akerouanton

// simplevm.c: demonstrates Hypervisor.Framework usage in Apple Silicon
// Based on the work by @zhuowei
// @imbushuo - Nov 2020

// To build:
// Prepare the entitlement with BOTH com.apple.security.hypervisor and com.apple.vm.networking WHEN SIP IS OFF
// Prepare the entitlement com.apple.security.hypervisor and NO com.apple.vm.networking WHEN SIP IS ON
// ^ Per @never_released, tested on 11.0.1, idk why
// clang -o simplevm -O2 -framework Hypervisor -mmacosx-version-min=11.0 simplevm.c
// codesign --entitlements simplevm.entitlements --force -s - simplevm             

akerouanton

Prologue ;;𒉌 𒉡 𒀭 𒍢 𒊒 𒌝 ;𒈗 𒀭 𒀀 𒉣 𒈾 𒆠 ;𒀭 𒂗 𒆤 ;𒁁 𒂖 𒊭 𒈨 𒂊 ;𒅇 𒅕 𒍢 𒁴 ;𒊭 𒄿 𒅎 ;𒅆 𒈠 𒀜 𒌦 ;𒀀 𒈾 𒀭 𒀫𒌓 ;𒌉 𒊑 𒌍 𒋾 𒅎 ;𒊭 𒀭 𒂗 𒆠 ;𒀭 𒂗 𒆤 𒌓 ;𒆧 𒉌 𒋝 ;𒄿 𒅆 𒈬 𒋳 ;𒅔 𒄿 𒄄 𒄄 ;𒌑 𒊬 𒉈 𒅇 𒋗 ;𒅗𒀭 𒆠 ;𒋳 𒋗 𒍢 𒊏 𒄠 𒅁 𒁉 𒅇 ;𒅔 𒆠 𒅁 𒊏 𒁴 ;𒌑 𒊭 𒋼 𒊒 𒋗 ;𒄿 𒈾 𒇷 𒅁 𒁉 𒋗 ;𒊬 𒊒 𒌓 𒁕 𒌷 𒌓 ;𒊭 𒆠 𒈠 𒊭 𒈨 𒂊 ;𒅇 𒅕 𒍢 𒁴 ;𒅖 𒁕 𒊭 ;𒋗 𒌫 𒋗 𒁕 ;𒌑 𒆠 𒅔 𒉡 𒋳 ;𒄿 𒉡 𒈪 𒋗 ;𒁹 𒄩 𒄠 𒈬 𒊏 𒁉 ;𒊒 𒁀 𒄠 ;𒈾 𒀪 𒁮 ;𒉺 𒇷 𒄴 𒉌 𒉌 𒅀 𒋾 ;𒈪 𒊭 𒊏 𒄠 ;𒄿 𒈾 𒈠 𒁴 ;𒀀 𒈾 𒋗 𒁉 𒄿 𒅎 ;𒊏 𒂵 𒄠 𒅇 𒍢 𒉆 ;𒀀 𒈾 𒄷 𒌌 𒇻 𒆠 𒅎 ;𒆗 𒉡 𒌝 ;𒂗 𒊭 𒄠 ;𒀀 𒈾 𒆷 𒄩 𒁀 𒇷 𒅎 ;𒆠 𒈠 𒀭 𒌓 ;𒀀 𒈾 𒊕 𒈪 ;𒉿 𒍢 𒂊 𒅎 𒈠 ;𒈠 𒁴 ;𒉡 𒉿 𒊑 𒅎 ;𒀭 ;𒅇 𒀭 𒂗 𒆤 ;𒀀 𒈾 𒅆 𒅕 𒉌 𒅆 ;𒌅 𒌒 𒁉 𒅎 ;𒋗 𒈪 𒅁 𒁍 𒌑 ;𒁹 𒄩 𒄠 𒈬 𒊏 𒁉 ;𒊑 𒅀 𒌝 ;𒉌 𒁉 𒀉 ;𒀭 𒂗 𒆤 𒀀 𒈾 𒆪 ;𒈬 𒄰 𒈨 𒅕 ;𒉡 𒌔 𒅆 𒅎 ;𒅇 𒌅 𒌔 𒁲 𒅎 ;𒈬 𒊭 𒀝 𒇷 𒅋 ;𒈪 𒅎 𒈠 𒋳 𒋗 ;𒀀 𒈾 𒂗𒆤 𒆠 𒄙 𒀭 𒆠 ;𒍝 𒉌 𒉡 𒌝 ;𒈾 𒀪 𒁺 𒌝 ;𒊭 𒂍 𒆳 ;𒈗 𒇷 𒅀 𒌝 ;𒈬 𒋼 𒅕 𒌷 𒉣 𒆠 ;𒀀 𒈾 𒀸 𒊑 𒋗 ;𒈬 𒌒 𒁉 𒅁 ;𒋗 𒈛 𒂍 𒍪𒀊 ;𒋾 𒄿 𒅁 ;𒆠 𒅁 𒊏 𒀜 ;𒅕 𒁉 𒁴 ;𒈬 𒊬 𒉈 𒍣 𒅅 𒊒 ;𒅗𒀭 𒆠 ;𒈬 𒋾 𒅁 ;𒇷 𒅁 𒁉 𒀭 𒀫𒌓 ;𒁁 𒉌 𒋗 ;𒊭 𒌓 𒈪 𒋗 ;𒄑 𒍝 𒍪 ;𒀀 𒈾 𒂍 𒊕 𒅍 ;𒆰 𒊬 𒊒 𒁴 ;𒊭 𒀭 𒂗𒍪 ;𒅁 𒉌 𒅇 𒋗 ;𒈬 𒈾 𒄴 𒄭 𒅖 ;𒌷 𒋀𒀊 𒆠 ;𒉿 𒀸 𒊒 𒌝 ;𒈬 𒍑 𒋼 𒈪 𒄣 ;𒁀 𒉋 𒃶 𒅅 ;𒀀 𒈾 𒂍 𒆧 𒉡 𒅅 ;𒈗 𒋫 𒅆 𒅎 𒁴 ;𒊺 𒈬 𒀭 𒌓 𒁕 𒈝 ;𒈬 𒆠 𒅔 ;𒁼 𒌓𒄒𒉣 𒆠 ;𒈬 𒊭 𒀠 𒁉 𒅖 ;𒉿 𒅈 𒆠 𒅎 ;𒄀 𒄖 𒉈 𒂊 𒀭 𒀀 𒀀 ;𒈬 𒍢 𒅕 ;𒂍 𒌓 ;𒊭 𒆠 𒋗 𒁀 𒀜 𒊭 𒈠 𒄿 ;𒌨 𒊕 𒂵 𒈪 𒅋 ;𒌓𒀕 𒆠 ;𒈬 𒌓 𒁲 𒅖 𒂍 𒌓 ;𒀀 𒈾 𒀭 𒌓 ;𒊑 𒍢 𒋗 ;𒁁 𒈝 𒈬 

