jayme-github

# Get namespace, secret name and JWT "kid" (key ID) of all service-account-token secrets
kubectl get secrets --field-selector type=kubernetes.io/service-account-token \
  -o jsonpath='{range .items[*]}{.data.token}{"\n"}{end}' -A |
  while read token; do
    echo $token | base64 -d | step crypto jwt inspect --insecure | jq -r '[ .payload."kubernetes.io/serviceaccount/namespace", .payload."kubernetes.io/serviceaccount/secret.name", .header.kid] | @tsv'
  done

# The key ID references the public-key that needs to be used to validate the signature.
# Compute the kid for a given public-key like:

jayme-github

#!/bin/env python3

#
# Download LAADS data from https://ladsweb.modaps.eosdis.nasa.gov
#

import argparse
import concurrent.futures
import datetime
import shutil

jayme-github

To make the usbhid driver ignore the touchscreen device, add a HID_QUIRK_IGNORE quirk as module paramater:

Add a modprobe file, like /etc/modprobe.d/disable_raydium_touchscreen.conf:

# Add/modify USB HID quirks by specifying
# quirks=vendorID:productID:quirks where vendorID, productID, and quirks are all in 0x-prefixed hex
#
# For a list of quirks, see https://github.com/torvalds/linux/blob/master/include/linux/hid.h
options usbhid quirks=0x2386:0x4328:0x00000004

jayme-github

import math
import datetime

secs_per_day = 24 * 60 * 60

def SOMECALCFUNC(datefloat):
  # date comes as float from libreoffice where the integer part is the number
  # of days since 1899-12-30 and the decimal part is the time as fraction of
  # day.
  timefrac, days = math.modf(datefloat)

jayme-github

#!/bin/bash

# grep -E pattern to ignore certain resources 
IGNORE="^resourcequota/gke-resource-quotas|^secret/default-toke|^serviceaccount/default"

# Get a list of all "listable" namespaced ressources
resources=$(kubectl api-resources --verbs=list --namespaced=true -o name | paste -sd, -)

namespaces=$(kubectl get namespaces -o jsonpath='{.items[*].metadata.name}')
for ns in $namespaces; do

jayme-github

values.yaml

## One may define arbitrary environment variables here
env:
  VARIABLE_ONE: "Foo"
  VARIABLE_TWO: ""

## List of all environment variables that are required by this helm chart
requiredEnvs:
  - VARIABLE_ONE

jayme-github

Installing Debian on btrfs subvolume

Install debian as usual:

• EFI partition ~256M, boot, esp flags
• ext2 boot partition ~512M
• luks cyrpt volume
  • LVM pv
    • swap ~5G
    • btrfs

When the installation is finished, boot into SystemRescueCD.

jayme-github

#!/bin/bash

# Slack default icons seem to big for KDEs taskbar (64x64px, don't know why KDE does not scale them down automatically).
# To fix that (being able to see notification bubbles again!), simply resize the icons.
# For me 24x24px is optimal.
sudo mogrify -resize 24x24 /usr/lib/slack/resources/app.asar.unpacked/src/static/slack-taskbar-*.png

jayme-github

#!/usr/bin/env bash

set -x

NS="ns1"
VETH="veth1"
VPEER="vpeer1"
VETH_ADDR="10.200.1.1"
VPEER_ADDR="10.200.1.2"

jayme-github

gcloud dns managed-zones list --uri | parallel gcloud dns record-sets export -z "{}" --zone-file-format "{/}.zone"