WRKLOG-2026-06-07

# Identify affected commits
git log --oneline -- \
  docs/modules/ROOT/pages/2026/03/WRKLOG-2026-03-14.adoc \
  docs/modules/ROOT/pages/2026/04/WRKLOG-2026-04-18.adoc

# 1. BEFORE: Full backup of the repo
cp -a ~/atelier/_bibliotheca/domus-captures ~/atelier/_bibliotheca/domus-captures.bak

# 2. Install git-filter-repo (if not present)
# Arch: pacman -S git-filter-repo
# pip: pip install git-filter-repo

# 3. Create expressions file for replacement
cat > /tmp/scrub-expressions.txt << 'EXPR'
regex:(?i)divorce==[REDACTED]
regex:(?i)dissolutio(?!n\.adoc\.age)==[REDACTED-LEGAL]
regex:(?i)iliana==[REDACTED-NAME]
regex:(?i)angulo-arreola==[REDACTED-NAME]
regex:legal-divorce-notes\.age==legal-notes.age
regex:1099-NEC-iliana==1099-NEC
EXPR

# 4. Verify before (dry run — count matches in history)
git log -p --all -S 'divorce' -- '*.adoc' | grep -c 'divorce' || echo "0 matches"
git log -p --all -S 'iliana' -- '*.adoc' | grep -c 'iliana' || echo "0 matches"

# 5. Run filter-repo (DESTRUCTIVE — rewrites all commit hashes)
git filter-repo --replace-text /tmp/scrub-expressions.txt --force

# 6. Verify after
git log -p --all -S 'divorce' -- '*.adoc' | grep -c 'divorce' || echo "0 matches — CLEAN"
git log -p --all -S 'iliana' -- '*.adoc' | grep -c 'iliana' || echo "0 matches — CLEAN"

# 7. Re-add remotes (filter-repo removes them)
git remote add origin git@github.com:<user>/domus-captures.git
# Add any other remotes (Gitea, etc.)

# 8. Force-push to all remotes (DESTRUCTIVE — overwrites remote history)
git remote | xargs -I{} git push {} main --force

# 9. Clean up
rm /tmp/scrub-expressions.txt
rm -rf ~/atelier/_bibliotheca/domus-captures.bak  # only after verifying

for d in p1-cap-03{7,8,9}; do
  for f in data/d000/education/quijote-study/notas/$d/*.adoc; do
    d000 build "$d/$(basename "$f" .adoc)" pdf --theme light-cyan
  done
done

firefox data/d000/education/quijote-study/notas/p1-cap-03{7,8,9}/output/*.pdf &

lp data/d000/education/quijote-study/notas/p1-cap-03{7,8,9}/output/*.pdf

find ~/.claude/projects/-home-evanusmodestus-atelier--bibliotheca-domus-captures/ \
  -name '*.jsonl' -not -path '*/subagents/*' -mtime -7 | sort

grep -l 'ise.*rotation\|ise.*eval.*licen\|ise.*backup.*restore\|rotating between.*ise' \
  ~/.claude/projects/-home-evanusmodestus-atelier--bibliotheca-domus-captures/*.jsonl \
  | grep -v subagents

grep -l 'held out on me' \
  ~/.claude/projects/-home-evanusmodestus-atelier--bibliotheca-domus-captures/*.jsonl

stat -c '%y' ~/.claude/projects/-home-evanusmodestus-atelier--bibliotheca-domus-captures/<session-id>.jsonl \
  | awk '{print $1}'

grep -c 'rotation\|ise-01\|ise-02\|backup.*restore' <session-file>.jsonl

ssh kvm-01 "sudo virsh list --all"
ssh kvm-02 "sudo virsh list --all"

free -h
nproc
sudo virsh vcpuinfo vyos-01
sudo virsh vcpuinfo home-dc01

sudo mount -t nfs4 10.50.1.70:/volume1/isos /mnt/nas/isos

ls -lh /mnt/nas/isos/*[Ii][Ss][Ee]*

df -h /var/lib/libvirt/images/ /mnt/onboard-ssd/

sudo cp /mnt/nas/isos/Cisco-ISE-3.5.0.527.SPA.x86_64.iso /mnt/onboard-ssd/vms/
sudo chown qemu:qemu /mnt/onboard-ssd/vms/Cisco-ISE-3.5.0.527.SPA.x86_64.iso

ip link show type bridge
sudo virsh net-list --all

mount | grep nas

sudo qemu-img create -f qcow2 /mnt/onboard-ssd/vms/ise-01.qcow2 300G

sudo virt-install \
  --name ise-01 \
  --memory 16384 \
  --vcpus 4,cpuset=6-9 \
  --cpu host-passthrough \
  --machine q35 \
  --cdrom /mnt/onboard-ssd/vms/Cisco-ISE-3.5.0.527.SPA.x86_64.iso \
  --disk path=/mnt/onboard-ssd/vms/ise-01.qcow2,format=qcow2,bus=virtio \
  --os-variant rhel8.0 \
  --network bridge=br-mgmt,model=virtio \
  --graphics vnc,listen=0.0.0.0 \
  --video virtio \
  --noautoconsole

