Skip to content

Instantly share code, notes, and snippets.

View DavidPesticcio's full-sized avatar
🚀
¯\_(ツ)_/¯

David Pesticcio DavidPesticcio

🚀
¯\_(ツ)_/¯
16 followers · 58 following
View GitHub Profile
@DavidPesticcio
DavidPesticcio / pass.md
Created November 26, 2022 13:54 — forked from abtrout/pass.md
Using password-store with git repository synching

Password-store keeps your passwords (or any other sensitive information) saved in GnuPG encrypted files organized in ~/.password-store. For more information about GPG, consult the GNU Privacy Handbook.

Getting started

To get started, install pass and generate a keypair.

$ brew install pass
$ gpg --gen-key
$ gpg --list-keys
@DavidPesticcio
DavidPesticcio / monokai.md
Created May 10, 2022 21:11 — forked from r-malon/monokai.md
Monokai colors in RGB and HEX format, taken from Sublime Text 3

Monokai Colors in RGB and HEX format

  • Background: (46, 46, 46); #2e2e2e
  • Comments: (121, 121, 121); #797979
  • White: (214, 214, 214); #d6d6d6
  • Yellow: (229, 181, 103); #e5b567
  • Green: (180, 210, 115); #b4d273
  • Orange: (232, 125, 62); #e87d3e
  • Purple: (158, 134, 200); #9e86c8
@DavidPesticcio
DavidPesticcio / create_ssl_using_terraform.md
Created March 13, 2022 09:55 — forked from riveraja/create_ssl_using_terraform.md
Create SSL certificates using Terraform

This post will guide you in creating TLS keys for Vault with Terraform using terraform-google-vault private-tls-cert submodule [https://registry.terraform.io/modules/hashicorp/vault/google/0.0.4/submodules/private-tls-cert].

We will need to download Hashicorp Terraform tool from https://www.terraform.io/downloads.html and then unzip the compressed file:

# wget https://releases.hashicorp.com/terraform/0.11.7/terraform_0.11.7_linux_amd64.zip
--2018-06-18 12:19:33--  https://releases.hashicorp.com/terraform/0.11.7/terraform_0.11.7_linux_amd64.zip
Resolving releases.hashicorp.com (releases.hashicorp.com)... 151.101.1.183, 151.101.65.183, 151.101.129.183, ...
Connecting to releases.hashicorp.com (releases.hashicorp.com)|151.101.1.183|:443... connected.
HTTP request sent, awaiting response... 200 OK
@DavidPesticcio
DavidPesticcio / README.md
Created February 11, 2022 20:19 — forked from rowleyaj/README.md
Terraform S3 Backend

Testing the S3 backend + DynamoDB locking

  1. Clone this gist and change directory to it
  2. Rename run-2nd.tf to an alternative file ending to prevent it being run.
  3. terraform init
  4. Normally you would plan and save to a file but for this example we're going to just apply directly terraform apply
  5. Rename run-2nd.tf back to it's original name
  6. The backend has changed so requires a new terraform init
  7. terraform apply
@DavidPesticcio
DavidPesticcio / jq-cheetsheet.md
Created January 19, 2022 02:16 — forked from olih/jq-cheetsheet.md
jq Cheet Sheet

Processing JSON using jq

jq is useful to slice, filter, map and transform structured json data.

Installing jq

On Mac OS

brew install jq

@DavidPesticcio
DavidPesticcio / learn.lua
Created September 21, 2021 18:16 — forked from tylerneylon/learn.lua
Learn Lua quickly with this short yet comprehensive and friendly script. It's written as both an introduction and a quick reference. It's also a valid Lua script so you can verify that the code does what it says, and learn more by modifying and running this script in your Lua interpreter.
-- Two dashes start a one-line comment.
--[[
Adding two ['s and ]'s makes it a
multi-line comment.
--]]
----------------------------------------------------
-- 1. Variables and flow control.
----------------------------------------------------
@DavidPesticcio
DavidPesticcio / intel_x520_patcher.py
Created September 1, 2021 18:10 — forked from ixs/intel_x520_patcher.py
Intel x520 EEPROM Patcher allows to unlock the x520 network card to work with non-intel branded SFP modules.
#!/usr/bin/env python3
#
# Simple Intel x520 EEPROM patcher
# Modifies the EEPROM to unlock the card for non-intel branded SFP modules.
#
# Copyright 2020 Andreas Thienemann <andreas@bawue.net>
#
# Licensed under the GPLv3
#
# Based on research described at https://forums.servethehome.com/index.php?threads/patching-intel-x520-eeprom-to-unlock-all-sfp-transceivers.24634/
@DavidPesticcio
DavidPesticcio / gnupg_scdaemon.md
Created August 28, 2021 13:32 — forked from artizirk/gnupg_scdaemon.md
OpenPGP SSH access with Yubikey and GnuPG

OpenPGP SSH access with Yubikey and GnuPG

Yubikey, Smart Cards, OpenSC and GnuPG are pain in the ass to get working. Those snippets here sould help alleviate pain.

Yubikey Config under Ubuntu

To reset and disable not used modes on Yubikey you need the ykman program

You can install it using those commands




  


  




    


          
    

      

        
        

          

              @DavidPesticcio
          

          

            
                DavidPesticcio
                / README.md
            
            

              Created
              August 28, 2021 12:05
                — forked from paolocarrasco/README.md
            

              
                How to understand the `gpg failed to sign the data` problem
              
          

        

      

        

  

      

    
Problem


You have installed GPG, then tried to commit and suddenly you see this error message after it:


error: gpg failed to sign the data
fatal: failed to write commit object



Debug



  


  




    


          
    

      

        
        

          

              @DavidPesticcio
          

          

            
                DavidPesticcio
                / README.md
            
            

              Created
              August 7, 2021 15:44
                — forked from yorickdowne/README.md
            

              
                Ubuntu Desktop 20.04 with mirrored ZFS boot drive
              
          

        

      

        

  

      

    
Overview


Ubuntu Desktop 20.04 supports a single ZFS boot drive out of the box. I wanted a ZFS mirror, without going through an entirely manual setup of Ubuntu as described by OpenZFS


This adds a mirror to an existing Ubuntu ZFS boot drive after the fact.


ZFS requires native encryption to be added at pool / dataset creation. Ubuntu 21.04 supports this during installation. Whether these instructions are suitable for mirroring such a setup has not been tested. For Ubuntu 20.04, these instructions are not suitable for creating an encrypted ZFS boot disk, please use the full instructions linked above for that. You can, however, add an encrypted dataset after the fact: You could encrypt just the portion of your file system that holds secrets.


Note: If your use case is running docker instances, and not a full-fledged Ubuntu install, then take a look at TrueNAS SCALE