infrastructure-notes/AFS Macbook Notes.md

Macbook Notes

Just some notes from when fred got a new macbook.

Prelims

Make sure you have a rescue account on your old macbook. JAMF messed with my passwords.

General steps

Install chrome Install bitwarden Install iterm2 (will trigger install of xcode-development-tools) Install alfred Login to chrome Install updates Copy ssh ids, or generate new ones

First Hurdle, installing brew

(sorry, these are from memory so may be approximate)

1. Attempt to follow normal instructions to install brew via curl (not sure if this is necessary)
2. Reboot, and press command-R during boot to enter recovery mode.
3. Start 'disk utility' and mount the disk.
4. Run chroot /Volumes/Mac\ HD /bin/bash (name is approximate, I forget the volume name)
5. Run chown -R user_n_name /usr/local
6. Reboot
7. Follow normal instrutions to install brew via curl

Misc Packages

brew install vim macvim
# will fail
brew unlink macvim
brew install vim
brew install thefuck
brew install cowsay fortune eolcat
brew install slack
git clone git@github.xdr.accenturefederalcyber.com:mdr-engineering/infrastructure-notes.git
git clone git@github.xdr.accenturefederalcyber.com:mdr-engineering/xdr-terraform-live.git
git clone git@github.xdr.accenturefederalcyber.com:mdr-engineering/xdr-terraform-modules.git
git clone git@github.xdr.accenturefederalcyber.com:mdr-engineering/msoc-infrastructure.git
source .bashrc # pick up changes to path
brew install warrensbox/tap/tfswitch
tfswitch
# Select 0.13.5
tfswitch
# Select 0.11.14
brew install warrensbox/tap/tgswitch
tgswitch
# Install latest (0.28.24 at time of this writing)
brew install awscli

Install saml2aws

https://github.xdr.accenturefederalcyber.com/duane-waddle/saml2aws/releases

• Uninstall the old version via brew uninstall saml2aws
• Download the amd64 darwin (MAC) version.

• Extract the tarball from the link above, and place the binary somewhere in your path. Suggested location is: /Users/{username}/saml2aws/. Add the following to your .zshrc

  # AWS Saml
  export PATH="$PATH:/Users/{username}/saml2aws/"
  alias govcloud='saml2aws --skip-prompt -a govcloud login'
  alias commercial='saml2aws --skip-prompt -a commercial login'
  alias saml='saml2aws --skip-prompt -a commercial login && saml2aws --skip-prompt -a govcloud login'
  

• Run xattr -d com.apple.quarantine saml2aws on the binary or you'll get a warning that you can't run it.

If PR https://github.com/Versent/saml2aws/pull/793 gets merged, we can revert to using brew.

Configure saml2aws

vim ~/infrastructure-notes/AWS\ Notes.md
# Search for 'saml2aws'
# Create the ~/.saml2aws file as specified
saml2aws login --idp-account=govcloud
# Login via username/password, Approve via okta
saml2aws login --idp-account=commercial
# Login via username/password, Approve via okta
ln -s ~/infrastructure-notes/files/config ~/.aws/config

# Test
aws --profile mdr-test-c2-gov s3 ls

Validate terraform/terragrunt

cd ~/xdr-terraform-live/test/aws-us-gov/mdr-test-c2/006-account-standards
tfswitch
terragrunt init
# these two should make no changes
terragrunt apply
terragrunt-local apply

Teleport

use brew

AWS VPN

Download and install AWS VPN Client, add and test both vpns.

Alfred

If you want alfred, install it from the website and not the app store.

Run OneDrive

Get your AFS stuff back

Update your git info

git config --global user.name "Fred Damstra [afs macbook]"
git config --global user.email "frederick.t.damstra@accenturefederal.com"

Add the ssl certificate

Run 'Keychain Access' Import files/mdr\ root\ ca.crt Set certificate as trusted

Browser plugin

aws-extend-switch-roles ( See AWS Notes.md )

local admin for your user with beyondtrust installed

become root

dscl . -append /Groups/admin GroupMembership duane.e.waddle

undo

dscl . -delete /Groups/admin GroupMembership duane.e.waddle

Install zsh theme for improved cmd prompt in iTerm2

Install powerlevel10k to configure .zsh. This will add git branch to your cmd prompt.

https://github.com/romkatv/powerlevel10k

Use Caffeinate to keep screen from locking ( shhhh )

tmux
caffeinate -d
Ctrl + b
d

One liner: tmux new-session -d -s caffeinate 'caffeinate -d'

~/.zshrc

alias cafe='tmux new-session -d -s caffeinate "caffeinate -d"'
alias nap='tmux kill-session -t caffeinate'

Sleep settings

I like to put my mac to sleep on weekday nights. Recently i noticed that my mac would not go to sleep after work. I looked around in the settings and found that the “Prevent computer from sleeping automatically when the display is off.” setting was enabled. I disabled it and my mac went to sleep. I wanted to share in case someone else needed that info.

settings > battery > power adapter

Jamf is probably managing this setting and will revert it. :-(