amkisko

Wireguard and iptables restrictions for multiple users

If you don't know what Wireguard is, well, you should. It's fast, easy to setup and highly configurable. We will configure Wireguard for multiple users with various restrictions using iptables.

Assumptions

This should fit most setups (not mine though 😉)

amkisko

So, you want to be able to work from anywhere. You want to be on a mountain somewhere, two bars of 3G signal, and you forward that to your laptop with a WiFi hotspot. Open your laptop and your shell on remote is already open and as responsive as possible. Work/life balance? With power like this, who cares?

Problem Scenario

Often, in academic institutions at least, you have the following situation:

amkisko

Getting X11 GUI applications to work on OS X with Docker

Install depedent packages via Brew (one-time setup)

$ brew install socat
$ brew cask install xquartz

Setup XQuartz

amkisko

ActiveRecord::Base.connection.tables.map do |model|
  model.capitalize.singularize.camelize
end

# returns ["Activity", "Article", "User", "Video", "Vote"]

amkisko

Defensive (Hardening, Security Assessment, Inventory)

• ScoutSuite: https://github.com/nccgroup/ScoutSuite - Multi-Cloud Security auditing tool for AWS, Google Cloud and Azure environments (Python)
• Prowler: https://github.com/toniblyx/prowler - CIS benchmarks and additional checks for security best practices in AWS (Shell Script)
• CloudSploit: https://github.com/cloudsploit/scans - AWS security scanning checks (NodeJS)
• CloudMapper: https://github.com/duo-labs/cloudmapper - helps you analyze your AWS environments (Python)
• CloudTracker: https://github.com/duo-labs/cloudtracker - helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies (Python)
• AWS Security Benchmarks: [https://github.com/awslabs/aws-security-benchmark](ht

amkisko

class SimpleCovMerger
  def self.report_coverage(base_dir:, ci_project_path:, project_path:)
    new(base_dir: base_dir, ci_project_path: ci_project_path, project_path: project_path).merge_results
  end

  attr_reader :base_dir, :ci_project_path, :project_path

  def initialize(base_dir:, ci_project_path:, project_path:)
    @base_dir = base_dir
    @ci_project_path = ci_project_path