Dalibor Karlović dkarlovi

Docker for Mac

On M1 machines, Docker for Mac is running a lightweight linux ARM VM, then running containers within that, so containers are essentially running natively. Don't be fooled by the fact the UI or binary CLI tools (e.g. docker) might require Rosetta.

Within that VM is an emulation layer called QEmu. This can be used by docker to run Intel containers. This does not use Rosetta at all, and has a roughly 5-6X performance penalty. (If you just upgraded your CPU this may result in a similar performance to your old machine!)

Pulling and running with Docker

Many images in public registries are multi-architecture. For instance at the time of writing on Docker Hub the php:8.0-cli image has the following digests:

Initial checks

Start by checking that there aren't any previous ssh keys inside the FIDO2 authenticator of your YubiKey. You can check if they exist by running the command below:

nix shell nixpkgs#yubikey-manager -c ykman fido credentials list

If the command above outputs a string mentioning "ssh" or "openssh", then you have already got a key generated and store on your YubiKey.

Evaluating additional authentication factors

Before generating a new ssh key to store on your YubiKey you must consider which additional required authentication factors you want to use. Below you can see a table with the available factors and their corresponding command:

Passphrase Word Lists

Introduction

This document outlines a number of different word lists for passphrase generation, encoding of binary data, and other uses. This document is grouped and sorted by the number of unique words in each word list, fewest unique words first.

Licensing Note

Some of these word lists are placed in the public domain, others are copyrighted with various licenses. Please refer to the license of each word

	jobs:
	strategy:
	fail-fast: false
	matrix:
	chunk_count: [5]
	chunk_number: [1, 2, 3, 4, 5]

	env:
	CHUNK_COUNT: ${{matrix.chunk_count}}
	CHUNK_NUMBER: ${{matrix.chunk_number}}

	version: '3.7'

	volumes:
	appdata: ~
	code: ~

	services:
	php:
	volumes:
	- code:/var/www/html

	<?php

	declare(strict_types=1);

	use PHPUnit\Framework\Assert;
	use PHPUnit\Framework\Constraint\Callback;
	use PHPUnit\Framework\Constraint\Constraint;

	/**
	* This is a replacement for InvocationMocker::withConsecutive() which is