samrose

vagrant box add gusztavvargadr/windows2012r2se-sql2014de-iis

security and hardening options for systemd service units

A common and reliable pattern in service unit files is thus:

NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict

The Pine64 firmware consists of four parts:

The on-chip boot ROM (BROM), which cannot be changed and does the very first steps in loading code. It is part of the A64 SoC and thus not included here.
A secondary program loader (SPL): Its main task is to initialize the DRAM and load the remaining firmware parts. Due to BROM limitations the SPL is limited in size to 32K. The SPL can be a part of U-Boot, but at the moment we lack free source for the DRAM initialization. The alternative is to use Allwinner's boot0, which is a closed source, but redistributable blob serving the same purpose.
An EL3 runtime firmware. The task of this code is to provide runtime services like PSCI. It stays resident during the whole time and can be called from an OS like Linux to enable or disable secondary cores or request other services. It also takes care of low level CPU initialization and some errata handling. We use a version of ARM Trusted Firmware, based on the official 1.0 release from

	{
	pkgs ? (
	let
	pkgs = import <nixpkgs>;
	pkgs_ = (pkgs {});
	rustOverlay = (pkgs_.fetchFromGitHub {
	owner = "mozilla";
	repo = "nixpkgs-mozilla";
	rev = "1608d31f7e5b2415fb80b5d76f97c009507bc45f";
	sha256 = "0mznf82k7bxpjyvigxvvwpmi6gvg3b30l58z36x192q2xxv47v1k";

	super: self:

	let
	rustOverlayRepo = self.fetchFromGitHub {
	owner = "mozilla";
	repo = "nixpkgs-mozilla";
	rev = "90d41cd5dd6c31c7bfaaab68dd6f00bae596d742";
	sha256 = "0cpv969mgv2v8fk6l9s24xq1qphwsvzbhf8fq4v6bkkwssm0kzn6";
	};
	rustOverlay = import "${rustOverlayRepo}/rust-overlay.nix" self super;

	#!/bin/bash

	# This script will automatically set up a single node Flynn Cluster on your linux box
	# Fresh Flynn install with domain provided by the xip.io service
	# Tested with Base Image: Ubuntu 16.04 x64 @ DigitalOcean droplet
	# @date 11 May 2017
	# Original @author Edu Wass (eduwass at gmail com)


	echo '---- START SETUP ----'

	with import <nixpkgs> {};

	stdenv.mkDerivation rec {
	name = "env";
	env = buildEnv { name = name; paths = buildInputs; };
	buildInputs = [
	yarn
	nodejs-6_x
	elixir
	postgresql96

	import base64
	import hmac
	import hashlib
	from urllib import parse

	from django.contrib.auth.decorators import login_required
	from django.http import HttpResponseBadRequest, HttpResponseRedirect
	from django.conf import settings

	@login_required


	FROM ubuntu:16.04
	# LTS
	MAINTAINER "Paolo D'Onorio De Meo"

	# Preparation
	RUN apt-get update -qq && apt-get install -y \
	## normal base
	wget git vim expect lsof sudo \
	## fix adding irods to source list