daemonhorn

Overview

How to configure FreeBSD and applicable applications to work with Yubikey for authentication. This serves as my work-in-progress documentation of the configuration knobs needed to make this work properly.

• FreeBSD ssh with piv smartcard slot on Yubikey (pkcs11 via libykcs11.so)
• FreeBSD ssh with fido support on Yubikey
• FreeBSD Firefox/Chromium with fido + webauthn support on Yubikey
• FreeBSD local console and gdm authentication using pam on Yubikey
• FreeBSD official YubiKey tools

Latest Tested FreeBSD versions

• FreeBSD 13.2 Testing (Aug 2023)
• FreeBSD stable/13 Testing (Aug 2023) with OpenSSH_9.3p2

yzgyyang

Determine the file system by using the file-utility.

file image.img

Use mdconfig to link the IMG image to a virtual device.

mdconfig -a -t vnode -f /path/to/image.img -u 0

ePirat

Cross-compile libaacs for Windows (64bit)

For this guide the ubuntu:yakkety Docker image was used.

Install the cross-compile toolchain

apt-get install mingw-w64-tools gcc-mingw-w64-x86-64 g++-mingw-w64-x86-64 wget gettext bison flex

silenius

#!/bin/sh

log_name="filer"
log_prio="user.notice"

flog () {
  logger -p "$log_prio" -t "$log_name" "$1"
}

boottime=$(sysctl -n kern.boottime | awk '{print $4}' | tr -dc 0-9)

rosado

all: txtfile

TARGET_DIR = target-dir

txtfile: $(TARGET_DIR)
	touch $(TARGET_DIR)/file.txt

target-dir:
	test ! -d $(TARGET_DIR) && mkdir $(TARGET_DIR)

clemensg

# /etc/make.conf
# Clemens Gruber, 2017
#

# Nearby mirror
#MASTER_SITE_OVERRIDE="ftp://ftp.at.freebsd.org/pub/FreeBSD/ports/distfiles/"
#MASTER_SITE_OVERRIDE="ftp://ftp.de.freebsd.org/pub/FreeBSD/ports/distfiles/"

# Build
MAKE_JOBS_NUMBER?=8

bryhal

DROP TABLE IF EXISTS time_dimension;
CREATE TABLE time_dimension (
        id                      INTEGER PRIMARY KEY,  -- year*10000+month*100+day
        db_date                 DATE NOT NULL,
        year                    INTEGER NOT NULL,
        month                   INTEGER NOT NULL, -- 1 to 12
        day                     INTEGER NOT NULL, -- 1 to 31
        quarter                 INTEGER NOT NULL, -- 1 to 4
        week                    INTEGER NOT NULL, -- 1 to 52/53
        day_name                VARCHAR(9) NOT NULL, -- 'Monday', 'Tuesday'...

johntyree

#!/usr/bin/env sh

# Download lists, unpack and filter, write to stdout
curl -s https://www.iblocklist.com/lists.php \
  | sed -n "s/.*value='\(http:.*=bt_.*\)'.*/\1/p" \
  | xargs wget -O - \
  | gunzip \
  | egrep -v '^#'

richieforeman

# Run this once
openssl genrsa -des3 -out ca.key 4096
openssl req -new -x509 -days 365 -key ca.key -out ca.crt

ishworgurung

#!/usr/bin/env python

"""
Example on using Kqueue/Kevent on BSD/Mac
using Python.

The TCP server essentially echoes back the
message it receives on the client socket.
"""
__author__  = "Ishwor Gurung <ishwor@develworx.com>"