Chad Thomson ChadThomsonPSC

Forward GnuPG agent from macOS to Linux

On the remote machine

Run gpg once as your to create the directory structure

gpg --list-keys

For headless systemd based hosts

Linux Virtual Machines with Private Network on an Apple M1 Device

Background

The aim was to be able to:

Run multiple Linux VMs on an Apple M1/ARM device
Use Apple's HVF for native performance speeds
Configure VMs to allow network access to each other
Configure VMs to allow access to the internet
Not rely on custom modifications of software

Creating self signed certificates with keytool

NOTE: Do not use self signed certificates in PRODUCTION, for that use a certificate signed by some CA (Certification Authority), and then avoid man-in-the-middle attack.

Creating self signed certificates with keytool

Content

Self signed certificate
Multiple domain names
Certificates for 2wayTLS
Certificate chain

NOTE: Do not use self signed certificates in PRODUCTION, for that use a certificate signed by some CA (Certification Authority), and then avoid man-in-the-middle attack.

Emulating Raspberry Pi 4 with Qemu

Just a quick update before we dive in: what we're actually doing here is running Raspberry Pi OS (64-bit) on a QEMU virtual ARM setup. This isn't full-blown hardware emulation of the Raspberry Pi 4, but more about creating a virtual environment for the OS. It doesn't mimic all the specific hardware features of the Pi 4, but it's pretty useful and great for general testing. I turned to this solution mainly to extract a modified sysroot from the Raspberry Pi OS, something not readily available in other resources. For those looking into detailed emulation of the actual Raspberry Pi 4's hardware in QEMU, check out this link for the latest updates: https://gitlab.com/qemu-project/qemu/-/issues/1208.

Hope it helps! :D

Shortcomings: No GUI yet, only console.

Steps

Akeyless Custom Dynamic Secret Producer Sequence

Sequence diagrams for custom dynamic secret producers

Local Gateway

Sequence flow when client is communicating to the local gateway cluster who is responsible for sepaking with the custom dynamic secret producer webhook.

sequenceDiagram

GitHub Actions JWT Akeyless Workflow

JWKS URL

https://token.actions.githubusercontent.com/.well-known/jwks

Unique Identifier

Simple Curl Tutorial for Akeyless Vault Platform

Objective:

Let's use curl to completely create a secret within the Akeyless Vault Platform including :

Authenticate to the Akeyless Vault Platform using the admin API Key Auth Method
Create a new API Key Auth Method
Create a new Access Role to allow access to a secret object that WILL BE located at \env\secret
Associate the new API Key Auth Method to the new Access Role

	#!/bin/sh

	###
	# SOME COMMANDS WILL NOT WORK ON macOS (Sierra or newer)
	# For Sierra or newer, see https://github.com/mathiasbynens/dotfiles/blob/master/.macos
	###

	# Alot of these configs have been taken from the various places
	# on the web, most from here
	# https://github.com/mathiasbynens/dotfiles/blob/5b3c8418ed42d93af2e647dc9d122f25cc034871/.osx

	#!/bin/sh

	awk 'BEGIN {
	split("Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec ", months, " ")
	for (i = 1; i <= 12; i++)
	m[months[i]] = i
	}{
	split($4,array,/\[\|:\|\//)
	year = array[4]
	month = sprintf("%02d", m[array[3]])