Kinnaird McQuade kmcquade

A common and reliable pattern in service unit files is thus:

NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict
ProtectHome=read-only
ProtectControlGroups=yes
ProtectKernelModules=yes

Files are below.

For VSCode, paste it here: https://snippet-generator.app/

To Decrypt Jenkins Passwords

Go to the "Configure System" screen.
Right click on a password field, Inspect element, then change to "text" instead of "password".
Copy that field and then go to the Script Console. Paste the below into the field, replace with your encrypted password, and then hit "run".

encrypted_pw = '{your_encrypted_password_with_brackets_around_it}'
passwd = hudson.util.Secret.decrypt(encrypted_pw)
println(passwd)

	# first class expresssion
	variable "ami" {}
	resource "aws_instance" "example" {
	ami = var.ami
	}

	###

	# list & map
	resource "aws_instance" "example" {

	sudo su

	yum --enablerepo=extras install epel-release
	yum -y install patch dkms kernel-devel perl
	yum update

	reboot

	sudo su

	# import config.
	# You can change the default config with `make cnf="config_special.env" build`
	cnf ?= config.env
	include $(cnf)
	export $(shell sed 's/=.*//' $(cnf))

	# import deploy config
	# You can change the default deploy config with `make cnf="deploy_special.env" release`
	dpl ?= deploy.env
	include $(dpl)

	#!/usr/bin/env python
	#
	# copy all SSM parameter store parameters to disk
	#
	import os, sys, argparse, boto3

	parser = argparse.ArgumentParser(description='copy all parameter values to local')
	parser.add_argument("--path", dest="path", required=True,
	help="to copy the keys from", metavar="STRING")
	parser.add_argument("--directory", dest="directory", required=True,

	##### Working directories #####
	tmp
	_notes

	##### Technologies #####

	#### Terraform
	# Local .terraform directories
	*/.terraform/
	*.plan

	#cloud-config
	write-files:
	- path: /etc/conf.d/nfs
	permissions: '0644'
	content: \|
	OPTS_RPC_MOUNTD=""

	coreos:
	units:
	- name: update-engine.service

	#!/usr/bin/python2.7
	import ConfigParser
	import os
	import sys
	from os.path import expanduser

	config = ConfigParser.RawConfigParser()

	# credentials_file: The file where this script will grab the temp creds
	credentials_file = '/.aws/credentials'