Chris Hutchison chrishutchison9

Use a Taglio PivKey smartcard with a self-signed certificate

The default instructions on the PivKey documentation site: https://pivkey.zendesk.com/hc/en-us do not provide any examples for configuring a self-signed certificate in any of the 25 slots. These instructions were tested with the PivKey C910 version, but likely most Taglio variants will work the same way.

Powershell `New-SelfSignedCertificate`

There is support in powershell 5.1+ on currently supported Windows OS (Server 2012+/Windows 10+) configurations for generating self-signed certificates with a wide variety of configuration parameters, including support for the Microsoft Smart Card Key Storage Provider to generate keys on a smartcard.

Reference: https://learn.microsoft.com/en-us/powershell/module/pki/new-selfsignedcertificate
Setup mapping of generate certificate to certificate slots (see Powershell script snippet below) to automatically assign a slot by using the correct Application Policies OID configuration in in the initi

Enable & Using vGPU Passthrough

This gist is almost entirely not unlike Derek Seaman's awesome blog:

Proxmox VE 8: Windows 11 vGPU (VT-d) Passthrough with Intel Alder Lake

As such please refer to that for pictures, here i will capture the command lines I used as i sequence the commands a little differently so it makes more logic to me.

This gists assumes you are not running ZFS and are not passing any other PCIE devices (as both of these can require addtional steps - see Derek's blog for more info)

This gist assumes you are not running proxmox in UEFI Secure boot - if you are please refer entirely to dereks blog.

HashiCorp Vault Pro (exam notes)

Exam objectives

Create a working Vault server configuration given a scenario

1a Enable and configure secret engines

1b Practice production hardening

Proxmox VE Installation on Hetzner Server via Rescue System

Follow these steps to install Proxmox VE on a Hetzner server via the Rescue System. The Rescue System is a Linux-based environment that can be booted into to perform system recovery tasks. We'll be using it to install Proxmox VE.

In order to complete the process, it is indeed necessary to first boot into the Rescue System and then connect to it via SSH. This will allow you to run the commands for installing Proxmox VE. Here are the steps:

Starting the Rescue System

Log into the Hetzner Robot.
Under "Main Functions; Server" select the desired server and then open the tab "Rescue".

58 bytes of CSS to look great nearly everywhere

When making this website, i wanted a simple, reasonable way to make it look good on most displays. Not counting any minimization techniques, the following 58 bytes worked well for me:

main {
  max-width: 38rem;
  padding: 2rem;
  margin: auto;
}

	let mapleader = " "

	set relativenumber number
	set surround
	set ignorecase
	set scrolloff=999

	set highlightedyank
	let g:highlightedyank_highlight_color = "rgba(160, 160, 160, 155)"
	let g:highlightedyank_highlight_duration = "500"

	############ If you are using DOCKER all-in-one image, create Dockerfile like: ################
	############ FROM openproject/openproject:16 ################
	############ COPY ./enterprise_token.rb app/models/enterprise_token.rb ################

	############ If you are runing a manual installation: ################
	############ REPLACE app/models/enterprise_token.rb in the source code with this file! ################
	############ also be sure to RESTART OpenProject after replacing the file. ################

	############ If using some other set up (eg docker-compose), read the comments on ################
	############ https://gist.github.com/markasoftware/f5b2e55a2c2e3abb1f9eefcdf0bfff45 ################

	<?php
	//Not everything will work out of the box for you, as this is just for our application.
	//Framework Laravel

	namespace Modules\Caption\Services;

	//https://github.com/captioning/captioning
	use Captioning\Format\WebvttFile;
	use ilos\Models\Caption\CaptionRequest;
	use Exception;

	#!/usr/bin/env bash

	sudo dnf install -y glibc-static
	git clone https://git.sr.ht/~sircmpwn/scdoc
	cd scdoc
	make PREFIX=~/.local/ install
	cd ..

	sudo dnf install -y golang notmuch-devel
	go get golang.org/dl/go1.12.8

	{ config, pkgs, lib, ... }:

	{
	# IOMMU configuration
	boot.kernelParams = [ "amd_iommu=on" "pcie_aspm=off" ];
	boot.kernelModules = [ "kvm-amd" "vfio_virqfd" "vfio_pci" "vfio_iommu_type1" "vfio" ];
	boot.extraModprobeConfig = ''
	options vfio-pci ids=10de:13c2,10de:0fbb
	options kvm ignore_msrs=1
	'';