matthew / Yubikey all the things

0 likes
0 forks
1 files
Last active 1729621908
Notes from my journey to getting Yubikey to authenticate everything on my system.

U2F for login and sudo access

I followed this guide: https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F

For step 3, I only did the user-specific pamu2fcfg setup; I did not put it at the system level. This makes the $HOME partition portable, and allows different users on the system to require U2F and/or use different keys.

Challenge-Response auth with YubiKey

When I originally purchased my key, and for four years thereafter, I used the challenge-response feature for restricting user authentication and sudo access.

matthew / deploy.sh

0 likes
0 forks
1 files
Last active 1729621834
This is a script I use on my host for deploying a website; it includes the ability to rollback if anything fails. I have my github action call this file with the repo name and sha in order to deploy a given site.
1 #!/bin/bash
2
3 set -e
4
5 deploy() {
6 local release_path="$1"
7
8 cd "${release_path}"
9 if [ -f "${release_path}/.deploy/deploy.sh" ]; then
10 /bin/bash .deploy/deploy.sh
Newer Older