ageis

security and hardening options for systemd service units

A common and reliable pattern in service unit files is thus:

NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict

rragundez

#!/bin/bash
set -e

usage="$(basename "$0") [-h] [-i PROJECT] [-v VM] [-p PYTHON] [-d NOTEBOOKS]
Make a user provide SSH key and jupyter notebooks (in roles/bootstrap/files/notebooks) to each user listed in var/common.yml
where:
    -h  show this help text
    -i  google cloud project id
    -v  name of instance/virtual machine
    -p  python path

rms1000watt

# Courtesy of: https://stackoverflow.com/a/11974399

{%- for item in items %}
[
"{{item}}"{{ "," if not loop.last }}
]
{%- endfor %}