Skip to content

Instantly share code, notes, and snippets.

View brian-tex's full-sized avatar

Brian brian-tex

View GitHub Profile

Introduction

This page lists the steps needed to create an ssh key for Biola System Administration use. We currently use ecdsa with 521 bits.


Step 1: Create an SSH Key

  1. Run the following in terminal:
    • Linux
      ssh-keygen -t ecdsa -b 521 -f ~/.ssh/desiredSSHKeyFilename
      

Introduction:

  • This Page shows how to make a SHA-512 hash. This is needed for creating a hash of a SysAdmin user account password as it allows other SysAdmins to set each other's passwords without knowing what the password is.

Workflow Prerequisites

  • A Linux or Mac computer.
    • Linux: The mkpasswod binary (found in the whois package).
    • Mac: Python3 and passlib

Create the Password Hash

  1. First you'll want to manually create the Docker volumes:
    docker volume create --driver local \
      --opt type=nfs \
      --opt o=addr=nfs_server_ip,rw,nolock,hard,nointr,nfsvers=4 \
      --opt device=:/path/to/nfs/share/on/server \
      nfs_share
    
    docker volume create --driver local \
    

--opt type=cifs \

@brian-tex
brian-tex / docker-compose.yml
Last active April 28, 2023 11:47
docker-compose.yml
version: '3.8'
services:
my_container:
image: your_image_name:your_image_tag
container_name: my_container
restart: unless-stopped
volumes:
- type: volume
source: nfs_share
version: "2.4"
services:
rickroll:
image: modem7/docker-rickroll
container_name: Rickroll
ports:
- 9991:8080
environment:

Use the DNS CNAME validation method to verify domain control

Digicert allows users to add a DNS CNAME record to demonstrate control over the domain they are creating a cert for.

This process can (and should) be done up to 30 days

How to verify domain control

  1. Go to digicert.com and sign in.
  2. Navigate to CERTIFICATES > Orders.
  3. Search for the certificate name you need to validate the domain for.
  4. Click on the certificate name.

Introduction:

  • This Page shows how to make a SHA-512 hash. This is needed for creating a hash of a SysAdmin user account password as it allows other SysAdmins to set each other's passwords without knowing what the password is.

Workflow Prerequisites

  • A Linux computer.
  • The mkpasswod binary (found in the whois package).

Create the Password Hash

  1. Access Terminal with mkpasswd installed.

Introduction

An SSH key is a credential used to access a device capable of running the SSH protocol. It consists of a public and private key pair that authenticate the user trying to access the device.

In a server environment, public ssh keys are added to an authorized_keys file in a user account. Once there, when a user attempts to access the server over ssh using their private ssh key, the server is able to authenticate the user and gives them access directly to their account.

Workflow Prerequisites

This workflow requires a Windows computer as PuTTY is a Windows-only application.

Install Putty

  1. Go to https://www.putty.org/