andrewwippler

andrewwippler

FROM php:7.2-fpm-alpine

# docker-entrypoint.sh dependencies
RUN apk add --no-cache \
# in theory, docker-entrypoint.sh is POSIX-compliant, but priority is a working, consistent image
		bash \
		sed \
		rsync \ 
		nginx

andrewwippler

apt-get update
apt-get upgrade -y
apt-get update && apt-get install -y apt-transport-https curl
curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | apt-key add -
cat <<EOF >/etc/apt/sources.list.d/kubernetes.list
deb http://apt.kubernetes.io/ kubernetes-xenial main
EOF
apt-get update
apt-get install -y kubelet kubeadm kubectl docker.io
 

andrewwippler

#!/bin/bash

kubectl config set-context $(kubectl config current-context) --namespace=$1
# Run: /path/to/switch-k8s-namespace.sh something
# This prevents appending `-n something` to every kubectl command.

andrewwippler

# update and install ntp
yum update -y
yum install ntp -y
systemctl enable ntpd --now

# Install crictl, for Cri-o, but did not work with k8s 1.10 as of yet.
curl -L -O https://github.com/kubernetes-incubator/cri-tools/releases/download/v1.0.0-beta.0/crictl-v1.0.0-beta.0-linux-amd64.tar.gz
tar xvf crictl-v1.0.0-beta.0-linux-amd64.tar.gz
# mv crictl /usr/local/bin/crictl

andrewwippler

# Install OS instead of upgrade
install

# Keyboard layouts
keyboard 'us'

# Root password
rootpw --iscrypted $1$UzchDaR4$XXXXXXXXXX.XXXXXXX/

# System language

andrewwippler

function _kube_ns() {
KUBE=`kubectl config view --minify --output 'jsonpath={..namespace}'`
  if [ ! "${KUBE}" == "default" ]
  then
    echo "⎈ ${KUBE}"
  else
    echo ""
  fi
}

andrewwippler

Keybase proof

I hereby claim:

• I am andrewwippler on github.
• I am andrewwippler (https://keybase.io/andrewwippler) on keybase.
• I have a public key whose fingerprint is 6496 C632 CB28 4AD7 281C CA27 0CF1 04EB FB3E 1D75

To claim this, I am signing this object:

andrewwippler

#!/bin/bash
NETBIOS="$1"
FQDN="$2"
USER="$3"

#install files
sudo yum -y install authconfig krb5-workstation pam_krb5 samba-winbind oddjob-mkhomedir nscd

#create auth settings
authconfig --enablecachecreds --enablewinbind --enablewinbindauth --smbsecurity=ads --smbworkgroup=$NETBIOS --smbrealm=$FQDN --enablewinbindusedefaultdomain --winbindtemplatehomedir=/home/$NETBIOS/%U --winbindtemplateshell=/bin/bash --enablekrb5 --krb5realm=$FQDN --enablekrb5kdcdns --enablekrb5realmdns --enablelocauthorize --enablemkhomedir --enablepamaccess --updateall