arrjay

Keybase proof

I hereby claim:

• I am arrjay on github.
• I am arrjay (https://keybase.io/arrjay) on keybase.
• I have a public key whose fingerprint is 9E89 BBA0 9EEC 7D24 6D8F D8B5 D990 32B8 CD32 36B0

To claim this, I am signing this object:

arrjay

create usb media and boot from it
    option key to present in menu
    disk utility - wipe existing in favor of single HFS (journaled) partition
        name partition after computer name - you've picked one, right?
    [~15 minutes for stage1 install, computer will reboot]
    walk through initial setup
        language, keyboard
        wifi
        don't transfer anything
        don't do an apple id, skip, really

arrjay

after installing Fedora XFCE spin
yum install gnupg2-smime screen git apg pass virt-manager terminus-fonts opensc pcsc-lite firefox tigervnc

arrjay

<domain type='kvm' id='11'>
  <name>win8.1</name>
  <uuid>9bdb170e-a0cc-4484-905b-4aecc2b02246</uuid>
  <memory unit='KiB'>4194304</memory>
  <currentMemory unit='KiB'>4194304</currentMemory>
  <vcpu placement='static'>2</vcpu>
  <resource>
    <partition>/machine</partition>
  </resource>
  <os>

arrjay

<domain type='kvm' id='6'>
  <name>fedora</name>
  <uuid>f27b54f7-3e1f-43ef-a433-173ac03361d4</uuid>
  <memory unit='KiB'>1572864</memory>
  <currentMemory unit='KiB'>1572864</currentMemory>
  <memoryBacking>
    <nosharepages/>
  </memoryBacking>
  <vcpu placement='static'>2</vcpu>
  <resource>

arrjay

My two-card, multiple encryption key GPG setup
==============================================

This document walks through setting up a GPG keyring that uses two smartcards to hold
two *different* authentication and encryption keys, linked to a single identity. This
keeps a master identity separate from either smart card, so if you need to revoke one
later, it is fairly easy to do. This document assumes you are working with an offline
computer, preferably one with it's own disk encryption setup.

First Steps

arrjay

RedHat manual

[root@centos7 ~]# nmcli con add type vlan ifname enp3s0.100 dev enp3s0 id 100
Connection 'vlan-enp3s0.100' (2c0faef4-95ec-4a1b-87fa-c3c70446cf53) successfully added.

[root@centos7 network-scripts]# nmcli c add type bridge ifname brenp3s0-100
Connection 'bridge-brenp3s0-100' (7e46c607-832e-4bdf-82d4-c08b32364ffe) successfully added.

arrjay

/*
 ***********************************************************************
 *
 *        DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
 *                    Version 2, December 2004
 *
 * Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
 *
 * Everyone is permitted to copy and distribute verbatim or modified
 * copies of this license document, and changing it is allowed as long

arrjay

#!/usr/bin/env bash

gpg2 --gen-key --batch --allow-freeform-uid << _EOF_ 2>/dev/null
%no-ask-passphrase
%no-protection
Key-Type: rsa
Key-Length: 2048
Key-Usage: cert
Name-Real: 0
Expire-Date: 0

arrjay

#!/usr/bin/env bash

user=""
candidate=""

while [ -z "${user}" ] ; do
  read -p "enter an existing username: " -r candidate
  getent passwd "${candidate}" > /dev/null 2>&1  && user="${candidate}"
done