A common and reliable pattern in service unit files is thus:
NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict
;SMBDIS.ASM - A COMPREHENSIVE SUPER MARIO BROS. DISASSEMBLY | |
;by doppelganger (doppelheathen@gmail.com) | |
;This file is provided for your own use as-is. It will require the character rom data | |
;and an iNES file header to get it to work. | |
;There are so many people I have to thank for this, that taking all the credit for | |
;myself would be an unforgivable act of arrogance. Without their help this would | |
;probably not be possible. So I thank all the peeps in the nesdev scene whose insight into | |
;the 6502 and the NES helped me learn how it works (you guys know who you are, there's no |
#!/bin/bash | |
function usage() { | |
echo "usage: $0 <volume (0-100)> <say args...>" | |
echo | |
echo "Unmutes and sets the system volume to volume%, passing the remaining" | |
echo "arguments to the OSX \`say' command, restoring volume / mute setting" | |
echo "to previous values after the speech has completed." | |
exit 1 | |
} |
@Grab(group='org.eclipse.paho', module='mqtt-client', version='0.4.0') | |
import org.eclipse.paho.client.mqttv3.* | |
import org.eclipse.paho.client.mqttv3.persist.MqttDefaultFilePersistence | |
String tmpDir = System.getProperty("java.io.tmpdir") | |
MqttDefaultFilePersistence dataStore = new MqttDefaultFilePersistence("${tmpDir}/mqtt") | |
//org | |
String org = 'myOrg' |
#!/usr/bin/env bash | |
set -e | |
# | |
# Written by Thomas Kerpe <toke@toke.de> - Public Domain | |
# | |
# Small helper script for usage with ansible-vault and ansible-playbook | |
# together with [pass](https://www.passwordstore.org/) | |
# | |
# Say you have stored the vault-password for the current ansible playbook in pass |
This guide is unmaintained and was created for a specific workshop in 2017. It remains as a legacy reference. Use at your own risk.
Workshop Instructor:
This workshop is distributed under a CC BY-SA 4.0 license.
global: | |
evaluation_interval: 15s | |
rule_files: | |
- smokeping.rules | |
scrape_configs: | |
- job_name: 'blackbox_icmp' | |
metrics_path: /probe | |
params: | |
module: [icmp] | |
scrape_interval: 1s |
apiVersion: extensions/v1beta1 | |
kind: PodSecurityPolicy | |
metadata: | |
name: restricted | |
annotations: | |
seccomp.security.alpha.kubernetes.io/allowedProfileNames: 'docker/default' | |
apparmor.security.beta.kubernetes.io/allowedProfileNames: 'runtime/default' | |
seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default' | |
apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default' | |
spec: |
{ | |
"Name": "Azure k8s Cloud Provider", | |
"IsCustom": true, | |
"Description": "Everything needed by the k8s 1.11 Azure cloud provider (not including ACR, addons, etc)", | |
"Actions": [ | |
"Microsoft.Compute/disks/delete", | |
"Microsoft.Compute/disks/read", | |
"Microsoft.Compute/disks/write", | |
"Microsoft.Compute/virtualMachineScaleSets/manualUpgrade/action", | |
"Microsoft.Compute/virtualMachineScaleSets/read", |
Andy Thomason is a Senior Programmer at Genomics PLC. He has been witing graphics systems, games and compilers since the '70s and specialises in code performance.