Alessandro Vozza ams0

This has been merged into the official docs!

https://docs.microsoft.com/en-us/azure////////aks/acs-aks-migration

Raspberry Pi on Internet via reverse SSH tunnel

HackerNews discussed this with many alternative solutions: https://news.ycombinator.com/item?id=24893615

I already have my own domain name: mydomain.com. I wanted to be able to run some webapps on my Raspberry Pi 4B running perpetually at home in headless mode (just needs 5W power and wireless internet). I wanted to be able to access these apps from public Internet. Dynamic DNS wasn't an option because my ISP blocks all incoming traffic. ngrok would work but the free plan is too restrictive.

I bought a cheap 2GB RAM, 20GB disk VM + a 25GB volume on Hetzner for about 4 EUR/month. Hetzner gave me a static IP for it. I haven't purchased a floating IP yet.

Revive or restore a Mac with Apple silicon with Apple Configurator 2

https://support.apple.com/lt-lt/guide/apple-configurator-2/apdd5f3c75ad/mac

The instruction to put the laptop into DFU mode doesn't work if you're off by even one sec. I have to follow this video to get it working https://www.youtube.com/watch?v=puL82I2B6Xk

Azure Active Directory (AAD) Auth

This gist assumes a working Azure AD (not Azure AD-DS is already up and fully configured) This gist assumes working DNS / name resolution on your internal network.

this gist is part of this series

Create App Registrations

All of these steps will be done in the Azure Portal AAD UI

Select App Registration from the nav bar

	Pre:

	- clear agenda, presentation, beamer, display adapters
	- road signs
	- print tags
	- reminder email on wednesday

	During:

	- bring pro cameras

	#!/bin/bash
	# Interactively create an Azure Service Principal for any of your subscriptions
	# Author: Bruno Medina (@brusmx)
	# Requirements:
	# - Azure Cli 2.0
	# - jq-1.5
	#
	# Example of usage:
	# ./obtainSP.sh
	ROLE="Contributor"

	{
	"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
	"contentVersion": "1.0.0.0",
	"parameters": {
	"resourceName": {
	"type": "String",
	"metadata": {
	"description": "The name of the Managed Cluster resource."
	}
	},

	MIT License

	Copyright (c) 2018 Noel Bundick

	Permission is hereby granted, free of charge, to any person obtaining a copy
	of this software and associated documentation files (the "Software"), to deal
	in the Software without restriction, including without limitation the rights
	to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
	copies of the Software, and to permit persons to whom the Software is
	furnished to do so, subject to the following conditions:

	resource "tls_private_key" "trustanchor_key" {
	algorithm = "ECDSA"
	ecdsa_curve = "P256"
	}

	resource "tls_self_signed_cert" "trustanchor_cert" {
	key_algorithm = tls_private_key.trustanchor_key.algorithm
	private_key_pem = tls_private_key.trustanchor_key.private_key_pem
	validity_period_hours = 87600
	is_ca_certificate = true

	apiVersion: v1
	kind: ConfigMap
	metadata:
	name: trusted-ca
	namespace: kube-system
	data:
	ca.crt: \|+
	-----BEGIN CERTIFICATE-----
	MIIFkTCCA3mgAwIBAgIUCXaMcLg8teiGZ7o0dIQRIOdHEA8wDQYJKoZIhvcNAQEL
	BQAweDELMAkGA1UEBhMCRlIxDDAKBgNVBAgMA04vQTEMMAoGA1UEBwwDTi9BMSAw