For excessively paranoid client authentication.
Updated Apr 5 2019:
because this is a gist from 2011 that people stumble into and maybe you should AES instead of 3DES in the year of our lord 2019.
some other notes:
Long story short, ansible does not work on a Windows control machine, so you basically have to:
ansible --connection=local ... in the target vmBelow are Vagrantfile examples for both approaches
| # Mount image desintion to /home/partimag as desired | |
| # No wizards from here. Use the Clonezilla command line | |
| # Abort script on any failures, print out commands for debugging | |
| set -e | |
| set -x | |
| # Partition to clone | |
| [ -n "$VG_NAME" ] || VG_NAME="systemvg" | |
| [ -n "$LV_NAME" ] || LV_NAME="rootlv" |
| wget -c --no-cookies --no-check-certificate --header "Cookie: oraclelicense=accept-securebackup-cookie" https://download.oracle.com/otn-pub/java/jdk/12.0.2+10/e482c34c86bd4bf8b56c0b35558996b9/jdk-12.0.2_linux-x64_bin.tar.gz |
vsix-bookmarklet, create a bookmark in your browser.
*.vsix.
| # Generate a unique private key (KEY) | |
| sudo openssl genrsa -out mydomain.key 2048 | |
| # Generating a Certificate Signing Request (CSR) | |
| sudo openssl req -new -key mydomain.key -out mydomain.csr | |
| # Creating a Self-Signed Certificate (CRT) | |
| openssl x509 -req -days 365 -in mydomain.csr -signkey mydomain.key -out mydomain.crt | |
| # Append KEY and CRT to mydomain.pem |
openssl genrsa -out self-ssl.key
openssl req -new -key self-ssl.key -out self-ssl.csr -config csr.conf
openssl x509 -req -days 365 -in self-ssl.csr -signkey self-ssl.key -out self-ssl.crt -extensions req_ext -extfile csr.conf
Sign from Root CA:
openssl x509 -req -days 365 -extensions req_ext -extfile csr.conf -CA RootCA.crt -CAkey RootCA.key -in self-ssl.csr -out self-ssl.crt
| :do { | |
| :do { | |
| /file remove "/ipsum.rsc"; | |
| /file remove "/subnet.rsc"; | |
| } on-error={} | |
| :put "Downloading ipsum.rsc..."; | |
| :do { | |
| /tool fetch url="https://antifilter.download/list/ipsum.rsc" dst-path="/ipsum.rsc" | |
| } on-error={ |
| alias d='docker run --rm --init -ti \ | |
| -m "500M" --memory-swap "500M" \ | |
| -u node -w /home/node/app \ | |
| -e NPM_CONFIG_LOGLEVEL=info \ | |
| -e NODE_ENV=production \ | |
| -e PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/home/node/.yarn/bin \ | |
| -v "$PWD":/home/node/app \ | |
| -v node_volume:/home/node \ | |
| node:carbon-alpine sh' |