Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!
openssl genrsa -des3 -out rootCA.key 4096
| #!/usr/bin/env bash | |
| # | |
| # Description | |
| # Bootstrap SSH Session to an SSM-managed instance | |
| # by temporarily adding a public SSH key available on the local machine (ssh-agent or in ~/.ssh) | |
| # | |
| # | |
| # Installation | |
| # | |
| # First run your eye over this script to check for malicious code |
| #!/usr/bin/env sh | |
| ######## Usage ################################################################# | |
| # | |
| # #1 Install the AWS CLI | |
| # https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-install.html | |
| # | |
| # #2 Install the Session Manager Plugin for the AWS CLI | |
| # https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-working-with-install-plugin.html | |
| # |
| fields @timestamp, @message | |
| | parse @message '*Query_time: * Lock_time: * Rows_sent: * Rows_examined: *\n*' as host, query_time, lock_time, rows_sent, rows_examined, query | |
| | sort query_time desc | |
| | limit 100 |
| #!/bin/bash | |
| # modified from byobu's bashrc -- colorize the prompt | |
| # Copyright (C) 2014 Dustin Kirkland | |
| # | |
| # Authors: Dustin Kirkland <[email protected]> | |
| # | |
| # This program is free software: you can redistribute it and/or modify | |
| # it under the terms of the GNU General Public License as published by | |
| # the Free Software Foundation, version 3 of the License. | |
| # |
| # Rename tags named foo-bar-#.#.# to v#.#.# and push the tag changes | |
| git tag -l | while read t; do n="v${t##*-}"; git tag $n $t; git push --tags ; git tag -d $t; git push origin :refs/tags/$t ; done |
| rm -rf /var/lib/cloud/instance && rm -rf /var/lib/cloud/instances/* && rm -rf /var/lib/cloud/sem/* | |
| cloud-init init && cloud-init modules --mode config && cloud-init modules --mode final |
| #cloud-config | |
| package_upgrade: true | |
| packages: | |
| - nfs-utils | |
| - httpd | |
| - php | |
| runcmd: | |
| - echo "$(curl -s http://169.254.169.254/latest/meta-data/placement/availability-zone).FILE_SYSTEM_ID.efs.us-west-2.amazonaws.com:/ /var/www/html/efs nfs4 defaults" >> /etc/fstab | |
| - mkdir /var/www/html/efs | |
| - mount -a |
| require 'ipaddr' | |
| IPAddr.new('1.2.3.4').to_i | |
| IPAddr.new(16909060, Socket::AF_INET).to_s | |
| ############################# | |
| ### GENERATE CERT AND KEY ### | |
| ############################# | |
| # when generating key and cert, use password provided by administrator | |
| cd ~/Workspace/Silvermedia/vpn | |
| kozak127@callisto:~/Workspace/Silvermedia/vpn$ openssl pkcs12 -in michal.wesoly.p12 -nocerts -nodes -out michal.wesoly.key | |
| Enter Import Password: |