Richard Hillmann project0

Site Reliability Engineering Lead @ flowers-software

project0 / reaction.html

Last active February 2, 2020 18:33

Get random picture from tumblr blog like devopsreactions.tumblr.com

	<html>
	<head>
	<title>DevOps Reaction</title>
	<style type="text/css">
	body { background-color:#000; color:#fff }
	h1 { font-size:35pt }
	</style>
	<script src="http://code.jquery.com/jquery-2.2.0.min.js"></script>
	<script>

project0 / displaylink error.log

Created October 14, 2016 08:14

	Process 9965 (DisplayLinkMana) of user 0 dumped core.

	Stack trace of thread 10069:
	#0 0x00007f07b9c5d04f raise (libc.so.6)
	#1 0x00007f07b9c5e56a abort (libc.so.6)
	#2 0x000000000041d182 n/a (/usr/lib/displaylink/DisplayLinkManager (deleted))
	#3 0x00007f07ba78f276 _ZN10__cxxabiv111__terminateEPFvvE (libstdc++.so.6)
	#4 0x00007f07ba78f2c1 _ZSt9terminatev (libstdc++.so.6)
	#5 0x00007f07ba78f4d8 __cxa_throw (libstdc++.so.6)
	#6 0x00000

project0 / systemd [email protected]

Created August 23, 2017 15:05

	# /etc/systemd/system/[email protected]
	# systemctl daemon-reload
	# systemctl start loop@sdxx
	# systemctl enable loop@sdxx
	[Unit]
	Description=Mount journal partition as loop2
	Before=ceph-osd.target
	[Service]
	Type=oneshot
	ExecStart=/sbin/losetup /dev/loop2 /dev/%i

project0 / update_puppet_ca.sh

Last active July 15, 2022 01:42

How to replace/update the puppet ca on expire

	#!/bin/bash

	#### START CUSTOM CONFIG
	##

	# root path of all certs stuff. May be differ from default
	ssl_path=/etc/puppet/ssl

	# how many days should the certs are valid
	ssl_days=3650

project0 / catalog.pp

Last active February 15, 2018 21:33

draft puppet bareos define catalog.pp

	define bareos::director::catalog (
	$ensure = present,
	$db_address = undef,
	$db_driver = undef,
	$db_name = undef,
	$db_password = undef,
	$db_port = undef,
	$db_socket = undef,
	$db_user = undef,
	$description = undef,

project0 / ad_password_reset.go

Last active May 3, 2025 03:38

Go AD password reset

	package passwordresetservice

	import (
	"crypto/tls"
	"fmt"

	ldap "github.com/go-ldap/ldap"
	"golang.org/x/text/encoding/unicode"
	ber "gopkg.in/asn1-ber.v1"
	)

project0 / req.conf

Created February 2, 2020 18:03

openssl create certificate req

	[req]
	distinguished_name = req_distinguished_name
	req_extensions = v3_req
	prompt = no
	[req_distinguished_name]
	C = DE
	ST = BY
	L = Munich
	O = Corp
	OU = IT

project0 / copy-ec2-to-ebs-tags.sh

Created July 10, 2020 12:57

AWS CLI hacks

	AWS_INSTANCE_ID=$(curl http://169.254.169.254/latest/meta-data/instance-id)
	ROOT_VOLUME_IDS=$(aws ec2 describe-instances --region ${AWS::Region} --instance-id $AWS_INSTANCE_ID --output text --query Reservations[0].Instances[0].BlockDeviceMappings[0].Ebs.VolumeId)
	TAG_LIST=$(aws ec2 describe-instances --region ${AWS::Region} --instance-id $AWS_INSTANCE_ID --output text --query "Reservations[0].Instances[0].Tags" \| grep -v "aws:" \| awk '{split($0,a,"\t"); printf "Key=\"%s\",Value=\"%s\" ", a[1], a[2]}')
	aws ec2 create-tags --resources $ROOT_VOLUME_IDS --region ${AWS::Region} --tags $TAG_LIST

project0 / cf-s2s-vpn.yaml

Created August 10, 2020 07:49

Cloudformation template to create a site to site ipsec VPN

	AWSTemplateFormatVersion: '2010-09-09'
	Description: Site to Site VPN
	Parameters:
	RemoteIP:
	Description: Remote IP for the ipsec connection
	Type: String

	RemoteCIDR:
	Description: The destination network CIDR
	Type: String

project0 / kms.sh

Created November 2, 2020 17:34

AWS KMS encryption/decryption

	#!/bin/bash

	function awskmsencrypt() {
	key="$1"
	text="$2"
	aws kms encrypt --key-id "$key" --plaintext fileb://<(echo "$text") --output text --query CiphertextBlob
	}

	function awskmsdecrypt() {
	crypt="$1" #base64