brian-tex

Introduction

An SSH key is a credential used to access a device capable of running the SSH protocol. It consists of a public and private key pair that authenticate the user trying to access the device.

In a server environment, public ssh keys are added to an authorized_keys file in a user account. Once there, when a user attempts to access the server over ssh using their private ssh key, the server is able to authenticate the user and gives them access directly to their account.

Workflow Prerequisites

This workflow requires a Windows computer as PuTTY is a Windows-only application.

Install Putty

1. Go to https://www.putty.org/

brian-tex

Introduction:

• This Page shows how to make a SHA-512 hash. This is needed for creating a hash of a SysAdmin user account password as it allows other SysAdmins to set each other's passwords without knowing what the password is.

Workflow Prerequisites

• A Linux computer.
• The mkpasswod binary (found in the whois package).

---

Create the Password Hash

1. Access Terminal with mkpasswd installed.

brian-tex

Use the DNS CNAME validation method to verify domain control

Digicert allows users to add a DNS CNAME record to demonstrate control over the domain they are creating a cert for.

This process can (and should) be done up to 30 days

How to verify domain control

1. Go to digicert.com and sign in.
2. Navigate to CERTIFICATES > Orders.
3. Search for the certificate name you need to validate the domain for.
4. Click on the certificate name.

brian-tex

version: "2.4"

services:

  rickroll:
    image: modem7/docker-rickroll
    container_name: Rickroll
    ports:
      - 9991:8080
    environment:

brian-tex

version: '3.8'

services:
  my_container:
    image: your_image_name:your_image_tag
    container_name: my_container
    restart: unless-stopped
    volumes:
      - type: volume
        source: nfs_share

brian-tex

1. First you'll want to manually create the Docker volumes:

   docker volume create --driver local \
     --opt type=nfs \
     --opt o=addr=nfs_server_ip,rw,nolock,hard,nointr,nfsvers=4 \
     --opt device=:/path/to/nfs/share/on/server \
     nfs_share
   
   docker volume create --driver local \
   

--opt type=cifs \

brian-tex

Introduction:

• This Page shows how to make a SHA-512 hash. This is needed for creating a hash of a SysAdmin user account password as it allows other SysAdmins to set each other's passwords without knowing what the password is.

Workflow Prerequisites

• A Linux or Mac computer.
  • Linux: The mkpasswod binary (found in the whois package).
  • Mac: Python3 and passlib

---

Create the Password Hash

brian-tex

Introduction

This page lists the steps needed to create an ssh key for Biola System Administration use. We currently use ecdsa with 521 bits.

---

Step 1: Create an SSH Key

1. Run the following in terminal:
   • Linux

     ssh-keygen -t ecdsa -b 521 -f ~/.ssh/desiredSSHKeyFilename
     

brian-tex

Introduction

This page lists the steps to convert an OpenSSL-generated SSH private key into a .ppk formatted file suitable for use with PuTTY. This process enables seamless integration between SSH key formats, allowing users to leverage PuTTY's functionality and compatibility.

Workflow Prerequisites

• This workflow requires a Windows computer as PuTTY is a Windows-only application.
• A private ssh key.

Install Putty

1. Go to https://www.putty.org/
2. Click the Download PuTTY button.

brian-tex

Introduction

This page helps users install the PuTTY application on their Windows computer.

Workflow Prerequisites

• This workflow requires a Windows computer as PuTTY is a Windows-only application.

Install Putty

1. Go to https://www.putty.org/
2. Click the Download PuTTY button.
3. Click the 64-bit PuTTY .msi file download link.