sudo virsh destroy ise-01
sudo virsh change-media ise-01 sda --eject --config
sudo virt-xml ise-01 --edit --boot hd,cdrom
sudo virsh start ise-01

sudo virsh undefine ise-01

sudo virsh change-media ise-01 sda /mnt/onboard-ssd/vms/Cisco-ISE-3.5.0.527.SPA.x86_64.iso --insert --config

sudo virsh console ise-01

ssh admin@10.50.1.20
show application status ise

configure terminal
repository nas-01
  url nfs://10.50.1.70:/volume1/ise_backups
exit

show repository nas-01

dsource d000 dev/storage
echo $ISE_BACKUP_KEY

backup pre-rotation-2026-06 repository nas-01 ise-config encryption-key plain <KEY>

restore pre-rotation-2026-06-CFG10-260607-0942.tar.gpg repository nas-01 encryption-key plain <KEY>

rsync -avP ~/Downloads/ise-patchbundle-3.5.0.527-Patch3-26040703.SPA.x86_64.tar.gz kvm-02:/mnt/nas/isos/

show vrrp

show configuration commands | grep vrrp | grep 'address'

show configuration commands | grep 'firewall zone' | grep 'member'

show configuration commands | grep firewall | grep -i 'iot\|vlan40\|40'

show dhcp server leases
show arp

configure
set service ntp server pool.ntp.org
set service ntp listen-address 10.50.1.1
commit
save
exit

command -v lpstat && echo "CUPS present" || echo "not installed"
lpstat -r
lpstat -p -d

sudo pacman -S cups
sudo systemctl enable --now cups

lpinfo -v
lpinfo -m | grep -i <brand>

nmap -Pn -p 9100,631,515 10.50.40.134

uname -r

find /lib/modules/7.0.11-arch1-1 -name 'usb-storage*' -o -name 'usb_storage*'

sudo modprobe usb_storage

lsusb | grep -i brother
lsusb -t | grep -i mass
dmesg | tail -20
lsblk | grep sd

sudo mount /dev/sda1 /mnt

for d in p1-cap-03{7,8,9}; do
  for f in data/d000/education/quijote-study/notas/$d/output/*.pdf; do
    sudo cp "$f" "/mnt/${d}-$(basename "$f")"
  done
done

ls -lh /mnt/*.pdf
sudo umount /mnt

for d in p1-cap-03{7,8,9}; do
  for f in data/d000/education/quijote-study/notas/$d/*.adoc; do
    d000 build "$d/$(basename "$f" .adoc)" pdf --theme light-cyan
  done
done

sudo tee /mnt/quijote-usb-build-"$(date +%F)".adoc << 'EOF'
...
EOF

find docs/modules/ROOT -name '*.adoc' -mtime 0 -type f | sort

git -C ~/atelier/_bibliotheca/domus-captures push origin main &
git -C ~/atelier/_bibliotheca/domus-infra-ops push origin main &
wait

ssh-keygen -L -f ~/.ssh/id_ed25519_vault-cert.pub | grep -E 'Valid|Principal'

dsource d000 dev/vault

gopass show -c v3/domains/d000/identity/ssh/id_ed25519_vault

vault write -field=signed_key ssh/sign/domus-client \
  public_key=@$HOME/.ssh/id_ed25519_vault.pub \
  valid_principals="evanusmodestus,adminerosado" \
  >| ~/.ssh/id_ed25519_vault-cert.pub

ssh-keygen -L -f ~/.ssh/id_ed25519_vault-cert.pub | grep -E 'Valid|Principal'

grep -iA5 'nas' ~/.ssh/config

ssh -vvv -o IdentitiesOnly=yes -i ~/.ssh/id_ed25519_vault adminerosado@10.50.1.70 2>&1 \
  | grep -E 'Offering|Trying|Authentication|identity'

rsync -avP -e "ssh -o IdentitiesOnly=yes -i ~/.ssh/id_ed25519_vault" \
  file.tar.gz nas-01:/volume1/ise_backups/

ssh-copy-id -i ~/.ssh/id_ed25519_vault -o IdentitiesOnly=yes -o ControlPath=none adminerosado@10.50.1.70

ssh -O exit -o ControlPath=~/.ssh/sockets/adminerosado@10.50.1.70-22 adminerosado@10.50.1.70

ssh nas-01 "ls /volume1/ise_backups/ | grep -i patch"

rsync -avP ~/Downloads/ise-patchbundle-3.5.0.527-Patch3-26040703.SPA.x86_64.tar.gz \
  nas-01:/volume1/ise_backups/

configure terminal
repository nas-01
  url nfs://10.50.1.70:/volume1/ise_backups
exit

show repository nas-01

dsource d000 dev/storage
echo $ISE_BACKUP_KEY

restore pre-rotation-2026-06-CFG10-260607-0942.tar.gpg repository nas-01 encryption-key plain <KEY>

show application status ise

patch install ise-patchbundle-3.5.0.527-Patch3-26040703.SPA.x86_64.tar.gz repository nas-01

