透過 VNC 遠端管理 Steam Deck

Mon, 02 Jan 2023 04:37:17 +0800

Steam Deck 實際上就是一台內建了遊戲控制器的小型遊戲用個人電腦，搭載了類似遊戲主機介面的「遊戲模式」（Gaming Mode）來取代傳統電腦的「桌面模式」（Desktop Mode）。不過很難想像玩家們會願意為了它放棄自己的非 Steam 遊戲收藏，亦或那些目前不相容於 Steam 官方 Proton 轉譯層的遊戲。更多時候你會發現你需要經常性的在兩個模式間切換，但在 7 吋大的螢幕上使用桌面模式實在不是一個理想的方式；如果不想要被虛擬鍵盤佔據一半的螢幕，你還會需要一副額外的實體鍵盤。這些聽起來對於「玩遊戲」這件事而言實在有些繁瑣。

幸運的是，SteamOS 3.x 本質上就是一個客製化版本的 Arch Linux，我們可以利用既有的 Linux 工具來讓我們的生活更容易一些：在你的電腦上遠端管理 Steam Deck 的桌面模式。

切換至桌面模式

為了要安裝非 Steam 官方的軟體，我們需要先將主機切換至桌面模式。在 Steam Deck 上按一下鍵，接著於選單中選擇「電源 > 切換至桌面」。桌面模式目前僅有英文介面。

按一下鍵 > 電源 > 切換至桌面。

設定使用者密碼

桌面模式中預設的使用者帳號 (deck) 並沒有設定密碼。不過為了之後要進行的操作所需我們必須先為它設置一個密碼。我們可以透過 SteamOS 的圖形介面（GUI）進行設定。這項操作建議使用外接鍵盤，但你也可以透過遊戲控制器上的 + 組合鍵叫出虛擬鍵盤來使用。

透過「Application Launcher > Settings > System Settings > Users > Your Account > Change Password」來設定密碼。

如果你偏好使用指令介面（CLI），也可以在 Konsole （位於「Application Launcher > System > Konsole」）中透過 passwd 指令來變更密碼。請注意指令介面下輸入的密碼不會顯示，輸入完後只要按下 [Enter] 鍵完成設定即可：

(deck@steamdeck ~)$ passwd
New password:
Retype new password:
passwd: password updated successfully

開啟 Secure Shell（SSH）

取自維基百科：

Secure Shell （簡稱 SSH）是一種加密的網路傳輸協定，可在不安全的網路中為網路服務提供安全的傳輸環境。常見的用途是遠端登入系統和遠端執行命令。

SteamOS 內建了 SSH 服務但基於安全原因預設為停用。如果想要透過指令模式在電腦上遠端操作 Steam Deck，你可以選擇將它開啟。此步驟為選擇性。

開啟的方式為在 Konsole 內使用下列指令，並依照提示輸入上一步中我們設定好的使用這密碼：

(deck@steamdeck ~)$ sudo systemctl enable sshd.service
Created symlink /etc/systemd/system/multi-user.target.wants/sshd.service → /usr/lib/systemd/system/sshd.service.
(deck@steamdeck ~)$ sudo systemctl start sshd.service

「Enable」表示服務將會在下次開機起隨系統自動啟動，而「Start」表示會在目前的工作階段啟用服務。要停用或停止運行中的 SSH 服務，只需要將指令中的對應參數改為 disable 或 stop 即可。基於安全因素，建議在不使用時將此服務關閉。

Decky Loader

SteamOS 在系統更新時會將 /home（使用者個人目錄，包含系統本身以外的使用者相關的資料和設定值）之外的系統檔案全部還原回初始狀態，上述的變更在每次系統更新後都需要再次執行。如果不想要每次更新後都重複這些步驟（記錄顯示，SteamOS 在首年內推出了 90 次系統更新），可以考慮安裝「Decky Loader」和其中的「System Toolbox」套件以便直接在遊戲模式下開啟或關閉 SSH 服務，且不用擔心系統更新後需要重新手動設定。

Decky Loader 和 System Toolbox 套件。

設置 Virtual Network Computing（VNC）

取自維基百科：

Virtual Network Computing（簡稱 VNC），為一種使用 RFB 協定的圖形化桌面分享及遠端操作軟體。此軟體藉由網路，可傳送鍵盤與滑鼠的動作及即時的螢幕畫面。

簡而言之，它可以讓你在電腦上遠端操作你的 Steam Deck 桌面模式。SteamOS 目前無任何內建的 VNC 伺服器，也未在 Flathub（系統內建的 App Store）內提供，所以我們必須要透過 Arch Linux 的套件管理工具 pacman 來安裝。

