Stratorys Onboarding

Appearance

Lock down your accounts ​

Goal: Your accounts are secured with SSH keys, 2FA, and strong passwords. Your Git commits are signed.

Time: ~20 minutes.

Step 1: Generate your SSH key ​

The setup script may have done this already. If not:

bash
ssh-keygen -t ed25519 -C "your-name@stratorys.com"

Use a strong passphrase. Never share the private key.

WARNING

Only use ed25519 keys. Do not use RSA.

Step 2: Add your SSH key to GitHub ​

Copy your public key:

bash
cat ~/.ssh/id_ed25519.pub

Then go to GitHub SSH settings and add it as both:

  • Authentication key - for git push / git pull
  • Signing key - for commit signing

Step 3: Configure Git to sign commits ​

bash
git config --global gpg.format ssh
bash
git config --global user.signingkey ~/.ssh/id_ed25519.pub
bash
git config --global commit.gpgsign true

Step 4: Enable 2FA everywhere ​

Enable two-factor authentication on all of these:

Prefer app-based 2FA (1Password, authenticator app) over SMS.

Step 5: Enable full-disk encryption ​

Full-disk encryption must be on.

macOS - FileVault
bash
fdesetup status

If it says "FileVault is Off", enable it in System Settings > Privacy & Security > FileVault.

Linux - LUKS

Check if your root partition is encrypted:

bash
lsblk -f | grep crypt

If there is no output, your disk is not encrypted. Full-disk encryption must be set up during OS installation. Contact your manager if your disk is not encrypted.

Step 6: Lock screen habit ​

Set your machine to lock automatically:

macOS

System Settings > Lock Screen > Require password after screen saver begins > Immediately

Lock manually with Cmd + Ctrl + Q whenever you step away.

Linux

Configure your desktop environment to lock after 1 minute of inactivity.

Lock manually with Super + L whenever you step away.

Done when ​

  • ssh -T git@github.com prints "Hi [your-username]!"
  • git log --show-signature shows "Good signature" on a test commit
  • 2FA is on for GitHub, Google, and Slack
  • Full-disk encryption is on (FileVault on macOS, LUKS on Linux)
  • Screen locks automatically

Next: Open your first PR