configure terminal
ntp server 10.50.1.1
exit

uname -r
# 7.0.11-arch1-1

lsblk | grep sd
sudo mount /dev/sda1 /mnt

for d in p1-cap-03{7,8,9}; do
  for f in data/d000/education/quijote-study/notas/$d/*.adoc; do
    d000 build "$d/$(basename "$f" .adoc)" pdf --theme light-cyan
  done
done

for d in p1-cap-03{7,8,9}; do
  for f in data/d000/education/quijote-study/notas/$d/output/*.pdf; do
    sudo cp "$f" "/mnt/${d}-$(basename "$f")"
  done
done

sudo umount /mnt

lsof | grep -i 'dialog\|portal\|zenity\|kdialog\|xdg-desktop-portal'
ps aux | grep -i 'portal\|dialog' | grep -v grep

pkill -f xdg-desktop-portal

grep -n 'ssh-keygen -R' $(find docs/modules/ROOT -name 'phase-03-restore.adoc')

# DON'T DO THIS — mismatched quotes, grep hangs waiting for input
grep -n 'ssh-keygen -R' "'$(find docs/modules/ROOT/ -name 'phase-03-restore.adoc')'"

# $() embeds output as an ARGUMENT — replaces itself with the result
grep -n 'pattern' $(find . -name 'file.adoc')

# | passes output as STDIN — different mechanism entirely
find . -name 'file.adoc' | xargs grep -n 'pattern'

run show firewall ipv4 name MGMT_LOCAL | awk '$1 == 45 {printf "pkts=" $4, "bytes=" $5}'

run show firewall ipv4 name MGMT_LOCAL | awk '$1 == 45 {printf "NTP hits: %d packets, %d bytes\n",$4,$5}'

while sleep 1; do
  run show firewall ipv4 name MGMT_LOCAL |
  awk '$1==45{print systime(),$4,$5}'
done |
awk '
NR==1 {p=$2;b=$3;next}
{
  printf "[%s] +%-4d pkts  +%-6d bytes  total=%s\n",
         strftime("%T",$1),$2-p,$3-b,$2
  p=$2;b=$3
}'

nmcli -t -f NAME,TYPE,DEVICE con show |
awk -F: '
{
  t=$2
  gsub("802-11-wireless","wifi",t)
  gsub("802-3-ethernet","eth",t)

  printf "%s %-30s %-8s %s\n",
         ($3 ? "active" : "offline"),
         $1,
         t,
         ($3 ? $3 : "offline")
}'

nmcli -t -f NAME,TYPE,DEVICE con show | awk -F: '
BEGIN {printf "%-28s %-18s %-14s %s\n","NAME","TYPE","DEVICE","STATUS"}
{printf "%-28s %-18s %-14s %s %s\n",$1,$2,($3?$3:"-"),($3?"active":"inactive")}'

sudo picocom -b 9600 /dev/ttyUSB0

configure terminal
aaa group server radius ISE-RADIUS
  no server name ISE-02
  server name ISE-01
  server name ISE-02
  exit
end
show radius server-group ISE-RADIUS
write memory

env | grep VAULT_UNSEAL | awk -F= '{printf "%-25s %s\n", $1, (length($2) > 0 ? "SET (" length($2) " chars)" : "EMPTY")}'

env | grep ISE_ | awk -F= '{printf "%-25s %s\n", $1, (length($2) > 0 ? "SET (" length($2) " chars)" : "EMPTY")}'

# Load vault credentials
dsource d000 dev/vault

# Verify keys are set (safe — no values shown)
env | grep VAULT_UNSEAL | awk -F= '{printf "%-25s %s\n", $1, (length($2) > 0 ? "SET (" length($2) " chars)" : "EMPTY")}'

# Key 1 (progress: 1 of 2)
curl -sk -X PUT https://vault-01.inside.domusdigitalis.dev:8200/v1/sys/unseal -d "$(python3 <<'EOF'
import json, os
print(json.dumps({"key": os.environ["VAULT_UNSEAL_KEY_1"].strip('"')}))
EOF
)"

# Key 2 (sealed: false)
curl -sk -X PUT https://vault-01.inside.domusdigitalis.dev:8200/v1/sys/unseal -d "$(python3 <<'EOF'
import json, os
print(json.dumps({"key": os.environ["VAULT_UNSEAL_KEY_2"].strip('"')}))
EOF
)" | jq '{sealed, cluster_name}'

curl -sk -X PUT -H "X-Vault-Token: $(echo $VAULT_ROOT_TOKEN | tr -d '\"')" \
  https://vault-01.inside.domusdigitalis.dev:8200/v1/sys/seal

for v in vault-{01..03}; do
  ssh "$v" \
    "VAULT_ADDR=https://127.0.0.1:8200 VAULT_SKIP_VERIFY=1 vault status -format=json" \
    2>/dev/null |
  sed -n '/^{/,$p' |
  jq -r --arg host "$v" '
    [
      $host,
      (if .sealed then "SEALED" else "UNSEALED" end),
      (.ha_mode // "n/a"),
      .version,
      .cluster_name // "n/a"
    ] | @tsv
  '
done | column -t -s $'\t'

