Ryan Eby eby

Currently, there is an explosion of tools that aim to manage secrets for automated, cloud native infrastructure management. Daniel Somerfield did some work classifying the various approaches, but (as far as I know) no one has made a recent effort to summarize the various tools.

This is an attempt to give a quick overview of what can be found out there. The list is alphabetical. There will be tools that are missing, and some of the facts might be wrong--I welcome your corrections. For the purpose, I can be reached via @maxvt on Twitter, or just leave me a comment here.

There is a companion feature matrix of various tools. Comments are welcome in the same manner.

Persistent data storage on CoreOS-cluster

Storing the data on the host machine

Data directories are created in /home/coreos and mounted into the container using volume cli options of docker run. All data the container writes is stored on the host and as long as the host persists safe against container restarts / recreates.

Pro
- No effort, just create the directories and mount them into the container
Contra
Container is bound to host (unable to failover)

	[defaults]
	sudo_flags = SSH_AUTH_SOCK="$SSH_AUTH_SOCK" -H -S -n

	[ssh_connection]
	ssh_args=-o ForwardAgent=yes

	#! /bin/bash

	sudo apt-get update
	sudo apt-get install g++ make binutils autoconf automake autotools-dev libtool pkg-config zlib1g-dev libcunit1-dev libssl-dev libxml2-dev libev-dev libevent-dev -y
	git clone https://github.com/nghttp2/nghttp2.git && cd nghttp2
	autoreconf -i
	automake
	autoconf
	./configure --enable-apps
	make


	1. Document how to auto logon, it is simple, adding username= and password= to URL, but it should be included. Done

	2. Add some suggestions for kiosk browsers.
	a. Openkiosk details -
	1. https://websitesupport.zendesk.com/hc/en-us/articles/205075144-Bypass-the-print-dialog-box-in-Firefox
	2. NOBLE setup docs - https://docs.google.com/document/d/1CEk8yV2ZyVkLNSCVJnmhzggHrMIUekJoq1G1oEO-yxg/edit#
	3. Evergreen General List Thread - http://markmail.org/message/afpbqigftln5eb54#query:+page:1+mid:afpbqigftln5eb54+state:results

	3. Add a note about the barcode pattern regex YAOUS needing to be set for barcodes to be recognized. Done

	sudo apt-get install bind9 bind9utils bind9-doc
	wget https://dl.bintray.com/mitchellh/consul/0.5.2_linux_amd64.zip

	/etc/bind/named.conf.options:
	options {
	directory "/var/cache/bind";
	recursion yes;
	allow-query { localhost; };

	forwarders {

	# Default pivot location
	lxc.pivotdir = lxc_putold

	# Default mount entries
	lxc.mount.entry = proc proc proc nodev,noexec,nosuid 0 0
	lxc.mount.entry = sysfs sys sysfs defaults 0 0

	# Default console settings
	#lxc.devttydir = lxc
	lxc.tty = 4

	<?php

	use Swagger\Annotations as SWG;

	/**
	* @SWG\Swagger(
	* basePath="/v1",
	* host="api.local",
	* schemes={"http"},
	* produces={"application/json"},

	#!/bin/bash
	# based on script from http://www.axllent.org/docs/view/ssh-geoip
	# License: WTFPL

	# UPPERCASE space-separated country codes to ACCEPT
	ALLOW_COUNTRIES="DE EU GB"
	LOGDENY_FACILITY="authpriv.notice"

	if [ $# -ne 1 ]; then
	echo "Usage: `basename $0` <ip>" 1>&2

	# OSX for Hackers (Mavericks/Yosemite)
	#
	# Source: https://gist.github.com/brandonb927/3195465

	#!/bin/sh

	# Some things taken from here
	# https://github.com/mathiasbynens/dotfiles/blob/master/.osx

	# Ask for the administrator password upfront