有鑒於這個流程及其冗長乏味且每次系統更新後都需要重新執行，這裡提供一個自動化指令代碼。只要將下方的指令貼在 Konsole 內執行（需要網路連線。另外，由於 GitHub 網址路徑很長，你可以選擇直接於 Steam Deck 桌面模式中的瀏覽器內瀏覽本文章來複製貼上這行指令，或者透過 SSH 來執行）：

sh -c "$(curl -fsSL https://gist.githubusercontent.com/x43x61x69/9a5a231a25426e8a2cc0f7c24cfdaed9/raw/vnc_install.sh?$RANDOM)"

這個指令代碼會為再次安裝建立快捷方式，往後將不會再需要複製此指令。一旦執行完成，桌面上將會出現一個新的「VNC」資料夾，其中包含所有你需要的功能快捷方式，需要時只要雙擊圖示即可。例如：雙擊「Start VNC」將會啟動 VNC 服務（螢幕上不會顯示任何東西，但實際上有在運行）。現在你可以透過 VNC 檢視程式來遠端連線至 Steam Deck 的 IP 位置。在 macOS 中，內建了一個名為「螢幕共享」的 VNC 檢視程式：

透過 macOS 內建的「螢幕共享」來遠端存取 Steam Deck。

這個指令代碼包含什麼功能？

自動開啟與關閉 SteamOS 系統的唯讀保護。
初始化 pacman 的金鑰。
安裝 x11vnc 伺服器。
建立啟動與停用 VNC 服務的快捷方式。
建立重設 VNC 密碼的快捷方式。
建立系統更新後重新安裝 VNC 快捷方式。
建立登入後自動啟動 VNC 服務的指令代碼。

只個指令代碼可以安全地重複執行，所以不必擔心初期操作失敗。

啟動後自動執行

部分的人會建議設置一個系統服務來讓 VNC 服務自動啟動。但為求簡潔起見，這裡建議透過圖形介面來設定：

Application Launcher > System > System Settings > Startup and Shutdown > + Add… > Login Script.
選擇桌面「VNC」資料夾中的「vnc_startup.sh」。

當然，這個步驟是選擇性的。你也可以選擇透過快捷方式手動啟用或停用 VNC 服務。

Remote Control Your Steam Deck with VNC

Mon, 02 Jan 2023 04:37:17 +0800

Steam Deck is by nature a tiny gaming PC with a gamepad built-in, featuring a “Gaming Mode” for people who want a console-like experience instead of the traditional PC “Desktop Mode”. But it’s hard to imagine people can live without their non-Steam game collection, or games that were not yet compatible with SteamOS’s default Proton layer. More often than not, you would find yourself regularly switch back and forth between the two modes, and working in Desktop Mode on that tiny 7-inch display is anything but ideal. It would also require you to have a physical keyboard if you don’t want to use the virtual one that takes up 50% of the screen. That sounds a lot of work for gaming.

Luckily, since SteamOS 3.x is just a customized version of Arch Linux, we can use existing Linux tools to make our lives a bit easier by doing everything remotely on your computers.

Switch to Desktop Mode

In order to install any non-Steam software, we would need to switch to Desktop Mode. On your Steam Deck press the button, then select “Power > Switch to Desktop” from the menu.

Press the Button > Power > Switch to Desktop.

Set an user password

The default user account (deck) of the Desktop Mode does not have its password set. But it would be required later so we’d have to set one first. This can be done with the SteamOS graphical interface (GUI). It’s preferably to have an external keyboard for this process, but you can always use + button on the gamepad to bring up the on-screen keyboard if you don’t.

Set the password via “Application Launcher > Settings > System Settings > Users > Your Account > Change Password”.

If you prefer the CLI, it could also be done with passwd command via Konsole (can be found at “Application Launcher > System > Konsole”). Note that the entered password will not show, just type in your password and hit [Enter] on your keyboard when you finished:

(deck@steamdeck ~)$ passwd
New password:
Retype new password:
passwd: password updated successfully

Enable Secure Shell (SSH)

From Wikipedia:

The Secure Shell (SSH) Protocol is a cryptographic network protocol for operating network services securely over an unsecured network. Its most notable applications are remote login and command-line execution.

SteamOS has SSH service built-in but disabled for security reasons, you can choose to enable it if you want to remote access your Deck via CLI from your computer. This step is optional.

