panzer-arc

Native Secure Enclave backed ssh keys on MacOS

It turns out that MacOS Tahoe can generate and use secure-enclave backed SSH keys! This replaces projects like https://github.com/maxgoedjen/secretive

There is a shared library /usr/lib/ssh-keychain.dylib that traditionally has been used to add smartcard support to ssh by implementing PKCS11Provider interface. However since recently it also implements SecurityKeyProivder which supports loading keys directly from the secure enclave! SecurityKeyProvider is what is normally used to talk to FIDO2 devices (e.g. libfido2 can be used to talk to your Yubikey). However you can now use it to talk to your Secure Enclave instead!

A Short IPv6 Guide for Home IPv4 Admins

This guide is for homelab admins who understand IPv4s well but find setting up IPv6 hard or annoying because things work differently. In some ways, managing an IPv6 network can be simpler than IPv4, one just needs to learn some new concepts and discard some old ones.

Let’s begin.

First of all, there are some concepts that one must unlearn from ipv4:

Concept 1

* ALERT *

This gist has migrated to the repo below.

Please submit new entries as pull requests to https://github.com/jauderho/nts-servers.

Initial source: https://docs.ntpsec.org/latest/NTS-QuickStart.html

Here is the best setup (I think so :D) for K-series Keychron keyboards on Linux.

Note: many newer Keychron keyboards use QMK as firmware and most tips here do not apply to them. Maybe the ones related to Bluetooth can be useful, but everything related to Apple's keyboard module (hid_apple) on Linux, won't work. As far as I know, all QMK-based boards use the hid_generic module instead. Examples of QMK-based boards are: Q, Q-Pro, V, K-Pro, etc.

Most of these commands have been tested on Ubuntu 20.04 and should also work on most Debian-based distributions. If a command happens not to work for you, take a look in the comment section.

Make Fn + F-keys work (NOT FOR QMK-BASED BOARDS)

Older Keychron keyboards (those not based on QMK) use the hid_apple driver on Linux, even in the Windows/Android mode, both in Bluetooth and Wired modes.

Shell Keybindings

Navigation 🚀

Keybinding	Action
`Alt` + `f/b`	Move cursor to previous/next word
`Ctrl` + `a/e`	Move cursor to beginning/end of command
`Ctrl` + `xx`	Toggle between the start of line and current cursor position

Generate Symantec VIP Access Token as OTP

Recently I came across a web service that required two-factor authentication using the Symantec VIP Access App. I already manage all of my OTP tokens in a different app (If you are on iOS I highly recommend using OTP Auth by Roland Moers.) and did not want to have to use yet another app to generate the TOTP.

There is a way to generate a Symantec VIP Access compatible token very easily if you have access to an environment which can run Python PIP. I happen to have Ubuntu Windows Subsystem Linux running on my machine. (If you are running Windows 10 and don't have this you should really check it out.) Let's get started...

hello

Instructions

Here we install python3-pip and qrencode so we can generate our secret, I

Google Public NTP [AS15169]:

time.google.com

time1.google.com

time2.google.com

time3.google.com

Configuring Proxmox VE node as client for remote NUT server

Network UPS Tools User Manual

apt-get install nut

Edit /etc/nut/nut.conf:


	import json
	import logging
	import os
	import sys

	from schwab import auth
	from schwab.orders.common import *
	from schwab.orders.generic import OrderBuilder

	# Temporarily add a normal upstream DNS resolver
	/ip dns set servers=1.1.1.1,1.0.0.1

	# CA certificates extracted from Mozilla
	/tool fetch url=https://curl.se/ca/cacert.pem

	# Import the downloaded ca-store (127 certificates)
	/certificate import file-name=cacert.pem passphrase=""

	# Set the DoH resolver to cloudflare