zuigon

Overview

How to configure FreeBSD and applicable applications to work with Yubikey for authentication. This serves as my work-in-progress documentation of the configuration knobs needed to make this work properly.

FreeBSD ssh with piv smartcard slot on Yubikey (pkcs11 via libykcs11.so)
FreeBSD ssh with fido support on Yubikey
FreeBSD Firefox/Chromium with fido + webauthn support on Yubikey
FreeBSD local console and gdm authentication using pam on Yubikey
FreeBSD official YubiKey tools

Latest Tested FreeBSD versions

FreeBSD 13.2 Testing (Aug 2023)
FreeBSD stable/13 Testing (Aug 2023) with OpenSSH_9.3p2

SSH CA use-case with Vault

In this scenario we are going to set up Vault to sign SSH keys using an internal CA. We will configure the SSH secrets engine and create a CA within Vault. We will then configure an SSH server to trust the CA key we just created. Finally we will attempt to SSH using a private key, and a public key signed by Vault SSH CA.

Prerequisites

This guide assumes you have already provisioned a Vault server, SSH host using OpenSSH server, and a SSH client machine.
The client system must be able to reach the Vault server and the OpenSSH server.
We will refer to these systems respectively as:
VAULT_SERVER

Nix Flake MVP

Goals

To provide Nix repositories with an easy and standard way to reference other Nix repositories.
To allow such references to be queried and updated automatically.
To provide a replacement for nix-channel, NIX_PATH and Hydra

FFmpeg cheat sheet

A list of useful commands for the FFmpeg command line tool.

Download FFmpeg: https://www.ffmpeg.org/download.html

Full documentation: https://www.ffmpeg.org/ffmpeg.html

Basic conversion

Find the original here article here: Devops Best Practices

DevOps started out as "Agile Systems Administration". In 2008, at the Agile Conference in Toronto, Andrew Shafer posted an offer to moderate an ad hoc "Birds of a Feather" meeting to discuss the topic of "Agile Infrastructure". Only one person showed up to discuss the topic: Patrick Debois. Their discussions and sharing of ideas with others advanced the concept of "agile systems administration". Debois and Shafer formed an Agile Systems Administrator group on Google, with limited success. Patrick Debois did a presentation called "Infrastructure and Operations" addressing

Using a simple IR receiver such as IR5040 or TSOPxxxxx and a Raspberry Pi running LibreELEC + Kodi

Enable `lirc` in Kodi

Edit the file at /flash/config:

mount -o remount,rw /flash
vi /flash/config
append device_tree_overlay=lirc-rpi
mount -o remount,ro /flash

	# Put this function to your .bashrc file.
	# Usage: mv oldfilename
	# If you call mv without the second parameter it will prompt you to edit the filename on command line.
	# Original mv is called when it's called with more than one argument.
	# It's useful when you want to change just a few letters in a long name.
	#
	# Also see:
	# - imv from renameutils
	# - Ctrl-W Ctrl-Y Ctrl-Y (cut last word, paste, paste)

	#!/bin/sh

	# Usage:
	# tabc.sh <tabbed-id> <command>
	# Commands:
	# add <window-id> - Add window to tabbed
	# remove <window-id> - Remove window from tabbed
	# list - List all clients of tabbed

	#

	#!/usr/bin/env bash

	# Installs NixOS on a Hetzner server, wiping the server.
	#
	# This is for a specific server configuration; adjust where needed.
	#
	# Prerequisites:
	# * Update the script to adjust SSH pubkeys, hostname, NixOS version etc.
	#
	# Usage:

	www.facebook.com##.egoOrganicColumn
	www.facebook.com###profile_timeline_tiles_unit_pagelets_friends
	www.facebook.com###profile_timeline_tiles_unit_pagelets_albums
	www.facebook.com###profile_timeline_tiles_unit_pagelets_fun_fact_answers
	www.facebook.com##._26z1
	www.facebook.com##._4-u8._2ph_._19ah._4-u2
	www.facebook.com###appsNav
	www.facebook.com###fb_stories_card_root
	www.facebook.com##._50z3._9bp._1ltv
	www.facebook.com##._55ob._4kqp