daemonhorn

Overview

How to configure FreeBSD and applicable applications to work with Yubikey for authentication. This serves as my work-in-progress documentation of the configuration knobs needed to make this work properly.

• FreeBSD ssh with piv smartcard slot on Yubikey (pkcs11 via libykcs11.so)
• FreeBSD ssh with fido support on Yubikey
• FreeBSD Firefox/Chromium with fido + webauthn support on Yubikey
• FreeBSD local console and gdm authentication using pam on Yubikey
• FreeBSD official YubiKey tools

Latest Tested FreeBSD versions

• FreeBSD 13.2 Testing (Aug 2023)
• FreeBSD stable/13 Testing (Aug 2023) with OpenSSH_9.3p2

premek

# Put this function to your .bashrc file.
# Usage: mv oldfilename
# If you call mv without the second parameter it will prompt you to edit the filename on command line.
# Original mv is called when it's called with more than one argument.
# It's useful when you want to change just a few letters in a long name.
#
# Also see:
# - imv from renameutils
# - Ctrl-W Ctrl-Y Ctrl-Y (cut last word, paste, paste)

jpentland

#!/bin/sh

# Usage:
# tabc.sh <tabbed-id> <command>
# Commands:
#    add <window-id> 	- Add window to tabbed
#    remove <window-id> - Remove window from tabbed
#    list				- List all clients of tabbed

#

nh2

#!/usr/bin/env bash

# Installs NixOS on a Hetzner server, wiping the server.
#
# This is for a specific server configuration; adjust where needed.
#
# Prerequisites:
#   * Update the script to adjust SSH pubkeys, hostname, NixOS version etc.
#
# Usage:

kawsark

SSH CA use-case with Vault

In this scenario we are going to set up Vault to sign SSH keys using an internal CA. We will configure the SSH secrets engine and create a CA within Vault. We will then configure an SSH server to trust the CA key we just created. Finally we will attempt to SSH using a private key, and a public key signed by Vault SSH CA.

Prerequisites

• This guide assumes you have already provisioned a Vault server, SSH host using OpenSSH server, and a SSH client machine.
• The client system must be able to reach the Vault server and the OpenSSH server.
• We will refer to these systems respectively as:
• VAULT_SERVER

edolstra

Nix Flake MVP

Goals

• To provide Nix repositories with an easy and standard way to reference other Nix repositories.

• To allow such references to be queried and updated automatically.

• To provide a replacement for nix-channel, NIX_PATH and Hydra

steven2358

FFmpeg cheat sheet

A list of useful commands for the FFmpeg command line tool.

Download FFmpeg: https://www.ffmpeg.org/download.html

Full documentation: https://www.ffmpeg.org/ffmpeg.html

Basic conversion

vsefer

www.facebook.com##.egoOrganicColumn
www.facebook.com###profile_timeline_tiles_unit_pagelets_friends
www.facebook.com###profile_timeline_tiles_unit_pagelets_albums
www.facebook.com###profile_timeline_tiles_unit_pagelets_fun_fact_answers
www.facebook.com##._26z1
www.facebook.com##._4-u8._2ph_._19ah._4-u2
www.facebook.com###appsNav
www.facebook.com###fb_stories_card_root
www.facebook.com##._50z3._9bp._1ltv
www.facebook.com##._55ob._4kqp

jpswade

Find the original here article here: Devops Best Practices

DevOps started out as "Agile Systems Administration". In 2008, at the Agile Conference in Toronto, Andrew Shafer posted an offer to moderate an ad hoc "Birds of a Feather" meeting to discuss the topic of "Agile Infrastructure". Only one person showed up to discuss the topic: Patrick Debois. Their discussions and sharing of ideas with others advanced the concept of "agile systems administration". Debois and Shafer formed an Agile Systems Administrator group on Google, with limited success. Patrick Debois did a presentation called "Infrastructure and Operations" addressing

coaxial

Using a simple IR receiver such as IR5040 or TSOPxxxxx and a Raspberry Pi running LibreELEC + Kodi

Enable lirc in Kodi

Edit the file at /flash/config:

• mount -o remount,rw /flash
• vi /flash/config
• append device_tree_overlay=lirc-rpi
• mount -o remount,ro /flash

Connect the receiver