section: post date: "2020-04-12" title: "Archlinux sur un SSD avec EFI / LUKS2 / LVM2 / BTRFS" description: "Procédure d'installation d'Archlinux mise à jour et modernisée" slug: archlinux-efi-ssd-luks2-lvm2-btrfs tags:
- linux
- devops
- luks2
| const WEBHOOK_HOST = "<replace with your host>"; | |
| const WEBHOOK_PATH = "<replace with your path>"; | |
| function signAndSend(body) { | |
| const signingKey = "-----BEGIN PRIVATE KEY-----\nREPLACE WITH YOUR PKCS8 ENCODED PRIVATE RSA KEY \n-----END PRIVATE KEY-----" | |
| // Serialize payload request | |
| const payload = JSON.stringify(body) | |
| // Pack signature parameters |
| // Copyright (C) 2020-2023 by Thibault NORMAND <me+oss@zenithar.org> | |
| // | |
| // This Source Code Form is subject to the terms of the Mozilla Public | |
| // License, v. 2.0. If a copy of the MPL was not distributed with this | |
| // file, You can obtain one at http://mozilla.org/MPL/2.0/. | |
| // | |
| // This Source Code Form is "Incompatible With Secondary Licenses", as | |
| // defined by the Mozilla Public License, version 2.0. | |
| package idmask |
| package main | |
| import ( | |
| "encoding/json" | |
| "fmt" | |
| "net/http" | |
| "time" | |
| ) | |
| // ----------------------------------------------------------------------------- |
| // MIT License | |
| // | |
| // Copyright (c) 2020 Thibault Normand | |
| // | |
| // Permission is hereby granted, free of charge, to any person obtaining a copy | |
| // of this software and associated documentation files (the "Software"), to deal | |
| // in the Software without restriction, including without limitation the rights | |
| // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell | |
| // copies of the Software, and to permit persons to whom the Software is | |
| // furnished to do so, subject to the following conditions: |
| A> Generate ephemeral encryption keypair | |
| A> Bob Identity: harp:v1:identity:nH01kx0xukWDuji3hwNNslj_2YKvp0TdnAB6OPzR1B4:1605982091 | |
| A> mPk[Alice => Bob] => KEK: 1TyRX0Azt-w3bsy6bvSJ26StzFvp92PC8FFV_YEQSVY | |
| A> Generate DEK | |
| A> Encrypt [Msg] with DEK | |
| A> Encrypt DEK with KEK | |
| A> Send to bob [MasterPub || ts || EphPub || enc(DEK, KEK) || enc(Msg, DEK)] | |
| B> Extract MasterPub, ts and Ephemeral Encryption Public key | |
| B> Authenticate to PKG |
| package main | |
| import ( | |
| "bytes" | |
| "crypto/ecdsa" | |
| "crypto/sha256" | |
| "encoding/base64" | |
| "encoding/binary" | |
| "encoding/json" | |
| "fmt" |
| #!/bin/bash | |
| set -u | |
| set -e | |
| set -o pipefail | |
| export PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin | |
| cat <<'EOF' > /etc/modprobe.d/blacklist-ipv6.conf |
section: post date: "2020-04-12" title: "Archlinux sur un SSD avec EFI / LUKS2 / LVM2 / BTRFS" description: "Procédure d'installation d'Archlinux mise à jour et modernisée" slug: archlinux-efi-ssd-luks2-lvm2-btrfs tags:
| // | |
| // Licensed under the Apache License, Version 2.0 (the "License"); | |
| // you may not use this file except in compliance with the License. | |
| // You may obtain a copy of the License at | |
| // | |
| // http://www.apache.org/licenses/LICENSE-2.0 | |
| // | |
| // Unless required by applicable law or agreed to in writing, software | |
| // distributed under the License is distributed on an "AS IS" BASIS, | |
| // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |