Christian Korneck christian-korneck

Signing VirtualBox Kernel Modules

These are the steps I followed enable VirtualBox on my laptop without disabling UEFI Secure Boot. They're nearly identical to the process described on [Øyvind Stegard's blog][blog], save for a few key details. The images here are borrowed from the [Systemtap UEFI Secure Boot Wiki][systemtap].

Install the VirtualBox package (this might be different for your platform).

src='https://download.virtualbox.org/virtualbox/rpm/fedora/virtualbox.repo'

For example your latest image with semantic versioning looks like this:

${DOCKER_HUB_ORG}/${DOCKER_HUB_REPO}:v1.20.0

Example provided above will do the folowing:

Generate token using your github username and password.
Get list of all tags from repository.

	# Copyright: (c) 2019, Jordan Borean (@jborean93) <[email protected]>
	# MIT License (see LICENSE or https://opensource.org/licenses/MIT)

	Function Get-ServiceCredential {
	<#
	.SYNOPSIS
	Retrieve the username and plaintext password for all services installed on the local computer.

	.DESCRIPTION
	Will retrieve the username and plaintext password for the service(s) specified. This must be run as an

	#!/bin/bash

	#Harbor on Ubuntu 18.04

	#Prompt for the user to ask if the install should use the IP Address or Fully Qualified Domain Name of the Harbor Server
	PS3='Would you like to install Harbor based on IP or FQDN? '
	select option in IP FQDN
	do
	case $option in
	IP)

	#
	# This is the ultimate HAProxy 2.0 "Getting Started" config
	# It demonstrates many of the features available which are now available
	# While you may not need all of these things, this can serve
	# as a reference for your own configurations.
	#
	# Have questions? Check out our community Slack:
	# https://slack.haproxy.org/
	#

	package win32

	import (
	"syscall"
	"unsafe"
	)

	var (
	iphlpapiDLL = syscall.NewLazyDLL("iphlpapi.dll")
	procGetExtendedTcpTable = iphlpapiDLL.NewProc("GetExtendedTcpTable")

	package win32

	import "unicode/utf16"

	// StringToCharPtr converts a Go string into pointer to a null-terminated cstring.
	// This assumes the go string is already ANSI encoded.
	func StringToCharPtr(str string) *uint8 {
	chars := append([]byte(str), 0) // null terminated
	return &chars[0]
	}

	package win32

	import "syscall"
	import "unsafe"

	var (
	kernel32DLL = syscall.NewLazyDLL("kernel32.dll")
	procCreateJobObjectA = kernel32DLL.NewProc("CreateJobObjectA")
	)

	table inet firewalld {
	chain raw_PREROUTING {
	type filter hook prerouting priority -290; policy accept;
	icmpv6 type { nd-router-advert, nd-neighbor-solicit } accept
	meta nfproto ipv6 fib saddr . iif oif missing drop
	jump raw_PREROUTING_ZONES_SOURCE
	jump raw_PREROUTING_ZONES
	}

	chain raw_PREROUTING_ZONES_SOURCE {

	package main

	import (
	"bytes"
	"fmt"
	"os/exec"
	"strings"
	)

	// PowerShell struct