Kranzes

Initial checks

Start by checking that there aren't any previous ssh keys inside the FIDO2 authenticator of your YubiKey. You can check if they exist by running the command below:

nix shell nixpkgs#yubikey-manager -c ykman fido credentials list

If the command above outputs a string mentioning "ssh" or "openssh", then you have already got a key generated and store on your YubiKey.

Evaluating additional authentication factors

Before generating a new ssh key to store on your YubiKey you must consider which additional required authentication factors you want to use. Below you can see a table with the available factors and their corresponding command:

paulhandy

https://serverfault.com/questions/340837/how-to-delete-all-but-last-n-zfs-snapshots#340846

You may find something like this a little simpler

zfs list -t snapshot -o name | grep ^tank@Auto | tac | tail -n +16 | xargs -n 1 zfs destroy -r

    output the list of snapshot (names only) with zfs list -t snaphot -o name
    filter to keep only the ones that match tank@Auto with grep ^tank@Auto
    reverse the list (previously sorted from oldest to newest) with tac
    limit output to the 16th oldest result and following with tail -n +16