Commit graph

727 commits

Author SHA1 Message Date
Peter Boy
a54afa41d0 Merge #565 Updating 'getting started' guide to reflect the root account being disabled by default on Fedora Workstation 2023-03-21 09:16:10 +00:00
Peter Boy
a578fbbc71 Merge #577 pages/yubikey: add pam_u2f alternative 2023-03-21 09:07:20 +00:00
Peter Boy
4f50823ea6 Merge #576 Add a warning about Slot 1 reset 2023-03-21 09:06:25 +00:00
Peter Boy
79e5da47d7 Merge #575 pages/yubikey: fix OpenSSH section 2023-03-21 09:05:31 +00:00
Peter Boy
9d83b8f7a4 Merge #574 pages/yubikey: remove outdated notice 2023-03-21 09:04:07 +00:00
Zdenek Dohnal
8a2d7469b6 Add user stories for installation
Reworked installing printers and installation user stories were added.
2023-03-16 15:58:59 +00:00
w4tsn
7dfffea7ca
pages/yubikey: fix OpenSSH section
There was an error mixing up PIV/PKCS#11 for older OpenSSH and FIDO2 for
OpenSSH 8.2+. This change adds both methods as separate alternatives.
2023-03-11 11:19:42 +01:00
w4tsn
ff8060af9f
pages/yubikey: add pam_u2f alternative
Apparently there is also pam_u2f as alternative to pam_yubico which is a
more general approach using the open FIDO2 / U2F standard. It's much
easier to setup as there are fewer possibilities and decisions to make.

This approach also supports more security keys like SoloKey v2 and
NitroKey 2/3 which could open possibility to create a dedicated security
key page for general key support in Fedora Linux.
2023-03-11 11:02:14 +01:00
w4tsn
e81caf8a5e
pages/yubikey: change yubicloud upload heading lvl
This heading belongs to the topic of writing a new AES key to Slot 1.
2023-03-11 10:03:52 +01:00
w4tsn
a8fa21279d
pages/yubikey: add a warning about resetting slot1 2023-03-11 10:03:12 +01:00
w4tsn
2099944d40
pages/yubikey: remove outdated notice
Since the last update from 2023-02-26 this Quick Doc is updated to
latest developments in used packages, YubiKey features and use in Fedora
Linux 37.
2023-03-11 09:53:56 +01:00
25b25caa7f Merge #564 Review and update "Using Yubikey" page 2023-03-05 17:51:56 +00:00
9e63b8d2d4
Signed-off-by: Hanku Lee <allegrovelo@gmail.com>
image text and alt text added
2023-03-04 21:49:31 +00:00
7ac01af151
Signed-off-by: Hanku Lee <allegrovelo@gmail.com>
Image rendered and intro added
2023-03-04 00:46:10 +00:00
b84581f01d
Signed-off-by: Hanku Lee <allegrovelo@gmail.com>
image macro updated
2023-03-04 00:15:05 +00:00
e5dde980e6 Merge #566 QuickDoc issue 521 updated and images uploaded 2023-03-02 21:54:09 +00:00
w4tsn
970eb0ebb1
pages/yubikey: fix yubikey-manager gui package 2023-02-28 21:16:41 +01:00
w4tsn
099c592e5b
pages/yubikey: fix typo 2023-02-27 09:46:23 +01:00
w4tsn
b015b9954c
pages/yubikey: add warning about online auth method 2023-02-26 11:52:18 +01:00
w4tsn
dafcba9988
pages/yubikey: add note about using both auth methods 2023-02-26 11:50:50 +01:00
Francois Andrieu
ababdf39d2 remove exploded git tree repository that no longer exists 2023-02-22 20:00:37 +00:00
w4tsn
6619d128b8
pages/yubikey: fix key registration instructions
The instructions to register a key with the local account were
implicitly requiring challenge-response. Add the YubiCloud method based
instructions and also add an explicit command to configure
challenge-response in slot 2 of a key.
2023-02-20 20:31:33 +01:00
w4tsn
eae11f0488
pages/yubikey: add missing line in example 2023-02-19 12:01:00 +01:00
89ed69d141
Signed-off-by: Hanku Lee <allegrovelo@gmail.com>
QuickDoc issue 521 updated and images uploaded
2023-02-18 17:29:39 +00:00
w4tsn
90432a7376
pages/yubikey: fix several grammar issues 2023-02-18 11:00:39 +01:00
w4tsn
da454cc861
pages/yubikey: reformat flags of ykpersonalize
The man page of ykpersonalize uses a confusing format for providing
option flags. After tests although not documented in the man page it is
also possible to use an alternative format using spaces between option
flag and value. Also to note: the negative form of an option flag uses a
'-' symbol right in front of the value.

