dotfiles Setup

sudo apt-add-repository ppa:git-core/ppa
sudo apt-add-repository ppa:yubico/stable
sudo apt-get update
sudo apt-get install git
mkdir -p ~/code
git clone git://github.com/frioux/dotfiles ~/code/dotfiles
cd ~/code/dotfiles
sudo ./packages.sh
./install.sh
sudo bash -c 'cat sysctl.conf >> /etc/sysctl.conf'
sudo cp xsession.desktop /usr/share/xsessions/xsession.desktop
sudo cp random.rules /etc/udev/rules.d/71-disable-random-entropy-estimation.rules
sudo cp ./pm/* /etc/pm/sleep.d/

Install mutt

git clone https://github.com/neomutt/neomutt
cd neomutt
./prepare --enable-notmuch --with-lmdb --prefix=/opt --disable-pgp --disable-smime && \
   make && \
   sudo make install

Install docker

wget -qO- https://get.docker.com/ | sh
sudo usermod frew -aG docker
sudo systemctl enable docker
sudo cp /lib/systemd/system/docker.service /etc/systemd/system

Then add -s overlay2 --live-restore to the command in the copied file

sudo systemd daemon-reload
sudo systemctl restart docker

Install Dropbox

Install

Configure Postfix

Create /etc/postfix/sasl_passwd:

frioux@gmail.com frioux@gmail.com:$foo

Create /etc/postfix/transport:

frioux@gmail.com smtp:[smtp.gmail.com]:587

And finally, change the config:

sudo sh -c 'cat ./main.cf >> /etc/postfix/main.cf'
sudo postmap /etc/postfix/sasl_passwd
sudo postmap /etc/postfix/transport
sudo chmod 400 /etc/postfix/{sasl_passwd,transport}{.db,}
sudo postfix reload

Authorize Computer

Get app specific password from gmail, put in .netrc:

machine imap.gmail.com
login $bar@gmail.com
password $foo

machine smtp.gmail.com
login $bar@gmail.com
password $foo

machine google.com
login $bar@gmail.com
password $foo

And .git-smtp-password:

[sendemail]
   smtpPass = $foo

And /etc/ssmtp/ssmtp.conf:

root=frioux@gmail.com
mailhub=smtp.gmail.com:587
rewriteDomain=gmail.com
hostname=localhost
UseTLS=Yes
UseSTARTTLS=Yes
AuthUser=frioux@gmail.com
AuthPass=$foo
FromLineOverride=yes

And edit /etc/ssmtp/revaliases:

root:frioux@gmail.com:smtp.gmail.com:587

Put pause credentials in .pause:

user FREW
password DERP

Ensure permissions are correct:

chmod 600 ~/.netrc ~/.pause

Also set up Firefox Sync

Add / Replace SSH Keys

• Generate Ed25519 Key: ssh-keygen -t ed25519 -o -a 100
• Generate RSA Key: ssh-keygen -t rsa -b 4096 -o -a 100
• Put Ed25519 Key on github
• Put RSA Key on:
  • dbsrgits
  • gitmo
  • catagits
  • p5sagit
  • ZR
  • agm

How to set up offline two-factor auth with a u2f

sudo bash -c "pamu2fcfg -ufrew > /etc/u2f_mappings"

Put the following line at the top of /etc/pam.d/common-auth:

auth requisite pam_u2f.so authfile=/etc/u2f_mappings cue

More details here and here.

Bootstrap syncthing

Install from syncthing.net

"Pair" with other computers

Sync a to ~/Sync

Remove installation and run from sync dir

services

sv-run-w.pl
sv-run-offlineimap

sudo rsync -r services/root/ /etc/service

Misc Snippets

Record all traffic from a given host/port:

tcpdump -s 65535 -w tcp.dump host 10.6.6.1 and port 10114

Record all traffic involving a given host:

tcpdump -s 65535 -w tcp.dump src 10.6.6.1 or dst 10.6.6.1

Bind localhost:1234 to server.example.com:6667

ssh -L 1234:localhost:6667 server.example.com