ℹ️

note

This web version is still kind of a mess but the PDF version is a bit more complete

What’s a License

• Copyright law is a bitch
• Posting your stuff online is a bitch
• Basically, licensing is you telling other people what they can and can’t do with your stuff
• By default, your stuff is under All Rights Reserved, which means you own it and nobody is allowed to share it or modify it or whatever
  • in practice, that’s probably not gonna stop anyone until you get lawyers involved
• Restrictive licenses typically mean that they force people downstream to protect certain freedoms (like being able to distribute your stuff)
• Conversely, permissive licenses give downstream people more control over what they do with your crap (like making their own private version and selling it or some shit)
  • Big companies generally will only let you use stuff that’s under permissive licenses
• Royalties are basically a subscription fee to use copyrighted works

FOSS Licenses

• https://choosealicense.com/ is a good resource
• https://interoperable-europe.ec.europa.eu/collection/eupl/solution/licensing-assistant/find-and-compare-software-licenses is a more thorough option
• https://spdx.org/licenses/ is gonna be the most thorough source

FOSS Freedoms

As outlined by Stallman himself, defines what’s open source or not 0. The freedom to run the program as you wish, for whatever purpose. - I should be able to do whatever the fuck I want with the program

What is GPG

Paraphrasing from the Arch Wiki, GPG is basically an implementation of PGP (Pretty Good Privacy)/ RFC 4880. You can use it to sign stuff, encrypt stuff, and authenticate yourself (eg over SSH or S/MIME).

Using GPG for SSH

1. Generate Master Key

   • This is the key you’ll use to create subkeys. As such you’ll want to keep this safe somewhere

   • 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18

     $ gpg --full-generate-key --expert gpg (GnuPG) 2.4.3; Copyright (C) 2023 g10 Code GmbH This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Please select what kind of key you want: (1) RSA and RSA (2) DSA and Elgamal (3) DSA (sign only) (4) RSA (sign only) (7) DSA (set your own capabilities) (8) RSA (set your own capabilities) (9) ECC (sign and encrypt) *default* (10) ECC (sign only) (11) ECC (set your own capabilities) (13) Existing key (14) Existing key from card Your selection? 11

     • We want to pick ECC, since that’s the more secure algorithm of these

   • Next, we want to disable signing, since we’ll only use this key to make more keys (i.e. we’ll be certifying other keys)

• Okay so you’ve got a server now and need a reverse proxy
• Traefik is pretty decent at that, it’ll set up your HTTPS certs and auto generate routes from your docker images
• only problem is its an absolute bitch to set up
• Here’s a stripped down docker-compose.yml to give you an idea of how I have it set up
• The end result should be a lighttpd server running on blog.argentumcation.com

import { Accordion, AccordionItem } from “accessible-astro-components”;

Here’s how to create a resident SSH Key using a security key

1

ssh-keygen -t ed25519-sk -Oresident

If that one doesn’t work,

1

ssh-keygen -t ed25519-sk -Oresident -Oapplication=ssh:key