https://github.com/paultag/olympia

https://github.com/paultag/olympia

Last synced: about 1 month ago
JSON representation

• Host: GitHub
• URL: https://github.com/paultag/olympia
• Owner: paultag
• Created: 2016-10-29T16:11:58.000Z (about 8 years ago)
• Default Branch: master
• Last Pushed: 2024-01-31T15:40:58.000Z (11 months ago)
• Last Synced: 2024-10-14T19:21:23.530Z (3 months ago)
• Language: Vim Script
• Size: 96.7 KB
• Stars: 0
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
olympia

=======

These packages are a set of configuration defaults that tear up the default

Debian configuration in favor of the undocumented and maybe unexpected

configuration that Paul Tagliamonte enjoys.

As such, this is likely unusable for most of the population. That's OK,

you're normal.

Building

--------

```

$ dpkg-buildpackage -us -uc

$ sudo dpkg -i ../*.deb

```

Post-install

------------

PKCS11

------

If you've installed olympia-libpam-pkcs11, you should enable this carefully

after a bit of testing. Here's what you do:

 1. Open a shell with `sudo su`, and keep that open in case this goes wrong.

    I usually use a `tty`, so that testing the below isn't painful.

 1. In another shell, run `pklogin_finder`, and unsure the correct UID is

    shown on the screen.

 1. Run the command `sudo pam-auth-update`. Check `Olympia PKCS11 authentication`.

 1. Verify sudo works in yet another terminal.

 1. If it works and things are happy, you can now re-run `pam-auth-update` and

    disable `UNIX authentication`.

 1. Log out of GNOME and back in, using your PKCS11 token.

 1. Try it again without a token installed. It should fail.

 1. Reboot the machine and ensure it's working right. At this point you'll lose

    your root shell, and have to use a `d-i` rescue image to decrypt the drive

    and chroot.

License

-------

All third-party works are documented in `debian/copyright`, along with

their original author. Works which I authored are subject to the terms

of the Expat/MIT License.