Skip to content

Instantly share code, notes, and snippets.

@atomlab
atomlab / talos_nft_list_ruleset_issue_fix.md
Last active February 20, 2025 19:59
Talos. nft list ruleset. netlink: Error: cache initialization failed: Operation not permitted

Encountered an error in Talos when running nft list ruleset

% kubectl debug -n kube-system -it --image alpine node/$NODE
/ # apk add nftables
/ # nft list ruleset
netlink: Error: cache initialization failed: Operation not permitted

The issue was related to security capabilities and was resolved by using --profile=sysadmin:

@atomlab
atomlab / Cloudflare–Restrict_Tunnel_Access_by_IP_Address.md
Last active January 3, 2025 17:25
Cloudflare – Restrict Tunnel Access by IP Address
  1. Find the "Access Groups" section
  2. Click the "Create Group" button
  3. Enter group name: allow-ips
  4. Add IP addresses or ranges that should not be restricted.

Screenshot_20250103_195507

  1. Then go to the "Applications" section and create a new application by clicking the "Add an Application" button.

Screenshot_20250103_195718_edit

@atomlab
atomlab / README.md
Last active August 31, 2024 11:40
PDF2DOCX_RUS_LANGUAGE

PIP deps

pip install pytesseract pdf2image python-docx pypdf

Install tesseract-lang

brew install tesseract-lang
@atomlab
atomlab / vmware_fusion_player_13_download.md
Last active August 27, 2024 19:29
VMware Fusion Player 13 (Direct download link)

Direct download link (without registration)

2023-04-25 | 13.0.2 | 672.09 MB | dmg

wget https://download3.vmware.com/software/FUS-1302/VMware-Fusion-13.0.2-21581413_universal.dmg

sha256sum

c86b40823b97334f20b4e6b475b488ec23faf06c986e291965b9e56f7b44c042 VMware-Fusion-13.0.2-21581413_universal.dmg

@atomlab
atomlab / script-with-options.sh
Created August 19, 2023 05:27 — forked from dgoguerra/script-with-options.sh
Manual alternative to getopt in bash scripts, supporting short and long options
#!/usr/bin/env bash
# File name
readonly PROGNAME=$(basename $0)
# File name, without the extension
readonly PROGBASENAME=${PROGNAME%.*}
# File directory
readonly PROGDIR=$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)
# Arguments
readonly ARGS="$@"
@atomlab
atomlab / install_zsh.sh
Created June 16, 2023 10:44 — forked from ZhaofengWu/install_zsh.sh
Install zsh without root
#!/bin/bash
set -e
# zsh will not install without ncurses. If the machine doesn't have this library, it will need to be installed first.
export CXXFLAGS=" -fPIC" CFLAGS=" -fPIC" CPPFLAGS="-I${HOME}/include" LDFLAGS="-L${HOME}/lib"
wget https://ftp.gnu.org/pub/gnu/ncurses/ncurses-6.2.tar.gz
tar -xzvf ncurses-6.2.tar.gz
cd ncurses-6.2
./configure --prefix=$HOME --enable-shared
#!//bin/bash
swappoff -a
echo "yes" | parted /dev/nvme0n1 rm 4
echo "yes" | parted /dev/nvme0n1 rm 3
echo "yes" | parted /dev/nvme1n1 rm 4
echo "yes" | parted /dev/nvme1n1 rm 3
@atomlab
atomlab / bash_strict_mode.md
Created September 4, 2021 18:57 — forked from mohanpedala/bash_strict_mode.md
set -e, -u, -o, -x pipefail explanation

set -e, -u, -x, -o pipefail

The set lines

  • These lines deliberately cause your script to fail. Wait, what? Believe me, this is a good thing.
  • With these settings, certain common errors will cause the script to immediately fail, explicitly and loudly. Otherwise, you can get hidden bugs that are discovered only when they blow up in production.
  • set -euxo pipefail is short for:
set -e
set -u
@atomlab
atomlab / ferm.conf
Created January 28, 2021 17:53
Default ferm conf
def $TRUSTED = (
);
domain (ip) {
table filter {
chain INPUT {
policy DROP;
# connection tracking
mod state state INVALID DROP;
mod state state (ESTABLISHED RELATED) ACCEPT;