Alex Bosworth alexbosworth

    - 03817596435f25a156da4a89c9dabf2a3e4f9a74418543f3de6b77cab780a473a1
    - 0293952cbf1be801ba5d73ff34a950affb64fcbfe2d0f46ed0b32c468874aa0d57
    - 0356c1091bb139ad3520eb370f1512ac2f4ed67b87d2687638252152fbf2b4575f
    - 03a93b87bf9f052b8e862d51ebbac4ce5e97b5f4137563cd5128548d7f5978dda9
    - 027b510a7c40bc1aab58345eedad23062578a5647d13a69ed5a2b90290de2faa81
    - 03d6f80df785288de2fe5de19f24ba8a1db3d20647a88d0a903be9de3e7bb8fce1
    - 0399d0b447f378db24fe5f4ecc7afb65bc074596a0fc8cf299d5cb8319ad299f8d

Setting up ssh public key authentication on macOS using a YubiKey 4

I largely followed Florin's blog post, but have a few notes to add regarding issues I encountered:

Basic setup notes

I used a YubiKey 4, while the blog describes using a YubiKey NEO. I'm sure a YubiKey 5 would also work. I'm also running macOS 10.13.6.
I installed GPGTools as recommended. However, as I'll note later, it seems that gpg-agent only automatically starts when gpg is used; for ssh, you'll need to ensure it's running.
Before generating your keys, decide what key size you want to use. If you run the list command inside gpg --edit-card, look for the Key attributes line to see what is currently selected. On my YubiKey 4, it defaulted to 2048 bits for all keys:

Key attributes ...: rsa2048 rsa2048 rsa2048

systemd

Edit:

sudo emacs /etc/systemd/system/lnd.service

[Service]

Build and Install Tor

# Install build tools
sudo apt-get install git build-essential automake libevent-dev libssl-dev pkg-config zlib1g-dev libzstd-dev

# Clone Tor
git clone https://git.torproject.org/tor.git

# Enter Tor dir

Installing Bitcoin from Source with APT

# Install build tools
sudo apt install git build-essential libtool autotools-dev automake pkg-config libssl-dev libevent-dev bsdmainutils libboost-system-dev libboost-filesystem-dev libboost-chrono-dev libboost-program-options-dev libboost-test-dev libboost-thread-dev libminiupnpc-dev libzmq3-dev

# Clone the latest release
git clone -b v0.20.1 https://github.com/bitcoin/bitcoin.git

# Enter the cloned repo dir

LND backup script for `channel.backup` using inotify

Install inotify

sudo apt install inotify-tools

Create script to watch for changes and copy on change

Install make

You will probably need build essential tools

# Ubuntu install build tools:
sudo apt-get install -y build-essential

Install Node.js

Setup iptables

Limit the number of incoming TCP connections

sudo iptables -N syn_flood
sudo iptables -A INPUT -p tcp --syn -j syn_flood
sudo iptables -A syn_flood -m limit --limit 1/s --limit-burst 3 -j RETURN
sudo iptables -A syn_flood -j DROP
sudo iptables -A INPUT -p icmp -m limit --limit 1/s --limit-burst 1 -j ACCEPT

Setup UFW

Turn on the firewall

sudo ufw logging on
sudo ufw enable
// PRESS Y
sudo ufw status
sudo ufw allow OpenSSH


	const sub = lnd.sendPayment();

	sub.on('error', err => {
	console.log("ERR", err);
	})
	sub.on('end', () => console.log("END"));
	sub.on('status', status => console.log("STATUS", status));
	sub.on('data', data => {
	console.log("PAYMENT", data);