egeneralov

#!/bin/bash -xe

fallocate -L 10G /var/lib/machines.raw
mkfs.btrfs -d single -M -L machines -K /var/lib/machines.raw
systemctl restart var-lib-machines.mount
btrfs subvolume create /var/lib/machines/buster/
debootstrap --include=systemd,systemd-container --components=main,contrib,non-free --arch=amd64 --no-check-certificate --no-check-gpg buster /var/lib/machines/buster/ http://deb.debian.org/debian

chroot /var/lib/machines/buster/ systemctl enable systemd-{network,resolve}d
chroot /var/lib/machines/buster/ systemctl disable {rsyslog,cron,console-getty}.service

egeneralov

#!/bin/bash -xe

virt-install --virt-type kvm --name vmname \
--location http://deb.debian.org/debian/dists/buster/main/installer-amd64/ \
--os-variant debian10 \
--disk size=10 \
--memory 1000 \
--graphics none \
--console pty,target_type=serial \
--extra-args "console=ttyS0"

egeneralov

strace -T -r -q -C -w -f -p ${PID}

egeneralov

Registry credentials in helm charts

values.yaml

Add:

imageCredentials:
  registry: quay.io
 username: someone

egeneralov

package main

import (
	"log"
	"fmt"
	"encoding/json"
	"github.com/valyala/fasthttp"
)

var (

egeneralov

package main

import (
	"context"
	"fmt"
	"io"
	"log"
	"encoding/json"

	"github.com/docker/docker/api/types"

egeneralov

- hosts: localhost
  gather_facts: no
  vars:
    api_token: "${API_TOKEN_HERE}"
    limit: 25
  tasks:
    
    - uri:
        url: "https://api.digitalocean.com/v2/droplets?page=1&per_page={{ limit }}"
        return_content: yes

egeneralov

stages:
  - test

include:
  - template: Dependency-Scanning.gitlab-ci.yml
  - template: Security/SAST.gitlab-ci.yml
  - template: Container-Scanning.gitlab-ci.yml

egeneralov

#!/bin/bash -xec

export DOMAIN=

rm -rf /etc/nginx/client_ssl
mkdir -p /etc/nginx/client_ssl

cd /etc/nginx/client_ssl

openssl req -new -newkey rsa:2048 -nodes -keyout ca.key -sha256 -x509 -days 3650 -subj "/CN=${DOMAIN}" -out ca.crt

egeneralov

---

- hosts: k8s-cluster
  gather_facts: yes
  vars:
    version: 1.0.1
  tasks:
    
    - unarchive:
        src: "https://github.com/prometheus/node_exporter/releases/download/v{{ version }}/node_exporter-{{ version }}.linux-amd64.tar.gz"