akerouanton

To use this script to start a debug session on a CLI script: php-debug vendor/bin/behat features/attribution.feature:555.

akerouanton

# syntax=akerouanton/webdf-builder:test9
type: php
fpm: true
version: 7.0.29

extensions:
  intl: "*"
  pdo_mysql: "*"
  soap: "*"

akerouanton

# syntax=akerouanton/webdf

services:
  - name: api
    type: php
    version: 7.0.29
    system_packages:
      git: "1:2.1.4-2.1+deb8u7"
      libicu-dev: "52.1-8+deb8u7"
      libpcre3-dev: "2:8.35-3.3+deb8u4"

akerouanton

docker run --rm -t -v $(pwd):/app -w /app sdesbure/yamllint find ./ -type f -name '*.yaml' -or -name '*.yml' -and -not -path '*/node_modules/*' -and -not -path '*/vendor/*' -exec yamllint {} \;

akerouanton

package main

import (
	"bufio"
	"bytes"
	"context"
	"fmt"
	"os"
	"text/template"
	"time"

akerouanton

• Does not always update services in dev env (new images)
  • ↳ Image digest should be resolved based on local images
• Does not always update services in prod env (new/updated labels)
  • ↳ Update should be automatically forced when only label update detected
• No one-off commands
  • ↳ Use JASS?
• No log duplication (would improve DX)
  • ↳ Need custom log driver

akerouanton

• Accropolis
• Apolitiquement Correct
• AstronoGeek
• Dany Caligula
• Defakator
• e-penser
• e-penser par ailleurs
• EPFL
• Espace des Sciences
• Heu?reka

akerouanton

!includeurl https://raw.githubusercontent.com/DaniilSolovyov/plantuml-bells-and-whistles/v1.0/release/theme/darcula.puml
!includeurl https://raw.githubusercontent.com/DaniilSolovyov/plantuml-bells-and-whistles/v1.0/release/palette/material.puml

skinparam DefaultFontName "Ubuntu Mono"

skinparam title {
    FontColor MD_LBLUE_A400
}

skinparam actor {