Jim Flattery jflattery

GalliumOS on Edgar

This document sets out how I installed GalliumOS 2.1 on a new Acer Chromebook 14" (CB3-431) 'Edgar' in April 2017. I installed GalliumOS on the internal eMMC storage, but left Chrome OS in place (allowing dual-booting).

It is meant to be an easy-to-follow and particularly thorough (if repetitive) guide, but I make no warranty that it will work correctly for you. It will wipe all data on your Edgar.

I have tried to provide references for each section; see the GalliumOS wiki guide to chrx installation for an overview of the general process.

⚠ Caution: There have been reports of Edgars' speakers overheating, due to a malfunction of the audio hardware, when booted into anything other than Chrome OS. I have not experienced this, and it seems to be believed that this will not now occur under GalliumOS. More information can be found in the comments for the [GalliumOS Braswell Platform Validation

Here's an example of how to embed a Gist on GitHub Pages:

{% gist 5555251 %}

All you need to do is copy and paste the Gist's ID from the URL (here 5555251), and add it to a gist tag surrounded by {% and %}.

	---
	esphome:
	name: doorbell
	platform: ESP8266
	board: esp01_1m

	# WiFi connection, correct these
	# with values for your WiFi.
	wifi:
	ssid: !secret wifi_ssid

	# Disable Commercial Repo
	sed -i "s/^deb/\#deb/" /etc/apt/sources.list.d/pve-enterprise.list
	apt-get update

	# Add PVE Community Repo
	echo "deb http://download.proxmox.com/debian/pve $(grep "VERSION=" /etc/os-release \| sed -n 's/.(\(.\)).*/\1/p') pve-no-subscription" > /etc/apt/sources.list.d/pve-no-enterprise.list
	apt-get update

	# Remove nag
	echo "DPkg::Post-Invoke { \"dpkg -V proxmox-widget-toolkit \| grep -q '/proxmoxlib\.js$'; if [ \$? -eq 1 ]; then { echo 'Removing subscription nag from UI...'; sed -i '/data.status/{s/\!//;s/Active/NoMoreNagging/}' /usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js; }; fi\"; };" > /etc/apt/apt.conf.d/no-nag-script

	# Recently I had to send a password to someone over Skype. Since that's obviously not a good idea, I asked for
	# the person's public SSH RSA key, and used it to encrypt the password itself.


	# Convert the public key into PEM format
	ssh-keygen -f path/to/id_rsa.pub -e -m pem > ~/id_rsa.pub.pem

	# Using the public pem file to encrypt a string
	echo "sometext" \| openssl rsautl -encrypt -pubin -inkey ~/id_rsa.pub.pem > ~/encrypted.txt

	server {
	listen 80;
	listen 443;
	listen [::]:80;
	listen [::]:443;

	server_name fonts.lug.ustc.edu.cn;
	access_log /var/log/nginx/revproxy_access.log;
	error_log /var/log/nginx/revproxy_error.log;

	"C:\Program Files\Lets Encrypt\letsencrypt.exe" --renew --baseuri "https://acme-v01.api.letsencrypt.org/"
	powershell -File "C:\Program Files\Lets Encrypt\RDS_INSTALL_CERT.ps1" -CertificateImport "C:\ProgramData\letsencrypt-win-simple\httpsacme-v01.api.letsencrypt.org\remote.example.com-all.pfx" -RDCB remote.example.com