Tony Benavides caffeinetiger

Updating TLS Settings for AWS Classic Load Balancers

This is a simple how-to on updating an AWS Classic Load Balancer with a specific TLS Negotiaion Policy. Just read the script to see how the update works.

To get a list of available predefined policies that are available execute

aws elb describe-load-balancer-policies --query 'PolicyDescriptions[?PolicyTypeName==`SSLNegotiationPolicyType`].{PolicyName:PolicyName}' --output table

Updating Jenkins Java version from 8 to 11

From the references listed below the most important thing to note is that the Java version must match for the controller and the node/agent.

References

Follow bash best-practices

These examples were compiled from Best Practices for Writing Bash Scripts and Use the Unofficial Bash Strict Mode (Unless You Looove Debugging).

Another resource of note: Bash 3 Boilerplate.

As a single snippet, start your bash script with:

set -euo pipefail

	#See https://aka.ms/containerfastmode to understand how Visual Studio uses this Dockerfile to build your images for faster debugging.

	#Depending on the operating system of the host machines(s) that will build or run the containers, the image specified in the FROM statement may need to be changed.
	#For more information, please see https://aka.ms/containercompat

	FROM mcr.microsoft.com/dotnet/aspnet:3.1-alpine AS base
	WORKDIR /app
	EXPOSE 80
	EXPOSE 443

	#!/bin/bash

	exit_on_error() {
	exit_code=$1
	last_command=${@:2}
	if [ $exit_code -ne 0 ]; then
	>&2 echo "\"${last_command}\" command failed with exit code ${exit_code}."
	exit $exit_code
	fi
	}

	#!/bin/bash

	function exit_if_command_not_installed() {
	local some_command_to_check=$1
	if ! command -v $some_command_to_check &> /dev/null
	then
	echo "$some_command_to_check could not be found"
	exit
	fi
	}

	FROM amazonlinux:2.0.20210219.0

	ARG PYTHON_VERSION=3.8.5
	ARG BOTO3_VERSION=1.17.38
	ARG BOTOCORE_VERSION=1.20.38
	ARG APPUSER=app

	RUN yum -y update &&\
	yum install -y shadow-utils findutils gcc sqlite-devel zlib-devel wget tar.x86_64 gzip make unzip \
	bzip2-devel openssl-devel readline-devel libffi-devel && \

	#!/bin/bash

	curl -L -b "oraclelicense=a" -O https://download.oracle.com/otn-pub/java/jdk/11.0.14%2B8/7e5bbbfffe8b45e59d52a96aacab2f04/jdk-11.0.14_linux-x64_bin.rpm

	sudo rpm -Uvh jdk-11.0.14_linux-x64_bin.rpm

	java -version

	# If 11 does not display use the alternatives tool to set the version of java
	sudo update-alternatives --config 'java'

	#!/bin/bash

	BITBUCKET_USERNAME=someperson
	BITBUCKET_PASSWORD=somepassword

	mkdir some-dir
	# The follow command works by default in Amazon Linux 2 out of the box for Python 2.7.x
	# App passwords need to be URL encoded to work
	URL_ENCODED_PASSWORD=$(python -c "import urllib;print urllib.quote(raw_input())" <<< "${BITBUCKET_PASSWORD}")
	git clone https://${BITBUCKET_USERNAME}:${URL_ENCODED_PASSWORD}@bitbucket.org/sometreamorg/somerepo.git some-dir