CARBONNEAUX Mathieu mcarbonneaux

CFSSL as an external CA for non-ha kubeadm intialized clusters

Using cfssl to Create an External CA Infrastructure

Install cfssl

# This requires an existing Go environment with GOPATH set
go get -u github.com/cloudflare/cfssl/cmd/...

Note

This tutorial is for Ubuntu & Squid3. Use AWS, Google cloud, Digital Ocean or any services with Ubuntu to follow this tutorial.

Install squid & update

sudo apt-get update
sudo apt-get install squid3
sudo apt-get install apache2-utils

Here's a step by step guide to convert a Virtualbox .ova to a Vagrant box.

List your VMs to find the VM id you want to convert:

$ VBoxManage list vms
"testing" {a3f59eed-b9c5-4a5f-9977-187f8eb8c4d4}

You can now package the .ova VM as Vagrant box:

Here is a work around to automate OCSP stapling on Opnsense with HAproxy plugin.

Hope it helps :)

I created a script based on acme.sh's haproxy deploy hook.

As /tmp is emptied on reboot you need to regenerate ocsp files on startup so I put the script as a startup script: /usr/local/etc/rc.syshook.d/start/99-ocsp (symoblic links in rc.syshook.d don't work).

#!/bin/sh

	databases:
	- logs: 7
	- vms: 9
	- statistics: 20

	connect_line: '127.0.0.1'
	log_file: 'cl_clean_partitions.log'

	#!/bin/bash

	# This assumes that the ~6GB mojave installer is in the /Applications folder.
	# If it's not, just open the App Store, search Mojave, and you can download the installer file from there.

	hdiutil create -o /tmp/mojave.cdr -size 6g -layout SPUD -fs HFS+J
	hdiutil attach /tmp/mojave.cdr.dmg -noverify -mountpoint /Volumes/install_mojave
	sudo /Applications/Install\ macOS\ mojave.app/Contents/Resources/createinstallmedia --volume /Volumes/install_mojave
	mv /tmp/mojave.cdr.dmg ~/Desktop/InstallSystem.dmg
	hdiutil detach /Volumes/Install\ macOS\ mojave

	#define KBUILD_MODNAME "foo"
	#include <uapi/linux/bpf.h>
	#include <linux/bpf.h>
	#include <linux/icmp.h>
	#include <linux/if_ether.h>
	#include <linux/if_vlan.h>
	#include <linux/in.h>
	#include <linux/ip.h>
	#include <linux/tcp.h>
	#include <linux/udp.h>

	NAME TITLE
	abusiveexperiencereport.googleapis.com Abusive Experience Report API
	acceleratedmobilepageurl.googleapis.com Accelerated Mobile Pages (AMP) URL API
	accessapproval.googleapis.com Access Approval API
	accesscontextmanager.googleapis.com Access Context Manager API
	actions.googleapis.com Actions API
	adexchangebuyer-json.googleapis.com Ad Exchange Buyer API
	adexchangebuyer.googleapis.com Ad Exchange Buyer API II
	adexchangeseller.googleapis.com Ad Exchange Seller API
	adexperiencereport.googleapis.com Ad Experience Report API

	{
	"basics": {
	"name": "Mathieu CARBONNEAUX",
	"label": "Infrastructure IT Devops / Solutions Architect",
	"photo": "https://www.ch2o.info/wp-content/uploads/2017/03/photocv-1x1.jpg",
	"picture": "https://www.ch2o.info/wp-content/uploads/2017/03/photocv-1x1.jpg",
	"image": "https://www.ch2o.info/wp-content/uploads/2017/03/photocv-1x1.jpg",
	"website": "https://www.ch2o.info",
	"summary": "Passionate about computers since my youngness, I started programming when i was 12 years old (logo, basic, Z80 assembler, 680x0, C/C++). </br></br>I followed training initially focused on electronics, industrial IT then on management IT (client/server programming, network, system, database and network wriring), which gave me a global vision of computing from hardware to software. </br></br>With more than 27 years (1997) of professional experience, where I alternately had the roles of application developer, database administrator, system engineer, network engineer, security engineer, middleware expert,

	# activate the virtualenv
	source /home/superset/.virtualenvs/superset/bin/activate
	fabmanager reset-password --app superset --username admin --password enteryournewpassword