actionjack

1. Engineering

actionjack

Raspberry Pi VPN Router

This is a quick-and-dirty guide to setting up a Raspberry Pi as a "router on a stick" to PrivateInternetAccess VPN.

Requirements

Install Raspbian Jessie (2016-05-27-raspbian-jessie.img) to your Pi's sdcard.

Use the Raspberry Pi Configuration tool or sudo raspi-config to:

actionjack

Raspberry Pi VPN Router

This is a quick-and-dirty guide to setting up a Raspberry Pi as a "router on a stick" to PrivateInternetAccess VPN.

Requirements

Install Raspbian Jessie (2016-05-27-raspbian-jessie.img) to your Pi's sdcard.

Use the Raspberry Pi Configuration tool or sudo raspi-config to:

actionjack

{
    "Version": "2012-10-17",
    "Id": "Policy9999999990001",
    "Statement": [
        {
            "Sid": "Deny access except NotPrincipal list",
            "Effect": "Deny",
            "NotPrincipal": {
                "AWS": [
                    "arn:aws:iam::123000004567:role/xxxx-eb-ec2-role",

actionjack

How S3 Permission Work
- The AWS account that creates a bucket owns it.
- The owner of a bucket can never be changed.
  - All billing for object usage goes to bucket owner account by default. That's one reason ownership cannot be changed.
- Note that objects in the bucket can have permissions that would prevent even the bucket owner from editing/deleting it.
- There are three styles of permissions:
  1. Bucket Policies  
    - Allows access control to be specified for AWS Accounts or IAM Users
    - Specified in Access Policy Language
      - Can DENY or ALLOW

actionjack

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:ListAllMyBuckets",
                "s3:ListBucket",
                "s3:CreateBucket"

actionjack

#-----------------------------------------------#
#	oathtool totp google 2 factor
#-----------------------------------------------#


# if you have already set up 2 factor authentication with your phone
# you need to remove it from your phone and google authenticator app
# this wont invalidate your backup codes or application codes

# login to your google account go to 2 factor authentication, 

actionjack

# Start the old vagrant
$ vagrant init centos-6.3
$ vagrant up

# You should see a message like:
#  [default] The guest additions on this VM do not match the install version of
#  VirtualBox! This may cause things such as forwarded ports, shared
#  folders, and more to not work properly. If any of those things fail on
#  this machine, please update the guest additions and repackage the
#  box.

actionjack

#!/usr/bin/env python
#
#  Corey Goldberg, Dec 2012
#

import os
import sys
import xml.etree.ElementTree as ET

actionjack

# Simple SonarQube database and user creation for Postgresql
#

sudo -u postgres psql postgres
CREATE DATABASE sonar;
CREATE USER sonar WITH PASSWORD 'verysecret';
GRANT ALL PRIVILEGES ON DATABASE sonar TO sonar;