David White MorningLightMountain713

Setting up ssh public key authentication on macOS using a YubiKey 4

I largely followed Florin's blog post, but have a few notes to add regarding issues I encountered:

I used a YubiKey 4, while the blog describes using a YubiKey NEO. I'm sure a YubiKey 5 would also work. I'm also running macOS 10.13.6.
I installed GPGTools as recommended. However, as I'll note later, it seems that gpg-agent only automatically starts when gpg is used; for ssh, you'll need to ensure it's running.
Before generating your keys, decide what key size you want to use. If you run the list command inside gpg --edit-card, look for the Key attributes line to see what is currently selected. On my YubiKey 4, it defaulted to 2048 bits for all keys:

Key attributes ...: rsa2048 rsa2048 rsa2048

# Install
su -
apt update
apt install udisks2 fwupd

# Display supported devices 
fwupdmgr get-devices

List the secure boot trust stores:

apt-get install -y efitools
efi-readvar

To take ownership of the system by following the next steps.

Create our own Platform Key (PK), Key Exchange Key (KEK), and Code Signing CAs:

People

	#!/bin/bash

	umask 077

	if [[ "$EUID" -ne 0 ]]; then
	echo "Please run as root / with sudo"
	exit
	fi

	! dpkg -s wireguard >/dev/null 2>&1 && apt-get install wireguard -y

	import os
	import pwd

	file_path = '/tmp/example'
	if not os.path.exists(file_path):
	os.makedirs(file_path) # creates with default perms 0777
	uid, gid = pwd.getpwnam('root').pw_uid, pwd.getpwnam('www-data').pw_uid
	os.chown(file_path, uid, gid) # set user:group as root:www-data

	# go check with ls -lah /tmp/example

	import sys
	import dbus

	bus = dbus.SystemBus()
	systemd = bus.get_object('org.freedesktop.systemd1', '/org/freedesktop/systemd1')
	manager = dbus.Interface(systemd, 'org.freedesktop.systemd1.Manager')

	def disable_and_stop(service):
	"""
	disable_and_stop and stop method will check if the service is already running or not in system.

	#!/usr/bin/env python3
	#
	# Building a tar file chunk-by-chunk.
	#
	# This is a quick bit of sample code for streaming data to a tar file,
	# building it piece-by-piece. The tarfile is built on-the-fly and streamed
	# back out. This is useful for web applications that need to dynamically
	# build a tar file without swamping the server.
	import os
	import sys

	import os.path
	import aiohttp.web

	async def get_tar(request):
	'''
	AIOHTTP server handler for GET request that wants to download files from a `directory` using TAR.
	'''
	directory = <specify the directory>

	response = aiohttp.web.StreamResponse(

	#!/bin/bash
	set -o errexit

	source ./library
	# Entry point of the script.
	# If makes sure that the user supplied the right
	# amount of arguments (image_name)
	# and then performs the main workflow:
	# 1. retrieve the image digest
	# 2. retrieve the layer info of image