To enable it, use the following command in the Konsole and enter the password we set in the previous step when prompted:

(deck@steamdeck ~)$ sudo systemctl enable sshd.service
Created symlink /etc/systemd/system/multi-user.target.wants/sshd.service → /usr/lib/systemd/system/sshd.service.
(deck@steamdeck ~)$ sudo systemctl start sshd.service

“Enable” means the service will start automatically on next boot, while “start” means it will start for the current session. To disable or stop the service, just change the enable/start in the commands accordingly. For security reasons, it’s recommended to have it turned off when not using it.

Decky Loader

Since SteamOS update will restore any system changes except /home, those changes will need to be re-applied after each system update. If you don’t want to do this repeatedly (for the record, SteamOS has 90 updates during the first year), consider install “Decky Loader” and the “System Toolbox” plug-in so you can control SSH on/off directly from the Gaming Mode and not have to worry about system updates.

System Toolbox plug-in of Decky Loader.

Setup Virtual Network Computing (VNC)

From Wikipedia:

Virtual Network Computing is a graphical desktop-sharing system that uses the Remote Frame Buffer protocol to remotely control another computer. It transmits the keyboard and mouse input from one computer to another, relaying the graphical-screen updates, over a network.

In short, it let you remote access your Steam Deck’s Desktop Mode graphical interface remotely with your computer. SteamOS currently does not have any VNC server built-in or available via its Flathub app store, so we would have to install it via pacman - Arch Linux’s package manager.

Since this process is tedious and has to be done repeatedly after each system update, here’s a script for just that. Simply copy and paste the command below into Konsole and run it (Internet connection is required. Also the GitHub URL to the script is lengthy, you can open this blog post with your Steam Deck’s browser to copy it instead of typing, or run it via SSH):

sh -c "$(curl -fsSL https://gist.githubusercontent.com/x43x61x69/9a5a231a25426e8a2cc0f7c24cfdaed9/raw/vnc_install.sh?$RANDOM)"

The script will create a shortcut for reinstallation, you don’t have to copy paste this command in the future. Once done, a new “VNC” folder will appear on your desktop and contains all the necessary features that you might need. You can double click on each shortcut when needed, e.g. double click the “Start VNC” will start the VNC server (nothing will show up but it’s indeed running). Now use a VNC client on your computer to connect to it via IP address. For macOS, there’s built-in VNC viewer named “Screen Sharing”:

Remote access Steam Deck with macOS Screen Sharing.

What this script does?

Automatically enable/disable SteamOS system read-only protection for you.
Initialize pacman keys.
Install x11vnc server.
Create shortcuts for enabling/disabling VNC.
Create a shortcut for VNC password resetting.
Create a shortcut for easy reinstalling x11vnc after system updates.
Create script for auto start VNC server on login.

It’s safe for re-running, so don’t worry if not succeeded during initial attempts.

Auto start on startup

Some people would recommend you to setup a system service to have VNC server start on startup automatically. But for the sake of simplicity, I would suggest set it up with the GUI:

Application Launcher > System > System Settings > Startup and Shutdown > + Add… > Login Script.
Select the “vnc_startup.sh” within the VNC folder on your desktop.

Of course, this is complete optional. You can always use the shortcuts to start/stop the VNC server manually.

Apple 檔案系統（APFS）的 Firmlink 黑魔法

Sun, 18 Dec 2022 17:35:35 +0800

Apple 自 macOS Catalina 起引入了一個新的檔案階層系統，用以區隔同一個 Apple 檔案系統（APFS）容器（Container）內的系統以及使用者資料：Macintosh HD 作為系統檔案使用並以唯讀形式掛載；Macintosh HD - Data 作為使用者互動檔案（例如：應用程式、偏好設定檔案）使用並以可讀寫形式掛載。容器中亦包含了其他像是 Recovery 這種用於系統還原（RecoveryOS）使用的磁區（Volume）：

$ diskutil list
/dev/disk0 (internal, physical):
   #:                       TYPE NAME                    SIZE       IDENTIFIER
   0:      GUID_partition_scheme                        *1.0 TB     disk0
   1:             Apple_APFS_ISC Container disk2         524.3 MB   disk0s1
   2:                 Apple_APFS Container disk3         994.7 GB   disk0s2
   3:        Apple_APFS_Recovery Container disk1         5.4 GB     disk0s3

/dev/disk3 (synthesized):
   #:                       TYPE NAME                    SIZE       IDENTIFIER
   0:      APFS Container Scheme -                      +994.7 GB   disk3
                                 Physical Store disk0s2
   1:                APFS Volume Macintosh HD - Data     410.4 GB   disk3s1
   2:                APFS Volume Macintosh HD            8.9 GB     disk3s3
   3:              APFS Snapshot com.apple.os.update-... 8.9 GB     disk3s3s1
   4:                APFS Volume Preboot                 4.7 GB     disk3s4
   5:                APFS Volume Recovery                769.9 MB   disk3s5
   6:                APFS Volume VM                      2.1 GB     disk3s6

