gbevan

################################################################################
# Proof-of-concept to show how Hashicorp Vault can pre-create an encrypt /
# decrypt key and share it with other vault instances.
#
# docker build --no-cache -t vault-keys-poc .

################################################################################
# Generate Key in Vault (1)
FROM vault:0.11.3 as generate
RUN \

gbevan

#!/bin/bash

# List your kubernetes environments here, they will each equate to a
# rc file named k8s_envname.rc in the same folder as this script:
ENVS="
	openstack
	k8sdev6443
"

# Prompt user to select environment:

gbevan

Securing Microk8s API access via kube-proxy on https port 6443 (blocking http/8080)

1. Instead of setting iptables FORWARD default policy to ACCEPT, leave as DROP and follow this gist
2. Configure explicit permit rules in /etc/iptables.conf (from above gist), e.g.

# Allow internal private k8s IPs to talk
-A FILTERS -m state --state NEW -s 10.0.0.0/8 -j ACCEPT

# Permit direct https/6443 access to k8s proxy from local subnet
-A FILTERS -m state --state NEW -m tcp -p tcp --dport 6443 -s your-src-ip-subnet/24 -j ACCEPT

gbevan

...
    [plugins.cri.registry]
      [plugins.cri.registry.mirrors]
        [plugins.cri.registry.mirrors."docker.io"]
          endpoint = ["https://registry-1.docker.io"]
        [plugins.cri.registry.mirrors."local.insecure-registry.io"]
          endpoint = ["http://localhost:32000"]
        [plugins.cri.registry.mirrors."k8sdev:32000"]
          endpoint = ["http://k8sdev:32000"]
...

gbevan

# see https://unrouted.io/2017/08/15/docker-firewall/
*filter
:INPUT ACCEPT [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
:FILTERS - [0:0]
:DOCKER-USER - [0:0]

-F INPUT
-F DOCKER-USER

gbevan

Installing gnuradio 3.8 (2019-10-09)

from: https://stackoverflow.com/questions/57678068/installing-gnuradio-3-8-on-ubuntu-18-04

Setup PyBOMBS

sudo apt-get install python-pip python-apt
sudo -H pip install PyBOMBS
mkdir ~/sdr
cd ~/sdr

gbevan

kubectl get nodes -o json | 
  jq '.items[].status.images[] | [.sizeBytes, .names[0]] | @csv' -r | 
  sed -e 's/"//g' | 
  sed 's/,/ /g' | 
  sort -k1n

gbevan

Microk8s DEV on Ubuntu LXD Container(s)

Ref: https://microk8s.io/docs/install-lxd

Microk8s LXD profile

$ lxc profile create microk8s
$ wget https://raw.githubusercontent.com/ubuntu/microk8s/master/tests/lxc/microk8s.profile -O microk8s.profile
$ cat microk8s.profile | lxc profile edit microk8s

gbevan

Notes on PoC for Building a Kairos ISO Image from an Installed Linux VM as a Base

Create the base VM

Boot from Rocky 9 ISO
Minimal image + standard + guest agents

On the booted img

dnf update -y

gbevan

MMANA-GAL on Linux with Wine

Using Winetricks to install prereqs

./winetricks -f corefonts vcrun6 vb5run native_oleaut32 vcrun2010 richtx32

Running MMANA-GAL