floehopper

$ wget https://github.com/<username>.keys
$ ssh-keygen -e -f <username>.key -m PKCS8 > <username>.key.pkcs8
$ openssl rsautl -encrypt -pubin -inkey <username>.key.pkcs8 -in plain.txt -out encrypted.txt

floehopper

$ git ls-tree -r -z --name-only HEAD | xargs -0 -n1 git blame --line-porcelain HEAD | grep "^author " | sort | uniq -c | sort -nr

56161 author David Heath
24554 author Tekin Suleyman
14772 author Murray Steele
12286 author Edd Sowden
11746 author Andrew Garner
9137 author James Mead
8358 author russell thorn

floehopper

== NIC specific variables and examples:

o 'changeip'

The 'changeip' protocol is used by DNS services offered by changeip.com.

Configuration variables applicable to the 'changeip' protocol are:
  protocol=changeip            ##
  server=fqdn.of.service       ## defaults to nic.changeip.com
  login=service-login          ## login name and password registered with the service

floehopper

Achievements

• Added functionality to Asset Manager to support Whitehall attachments, e.g. access-limiting
• Identified a problem in serving draft attachments in the AWS integration environment

Ongoing and next

• Continued preparations to start serving Whitehall attachments from Asset Manager
  • Updating state of assets in Asset Manager when state changes in Whitehall
• Preview of CSV attachments

floehopper

commit 3253a2b7cdf1ba8b60365638ad1b517bbc1e30fd
Author: James Mead <james@floehopper.org>
Date:   Sun Feb 18 12:21:40 2018 +0000

    Publish event for force_publish within EditionUnwithdrawer#perform!
    
    The EditionUnwithdrawer was already publishing an 'unwithdrawn' event to
    the notifier for the originally withdrawn edition which ends up as
    superseded, but it was not publishing a 'force_publish' event for the
    new draft edition which is force-published.

floehopper

vagrant@development:~$ cd /var/apps/whitehall
vagrant@development:/var/apps/whitehall$ bundle
Fetching gem metadata from https://rubygems.org/.........
Using rake 12.3.0
Using Ascii85 1.0.3
Using PriorityQueue 0.1.2
Using concurrent-ruby 1.0.5
Using i18n 0.9.5
Using minitest 5.11.3
Using thread_safe 0.3.6

floehopper

$ systemctl --version
systemd 229
+PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ -LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD -IDN

$ sudo systemctl show -p StartLimitInterval nginx.service
StartLimitInterval=10000000

$ sudo systemctl set-property nginx.service StartLimitInterval=0
Unknown assignment StartLimitInterval=0

floehopper

Rails console

irb> a = Asset.create!(file: File.open('README.md'), access_limited: true, organisation_slug: 'organisation-slug')
=> #<Asset _id: 5a68c81c3e489e7bb5baac3e, deleted_at(deleted_at): nil, created_at: 2018-01-24 17:53:32 UTC, updated_at: 2018-01-24 17:53:32 UTC, state: "unscanned", filename_history: [], uuid: "0b0d0cb0-c49f-4f47-b204-a991c8af9cbf", access_limited: true, organisation_slug: "organisation-slug", etag: "5a68c81c-2f81", last_modified: 2018-01-24 17:53:32 UTC, md5_hexdigest: "d463b46b2c42d1f043e56920a03de458", file: "README.md", _type: "Asset">
irb(main):003:0> a.access_limited?
=> true
irb(main):004:0> a.organisation_slug
=> "organisation-slug"

floehopper

Create mainstream asset

$ echo `date` > tmp.txt
$ curl http://localhost:3000/assets --form "asset[file]=@tmp.txt" --form "asset[access_limited]=1" --form "asset[organisation_slug]=foo"

Rails log

floehopper

puts subject.call.resources.detect { |r| r.type == 'Nginx::Config::Site' && r['name'] == 'assets-origin.dev.gov.uk' }['content']