每個磁區的角色（Role）於它們的 Superblock 架構（apfs_superblock_t）中指派，相關定義可在 Apple 官方的 APFS 參考資料中找到：

#define APFS_VOL_ROLE_NONE      0x0000
#define APFS_VOL_ROLE_SYSTEM    0x0001
#define APFS_VOL_ROLE_USER      0x0002
#define APFS_VOL_ROLE_RECOVERY  0x0004
#define APFS_VOL_ROLE_VM        0x0008
#define APFS_VOL_ROLE_PREBOOT   0x0010
#define APFS_VOL_ROLE_INSTALLER 0x0020
#define APFS_VOL_ROLE_DATA      0x0040
#define APFS_VOL_ROLE_BASEBAND  0x0080

雖然當時對於 macOS 來說這是全新的概念，但這項措施其實已經用於 iOS 一段時間。當系統啟動時，Macintosh HD（APFS_VOL_ROLE_SYSTEM）和 Macintosh HD - Data（APFS_VOL_ROLE_DATA）兩個磁區會顯示為單一邏輯磁區，且兩者的內容將透過 Firmlink 合併為一。

Firmlinks

Firmlink 類似於 Symbolic Link 但允許雙向移動且僅適用於目錄。這有效的使 macOS 能夠整併 Macintosh HD 及 Macintosh HD - Data 的內容，例如：位於唯讀磁區 Macintosh HD 的目錄 /Users 實際上為 Macintosh HD - Data 這個可讀寫磁區上 /Shared 目錄的 Firmlink。此項設計同時也讓 Apple’s 系統完整性保護（System Integrity Protection，SIP）能更加完美的銜接，例如：受 SIP 保護的系統應用程式安裝於唯讀目錄 /System/Applications，而使用者應用程式則可被安裝於 /Applications，然而使用者僅會看到兩者內容合併顯示於根目錄下的 /Applications。

系統預設的 Firmlink 可於 /usr/share/firmlinks 中查詢：

$ cat /usr/share/firmlinks
/AppleInternal	AppleInternal
/Applications	Applications
/Library	Library
/System/Library/Caches	System/Library/Caches
/System/Library/Assets	System/Library/Assets
/System/Library/PreinstalledAssets	System/Library/PreinstalledAssets
/System/Library/AssetsV2	System/Library/AssetsV2
/System/Library/PreinstalledAssetsV2	System/Library/PreinstalledAssetsV2
/System/Library/CoreServices/CoreTypes.bundle/Contents/Library	System/Library/CoreServices/CoreTypes.bundle/Contents/Library
/System/Library/Speech	System/Library/Speech
/Users	Users
/Volumes	Volumes
/cores	cores
/opt	opt
/private	private
/usr/local	usr/local
/usr/libexec/cups	usr/libexec/cups
/usr/share/snmp	usr/share/snmp

建立你自己的合成 Firmlink

自 Catalina 起要於根目錄下建立目錄，我們必須仰賴合成 Firmlink（Synthetic Firmlink）：

在 /etc 目錄下新增一個名為 synthetic.conf 的檔案。
確保該檔案的權限設定如下：

root：讀，寫
wheel：讀
everyone：讀

（通常只要透過指令「sudo touch /etc/synthetic.conf」即可完成上述設定。）

要將目錄 /Users/foo/bar 連結至 /baz，我們可以新增一個新的條目至剛剛建立的檔案：

# create a firmlink named "baz" at / which points to "Users/foo/bar"
baz Users/foo/bar

你也可以檢視 man synthetic.conf 來查詢所有可用的選項。請注意，兩個路徑中間必須使用一個「tab」做分隔，使用空白符號將不會產生作用。同時路徑的開頭不包含反斜線（/）。重新啟動系統後剛剛的變更即會生效。

Apple File System (APFS) Firmlink Black Magic

Sun, 18 Dec 2022 17:35:35 +0800

Apple introduced a new way of file system hierarchy that can separate the system and user data within an APFS system container since macOS Catalina: Macintosh HD, a volume which is mounted as read-only for system files; and Macintosh HD - Data, a volume which is mounted as writable and for all user intractable files such as applications and preferences. There are also other volumes such as Recovery that is used for RecoveryOS:

