jlgaddis

Yubikey + gpg-agent (w/ SSH support) on Fedora 27

Note: This assumes that you have already generated your GPG keys (i.e., offline master key + subkeys) and have them in your Yubikey.

Recently, I switched from Arch Linux to Fedora 27 on the hosts that I use daily (my workstation, my "primary" laptop, and a "secondary" laptop). As best as I can recall, here are all of the steps I had to do in order to get things working in addition to some notes ("quoted") that I made at the time.

FWIW, this is greatly "summarized" but I think I've included most of the important bits. It's very possible that I've left out some pieces, though, so feel free to let me know if I've missed something.

---

jlgaddis

# ufw.yml

---

- name: ufw.yml
  hosts: debian-stable-amd64
  become: true

  tasks:

jlgaddis

#!/usr/bin/env sh
#
# This script can be executed to bootstrap a clean OpenBSD installation
# so that it can be managed via Ansible.
#
# Enter the root password when prompted (twice)
#
# NB: Assumes $TARGET_HOST has already been added to inventory and
#     appropriate groups, and that variables are set as necessary
#     (e.g. ansible_become_method, ansible_python_interpreter, etc.)

jlgaddis

#
# WFM. YMMV. No purchase necessary. Void where prohibited.
#

# dd if=/dev/zero of=/dev/sda bs=512 count=2048 seek=210996000
# dd if=/dev/zero of=/dev/sda bs=512 count=4096

sgdisk --zap-all /dev/sda
wipefs --all /dev/sda

jlgaddis

# sysctl kern.disks
kern.disks: da0 ada1 ada0

# zpool import
   pool: zroot
     id: 15136818735282810090
  state: ONLINE
 action: The pool can be imported using its name or numeric identifier.
 config: