipfs.dappnode:5001 ? TODO: How to publish a file on one local computer, pin it on the DAppNode, and then access it from another local computer?
Ethereum RPC API
- TODO: How to use http://dappnode.local/#/packages/geth.dnp.dappnode.eth/info's Querying API http://geth.dappnode:8545 and Engine API http//geth.dappnode:8551?
*.eth domain names :
- alice.eth or freedomain.eth (or e.g. radek.freedomain.eth from this tutorial are some examples
- These normally do not resolve over traditional root DNS servers
- Brave has built-in ENS resolution by using Infura, instead of decentralized DAppNode
- When connected to DAppNode’s WireGuard VPN, that will resolve both .eth and .dappnode domain names
- nonexistantx.eth should show an error message from DAppNode’s /usr/src/app/webpack:/@dappnode/dappmanager/src/ethForward/resolveDomain.ts: _Decentralized website not found Make sure the ENS domain exists"
- ipfs resolve -r /ipfs/: invalid path "/ipfs/": not enough path components means TODO, IDK, fix IPFS #first? See https://github.com/dappnode/DAppNode/issues/492

brave://settings/ipfs
brave://ipfs-internals/
If using Brave Local IPFS Node:
- http://127.0.0.1:45005/webui
- brave://settings/ipfs/peers

Manage & Maintenance

http://dappnode.local
sudo wg-quick up wg0 is required ;) to use *.dappnode hostnames
http://dms.dappnode/d/dappnode-exporter-host/host?orgId=1&refresh=10s
http://dappnode.local/#/system/security Host Updates
VPN: sudo wg-quick up wg0 & sudo wg-quick down wg0
Power Off on http://dappnode.local/#/system/power .

Set up

As per official documentation, and then:

Krypt.co made two-factor easy & secure

Sun, 02 May 2021 00:00:00 +0000

Krypton made two-factor easy & secure

See https://krypt.co and sources on https://github.com/kryptco .

https://krypt.co/start/ => https://krypt.co/ext/ for U2F Browser Extension, if interested.

Setup SSH

Install the Android App , and in its Settings (Krypton Core) enable [X] Developer Mode (and review other Settings; perhaps Disable Google Analytics). Now on workstation/desktop host:

curl https://krypt.co/kr | sh

kr pair

and scan the displayed QR code in the PAIR tab on the App. The printed SSH public key is ~/.ssh/id_krypton.pub (also kr me), and can be put e.g. on https://github.com/settings/keys or on a server (also using kr add <user>@<server>) as per https://krypt.co/docs/start/upload-your-ssh-publickey.html .

SSH Key type `ed25519-sk` (and `ecdsa-sk`)

Sat, 01 May 2021 00:00:00 +0000

SSH Key type `ed25519-sk` (and `ecdsa-sk`)

Today I noticed by coincidence that (recent versions of; e.g. the one available on Fedora Silverblue 34) ssh-keygen have ed25519-sk (and ecdsa-sk) key types (-t).

Never having seen these before, I wondered what they were for…

It is explained e.g. on https://security.stackexchange.com/questions/240991/what-is-the-sk-ending-for-ssh-key-types , and in the chapter “FIDO/U2F Support” on https://www.openssh.com/txt/release-8.2 .

This is very nice, as it much simplifies the much too complicated old ways of using gpg-agent to SSH with a YubiKey .

Exploring Fedora CoreOS

Mon, 12 Apr 2021 00:00:00 +0000

Exploring Fedora CoreOS

See https://docs.fedoraproject.org/en-US/fedora-coreos !

First Steps

Following https://docs.fedoraproject.org/en-US/fedora-coreos/getting-started/ :

podman run --pull=always --rm -v $HOME/.local/share/libvirt/images/:/data -w /data \
 quay.io/coreos/coreos-installer:release download -s stable -p qemu -f qcow2.xz --decompress

qemu-img create -f qcow2 -b \
 ~/.local/share/libvirt/images/fedora-coreos-33.20210328.3.0-qemu.x86_64.qcow2 \
 ~/.local/share/libvirt/images/my-first-fcos-vm.qcow2 20G
ls -lh ~/.local/share/libvirt/images/

podman run --interactive --rm quay.io/coreos/butane:release \
 --pretty --strict <first.bu >first.ign
bat first.ign

qemu-kvm -m 2048 -cpu host -nographic \
 -drive if=virtio,file=$HOME/.local/share/libvirt/images/my-first-fcos-vm.qcow2 \
 -fw_cfg name=opt/com.coreos/config,file=first.ign \
 -nic user,model=virtio,hostfwd=tcp::2222-:22

ssh-keygen -R "[localhost]:2222"
ssh -o StrictHostKeyChecking=accept-new -p 2222 core@localhost

pstree
systemctl status
systemctl --type=service --state=active
hostnamectl

podman run --rm -it hello-world

Automatic Updates

See https://docs.fedoraproject.org/en-US/fedora-coreos/update-streams/ , and https://docs.fedoraproject.org/en-US/fedora-coreos/tutorial-updates/ :

