Amin Akbari eAmin

Kubernetes on (vanilla) Raspbian Lite

Yes - you can create a Kubernetes cluster with Raspberry Pis with the default operating system called Raspbian. This means you can carry on using all the tools and packages you're used to with the officially-supported OS.

Pre-reqs:

You must use an RPi 2 or 3 for use with Kubernetes
I'm assuming you're using wired ethernet (Wi-Fi also works, but it's not recommended)

Master node setup

On Ubuntu 16.04 LTS, I successfully used the following to disable suspend:

sudo systemctl mask sleep.target suspend.target hibernate.target hybrid-sleep.target

And this to re-enable it:

sudo systemctl unmask sleep.target suspend.target hibernate.target hybrid-sleep.target

Not all random values are created equal - for security-related code, you need a specific kind of random value.

A summary of this article, if you don't want to read the entire thing:

Don't use Math.random(). There are extremely few cases where Math.random() is the right answer. Don't use it, unless you've read this entire article, and determined that it's necessary for your case.
Don't use crypto.getRandomBytes directly. While it's a CSPRNG, it's easy to bias the result when 'transforming' it, such that the output becomes more predictable.
If you want to generate random tokens or API keys: Use uuid, specifically the uuid.v4() method. Avoid node-uuid - it's not the same package, and doesn't produce reliably secure random values.
If you want to generate random numbers in a range: Use random-number-csprng.

You should seriously consider reading the entire article, though - it's

First of all, please note that token expiration and revoking are two different things.

Expiration only happens for web apps, not for native mobile apps, because native apps never expire.
Revoking only happens when (1) uses click the logout button on the website or native Apps;(2) users reset their passwords; (3) users revoke their tokens explicitly in the administration panel.

1. How to hadle JWT expiration

A JWT token that never expires is dangerous if the token is stolen then someone can always access the user's data.

Quoted from JWT RFC:

	/**
	* Basic example to pass values between parent and child components in React
	* Seems to be in line with this
	* http://stackoverflow.com/questions/24147331/react-the-right-way-to-pass-form-element-state-to-sibling-parent-elements
	* Now I have the state in parent and child. Is that good or bad? Why would I need it in child?
	* Could probably take that out
	* */
	class Parent extends React.Component {
	constructor(props) {
	super(props);

	import React, {Component} from 'react';
	import {BootstrapTable, TableHeaderColumn} from 'react-bootstrap-table';
	import _ from 'lodash';

	const dataTable = _.range(1, 60).map(x => ({id: x, name: `Name ${x}`, surname: `Surname ${x}`}));

	// Simulates the call to the server to get the data
	const fakeDataFetcher = {
	fetch(page, size) {
	return new Promise((resolve, reject) => {

	function download(fileUrl, apiPath, callback) {
	var url = require('url'),
	http = require('http'),
	p = url.parse(fileUrl),
	timeout = 10000;

	var file = fs.createWriteStream(apiPath);

	var timeout_wrapper = function( req ) {
	return function() {

	/**
	* Tweet sized English number to Persian converter and vice versa.
	* You can find out old and obsolete version in here: https://gist.github.com/eAmin/786108
	* by Amin Akbari
	* MIT License
	*/

	/**
	* Convert English numbers to Persian
	*

	var crypto = require('crypto')
	, rrange = 4294967296;

	/**
	* Return an integer, pseudo-random number in the range [0, 2^32).
	*/

	var nextInt = function() {
	return crypto.randomBytes(4).readUInt32BE(0);
	};

	#Download Elementary OS from here:
	#https://elementary.io/

	#Clean-up System
	sudo apt-get purge midori-granite -y
	sudo apt-get purge yelp -y
	sudo apt-get purge evince -y
	sudo apt-get purge gnome-orca -y
	sudo apt-get autoremove -y
	sudo apt-get autoclean -y