jessfraz

# Description: Boxstarter Script
# Author: Jess Frazelle <jess@linux.com>
# Last Updated: 2017-09-11
#
# Install boxstarter:
# 	. { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force
#
# You might need to set: Set-ExecutionPolicy RemoteSigned
#
# Run this boxstarter by calling the following from an **elevated** command-prompt:

jessfraz

Freezer cgroup FTW

In a terminal start a server.

$ python -m SimpleHTTPServer 8000

In another terminal set up the cgroups freezer.

jessfraz

server {
	....
  
	location ~ ^/x/(.*) {
		if ($args = "go-get=1") {
			add_header Content-Type text/html;
			return 200 '<meta name="go-import" content="$host/x/$1 git https://github.com/jessfraz/$1.git">';
		}
		return 302 https://github.com/jessfraz/$1;
	}

jessfraz

FROM python:2-alpine

RUN apk add --no-cache \
	gcc \
	libxml2-dev \
	libxslt-dev \
	musl-dev

ENV LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/usr/include/libxml2
ENV C_INCLUDE_PATH=$C_INCLUDE_PATH:/usr/include/libxml2

jessfraz

8-bit breadboard computer Kit 2: Registers and ALU

jessfraz

High-Level Security Profile Generator

(originally from my proposal on moby/moby#17142 (comment) but generic)

The profile would generate artificats of an apparmor profile and seccomp filters.

Obviously doesn't have to be toml since that's super hipster :p

Assumptions

• no one is going to sit and write out all the syscalls/capabilities their app needs
• automatic profiling would be super cool but like aa-genprof it is never

jessfraz

[[includes]]
name = "thing"

jessfraz

FROM debian:jessie

RUN apt-get update && apt-get install -y \
	ca-certificates \
	curl \
	e2fsprogs \
	init-system-helpers \
	iptables \
	libapparmor1 \
	libltdl7 \

jessfraz

Setup:

# set CONTRIBUTORS file to mailmap to remove duplicate emails for the same name
# see: https://git-scm.com/docs/git-shortlog#_mapping_authors
$ git config mailmap.file CONTRIBUTORS

Top 10 contributors (all):

jessfraz

FROM python:2-alpine

RUN pip install \
	beautifulsoup4 \
	requests

COPY papers.py /usr/local/bin/
RUN chmod +x /usr/local/bin/papers.py

WORKDIR /root