Cody Hazelwood codyhazelwood

Setting up ssh public key authentication on macOS using a YubiKey 4

I largely followed Florin's blog post, but have a few notes to add regarding issues I encountered:

Basic setup notes

I used a YubiKey 4, while the blog describes using a YubiKey NEO. I'm sure a YubiKey 5 would also work. I'm also running macOS 10.13.6.
I installed GPGTools as recommended. However, as I'll note later, it seems that gpg-agent only automatically starts when gpg is used; for ssh, you'll need to ensure it's running.
Before generating your keys, decide what key size you want to use. If you run the list command inside gpg --edit-card, look for the Key attributes line to see what is currently selected. On my YubiKey 4, it defaulted to 2048 bits for all keys:

Key attributes ...: rsa2048 rsa2048 rsa2048

Introduction

This is about documenting getting Linux running on the late 2016 and mid 2017 MPB's; the focus is mostly on the MacBookPro13,3 and MacBookPro14,3 (15inch models), but I try to make it relevant and provide information for MacBookPro13,1, MacBookPro13,2, MacBookPro14,1, and MacBookPro14,2 (13inch models) too. I'm currently using Fedora 27, but most the things should be valid for other recent distros even if the details differ. The kernel version is 4.14.x (after latest update).

The state of linux on the MBP (with particular focus on MacBookPro13,2) is also being tracked on https://github.com/Dunedan/mbp-2016-linux . And for Ubuntu users there are a couple tutorials (here and here) focused on that distro and the MacBook.

Note: For those who have followed these instructions ealier, and in particular for those who have had problems with the custom DSDT, modifying the DSDT is not necessary anymore - se

→ Great great documentation about all this (so much better): https://github.com/drduh/YubiKey-Guide

Using Yubikey (PIV on osx, etc.)

Documentation for PIV: https://github.com/Yubico/yubikey-piv-manager/tree/master/doc

To manage the certificates: https://www.yubico.com/support/knowledge-base/categories/articles/unpair-yubikey-piv-login-macos-sierra/

Using GPG key

No longer needed! https://twitter.com/trello/status/893213868322902017

	/**
	* Tier 1 – Dotted
	*/
	* { outline: 2px dotted purple; }
	* * { outline: 2px dotted blue; }
	* * * { outline: 2px dotted green; }
	* * * * { outline: 2px dotted yellow; }
	* * * * * { outline: 2px dotted orange; }
	* * * * * * { outline: 2px dotted red; }

	resource "aws_ecs_service" "service" {
	name = "${var.app}"
	cluster = "${var.cluster}"
	# Use task revision in AWS if it is greater than task revision in tfstate
	# Prevents rolling back revision when it has been incremented by CI
	task_definition = "${aws_ecs_task_definition.app.family}:${data.external.task_definition.result["task_definition_revision"] > aws_ecs_task_definition.app.revision ? data.external.task_definition.result["task_definition_revision"] : aws_ecs_task_definition.app.revision }"
	desired_count = "${var.task_count}"

	depends_on = [
	"aws_ecs_task_definition.app"

	#!/usr/bin/env ruby

	require 'pg'

	=begin

	when creating a postgres db replica in RDS, or restoring from a snapshot, the
	underlying EBS volume of the new instance must be initialized by reading every
	block, otherwise the blocks will be lazy-initialized by production queries
	which will be extremely latent. (i've seen normally 50ms queries take 30s in

	# PREREQUISITES:
	# Setup a Mesos cluster and install Marathon framework

	MARATHON_HOST="http://<marathon_host>/marathon"
	# this could be an internal ELB that the Gateway nodes can use to auto-discover services
	INTERNAL_MARATHON_HOST="http://<internal_marathon_host>/marathon"
	# a wildcard domain configured with *.api.anydomain
	API_DOMAIN="api.<my-domain>"

	# -------------------------