Skip to content

Instantly share code, notes, and snippets.

View andrewkroh's full-sized avatar

Andrew Kroh andrewkroh

View GitHub Profile
@andrewkroh
andrewkroh / solaris_multicast.sh
Last active December 29, 2015 05:09
Adding a multicast route on Solaris 11
# 172.16.1.2 is the address assigned to interface that should
# route/broadcast the packets.
sudo /usr/sbin/route -n add -interface 224.0/4 -gateway 172.16.1.2
@andrewkroh
andrewkroh / gist:7629198
Created November 24, 2013 16:42
Debugging IGMP on Cisco 3750
sw01#show ip mroute
IP Multicast Routing Table
Flags: D - Dense, S - Sparse, B - Bidir Group, s - SSM Group, C - Connected,
L - Local, P - Pruned, R - RP-bit set, F - Register flag,
T - SPT-bit set, J - Join SPT, M - MSDP created entry,
X - Proxy Join Timer Running, A - Candidate for MSDP Advertisement,
U - URD, I - Received Source Specific Host Report,
Z - Multicast Tunnel, z - MDT-data group sender,
Y - Joined MDT-data group, y - Sending to MDT-data group
V - RD & Vector, v - Vector
@andrewkroh
andrewkroh / gist:10213678
Created April 9, 2014 00:38
Create xterm from Jenkins "Script Console"
// Send xterm to machine from Jenkins:
def myip='192.168.0.2'
def proc = "xterm".execute(["DISPLAY=${myip}:0.0"], new File('/home/jenkins'))
proc.waitFor()
println "return code: ${proc.exitValue()}"
println "stderr: ${proc.err.text}"
println "stdout: ${proc.in.text}"
@andrewkroh
andrewkroh / gist:10339105
Last active August 29, 2015 13:58
How can we regularly update the system without internet connection?
https://access.redhat.com/site/solutions/29269
# register the system that is connected to RHN, directly or using a http proxy:
rhn_register --nox --proxy=1.2.3.4
# or use
subscription-manager register --user --password --auto-allow ?
# sync updates from channels
reposync -p /somedir --repoid=rhel-x86_64-server-5 -l
@andrewkroh
andrewkroh / rpmrebuild.sh
Last active December 9, 2020 22:26
Changing RPM Version and Release with rpmrebuild
yum install rpmrebuild -y
mkdir output
# If your RPMs do not contain all of the tags defined in this preamble
# then use the --change-spec-preamble flag to modify the preamble.
cat /usr/lib/rpmrebuild/rpmrebuild_rpmqf.src
# Change the RPM's release number to 2. Ignore Distribution and URL.
rpmrebuild -p --notest-install \
Cisco Adaptive Security Appliance Software Version 9.1(1)4
Device Manager Version 7.1(2)
Compiled on Wed 13-Mar-13 07:45 by builders
System image file is "disk0:/asa911-4-k8.bin"
Config file at boot was "startup-config"
asa5505 up 23 hours 25 mins
Hardware: ASA5505, 512 MB RAM, CPU Geode 500 MHz,
@andrewkroh
andrewkroh / fstab.pp
Created August 9, 2014 16:55
Configuring /etc/fstab with Puppet Augeas
augeas{ '/etc/fstab - nosuid on /sys':
context => "/files/etc/fstab",
changes => [
"ins opt after /files/etc/fstab/*[file = '/sys']/opt[last()]",
"set *[file = '/sys']/opt[last()] nosuid",
],
onlyif => "match *[file = '/sys']/opt[. = 'nosuid'] size == 0",
}
augeas{ '/etc/fstab - acl on /sys':
@andrewkroh
andrewkroh / gist:d5d8acb420fbf54babfc
Created October 2, 2014 17:42
Using local puppet filebucket
puppet filebucket --bucket /var/lib/puppet/clientbucket -l get b52b12f6059f118d2db377b92e8458eb
@andrewkroh
andrewkroh / KeyExtractor.java
Created November 13, 2014 23:46
Java Keystore Private Key Extractor
/*
* Copyright 2011 Andrew Kroh
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
@andrewkroh
andrewkroh / sshd
Last active April 11, 2017 13:57
Google Authenticator PAM - Vagrant User SSH Exception
#%PAM-1.0
# Skip Google Authenticator for the vagrant user:
auth [success=1 default=ignore] pam_succeed_if.so user = vagrant
auth required pam_google_authenticator.so
auth required pam_unix.so
auth required pam_sepermit.so
auth include password-auth
account required pam_nologin.so