for v in vault-{01..03}; do
  printf "\n=== %s ===\n" "$v"
  ssh "$v" \
    "VAULT_ADDR=https://127.0.0.1:8200 VAULT_SKIP_VERIFY=1 vault status" \
    2>/dev/null |
    awk '
      /Sealed/      {print}
      /Version/     {print}
      /HA Enabled/  {print}
      /HA Mode/     {print}
      /Cluster Name/{print}
      /Cluster ID/  {print}
    '
done

dsource d000 dev/vault
ssh vault-01 "VAULT_ADDR='https://127.0.0.1:8200' VAULT_SKIP_VERIFY=1 VAULT_TOKEN='$VAULT_ROOT_TOKEN' vault operator seal"

grep -l 'ise.*rotation\|rotating between.*ise' \
  ~/.claude/projects/-home-evanusmodestus-atelier--bibliotheca-domus-captures/*.jsonl \
  | grep -v subagents

stat -c '%y' <session-file>.jsonl | awk '{print $1}'

grep -c 'rotation\|ise-01\|backup.*restore' <session-file>.jsonl

grep -l 'held out on me' \
  ~/.claude/projects/-home-evanusmodestus-atelier--bibliotheca-domus-captures/*.jsonl

gh repo list --limit 100 --json name,description \
  | jq -r '.[] | select(.name | test("domus|antora|asciidoc"; "i")) | "\(.name)\t\(.description)"'

gh repo list --limit 100 --json name,description,updatedAt \
  | jq -r 'sort_by(.updatedAt) | reverse | .[:20] | .[] | "\(.updatedAt[:10])\t\(.name)\t\(.description)"'

gh repo list --limit 100 --json name,diskUsage \
  | jq -r '.[] | "\(.diskUsage)\t\(.name)"' | sort -rn | head -10

gh repo clone EvanusModestus/<repo-name> ~/atelier/_bibliotheca/<repo-name>

find docs/modules/ROOT/examples/codex/powershell -type f -name "*.adoc" \
  -exec grep -l 'Get-Process\|Start-Process\|pipeline\|Where-Object' {} \;

find docs/modules/ROOT -name "powershell" -type d \
  -exec sh -c 'echo "$1: $(find "$1" -type f | wc -l) files"' _ {} \;

for f in $(find docs/modules/ROOT/examples/codex/powershell -name "*.adoc" -type f); do
  base=$(basename "$f")
  dir_parent=$(basename $(dirname "$f"))
  grep -rq "$dir_parent/$base" docs/modules/ROOT/pages/codex/powershell/ \
    docs/modules/ROOT/examples/codex/powershell/*.adoc 2>/dev/null \
    || echo "ORPHAN: $f"
done

nvim $(find -path '*oauth*' -name '*.adoc' -type f \
  -exec grep -l 'timeout\|expire\|reconfig\|token' {} \;)

nvim $(find docs/modules/ROOT -name '*.adoc' -type f \
  -exec grep -l 'token.*expire\|oauth.*refresh' {} \;)

find -path '*oauth*' -name '*.adoc' -type f \
  -exec grep -l 'timeout\|expire' {} \; \
  -exec nvim {} \;

grep -rl 'commands/shell' docs/modules/ROOT/partials/

grep -rl 'quick-commands' docs/modules/ROOT | wc -l

file="commands/shell"
grep -rl "$file" docs/modules/ROOT/partials/ | while read f; do
  parent=$(basename "$f" .adoc)
  echo "$file -> $parent"
  grep -rl "$parent" docs/modules/ROOT/pages/ | while read p; do
    echo "  -> $(basename "$p")"
  done
done

find docs/modules/ROOT -name "*urgent.adoc*" -type f
find docs/modules/ROOT -name "*morning.adoc*" -type f

find docs/modules/ROOT -type f -regextype posix-extended \
  -regex '.*(urgent|morning|work-chla|personal|education|infrastructure|quick-commands|related)\.adoc' \
  | sort

find docs/modules/ROOT -type f -name "*.adoc" \
  | grep -E 'urgent|morning|work-chla|personal|education|infrastructure|quick-commands|related'

grep -rn --include='*.adoc' -c 'sanchuelo' . | grep -v ':0$'

grep -rl --include='*.adoc' -i 'sanchuelo' ~/atelier/_bibliotheca/ | sort

grep -rn --include='*.adoc' -i -B1 -A1 'sanchuelo' ~/atelier/_bibliotheca/domus-captures/

grep -rl -i 'sanchuelo' ~/atelier/_bibliotheca/ --include='*.txt' --include='*.adoc' | sort

find ~/atelier/_bibliotheca/ -type f \( -name '*.adoc' -o -name '*.txt' \) -print0 \
  | xargs -0 grep -li 'sanchuelo' | sort

grep -rl -i 'sanchuelo' ~/atelier/_bibliotheca/ --include='*.adoc' --include='*.txt' | xargs nvim

grep -P '(@\w+|^From:.*<)' comms.adoc

grep -nP '\d{1,2}/\d{1,2}/\d{2,4}|20\d{2}-\d{2}-\d{2}' comms.adoc

grep -niP '(I can |I will |I.ll |we will |we.ll )' comms.adoc

grep -niP '(\?|need to confirm|need to validate|TBD|pending)' comms.adoc

# All recipients
grep -oP '<\K[^>]+' comms.adoc | sort -u > /tmp/all-recipients

# All senders
grep -P '^From:' comms.adoc | grep -oP '<\K[^>]+' | sort -u > /tmp/replied

# Who's silent — follow-up targets
comm -23 /tmp/all-recipients /tmp/replied

# Sort by mtime, strip epoch prefix — handles spaces in filenames
find ~/Downloads -maxdepth 1 -name '*.pdf' -printf '%T@ %p\n' | sort -rn | awk '{sub(/^[^ ]+ /,""); print}'