Also the slot selector -1 or -2 has to be supplied before any option
flag.
2023-02-18 10:48:26 +01:00
w4tsn
4274f89f00
pages/yubikey: remove note on setting secontext
The access to the ~/.yubico directory is done using the PAM module, not
sshd directly. PAM sets the context of that directory to auth_home_t
which PAM is allowed to access. No need to set the context to
ssh_home_t.

Apart from that using chcon is a volatile operation and not intended for
persistent changes which was the intent of the note though. The label
would be reset in a system recovery scenario.
2023-02-17 20:14:38 +01:00
Liam Coogan
83a5c07f6c Fix typo I made 2023-02-16 17:27:45 +00:00
Liam Coogan
2ba4312404 Fixing various typos and grammatical inaccuracies in the 'Getting Started' guide
See title
2023-02-15 12:55:38 +00:00
Liam Coogan
1ff1ee9ead Updating 'getting started' guide to reflect the root account being disabled by default on Fedora Workstation
This is my first commit so please correct me if there's something wrong here or feel free to change my wording, but I believe Fedora Workstation now disables the root account by default and instead adds the default user to the 'wheel' group.
2023-02-15 12:41:11 +00:00
w4tsn
93f06ff422
pages/yubikey: unify use of YubiKey spelling 2023-02-12 16:40:00 +01:00
w4tsn
a6b5d2490d
pages/yubikey: add OATH-TOTP to web auth section 2023-02-12 16:39:33 +01:00
w4tsn
05a7579f46
pages/yubikey: add section on OpenSSH client auth 2023-02-12 16:39:07 +01:00
w4tsn
b04799e7e9
pages/yubikey: add setup sections for other features 2023-02-12 16:38:28 +01:00
w4tsn
241c0afc5b
pages/yubikey: add a simple otp slot 2 example 2023-02-12 16:37:35 +01:00
w4tsn
a7c4670ec5
pages/yubikey: rework the local auth section
Changed the structure and content of the section to reflect more modern
tooling available in recent Fedora Linux distributions.

Simplified overall structure and added challenge-response configuration.

Removed the more complicated authfile option as it is an option for more
advanced use-cases but not necessary for a basic setup. More advanced
users may refer to the pam_yubico man page.

Added a warning about locking yourself out when using required
configuration.
2023-02-12 16:32:48 +01:00
w4tsn
26ca6635f0
pages/yubikey: add a section on backup keys
Due to the nature of hardware security tokens it is important to
consider backup keys right from the start, so added a section on that
topic.
2023-02-12 16:29:03 +01:00
w4tsn
d97e51eadc
pages/yubikey: update What is a YubiKey section
Added more use-cases than OTP to this section to give an overview on the
usual capabilities of modern YubiKeys like from the 5-series.
2023-02-12 16:27:35 +01:00
032d66455a #180-SwitchingDesktopEnvironment-edit-header
Header change and abstract
2023-02-11 19:40:01 +00:00
f311eb5589 #180-SwitchingDesktopEnvironment-edit-partials
updated groupinstall section
2023-02-11 19:36:26 +00:00
bd2d2f35bd Image paths corrected
Test for 1st image
2023-02-11 01:12:32 +00:00
7be1a5cc41 Reference section edit
Edited for language libraries, packages, and development toolchain
2023-02-09 22:57:58 +00:00
Michal Ambroz
853b7554a0 list apt equivalent of dnf update 2023-02-08 21:34:02 +00:00
Daiki Ueno
c93dcafa78 adding-new-certificates: Prefer to using "trust anchor" command
There are a couple of methods to install a certificate into the trust
store: using "trust anchor" or copying the file to
/etc/pki/ca-trust/source/anchors/.  The former is simpler and more
flexible as it doesn't require update-ca-trust and the installed
certificates can be removed with "trust anchor --remove".

For more context, see:
https://bugzilla.redhat.com/show_bug.cgi?id=2163554

Signed-off-by: Daiki Ueno <dueno@redhat.com>
2023-02-07 09:42:07 +09:00
Daiki Ueno
43f7068c07 Fix directory locations for distrusted certificates
The directory has been renamed from .../blacklist to .../blocklist in
all supported Fedora releases.

