Mabroor Ahmed mabroor

Cloud images in Proxmox

A script which automates these steps for multiple distros incl. CoreOS, CentOS, Arch and ALpine

create-cloud-template.sh

Steps for creating an Ubuntu 18.04 cloud template

Using a ready-to-use Ubuntu image

If you use Amazon AWS for nearly anything, then you are probably familiar with KMS, the Amazon Key Management Service.

KMS is a service which allows API-level access to cryptographic primitives without the expense and complexity of a full-fledged HSM or CloudHSM implementation. There are trade-offs in that the key material does reside on servers rather than tamper-proof devices, but these risks should be acceptable to a wide range of customers based on the care Amazon has put into the product. You should perform your own diligence on whether KMS is appropriate for your environment. If the security profile is not adequate, you should consider a stronger product such as CloudHSM or managing your own HSM solutions.

The goal here is to provide some introductory code on how to perform envelope encrypt a message using the AWS KMS API.

KMS allows you to encrypt messages of up to 4kb in size directly using the encrypt()/decrypt() API. To exceed these limitations, you must use a technique called "envelope encryptio

If you use Amazon AWS for nearly anything, then you are probably familiar with KMS, the Amazon Key Management Service.

KMS is a service which allows API-level access to cryptographic primitives without the expense and complexity of a full-fledged HSM or CloudHSM implementation. There are trade-offs in that the key material does reside on servers rather than tamper-proof devices, but these risks should be acceptable to a wide range of customers based on the care Amazon has put into the product. You should perform your own diligence on whether KMS is appropriate for your environment. If the security profile is not adequate, you should consider a stronger product such as CloudHSM or managing your own HSM solutions.

The goal here is to provide some introductory code on how to perform envelope encrypt a message using the AWS KMS API.

KMS allows you to encrypt messages of up to 4kb in size directly using the encrypt()/decrypt() API. To exceed these limitations, you must use a technique called "envelope encryptio

Git

Global Settings

Related Setup: https://gist.github.com/hofmannsven/6814278
Related Pro Tips: https://ochronus.com/git-tips-from-the-trenches/
Interactive Beginners Tutorial: http://try.github.io/
Git Cheatsheet by GitHub: https://services.github.com/on-demand/downloads/github-git-cheat-sheet/

Reminder

Press minus + shift + s and return to chop/fold long lines!

OS X Screencast to animated GIF

This gist shows how to create a GIF screencast using only free OS X tools: QuickTime, ffmpeg, and gifsicle.

Instructions

To capture the video (filesize: 19MB), using the free "QuickTime Player" application:

	#!/bin/bash

	# (optional) You might need to set your PATH variable at the top here
	# depending on how you run this script
	# PATH=PATH

	# Hosted Zone ID e.g. BJBK35SKMM9OE
	ZONEID="ZONEID"

	# The CNAME you want to update e.g. hello.example.com

	image: docker:latest

	variables:
	REPOSITORY_URL: <AWS ACCOUNT ID>.dkr.ecr.eu-central-1.amazonaws.com/<ECS REPOSITORY NAME>
	REGION: eu-central-1
	TASK_DEFINTION_NAME: <TASK DEFINITION NAME>
	CLUSTER_NAME: <CLUSTER NAME>
	SERVICE_NAME: <SERVICE NAME>

	services:

	#!/bin/bash

	# Assumes that your AWS CLI default profile is set. If not, set the AWS_PROFILE environment variable
	SECLISTS_BUCKET=my-seclists-bucket
	ATHENA_OUTPUT_BUCKET=my-athena-output-bucket

	# Create the bucket (if necessary)
	if [[ -n $(aws s3 ls s3://$SECLISTS_BUCKET 2>&1 \| grep 'does not exist') ]]; then
	aws s3 mb s3://$SECLISTS_BUCKET --region $(aws configure get region)
	fi

	# Count total EBS based storage in AWS
	aws ec2 describe-volumes \| jq "[.Volumes[].Size] \| add"
	# Count total EBS storage with a tag filter
	aws ec2 describe-volumes --filters "Name=tag:Name,Values=CloudEndure Volume qjenc" \| jq "[.Volumes[].Size] \| add"
	# Describe instances concisely
	aws ec2 describe-instances \| jq '[.Reservations \| .[] \| .Instances \| .[] \| {InstanceId: .InstanceId, State: .State, SubnetId: .SubnetId, VpcId: .VpcId, Name: (.Tags[]\|select(.Key=="Name")\|.Value)}]'
	# Wait until $instance_id is running and then immediately stop it again
	aws ec2 wait instance-running --instance-id $instance_id && aws ec2 stop-instances --instance-id $instance_id

	# Get 10th instance in the account

	# Start the old vagrant
	$ vagrant init centos-6.3
	$ vagrant up

	# You should see a message like:
	# [default] The guest additions on this VM do not match the install version of
	# VirtualBox! This may cause things such as forwarded ports, shared
	# folders, and more to not work properly. If any of those things fail on
	# this machine, please update the guest additions and repackage the
	# box.