Skip to content

Instantly share code, notes, and snippets.

View cyrex562's full-sized avatar

Josh Madden cyrex562

  • Occams Razor Technologies, LLC
  • Reston, VA
View GitHub Profile
@cyrex562
cyrex562 / ubuntu_baseline
Last active August 26, 2016 22:09
package install for ubuntu system setup (server)
# apt package install
add-apt-repository ppa:nginx/stable
add-apt-repository ppa:rwky/redis
apt update
apt upgrade
apt dist-upgrade
# dev packages
apt install autoconf automake build-essential pkg-config texinfo zlib1g-dev yasm cmake mercurial python3-setuptools libssl-dev \
redis-server redis-tools python3-pip python3-dev supervisor git couchdb libgmp-dev
ip link add vxlan243 type vxlan id 243 group 239.0.0.243 ttl 3 dev eth3
ip link set vxlan243 up
ip address add 10.243.0.254 dev vxlan243
ip link del vxlan243
ip link set eth3 up
ip address add 10.243.0.1 dev eth3
sudo apt -y update
sudo apt -y upgrade
sudo apt -y install gcc libgmp3-dev build-essential inotify-tools make gcc-multilib pkg-config iptables-dev libcurl4-openssl-dev \
libsoup2.4-dev libsystemd-dev libssl-dev python3-pip python-pip
cd /opt
wget http://download.strongswan.org/strongswan-5.5.1.tar.bz2
tar xf strongswan*
cd strongswan*
sudo ./configure --prefix=/usr --sysconfdir=/etc --enable-forecast --enable-acert --enable-addrblock --enable-agent --enable-ccm \
--enable-certexpire --enable-connmark --enable-ctr --enable-curl --enable-farp --enable-files --enable-gcm --enable-lookip \
@cyrex562
cyrex562 / guacamole install on ubuntu 16.04
Created November 23, 2016 19:22
guacamole install on ubuntu 16.04
# install required packages
add-apt-repository ppa:webupd8team/java
apt -y update
apt -y upgrade
apt -y dist-upgrade
apt -y install libcairo2-dev libjpeg-turbo8-dev libpng12-dev libossp-uuid-dev libfreerdp-dev libpango1.0-dev libssh2-1-dev libtelnet-dev \
libvncserver-dev libpulse-dev libssl-dev libvorbis-dev libwebp-dev git build-essential autoconf libtool oracle-java8-installer tomcat8 \
tomcat8-admin tomcat8-common tomcat8-docs tomcat8-user maven mysql-server mysql-client mysql-common mysql-utilities libpulse-dev \
libvorbis-dev freerdp ghostscript wget
@cyrex562
cyrex562 / OpenVPNInstallUbuntu1604
Created November 27, 2016 15:58
Install OpenVPN stable latest on Ubuntu 16.04 using the OpenVPN.net official APT repository.
wget -O - https://swupdate.openvpn.net/repos/repo-public.gpg|apt-key add -
echo "deb http://build.openvpn.net/debian/openvpn/stable xenial main" > /etc/apt/sources.list.d/openvpn-aptrepo.list
apt -y update && apt -y install openvpn easy-rsa
@cyrex562
cyrex562 / LinuxCreateGRETunnel
Last active November 28, 2016 01:33
Create a multicast GRE tunnel
ip tunnel add {dev_name} mode gre remote {remote_ip} local {local_ip} ttl 255
ip link set {dev_name} up
ip addr add {tunnel_ip}/30 dev {dev_name}
ip link set {dev_name} multicast on
# change mtu
ip link set {dev} mtu {mtu}
# change tunnel8
# atlassian on postgres baseline on ubuntu 16.04
add-apt-repository ppa:webupd8team/java
touch /etc/apt/sources.list.d/pgdg.list
echo deb http://apt.postgresql.org/pub/repos/apt/ xenial-pgdg main >> /etc/apt/sources.list.d/pgdg.list
wget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add -
apt -y update
apt -y install oracle-java8-installer oracle-java8-set-default postgresql-9.4 postgresql-contrib-9.4 postgresql-client-9.4
# create postgres users, etc
/usr/lib/postgresql/9.4/bin/createuser -l -P -E atluser
@cyrex562
cyrex562 / py35winkivyinstall.md
Last active January 21, 2017 20:39
Compile and Install Kivy from master for Windows with Python 3.5+
  1. install visual studio community edition with C++, and windows 10 and 8.1 SDKs
  2. check out master
  3. install cython
  4. download and install glew 2.0
  5. include glew lib and include dirs in VS14 tools include path
  6. run python setup.py install
  1. Download SSH binaries from https://github.com/PowerShell/Win32-OpenSSH/releases/
  2. Extract the archive to C:\Program Files\OpenSSH
  3. Open powershell as an administrator
  4. CD to directory where OpenSSH was extracted: cd c:\Program Files\OpenSSH
  5. Install OpenSSH powershell.exe -ExecutionPolicy Bypass -File install-sshd.ps1
  6. Generate server keys and restrict access to them .\ssh-keygen.exe -A
  7. Open a port for SSH in the firewall:

Ensure NGINX and cockpit are installed

sudo apt -y install cockpit nginx

Generate a self-signed certificate

sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout \
/etc/ssl/private/nginx-selfsigned.key -out /etc/ssl/certs/nginx-selfsigned.crt \
-subj "/CN=$(hostname)/C=US"
sudo openssl dhparam -out /etc/ssl/certs/dhparam.pem 4096