Skip to content

Instantly share code, notes, and snippets.

@ishad0w
ishad0w / aveyo_edge_removal.bat
Last active March 24, 2025 18:35
AveYo (Microsoft Edge Removal)
@(set "0=%~f0"^)#) & powershell -nop -c iex([io.file]::ReadAllText($env:0)) & exit /b
#:: just copy-paste into powershell - it's a standalone hybrid script
sp 'HKCU:\Volatile Environment' 'Edge_Removal' @'
$also_remove_webview = 1
## why also remove webview? because it is 2 copies of edge, not a slimmed down CEF, and is driving bloated web apps
$also_remove_widgets = 1
## why also remove widgets? because it is a webview glorified ad portal on msn and bing news cathering to stupid people
$also_remove_xsocial = 1
## why also remove xsocial? because it starts webview setup every boot - xbox gamebar will still work without the social crap
diff --git a/cmd/kubeadm/app/cmd/join.go b/cmd/kubeadm/app/cmd/join.go
index 8487bd5aba4..3c8808139a0 100644
--- a/cmd/kubeadm/app/cmd/join.go
+++ b/cmd/kubeadm/app/cmd/join.go
@@ -481,6 +481,13 @@ func (j *joinData) InitCfg() (*kubeadmapi.InitConfiguration, error) {
return nil, err
}
klog.V(1).Infoln("[preflight] Fetching init configuration")
+
+ for _, el := range j.tlsBootstrapCfg.Clusters {
@M0r13n
M0r13n / doh
Last active April 3, 2025 13:51
Setup Cloudflare as a DoH (DNS over HTTPS) resolver on Mikrotik devices (RouterOS v7.0.2+)
# Temporarily add a normal upstream DNS resolver
/ip dns set servers=1.1.1.1,1.0.0.1
# CA certificates extracted from Mozilla
/tool fetch url=https://curl.se/ca/cacert.pem
# Import the downloaded ca-store (127 certificates)
/certificate import file-name=cacert.pem passphrase=""
# Set the DoH resolver to cloudflare
---
- name: integrate gitlab instance with k8s
hosts: kube-master[0]
gather_facts: no
tasks:
- apt:
name:
- python-pip
- python-setuptools
#!/bin/bash -xe
apt-get install iptables{,-persistent}
iptables -N node-exporter
iptables -A node-exporter -s 1.1.1.1 -j ACCEPT
iptables -A node-exporter -s 1.0.0.1 -j ACCEPT
iptables -A node-exporter -s 8.8.8.8 -j ACCEPT
iptables -A node-exporter -s 127.0.0.0/8 -j ACCEPT
iptables -A node-exporter -j REJECT

cilium kubespray direct routing

Tested on kube-sigs/kubespray commit a923f4e7c0692229c442b07a531bfb5fc41a23f9.

  • Add enable-endpoint-routes: "true" at EOF kubespray/roles/network_plugin/cilium/templates/cilium-config.yml.j2
  • Modify kubespray inventory group_vars/k8s-cluster/k8s-net-cilium.yml
cilium_auto_direct_node_routes: true
cilium_native_routing_cidr: 10.10.2.0/24
package main
import (
"context"
"fmt"
"io"
"log"
"encoding/json"
"github.com/docker/docker/api/types"
#!/bin/bash -xec
export DOMAIN=
rm -rf /etc/nginx/client_ssl
mkdir -p /etc/nginx/client_ssl
cd /etc/nginx/client_ssl
openssl req -new -newkey rsa:2048 -nodes -keyout ca.key -sha256 -x509 -days 3650 -subj "/CN=${DOMAIN}" -out ca.crt
#!/bin/bash -xe
apt-get install -yq md5deep wget fakeroot
[ -z "${GO_VERSION}" ] && GO_VERSION=1.17
mkdir -p /tmp/golang/{DEBIAN,usr/local}
cd /tmp/golang/
wget https://dl.google.com/go/go${GO_VERSION}.linux-amd64.tar.gz