Cloudflare's WARP VPN uses a slightly modified version of the WireGuard protocol, but it remains backwards compatible with the normal WireGuard client software. This means you can connect to it on platforms which don't yet have an official WARP client, e.g. your computer or EdgeOS-based router.
Generate a WireGuard keypair, as usual:
wg genkey | tee private.key | wg pubkey > public.key
| # https://fedoraproject.org/wiki/PackagingDrafts/Go | |
| %global commit 63fe64c471e7d76be96a625350468dfc65c06c31 | |
| %global shortcommit %(c=%{commit}; echo ${c:0:7}) | |
| Name: example-app | |
| Version: 1.0.0 | |
| Release: 6%{?dist} | |
| Summary: This application is an example for the golang binary RPM spec | |
| License: ASL 2.0 | |
| URL: http://www.example-app.io |
This guide is unmaintained and was created for a specific workshop in 2017. It remains as a legacy reference. Use at your own risk.
Workshop Instructor:
This workshop is distributed under a CC BY-SA 4.0 license.
| RSA 2017 DevOOPS: Attacks And Defenses For DevOps Toolchains Talk Links SessionID: HTA-W02 | |
| https://www.slideshare.net/chrisgates/devoops-attacks-and-defenses-for-devops-toolchains | |
| Recording of talk from CERN | |
| https://indico.cern.ch/event/622483/ (click the recording button) | |
| Past talks: | |
| http://www.slideshare.net/KenJohnson61/aws-surival-guide |
| version: '2' | |
| services: | |
| consul1: | |
| image: "consul:latest" | |
| container_name: "consul1" | |
| hostname: "consul1" | |
| ports: | |
| - "8301:8301" | |
| - "8400:8400" | |
| - "8500:8500" |
| image: golang:1.7 | |
| stages: | |
| - build | |
| - test | |
| before_script: | |
| - go get github.com/tools/godep | |
| - cp -r /builds/user /go/src/github.com/user/ | |
| - cd /go/src/github.com/user/repo |
| #!/bin/bash | |
| # Centos 7/8 John the Ripper Installation | |
| #release=(j 1.8.0) | |
| release=(k 1.9.0) | |
| # Check Centos version | |
| if [ -f /etc/redhat-release ] ; then | |
| source /etc/os-release | |
| if [ $VERSION_ID == "8" ] ; then | |
| packager=dnf | |
| elif [ $VERSION_ID == "7" ] ; then |
It's possible to run a custom (instead of hypervisor-managed) kernel for use with Debian 8.x on a DigitalOcean droplet.
We'll build one with grsecurity, "an extensive security enhancement to the Linux kernel that defends against a wide range of security threats through intelligent access control, memory corruption-based exploit prevention, and a host of other system hardening".
Note: The stable patches for Linux 3.14.x and 3.2.x are not publicly available anymore, so we'll be applying the free 4.3.x (test) patch. The URLs and filenames in this document may become outdated, so fetch the latest from grsecurity.net and kernel.org.
Install dependencies:
Unfortunately, the Cisco AnyConnect client for Mac conflicts with Pow. And by "conflicts", I mean it causes a grey-screen-of-death kernel panic anytime you connect to the VPN and Pow is installed.
As an alternative, there is OpenConnect, a command-line client for Cisco's AnyConnect SSL VPN.
Here's how to get it set up on Mac OS X:
OpenConnect can be installed via homebrew:
brew update
brew install openconnect