Skip to content

Instantly share code, notes, and snippets.

@abitrolly
abitrolly / ipsecnotes.md
Last active January 11, 2021 15:03
IPSec
  • IPSec is just an encrypted IP packet
  • Meaning everything after IP header is encrypted
  • Well, there is also AH header between IP header and encrypted contents
  • The AH header specifies how the content is encrypted
  • If AH matches on client and receiver, the packet is passed to decryption
  • What happens when the packet is decrypted depends on packet handler on receiving side

https://libreswan.org/wiki/images/e/e0/Netdev-0x12-ipsec-flow.pdf


@abitrolly
abitrolly / debianotes.md
Last active December 17, 2020 13:14
Debian Packaging

Several files contain instructions for packing a software for Debian. The all should be placed in debian/ subdirectory. If upstream sources already come with debian/ dir, they are said to be debianized or native. If there is no such dir, then it is added by diff (.diff.gz) or a separate archive (.debian.tar.gz).

The source code with debian/ dir should be compressed and pushed to Debian to build.

debian package types

native debian package

  • upstream source comes in .orig.tar.gz
@abitrolly
abitrolly / zipkinnotes.md
Last active November 17, 2020 16:57
Tracing Flask app with Zipkin
@abitrolly
abitrolly / obsnotes.md
Last active January 17, 2021 07:49
Open Build Service Intro
  • OBS organizes everything into Projects.
  • Every user has default project, mine is home:abitrolly.
  • To build a package, you need to select Repository where this package will be stored.
  • Repository is Distribution specific.
  • OBS nows nothing about Distribution, it is just an ordinary top level Project.
  • Repository is identified by Project/type string, like Debian:8.0/standard.
  • Package is just a name inside a Project. It needs files to be built.
  • Use osc checkout to get package files.
@abitrolly
abitrolly / srcview.sh
Last active June 25, 2020 19:21
run sourcegraph on local repo
# port 3434 - src-expose
# port 7080 - sourcegraph main server
# port 3370 - sourcegraph monitoring
podman pod create --name srcview -p 127.0.0.1:3434:3434 -p 127.0.0.1:7080:7080 -p 127.0.0.1:3370:3370
# sync code to default dir with bare repos, and serve bare repos
podman run --pod srcview --name reposync --rm -v "${PWD}:/var/opt/localrepo":Z,ro sourcegraph/src-expose:latest /var/opt/localrepo
mkdir -p /tmp/.sourcegraph/config
mkdir -p /tmp/.sourcegraph/data
Security is not a state. It is a practice, exercise.
The same way your body needs physical exercise to
stay fit and feel great, the same way your online
habits should follow the good security practice and
learning it. You don't need to be a sportsman or
addicted to diets to feel well, and you don't need
to be the hacker or researcher to feel secured.
The security of people at whole is the security of
every human in person.
@abitrolly
abitrolly / datagenerated.md
Created June 1, 2020 09:00
Data, logic into markup in a single file

Fully observable is when optimal decision depends only on immediately sensed information (stateless). Partially observable requires agent to remember previous state.


What scons is going to execute when launched?

How to dump the dependency graph without executing the build process?

@abitrolly
abitrolly / actionsnotes.md
Last active May 19, 2020 05:19
MS owned GitHub