Below is the summary of the DNS rewrites, firewall aliases, rules, and floating rules used to control traffic from the Thermostat to the backend services.
Domain | IP Address |
---|
TPM2 Auto-Decrypt LUKS Full-Disk Encryption Configuration | |
TLDR: Run these commands to set up TPM2 auto-decrypt LUKS full-disk encryption. | |
Commands: | |
Copy Code |
adb
is the Android CLI tool with which you can interact with your android device, from your PC
You must enable developer mode (tap 7 times on the build version in parameters) and install adb on your PC.
Don't hesitate to read comments, there is useful tips, thanks guys for this !
Fingerprint auth in Linux works through PAM, there is pam_fprintd.so
module which talks to fprintd service. When fprintd service isn't working, pam_fprintd
fails to communicate with it, and PAM auth skips to the next module in the config. But another PAM module could also skip over pam_fprintd
.
So suppose you have /etc/pam.d/system-auth
with the following contents:
auth sufficient pam_fprintd.so
auth required pam_unix.so
Download ADB Tools:
Get either "Minimal ADB and Fastboot Kit" or official binaries from Google.
Enable ADB Debugging:
Go to Settings → system → about on your watch and tap "Build number" to enable Developer options, then enable "ADB debugging" or "Debug over wifi".
This script automatically changes the DNSOverTLS
setting in /etc/systemd/resolved.conf
based on whether you're connected to specified networks. Additionally, it sends a desktop notification to alert about the change.
#!/bin/bash
# Desired network names (SSID for WiFi, connection name for other types)
# after the virtual disk has already been expanded (e.g. in proxmox) | |
apk add --no-cache cfdisk e2fsprogs-extra | |
# choose partition then "Resize" > "Write" (to finalize) | |
cfdisk | |
# replace * with partition you are resizing | |
resize2fs /dev/* |
This guide allows you to use the TPM on your computer to decrypt your LUKS encrypted volumes. If you are worried about a cold boot attack on your hardware please DO NOT use this guide with your root volume!
Verify that you have a TPM in your computer:
# systemd-cryptenroll --tpm2-device=list
PATH DEVICE DRIVER