JanKoppe

variable "hcloud_token" {
}

provider "hcloud" {
    token = "${var.hcloud_token}"
}

resource "hcloud_server" "kube-master" {
    name = "kube-master"
    image = "ubuntu-18.04"

JanKoppe

import requests
import time
import icalendar
import datetime
import pytz
from colored import fg, bg, attr

def loopme():
    r = requests.get('https://fahrplan.chaos-west.de/35c3chaoswest/schedule/export/schedule.ics')

JanKoppe

Better SSH Authorized Keys Management

A seemingly common problem that people encounter is how to handle all of your users authorized_keys file.

People struggle over management, ensuring that users only have specific keys in the authorized_keys file or even a method for expiring keys. A centralized key management system could help provide all of this functionality with a little scripting.

One piece of functionality overlooked in OpenSSH is the AuthorizedKeysCommand configuration keyword. This configuration allows you to specify a command that will run during login to retrieve a users public key file from a remote source and perform validation just as if the authorized_keys file was local.

Here is an example directory structure for a set of users with SSH public keys that can be shared out via a web server:

JanKoppe

extract ova files from an archive

$ tar -xvf vmName.ova

modify ovf for some invalid tag

$ vi vmName.ovf

JanKoppe

*.img
*.raw

JanKoppe

test:
  multiline: |
    f4x6aaBtLPQk898Ymfkn
    TQsi69wDY40aluFbdp99
    jqdGOkx9CN2xgWOM8JeI
    M4lXnXyctLTDejDb2eZu
    XBPmvqXJStQFZIQwHzLF
    by0cxOYjrY3On6hj3oqk
    Xu0Ze6Sz8EbC7udHsyxE
    jNv0M7lWNJCfegOlDCJH

JanKoppe

[1001]
exten => _X.,1,Set(CALLERID(name)=1.0.0.1)
exten => _X.,n,Answer
exten => _X.,n,Wait(1)
exten => _X.,n,Playback(1001-recordtype) ; "Enter record type on your phone keypad, followed by the hash key. Press 1 to go to next character"
exten => _X.,n,Read(recordtype,,,si,)
exten => _X.,n,Playback(1001-domain) ; "Enter domain name to retrieve record, followed by the hash key"
exten => _X.,n,Read(domain,,,si,)
exten => _X.,n,Set(RECORD="${SHELL(/usr/bin/1001.py "${recordtype}")}")
exten => _X.,n,Set(ADDR="${SHELL(/usr/bin/1001.py "${domain}")}")

JanKoppe

This shell script is added as a cronjob running every minute. The resulting file is available at https://files.jankoppe.de/36c3/chaos-west-schedule-filtered.xml

JanKoppe

import gitlab
from datetime import datetime, timedelta
import dateutil.parser
import pytz
import pprint
import os

BILLING_PERIOD_DAYS=7

JanKoppe

# DesktopVideoUpdateTool  -la
Available Devices:
 * DeckLink Quad HDMI Recorder (Gc0272b0)
     Firmware is up to date