Sergio Botero sergiobuj

Methods of Signing Git Commits on MacOS

Last updated March 13, 2024

This Gist explains how to sign commits using gpg in a step-by-step fashion. Previously, krypt.co was heavily mentioned, but I've only recently learned they were acquired by Akamai and no longer update their previous free products. Those mentions have been removed.

Additionally, 1Password now supports signing Git commits with SSH keys and makes it pretty easy-plus you can easily configure Git Tower to use it for both signing and ssh.

For using a GUI-based GIT tool such as Tower or Github Desktop, follow the steps here for signing your commits with GPG.

How to recover lost Python source code if it's still resident in-memory

I screwed up using git ("git checkout --" on the wrong file) and managed to delete the code I had just written... but it was still running in a process in a docker container. Here's how I got it back, using https://pypi.python.org/pypi/pyrasite/ and https://pypi.python.org/pypi/uncompyle6

Attach a shell to the docker container

Install GDB (needed by pyrasite)

apt-get update && apt-get install gdb

RDS Production Termination Protection

Create a policy like this, substituting your AWS account number, then attach it to all groups and roles. It will prevent deletion of RDS instances containing the string "prod" in their name.

Note: This is intended to prevent accidental deletion, and is easily sidestepped.

A Few Useful Things to Know about Machine Learning

The paper presents some key lessons and "folk wisdom" that machine learning researchers and practitioners have learnt from experience and which are hard to find in textbooks.

1. Learning = Representation + Evaluation + Optimization

All machine learning algorithms have three components:

Representation for a learner is the set if classifiers/functions that can be possibly learnt. This set is called hypothesis space. If a function is not in hypothesis space, it can not be learnt.
Evaluation function tells how good the machine learning model is.
Optimisation is the method to search for the most optimal learning model.

	# Credit: pwnsdx https://gist.github.com/pwnsdx/1217727ca57de2dd2a372afdd7a0fc21; nebular https://gist.github.com/pwnsdx/d87b034c4c0210b988040ad2f85a68d3#gistcomment-3019082

	# IMPORTANT: Don't forget to logout from your Apple ID in the settings before running it!
	# IMPORTANT: You will need to disable SIP: Reboot to Recovery, in Terminal csrutil disable

	# WARNING: It might disable things that you may not like. Please double check the services in the TODISABLE vars.

	# Get active services: launchctl list \| grep -v "\-\t0"
	# Find a service: grep -lR [service] /System/Library/Launch* /Library/Launch* ~/Library/LaunchAgents
	# List disabled services: launchctl print-disabled user/501 \|grep true & launchctl print-disabled system \|grep true

	//def hi = hudson.model.Hudson.instance
	// Just use Jenkins.instance, it's the same thing

	def ji = Jenkins.instance

	def param_name = "GERRIT_REFSPEC"
	def job_pattern = /.*/ //Job Name pattern, used to select jobs we want to select
	def param_value_filter = /.*/ // Pattern to select values of

	def matchedJobs = ji.items.findAll { job ->

	#!/usr/bin/env python

	from __future__ import print_function

	try:
	import mock
	except ImportError:
	from unittest import mock
	import unittest

	# In order for gpg to find gpg-agent, gpg-agent must be running, and there must be an env
	# variable pointing GPG to the gpg-agent socket. This little script, which must be sourced
	# in your shell's init script (ie, .bash_profile, .zshrc, whatever), will either start
	# gpg-agent or set up the GPG_AGENT_INFO variable if it's already running.

	# Add the following to your shell init to set up gpg-agent automatically for every shell
	if [ -f ~/.gnupg/.gpg-agent-info ] && [ -n "$(pgrep gpg-agent)" ]; then
	source ~/.gnupg/.gpg-agent-info
	export GPG_AGENT_INFO
	else

	#!/bin/bash

	### Google Domains provides an API to update a DNS "Syntheitc record". This script
	### updates a record with the script-runner's public IP, as resolved using a DNS
	### lookup.
	###
	### Google Dynamic DNS: https://support.google.com/domains/answer/6147083
	### Synthetic Records: https://support.google.com/domains/answer/6069273

	USERNAME=""

	default['sshd']['sshd_config']['AuthenticationMethods'] = 'publickey,keyboard-interactive:pam'
	default['sshd']['sshd_config']['ChallengeResponseAuthentication'] = 'yes'
	default['sshd']['sshd_config']['PasswordAuthentication'] = 'no'