Erich B ebirn

Currently, there is an explosion of tools that aim to manage secrets for automated, cloud native infrastructure management. Daniel Somerfield did some work classifying the various approaches, but (as far as I know) no one has made a recent effort to summarize the various tools.

This is an attempt to give a quick overview of what can be found out there. The list is alphabetical. There will be tools that are missing, and some of the facts might be wrong--I welcome your corrections. For the purpose, I can be reached via @maxvt on Twitter, or just leave me a comment here.

There is a companion feature matrix of various tools. Comments are welcome in the same manner.

Make a directory to install CentOS 7.2.1511 in

[root@localhost ~]# mkdir /centos_chroot

Make a directory for the rpm database

[root@localhost ~]# mkdir -p /centos_chroot/var/lib/rpm

Create the RPM database

Current Effective RBL Setup for Postfix

main.cf:

    smtpd_recipient_restrictions =
      permit_mynetworks,
      permit_sasl_authenticated,
      reject_non_fqdn_hostname,
      reject_non_fqdn_sender,
 reject_non_fqdn_recipient,

S3 as Yum repo

There are two parts to this:

Managing access to non-public S3 resources.
Building RPM repositories in an automated, deterministic way that Yum can use.

Environment

In general, a CentOS 7 x86_64 box in AWS EC2; in specific, this Packer profile.

Raspberry pi dashboard

This is what we did to setup a few dashboards at platanus

You'll need

Raspberry Pi
Dashing Service
Wifi stick (optional)

	#!/usr/bin/python
	# vim: set ts=4 sw=4 et

	"""
	slurm_sched_stats.py
	A script that uses PySlurm to get the slurm scheduler statistics.
	"""

	import pickle
	import socket

	import jenkins.model.*
	import com.cloudbees.plugins.credentials.*
	import com.cloudbees.plugins.credentials.common.*
	import com.cloudbees.plugins.credentials.domains.*
	import com.cloudbees.plugins.credentials.impl.*
	import com.cloudbees.jenkins.plugins.sshcredentials.impl.*
	import org.jenkinsci.plugins.plaincredentials.*
	import org.jenkinsci.plugins.plaincredentials.impl.*
	import hudson.util.Secret
	import hudson.plugins.sshslaves.*

	KEY=XXXXXXXXXXXX
	HOST="https://metrics.crisidev.org"

	mkdir -p dashboards && for dash in $(curl -k -H "Authorization: Bearer $KEY" $HOST/api/search\?query\=\& \|tr ']' '\n' \|cut -d "," -f 5 \|grep slug \|cut -d\" -f 4); do
	curl -k -H "Authorization: Bearer $KEY" $HOST/api/dashboards/db/$dash > dashboards/$dash.json
	done

	This document describes about installation and configuration of IPMI simulator.
	We need: qemu-kvm, OpenIPMI, OpenIPMI-tools
	1) Install the qemu-kvm. We need the qemu, which have the IPMI pacthes.
	Use the source https://github.com/cminyard/qemu/tree/stable-2.2-ipmi
	./configure, make and make install

	2) Download the OpenIPMI libraries, from http://sourceforge.net/projects/openipmi/
	Follow the process documented in lanserv/README.vm
	./configure --prefix=/opt/openipmi/usr --sysconfdir=/opt/openipmi/etc \
	--with-perlinstall=/opt/openipmi/usr/lib/perl \

	- What do Etcd, Consul, and Zookeeper do?
	- Service Registration:
	- Host, port number, and sometimes authentication credentials, protocols, versions
	numbers, and/or environment details.
	- Service Discovery:
	- Ability for client application to query the central registry to learn of service location.
	- Consistent and durable general-purpose K/V store across distributed system.
	- Some solutions support this better than others.
	- Based on Paxos or some derivative (i.e. Raft) algorithm to quickly converge to a consistent state.
	- Centralized locking can be based on this K/V store.