lbruno

ssh-keygen.exe -t ed25519 -f provisioner_ed25519_key -C "provisioner" -q -N """"

lbruno

How I generated my Yubikey SSH key

yubico-piv-tool.exe -a generate -s 9a --pin-policy=never --touch-policy=cached -S "/CN=ssh-piv/" -H SHA256 -A ECCP256 -o public-key.pem
yubico-piv-tool.exe -a verify-pin -P $env:PIN -a selfsign-certificate -s 9a --pin-policy=never --touch-policy=cached -S "/CN=ssh-piv/" -H SHA256 -A ECCP256 -i public-key.pem -o selfcert.pem
yubico-piv-tool.exe -a import-certificate -s 9a --pin-policy=never --touch-policy=cached -i selfcert.pem

Couple this with WinCryptoSshAgent, and Windows has easy PIV crypto SSH support.

lbruno

Memory map

Start (bytes)	Start (hex)	Contents	Length (bytes)	Length (hex)	Nearest 32k	Nearest (hex)
0	0	SPL	32768	8000	32768	8000
32768	8000	U-Boot	665084	A25FC	688128	A8000
720896	B0000	iPXE	216352	34D20	229376	38000
950272	E8000	Environ	81920	14000	98304	18000
1048576	100000	(the rest)

lbruno

Keybase proof

I hereby claim:

• I am lbruno on github.
• I am lbruno (https://keybase.io/lbruno) on keybase.
• I have a public key ASDkwxl6FyU2oUPdBHBTYAvGCnUSZeewNhdcuketAunP0go

To claim this, I am signing this object:

lbruno

Vendoring

Using u-boot as an example, I’ve tried vendoring using two methods. A code-drop where an export of the u-boot repo gets imported as a whole, and a repo-sync method where all changesets get mirrored into our //third_party tree.

Further, these changes (either batched up in a code-drop or mirrored 1:1) are imported into a separate branch, named vendor. This branch only sees completely clean imports without any local modifications. We then merge the vendor branch back onto the default branch, where we’ve committed all our local changes. These will be rebased on top of all merges incoming

lbruno

Windows installs

This is a memo to myself about what I need to do to finish up a Windows install.

Install Chocolatey

# Default policy is "Restricted", which stops Chocolatey from running its install scripts:
Set-ExecutionPolicy AllSigned

lbruno

Network booting

Desirements are to:

• Have u-boot in SPI, capable of both booting locally and from the network.
• Know how to build the boot stack from scratch, and install it via FEL.

Hardware I've used:

lbruno

Dear Ms. PRINCIPAL,

Hi, I'm a parent of CHILD, one of Ms TEACHER's (future) pupils in Senior Infants.

I hope this finds you and yours well, in these (almost) unprecedented times.

I'm writing to you because I am very wary of sending the Young One to school. Are you able to support parents who wish to continue schooling their children at home?

Below I justify said concern. In my own understanding of the situation, having read: