secfigo

sudo gitlab-runner register \
  --non-interactive \
  --url "https://gitlab.local/" \
  --registration-token "xJWfniGqvSeVyKc3vaQx" \
  --executor "docker" \
  --docker-image ubuntu:16.04 \
  --description "docker-runner" \
  --tag-list "docker,aws" \
  --run-untagged \
  --docker-extra-hosts "gitlab.local:10.0.1.15" \

secfigo

##Working with ansible-vault

I've been using a lot of Ansible lately and while almost everything has been great, finding a clean way to implement ansible-vault wasn't immediately apparent.

What I decided on was the following: put your secret information into a vars file, reference that vars file from your task, and encrypt the whole vars file using ansible-vault encrypt.

Let's use an example: You're writing an Ansible role and want to encrypt the spoiler for the movie Aliens.

secfigo

install PostgreSQL 9 in Mac OSX via Homebrew


Mac OS X Snow Leopard
System Version: Mac OS X 10.6.5
Kernel Version: Darwin 10.5.0


Install notes for PostgreSQL 9.0.1 install using Homebrew:
	sh-3.2# brew install postgresql

secfigo

# Install essential build tools 
sudo apt-get install build-essential zlib1g-dev libpcre3 libpcre3-dev unzip

#Install libs to compile nginx modules
sudo apt-get install libxslt1-dev libssl-dev libgd2-xpm-dev libgeoip-dev libpam-dev

#Install nginx ppa
sudo add-apt-repository ppa:nginx/stable
sudo apt-get update
sudo apt-get install nginx -y

secfigo

# Add this snippet to the top of your playbook. 
# It will install python2 if missing (but checks first so no expensive repeated apt updates)
# [email protected]

- hosts: all
  gather_facts: False
  
  tasks:
  - name: install python 2
    raw: test -e /usr/bin/python || (apt -y update && apt install -y python-minimal)

secfigo

#!/usr/bin/expect

set timeout -1;
spawn {{django_dir}}/venv/bin/python manage.py changepassword {{admin_user}};
expect {
    "Password:" { exp_send "{{admin_pass}}\r" ; exp_continue }
    "Password (again):" { exp_send "{{admin_pass}}\r" ; exp_continue }
    eof
}