fix: clean up ceremony.yml

This commit is contained in:
Anton Livaja 2024-08-06 12:01:02 -04:00
parent c88b4f94ff
commit fca9b3eba4
Signed by: anton
GPG Key ID: 44A86CFF1FDF0E85
1 changed files with 52 additions and 39 deletions

View File

@ -2,53 +2,66 @@ usage: Location Key
officiant: Anton Livaja officiant: Anton Livaja
location: Private Home (Address Redacted) location: Private Home (Address Redacted)
witnesses: N/A witnesses: N/A
hardware: Dell XPS 13 9630 hardware:
- Dell XPS 13 9630
firmware: BIOS 2.13.0 firmware: BIOS 2.13.0
laptop_modifications: laptop_modifications:
- Removed WLAN Card - Removed WLAN Card
- Removed speakers - Removed speakers
- Removed microphone - Removed microphone
- Removed all drives - Removed all drives
boot_media: Kingston Type 2 SD Card 1GB boot_media: Kingston Type 2 SD Card 1GB
backup_media: TeamGroup High Endurance Micro SDXC 128GB backup_media: TeamGroup High Endurance Micro SDXC 128GB
smart_cards: Yubikey 5 NFC smart_cards: Yubikey 5 NFC
software: software:
- name: Airgap OS - name: Airgap OS
repo: https://git.distrust.co/public/airgap repo: https://git.distrust.co/public/airgap
ref: main ref: 485fc58bfb1b4dc75a81138d93948385cc5bf600
hash: 485fc58bfb1b4dc75a81138d93948385cc5bf600
playbooks: playbooks:
- name: location-key-provisioning.md - name: location-key-provisioning.md
ref: https://git.distrust.co/public/docs/src/commit/0df2c9ce08ba2381e2cc448b080721373de13539/quorum-key-management/src/location-key-provisioning.md repo: https://git.distrust.co/public/docs
ref: 5438f99c9c8a174334cd45623a9b09143ead79c3
inputs:
- name: operator.pub.asc
identifier: F4BF5C81EC78A5DD341C91EEDC4B7D1F52E0BA4D
outputs: outputs:
- location.pub.asc - name: location.pub.asc
public_key_fingerprints: identifier: BBDEC472E16A7D11830B07F7582CC40F8A9BB54E
- type: location
fingerprint: BBDEC472E16A7D11830B07F7582CC40F8A9BB54E
- type: operator
fingerprint: F4BF5C81EC78A5DD341C91EEDC4B7D1F52E0BA4D
log: log:
- 2024-08-05:1723: Selected a room in residence which has no electronics in it - 2024-08-05:1723: >-
and closed window and window blinds. Selected a room in residence which has no electronics in it and closed window
- 2024-08-05:1727: Booted the laptop with AirgapOS of an SD card using the and window blinds.
built in card reader. - 2024-08-05:1727: >-
- 2024-08-05:1730: Plugged in SanDisk Ultra 32GB with operator PGP pub key and Booted the laptop with AirgapOS of an SD card using the built in card reader.
imported it into the local GPG keychain using a USB card reader. - 2024-08-05:1730: >-
- 2024-08-05:1752: Followed the ceremony guide to generate artifacts. Plugged in SanDisk Ultra 32GB with operator PGP pub key and imported it into
- 2024-08-05:1813: Plugged in one of the backup SD cards using the USB reader the local GPG keychain using a USB card reader. Then the SD card was
and copied over public artifacts, repeated with second SD card. disconnected from the computer.
- 2024-08-05:1832: Plugged in a new smart card and seeded it with the Location - 2024-08-05:1752: >-
Key PGP private key and repeated with the second smart card. Followed the ceremony guide to generate artifacts.
- 2024-08-05:1848: Placed the Location Key PGP pub cert onto the SanDisk Ultra - 2024-08-05:1813: >-
32GB which was used to bring the Operator Key cert to the airgapped machine, Plugged in one of the backup SD cards using the USB reader and copied over
so that it can be brought to the ceremony public artifacts, repeated with second SD card.
- 2024-08-05:1902: Deleted all data from laptop and shut it down. - 2024-08-05:1832: >-
- 2024-08-05:1949: Created two packages, each consisting of a YubiKey that was Plugged in a new smart card and seeded it with the Location Key PGP private
seeded, and backup SD card, inside of a static proof bag, then both inside of key and repeated with the second smart card.
a faraday bag. - 2024-08-05:1840: >-
- 2024-08-TODO:TODO: Put the laptop and backup SD cards and smart cards into Deleted all plaintext data from the laptop.
a plastic roll, filled it with confetti and vacuum sealed it. - 2024-08-05:1848: >-
Placed the Location Key PGP pub cert onto the SanDisk Ultra 32GB which was
used to bring the Operator Key cert to the air-gapped machine, so that it can
be brought to the ceremony.
- 2024-08-05:1855: >-
Deleted the remaining data and shut down the computer.
- 2024-08-05:1949: >-
Created two packages, each consisting of a YubiKey that was seeded, and backup
SD card, inside of a static proof bag, then both inside of a faraday bag.
- 2024-08-06:1622: >-
Put the laptop and backup SD cards and smart cards into a plastic roll, filled
it with confetti and vacuum sealed it.
general_notes: general_notes:
- Nobody entered the part of the house where the ceremony was conducted for - Nobody entered the part of the house where the ceremony was conducted for
the duration of the ceremony, up to the point where all data was securely the duration of the ceremony, up to the point where all data was securely
stored and destroyed where applicable stored and destroyed where applicable.
- While away from the private residence to procure seal bag, the laptop was
stored inside of a locked room.