Chad Thomson ChadThomsonPSC

Docker Secure Remote Access Akeyless SSH Proxy Bastion

Simple Curl Tutorial for Akeyless Vault Platform

Objective:

Let's use curl to completely create a secret within the Akeyless Vault Platform including :

Authenticate to the Akeyless Vault Platform using the admin API Key Auth Method
Create a new API Key Auth Method
Create a new Access Role to allow access to a secret object that WILL BE located at \env\secret
Associate the new API Key Auth Method to the new Access Role

GitHub Actions JWT Akeyless Workflow

JWKS URL

https://token.actions.githubusercontent.com/.well-known/jwks

Unique Identifier

Akeyless Custom Dynamic Secret Producer Sequence

Sequence diagrams for custom dynamic secret producers

Local Gateway

Sequence flow when client is communicating to the local gateway cluster who is responsible for sepaking with the custom dynamic secret producer webhook.

sequenceDiagram

Emulating Raspberry Pi 4 with Qemu

Just a quick update before we dive in: what we're actually doing here is running Raspberry Pi OS (64-bit) on a QEMU virtual ARM setup. This isn't full-blown hardware emulation of the Raspberry Pi 4, but more about creating a virtual environment for the OS. It doesn't mimic all the specific hardware features of the Pi 4, but it's pretty useful and great for general testing. I turned to this solution mainly to extract a modified sysroot from the Raspberry Pi OS, something not readily available in other resources. For those looking into detailed emulation of the actual Raspberry Pi 4's hardware in QEMU, check out this link for the latest updates: https://gitlab.com/qemu-project/qemu/-/issues/1208.

Hope it helps! :D

Shortcomings: No GUI yet, only console.

Steps

Creating self signed certificates with keytool

NOTE: Do not use self signed certificates in PRODUCTION, for that use a certificate signed by some CA (Certification Authority), and then avoid man-in-the-middle attack.

Creating self signed certificates with keytool

Content

Self signed certificate
Multiple domain names
Certificates for 2wayTLS
Certificate chain

NOTE: Do not use self signed certificates in PRODUCTION, for that use a certificate signed by some CA (Certification Authority), and then avoid man-in-the-middle attack.

Linux Virtual Machines with Private Network on an Apple M1 Device

Background

The aim was to be able to:

Run multiple Linux VMs on an Apple M1/ARM device
Use Apple's HVF for native performance speeds
Configure VMs to allow network access to each other
Configure VMs to allow access to the internet
Not rely on custom modifications of software


	/*------------------------------------------------------------------------
	File : testJsonContentLength.p
	Purpose :

	Syntax :

	Description :

	Author(s) : [email protected]

	#!/bin/sh

	awk 'BEGIN {
	split("Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec ", months, " ")
	for (i = 1; i <= 12; i++)
	m[months[i]] = i
	}{
	split($4,array,/\[\|:\|\//)
	year = array[4]
	month = sprintf("%02d", m[array[3]])