Compare commits
2 Commits
acb13112c4
...
cabb8291cb
| Author | SHA1 | Date | |
|---|---|---|---|
|
cabb8291cb
|
|||
|
135712e042
|
7
.github/workflows/build-release.yaml
vendored
7
.github/workflows/build-release.yaml
vendored
@@ -22,11 +22,6 @@ jobs:
|
|||||||
with:
|
with:
|
||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
|
|
||||||
- name: Install Fonts
|
|
||||||
run: |
|
|
||||||
sudo apt-get update
|
|
||||||
sudo apt-get install -y fonts-liberation
|
|
||||||
|
|
||||||
- name: Install Rust
|
- name: Install Rust
|
||||||
uses: dtolnay/rust-toolchain@stable
|
uses: dtolnay/rust-toolchain@stable
|
||||||
|
|
||||||
@@ -40,7 +35,7 @@ jobs:
|
|||||||
tar -xJf typst.tar.xz --strip-components=1 -C /usr/local/bin/ typst-x86_64-unknown-linux-musl/typst
|
tar -xJf typst.tar.xz --strip-components=1 -C /usr/local/bin/ typst-x86_64-unknown-linux-musl/typst
|
||||||
typst --version
|
typst --version
|
||||||
|
|
||||||
- name: Install Typst & md-pdf (Rust)
|
- name: Install md-pdf (Rust)
|
||||||
run: |
|
run: |
|
||||||
cargo install md-pdf
|
cargo install md-pdf
|
||||||
echo "$HOME/.cargo/bin" >> $GITHUB_PATH
|
echo "$HOME/.cargo/bin" >> $GITHUB_PATH
|
||||||
|
|||||||
21
README.md
21
README.md
@@ -1,3 +1,16 @@
|
|||||||
|
---
|
||||||
|
title: "PIS"
|
||||||
|
subtitle: "Policy for Internal Security"
|
||||||
|
#logo: "path/to/logo.png"
|
||||||
|
author: "Rémi Heredero "
|
||||||
|
language: "en"
|
||||||
|
tags: ["gpg", "ssh", "x509", "YubiKey", "security"]
|
||||||
|
toc: false
|
||||||
|
template: "simple"
|
||||||
|
#date: "2026-01-23"
|
||||||
|
#version: "0.0.1"
|
||||||
|
---
|
||||||
|
|
||||||
# Policy for Internal Security
|
# Policy for Internal Security
|
||||||
This repo describes my P.I.S. (**P**olicy for **I**nternal **S**ecurity).
|
This repo describes my P.I.S. (**P**olicy for **I**nternal **S**ecurity).
|
||||||
You'll find my personal guidelines for SSH / GPG on YubiKey and how to configure and create a key / certificate.
|
You'll find my personal guidelines for SSH / GPG on YubiKey and how to configure and create a key / certificate.
|
||||||
@@ -195,14 +208,6 @@ This creates the file `id_ed25519_sk-keyring-cert.pub` that is the certificate t
|
|||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# x509
|
|
||||||
|
|
||||||
## Master YubiKey
|
|
||||||
I create a certificate in PIV slot 9a with Yubico authenticator. This CA would be used as a Root CA for my server.
|
|
||||||
TODO fix with XCA
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
# Troubleshooting
|
# Troubleshooting
|
||||||
## GPG
|
## GPG
|
||||||
Sometimes, for unknown (for me) reason, you need to kill the gpg-agent to be able to use the YubiKey again.
|
Sometimes, for unknown (for me) reason, you need to kill the gpg-agent to be able to use the YubiKey again.
|
||||||
|
|||||||
Reference in New Issue
Block a user