$ diskutil list
/dev/disk0 (internal, physical):
   #:                       TYPE NAME                    SIZE       IDENTIFIER
   0:      GUID_partition_scheme                        *1.0 TB     disk0
   1:             Apple_APFS_ISC Container disk2         524.3 MB   disk0s1
   2:                 Apple_APFS Container disk3         994.7 GB   disk0s2
   3:        Apple_APFS_Recovery Container disk1         5.4 GB     disk0s3

/dev/disk3 (synthesized):
   #:                       TYPE NAME                    SIZE       IDENTIFIER
   0:      APFS Container Scheme -                      +994.7 GB   disk3
                                 Physical Store disk0s2
   1:                APFS Volume Macintosh HD - Data     410.4 GB   disk3s1
   2:                APFS Volume Macintosh HD            8.9 GB     disk3s3
   3:              APFS Snapshot com.apple.os.update-... 8.9 GB     disk3s3s1
   4:                APFS Volume Preboot                 4.7 GB     disk3s4
   5:                APFS Volume Recovery                769.9 MB   disk3s5
   6:                APFS Volume VM                      2.1 GB     disk3s6

The role of each volume was assigned in its superblock structure (apfs_superblock_t), which can be found in Apple’s APFS Reference:

#define APFS_VOL_ROLE_NONE      0x0000
#define APFS_VOL_ROLE_SYSTEM    0x0001
#define APFS_VOL_ROLE_USER      0x0002
#define APFS_VOL_ROLE_RECOVERY  0x0004
#define APFS_VOL_ROLE_VM        0x0008
#define APFS_VOL_ROLE_PREBOOT   0x0010
#define APFS_VOL_ROLE_INSTALLER 0x0020
#define APFS_VOL_ROLE_DATA      0x0040
#define APFS_VOL_ROLE_BASEBAND  0x0080

Although this is new to macOS at the time, the scheme was already used in iOS for a while. When the system booted, both Macintosh HD (APFS_VOL_ROLE_SYSTEM) and Macintosh HD - Data (APFS_VOL_ROLE_DATA) will be presented as a single logical volume with both their contents combined with the magic of firmlinks.

Firmlinks

Firmlinks are similar to symbolic links but allows bi-directional travel and only for directories. This effectively allow macOS to merge the contents of Macintosh HD and Macintosh HD - Data, e.g. /Users on the read-only Macintosh HD is essentially a firmlink of /Shared on the writable Macintosh HD - Data. This would also make Apple’s System Integrity Protection (SIP) more seamless, e.g. SIP-protected system applications resides in read-only /System/Applications and user applications can be installed in the /Applications, while the user see the combination of both in the root /Applications.

The system firmlinks can be found at /usr/share/firmlinks:

$ cat /usr/share/firmlinks
/AppleInternal	AppleInternal
/Applications	Applications
/Library	Library
/System/Library/Caches	System/Library/Caches
/System/Library/Assets	System/Library/Assets
/System/Library/PreinstalledAssets	System/Library/PreinstalledAssets
/System/Library/AssetsV2	System/Library/AssetsV2
/System/Library/PreinstalledAssetsV2	System/Library/PreinstalledAssetsV2
/System/Library/CoreServices/CoreTypes.bundle/Contents/Library	System/Library/CoreServices/CoreTypes.bundle/Contents/Library
/System/Library/Speech	System/Library/Speech
/Users	Users
/Volumes	Volumes
/cores	cores
/opt	opt
/private	private
/usr/local	usr/local
/usr/libexec/cups	usr/libexec/cups
/usr/share/snmp	usr/share/snmp

Create Your Own Synthetic Firmlinks

To create root-level directories since Catalina, we need to rely on synthetic firmlinks:

Create a file in /etc named synthetic.conf.
Make sure its permissions were set to:

root: read, write
wheel: read
everyone: read

(Usually command “sudo touch /etc/synthetic.conf” would do all the above.)

In order to link directory /Users/foo/bar to /baz, we can add a new entry to the file we just created as following:

# create a firmlink named "baz" at / which points to "Users/foo/bar"
baz Users/foo/bar

You can also check man synthetic.conf for all available options. Note that the two should be separate with a tab instead of spaces or it won’t work. Also the paths are not started with /. Now reboot the system and see the changes we just made.