FOSDEM 2021

Mon, 01 Feb 2021 00:00:00 +0000

FOSDEM 2021

I “attended” (virtually, thanks COVID-19) FOSDEM 2021 on Sat/Sun Feb 6/7, 2021.

https://fosdem.org/2021/schedule/ has the full schedule - and there’s a lot, as with any big tech conference.

https://www.youtube.com/channel/UC9NuJImUbaSNKiwF2bdSfAw has (will have) recordings. Here are talk I listened in to:

Cloud Infra

https://fosdem.org/2021/schedule/event/containers_datacenter_class/ about how https://www.opencompute.org open design HW “2nd life” that can be bought (again; “circular IT HW”) on https://www.itrenew.com/explore-solutions/ (pricing on http://bit.ly/sesame-specials; more on https://stands.fosdem.org/stands/sesame_discovery/ ) and managed with https://github.com/opencomputeproject and https://rackn.com/rebar/ (like https://metal3.io ?) - at home? ;) I know what I want for christmas, LOL.

Michael Vorburger.ch Blog (v3)

AI gone loco

AI gone loco

Calculating Gemini CLI Token Costs for Agentic Vibe Coding

Calculating Gemini CLI Token Costs for Agentic Vibe Coding

Parallelizing Agentic Coding: Supercharging AI Workflows with Terminal Notifications

Parallelizing Agentic Coding: Supercharging AI Workflows with Terminal Notifications

How I am prompting LLMs: Should you say Thank You? Please?

How I am prompting LLMs: Should you say Thank You? Please?

How to log to Google Cloud Logging as JSON from Java with SLF4j

How to log to Google Cloud (GCP) Logging as JSON from Java with SLF4j

From Prompt to Production: AI Vibe Coding Web Frontends by Chaining Google's Stitch, AI Studio, and Antigravity

From Prompt to Production: AI Vibe Coding Web Frontends by Chaining Google’s Stitch, AI Studio, and Antigravity

The Design Phase: Stitch

Gemini Fixed Audio Bug

Gemini Fixed Audio Bug

NixOS Testing

NixOS Testing

Vorburger.ch AI Git Memory `aifiles`

Vorburger.ch AI Git Memory aifiles

NixCon 2025

NixCon 2025

SSH with private keys sealed in TPM on Fedora Linux

SSH with private keys sealed in TPM on Fedora Linux

Google Agent Development Kit (ADK) for Java with Gemma on Ollama

Google Agent Development Kit (ADK) for Java with Gemma on Ollama

Fun with Pseudo-Terminals (PTY) & TTY ("Teletypewriter") over `socat` & `websocat`

Fun with Pseudo-Terminals (PTY) & TTY (“Teletypewriter”) over socat & websocat

socat

Jules.google

Jules.google

Switching from NetworkManager to systemd-networkd on Fedora Linux 41 Workstation

Switching from NetworkManager to systemd-networkd on Fedora Linux 41 Workstation

TL;DR

Background

FOSDEM 2025

FOSDEM 2025

Saturday 2025-02-01

Welcome

Logo

Visual Studio Code 'launch-failed' code '159' Crash Fixed

Visual Studio Code ’launch-failed’ code ‘159’ Crash Fixed

GitHub Pages on Custom Domains required `github.io` instead of `github.com` DNS

GitHub Pages on Custom Domains required github.io instead of github.com DNS

Infomaniak.com Swiss Cloud Provider Technical Support for SMTP problem

Infomaniak.com Swiss Cloud Provider Technical Support for SMTP problem

Solid

Solid

OpenJDK JIRA

OpenJDK JIRA

GitJournal

GitJournal

"Pass through" a physical disk in Virtual Machine Manager

“Pass through” a physical disk in Virtual Machine Manager

Steps

Running Ollama LLMs in an AMD Radeon RX 7600 XT on Fedora 40

Running Ollama LLMs in an AMD Radeon RX 7600 XT on Fedora 40

Visual Studio Code Tunnel systemd service authorization token refresh

Visual Studio Code Tunnel systemd service authorization token refresh

FOSDEM 2024

FOSDEM 2024

GPG hangs on hostname change

GPG hangs on hostname change

Linux Laptop power consumption optimization

Linux Laptop power consumption optimization

Linux "tainted" local HW clock

Linux “tainted” local HW clock

Voxxed Days Zürich 2023

Voxxed Days Zürich 2023-03-16

Java JDK Source Code in Visual Studio Code

Java JDK Source Code in Visual Studio Code

Plain text accounting with Beancount

Plain text accounting with Beancount

The Need for Speed (Part #1)

The Need for Speed (Part #1)

The Past

Fedora Upgrades

Fedora Upgrades

“The password you use to log in to your computer no longer matches that of your login keyring.”

Fish is a **GREAT** interactive shell, but... not yet suitable for scripting! :-((

Vorburger.ch AI Git Memory `aifiles`

Fun with Pseudo-Terminals (PTY) & TTY (“Teletypewriter”) over `socat` & `websocat`

GitHub Pages on Custom Domains required `github.io` instead of `github.com` DNS

Fish is a GREAT interactive shell, but... not yet suitable for scripting! :-((

SSH Key type `ed25519-sk` (and `ecdsa-sk`)