Signed-off-by: Daiki Ueno <dueno@redhat.com>
2023-02-07 07:43:23 +09:00
Anthony McGlone
322b9557da Small update (on reviewed grub articles) for consistency/style guidelines 2023-01-30 12:36:20 +00:00
Anthony McGlone
0271c0015e Reviewed partial proc_adding-other-operating-systems-grub2.adoc (#522) 2023-01-27 16:06:29 +00:00
Alan Bowman
275bc3ca0a Merge branch 'main' into 111-installing-from-source_branch
Merge commit
2023-01-26 21:44:31 -05:00
6b8b7b68c3 #521-finding-installing-apps-rewritten
Metadata and images not rendered. Images to follow.
2023-01-26 19:56:37 +00:00
6bc5c63b7f #180-SwitchingDE-edit-partials
Reference to desktop environment rather than package group
2023-01-26 18:14:22 +00:00
Anthony McGlone
ecd18ec31f Update link 2023-01-26 13:40:12 +00:00
Anthony McGlone
a00ca7d52a Updated partial proc_booting-with-configfile-on-different-partition.adoc (#522) 2023-01-26 11:41:07 +00:00
a49f93a460 180-Switching-DE-revised 2023-01-26 10:08:23 +00:00
Alan Bowman
d38ebb417d Merge branch 'main' into 111-installing-from-source_branch
Merging latest changes from main
2023-01-24 18:40:35 -05:00
Zdenek Dohnal
9d31cfee5e Mention Web UI URL explicitly 2023-01-24 15:16:04 +01:00
Alan Bowman
13b10825ef Update from review
- Fix "is are" agreement
- Change build comment
2023-01-23 19:02:36 -05:00
Alan Bowman
16aeef778e Add updated Installing from Source doc
Add a new version of the Installing from Source doc
Remove the old version from this branch
2023-01-22 15:35:18 -05:00
Peter Boy
41b2ddcc87 Update modules/ROOT/pages/kernel/build-custom-kernel.adoc
Added metadata and categorisation
2023-01-17 12:31:57 +00:00
Peter Boy
7f025a0706 Merge #411 Update a couple of commands for custom kernel cleanup 2023-01-17 12:07:03 +00:00
Anthony McGlone
30cb9fa5db Updated merged GRUB articles for style guidelines 2023-01-14 10:35:47 +00:00
Peter Boy
b7fcdc170b Quick Docs PR #313 part 4: uefi with qemu 2023-01-13 10:20:25 +01:00
Peter Boy
cc64237473 Quick Docs PR #313 part 3: mirror not processed, wiki page updated and maintained by infra after this PR. Stub page mirror.adoc deleted. 2023-01-13 09:33:10 +01:00
Peter Boy
403a6e422b Quick Docs PR #313 part 2: enable touchpad 2023-01-13 09:13:27 +01:00
Peter Boy
f184735df3 Quick Docs PR #313 part 1: debug systemd 2023-01-13 08:38:11 +01:00
Peter Boy
d5d2b45d2b Update modules/ROOT/pages/fonts.adoc, Fixed formatting 2023-01-12 20:14:18 +00:00
Peter Boy
e8013e608a Merge #545 Reviewed partial proc_installing-grub2-on-bios-system.adoc (part of #522) 2023-01-12 19:37:23 +00:00
Peter Boy
3b8c96e20e QuickDocs #543 Fixed misleading default password instruction. 2023-01-12 20:22:33 +01:00
Anthony McGlone
1451c4074d Reviewed partial proc_installing-grub2-on-bios-system.adoc (part of #522) 2023-01-12 16:18:52 +00:00
Peter Boy
03846ea686 Update modules/ROOT/pages/installing-grub2.adoc, replacing Wiki text by revision notice. 2023-01-12 15:55:16 +00:00
Rafael Fontenelle
315032f88c Fix MariaDB and MySQL names capitalization 2023-01-11 12:22:59 -03:00
Zdenek Dohnal
5e9088543f IPP-USB: Mention how to deal with the conflict 2023-01-10 18:37:05 +01:00
David Auer
da1eff929b dnf-system-upgrade: Reorder bullet points
I guess the point regarding GPG key imports was added in the wrong place, the sub-bullets do not belong to it.
2023-01-09 14:09:23 +00:00
Anthony McGlone
ccce9b5af4 Issue #522 Reviewed partial proc_using-grub2-prompt.adoc 2023-01-07 13:55:33 +00:00
Zdenek Dohnal
e89b6aff78 Printing: Mention printerapps, raw queue and raw printing 2023-01-04 12:57:20 +01:00
Peter Boy
dd10aea402 issue #153: Fixed maning. 2023-01-03 17:33:52 +01:00
Peter Boy
1696e8b8f3 issue #153 Added using yubikey 2023-01-03 15:30:27 +01:00
Jayanth Sreejith
76ca0b003e Update modules/ROOT/pages/reset-root-password.adoc
Fixed typo on line 36 from 'begging' to 'beginning'
2023-01-02 16:12:30 +00:00
Mikolaj Palys
f69114aec3 Fix a typo 2022-12-29 21:42:56 +00:00
Peter Boy
0f9c8328e4 updated from main 2022-12-29 01:11:30 +01:00
Peter Boy
d69116cb84 Issue #111 Added article by ramin 2022-12-29 01:10:13 +01:00
Peter Boy
b836b51b9b Merge #531 #522 Reviewed partial for restoring bootloader 2022-12-27 14:24:09 +00:00
Jiyoung Joung
cf4d04bbb8 Update modules/ROOT/pages/postgresql.adoc 2022-12-24 00:04:19 +00:00
Anthony McGlone
8c2df2c465 #522 Reviewed partial for restoring bootloader 2022-12-23 16:18:11 +00:00
Peter Boy
597ee3427e #165 Removed superfluous :toc:, Added some preliminary metadata 2022-12-19 21:35:55 +01:00
Peter Boy
6a890f16fd #524 Fixed some minor issues. 2022-12-19 20:35:43 +01:00
Peter Boy
a8468c3fbb #497 Added ksflaten to the Spinning the Fedora Desktop example. 2022-12-17 17:24:10 +01:00
Peter Boy
8ffc2db8e2 Added still current items from PR #488. 2022-12-17 14:40:09 +01:00
Michael Nahkies
c15b466e08 fix: add missing sudo
creating a file in the `/etc/dconf/db/gdm.d/` requires root by default
2022-12-17 09:36:55 +00:00
Peter Boy
1d980de58b Added authors, category, tag; Link to grub2 article, specifically regarding BTRFS (see comment hhlp), removed Wiki transition warning. 2022-12-17 08:24:27 +01:00
Anthony McGlone
947ea2e4c2 Issue #523 Setting a key shortcut in Gnome 2022-12-12 12:24:14 +00:00
Brandon Nielsen
101096c0f2 Update a couple of commands for cleanup.
Fedora doesn't seem to use "initrd" anymore, so show removing "initramfs" instead.

