Fully automated luxury space communism device setup list #36

New issue

Open

opened 2026-06-27 20:19:19 +00:00 by barnett · 0 comments

barnett commented

2026-06-27 20:19:19 +00:00

Owner

Running list of things I had to manually do after deploying a new system:

Copy SOPS keys to system /etc/age and home ~/.config/sops/age
Set initial password for barnett user (and root, but that's not entirely necessary)
Enroll system with new FOKS key (seems unavoidable - maybe Yubikey would be an alternative)
Add SSH key to .ssh from FOKS
Add GPG key with gpg --import from FOKS
Restore Secure Boot keys to /var/lib/sbctl

Running list of things I had to manually do after deploying a new system: - [ ] Copy SOPS keys to system /etc/age and home ~/.config/sops/age - [ ] Set initial password for `barnett` user (and `root`, but that's not entirely necessary) - [ ] Enroll system with new FOKS key (seems unavoidable - maybe Yubikey would be an alternative) - [ ] Add SSH key to .ssh from FOKS - [ ] Add GPG key with `gpg --import` from FOKS - [ ] Restore Secure Boot keys to `/var/lib/sbctl`

barnett changed title from ~~Fully automated luxury space ~communism~ device setup list~~ to Fully automated luxury space ~~communism~~ device setup list

2026-06-27 20:19:27 +00:00

barnett changed title from ~~Fully automated luxury space ~~communism~~ device setup list~~ to Fully automated luxury *space* ~~communism~~ device setup list

2026-06-27 20:19:35 +00:00

barnett changed title from ~~Fully automated luxury *space* ~~communism~~ device setup list~~ to Fully automated luxury space ~~communism~~ device setup list

2026-06-27 20:19:43 +00:00

barnett added the

enhancement

label

2026-06-27 20:19:54 +00:00

barnett referenced this issue

2026-06-27 20:20:41 +00:00

Set initial password for user when provisioning new machine #35