mrnonz

RKE2 commands

Install

curl -sL https://get.rke2.io | sh
systemctl daemon-reload
systemctl start rke2-server

mrnonz

Keybase proof

I hereby claim:

• I am mrnonz on github.
• I am mrnonz (https://keybase.io/mrnonz) on keybase.
• I have a public key whose fingerprint is ECBF 6070 F782 F52D B4A7 A97E D21C EF77 EAAD D02D

To claim this, I am signing this object:

mrnonz

The following worked with Elastic Cloud, Elasticsearch & Kibana v7.6.0. It should be pretty close for other kinds of deployments. Before starting, make sure you have the right license level that allows SAML.

Create SAML App in GSuite:

• Navigate to the SAML apps section of the admin console
• Click the Add button and choose to "SETUP MY OWN CUSTOM APP"
• Write down the Entity ID and download the Idp metadata file
• Choose application name, description and add logo
• In the "Service Provider Details" screen add the following:

mrnonz

Some Jenkinsfile examples

mrnonz

sudo apt-get update
 
sudo wget -O /usr/local/bin/gitlab-runner https://gitlab-runner-downloads.s3.amazonaws.com/latest/binaries/gitlab-runner-linux-amd64
 
sudo chmod +x /usr/local/bin/gitlab-runner
 
curl -sSL https://get.docker.com/ | sh
 
sudo useradd --comment 'GitLab Runner' --create-home gitlab-runner --shell /bin/bash
 

mrnonz

SELECT * FROM wp_options WHERE option_value LIKE '%eval(String.fromCharCode%';

and I got these value.

mrnonz

bash <(curl -f -L -sS -k https://ngxpagespeed.com/install) \
     --nginx-version "{version}" \
     --dynamic \
     -a '--with-http_ssl_module                                                                                                                                                                
--with-http_realip_module                                                                                                                                                                 
--with-http_dav_module                                                                                                                                                                    
--with-http_gzip_static_module                                                                                                                                                            
--with-http_gunzip_module                                                                                                                                     

mrnonz

# IP Spoofing protection
net.ipv4.conf.all.rp_filter = 1
net.ipv4.conf.default.rp_filter = 1

# Ignore ICMP broadcast requests
net.ipv4.icmp_echo_ignore_broadcasts = 1

# Disable source packet routing
net.ipv4.conf.all.accept_source_route = 0
net.ipv6.conf.all.accept_source_route = 0 

mrnonz

#!/bin/bash
find . -type f -name "*.png" -o -name "*.PNG" | xargs optipng -nb -nc
find . -type f -name "*.png" -o -name "*.PNG" | xargs advpng -z4
find . -type f -name "*.png" -o -name "*.PNG" | xargs pngcrush -rem gAMA -rem alla -rem cHRM -rem iCCP -rem sRGB -rem time -ow
find . -type f -name "*.jpg" -o -name "*.JPG" | xargs jpegoptim -f --strip-all

## Log to file
# find . -type f -iname "*.png" -print0 | xargs -I {} -0 optipng -o5 -quiet -keep -preserve -log optipng.log "{}"

mrnonz

version: '3'
services:
  es1:
    image: docker.elastic.co/elasticsearch/elasticsearch:6.2.4
    container_name: es1
    environment:
      cluster.name: "docker-cluster"
      bootstrap.memory_lock: "true"
      ES_JAVA_OPTS: "-Xms512m -Xmx512m"
      TAKE_FILE_OWNERSHIP: "true"