Commit graph

655 commits

Author SHA1 Message Date
w4tsn
099c592e5b
pages/yubikey: fix typo 2023-02-27 09:46:23 +01:00
w4tsn
b015b9954c
pages/yubikey: add warning about online auth method 2023-02-26 11:52:18 +01:00
w4tsn
dafcba9988
pages/yubikey: add note about using both auth methods 2023-02-26 11:50:50 +01:00
w4tsn
6619d128b8
pages/yubikey: fix key registration instructions
The instructions to register a key with the local account were
implicitly requiring challenge-response. Add the YubiCloud method based
instructions and also add an explicit command to configure
challenge-response in slot 2 of a key.
2023-02-20 20:31:33 +01:00
w4tsn
eae11f0488
pages/yubikey: add missing line in example 2023-02-19 12:01:00 +01:00
w4tsn
90432a7376
pages/yubikey: fix several grammar issues 2023-02-18 11:00:39 +01:00
w4tsn
da454cc861
pages/yubikey: reformat flags of ykpersonalize
The man page of ykpersonalize uses a confusing format for providing
option flags. After tests although not documented in the man page it is
also possible to use an alternative format using spaces between option
flag and value. Also to note: the negative form of an option flag uses a
'-' symbol right in front of the value.

Also the slot selector -1 or -2 has to be supplied before any option
flag.
2023-02-18 10:48:26 +01:00
w4tsn
4274f89f00
pages/yubikey: remove note on setting secontext
The access to the ~/.yubico directory is done using the PAM module, not
sshd directly. PAM sets the context of that directory to auth_home_t
which PAM is allowed to access. No need to set the context to
ssh_home_t.

Apart from that using chcon is a volatile operation and not intended for
persistent changes which was the intent of the note though. The label
would be reset in a system recovery scenario.
2023-02-17 20:14:38 +01:00
w4tsn
93f06ff422
pages/yubikey: unify use of YubiKey spelling 2023-02-12 16:40:00 +01:00
w4tsn
a6b5d2490d
pages/yubikey: add OATH-TOTP to web auth section 2023-02-12 16:39:33 +01:00
w4tsn
05a7579f46
pages/yubikey: add section on OpenSSH client auth 2023-02-12 16:39:07 +01:00
w4tsn
b04799e7e9
pages/yubikey: add setup sections for other features 2023-02-12 16:38:28 +01:00
w4tsn
241c0afc5b
pages/yubikey: add a simple otp slot 2 example 2023-02-12 16:37:35 +01:00
w4tsn
a7c4670ec5
pages/yubikey: rework the local auth section
Changed the structure and content of the section to reflect more modern
tooling available in recent Fedora Linux distributions.

Simplified overall structure and added challenge-response configuration.

Removed the more complicated authfile option as it is an option for more
advanced use-cases but not necessary for a basic setup. More advanced
users may refer to the pam_yubico man page.

Added a warning about locking yourself out when using required
configuration.
2023-02-12 16:32:48 +01:00
w4tsn
26ca6635f0
pages/yubikey: add a section on backup keys
Due to the nature of hardware security tokens it is important to
consider backup keys right from the start, so added a section on that
topic.
2023-02-12 16:29:03 +01:00
w4tsn
d97e51eadc
pages/yubikey: update What is a YubiKey section
Added more use-cases than OTP to this section to give an overview on the
usual capabilities of modern YubiKeys like from the 5-series.
2023-02-12 16:27:35 +01:00
032d66455a #180-SwitchingDesktopEnvironment-edit-header
Header change and abstract
2023-02-11 19:40:01 +00:00
f311eb5589 #180-SwitchingDesktopEnvironment-edit-partials
updated groupinstall section
2023-02-11 19:36:26 +00:00
bd2d2f35bd Image paths corrected
Test for 1st image
2023-02-11 01:12:32 +00:00
7be1a5cc41 Reference section edit
Edited for language libraries, packages, and development toolchain
2023-02-09 22:57:58 +00:00
Michal Ambroz
853b7554a0 list apt equivalent of dnf update 2023-02-08 21:34:02 +00:00
Daiki Ueno
c93dcafa78 adding-new-certificates: Prefer to using "trust anchor" command
There are a couple of methods to install a certificate into the trust
store: using "trust anchor" or copying the file to
/etc/pki/ca-trust/source/anchors/.  The former is simpler and more
flexible as it doesn't require update-ca-trust and the installed
certificates can be removed with "trust anchor --remove".

