Skip to content

Instantly share code, notes, and snippets.

View rmlandvreugd's full-sized avatar

R. Mathieu Landvreugd rmlandvreugd

View GitHub Profile
@tashian
tashian / step-ca-launch.sh
Last active July 15, 2024 18:59
Install & launch step-ca in AWS on a variety of Linux distros
#!/bin/bash
CA_NAME="Tiny"
ROOT_KEY_PASSWORD="smallsteplabs"
EMAIL="[email protected]"
if [ -f /etc/os-release ]; then
# freedesktop.org and systemd
. /etc/os-release
OS=$NAME
using namespace System.Management.Automation
using namespace System.Management.Automation.Language
if ($host.Name -eq 'ConsoleHost')
{
Import-Module PSReadLine
}
#Import-Module PSColors
#Import-Module posh-git
Import-Module -Name Terminal-Icons
@ffund
ffund / multicast-router-install.sh
Last active November 24, 2021 10:32
FRR multicast setup
curl -s https://deb.frrouting.org/frr/keys.asc | sudo apt-key add -
echo deb https://deb.frrouting.org/frr $(lsb_release -s -c) frr-stable | sudo tee -a /etc/apt/sources.list.d/frr.list
sudo apt update
sudo apt -y install frr frr-pythontools nload
sudo sed -i 's/pimd=no/pimd=yes/g' /etc/frr/daemons
sudo sed -i 's/ospfd=no/ospfd=yes/g' /etc/frr/daemons
sudo systemctl restart frr.service
@shanselman
shanselman / ohmyposhv3-v2.json
Last active December 3, 2025 06:49
ohmyposhv3-v2
{
"final_space": true,
"console_title": true,
"console_title_style": "folder",
"blocks": [
{
"type": "prompt",
"alignment": "left",
"horizontal_offset": 0,
"vertical_offset": 0,
@danpawlik
danpawlik / kind-c7.sh
Last active November 11, 2021 08:54
Setup Kind k8s cluster on Centos 7 with podman
#!/bin/bash
ADDITIONAL_TOOLS=${ADDITIONAL_TOOLS:-$1}
KIND_VERSION=${KIND_VERSION:-'v0.11.1'}
KINDEST_IMAGE=${KINDEST_IMAGE:-'kindest/node:v1.20.0'}
DOCKER_LOGIN=${DOCKER_LOGIN:-''}
DOCKER_PASSWORD=${DOCKER_PASSWORD:-''}
cat << 'EOF' | sudo tee /etc/yum.repos.d/devel:kubic:libcontainers:stable.repo
[devel_kubic_libcontainers_stable]

Using Sushy Tools with Libvirt

  • Add linux user to libvirt group
sudo usermod -a -G libvirt <your-user>
sudo -y install libvirt-devel gcc python3-devel
  • Login and validate user can execute virsh commands
@tashian
tashian / step-ca.json
Created January 26, 2021 22:00
Keycloak Client Settings for step-ca
{
"clientId": "step-ca",
"rootUrl": "http://127.0.0.1:10000",
"adminUrl": "http://127.0.0.1:10000",
"surrogateAuthRequired": false,
"enabled": true,
"alwaysDisplayInConsole": false,
"clientAuthenticatorType": "client-secret",
"redirectUris": [
"http://127.0.0.1:10000/*"
@machuu
machuu / WSL2_VPN_Workaround_Instructions.md
Last active November 20, 2025 13:51
Workaround for WSL2 network broken on VPN

Overview

Internet connection and DNS routing are broken from WSL2 instances, when some VPNs are active.

The root cause seems to be that WSL2 and the VPN use the same IP address block, and the VPN routing clobbers WSL2's network routing.

This problem is tracked in multiple microsoft/WSL issues including, but not limited to:

@wllmsash
wllmsash / assigning-static-ip-addresses-in-wsl2.md
Last active November 12, 2025 14:48
Assigning Static IP Addresses in WSL2

Assigning Static IP Addresses in WSL2

WSL2 uses Hyper-V for networking. The WSL2 network settings are ephemeral and configured on demand when any WSL2 instance is first started in a Windows session. The configuration is reset on each Windows restart and the IP addresses change each time. The Windows host creates a hidden switch named "WSL" and a network adapter named "WSL" (appears as "vEthernet (WSL)" in the "Network Connections" panel). The Ubuntu instance creates a corresponding network interface named "eth0".

Assigning static IP addresses to the network interfaces on the Windows host or the WSL2 Ubuntu instance enables support for the following scenarios:

BGP

Document outling software architecture for integration of FRR into OVN for OCP and OSP. This is written in markdown for eventually addition as an enhancement proposal.

BGP Architectural Components

As we discuss use cases, we can start to distill them down to the building blocks necessary to achieve them. Some of these may be shared across multiple products.

BGP Speaker

A component capable of publishing routes only, called out separately as this may be simpler than (b) and (c)

BGP Routing Daemon