Fedora uses the Boot Loader Specification[0] for defining boot entries,
the grub config should rarely need to be edited by hand. Show removing
the drop in entries made by installing the custom kernel, and rebuilding
the grub config.

[0] - https://systemd.io/BOOT_LOADER_SPECIFICATION/
2022-12-10 11:37:22 +00:00
Mat McCabe
a29b6119bd Update modules/ROOT/pages/troubleshooting_selinux.adoc
Updated page ready for PR
2022-12-10 11:27:38 +00:00
Mat McCabe
6f7712295e Update modules/ROOT/pages/encrypting-drives-using-LUKS.adoc
The page for Issue https://pagure.io/fedora-docs/quick-docs/issue/230 

disk-encryption-user-guide
2022-12-10 11:27:38 +00:00
Mat McCabe
5c1f40568e Update modules/ROOT/pages/troubleshooting_selinux.adoc 2022-12-10 11:27:38 +00:00
Mat McCabe
b1abcbe139 Update modules/ROOT/pages/_partials/proc_changing-to-enforcing-mode.adoc 2022-12-10 11:27:38 +00:00
Mat McCabe
ada1c8e3df Update modules/ROOT/pages/_partials/proc_changing-to-enforcing-mode.adoc 2022-12-10 11:27:38 +00:00
Mat McCabe
3c1cf0741c Update modules/ROOT/pages/_partials/con_permanent-changes-in-selinux-states-and-modes.adoc 2022-12-10 11:27:38 +00:00
Mat McCabe
8769ebf804 Update modules/ROOT/pages/_partials/ref_changing-selinux-modes-at-boot-time.adoc 2022-12-10 11:27:38 +00:00
Mat McCabe
4e2d4e811f Update modules/ROOT/pages/_partials/proc_disabling-selinux.adoc 2022-12-10 11:27:38 +00:00
Mat McCabe
c088913464 Update modules/ROOT/pages/_partials/proc_changing-to-enforcing-mode.adoc
Updated to match https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/using_selinux/changing-selinux-states-and-modes_using-selinux#enabling-selinux-on-systems-that-previously-had-it-disabled_changing-selinux-states-and-modes.

Left some notes from the pre-fix doc that I was not sure to delete or not.
2022-12-10 11:27:38 +00:00