# ISO 8601 timestamps — readable and lexicographically sortable
find ~/Downloads -maxdepth 1 -name '*.pdf' -printf '%T+ %p\n' | sort -r | head -20

# Null-delimited: survives any filename (newlines, quotes, unicode)
find ~/Downloads -maxdepth 1 -name '*.pdf' -printf '%T@\t%p\0' | sort -zrn | awk -v RS='\0' -F'\t' '{print $2}'

# GNU stat equivalent — works where -printf is unavailable
find ~/Downloads -maxdepth 1 -name '*latin*' -exec stat --format='%Y %n' {} + | sort -rn | awk '{sub(/^[^ ]+ /,""); print}'

# Size in bytes (-printf %s), human-readable via numfmt
find ~/Downloads -type f -printf '%s\t%p\n' | sort -rn | head -10 | numfmt --to=iec --field=1

# Files sharing a byte count — likely duplicates (confirm with md5sum)
find ~/Downloads -type f -printf '%s %p\n' | awk '{seen[$1]++; files[$1]=files[$1] "\n  " $0} END {for (s in seen) if (seen[s]>1) print files[s]}'

# md5sum only files with duplicate sizes (two-pass: fast then precise)
find ~/Downloads -type f -printf '%s\n' | sort | uniq -d | while read -r size; do
  find ~/Downloads -type f -size "${size}c" -exec md5sum {} +
done | sort | uniq -w32 -D

# Count files by MIME type (not extension — extensions lie)
find ~/Downloads -type f -exec file --mime-type -b {} + | sort | uniq -c | sort -rn

# Files not accessed in 30 days — candidates for cleanup
find ~/Downloads -maxdepth 1 -type f -atime +30 -printf '%A+ %s\t%p\n' | sort | numfmt --to=iec --field=2

# Which subdirectories consume the most space?
find . -maxdepth 1 -type d -exec du -sh {} + 2>/dev/null | sort -rh | head -20

# Dry run — show what would change (remove echo to execute)
find ~/Downloads -maxdepth 1 -type f -name '* *' -print0 | while IFS= read -r -d '' f; do
  dir=$(dirname "$f")
  base=$(basename "$f" | tr ' ' '-' | tr '[:upper:]' '[:lower:]')
  echo mv "$f" "$dir/$base"
done

# Sort Downloads chaos into folders by type
find ~/Downloads -maxdepth 1 -type f -print0 | while IFS= read -r -d '' f; do
  ext="${f##*.}"
  case "$ext" in
    pdf|epub)    dest="books" ;;
    jpg|png|svg) dest="images" ;;
    sh|py|rb)    dest="scripts" ;;
    *)           dest="other" ;;
  esac
  mkdir -p ~/Downloads/"$dest"
  echo mv "$f" ~/Downloads/"$dest"/
done

# Convert all epubs in a directory to asciidoc via pandoc
find . -name '*.epub' -type f -exec sh -c '
  for epub; do
    adoc="${epub%.epub}.adoc"
    pandoc -f epub -t asciidoc "$epub" -o "$adoc" \
      && printf "  → %s (%s lines)\n" "$adoc" "$(wc -l < "$adoc")" \
      || printf "  ✗ failed: %s\n" "$epub"
  done
' _ {} +

# Checksum all PDFs in parallel (4 processes)
find ~/Downloads -name '*.pdf' -print0 | xargs -0 -P4 md5sum

# Compare files pairwise with diff
find . -name '*.adoc' -print0 | xargs -0 -n2 diff --brief

# Backup every config file: cp <file> <file>.bak
find /etc -maxdepth 1 -name '*.conf' -print0 | xargs -0 -I{} cp {} {}.bak

# What files exist in study-A but not study-B?
diff <(find data/d000/education/ciceron-study -type f -name '*.adoc' | sort) \
     <(find data/d000/education/latin-study -type f -name '*.adoc' | sort)

