redukt reduktr

Initial checks

Start by checking that there aren't any previous ssh keys inside the FIDO2 authenticator of your YubiKey. You can check if they exist by running the command below:

nix shell nixpkgs#yubikey-manager -c ykman fido credentials list

If the command above outputs a string mentioning "ssh" or "openssh", then you have already got a key generated and store on your YubiKey.

Evaluating additional authentication factors

Before generating a new ssh key to store on your YubiKey you must consider which additional required authentication factors you want to use. Below you can see a table with the available factors and their corresponding command:

Improve Fonts

Newest

Make your Arch fonts beautiful easily! This is what I do when I install Arch Linux to improve the fonts.

You may consider the following settings to improve your fonts for system-wide usage without installing a patched font library packages (eg. Infinality):

Install some fonts, for example:
sudo pacman -S ttf-dejavu ttf-liberation noto-fonts

I've spent the day trying to get this setup working with GitHub and given the number of gotcha's I encountered, it seemed like a good idea to document how I finally got this working with as few hacks as possible. There's a lot of documentation out there (some of it old and misleading) and committing here for posterity will help me remember this when I inevitably need to do this again.

Rationale

Passwords are simply not enough these days. Regardless of the company, breaches (and the associated Personally Identifiable Information harvested) are a matter of not if, but when. There are a number of things you can do to protect yourself, but being on the tin-foil-hat side of paranoia, means there are a few Commandents that I adhere to (and recommend for other folks)[Insert link to Fight Club Rules for the Secure Internet].

That being said, if you use 2-factor authentication and have committed to using a hardware token such as the Yubikey, then you're already ahead of the curve. The problem is that wh

Think twice before abandoning Xorg. Wayland breaks everything!

Hence, if you are interested in existing applications to "just work" without the need for adjustments, then you may be better off avoiding Wayland.

Wayland solves no issues I have but breaks almost everything I need. Even the most basic, most simple things (like xkill) - in this case with no obvious replacement. And usually it stays broken, because the Wayland folks mostly seem to care about Automotive, Gnome, maybe KDE - and alienating everyone else (e.g., people using just an X11 window manager or something like GNUstep) in the process.

The Wayland project seems to operate like they were starting a greenfield project, whereas at the same time they try to position Wayland as "the X11 successor", which would clearly require a lot of thought about not breaking, or at least providing a smooth upgrade path for, existing software.

In fact, it is merely an incompatible alternative, and not e

Wireguard and iptables restrictions for multiple users

If you don't know what Wireguard is, well, you should. It's fast, easy to setup and highly configurable. We will configure Wireguard for multiple users with various restrictions using iptables.

	// https://docs.syncthing.net/users/ignoring
	// (?d) prefix to allow deletion of ignored files
	// (?i) prefix makes the matching case insensitive
	// echo #include .stignore_synced >> .stignore

	(?d)(?i).Trash
	(?d).DS_Store
	._*

	(?d)(?i)Thumbs.db

	scheme: "Everforest dark, hard"
	author: "Sainnhe Park ([email protected])"

	base00: "2b3339" # Default Background
	base01: "323c41" # Lighter Background (Used for status bars, line number and folding marks)
	base02: "503946" # Selection Background
	base03: "868d80" # Comments, Invisibles, Line Highlighting
	base04: "d3c6aa" # Dark Foreground (Used for status bars)
	base05: "d3c6aa" # Default Foreground, Caret, Delimiters, Operators
	base06: "e9e8d2" # Light Foreground (Not often used)

	# Arch Linux Setup: https://gist.github.com/kevinkub/46ce7229ee4f17be710ddd7c5a80a3c3

	# Change root password
	echo "# Change password of root user"
	passwd

	# Change hostname
	echo "# Change hostname"
	hostname
	sudo hostnamectl set-hostname $hostname

redukt reduktr

Initial checks

Evaluating additional authentication factors

Improve Fonts

Newest

Rationale

Think twice before abandoning Xorg. Wayland breaks everything!

Wireguard and iptables restrictions for multiple users

Assumptions

Debian sid with systemd on WSL2

Instructions

Prepare a NVME SSD for moving an ArchLinux Installation

Readings

1. Secure erase the device