Setting up a new Mac

The setup for my computer.

Account setup

During the installation of macOS:

• don't sign into iCloud during the finalisation
• create alternate StevenAdm account

Once logged in, open System Preferences and:

• create the Steven account
• turn off fast user switching

Log out, then back in as Steven, signing into iCloud during the finalisation.

Set up GitHub SSH keys

1. Create an SSH key for the new device:

   ssh-keygen -trsa -b4096 -C "$USER@$HOST" -f ~/.ssh/id_rsa
   ssh-add ~/.ssh/id_rsa

2. Copy the SSH key to the clipboard:

   pbcopy < ~/.ssh/id_rsa.pub

3. Add the new SSH key on GitHub

Run setup.sh

Make sure you've exported values for BACKBLAZE_USER and BACKBLAZE_PASSWORD, and a MACHINE_TYPE of either dev or server, as appropriate, and then run:

/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/SteveMarshall/mac-setup/main/setup.sh)"

Post-setup manual steps

• Set Backblaze's Private Encryption Key

Create new GPG keys

1. From a device with my primary key:
2. Import primary key into keyring: gpg --import <path to pubkey> <path to privkey>
3. Add a new (signing/encryption) subkey:

```bash
gpg --edit-key <key-id>
gpg> addkey
gpg>> <select RSA, 4096, expiration, passphrase>
gpg> save
```

3. Export the new subkey(s):

```bash
gpg --export --armor <primary-key-id> > public-key.asc
gpg --export-secret-subkeys --armor <subkey-id> > private-subkey-<type>.asc
```

2. Transfer the public-key.asc and private-subkey-*.asc to the new machine securely
3. Import the keys on the target device: gpg --import public-key.asc secret-subkey-*.asc
4. Add the new GPG key (contents of public-key.asc) on GitHub