在 VMware Fusion 中啟用 HID Passthrough

Sun, 10 Jul 2022 04:31:32 +0800

最近購買了一副新鍵盤，它在各方面都表現的相當不錯，但只能透過 Windows 環境才能更新韌體。如果嘗試將鍵盤直接透過 USB 連接到 Windows 虛擬機，你將會失望的發現這類的輸入裝置不會顯示在虛擬機的 USB 裝置清單中。

其背後的原因其實相當合理：因為輸入裝置（HID）如果被直接指派給虛擬機，將可能導致使用者失去對主作業系統的控制權，因此輸入裝置的直通輸入（HID Passthrough）功能預設被停用。VMware 提供了相關的知識庫文件來引導使用者如何啟用此功能。不過在經過一些測試後，此文件似乎對於最新版本的 VMware Fusion（12.2.3 以及 Public Tech Preview 21H1）無效，甚至可能反過來導致此功能無法使用。

如何啟用輸入裝置直通輸入（HID Passthrough）

完全退出 Fusion。
編輯 /Library/Preferences/VMware Fusion/config（需管理者權限）。若檔案不存在則建立一個新檔案。
在 config 檔案中加入下列內容：
```
usb.generic.allowHID = "TRUE"
usb.generic.allowLastHID = "TRUE"
```
如果你想要一併啟用視訊裝置直通輸出，可以再加入下列內容：
```
vusbcamera.passthrough = "TRUE"
```
儲存檔案並重新啟動 Fusion。

以上步驟將會對所有此電腦中的虛擬機啟用 USB 輸入裝置的直通輸入功能。如果輸入裝置仍未出現，請檢查對應虛擬機的 .vmx 檔案中是否有上述內容並將他們移除。

輸入裝置現在可以直接與虛擬機進行連接。

請留意，一旦裝置以此方式連接，必須實體與電腦中斷連線方能與該虛擬機解除連線。

其他用途

因為輸入裝置處於直通輸入模式，USB 安全金鑰（Security Key）可用於虛擬機的 Windows Hello 功能。

HID Passthrough in VMware Fusion

Sun, 10 Jul 2022 04:31:32 +0800

I recently bought a keyboard, which is all nice except that it requires a Windows environment to update the firmware. If you try connecting the keyboard directly to a Windows VM in VMware Fusion via USB, you’d be disappointed to find out that they were not even shown in the device list.

The reason behind it is actually valid: since human interface devices (HID) being assigned directly to the VM could result in losing control to the host OS, thus HID passthrough was disabled by default. VMware does provide a KB article to guide you on how to enable it. But after some testing, seems in the latest version of VMware Fusion (12.2.3 and Public Tech Preview 21H1), doing so not only won’t get you the result you want, it will actually prevent it.

How to Enable HID Passthrough

Quit Fusion completely.
Edit the file /Library/Preferences/VMware Fusion/config (requires admin privileges). Create one if it wasn’t existed already.
Add the following lines to the config file:
```
usb.generic.allowHID = "TRUE"
usb.generic.allowLastHID = "TRUE"
```
If you wish to passthrough USB cameras, you can also add the following line:
```
vusbcamera.passthrough = "TRUE"
```
Save the file and relaunch Fusion.

This will essentially enable USB HID passthrough for all your VM. If the HID devices still are not there, check the .vmx file if the above lines were there and remove them.

HID devices can now be connect to VM directly.

Note that once you did, you will have to disconnect them physically in order to disconnect them from the VM.

Other Usage

Since the HID device is in passthrough mode, USB security key devices can now be used for Windows Hello in the VM.

Dior by Birkenstock：Tokio 涼鞋心得

Sat, 18 Jun 2022 19:46:59 +0800

人無法過度關心鞋子的選擇。太多的女性認為它們無關緊要，然而一位優雅女性的證明正是她腳上的穿搭。

Christian Dior

Dior 連袂 Birkenstock（勃肯）的聯名系列現在正式發表。此系列作為 Dior 今天男性秋冬系列的一部分首次於一月的巴黎時裝周亮相。

正式發售的版本包含 Tokio 及 Milano 兩種鞋款，以磨砂小牛皮搭配三種配色，分別為：灰色（此配色之鞋面採用羊毛氈）、黑色以及坯布色（然而實際包裝上的標籤為米色）。另有一種較罕見的刺繡款 Tokio 涼鞋，以致敬 1957 年 Dior 高級訂製服系列。

Dior by Birkenstock 聯名系列。

我最後選擇了鍾愛的坯布色 Tokio 涼鞋款式，更容易與我多數的服裝做搭配。

包裝與細節

與 Louis Vuitton 和 Nike 聯名的「Air Force 1」以及「Air Dior」類似，Dior by Birkenstock 聯名系列亦採用了特殊的包裝，採用與 EVA 鞋底相同的 Dior 老花以及 Birkenstock「骨」構成的漸變主題的壓印外盒：

