pooya azarpour poyaz

NB: This document describles a 'Old-School' way of using Yubikey with SSH

Modern OpenSSH has native support for FIDO Authentication. Its much simpler and should also be more stable with less moving parts. OpenSSH also now has support for signing arbitary files witch can be used as replacement of gnupg. Git also supports signing commits/tags with ssh keys.

Pros of FIDO

Simpler stack / less moving parts
Works directly with ssh, ssh-add and ssh-keygen on most computers
Simpler
Private key can never leave the FIDO device

Cons of FIDO

Safest way to clean up boot partition - Ubuntu 14.04LTS-x64, Ubuntu 16.04LTS-x64

Reference

Case I: if /boot is not 100% full and apt is working

1. Check the current kernel version

$ uname -r

	# Transparent Envoy Proxy that forwards http/https
	# Create iptables to route 80 + 443 to 10000:
	# $ iptables -t nat -A OUTPUT -p tcp -m owner ! --uid-owner envoyuser --dport 443 -j REDIRECT --to-port 10000
	# $ iptables -t nat -A OUTPUT -p tcp -m owner ! --uid-owner envoyuser --dport 80 -j REDIRECT --to-port 10000
	# Run envoy
	# $ envoy -c dynamic_fwd_http_sni.yaml -l debug

	admin:
	access_log_path: /home/envoyuser/admin/admin_access.log
	address:

	git checkout --orphan new-framework
	# completely rewrite your application in new framework
	git merge --strategy=ours --allow-unrelated-histories master
	git commit-tree -p HEAD^2 -p HEAD^1 -m "Merge branch 'new-framework'" "HEAD^{tree}"
	git reset --hard $OUTPUT_FROM_PREVIOUS_COMMAND
	git checkout master
	git merge --ff-only new-framework

	/*
	*
	* Return SQLite3 query results as a Nodejs stream, sensitive to backpressure.
	*
	* Assumes a foo.db file with a lot of rows - I used 1000 with a number & a string
	*/

	const stream = require('stream');
	const sqlite = require('sqlite3');
	class DBStream extends stream.Readable {

	// tagging strings
	const language = 'de'
	const user = {
	name: 'Kent C. Dodds',
	birthday: new Date(1988, 9, 18)
	}
	const translated = translate`
	<div>
	${'t.hello'} ${user.name}, ${'t.yourBirthdayIs'} ${user.birthday}
	</div>

	# IMPORTANT!
	# This gist has been transformed into a github repo
	# You can find the most recent version there:
	# https://github.com/Neo23x0/auditd

	# ___ ___ __ __
	# / \| __ ______/ (_) /_____/ /
	# / /\| \|/ / / / __ / / __/ __ /
	# / ___ / /_/ / /_/ / / /_/ /_/ /
	# /_/ \|_\__,_/\__,_/_/\__/\__,_/

	'use strict';

	class NotImplementedException extends Error {
	}
	class InvalidInitialization extends Error {
	}

	function abc(cls, options) {
	let iname = options ? options.interfaceName : 'Interface';
	let metaData = {

	/**
	* Class that holds a read only property.
	*/
	class PropertyBag {

	/**
	* Accessor.
	*
	* @return {string}
	* The value. This annotation can be used for type hinting purposes.

	#!/bin/sh

	docker events --filter 'event=start' --filter 'event=stop' \| while read event

	do

	container_id=`echo $event \| sed 's/.Z\ \(.\):\ .*/\1/'`

	echo $container_id