brianonn

#!/bin/sh
set -x

node=${1}
nodeName=$(kubectl get node ${node} -o template --template='{{index .metadata.labels "kubernetes.io/hostname"}}')
nodeSelector='"nodeSelector": { "kubernetes.io/hostname": "'${nodeName:?}'" },'
podName=${USER}-nsenter-${node}

kubectl run ${podName:?} --restart=Never -it --rm --image overriden --overrides '
{

brianonn

Extract hosts inventory file for Ansible

This script is intended to be used with the Telmate terraform provider for Proxmox

Requirements

• Telmate terraform provider installed via terraform init
• must use tags = "server" or tags = "worker" when defining server and worker VM's in the terraform provider
• have a successfull terraform apply that created the terraform.tfstate file
• Ansible installed
• jq installed

brianonn

#!/bin/bash

###########################################
#
# 1) install a standard ubuntu server from the server image
# 2) during server installation you will have to create a user, so create a throwaway user, ie 'tmpinstall'
# 3) login to that throwaway user 'tmpinstall' after the server is up
# 4) install any additional packages and even any special users that you want to always
#    be there in your base image template
# 5) when finished, become a clean root shell for the next steps:

brianonn

#!/bin/bash

# originally from: https://github.com/kubernetes/kubernetes/issues/106464#issuecomment-1142563656

# edited by Brian Onn https://github.com/brianonn

# see also
# https://kubernetes.io/docs/setup/production-environment/container-runtimes/#containerd-systemd

# works on debian 10, maybe 11 ? maybe 9 ?

brianonn

# from https://stackoverflow.com/a/59835994
# also see: https://soatok.blog/2020/05/13/why-aes-gcm-sucks/

import secrets
from cryptography.hazmat.primitives.ciphers.aead import AESGCM

# Generate a random secret key (AES256 needs 32 bytes)
key = secrets.token_bytes(32)

# Encrypt a message

brianonn

apiVersion: v1
kind: Pod
metadata:
  name: sleep
spec:
  containers:
  - name: sleep
    image: busybox:latest
    # Just spin & wait forever
    command: [ "/bin/sh", "-c", "--" ]

brianonn

# -*- mode: ruby -*-
# vi: set ft=ruby :

Vagrant.configure("2") do |config|
  config.vm.box = "debian/buster64"
  config.vm.hostname = "docker-host"
  config.vm.define "docker-host"
  config.vagrant.plugins = ['vagrant-vbguest']

  config.vm.provider "virtualbox" do |vb|

brianonn

#!/bin/sh

# flush and delete all existing rules and chains
iptables -t filter -F
iptables -t nat -F
iptables -t mangle -F
iptables -F
iptables -t filter -X
iptables -t nat -X
iptables -t mangle -X

brianonn

#!/bin/bash

CMD="${1:-ls -l /}"
BOXES="${2:-centos/8 generic/ubuntu1804}"
PROVIDER="${3:-virtualbox}"

LOG="$PWD/commands.log"
: > "$LOG"

TMPDIR="/tmp/$RANDOM.$$"

brianonn

# -*- mode: ruby -*-
# vi: set ft=ruby :

# Config Github Settings
github_username = "fideloper"
github_repo     = "Vaprobash"
github_branch   = "1.4.0"
github_url      = "https://raw.githubusercontent.com/#{github_username}/#{github_repo}/#{github_branch}"

# Because this:https://developer.github.com/changes/2014-12-08-removing-authorizations-token/