Dior 老花以及 Birkenstock「骨」構成的漸變主題。

雖然此鞋款相較於普通的勃肯鞋讓人感到更佳精緻，因款式較為特殊，一旦鞋底磨損後可能無法如其他勃肯鞋一般透過 Dior 或者 Birkenstock 官方維修恢復為出廠時的鞋底圖樣。包裝紙亦採用了與外包裝相同的圖案而非一般 Dior 鞋履所使用的白色 Dior 字樣包裝紙。防塵袋為白色（Dior 男士系列較常使用海軍藍色的防塵袋，而 Dior 女士系列則較常使用白色防塵袋），底部綴有「Birkenstock」的標誌。

與外包裝相同的圖案的包裝紙以及白色防塵袋。

包裝包含一張使用相同主題的浮雕印刷卡片，以法文以及英文介紹本次的聯名系列。聯名版本的勃肯鞋於磨砂小牛皮後踝帶內側壓印了尺寸以及「Limited Edition」（限定版）字樣。通常版本的勃肯鞋履尺寸號碼一般位於人體工學鞋底面上。Tokio 款式於鞋頭部分多了橡膠加固，使得它比起一般勃肯鞋更加防水、耐用。Dior 經典鋁質扣環也令聯名版本更容易穿脫，更可以減少小牛皮的損傷。

有趣的是，Dior 選擇由 Birkenstock 的德國工廠生產此次的聯名系列，而非自家的義大利工坊。

簡介卡以及熱壓印。

當然，這些奢華細節勢必有相對的代價：正確來說是新台幣 35,000 元 —— 大約是任一雙勃肯鞋的十倍。

惡名昭彰的「適應期」

即便看起來如此優越，它仍舊有我個人難以喜愛的面向。

不知基於何種原因，Dior 選擇使用 Birkenstock 惡名昭彰的經典硬式鞋底。它需要穿著者在感受到客製鞋一般的舒適之前忍受漫長且疼痛的適應期。這幾年 Birkenstock 已經針對旗下的涼鞋預設提供軟底的款式，因大眾已不再相信鞋履所帶來的舒適感值得承受「一分耕耘，一分收穫」式的痛苦過程。

如果你打算購入此鞋款，請先做好得穿幾週超厚底襪和忍受足弓疼痛的心理準備。使用錘子輕輕敲打受壓處可能有助於減緩過渡期的不適感，但拿工具敲打定價將近四萬元的鞋履對多數人來說勢必會造成一些心理壓力。如果你想要一開始就能舒適的穿鞋，建議省點錢去購買非 Dior 聯名的軟底勃肯鞋。Christian Louboutin 曾表示：

鞋履轉化人的肢體語言和態度。它們在生理與心靈層面提升一個人。

Christian Louboutin

我完全同意大師的說法⋯⋯除了這次以外。

Dior by Birkenstock: Tokio Mules Review

Sat, 18 Jun 2022 19:46:59 +0800

You can never take too much care over the choice of your shoes. Too many women think that they are unimportant, but the real proof of an elegant woman is what is on her feet.

Christian Dior

Dior’s Birkenstock collaboration is now available, featuring two of Birkenstock’s signature styles: the Tokio Mule and Milano Sandal. It was first revealed during Paris Fashion Week back in January as part of Dior Men’s fall/winter collection.

The retail version features three different color options in nubuck calfskin for both Tokio and Milano: gray (this option also features a felted wool upper body instead of nubuck calfskin one), black and greige (tho on the box it said beige). There’s also a rare variant of grey Tokio Mules with pattens represent the 1957 Dior haute couture collection.

Dior by Birkenstock collections.

I end up picked up a pair of Tokio as it’s my favorite style, and in beige as it works best with most of my outfits.

Packaging and Details

Like the Louis Vuitton and Nike “Air Force 1” and the “Air Dior”, the Dior by Birkenstock collaboration also features a special packaging with Dior Oblique and Bones gradient motif that matches its EVA outsole:

Dior Oblique and Birkenstock Bones gradient motif.

Although it looks nice and feel more premium than any ordinary birks, I doubt the outsole can be restored to its original oblique pattern once wear out, neither by Dior or Birkenstock. The wrapping paper were also in such pattern unlike other Dior shoes. The dust bags were in white (Dior Men tend to use navy blue dust bags, while Dior Women tend to have white dust bags), with “Birkenstock” logo at the bottom.

The oblique wrapping paper and dust bags.

