This guide allows you to use the TPM on your computer to decrypt your LUKS encrypted volumes. If you are worried about a cold boot attack on your hardware please DO NOT use this guide with your root volume!
Verify that you have a TPM in your computer:
# systemd-cryptenroll --tpm2-device=list
PATH DEVICE DRIVER
| # put this in your ~/.profile, then reload your shell | |
| function gcloud-activate() { | |
| local action="$1" | |
| local account="" | |
| local credentials="" | |
| case "${action}" in | |
| alpha) | |
| account="alpha-cicd@my-project-alpha.iam.gserviceaccount.com" | |
| credentials="${HOME}/.config/gcloud/my-project-alpha.json" |
| #!/usr/bin/env bash | |
| for f in *.rpm; do | |
| rpminfo="$(rpm -qp --queryformat "%{NAME} %{VERSION}-%{RELEASE} %{ARCH}\n" "${f}" 2>/dev/null)" | |
| group="org.centos-7.rpm" | |
| artifact="$(echo "${rpminfo}" | cut -d ' ' -f 1)" | |
| version="$(echo "${rpminfo}" | cut -d ' ' -f 2)" | |
| classifier="$(echo "${rpminfo}" | cut -d ' ' -f 3)" | |
| curl -fsSL \ | |
| -u nexus_user:nexus_password \ |
| #!/bin/sh | |
| /sbin/ifconfig epair0b inet6 auto_linklocal accept_rtadv autoconf | |
| /sbin/rtsol epair0b | |
| # sysrc rtsold_enable=YES | |
| # service rtsold start |
| # # cat /usr/local/etc/pkg/repos/FreeBSD.conf | |
| # FreeBSD: { enabled: no } | |
| rm -f /usr/local/etc/pkg/repos/FreeBSD.conf | |
| pkg update -f | |
| pkg install --yes openmdns | |
| sysrc mdnsd_enable=yes | |
| sysrc mdnsd_flags=epair0b | |
| service mdnsd start |
| #!/usr/bin/env groovy | |
| //TimeZone.setDefault(TimeZone.getTimeZone('Europe/Warsaw')) | |
| if (args.size() == 0 || !args.find { it ==~ /^\d{2}\.\d{2}\.\d{4}\ \d{2}\:\d{2}$/ }) { | |
| String thisScript = new File(this.getClass().protectionDomain.codeSource.location.path).getName() | |
| System.err.println "Error parsing command line arguments!" | |
| System.err.println "Usage: ${thisScript} <dateTime>" | |
| System.err.println "Accepted dateTime format is dd.mm.yyyy hh:mm" | |
| System.err.println "Example: ${thisScript} '25.05.2018 05:00'" |
| netsh interface ipv6 set privacy state=disabled store=active | |
| netsh interface ipv6 set privacy state=disabled store=persistent | |
| netsh interface ipv6 set global randomizeidentifiers=disabled store=active | |
| netsh interface ipv6 set global randomizeidentifiers=disabled store=persistent | |
| netsh interface ipv6 set interface 15 routerdiscovery=disabled | |
| netsh interface ipv6 set interface 15 managedaddress=enabled | |
| netsh interface ipv6 set interface 15 otherstateful=enabled |
| <?jelly escape-by-default='true'?> | |
| <!DOCTYPE html [ | |
| <!ENTITY nbsp "&#38;nbsp;"> | |
| ]> | |
| <j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"> | |
| <body> | |
| <!-- GENERAL INFO --> | |
| <table> | |
| <tr> | |
| <td align="right"> |
| RMDIR /S /Q %USERPROFILE%\AppData\Roaming\GitHub | |
| RMDIR /S /Q %USERPROFILE%\AppData\Local\GitHub | |
| RMDIR /S /Q %USERPROFILE%\.ssh | |
| DEL /F /Q %USERPROFILE%\.gitconfig |