Skip to content

Instantly share code, notes, and snippets.

View mattray's full-sized avatar
🇦🇺
in Sydney

Matt Ray mattray

🇦🇺
in Sydney
259 followers · 0 following
View GitHub Profile
@mattray
mattray / fake-creds.json
Last active January 31, 2024 00:31
Example OpenCost CloudCost secrets file
{
"aws": {
"athena": [
{
"bucket": "s3://aws-athena-query-results-eks-integration-test",
"region": "us-west-1",
"database": "athenacurcfn_eks_integration_test",
"table": "eks_integration_test",
"workgroup": "",
"account": "123455854685",
@mattray
mattray / *shell*.txt
Created June 10, 2020 08:33
~/ws/home-repo/meta-user on :master [Δ?] via ℜ:v2.7.1
$ knife client create upload1 -f upload1.pem --key meta-user.pem --user meta-user --server-url "https://ndnd/organizations/test1" --disable-editing -c no_ssl.rb
Created client[upload1]
~/ws/home-repo/meta-user on :master [Δ?] via ℜ:v2.7.1
$ knife acl add client upload1 containers cookbooks create --key meta-user.pem --user meta-user --server-url "https://ndnd/organizations/test1" --disable-editing -c no_ssl.rb
Adding 'upload1' to 'create' ACE of 'cookbooks'
~/ws/home-repo/meta-user on :master [Δ?] via ℜ:v2.7.1
$ knife cookbook upload managed_automate -o cookbooks --key upload1.pem --user upload1 --server-url "https://ndnd/organizations/test1" -c no_ssl.rb
Uploading managed_automate [0.12.0]
ERROR: You authenticated successfully to https://ndnd/organizations/test1 as upload1 but you are not authorized for this action.
@mattray
mattray / gist:43bebc08236ed3835628410cbf617fff
Created September 27, 2019 23:56
Building Chef 15.3 on Debian 10
D | 2019-09-28T09:49:47+10:00 | gcc -I/opt/omnibus-toolchain/embedded/include -O2 -Wl,--export-dynamic -Wl,-rpath,/opt/omnibus-toolchain/embedded/lib -L/opt/omnibus-toolchain/embedded/lib -o make ar.o arscan.o commands.o default.o dir.o expand.o file.o function.o getopt.o getopt1.o guile.o implicit.o job.o load.o loadapi.o main.o misc.o posixos.o output.o read.o remake.o rule.o signame.o strcache.o variable.o version.o vpath.o hash.o remote-stub.o glob/libglob.a -ldl
D | 2019-09-28T09:49:47+10:00 | /usr/bin/ld: glob/libglob.a(glob.o): in function `glob_in_dir':
D | 2019-09-28T09:49:47+10:00 | glob.c:(.text+0x2be): undefined reference to `__alloca'
D | 2019-09-28T09:49:47+10:00 | /usr/bin/ld: glob.c:(.text+0x4a9): undefined reference to `__alloca'
D | 2019-09-28T09:49:47+10:00 | /usr/bin/ld: glob.c:(.text+0x570): undefined reference to `__alloca'
D | 20
@mattray
mattray / FileSize.rb
Created June 29, 2019 03:48
File size Foodcritic rule
# check the contents of the directory to see if any of the file are above 1MB
rule "FileSize>1MB", "Contents of files/ is larger than 1MB" do
tags %w{files}
cookbook do |path|
files = File.join(path, "files")
values = []
Dir.foreach(files) do |file|
next if ['.', '..'].member?(file)
size = File.size(File.join(path,'files',file))
if size > 1024*1024 # 1 megabyte
@mattray
mattray / scratch.md
Created December 5, 2018 04:02

[root@default-centos-7 ~]# /tmp/test/chef-automate version CLI version: 20181122140654 Server version: 20181112131523 [root@default-centos-7 ~]# /tmp/test/chef-automate upgrade run --airgap-bundle /tmp/test/automate-20181112131523.aib

Installing airgap install bundle Chef Automate up-to-date [root@default-centos-7 ~]# /tmp/test/chef-automate version CLI version: 20181122140654 Server version: 20181112131523

