Sergio [ergoz] Escarchado ergoz

Let's Encrypt the 389 Directory Server

The following procedure is for installing a wildcard cert and key paid from Let's Encrypt for the 389 Directory Server.

Use the 389 Console gui to create a certificate database db and to import the Let's Encrypt certificate chain cert (which will be in PEM format). See secs. 9.1.3.2 and 9.3.3.2 of the Red Hat Directory Server Administration Guide for details.
Create a pin.txt file under /etc/dirsrv/slapd-[instance name]:

Internal (Software) Token:agoodpassword

How to resize a qcow2 disk image on Linux

This example takes olddisk.qcow2 and resizes it into newdisk.qcow2, extending one of the guest's partitions to fill the extra space.

1. qcow2 format

1.1. Verify the filesystems of `olddisk.qcow2`

Enable cloud-init for a Alpine VM on proxmox

alpine version 3.20.3 cloud-init version 22.4

Install

Download alpine-virt-3.20.3-x86_64.iso Uploda to PVE Create a VM

Bucket Policy

Bucket policy is an access policy available for you to grant anonymous permissions to your Minio resources. Bucket policy uses JSON-based access policy language.

This section presents a few examples of typical use cases for bucket policies. The policies use testbucket strings in the resource value. To test these policies, you need to replace these strings with your bucket name. For more information please read Amazon S3 access policy language

Granting Read-Only Permission to an Anonymous User

The following example policy grants the s3:GetObject permission to any public anonymous users. This permission allows anyone to read the object data under testbucket, which is useful for when you have publicly readable assets. A typical example is a website assets stored in testbucket.

Some useful policies for MinIO

A small collection, because reasons.

User Policies

To apply these:

Download the file.
mcli admin policy add MYMINIO NAME NAME.json (replace MYMINIO with your configured instance and NAME with the filename).
mcli admin policy set MYMINIO NAME user=USER (same as above, replace USER with the user you want to configure).

	package main

	import (
	"fmt"
	"./ldap"
	)

	var filter = "(&(&(&(& (mailnickname=) (\| (&(objectCategory=person)(objectClass=user)(\|(homeMDB=)(msExchHomeServerName=*))) )))(objectCategory=user)(department=IT)(physicalDeliveryOfficeName=Amsterdam)))"

	func main() {

	// ==UserScript==
	// @name noVNC Paste for Proxmox
	// @namespace http://tampermonkey.net/
	// @version 0.2a
	// @description Pastes text into a noVNC window (for use with Proxmox specifically)
	// @author Chester Enright
	// @match https://*
	// @include /^.novnc./
	// @require http://code.jquery.com/jquery-3.3.1.min.js
	// @grant none

	<!--
	This is a simple URL share button for Telegram application.
	It's compatible with iOS/Android app, Telegram Desktop and uses its web mode for fallback.
	-->

	<a href="https://t.me/share/url?url={url_to_share}&text={caption_text}&to={phone_number}">
	Share Me
	</a>

	<!--

	#!/bin/env sh

	lines=$(tput lines)
	cols=$(tput cols)

	awkscript='
	{
	letters="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789@#$%^&*()"

	lines=$1

	#!/bin/bash
	sed -i 's#checked_command: function(orig_cmd) {#checked_command: function(orig_cmd) { return true;#ig' /usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js