George Pchelkin gpchelkin

Command

aws s3api list-buckets --query 'Buckets[*].[Name]' --output text | xargs -I {} bash -c 'if [[ $(aws s3api get-bucket-acl --bucket {} --query '"'"'Grants[?Grantee.URI==`http://acs.amazonaws.com/groups/global/AllUsers` && Permission==`READ`]'"'"' --output text) ]]; then aws s3api put-bucket-acl --acl "private" --bucket {} ; fi'

1. List all of the user's buckets, and output the name, as text.

vault_aws_auth

These are python 2 and 3 snippets showing how to generate headers to authenticate with HashiCorp's Vault using the AWS authentication method. There's also a Ruby implementation which uses version 3 of the AWS SDK for Ruby.

The python scripts look for credentials in the default boto3 locations; if you need to supply custom credentials (such as from an AssumeRole call), you would use the botocore.session.set_credentials method before calling create_client.

Sinkholed

This story has been moved to my blog here: .

	include $(TOPDIR)/rules.mk

	PKG_NAME:=sniproxy
	PKG_VERSION:=0.6.0
	PKG_RELEASE:=1

	PKG_SOURCE_URL:=https://github.com/dlundquist/sniproxy/archive/
	PKG_SOURCE:=$(PKG_VERSION).tar.gz
	PKG_MD5SUM:=bcfb5d1efe045b8b356a4229f2339f02

	#!/bin/bash

	# Tested on Linux Mint 18.3 / Ubuntu 16.04 with PulseAudio 8.0.
	# No need for superuser.
	# You can map it to keyboard shortcut and press when bluetooth audio starts lagging.
	# Reference:
	# https://askubuntu.com/a/171165/373130
	# https://askubuntu.com/a/72076/373130

	BLUEZCARD=`pactl list cards short \| grep bluez \| awk '{print $1}'`

	import os
	import configparser


	class Config:
	""" Get config from config file or environment variables.
	The priority order of config is: Config file > Environment > default_value.
	The env var is composed by: [SECTION]_[OPTION]
	For example:
	get_or_else('smtp', 'BIND_ADDRESS', '127.0.0.1')

	### NOT A SCRIPT, JUST A REFERENCE!

	# install dante-server
	sudo apt update
	sudo apt install dante-server

	# or download latest dante-server deb for Ubuntu, works for 16.04 / 18.04 / 20.04:
	wget http://archive.ubuntu.com/ubuntu/pool/universe/d/dante/dante-server_1.4.2+dfsg-7build5_amd64.deb
	# or older version:
	wget http://ppa.launchpad.net/dajhorn/dante/ubuntu/pool/main/d/dante/dante-server_1.4.1-1_amd64.deb

	# Change the path below to your own audit log path.
	/var/log/vault/audit.log {
	rotate 30
	daily
	# Do not execute rotate if the log file is empty.
	notifempty
	missingok
	compress
	# Set compress on next rotate cycl to prevent entry loss when performing compression.
	delaycompress

	add-type @"
	using System.Net;
	using System.Security.Cryptography.X509Certificates;
	public class TrustAllCertsPolicy : ICertificatePolicy {
	public bool CheckValidationResult(
	ServicePoint srvPoint, X509Certificate certificate,
	WebRequest request, int certificateProblem) {
	return true;
	}
	}

	//---CONFIGURATION---//
	const showMp3_128 = true; // Show MP3 @128k download (default: true)
	const showMp3_320 = true; // Show MP3 @320k download (default: true)
	const showFLAC = true; // Show FLAC download (default: true)
	const showAzLyrics = true; // Show azLyrics checkbox (default: true)
	const showListDownloader = true; // Show bulk download option (default: true)
	const coverSize = 600; // JPEG cover size in px (default: 600)
	const coverQuality = 80; // JPEG cover quality from 0 to 100 (default: 80)

	//---DEBUG---//