For more context, see:
https://bugzilla.redhat.com/show_bug.cgi?id=2163554

Signed-off-by: Daiki Ueno <dueno@redhat.com>
2023-02-07 09:42:07 +09:00
Daiki Ueno
43f7068c07 Fix directory locations for distrusted certificates
The directory has been renamed from .../blacklist to .../blocklist in
all supported Fedora releases.

Signed-off-by: Daiki Ueno <dueno@redhat.com>
2023-02-07 07:43:23 +09:00
Anthony McGlone
322b9557da Small update (on reviewed grub articles) for consistency/style guidelines 2023-01-30 12:36:20 +00:00
Anthony McGlone
0271c0015e Reviewed partial proc_adding-other-operating-systems-grub2.adoc (#522) 2023-01-27 16:06:29 +00:00
Alan Bowman
275bc3ca0a Merge branch 'main' into 111-installing-from-source_branch
Merge commit
2023-01-26 21:44:31 -05:00
6b8b7b68c3 #521-finding-installing-apps-rewritten
Metadata and images not rendered. Images to follow.
2023-01-26 19:56:37 +00:00
6bc5c63b7f #180-SwitchingDE-edit-partials
Reference to desktop environment rather than package group
2023-01-26 18:14:22 +00:00
Anthony McGlone
ecd18ec31f Update link 2023-01-26 13:40:12 +00:00
Anthony McGlone
a00ca7d52a Updated partial proc_booting-with-configfile-on-different-partition.adoc (#522) 2023-01-26 11:41:07 +00:00
a49f93a460 180-Switching-DE-revised 2023-01-26 10:08:23 +00:00
Alan Bowman
d38ebb417d Merge branch 'main' into 111-installing-from-source_branch
Merging latest changes from main
2023-01-24 18:40:35 -05:00
Zdenek Dohnal
9d31cfee5e Mention Web UI URL explicitly 2023-01-24 15:16:04 +01:00
Alan Bowman
13b10825ef Update from review
- Fix "is are" agreement
- Change build comment
2023-01-23 19:02:36 -05:00
Alan Bowman
16aeef778e Add updated Installing from Source doc
Add a new version of the Installing from Source doc
Remove the old version from this branch
2023-01-22 15:35:18 -05:00
Peter Boy
41b2ddcc87 Update modules/ROOT/pages/kernel/build-custom-kernel.adoc
Added metadata and categorisation
2023-01-17 12:31:57 +00:00
Peter Boy
7f025a0706 Merge #411 Update a couple of commands for custom kernel cleanup 2023-01-17 12:07:03 +00:00
Anthony McGlone
30cb9fa5db Updated merged GRUB articles for style guidelines 2023-01-14 10:35:47 +00:00
Peter Boy
b7fcdc170b Quick Docs PR #313 part 4: uefi with qemu 2023-01-13 10:20:25 +01:00
Peter Boy
cc64237473 Quick Docs PR #313 part 3: mirror not processed, wiki page updated and maintained by infra after this PR. Stub page mirror.adoc deleted. 2023-01-13 09:33:10 +01:00
Peter Boy
403a6e422b Quick Docs PR #313 part 2: enable touchpad 2023-01-13 09:13:27 +01:00
Peter Boy
f184735df3 Quick Docs PR #313 part 1: debug systemd 2023-01-13 08:38:11 +01:00
Peter Boy
d5d2b45d2b Update modules/ROOT/pages/fonts.adoc, Fixed formatting 2023-01-12 20:14:18 +00:00
Peter Boy
e8013e608a Merge #545 Reviewed partial proc_installing-grub2-on-bios-system.adoc (part of #522) 2023-01-12 19:37:23 +00:00
Peter Boy
3b8c96e20e QuickDocs #543 Fixed misleading default password instruction. 2023-01-12 20:22:33 +01:00
Anthony McGlone
1451c4074d Reviewed partial proc_installing-grub2-on-bios-system.adoc (part of #522) 2023-01-12 16:18:52 +00:00
Peter Boy
03846ea686 Update modules/ROOT/pages/installing-grub2.adoc, replacing Wiki text by revision notice. 2023-01-12 15:55:16 +00:00
Rafael Fontenelle
315032f88c Fix MariaDB and MySQL names capitalization 2023-01-11 12:22:59 -03:00
Zdenek Dohnal
5e9088543f IPP-USB: Mention how to deal with the conflict 2023-01-10 18:37:05 +01:00
David Auer
da1eff929b dnf-system-upgrade: Reorder bullet points
I guess the point regarding GPG key imports was added in the wrong place, the sub-bullets do not belong to it.
2023-01-09 14:09:23 +00:00