stateless-workstation-config
sharkey
stateless-workstation-config | sharkey | |
---|---|---|
1 | 2 | |
22 | 391 | |
- | 0.3% | |
6.4 | 5.4 | |
3 months ago | 8 months ago | |
Jinja | Go | |
- | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
stateless-workstation-config
-
How often should I rotate my SSH keys?
> An even more robust approach is to use some kind of hardware token that can sign short-lived ssh keys, and teach all your servers how to deal with those. That’s neat, but it’s hard to deploy (needs custom ssh settings).
Ahem, no. I use Yubikeys for a few years now. They are literally braindead to use, and works out of the box in recent Ubuntu. Here is an Absible role to get started: https://github.com/cristiklein/stateless-workstation-config/...
Stop making excuses and start protecting your SSH keys!
Disclaimer: I'm not compensated in any way by Yubico, but their product is so darn good that I really want people to start using it.
sharkey
- Cryptojacking Attacks Continue To Target SSH Servers
-
How often should I rotate my SSH keys?
> Still, I'd really like to see an article about how you set that up, especially if it targets smaller enterprise customers.
https://github.com/square/sharkey
What are some alternatives?
secretive - Store SSH keys in the Secure Enclave
caddy-ssh - Caddy-SSH is a general-purpose, extensible, modular, memory-safe SSH server built in Go [Moved to: https://github.com/kadeessh/kadeessh]
sekey - Use Touch ID / Secure Enclave for SSH Authentication!
bless - Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function
openssh-sk-winhello - A helper for OpenSSH to interact with FIDO2 and U2F security keys through native Windows Hello API
cashier - A self-service CA for OpenSSH
certificates - 🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
sshcerts - A crate for reading, parsing, verifying, and generating OpenSSH certificates and keys.