# Side-by-side: file type census of two directories
paste <(find dir1 -type f -exec file --mime-type -b {} + | sort | uniq -c | sort -rn) \
      <(find dir2 -type f -exec file --mime-type -b {} + | sort | uniq -c | sort -rn)

awk '{print $2}' file.txt

awk -F: '{print $1, $3}' /etc/passwd

awk '/\[source,json\]/{getline; if ($0 ~ /^----/) {p=1; next}} p && /^----/{p=0; next} p' file.adoc

awk '{printf "%-30s %s\n", $1, $2}' file.txt

# Before
awk 'NR==73' /etc/ssh/sshd_config
# Change
sed -i '73s/#GSSAPIAuthentication no/GSSAPIAuthentication yes/' /etc/ssh/sshd_config
# After
awk 'NR==73' /etc/ssh/sshd_config

sed -n '10,20p' file.txt

# 1. LOCATE: find the line number
grep -n 'adoc-pdf' zsh/.zshrc

# 2. VALIDATE: read the exact line before changing
awk 'NR==1760' zsh/.zshrc

# 3. CHANGE: target by line number — only hits that line
sed -i '1760s/alias adoc-pdf=/alias build-adoc=/' zsh/.zshrc

# 4. VERIFY: confirm change AND check for collateral
grep -n 'build-adoc\|adoc-pdf' zsh/.zshrc

awk 'NR==1218 || NR==1760' zsh/.zshrc

# grep found the error at line 44164 — read 50 lines of context
awk 'NR>=44160 && NR<=44210' session-dump.adoc

# ISE syslog — extract failure reasons
grep -oP 'FailureReason=\K[^,;]+' /var/log/syslog | sort | uniq -c | sort -rn

# ISE — extract MAC addresses
grep -oP 'Calling-Station-ID=\K[0-9A-Fa-f:.-]+' /var/log/syslog | sort -u

# ISE — extract NAS IPs
grep -oP 'NAS-IP-Address=\K[0-9.]+' /var/log/syslog | sort -u

# ISE — extract device names
grep -oP 'NetworkDeviceName=\K[^,;]+' /var/log/syslog | sort -u

# Generic form — works for any key=value log format
grep -oP 'FIELD_NAME=\K[^,;]+' logfile | sort | uniq -c | sort -rn | head -20

curl -s localhost:8080/stats | jq '.stats.total_files'

jq '.results[] | select(.category == "standards")' response.json

jq -r '.[] | [.title, .path] | @tsv' response.json | column -t -s $'\t'

gh api "repos/EvanusModestus/domus-captures/commits?path=docs/&per_page=10" |
  jq -r '.[] | "\(.commit.author.date[:10]) \(.sha[:7]) \(.commit.message | split("\n")[0])"'

mkdir -p /tmp/adoc-backup-$(date +%F) && \
  find . -name "*.adoc" -type f -newermt "$(date +%F)" | \
  xargs -I{} cp {} /tmp/adoc-backup-$(date +%F)/

find .drafts -name "*.adoc" -type f | xargs -P4 -I{} asciidoctor -o /dev/null {}

find . -name "*.adoc" -type f -print0 | xargs -0 wc -l

diff <(grep '|' partials/trackers/work/adhoc/carryover.adoc | head -20) \
     <(git show HEAD~1:partials/trackers/work/adhoc/carryover.adoc | grep '|' | head -20)

diff <(find docs/modules/ROOT/pages/projects/chla/mschapv2-migration -name "*.adoc" -type f | sort) \
     <(grep -oP 'mschapv2-migration/[^[]+\.adoc' docs/modules/ROOT/nav.adoc | sort)

nvim "$(find data/ -name '*.adoc' -type f -printf '%T@ %p\n' | sort -rn | awk 'NR==1{print $2}')"

wc -l $(find docs/modules/ROOT -path '*mschapv2*' -name '*.adoc' -type f)

files=$(find .drafts -name 'in*' -type f) && [ -n "$files" ] && nvim $files

files=$(grep -rl '\[ \]' .drafts/*.adoc) && [ -n "$files" ] && nvim $files

grep -q 'TODO\|FIXME\|\[ \]' "$file" && nvim "$file"

files=$(find . -name "*tcp-clock*.age" -type f) && \
  [ -n "$files" ] && echo "$files" | xargs -I{} decrypt-file {} && \
  nvim $(echo "$files" | sed 's/\.age$//')

tee_clean() {
  tee >(sed 's/\x1b\[[0-9;]*m//g' > "$1")
}

# Color output on terminal, stripped in file
jq -C '.' data.json | tee_clean output.json
xq -C '.' data.xml | tee_clean output.json

# Wrap a whole block
{
  echo "=== Summary ==="
  jq -C '.[] | .name' data.json
} | tee_clean summary.txt

for cmd in asciidoctor asciidoctor-pdf pandoc rouge d2 mmdc age; do
  printf "%-20s %s\n" "$cmd" "$(command -v $cmd >/dev/null 2>&1 && echo 'OK' || echo 'MISSING')"
done

printf '---\n\n'

printf '%s\n\n' '---'

lsof -i TCP -n -P | awk '/ssh.*ESTABLISHED/ {print $2, $9}'

lsof -i TCP -n -P | awk '/ssh.*kvm-01.*ESTABLISHED/ {print $2}' | sort -u | xargs kill

lsof -i TCP -n -P | awk '/ssh.*ESTABLISHED/ {print $2}' | sort -u | xargs kill

find / -name "*.conf" 1>results.txt 2>errors.txt

find / -name "*.conf" 2>/dev/null

command 2>&1 | grep "pattern"

cat <<'EOF'
Line 1
Line 2
EOF

git commit -m "$(cat <<'EOF'
feat: add new feature

Multi-line description here.
EOF
)"

cd ~/atelier/_projects/personal/domus-api && uv run uvicorn domus_api.main:app --host 0.0.0.0 --port 8080