There’s a small card which embossed pattern just like the outer box, as an introduction to the Dior and Birkenstock collaboration. The birks were hot stamped with size number and “limited edition” label in silver on the back strap. Ordinary birks usually have their size numbers on the footbed. The toe section of the Tokio were reinforced with rubber, make then more water resistance and durable than usual birks. The Dior signature aluminum buckle make it easier to open while also prevent bending of the calfskin.

Interestingly, Dior has Birkenstock manufactures these birks in Germany instead of making them in-house in Italy.

Introduction card and hot stamping.

And of course, all those premium touches came with a price: €960 to be exact - that’s about ten fold of any off-the-shelf birks.

The Infamous “Break-In” Process

As superior as it seems, there’s actually something I personally didn’t like.

For some reason, Dior chose Birkenstock’s infamous classic footbed, which requires the wearer to endure the painful break-in process before it can be comfortable. Birkenstock these days offers soft footbed by default for most of their sandals, as the majority no longer believes the pain is actually worth the outcome.

Prepare to wear some extra thick socks and bearing the foot arch pain for a few weeks if you are getting a pair of these. Some hammer work might help with the process, but hammering a €1k shoes would definitely give most people some pressure. But if you want something comfy from the start, save yourself a few bucks and get a non-Dior birks instead. As Christian Louboutin once said,

Shoes transform your body language and attitude. They lift you physically and emotionally.

Christian Louboutin

Well, I can’t agree more with him…just not this time.

透過 Quartz 濾鏡減少 PDF 檔案大小

Sun, 12 Jun 2022 14:39:14 +0800

macOS 內建 Quartz 濾鏡「減少檔案大小」，可透過重新壓縮圖形來減少檔案的大小。對於需要降低高品質的 PDF 檔案來發送電子郵件附件或上傳至有檔案大小限制的網站時它相當的方便相當的方便。

不過這個濾鏡有個小問題：預設它會將圖片解析度縮小至一半，且有著 512 像素的長寬上限。這將使得壓縮後的圖片內容過於模糊而難以閱讀。幸運的是，我們有方法可以客製化濾鏡壓縮參數以符合特定的需求。

透過「色彩同步工具程式」修改 Quartz 濾鏡

「色彩同步工具程式」位於「應用程式 > 工具程式」中（也可以透過 Spotlight 開啟）：

首先，點擊「複製」按鈕來建立一個可編輯的「減少檔案大小」濾鏡副本：

接著重新命名以及修改新建立的濾鏡來調整目標影像品質：

直接修改 Quartz 濾鏡檔案

雖然圖形介面可以調整影像的壓縮率，但因為滑桿未顯示百分比數值導致我們無法精確的調整畫質參數。想直接編輯參數，開啟 Finder，找到位於「~/Library/Filters」（簡單的方法為在 Finder 選單「前往 > 移至資料夾…」中貼上該路徑）的濾鏡檔案：

透過文字編輯器開啟與剛才建立的濾鏡名稱相符的「.qfilter」檔案：

即可指定相關的數值。其中「Compression Quality」介於 0.0 和 1.0 之間，數值越高品質越佳。

套用 Quartz 濾鏡

建立好的濾鏡可以透過預覽程式於儲存或匯出 PDF 檔案時套用：

測試相關的參數以找出最符合使用情境的組合。你也可以建立多個客製化的濾鏡。

Reduce PDF Size with Quartz Filter

Sun, 12 Jun 2022 14:39:14 +0800

macOS has a built-in Quartz filter named “Reduce File Size”, which can be used to reducing the size of the file by recompressing graphics. It’s useful when you need to reduce the size of a high quality PDF for emailing or uploading to a website that has file size limitations.

But there’s a small issue: by default, this filter scales the image resolution by 50% and has a maximum width or height of 512 pixels, render most of the images way too blur to be readable. Fortunately, there’s a way to customize it to your needs.

Modify Quartz filters in ColorSync Utility

ColorSync Utility can be found in “Applications > Utilities” (or simply use Spotlight):

First, duplicate the existing “Reduce File Size” filter by clicking the duplicate button so we can have a modifiable copy:

Then rename and modify the newly created filter to adjust the target image quality:

Modify Quartz Filters Directly

Although the image compression is adjustable, we are unable to specify the quality factor/recompressing ratio as it’s set by a slider without percentage value. To edit the values directly, open Finder, locate the filter file at “~/Library/Filters” (an easier way is via “Finder > Go > Go to Folder…” and paste the path):

Open the “.qfilter” file with text editor that matched the one you created:

You can then specify the values. The “Compression Quality” is between 0.0 and 1.0, higher means better quality.

Apply Quartz Filters

The created filter is accessible in Preview app when saving or exporting:

Test the values to find what works best for you. You can also have multiple customized filter.