Flavien Berwick flavienbwk

Ubuntu/Debian Offline Repository Creation Gist

When I googled how to create my own offline repository of packages for use in an offline Ubuntu/Debian machine, the results were disheartening and the steps to be taken scattered all over the place.

The files within this gist will allow you to:

Download specific apt-get packages... with dependencies included!
Create a Packages.gz file so that you can add the repository folder you create to the target machine's /etc/apt/sources.list file.

Before using

Google cloud's ssh command lets you pass standard ssh flags. To, for example, forward local port 8088 to port 8088 on a vm instance, all you need to do is:

gcloud compute  ssh --ssh-flag="-L 8088:localhost:8088"  --zone "us-central1-b" "example_instance_name"

Now browsing to localhost:8088 works as it would with standard ssh.

Install FFmpeg via CLI on Linux box

These steps walk through installing a static binary of any ffmpeg version on to your linux machine. If you want to compile from source, there are several ways to do so. Here's the official guide. Tested and works on an AWS EC2 Ubuntu instance, but should work on any Linux machine.

http://ffmpeg.org

SSH into your instance and become root

UFW

I use Ubuntu’s Uncomplicated firewall because it is available on Ubuntu and it's very simple.

Install UFW

if ufw is not installed by default be sure to install it first.

	#!/usr/bin/env bash

	# print usage
	DOMAIN=$1
	if [ -z "$1" ]; then

	echo "USAGE: $0 domain.lan"
	echo ""
	echo "This will generate a non-secure self-signed wildcard certificate for given domain."
	echo "This should only be used in a development environment."

	upstream gitlab {
	server 172.17.42.1:10080 fail_timeout=0;
	}

	# let gitlab deal with the redirection
	server {
	listen 80;
	server_name git.example.com;
	server_tokens off;
	root /dev/null;

	##TCP FLAGS##

	Unskilled Attackers Pester Real Security Folks
	==============================================
	TCPDUMP FLAGS
	Unskilled = URG = (Not Displayed in Flag Field, Displayed elsewhere)
	Attackers = ACK = (Not Displayed in Flag Field, Displayed elsewhere)
	Pester = PSH = [P] (Push Data)
	Real = RST = [R] (Reset Connection)
	Security = SYN = [S] (Start Connection)

	#!/bin/bash

	# @author Adriano Rosa (http://adrianorosa.com)
	# @date: 2014-05-13 09:43
	#
	# Bash Script to create a new self-signed SSL Certificate
	# At the end of creating a new Certificate this script will output a few lines
	# to be copied and placed into NGINX site conf
	#
	# USAGE: this command will ask for the certificate name and number in days it will expire

	### Admin email address
	[email protected]

	### Setup the server to mirror
	mirror=rsync://archive.ubuntu.com/ubuntu

	### Log file path
	log=/var/log/ubuntu

	### Setup the local directory

	#!/bin/bash
	IPT="/sbin/iptables"

	# Server IP
	SERVER_IP="$(ip addr show eth0 \| grep 'inet ' \| cut -f2 \| awk '{ print $2}')"

	# Your DNS servers you use: cat /etc/resolv.conf
	DNS_SERVER="8.8.4.4 8.8.8.8"

	# Allow connections to this package servers