curl -s localhost:8080/ | jq

curl -s 'localhost:8080/search?q=mandiant' | jq

curl -s 'localhost:8080/search?q=mandiant' | jq '.results[] | {path, title, match_count}'

curl -s 'localhost:8080/pages?category=standards' | jq

curl -s localhost:8080/attributes | jq

gh search code "vault seal" --owner EvanusModestus --json repository,path,textMatches |
  jq '.[] | {repo: .repository.full_name, file: .path, match: .textMatches[].fragment}'

gh api 'repos/EvanusModestus/domus-captures/git/trees/main?recursive=1' |
  jq '[.tree[] | select(.path | endswith(".adoc"))] | length'

bat docs/modules/ROOT/pages/2026/04/WRKLOG-$(date +%Y-%m-%d).adoc

bat docs/modules/ROOT/partials/trackers/work/priorities/current.adoc

bat docs/modules/ROOT/partials/trackers/work/adhoc/carryover.adoc

bat docs/modules/ROOT/partials/projects/mandiant-remediation/summary.adoc

grep -rl "MSCHAPv2" docs/modules/ROOT/ --include="*.adoc" | sort

grep -rn "pattern" docs/modules/ROOT/partials/codex/ --include="*.adoc" -B1 -A3

ls -1 docs/modules/ROOT/pages/2026/04/WRKLOG-*.adoc

echo $(( ($(date +%s) - $(date -d "2026-03-09" +%s)) / 86400 ))

age --decrypt -i ~/.secrets/.metadata/keys/master.age.key \
  data/d001/projects/mandiant-remediation/findings-status-2026-04-16.adoc.age \
  | bat --language asciidoc

for d in data/d001/projects/*/; do
  total=$(find "$d" -type f | wc -l)
  plain=$(find "$d" -type f ! -name '*.age' ! -name 'README.adoc' ! -name '.gitkeep' ! -name '*.py' | wc -l)
  printf "%-25s %s files  %s plaintext\n" "$(basename "$d")" "$total" "$plain"
done

for d in p1-cap-03{7,8,9}; do
  for f in data/d000/education/quijote-study/notas/$d/*.adoc; do
    d000 build "$d/$(basename "$f" .adoc)" html --variant light-cyan
  done
done

d000 build p1-cap-038/texto-anotado html --variant light-cyan
d000 build p1-cap-038/texto-anotado pdf --theme light-cyan

for d in p1-cap-03{7,8,9}; do
  for f in data/d000/education/quijote-study/notas/$d/*.adoc; do
    d000 build "$d/$(basename "$f" .adoc)" pdf --theme light-cyan
  done
done

firefox data/d000/education/quijote-study/notas/p1-cap-03{7,8,9}/output/*.html &
firefox data/d000/education/quijote-study/notas/p1-cap-03{7,8,9}/output/*.pdf &

lp data/d000/education/quijote-study/notas/p1-cap-03{7,8,9}/output/*.pdf

d000 build annotated-text pdf --theme light-cyan
d000 build lpl-study/notas/texto-anotado pdf --theme light-cyan

d000 build de-oratore/libro-i/texto-anotado html --variant light-cyan

ls ~/atelier/_bibliotheca/domus-asciidoc-build/themes/pdf/ | sed 's/-theme\.yml//'
# base blue burgundy catppuccin creative dark don-quijote green
# learning light-cyan navy operations orange purple reference royal

~/atelier/_bibliotheca/domus-asciidoc-build/docinfo/compose.sh --list
# light dark catppuccin royal light-cyan

export ISE_HOST="{ise-ip}" ISE_USER="admin" ISE_PASS="$(gopass show -o ise/admin)"

curl -sk "https://$ISE_HOST:{ise-ers-port}/ers/config/identitygroup" \
  -H "Accept: application/json" -u "$ISE_USER:$ISE_PASS" | jq '.SearchResult.resources[].name'

curl -sk "https://$ISE_HOST:{ise-ers-port}/ers/config/endpoint?filter=mac.EQ.AA:BB:CC:DD:EE:FF" \
  -H "Accept: application/json" -u "$ISE_USER:$ISE_PASS" | jq '.SearchResult.total'

openssl x509 -in {cert-dir}/client.pem -text -noout | head -30

openssl x509 -in {cert-dir}/client.pem -enddate -noout

ss -tlnp | grep -E ':{port-https}|:{port-ssh}|:{port-ldaps}'

nc -zv {ise-ip} {ise-ers-port}

dig {ise-hostname} +short

# SSH to ISE
ssh admin@ise-02.inside.domusdigitalis.dev

# Verify NAS repo
show repository nas-01

# Get encryption key (on workstation)
dsource d000 dev/storage
echo $ISE_BACKUP_KEY

# Run backup
backup pre-rotation-2026-06 repository nas-01 ise-config encryption-key plain <KEY>

ssh admin@ise-02.inside.domusdigitalis.dev
show repository nas-01

configure terminal
repository nas-01
  url nfs://10.50.1.70:/volume1/ise_backups
exit

restore <backup-filename> repository nas-01 encryption-key plain <KEY>

show vrrp
show configuration commands | grep vrrp | grep 'address'

