Andy Brody ab

🔐 macOS OpenSSH Patcher for Hardware Security Keys

Supports ED25519-SK with Yubikey and other FIDO2 hardware security keys!

🤔 Discussion

Despite being compiled to support hardware security keys that take advantage of the FIDO2 protocol, the built-in OpenSSH client on macOS Sonoma and above lacks the middleware/library to support these devices. To keep using the built-in client - which is often the most stable and secure method for SSH connections - we need to compile the Security Key Provider from OpenSSH source and tell the macOS client about it ourselves.

This script does all of that for you on both Apple Silicon and Intel Mac computers!

The script installs openssl and libfido2 along with the required build tools from Homebrew. It then clones the latest main branch of OpenSSH Portable and builds from it the Security Key Provider library: sk-libfido2.dylib. It finally moves the built library to /usr/local/lib/, modifies ~/.zshenv to expor

Migrating an RDS DB instance to an Aurora DB cluster with CloudFormation

There are several guides describing how to migrate a plain RDS instance to an Aurora cluster using read replica. But none of them describes how the new Aurora cluster can afterwards be maintained further with CloudFormation.

This guide describes a migration path I've used on production services. A few manual steps and a short downtime - or at least read-only mode - are required, but the final cluster will then be part of an already existing CloudFormation stack.

High-Level Process

With or without CloudFormation, the high-level steps are the following

Personal Mastodon instance

Effective total cost: $3–5/mo

Setup

Decide on an EC2 instance type:

At AWS Console → EC2 → Instance Types, filter for ≥1 GB RAM and sort by price.

t4g.micro is lowest.

	#!/usr/bin/env python3

	"""
	usage: motorola_parse_support_dates.py

	This script prints info about Motorola phone end of life dates in the YAML
	format expected for the endoflife.date website.

	See https://en-us.support.motorola.com/app/software-security-update

	#!/bin/bash

	# Usage: tracing::init [endpoint; default localhost:4317]
	function tracing::init() {
	export OTEL_EXPORTER_OTLP_ENDPOINT="${1:-${OTEL_EXPORTER_OTLP_ENDPOINT:-localhost:4317}}"
	}

	# Usage: tracing::auto::init [endpoint; default localhost:4317]
	function tracing::auto::init() {
	tracing::init

	package main

	import "fmt"

	type AnEnum interface {
	IAmAnEnum()
	}

	type Text struct {
	text string

	#!/usr/bin/env python
	# vim: set fileencoding=utf-8
	#
	# USAGE:
	# Back up your tmux old config, run the script and redirect stdout to your conf
	# file. Example:
	#
	# $ cp ~/.tmux.conf ~/.tmux.conf.orig
	# $ python ./tmux-migrate-options.py ~/.tmux.conf.orig > ~/.tmux.conf
	#

	import cdk = require('@aws-cdk/cdk');
	import ec2 = require('@aws-cdk/aws-ec2');
	import elastic = require('@aws-cdk/aws-elasticache');
	import rds = require ('@aws-cdk/aws-rds');
	import es = require("@aws-cdk/aws-elasticsearch");
	import ecs = require('@aws-cdk/aws-ecs');
	import s3 = require("@aws-cdk/aws-s3");
	import elbv2 = require('@aws-cdk/aws-elasticloadbalancingv2');
	import route53 = require('@aws-cdk/aws-route53');
	import certificateManager = require("@aws-cdk/aws-certificatemanager");

	FROM codeship/ruby

	MAINTAINER Dave Mox <[email protected]>

	RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y \
	git \
	vim

	COPY Makefile /src/