Steffey

Working with ansible-vault

I've been using a lot of Ansible lately and while almost everything has been great, finding a clean way to implement ansible-vault wasn't immediately apparent.

What I decided on was the following: put your secret information into a vars file, reference that vars file from your task, and encrypt the whole vars file using ansible-vault encrypt.

Let's use an example: You're writing an Ansible role and want to encrypt the spoiler for the movie Aliens.

Moved to git repository: https://github.com/denji/golang-tls

Generate private key (.key)

# Key considerations for algorithm "RSA" ≥ 2048-bit
openssl genrsa -out server.key 2048

# Key considerations for algorithm "ECDSA" ≥ secp384r1
# List ECDSA the supported curves (openssl ecparam -list_curves)

security and hardening options for systemd service units

A common and reliable pattern in service unit files is thus:

NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict

	#!/bin/bash

	aptitude -y install expect

	// Not required in actual script
	MYSQL_ROOT_PASSWORD=abcd1234

	SECURE_MYSQL=$(expect -c "

	set timeout 10

	# If you're looking into the C10M problem (10 million concurrent connections)
	# you might want to play with DPDK (Originally proprietry Intel, now open source)
	#
	# C10M: http://c10m.robertgraham.com/
	# DPDK: http://dpdk.org/
	#
	# This is a quick summary how to install dpdk on ubuntu
	# running inside virtualbox on a mac

	# On my Mac:

	We are going to use buildroot to download, configure and compile the kernel.

	First, download and uncompress buildroot: https://buildroot.org/download.html

	Go to the directory and:

	make qemu_x86_defconfig

	make menuconfig

	#include <time.h> // Robert Nystrom
	#include <stdio.h> // @munificentbob
	#include <stdlib.h> // for Ginny
	#define r return // 2008-2019
	#define l(a, b, c, d) for (i y=a;y\
	<b; y++) for (int x = c; x < d; x++)
	typedef int i;const i H=40;const i W
	=80;i m[40][80];i g(i x){r rand()%x;
	}void cave(i s){i w=g(10)+5;i h=g(6)
	+3;i t=g(W-w-2)+1;i u=g(H-h-2)+1;l(u