Skip to content

Instantly share code, notes, and snippets.

View rylabs-billy's full-sized avatar

rylabs rylabs-billy

  • Linode/Akamai
View GitHub Profile
@rylabs-billy
rylabs-billy / full-disk-encryption-arch-uefi.md
Created October 23, 2022 18:55 — forked from huntrar/full-disk-encryption-arch-uefi.md
Arch Linux Full-Disk Encryption Installation Guide [Encrypted Boot, UEFI, NVMe, Evil Maid]

Arch Linux Full-Disk Encryption Installation Guide

This guide provides instructions for an Arch Linux installation featuring full-disk encryption via LVM on LUKS and an encrypted boot partition (GRUB) for UEFI systems.

Following the main installation are further instructions to harden against Evil Maid attacks via UEFI Secure Boot custom key enrollment and self-signed kernel and bootloader.

Preface

You will find most of this information pulled from the Arch Wiki and other resources linked thereof.

Note: The system was installed on an NVMe SSD, substitute /dev/nvme0nX with /dev/sdX or your device as needed.

@rylabs-billy
rylabs-billy / Protonmail.md
Created April 25, 2022 02:19 — forked from githubcom13/Protonmail.md
Configure the protonmail bridge linux client on Ubuntu 20.04 and Debian 10 server

Protonmail on Ubuntu 20.04 and Debian 10 server

#protonmail #debian #linux

Before you start

Currently protonmail bridge for linux is distributed as part of an open beta program, but soon it will be made public (https://protonmail.com/bridge/install).

Consider that the bridge linux client requires a paid protonmail account to work.

Get the protonmail bridge linux installer

# linode vars
ssh_keys:
galera_prefix:
cluster_name:
type:
region:
image:
group:
linode_tags:
@rylabs-billy
rylabs-billy / Protonmail.md
Created March 27, 2021 21:21 — forked from ibaiul/Protonmail.md
Configure the protonmail bridge linux client on CentOS server and Fedora

Protonmail on CentOS server

#protonmail #centos #fedora #linux

Before you start

Currently protonmail bridge for linux is distributed as part of an open beta program, but soon it will be made public (https://protonmail.com/bridge/install).

Consider that the bridge linux client requires a paid protonmail account to work.

Get the protonmail bridge linux installer

@rylabs-billy
rylabs-billy / iptables.sh
Last active February 20, 2020 21:11 — forked from thomasfr/iptables.sh
iptable rules to allow outgoing DNS lookups, outgoing icmp (ping) requests, outgoing connections to configured package servers, outgoing connections to all ips on port 22, all incoming connections to port 22, 80 and 443 and everything on localhost
#!/bin/bash
IPT=/usr/sbin/iptables
# Server IP
IP=$(ip r | grep /24 | grep -Eo "([0-9]{1,3}[\.]){3}[1-9]{1,3}")
echo "flush iptable rules"
iptables -F
iptables -X
iptables -t nat -F