arianvp

Native Secure Enclave backed ssh keys on MacOS

It turns out that MacOS Tahoe can generate and use secure-enclave backed SSH keys! This replaces projects like https://github.com/maxgoedjen/secretive

There is a shared library /usr/lib/ssh-keychain.dylib that traditionally has been used to add smartcard support to ssh by implementing PKCS11Provider interface. However since recently it also implements SecurityKeyProivder which supports loading keys directly from the secure enclave! SecurityKeyProvider is what is normally used to talk to FIDO2 devices (e.g. libfido2 can be used to talk to your Yubikey). However you can now use it to talk to your Secure Enclave instead!

hyperupcall

// I'm tired of extensions that automatically:
// - show welcome pages / walkthroughs
// - show release notes
// - send telemetry
// - recommend things
//
// This disables all of that stuff.
// If you have more config, leave a comment so I can add it!!

{

maixuanhan

Tested on NCA-1510B Lanner Electronics Inc.

Requirements

• Ubuntu machine with network connection for making bootable USB.
• An 8GiB USB.

Steps

1. Download latest ubuntu server distro image. Recommend ubuntu-server 18.04

http://cdimage.ubuntu.com/releases/18.04.1/release/?_ga=2.12074420.164276020.1537186949-1883798353.1537186949

kaxing

A sum-up from: Can't access loop device: "mount failed: Unknown error -1" or "failed to setup loop device: Operation not permitted" · Issue #2980 · lxc/lxd

Versions that works:

• lxd: 2.18-0ubuntu6
• lxc --version: 2.18
• host distro: Ubuntu 17.10 (Artful) with Kernel 4.13.0-19-generic
• container distro: Ubuntu 16.04.3

Steps:

mpontillo

maas refresh

profile=$(maas list | head -1 | awk '{ print $1 }')

# This generates a single JSON object.
maas $PROFILE machines read | jq '[.[] | {hostname:.hostname, system_id: .system_id, status:.status}]'
...

maas $PROFILE machines read | jq '.[] | {hostname:.hostname, system_id: .system_id, status:.status}' --compact-output
{"hostname":"pxe-bond1","system_id":"xrey6h","status":4}

mietek

Set up L2TP/IPsec VPN on Debian

Set up IPsec

Set up networking

dergachev

# taken from http://www.piware.de/2011/01/creating-an-https-server-in-python/
# generate server.xml with the following command:
#    openssl req -new -x509 -keyout server.pem -out server.pem -days 365 -nodes
# run as follows:
#    python simple-https-server.py
# then in your browser, visit:
#    https://localhost:4443

import BaseHTTPServer, SimpleHTTPServer
import ssl

geoffb

<!DOCTYPE html>
<html lang="en">
<head>
	<title>WebSocket Client</title>
	<style>
		#output {
			border: solid 1px #000;
		}
	</style>
</head>