1bit onebitaway

YubiKey 4 series GPG and SSH setup guide

Written for fairly adept technical users, preferably of Debian GNU/Linux, not for absolute beginners.

You'll probably be working with a single smartcard, so you'll want only one primary key (1. Sign & Certify) and two associated subkeys (2. Encrypt, 3. Authenticate). I've published a Bash function which automates this slightly special key generation process.

	//////////////////////////////////////////////////
	// The final part of the deferred shading pipeline
	// is made with a compute shader (because I'm too
	// lazy to draw a quad and write another .vert/.frag)
	//////////////////////////////////////////////////
	#version 450 core

	uniform float time;
	uniform float samplingStep;
	uniform ivec2 fboSize;



	# OBJECTIVE: Install Arch Linux with encrypted root and swap filesystems with an ENCRYPTED BOOT and boot from UEFI. We will
	also decrypt and mount our entire encrypted system using a single LUKS passphrase entry.

	# Note: This method supports both dedicated Arch installs and those who wish to install Arch on a multi-OS-UEFI booting system.

	# External USB HDD/SSD Installers Notes: Encrypted Arch installs can be booted and run from an external USB HDD or SSD, but
	# only when the installation is correctly set up. There are several necessary changes to my standard procedure you'll want
	# to make during the install process. Read my External USB HDD/SSD Installation section below before proceeding.

	/*
	* dropbox_ext4.c
	*
	* Compile like this:
	* gcc -shared -fPIC -ldl -o libdropbox_ext4.so dropbox_ext4.c
	*
	* Run Dropbox like this:
	* LD_PRELOAD=./libdropbox_ext4.so ~/.dropbox-dist/dropboxd
	*/

	# Install a fully encrypted ArchLinux on NVMe with detached LUKS
	# headers and LUKS encrypted UEFI boot partition on a USB dongle.
	#
	# Full tutorial can be found here:
	# https://headcrash.industries/reference/fully-encrypted-archlinux-with-secure-boot-on-yoga-920/
	#
	# Written by Gerke Max Preussner <info@headcrash.industries>


	# Overview ############################################################

	#!/bin/bash

	modprobe -r ec_sys
	modprobe ec_sys write_support=1

	on="\x8a"
	off="\x0a"

	led(){
	echo -n -e $1 \| dd of="/sys/kernel/debug/ec/ec0/io" bs=1 seek=12 count=1 conv=notrunc 2> /dev/null

	# Install ARCH Linux with encrypted file-system and UEFI
	# The official installation guide (https://wiki.archlinux.org/index.php/Installation_Guide) contains a more verbose description.

	# Download the archiso image from https://www.archlinux.org/
	# Copy to a usb-drive
	dd if=archlinux.img of=/dev/sdX bs=16M && sync # on linux

	# Boot from the usb. If the usb fails to boot, make sure that secure boot is disabled in the BIOS configuration.

	# Set swiss-french keymap

	source 'https://rubygems.org'

	# default gems here
	#---------------------------

	# add paperclip and bootstrap

	gem "paperclip", "~> 4.1"
	gem 'bootstrap-sass', '~> 3.1.1'


	use strict;
	use warnings;
	use vars qw($VERSION %IRSSI);

	$VERSION = '0.1';
	%IRSSI = (
	authors => 'Johannes Plunien',
	contact => 'plu@pqpq.de',
	description => 'Reformat znc buffer playback messages',