$ ./skopeo copy docker://docker.io/library/nginx:latest oci:nginx_local
Getting image source signatures
Copying blob 000eee12ec04 done
Copying blob eb22865337de done
Copying blob bee5d581ef8b done
Copying config 5eb6083c55 done
#!/usr/bin/env python | |
from __future__ import print_function | |
import sys | |
import socket | |
import requests | |
import datetime | |
from OpenSSL import SSL, crypto | |
import * as eks from '@aws-cdk/aws-eks'; | |
import * as iam from '@aws-cdk/aws-iam'; | |
import * as cdk8s from 'cdk8s'; | |
import { Construct, Stack, StackProps } from '@aws-cdk/core'; | |
import * as k8s from '../imports/k8s'; | |
export class TestClusterStack extends Stack { | |
constructor(scope: Construct, id: string, props?: StackProps) { | |
super(scope, id, props); |
#!/bin/bash | |
# Receives your Windows username as only parameter. | |
curl -LO https://storage.googleapis.com/kubernetes-release/release/v1.16.0/bin/linux/amd64/kubectl | |
chmod +x ./kubectl | |
sudo mv ./kubectl /usr/local/bin/kubectl | |
windowsUser=$1 |
The rest of these files are the code referenced in my NixCon 2019 talk which live in Shopify's non-public codebases. Everything in this gist is extracted with minimal or no change from our codebase, and thus some of it references libraries or other code not included here. cli-ui and cli-kit probably comprise a majority of these cases.
All code Copyright Shopify, 2019, released here under MIT License.
THIS GIST IS EXTREMELY OBSOLETE. DO NOT FOLLOW THESE INSTRUCTIONS. SERIOUSLY.
IF YOU IGNORE THE ABOVE WARNING, YOU AGREE IN ADVANCE THAT YOU DIDN'T GET THESE INSTRUCTIONS FROM ME, THAT I WARNED YOU, AND THAT I RESERVE THE RIGHT TO POINT AND LAUGH MOCKINGLY IF AND WHEN SOMETHING BREAKS HORRIBLY.
I'll do a write-up of current custom-kernel procedures over on Random Bytes ( https://randombytes.substack.com/ ) one day soon.
FROM jenkins/jenkins:2.150.3 | |
# Install plugins | |
RUN /usr/local/bin/install-plugins.sh \ | |
git:3.9.1 \ | |
git-client:2.7.3 \ | |
amazon-ecs:1.19 \ | |
job-dsl:1.69 \ | |
configuration-as-code:1.7 \ | |
configuration-as-code-support:1.7 \ |
Modern OpenSSH has native support for FIDO Authentication. Its much simpler and should also be more stable with less moving parts. OpenSSH also now has support for signing arbitary files witch can be used as replacement of gnupg. Git also supports signing commits/tags with ssh keys.
- Simpler stack / less moving parts
- Works directly with
ssh
,ssh-add
andssh-keygen
on most computers - Simpler
- Private key can never leave the FIDO device
#cloud-config | |
# Option 1 - Full installation using cURL | |
package_update: true | |
package_upgrade: true | |
groups: | |
- docker | |
system_info: |
import yaml | |
from yaml.representer import SafeRepresenter | |
class LiteralString(str): | |
pass | |
def change_style(style, representer): | |
def new_representer(dumper, data): | |
scalar = representer(dumper, data) |