@mattray
mattray / gist:9a5d7cfd44b352e01a42082dd9da06d3
Created December 5, 2018 01:14
omnibus-toolchain rpi build output
[Builder: nokogiri] I | 2018-12-05T09:17:22+11:00 | gem `install nokogiri -- --use-system-libraries --with-xml2-lib=/opt/omnibus-toolchain/embedded/lib --with-xml2-include=/opt/omnibus-toolchain/embedded/include/libxml2 --with-xslt-lib=/opt/omnibus-toolchain/embedded/lib --with-xslt-include=/opt/omnibus-toolchain/embedded/include/libxslt --without-iconv --with-zlib-dir=/opt/omnibus-toolchain/embedded': 177.1439s
[Builder: nokogiri] I | 2018-12-05T09:17:22+11:00 | delete `/opt/omnibus-toolchain/embedded/lib/ruby/gems/2.1.0/gems/mini_portile2-2.0.0/test': 0.0428s
[Builder: nokogiri] I | 2018-12-05T09:17:22+11:00 | Build nokogiri: 177.2009s
[Builder: nokogiri] I | 2018-12-05T09:17:22+11:00 | Finished build
[GitCache: nokogiri] I | 2018-12-05T09:17:23+11:00 | Performing incremental cache
[GitCache: nokogiri] I | 2018-12-05T09:17:23+11:00 | Removing git directories
[GitCache: nokogiri] I | 2018-12-05T09:17:23+11:00 | $ git -c core.autocrlf=false -c core.ignorecase=false --git
@mattray
mattray / output.1
Created December 3, 2018 01:00
[CLI] I | 2018-12-01T22:44:57+11:00 | Using config from 'omnibus.rb'
[Software: config_guess] W | 2018-12-01T22:45:03+11:00 | Version master for software config_guess was not parseable. Comparison methods such as #satisfies? will not be available for this version.
Building omnibus-toolchain 1.1.93+20181201114457...
[Software: preparation] I | 2018-12-01T22:45:05+11:00 | Resolving manifest entry for preparation
[NullFetcher: preparation] I | 2018-12-01T22:45:05+11:00 | Fetching `preparation' (nothing to fetch)
[Software: config_guess] I | 2018-12-01T22:45:05+11:00 | Resolving manifest entry for config_guess
[Software: config_guess] W | 2018-12-01T22:45:05+11:00 | Version master for software config_guess was not parseable. Comparison methods such as #satisfies? will not be available for this version.
[Software: config_guess] W | 2018-12-01T22:45:05+11:00 | Version master for software config_guess was not parseable. Comparison methods such as #satisfies? will not be available for this v
@mattray
mattray / controls.rb
Created September 14, 2018 05:03
begin
awsclient = Aws::CloudFormation::Client.new()
cfn = awsclient.list_stack_resources({ stack_name: "mattray-Fri-Chef-Demo-20180914T024057Z" }).to_hash
resources = {}
cfn[:stack_resource_summaries].each { |r| resources[r[:logical_resource_id]] = r[:physical_resource_id] }
rescue Exception => e
raise(e) unless @conf['profile'].check_mode
end
@mattray
mattray / README.md
Created September 14, 2018 03:02

Description

Build Status Master

InSpec-Iggy (InSpec Generate -> "IG" -> "Iggy") is an InSpec plugin for generating compliance controls and profiles from Terraform tfstate files and AWS CloudFormation templates. Iggy generates InSpec controls by mapping Terraform and CloudFormation resources to InSpec resources and exports a profile that may be used from the inspec CLI or uploaded to Chef Automate.

inspec terraform generate -n myprofile
inspec exec myprofile -t aws://us-west-2
inspec compliance upload myprofile
@mattray
mattray / scratch.rb
Created August 20, 2018 02:58
repodir = '/etc/yum.repos.d/'
# remove all undesired (unspecified) repos
Dir[repodir + '*.repo'].each do |file_name|
repo_name = File.basename(file_name, '.repo')
unless node['software']['repo'].values.member?(repo_name)
yum_repository repo_name do
action :delete
end
end