Skip to content

Instantly share code, notes, and snippets.

#!/bin/bash -xe
# docker run -it --rm --network host -v /tmp/packages:/packages debian
# docker run -it --rm --network host -v /tmp/packages:/packages -v ${PWD}/nginx.sh:/nginx.sh:ro debian /nginx.sh
echo 'deb http://deb.debian.org/debian buster-backports main' > /etc/apt/sources.list.d/backports.list
apt-get update -q
apt-get install -yq build-essential curl git dh-autoreconf zlib1g-dev wget libssl-dev libxml2-dev libxslt-dev libgd-dev libgeoip-dev libpcre++-dev checkinstall libmaxminddb0 libmaxminddb-dev
kubectl proxy
finalize () {
kubectl get namespace "$1" -o json > tmp.json
sed -i 's/ "kubernetes"//g' tmp.json
curl -k -H "Content-Type: application/json" -X PUT --data-binary @tmp.json "http://127.0.0.1:8001/api/v1/namespaces/$1/finalize"
rm tmp.json
}
finalize olm
#!/usr/bin/env python3
# kubectl get ing --all-namespaces -o yaml > /tmp/ing.yaml
import yaml
data = yaml.load(
open("/tmp/ing.yaml").read()
)
kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v0.14.0/cert-manager.crds.yaml
helm install cert-manager jetstack/cert-manager --namespace cert-manager --version v0.14.0 --set installCRDs=true
cat << EOF | kubectl apply -n cert-manager -f -
apiVersion: cert-manager.io/v1alpha2
kind: Issuer
metadata:
name: letsencrypt-prod
namespace
/system script
add dont-require-permissions=no name=allyouneed owner=root policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":do {\
\n :do {\
\n /file remove \"/allyouneed.rsc\";\
\n } on-error={}\
\n \
\n :put \"Downloading allyouneed.rsc...\";\
\n :do {\
\n /tool fetch url=\"https://antifilter.download/list/allyouneed.rsc\" dst-path=\"/allyouneed.rsc\"\
@egeneralov
egeneralov / site_1.rsc
Created July 11, 2020 14:27
ipip tunnels for two microtik`s. Site 1 with dynamic white ip, site 2 with static white ip.
/ip cloud
set ddns-enabled=yes
/interface ipip
add allow-fast-path=no ipsec-secret=REPLACE local-address=REPLACE_SITE_2_IP name=msk-spb remote-address=REPLACE_SITE_1_IP
/ip address
add address=192.168.99.1/30 interface=msk-spb network=192.168.99.0
---
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: d-1
spec:
replicas: 3
selector:
matchLabels:
app.kubernetes.io/instance: d-1
@egeneralov
egeneralov / system-to-git.sh
Last active October 8, 2020 19:08
для дебага непредсказуемого софта
cd /
cat << EOF > .gitignore
dev/
proc/
sys/
tmp/
run/
mnt/
media/
user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log warn;
pid /var/run/nginx.pid;
events {
worker_connections 1024;
}
http {
#!/bin/bash -xe
kubectl create ns cert-manager
kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v1.0.2/cert-manager.crds.yaml
helm -n cert-manager upgrade --install cert-manager jetstack/cert-manager --version v1.0.2 --set installCRDs=false
cat << EOF | kubectl apply -n cert-manager -f -
apiVersion: cert-manager.io/v1
kind: ClusterIssuer