blalor

This is possibly slightly incomplete as I stripped out an existing jobspec to share, but the meat is really in the run.sh template of the tailscale task. You'll need a reusable and ephemeral auth key.

blalor

function password_from_keychain(service)
    -- 'service' should be saved in the login keychain
    local cmd = "/usr/bin/security 2>&1 >/dev/null find-generic-password -gs '" .. service .. "' | sed -En '/^password: / s,^password: \"(.*)\"$,\\1,p'"

    local handle = io.popen(cmd)
    local result = handle:read("*a")
    handle:close()

    return (result:gsub("^%s*(.-)%s*$", "%1"))
end

blalor

yaml2json

Quick and dirty CLI tool for converting yaml to json.

example

[:~] 1 $ yaml2json <( echo -e '---\nfoo:\n- bar\n- baz' )
{
 "foo": [

blalor

jsondiff

Requires datadiff.

Also useful with yaml2json.

example

[:~] $ jsondiff <( echo '{"foo":"bar"}' ) <( echo '{"foo":"bar", "baz":"bap"}' )

blalor

dl.sh

Shell script for downloading HashiCorp binaries.

Requires jq (brew install jq) and gpg (brew cask install gpg-suite).

example

I structure all my binaries as ~/devel/HashiCorp/binaries/<product>-<version>/<product> and adjust paths as needed based on the project I'm working on.

blalor

#!/usr/bin/env python
# -*- encoding: utf-8 -*-

## clones a Go project into a new directory and sets up the workspace with direnv.
##
## example:
##   $ go_clone [email protected]:hashicorp/nomad.git nomad
##
## * creates the "nomad" directory
## * creates a .envrc with "layout go" in it

blalor

• last week in aws
• sre weekly
• devops weekly
• changelog weekly
• cron weekly
• golang weekly
• monitoring weekly
• production ready (it's actually biweekly!)

blalor

#!/usr/bin/env python
# -*- encoding: utf-8 -*-

## in order to cleanly shut down a node with running jobs, the node needs to be
## drained, and then we need to wait for allocations to be migrated away.  in
## this script, we:
## * set up a watch for node-update evals for the current node
## * wait for allocations currently running to complete
## * wait for allocations from the watched evals to start running
##

blalor

#!/bin/bash

set -e -u -o pipefail

{
    echo 'digraph G {'
    
    brew list | while read cask; do
        printf '"%s";\n' $cask
        brew deps $cask | while read dep; do

blalor

#!/usr/bin/env bash

## this is a total hack.  acbuild needs systemd-nspawn.  initially, I tried
## running the go agent in a rkt container, but failed for reasons I forget
## right now (overlayfs problems?).  then I ran into more problems with systemd-
## nspawn on CentOS 7.1, and I forget the origin.  we're getting closer: in
## CentOS 7.2 I'm able to run acbuild as root outside of a container.  but when
## running within the go agent, systemd-nspawn is killed for no discernable
## reason.  so, we're back to faking out acbuild by providing this systemd-
## nspawn-alike.