mike-weiner

#!/bin/bash

# ------------------------------------------------------------------------------------------------------------------
# jots
#
# A tool to quickly create a new Markdown file in a given directory and open it with TextMate.
# Jots will be created with the naming scheme: yyyymmdd-<name>.md
#
# This script was inspired by https://github.com/tobi/try.
#

mike-weiner

# Optional: Delete Existing Registry Credential
kubectl delete secrets -n <NAMESPACE> <SECRET-NAME>

# Create Docker Config Secret
kubectl create secret generic -n <NAMESPACE> <SECRET-NAME> \
  --type=kubernetes.io/dockerconfigjson \
  --from-file=.dockerconfigjson=/path/to/config.json
 
# /path/to/config.json should be in the format shown below.
# [REDACTED] should be your base64 encoded credentials.

mike-weiner

# This snippet is used to do a rolling restart on all Kubernetes
# deployments in a namespace.
# Replace `<NAMESPACE>` with your desired namespace.

NS=<NAMESPACE>
kubectl get deployments -n "$NS" -o name | grep -v "<EXCLUDE-THIS-DEPLOYMENT>" | while read -r d; do
  kubectl rollout restart -n "$NS" "$d"
  sleep 0.1
done

mike-weiner

Validate TLS Server Certificate and Key Pair

This command starts a simple TLS/SSL server using OpenSSL.

openssl s_server -key server.key -cert server.crt -accept 8443

If the command runs successfully without errors, it indicates that the server key and certificate match and are valid. You can test the secure connection using:

mike-weiner

// Replace `<server-ip>` with your real endpoint.
// Use `go run ssh-proxy.go` for a healthy proxy.
// Use `go run ssh-proxy.go --broken` for a proxy that closes the connection.

package main

import (
	"flag"
	"io"
	"log"

mike-weiner

export TOKEN=$(ibmcloud iam oauth-tokens | awk '{print $4}')

mike-weiner

echo -n "<YOUR-CONTENT-TO-ENCODE>" | base64 -b 0

mike-weiner

package main

import (
	"context"
	"fmt"
	"net"
	"time"
)

func main() {

mike-weiner

#!/bin/bash

SLACK_CHANNEL="automation"
SLACK_URL="https://slack.com/api/chat.postMessage"
AS_USER=true

slackMsgHeaderBlock=$(
jq -n '{
  type: "rich_text",
  elements: [

mike-weiner

Basic Linux Server Hardening

This document is meant to serve as a basic guide for hardening a Linux server.

Change Default Port Used by SSH

1. sudo nano /etc/ssh/sshd_config
2. Uncomment #Port 22 and change it to Port <SSH_PORT>. (Replace <SSH_PORT> with your desired port to use for SSH connectivity.)
3. sudo systemctl restart ssh
4. reboot