show configuration commands | grep 'firewall zone' | grep 'member'

show dhcp server leases
show arp

show interfaces

command -v lpstat && echo "CUPS present" || echo "CUPS not installed"
lpstat -r                                # scheduler running?
lpstat -p -d                             # printers + default

sudo systemctl enable --now cups         # start + persist

lpinfo -v                                # available backends/URIs
lpinfo -m | grep -i <brand>             # available drivers

sudo lpadmin -p <name> -v <uri> -m everywhere -E
lpoptions -d <name>

lp file.pdf                              # default printer
lp -d <name> -o sides=two-sided-long-edge file.pdf

pwsh -NoLogo -Command 'Get-Process | Sort-Object WorkingSet64 -Descending |
  Select-Object -First 5 ProcessName, Id,
    @{N="MB";E={[math]::Round($_.WorkingSet64/1MB)}} | Format-Table'

pwsh -NoLogo -Command 'Get-Process | Where-Object {$_.ProcessName -like "*teams*"} | Stop-Process'
pwsh -NoLogo -Command 'Start-Process "ms-teams"'

pwsh -NoLogo -Command 'Get-Process | Sort-Object WorkingSet64 -Descending |
  Select-Object -First 5 ProcessName, Id,
    @{N="MB";E={[math]::Round($_.WorkingSet64/1MB)}} | ConvertTo-Json' | jq '.'

netsh wlan disconnect interface="Wi-Fi"
netsh wlan show networks mode=bssid
netsh wlan connect name="CHLA-Remote" interface="Wi-Fi"

ssh evan@modestus-razer.inside.domusdigitalis.dev

age --decrypt -i ~/.secrets/.metadata/keys/master.age.key \
  data/d001/projects/mandiant-remediation/findings-status-2026-04-16.adoc.age \
  | bat --language asciidoc --file-name "findings-status-2026-04-16.adoc"

for f in data/d001/projects/mandiant-remediation/{findings-status,guest-acl-update,siem-report}-2026-04-16.adoc; do
  rm -f "${f}.age" && echo y | encrypt-file "$f"
done

for f in data/d001/projects/*/*.adoc; do
  age="${f}.age"
  if [ -f "$f" ] && [ -f "$age" ]; then
    pt_mod=$(/usr/bin/stat -c'%Y' "$f")
    age_mod=$(/usr/bin/stat -c'%Y' "$age")
    [ "$pt_mod" -gt "$age_mod" ] && echo "STALE: $f"
  fi
done

shred -u data/d001/projects/mandiant-remediation/man-report.txt

find data/d001/projects -type f ! -name '*.age' ! -name 'README.adoc' ! -name '.gitkeep' ! -name '*.py' | sort

wpctl status                                    # PipeWire status
pactl list sinks short                          # list audio sinks
pw-play /usr/share/sounds/freedesktop/stereo/bell.oga  # test default sink
journalctl -b --grep='sof|cs35l56' --no-pager | tail -20  # kernel audio firmware
cat /proc/asound/cards                          # ALSA sound cards

gopass-personal-docs    # interactive entry creation
gopass-query bills      # list recurring bills with totals
gopass-query storage    # list storage units with gate codes
gopass-query export bills  # export category to JSON

make new-day      # create today's worklog + update attributes
make serve        # build + local server (port 8000)
make              # build only
make sync-nav     # sync worklog nav entries
make update-index # rebuild monthly index

ssh kvm-01 "sudo virsh list --all"
ssh kvm-02 "sudo virsh list --all"

ssh kvm-01 "ls -lh /mnt/nas/isos/*[Ii][Ss][Ee]* /var/lib/libvirt/images/*[Ii][Ss][Ee]* /mnt/onboard-ssd/isos/*[Ii][Ss][Ee]* 2>/dev/null"
ssh kvm-02 "ls -lh /mnt/nas/isos/*[Ii][Ss][Ee]* /mnt/ssd/libvirt/images/*[Ii][Ss][Ee]* 2>/dev/null"

sudo virsh console <vm-name>             # Escape: Ctrl+]

ssh kvm-01 "mount | grep nas; ls /mnt/"

for d in data/d001/projects/*/; do
  total=$(find "$d" -type f | wc -l)
  plain=$(find "$d" -type f ! -name '*.age' ! -name 'README.adoc' ! -name '.gitkeep' ! -name '*.py' | wc -l)
  echo "$(basename "$d") | ${total} files | ${plain} plaintext"
done

{
  echo "=== Power Supply ==="
  cat /sys/class/power_supply/*/status
  echo ""
  cat /sys/class/power_supply/*/type
  echo ""
  echo "=== UPower ==="
  upower -d | grep -E 'state|percentage|energy-rate|voltage'
  echo ""
  echo "=== dmesg (typec/thunderbolt/PD) ==="
  sudo dmesg | grep -iE 'typec|thunderbolt|ucsi|PD|power.delivery|charging' | tail -20
  echo ""
  echo "=== Pacman log (kernel/typec) ==="
  grep -iE 'thunderbolt|typec|ucsi|^.*upgraded linux ' /var/log/pacman.log | tail -20
} | tee /tmp/INC-$(date +%F)-usbc-charging.txt