kmcquade

#!/usr/bin/python2.7
import ConfigParser
import os
import sys
from os.path import expanduser

config = ConfigParser.RawConfigParser()

# credentials_file: The file where this script will grab the temp creds
credentials_file = '/.aws/credentials'

kmcquade

#cloud-config
write-files:
  - path: /etc/conf.d/nfs
    permissions: '0644'
    content: |
      OPTS_RPC_MOUNTD=""

coreos:
  units:
    - name: update-engine.service

kmcquade

##### Working directories #####
tmp
_notes

##### Technologies #####

#### Terraform
#  Local .terraform directories
**/.terraform/*
*.plan

kmcquade

#!/usr/bin/env python
#
# copy all SSM parameter store parameters to disk
#
import os, sys, argparse, boto3

parser = argparse.ArgumentParser(description='copy all parameter values to local')
parser.add_argument("--path", dest="path", required=True,
		    help="to copy the keys from", metavar="STRING")
parser.add_argument("--directory", dest="directory", required=True,

kmcquade

To Decrypt Jenkins Passwords

1. Go to the "Configure System" screen.
2. Right click on a password field, Inspect element, then change to "text" instead of "password".
3. Copy that field and then go to the Script Console. Paste the below into the field, replace with your encrypted password, and then hit "run".

encrypted_pw = '{your_encrypted_password_with_brackets_around_it}'
passwd = hudson.util.Secret.decrypt(encrypted_pw)
println(passwd)

kmcquade

# import config.
# You can change the default config with `make cnf="config_special.env" build`
cnf ?= config.env
include $(cnf)
export $(shell sed 's/=.*//' $(cnf))

# import deploy config
# You can change the default deploy config with `make cnf="deploy_special.env" release`
dpl ?= deploy.env
include $(dpl)

kmcquade

sudo su

yum --enablerepo=extras install epel-release
yum -y install patch dkms kernel-devel perl
yum update

reboot

sudo su

kmcquade

Files are below.

For VSCode, paste it here: https://snippet-generator.app/

kmcquade

A common and reliable pattern in service unit files is thus:

NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict
ProtectHome=read-only
ProtectControlGroups=yes
ProtectKernelModules=yes

kmcquade

# first class expresssion
variable "ami" {}
resource "aws_instance" "example" {
  ami           = var.ami
}

###

# list & map
resource "aws_instance" "example" {