Skip to content

Instantly share code, notes, and snippets.

View cardil's full-sized avatar

Chris Suszynski cardil

View GitHub Profile
@cardil
cardil / podman-compose-fail-multiple-networks.log
Created October 12, 2023 17:51
A log of podman-compose failing to set netalias across multiple networks
View podman-compose-fail-multiple-networks.log
$ podman-compose up --build --abort-on-container-exit
podman-compose version: 1.0.6
['podman', '--version', '']
using podman version: 4.7.0
** excluding: set()
podman build -f app/Containerfile -t netalias_app app
STEP 1/4: FROM quay.io/fedora/fedora
STEP 2/4: RUN dnf install -y python3-redis python3-flask
--> Using cache c2bf03a022dc7e9cda93b8279310cde6fb33a790439d895f851949716ee18fdf
--> c2bf03a022dc
@cardil
cardil / selinux-report.txt
Created October 9, 2023 10:59
SElinux prevents bwrap to umount while running in Podman rootless container
View selinux-report.txt
SELinux is preventing bwrap from unmount access on the filesystem .
***** Plugin catchall (100. confidence) suggests **************************
If you believe that bwrap should be allowed unmount access on the filesystem by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'bwrap' --raw | audit2allow -M my-bwrap
@cardil
cardil / podman-info.yaml
Created October 9, 2023 10:52
Podman info
View podman-info.yaml
host:
arch: amd64
buildahVersion: 1.32.0
cgroupControllers:
- cpu
- io
- memory
- pids
cgroupManager: systemd
cgroupVersion: v2
@cardil
cardil / knative-nightly-ci-kn-plugin-event-635.log
Created September 1, 2023 18:54
Log of Knative-Serverless fork sync for kn-plugin-event #635
View knative-nightly-ci-kn-plugin-event-635.log
00:34:05 Started by upstream project "triggers/knative-nightly-ci-trigger" build number 859
00:34:05 originally caused by:
00:34:05 Started by timer
00:34:05 Loading library jenkins-dsl@master
00:34:05 Attempting to resolve master from remote references...
00:34:05 > git --version # timeout=10
00:34:06 > git --version # 'git version 2.31.1'
00:34:06 using GIT_SSH to set credentials Jenkins SSH private key
00:34:06 [INFO] Currently running in a labeled security context
00:34:06 > /usr/bin/chcon --type=ssh_home_t /tmp/jenkins-gitclient-ssh17556338054709331370.key
@cardil
cardil / ubi8-k8s-shell.yml
Created July 5, 2023 17:57
Ubi8 shell for K8s
View ubi8-k8s-shell.yml
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: shell-cluster-admin
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: shell-cluster-admin
View cabs-usvc-drivers-func-build-failure.log
Building function image
Pulling image gcr.io/paketo-buildpacks/builder:base
29dc7596322b: Already exists
ed10c4dc1cb9: Already exists
baabd6616689: Already exists
70e0bea64ce8: Already exists
5128128e1ba9: Already exists
5e995c53af94: Already exists
c971d13c0b7c: Already exists
d9853c09e885: Already exists
@cardil
cardil / bash-error-pitfall.sh
Last active October 12, 2022 17:30
Bash scripting pitfall
View bash-error-pitfall.sh
#!/usr/bin/env bash
set -Eeuo pipefail
function error_handler() {
local code="${1:-${?}}"
abort "🚨 Error (code: ${code}) occurred at ${BASH_SOURCE[1]}:${BASH_LINENO[0]}, with command: ${BASH_COMMAND}"
}
function abort() {
@cardil
cardil / serverless-install.sh
Last active February 23, 2022 23:16
Installs Serverless on OpenShift (with Serving+Eventing)
View serverless-install.sh
kubectl apply -f https://raw.githubusercontent.com/cardil/openshift-serverless-pres-notes/master/serverless-subscription.yaml
while ! kubectl get csv -n openshift-serverless -l operators.coreos.com/serverless-operator.openshift-serverless= 1>/dev/null 2>&1; do sleep 1; done
kubectl wait --for=jsonpath='{.status.phase}'=Succeeded \
--timeout=5m csv -n openshift-serverless \
-l operators.coreos.com/serverless-operator.openshift-serverless=
kubectl apply -f https://raw.githubusercontent.com/cardil/openshift-serverless-pres-notes/master/serverless-bundle.yaml
while ! kubectl get knativeserving knative-serving -n knative-serving 1>/dev/null 2>&1; do sleep 1; done
kubectl wait --for=condition=Ready --timeout=5m \
knativeserving knative-serving -n knative-serving
@cardil
cardil / openssh-client.log
Created November 17, 2021 12:51
Calling `ssh -vvv git@github.com` having `ssh-rsa` type key in knownhosts file
View openssh-client.log
OpenSSH_8.6p1, OpenSSL 1.1.1l FIPS 24 Aug 2021
debug1: Reading configuration data /home/ksuszyns/.ssh/config
debug1: Reading configuration data /etc/ssh/ssh_config
debug3: /etc/ssh/ssh_config line 55: Including file /etc/ssh/ssh_config.d/50-redhat.conf depth 0
debug1: Reading configuration data /etc/ssh/ssh_config.d/50-redhat.conf
debug2: checking match for 'final all' host github.com originally github.com
debug3: /etc/ssh/ssh_config.d/50-redhat.conf line 3: not matched 'final'
debug2: match not found
debug3: /etc/ssh/ssh_config.d/50-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1 (parse only)
debug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config
@cardil
cardil / kafka-channel-6.yaml
Created October 1, 2021 20:17
Channel with 6 replicas
View kafka-channel-6.yaml
apiVersion: messaging.knative.dev/v1beta1
kind: KafkaChannel
metadata:
name: kafka-channel-6
labels:
app: kafka-channel-6
app.kubernetes.io/component: kafka-channel-6
app.kubernetes.io/instance: kafka-channel-6
app.kubernetes.io/name: kafka-channel-6
spec: